175 Commits

Author	SHA1	Message	Date
Martin Jansa	c01273e001	metadata: add whitespace around assignments ... With: https://lists.openembedded.org/g/bitbake-devel/message/17508 there are many WARNINGs from this layer will cover src_uri.inc files in next commit. Signed-off-by: Martin Jansa <martin.jansa@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2025-04-03 17:56:53 +00:00
Bruce Ashfield	2ea9f15939	docker: enable docker.service by default ... Some platforms are seeing long (2+ minute) start times to get the docker daemon initialized. This doesn't happen when the daemon is started on boot. To avoid this usability issue, we enable both the socket and service automatically. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2025-03-13 18:38:18 +00:00
Bruce Ashfield	2762d232a5	moby: update to v28.0.1 ... Bumping moby to version v28.0.1, which comprises the following commits: 18143632f7 Revert "contrib/check-config: add ipset related flags" 558da63444 Jump to DOCKER-INGRESS from DOCKER-FORWARD 76417bf763 Don't use ipset c35159ed7d c8d/manifests: Fix Content size including missing content 468c2c814d Fix swarm network creation from a config-only network 8e6cc4ac48 Fix swarm net validation for config-from networks 8cc4d1d4a2 Fix daemon startup on a no-IPv6 host 341cafa611 Test with a drop rule appended to filter-FORWARD 984a610a21 Add chain DOCKER-FORWARD 21582b84fb c8d/list: Fix empty Manifests for some images 6b1b170708 c8d/inspect: Fix image not found error for index-only image 5ced8fd377 vendor: tags.cncf.io/container-device-interface v0.8.1 a92d20bcc4 Better error message for missing ip_set kernel modules 73f2a5336d libnet/d/bridge: fix compilation on i386 013c43fb56 Mark default-bridge-only opts in --help and manpage 3cf4ff971d Fix network inspect IPv6 gateway address format 501ce33bab Fix v28 regression `protocol "tcp" is not supported by the RootlessKit port driver "slirp4netns"` ccdfac5328 contrib/check-config: add ipset related flags ac8b4e3e75 daemon: handleContainerExit: ignore networking errors d67f035d31 vendor: github.com/moby/buildkit v0.20.0 1fde8c4615 builder-next: fix cdi manager cde9f0752e vendor: github.com/moby/buildkit v0.20.0-rc3 b2b55903d0 Dockerfile: fix linting warnings a3628f3f8e docs/api: add documentation for API v1.48 9eccc20a17 c8d/list: Fix panic when listing images 4e97729f14 c8d/list: Test with SharedSize = true 322eddfb41 api/swagger: remove custom example from /containers/{id}/json endpoint 60539d0956 api/swagger: remove custom example from /containers/json endpoint 119b52f302 golangci-lint: ignore "nested context" (fatcontext) in tests 15fbd67407 Dockerfile: update golangci-lint to v1.64.5 7b6c3ebe7b api/swagger: inline Exec example values 2fc90096bf project: update status of branches bd92f2bb92 daemon/logger/splunk: New(): combine switches for format validation eac39ffdb8 daemon/logger/splunk: remove some intermediate variables 9bb3900c30 daemon/logger: Info.ExtraAttributes: make env-var handling conditional cbbff10b01 daemon/logger: use consistent name for "extra attributes" ba559c4f12 daemon/logger/fluentd: fix minor (linting) issues b9e7e82b66 daemon/logger/splunk: plunkLogger.postMessages(): improve logs 2f82cbb5f8 daemon/logger/splunk: suppress some unhandled errors f049d0c66b daemon/logger/splunk: don't defer in a loop 0d938b6bb3 daemon/logger/splunk: rename var that shadowed import 529a56d31a container: Container.StopSignal: fix handling of invalid signals ef0fe1ac00 container: define defaultStopSignal as a syscall.Signal 0a4c4c9e82 container: some cleanups in view tests 49f2320bc7 container: some cleanups in tests 07aa4d96ea container: TestReplaceAndAppendEnvVars: assert with gotest.tools 0914e97df2 container: rename test file 9bcac6d573 c8d/progress: Fix panic when pulling some images acc4d45278 container: ensure image manifest is deep copied from the container into the snapshot 903ba2f487 client: Move opts to separate files b9319f64ed client: Change ImageSave to use functional options ae4c688fd8 client: Change ImageLoad to use functional options 85808a6abf client: Change ImageHistory to use functional options 5719e8edf9 Don't create iptables rules when iptables is disabled 068aa86c23 client: Group deprecated functions into ImageAPIClientDeprecated d1c6550f71 daemon: use structured logs for printing reloaded config, move to cli 838ae09a23 Dockerfile: update runc binary to v1.2.5 707d8d80b9 vendor: update buildkit to v0.20.0-rc2 c9f8758570 golangci-lint: enable reassign linter 04ae510a1e golangci-lint: enable gocheckcompilerdirectives linter 179e621019 golangci-lint: enable exhaustive linter 1f9ada6668 golangci-lint: enable errchkjson linter 8b2439a383 golangci-lint: enable durationcheck linter d62e499bfe golangci-lint: enable dogsled linter 75fc4de8c3 golangci-lint: enable asasalint linter 7218a64e87 golangci-lint: enable wastedassign linter 55b047e49c golangci-lint: enable fatcontext linter a97d6fe84f golangci-lint: enable nosprintfhostport linter (again) fc09a52d85 golangci-lint: enable spancheck linter a0ef452f0c golangci-lint: enable mirror linter 0de3c1b7e3 golangci-lint: enable makezero linter e6e68278f6 golangci-lint: enable iface linter (with default settings) c8ee8c6302 golangci-lint: enable nilnesserr linter 081fac187e golangci-lint: enable exptostd linter 927e07e46e API: add Platform (OS and Architecture) to /containers/json e364e28ec8 vendor: update buildkit to v0.20.0-rc1 d47eb241bf vendor: github.com/vishvananda/netlink 655392bc778a 47ff7969b4 Add experimental feature warning for image mount 3e51818c5c Add ability to return warnings from host config c5b226e377 vendor: github.com/miekg/dns v1.1.61 56a6383883 api: deprecation of "error" and "progress" fields in streaming responses e36fb45eec vendor: github.com/spf13/pflag v1.0.6 bd13fc37b0 pkg/jsonmessage: JSONMessage: fix deprecation of ProgressMessage, ErrorMessage 66910da5a3 vendor: github.com/containerd/go-cni v1.1.12 3d72df0e89 vendor: google.golang.org/grpc v1.69.4 72c91e378d client: remove serverResponse and use http.Response directly b99b5422b0 api/types: deprecate IDResponse 96dc9cb693 Don't log a warning when an IP address is already in an ipset b23b8f1567 Restore more iptables rules on firewalld reload 9a20edf7b6 api/types/container: introduce ExecCreateResponse type 0df3a0047a api/types/container: introduce CommitResponse type be1ac5d8e5 api/types/container: rename ContainerTopOKBody to TopResponse f4dc38cd36 api/types/container: rename ContainerUpdateOKBody to UpdateResponse 85ff36de26 Dockerfile: update docker CLI to v28.0.0-rc.1 cc6754f3fa Dockerfile: update buildx v0.20.1 b90a2bac7d Dockerfile: bump gotest.tools/gotestsum v1.12.0 c786cdf124 update authors and mailmap b4af9341af client: fix deprecation comment for ImageInspectWithRaw 6ba4e78066 vendor: gotest.tools/v3 v3.5.2 43532eb1e1 daemon: Daemon.Containers: make switches exhaustive (exhaustive) 10ebdbbb92 daemon: Daemon.ProcessEvent: make switches exhaustive (exhaustive) f448d5ae3b daemon/events: make switches exhaustive (exhaustive) d9cf097402 daemon/cluster/executor/container: make switches exhaustive (exhaustive) bf3b4d4986 daemon/cluster/convert: make switches exhaustive (exhaustive) 4d8dfc1409 daemon/cluster: make switches exhaustive (exhaustive) 6929a3fd22 libnetwork/networkdb: make switches exhaustive (exhaustive) 827f84d3ef volume/mounts: parseMountSpec: make switch exhaustive (exhaustive) 0ee343222b daemon: eventTimestamp: make switch exhaustive (exhaustive) b343d235a0 container: State.conditionAlreadyMet: make switch exhaustive (exhaustive) 8a35300b4a integration/internal/swarm: make switch excaustive (exhaustive) 66ab2e9e77 plugin/executor/containerd: Executor.ProcessEvent: make switch excaustive (exhaustive) 1a047bbe8b libnetwork: ignore unchecked json (Un)Marshal errors (errchkjson) 63deb55263 libnetwork/drivers/bridge: bridgeEndpoint.UnmarshalJSON: fix unhandled errors (errchkjson) ccbcce2169 daemon/logger/templates: ignore unchecked error (errchkjson) 32153dee9f daemon: Daemon.Reload: fix unhandled errors printing config (errchkjson) 664558f916 daemon/cluster/convert: tmpfsOptionsToGRPC: ignore unchecked error (errchkjson) 4a7f891fc3 integration/plugin: fix unhandled errors in tests (errchkjson) 196a66a643 integration-cli: fix unhandled errors in tests (errchkjson) 26d30159f7 libnetwork/driverapi: ignore unchecked error (for now) (errchkjson) b87c9fb3f4 libnetwork/diagnostic: ignore unchecked error (errchkjson) 7dbceec8aa api/server/router/volume: fix unhandled errors in tests (errchkjson) 07e2fc83ae pkg/plugins: fix "Multiplication of durations" (durationcheck) 1ffbcb566b pkg/jsonmessage: fix "Multiplication of durations" (durationcheck) eac45daf06 runconfig: fix declaration has 3 blank identifiers (dogsled) 09c5a01346 pks/plugins/pluginrpc-gen: fix unused value assign (wastedassign) a4dba91424 daemon/containerd: fix unused value assign (wastedassign) f1d7bd60ab integration/image: TestRemoveByDigest fixed unused values (wastedassign) 9f8eafc101 plugin: withFetchProgress work around "nested context in loop (fatcontext)" e9c90834fa opts: host:port should be constructed with net.JoinHostPort (nosprintfhostport) 0bf8c8b99e pkg/tailfile: avoid allocations with (*os.File).WriteString (mirror) 4e6c91cc56 pkg/pools: avoid allocations with (*bufio.Writer).WriteString (mirror) f0a233bdc3 pkg/archive: avoid allocations with strings.Compare (mirror) 17f32e8822 libnetwork/internal/resolvconf: avoid allocations with bytes.NewBufferString (mirror) 0c8d086ed3 libnetwork: avoid allocations with regexp.Match (mirror) 6ff3dfd88a integration-cli: avoid allocations with (*os.File).WriteString (mirror) 405ce2ef15 distribution/xfer: avoid allocations with bytes.NewBufferString (mirror) d50492a70d container/stream: avoid allocations with (*bytes.Buffer).WriteString (mirror) dbf2cdd06c integration/networking: fix append to non-zero initialized length (makezero) dd8ee9eeb1 libnetwork/cnmallocator: fix append to non-zero initialized length (makezero) 8e9fce7970 libnetwork/bitmap: fix append to non-zero initialized length (makezero) f9890d97d1 libnet: kvstore/boltdb: fix append to non-zero initialized length (makezero) 1f7d497a99 errdefs: remove duplicate "causer" interface definition (iface) 1784026740 client: custom trace options cab2157182 Dockerfile: update golangci-lint to v1.63.4 f34a1aafe9 vendor: cloud.google.com/go/compute/metadata v0.5.2 9c7112d118 daemon: configureMaxThreads: remove unused arg 9e77d05967 add //go:build directives to prevent downgrading to go1.16 language 192431cb35 pkg/idtools: un-deprecate Windows consts for now 5a703c2eda libnet/osl: scan ns ifaces to generate ifname 78b0475605 libnet/osl: AddInterface: un-alias props into local vars 56a7817b2d libnet: add support for custom interface names 6a8360012c libnet/osl: distinguish dstName & dstPrefix 2e9e7989f8 cmd/dockerd: initBuildkit: return close-func 2dc03f934f cmd/dockerd: refactor buildkit init in daemon startup 9509f27e28 rootless: use `getsubids` tool for validation if possible a096045678 all: Replace deprecated ImageInspectWithRaw usage 3d37537f75 c8d/inspect: Add Manifests field 639a1214fa client/image-inspect: Introduce client opts 6664f1220a c8d/inspect: Avoid interim images.Image conversion bdb6a7abdc c8d/list: multiPlatformSummary d4fa252cd3 Wait for a route to ff02::1 before sending NAs 1126d477fd Add live-restore tests for mount image 90aea3b85f Add image subpath mounting functionality 634951457d Implement GwAllocChecker for the remote network driver 12756071f1 update to go1.23.6 294df1c447 volumes/service: OpErr: implement go1.13 unwrapper db68c99d4b distribution: fallbackError, notFoundError implement go1.13 unwrapper b96b14d078 cluster/executor/container: exitError: implement go1.13 unwrapper 2997c0ddc0 client: deprecate CommonAPIClient interface 846b2272e6 client: deprecate ErrorConnectionFailed helper e93ff742e8 client: doRequest: use errors.As for error-detection 3725998e7d client: define interface for all Swarm-specific methods a57d737a86 client: define separate interface for HijackDialer 902c06fdf0 client: make setupHijackConn a regular function e6dabfa3b1 client: move resetting mediaType for hijack to where applicable b0e206b807 client: separate Dialer() implementation from public API fcb924712b integration/internal: JobComplete: require shallower interface 0f04532956 errdefs: touch-up godoc for helpers 329b2a26f3 client: normalize and validate empty ID / name arguments to fail early 844797348e Implement image mount for the snapshotter 8c58934106 Implement mount from image c935a4609d Fix typo in API docs 30e75b8396 client: improve handling of JSON error-responses with incorrect schema 9a6e96fd9c Before sending ARPs/NAs, check the bridge is ready 8e529682af builder: wire up new gc types for buildkit prune functionality 52ea449c55 daemon: Daemon.restore: make legacy-link code conditional 9a69161992 daemon: remove Daemon.children(), Daemon.parents() wrappers 513fd86710 daemon: Daemon.getNetworkedContainer: fix errors for invalid network container 51cb066ec8 daemon: Daemon.rmLink: don't fuzzy-match container when using ID 79b0e89628 github: Clarify release notes description c43aa0b6aa Fix concurrency issue in dind 7ac0e34dba gha/validate-pr: Also run when PR has new commits 9b5a51a881 api/types/container: remove use of errdefs package in test 02eb72380f client: remove uses of pkg/errors in tests 3f354e8c1b api/types/registry: use stdlib errors package 0ca0ccd37a client: improve test-coverage for error-responses 9fdcde7618 Add bridge gateway mode "isolated" 97b50bca2c client: WithVersion: strip v-prefix when setting API version bbaa8af8f3 libnetwork/drivers/bridge: un-export errors 3f9698e1f6 libnetwork/drivers/bridge: TestLinkDelete: use gotest.tools 74fd2ec0cf libnetwork/drivers/bridge: TestLinkCreateNoEnableIPv6: use gotest.tools 6e9ba725f8 libnetwork/drivers/bridge: TestLinkCreateTwo: use gotest.tools bf3323fd40 libnetwork/drivers/bridge: TestLinkCreate: use gotest.tools 7012e3ce14 libnetwork/drivers/bridge: remove NonDefaultBridgeExistError 47f6d4e1bc libnetwork/drivers/bridge: internalize ErrInvalidGateway 3a9f4e0146 libnetwork/drivers/bridge: remove ErrInvalidMtu 2f42aa0e26 libnetwork/drivers/bridge: remove IPv4AddrNoMatchError 0c1b660048 libnetwork/drivers/bridge: remove IPv4AddrAddError dc52ecb1d0 libnetwork/drivers/bridge: remove ErrNoIPAddr 77261b5e42 libnetwork/drivers/bridge: remove "InternalError()" method from errors 2766298f49 libnetwork/drivers/bridge: remove unused errors 59c2d2a4b3 libnetwork/drivers/bridge: remove ErrInvalidDriverConfig 6bb9f581a5 libnetwork/drivers/windows: remove ErrUnsupportedAddressType 54a969d1a4 Dockerfile: Use CLI generated completions in the dev shell 510e6f4f8a libnetwork/options: rewrite tests with gotest.tools af9ffb64cd builder/dockerfile: more consistently put "expected" on the right 86a8bfdce4 remove redundant uses of api/types/strslice.StrSlice d216084185 libnet/d/bridge: drop remote connections to port mapped on lo 27adcd596b libnet/d/bridge: port mappings: drop direct-access when gw_mode=nat 8474153e13 integration: accessing mappings from another docker network a7e6d0a8a3 libnet/d/bridge: releasePortBindings: append directly into 'errs' aa3a23d4f9 Temporary debug for unsolicited NA 49b1ed6d27 libnetwork: remove ErrInvalidName a98ecc5f79 libnetwork: remove ErrInvalidID 548b0b6290 libnetwork: remove ErrNoSuchEndpoint 7cc81407aa Add trace/logging in waitForIfUpped 30601d96b7 Dump daemon logs when TestAdvertiseAddrs fails 8705018705 daemon/cluster/executor: containerConfig: store Network instead of envelope 90323ae123 daemon/cluster/executor: networkCreateRequest: not a method f5f4a062a5 daemon/cluster/executor: networkCreateRequest: slight DRY cleanup 16770340ea daemon/cluster/executor: networkCreateRequest don't shadow config cef6fd2fa2 libnetwork: remove Network.EndpointByID as it must not be used 4e6535fd3e man: vendor github.com/cpuguy83/go-md2man/v2 v2.0.6 5c1fe287fc libnetwork: remove UnknownNetworkError 8f4c98e1eb libnetwork: TestControllerGetSandbox: use errdefs for error asserts d34ca256b8 libnetwork: TestNetworkConfig: use gotest.tools for errdefs assertions c6f0fe5fc0 libnetwork: parallelTester.Do: use errdefs for error assertions 11a6cb5fac libnetwork: TestEndpointJoin: use gotest.tools for errdefs assertions ea7d17376e libnetwork: TestInvalidRemoteDriver: use gotest.tools for error assertions 01c87cc809 libnetwork: TestContainerInvalidLeave: use gotest.tools for errdefs assertions 9472c860de libnetwork: TestEndpointMultipleJoins: use gotest.tools for errdefs assertions ab9d250876 libnetwork: TestEndpointDeleteWithActiveContainer: use gotest.tools for errdefs assertions 56debcfc1c libnetwork: TestNetworkQuery: use gotest.tools for errdefs assertions 874fb4d2f4 libnetwork: TestControllerQuery: use gotest.tools for errdefs assertions 53bf2e8960 libnetwork: TestUnknownEndpoint: use gotest.tools for errdefs assertions 895ee1214a libnetwork: TestDuplicateEndpoint: use gotest.tools for errdefs assertions 678a8a27f5 libnetwork: TestUnknownNetwork: use gotest.tools for errdefs assertions 9304d98757 libnetwork: TestDeleteNetworkWithActiveEndpoints: use gotest.tools for errdefs assertions 01b0fe1172 libnetwork: TestNetworkName: use gotest.tools for errdefs assertions 24df497674 libnetwork: TestNilRemoteDriver: use gotest.tools for errdefs assertions 532d36c251 libnetwork: TestUnknownDriver: use gotest.tools for errdefs assertions 400ad04c74 libnetwork: TestNull: use gotest.tools for errdefs assertions 3bb40af036 dockerd: enable shell-completion; add (hidden) completion subcommand 816f3fa516 integration: remove assertAttachedStream, check both STDERR and STDOUT 2197549e4f daemon: health: getShell: simplify logic (LCOW remnants) d3c0825439 daemon: make daemon.getEntrypointAndArgs a regular function 65120d586b Create bridge veth in container netns b3b9e990ee Get netns before calling moveLink 357fb9d58d Add trace/logging in waitForIfUpped 203d6530d0 libnetwork: use gotest.tools assertions a39bee9b71 libnetwork: suppress some unhandled errors in tests 376ff6add6 libnetwork: use assert.Check in defers 71c9a45672 libnetwork: use assert.NilError (step 2) 231012996f libnetwork: use assert.NilError (step 1) 6bb69a21bf EnableIPv4:false is no longer --experimental 9a37ae3657 Test unsolicited ARP/NA on interface creation bc130f367d bridge/macvlan endpoints always use a random MAC address a900e0b5bb libn/netutils: put more entropy into random MACs 422e056b0f Treat failure to send an initial ARP/NA as an error 522016a842 Configurable count and interval for gratuitous ARP/NA messages eaa84bc8f4 Send unsolicited ARP/NA requests when bringing up interfaces 2f84e2b208 libnetwork/drivers/bridge: driver.configure: move vars close to where used 3955c021ff libnetwork: remove redundant type conversion 41d502892d libnetwork/drivers/bridge: remove redundant type conversion 6e6cf999ed libnetwork: remove isNotfound test-utility c9c322785c libnetwork: Controller.defaultGwNetwork: use errdefs to check for not-found 59722228d7 libnetwork/types: compareIPMask: make error more readable 768b152494 libnetwork/types: TestUtilGetBroadcastIP: use gotest.tools, table-tests 06ae35afb9 libnetwork/types: TestUtilGetHostPartIP: use gotest.tools, table-tests 9e11ea9287 libnetwork/types: TestCompareIPMask: use gotest.tools, table-tests 85cd2b7c94 libnetwork/types: TestErrorConstructors: use errdefs for asserting afcf1b92a5 libnetwork: TestErrorInterfaces: use errdefs helpers to check error-types 2b4aa5eb52 gha: update DCO check to alpine 3.21 9dab00554d libnetwork/driverapi: fix GoDoc for UpdateIpamConfig 52d2d28148 libnetwork/types: align error-types with errdefs 836a5fac10 Dockerfile: update compose to v2.32.4 b75a75017d Dockerfile: update buildx to v0.20.0 1e2a828ed5 Dockerfile: update docker CLI to v27.5.0 c52c68a709 vendor: update buildkit to v0.19.0 366f2b563d Clarify code/comments in defaultipam.newPoolData bc93bba099 Use addrset.AddrSet instead of bitmap.Bitmap in IPAM 7e247e8b13 Add addrset.AddrSet to track a set of IP addresses 46e290fec6 Don't increment "unselected" in Bitmap when clearing a 0 5e9ee1a849 gha: Adjust release branches ae0fda655b update to go1.23.5 (fix CVE-2024-45341, CVE-2024-45336) fc7caf96d2 Revert "libnet/d/bridge: port mappings: filter by input iface" f658ea3152 Fix parsing of user/group during copy operation 131441b37f daemon: NewDaemon: align max backoff delay with containerd 2.0 76a496a482 daemon/links: fix duplicate env-vars and cleanup range-detection fcdd6f4ad2 daemon/links: fix port-ranges with mixed protocols 251c68c647 daemon/links: fix port-sorting with mixed protocols 3d37d54b8c daemon/links: Link.ToEnv: simplify adding default port env-var c508919b7c daemon/links: add BenchmarkLinkMultipleEnv 3b27e36d67 daemon/links: add EnvVars function b54053d5da daemon/links: NewLink: simplify map to string conversion 53fec9813f daemon: Daemon.setupLinkedContainers: don't fetch linked containers if not used 6b14bdb7c7 daemon/config: validate network-diagnostic-port 370c7a30e2 libnetwork/diagnostic: rename methods 16cc0be0e1 libnetwork/diagnostic: move and improve logs for starting/stoping 8f1a49fa8c libnetwork: Controller: remove redundant mutex for diagnosticServer e4abcad7ac libnetwork/diagnostic: make EnableDiagnostic, DisableDiagnostic idempotent e899092b25 libnetwork/diagnostic: make DisableDiagnostic idempotent 1e6449dfc7 libnetwork/diagnostic: print newline after stackdump log path 8cc0e11823 libnetwork: un-export Controller.DiagnosticServer bf7a87a15a docs: clarify fromImage vs tag behavior in ImageCreate aa565ec1ef Dockerfile: update RootlessKit to v2.3.2 f3f9641f5d vendor.mod: github.com/rootless-containers/rootlesskit/v2 v2.3.2 912a64e22a vendor.mod: golang.org/x/sys v0.29.0 e8c6e7ceb0 build: don't print warning when connection was terminated 52774154c9 distribution: continueOnError: handle context cancellation / timeout 6b5f14a7bb distribution/utils: WriteDistributionProgress simplify check for broken pipe 61aa1657f7 layerStore.registerWithDescriptor: improve logs for cleaning up cache e7bd60ee2d Allow users to ignore missing br_netfilter 66e6a0b7a1 vendor: update buildkit to v0.19.0-rc3 21870ad796 daemon: NewDaemon: update grpc options for containerd 2.0 22c02219de Bridge: on network delete, make sure it's deleted from store feb2dabaa9 Ignore error when adding a bridge already in the ipset 0fad8324a8 libcontainer/supervisor: monitorDaemon: move options inline again 29ce3633e5 libcontainerd/supervisor: remove grpc options that are the default b750eb87cd daemon: NewDaemon: remove grpc options that are the default e94114305e daemon: NewDaemon: align grpc options with containerd's defaults 80b0570445 spelling fix in comments 8c236de735 ci: switch from jenkins to gha for arm64 build and tests c817ea2159 api/server/middleware: log before, not after the request d86920b9b3 ci(bin-image): fix bake build 078c5edcd7 Adjust test to support cgroupv1 c75e333b6f Satisfy linter ce3e34816a Add support for bare `writable-cgroups` security-opt f8187c0214 Error on invalid requests for writable-cgroups bc7d118fd7 Adjust TestCgroupRW to test output before exit code 081b9d97db Update TestCgroupRW with subtests + nil case fix b5b5b7e983 integration/container: test the writable-cgroups security option e3cdd59a82 daemon/&container/: enable `--security-opt writable-cgroups=true` as an option b1ea8032fa api: swagger: document StatsResponse 9ed85f487d daemon: don't discard "invalid parameter" errors for archive endpoints c6d8a93d58 daemon: containerExtractToDir: remove handling for read-only paths on windows ca0158b235 daemon: containerExtractToDir: combine checks for read-only target 0530750d7e daemon: containerExtractToDir: remove named error return 9ed662e72e daemon: containerExtractToDir: remove handling for copyUIDGID on windows ca06b222e3 api/types/container: merge Stats and StatsResponse 16cbb27e4e use StatsResponse instead of Stats in tests 390cb4c2f1 Increase integration test timeout from 5m to 10m 0aa8fe0bf9 Update to containerd v2.0.2, buildkit v0.19.0-rc2 a63602472d Use local cleanup method rather than dependency 3db60168e7 pkg/ioutils: remove crypto/sha256, crypto/sha512 imports f68eb9c3cb vendor: github.com/Microsoft/hcsshim v0.12.9 488d6972b2 vendor: github.com/stretchr/testify v1.10.0 2008799026 vendor: k8s.io/klog/v2 v2.130.1 adec695d36 vendor: github.com/fsnotify/fsnotify v1.7.0 1ef5957089 vendor: github.com/vbatts/tar-split v0.11.6 de86c46158 vendor: github.com/containernetworking/cni v1.2.3 6dd592bd49 vendor: github.com/containerd/go-cni v1.1.11 2ea97aec2d vendor: github.com/containerd/ttrpc v1.2.7 cc120c4c05 testutil: update to semconv v1.26.0 6439c46e06 vendor: github.com/containerd/errdefs v1.0.0 f40b92272c vendor: github.com/AdamKorcz/go-118-fuzz-build v0.0.0-20231105174938-2b5cbb29f3e2 eb592fecad vendor: github.com/AdaLogics/go-fuzz-headers v0.0.0-20240806141605-e8a1dd7889d6 48e6b4e8f7 vendor: otel v0.56.0 / v1.31.0 d60f164e21 vendor: github.com/creack/pty v1.1.24 a78b84c212 vendor: github.com/aws/aws-sdk-go-v2 v1.30.3 d5fe43335f vendor: google.golang.org/grpc v1.68.1, google.golang.org/genproto 5066658f39 vendor: golang.org/x/oauth2 v0.23.0 81d5487330 vendor: cloud.google.com/go/compute/metadata v0.5.0 433b1f9b17 libnet/d/bridge: port mappings: filter by input iface 49ec488036 logger/fluentd: remove deprecated fluentd-async-connect option d560704c91 libnet/d/bridge: init driver.nlh in newDriver 5a6a980dad daemon/export: Stop when context is canceled 15df1c9c40 imageService: Remove PerformWithBaseFS 2f60d15ddf Internal macvlan networks don't need a gateway address. 8b13cde274 L3 and internal ipvlans don't need a gateway address 43f71fb582 Bridge - skip gateway allocation if no gateway is needed 38e76ebea9 Only allocate a gateway if the n/w driver wants one 64006f964a Simplify selection of gateway address 24f09ef13c Update MAINTAINER file email for laurazard e26122c609 pkg/ioutils: remove unused NewReaderErrWrapper 2b4db9383c pkg/archive: nosysFileInfo: implement tar.FileInfoNames to prevent lookups ce8d3d1c78 pkg/ioutils: remove deprecated NopWriteCloser 39f1abb1fb pkg/ioutils: remove deprecated NopWriter 3faa170371 pkg/ioutils: deprecate NopWriteCloser 7fa3c553e7 pkg/ioutils: deprecate NopWriter ad860173a2 vendor: github.com/containerd/containerd v1.7.25 c12bfda3cd Dockerfile: update containerd to v1.7.25 d80e3410bc vendor: github.com/containerd/containerd/api v1.8.0 d23871469b pkg/sysinfo: Remove deprecated `NumCPU` cdd4a7429f pkg/ioutils: remove errWriteFlusherClosed 034cd27da0 pkg/ioutils: remove deprecated NopFlusher e183df63f9 pkg/ioutils: remove deprecated WriteCounter, NewWriteCounter 15ce2914a5 pkg/ioutils: move BytesPipe to container/streams/bytespipe 8f9c09edd4 Fix unit tests for an nftables host 818a180fce pkg/ioutils: deprecate NopFlusher 18f1ecafea c8d/snapshot: Rename variable that collided with import 15d3c99ff6 daemon: Remove "Error: " error message prefix cd9c292de9 imageService: Unify `Mount` and `Unmount` 0cbb604665 c8d: Implement `RWLayer` and remove `PrepareSnapshot` daed0bd4d6 container/rwLayer: Remove unused TarStreamer, ApplyDiff, Size and Name 85de28901d container/rwLayer: Remove Changes bafebbbd8a container: Decouple RWLayer from graphdriver implementation 383503d382 pkg/ioutils: deprecate WriteCounter, NewWriteCounter 60971a66b4 pkg/ioutils: deprecate BytesPipe, NewBytesPipe, ErrClosed 3db72b255d pkg/sysinfo: Deprecate NumCPU 6d24a21643 improve validation of cpu-shares, and migrate TestRunInvalidCPUShares 400f1ed95c runconfig: TestValidateResources: use subtests 93907c904d runconfig: TestValidateResources: fix duplicate test-case 5b18a7914c deprecate pkg/parsers.ParseKeyValueOpt and move internal aad7bcedd2 Dockerfile: update runc binary to v1.2.4 35932cdeec pkg/ioutils: un-export readCloserWrapper 392d33c98c image/save: set a stable timestamp for assets e324df3f1b image/tarexport: patch MkDirall to accept atime, mtime ca962cecfd image/tarexport: add fork of os.MkdirAll (non-buildable commit) ee1a15a970 daemon: ImageService.LogImageEvent: pass through context ea00e72c21 libnetwork/drivers/bridge: processIPAM: remove unused arg f8a973ba4e ci: update bake-action to v6 586556eda7 runconfig: return correct error-types and touch-up error messages fbb421efaa runconfig: cleanup TestDecodeContainerConfig c76cab29df runconfig: cleanup TestValidatePrivileged ff64a348cc runconfig: fix and refactor TestDecodeContainerConfigIsolation 7864454792 pkg/ioutils: move atomic file-writers to a separate (pkg/atomicwriter) package 34ab9570ad daemon/links: TestLinkMultipleEnv: assert with gotest.tools, remove TestLinkPortRangeEnv 97dc3056c6 Clear RWLayer reference under container lock 080d8e7d63 daemon/links: TestLinkEnv: assert with gotest.tools 702df89d9b daemon/links: TestLinkNaming: assert with gotest.tools 51eb0c6a24 daemon/links: TestLinkNew: assert with gotest.tools 382fb41563 daemon/links: remove newPortNoError utility 3fa5e7e6a9 Update internal use of idtools to usergroup 9c368a93b6 Split internal idtools functionality a4ae38b010 Use bridge consts for "DefaultGatewayIPv[46]" aux-addr keys 0f7a43271c daemon/events: Move metrics to internal/metrics 90e2afd0be daemon: Move direct usages of go-metrics to internal/metrics 438f5801e1 daemon/images: Move ImageActions to metrics 51c2689427 daemon/metrics: Move out to `internal/metrics` 048fece105 Alias github.com/docker/go-metrics imports 24ad9bef9d pkg/idtools: rewrite to use moby/sys/user f4e2cfa209 libnetwork/osl: Namespace.setSysctls: use stdlib errors 064cdf475c pkg/parsers: deprecate ParseUintListMaximum, ParseUintList 39c05177ef Check network connect/disconnect after live-restore c2fe1d31e9 Fix live-restore of the osSbox a77ee8b9c0 Mark endpoints as "populated" after live restore db1ed280f1 Live-restore gw-priority 9138195cef Rename Controller.sandboxCleanup to sandboxRestore 1359772433 pkg/sysinfo: parse cpuset.cpus/mems once and memoize 35fcbc1d1a Test a container attached to l3-ipvlan and bridge networks 81f6e087c1 Treat connected routes to unspecified addrs like default gws 725defe1e9 Include iface routes to unspecified addrs when looking for default gws 0416e31876 Add comments to selectGatewayEndpoint 1b9c09e10a daemon/logger: un-export RingLogger 263c46d755 integration/internal/container: IsInState: touch up error-logs 2282279180 pkg/sysinfo: internalize parsing cpusets aa696ffbb1 pkg/sysinfo: touch-up docs for cgroupCpusetInfo.Cpus, Mems 4597396cb5 pkg/sysinfo: define const for default Max CPUs 799501d172 pkg/sysinfo: rename vars/arguments for clarity 0d51680f91 pkg/sysinfo: stub out parsing cpusets on non-linux b7ed099727 daemon: isOnlineFSOperationPermitted: cleanup confusing syntax fb03a3c403 vendor: github.com/moby/term v0.5.2 be39e4f732 man: remove --allow-nondistributable-artifacts 4f9150cee5 Update swarm to latest for server alpn config a51baca00d pkg/fileutils: move GetTotalUsedFds internal in daemon ba8279bf1f golangci-lint: remove temporary exception for deprecated code e45f20352d pkg/fileutils: deprecate GetTotalUsedFds a079f62f47 Add testutil daemon.WithResolvConf d7f59cec05 daemon/config: add basic validation of exec-opt options a646467a66 integration-cli: migrate TestCreateByImageID to integration suite 5b31a5b370 libnetwork/drivers/windows: fix error-matching for hcsshim "not found" 1f4c9f23c3 libnetwork/drivers/bridge: format errors with '%v' for consistency 3b8ba71fe3 libnetwork/drivers/windows: fix non-constant format string 8c96e45375 distribution: fix non-constant format string e451b698d3 golangci-lint: add forbidigo rules to prevent regex.MustCompile 86e470fe3a daemon/names: use lazyregexp b7c88502fb internal/testutils/networking: use lazyregexp ae13510577 daemon/logger/awslogs: use lazyregexp to compile regexes on first use 690e00733e volume/mounts: use lazyregexp to compile regexes on first use 72ebf2c309 testutil: use lazyregexp to compile regexes on first use b5d90d746b registry: use lazyregexp to compile regexes on first use b6b19059c5 plugin: use lazyregexp to compile regexes on first use 0fe953dff0 pkg/idtools: use lazyregexp to compile regexes on first use 48d63b99ef opts: use lazyregexp to compile regexes on first use 06948b83f3 oci: use lazyregexp to compile regexes on first use 98f7c45e7f integration-cli: use lazyregexp to compile regexes on first use bc1dbd9ea6 daemon: use lazyregexp to compile regexes on first use d61a6924d7 client: use lazyregexp to compile regexes on first use 0672b3b7f7 builder: use lazyregexp to compile regexes on first use 43b3aaa62d implement lazyregexp package ce37cb3ea0 Down with the sickness (AUTO_GOPATH) 839b0afbc7 integration/container: use is.ErrorType for some tests 4504ca6bf6 integration/container: rename vars that shadowed imports 6b0085eebd integration/container: use consistent name for api-client fa0b9f9505 integration/container: use consistent alias for test-container pkg 547151abd2 pkg/sysinfo: cleanup tests 25009ed5c0 Restore labels when re-creating Windows networks 7bd1b64058 daemon/logger/loggertest: remove workaround for OSC string terminator parsing 5149401665 vendor: github.com/Azure/go-ansiterm faa5f7b0171c ddd885a961 daemon: don't repeatedly call NumCPU if not needed aa7493f953 daemon: minor cleanups for getting system info 1c37a4454b daemon: adjust tests for changes in go1.24 JSON errors c5575b5119 daemon: add missing "//go:build" directive f8524ab041 daemon: remove workaround for go1.21 compiler bug 8e9213a6b6 daemon: remove kernel-version check for kernel < 4.0.0 86a2df8be6 pkg/parsers: rename var that collided with builtin cfc988e4da integration-cli: TestRunInvalidCpuset.. create instead of run 8d5cf1db1e Use the roundtripper during build f321120767 daemon: parseSecurityOpt: rename var that shadowed function 44db31b9cc remove pkg/broadcaster and make it internal to container/streams 6ab9212168 pkg/ioutils: remove OnEOFReader and move it internal be4eac753f Remove use of bufio in cli import tests 4c251b6b03 Add pool for archive decompress stream 9189a6e0ab Fix chrootarchive test a93a079cb4 Remove use of pools in archive 8d787e3461 builder/dockerfile: unconvert e19e4de775 daemon: ignore some errors when setting env-vars c759fb20d6 daemon: remove uses of deprecated system.MkdirAll 1e060d3315 daemon/graphdriver/windows: remove uses of deprecated system.MkdirAll 05ec732667 libcontainerd/supervisor: remove uses of deprecated system.MkdirAll 84bb6e5afb container: remove uses of deprecated system.MkdirAll c02c2a3a79 cmd/dockerd: remove uses of deprecated system.MkdirAll e783bb5c69 builder/dockerfile: remove uses of deprecated system.MkdirAll bc61b31935 pkg/idtools: remove uses of deprecated system.MkdirAll 4472e9b7f8 pkg/system: deprecate MkdirAll and remove custom volume GUID handling e5bf6d8ba0 libnet: pass store as an arg to netdrivers 93e9f7f75f distribution: Pass Traceparent OTEL HTTP header 524a63a958 pkg/chrootarchive: remove "// import" comments 302ca6227f pkg/chrootarchive: use stdlib errors 727ab584bb vendor: github.com/containerd/cgroups v3.0.5 275bbcd300 builder: don't fall back to defaultKeepStorage when set to zero 315891dd2e Remove import comments e4236c93d9 Remove unused pkg/system functions 12b2b56fa6 Update archive to use fs.FileInfo over custom stat bb3e95dfdc Update archive to use unix.Mknod directly 35b9525f9a Update archive to use its own xattr funcs 1b4cbea3a8 Update archive to use time operations directly 90fef061ec daemon/c8d: Force c8dimages alias for containerd/images 8c30e11321 c8d/delete: Consistent method receiver 1ad78f00b1 daemon/c8d: Fix duplicate containerd/images import 6bd5840675 vendor: golang.org/x/net v0.33.0 364e4790e1 docs/api: allow for an empty string for Isolation (api v1.25-v1.47) 7e9a5064dc api: Remove unused imageStore and layerStore c452af6651 image: Remove unused `Details` fields d9795da33e image: Remove `GetImageManifest` 4f5ec9994c pkg/reexec: deprecate and migrate to github.com/moby/sys/reexec 7fbbd52b0e add Shaun Thompson as curator b0be1f3af8 Enable external DNS if a network has an IPv6 gateway ec8a5b0f4c libnet/d/bridge: move iptRule to iptables pkg 1b823fb54e libnet: don't put external DNS answers in OTel spans 1aecca8bbd docs: Update example section for SwarmJoinRequest b6594353f8 libnetwork/iptables: remove deprecated Passthrough() d34d092b42 libnetwork/iptables: remove deprecated IPV, Iptables, IP6Tables 820dea0d2b libnet/d/bridge: hardcode chain names bd30a51ea7 libnet/iptables: split ProgramChain and move to bridge driver df3c78d061 Combine outgoing and ICC iptables rules 0f259dd76d Rename setupIPTablesInternal -> setupNonInternalNetworkRules 556b8eed16 Tidy setupIPTablesInternal 8fd177d79b pkg/reexec: Command: separate public API from implementation 6568c06d12 pkg/reexec: make platform-agnostic (again) 7672d60033 pkg/reexec: use const for name of test binary 0ef2b24c80 Make libnetwork responsible for DOCKER-USER setup/reload 9699284e8f Add iptablesdoc for a swarm network 6473d37002 Run commands in an L3Segment netns without failing the test. 3bf9a80818 Rename L3Segment Host.Run -> Host.MustRun 29e20fc904 Add static filter-FORWARD rules during bridge driver init 5ccc699513 Use golden testdata in TestUserChain cd81985bfa vendor: update buildkit to v0.18.2 d688389f4a libnetwork/iptables: deprecate Passthrough 8991c4e382 Deprecate BridgeNfIptables and BridgeNfIp6tables fields 30a365f543 docs/api: version-history.md: fix markdown 01a55860c6 libnetwork/drivers/bridge: setupIPChains: fix defer checking wrong err 31fc7dd750 libcontainer: ReplaceContainer: fix var shadowing import 4e9df46a6e docs/api: document correct case for Api-Version header 53a9127349 integration/build: make TestBuildEmitsImageCreateEvent less noisy 504e1d4686 pkg/archive: replace uses of pkg/errors for stdlib errors f0ce367e1e pkg/system: deprecate types and functions that are only used internally f053beb34c libnet/osl: drop netns path GC 27deff4da1 libnet/iptables: deprecate type IPV c8f19e5e4c libnet/iptables: remove mutex-based serialization 537eea8744 vendor: golang.org/x/net v0.32.0 678ef1a267 libnet/d/bridge: unconditionally error out if LinkSetMTU fails 5c358743af daemon: info: remove bridge-nf-call-iptables / ip6tables warnings d8358ebc87 otel: Use non-noop tracer provider for grpc 96ef85272f c8d/pull: Show `Extracting` layer status 899360b649 integration/build_traces: Create own tracer provider 4847557d1b otel: Avoid excessive memory allocations if not configured 927ff16860 vendor: github.com/opencontainers/runc v1.2.3 88a08a070e vendor: github.com/cyphar/filepath-securejoin v0.3.5 ba90fd8da0 Decouple pkg/archive from pkg/ioutils ec5c9e06e3 Dockerfile: update runc binary to v1.2.3 e6443e4af2 vendor: golang.org/x/crypto v0.31.0 035eeee209 vendor: golang.org/x/text v0.21.0 df8b3e787c vendor: golang.org/x/sync v0.10.0 c4f80dd931 vendor: golang.org/x/sys v0.28.0 8b243a1a82 docs/api: deprecate non-distributable artifacts 1932091e21 remove support for non-distributable artifacts and deprecate API fields and config e394ff695c Dockerfile: remove libbtrfs-dev dependency 7d79b301bc Dockerfile: remove libsecret-1-dev dependency 3192b2aba7 Dockerfile: remove libudev-dev dependency 7c4afb1e6b Dockerfile: remove dpkg-dev dependency 7bba43a731 Dockerfile: remove libapparmor-dev dependency b08ff81204 builder: fall back to defaultKeepStorage if keepStorage is unset for GC policy 1a453abfb1 integration-cli: don't skip AppArmor tests on SLES be9e39b48b registry: ConvertToHostname: use strings.Cut to reduce allocations a6f98dc60d registry: Service.lookupV2Endpoints: add arg to skip mirrors 50215913db registry: loginV2: move variables closer to where they're used c1ef39e56e registry: loginV2: don't contact registry when failing to construct request a7da6fb2a7 man: vendor: github.com/cpuguy83/go-md2man v2.0.5 89899b71a0 update xx to v1.6.1 for compatibility with alpine 3.21 9da0e69608 api/server: Server.CreateMux: pass context and use structured logs 9c1ff095e8 cmd/dockerd: pass debug-router instead of constructing in CreateMux 27294df576 api/server: Server.CreateMux: also register API-version debug endpoints e2d2834be1 api/server: Server.CreateMux: register debug endpoints with correct methods 2f5412de8d api/server: set /debug prefix as part of debug-router routes 694c01620b chore: fix some function names in comment 76a5ca1d4d Accurately reflect the canonical casing of `API-Version` and `OS-Type` headers 5fc32c12c7 cmd/dockerd: ignore some unhandled errors b0ec823cc7 daemon: remove Daemon.NetworkControllerEnabled 59bfc32a33 daemon/containerd: hostsWrapper: remove unused regService argument 3014d6d7a3 registry: deprecate APIEndpoint.TrimHostName fe2637a05b api/types/network: add godoc for EndpointSettings.GwPriority 15ba03c8fc Jenkins: don't modprobe kernel module 2af19b6b7c Don't try to modprobe ip6_tables in the moby dev container f2e1f52a04 Try to load kernel module ip6_tables, when necessary. 4740820716 Use ioctl to try to trigger kernel module loads 56eb47c622 Ignore kernel-assigned LL addrs when selecting "bip6" 404118c22b vendor: google.golang.org/protobuf v1.35.2 20ddbe2a0b vendor: golang.org/x/exp v0.0.0-20241108190413-2d47ceb2692f 1e51b7a28c vendor: golang.org/x/tools v0.27.0 750d6f4423 vendor: golang.org/x/mod v0.22.0 99f593b762 vendor: golang.org/x/net v0.31.0 e5895eacac vendor: golang.org/x/crypto v0.29.0 fb9977e42e vendor: golang.org/x/text v0.20.0 115acf7c15 vendor: golang.org/x/sync v0.9.0 e542dee0a6 vendor: golang.org/x/sys v0.27.0 8fee8a759f Remove test env var DOCKER_TEST_CREATE_DEFAULT_BRIDGE 0eb3d431c0 Run tests that change docker0 in their own netns 52d7e407b7 update to go1.23.4 504ee465fc vendor: update buildkit to v0.18.1 4e30acb63f Dockerd rootless: make {/etc,/var/run}/cdi available 820520affd distribution: verifySchema1Manifest: pass through context 9a0b61ab29 daemon/daemon_linux.go: Fix a minor typo d75394bf77 Wait longer for a stable goroutine count in tests dd7831187d Fix typo in waitForStableGourtineCount f91afea6ea c8d/commit,import,build: Preserve overriden image f0c8becffb c8d/tag: Extract createOrReplaceImage 0194a18ca8 registry: remove assignment of default values in some tests a93f6c61db c8d/tag: Don't log a warning if the source image is not dangling 28a700bf5b registry: override net.LookupIP per test, not globally d17cd847ea registry: isCIDRMatch: don't try to resolve host if not needed 5f91c769f5 registry: deprecate RepositoryInfo.Class 3903f71f9f registry: remove deprecated APIEndpoint.Version and APIVersion type 0bd8738e33 registry: isCIDRMatch: return early if no CIDRs are set cce5dfe1e7 Jenkinsfile: modprobe br_netfilter 59c5919b12 Put --help before --host in the dockerd manpage 2fbb18ece2 Add --host-gateway to the dockerd manpage 0aba67203a Implement gateway mode "nat-unprotected" 07dff11a7e Wrap errors rather than using err.Error() d3c2376ff1 cmd/dockerd: change routerOptions.Build to a regular func 5b752fab32 api: add Priority field to EndpointSettings 229dc6676c daemon: early-return from buildJoinOptions c9f17bedc7 daemon/config: extract validation of userland-proxy config 83f8f4efd7 daemon/config: deprecate Config.ValidatePlatformConfig 74a00f183b daemon/config: move utility-functions separate from Config methods a4714fa04d daemon/config: verifyDefaultCgroupNsMode: update error message for consistency 2c000b8ac4 daemon: Daemon.RegistryHosts: use internal method to get daemon config 16be996b6b ci: use edge releases of buildx 3e4f437697 cmd/dockerd: newRouterOptions: rename arg that shadowed import 68a98a7263 daemon: getCD: remove use of parsers.ParseKeyValueOpt 003e35fea5 libnetwork/ipams/null: gofumpt code a8e5a19706 libnetwork/drivers/bridge: gofumpt code da5e86a82b daemon: gofumpt code fb6e650ab9 integration: add wait e7d15d4d58 daemon/graphdriver/zfs: ignore non-existent dataset on removal 264c15bfc4 Fix br_netfilter module loading logic b4769e86a4 vendor: update buildkit to v0.18.0 b57aa7f3b7 integration: remove default poll delay and timeouts c9a1e4dc8c Test host-gateway addresses from docker0 af0b973595 Allow IPv4 and IPv6 host-gateway-ip addresses 01e2168c1e Move Linux-only integration/network tests into Linux-only file 90250ce93a vendor: update buildkit to v0.18.0-rc2 b7f43c3729 Remove buildkit init timeout 0b5b1db1c1 Use default ULA prefix if fixed-cidr-v6 is not specified fdd2591cbe Separate IPv4 IPAM conf from the rest of default bridge conf cc538b2bf0 Drop fixed-cidr if not within user-managed bridge subnet 311a8bc899 Allow increase of fixed-cidr subnet size 85159ce09f Allow non-overlapping change of fixed-cidr 237654a553 Refactor IPAM config for default bridge 90baa2bc36 Fix selection of subnet from user-managed default bridge 63b558af77 Don't clear top bits of IP then check if it's global unicast facb2323a0 Add tests for IPAM Config of default bridge 4a2bd1085e Move default bridge test into linux-only file 46a91a947e api/types/filters: reduce uses of non-exported fields in tests cffee85725 api/types/filters: also test generated JSON 848f11aa7c api/types/filters: rewrite tests with gotest.tools 4becdaca72 Add label on PrepareSnapshot to warn about non-expiring leases eef6b83e53 Update containerd image builder to use lease prune label e6170a5c4f Fix lease management during image operations 1a26e627bc vendor: github.com/vishvananda/netns v0.0.5 0666d4a585 vendor: github.com/moby/buildkit 94d0f6ed85e5 (master / v0.18.0-rc.2) 557e4ed83b tests: migrate simple cases to assert.ErrorIs caae3c051d tests: migrate to assert.ErrorContains when possible 1b470d15d8 tests: migrate away from assert.Assert(v == nil) 0553d3d994 tests: migrate away from assert.Assert(err == nil) 5e4e34a966 tests: migrate strings.Contains -> is.Contains in assertions 48b237f7af vendor: update buildkit to v0.18.0-rc1 44f9eec1ae vendor: github.com/tonistiigi/go-actions-cache 394979b8119e 1551d95727 vendor: resenje.org/singleflight v0.4.3 b9a904c48a integration/container: TestCDISpecDirsAreInSystemInfo: use fixtures d23bc11b97 vendor: github.com/containerd/continuity v0.4.5 8cecf3a71c Dockerfile: update containerd to v1.7.24 a650dbd951 Update containerd to v1.7.24 821d974789 volume/testutils: simplify fakePluginGetter b656cffe4c Disallow "network generic data" with type options.Generic 223929a44d Test routed n/w inter-network communication 0546d9084f Routed networks accept traffic from anywhere. 10338053f0 Don't add default-RETURN rules to DOCKER-ISOLATION chains 939bc14616 Tidy bridgeNetwork.isolateNetwork 255fff4acd Propagate error from INC rule setup d3b7d84b23 Simplify setINC() 1a607cf257 Rename gwMode.natDisabled() to gwMode.routed() 9c9eccfb23 client: support multiple platforms on save and load e257856116 Dockerfile: update to runc v1.2.2 44ed3067ca c8d/container/inspect: Return `ImageManifestDescriptor` 0020c41e3a daemon: Best-effot container `OS` to `ImagePlatform` migration 638172417c container: Add `ImagePlatform` field and deprecate `OS` 60cd165012 Dockerfile/frozen-images: Add amd64 and arm64 hello world f303531757 client: ImageImport: omit empty query-parameters f96994ec17 Skip tests that are flaky for 4 already be36ac13e5 .golanci.yml: rm runc exception acf920823b update golangci-lint to v1.62.0 329d35bcca vendor: github.com/opencontainers/runc v1.2.2 4b26582bc6 vendor: google.golang.org/grpc v1.66.3 1eccc326de vendor: github.com/golang-jwt/jwt/v4@v4.5.1 a333c2990f client: TestImageImport: use table-test, asserts, add platform test-case 2bab030d6c client: TestImageSave: use table-test, asserts, add platform test-case 1ea24b7be3 client: TestImageLoad: add test-case for platform 613538469b client: TestImageLoad: rewrite to use table-tests, use asserts b0b6357701 Makefile: don't automatically inherit graph-driver from host d88ab0f3a2 c8d/image/inspect: Return `Descriptor` c2c0046d11 remove logentries check and migration code 5ef5ca3adc EnableIPv4 will be in API 1.48, not 1.47 1a16f5099b daemon/logger: logDriverError: use WithFields for logs 451fee91c5 libnetwork: add missing go:build tag 0f0c5eeaca api/server/router/container: add missing go:build tag 835b1f1063 daemon/containerd: add missing go:build tag 354dfdb928 Delete /etc/hosts entries on network disconnect c1bf84fdbc Move Austin Vazquez (austinvazquez) to maintainers 82fdae7730 daemon/images: fix godoc for ImageActions 4a2c48e231 Dockerfile: update compose to v2.30.3 ee95c7bd89 Dockerfile: update buildx to v0.18.0 8a81a97af5 Only delete /etc/hosts entries for disconnected network b034dc41a2 deprecate pkg/platform and move internal b15cd283d8 c8d/list: Return `Descriptor` fc590032f3 hack: Add explicit containerd feature to `daemon.json` 7d89d83485 golangci-lint: enable copyloopvar linter d67a21b6fc pkg/idtools: remove redundant capturing of loop vars (copyloopvar) 3350920788 integration/service: remove redundant capturing of loop vars (copyloopvar) 70b354713b runconfig: remove redundant capturing of loop vars (copyloopvar) 1a89c1e4a6 pkg/archive: remove redundant capturing of loop vars (copyloopvar) 517baee5f2 distribution: remove redundant capturing of loop vars (copyloopvar) 04d8766d4e integration/network/bridge: remove redundant capturing of loop vars (copyloopvar) 020b7102e3 daemon/logger/syslog: remove redundant capturing of loop vars (copyloopvar) 59f68d3f99 api/server/middleware: remove redundant capturing of loop vars (copyloopvar) 243442280e integration/system: remove redundant capturing of loop vars (copyloopvar) bb682f75f9 integration-cli: remove redundant capturing of loop vars (copyloopvar) a19b892c29 integration/volume: remove redundant capturing of loop vars (copyloopvar) cd5e043aff daemon/cluster/executor/container: remove redundant capturing of loop vars (copyloopvar) f797d70649 api/types/container: remove redundant capturing of loop vars (copyloopvar) 08dbb7a593 integration/build: remove redundant capturing of loop vars (copyloopvar) ee54e43bf1 integration/daemon: remove redundant capturing of loop vars (copyloopvar) 9a7278fbdc integration/capabilities: remove redundant capturing of loop vars (copyloopvar) ff97ff8320 daemon/logger/loggerutils: remove redundant capturing of loop vars (copyloopvar) 67d91e7622 volume/local: remove redundant capturing of loop vars (copyloopvar) f7b547ba0d integration/network/ipvlan: remove redundant capturing of loop vars (copyloopvar) b5c0f6cd70 daemon: remove redundant capturing of loop vars (copyloopvar) d885d097ef libnetwork/ipams/defaultipam: remove redundant capturing of loop vars (copyloopvar) 7db58fefdc internal/mod: remove redundant capturing of loop vars (copyloopvar) 74e44345e7 distribution/xfer: remove redundant capturing of loop vars (copyloopvar) 874ad2fcf0 api/types/filters: remove redundant capturing of loop vars (copyloopvar) 3a34264129 volume/mounts: remove redundant capturing of loop vars (copyloopvar) a505b19170 integration/plugin/common: remove redundant capturing of loop vars (copyloopvar) 742509150b libnetwork/bitmap: remove redundant capturing of loop vars (copyloopvar) 082a52e8ac oci: remove redundant capturing of loop vars (copyloopvar) e9b009fef5 integration/networking: remove redundant capturing of loop vars (copyloopvar) 53d78d73e6 integration/container: remove redundant capturing of loop vars (copyloopvar) 0b2d687b06 daemon/containerd: remove redundant capturing of loop vars (copyloopvar) b5b077f2ea api/types/network: remove redundant capturing of loop vars (copyloopvar) 0fc7b1c201 daemon/cluster/convert: remove redundant capturing of loop vars (copyloopvar) 6a85a13c0a internal/testutils/specialimage: remove redundant capturing of loop vars (copyloopvar) 1c6958bf13 integration/network/macvlan: remove redundant capturing of loop vars (copyloopvar) 88e24ccda6 image/cache: remove redundant capturing of loop vars (copyloopvar) 89add8c64f libnetwork/drivers/overlay: remove redundant capturing of loop vars (copyloopvar) ce1a39ab34 client: remove redundant capturing of loop vars (copyloopvar) ea10382ffa integration/image: remove redundant capturing of loop vars (copyloopvar) 69d0c773ca daemon/logger/fluentd: remove redundant capturing of loop vars (copyloopvar) c2e22d85b3 api/server/httputils: remove redundant capturing of loop vars (copyloopvar) aea8a0724a integration/network: remove redundant capturing of loop vars (copyloopvar) f0b896c5f2 builder/remotecontext/git: remove redundant capturing of loop vars (copyloopvar) 4768d680d1 libcontainerd/remote: remove redundant capturing of loop vars (copyloopvar) 443a074fa4 profiles/seccomp: remove redundant capturing of loop vars (copyloopvar) 93f98535c3 daemon/logger/loggertest: remove redundant capturing of loop vars (copyloopvar) 35aa84fbc2 pkg/plugins: remove redundant capturing of loop vars (copyloopvar) 63f0b9a1d5 opts: remove redundant capturing of loop vars (copyloopvar) c0de852afa integration/config: remove redundant capturing of loop vars (copyloopvar) 41bf78226f daemon/config: remove redundant capturing of loop vars (copyloopvar) b01a37a6b7 libnetwork/drivers/bridge: remove redundant capturing of loop vars (copyloopvar) 53e48e8623 libnetwork: remove redundant capturing of loop vars (copyloopvar) 8b190b16df registry: remove redundant capturing of loop vars (copyloopvar) 21e1038d12 golanci-lint: sync comments with docker/cli b453aa65fa update go:build tags to use go1.22 bf251c33d0 Only masquerade access to own published ports for userland-proxy=false 3dea9fd4e6 Add TestFilterForwardPolicy 3cadadb4eb Add daemon option --ip-forward-no-drop 5823b05c97 Modify IP forwarding and filter-FORWARD DROP setup. a4d74c6383 Move setupIPv6Forwarding() to setup_ip_forwarding.go 24f53eba7f Move integration/network/bridge_test.go to bridge subdir ca273f465a Dockerfile: update registry to v3.0.0-rc.1 c9570da15b chore(libnetwork): fix some comments 756586e437 vendor: update buildkit to v0.17.1 a6e5f7f86b Structured logs in sbJoin/sbLeave and funcs they call 18327745c0 Allow separate IPv4/IPv6 gateway endpoints. 869f7996fc Option to disable implicit mapping IPv6 host to IPv4. 4ac7f14e99 Add EnableIPv4 to the bridge driver c0045476b8 all: Remove redundant `units` alias for `go-units` 20818454c4 update to go1.23.3 16f6fd1a95 Add a comment explaining host-networking hosts file generation 7c1e41a06d libnetwork: Sandbox.buildHostsFile: remove intermediate var 6a5ab42f28 libnetwork/etchosts: Delete: truncate file instead of close and write 7d98e45a6e libnetwork/etchosts: Add: combine with "mergeRecords()" 28d029cf9f libnetwork/etchosts: don't panic on invalid regex 80e4631998 Use netip.Addr instead of string when building /etc/hosts c2a09d2721 Don't update /etc/hosts separately for each initial network 0af6203b46 vendor: github.com/containerd/typeurl v2.2.3 84965c0752 Windows: Run containerd as managed process 5014c90516 api/swagger: Improve description for platform in images/push 7766b35d74 golangci: govet: enable more rules 24bd11ce22 pkg/plugins: TestLocalSocket ignore deepequalerrors (govet) 626d9b421b distribution: TestLayerAlreadyExists: fix deepequalerrors (govet) 06bf2a2699 distribution: manifestStore.Put: fix unusedwrite (govet) facdfc1751 daemon/images: onlyFallbackMatcher.Match: fix unusedwrite (govet) 406e3a0ff7 daemon/containerd: storeJson: fix redundant err-check (govet) 8e76998aee integration-cli: loadSpecialImage: fix shadowed variables (govet) a0b84a34c2 layer: verifiedReadCloser.Read: fix shadowed variables (govet) 38db7265fc pkg/plugins: loadWithRetry: fix shadowed variables (govet) a28e6e2d21 daemon/graphdriver/btrfs: Driver.parseStorageOpt: fix shadowed variables (govet) b3705f12cd distribution: pushDescriptor.layerAlreadyExists: fix shadowed variables (govet) 0c8c098719 libnetwork: Network.rmLBBackend: fix shadowed variables (govet) 544b1574e2 builder/dockerfile: fix shadowed variables (govet) bb9251c46d daemon/containerd: fix shadowed variable in tests (govet) 979227484f daemon/containerd: ImageService.imageDeleteHelper: fix shadowed variable (govet) 6dc31171c5 builder/builder-next/exporter: patchImageConfig: fix shadowed variable (govet) b019372446 libnetwork/bitmap: fix shadowed variable in tests (govet) 32aa56af00 pkg/idtools: fix shadowed variable (govet) 6f3dd5f040 plugin: TestPluginAlreadyRunningOnStartup: fix shadowed variable (govet) e46e159001 plugin: Manager.getManifestDescriptor: fix shadowed variable (govet) d058e09200 daemon/graphdriver/overlay2: fix shadowed variable (govet) ee425a9773 builder/builder-next: fix "id" variable being shadowed (govet) 79c5b938f4 daemon: Daemon.autoRemove: fix shadowing (govet) 007daf5045 daemon: Daemon.handleContainerExit rename vars to prevent shadowing (govet) 738fb74a1a libnetwork/datastore: MockStore.AtomicPut: remove redundant nil check (govet) 473b1d419c golangci: run gosec on test files as well f6d86126c4 distribution/xfer: createChainIDFromParent: ignore G602 false positive (gosec) a309e88dff pkg/tarsum: renderSumForHeader: ignore G110 in tests (gosec) 41b5645ba2 integration-cli: TestDaemonStartWithDefaultTLSHost: fix G402: TLS MinVersion too low 4bb96a5a4a awslogs: TestNewAWSLogsClientCredentialEndpointDetect: ignore G101 (gosec) 6f220c3340 daemon/logger/splunk: HTTPEventCollectorMock: fix G114 (gosec) 79196deae9 pkg/authorization: fix G112 Potential Slowloris Attack (gosec) e6e6f0cdca client: TestTLSCloseWriter: fix G112 Potential Slowloris Attack (gosec) 963a9d7504 integration-cli: ignore some file-permissions issues (gosec) 7d7412af31 integration-cli: TestRunCreateVolumesInSymlinkDir: adjust file perms (gosec) 0d1c645919 integration-cli: writeFile: fix file permissions (gosec) 6ca0d3b1b1 integration-cli: inspectMountPoint: fix implicit memory aliasing (gosec) c8e085b56a volume/mounts: TestConvertTmpfsOptions: fix implicit memory aliasing (gosec) c3fa5b2e57 integration/plugin/logging: adjust file permissions in test (gosec) 9fc2b45fa5 fix vendor of github.com/containerd/containerd 73fae59cef golangci: remove invalid govet config 1188e80cc5 golangci: move gosec exclusions to linters-settings section a0807e7cfe golangci: set go version to prevent fallback to go1.17 semantics 29e5bfb0f0 golangci: fix deprecated run option 7809dc08f1 golangci: remove global ignore for EXC0006 / G103 (gosec) 79e9619412 pkg/archive: ignore G103 (gosec) 88c178328f libnetwork/drivers/bridge: ignore G103 (gosec) 62e137377b integration/image: ignore G103 (gosec) e567b816d2 golangci: sort linters-settings 0940460c2f libnetwork: endpointJoinInfo.UnmarshalJSON: fix shadowed variable (govet) e601e71681 Remove function isLinkable 083d595286 client: TestImageHistory: add minimal test for platform 73fabd5a21 client: TestImageHistory: use fixture for JSON response 5cfd326aa4 client: Client.ImageHistory: don't decorate error twice caf2d5dc7c Change meaning of return from DNSBackend.ResolveName ec3dde7001 Only allocate IPv6 addresses if IPv6 is enabled. fe856b94b5 Configure network endpoints after creating a container 788db583b1 Make buildSandboxOption a function instead of a Daemon method 4c553defce Separate Sandbox/Endpoint construction a715ccaaa3 Unconditionally update NetworkSettings 933fcc9814 Re-remove the SetKey OCI prestart hook 035b8afe04 chore: fix function name 330e717403 fix(systemd): start Docker engine *after* DNS resolution is ready 96039276b6 client: add utilities to encode platforms 816dbbfddc ci: re-enable firewalld jobs 8c3945c761 client: rename vars for consistency 0e72863b9d vendor: update buildkit to v0.17.0 17b76511d5 Fix: Duplicate event on network disconnect #48797 fbb595cb66 Remove libnetwork_test.TestMain 5f39567e56 vendor: github.com/containerd/containerd v1.7.23, hcsshim v0.12.8 741cc494cd builder-next: exporter: emptyImageConfig: use platform directly 9be6e902b5 Restore 27.x path for libnet's Bolt database 2cc21208e6 vendor: update buildkit to v0.17.0-rc2 cb966073ce container create: add warning for volumeDriver together with mounts 93255bd748 vendor: github.com/Microsoft/hcsshim v0.12.7 3dc042b1df vendor: sigs.k8s.io/yaml v1.4.0 2807c0c2d2 Revert "ci: run integration tests with firewalld enabled" db68a019fd c8d/save: Add tests 3cc736e95c chore: fix some function names ba454f573b c8d/inspect: Fix duplicate RepoDigests ae87c1d84c remove deprecated pkg/directory 2054fd99b1 pkg/longpath: remove deprecated Prefix const c1652ab357 volume/service: use local driver as default for anonymous volumes 31880791a4 volumes/mounts: test the actual MountConfig returned 275609eb37 volumes/mounts: test the actual error returned 6b0c4b5216 volumes/mounts: don't set "expected" values for fail cases e141be8752 volumes/mounts: remove backticks from test logs be7d57367b volumes/mounts: remove backticks from errors 0b290094b5 volume/mounts: windowsParser.ConvertTmpfsOptions don't use runtime.GOOS 75e8f57579 internal/safepath: Join(): remove workaround for ECI / Sysbox 4b60c68803 internal/safepath: Join(): log some unhandled errors 5fc5b0574b internal/safepath: kubernetesSafeOpen: explicitly suppress unhandled err 4e5c7eeafc daemon: cdiHandler.getErrors: remove var that shadowed import 0c43bc6891 demon: ImageService.Mount: use structured logs 5c48736863 remove redundant alias for runtime-spec 352b4ff2f1 volume: VolumesService.Create: fix log-level for debug logs 2aaae08ade Cleanup legacy mirror string to registry host b3569ebd5a Add HTTP fallback to all insecure registries 1c34581812 Use daemon config to check for legacy config 8b4cb6f58c Update host resolver to use containerd host config 8e0bf25bc3 container: update confusing GoDoc for Container and State f2a3acc104 vendor: go.opentelemetry.io/contrib/instrumentation/xxx v0.53.0 d9a2ca7b49 vendor: go.opentelemetry.io/otel v1.28.0 070d6c75a7 vendor: google.golang.org/genproto/googleapis/api f6361c86f094 c2029cb257 Update tmLanguage file to cover first escape character 95959f7000 vendor: github.com/prometheus/client_golang v1.20.5 10d57fde44 volume/mounts: fix anonymous volume not being labeled 7d7089247c api/types/filters: GetBoolOrDefault: remove unreachableCode f31188bc4c vendor: github.com/cenkalti/backoff/v4 v4.3.0 c3cab4170b vendor: github.com/go-logr/logr v1.4.2 d2557466c6 vendor: google.golang.org/protobuf v1.34.2 c98c6d4f08 vendor: github.com/Azure/go-ansiterm v0.0.0-20230124172434-306776ec8161 a6d5b48e67 vendor: github.com/opencontainers/runc v1.2.0 bb364cc0f3 inte/t/networking: delete veth ifaces before netns 4ab7644d8d c8d/load: Don't ignore missing platform when requested 533e7d150a From 28.0.0, don't migrate per-endpoint sysctls. b79bba6b68 Remove feature flag "windows-dns-proxy" 88b90ebbd2 vendor: github.com/opencontainers/selinux v1.11.1 5c72a95a30 client: prevent idle connections leaking FDs 0105091745 vendor: github.com/cilium/ebpf v0.16.0 51dd387bc9 vendor: github.com/cyphar/filepath-securejoin v0.3.4 6be2074aef daemon: use OwnCgroupPath in withCgroups d4159a7e73 ci/gha: enable go caching 0acdc37a20 container: remove deprecated ErrNameReserved, ErrNameNotReserved 1dcb7af2cb daemon: remove Daemon.containerRoot, Daemon.newBaseContainer 7c087c3267 Fork buildkit resolver logic to daemon package aba8df74a1 Add TestDirectRoutingOpenPorts c9fdeaf70e Explicitly DROP packets for ports/protos that aren't mapped. 6634fc5136 Allow ICMP in routed mode 6131322c6f daemon: remove deprecated Daemon.IsPaused 692024a18c daemon: remove deprecated Daemon.Exists 3bbb9749f4 c8d/test: Add memoryLabelStore 3f745f2b21 c8d/list: Extract fake service helpers 1bb5f8bb67 update to go1.23.2 a8cd0fc4d4 vendor: go.etcd.io/etcd/server/v3 v3.5.16 5f994c49e8 vendor: go.etcd.io/etcd v3.5.16 ac6e32cb5c daemon: deprecate Daemon.IsPaused d47c31ffdd daemon: deprecate Daemon.Exists d9ae34289a daemon: Daemon.newContainer: explicitly return nil-error 303530c1f5 daemon: Daemon.newContainer: inline Daemon.generateHostname 7faaa3afa8 client: explicitly return zero-type on failures in prune functions 0539b7073e pkg/stringid: optimize GenerateRandomID 7ebe625db7 pkg/archive: move deprecated NewTempArchive, TempArchive to test-utils b313fcb8ff pkg/archive: remove deprecated CanonicalTarNameForPath c837027a9c pkg/stringid: replace TestShortenIdXXX with TestTruncateID table test 83f17b0cbb pkg/stringid: remove deprecated IsShortID, ValidateID 77f97926ad daemon: remove secretsSupported utility c0b86dd068 daemon: remove configsSupported utility 5208e2954c daemon: deprecate Daemon.Register and make it internal d122ea0aea api: GET /images/json: preserve original manifest order 1aba291cd4 Releases container layer on export 66f159dc24 build: log when build is cancelled cca7085464 cmd/dockerd: Add workaround for OTEL meter leak 21b0d5f0c1 vendor: github.com/moby/swarmkit/v2 v2.0.0-20241017191044-e8ecf83ee08e fafdcd1194 dockerd-rootless-setuptool.sh: let --force ignore smoke test errors e7e555f573 distribution: remove formatPlatform utility abed0e1f97 client: ContainerResize, ContainerExecResize: don't overflow width/height ed44a05607 api: backend.ContainerExecResize: pass context and use uint32 for width, height 2b2aa69100 api: exec resize: improve errors for invalid width/height 8553d34593 api: backend.ContainerResize: pass context and use uint32 for width, height d19aa0c590 api: container resize: improve errors for invalid width/height 1dd9d2c780 api/server/httputils: add Uint32Value utility 0548fe251c Enable bridge netfiltering if userland-proxy=false 039e164bf5 api/server/httputils: DecodePlatform: improve test-coverage a8bfa83667 Fix: setup user chains even if there are running containers 1701bce9e0 api/server/middleware: use structured logs for debug-logs 4e840b9e29 volume/service: change some logs to use structured logs bca54a6838 daemon: killWithSignal: use more structured logs 44010e76c2 integration/container: add TestExecResize 944dc4a559 integration/container: TestResize: add more test-cases 3f2e9da010 api/server/router/container: move API adjustments to API 0c595fe781 api/server/router/container: fix inconsistent receiver name 59cf8e8565 Add iptables doc for a gateway-mode=routed network 19328fdd4f Add iptables doc for a --internal network bc84b4b6d9 Add iptables doc for a network with icc=false a8eaeba3f9 Add iptables doc for a network with userland-proxy disabled ac4a95d1d0 Add iptables doc for a user-defined network 20571e453b Generate iptables documentation a602054826 daemon: fix restoring containers with name matching an ID 71977a841c daemon: Daemon.registerName: inline validateID utility 4e567e1622 ci: run integration tests with firewalld enabled 8883db20c5 hack: run firewalld when $DOCKER_FIREWALLD is set 6c6174b371 cmd/docker-proxy: UDP: reply to clients with original daddr a0a0bbae6c Discard ErrDumpInterrupted and return data after maxRetries 3cf90ca73f container: deprecate ErrNameReserved, ErrNameNotReserved 0200c58c4a container: viewDB.ReserveName, view.GetID: return errdefs errors 0603bd9577 container: viewDB.withTxn: don't wrap errors 0d36ab1875 container: TestNames: don't string-match error assertions d9627b6159 docs: api: document w (width) and h (height) query params as required 2a3a7e8ee8 api: document w (width) and h (height) query params as required a051aba82e gha: shorter time limits for smoke, validate 91c448bfb5 gha: use "ubuntu-24.04" instead of "ubuntu-latest" 9a14299540 gha: dco: small tweaks to running the container 3cb98d759d gha: dco: update ALPINE_VERSION to 3.20 7da4ab9a91 README: add some badges cfe0d2a131 gha: build (binary), build (dynbinary): limit to 20 minutes e75f7aca2f gha: dco: limit to 10 minutes 4a2361ea09 pkg/authorization: update link to API documentation 5b149d3faa client: update link to API documentation 0f8f143a27 docs/api: version-history: update documentation links e06245a2a6 client: imageBuildOptionsToQuery: omit "default" networkmode b13cf4fc5f client: imageBuildOptionsToQuery: only send "rm" when disabling 805e2c67e2 builder/builder-next: Builder.Build: use network-mode consts 740798da34 client: imageBuildOptionsToQuery: omit empty values from query c68c9aed8c gha: restrict cross and bin-image to 20 minutes 7fe04c142d vendor: github.com/moby/buildkit v0.17.0-rc1 cd551b936b daemon/containerd: getPushDescriptor: fix formatting of platform in errors c16be54040 daemon/containerd: touch-up errPlatformNotFound error 91f74c2fe0 Disable iptables/ip6tables in two tests to remove conflict 8681b3c2ac images: GetImage: touch-up error message for missing platform d31c241ea5 PushImage: remove misleading error about --platform without containerd 037bac89fc gha: remove stray double empty line 26049febb2 api: Allow for an empty string for Isolation in Swagger specs This adds an empty string as a valid option for the Isolation field when inspecting a container. On non windows systems, this is always empty, so no error should be returned. Fixes #47452 6b7e2783d1 gha: add guardrails timeouts on all jobs 7fa6d3c230 integration/build: remove TestBuildWithSession, and fsutil direct dependency 2e699872bc vendor: google.golang.org/grpc v1.66.2 e007ef71c1 vendor: google.golang.org/protobuf v1.34.1 30b6e58242 vendor: github.com/cespare/xxhash/v2 v2.3.0 4592ce42b6 vendor: golang.org/x/tools v0.25.0 36549fb56e vendor: golang.org/x/mod v0.21.0 cc80652bcd vendor: golang.org/x/net v0.29.0 9d6db83acc vendor: golang.org/x/crypto v0.27.0 6e32888caa vendor: golang.org/x/text v0.18.0 51cf0ed303 vendor: golang.org/x/sys v0.25.0 6b7565ba40 vendor: go.etcd.io/bbolt v1.3.11 02d4fc3234 gha: buildkit: make sure expected Go version is installed d7ff538467 Fix iptables rule descriptions 77e51657fe cmd/docker-proxy: re-add SO_REUSEADDR 38f0483ea7 Set NODAD on bridge IPv6 addresses 58f4e916a3 build: create distinct history db for each store 367125e0cc Use `pools.Copy` for archive file copy operations 2f02f456f5 Fix comments fd0d008504 vendor: github.com/vishvananda/netlink v1.3.1-0.20240922070040-084abd93d350 7ca9e9b496 libnet/d/bridge: port mapping: proxy LL connections 49ab30ea2c Fix vendoring for moby/docker-image-spec 7eb508e14c api: postImagesLoad: fix API version for platform 5875b6e8cf inte/networking: test access to published ports from remote host 2552782c1d inte/networking: test accessing a published port from the host 98efe665a5 Log rather than error if port mapping is overspecified 339592f59b Pass context to the port mapping code ca4c68ab95 update to go1.22.8 c866a7e5f8 daemon/exec: don't overwrite exit code if set 4babd72186 tests: skip docker-py exec exit code test e6488c9c0e runconfig: validateNetContainerMode: simplify validation 5bdbc2f026 client: ContainerCreate: normalize CapAdd, CapDrop capabilities be248d18b5 client.ContainerCreate: use container.CreateRequest instead of local type 98d74e3a3c Update download-frozen-image-v2.sh added OCI v1 support 91df504bf1 inte/networking: move port mapping tests into a dedicated file 6a1d8a9899 daemon: add IPv6 loopback as insecure registry 7624a6bfa5 Dockerfile: update compose to v2.29.7 233dce3dba Dockerfile: update docker CLI to v27.3.1 edcefd4efb libnet/i/kv/boltdb: fail fast in case of contention ed08486ec7 libnet/ds: simplify datastore.New() 3ca91a6a12 libnetwork: unit tests: drop OptionBoltdbWithRandomDBFile 450200b4a6 gha: add CodeQL Analysis workflow 32b9e7b8b9 libnet/i/kv/boltdb: remove unused field 'timeout' 4f1d739de5 gha: govulncheck: make sure read permissions are set 8c598b1005 cmd/dockerd: runDaemon: extract platform-agnostic code 5228850225 cmd/dockerd: windows: don't use Fatal log to prevent early exit 0aebbd0ba9 cmd/dockerd: use golang.org/x/sys/windows/service param-change consts b186261b84 cmd/dockerd: un-export DaemonCli, NewDaemonCli 6f83fda310 cmd/dockerd: construct context in main 52694ebe16 cmd/dockerd: windows: move setting PIDFile location to setPlatformOptions 44a3bba2a2 cmd/dockerd: apply options when creating daemonCLI, not when starting 5c1b037ff5 cmd/dockerd: rename loadCLIPlatformConfig to setPlatformOptions 1388d959bc cmd/dockerd: set default configfile location as part of newDaemonOptions 19a8e7ff7e cmd/dockerd: getDefaultDaemonConfigFile: add GoDoc for Windows implementation 388c0a8cda cmd/dockerd: remove unused error-returns 1624ae197e cmd/dockerd: move Windows code for data-root 333cfa6402 Fix merge problem db25b0dcd0 Only enable bridge netfiltering when needed 605f51172a Dockerfile: update compose to v2.29.4 3d4831a23f Dockerfile: update buildx to v0.17.1 45a9dde660 man: dockerd: add description for --log-format option c4aaa97f02 man: remove docs for deprecated --api-cors-header c2fc1f4a40 internal/opts: SetOpts: invalidate empty option-names 908bb959e7 internal/opts: SetOpts.Set: remove redundant var assignment 758cca6036 internal/opts: SetOpts,NamedSetOpts: test for optional value 50e83a0713 man: dockerd: value is optional for --feature flag f9c0103413 Do not DNAT packets from WSL2's loopback0 2b6550bb2e man: fix duplicate word in --feature flag description edaa0eb56d Add linting rules to spot use of un-wrapped netlink functions. 00bf437d84 Add nlutil functions to retry on netlink EINTR 8b0e94ffaf Update dlv in the dev-env 3dd96ce3c4 Fix enableIPv4 for old networks fa06acc851 man: update dockerd man-page to include --feature flag ff191c58f7 api: info: deprecate "Commit.Expected" fields f13c08246d Add feature to daemon flags fefa98ae90 c8d/prune: Keep deletion order stable 521fa833fe images: Support platform selection on graphdrivers f143f4ec51 image/save&load: Support `Platform` parameter ab075ecd10 image/history: Support `Platform` parameter 5128007116 Explicitly disable nvidia device injection for --gpus=0 adb00d3d55 TestIPRangeAt64BitLimit: remove colon after XFAIL to help grepping 23e79a261e c8d/prune: Add OTEL spans e4c2eb9d8a c8d/prune: Keep the last tagged image instead of creating dangling image 962da27cdf Dockerfile: update compose to v2.29.2 2b43979395 API: bump version to 1.48 e5e8addeee Dockerfile: update buildx to 0.17.0 d291722110 Dockerfile: update docker CLI to v27.2.1 c095dbe512 project: update 23.0 EOL and add 25.0 LTM branch 43036f350a Dockerfile: update RootlessKit to v2.3.1 c98aad0518 vendor.mod: github.com/rootless-containers/rootlesskit/v2 v2.3.1 829aa845bb integration/system: rename vars to prevent shadowing imports 71e449de0a vendor: update buildkit to v0.16.0 7263cd226f image/tarexport: saveSession.save: inline variables 2e4079ff31 image/tarexport: saveSession.save: remove redundant Platform ab5c5df1d5 image/tarexport: rename variables that shadowed imports 5fd3cd2d77 layer: layerStore.deleteLayer(): remove redundant error-check f5cc04284d remove deprecated image/spec package 92195c1333 Dockerfile: update containerd binary to v1.7.22 b4a3e8a307 vendor: github.com/containerd/containerd v1.7.22 6f37e5a168 vendor: update buildkit to v0.16.0-rc2 1161b790cf seccomp: add riscv64 mapping to seccomp_linux.go 16d686c7bc internal/unix_noeintr: fix godoc for package 47d5ce0ef8 gha/bin-image: Also run on branches like `27.x` 09fc6ab2d9 docs/api: update deprecation version for erroneous fields (v1.46, v1.47) 3df03d8e66 api/swagger: update deprecation version for erroneous fields aca38a4218 docs: api: fix documentation for image push endpoint (API v1.25-v1.47) 07e31e393a api: swagger: fix documentation for image push endpoint fb6da4f4b7 daemon/logger/loggerutils: add //go:build directives to prevent downgrading to go1.16 5403e3f4de libnetwork/networkdb: add //go:build directives to prevent downgrading to go1.16 928e5aa524 container/stream: Config.CloseStreams(): use errors.Join 59eba0ae13 Fix typos a2e14dd8bd update to go1.22.7 5ebc179cb1 test: update since session signature has changed f4261dbb75 vendor: update buildkit to v0.16.0-rc1 b5ec31f090 vendor: github.com/opencontainers/runc v1.1.14 2189aa2426 update runc binary to 1.1.14 4e0d1dfc17 docs/api: add documentation for API v1.47 d000f12fcc hack/make/.binary: enable pie mode on windows/arm64 28dc2f6fac Increase test handler sleep, replace deprecated assert c7f8557310 c8d/pull: Same error message for non-matching platform f5108e9c6b golangci-lint: temporarily disable G115: integer overflow conversion 9b11bb507b update golangci-lint to v1.60.2 3df59c9dcf update to go1.22.6 4cd5c2b643 hack/make/.binary: set CGO_LDFLAGS=-latomic for arm/v5 e853c093bf hack/make/.binary: set CCGO_CFLAGS=-Wno-atomic-alignment for arm/v5 bb899c654a api/types: move RequestPrivilegeFunc to api/types/registry 88b118688e man: create parent directories in install recipe 9bbe5a50dd Dockerfile: update registry to v3.0.0-beta.1 f4e82e2fb0 c8d/list: Don't exclude non-container images d6446d81d8 vendor.mod: golang.org/x/net v0.28.0, etc. 65fdd363a0 vendor.mod: golang.org/x/time v0.6.0 4bfdfd6f72 vendor.mod: golang.org/x/sys v0.24.0 78d0ef5e87 vendor.mod: golang.org/x/sync v0.8.0 492fe40052 vendor.mod: golang.org/x/mod v0.20.0 d7ff6b5085 vendor.mod: drop direct dependency on golang.org/x/exp 8e580efb73 portallocator: un-export PortAllocator.Begin, PortAllocator.End fb1ae4bdb7 portallocator: RequestPortsInRange: validate range once 05d784d6da portallocator: make newPortMap a regular constructor c00f6281d9 portallocator: RequestPort: skip RequestPortInRange as intermediate 78d88d06dc portallocator: use net.IPv4zero for defaultIP, and make it a property 630a47177b portallocator: use new instance in tests 1897a21d60 portallocator: ReleaseAll: remove unused error-return 2a2176f317 portallocator: RequestPortInRange: fix doc-link in godoc a88efd7359 vendor: github.com/containerd/containerd v1.7.21 de4fc1c927 Dockerfile: update containerd binary to v1.7.21 (static binaries and CI only) 1ad5b5abb2 daemon: fix non-constant format string in call (govet) 005b488506 api/types: fix non-constant format string in call (govet) 0fd3a53c12 api/server/router: fix non-constant format string in call (govet) 4a93233b88 container/stream: fix non-constant format string in call (govet) 068c1bf3be libnetwork/drivers/bridge: fix non-constant format string in call (govet) f434cdd14a volume/testutils: fix non-constant format string in call (govet) 81a1ca0217 builder/dockerfile: parseChownFlag: fix non-constant format string in call (govet) b56c58a860 layer: ignore G602: slice index out of range (gosec) c308bd3e0e internal/cleanups: fix non-constant format string in call (govet) 7b60a7047d libnetwork/cnmallocator: fix non-constant format string in call (govet) 06bfe8bab3 cmd/dockerd: fix non-constant format string in call (govet) 6008c42ca2 libnetwork: fix non-constant format string in call (govet) b79a4696ee integration-cli: fix non-constant format string in call (govet) 6bbacbec26 integration-cli: DockerSwarmSuite: rm redundant Fprintf, handle errors 3ca38f0b5e integration-cli: DockerNetworkSuite: rm redundant Fprintf, handle errors 2b7a687554 integration-cli: use erors.New() instead of fmt.Errorf c7b36f8953 libnetwork: TestDNSOptions: remove redundant skip check 6bd7835cb6 integration-cli: remove redundant platform checks 0afe684685 c8d/pull: Replace pointer to interface with interface db40a6132b c8d/pull: Keep the replaced image as dangling 6ebe6a7353 c8d/load: Only unpack host platform images 728894b7d0 c8d/load: Don't fail whole operation if unpack failed 0db71bb629 vendor: dario.cat/mergo v1.0.1 2c498c6a74 vendor: github.com/vishvananda/netlink v1.3.0 6d0a5e31d7 vendor: github.com/vishvananda/netlink v1.2.1 55f693e7b7 integration/TestAPIImagesListManifests: Check `Containers` 29a2f6d339 c8d/list: Update benchmark to also have containers a5d75f6d27 c8d/list: Fix race condition when traversing containers 2f0180934d vendor: tags.cncf.io/container-device-interface v0.8.0 fe307b5dab libnetwork: resolvconf: remove dependency on errdefs afdfc04e10 libnetwork: resolvconf: remove var that shadowed import 6d94122217 logger/journald: plumb contexts into reader 9b6ba18fc9 logfile: Close reader when caller cancels c4ba1f4718 Dockerfile: update xx to v1.5.0 abcb9e972b libcontainerd/supervisor: set log-level through the config-file edfde78355 man: support bringing your own go-md2man 05d7008419 man: build dockerd man pages using make 1804f0c911 integration/container: rename var that collided with import 62bcc6ef50 libcontainerd/supervisor: consolidate platform-specific defaults f49fad75eb vendor.mod: github.com/microsoft/hcsshim v0.12.5 b93cf37dcd c8d/list: Don't require `opts.ContainerCount` for manifest containers cd148d39d9 feat(stream): log the event when stream copy failed c459986399 vendor: update buildkit to v0.15.2 6bb6befc37 c8d: Rename readConfig to readJSON 495fab8e66 c8d/list: Add test for total and content size 469c2ef3ec c8d/list: Fix `Total` size calculation e77e543b58 api/types/registry: fix godoc, and add some doc-links 218c08b283 plugin: fix deprecation comments 771377f9fa Test ipvlan IPv6-only 390713607f Allow ipvlan containers with no address b95f8e7799 Fix some ipvlan error types for the API 660e8118a4 Allow no-IPv4 on an ipvlan network 8427de3bac Test macvlan IPv6-only d599cc5842 Allow macvlan containers with no address f57e0dc2ff Fix some macvlan error types for the API a7a5de676d Allow no-IPv4 on a macvlan network 496b457ad8 Allow --ip-range ending on a 64-bit boundary 9c6d30481d remove leftovers for building docker-proxy on Windows 3cd28504de govulncheck to report known vulnerabilities a308f12ed8 add Austin Vazquez (austinvazquez) to curators 7b0ef10a9a migrate to github.com/moby/sys/userns 8411ecb5e3 Makefile: Add BIND_GIT variable 050afe1e1a api/list: Expose manifests f8b638b98f c8d/list: Use ReadConfig helper 85e9102dc9 api: Bump default version to 1.47 efb3c50799 swagger: Disable ImageSummary model generation b24c2e95e5 update to go1.21.13 925b484a40 No fallback nameservers for internal resolver d29767431c Use host netns for host's ext-dns servers 344039b9ae Populate DNS records for IPv6-only endpoints b4cee5c3ee Removed all mentions of "please" from docs and messages f1ec84314d docs: add default-network-opt daemon option 23812190c3 docs: remove devicemapper 690d166632 man/dockerd.8: assorted formatting fixes 374b779dd1 man/dockerd.8: escape asterisks and underscores 386d0c0fbc docs: update dockerd usage output for new proxy-options 54971ac807 Fix styling of arguments a8b8f9b288 Fix the max-concurrent-downloads and max-concurrent-uploads configs documentation 68e9223289 docs: remove documentation about deprecated cluster-store 6c702167bf Document `--validate` daemon option af45195a21 Update man-page source MarkDown to work with go-md2man v2 562a6d2b13 docs: update for cgroup v2 and rootless 7cf2132655 docker run: specify cgroup namespace mode with --cgroupns 1cbcd5d47a daemon: document --max-download-attempts option 3cfa74724c Update document links and title. 462f38bd8b Allow user to specify default address pools for docker networks This is separate commit for CLI files to address PR 36054 13ff896b38 Update docs and completion-scripts for deprecated features f3c3b05b50 Added docs for dockerd 20f8455562 fix a number of minor typos c23d4b017a Introduce/document new IPC modes 25baee8ab9 docs: add documentation for dm.libdm_log_level 7d3f09a9c3 Restore dockerd man page ea914a66a2 Use retErr in Network.ipamAllocate cdea750966 Tell RootlessKit about port mappings when --userland-proxy=false b3fabedecc Create docker-proxy TCP/UDP listener sockets in the daemon dac7ffa340 Remove rootlesskit-docker-proxy f1e0746c08 Tell RootlessKit about docker-proxy port mappings 384ca56d90 Fix error type used for ProgramExternalConnectivity 7a8663c9ea cmd/docker-proxy: drop FrontendAddr() method 88fb0c9fec cmd/docker-proxy: drop unused BackendAddr() method ba2f3c0a98 cmd/docker-proxy: pass open listener to proxy impl e0c7a839a8 Only build docker-proxy for Linux ee766ae7b1 c8d: Wrap matchRequestedOrDefault result with a platform 842c5c584e c8d/image: Add `matchRequestedOrDefault` 6617cdc66b daemon/c8d: Fill wanted platform in GetImageManifest 427b111943 c8d/history: Unmarshal only a subset of ImageConfig b9d04c07c4 c8d: Simplify `presentImages` into `getBestPresentImageManifest` 23d565cae3 c8d: Improve error message for platform not found e73c2a05b2 daemon/c8d: Simplify `presentImages` signature af84ddec13 vendor: github.com/containerd/nydus-snapshotter v0.14.0 1e5c0c4d77 vendor: github.com/containerd/nydus-snapshotter v0.13.14 dfe36fa226 touch-up security policy 3b1341972b Only assign an IPv4 address if required 15e5f6868a Don't auto-allocate IPv4 IPAM if !enableIPv4 c0a6145f6d Enable IPv4 in the unit tests that will need it. b42f4b96aa Check for an IPv6 gateway before connecting to docker_gwbridge 034a5a8986 Reject swarm n/w creation with IPv4 disabled. c91dc7e6dc Reject Windows network creation with IPv4 disabled. a86a9e3aa4 API 1.46: end per-interface sysctl migration in major release 17adc1478b Migrate per-endpoint sysctls until 28.0.0 d44f869a2d vendor: google.golang.org/grpc v1.62.0 716ec490db vendor: golang.org/x/time v0.5.0 ac145a82fd api/types: NewHijackedResponse: fix typo in GoDoc 80822715cd plugin: fix typos in GoDoc 1f542d5d6c Set EnableIPv4 for predefined networks 903daa4dc4 Add flag 'enableIPv4' to libnetwork.Network d4d8611164 Added API create/inspect option EnableIPv4 c7dec1c67a docs/api: swagger: fix x-nullable for SystemInfo.Containerd (api v1.46) 66b5b8bfa8 api/swagger: fix x-nullable for SystemInfo.Containerd 3279b4f8f4 hack/make: suppress "not mounted" message a23dcf4798 Bump API version to 1.47 403f9dbc42 project: update supported release branches 96762a28c7 libcontainerd/supervisor: remove remnants of adjusting oom-score 2a71815b83 daemon: remove unused import 2b5ffa0b63 gha: set permissions to read-only by default 7a92f21445 daemon: isPermissibleC8dRuntimeName: use local utility to reduce c8d deps 2847c4b7fe libnetwork/networkdb: switch to go-immutable-radix v2 fca57ac32f Split Linux/bridge and Windows/nat integration tests ef8e2fe282 Use retErr in Endpoint.sbJoin 58808e7748 Remove code to update Network.enableIPv6 if false 8f1989556a Trivial tidy-up of Endpoint.assignAddress() 6fe26e0629 Add IPv6 to the null IPAM driver dcf922e266 daemon: openContainerFS: log cleanup errors aa60f7891b daemon: openContainerFS: rename output var 3539fef440 daemon: setupMounts: rename var that shadowed import a19c2ccc7b daemon: rename "mounts" type to reduce shadowing 39c79e08e4 daemon: move sortMounts to a platform-agnostic file cdbfae1d3e api/server/router/grpc: NewRouter: set correct MaxRecvMsgSize, MaxSendMsgSize cd11843df8 images: Extract ImageInspect from GetImage 1baf8f9e60 vendor: update buildkit to v0.15.1 2ce811e632 migrate to github.com/moby/sys/user/userns 91dfc326cf vendor: github.com/moby/sys/user v0.2.0 1e2ccf8046 vendor: github.com/gofrs/flock v0.12.1 077b32ac4e vendor: golang.org/x/sys v0.22.0 4c97ff777d Clean up networks in 'integration/network' tests e2237240f5 dockerd-rootless-setuptool.sh: move RootlessKit smoke test a3efa3026b contrib/check-config.sh: remove special case for userns on CentOS/RHEL 7 6d0b508699 daemon: remove setMayDetachMounts (set may_detach_mounts=1 on startup) ae96ce866f remove support for setting CORS headers (deprecated) dbf6873f45 Logfile: Add tracing spans 1b46faf233 Logfile: skip files that are corrupted 77f2d90e27 Refactor logfile reads b37c8a03c0 Fix time comparison in sharedtemp implementation 21fd5a3f30 vendor: github.com/moby/sys/sequential v0.6.0 e0b98a3222 gha: check-pr-branch: fix branch check regression fbbda057ac update containerd binary to v1.7.20 f460110ef5 gha: check-pr-branch: verify major version only 6a6b49f2de vendor: github.com/moby/sys/symlink v0.3.0 68636d56fc vendor: github.com/moby/sys/signal v0.7.1 44b266ab59 vendor: github.com/moby/sys/mount v0.3.4 dc4a12874e vendor: github.com/moby/sys/mountinfo v0.7.2 55a5f3fcaa vendor: github.com/containerd/containerd v1.7.20 a42f7fd717 Dockerfile: update compose to v2.29.0 97b51c6b72 Dockerfile: update buildx to v0.16.1 b37c983d31 README: replace obsolete Docker EE mention 508939821b daemon/containerd: rm use of regexp b66d4b567a image/v1: rm regexp use 1c0dc8a94f layer: rm regexp use 499c842c52 hack: explicitly control enabling the journald logging driver 5282cb25d0 If url includes scheme, urlPath will drop hostname, which would not match the auth check 2ac8a479c5 Authz plugin security fixes for 0-length content and path validation Signed-off-by: Jameson Hyde <jameson.hyde@docker.com> 0fa71a4cfc vendor: cloud.google.com/go/logging v1.9.0 eafad2cb86 vendor: golang.org/x/oauth2 v0.21.0 9b782b8ff7 vendor: cloud.google.com/go/compute/metadata v0.3.0 68bd630830 vendor: update buildkit to v0.15.0 f649fd0c97 Fix API version in TestSetInterfaceSysctl 7f04a603f6 docs/api: Add missing ` 89781912c1 vendor: update buildkit to v0.15.0-rc2 8be292a7bb By-default, don't create an iptables rule to checksum SCTP 1787c364e0 vendor: update buildkit to v0.15.0-rc1 688301caf4 daemon/graphdriver: remove Capabilities, CapabilityDriver 185b1e3d69 Add lint rule to forbid old-style atomic ops 5e64a7a003 volume/service: switch to Go 1.19 atomics 1c102140f8 libnetwork: switch to Go 1.19 atomics 46133bdb8e libnetwork/diagnostic: drop unsound use of atomics 5044778433 distribution: switch to Go 1.19 atomics 2ab618696a daemon/images: switch to Go 1.19 atomics 30d740ada0 daemon/logger/ring: switch to Go 1.19 atomics 7ef0c7acbe d/logger/loggerutils: switch to Go 1.19 atomics e612990994 daemon/logger/journald: switch to Go 1.19 atomics 78893cdc05 daemon/logger/gcplogs: switch to Go 1.19 atomics 508f51044d daemon/containerd: switch to Go 1.19 atomics 71a299ff6a daemon: switch to Go 1.19 atomics 206445fa4f rootless: add `Requires=dbus.socket` 4776e6dd60 Remove IPv6 bridge RouteAdd() that always fails 066b7fa83c vendor: golang.org/x/net v0.25.0 7721408db7 vendor: golang.org/x/crypto v0.23.0 f43436e6b8 vendor: golang.org/x/text v0.15.0 342ce515ab vendor: golang.org/x/sys v0.21.0 2e58a29023 vendor: github.com/klauspost/compress v1.17.9 fb18966aa5 api/types/container: InspectResponse: keep old name for embedded type 837289ba62 update to go1.21.12 [part 2] 4d1d7c3ebe update to go1.21.12 398e15b7de update containerd binary to v1.7.19 d0aa3eaccf Migrate to github.com/containerd/platforms module 8983957ac5 vendor: github.com/containerd/containerd v1.7.19 73979f3f04 daemon/logger/journald: add //nolint:unused for readSyncTimeout ef356c53ba api/types: remove deprecated ContainerNode, ContainerJSONBase.Node 5b9ed8081b api/types: remove deprecated ImageLoadResponse d3defe9140 api/types: remove deprecated ImageImportSource 6cdb123b6f api/types: remove deprecated ImageSearchOptions 67b7b15674 api/types: remove deprecated EventsOptions 3cbc166d2e api/types: remove deprecated container stats types ec5cede0a2 api/types: remove deprecated ContainerStats 4ffe497ba4 api/types: remove deprecated CopyToContainerOptions 345e31ab96 api/types: remove deprecated ContainerPathStat 2bceb34717 api/types: remove deprecated ContainersPruneReport 0e64c9e93b api/types: remove deprecated ContainerExecInspect 6f0caec226 api/types: remove deprecated ExecStartCheck 13fbd394ee api/types: remove deprecated ExecConfig 665eef54db api/types: remove deprecated NetworksPruneReport d2256faa0e api/types: remove deprecated NetworkResource ffdd2de674 api/types: remove deprecated EndpointResource f0f2b8f7cb api/types: remove deprecated NetworkDisconnect cf9d9ff50d api/types: remove deprecated NetworkConnect 39c7b5f3e3 api/types: remove deprecated NetworkInspectOptions 64583771f0 api/types: remove deprecated NetworkCreateResponse c99e0bc8ae api/types: remove deprecated NetworkListOptions 48f147e8d3 api/types: remove deprecated NetworkCreate ff1f1c58d5 api/types: remove deprecated NetworkCreateRequest 4117a9308d api/types: remove deprecated VolumesPruneReport e0156f0f16 api/types: remove deprecated ImagesPruneReport 1abc8f6158 api/types: move container-inspect types to api/types/container 05b0e653dd api/types: move Container to api/types/container 84ffc644ef api/types: move ContainerState to api/types/image 7053007f71 api/types: move ImageInspect and RootFS to api/types/image da039ca918 api/types: move GraphDriverData to api/types/storage e12b7493b9 api/types: move Port to api/types/container 5517322cf9 api/types: move MountPoint to api/types/container c130ce1f5d api/types: move container Health types to api/types/container df22a511cb api/types: move container-networksettings types to api/types/container 53bc396ef4 c8d/build: Log `image tag` event when image was built with Buildkit 1506bbcfe8 builder-next: Add ImageNamedByBuildkit callback bce76d486e builder-next: Don't return error from exported callback e4d792a06d api/types/system: remove Info.ExecutionDriver 0f3273e71a daemon/graphdriver: move RefCounter to an internal package efdaca2792 pkg/rootless/specconv: move to internal b7d26f2f8f pkg/dmesg: remove deprecated package 3a3bb1cb50 pkg/directory: deprecate, and move to internal 80900bdbcd pkg/directory: fix comment, and remove import comments e55897977c daemon/graphdriver: simplify Checker, remove NewFsChecker, NewDefaultChecker 554db8f113 daemon/internal/fstype: make FsMagic values not platform-dependent 49f6e004f1 daemon/graphdriver: move FsMagic utilities to an internal package 09f62a8a61 runconfig/opts: remove deprecated ConvertKVStringsToMap 4a30231d05 runconfig: remove deprecated IsPreDefinedNetwork ed712ad0b9 runconfig: remove deprecated DefaultDaemonNetworkMode 13984ef185 runconfig: remove deprecated SetDefaultNetModeIfBlank 6e2b6399d7 runconfig: remove deprecated ContainerConfigWrapper d80a3f2e48 pkg/capabilities move to daemon/internal 625c795785 errdefs: FromStatusCode(): use early returns 81be279c6b daemon/logger, volume/drivers: remove redundant import-aliases f2970e5358 pkg/containerfs: move to internal a3e6ce95c4 pkg/containerfs: cleanup GoDoc, and make Windows a proper wrapper e2ae6907c6 pkg/containerfs: remove CleanScopedPath and make it internal fa150ca759 cleanup: Remove unnecessary return value a2fe103f0d vendor: github.com/microsoft/hcsshim v0.11.7 dfbcddb9f5 Fix incorrect validation of port mapping 4de54ee14c Fix duplicate subnet allocations 6521057bb2 daemon/graphdriver/overlay2: set TarOptions.InUserNS for native differ 969993a729 pkg/archive: createTarFile: consistently use the same value for userns 379ce56cd8 pkg/archive: handleTarTypeBlockCharFifo: don't discard EPERM errors af85e47343 pkg/archive: getWhiteoutConverter: don't error with userns enabled 080a8e1b6b libcontainerd: gofumpt 56fa45773f pkg/plugins: gofumpt 0e2d40c24a pkg/archive: gofumpt 84e43da752 libnetwork: gofumpt bb1b766ddb layer: gofumpt 07469b4509 internal: gofumpt 8e50a96a78 integration: gofumpt c3ac7fee26 integration-cli: gofumpt e765dd90ee daemon: gofumpt 181101c4a8 daemon/containerd: gofumpt 46b0102da4 daemon/config: gofumpt 4a89963f1e builder: gofumpt 8768145519 api/types: gofumpt 92346bcec6 api/server: gofumpt 6ada1cff02 fix some gofmt issues reported by goreportcard 84cabde357 daemon/graphdriver: deprecate GetDriver(), and remove its use b7896056c1 daemon/graphdriver: New(): update GoDoc 25d12b54d3 daemon/graphdriver: combine GetDriver and getBuiltinDriver 3928165cf7 Dockerfile: update docker CLI to v27.0.2 555dac5e14 daemon/graphdriver: remove support for external graphdriver plugins bc4991e443 layer: rename vars that shadowed imports 0ed172b700 daemon/graphdriver: rename vars that shadowed imports bbced07f96 builder/builder-next: applySourcePolicies: remove redundant check and vars 790035f754 Dockerfile: update compose to v2.28.1 95fae036ae update golangci-lint to v1.59.1 d4160d5aa7 pkg/archive: reformat code to make #nosec comment work again 04bf0e3d69 builder/remotecontext: reformat code to make #nosec comment work again 1fc9236119 api/types: deprecate ContainerJSONBase.Node, ContainerNode ca396dfaaa awslogs: Prevent close from being blocked on log 9893520c62 libnetwork: Mark flaky tests d0d8d5d97d hack/unit: Rerun failed flaky libnetwork tests a52aab8598 project,vendor.mod: document more clearly that we are not a Go module 1e28299f77 project: document currently known packagers f502f49e49 project: document modern branch and tag practices Bumping docker-cli to version v28.0.1, which comprises the following commits: d75f8d83d Add detailed descriptions for --ulimit options in docker run documentation 75595836f vendor: github.com/go-jose/go-jose/v4 v4.0.5 4e7497e9c Update dockerd command line ref, default bridge opts be669099c Update dockerd command line ref, changes in 28.0 427c1361c gha: add docker 28 to test matrix aad2ae50e docs: network ls add heading and anchor for "--no-trunc" 8a1b096e7 docs: fix missing anchors in swarm reference pages c99d3312e docs: fix broken anchor-link in "container restart" reference 0cff34098 cmd/docker: do not print error status on exec/run 8f5573857 completion: add completion for docker service flags 768d10767 completion: add completion for docker node flags d5e6e2ec6 completion: add completion for node names 7e71782ba cli/command/context: fix error-handling of skip-tls-verify 762d59359 completion: use service names, and support DOCKER_COMPLETION_SHOW_SERVICE_IDS 33f327a98 vendor: github.com/docker/docker v28.0.0-dev (af898abe4466) f977b923c Fix missing link from Configure node healthcheck heading f53cee5dd vendor: github.com/docker/docker v28.0.0-rc.3 fe349e6a6 vendor: github.com/docker/docker 00ab386b5a2e (master, v28.0.0-rc.3) 136901961 vendor: github.com/docker/docker v28.0.0-rc.2 a8affefee golangci-lint: replace deprecated `tenv` linter in favor of `usetesting` 1c8243cc9 golangci-lint: fix invalid nakedret config, disallow for any func length a5020ea16 cli/command/container: don't use naked returns (nakedret) e569b9f74 cli/internal/oauth: don't use naked returns (nakedret) 3e9fa43ef cli/command/trust: fix "usetesting" linting errors aca0bd775 cli/command/trust: fix "usetesting" linting errors b2f3c1249 Dockerfile: update golangci-lint to v1.64.5 2b169c1ab golangci-lint: enable revive "line-length-limit" linter a67c65657 golangci-lint: enable revive "unused-receiver" rule 71c40dfa7 golangci-lint: sort revive rules a35b899df cmd/docker: fix "unused-receiver" linting 1a4491f8c cli/command/stack: fix "unused-receiver" linting 994e1b7ca cli/command/service: fix "unused-receiver" linting 5ef673bb1 cli/command/system: fix "unused-receiver" linting e71380eb5 cli/command/container: fix "unused-receiver" linting 4827fdef9 cli/command/trust: fix "unused-receiver" linting 3e44cc4d0 cli/command/image: fix "unused-receiver", "line-length-limit" linting e2f28fac4 cli/command/registry: fix "unused-receiver" linting a54d356a7 cli/command/swarm: fix "unused-receiver" linting 25e6b2da0 cli/command/formatter: fix "unused-receiver" linting 450768c31 cli-plugins/manager: fix "unused-receiver" linting e5f3cc14c internal/test: fix "unused-receiver" linting 1b3718f45 cli/command: fix "unused-receiver" linting d27f6a61a cli/registry: fix "unused-receiver" linting 72b32c69c internal/test/notary: fix "unused-receiver" linting ba3f4fb41 cli/internal/oauth/manager: fix "unused-receiver" linting f0f19c6d4 cli/trust: fix "unused-receiver" linting c8bd0a7e5 cli/manifest: fix "unused-receiver" linting 20b4ab366 cli/compose: fix "unused-receiver" linting 1e7add9f4 cli/internal/oauth/api: fix "unused-receiver" linting 9b62e5740 cli/config/configfile: fix "unused-receiver" linting f79193c22 opts: fix "unused-receiver", line-length-limit linting d0c3380ce cli/connhelper/commandconn: fix "unused-receiver" linting fdc665820 cli/config/credentials: fix "unused-receiver" linting 88b2e78e0 internal/tui: fix "unused-receiver" linting 20c15cee9 cli/compose/loader: shorten skip-comment to please the linters cac88ca34 cli/command: wrap some long lines (revive) eef4127de cli/internal/oauth/manager: ignore line-length-limit d8e76bc33 cli: define const for magic value 9fda9134a cli/command/service/progress: define const for magic value 3825d3792 cli/command: define some consts for repeated values 2f65cf7d1 cli/command: fix some unused-receiver linting a368e3eb5 cmd/docker: fix unused-receiver (revive) add32e4b5 cli/compose: Handle Volume Subpath 4cc2dce80 cli/compose: Fix Image Subpath e868f0f58 cli/command/container/opts_test: Fix entrypoint parsing logic c2ba77de4 vendor: github.com/docker/docker 57d4d23825f4 (master, v28.0.0-rc.2) 1d3eb6f95 vendor: github.com/docker/docker 5cc3f1dab895 (master, v28.0.0-rc.2) 591fcb273 vendor: golang.org/x/sys v0.29.0 1edc4e07d gha: Mirror PR template and validate PR workflow from moby a656dfd40 Restrict completion for some commands with a limit paramter for ImageNames 04b1b4e08 Add image mount options c6a7f9a64 vendor: github.com/docker/docker b570831cc3a3 (master, v28.0.0-rc.2) 018bf1b23 vendor: google.golang.org/grpc v1.69.4 558ebd592 vendor: github.com/spf13/pflag v1.0.6, remove local IPNetSliceVar fork 2c17edf80 cli/connhelper/commandcon.New: pass context with WithoutCancel 61a3b4bd5 Remove preceding white space from cobra help template 1acf32cdc Dockerfile: dev-container: update buildx v0.20.1 bb74513ef Dockerfile.dev: bump github.com/josephspurrier/goversioninfo to v1.4.1 7b3f264a6 Dockerfile.dev: bump mvdan.cc/gofumpt to v0.7.0 aecc31039 Dockerfile: bump gotest.tools/gotestsum v1.12.0 e1a9d1cd3 Dockerfile: update golangci-lint to v1.63.4 df8c19d8f vendor: gotest.tools/v3 v3.5.2 3c0d703ac vendor: github.com/docker/docker/v28.0.0-rc.1 2815d2337 add //go:build directives to prevent downgrading to go1.16 language 01da8a582 vendor: github.com/docker/docker 6c3797923dcb (master, v28.0-dev) 76e0088b5 minor cleanup 85a77af59 Don't print "context canceled" if user terminated 7e83ff773 bump version to v28.0.0-dev 6d7afd48a login: improve text on already authenticated and on OAuth login 1d9d349c1 update to go1.23.6 81da375c4 cli/command/service: runScale: use errors.Join, and cleanup 09b513ecf cli/command/service: runRollback: remove intermediate vars aa96cb7aa cli/command/volume: use errors.Join be985bd28 cli/command/stack/swarm: use errors.Join f1193effc cli/command/service: use errors.Join f9e433556 cli/command/secret: use errors.Join 2a9fd4a93 cli/command/node: use errors.Join f8729c6da cli/command/manifest: use errors.Join 1fd9d0dd3 cli/command/manifest: pass manifest-store and handle context f431f6156 cli/command/inspect: use errors.Join 7147e85f6 cli/command/image: use errors.Join 2b9a4d5f4 cli/command/context: use errors.Join 150f27b68 cli/command/container: use errors.Join 791e06b43 cli/command/config: RunConfigRemove: use errors.Join 632f179e8 cli/command/image: minor cleanups e81d76ffe cli/command/container: minor cleanups deaa60118 cli/command/config: minor cleanups c950d48f7 image/tree: Chips to represent "in use" c51be7776 cmd/docker: add cause to user-terminated `context.Context` 8169a5142 jsonstream: Display: rename var that shadowed type a4288003b service/progress: ServiceProgress: avoid fuzzy matching service ID in loop e88b1939f service/progress: newReplicatedJobProgressUpdater: slight cleanup dea59eabb cli/command/stack/swarm: waitOnServices remove redundant check for multi-error 37b25f226 cli/command/plugins: runRemove: fix incorrect use of errors.Join 007e88ec3 TestCheckpointCreateWithOptions check both "keep-running=true/false" 31b819828 cli/command/volume: TestVolumeCreateClusterOpts: minor fixes and refactor 5b8c08d19 cli/command/volume: TestVolumeCreateCluster: minor fixes and refactor a8265e72b cli/command/volume: TestVolumeCreateWithFlags: minor fixes 8b5e5539e cli/command/volume: TestVolumeCreateWithName: minor fixes and improvements 2e266001c cli/command/volume: TestVolumeCreateErrors: assert unhandled errors 987da0957 cli/command/volume: remove example and var for long description 13ef82974 cli/flags: suppress some errors dc5a4501a cli/command: minor cleanups: use Println, suppress errors cd6d902df cli/command/inspect: remove additional newline from log 10f5b3f73 cli/command/volumes: minor cleanups: use Println, rename vars 299aae041 cli/command/trust: minor cleanups: use Println, rename vars 5cfc89c1c cli/command/system: minor cleanups: use Println, rename vars 8c5e85d4c cli/command/swarm: minor cleanups: use Println, rename vars 925b8fe34 cli/command/stack: minor cleanups: use Println, rename vars aa74f931d cli/command/service: minor cleanups: use Println, rename vars 016dbef44 cli/command/registry: minor cleanups: use Println, rename vars 53aed6119 cli/command/plugin: minor cleanups: use Println, rename vars 35e74d58e cli/command/node: minor cleanups: use Println, rename vars 886f2295c cli/command/network: minor cleanups: use Println, rename vars 5d3bdf8ac cli/command/manifest: minor cleanups: use Println, rename vars c8f27b027 cli/command/image: minor cleanups: use Println, rename vars a0ca41e6f cli/command/formatter: suppress some errors 82e2efbbf cli/command/context: minor cleanups c462eaee1 cli/command/container: minor cleanups: use Println 8650ffef3 cli/command/checkpoint: minor cleanups: use Println, rename vars b10b79e6f cli-plugins: minor cleanups: use Println 2e26ce145 e2e/testutils: remove uses of pkg/errors in tests 4de5e9212 internal/test: remove uses of pkg/errors in tests c55b39a2e cli/config/credentials: remove uses of pkg/errors in tests 832f5fa2c cli/compose/convert: remove uses of pkg/errors in tests 45d81f849 cli/command: remove uses of pkg/errors in tests a85a94f46 cli/command/system: remove uses of pkg/errors in tests 694d24800 cli/command/swarm: remove uses of pkg/errors in tests 8b09ee1e1 cli/command/stack: remove uses of pkg/errors in tests ec5ae0c2d cli/command/secret: remove uses of pkg/errors in tests c50068f7e cli/command/plugin: remove uses of pkg/errors in tests 2b02e05f9 cli/command/node: remove uses of pkg/errors in tests 38f61539e cli/command/network: remove uses of pkg/errors in tests d6c26471d cli/command/manifest: remove uses of pkg/errors in tests f29fdd309 cli/command/image: remove uses of pkg/errors in tests d30c894af cli/command/idresolver: remove uses of pkg/errors in tests 5a99ea9ad cli/command/container: remove uses of pkg/errors in tests 0d913efe8 cli/command/config: remove uses of pkg/errors in tests 957be84a3 cli/command/checkpoint: remove uses of pkg/errors in tests 10aca7dd5 cli/command/volume: remove uses of pkg/errors in tests a87cb974f remove dockerd man-page (moved back to moby repository) 6ab9b92aa Makefile: add "shell-completion" target 0760e8513 Dockerfile: update to alpine 3.21 2c35778a6 Allow '--link' with '--network bridge' 1546f023f Dockerfile: update compose to v2.32.4 7b0724270 Dockerfile: update buildx to v0.20.0 91adb70d6 pkg/command: wrap `jsonmessage.DisplayJSONMessagesStream` with go context 81b0bb58b gha: Adjust release branches 3c0691146 update to go1.23.5 (fix CVE-2024-45341, CVE-2024-45336) 26010e4c3 image/tree: Print longest names first and use full width f906139fc cli/tree: Use single character triple dot 4c2fece0c cmd/docker: enable cobra completion descriptions 48dbdc6f2 fix(dockerfiles): Update CMD instruction in 'Dockerfile.dev' to use exec form instead of shell form 58bf0f184 switch to gopkg.in/yaml.v3 9abd0ebdf cli/command: update semconv to 1.26.0 2f42b3272 vendor: otel v0.56.0 / v1.31.0 3d9b86116 vendor: github.com/mattn/go-runewidth v0.0.16 aa540679e vendor: github.com/containerd/platforms v1.0.0-rc.1 d3ca99585 vendor: github.com/creack/pty v1.1.24 b412f7199 vendor: google.golang.org/grpc v1.68.1, google.golang.org/genproto 324edc3d5d38 7244f7d42 update cli-docs-tool to v0.9.0 6f3ba987b vendor: github.com/docker/cli-docs-tool v0.9.0 97a14c456 update go-md2man to v2.0.5 acbdad955 completion: replace fluentd-async-connect with fluentd-async 3da5f5893 docs: mark logger opt 'fluentd-async-connect' as removed 0df55307c vendor: github.com/docker/docker 69687190936d (master, v28.0-dev) cc571902b ci: update bake-action to v6 987befaea gha/build: Publish bin image for release branches 216674c3e vendor: github.com/docker/docker 50212d215ba7 (master, v28.0-dev) bf2dae22d cli/command/plugin: runCreate: minor cleanup a289f11ac vendor: github.com/moby/swarmkit/v2 v2.0.0-20250103191802-8c1959736554 7e8f94903 docs, man: remove --allow-nondistributable-artifacts flag 760326694 contrib/completion: remove --allow-nondistributable-artifacts flag 2334df110 Deprecate configuration for pushing non-distributable artifacts 2fc32c707 vendor: github.com/moby/term v0.5.2 e1a0c377b vendor: github.com/Azure/go-ansiterm faa5f7b0171c f42c0ccd0 contrib/completion: remove deprecated --api-cors-header 2db88599f contrib/completion: remove --oom-score-adj daemon flag eb5c507cd docs: dockerd: --oom-score-adj flag 7b37f30da Use io.copy for build context compression 7b7a4c020 docs, man: remove confusing example for "--isolation" 25f02bc04 vendor: github.com/docker/docker 6f6c3b921180 (master, v28.0.0-dev) 8c0cb3051 Fix cp test to separate source and destination c8c47b1dd golangci-lint: depguard: prevent uses of pkg/system 76ec0ea2e vendor: github.com/docker/docker a72026acbbdf (master, v28.0.0-dev) a8f83d5d9 TestRunCopyFromContainerToFilesystem: use Tar without options 0c04dc05b golangci-lint: sync some depguard settings with moby/moby cc65127cb vendor: github.com/docker/docker ad6929339acd (master, v28.0.0-dev) 6f47bce41 vendor: golang.org/x/net v0.33.0 83156e662 vendor: golang.org/x/net v0.32.0 450f6b995 vendor: golang.org/x/crypto v0.31.0 b74302eb5 vendor: golang.org/x/text v0.21.0 cb2e35286 vendor: golang.org/x/sync v0.10.0 e56b665d8 vendor: golang.org/x/sys v0.28.0 1eda49878 cli/command/container: use local copy of pkg/system.IsAbs ffe0354c2 cli/command/system: remove BridgeNfIptables, BridgeNfIp6tables in tests 73ff81b65 cli/command/system: TestEventsFormat: set cmd.Args to prevent test-failures 55e404e7a cli/command/system: remove netfilter warnings from tests eaa8b5716 update go-md2man to v2.0.5 b8fd20517 Makefile: use go1.22 semantics for gofumpt 6a2cde6c7 Add option '--ipv4' 5c896c95d Docs: emphasise that some options that are for docker0 a5353e55d Docs: include --fixed-cidr-v6 and --bip6 docker0 options 1e51ae7af update xx to v1.6.1 for compatibility with alpine 3.21 b39f48287 update golangci-lint to v1.62.2 2a5ac8f5a vendor: github.com/docker/docker b249c5ebd214 (master, v28.0.0-dev) afab76501 registry/client: remove uses of APIEndpoint.TrimHostName 7dab597e6 tests: cleanup comment 30c4637f0 run: don't hang if only attaching STDIN 2eb77f4ed vendor: github.com/docker/docker 5d72419486fe (master, v28.0.0-dev) b51a71148 cli/command/system: don't use "non-distributable-artifacts" fields in tests f50dea6c4 vendor: google.golang.org/protobuf v1.35.2 9399483f7 vendor: golang.org/x/net v0.31.0 6751bcc97 vendor: golang.org/x/crypto v0.29.0 d41ab7703 vendor: golang.org/x/term v0.26.0 5972025fa vendor: golang.org/x/text v0.20.0 feb1e2a34 vendor: golang.org/x/sync v0.9.0 4c27c895f vendor: golang.org/x/sys v0.27.0 a1e57ac72 update to go1.23.4 e398d16c0 cli/command/registry: return status only instead of whole response 297afb2a2 cli/command/registry: TestLoginWithCredStoreCreds slight refactor 575e37366 cli/command/registry: rename some vars that collided with imports d4db289eb run, create, connect: add support for gw-priority cf89afb32 cli/command/registry: storeCredentials: accept configfile as arg b5a00d0b0 cli/command/registry: loginWithRegistry: use shallower interface 13f0d4641 cli/command/registry: don't return creds on error a3d9fc494 run: cleanup – remove `errCh` nil check 446f36ce5 run: cleanup – move "detached" early exit earlier 843129882 run: cleanup – use `attached` where applicable aee9eebf3 run: return error code when only STDIN attached ed9fcf31e cli/trust: GetNotaryRepository: remove uses of RepositoryInfo.Class c629eca89 Put --help before --host in the dockerd manpage ea84e8f94 Add --host-gateway to the dockerd manpage cf88ab074 Docs: host-gateway-ip daemon option IPv4+IPv6 ae54c9d97 Add --bip6 to the dockerd manpage 1911dedcf Add --ip-filter-forward-drop 0f058041c docs: fix janky rendering of toc on docs.docker.com fcd94feef cli-plugins: Simplify addPluginCandidatesFromDir 6de3d71ab cli-plugins: Fix searching inaccessible directories 30a73ff19 fix: ctx should cancel image pull on run 1d4a7ae08 tests: cleanup table test names 4a219b1a4 chore: update commit guidelines in CONTRIBUTING.md d41b80faf vendor: github.com/docker/docker e5c2b5e10d68 (master, v28.0.0-dev) 11fbc9993 vendor: github.com/tonistiigi/go-rosetta v0.0.0-20220804170347-3f4430f2d346 b0c0cd5e3 build(deps): bump codecov/codecov-action from 4 to 5 f6599300f vendor: github.com/go-viper/mapstructure/v2 v2.2.1 446d4138e vendor: github.com/moby/sys/capability v0.4.0 07e5ddd05 update golangci-lint to v1.62.0 93a931920 Dockerfile: bump github.com/josephspurrier/goversioninfo to v1.4.1 cb2f95cee Optimise `docker stats` to not require clearing the whole screen d1d535326 cli/command/container: fix missing go:build tag 3dd762124 Dockerfile: update compose to v2.30.3 4242cda82 Dockerfile: update buildx to v0.18.0 7c80e4f93 update go:build tags to use go1.22 06260e68f Handle null completions with a default callback 4525fe37b Add completion for `--volume-driver` db0ed1e21 Add completion for `--cgroupns` 291574927 Add completion for `--uts` 3a2503fa4 Add completion for --log-driver` and --log-opt` 9a9ae231a Add completion for `--security-opt` 5f7c43e5e Add completion for `--detach-keys` 3292afe6e Add completion for `--userns` 5d709a8d9 Add completion for `--ulimit` 2d89339b3 Add completion for `--storage-opt` ac7bde6f6 Add completion for `--pid` e51345424 Add completion for `--link` c555327f0 Add completion for `--ipc` b598ec8cd Add completion for `--attach` 761d76750 Share the container completions 382d4c34a update to go1.23.3 1440f9f8c docs: change link to desktop docs fafaac59f Add --bip6 to dockerd cmdline ref 13754f677 deps: update `go-jose/go-jose` to `v4` 172f34011 docs: update example redis tags from 3.0.x to 7.4.x 4a7b04d41 golangci-lint: set go version to prevent fallback to go1.17 d77760fe5 cli-plugins/manager: remove redundant capturing of loop vars (copyloopvar) 32b40deb4 cli/command/service: remove redundant capturing of loop vars (copyloopvar) 40833fd29 cli/compose/loader: remove redundant capturing of loop vars (copyloopvar) 78a7e1503 cli/command/container: remove redundant capturing of loop vars (copyloopvar) 4a71ce02e cli/command/image: remove redundant capturing of loop vars (copyloopvar) 7d9ea2556 templates: remove redundant capturing of loop vars in tests (copyloopvar) 046ac9714 service: remove redundant capturing of loop vars in tests (copyloopvar) 762b5a8df opts: remove redundant capturing of loop vars in tests (copyloopvar) 417974cdc cmd/docker: remove redundant capturing of loop vars in tests (copyloopvar) bf37e26b3 cli/manifest: remove redundant capturing of loop vars in tests (copyloopvar) 6489a777e e2e: remove redundant capturing of loop vars in tests (copyloopvar) 20de86113 cli/config: remove redundant capturing of loop vars in tests (copyloopvar) 1448cecba cli/compose: remove redundant capturing of loop vars in tests (copyloopvar) 67458f710 cli/command: remove redundant capturing of loop vars in tests (copyloopvar) 0c999fe95 docs: Correct `run` exit code 126 description 5f1311ae8 vendor: github.com/docker/docker 6ac445c42bad (master, v28.0-dev) 10c5a5792 vendor: go.opentelemetry.io/contrib/instrumentation/xxx v0.53.0 5e40d288c vendor: go.opentelemetry.io/otel v1.28.0 9ba73a1a0 vendor: github.com/grpc-ecosystem/grpc-gateway/v2 v2.20.0 f3cf1b421 vendor: go.etcd.io/etcd/raft/v3 v3.5.16 cae19e392 vendor: github.com/AdaLogics/go-fuzz-headers v0.0.0-20240806141605-e8a1dd7889d6 074d1028b vendor: update prometheus dependencies 1dbcce205 vendor: google.golang.org/grpc v1.67.1 1bba00994 vendor: google.golang.org/protobuf v1.35.1 e3942d46a vendor: github.com/klauspost/compress v1.17.11 97ff1b7c0 vendor: github.com/go-logr/logr v1.4.2 4c85feb4d vendor: github.com/cenkalti/backoff/v4 v4.3.0 3b48a57b0 vendor: github.com/Azure/go-ansiterm v0.0.0-20230124172434-306776ec8161 36e6c4297 vendor: golang.org/x/net v0.30.0 84bfa52a6 vendor: golang.org/x/crypto v0.28.0 7a94f592e vendor: golang.org/x/text v0.19.0 ef197f731 vendor: golang.org/x/term v0.25.0 02b92c699 vendor: golang.org/x/sys v0.26.0 42cda3884 update to go1.23.2 0b16070ae Buffer 'docker stats' text to avoid terminal flickering 9af049c61 bump golangci-lint to v1.61.0 745629bd5 golangci-lint: update comment, and disable "exclude-dirs-use-default" 7451339ab golangci-lint: move gosec excludes to linters-settings 020f3a7ad golangci-lint: enable G204, add #nosec comments instead e1c5180db Add tests for completions that call the API d4f4cf141 Add completion for `events --filter` 59b90305f cli/command/container: parse: remove client-side warning e9ae9f788 docker inspect: add support for swarm configs 3c7806924 cli/config/credentials: add test for save being idempotent 0dd6f7f1b cil/config/credentials: remove newStore() test-utility 5f4b14950 cli: remove deprecated Errors type d96f8b7f9 cli/config: improve error when failing to parse config file d3f6867e4 cli/config/credentials: skip saving config-file if credentials didn't change 6b9083776 cli/command: AddPlatformFlag: suppress unhandled error fb61156b0 cli/command/registry: fix minor linting issues 3f7b156c8 Fix bash completion for `events --filter daemon=` 4b7a1e461 cli/command: PromptUserForCredentials: suppress unhandled errors 378a3d7d3 cli/command: PromptUserForCredentials: use consts for all hints 54e3685bc cli/command: ConfigureAuth: fix deprecation comment 3d8b49523 cli/command: PromptUserForCredentials: print error on terminal restore fail a21a5f424 cli/command: PromptUserForCredentials: always trim password eda78e9cd cli/command: PromptUserForCredentials: move trimming where it's used 581cf36bd cli/command: PromptUserForCredentials: move "post" check for empty name a55cfe5f8 cli/command: PromptUserForCredentials: inline isDefaultRegistry 3a8485085 cli/command: PromptUserForCredentials: remove named output variables d3bafa5f3 cli: deprecate Errors type 71ebbb81a cli/command/plugins: use errors.Join instead of custom cli.Errors 87acf77ae cli/hints: add tests 9b525bc9d vendor: github.com/docker/docker 36a3bd090489 (master, v28.0-dev) 670f81803 cmd/docker: add tests for flag-completions, and refactor 12dcc6e25 templates: add test for HeaderFunctions cbbb91732 vendor: github.com/moby/swarmkit/v2 v2.0.0-20241017191044-e8ecf83ee08e 2c6b80491 docs: update prose about image tag/name format 50ef0c58c docs: corrected the max events returned 35d7b1a7a cli/command/container: TestWaitExitOrRemoved use subtests 3b38dc67b cli/command/container: set empty args in tests and discard output e1c472a43 completion: add test for VolumeNames 302d73f99 completion: add test for NetworkNames ab418a38d completion: add test for ImageNames f3b4094eb completion: add test for ContainerNames be197da6b completion: add test for NoComplete 51713196c completion: add test for FromList a5ca5b33f completion: add test for FileNames 8f2e5662e completion: add test for EnvVarNames b8cddc63a completion: ContainerNames: don't panic on nil filter a58faf797 README: update pkg.go.dev badge, add OpenSSF scorecard b6d27ff60 vendor: google.golang.org/grpc v1.66.2 200225f53 vendor: google.golang.org/protobuf v1.34.1 9599251d0 vendor: github.com/cespare/xxhash/v2 v2.3.0 ea8aa2a41 vendor: golang.org/x/net v0.29.0 61867feec vendor: golang.org/x/crypto v0.27.0 843ae6d7e vendor: golang.org/x/term v0.24.0 bea4ee658 vendor: golang.org/x/text v0.18.0 a88ee33f7 vendor: golang.org/x/sys v0.25.0 147630a30 Only complete removable containers if --force is not given d085e2445 image/history: Add `--platform` flag b0bb4ba7f image/load: Add `--platform` a20eb45b2 image/save: Add `--platform` 0319795d4 cli/compose: implement the ports validation method 839dbbcf2 cli/command/images: set cmd.Args to prevent test-failures 19eeb1015 cli/command/image: fix TestNewSaveCommandSuccess to actually test d42cf96e1 cli/command/image: add shell completion for --platform flags 8c7f713db cli/command/container: add shell completion for --platform flags ce1aebcc3 cli/command/completion: add Platforms 2f2b16a96 docs: fix inaccurate description of --restart=unless-stopped c70b2165a docs: Link supported Go duration strings 442c38636 command: add tests for container kill, commit, and pause a6ab65948 ci: update to go1.22.8 9ecfe4f5a move parsing key-value files to a separate package 76196dbb0 opts: parseKeyValueFile: cleanup and remove redundant trimming 95e221ef4 opts: remove ErrBadKey as it's not used as a sentinel error b129660dd opts: cleanup ParseEnvFile tests d49e72c0a cli/command/container: add unit tests for completion helpers 462e08219 cli/container: use github.com/moby/sys/capability for completions bd96bdaf1 align "conflicting options" errors for consistency df8b34595 cli/command/container: stop, restart: rename "--time" to "--timeout" 607530348 docs/reference: stop, restart: add flag descriptions 8fca0a1f2 Check that --ip-range is a CIDR address ac502b590 cli/command/container: add unit tests for container stop 16aa99425 cli/command/container: add unit tests for container restart 54a20ce54 docs: fix a typo in run.md b12ac897f vendor: github.com/docker/docker 164cae56ed95 (master, v-next) df52ddcfc Images Tree: Change 'Used' to 'In Use' 17040890e Do not underline image name 46b360b05 command: add tests for container diff and rename 465e87afc docs: fix anchor link to web-based login section 8a3d838a1 docs: use important callout for buildkit vs legacy builder 3e271461e cli/formatter: fix unbracketed IPv6 addrs 91c90a979 Update `VERSION` file to `v27.3.1-dev` ce26ebc0e Dockerfile: update compose to v2.29.7 1355d7e9f telemetry: fix early meterprovider shutdown f46860616 gha: codeql: minor touch-ups and fixes 3472bbc28 command: change drive to lowercase for wsl path e1213edcc gha: update codeql workflow to go1.22.7 b1956f507 telemetry: pass otel errors to the otel handler for shutdown and force flush f7a513cff Dockerfile: update compose to v2.29.4 42ce06aa5 Dockerfile: update buildx to v0.17.1 baceb4b15 docs: dockerd: add documentation for --log-format option a42ca1148 docs/reference: dockerd: add docs for --feature option 9ae514fdc man: dockerd: add description for --log-format option 1a0e32099 docs: dockerd: remove --api-cors-header (deprecated) 9bfd0e1a4 man: remove docs for deprecated --api-cors-header a357db0ab man: dockerd: value is optional for --feature flag fb056d2ce man: fix duplicate word in --feature flag description 610f9157f man: update dockerd man-page to include --feature flag 605c9bf16 docs: Fix --rm=false flag in container_run.md dccb8bfa5 vendor: google.golang.org/grpc v1.62.0 8cdf90cd9 vendor: tags.cncf.io/container-device-interface v0.8.0 a5f15bee7 vendor: golang.org/x/net v0.28.0 b93fc3963 vendor: golang.org/x/crypto v0.26.0 3a63df265 vendor: golang.org/x/text v0.17.0 c6e534193 vendor: golang.org/x/term v0.23.0 5f9fe33b6 vendor: golang.org/x/time v0.6.0 7074e5011 vendor: golang.org/x/sync v0.8.0 958fff82f vendor: golang.org/x/sys v0.24.0 fb264ffc0 vendor: dario.cat/mergo v1.0.1 38c3fef1a command: check for wsl mount path on windows 5b81f0dcb chore: remove duplicated `govet` linter config 88ca4e958 info: stop printing "Expected" commits daea277ee volume/update: require 1 argument/fix panic 0fcaffb7e chore: fix style/lint issues in deprecated.md 45d55961d Fix broken links in CONTRIBUTING.md 0b9d58245 cli/command: fix docstring for ContainerFormat.CreatedAt 4a6ab2b37 fix: binary file line endings 3bf39d25a update to go1.22.7 1b8180a40 vendor.mod: put github.com/pkg/browser in the right group 5ca40e0a3 docs: add front matter title to deprecated.md 071f6f939 docs: rename plugins index file and add linkTitle bbb6e7643 login: handle non-tty scenario consistently 60d045028 oauth/api: drain timer channel on each iteration d7d56599c update to go1.22.6 9e2996796 scripts/build/plugins: don't override CGO_ENABLED set by .variables 81744d7aa copynit: s/WEB BASED/WEB-BASED/ 2f206fff3 docs: update docker login reference 1e6cbbc3f Dockerfile: update xx to v1.5.0 e532eead9 login: use normalized hostname when storing dab9674db Revert "login: normalize `registry-1.docker.io`" c4a55df7c cli: rename args that collided with builtins (predeclard) 9c8789127 e2e/global: fix n-constant format string in call (govet) f101f07a7 cli/command: fix n-constant format string in call (govet) cc1d7b7ac cli/command/system: remove redundant nil-check (gosimple) 964155cd2 cli/formatter: bracket IPv6 addrs prepended to ports a327476f7 login: add e2e tests for oauth + escape hatch c974a8339 chore: update link to docker engine api reference 846ecf59f login: add oauth escape hatch 7b9164794 list/tree: No extra spacing for graphdriver 351249dce list/tree: Print <untagged> as dangling image name 6979ab073 list/tree: Fix some escape codes included in nonTTY a9b78da54 list/tree: Add spacing before the content and first image 0242a1e3c list/tree: Capitalize column headers d417d0668 list/tree: Add an experimental warning b1a08f784 list/tree: Sort by created date 18ab78882 list/tree: Align number right, text left ea8aafcd9 cli/tree: Add `Content size` column be11b74ee image/list: Add `--tree` flag f1befabe9 docs: use gh alert syntax for callouts c3fe7bc33 fallback to regular login if oauth login fails to start 5eb3275c2 filestore: don't print warning multiple times e6624676e login: normalize `registry-1.docker.io` 6e4818e7d Refactor `cli/command/registry` fcfdd7b91 auth: add support for oauth device-code login 2dd4eb06a docs: update link to moved build context doc 0fd3fb084 cli/connhelper: getConnectionHelper: move ssh-option funcs out of closure f3c2c26b1 disable pseudoterminal creation d4a362aa1 docs: update internal links after refactor 78a8fba2c docs: fix link to http proxy document 6440816c7 vendor: github.com/docker/docker 2269acc7a31d (master, v-next) b8a53ee34 vendor: github.com/docker/docker master (f3cf9359bdf6) 9c4480604 plugins: don't panic on Close if PluginServer nil 434d8b75e update to go1.21.13 73e78a582 run: fix GetList return empty issue for throttledevice e29292f92 add security policy 40a5b297b vendor: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.21.0 e4d99b4b6 gha: set permissions to read-only by default eac83574c tests/run: fix flaky `RunAttachTermination` test 7b46bfc5a attach: wait for exit code from `ContainerWait` f0a29af0f vendor: docker/docker 2b1097f08088 (removes containerd dependency) b34e8e4df vendor: github.com/moby/sys/sequential v0.6.0 ea37ac9ba vendor: github.com/moby/sys/symlink v0.3.0 435c65833 vendor: github.com/moby/sys/signal v0.7.1 501904d48 vendor: golang.org/x/sys v0.22.0 cc4163296 lint: replace deprecated linter names 66aa0f672 attach: don't return context cancelled error 4a7388f0d tests: fix other flaky `connhelper` tests cc68c66c9 tests: fix flaxy `TestCloseRunningCommand` test b36522b47 docs: refresh image versions in examples aa2c2cd90 Allow for OomScoreAdj 401048b9c vendor: github.com/containerd/containerd v1.7.20 6638deb9d add support for DOCKER_CUSTOM_HEADERS env-var (experimental) 9617e8d0c gha: update to macOS 13, add macOS 14 arm64 (Apple Silicon M1) 6d8fcbb23 gha: check-pr-branch: verify major version only 77c0d8360 Dockerfile: update compose to v2.29.0 d00e1abf5 Dockerfile: update buildx to v0.16.1 ab80ea355 cli/config/credentials: move warning to fileStore fcefe44bd login: slightly cleanup warning about unencrypted store a78ab6380 login: don't print "unencrypted" warning when failing to save credentials 90058df30 cli/command/container: remove reportError, and put StatusError to use 64a3fb82d docs: fix typos and version for cli-docs-tool scripts e3e9b9901 vendor: github.com/docker/cli-docs-tool v0.8.0 f28fc7f82 cli: FlagErrorFunc: don't print long usage output for invalid flags b1c0ddca0 cli/command/container: add completion for --stop-signal d6f78cdbb cli/command/container: add completion for --volumes-from 7fe7223c2 cli/command/container: add completion for --restart f30158dbf cli/command/container: add completion for --cap-add, --cap-drop e4dd8b189 cli/context/store: Names(): fix panic when called with nil-interface 42b68a3ed cmd/docker: fix completion for --context 162d9748b cli/command/container: provide flag-completion for "docker create" 5e7bcbeac cli/command/completion: add FromList utility e3427f341 cli/command/completion: add EnvVarNames utility 9207ff104 cli/command/completion: add FileNames utility eed0e5b02 cli/command/container: NewRunCommand: slight cleanup of completion e8baee9c7 vendor: github.com/docker/docker aae044039ca4 (master, v-next) a77ba7eda vendor: google.golang.org/genproto/googleapis/api 49dd2c1f3d0b caa5d15e9 vendor: github.com/prometheus/procfs v0.15.1 0f712827f vendor: github.com/containerd/containerd v1.7.19 b28a1cd02 vendor: golang.org/x/sync v0.7.0 991b1303d chore: restore ctx without cancel on container run 6c04adc05 push: Improve note message and colors 0579cd797 test: e2e SIGTERM attached container on `docker run` d40199440 c8d: Remove `docker convert` mention 4ce6e50e2 push: Don't default to DOCKER_DEFAULT_PLATFORM 3f3ecb94c Makefile: add completion target 150fb55a8 fix: container stream should not be terminated by ctx 3d80b7b0a Dockerfile.dev: install bash-completion in dev container eae75092a cmd/docker: split handling exit-code to a separate utility b7695d6c7 cli-plugins: RunPlugin(): rename error-variable that's possibly shadowed 350a0b68a cli-plugins: Run(): don't discard cli.StatusError errors without message 3dd6fc365 cmd/docker: don't discard cli.StatusError errors without custom message 2f83064ec e2e/cli-plugins: check for exit-errors in tests baf35da40 e2e/cli-plugins: use cmd.CombinedOutput() instead of custom buffer c6b40640c e2e/cli-plugins: use identifiable output for test e9f32edac e2e/cli-plugins: explicitly ignore fmt.Printxx errors 5e7948ec8 e2e/cli-plugins: rename var that shadowed import c60b360c3 cli: improve argument validation output a6e96c758 cli: improve output and consistency for unknown (sub)commands bca209006 cli: make cli.StatusError slightly prettier 88896eeaa cli/command/container: TestSplitCpArg: cleaner skip b194274be replace uses of deprecated API types 4cac8efb5 vendor: github.com/docker/docker 508cc7c61226 (master) dc22572e3 chore: regenerate docs 8549d250f docs: update cli-docs-tool (v0.8.0) 3d4c12af7 docs: update links to docker cli reference bf33c8f10 docs: regenerate base command b0650f281 docs: align heading structure for base command cfea2353b docs: remove frontmatter for base command 03961449a docs: rename cli.md to docker.md (base command) a68382338 docs: remove empty docker base command reference a0c4e56de vendor: golang.org/x/net v0.25.0 723130d7f vendor: golang.org/x/crypto v0.23.0 d33ef57dc vendor: golang.org/x/text v0.15.0 21dbedd41 vendor: golang.org/x/sys v0.21.0 f8e7c0a0d vendor: github.com/klauspost/compress v1.17.9 10a015f87 cli/command/network: NewPruneCommand: explicitly ignore error b3d8809f4 cli/command/network: rewrite consolidateIpam to take an option-struct ab230240a test spring-cleaning c7d46aa7a Enable completion for 'image' sub commands 2eb61318b cli/command/network: some cleanup and pass smaller interfaces b711372ca cli/command/container: TestNewAttachCommandErrors: use struct-literals 229616e17 cli/command/image: fakeClient.ImagesPrune: fix unhandled err-return 42ba29395 rename vars to prevent colliding with imports 3a77fdd91 cli/command/trust: unconvert 26223f701 cli/command/formatter: don't use unkeyed structs c56f4a1ef workflow: remove git `autocrlf=false` setup on windows d73d7d4ed update to go1.21.12 e91f0ded9 docs: make buildx build the canonical reference doc c15ade0c6 fix: ctx cancellation on login prompt 2bd4e95bf feat: force lf line endings by default be14edca2 cli/command/stack: fix faulty sort for sorting stacks 0f6370c94 vendor: github.com/fvbommel/sortorder v1.1.0 2e6aaf05d vendor: github.com/docker/docker v27.0.3 9455d6176 vendor: github.com/docker/docker v27.0.2 1382fbe61 vendor: github.com/docker/docker v27.0.2-dev (e953d76450b6) ab0898ee3 vendor: github.com/docker/docker v27.0.2-dev (861fde8cc974) cfec21f28 vendor: github.com/docker/docker v27.0.1 8b0a7b025 cli/config/credentials: ConvertToHostname: handle IP-addresses 238048160 re-introduced support for port numbers in docker registry URL 60775b615 gha/e2e: Update latest version to 27.0 b5d1b4de1 update golangci-lint to v1.59.1 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2025-03-06 17:17:59 +00:00
Paolo Barbolini	fc423a7cb8	docker: switch libnetwork to moby version ... Some time ago libnetwork was moved from it's own repository to moby. This patch updates the docker recipe to use the new location Signed-off-by: Paolo Barbolini <paolo.barbolini@m4ss.net> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2025-01-30 18:52:31 +00:00
Bruce Ashfield	fb973818ad	docker: update to v27.5.0-rc.2 ... Bumping moby to version v27.5.0-rc.2, which comprises the following commits: a167bc5c9a libnetwork/drivers/windows: fix error-matching for hcsshim "not found" bdd3a95a13 pkg/fileutils: deprecate GetTotalUsedFds 5f81af6eaa libnetwork/drivers/bridge: format errors with '%v' for consistency 0f45f60e9e libnetwork/drivers/windows: fix non-constant format string 17e8cb2b06 distribution: fix non-constant format string 60f9e333b6 daemon: adjust tests for changes in go1.24 JSON errors 95b2f2ed49 Restore labels when re-creating Windows networks 623af65208 Use the roundtripper during build 771d1dc44e docs/api: allow for an empty string for Isolation (api v1.25-v1.47) 68b39f825d docs: Update example section for SwarmJoinRequest 4767dbd713 api: Allow for an empty string for Isolation in Swagger specs This adds an empty string as a valid option for the Isolation field when inspecting a container. On non windows systems, this is always empty, so no error should be returned. Fixes #47452 4359c8b08e vendor: update buildkit to v0.18.2 bbd14fc508 vendor: update buildkit to v0.18.1 fd86c39cc3 vendor: update buildkit to v0.18.0 1fd14d845f vendor: update buildkit to v0.18.0-rc2 68b0c87e05 vendor: github.com/moby/buildkit 94d0f6ed85e5 (master / v0.18.0-rc.2) 74600d8425 vendor: update buildkit to v0.18.0-rc1 4830f6db66 builder: fall back to defaultKeepStorage if keepStorage is unset for GC policy 0e43d1f642 vendor: github.com/containerd/containerd v1.7.23, hcsshim v0.12.8 800d735171 vendor: github.com/Microsoft/hcsshim v0.12.7 a57c1848b6 vendor: sigs.k8s.io/yaml v1.4.0 26eeb6e414 vendor: github.com/Azure/go-ansiterm v0.0.0-20230124172434-306776ec8161 f6f7c9f231 vendor.mod: github.com/microsoft/hcsshim v0.12.5 bdecc9d58e pkg/reexec: deprecate and migrate to github.com/moby/sys/reexec 46a8e5f8c5 pkg/reexec: Command: separate public API from implementation d175e4f1f1 pkg/reexec: make platform-agnostic (again) ed5c0a79e7 pkg/reexec: use const for name of test binary 4bf113f9bd all: Remove redundant `units` alias for `go-units` 7a512a9531 vendor: go.opentelemetry.io/contrib/instrumentation/xxx v0.53.0 cf4e196e77 vendor: go.opentelemetry.io/otel v1.28.0 2a3cc83f36 vendor: google.golang.org/genproto/googleapis/api f6361c86f094 4141379d07 Discard ErrDumpInterrupted and return data after maxRetries 4c50153e2e Fix comments c5e72db8e8 vendor: github.com/vishvananda/netlink v1.3.1-0.20240922070040-084abd93d350 14b30aeb61 Add linting rules to spot use of un-wrapped netlink functions. 87fc62a648 Fix merge problem 3ca9a3be70 Add nlutil functions to retry on netlink EINTR 4729e446ce vendor: github.com/vishvananda/netlink v1.3.0 cbe4488a6b vendor: github.com/vishvananda/netlink v1.2.1 eda0a20deb libnetwork/iptables: deprecate Passthrough b51622dd0d libnet/iptables: deprecate type IPV 08de719cf2 libnetwork/drivers/bridge: setupIPChains: fix defer checking wrong err 6855ca1e62 integration-cli: don't skip AppArmor tests on SLES 224b30556d docs/api: document correct case for Api-Version header 5b92b3e7e0 Accurately reflect the canonical casing of `API-Version` and `OS-Type` headers 1df9e896f2 pkg/system: deprecate types and functions that are only used internally 3a1e495a0f daemon: info: remove bridge-nf-call-iptables / ip6tables warnings 4082abad8b Dockerfile: update runc binary to v1.2.3 a379aae924 man: vendor: github.com/cpuguy83/go-md2man v2.0.5 c3968c6ab7 update xx to v1.6.1 for compatibility with alpine 3.21 2e6ca227cf otel: Use non-noop tracer provider for grpc a5f86f9279 integration/build_traces: Create own tracer provider 3a05c5dcad otel: Avoid excessive memory allocations if not configured adb8773adb Jenkins: don't modprobe kernel module ff176d42d5 Don't try to modprobe ip6_tables in the moby dev container 86126b9af1 Try to load kernel module ip6_tables, when necessary. 58318d26fc Use ioctl to try to trigger kernel module loads 4775621ab6 Dockerd rootless: make {/etc,/var/run}/cdi available 0e34b3956b update to go1.22.10 7919b806e7 [27.x] vendor: github.com/moby/buildkit v0.17.3 525b929947 registry: deprecate RepositoryInfo.Class d6d43b2912 c8d/tag: Don't log a warning if the source image is not dangling e3564b52af Jenkinsfile: modprobe br_netfilter 46f6b9a259 integration: add wait 18aa104041 daemon/graphdriver/zfs: ignore non-existent dataset on removal 052f7d6461 Fix br_netfilter module loading logic 151c7565a9 Remove buildkit init timeout 465eb6aee2 vendor: github.com/cenkalti/backoff/v4 v4.3.0 e4d5bae9c5 vendor: github.com/go-logr/logr v1.4.2 339572db5d vendor: github.com/prometheus/client_golang v1.20.5 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2025-01-17 19:17:09 +00:00
Bruce Ashfield	f9ba743dad	docker: check for seccomp and ipv6 ... Without these (and their associated packageconfig options) docker may build, but it won't run correctly. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2025-01-17 19:17:09 +00:00
Bruce Ashfield	1adf3b6a83	docker: update to v27.4.0-rc.2 ... Bumping moby to version v27.4.0-rc.2-25-g33b6b826c2, which comprises the following commits: 151c7565a9 Remove buildkit init timeout 1abc35f098 Add label on PrepareSnapshot to warn about non-expiring leases 1d1da55382 Update containerd image builder to use lease prune label a3afccd409 Fix lease management during image operations 33e5f87d0f [27.x] vendor: github.com/moby/buildkit 80e01a9dc7c1 (v0.17.3-dev) 752c0453d6 vendor: github.com/moby/buildkit v0.17.2 6cab48bd9b vendor: github.com/containerd/typeurl v2.2.3 a64812939f Update containerd to v1.7.24 179c7c7596 vendor: github.com/tonistiigi/go-actions-cache 394979b8119e 7f9c5b278a vendor: resenje.org/singleflight v0.4.3 b90c6e922c vendor: github.com/containerd/continuity v0.4.5 e956d4a370 Dockerfile: update to runc v1.2.2 b888333fe1 Dockerfile: update containerd to v1.7.24 6b04fcf560 vendor: github.com/golang-jwt/jwt/v4@v4.5.1 0f0b83a00b vendor: google.golang.org/grpc v1.66.3 b859373da2 vendor: tags.cncf.io/container-device-interface v0.8.0 2f816b2596 [27.x] daemon/containerd: add missing go:build tag 3e03c979da update go:build tags to use go1.22 346ac21032 daemon/logger/loggerutils: add //go:build directives to prevent downgrading to go1.16 f54e5b0b19 libnetwork/networkdb: add //go:build directives to prevent downgrading to go1.16 6ec5197103 [27.x] vendor: github.com/containerd/containerd v1.7.23 31c8d23e7e Dockerfile: update compose to v2.30.3 2ee3796e3f Dockerfile: update buildx to v0.18.0 2acf9893c6 Increase test handler sleep, replace deprecated assert edfb2048ac deprecate pkg/platform and move internal 5ab7960b46 logger/journald: plumb contexts into reader 857fc4730c logfile: Close reader when caller cancels a7badb2bb5 Logfile: Add tracing spans d48c403efa Logfile: skip files that are corrupted c9a7391911 Refactor logfile reads 49f5431807 Fix time comparison in sharedtemp implementation 173a9f2091 libnet: don't put external DNS answers in OTel spans 15b69c4200 vendor: update buildkit to v0.17.1 3280e50f65 vendor: update buildkit to v0.17.0 00774deb96 vendor: update buildkit to v0.17.0-rc2 0a67347003 vendor: google.golang.org/protobuf v1.34.2 033bd73bba [27.x] pin github.com/Microsoft/hcsshim to v0.11.x 0e4ab47f23 update to go1.22.9 d3b9ec90ba api/swagger: Improve description for platform in images/push c902e1a187 c8d/inspect: Fix duplicate RepoDigests b089f36796 volume: VolumesService.Create: fix log-level for debug logs afd7c9913f client: prevent idle connections leaking FDs de0135965e c8d/httpfallback: Handle connection errors ddb56edd00 volume/mounts: fix anonymous volume not being labeled b7bc29af50 daemon: use OwnCgroupPath in withCgroups 1e11f2a1c0 daemon: deprecate Daemon.IsPaused 0183f5dd13 daemon: deprecate Daemon.Exists 749f9ccee4 Fix: setup user chains even if there are running containers 8deb557451 api: GET /images/json: preserve original manifest order e4c067af91 gha: shorter time limits for smoke, validate 525b19ff04 gha: use "ubuntu-24.04" instead of "ubuntu-latest" ceb41b83f3 gha: dco: small tweaks to running the container 2690b70a09 gha: dco: update ALPINE_VERSION to 3.20 f53efc688f gha: build (binary), build (dynbinary): limit to 20 minutes 166565e3ac gha: dco: limit to 10 minutes 57a72c3c9d container: deprecate ErrNameReserved, ErrNameNotReserved 8804551902 container: viewDB.ReserveName, view.GetID: return errdefs errors 202aac0eb4 container: viewDB.withTxn: don't wrap errors be8be11708 container: TestNames: don't string-match error assertions bedbe333bf dockerd-rootless-setuptool.sh: let --force ignore smoke test errors ffb5bd905a cmd/dockerd: Add workaround for OTEL meter leak 12cc7f7696 daemon/containerd: getPushDescriptor: fix formatting of platform in errors 01412dacf7 daemon/containerd: touch-up platform not found error 3c93981344 images: GetImage: touch-up error message for missing platform 03225b1a41 PushImage: remove misleading error about --platform without containerd 5376990d4d build: create distinct history db for each store 34d2e5e7e6 vendor: github.com/moby/swarmkit/v2 v2.0.0-20241017191044-e8ecf83ee08e 0f8fc3105e Enable bridge netfiltering if userland-proxy=false 505c4c32be Set NODAD on bridge IPv6 addresses c00b3108e5 docs: api: document w (width) and h (height) query params as required e39ced5c00 api: document w (width) and h (height) query params as required 3c258e6011 pkg/authorization: update link to API documentation 29f0dcd902 client: update link to API documentation 21c974b281 docs/api: version-history: update documentation links 0bc91d5dc8 gha: restrict cross and bin-image to 20 minutes d755573aba vendor: github.com/moby/buildkit v0.17.0-rc1 32afa26719 gha: add guardrails timeouts on all jobs 8dc3ce5606 integration/build: remove TestBuildWithSession, and fsutil direct dependency 136fdfcdfc vendor: google.golang.org/grpc v1.66.2 6eed19d656 vendor: google.golang.org/protobuf v1.34.1 f29cc7c2cf vendor: github.com/cespare/xxhash/v2 v2.3.0 5f92ab397b vendor: golang.org/x/tools v0.25.0 9af7d06698 vendor: golang.org/x/mod v0.21.0 8fef24d9d4 vendor: golang.org/x/net v0.29.0 efc5252041 vendor: golang.org/x/crypto v0.27.0 a8e92fa662 vendor: golang.org/x/text v0.18.0 80cd75d7d5 vendor: golang.org/x/sys v0.25.0 a2a544202b vendor: go.etcd.io/bbolt v1.3.11 418a79d51b gha: buildkit: make sure expected Go version is installed 43580ccbc1 update to go1.22.8 af8b897560 Dockerfile: update compose to v2.29.7 d91a922ef3 Dockerfile: update docker CLI to v27.3.1 0138291345 gha: add CodeQL Analysis workflow a6b772b24c gha: govulncheck: make sure read permissions are set cd21af7e41 Do not DNAT packets from WSL2's loopback0 5c499fc4b2 Only enable bridge netfiltering when needed 8adc8e405d Dockerfile: update compose to v2.29.4 576fc88b1a Dockerfile: update buildx to v0.17.1 e928a0d22d man: dockerd: add description for --log-format option 82cf138590 internal/opts: SetOpts: invalidate empty option-names 487a2f5314 internal/opts: SetOpts.Set: remove redundant var assignment 6d4a507acc internal/opts: SetOpts,NamedSetOpts: test for optional value bae46f6463 man: dockerd: value is optional for --feature flag 176e04d73b man: fix duplicate word in --feature flag description 06c9c72269 Update dlv in the dev-env 15fbba2169 man: update dockerd man-page to include --feature flag b262a95d67 c8d/prune: Keep deletion order stable 39c17094b0 c8d/prune: Add OTEL spans 343800d7be adjust TestPruneDontDeleteUsedImage for 27.x branch 95ffe8493e c8d/prune: Keep the last tagged image instead of creating dangling image c40cd54593 Add feature to daemon flags dbee7b16df TestIPRangeAt64BitLimit: remove colon after XFAIL to help grepping bd71b5d319 Explicitly disable nvidia device injection for --gpus=0 a5478dde0e Dockerfile: update RootlessKit to v2.3.1 80d0013217 Fix typos ce86fade0d Dockerfile: update compose to v2.29.2 682b96c479 Dockerfile: update buildx to 0.17.0 c3aaaf2be0 Dockerfile: update docker CLI to v27.2.1 ce07360a1c vendor: update buildkit to v0.16.0 ab99508c07 docs/api: update deprecation version for erroneous fields (v1.46, v1.47) c7a8942d6d api/swagger: update deprecation version for erroneous fields 57ba0b05e6 vendor: update buildkit to v0.16.0-rc2 16bf28ec2d test: update since session signature has changed a0650bf67c vendor: update buildkit to v0.16.0-rc1 f7ea6bb4d9 vendor.mod: golang.org/x/net v0.28.0, etc. da2b59d3a2 vendor.mod: golang.org/x/time v0.6.0 3e60519c9c vendor.mod: golang.org/x/sys v0.24.0 e6a4c5f840 vendor.mod: golang.org/x/sync v0.8.0 2514b02677 vendor.mod: golang.org/x/mod v0.20.0 69f9ab2958 vendor.mod: drop direct dependency on golang.org/x/exp 70c8d41445 vendor: github.com/containerd/nydus-snapshotter v0.14.0 54e4cdc044 vendor: github.com/containerd/nydus-snapshotter v0.13.14 dca7a36092 vendor: google.golang.org/grpc v1.62.0 458110ccd0 vendor: golang.org/x/time v0.5.0 27b5c33847 vendor: github.com/moby/sys/sequential v0.6.0 6e77ead91e vendor: github.com/moby/sys/symlink v0.3.0 0890631ac7 vendor: github.com/moby/sys/signal v0.7.1 508173c39d vendor: github.com/moby/sys/mount v0.3.4 9b26c10e8b vendor: github.com/moby/sys/mountinfo v0.7.2 d3884731cd Dockerfile: update containerd binary to v1.7.22 cdbc2b6869 vendor: github.com/containerd/containerd v1.7.22 d0462c0e80 seccomp: add riscv64 mapping to seccomp_linux.go fc774f6dc0 docs: api: fix documentation for image push endpoint (API v1.25-v1.47) 84d78a8ad5 api: swagger: fix documentation for image push endpoint e16197e51d gha/bin-image: Also run on branches like `27.x` 37bf6e81f9 update to go1.22.7 3a4c589290 vendor: github.com/opencontainers/runc v1.1.14 10cf2d64b6 update runc binary to 1.1.14 84cfcb0893 docs/api: add documentation for API v1.47 edeb6ba9fb golangci-lint: temporarily disable G115: integer overflow conversion adb0b8536d update golangci-lint to v1.60.2 01f7ec0f21 update to go1.22.6 442462ad4e hack/make/.binary: set CGO_LDFLAGS=-latomic for arm/v5 a3eca63b5b hack/make/.binary: set CCGO_CFLAGS=-Wno-atomic-alignment for arm/v5 d036255b69 c8d/pull: Same error message for non-matching platform b9f56706c5 man: create parent directories in install recipe 12d4379ad1 c8d/list: Don't exclude non-container images 0fbb78c187 daemon: fix non-constant format string in call (govet) 2bc17a1e5c api/types: fix non-constant format string in call (govet) fe01a5fc30 api/server/router: fix non-constant format string in call (govet) bf7ca4dc4b container/stream: fix non-constant format string in call (govet) 405a163620 libnetwork/drivers/bridge: fix non-constant format string in call (govet) 812b97d559 volume/testutils: fix non-constant format string in call (govet) c4eef2a58c builder/dockerfile: parseChownFlag: fix non-constant format string in call (govet) 8dec1f216f layer: ignore G602: slice index out of range (gosec) 068e82bdd2 internal/cleanups: fix non-constant format string in call (govet) 8ae439ddaa libnetwork/cnmallocator: fix non-constant format string in call (govet) c27f7de662 cmd/dockerd: fix non-constant format string in call (govet) ec8ff9cbbd libnetwork: fix non-constant format string in call (govet) e5bc931f17 integration-cli: fix non-constant format string in call (govet) 6c3b1992d4 integration-cli: DockerSwarmSuite: rm redundant Fprintf, handle errors 83171f6b5a integration-cli: DockerNetworkSuite: rm redundant Fprintf, handle errors 4cfa21bb92 integration-cli: use erors.New() instead of fmt.Errorf 28bdd819d0 libnetwork: TestDNSOptions: remove redundant skip check cb2e98cfbf integration-cli: remove redundant platform checks 875e8aeef2 vendor: github.com/containerd/containerd v1.7.21 1900e4d8eb Dockerfile: update containerd binary to v1.7.21 (static binaries and CI only) ecd2b6ff09 c8d/image: Add `hostPlatformMatcher` d5b03423d1 man: support bringing your own go-md2man 56c5c23114 man: build dockerd man pages using make 77b2eb5734 Removed all mentions of "please" from docs and messages 805becdc7e docs: add default-network-opt daemon option a5828ac742 docs: remove devicemapper f7246a0e2c man/dockerd.8: assorted formatting fixes f110e779f6 man/dockerd.8: escape asterisks and underscores edbcbf8da7 docs: update dockerd usage output for new proxy-options b7cc16b0b0 Fix styling of arguments ecbc4f05bb Fix the max-concurrent-downloads and max-concurrent-uploads configs documentation 43298ad298 docs: remove documentation about deprecated cluster-store 8cc7f26f56 Document `--validate` daemon option 255eaa6647 Update man-page source MarkDown to work with go-md2man v2 ee27f4cd7f docs: update for cgroup v2 and rootless c1d3c952e7 docker run: specify cgroup namespace mode with --cgroupns fc9029a2e2 daemon: document --max-download-attempts option 115b10a467 Update document links and title. 488872bcb4 Allow user to specify default address pools for docker networks This is separate commit for CLI files to address PR 36054 f623030fac Update docs and completion-scripts for deprecated features ac7032bff9 Added docs for dockerd 161006302f fix a number of minor typos a6de17d230 Introduce/document new IPC modes 6513e80c84 docs: add documentation for dm.libdm_log_level 3d917f3fd6 Restore dockerd man page e854a5c201 c8d/pull: Replace pointer to interface with interface ea58dab95e c8d/pull: Keep the replaced image as dangling 0a38589add c8d/load: Only unpack host platform images 7c069d3021 c8d/load: Don't fail whole operation if unpack failed 5002faebe8 integration/TestAPIImagesListManifests: Check `Containers` a15a309832 c8d/list: Update benchmark to also have containers fd5cede287 c8d/list: Fix race condition when traversing containers 65c4e49aff govulncheck to report known vulnerabilities 7ebb277873 Dockerfile: update xx to v1.5.0 ad5eb875d4 c8d/list: Don't require `opts.ContainerCount` for manifest containers 3d845e0e8c c8d/list: Add test for total and content size 3563a707d0 c8d/list: Fix `Total` size calculation 89757f83ff api/list: Expose manifests bb2fec6425 api: Bump default version to 1.47 0f8fcec1d9 swagger: Disable ImageSummary model generation 1ec5e86154 api/types/registry: fix godoc, and add some doc-links 62f32e9a97 plugin: fix deprecation comments 830c76c6f2 vendor: update buildkit to v0.15.2 354bf75675 libcontainerd: gofumpt 4ab7d90669 pkg/plugins: gofumpt c11b2d9c7d pkg/archive: gofumpt ccdc79d55a libnetwork: gofumpt 35b1a30028 layer: gofumpt 9f63aa7435 internal: gofumpt 4d16ac993e integration: gofumpt 6d5266a650 integration-cli: gofumpt 4084dac566 daemon: gofumpt c36ab4c2ca daemon/containerd: gofumpt 904867593b daemon/config: gofumpt 72876770d0 builder: gofumpt e8109ee4da api/types: gofumpt ed65e1224e api/server: gofumpt d54aff9312 API 1.46: end per-interface sysctl migration in major release 8f12906274 Migrate per-endpoint sysctls until 28.0.0 c53be2f3d5 Allow --ip-range ending on a 64-bit boundary fc0150b962 daemon/containerd: rm use of regexp 73c01d0b6a image/v1: rm regexp use c93fe4a27d layer: rm regexp use 31459c8268 docs/api: swagger: fix x-nullable for SystemInfo.Containerd (api v1.46) 35d430c62e api/swagger: fix x-nullable for SystemInfo.Containerd 80a59c2f1a migrate to github.com/moby/sys/userns e7fe276c00 update to go1.21.13 e8cd19e810 gha: set permissions to read-only by default e0c52e0ba6 vendor: update buildkit to v0.15.1 efb67b16b0 api/server/router/grpc: NewRouter: set correct MaxRecvMsgSize, MaxSendMsgSize f96e26f68d migrate to github.com/moby/sys/user/userns 78b59867f2 vendor: github.com/moby/sys/user v0.2.0 018137b01a vendor: github.com/gofrs/flock v0.12.1 650e06ac75 vendor: golang.org/x/sys v0.22.0 bfe5339c7e dockerd-rootless-setuptool.sh: move RootlessKit smoke test 99471ac2fe hack: explicitly control enabling the journald logging driver b9b43b3bdf README: replace obsolete Docker EE mention 1bc907c97c vendor: github.com/containerd/containerd v1.7.20 1c0885d60d gha: check-pr-branch: fix branch check regression ed83a9e3a1 update containerd binary to v1.7.20 422ef48c2f gha: check-pr-branch: verify major version only c9d37a9198 [27.1] pkg/rootless/specconv: deprecate, and add temporary aliases 1f16a44b3d pkg/rootless/specconv: move to internal c8f1317585 pkg/directory: deprecate, and move to internal 68587c38fe pkg/directory: fix comment, and remove import comments d1ea2b1fec [27.1] pkg/containerfs: deprecate, and add temporary aliases 31c1b7dc17 pkg/containerfs: move to internal 6231ea4a34 pkg/containerfs: cleanup GoDoc, and make Windows a proper wrapper dc33eb81d8 pkg/containerfs: remove CleanScopedPath and make it internal bc6ae42031 Dockerfile: update compose to v2.29.0 af8866f324 Dockerfile: update buildx to v0.16.1 5e4ddd81a2 api/types/system: remove Info.ExecutionDriver c7e4d181a1 vendor: cloud.google.com/go/logging v1.9.0 3d7e824bc2 vendor: golang.org/x/oauth2 v0.21.0 d66b76d2e6 vendor: cloud.google.com/go/compute/metadata v0.3.0 03dc388f63 c8d/build: Log `image tag` event when image was built with Buildkit 5ee23b6050 builder-next: Add ImageNamedByBuildkit callback 53c521a6b2 builder-next: Don't return error from exported callback eccccd7577 Fix API version in TestSetInterfaceSysctl d9e3d1b815 update containerd binary to v1.7.19 b91e20cc2e vendor: update buildkit to v0.15.0 505be6557b vendor: update buildkit to v0.15.0-rc2 b1613dc2a1 vendor: update buildkit to v0.15.0-rc1 52f6163746 vendor: golang.org/x/net v0.25.0 c70e404e9e vendor: golang.org/x/crypto v0.23.0 d7a3f01421 vendor: golang.org/x/text v0.15.0 0f2f9e0049 vendor: golang.org/x/sys v0.21.0 45a1c34202 vendor: github.com/klauspost/compress v1.17.9 7b31435cf8 Migrate to github.com/containerd/platforms module 99df4fee0b vendor: github.com/containerd/containerd v1.7.19 9f08d1e357 vendor: github.com/microsoft/hcsshim v0.11.7 d1bbb61844 If url includes scheme, urlPath will drop hostname, which would not match the auth check 0835eaa5a1 Authz plugin security fixes for 0-length content and path validation Signed-off-by: Jameson Hyde <jameson.hyde@docker.com> b039de78d7 docs/api: Add missing ` 7d99ebe418 rootless: add `Requires=dbus.socket` Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-12-10 03:47:54 +00:00
Bruce Ashfield	b5b94c2f51	docker-moby: tweak check-config script for 6.1+ kernels ... We are showing one warning on check-config that isn't valid, as the option has been changed in kernels 6.1+. We tweak the check-config script to make that conditional Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-11-15 19:50:00 +00:00
Bruce Ashfield	2534e6a07c	docker: use nobranch ... The upstream repository has both removed tags and renamed branches. To prevent some of these failures in the future, let's run with nobranch=1 for a bit. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-08-03 02:50:57 +00:00
Bruce Ashfield	61f643c386	moby: update to v27.0.3 ... Bumping moby to version v27.0.3-4-g7fa33a539a, which comprises the following commits: 7d99ebe418 rootless: add `Requires=dbus.socket` 540b29c0c6 update to go1.21.12 276a648ec3 Fix incorrect validation of port mapping 23b8b023dd Fix duplicate subnet allocations bf222d635b fix some gofmt issues reported by goreportcard f8231b52d3 daemon/graphdriver/overlay2: set TarOptions.InUserNS for native differ b951474404 pkg/archive: createTarFile: consistently use the same value for userns c5794e23ec pkg/archive: handleTarTypeBlockCharFifo: don't discard EPERM errors 02e24483be pkg/archive: getWhiteoutConverter: don't error with userns enabled 838330bac3 Dockerfile: update docker CLI to v27.0.2 e419e22f29 Dockerfile: update compose to v2.28.1 3557077867 update golangci-lint to v1.59.1 c95b917167 pkg/archive: reformat code to make #nosec comment work again c0ff08acbd builder/remotecontext: reformat code to make #nosec comment work again 4587688258 api/types: deprecate ContainerJSONBase.Node, ContainerNode 6da604aa6a deprecate experimental Graphdriver plugins, and disable by default ce5571f343 api: swagger: fix definition of TmpFsOptions (API v1.46) a9ab04603e cmd/dockerd: initMiddlewares: use containerd/logs e355e10011 vendor: github.com/containerd/ttrpc v1.2.5 f8c088be05 Lookup docker-proxy in libexec paths d22d8a78f1 runconfig: deprecate IsPreDefinedNetwork 0a4277abf4 api/types: move stats-types to api/types/container 91a2a574d7 api/types: rename container.StatsResponse to StatsResponseReader 6fafc8762f api/types: fix typo in GoDoc 42cb29f6ea registry: Search.searchUnfiltered: inline variable 43d4a4c63e registry: v2AuthHTTPClient: inline some vars and slight refactor bf35f3d8c8 update one more entry in mailmap and AUTHORS b4c20da143 volume: use AtomicWriteFile to save volume options 39b4448e12 docs/api: update some example values to be more accurate (API v1.46) 37b57c2ae0 api: swagger: update some example values to be more accurate 2a7bb2a7bd update .mailmap and AUTHORS 68b8e97849 vendor: github.com/spf13/cobra v1.8.1 b5cc61a243 Dockerfile: update buildx to v0.15.1 f741ca857c libnetwork/drivers/macvlan: getDummyName don't use stringid.TruncateID d241862f36 libnetwork/drivers/macvlan: move truncating ID to getDummyName dab918b2b0 libnetwork/drivers/ipvlan: getDummyName don't use stringid.TruncateID b8c80b19de libnetwork/drivers/ipvlan: move truncating ID to getDummyName 8599213b52 vendor: update buildkit to v0.14.1 2df4391473 Fix hairpin between networks with mapped port b06b6b3648 docs: add API documentation for API v1.46 517fb0991e api/types/container: provide alias for github.com/docker/go-units.Ulimit ad716b223b integration/container: use consistent alias for import 25f44885ed daemon/cluster/executor/container: use consistent alias for import 084219a5f9 update AUTHORS f09f756851 daemon/cluster: minor linting issues and cleanup 74d77d8811 Revert "Internal resolver for default bridge network" 6d35673504 Revert "No default nameservers for internal resolver" 01efb9a5ab daemon/cluster/executor/container: fix error-handling b640582436 Add OomScoreAdj options 8e91b64e07 runconfig: deprecate DefaultDaemonNetworkMode, move to daemon/network 437e1ae15e runconfig/opts: deprecate ConvertKVStringsToMap and move internal b3e236d3b5 daemon: rename some inconsistent import aliases 2851ddc44c Add containerd image ref to created containers 812f319a57 Add containerd connection info to info endpoint (API v1.46) 1327342b14 hack: Ignore deprecate-integration-cli validation 7b8f4922a5 daemon: Emit Image Create event when image is built 09eb6ec4f1 builder/exporter: Wrap exporter to hook the image export 0e84482ef5 builder-next: Move exporter wrapper to exporter package 48ff86ec64 pkg/longpath: AddPrefix: use early returns 424c22390e pkg/longpath: deprecate Prefix const 2f45cbf69f api/types/container: NetworkMode align code between Windows and Linux 7b56fa8dc0 api/types/container: NetworkMode.NetworkName: use switch 7b438c5c31 daemon: rename variables that shadowed imports 4c7228663c api/server/router/container.postCommit: add TODO about use of CreateRequest c692af36c3 runconfig: deprecate ContainerConfigWrapper, move to api/types/container afdfe4ff86 runconfig: deprecate SetDefaultNetModeIfBlank 4af9f418a3 runconfig: remove ContainerConfigWrapper.getHostConfig() utility 98bd08c534 runconfig: remove redundant import-alias e42503213d runconfig: ContainerConfigWrapper: unify Linux and Windows implementations 2954b05b03 runconfig: remove conversion code for API < v1.18 37f4616751 integration-cli: fix TestCreateWithTooLowMemoryLimit: using deprecated API fields 964aba696c libnetwork: windows/overlay: remove endpointRequest wrapper c316ed0c22 libnetwork: remove special handling for Windows 14393 (RS1, V1607, LTSC2016) 3108165c94 pkg/archive: TestChangesDirsEmpty, TestChangesDirsMutated: no kernel-version check 17ca8b62bd pkg/archive: remove uses of iota 94caeeb401 pkg/archive: don't call system.Lgetxattr on unsupported platforms c565a3a1fe pkg/archive: collectFileInfo: don't create FileInfo if unused 7ce1edd7c6 pkg/archive: deprecate NewTempArchive, TempArchive 92b8d93f47 pkg/archive: deprecate CanonicalTarNameForPath 0ffc0c95e6 pkg/tarsum: format #nosec comments to standard format cb19b59b65 pkg/archive: format #nosec comments to standard format 805ccd2365 pkg/dmesg: deprecate, and use internal utility instead c7f4abc14a pkg/dmesg: use unix.SYSLOG_ACTION_READ_ALL instead of local variable 528ffa9cae Allow multiple macvlan networks to share a parent 9389f76f6d pkg/chrootarchive: remove dependency on pkg/longpath f657a75bf6 pkg/archive: remove dependency on pkg/longpath 2100a70741 pkg/stringid: deprecate IsShortID e19e6cf7f4 pkg/stringid: deprecate ValidateID 0fb6360fa7 builder/dockerfile: createDestInfo: remove platform arg (LCOW left-over) c5d95fdb04 builder/dockerfile: fix some minor linting issues 6fa6812c51 builder/dockerfile: rename vars that shadowed types and builtins 074932966d builder/dockerfile: remove endsInSlash utility c8e7fcf91a api: adjust health start interval on swarm update dd1ca95ef9 Add exec option to API TmpfsOptions 07053a0991 testutil/daemon: Wait() until the daemon is Kill()'ed 955b923352 daemon: releaseNetwork: clear SandboxID, SandboxKey e3c5665d21 daemon: restore: clear net state for stopped containers 17a59a7506 Don't log an error about route-add for IPv6 bridge 57c6a5e691 libnet: SetKey: propagate traces from API to SetKey reexec b7186bdfc8 libnet: Sandbox: add ctx to SetKey 6c71ebd82c libcontainerd: Start: add ctx 2d8c4265c7 libcontainerd: NewTask: add ctx 19f72d6fc4 libnet: add more OTel spans 224d7291df container: add a span to CheckpointTo 642242a26b builder/mobyexporter: Add missing nil check 44f19518f9 move the cli/debug package to cmd/dockerd/debug e4e40558ba builder/builder-next: gofmt 88e5e4cfb4 Prevent data race during version negotiation 9101392309 update runc binary to v1.1.13 ec24e19d69 vendor: github.com/opencontainers/runc v1.1.13 d20739b6fe vendor: golang.org/x/net v0.24.0 535898dd9a vendor: golang.org/x/crypto v0.22.0 4b2aa9f875 vendor: golang.org/x/sys v0.19.0 cec0d50361 libnet: add ctx to Sandbox.Destroy() af23a024a1 libnet: Endpoint: add ctx to Join and Leave 566026af8f libnet: Controller: add ctx to store methods 9391052700 libnet: Add ctx to NewSandbox 4924f56e7b libnet/driverapi: Add ctx to ProgramExternalConnectivity c5c1d133ef libnet/driverapi: Add ctx to Join 8dcded102e libnet: add OTel spans to CreateEndpoint cf376170ed Add more go:build statements to prevent downgrading Go language version b7d5a42168 Update go:build comments to go1.21 5343c7b451 remove internal/compatcontext and use context instead 13c3384303 hack/vendor.sh: remove redundant -compat 1.18 f20fd3c8a0 golangci-lint: ignore ineffassign & staticcheck on ctx shadowing d0790fd03e Trivial tidying in osl.setIPv6() b7f1036cd9 Remove the option to ignore failure to disable ipv6 44d00e3b9b Dev container: try to load kernel module ip6_tables d0a135772e Dockerfile: update buildx to v0.15.0 215410316f daemon: cleanup getDefaultNetworkSettings 01eecb6cdf Validate port bindings for gateway_mode=routed 2a291c1855 Improve PortBinding.String() a1f8bbeeef Remove unused bridge.driver.portAllocator 043db3be68 Bind the same port for multiple addresses 20c99e4156 Option to disable NAT for IPv4/IPv6 for a bridge network. 18ff5ef537 vendor: update buildkit to v0.14.0 e05848c002 Set up bridge-specific iptables rules in the bridge driver 4f09af6267 Allocate same port for IPv4/IPv6 for 'any interface' mappings. 03577884d9 Retry port mapping for a range if ports are in-use 931eea20ff Add portallocator.RequestPortsInRange() e0b762ed1b daemon/containerd: fix duplicate import 7f2ed139fe remove uses of platforms.Platform alias 896de6d426 seccomp: allow specifying a custom profile with `--privileged` 2ccce36d10 c8d/progress: Allow updating "Unavailable" ids e2326c27b5 c8d/push: Fix wrong Originalindex descriptor in aux error af0cdc36c7 api: deprecate erroneous Config fields in `GET /images/{name}/json` response 58641c7b5c docs: api: use separate definition for Image.Config (api v1.39 - v1.45) 5e0e34fafd api: swagger: use separate definition for Image.Config 8d96d759bb c8d/image_manifest: IsPseudoImage return true for unknown/unknown platform b4d2283c89 api/push: Ignore Platform on older APIs 68a63d0611 c8d/push: Extract missing content note to an Aux progress 0a31437208 c8d/push: Support platform selection 999f1c63db testutils/specialimage: Add MultiPlatform c16d676266 c8d/blobsDirContentStore: Return ErrNotExists 85249a8401 c8d/image_manifest: Add helper functions c514952774 Changed default value of the startInterval to 5s 6c2934f373 api/types: move ImageLoadResponse to api/types/image eb675cce71 api/types: move ImageImportSource to api/types/image f6cc76ceb9 api/types: move ImageSearchOptions to api/types/registry b5f15bc0aa api/types: move EventsOptions to api/types/events ecb24afaaf api/types: move ImagesPruneReport to api/types/image 162ef4f8d1 api/types: move VolumesPruneReport to api/types/volume 17c3269a37 api/types: move ContainerStats to api/types/container fd1d8f323b api/types: move CopyToContainerOptions to api/types/container 47d7c9e31d api/types: move ContainerPathStat to api/types/container db2f1acd5d api/types: move ContainersPruneReport to api/types/container 5b27e71521 api/types: move ContainerExecInspect to api/types/container d91638e295 api/types: move ExecStartCheck to api/types/container 452e134001 api/types: move ExecStartOptions to api/types/backend cd76e3e7f8 api/types: move ExecConfig to api/types/container ac27a5379b docs: api: image inspect: remove Container and ContainerConfig 52580b2673 vendor: github.com/creack/pty v1.1.21 fa95f8a070 client: fix typos in test-names and godoc 08939f21ad integration-cli: remove DockerAPISuite.TestContainerAPICopyNotExistsAnyMore 75843620a6 api/server/router/container: minor nits in exec router 18e1afd1a1 vendor: github.com/distribution/reference v0.6.0 7501b90a22 vendor: go.etcd.io/bbolt v1.3.10 cf796aa56a pkg/reexec: touch-up GoDoc, and remove "import" comments d20a074f33 pkg/reexec: remove gotest.tools from tests defd5a08f4 pkg/reexec: unify non-Linux implementation of Command 004451c812 pkg/reexec: unify implementation of Self() and remove stub 79bff9461c pkg/reexec: don't mix syscall and golang.org/x/sys package a445f7fa8a daemon/graphdriver: fix GoDoc for ProtoDriver.GetMetadata a76b768fea daemon/graphdriver: remove redundant Mounted function 837b3f9576 Allow startup with no kernel support for ip6_tables fd3fa4b28a Add Rob Murray (@robmry) as maintainer 854130eee0 deps: remove `grpc-ecosystem/go-grpc-middleware` 49ca0d0d03 otel: remove deprecated usages of `otelgrpc` 1243f9da6d Revert "libnet/i/defaultipam: Disambiguate PoolID string format" 6af0646236 Revert "libnet/i/defaultipam: Use InternalErrorf instead of InvalidParameterErrof" 4aa85cd159 ci: enable debug for buildkit container builder fc9dd6acb4 api/types/network: make CheckDuplicate optional e5f9484ab6 api/types: move NetworksPruneReport to api/types/network ad6edc139f api/types: move NetworkCreate, NetworkCreateRequest to api/types/network 4f61fa21cb vendor: update buildkit to v0.14.0-rc2 ca0529f984 api/server: ContainerList returns container annotations b3c8216873 vendor: google.golang.org/appengine v1.6.8 0b5f7b9ff8 builder-next: Adjust NewGatewayFrontend invocation fa03db1b82 builder: Update detect usage for new detect API from buildkit 995604236e builder: Adjust usage of shlex.ProcessWord 438371e1fe builder: Pass nil linter to instructions.Parse 3bcbb561ad vendor: update github.com/moby/buildkit to v0.14.0-rc2-dev d365702dbd No default nameservers for internal resolver 18f4f775ed Internal resolver for default bridge network 5318c38eae update containerd binary to v1.7.18 86f7762d48 vendor: github.com/containerd/containerd v1.7.18 91e2c29865 update to go1.21.11 163c6ca9ad api: Make EnableIPv6 optional 83c532c9b7 daemon/cluster: remove Cluster.getRequestContext() 69b2a05d27 api/types: migrate NetworkResource to api/types/network 3306034c64 api/types: remove aliases for deprecated Image types 70bac42113 integration/network: remove used of deprecated NetworkInspectOptions 1ec92ea60b opts: remove alias for ipamutils e6f41e22a7 client: Client.doRequest: fix closing filehandle and reversed errors 9110ef1eec client: ensureReaderClosed: make linters happier 57f597b866 client: Client.NetworkInspectWithRaw: minor cleanup 42f4db26c7 api/server/httpstatus: FromError: remove redundant checks and cleanup f78dac35e5 api/types: migrate NetworkListOptions to api/types/network d18b88fd32 daemon: add ULA prefix by default 68bf0e7625 api/types: migrate EndpointResource to api/types/network 5bea0c38bc api/types: migrate NetworkInspectOptions to api/types/network 245d12175f api/types: migrate NetworkConnect, NetworkDisconnect to api/types/network 89624e09e6 api/types: migrate NetworkCreateResponse to network.CreateResponse 32418e9753 daemon: set the default local addr pool if none configured 0071832226 Add per-endpoint sysctls to DriverOpts 347bb4122a update docker-py to 7.1.0 69f1e2a923 docs/api: add Scope, ConfigOnly, ConfigFrom, Peers (v1.41 - v1.45) 53542fefd5 api: swagger: Network: add Peers 44125530bf api: swagger: POST /networks/create: document Scope, ConfigOnly, ConfigFrom 8b7a54f622 api: swagger: Network: inline examples, and add ConfigOnly, ConfigFrom 6cab6d0302 docs/api: POST /networks/create: inline examples per-field (v1.41 - v1.45) 51885166b9 api: swagger: POST /networks/create: inline examples per-field d64e220afb api/types: NetworkCreate: add GoDoc cd1ed46d73 don't depend on containerd platform.Parse to return a typed error 56086c9952 integration/container: remove redundant type-conversion, and minor cleanup 070e90a94c integration/system: remove redundant type-conversion, and minor cleanup 667094924d testutil/fakestorage: fix minor (linting) issues 4a074c809e integration/internal/swarm: remove unused ContainerPoll fe78d6d9da integration/internal/swarm: rename vars that collided with imports 4619b14403 refactor: rename attach config var 2d134c5abd Fix goroutine/fd leak when client disconnects 8361baf8d9 Dockerfile: update compose to v2.27.1 387be6ec91 Dockerfile: update buildx to v0.14.1 500eff0ae9 libnet/i/defaultipam: improve address pools validation 0c022307e9 libnet/i/defaultipam: Unmap IPv4-mapped IPv6 addrs 9d288b5b43 libnet/i/defaultipam: introduce a linear allocator a9ebb0c267 Replace dead RFC8878 go doc hyperlink 16e5c41591 Fix issue where node promotion could fail 5a2fa59688 libnet/i/defaultipam: Use InternalErrorf instead of InvalidParameterErrof 9369132879 libnet/i/defaultipam: Disambiguate PoolID string format 6d21574535 libnet: Controller: drop getStore() 49888559cc libnet: Controller: drop closeStores 2336363e28 libnet: init datastore in ctrler constructor 3847da374b integration/TestDiskUsage: Make 4096 also a 'empty' value 1e29f9b12f Move EndpointSettings.DriverOpts from op-state to config a35716f5b9 Factor out selection of endpoint for config migration 4f0cb7d964 Dockerfile: update containerd binary to v1.7.17 (static binaries and CI only) e459487feb Update containerd to v1.7.17 707ab48cbb Explicity write http headers on streaming endpoints 50d3028464 Fix fd leak/goroutine when attaching stdin only ad0f263eb5 tarexport: Plumb ctx, add OTEL spans, handle cancellation 33f9a5329a Default to "windows-dns-proxy":true 77a47dba3b Forward DNS requests into --internal networks 6fbae5ff26 libnet/d/bridge: don't parse the MacAddress netlabel 41ddc47bbf Don't explicitly enable ip6tables in tests 07ccaf028d Enable 'ip6tables' by default, don't require 'experimental'. 5705cbf6e3 Make it an error to set up filtering on an unnamed bridge d6b6a5122f Enable filtering on IPv6 bridges with no IPv6 address 4df97f2e1e Gate setting of bridge-nf-call-ip6tables on "--ip6tables=true". 8751562d3f Set up IPv6 n/w isolation rules when --ip6tables=true 23fd15985b Allow "--ip6tables=true" when "--iptables=false" 9a8ffe38fc Disable ip6tables in tests that disable iptables 5952920380 libnet/d/remote: replace errorWithRollback 7216541b17 libnet: don't check if ctrler store is nil 7ea9acc97f cmd/dockerd: deprecate `api-cors-header` 6c97e0e0b5 update to go1.21.10 72eb615490 Makefile: bundles is not PHONY fda708f55d Delete broken/unused test requirement helper "IPv6" 4aff2fbc98 Remove integration-cli TestDaemonSuite/TestDaemonIPv6Enabled 346a7c07a0 Fix TestDockerSwarmSuite/TestSwarmInitIPv6 b11e95f5bc Don't delete IPv6 multicast addresses from a bridge a5f82ba4bf Disallow IPv6 multicast as bridge n/w subnet aa3a86c038 Refactor IPv6 subnet validation f46473b29c Do not remove kernel-ll addresses from bridges 01ea18f1e3 Allow for a read-only "/proc/sys/net". 57ada4b848 Option to avoid deleting the kernel_ll address from bridges. c5376e534c libnet/ipams/null: move driver name to its pkg f2387f3632 libnet/ipams/defaultipam: move driver name to its pkg 0db56de78e libnet/ipamutils: no more global state 3c9718144f libnet/ipams: register all drivers eda47500fc libnet/ipams: Unconditionally call windowsipam.Register ae9e4319b0 libnet/ipams/windowsipam: that driver knows its name 8cec9f0dca libnet/ipams/defaultipam: add a Register fn 218394cada libnet/ipams/builtin: move to libnet/ipams 29f2ca04e0 libnet: move ipam pkg to ipam/defaultipam e8644c3e0e libnet/ipam: default-address-pools as Register arg 1d5a12dfb1 integration-cli: createNetwork: add t.Helper() 115de5ff3d libnet/ipamapi: add in/out structs for RequestPool 82aae0fe50 libnet/netutils: remove dead util NetworkRange 37a81cd04d libnet/ipam: split v4/v6 address spaces 199c72cb5d libnet/ipam: remove dead DumpDatabase() df88857e6c libnet/ipam: put `addrSpace` into a separate file a047d4b1df libnet/ipam: un-embed mutex from `addrSpace` eeec716e33 Update containerd to v1.7.16 efca9303a4 refactor: updated native diff error message ff8de5e156 Add firewalld policy "docker-forwarding". 5ebe2c0d6b apparmor: Allow confined runc to kill containers 87506142d8 Do not forward DNS requests to self. 147f701bd1 chore: fix function names in comment e3c59640d5 vendor: github.com/Microsoft/go-winio v0.6.2 2140e7e0f5 vendor: golang.org/x/tools v0.16.0 85c9900377 vendor: golang.org/x/mod v0.17.0 e314113ad7 Dockerfile: update docker CLI to v26.1.0 df831c943f vendor: github.com/cilium/ebpf v0.12.3 194cbd6e7d Makefile: refactoring .PHONY 57a12a372f Update GoDoc for ioutils on atomic writers 98d51b510d chore: remove repetitive words 8bbba6315f API: bump version to 1.46 80d92fd450 feat: ctx to client API 838047a1f5 archive: fix ConvertRead/ConvertWrite functions for rootless docker & native diff overlay aef6905e01 overlay2: better documentation of user namespace behavior when checking native diff support f6b80253b8 overlay2: get rid of unnecessary kernel version check b2fd67de77 overlay2: support rootless native overlay diff in kernel 5.11 and above d4f61f92fd Move StartedAt time to before starting the container Bumping docker-cli to version v27.0.3-15-gd41cb083c, which comprises the following commits: 0a8bb6e5b chore: regenerate docs c777dd16d docs: update cli-docs-tool (v0.8.0) eea26c50d docs: update links to docker cli reference 1cf2c4efb docs: regenerate base command c2b9c1474 docs: align heading structure for base command 598442d37 docs: remove frontmatter for base command c964b80e5 docs: rename cli.md to docker.md (base command) 0ca7be015 docs: remove empty docker base command reference 27bf78d33 docs: make buildx build the canonical reference doc 5ed8f858c update to go1.21.12 6b99e0370 vendor: github.com/docker/docker v27.0.3 3134d5582 vendor: github.com/docker/docker v27.0.2 c97e8091a vendor: github.com/docker/docker v27.0.2-dev (e953d76450b6) 894584802 vendor: github.com/docker/docker v27.0.2-dev (861fde8cc974) cd560916f gha/e2e: Update latest version to 27.0 50fae2074 cli/config/credentials: ConvertToHostname: handle IP-addresses 217971d48 re-introduced support for port numbers in docker registry URL 6e35a78fd update golangci-lint to v1.59.1 bf1a70182 vendor: github.com/docker/docker v27.0.1 617eb5271 cli: make initializing the global meter- and tracing providers optional 9f8bda1df cli/config: replace pkg/homedir dependency with local copy ad583961b vendor: github.com/docker/docker v27.0-dev (ff1e2c0de72a, master) c8c13bdca docs/deprecated: update status for graphdriver-plugins 1f7561ecb Dockerfile: update compose to v2.28.0 1a0481007 vendor: github.com/docker/docker v27.0.1-rc.1 faf7647dc refactor: remove test d1cb7d41c cli/command: Don't copy fakeClient 1322f585f test: cli force exit signal handler 34d42bdf0 vendor: github.com/docker/docker v27.0-dev (018d93decfb5) 443617c0f update mailmap and AUTHORS 2088c5963 vendor: github.com/docker/docker 1a1f3cff45ec (master, v27.0-dev) 64c20f301 Additional typo corrections a84536eb4 Fix RFC3339 typo in docs e5d26a8d4 build: allow BuildKit to be used on Windows daemons that advertise it 55a1f6eb7 cli-plugins/manager: add GoDoc for getPluginDirs, defaultSystemPluginDirs 4f00eee52 vendor: github.com/spf13/cobra v1.8.1 00b0eb778 update go-md2man to v2.0.4 b0793613a Dockerfile: update buildx to v0.15.1 0bc092496 deprecate experimental graphdriver plugins 1f1b70dfd docs: add deprecation warning to experimental grapdriver plugins a4bfd8c74 feat: add a global sigint/sigterm handler as a fallback to ctx cancellation eae63069e vendor: github.com/moby/swarmkit/v2 v2.0.0-20240611172349-ea1a7cec35cb 3d017f30d vendor: github.com/docker/docker v27.0.0-rc.2 e0972e94b gha: e2e: test against v27.0 release candidates 43210216f bump version to v27.0.1-dev c07cee05e Update go:build comments to go1.21 1fd8e2434 cli/command/image: add go:build tag to prevent downgrading go version c8f5d4cc6 build(deps): bump docker/bake-action from 4 to 5 3b0d297aa vendor: github.com/docker/docker caf502a0bc44 (v27.0.0-dev) 11a3d8728 vendor: github.com/docker/docker ec4bac431c88 (v27.0.0-dev) 1bfec63b9 vendor: github.com/docker/docker ba69bd9c1e48 (v27.0.0-rc.2-dev) 8376b3e42 use local ConvertToHostname() implementation 4ea91a73e vendor: golang.org/x/net v0.24.0 91b63ac45 vendor: golang.org/x/crypto v0.22.0 a2ccd3eb0 vendor: golang.org/x/term v0.19.0 634b19f5e vendor: golang.org/x/sys v0.19.0 872935f1c vendor: github.com/docker/docker v27.0.0-rc.1 1fc73b470 vendor: github.com/docker/docker v27.0.0-dev (bcd280a3ed2d) e9c0fc330 docs: extend deprecation target for non-TLS API 3dcc65353 plugins: cleanup sockets when done f80d7182c cli/command: remove deprecated EventHandler, InitEventHandler ad62b6869 vendor: github.com/containerd/platforms v0.2.1 6e7266a72 cli/command/registry: fix link to credential stores 6b93cf221 cli: Wrap Err stream b79d68465 Deprecate non-standard (config) fields in image inspect output e06ef800f Removed all mentions of "please" from docs and messages 32ac7a08f cli/push: Print aux notes 966fa7c47 cli/push: Add `platform` switch 892784dee vendor: github.com/docker/docker v27.0.0-dev (9d9488468fe2) 3ce317747 gha: switch to Ubuntu 24.04 43b97e888 update golangci-lint to .v1.59.0 df474d517 cli/command/image/build: fix nosec comment 0ba14fde4 linting: fmt.Sprintf can be replaced with string concatenation (perfsprint) 7db922cf9 cli/command: TestGetDefaultAuthConfig: remove unused expectedErr dfec976e8 linting: fmt.Errorf can be replaced with errors.New (perfsprint) e93abde7a cli/command/network: fix linting issue and pass client instead of cli 43b840ed9 vendor: github.com/docker/docker a736d0701c41 (master, v27.0.0-dev) c481c6492 cli/command: remove some import aliases 851277f96 cli/command/container: rename some variables 1a83595c7 cli/command/container: legacyWaitExitOrRemoved rm intermediate var 0d4de2392 cli/command/container: inline some variables to prevent shadowing d11fbda36 vendor: github.com/distribution/reference v0.6.0 d0057db3a cli/command: more go1.19 ("predeclared any") 3f0d90a2a feat: global signal handling with context cancellation 97b7746df vendor: github.com/docker/docker 59996a493cfc (v27.0.0-dev) 94f9de592 Handle networks.driver_opts for a service a73172265 cli/compose: add schema 3.13 (no changes from 3.12 yet) 0502189e2 cli/command/network: add minimal test for --ipv6 option db2672e68 network create: make --ipv6 optional 0ed8a7e31 vendor: github.com/docker/docker 00f18ef7a455 (master / v27.0.0-dev) 9acfbbd74 Correct typos in docs/ and man/ bc2e27478 vendor: migrate to github.com/go-viper/mapstructure/v2 v2.0.0 23148220e vendor: github.com/docker/docker c6aaabc9fc82 (master / v27.0.0-dev) a9ea03481 vendor: github.com/containerd/containerd v1.7.18 630e1d3e9 update to go1.21.11 558a910b8 vendor: github.com/containerd/containerd v1.7.17 be2c284ee vendor: tags.cncf.io/container-device-interface v0.7.2 20d1b661b cli/command: use shallower interface for completions b6a3ce416 vendor: github.com/docker/docker cd3804655a25 (master / v27.0.0-dev) d4491fc09 Correct typos in the cli/ folder b9cd72259 gha: update to actions/upload-artifact@v4 2ef6bc1c1 Update CODEOWNERS e2fc6bd77 vendor: github.com/docker/docker e622cea55698 (master / v27.0.0-dev) 16c8f4942 vendor: github.com/Microsoft/hcsshim v0.11.5 b7548ba7f vendor: github.com/opencontainers/image-spec v1.1.0 12aaeae21 vendor: github.com/Microsoft/go-winio v0.6.2 fed9fa0f7 context list: temporarily add ContextType to JSON output 40a1da8b4 cli/command/context: list: add test for JSON output 2e9eff235 cli/command/context: test inspecting context with custom metadata 54291dd47 cli/command/context: add test-utility to create multiple contexts 9d9bb19f0 docs: deprecate daemon's api-cors-header flag 7dc271a8b migrate to new github.com/containerd/platforms package d5d94e46f Explain how to use "network connect --driver-opt" to set sysctls 7f9dba60e Test quoted fields in --driver-opt b7583a2c2 Explain how to use "--network driver-opt" to set sysctls 068f118f8 Test quoted field in --network 82ed39e31 docs: use --quiet in example to simplify output e70f68595 Dockerfile: update ALPINE_VERSION to 3.20 0b7aff333 Dockerfile: update compose to v2.27.1 f0e7e07b8 Dockerfile: update buildx to v0.14.1 05905bd92 vendor: github.com/docker/docker-credential-helpers v0.8.2 dc75e9ed6 cli/config: do not discard permission errors when loading config-file c80adf4e8 cli/config: TestLoadDefaultConfigFile: check that no warnings are printed de91207b8 cli/config: add test for dangling symlink for config-file 426fb2fd8 cli/config: Load(), LoadDefaultConfigFile(): improve GoDoc 6d21372db run, create: update "--rm" flag description to mention anonymous volumes 296a6f587 plugins/hooks: Don't show empty hooks 1527d625f Plumb context to API callbacks 3fdf377b6 vendor: github.com/docker/docker master (06e3a49d66fa) 6a4d38c7f docs: fix json syntax error ffd57fac1 Updated engine versions in e2e text matrix dbf844366 vendor: github.com/moby/swarmkit/v2 master (c1c857e2dca1) 5f4f4f64d OTel: implement missing MeterProvider `ForceFlush` f07834d18 OTel: add `command.time` metric to plugin commands 02537eac5 Use funcs on DockerCli to return Meter/TracerProviders, not initialize them. Initialize them during DockerCli struct init 4758ed0b0 Document the extended '--network' syntax e8bfedd26 Fix TestNetworkConnectWithFlags eb99994c7 update to go1.21.10 8d6e571c0 Add e2e tests for run w/ bad entrypoint 31644d5ea Fix hang when container fails to start b7e25a4b4 docstring: typo: settings -> setting e3216ca64 go.mod: use SemVer format for go version to assist CodeQL AutoBuild 692c7ee7e gha: CodeQL: move go.mod/go.sum symlink earlier to help caching e1dcc194e OTEL collector/prometheus/aspire-dashboard stack for testing purposes 1d666b410 feat: wire ctx into plugin hooks 5ccb48459 cli-plugins: PluginRunCommand: use cmd.Environ instead of os.Environ 86162f781 feat: use main func ctx for cobra and use ctx in tests e73fde8ca vendor: update github.com/docker/docker to v26.1.0 dccfd6e4d chore: fix function names in comment 116db4fc8 docs: tidy up CDI docs 73959eef7 chore: remove deprecated DualStack field 1433df8fe bake/bin-image-cross: Add darwin 0c2697d77 Dockerfile: Remove xx-sdk-extras 094af6ea0 darwin/build: Disallow CGO_ENABLED=1 when cross-compiling faf096b25 docs: clarify that --data-path-addr doesn't restrict access Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-07-11 14:07:17 +00:00
Bruce Ashfield	93113db99c	moby: update to v26.1.4 ... Bumping moby to version v26.1.4-4-gf5334644ec, which comprises the following commits: c1d4587d76 builder/mobyexporter: Add missing nil check daba2462f5 docs: api: image inspect: remove Container and ContainerConfig 17315a20ee vendor: github.com/containerd/containerd v1.7.18 cbd94183ab update containerd binary to v1.7.18 3115daaa91 update to go1.21.11 12072173df Update containerd to v1.7.17 92f00d41ba vendor: github.com/Microsoft/go-winio v0.6.2 a046857fbf vendor: golang.org/x/tools v0.16.0 476d9314d0 vendor: golang.org/x/mod v0.17.0 4021fa775e update docker-py to 7.1.0 0fd5efe64a docs/api: add Scope, ConfigOnly, ConfigFrom, Peers (v1.41 - v1.45) 1017246d24 api: swagger: Network: add Peers fbfa1bcc96 api: swagger: POST /networks/create: document Scope, ConfigOnly, ConfigFrom e12db89eef api: swagger: Network: inline examples, and add ConfigOnly, ConfigFrom 5838467405 docs/api: POST /networks/create: inline examples per-field (v1.41 - v1.45) 1033f561af api: swagger: POST /networks/create: inline examples per-field 0fa6816991 api/types: NetworkCreate: add GoDoc eaad6f503d don't depend on containerd platform.Parse to return a typed error fda7b48363 Fix issue where node promotion could fail dbec963cee integration/TestDiskUsage: Make 4096 also a 'empty' value e35c6f5625 Dockerfile: update containerd binary to v1.7.17 (static binaries and CI only) 06e19ec444 Explicity write http headers on streaming endpoints c21fe3efa3 Forward DNS requests into --internal networks 9326cda7bf Do not forward DNS requests to self. 76fcf9a8e0 apparmor: Allow confined runc to kill containers 10739af81a update to go1.21.10 2f5bbbe16b Option to avoid deleting the kernel_ll address from bridges. 40618081f1 Allow for a read-only "/proc/sys/net". 2c91196921 Update containerd to v1.7.16 c9689eccf5 vendor: update buildkit to v0.13.2 7d95fe8db5 c8d/list: Ignore unexpected image target 6667e96dad Include more details in errnotManifestOrIndex ab570ab3d6 nil dereference fix on image history Created value 7532420f3b container/SetupWorkingDirectory: Don't mutate config a4d5b6b4d0 builder/normalizeWorkdir: Always return cleaned path 6c68be24a2 Windows DNS resolver forwarding 745e2356ab Update tags.cncf.io/container-device-interface to v0.7.1 0d6a1a212b vendor: github.com/opencontainers/runtime-spec v1.2.0 f5209d23a8 daemon: add nolint-comments for deprecated kernel-memory options, hooks f07644e17e Add netiputil.AddrPortFromNet() d3c051318f daemon/cluster/executor: Add volume `Subpath` 5368c3a04f vendor: github.com/moby/swarmkit/v2 master (f3ffc0881d0e) f51e18f58e Fix typo 57dd56726a Disable IPv6 for endpoints in '--ipv6=false' networks. 9954d7c6bd Run ipvlan tests even if 'modprobe ipvlan' fails cd7240f6d9 Stop macvlan with no parent from using ext-dns 17b8631545 Enable DNS proxying for ipvlan-l3 5ae5969739 vendor: github.com/containerd/containerd v1.7.15 3485cfbb1e update containerd binary to v1.7.15 fb92caf2aa ci/validate-pr: Use `::error::` command to print errors 61269e718f github/ci: Check if backport is opened against the expected branch d8b768149b Move dummy DNS server to integration/internal/network 329d403e20 update to go1.21.9 d66589496e vendor: golang.org/x/net v0.23.0 e1ca74361b vendor: golang.org/x/net v0.22.0, golang.org/x/crypto v0.21.0 cf933115b6 Minor fix for illumos support 9160b9fda6 save: Remove platform from config descriptor 0a48d26fbc Fix cases where we are wrapping a nil error c4689034fd daemon: don't call NetworkMode.IsDefault() 4eed3dcdfe api: normalize the default NetworkMode c187f95fe1 CONTRIBUTING.md: update Slack link aff003139c ci: update workflow artifacts retention 1014f481de Restore the SetKey prestart hook. fde80fe2e7 Restore the SetKey prestart hook. 14a8fac092 chore: fix mismatched function names in godoc 61e2199b78 AUTHORS,.mailmap: update with recent contributors ea72f9f72c Dockerfile: update docker CLI to v26.0.0 22726fb63b api: document changed behavior of the `Aliases` field in v1.45 3312b82515 c8d/list: Add a test case for images sharing a top layer ad8a5a5732 c8d/list: Fix diffIDs being outputted instead of chainIDs 0c2d83b5fb c8d/list: Handle unpacked layers when calculating shared size f696e0d2a7 Dockerfile: avoid hardcoding arch combinations for delve 3d2a56e7cf docs/api: add documentation for API v1.45 731a64069f c8d/list: Generate image summary concurrently dade279565 c8d/list: Add `Images` benchmark e7c60a30e6 vendor: github.com/moby/buildkit v0.13.1 2e4ebf032a c8d/list: Pass ctx to setupLabelFilter 153de36b3f c8d/list: Add empty index test case 4ff655f4b8 resolvconf: add //go:build directives to prevent downgrading to go1.16 language 1c03312378 integration: Remove Parallel from TestDiskUsage f512dba037 c8d/list: Fix premature `Images` return 89dc2860ba c8d/list: Handle missing configs in label filter 6f3892dc99 c8d/list: Don't setup label filter if it's not specified fe8fb9b9a1 Dockerfile: update mvdan/shfmt to v3.8.0 4bd30829d1 Dockerfile: update docker compose to v2.25.0 971562b005 Dockerfile: update docker CLI to v26.0.0-rc2 d742659877 rootless: fix `open /etc/docker/plugins: permission denied` 4f46c44725 Dockerfile: update xx to v1.4.0 25c9e6e8df Makefile: generate-files: fix check for empty TMP_OUT 762ec4b60c plugin: fix mounting /etc/hosts when running in UserNS 7b414f5703 daemon: move getUnprivilegedMountFlags to internal package 790c3039d0 libnet: Don't forward to upstream resolvers on internal nw 10bdc7136c builder-next: Add env-var to override runc used by buildkit 1ca89d7eae vendor: google.golang.org/protobuf v1.33.0, github.com/golang/protobuf v1.5.4 f40bdf5f63 Dockerfile: update compose to v2.24.7 3f73d23ea0 Dockerfile: update buildx to v0.13.1 388ecf65bc c8d: Send push metrics to prom bb3ab1edb7 c8d: Send pull metrics to prom da245cab15 c8d: Send history metrics to prometheus 1cfd763214 c8d: Send image delete metrics to prometheus 0ce714a085 images: Export the image actions prometheus counter bcb4794eea Be more explicit about non-TLS TCP access deprecation 0d5ef431a1 docker-py: Temporarily skip `test_commit` and `test_commit_with_changes` 03cddc62f4 api/image-inspect: Remove Container and ContainerConfig ec19fd6fed vendor: github.com/containerd/containerd v1.7.14 d19f6d4b6d vendor: github.com/containerd/ttrpc v1.2.3 a6a445d86b set-up-git.md: clarify URL in git clone command 294fc9762e volume: Don't decrement refcount below 0 eef352b565 devcontainer: Use a separate devcontainer target 5a009cdd5b inte/networking: add isIPv6 flag 2f1a32e3e5 c8d/list: Skip images with non matching platform 72f1f82f28 c8d/list: Remove outdated TODO 52a80b40e2 c8d/list: Extract imageSummary function 288a14e264 c8d/list: Simplify "best" image selection b37ced2551 c8d/list: Count containers by their manifest a535a65c4b c8d/list: Combine size 582de4bc3c c8d/list: Add TestImageList a6e7e67d3a specialimage: Return optional ocispec.Index 1b108bdfeb daemon/c8d: Cache SnapshotService 74e2f23e1a daemon/c8d: Use i.images and i.content e8496b1ee4 imageService: Extract common code from `MakeImageCache` d66177591e c8d/cache: Use the same cache logic as graphdrivers bf30fee58a image/cache: Refactor backend specific code f5a5e3f203 golangci-lint: enable dupword linter 4adc40ac40 fix duplicate words (dupwords) 8921897e3b Ignore bad ndots in host resolv.conf 37545cc644 builder-next: fix missing lock in ensurelayer ef5295cda4 Don't configure IPv6 addr/gw when IPv6 disabled. 49b77753cb builder-next/export: Use leaseutil for descref lease c4fc6c3371 builder-next/executor: Replace removed network.Sample 0f30791a0d vendor: github.com/moby/buildkit v0.13.0 4e8d9a4522 Add IPv6 nameserver to the internal DNS's upstreams. 06628e383a remove repetitive words 21835a5696 inte/networking: rename linkLocal flag into isLinkLocal b32cfc3b3a dockerd-rootless-setuptool.sh: check RootlessKit functionality 49fd8df9b9 Dockerfile: update RootlessKit to v2.0.2 72ec187dfe go.mod: github.com/rootless-containers/rootlesskit/v2 v2.0.2 83cda67f73 go.mod: golang.org/x/sys v0.18.0 57b7ffa7f6 update to go1.21.8 cadb124ab6 daemon: overlay2: remove world writable permission from the lower file b2921509e5 api/search: Reset `is_automated` field to `false` f04f69e366 Accumulate resolv.conf options 7f69142aa0 resolv.conf comments have '#' or ';' in the first column 91d9307738 Replace uses of slices.Clone() 12dea3fa9e devcontainer: Add Golang extension automatically 9f4e824a6e vendor: github.com/miekg/dns v1.1.57 ef681124ca fix typo in error message 7ebd88d2d9 hack: block imports of vendored testify packages 4f30a930ad libn/cnmallocator: migrate tests to gotest.tools/v3 a580544d82 Don't create endpoint config for MAC addr config migration ebf3f8c7fe distribution/xfer: fix pull progress message 2af2496c8c Dockerfile: Update dev cli to v26.0.0-rc1 fc0e5401f2 ci: Update `teststat` to v0.1.25 7b0ab1011c Vendor dependency cycle-free swarmkit 62b33a2604 disable pulling legacy image formats by default 5fe96e234d integration: Reset `OTEL_EXPORTER_OTLP_ENDPOINT` for sub-daemons 84eecc4a30 Revert "integration/TestDaemonProxy: Remove OTEL span" 261dccc98a builder-next: Add `Info` to `emptyProvider` 2c9c5e1c03 vendor: github.com/moby/buildkit v0.13.0-rc3 b649e272bb Allow to enable host loopback and use 10.0.2.2 to connect to the host (OPTIONALLY) e4de4dea5c ci: Make `find` for test reports more specific 9be820d8ca vendor: go.etcd.io/bbolt v1.3.9 da643c0b8a libcontainerd: change the digest used when restoring 9083c2f10d Test DNS on Windows 'nat' networks 44167988c3 c8d/windows: Temporarily skip two failing tests 2d31532a00 otel: Default metrics protocol to http/protobuf 60358bfcab ci(buildkit): dedicated step to build test image f5722da5e0 mobyexporter: Store temporary config descriptor 951e42cd60 builder-next: Replace ResolveImageConfig with ResolveSourceMetadata e01a1c5d09 builder/mobyexporter: Set `image.name` response key fa467caf4d builder-next/mobyexporter: Use OptKeyName const 59ad1690f7 builder-next: Adjust to source changes b04a2dad6b builder/controller: Adjust NewWorkerOpt call bc6d88c09a cmd/dockerd: Fix overriding OTEL resource a79bb1e832 builder-next/exporter: Sync with new signature e68f71259a integration/build: Use fsutil.NewFS dd6992617e integration/build: Use new buildkit progressui 31545c3b67 vendor: github.com/moby/buildkit v0.13.0-rc2 f90b03ee5d go.mod: bump to go 1.21 and use local toolchain when vendoring 16aa7dd67f c8d/pull: Output truncated id for `Pulling fs layer` 881260148f api: omit missing Created field from ImageInspect response 432390320e api/pre-1.44: Default `ReadOnlyNonRecursive` to true 6aea26b431 client: fix connection-errors being shadowed by API version mismatch errors 913478b428 client: doRequest: make sure we return a connection-error 901b90593d client: NegotiateAPIVersion: do not ignore (connection) errors from Ping 349abc64ed client: fix TestPingWithError 05b883bdc8 mounts/validate: Don't check source exists with CreateMountpoint c516804d6f vendor: OTEL v0.46.1 / v1.21.0 83c02f7a11 libnet/ds: remove extra space in error msg 14df52b709 c8d/pull: Don't emit `Downloading` with 0 progress ff5f780f2b c8d/pull: Emit `Pulling fs layer` 5689dabfb3 pkg/streamformatter: Make `progressOutput` concurrency safe 1d473549e8 ci: Require changelog description b2aaf5c2b0 vendor: github.com/containerd/continuity v0.4.3 cbd45e83cf libnet: Replace DeleteAtomic in retry loops with DeleteIdempotent d9e082ff54 libnetwork: resolve: use structured logs for DNS error 8761bffcaf Makefile: Pass PAGER/GIT_PAGER variable 56aeb548b2 integration/TestDaemonProxy: Remove OTEL span 38827ba290 ci: set codecov token bddd892e91 c8d: Adjust "image list" to return only a single item for each image store entry 2aa13e950d awslogs: Replace depreacted WithEndpointResolver usage 70a4a9c969 vendor: bump github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs to v1.32.0 9faf4855d5 Simplify macvlan/ipvlan integration test structure 4eb95d01bc Run the macvlan/ipvlan integration tests 7c2975d2df update to go1.21.7 903412d0fc api/history: Mention empty `Created` 443f56efb0 Set up DNS names for Windows default network b4fbe226e8 Set `Created` to `0001-01-01T00:00:00Z` on older API versions 5bcd2f6860 builder/dockerfile: ADD with best-effort xattrs 999f90ac1c vendor: bump github.com/aws/aws-sdk-go-v2 to v1.24.1 ef7766304c vendor: github.com/containerd/nydus-snapshotter v0.13.7 6932939326 vendor: google.golang.org/genproto/googleapis/rpc 49dd2c1f3d0b 10a72f2504 vendor: cloud.google.com/go/logging v1.8.1 a60fef0c41 vendor: golang.org/x/exp v0.0.0-20231006140011-7918f672742d 03a17a2887 migrate image spec to github.com/moby/docker-image-spec a26c953b94 Add comment explaining network-create flow for Swarm 571af915d5 Don't enforce new validation rules for existing networks b71c2792d2 image/spec: remove link to docs.docker.com "registry" specification 4ab11a1148 vendor: github.com/containerd/containerd v1.7.13 419f5a6372 Make 'internal' bridge networks accessible from host 475019d70a vendor: github.com/prometheus/procfs v0.12.0 63c354aae2 vendor: github.com/prometheus/client_golang v1.17.0 beb97f7fdf Refactor 'resolv.conf' generation. 14503ccebd api/server/middleware: NewVersionMiddleware: add validation e1897cbde4 api/server/middleware:use API-consts in tests 0fef6e1c99 api/server/middleware: VersionMiddleware: improve docs 6b01719ffb api: add MinSupportedAPIVersion const 19a04efa2f api: remove API < v1.24 8758d08bb4 api: remove handling of HostConfig on POST /containers/{id}/start (api < v1.24) ffd877f948 api: remove plain-text error-responses (api < v1.24) b3a0ff9944 api: remove POST /containers/{id}/copy endpoint (api < v1.23) 83f790cccc api: POST /exec/{id}/start: remove support for API < v1.21 d1974aa492 api: remove code for container stats on api < v1.21 ed93110e11 api: update test to reflect reality on Windows 570d5a9645 api: remove code for ContainerInspect on api v1.20 f0dd554e3c api: remove code for ContainerInspect on api < v1.20 dfdf2adf0c api: POST /containers/{id}/kill: remove handling for api < 1.20 2970b320aa api: remove code for adjusting CPU shares (api < v1.19) ef25f0aa52 api: POST /build: remove version-gate for "pull" (api < v1.16) 7fa116830b api: POST /build: remove version-gate for "rm", "force-rm" (api < v1.16) 1b1147e46b api: POST /commit: remove version-gate for "pause" (api < v1.16) d26bdfe226 runconfig: remove fixtures for api < v1.19 f1e6958295 c8d: Use the same logic to get the present images 2c01d53d96 image/cache: Use Platform from ocispec d69729e053 seccomp: add futex_wake syscall (kernel v6.7, libseccomp v2.5.5) 10d344d176 seccomp: add futex_wait syscall (kernel v6.7, libseccomp v2.5.5) df57a080b6 seccomp: add futex_requeue syscall (kernel v6.7, libseccomp v2.5.5) 8826f402f9 seccomp: add map_shadow_stack syscall (kernel v6.6, libseccomp v2.5.5) 6f242f1a28 seccomp: add fchmodat2 syscall (kernel v6.6, libseccomp v2.5.5) 4d0d5ee10d seccomp: add cachestat syscall (kernel v6.5, libseccomp v2.5.5) 1251982cf7 seccomp: add set_mempolicy_home_node syscall (kernel v5.17, libseccomp v2.5.4) 7f1b700227 Dockerfile: update RootlessKit to v2.0.1 f1730a6512 go.mod: github.com/rootless-containers/rootlesskit/v2 v2.0.1 f7192bb0b4 vendor.mod: github.com/google/uuid v1.6.0 91ea04089b image/cache: Ignore Build and Revision on Windows 2ef0b53e51 integration/save: Add tests checking OCI archive output 74d51e8553 plugins: fix panic installing from repo w/ digest e910a79e2b Remove 'VERSION' from the text 9fcea5b933 Fix broken links in project/README.md 10d6f5213a Dockerfile: update docker compose to v2.24.5 9c92c07acf Dockerfile: update dev-shell version of the cli to v25.0.2 89470a7114 libnet: bridge: ignore EINVAL when configuring bridge MTU e37172c613 api/t/network: ValidateIPAM: ignore v6 subnet when IPv6 is disabled c59e93a67b Revert "daemon: automatically set network EnableIPv6 if needed" 83af50aee3 libnet: boltdb: inline getDBhandle() 4d7c11c208 libnet: boltdb: remove PersistConnection 8070a9aa66 libnet: drop TestMultipleControllersWithSameStore 82dda18898 tests: add plugin install test w/ digest dd20bf4862 libcontainerd/supervisor: fix data race 0c3b8ccda7 api: Document `version` in `/build` 2cc627932a Add internal n/w bridge to firewalld docker zone 8c64b85fb9 No inspect 'Config.MacAddress' unless configured. dae33031e0 Only restore a configured MAC addr on restart. a2026ee442 ci: update to docker/bake-action@v4 5a3c463a37 ci: update to codecov/codecov-action@v4 9babc02283 ci: update to actions/download-artifact@v4 and actions/upload-artifact@v4 a83557d747 ci: update to actions/cache@v3 2200c0137f libnetwork/datastore: don't parse file path d21d0884ae libnetwork: share a single datastore with drivers 835cdcac95 update containerd binary to v1.7.13 f4a93b6993 vendor: github.com/moby/buildkit v0.12.5 b20dccba5e vendor: github.com/opencontainers/runc v1.1.12 44bf407d4d update runc binary to v1.1.12 ecb217cf69 hack/make.ps1: Fix go list pattern 3a8191225a gha: update to crazy-max/ghaction-github-runtime@v3 08251978a8 gha: update to docker/login-action@v3 5d396e0533 gha: update to docker/setup-qemu-action@v3 4a1839ef1d gha: update to docker/bake-action@v4 b7fd571b0a gha: update to docker/setup-buildx-action@v3 00a2626b56 gha: update to docker/metadata-action@v5 e27a785f43 gha: update to actions/setup-go@v5 fb53ee6ba3 gha: update to actions/github-script@v7 0ffddc6bb8 gha: update to actions/checkout@v4 987fe37ed1 d/logger/journald: quit waiting when logger closes d53b7d7e46 d/logger/journald: sync logger on close in tests 39c5c16521 d/logger/loggertest: improve TestConcurrent 5792bf7ab3 d/logger/journald: log journal-remote cmd output 982e777d49 d/logger/journald: fix data race in test harness ca40ac030c vendor: google.golang.org/grpc v1.59.0 0818a476e5 vendor: github.com/go-logr/logr v1.3.0 a0b53f6fd2 vendor: golang.org/x/net v0.18.0 2ddec74d59 Remove unused params from etchosts.Build() 5e13f54f57 c8d/save: Handle digested reference same as ID d131f00fff image/save: Fix untagged images not present in index.json 21136865ac libnet: remove arg `options` from (*Endpoint).Leave() a8e8a4cdad libn/d/overlay: drop miss flags from peerAddOp 6ee58c2d29 libnetwork/d/overlay: drop miss flags from peerAdd 905477c8ae logger/journald: drop errDrainDone sentinel d70fe8803c logger/journald: wait no longer than the deadline e94ec8068d logger/journald: use deadline for drain timeout 71bfffdad1 l/journald: make tests compatible with systemd 255 931568032a daemon/logger/loggertest: expand log-follow tests 388ba9a69c Dockerfile: update docker compose to v2.24.3 3eb1527fdb Dockerfile: update dev-shell version of the cli to v25.0.1 7f94acb6ab docs: remove dead links from api verison history 5c2eda6f71 vendor swarmkit v2.0.0-20240125134710-dcda100a8261 96d461d27e builder/windows: Don't set ArgsEscaped for RUN cache probe 877ebbe038 image/cache: Check image platform 96ac22768a image/cache: Restrict cache candidates to locally built images c6156dc51b daemon/imageStore: Mark images built locally 537348763f image/cache: Compare all config fields bd4ff31775 add more //go:build directives to prevent downgrading to go1.16 language e245fb76de internal/sliceutil: add utilities to map values 3147a013fb libnet/ds: remove unused param `key` from List f7ef0e9fc7 libnet/ds: remove unused param `key` from GetObject 3a617e5463 c8d: Use a specific containerd namespace when userns are remapped f7e2357745 image: remove deprecated IDFromDigest 13f46948dd api/types: remove deprecated container-types 4b09bc2145 api/types: remove deprecated service-types 49637d0206 api/types: remove deprecated image-types eccb1a3eb8 api/types: remove deprecated checkpoint-types 0b1921649f api/types: remove deprecated system info types and functions 6f44138269 libnetwork: fix tiny grammar mistake on design.md 9a41cc58d9 libnetwork: fix typo in iptables.go ac2a028dcc api/types: move image options to api/types/image 80c44b4b2e daemon: rename: don't reload endpoint from datastore 250886741b volume/local: Fix cifs url containing spaces f4beb130b0 volume/local: Add tests for parsing nfs/cifs mounts df43311f3d volume/local: Break early if `addr` was specified 9f37672ca8 daemon: only add short cid to aliases for custom networks c25773ecbf cmd/dockerd: newRouterOptions: pass cluster as argument, and slight cleanup 00c9785e2e fix "host-gateway-ip" label not set for builder workers 0d51cf9db8 volume/local: Make host resolution backwards compatible 05d952b246 Dockerfile: update docker compose to v2.24.2 20bd690844 integration-cli: simplify test-file creation 34668a5945 pkg/archive: fixe some unclosed file-handles in tests 1090aaaedd libnetwork: fix some unclosed file-handles in tests c482383458 fix some leaking mounts in tests 43bf65c174 pkg/system: return even richer xattr errors a3a42c459e api/types/image: move GetImageOpts to api/types/backend cd53b7380c Remove generated MAC addresses on restart. fb19f1fc20 c8d/snapshot: Create any platform if not specified 6100190e5c daemon/cluster/executer: Add missing `StartInterval` 17fd6562bf image/save: Fix layers order in OCI manifest 4979605212 image/save: Change layers type to DiffID fcc651972e daemon: return an InvalidParameter error when ep settings are wrong a0466ca8e1 integration-cli: TestInspectAPIMultipleNetworks: use current version 13a384a6fa integration-cli: TestInspectAPIBridgeNetworkSettings121: use current version 52e3fff828 integration-cli: TestPutContainerArchiveErrSymlinkInVolumeToReadOnlyRootfs: use current API 521123944a docs/api: remove version matrices from swagger files d54be2ee6d docs: remove documentation for deprecated API versions < v1.23 64a6cc3afd integration/build: improve some asserts, and add asserts for unhandled errs a88cd68d3e integration/images: improve some asserts, and add asserts for unhandled errs a404017a86 vendor: golang.org/x/tools v0.14.0 41a2aa2ee2 vendor: golang.org/x/oauth2 v0.11.0 2799417da1 vendor: golang.org/x/mod v0.13.0, golang.org/x/tools v0.13.0 407ad89ff0 vendor: golang.org/x/sync v0.5.0 94b4765363 pkg/platforms: internalize in daemon/containerd 0a9bc3b507 libnetwork: Sandbox.ResolveName: refactor ordering of endpoints 058b30023f libnetwork: loosen container IPAM validation 844ca49743 pkg/containerfs: remove deprecated ResolveScopedPath 2767d9ba05 pkg/homedir: remove deprecated Key() and GetShortcutString() f16a2179a6 pkg/system: remove deprecated ErrNotSupportedOperatingSystem, IsOSSupported e2086b941f remove deprecated pkg/loopback (utility package for devicemapper) f07c45e4f2 daemon: remove --oom-score-adjust flag 307fe9c716 Dockerfile: update docker compose to v2.24.1 dfced4b557 Dockerfile: update dev-shell version of the cli to v25.0.0 c655b7dc78 Assert temp output directory is not an empty string a8f7c5ee48 Detect IPv6 support in containers. 0046b16d87 daemon: set libnetwork sandbox key w/o OCI hook 5bbcc41c20 volumes/subpath: Plumb context cb1af229f2 daemon/populateVolumes: Support volume subpath 349a52b279 container: Change comment into debug log 42afac91d7 internal/safepath: Add windows implementation 5841ed4e5e internal/safepath: Adapt k8s openat2 fallback 56bb143a4d internal/safepath: Import k8s safeopen function 3784316d46 internal/safepath: Handle EINTR in unix syscalls 9a0cde66ba internal/safepath: Add linux implementation bfb810445c volumes: Implement subpath mount f2e1105056 Introduce a helper that collects cleanup functions f07387466a daemon/oci: Extract side effects from withMounts 9c8752505f volume/mounts: Rename errors in defer block 5bcbedb7ee API: bump version to 1.45 35789fce99 daemon.images: ImageService.getImage: use named fields in struct literals 7c1914411f daemon/images: ImageService.manifestMatchesPlatform: optimize logger 5581efe7cd rename "ociimage" var to be proper camelCase 66cf6e3a7a rename "image" vars to prevent conflicts with imports c72e458a72 Fix libnetwork/osl test TestAddRemoveInterface 768146b1b0 Fix isGitURL regular expression 585d74bad1 pkg/ioutils: Make subsequent Close attempts noop fbdc02534a De-flake TestSwarmClusterRotateUnlockKey... again... maybe? Bumping docker-cli to version v26.1.4-2-g6eb67bf57, which comprises the following commits: 5bab750c2 cli/command: more go1.19 ("predeclared any") e8bc27d4c vendor: github.com/docker/docker de5c9cf0b96e (v26.1.4-dev) 2acb9c2e8 vendor: github.com/containerd/containerd v1.7.18 230d4d0ba vendor: github.com/containerd/containerd v1.7.17 6d47c06b0 vendor: tags.cncf.io/container-device-interface v0.7.2 a6d757c0e vendor: github.com/Microsoft/hcsshim v0.11.5 c463d968f vendor: github.com/opencontainers/image-spec v1.1.0 0576b3dad update to go1.21.11 60b13f1f8 Dockerfile: update ALPINE_VERSION to 3.20 b600054c5 migrate to new github.com/containerd/platforms package dafe63b08 gha: update to actions/upload-artifact@v4 079107e1b [26.1] vendor: github.com/docker/docker v26.1.3 14d7485d9 vendor: github.com/Microsoft/go-winio v0.6.2 50bb59277 docs: tidy up CDI docs c4767b314 docs: fix json syntax error 258e27438 context list: temporarily add ContextType to JSON output 29cd8591e cli/command/context: list: add test for JSON output e23a63eb4 cli/command/context: test inspecting context with custom metadata 1e52a86d4 cli/command/context: add test-utility to create multiple contexts e382a5f22 plugins/hooks: Don't show empty hooks 26e9ff49c vendor: github.com/docker/docker v26.1.3-dev (8e96db1c328d) 326c7138b OTel: implement missing MeterProvider `ForceFlush` ee359a394 OTel: add `command.time` metric to plugin commands 669108501 Use funcs on DockerCli to return Meter/TracerProviders, not initialize them. Initialize them during DockerCli struct init 81b482ea5 docs: clarify that --data-path-addr doesn't restrict access e64914c89 vendor: github.com/docker/docker v26.1.2-dev (ef1912d8b6ae) c1d70d1fb update to go1.21.10 4add46d68 Add e2e tests for run w/ bad entrypoint ccea7d8a3 Fix hang when container fails to start 1c6a8ecf2 cli-plugins: PluginRunCommand: use cmd.Environ instead of os.Environ 6d1c387af vendor: github.com/docker/docker ac2de55998d4 (v26.1.1) 840016ea0 waitExitOrRemoved: Handle context cancellation aec1d364b vendor: github.com/docker/docker v26.1.0-dev (c8af8ebe4a89) 43cb06e1a hooks: pass command execution error to plugins 9d8320de9 hooks: include full configured command 6ad512068 vendor: github.com/docker/docker v26.1.0-dev (ee8b788538ea) c3243a8cc ci/validate-pr: Use `::error::` command to print errors f92fcdef1 github/ci: Check if backport is opened against the expected branch 745704d7b ci: Require changelog description 762a85a10 Warn about deprecation of windows-dns-proxy flag 501175905 hooks: set expected environment when executing d6796c002 Fix OTLP env var overriding c449c1a49 plugins/hooks: run hooks when exit code != 0 287f482e3 Feature option 'windows-dns-proxy' 867061b00 plugins/templates: break on newlines when printing hooks 718203d50 cli-bin/windows: Add .exe extension 5515b8651 vendor: github.com/docker/docker v26.0.1-0.20240410103514-f9dfd139ec0d+incompatible (master) c1053bf9d vendor: github.com/moby/swarmkit/v2 v2.0.0-20240227173239-911c97650f2e 8a3a7b945 vendor: github.com/containerd/containerd v1.7.15 458580984 docs: add systempaths=unconfined security-opt 5fcbbde4b vendor: golang.org/x/net v0.23.0 4745b957d vendor: golang.org/x/net v0.22.0, golang.org/x/crypto v0.21.0 c7a50ebb9 vendor: golang.org/x/term v0.18.0 9a2133f2d vendor: golang.org/x/sys v0.18.0 0a5bd6c75 update to go1.21.9 cefcba987 otel: capture exit code as int64 ee1b2836a otel: capture whether process was invoked from a terminal 8f45f1495 command: include default otel error handler for the cli 910d5d024 chore: remove backticks and resolve linting issues 2a3b6c03f cli: add go:build tag to the docker telemetry efd82e1e3 Initial otel impl using our utils b6e2eca4b Enable overriding of the otel exporter otlp endpoint via env var for testing purposes 160f65d9d Added some telemetry utils 9a1b0f8bb CONTRIBUTING.md: update Slack link 7c722c08d feat: standardize error for prompt 7ea10d5ce refactor: prompt tests 89db01ef9 cli: add otel sdk tracing and metric providers to the core cli c5016c6d5 cli-plugins: Introduce support for hooks 509123f93 plugin: drop explicit unlink fdb48a066 vendor: github.com/docker/docker v26.0.0 542e82cae plugin: update/improve process lifecycle documentation d68cc0e8d plugin: closer-based plugin notification socket d2ea5adfe fix: flaky prompt termination on reader close test ccfd0b2cc test/ Improve test coverage in volume.go 69575f617 vendor: github.com/docker/docker 8b79278316b5 (master) b70a26dea vendor: github.com/docker/docker 330d777c53fb (v26.0.0-rc3-dev) f96d8e78c docs/deprecated: update status of short cid alias deprecation b120b96ac ci: set DISABLE_WARN_OUTSIDE_CONTAINER=1 for CodeQL action 24186d800 ci: fix CodeQL 2.16.4 autobuild 48b5efee0 Dockerfile: update mvdan/gofumpt to v0.6.0 38c3ff67a vendor: github.com/docker/docker 70e46f2c7c2d (v26.0.0-rc3-dev) f8fc5b6bc scripts/vendor: remove -compat=1.19 a4a79d75c vendor: google.golang.org/protobuf v1.33.0, github.com/golang/protobuf v1.5.4 115c8d56e vendor: github.com/containerd/containerd v1.7.14 939283181 builder: correct the command path for docker build dc4163fb1 docs/deprecated: Deprecate Container fields in image inspect 3da26a5e7 docs: add description and link for --userns flag 4bb2abaa5 docs: typo fixes and other corrections 90c33dbfd deprecate legacy image formats 800a51d6c Set CGO_ENABLED=1 on riscv64 9349f58b8 docs: clarify what the --privileged flag does adb018084 Dockerfile: update to xx 1.4.0 46afd26c4 cli/command: deprecate EventHandler and InitEventHandler 5c54f75f2 cli/command/container: use ping-result for OS-version 617377c04 Describe an 'internal' network. 860b4f3a7 'docker daemon' flags refer to the default bridge 645b97352 vendor: github.com/docker/docker v26.0.0-rc2 3cf2fe0ff docs: deprecate TCP connection without TLS a8379092a vendor: github.com/docker/docker f4c696eef17d62a42 ab9d56057 bake: Add `windows/arm64` target to bin-image-cross 3b7747794 update to go1.21.8 10bf91a02 fix: cli prompt termination exit code 238d659ff Add support for --detach/-d flag in stack rm b086d7276 Add support for --detach flag in stack deploy 5e8023239 vendor: github.com/docker/docker v26.0.0-rc1 d51ba4179 docs: prefer -it over -ti a5b82e9f8 docs: fix typo in tty example abe78b79d chore: `docker help` should not show plugin vendor and version 5786f2068 plugins: fix encoding for OTEL env var passed to plugin 85dcacd78 plugins: set OTEL_RESOURCE_ATTRIBUTES when invoking a plugin acc675014 vendor: github.com/docker/docker c70d7905fbd9 (v26.0.0-dev) 79541b7e2 vendor: google.golang.org/grpc v1.59.0 096ced089 vendor: OTEL v0.46.1 / v1.21.0 f3c77df31 vendor: github.com/prometheus/client_golang v1.17.0 1b42d04d6 vendor: github.com/go-logr/logr v1.3.0 f5a29ff8e vendor: github.com/containerd/containerd v1.7.13 2663c1057 ci: set codecov token 48a670f26 docs: fix invalid daemon.json examples f2e98f9a9 docs: regenerate markdown caf72655f docs: update url scheme for reference docs e24404494 deps: update cli-docs-tool version (v0.7.0) 20b9d489e update to go1.21.7 c514003e6 Fixed typo in bash completion functions ff5b0d18f man/docker-build.1: typo in parameter variable: CID => IID 3b5e81424 cli-plugins/socket: remove use of deprecated distribution uuid package 69ed6588a Cleanup of dockerfiles, compose files and env vars 6b67b9549 Update gha runners and engines used in e2e tests edc09e603 mount: Add `volume-subpath` option 9831fea4d testenv: Add DaemonAPIVersion helper 8bae66271 cli/connhelper/commandconn: inline variables df6220d43 vendor: github.com/docker/docker 86b86412a1b7 (v26.0-dev) 30dd7c131 Minor test fixes necessary for eventually upgrading ci runners and engine version 2c214241f Avoid keeping @docker_cli_[UUID] files c986d09bc docker stack: allow '=' separator in extra_hosts 324309b08 vendor: github.com/docker/docker 9e075f3808a5 (master, v26.0.0-dev) 93ad9fbdf vendor: github.com/moby/swarmkit/v2 v2.0.0-20240125134710-dcda100a8261 69e0f53a0 Uniform volume prune output msg with other prune commands 809eb8cde images: print hint when invoking "docker images" with ambiguous argument b158181a1 cli/command/images: runImages: use proper camel-case for dockerCLI 1328bb338 cli/command/images: runImages: inline intermediate var b123ce652 build(deps): Bump codecov/codecov-action from 3 to 4 1587b70ee Remove dummy circleci config cfa9fef77 tests: add plugin-socket-compatibility tests dfdff11a2 cli/command: don't use pflags.XXXVarP for flags without shorthand 690f63e6d cli/command/container: minor cleanup in attach 53e2e54c2 Dockerfile: update docker compose to v2.24.3 1c4d6d85d scripts: don't hardcode architecture in e2e script 4fa2fe9b9 Replace deprecated types.Image* usage 68dac842a vendor: github.com/docker/docker 43ffb1ee9d5a (v26.0.0-dev) 4b1ed1f44 vendor: github.com/docker/docker v25.0.1 d9294f06b info: remove printSecurityOptionsWarnings, printServerWarnings ec0a62436 docs: update host-gateway-ip to use daemon.json instead of cli flag 469bfc05e tests: add tests for `cli-plugins/socket` 091af560c Dockerfile: update docker compose to v2.24.2 2402dac81 cli/command/container: remove deprecated NewStartOptions b43377a38 cli/command: remove deprecated DockerCliOption, InitializeOpt a71d39bca info: remove printServerWarningsLegacy 8cd3b0042 socket: return from loop after EOF 337dd82d8 vendor: github.com/docker/docker v25.0.0 d633890f9 docs: move base command to docker.md aff4649cb docs: fix broken links to alias pages 852d198bb docs: add documentation for CDI 1f9573bb0 Add Linode docker volume plugin Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-07-10 15:59:26 +00:00
Bruce Ashfield	258742feb5	moby: adapt SRC_URI to include destsuffix=${GO_SRCURI_DESTSUFFIX} ... As of commit cc4ec43a2b657fb4c58429ab14f1edc2473c1327 [go: Drop fork of unpack code, mandate GO_SRCURI_DESTSUFFIX] we require this variable in our go recipes. We also adjust our paths to the new source location and drop references to WORKDIR. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-05-29 13:16:56 +00:00
Bruce Ashfield	b7911a2a07	moby: update to v25.0.3 ... Bumping moby to version v25.0.3, which comprises the following commits: acd023d42b c8d: Use the same logic to get the present images ed7c26339e seccomp: add futex_wake syscall (kernel v6.7, libseccomp v2.5.5) 74e3b4fb2e seccomp: add futex_wait syscall (kernel v6.7, libseccomp v2.5.5) 4cc0416534 seccomp: add futex_requeue syscall (kernel v6.7, libseccomp v2.5.5) f9f9e7ff9a seccomp: add map_shadow_stack syscall (kernel v6.6, libseccomp v2.5.5) 5fb4eb941d seccomp: add fchmodat2 syscall (kernel v6.6, libseccomp v2.5.5) 67e9aa6d4d seccomp: add cachestat syscall (kernel v6.5, libseccomp v2.5.5) 61b82be580 seccomp: add set_mempolicy_home_node syscall (kernel v5.17, libseccomp v2.5.4) 0227d95f99 image/cache: Use Platform from ocispec fa9c5c55e1 image/cache: Ignore Build and Revision on Windows 1652559be4 Dockerfile: update RootlessKit to v2.0.1 147b5388dd integration/save: Add tests checking OCI archive output ba4a2dab16 plugins: fix panic installing from repo w/ digest 51133117fb tests: add plugin install test w/ digest 269a0d8feb Dockerfile: update docker compose to v2.24.5 876b1d1dcd Dockerfile: update dev-shell version of the cli to v25.0.2 0bcd64689b Dockerfile: update docker compose to v2.24.3 8d454710cd Dockerfile: update dev-shell version of the cli to v25.0.1 c12bbf549b libcontainerd/supervisor: fix data race 9150d0115e d/logger/journald: quit waiting when logger closes 9af7c8ec0a d/logger/journald: sync logger on close in tests 3344c502da d/logger/loggertest: improve TestConcurrent 6c9fafdda7 d/logger/journald: log journal-remote cmd output f8a8cdaf9e d/logger/journald: fix data race in test harness 7a659049b8 libnet: bridge: ignore EINVAL when configuring bridge MTU 0ccf1c2a93 api/t/network: ValidateIPAM: ignore v6 subnet when IPv6 is disabled 28c1a8bc2b Revert "daemon: automatically set network EnableIPv6 if needed" bbe6f09afc No inspect 'Config.MacAddress' unless configured. 5b13a38144 Only restore a configured MAC addr on restart. 990e95dcf0 Add internal n/w bridge to firewalld docker zone c48b67160d api: Document `version` in `/build` 225e043196 c8d/save: Handle digested reference same as ID 78174d2e74 image/save: Fix untagged images not present in index.json 85f4e6151a Assert temp output directory is not an empty string dd4de8f388 docs: remove dead links from api verison history f5ef4e76b3 ci: update to docker/bake-action@v4 6c5e5271c1 ci: update to codecov/codecov-action@v4 693fca6199 ci: update to actions/download-artifact@v4 and actions/upload-artifact@v4 49487e996a ci: update to actions/cache@v3 0358f31dc2 gha: update to crazy-max/ghaction-github-runtime@v3 081cffb3fa gha: update to docker/login-action@v3 9de19554c7 gha: update to docker/setup-qemu-action@v3 2a80b8a7b2 gha: update to docker/bake-action@v4 61ffecfa3b gha: update to docker/setup-buildx-action@v3 02cd8dec03 gha: update to docker/metadata-action@v5 1d7df5ecc0 gha: update to actions/setup-go@v5 4e68a265ed gha: update to actions/github-script@v7 e437f890ba gha: update to actions/checkout@v4 fd6a419ad5 update containerd binary to v1.7.13 13ce91825f vendor: github.com/moby/buildkit v0.12.5 4b63c47c1e vendor: github.com/opencontainers/runc v1.1.12 4edb71bb83 update runc binary to v1.1.12 1b47bfac02 hack/make.ps1: Fix go list pattern f2d0d87c46 logger/journald: drop errDrainDone sentinel 6ac38cdbeb logger/journald: wait no longer than the deadline d7bf237e29 logger/journald: use deadline for drain timeout f41b342cbe l/journald: make tests compatible with systemd 255 f413ba6fdb daemon/logger/loggertest: expand log-follow tests c2ef38f790 vendor swarmkit v2.0.0-20240125134710-dcda100a8261 d5eebf9e19 builder/windows: Don't set ArgsEscaped for RUN cache probe f3f5327b48 image/cache: Check image platform 05a370f52f image/cache: Restrict cache candidates to locally built images be7b60ef05 daemon/imageStore: Mark images built locally 6d05b9b65b image/cache: Compare all config fields c01bbbddeb pkg/ioutils: Make subsequent Close attempts noop 32635850ed add more //go:build directives to prevent downgrading to go1.16 language 2cf1c762f8 De-flake TestSwarmClusterRotateUnlockKey... again... maybe? 5295e88ceb daemon: rename: don't reload endpoint from datastore 3de920a0b1 volume/local: Fix cifs url containing spaces a445aa95e5 volume/local: Add tests for parsing nfs/cifs mounts cb77e48229 volume/local: Break early if `addr` was specified e8801fbe26 daemon: only add short cid to aliases for custom networks b8cc2e8c66 fix "host-gateway-ip" label not set for builder workers fcccfeb811 c8d/snapshot: Create any platform if not specified f8eaa14a18 pkg/platforms: internalize in daemon/containerd ac76925ff2 volume/local: Make host resolution backwards compatible ff15b49b47 Dockerfile: update docker compose to v2.24.2 c0573b133f pkg/system: return even richer xattr errors 7c185a1e40 daemon: return an InvalidParameter error when ep settings are wrong 2b036fb1da Remove generated MAC addresses on restart. 1f24da70d8 docs/api: remove version matrices from swagger files 358fecb566 docs: remove documentation for deprecated API versions < v1.23 f030b25770 Dockerfile: update docker compose to v2.24.1 e07aed0f77 Dockerfile: update dev-shell version of the cli to v25.0.0 cdf3611cff integration-cli: TestInspectAPIMultipleNetworks: use current version 05267e9e8c integration-cli: TestInspectAPIBridgeNetworkSettings121: use current version e5edf62bca integration-cli: TestPutContainerArchiveErrSymlinkInVolumeToReadOnlyRootfs: use current API e0acf1cd70 daemon/cluster/executer: Add missing `StartInterval` 1e335cfa74 image/save: Fix layers order in OCI manifest 4d287e9267 image/save: Change layers type to DiffID 0240f5675b Fix isGitURL regular expression 13964248f1 libnetwork: loosen container IPAM validation 05695c2458 c8d/integation: Adjust error in TestPullLinuxImageFailsOnWindows Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-03-15 17:17:19 +00:00
Bruce Ashfield	82b00eb592	moby: update to v25.0.0 ... Bumping moby to version v25.0.0, which comprises the following commits: 05695c2458 c8d/integation: Adjust error in TestPullLinuxImageFailsOnWindows ae6468b4b9 c8d/mount: Use ref-counted mounter by default bd481592ff ci: Always run snapshotter tests on Linux ed15f1d717 net=host: remove /var/run/docker/netns/default from OCI config 568c064795 docker-py: unskip some tests e8f4bfb374 Root.Path for a process-isolated WCOW container must be the Volume GUID ec041193f9 Windows doesn't have 'host' mode networking, so use 'auto'. 66325f7271 Implement GetLayerFolders for the containerd image store 0dc07ccc3a Unmount RWLayer during Commit a1f6b64e24 Don't call setupInit in a temp mount if setupInit is nil efadb70ef8 The Windows snapshotter and graphdriver have different names 641050c93f Typo fixes 508a2d979a Revert "temporary: Disable deprecate-integration-cli validation" f7065ab207 Add testutil.TempDir function 84d2229ffe dockerd-rootless-setuptool.sh: add `nsenter` subcommand 7d08d84b03 dockerd-rootless.sh: set `rootlesskit --state-dir=DIR` ae9fbcb82c testutil/daemon: shorten XDG_RUNTIME_DIR bdc7d0c2db temporary: Disable deprecate-integration-cli validation 8390bc5683 c8d/cache: Use ContainerConfig from content store f760cb4f97 c8d/builder: Store ContainerConfig a5a15c7782 c8d/cache: Optimize `FROM scratch` case 71ebfc7c63 c8d: make the cache in classic builder work 24da5233dd integration: Fix Parallel before setupTest d22c775e04 cdi: use separate feature-flag fa4deb02af environment: Error when t.Parallel was called before Protect 97d32bb7d7 daemon: stop checkpointing health probes to disk a6d9462cb1 (*Daemon).fillRootlessVersion: fix nil panic e954cdc188 dockerd-rootless.sh: fix inconsistent description about "builtin" driver 9de132dbf6 integration/image: Move Parallel after setupTest f0efb90f21 c8d/integration-cli: Skip tests checking `ContainerConfig` 2a02403a94 c8d/exporter: Use WithSkipMissing 9f50e06993 image/save: Refactor saveLayer b5a5ecf4a3 dockerd-rootless.sh: add comments about pasta f5d05b43d7 Dockerfile: update RootlessKit to v2.0.0 ba86626642 vendor.mod: github.com/rootless-containers/rootlesskit/v2 v2.0.0 312450d079 integration: test container healthcheck is reset c58acf06c2 image/save: Derive Descriptor from actual tar archive c4d2968183 vendor: github.com/moby/sys/mountinfo v0.7.1 075e1141b8 vendor: golang.org/x/sys v0.16.0 a759acd958 vendor: github.com/google/uuid v1.5.0 3bcb01a84f vendor: github.com/google/go-cmp v0.6.0 36dd2f029f doc: Correct typo in doc comments for volume/mounts/mounts/MountPoint 92175dd78c vendor: containerd v1.7.12, and switch to dario.cat/mergo v1.0.0 cd1709b0d4 update containerd binary to v1.7.12 2c45df2ab4 image/save: Fix missing layers in manifest 0790864064 Dockerfile: update buildx to v0.12.1 a9d0128bd7 Dockerfile: update docker compose to v2.24.0 28f48ce1ac c8d/commit-builder: Extract common code 659d7b190f libcontainerd: create unstarted tasks d7141cfd06 update to go1.21.6 0e62dbadcd daemon: reinit health monitor on live-restore 71c9aec834 Add Rob Murray (robmry) to curators e8e20c0897 daemon/config: setPlatformDefaults: use debug for missing userland-proxy 18a0e144c2 c8d/getImageLabelByDigest: Fix misspelled `labels` check e27ffdab0f Dockerfile: update rootlesskit to v1.1.1, and use tags as reference 782fe1fe82 layer: ChecksumForGraphID: remove unused code for for migrating v1 layers 1dd415df1a vendor: github.com/vbatts/tar-split v0.11.5 372cd16b88 vendor: otelhttptrace v0.45.0 to align with other OTEL packages 22597efa06 vendor: github.com/docker/go-connections v0.5.0 1f9098e7d0 builder: remove redundant ExecBackend.ContainerKill() 0aa96c5512 builder/dockerfile: containerManager.RemoveAll() prevent partial cleanup 03a8188a9a builder/dockerfile: remove containerManager.removeContainer() a38b5d7430 daemon: Daemon.ContainerRename: move vars closer to where they're used 00a863b25e daemon: Daemon.connectToNetwork: rename named return to prevent shadowing 0f337e9c14 feat: make errdefs.IsXXX helper functions work with wrapped errors dd41f86339 hack/make: Refactor VERSION normalization 2af17cd3f5 vendor: github.com/containerd/cgroups/v3 v3.0.3 9a5393d500 hack/make: Strip "v" tag prefix name from VERSION 12128189eb vendor: github.com/cilium/ebpf v0.11.0 07d2ad30e5 daemon/cluster: Cluster.imageWithDigestString: include mirrors to resolve digest 8aacbb3ba9 api: fix "GET /distribution" endpoint ignoring mirrors b9e27acabc libnet/d/bridge: dead code: no conflict on stale default nw 0a26cdf344 libnet/d/bridge: remove dead ActiveEndpointsError 6d2c4f87af daemon: work around go1.21 compiler bug 69c23cc0c9 docs/api: add documentation for API v1.44 ce574949f7 api: Deprecate outdated fields in NetworkSettingsBase d5a3fccb06 update golangci-lint to v1.55.2 9b184e1268 daemon: remove dead code relying on SecondaryIPAddress 7b0f8122b2 update AUTHORS fc8fcf85a2 vendor: github.com/opencontainers/runc v1.1.11 5fa4cfcabf update runc binary to v1.1.11 b8f2caa80a pkg/containerfs: deprecate ResolveScopedPath 90f37f48e2 pkg/containerfs: unify CleanScopedPath implementation 6fae583dba pkg/aaparser: remove, and integrate into profiles/apparmor 53d405c37f pkg/aaparser: remove deprecated GetVersion utility f714730c40 libnetwork/portallocator: PortAllocator.ReleasePort: remove unused err-return 4f9db655ed portmapper: move userland-proxy lookup to daemon config 214ab2caef libnetwork/portmapper: PortMapper.MapRange: inline "cleanup" closure 6ae6dcfc53 libnetwork/portmapper: PortMapper.MapRange: fix defer 8712c6df22 libnetwork/portmapper: PortMapper.MapRange: rename err-return 341e7b35a6 Updated manifest v2 URLs in image spec README 882b79b254 Dockerfile: update crun to 1.12 dc23efd3a2 vendor: github.com/klauspost/compress v1.17.4 f74ca4ed36 Update commit id unmap to directly use active mounts 0252a6f475 ci(bin-image): fix merge job run condition 1ea1d561c7 ci: do not run ci workflow on push tag events 141cb65e51 Check, then assume an IPv6 bridge has a subnet. 437bc829bf Don't try to validate incomplete network config. 52d9b0cb56 Remove unused error types. f9135cdeb5 libnet: Improve the debug log written when the extKeyListener is stopped 13915f6521 libnet: document what Network.networkType represents 6a2542dacf libnet: remove Endpoint.anonymous cf5a3bc531 c8d: Fix image commit with userns mapping 5eaf898fcb libnetwork: write ServFail if DNS reply msg is bad 1da85f7bdc libnetwork: assert DNS replies are well-formed f6a160d34e c8d/docker-py: Temporarily skip test_commit_* cf1ea9237c Add dangling image reference on delete when last image has children 9603adb5b4 c8d/docker-py: Temporarily skip test_save_and_load* 7a9b680a9c libnet: remove Endpoint.myAliases 523b907359 daemon: no more IsAnonymousEndpoint 8b7af1d0fc libnet: update dnsNames on ContainerRename 3bb13c7eb4 libnet: Use Endpoint.dnsNames to create DNS records f5cc497eac libnet: populate Endpoint.dnsNames on UnmarshalJSON ab8968437b daemon: build the list of endpoint's DNS names 0c6e9121b2 Add support for removing repo and digest c22fc41ddf vendor: golang.org/x/crypto v0.17.0 87c87bccb5 Update cleanup logic to use resolve all images 529d19bad8 Add resolve all images and unit test eb9ce779f6 Update OTEL in client hijack to use transport c84e889a69 Remove httputil lint exceptions 35a51fd697 Update authz plugin test to not use httputil bb4e9c72d7 Replace use of httputil in client hijack dc1e73cbbf libnet: add a new dnsNames property to Endpoint 1eb0751803 daemon: endpoints on default nw aren't anonymous 27f3abd893 Allow overlapping change in bridge's IPv6 network. 18b1aec0ee c8d/inspect: Fill `Parent` property e48b58e1be vendor: golang.org/x/crypto v0.16.0 44511f9e43 vendor: golang.org/x/text v0.14.0 2cdd4906ac vendor: golang.org/x/sys v0.15.0 d6a656cf7f libnet: Remove unused cmd/readme_test aa5d1a8897 typo fixes 2cf230951f add //go:build directives to prevent downgrading to go1.16 language 9e6d012e9c docker info: expose runtime features ("rro" mount mode, etc.) 1602e2f4f1 api: Deprecate `Container` and `ContainerConfig` for `/images/{id}/json` d91bf690ef ci(bin-image): fix conditional run for skipped job 61d5e5ca9a ci(test): do not run on push tag events f8275cb303 c8d/docker-py: Skip test_build_squash 279e6658ac Add devcontainer configuration d11a772080 c8d/tag: Remove duplicate label copy 3b1d9f1a26 add validation and migration for deprecated logentries driver 3a14b1235c docs/api: remove logentries 30f739db44 api/swagger: remove logentries cd41f655f9 logger: remove logentries driver dbdfc71026 vendor: resenje.org/singleflight v0.4.1 4d2a324fce update to go.opentelemetry.io/otel/semconv/v1.21.0, remove "httpconv" uses 7d991b6e42 vendor: github.com/moby/buildkit v0.12.5-0.20231208203051-3b6880d2a00f fcf03cdfa9 vendor: github.com/containerd/containerd v1.7.11 7028a03ffa vendor: github.com/containerd/containerd v1.7.10 49ad10261e vendor: github.com/containerd/containerd v1.7.9 c14bd4f1ad vendor: vendor: upgrade OpenTelemetry to v1.19.0 / v0.45.0 291eaf0a77 vendor: github.com/cyphar/filepath-securejoin v0.2.4 b524ed2dda testing: update docker-py to 7.0.0 33d2ec08ba update containerd binary to 1.7.11 c51a262e34 update containerd binary to 1.7.10 12c70b4386 vendor: github.com/grpc-ecosystem/grpc-gateway/v2 v2.16.0 a0615f6839 vendor: github.com/felixge/httpsnoop v1.0.4 afe281964d daemon/logger/local: always use UTC for timestamps bea729c030 c8d/prune: Familiarize image names that were untagged 8ba8a59697 c8d/prune: Default `dangling` filter to true eaaf1ea96d integration/prune: Run in a separate daemon 90dfb1c8ad c8d/integration-cli: Adjust TestBuildClearCmd 0f9f9a132e Move 'netip' utils from 'ipam' to 'internal'. 1931a1bdc7 libnetwork/diagnostic: lock mutex in help handler 424ae36046 libnetwork/diagnostic: use standard http.Handler bc94dfc7d2 hack: Load special images on demand 7cb1efebec api/types: move NetworkListConfig to api/types/backend a58b0a3d9c api/types: move Plugin-types to api/types/backend 862caf826c update to go1.21.5 0bf6ffba43 update to go1.21.4 08e4e88482 daemon: raise default minimum API version to v1.24 484e6b784c api/types: move ContainerCreateConfig, ContainerRmConfig to api/types/backend c786c3a974 Dockerfile: update criu stage to Debian 12 (Bookworm) d5eba1bfe5 integration/build: Use setupTest 713c7d49a1 integration(-cli): remove skips for old daemon versions (<20.10) 7f68e3107e integration-cli: TestAPIClientVersionOldNotSupported: use daemon API version 97549d923c integration/container: TestInfoAPIVersioned: adjust API version 410feab962 integration/container: TestKillDifferentUserContainer: adjust API version 757a004a90 libnetwork/diagnostic: drop Init method f270057e0c libnetwork/diagnostic: un-embed sync.Mutex field aa2fa2caa3 un-containerize TestDaemonNoSpaceLeftOnDeviceError 49f3e7d233 Dockerfile: remove APT_MIRROR build-arg baca6cb417 Don't allow port in CIFS URL c8134fa046 vendor: github.com/moby/buildkit v0.12.4 a189832454 add TaskStatus to swagger docs faa843fcef vendor: github.com/gorilla/mux v1.8.1 028ed1bb22 vendor: github.com/spf13/cobra v1.8.0 e18f5a5304 container: internalize InitAttachContext fcb89da9c2 c8d/integration-cli: Skip TestListDanglingImagesWithDigests 61d94850a7 cmd/dockerd: make cobra templates a const 0f163170a7 cmd/dockerd: remove various cobra templating 3bfb6a9420 frozen images: update to debian:bookworm-slim fd40dfaf58 Dockerfile: remove uses of DEBIAN_FRONTEND e72c4818c4 Dockerfile: update to Debian "bookworm" (current stable) 8ae94cafa5 cifs volume resolves hostname correctly. 3a0af5ad30 integration/TestLiveRestore: Wait for process to exit 61d8f57f2a daemon: kill: use log level to "warn" if container doesn't exit in time e262cd38ad c8d/integration-cli: Adjust DockerRegistryAuthTokenSuite 49d088d9ce builder-next: fix timing filter for default policy c3eed9fa3e integration-cli: fix TestDaemonICC tests for newer iptables versions c5ea3d595c liverestore: Don't remove `--rm` containers on restart 9b399814e7 integration-cli/TestCrossRepositoryLayerPush: Change repo name 9709b7e458 quota: increase sparse test-image to 300MB 65cfcc28ab hack/dind: update comments around AppArmor cfb8ca520a hack/dind-systemd: make AppArmor work with systemd enabled 203bac0ec4 daemon/c8d: Unmount container fs after unclean shutdown 964ab7158c Explicitly set MTU on bridge devices. 05523e289b c8d/integration: Adjust TestSaveCheckTimes b1676a289c daemon: ContainerRename: move log args to log fields d2865f1e8a daemon: win: set DNS config on all adapters 0fd0e8255f daemon: build ports-related ep options in a dedicated func 7786f8512b Revert "testing: temporarily pin docker-py tests to use "bullseye"" 4394c61e6c testing: update docker-py to 7.0.0b1 f877360dc1 api/t/swarm: Fix deprecation for ServiceSpec.Networks 681c94ca17 Dockerfile: update buildx to v0.12.0 68e73ceb67 update containerd binary to v1.7.9 2f28582b55 vendor: github.com/Microsoft/hcsshim v0.11.4 f4776ef9df ci(bin-image): skip dco on push tag events 8641d2da3b client: update example in readme 0ab7267ae3 Fix support for pull by digest ba46bda149 update authors and mailmap a3fdad84ad graphdriver/copy: faster copy of hard links fb53da508f vendor: github.com/opencontainers/runc v1.1.10 15bcc707e6 update runc binary to v1.1.10 84036d3e18 daemon/config: change DNSConfig.DNS to a []net.IP 1eadfb0e28 opts: ValidateIPAddress: improve error, godoc, and tests 981a878cf5 vendor: github.com/docker/go-connections fa09c952e3ea (v0.5.0-dev) 677d41aa3b Plumb context through info endpoint f0b89e63b9 Fix missing import for "scope" package 33564a0c03 libnetwork/d/overlay: support IPv6 transport e1d85da306 libnetwork/d/overlay: parse discovery data eagerly d47b3ef4c9 libnet: early return from updateSvcRecord if no addr available f5a611a74c daemon: ContainerRename: use named error-return 8074e7a437 Bump go-connections for TLS 1.3 support d06af368ad c8d: "unremap" the user namespace on commit a7acfffea6 test: Add a test for userns remapped daemon commit 876d4e5484 c8d: cleanup imports in the image builder file 7995e3288f Add until filter to docker image ls Signed-off-by: Rachit Sharma <rachitsharma613@gmail.com> 58785c2932 integration/networking: fix TestBridgeICC 6979503a85 Include port in URL for locally built Swagger docs 755f008c1e Default the auth config domain to the target image domain 7d9d601e6d project: document supported containerd versions 29ac09ee9d Revert "libcontainerd: work around exec start bug in c8d" c1a289e05a docs/api: update redirect metadata for hugo 49e04102c1 Update container-device-interface to v0.6.2 26f63600c1 daemon/snapshotter: Align mounter implementations d5d41c2849 daemon/config: Put params for the default network into a dedicated struct 587ad8845a integration/system: update TestInfoAPI to not use string-matching c1ab6eda4b integration/networking: Test bridge ICC and INC 409ea700c7 integration: Add a new networking integration test suite 02a932d63f Fix case where health start interval is 0 uses default 891241e7e7 seccomp: block io_uring_* syscalls in default profile 3c2b06099d Skip TestPullManifestList when using containerd 6ca1b9e4ce Skip the busybox digest check when containerd is enabled 123ade3763 builder/dockerfile: errmsg: quote build target 7257c77e19 libnetwork/ipam: refactor prefix-overlap checks 4e8ba395f2 integration: TestSaveRepoWithMultipleImages: minor cleanup 0dae0f2b5e integration: TestSaveRepoWithMultipleImages remove redundant remove 30cd8b8fca integration: make TestSaveRepoWithMultipleImages less flaky 1c50526092 daemon: improve daemon start informational log message a99bb24ea8 builder-next: make sure worker platforms normalized for containerd 29977d5058 contrib/check-config: conditionally disable color output. d60de4cafd Move the golangci-lint configuration file to the root dir cd95cd0671 c8d/push: Return error when repository has no tags df34db1158 c8d/pull: Don't wrap `no basic auth` error 5a83bebf76 ci: Setup otel tracing for windows integration tests 29ddf2214d docs(API): Add reason to network connect 403 63a9d72ee8 pkg/tarsum: handle xattrs like archive/tar does 4356962c69 update containerd binary to v1.7.8 38c4ceb00a vendor: github.com/containerd/containerd v1.7.8 34f5793521 vendor: google.golang.org/grpc v1.58.3 bd23c7729e vendor: golang.org/x/tools v0.10.0 205e4de3fd vendor: golang.org/x/mod v0.11.0 153d7e4038 exec/tests: add test for `--group-add` with `--user` 27e064e7e9 c8d/history: Fix nil dereference 808120e5b8 New `host_ipv6` bridge option to SNAT IPv6 connections 9d578a2e6d Cleanup duplicate imports 59c5f6e35b integration-cli: mark dockerCmdWithFail as an helper function 61c78d9438 daemon: Validate MacAddress on container create ee9f0ed895 api: Deprecate ContainerConfig.MacAddress 052562ffd5 api: Add a field MacAddress to EndpointSettings 98323ac114 integration/container: target v1.43 in a soon-to-break test 4f0cab3b74 api: ContainerCreate: re-organize BC conditions 79589354df api: ContainerCreate: remove repetitive nil checks 44a25f31a8 api: ContainerCreate: lowercase ErrEmptyConfig 91eee33f62 api: ContainerCreate: return an error when config is nil 417018659b daemon: remove redundant withResetAdditionalGIDs option 8f756fe679 c8d: show the real image creation date when listing images a73dfe68d3 api: ContainerCreate: init hostConfig and networkingConfig when nil 7e0cb4c46f c8d: Use the labels to get the children of an image f5535d516f c8d: Preserve image labels when tagging 70158284b7 api: fix a nil check on the wrong var d7266afc7e c8d/exec: Add additional groups on exec df3a321164 migrate to github.com/moby/sys/user aeb8972281 daemon: daemon.containerRestart: don't cancel restart on context cancel 52da88201c hack/validate: stop suppressing Xattrs deprecation c44c9dfa79 pkg/tarsum: migrate to (tar.Header).PAXRecords 3cf409aa9e pkg/archive: migrate to (tar.Header).PAXRecords 6a8a792019 pkg/archive: test tar headers are interoperable f2c67ea82f vendor: github.com/klauspost/compress v1.17.2 a7b44ea10f Dockerfile: update github.com/tc-hib/go-winres v0.3.1 0cf113e250 Add unit tests for outgoing NAT rules 619d98ab49 vendor: github.com/moby/buildkit v0.12.3 aad51c0b4e daemon: daemon.shutdownContainer: use context.WithoutCancel dca89c67ef daemon: daemon.containerStop: use context.WithoutCancel 8166818791 c8d: Return the "tag does not exist error" 4af420f978 libnetwork/internal/kvstore: prune unused method 4039b9c9c4 libnetwork/datastore: drop (KVObject).DataScope() 4f4a897dda libnetwork/datastore: drop (*Store).Scope() method 4b40d82233 libnetwork/datastore: un-embed mutex from cache 9536fabaa8 libnetwork/datastore: minor code cleanup 43dccc6c1a libnetwork/datastore: unconditionally use ds.cache 5a72ed3406 integration-cli: remove deprecated dockerCmd and waitRun utilities 06115bf82c integration-cli: DockerCLIPruneSuite: replace dockerCmd 285ab8c861 integration-cli: DockerCLIPluginsSuite: replace dockerCmd e28da7686e integration-cli: DockerCLIPluginLogDriverSuite: replace dockerCmd a837cb444c integration-cli: DockerExternalVolumeSuite: replace dockerCmd 5f884478e5 integration-cli: DockerCLIImportSuite: replace dockerCmd 885eceba1d integration-cli: DockerCLITopSuite: replace dockerCmd 6ce6b63482 integration-cli: DockerCLIHistorySuite: replace dockerCmd 268e72f10f integration-cli: DockerCLIRestartSuite: replace dockerCmd and waitRun c388416aac integration-cli: DockerCLICreateSuite: replace dockerCmd and waitRun 5c297fcc09 integration-cli: DockerCLIStatsSuite: replace dockerCmd and waitRun 7d2a6f2030 integration-cli: DockerCLICommitSuite: replace dockerCmd a4522b6a8f integration-cli: DockerCLIStartSuite: replace dockerCmd f7ddfdbae6 integration-cli: DockerCLIUpdateSuite: replace dockerCmd and waitRun d1108b8a06 integration-cli: DockerDaemonSuite: replace dockerCmd 9c161cc65a integration-cli: DockerCLIVolumeSuite: replace dockerCmd f482857959 integration-cli: DockerCLIImagesSuite: replace dockerCmd f1102e98bb integration-cli: DockerCLIPortSuite: replace dockerCmd and waitRun ba4d491562 integration-cli: DockerCLIRmiSuite: replace dockerCmd 5b3086db1f libnetwork/datastore: prevent accidental recursion 16e4bc9827 integration-cli: DockerCLISearchSuite: replace dockerCmd 89d7b77022 integration-cli: DockerRegistrySuite: replace dockerCmd c867ac4527 integration-cli: DockerCLICpSuite: replace dockerCmd 980a5bc72a integration-cli: DockerCLIBuildSuite: replace dockerCmd 4292f42308 integration-cli: DockerCLISaveLoadSuite: replace dockerCmd 50062b413c integration-cli: DockerCLIRunSuite: replace dockerCmd and waitRun d63cab5193 integration-cli: DockerCLILogsSuite: replace dockerCmd and waitRun 8e2e1f3d28 integration-cli: DockerRegistryAuthHtpasswdSuite: replace dockerCmd d3f4580519 integration-cli: DockerCLILinksSuite: replace dockerCmd and waitRun 58c5986f8b integration-cli: DockerCLIHealthSuite: replace dockerCmd and waitRun 707bb9b9ed integration-cli: DockerBenchmarkSuite: replace dockerCmd and waitRun eafb618594 integration-cli: findContainerIP: replace dockerCmd ba32bebd05 integration-cli: DockerCLIInfoSuite: replace dockerCmd and waitRun 4562f07887 integration-cli: DockerCLIExecSuite: replace dockerCmd and waitRun 8c661b5e9a integration-cli: DockerCLIEventSuite: replace dockerCmd and waitRun cf95278122 integration-cli: DockerCLIAttachSuite: replace dockerCmd and waitRun 1baec48367 integration-cli: DockerAPISuite: replace dockerCmd and waitRun 908821d48a integration-cli: dockerCmdWithFail: remove unused return 02fd8485fa integration-cli: DockerCLINetmodeSuite: replace dockerCmd and waitRun dbb2bd727d integration-cli: DockerNetworkSuite: replace dockerCmd and waitRun 5cc978c6a0 integration-cli: DockerCLIInspectSuite: replace dockerCmd and waitRun 86fb048e59 integration-cli: DockerCLIPsSuite: replace dockerCmd and waitRun b4ff5234bd integration-cli: remove transformCmd utility cdb44010c9 c8d/history: Fill ID for parents without the label d28bd54f2a c8d/history: Fix Tags assigned from parents e97716a95a Fix disk usage test cf9073397c Update check-config.sh 7bb54c3dc5 vendor: gotest.tools/v3 v3.5.1 bcca214e36 libnetwork: open-code updating svc records 33cf73f699 libnetwork: drop (*Controller).nmap 804ef16822 libnetwork: only delete svc db entry on network rm c85398b020 libnetwork: drop vestigial endpoint-rename logic 29da565133 libnetwork: change netWatch map to a set 0456c0db87 libnetwork: refactor isDistributedControl() 749d4abd41 libnetwork: get rid of watchLoop goroutine f05dce8d3a replace some strings with OCI consts e3feb05175 vendor: github.com/opencontainers/image-spec v1.1.0-rc5 0d27579fc7 Ensure that non-JSON-parsing errors are returned to the caller 26730c891a vendor: google.golang.org/grpc v1.56.3 6f625ae65a c8d integration: skip TestImportWithCustomPlatform 9357bcb582 c8d/pull: Return same access denied error as graphdrivers 488559a330 c8d/push: Set distribution source recursively d9b5445f39 c8d/pull: Handle pull all tags 095d2a29a3 distribution: Add Tags 9664f33e0d daemon: release sandbox even when NetworkDisabled 2df698025c HealthCheck: add validation for minimum accepted start-interval 25fb4dd50d switch to go.opentelemetry.io/otel/semconv/v1.17.0 96f85def5b s/HostIP/HostIPv4/ for `com.docker.network.host_ipv4` setting 2a14b6cf60 Use `iptRule` to simplify `setIcc` (code health) d7c6fd2f80 Move `programChainRule` logic to `iptRule` methods (code health) e260808a57 Move duplicate logic to `iptRule.Exists` method (code health) 14d2535f13 Move `iptables.IPVersion` into `iptRule` struct (code health) 4e219ebafb Eliminate unnecessary `iptRule.preArgs` field (code health) 4662e9889c Simplify `setupIPTablesInternal` parameters (code health) 919fe72f60 vendor: github.com/moby/buildkit v0.12.3-dev 40fde69be9 Revert "Return no basic auth creds error when needed" e1bacd18a3 ci: continue-on-error on non-PR with snapshotter enabled 70892220c8 ci: use matrix to test containerd backed image store 03decbc1e6 ci: split tests in a reusable workflow bb7408e851 c8d/changes: Fix concurrents diffs e3d8e979de integration-cli/TestSaveAndLoadWithProgressBar: Skip with c8d f51c5e1a5c c8d/save: Don't save name if exported by digest b5f5987959 c8d/load: Fix `Loaded image` message 42af8795a3 c8d/save: Implement exporting all tags f20abbc96c libnetwork: use conntrack and --ctstate for all rules c279c48a0e Skip TestPullAllTagsFromCentralRegistry 8777592397 Return no basic auth creds error when needed ebef4efb88 api/types: move ContainerLogsOptions to api/types/container 9670d9364d api/types: move ContainerListOptions to api/types/container 7bce33eb0f api/types: move ContainerStartOptions to api/types/container 0f77875220 api/types: move ContainerRemoveOptions to api/types/container 9498d897ab api/types: move ContainerCommitOptions to api/types/container 30f09b4a1a api/types: move ContainerAttachOptions to api/types/container 95b92b1f97 api/types: move ResizeOptions to api/types/container ec69501e94 api/types: move ServiceCreateResponse, and generate from swagger 5b3e6555a3 api/types: move ServiceUpdateResponse 48cacbca24 api/types: move image-types to api/types/image 44dbbeb196 c8d/progress: Remove unused mountable bcbbd9538f c8d/progress: Show Mounted/Exists status bb8bc1ffc8 update to go1.21.3 3bc45d78c9 update to go1.21.2 1800dd0876 vendor: golang.org/x/net v0.17.0 1946aead21 vendor: golang.org/x/crypto v0.14.0 0679ae984b vendor: golang.org/x/text v0.13.0 bc33c27796 vendor: golang.org/x/sys v0.13.0 db806533e6 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230911190601-f082dd7a0cee b81b27c21f vendor: github.com/go-logr/logr v1.2.4 cff4f20c44 migrate to github.com/containerd/log v0.1.0 e1d0aacb6a vendor: github.com/docker/distribution v2.8.3 0cd02ab1b4 integration/c8d: Skip TestBuildSquashParent aca9ea42bd vendor: github.com/moby/buildkit 0.12.3-dev d871a665de daemon/RegistryHosts: Don't lose mirrors a293cd6ab9 vendor: github.com/containerd/containerd v1.7.7 f3aa9e151d c8d: Simplify error handling and distribution source label 5f062032f7 TestPullNonExistingImage: Move to integration 53345fe357 TestPullNonExistingImage: Use subtests 2edb858b18 vendor: golang.org/x/net v0.13.0, golang.org/x/crypto v0.11.0 87de23a6cd vendor: golang.org/x/text v0.11.0 23f2e0fea7 Skip tests that check max concurrency 37ca57e9d5 libnet/d/bridge: inline error checks fcabc48ee4 c8d/load: Handle compressed archives cbc2a71c27 libnet/d/bridge: Don't set container's gateway when network is internal 491758a446 Dockerfile: upgrade Delve c587ba3422 registry: allow mirror path prefix in config 2c4551d86d libnet: resolver: remove direct use of logrus 4de8459265 libnet: add OTEL tracing to the embedded DNS b8ba263099 c8d/rmi: Handle explicit dangling name 25a813e924 c8d/rmi: Don't emit Untagged for dangling images f99c4ec798 c8d/history: Fill ID and Tags for all entries 1f6bacc486 TestDaemonNoSpaceLeftOnDeviceError: Adjust to snapshotters 28d057cb0e c8d/TestPsListContainersSize: Only check if size increased 34400dd4a2 TestPsListContainersSize: Fix size parsing/formatting e0e6ae741e daemon/c8d: Use WithoutCancel instead of context.Background c47cdd5f39 Revert "daemon/logger/etwlogs: rewrite to use go-winio/pkg/etw" 6f27bef9fc daemon/c8d: Use non cancellable context in defers 77f7c83114 c8d/push: Show progress only on blobs e8a7a9435f Dockerfile: update test-registry to v2.8.3 5b16dd6469 Remove duplicated trace logs ad877271f3 Limit OOMScoreAdj when running in UserNS ("Rootful-in-Rootless") 3d70af4ee4 adjust stats sampling order 16063c7456 vendor.mod: bump go line to 1.20 a4822abe37 c8d: Skip TestPullFailsWithAlteredManifest f9f439763a c8d/TestPullFailsWithAlteredManifest: Adjust error message 4001241ccf c8d/TestPullByDigestNoFallback: Adjust error message 9e3ed7b429 pkg/chrootarchive: fix Darwin build e465ebf2f3 update to go1.21.1, and fix download-URL aa282973d4 Dockerfile: use GOTOOLCHAIN=local f66c000229 c8d: Fix getting the platform of a single-platform image 2c89640ab9 distribution: TestPullSchema2Config fix test response a9fcb775e5 integration-cli: fix getTestTokenService not sending header 3197160114 daemon: Daemon.SetNetworkBootstrapKeys: make error-handling idiomatic f91c3cfda6 daemon: Daemon.initNetworkController: remove intermediate var dcc75e1563 libnetwork: Controller: agentInit, agentDriverNotify rm intermediate vars a384102fdf libnetwork/datastore: Store.Map, Store.List: remove intermediate vars bb5402e6fb libnetwork: Controller: getKeys, getPrimaryKeyTag: slight refactor 603f49706e libnetwork: Controller: getKeys, getPrimaryKeyTag: prevent panic f6e44bc0e8 internal: Add compatcontext.WithoutCancel 95aea39348 Make one-shot stats faster 618d9b5d54 libnetwork: nwAgent: un-export mutex 7cda3fb7b5 libnetwork: inline populateSpecial NetworkWalker ca1307c56e libnetwork: Controller: remove mutex for "store" a8ea752a93 libnetwork: Controller.cleanupLocalEndpoints: return errors 2e60051c92 libnetwork: Controller.sandboxCleanup: return errors 642cf261a8 libnetwork: Controller.NetworkByID: remove redundant error-handling 430a5f8581 api: Add method and path to trace operation string 41c186c344 hack: Run integration tests through Delve 42a51cb285 Add support for swarm seccomp and apparmor 0c66111c40 daemon: containers list code refactor 13b775a96e integration-cli/TestSaveAndLoadRepoFlags: Ignore LastTagTime difference 7c202d2fa4 integration-cli/SaveLoad: Don't check `repositories` file 724db8650c integration-cli: Skip TestLoadZeroSizeLayer with c8d 1337a66130 integration-cli: Skip Parent tests with c8d d5b067e04a ci(buildkit): remove regex skipping tests with digest inconsistency 286704bf6f ci(buildkit): expose github runtime for gha tests 34e71b374b builder-next/a/ci/pull: strongly type flightcontrol.Group c8773e10b1 builder-next/wrapper: use new exptypes constants a728bd0ee9 builder-next/pull: use ResolveMode.String() helper 221b73e23d builder-next: apply source policies on config resolve 2246297ae6 builder-next: adopt new wrapped types c217e3c87a vendor: github.com/moby/buildkit v0.12.2 8cd5f04ea3 daemon/c8d: use new containerd LabelDistributionSource constant fd6dd6935b vendor: github.com/containerd/containerd v1.7.6 79a4cbbec9 builder-next: make stub executor generic d7a31cfb2d libnetwork: Sandbox.resolveName: slightly simplify locking f549aaa205 libnetwork: Sandbox.resolveName: add fast-path for alias lookups 9249b34be8 libnetwork: Sandbox.resolveName: rename vars for clarity 4401ccac22 libnetwork: Sandbox: remove some intermediate vars 0e80073e01 daemon: strongly type containerd log.OutputFormat 4ff252456b libnetwork: rewrite Network.isClusterEligible to return agent 6203e3660d libnetwork: Endpoint: return early if no agent was found 6eeef51c6a libnetwork: Controller.agentSetup: use structured logs 8b95ea4a35 libnetwork: Controller.agentSetup: remove redundant condition e852ba55a5 vendor: github.com/Microsoft/hcsshim v0.11.1 06a640084f Fix graphdriver lookup in makefile 093481618d c8d: Skip the test that checks Config.Image e6907243af client: negotiate api version before handling version-specific code 3936c57294 c8d: test a backend dependent error on pull 207c4d537c c8d: Fix `docker diff` 601c9b29e6 c8d/pull: Fix stale Downloading progress 313a090c0e libnetwork/osl: add some TODOs 9d3b1f9419 libnetwork/osl: make constructing Interfaces more atomic 47f9e70385 libnetwork/osl: Namespace.Restore: conditionally fetch IPs ee5a91e663 libnetwork/osl: Namespace.Restore: flatten nested conditions 299bd58c5a libnetwork/osl: Namespace.Restore: rename vars for readability 7b96663082 libnetwork/osl: Namespace: inline setGateway and setGatewayIPv6 bd17d27658 libnetwork/osl: Namespace: make error-handling more idiomatic 0b4a70ca2c libnetwork/osl: Namespace: programRoute, removeRoute rm path arg 542fe0da40 libnetwork/osl: Namespace: make mutex private 338fc49060 libnetwork/osl: implement Namespace.RemoveInterface 3ff75aeb07 c8d/pull: Deprecation notice for schema1 manifests 2cb94ade6c distribution: Extract schema1 deprecation notice 39fe25b69e c8d: Fix getting image with platform 68b67b3230 c8d/pull: Support legacy schema1 prettyjws manifests d5425f28ae Don't run tests twice bddd826d7a profiles/apparmor: deny /sys/devices/virtual/powercap 83cac3c3e3 oci/defaults: deny /sys/devices/virtual/powercap 2394b07bce c8d: Number of containers using an image e19e541e2c libnet: add comment to ipamType acf825def2 api/t/net: test EndpointIPAMConfig.Validate() 3092b261e2 daemon: move most of validateEndpointSettings into api/t/net 554036040b vendor: github.com/AdaLogics/go-fuzz-headers v0.0.0-20230811130428-ced1acdcaa24 6fc3ead321 vendor: google.golang.org/grpc v1.56.2 73041028b6 vendor: google.golang.org/protobuf v1.31.0 54dc8d2968 vendor: github.com/cenkalti/backoff/v4 v4.2.1 d97e4300ee vendor: google.golang.org/api v0.114.0 d50585b05b vendor: golang.org/x/tools v0.8.0 51d8a975ab vendor: golang.org/x/oauth2 v0.7.0 9670db3904 vendor: golang.org/x/crypto v0.9.0 a046616249 vendor: golang.org/x/sys v0.10.0 f29155950f vendor: golang.org/x/sync v0.3.0 0354791147 vendor: github.com/klauspost/compress v1.16.5 87dd1de046 vendor: github.com/tonistiigi/vt100 v0.0.0-20230623042737-f9a4f7ef6531 bd6cadffb0 vendor: github.com/containerd/continuity v0.4.2 6d93db06db vendor: github.com/vbatts/tar-split v0.11.3 171ecf8cf2 vendor: github.com/vishvananda/netns v0.0.4 81ab8db1c3 api/t/net: add missing comment to ValidateIPAM 04a47e88d2 api/t/net: move endpoint structs into endpoint.go 19c07198b6 daemon: Check if endpoint address is in allowed range bfd8c6deb7 daemon: Validate EndpointSettings.IPAMConfig.LinkLocalIPs 4bd0553274 daemon: Return all validation errors for NetworkingConfig and EndpointSettings ff503882f7 daemon: Improve NetworkingConfig & EndpointSettings validation 4c03618fab registry: remove jsonmessage dependency 6c563cda82 c8d: fix TestRemoveContainerAfterLiveRestore 0c4397deaf api/pull: Validate repo name ccb37fa567 imageService/PullImage: Move reference parse to api 28861e0c47 c8d: Skip TestRemoveImageGarbageCollector bf692d47fb deprecate pkg/loopback (utility package for devicemapper) 96faee9762 libcontainer: client.processEventStream: use locally scoped variables 32e2c53467 c8d: Fix pull progress update 5a4962f80d c8d: Refuse images with digest algo when tagging bd523abd44 remove more direct uses of logrus 1ffbbe798a vendor: github.com/containerd/containerd v1.6.24 7f281907dd c8d/push: Add missing message about repository babf907bfd c8d/push: Support pushing all tags 7ec9f304e9 daemon/cluster: create managed ctr with multiple EndpointsConfig 5e15ed314b api: Improve error on ContainerCreate with multiple endpoints cc9c930e29 vendor: github.com/Microsoft/hcsshim v0.9.10 24102aa8ca update containerd binary to v1.7.6 bbcd662532 api: Allow ContainerCreate to take several EndpointsConfig for >= 1.44 35e9d688ba libnetwork: remove netWatch.remoteEps, as it's unused 8ae5dc4aae libnetwork: Network.updateSvcRecord: remove unused localEps arg 37b2ea9a8d libnetwork: Controller.processEndpointCreate, Delete: remove nmap arg 62e55fd58a Add support for registry token in containerd pull logic 14c5f7bf1d contrib: outline purpose of download-frozen-images-v2.sh 0937aef261 libcontainerd/windows: Don't reap on failure b805599ef6 libcontainer/windows: Remove unneeded var declaration 55b664046c libcontainer/windows: Fix process not being killed after stdio attach failure 9c84994830 libnetwork/portmapper: remove unused PortMapper.checkIP f5d6af13d0 libnetwork/portmapper: un-export PortMapper.Allocator 863909a749 libnetwork/portmapper: New(): remove unused argument 5ab8d41d9f Add dmcgowan as curator de2447c2ab daemon: overlay2: Write layer metadata atomically 78479b1915 libnet: Make sure network names are unique 5fa011dc0c vendor: resenje.org/singleflight v0.4.0 fd15ddbc30 daemon: GetImageAndReleasableLayer: simplify "FROM scratch" case 4229032676 daemon/containerd: use "DiffID" type for diff fields 5d5eeac310 daemon: automatically set network EnableIPv6 if needed 0313544f4a c8d: Handle userns properly c63a952dc9 c8d/builder: Don't append empty tar layer to manifest 9127285985 c8d/builder: Lease layer snapshots f22b112005 c8d/commit: Unpack committed image 8832cdf6e1 c8d: Common unpack code for specific manifest c6bded3475 c8d/builder: Don't use diffID as snapshot parent 8c7e19c5ff c8d/builder: Set empty diffID for rolayer 6ebfa57364 c8d/builder: Don't mount the rolayer snapshot c41121cc48 update to go1.20.8 4acbf7d8c3 c8d: disable schema1 registry integration tests 833b514d98 c8d/mount: Create same directory owners as graphdrivers a8975c9042 api: Add consts for predefined networks 12e27dfd8f Fix host_ipv4 bridge option when IPv6 and ip6tables are enabled 7c0f6741eb go mod tidy cd204f1118 libnetwork/osl: Namespace.DeleteNeighbor: remove intermediate vars 4215a1542b libnetwork/osl: Namespace.DeleteNeighbor: remove osDelete argument bc77104fed libnetwork/osl: Namespace.DeleteNeighbor: don't warn on non-existing neighbor 5e7eade1f7 integration: don't poll for containers to be running b7d29c1e23 registry: un-skip some tests that don't require root de27973538 registry: merge validateEndpoint into newV1Endpoint 6cc6682f5f daemon: fix under what conditions container's mac-address is applied 820f37b1a6 hack: compile w/o optimizations & inlining when debugging c44f8958f6 vendor: github.com/cncf-tags/container-device-interface v0.6.1 fa3ddc5116 distribution: newRepository: remove naked return and intermediate vars 43740ab642 registry: remove intermediate vars in mock 550e628f05 registry: newV1Endpoint: make it clear we skip validation for Docker Hub 5728516371 c8d/image: Allow truncated id to have sha256: prefix c2004fb8c4 hack: Add TEST_IGNORE_CGROUP_CHECK 7e506f71f3 registry: v1Endpoint.ping: include URL in debug log 0c6f8f9290 registry: v1Endpoint.ping: don't io.Readall the response e9ad878df6 registry: v1Endpoint.ping: add fast-path for X-Docker-Registry-Standalone 9e797a6db9 c8d: Remove the panic from UpdateConfig 4982c70db4 integration-cli: Skip TestRmiParentImageFail when using c8d snapshotters 0f7a65e59b registry: remove use of v1 Version field and X-Docker-Registry-Version 3d8b8dc09a Use process substitution to redirect to tee c0ece8d4f3 integration-cli: Use different label in TestBuildMultiStageGlobalArg 081b74b97d c8d/builder: Store parent in c8d image label 5f59f7bb49 integration/container: combine TestResize tests into subtests a4ceb0e4ac integration/container: TestResize, TestResizeWithInvalidSize: rm poll.WaitOn ee7ca6822a integration/container: fix flaky TestResizeWhenContainerNotStarted da5ed8b35b CI: Switch to use tracing action a3c97beee0 image: implement CheckOS, deprecate pkg/system IsOSSupported 150b657bad pkg/system: move ErrNotSupportedOperatingSystem to where it's used 9b7784781d Add test for buildkit history trace propagation 3b4ccb2eca CI: Setup otel tracing for integration tests e8dc902781 Wire up tests to support otel tracing 642e9917ff Add otel support 776c376227 c8d: Better pull progress 1cb45e582c c8d/import: Don't close compressed stream twice b5376c7cec pkg/idtools: remove sync.Once, and include lookup error 0be416dfdc distribution: filterManifests split complicated condition 150b1c8c73 daemon: daemon.createSpec: remove uses of logrus dbb4d54e01 c8d: Add image save events 09470db089 c8d: Add image pull events 1847dc4b7f c8d: Add image push events 1148a24e64 migrate to new github.com/distribution/reference module dffccfd0f1 integration-cli/build: Alias `cmp` as `is` 5dbd198b53 integration-cli/build: Parse multiline `images -q` output 96516002cc c8d: Print the tag, digest and size after push 417328e44e libnetwork/osl: remove dead code 237eb3b5f1 docs(api): rephrase description for /images/create 0ffa3dd870 daemon/c8d: Use Docker imagespec 14af90b868 c8d/integration/TestBuildOnBuildCache skip parent check 366a5f1d74 image/spec: Add Go structs 536826d66f image/spec: Add Healthcheck.StartInterval (v1.3) 75097cf09a test: remove platform related timeout values 6dd78a9ac2 image/spec: Fix typo in "superseded" 84a4f37cf7 test: use info from the version endpoint for arch checks 159b168eea test/integration: Remove checks for "not arm" in tests ebb9fade23 makefile: use info -f to get the current storage driver c243efb0cd client: TestImageTagInvalidSourceImageName remove invalid test-case 3a4a04e462 distribution: simplify mocks d864d1eb97 image/spec: add back versioned files b8de6c01b5 image/spec: rename v1.2.md to spec.md c3f2bd1009 image/spec: rename v1.1.md to spec.md 7ff38506ab image/spec: rename v1.0.md to spec.md 32d5e6312d image/spec: use permalink to versioned documents 7b7019a4da image/spec: add missing "Shell" field (v1.2) 5380f3f0c4 image/spec: add missing "ArgsEscaped" field (v1.1, v1.2) f33370219b image/spec: add missing "OnBuild" field e19edd3f25 image/spec: minor fixes and touch-ups in markdown files b9f9e20f01 daemon: Daemon.killWithSignal(): don't discard snapshotting errors af535233cc daemon: Daemon.killWithSignal(): don't discard handleContainerExit error 8c6a46f643 libnetwork: Endpoint.AddStaticRoute don't create StaticRoute if unused 1dcb11f81d libnetwork: Endpoint.InterfaceName: remove redundant nil check a9a0ffaf51 testing: update docker-py 6.1.3 f6959bc597 test-docker-py: skip AttachContainerTest::test_run_container_reading_socket_ws e0f171f342 testing: update docker-py 6.0.1 79a0f82ca1 test-docker-py: remove comment about docker 17.06 limitations be90e5e1d4 libnetwork: Controller.addServiceBinding: fix duplicate word in comment 77c2613d3a libnetwork: fix some missing imports on macOS and FreeBSD 5da2dd98e9 registry: move search-related code to separate files f1a7028900 registry: rename v1-endpoint tests to have a common prefix 19f6f0b3db registry: move v1 endpoint tests to endpoint_test.go 47bf587f84 registry: ResolveAuthConfig: rename var that collided with import a0a8d9d057 libnetwork: notify another driver registerer 2689484402 volume/local: Don't unmount, restore mounted status f1a6e16258 errdefs: remove redundant import comments b6ba2a4f75 errdefs: remove gotest.tools dependency 3f8cbd8ec9 registry: update some godoc e10eca3d1a daemon/containerd: rename some vars that collided with imports aefbd49038 daemon/containerd: newROLayerForImage: remove unused args 28d201feb7 daemon/containerd: log errors when releasing leases d43e61758a registry: deprecate APIEndpoint.Version and APIVersion type aef703fa1b integration/liveRestore: Check volume content 4e4f62b6db distribution: use registry consts for API version in tests aa59b0f5a2 registry: improve error for invalid search endpoints 14b53c6318 registry: simplify `trimV1Address` 062c80199f registry: combine TestEndpointParse and TestEndpointParseInvalid 0f871f8cb7 api/types/events: define "Action" type and consts 10a3a3bc49 daemon: inline some variables when emitting events 9331d6de1e daemon/events; fix TestLoadBufferedEventsOnlyFromPast f6f6c32138 api: ValidateRestartPolicy: improve errors for invalid policies 333e04e84e integration-cli: TestEventsFormat: rewrite test to not use deprecated fields fa79b5d59f integration/container: TestPause: don't depend on deprecated fields 0161aad462 client: TestEvents: don't depend on deprecated fields 5123ae4352 daemon: TestLogContainerEventCopyLabels: inline vars 2928c5ae92 daemon: TestHealthStates: don't depend on deprecated fields 62ec14d9ec daemon/events: verify non-deprecated fields f443006fa2 daemon/events: rewrite test-assertions with gotest.tools 70ad5b818f api/types/events: make events.Type an actual type 5a02ed5e84 integration: use events-consts in tests 9ea50365d6 daemon/events: use events-consts in tests, and fix vars that collided 2f8e957713 Dockerfile: update crun binary to v1.8.7 32e79c464a libnetwork: Network: return early where possible 5512c7e838 libnetwork: Network.Services: remove some intermediate vars d6b8298cfd libnetwork: Network.Services: return early and don't lock in a loop 8b21609654 libnetwork: remove Endpoint.Interface f8181b8875 libnetwork: Endpoint.Iface, Endpoint.Interface remove redundant "if" 6a61bacafe libnetwork/drivers/remote: rollbackEndpoint.Interface: return concrete type dc061d2ed3 libnetwork/drivers/remote: driver.DeleteNetwork: remove var that collided 40b1389917 libnetwork/drivers/remote: remove unused testEndpoint.Interface 15435f7293 libnetwork/drivers/bridge: testEndpoint.Interface: return concrete type 9afb688f5f libnetwork/drivers/bridge: getIPv4Data: remove unused argument 639449f84e libnetwork: nwAgent.bindAddr: change to net.IP b75e831567 libnetwork: resolveAddr: add GoDoc ebe2347ac6 daemon: remove LogPluginEventWithAttributes as it's not used aa764e6009 daemon: logNetworkEvent, logSecretEvent, logConfigEvent rm unused args fa13b0715f integration/internal/swarm: rename max/min as it collides with go1.21 builtin 79495c5b6a pkg/tailfile: rename max/min as it collides with go1.21 builtin df2f25a977 pkg/plugins: rename max/min as it collides with go1.21 builtin 6c036f267f pkg/sysinfo: rename max/min as it collides with go1.21 builtin 55192de9e3 pkg/archive: rename max/min as it collides with go1.21 builtin a3867992b7 daemon: rename max/min as it collides with go1.21 builtin f6b2e34268 Update example in README.md to close cli object 318b3d4fe5 api/types/versions: rename max/min as it collides with go1.21 builtin cb394a62e5 restartmanager: rename max/min as it collides with go1.21 builtin 8f64e2e925 daemon: daemon.logClusterEvent: use events.Type for event-types 3dea2f230a daemon: inline some vars when producing events 385f6429be api/server/router/network: remove empty file 350223201e integration/container: TestCheckpoint: remove intermediate vars b688af2226 api/types: move checkpoint-types to api/types/checkpoint 70baaec6a5 Dockerfile: remove libdevmapper-dev 12d1f4f385 hack: remove devicemapper leftovers and build-tags f6a5318f94 Dockerfile: Windows: update Golang download domains to cut down redirects 2aabd64477 hack: update link to GOPATH documentation b18e170631 CONTRIBUTING.md: update links to golang docs and blog 136e86bb5c api: swagger: update link to Go documentation 4862d39144 docs/api: update links to Go documentation cd49f9affd update golangci-lint to v1.54.2 d52f20048d api/server: format code with gofumpt e9b09b49fd builder/builder-next: format code with gofumpt 73894af9ff contrib/apparmor: format code with gofumpt ce01d779df daemon: format code with gofumpt 211d3a8c32 pkg/stack: format code with gofumpt 95e99e629c pkg/fileutils: format code with gofumpt 6c6e1fb13d pkg/containerfs: format code with gofumpt 1e579a7a2a pkg/sysinfo: format code with gofumpt 263c00f27c testutil: format code with gofumpt b71951c70c container: format code with gofumpt 87cedbe443 image: format code with gofumpt 976da91fb7 pkg/loopback: format code with gofumpt b4d6eca9b8 pkg/chrootarchive: format code with gofumpt 07e6b0ac70 integration: format code with gofumpt 498da44aab remove some remaining pre-go1.17 build-tags 210abfaef6 libnetwork: add godoc to Endpoint 04422f5ec1 daemon: WithNamespaces(): add notes about user-namespaces dd26e6b15e daemon: Daemon.getIpcContainer: make errors less repetitive 3d94eb9bcd daemon: Daemon.getPidContainer: change to accept "id" argument bc7f341f29 daemon: WithNamespaces(): fix incorrect error for PID, IPC namespace bd5d6480e7 daemon: WithNamespaces(): remove redundant "if" 6eaefe5bf5 daemon: WithNamespaces(): use switch instead of if/else if/else 43aa67a982 daemon: WithNamespaces(): use OCI-spec consts for namespaces 759698581e daemon: WithNamespaces(): inline variables 13648a0e21 daemon: remove Daemon.checkContainer and related utils 78828f9b58 test/integration: Download the registry binary bd2c553870 Fix some broken executable flags 143b3b2ef3 test: update registry version to latest 01214bafd2 c8d/builder: Don't drop fields from created image b92cf68add libnetwork/osl: remove Sandbox and Info interfaces c881360e88 libnetwork/osl: remove Interface.Master() as it's unused b9bf407929 libnetwork/osl: remove Interface Interface 8631e69cdf libnetwork/osl: remove Sandbox.InterfaceOptions() etc. f3d29db6a2 libnetwork/osl: remove Sandbox.NeighborOptions() etc. a365fb0e9d libnetwork: move more osl.Sandbox related code to Linux-only files 95abde479a libnetwork: implement Controller.setupOSLSandbox 35456d2eb1 libnetwork/osl: add godoc to networkNamespace aecfa55c4c libnetwork/iptables: (Add|Del)InterfaceFirewalld: check firewalld status 4b0d38de06 TestDiskUsage: don't panic if results don't match c0568a95d8 integration/container: check some error-types in tests 2b583c0923 daemon: cleanupContainer: slightly cleanup error messages 69cf2ad6a5 daemon: cleanupContainer: don't fail if container is already stopped 20b770237c daemon/network: Settings: move sandbox fields together 405f571ae8 daemon: updateSandboxNetworkSettings: remove unused error-return 2eccf0e8d1 libnetwork: Controller.NewSandbox: don't generate ID if not used 6cbe06ff3f test: Skip graph driver tests when using containerd snapshotters 3553b4c684 replace dockerfile/dockerignore with patternmatcher/ignorefile a479b287c7 vendor: github.com/moby/patternmatcher v0.6.0 bedcc94de4 daemon: Handle NotFound when deleting container lease dfaff9598c c8d/run: Allow running container without image eb56493f4e c8d/commit: Don't produce an empty layer 3e8af0817a ipam: Replace ChildSubnet with parent Subnet when its mask is bigger 4f47013feb api: Validate IPAM config before creating a network 2be118379e api/types/container: add RestartPolicyMode type and enum b8ff8ea58e Don't return an error if the lease is not found dff53a02ef libnetwork: remove Controller.Sandboxes as it's no longer used d6f340e784 gha: set 10-minute timeout on "report" actions f44fbab3ec libnetwork: remove Controller.WalkSandboxes and related code 6dba98cf38 libnetwork: implement Controller.GetSandbox(containerID) 6c4153f348 libnetwork: parallelTester: move vars closer to where they're used e690cdb6a3 libnetwork: remove redundant sandboxTable type 3c10db669e libnetwork: remove unused SandboxKeyWalker cc414a2012 libnetwork/osl: remove Sandbox.Info() 3b9f4395cf libnetwork: remove InterfaceInfo interface d146e592d8 api/t/network: Move IPAM types to their own file 219d4d9db9 ci(bin-image): check repo origin d125823d3f hack: use long SHA for DOCKER_GITCOMMIT 2010f4338e ci(bin-image): clean up metadata ad91fc1b00 ci(bin-image): clean up env var handling 5dc44f03f0 classic builder: align "removing intermediate container" output 06e540c271 libnetwork: move all SandboxOptions to a separate file 2afa4eba43 libnetwork: resolver: Resolver.dialExtDNS use joinHostPort and cleanup 3218e26a22 libnetwork: resolver: remove some intermediate variables 986de11464 libnetwork: resolver: remove setCommonFlags, use createRespMsg 7f965d55c7 volume/local: Fix debug log typo 678ce73907 windows: update default base image for dev container 0c522c6bbf libnetwork/datastore: remove deprecated scope consts 73ffb48bfb ci(bin-image): populate DOCKER_GITCOMMIT, take 2 9aed6308d4 ci(bin-image): populate DOCKER_GITCOMMIT c22ec82477 libnet: Fix error capitalization bd0111c1f4 libnet: Replace NoServiceError with UnavailableError 42d34e40f9 libnet: Replace BadRequest with InvalidParameter a64adda4e7 c8d/inspect: Ignore manifest with missing config c85a33d74b libnetwork/iptables: un-export ZoneSettings, and slight refactor d979d2af45 libnetwork/iptables: fix TestFirewalldInit 513063bcf9 libnetwork/iptables: ProgramChain: don't fail if interface not found 64de635626 Add a temporary drop-in replacement for errors.Join cff341e5e6 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230815220644-3f2e40b3ed51 56b62640a2 libnetwork: Controller.NewSandbox: use named error-return cbe692ffd1 libnetwork: Controller.NewNetwork: use named error-return e2f9d6c4c3 libnetwork: rename vars that collided with builtins e8f0f5a4ce libnetwork: rename agent type to reduce collisions 0503cf2510 libnetwork/drivers/bridge: setupIPChains(): name output variables b9d9504df5 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230808164555-1983e41a9fff 7b66ae1531 vendor: golang.org/x/crypto v0.3.0 59aa3dce8a remove s390x and ppc64ls pipelines ea2d686468 libnetwork/iptables: DeleteConntrackEntries: remove "totals" returns f1240393d9 libnetwork/iptables: reduce DeleteConntrackEntriesXX debug logs 18a0ff2b2b daemon: Daemon.handleContainerExit(): rename err-var for clarity 178125ae39 libcontainerd/supervisor: explicitly ignore process kill errors f8363690ca daemon: Daemon.handleContainerExit(): reduce ambiguity in error handling 72648f0ba6 oci: DefaultLinuxSpec: use OCI-spec consts for namespaces 17571ff199 integration/internal/container: add WithPIDMode option 917dae58e1 integration/internal/container: remove import aliases e0f5bb4820 daemon: withLibnetwork(): return early if networking is disabled 225691e258 daemon: withLibnetwork(): use OCI-spec consts for namespaces 8376595621 libnetwork: un-export SetExternalKey 91a3a95385 libnetwork/options: OptionExecRoot: skip osl.SetBasePath on non-Linux 48ea7ec970 libnetwork/osl: use filepath.Join() only when changing basedir 8bf62010a4 libnetwork: merge linux-only test-files c0562d4eed libnetwork: rename unix-only testfiles 8070f15966 libnetwork/drivers/bridge: rename some linux-only files 014fefee1d libnetwork/drivers/bridge: minor formatting fixes 80d158e0de daemon: remove containerNotModifiedError dffe634c19 daemon: Daemon.ContainerStart(): make validateState a regular function 6da42ca830 c8d/diff: Reuse mount, mount parent as read-only 051d51b222 c8d/export: Use ref counted mounter 303e2b124e integration: Add test for not breaking overlayfs 05deecaa45 internal/testutils/netnsutils: move utils that were not used on Windows d4e1c072e2 libnetwork: move resolverIPSandbox closer to where it's used f661bd8ee5 libnetwork: Resolved.SetupFunc() minor cleanup de4ba13400 libnetwork: move resolver tests that were skipped on Windows 1e4e9161c5 libnetwork: move TestDNSOptions to a non-windows file bf1fb97575 daemon: Daemon.containerStart(): add comment to clarify error-type b039bbc678 update runc binary to v1.1.9 79b467808e vendor.mod: github.com/opencontainers/runc v1.1.9 74feadacf8 integration/internal/container: refactor CreateExpectingErr 0899ba4a3f integration/internal/container: add NewTestConfig utility 3cb52a6359 integration/internal/container: use consistent name for api-client 26be2bc6b9 integration/container: use consistent name for api-client 38e26c4717 daemon/create.go: Fix error capitalization 435ecfe6e0 test/volume: Replace Check with NilError where suitable 3d3ce9812f integration/tag: Move to client unit test 742475bc8d daemon/create.go: Supersede github.com/pkg/errors 4cc796ab93 client: Client.buildRequest: use http.NewRequestWithContext 58dc0fcd1e client: Client.Ping: re-use request when falling back to GET 87fff769f4 client: Client.checkResponseErr: change errorMessage to an error 71da8c13e1 integration/tag: Use subtests and make parallel 11a0c2779b pkg/plugins: Rewrite with assert.Check 43956e1b71 hack/test: Don't exit early when all tests are filtered out ae008570ff hack/test: Split -test.run for integration and integration-cli 510cac5f5b hack/test: Fix checking if integration-cli are filtered out 8a1ca49657 libnetwork/osl: nwIface: add godoc 16785b9b7b libnetwork/osl: move all networkNamespace methods together 5b0fa7aaca libnetwork/osl: some minor nits 972d80b596 libnetwork/osl: clean up newInfo() a bit 0da721ec38 libnetwork/osl: make newKey and newInfo a t.Helper() d9442aab88 libnetwork/osl: nwIface: remove mutex altogether 2afe18d2ce libnetwork/osl: nwIface: unexport sync.Mutex 8b989ac665 libnetwork/osl: let's not do this, etc. 3d0a7d819c libnetwork: remove Network.Info() and remove NetworkInfo interface 74354043ff remove uses of libnetwork/Network.Info() 36a0946aa9 libnet/ipamapi: Remove unused errors fd4ec26313 daemon/network.go: Fix error capitalization 64e01c627f daemon/network.go: Remove github.com/pkg/errors pkg 94dc10378d libnetwork: network.requestPoolHelper: slightly optimize order of checks 67e2c1d482 libnetwork: network.requestPoolHelper: remove dead code ad68883c5a libnetwork: network.requestPoolHelper: don't defer in a loop 32fcde6d9e libnetwork: network.IpamConfig, network.IpamInfo: name output vars df03357d19 libnetwork/ipam: move PoolID.FromString() to a PoolIDFromString() func 808fed550d libnetwork/ipam: PoolID.String(): don't use fmt.Sprintf 87fc8c772b libnetwork/ipam: Allocator.RequestPool: name args, output vars 6dbc9c1c53 libnetwork/ipam: Allocator.RequestPool: mark options arg as unused 7047964bd6 libnetwork/ipam: Allocator.RequestPool: make parseErr only handle errors 821ef5cbaf libnetwork/ipams/null: use consts for fixed values 05ef5559c3 pkg/plugins: override timeouts during tests 6841a53d17 hack/test: Don't fail-fast before integration-cli 2aa24519da ibnetwork/drivers/bridge: newLink: validate before creating 5d722b35d9 libnetwork/drivers/bridge: bridgeNetwork.getEndpoint(): move lock eba15fe905 libnetwork/drivers/bridge: driver.link: don't defer in a loop 76b736c242 libnetwork/drivers/bridge: driver.link: name return var for defer handling ea5f21ceac libnetwork/drivers/bridge: don't convert IP to string and back again 8b6203b613 libnetwork/drivers/bridge: link.Enable: don't register reload on error 0f4ba145ee libnetwork/drivers/bridge: link.Enable, link.Disable use iptables.Action 40adb4317b api: Remove duplicated check on CheckDuplicate 3e52785aae volume/drivers: use plugin Content-Type headers v1.2 481dde8b70 libnetwork: use plugin Content-Type headers v1.2 93b5c31541 integration-cli: use plugin Content-Type headers v1.2 b663c7c5c3 pkg/plugins: add convenience alias for VersionMimeType c8930105bc fix: Normalize `RLIMIT_NOFILE` to sensible defaults 4f9540f19f daemon: remove some intermediate vars and some cleanup 8153a7760e daemon: Daemon.tryDetachContainerFromClusterNetwork: cleanup a018bb1da7 daemon: Daemon.initializeNetworking: remove var declaration 12d8029d56 daemon: Daemon.getNetworkedContainer: remove intermediate var d1aa1979b4 daemon: buildEndpointInfo: minor refactor 7a59913b1a Add CDISpecDirs to Info output 0034a98eb1 pkg/plugins: Guard storage and unparallel racy tests bbb9255562 Skip CDI driver registration if CDISpecDirs is empty 3b71197fb8 Set default CDI spec dirs after parsing args f3e62199ea daemon: Remove unneeded error wrapping in verifyNetworkingConfig d7a9f15775 bakefile: Remove default value of DOCKER_GITCOMMIT 2b028dc55b daemon: Daemon.buildSandboxOptions: use range when looping 33b4285eb1 daemon: Daemon.buildSandboxOptions: don't use PortBinding.GetCopy() ddb3d46533 daemon: Daemon.buildSandboxOptions: remove intermediate vars 27a27db73f daemon: Daemon.buildSandboxOptions: move vars to where they're used 91cab53a3e libnetwork: make OptionDNS, OptionDNSOptions, OptionDNSSearch take a slice 2cbed9d2a8 daemon: inline Daemon.getDNSSearchSettings 603547fa19 daemon: change Daemon.setupPathsAndSandboxOptions to a regular func 07f2df69c7 daemon: buildCreateEndpointOptions: minor nits 5158a33f15 daemon: buildCreateEndpointOptions: use range when looping 1c6dae1291 daemon: buildCreateEndpointOptions: don't use PortBinding.GetCopy() cc79024761 daemon: buildCreateEndpointOptions: remove intermediate vars 45de99aa06 daemon: buildCreateEndpointOptions: don't parse empty vip 7d429125d2 daemon: buildCreateEndpointOptions: move vars to where they're used 6ce92aa523 daemon: buildCreateEndpointOptions: skip getPortMapInfo() if not needed 9e9a17950a daemon: FindNetwork: minor cleanups 8c4af5dacb distribution: show image schema deprecation on all registries 982bc0e228 distribution: update warning for deprecated image formats 5bd8aa5246 integration: Add RunAttach helper d7fb4dd170 integration: Extract stream demultiplexing from container.Exec 584f016e99 docs/api: remove stray underscore in version-history.md d5cb7cdeae update to go1.20.7 fced566714 client: move resolveTLSConfig to a Client.tlsConfig() 47af265234 client: Dialer: inline fallbackDial 74d9850bb9 client/buildkit: ClientOpts: update docs to use doc-links, and inline 971083d419 api: search: deprecate is_automated field, and is-automated filter 5e2a1195d7 swap logrus types for their containerd/logs aliases 1a51898d2e TestDaemonProxy: use new scanners to check logs 476e788090 Fix daemon proxy test for "reload sanitized" e2d400bea9 libnet/d/bridge: Inline InvalidLinkIPAddrError 6df4a00bb9 libnet/d/bridge: Remove pointless BadRequestError impl 7c13985fa1 libnet/d/bridge: Inline InvalidIPTablesCfgError d8f42ee21a libnet/d/bridge: Inline IPTableCfgError a40d00c421 libnetwork: remove ErrDataStoreNotInitialized 66b379785e libnetwork: remove unused InvalidContainerIDError d8cd4f6421 libnetwork: remove unused UnknownEndpointError fc5c16f491 libnetwork: remove unused NetworkTypeError e9f1888560 libnetwork: remove unused ErrInvalidConfigFile eadaaa7f79 libnetwork: remove unused ErrNoContainer 99ab11bb90 libnetwork: remove unused ErrInvalidJoin 9174eb00e2 libnetwork: remove unused ErrInvalidNetworkDriver 7c2665298a libnetwork/types: move GetMinimalIP to overlay-driver and un-export d9b7a5f01a libnetwork/types: remove ErrInvalidProtocolBinding 4445169cb5 libnetwork/types: remove PortBinding.Equal 4269712d06 libnetwork/types: remove unused UUID type c203171ef6 libnetwork/types: remove unused RetryError and TimeoutError 6d37ab0a83 libnet/d/bridge: Change interface implemented by error types 03db2f8c3d libnet/d/bridge: Remove unused error types 8197752d68 TestDaemonProxy: check proxy settings early 4d674897f3 vendor: github.com/containerd/containerd v1.6.22 5438356348 libnetwork: rename vars that collided with builtin and type ce053a14aa vendor: gotest.tools/v3 v3.5.0 be0f4a4737 libnetwork/driver: remove discoverAPI from Windows and Windows overlay 6ec03d6745 libnetwork: move datastore Scope consts to libnetwork/scope 86299bbd35 vendor: github.com/opencontainers/image-spec v1.1.0-rc4 fca38bcd0a libnetwork/driverapi: make discoverAPI an optional part of the interface 490fee7d45 api/types/filters: fix errors not being matched by errors.Is() bf48d3ec29 update containerd binary to v1.7.3 a78381c399 update containerd binary to v1.7.2 0d76fc431a libnetwork/remote: newDriver(): return concrete type 3e8fda0a70 windows: fix --register-service when executed from within binary directory d69b1fdb72 volume/mounts: cleanup tests da9e44a620 libnet/d/bridge: Allow IPv6 ICC from any IP address 31d09f6ee9 testutils: move Logger interface to testutils 492c09276d tests: Move libnetwork/testutils to internal/testutils/netnsutils 13180c1c49 daemon/list: Drop unused arg from containerReducer 68991ae240 daemon/list: Refactor refreshImage e5cffc07b3 c8d: Fix TestImagesFilterMultiReference 1d8108b009 c8d: images/json, add image labels to the response a0bba26919 c8d: Populate RepoTags instead of adding a new image to the list ad2760ec80 integration: Move image filter tests to integration 4d8e3f54cc c8d/container: Follow snapshot parents for size calculation 5a39bee635 daemon/list: Replace ErrImageDoesNotExist check 7379d18018 c8d/readConfig: Translate c8d NotFound to errdefs f3b76bc1da daemon: refactor buildNetworkResource to use a struct-literal a8c0b05052 daemon: split buildDetailedNetworkResources into two functions 8caf974dcd daemon: refactor buildEndpointResource 437ced91ec daemon: refactor buildIpamResources ca5ac19ea4 daemon: refactor buildPeerInfoResources 02dc5ea720 libnetwork/datastore: remove Store.KVStore() 0f7bf67f83 pkg/plugins: TestGet(): use sub-tests e1ad4aa002 pkg/plugins: make package-level socketsPath var a LocalRegistry field 5bd44cf3c4 pkg/plugins: remove "load()" function 77c03221c9 pkg/plugins/transport: remove RequestFactory interface d12ec5f796 pkg/plugins/transport: remove unused Transport interface dfd331b2c8 pkg/plugins/transport: export httpTransport, and return concrete type 77103c7c03 pkg/plugins/transport: inline newHTTPRequest 4af4adc7ba pkg/plugins: remove LocalRegistry.SpecsPaths() a44c25c2f1 pkg/plugins: split exported from implementation 954d50b88a plg/plugins: rename vars that collided, or poorly cased 20889dbac6 pkg/plugins: move Plugin.ScopedPath to platform-agnostic file a5ee0d6af8 libnetwork: don't access KVStore directly in tests b378669836 libnetwork/datastore: don't access KVStore directly in tests 65978e6982 libnetwork/datastore: cleanup tests 478f4aed63 libnetwork/datastore: ScopeCfg.IsValid(): un-wrap conditions 37cbdeb1f2 libnetwork: remove most of kvstore d713b7ed45 api/server/router/network: remove unused Backend.FindNetwork 1bc7a2aacd daemon/containerd: ImageService. LoadImage fix stray slash in comment 126a089382 vendor: github.com/opencontainers/runtime-spec v1.1.0 42fa7a1951 Integration test for capabilities 5ef9e2632f libnetwork/datastore: prevent data races in Key() 48cc28e4ef hack/integration: Add TEST_INTEGRATION_FAIL_FAST f70e1b315f libnetwork/datastore: remove unused ParseKey() utility 704a19b25d libnetwork/datastore: remove DataStore interface d5b1e43b8f libnetwork/datastore: move MockData to a _test file 0ec73a7892 vendor: github.com/moby/buildkit v0.11.7-dev 64c6f72988 libnetwork: remove Network interface edafcb2c39 libnetwork/iptables: un-export ErrConntrackNotConfigurable, IsConntrackProgrammable e57b807a42 libnetwork: Controller.NewNetwork: inline arrangeUserFilterRule() be8ff186d6 libnetwork: refactor TestErrorInterfaces into a test 9484520327 libnetwork: arrangeUserFilterRule: don't return early a5f45b47a3 libnetwork: Controller: combine iptablesEnabled and ip6tablesEnabled 483a1933a2 volume: remove the short RRO forms in favor of the long forms 5da84141c4 vendor: github.com/prometheus/common v0.42.0 44ab4d44e0 vendor: github.com/prometheus/procfs v0.9.0 6791b8051a vendor: github.com/felixge/httpsnoop v1.0.3 9d3590f375 vendor: github.com/Microsoft/go-winio v0.6.1 35d180126a vendor: google.golang.org/protobuf v1.30.0 b835c28383 vendor: golang.org/x/oauth2 v0.6.0 3cfc1ffb0a pkg/ioutils: some cleanups in tests df86d855f5 Dockerfile: update runc binary to v1.1.8 f5e64a9eaa vendor: github.com/containerd/stargz-snapshotter/estargz v0.14.3 d431345bf3 vendor: google.golang.org/protobuf v1.29.1 30916df3d3 vendor: github.com/containerd/ttrpc v1.2.2 4f4dd2d995 vendor: github.com/containerd/go-cni v1.1.9 287130a254 vendor: github.com/cenkalti/backoff/v4 v4.2.0 7145129f27 vendor: k8s.io/klog/v2 v2.90.1 410a52b763 vendor: github.com/fsnotify/fsnotify v1.6.0 741c28ae9f vendor: github.com/containerd/cgroups v1.1.0 e84b72710b vendor: github.com/aws/aws-sdk-go-v2/config v1.18.16 e235763a38 vendor: github.com/aws/aws-sdk-go-v2/credentials v1.13.16 4c30bf1667 vendor: github.com/aws/aws-sdk-go-v2 v1.17.6 cb53ce9f89 vendor: github.com/aws/smithy-go v1.13.5 f463e50719 vendor: github.com/AdaLogics/go-fuzz-headers v0.0.0-20230106234847-43070de90fa1 359ab384fd vendor: google.golang.org/genproto v0.0.0-20230306155012-7f2fa6fef1f4 b11bdb9212 vendor: cloud.google.com/go/logging v1.7.0 64609120d8 vendor: github.com/googleapis/gax-go/v2 v2.7.0 2990defea7 vendor: go.opencensus.io v0.24.0 d7aa47ddb8 vendor: github.com/googleapis/enterprise-certificate-proxy v0.2.3 296040b1f4 vendor: github.com/cespare/xxhash/v2 v2.2.0 033f882314 vendor: golang.org/x/oauth2 v0.5.0 b615d195b2 vendor: github.com/golang/protobuf v1.5.3 c5c8f433e6 vendor: github.com/containerd/typeurl/v2 v2.1.1 2659f7f740 c8d/inspect: Include platform Variant a8fd1e3135 Dockerfile: update compose to v2.20.1 d78893921a Dockerfile: update buildx to v0.11.2 f3a6b0fd08 c8d: Make sure the content isn't removed while we export 6cba44277f AUTHORS,.mailmap: update with recent contributors 8b843732b3 pkg/chrootarchive: fix FreeBSD build eaf141c86a c8d/resolveImage: Fix Digested and Named reference 028eab9ebb c8d/inspect: Don't duplicate digested ref 7310a7cd0c ci(buildkit): remove early-return from buildkit-ref 4ecc01f3ad ci(buildkit): remove misleading code from buildkit-ref 48ff8a95cc hack/with-go-mod.sh: warn on stderr 750c441dfd daemon: remove intermediate var 468d6616bf daemon: configureLocalContentStore: return concrete types 375c4eb31c daemon: rename vars that shadowed package-level types 034e7e153f daemon: rename containerdCli to containerdClient 1aa17222e7 quota: remove gotest.tools from testhelpers a972dbd682 hack/make/.binary: use with-go-mod.sh 5563b09ac2 hack: use Git-free ROOTDIR convention 780e8b2332 hack/d/cli.sh: properly handle errors in curl 12a19dcd84 Dockerfile: improve CLI/rootlesskit caching 235cd6c6b2 Dockerfile(.simple): align APT_MIRROR support bcea83ab9b Makefile: pass through APT_MIRROR f8c0d92a22 ci: extract buildkit version correctly with replace-d modules 010c3718e3 vendor: github.com/tonistiigi/fsutil v0.0.0-20230629203738-36ef4d8c0dbb 531dbd7af5 vendor: github.com/containerd/continuity v0.4.1 eb68c5e747 daemon: support using CIDR notation for getting registry hosts e0b065cc33 daemon: use the registry service config for getting registry hosts 2da589d454 client: return explicit "nil" for no errors, and remove nil check 738b16d873 libnetwork/config: add Config.DriverConfig() and un-export DriverCfg 82bb3d8d2b libnetwork: TestUserChain: use assert.Check and is.ErrorContains 4e709e75da libnetwork: TestUserChain: re-use IPTables instances c471255153 libnetwork: TestUserChain: don't manually manipulate Controller.cfg.DriverCfg ddd33c6bbd libnetwork/iptables: move IPTable.LoopbackByVersion() to a utility aad2dbb93d libnetwork/iptables: GetIptable: validate provided IPversion 47063ca3ae libnetwork/iptables: un-export IPTable.Version 9c2cd65c0d libnetwork/iptables: make some vars local, and move bestEffortLock lock 93d050f504 libnetwork/iptables: NewChain, RemoveExistingChain: validate chain, table ad0c928ab5 libnetwork/iptables: resetIptables(): don't pass empty table name 1198fe8f6b libnetwork/iptables: un-export FirewalldInit 20900b76f9 libnetwork/iptables: make xLockWaitMsg a const 995da1e51d libnetwork/iptables: group "enum" consts per type c74a083672 libnetwork/iptables: IPTable.ExistChain(): remove redundant if/else 9f9d57590b libnetwork: getTestEnv(): use literals for options 534858aaed libnetwork/drivers: rewrite some strings to reduce quote-escaping 7c360778bb libnetwork/drivers/bridge: driver.configure: remove redundant err-check e21ff6c0c9 libnetwork/config: remove IsValidName utility 948f55d0b7 libnetwork/options: remove unused NewGeneric, and use map[string]any fa5c13542c libnetwork/drivers/bridge: setupBridgeNetFiltering: improve error handling 077049d0b9 client: WithTLSClientConfig: return early if no transport is set 6846c63252 client: WithTLSClientConfig, WithTLSClientConfigFromEnv: inline vars 9d1e690751 client: TestGetAPIPath: don't use un-keyed structs 6552441b46 client: TestClientRedirect: cleanup 8d514f4e2e client: touch-up docs, and user doc-links c219b09d4a client: Client.postHijacked: use Client.buildRequest e11555218b client: Client.setupHijackConn: explicitly ignore errors 41f235a2f8 gha: add note about buildkit using older go version 1ead2dd35d update go to go1.20.6 e1db9e9848 testutil: use dummyhost for non-tcp connections 6b7705d5b2 pkg/plugins: use a dummy hostname for local connections 92975f0c11 client: define a "dummy" hostname to use for local connections 2a59188760 client: TestSetHostHeader: don't use un-keyed literals f93cfb2e31 Support for health start interval to swarm mode 16e6d8af55 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230713153928-bc71908479e5 79c72390b9 integration/container: use subtests for TestAttach f9e2eed55d integration: Don't env cleanup before parallel subtests cdac084fb4 Add t.Helper() to the cli test helper functions c395496e06 testutil: rename variable that collided with import 1370b3c679 client: minor test improvements for requests f7f0a17ea2 client: TestSetHostHeader: use sub-tests 2cb982b506 pkg/plugins: run tests with t.Parallel() b39362295a pkg/plugins: don't share plugin server between tests ee9fe2c838 ci(buildkit): match moby go version for buildkit tests 3379414c76 vendor: github.com/moby/buildkit@v0.11 (0a15675) 5e4878ed2b Dockerfile/shell: install compose cli plugin ecfa4f5866 ci(bin-image): add SHA-based tags ce2e6b5cda Bump container-device-interface dependency to v0.6.0 0a126a85a4 ci(bin-image): fix meta step 749d7449f9 ci(bin-image): fix typo 1686540594 ci(bin-image): don't set tags when pushing by digest 83477ce8d0 client: remove custom "headers" type, and use "http.Header" instead e4ce676d3d client: ServiceCreate, ServiceUpdate: omit "version" header on API >= 1.30 d29240d9eb libnet: Return a 403 when overlay network isn't allowed 21dcbada2d libnet: Return proper error when overlay network can't be created 93853eca94 pkg/fileutils: GetTotalUsedFds(): slight optimization for macOS c5c977855d registry: session.searchRepositories(): return typed error, and small cleanup 68ebfa2f18 registry: session.searchRepositories(): log actual search URL 27698f1d13 registry: ParseSearchIndexInfo: remove redundant error-handling a0e1155b28 daemon/containerd: fix assignment to entry in nil map during commit 6b1b71ced4 Disable tls when launching dockerd through hack/make.sh 079a9d4562 Sort unconsumed build arguments before usage 41261ea4ec ci: push bin image to Docker Hub 5b3acc15d1 libnetwork: drop legacy driver cruft f9a83daebb libnetwork: delete package bitseq 8b167535db libnetwork: delete package idm 7366e44019 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230707182847-6f78b8199b05 a490248f4d daemon: daemon.prepareMountPoints(): fix panic if mount is not a volume c90229ed9a api/types: move system info types to api/types/system 3aef732e61 Do not drop effective&permitted set d519bde5da libnet/drivers: stop passing config to drivers... 1980deffae libn: refactor platform driver registration c87c4b5bbf Add Albin Kerouanton (@akerouanton) as maintainer 0066138379 Add Kevin Alvarez (@crazy-max) as maintainer d8056ddecd Add Laura Brehm (@laurazard) as maintainer 2216d3ca8d Add health start interval 2ab2503b6c Put integration daemon socket in /run 914888cf8b Improve test daemon logging 51bcf5954f libnet/d/overlay: parse VNI list w/o allocating 96ca669fa4 libnet/d/overlay: extract VNI option parsing... a940462fc7 libnetwork/drivers/bridge: minor cleanups for iptables funcs 6817b3697b libnetwork/iptables: signalHandler(): use s switch 51bbcdb3c5 libnetwork/iptables: merge Conn.initConnection into newConnection 0921360133 libnetwork/iptables: checkRunning(): use early return 98592608d4 libnetwork/iptables: remove unused Ebtables const 126525c03e libnetwork/iptables: TestReloaded(): minor cleanup b216669a02 libnetwork/iptables: TestPassthrough(): skip without firewalld 753c190ef9 libnetwork/drivers/bridge: rename vars that collided with type d1ebe6689f libnetwork/iptables: errors should not be capitalized afe8d3076f libnetwork/iptables: remove ErrIptablesNotFound 16f80f649b libnetwork/iptables: ChainInfo: don't pass whole IPTable as value 42653787ea libnetwork/iptables: ChainInfo.Output(): explicitly suppress errors ea4baa24b1 libnetwork/iptables: IPTable.RemoveExistingChain() slight refactor 04e54c6bb0 libnetwork/iptables: IPTable.exists(): return early on error 829374337f libnetwork/iptables: don't use err.Error() if not needed 9717734d1c libnetwork/iptables: IPTable.NewChain() minor cleanups 9bb0e7a5ee libnetwork/iptables: inline some args 564a13285f libnetwork/bitmap: improve documentation 0fc6bf9a6e libn/d/o/ovmanager: assign vxlans using bitmap pkg f0127f1617 libn/d/o/ovmanager: inline obtainVxlanID method e97492e579 libn/d/o/ovmanager: drop mutex from network type 6fb6635ceb libn/d/o/ovmanager: make mutexes private fields cdcb7c28c5 integration: disable iptables in parallel tests 9cee34bc94 pkg/plugins: make unit test less time sensitive 3721a525ce daemon: initBridgeDriver(): pass BridgeConfig, instead of daemon config b8220f5d0d daemon/config: move MTU to BridgeConfig 11abd0742e dockerd: "--mtu": update description, hide on Windows and warn if set 6944d2dddb libnetwork: TestBoltdbBackend(): use t.TempDir() 2fd88c7ca4 libnetwork: inline store config options cda187222e libnetwork/config: remove options that were only used in tests bc80c5d067 libnetwork: rename vars that shadowed with pkg vars and imports 332ffe8d74 libnetwork/networkdb: NetworkDB.Watch(): remove unused "key" argument 4c4149a09c libnetwork/internal/kvstore: remove unused Delete() 4d09e60f5b libnetwork/internal/kvstore: remove unused Watch() method c14a9f5b3d libnetwork/datastore: un-export Mutex e21e802fc6 libnetwork/datastore: remove unused DeleteTree() method 58d2f21dae libnetwork/datastore: remove unused PutObject(), DeleteObject() a3b0181503 libnetwork/datastore: remove Watch(), Watchable(), RestartWatch() 2409a36e29 libnetwork/datastore: cache.get(): remove unused "key" argument 824abbf8d9 libnetwork/datastore: remove redundant datastore.sequential e9b6965079 libnetwork/datastore: remove unused datastore.Active() b32e41f016 libnetwork/internal/kvstore/boltdb: un-export Mutex 7e7c7bbc17 libnetwork/internal/kvstore/boltdb: BoltDB.List(): minor cleanup 95b96eebdd libnetwork/internal/kvstore/boltdb: BoltDB.Get(): don't shadow error fb61b07bcf libnetwork/internal/kvstore/boltdb: BoltDB.Exists(): fix error handling c94ccd4207 libnetwork/internal/kvstore/boltdb: minor cleanup/refactor acfd3934a7 libnetwork/internal/kvstore: AtomicDelete(): remove unused "deleted" return b576682bdc libnetwork/internal/kvstore: AtomicPut(): remove unused "created" return c37b58bbc3 libnetwork/internal/kvstore: remove unused WriteOptions e515bef423 libnetwork/internal/kvstore: remove unused WatchTree and NewLock methods a373983a86 libnetwork/internal/kvstore: fix some linting issues 05988f88b7 libnetwork/internal/kvstore: remove unused Config options ec11aea880 pkg/jsonmessage: use string-literals for easier grep'ing fded42c3bd pkg/ioutils: use string-literals for easier grep'ing 1da079f211 pkg/idtools: use string-literals for easier grep'ing 84000190d3 opts: use string-literals for easier grep'ing ddec605aef integration: use string-literals for easier grep'ing 96a1c444cc libnetwork: use string-literals for easier grep'ing 0db4a32b9c daemon/cluster: use string-literals for easier grep'ing 4e69e16fde client: use string-literals for easier grep'ing c3d533f37f cli/debug: use string-literals for easier grep'ing 02815416bb daemon: use string-literals for easier grep'ing 6331a3a346 integration-cli: use string-literals for easier grep'ing 2f61620339 builder/builder-next: use string-literals for easier grep'ing 202907b14c builder/dockerfile: use string-literals for easier grep'ing a1c9a686b0 api: use singleflight for /info endpoint 8846c7e0ae daemon/cluster/executor/container: fix mixed pointer/value receiver 8ea78b34ab rename some variables that shadowed imports or package types 9f4acceb6a remove redundant alias for libnetwork/datastore imports cffe563d4d pkg/system: remove windows stubs for MkDev/MkNod 6b6fed06b1 integration: don't use pkg/system MkNod/mkDev 94c975e25a api: info: don't use ad-hoc type for compatibility with old api versions 9ffca1fedd libnetwork/drivers/remote: rename vars that collided f6258f70cb docs: api v1.28 - v1.40: add missing "force" query arg on plugin disable 892e9f2c23 docs: api v1.41: add missing "force" query arg on plugin disable a4bdfb963f docs: api v1.42: add missing "force" query arg on plugin disable 85ccb25eb8 docs: api v1.43: add missing "force" query arg on plugin disable aba8e04ab1 docs: api: amend changelog for API 1.28 for "force" option 7055244547 docs: api v1.32 - v1.40: remove outdated information from ServerVersion ed0dbb8518 docs: api v1.41: remove outdated information from ServerVersion b770a50dee docs: api v1.42: remove outdated information from ServerVersion 18d77ff455 docs: api v1.43: remove outdated information from ServerVersion 92f1ddaf0a api: remove outdated information from ServerVersion e8f206972a docs: api v1.42: remove "ClusterStore" and "ClusterAdvertise" fields e58a60902c docs: api v1.43: remove "ClusterStore" and "ClusterAdvertise" fields 3c905d0db9 api: remove "ClusterStore" and "ClusterAdvertise" fields e4d809b2b0 vendor: github.com/tinylib/msgp v1.1.8 f379af6d17 vendor: github.com/containerd/cgroups/v3 v3.0.2 e638351ef9 c8d/prune: Handle containers started from image id a93298d4db c8d/prune: Exclude dangling tag of the images used by containers a6d5db3f9b c8d/softDelete: Deep copy Labels 2b0655a71a c8d/softDelete: Extract ensureDanglingImage a96e6044cc testutil/environment: Add GetTestDanglingImageId 13472c6cf1 daemon/config: remove unused CommonConfig.Context 40908c5fcd libnetwork/drivers: inline capabilities options 97285711f3 libnetwork/drivers/overlay: Register does not require DriverCallback a718ccd0c5 libnetwork/drivers: remove unused "config" parameters and fields 264dbad43a gha: don't fail if no daemon.json is present ec79d0fc05 pkg/fileutils: GetTotalUsedFds(): use fast-path for Kernel 6.2 and up eaa9494b71 pkg/fileutils: GetTotalUsedFds: reduce allocations 03390be5fa pkg/fileutils: add BenchmarkGetTotalUsedFds 252e94f499 pkg/fileutils: GetTotalUsedFds(): don't pretend to support FreeBSD 7747327561 AUTHORS,.mailmap: update with recent contributors 60d2eeaa5b MAINTAINERS: update my email a764cd5a40 pkg/chrootarchive: format code with gofumpt 210932b3bf daemon: format code with gofumpt e236994b76 daemon/snapshotter: format code with gofumpt 9213e35011 daemon/containerd: format code with gofumpt 4b3900a257 daemon/logger: format code with gofumpt 050de1e4f6 daemon/logger/journald: format code with gofumpt a083677af2 daemon/logger/local: format code with gofumpt 74db0e9339 daemon/logger/loggertest: format code with gofumpt 48124bac18 daemon/logger/loggerutils: format code with gofumpt 011a32a4ad daemon/logger/gelf: format code with gofumpt 7ed5a30b5c daemon/logger/splunk: format code with gofumpt bb5a1eb99d daemon/logger/jsonfilelog: format code with gofumpt 1437037ed2 daemon/logger/awslogs: format code with gofumpt f930559076 pkg/stdcopy: format code with gofumpt 1216328c2d pkg/plugins: format code with gofumpt 651086d1d9 pkg/jsonmessage: format code with gofumpt 1291bbfa50 pkg/capabilities: format code with gofumpt 79af23e1ea pkg/ioutils: format code with gofumpt ac1514abf4 reference: format code with gofumpt 99968eec3f restartmanager: format code with gofumpt f18ac2d0bc quota: format code with gofumpt b2663a0f73 layer: format code with gofumpt 83b2daca6a plugin: format code with gofumpt 169fab5146 profiles/seccomp: format code with gofumpt 4175a550fd libcontainerd: format code with gofumpt 091991606a opts: format code with gofumpt 784ba59a08 registry: format code with gofumpt dd5ea7e996 libnetwork: format code with gofumpt bba21735bf libnetwork/ipamutils: format code with gofumpt 0b75c02276 libnetwork/resolvconf: format code with gofumpt 801cd50744 libnetwork/portallocator: format code with gofumpt 6187ada21f libnetwork/options: format code with gofumpt 882f7bbf1f libnetwork/osl: format code with gofumpt 32e716e848 libnetwork/networkdb: format code with gofumpt 65e2149b3e libnetwork/netutils: format code with gofumpt 1cd937a867 libnetwork/etchosts: format code with gofumpt 540e150e4e libnetwork/cmd: format code with gofumpt fffcbdae4c libnetwork/iptables: format code with gofumpt 6f3fcbcfe1 libnetwork/ipam(s): format code with gofumpt eb6437b4db libnetwork/datastore: format code with gofumpt defa8ba7b4 ibnetwork/bitmap: format code with gofumpt f349754b55 libnetwork/bitseq: format code with gofumpt 3af2963c74 libnetwork/drvregistry: format code with gofumpt dc17f5e613 libnetwork/drivers/remote: format code with gofumpt 485977de57 libnetwork/drivers/windows: format code with gofumpt 2cc5c2d2e6 libnetwork/drivers/overlay: format code with gofumpt e74028554e libnetwork/drivers/macvlan: format code with gofumpt 7b02ccda86 libnetwork/drivers/ipvlan: format code with gofumpt 17a35bc645 libnetwork/drivers/bridge: format code with gofumpt d2a6956afb daemon/graphdriver: format code with gofumpt 8d923c60b9 daemon/config: format code with gofumpt 425ccb1241 runconfig: format code with gofumpt c0edf0861b integration/system: format code with gofumpt 5cc1c6eca0 integration/service: format code with gofumpt bb5ace2efb integration/plugin: format code with gofumpt 9bd3e011e1 integration/internal: format code with gofumpt 89a4e6b889 integration/container: format code with gofumpt 846bcd7dd1 distribution: format code with gofumpt b7f5db432f daemon/images: format code with gofumpt 2d12dc3a58 daemon/cluster: format code with gofumpt 316c7331eb pkg/parsers: format code with gofumpt fb017754e1 pkg/system: format code with gofumpt ee2ac6c205 cmd/dockerd: format code with gofumpt 47276bdb28 cmd/docker-proxy: format code with gofumpt 0af6d9e291 client: format code with gofumpt 3146ecbae6 api/types: format code with gofumpt b9833a2059 builder: format code with gofumpt 540d6539be builder/remotecontext: format code with gofumpt 3e0565e17c builder/dockerfile: format code with gofumpt 9d4abbbc30 builder/builder-next: format code with gofumpt 6592646632 api/server: format code with gofumpt 5e9a354ff1 pkg/tarsum: format code with gofumpt 2aac054f52 pkg/authorization: format code with gofumpt f7552f1de4 pkg/archive: format code with gofumpt 7c697f58f2 Makefile: remove unused BUILD_APT_MIRROR a1d2132bf6 Dockerfile: use default apt mirrors 225e2562c9 integration-cli: format code with gofumpt a31411c679 testutil: format code with gofumpt 4c281fb29a volume: format code with gofumpt a08abec9f8 Update dockerd to support JSON logging format b335e3d305 seccomp: add name_to_handle_at to allowlist 6d3bcd8017 c8d/images: handle images without manifests for default platform 8caf63896c docs: document more buildx targets 647c2a6cdd Restore active mount counts on live-restore d8bc5828cd gha: Setup Runner: add missing sudo fdc9b7cceb remove name_to_handle_at(2) from filtered syscalls 9f6dbbc7ea Dockerfile: make cli stages more resilient against unclean termination 19bd0730ef vendor: github.com/moby/swarmkit/v2 v2.0.0-20230627115642-ad0f3ae162fa e2dad6c3ff Revert "Temporarily skip DCO check" 1741771b67 Skip cache lookup for "FROM scratch" in containerd 7d7225fae6 Temporarily skip DCO check e60cda7051 libnetwork/internal/kvstore/boltdb: fix linting issues d18b89ced6 libnetwork/internal/kvstore: remove some unused code b873d70369 replace libkv with local fork 5d25143ef3 libnetwork/kvstore: rewrite code for new location dd1c95edcd integration/windows: Unskip some kill tests 3c1de2e667 pkg/homedir: deprecate Key() utility ddd9665289 pkg/homedir: deprecate GetShortcutString() utility 6876e45f9e pkg/homedir: unify implementations 0aca7f2a0d pkg/homedir: use os.UserHomeDir() 0215a62d5b integration-cli: don't use pkg/homedir in test 76d8bfdff4 testutil/environment: remove Execution.OSType field 325786430b testutil/environment: remove unused TEST_OSTYPE env-var 0fe2ac0437 testutil/environment: rename var that collided with import 74da6a6363 Switch all logging to use containerd log pkg cdb1293eea Fix missing Topology in NodeCSIInfo 165dfd6c3e daemon: fix restoring container with missing task 786c9adaa2 daemon: fix double-unlock in health check probe 3b28a24e97 daemon: fix panic on failed exec start e010223186 contrib/busybox: Update to FRP-5007-g82accfc19 21e50b89c9 builder: pass host-gateway IP as worker label 21c0a54a6b c8d: mark stargz as requiring reference-counted mounts 4d831949a7 Dockerfile: update buildx to v0.11.0 fc94ed0a86 don't cancel container stop when cancelling context 19d860fa9d testing: temporarily pin docker-py tests to use "bullseye" cfa08f8366 builder-next: enable OTLP tracing for history records 98a44bb18e update go to go1.20.5 3ba67ee214 daemon: registerName(): don't reserve name twice 2a6ff3c24f Use OCI "History" type instead of inventing our own copy 59b5c6075f pkg/rootless: remove GetRootlessKitClient, and move to daemon 3cc5d62f8a run `getent` with a noop stdin 71589848a0 daemon: test runtimeoptions runtime options a6048fc792 client: add WithUserAgent() option 197b0b16e3 vendor: github.com/sirupsen/logrus v1.9.3 038a361a91 daemon/cluster: convert new BindOptions d41d2c3751 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230607145746-36334ed1876 32d58144fd c8d: Use reference counting while mounting a snapshot 8a094fe609 daemon: ensure OCI options play nicely together dea870f4ea daemon: stop setting container resources to zero 8c4dfc9e6a vendor: github.com/rootless-containers/rootlesskit v1.1.1 0b1c1877c5 update RootlessKit to v1.1.1 9ff169ccf4 daemon: modernize oci_linux_test.go 0f9c8e684a Dockerfile: Move dockercli to base-dev 5433b88e2d hack/cli.sh: Quiet origin cleanup 800ea039ec contrib/check-config: move xt_bpf check to overlay section 49f76a34b5 Dockerfile/shell: Install buildx cli plugin 17c99f7164 Dockerfile: Use separate cli for shell and integration-cli 1910fdde81 contrib/check-config: check for xt_bpf d63569c73d builder-next: Set moby exporter as default 4295806736 c8d/handlers: Handle error in walkPresentChildren ff2342154b Dockerfile: use COPY --link for source code as well 0f6eeecac0 daemon: consolidate runtimes config validation d222bf097c daemon: reload runtimes w/o breaking containers 0b592467d9 daemon: read-copy-update the daemon config 742ac6e275 daemon: make config reloading more transactional 038449467e Update BuildKit registry config on daemon reload 982e4fb448 api/server: get features from a callback fn d099e47e00 containerd: add c8d version and storage-driver to User-Agent a6da1480b5 dockerversion: DockerUserAgent(): allow custom versions to be passed 9a1f2e6d7c dockerversion: remove insertUpstreamUserAgent() ff40d2d787 dockerversion: simplify escapeStr() eb9a5392bc dockerversion: add a basic unit-test 66137ae429 containerd: set user-agent when pushing/pulling images 06aaf87aab vendor: github.com/moby/swarmkit/v2 v2.0.0-20230531205928-01bb7a41396b 637ca59375 Dockerfile: use COPY --link to copy artifacts from build-stages 4d3238dc0b c8d/load: Don't unpack pseudo images b08bff8ba3 c8d/load: Use walkImageManifests 5210f48bfc c8d/list: Use walkImageManifests fabc1d5bef c8d: Add walkImageManifests and ImageManifest wrapper 1178319313 libn: fix resolver restore w/ chatty 'iptables -C' 50eb2d2782 libnetwork: fix sandbox restore 18bf3aa442 libnetwork: log why osl sandbox restore failed ed32f5e241 Make sure the image is unpacked for the current snapshotter d58df1fc6c Update blogpost URL 44124ab6b0 builder/remotecontext: remove CachableSource, NewCachableSource 5efe72415d remove Dockerfile.e2e fd72b134d5 update generated files 735537d6b1 replace gogofast with gogofaster extension 1eaea43581 fix protos and "go generate" commands 7daaa00120 hack: generated files update and validation f1ca793980 use tools build constraint for proto dependencies 1e55ace875 Add oci index and layout files to exported tars 487ea81316 Fix npe in exec resize when exec errored 9a692a3802 libn/d/overlay: support encryption on any port e410e27547 builder/remotecontext: remove mimeTypes struct, use consts b42e367045 vendor: github.com/opencontainers/image-spec v1.1.0-rc3 37d4b0bee9 builder/remotecontext: deprecate CachableSource, NewCachableSource fb7ec1555c libcontainerd: work around exec start bug in c8d 79ca6630d4 vendor: github.com/moby/buildkit v0.11.7-0.20230525183624-798ad6b0ce9f 5045a2de24 Support recursively read-only (RRO) mounts 3512b04093 vendor: github.com/containerd/go-runc v1.1.0 b9b8b6597a c8d/inspect: Fill `Created` time if available f17c9e4aeb c8d: ImageService.softImageDelete: rename var that collided with import df5deab20b c8d: ImageService.softImageDelete: use OCI and containerd constants 9b9c5242eb daemon: lock in snapshotter setting at daemon init 53d1b12bc0 hack/make/.binary: don't use "netgo" when building Windows binaries a7bc65fbd8 c8d/pull: Use same progress action as distribution 6506579e18 integration: Add TestImageInspectEmptyTagsAndDigests a93aadc2e6 hack: Rename .ensure-emptyfs to .build-empty-images 3a31f81838 hack/ensure-emptyfs: Create dangling image 4373547857 Add testenv.UsingSnapshotter utility d3d2823edf Dockerfile: temporarily skip CRIU stage 86108812b8 vendor: github.com/mistifyio/go-zfs/v3 v3.0.1 ddd67b2535 Make image save more like the OCI layout for blobs 871cf72363 libnetwork: check for netns leaks from prior tests 6d79864135 libnetwork/osl: restore the right thread's netns d4f3858a40 libnetwork: leave global logger alone in tests 0cc6e445d7 libnetwork: make resolver tests less confusing 411a9e1b86 daemon: remove devicemapper driver-warnings 424a1c5d21 daemon: remove warning for overlay/overlay2 without d_type ab35df454d remove pre-go1.17 build-tags 34964c2454 c8d/list: Show layerless images 61757032da d/graphdriver/vfs: fix unit test 6e4bd3bbc2 vendor: github.com/spf13/cobra v1.7.0 6690d2969c pkg/archive: bail if setting xattrs is unsupported 0cdfd5f275 pkg/system: return rich errors from L(g|s)etxattr 41356227f2 libnetwork: just forward the external DNS response 6d139e5e95 build: use daemon id as worker id for the graph driver controller 668af4be82 ci(bin-image): distribute build across runners 1be26e9f0c api/inspect: Fix nil RepoTags and RepoDigests f450ea64e6 fix: `docker pull` with platform checks wrong image tag f3645a2aa3 reorder load funcs to match newServiceConfig()'s order 3b15156e4d add mirror to daemon reload test for insecure registries 0d8087fbbc Remove Upstart scripts 967c7bc5d3 api/server: allow empty body for POST /commit again 3ceb3810d7 client: don't marshal typed nils in request body ae737656f9 Remove Upstart and cgroups bits from Debian sysvinit script c2630c93f2 Update vendoring dedf5747cc Remove need to set Capabilities for cdi driver 7ec9561a77 Add support for CDI devices to docker daemon under linux 5a200ade7c Rename daemon/devices_liunx.go to daemom/devices.go 484785456c update containerd binary to v1.7.1 348a79958d c8d: The authorizer needs to be set even if AuthConfig is empty 2f0ba0a7e5 more robust dockerd-rootless-setuptools.sh 135d8f04f9 ci: bin-image workflow ae1ca67178 bin-image bake target 3309e45ca1 c8d: Don't create authorizer for empty AuthConfig 2ad499f93e c8d/authorizer: Default to docker.io bd6868557d c8d/builder: implement cache 7821d2d788 vendor: github.com/docker/distribution v2.8.2 e46674b6a7 c8d: implement classic builder 8d76acfe6c testutil: replace uses of client.IsErrNotFound 56fb56ccf0 integration: update error-assertions in tests 0538cdd226 integration-cli: update error-assertions in tests 66ff1e063e client: update error-assertions in tests 685b3d820a client: make IsErrNotFound an alias for errdefs.IsNotFound 9e817251a8 libnetwork/docs: fix broken link 17882ed614 libnetwork: update example in README.md 4603b6d6b6 c8d: fix image history for dangling images 4e0319c878 [chore] clean up reexec.Init() calls 9e43c11480 AUTHORS: regenerate 5fee4439a0 .mailmap: update with my new email e8be792130 c8d: fix missing image history e3e715666f pkg/aaparser: deprecate GetVersion, as it's no longer used 71d7908656 added alias validation ecaab085db profiles/apparmor: remove use of aaparser.GetVersion() f445ee1e6c contrib/apparmor: remove remaining version-conditionals (< 2.9) from template 307b09e7eb fixing consistent aliases for OCI spec imports 2ad37e1832 daemon: handleContainerExit(): add execDuration in attributes cad97135b3 c8d: implement missing image delete logic de363f1404 daemon: handleContainerExit(): use logrus.WithFields fb96b94ed0 daemon: remove handling for deprecated "oom-score-adjust", and produce error 316781be48 api/types/container: remove deprecated ContainerChangeResponseItem 9c14f98583 api/types: remove deprecated AuthConfig 55608d8381 pkg/system: remove deprecated IsProcessAlive, IsProcessZombie, KillProcess a3b12ec420 pkg/system: remove deprecated DefaultPathEnv() dc76b90705 pkg/system: remove deprecated MemInfo, ReadMemInfo() 7d0488b11e pkg/ioutils: remove deprecated TempDir() alias 152c482fee pkg/platform: remove deprecated OSType const 913b0f51ca API: omit deprecated VirtualSize field for API v1.44 and up fdc7a78652 docs/api: version-history: also mention /system/df for VirtualSize fd0b109bf7 API: bump version to 1.44 43b1afb2cf make chownComment easy to read 7665feeb52 hack: enable Go modules when building dockerd and docker-proxy 5400366b90 Set BuildKit version using buildinfo c33b31116c daemon/graphdriver: remove isDeprecated() utility dc11d2a2d8 remove deprecated devicemapper storage-driver 1e195acee4 libn/d/overlay: stop programming INPUT ACCEPT rule eb0edeafdd api: swagger: add missing "force" query arg on plugin disable ea4dd1bbf6 boltdb/bolt is not maintained. Used bbolt 6c0e0d6250 Allow client to set boltdb timeout a0f6d0798a Do not return boltdb bucket not found error deb21faad0 Add support for etcd authentication cc0ed694ee fix typo fbdb24ec6a Fix typo in error text dcf8828165 Return store.ErrKeyExists on AtomicPut 002f9c37ca Synchronize boltbd libkv apis 15e5d4067a Change unsupported call error in boltdb backend to use general store error 3b5fb3ec87 Remove docs in libkv.go 2603af65e5 Migration to the new Etcd client f06f78e638 boltDB AtomicDelete fails for non-existent key 0b81042dc3 Add transient connection option to bolt db 7225aba3af add TTL to consul lock using store.LockOptions and add tests for the Lock ttl behavior 1f9cf17713 Fix AtomicPut panic if previous KVPair is not nil and key not exists in boltdb 599deba8c7 nits and refactor for etcd tls config cc9e627f8e Add etcd TLS client code and update README.md. Signed-off-by: Adam Thornton <adam.thornton@gonkulator.io> 64eb25dff9 Honoring ConnectionTimeout in boltdb 3ec6dfa346 Refactor libkv to not directly import storage backends f817826408 Create dir first before opening data file of boltdb 29af4e0f27 BoltDB backend support for libkv 06f01227c5 change heartbeat/ephemeral combination to use a single ttl field f26e4f4c52 Minor fix of store comment 6b43181cfa Notify user of supported backend storage a961b70b2b Remove unused type WatchCallback 06151b8a4d add top-level godoc: sample some parts of the README a2d4e1c246 API Change: AtomicPut with previous = nil is create. fcb98254b1 Use Backend type for stores 79c320c1cf remove testify dependency through mock package 48f5dca2ce Remove logging in library dbc1a6fa9a refactor and move store backends in sub-packages Bumping docker-cli to version v25.0.0-7-g01f933261, which comprises the following commits: 21c12847b docs: move base command to docker.md 22e1f2cbf docs: fix broken links to alias pages 68abf14c1 vendor: github.com/docker/docker v25.0.0 9e1e07657 docs: add documentation for CDI cdb1c105f vendor: github.com/docker/docker v25.0.0-rc.3 3df149545 docs(plugins): fix typos and formatting 22bbdc798 docs: add "builder" key to full daemon.json example d2efc5b09 deprecate old API versions (1.23 and lower) 508346ef6 plugins: fix plugin socket being closed before use f722e07c6 gha: update to use macos-12 runners 5f6c55a72 plugins: don't handle signal/notify if TTY 26560ff93 Revert "plugins: run plugin with new process group ID" 37f551566 docs: fix broken link to tmpfs (missing anchor) b35361e8d docs: regenerate stubs for non-canonical commands dfa2930af ci: Add bin-image workflow 21c253605 vendor: golang.org/x/sys v0.16.0 a6774de68 docs: rename cli reference aliases to canonical cf9d3692a docs: remove empty cli reference stubs d868dca00 vendor: github.com/docker/docker v25.0.0-rc.2 1609916f2 Revert "Dockerfile/binary: Output the binary directly" ff25c4334 Revert "ci: Add bin-image workflow" ef5e5fa03 plugins: run plugin with new process group ID 6d0b329b0 cli-plugins: use non-abstract socket on darwin dbf992f91 cli-plugins: move socket code into common package 8b6ffbdf7 vendor: github.com/containerd/containerd v1.7.12 ccc7ad2f2 Dockerfile: update buildx to v0.12.1 fdcb78a0f Dockerfile: update docker compose to v2.24.0 15d4c99f3 ci: Add bin-image workflow ecf338f43 scripts/build: Handle VERSION containing git ref 6ad07f2a4 Dockerfile/binary: Output the binary directly 0e37dd49f cmd/docker: registerCompletionFuncForGlobalFlags: take store.Store as argument c0a0b05dc cli-plugins: helloworld: rename var that collided with import 11b2e871b cmd/docker: move main() to the top 4dc2c895b cli-plugins/manager: getPluginDirs: take ConfigFile as argument 79992184e docs: dockerd: rephrase environment-variables intro 4d2b4e7fb docs: dockerd: fix stray column-separateor in env-var table a5e5563f1 vendor: github.com/docker/docker-credential-helpers v0.8.1 4f4950886 update to go1.21.6 26f59b2f6 cli/compose/loader: use golden.Assert() for readability 9db56ea2f vendor: golang.org/x/tools v0.16.0, golang.org/x/mod v0.14.0 efae960e5 vendor: golang.org/x/net v0.19.0 996cce909 vendor: golang.org/x/sync v0.6.0 4b10e5525 vendor: github.com/google/go-cmp v0.6.0 1ebc233b4 vendor: github.com/creack/pty v1.1.21 b4fe77a12 vendor: github.com/docker/go-connections v0.5.0 909111b3a docs: fix incorrect heading levels in docker run reference b43ea528b vendor: github.com/docker/docker v25.0.0-rc.1 6d0aa0a52 cli/command/container: parseSecurityOpts: fix --security-opt seccomp=builtin 9be600a97 Docker build command docs refresh 878b1c55b docs: add links to volume ls, network ls, stack ps formatting examples f0edc7953 change back nolint -> nosec c1016c05c vendor: github.com/mitchellh/mapstructure v1.5.0 58524685d vendor: github.com/mattn/go-runewidth v0.0.15 1e38fc3b9 vendor: github.com/klauspost/compress v1.17.4 0fa3a365f vendor: github.com/docker/docker v25.0.0-beta.3 d1a51582e update authors and mailmap 60af715d6 id and name filter in service ls is the prefix not a part 90a1887d3 Fix wrong docker run command 64e9cadd1 Add networking reference link 924ec7f4c docs/deprecated: update "oom-score-adjust" status for daemon 800a728e1 deprecated: fix anchor and add missing version c1c6198ae docs: deprecate short cid in Aliases field 336787c50 vendor: github.com/docker/docker 7bc56c53657d (v25.0.0-dev) 53a129e3d docs(plugins): remove Weave engine network plugin 3ecd6b6c7 docs(plugins): remove inline CSS markup a4d805f9c docs(plugins): add Kathará engine network plugin 1dcd5487f docs(plugins): update Docker Store to Docker Hub 46355a194 export RunStat, StatsOptions, and add Filters option e9a5590ad cli/command/container: statsOptions: add GoDoc b642078c8 prevent "docker stats" from hanging if the initial API call fails 633ba88c2 cli/command/container: runStats(): move code to where it's used 5ed6c128e cli/command/container: runStats(): don't register unused event handlers 2389768fb cli/command/container: runStats(): minor cleanup and fixes 4d434dc69 vendor: github.com/docker/docker 388216fc45ab (v25.0.0-dev) 5eac07b10 update typos and style in docs 6fd4cff1f docs: minor editorial improvements, typo fixes 0de84f019 vendor: golang.org/x/crypto v0.17.0 3cf0bf84a vendor: golang.org/x/crypto v0.16.0 36d4db27d vendor: golang.org/x/text v0.14.0 3d70100d5 vendor: golang.org/x/sys v0.15.0 70216b662 add //go:build directives to prevent downgrading to go1.16 language 88e647435 build(deps): bump github/codeql-action from 2 to 3 ca9ff8daf docs: run-reference: use table for health options 77e67a0f9 docs/deprecated: mark logentries logging-driver as "removed" 8f13b0416 cli/command: remove "logentries" driver from tests and fixtures d79dd7c53 docs, man: remove logentries logging-driver b14094df5 contrib/completion: remove logentries logging-driver f63065a58 vendor: github.com/docker/docker f3cc93630ed8 (v25.0.0-dev) fa1914426 vendor: github.com/docker/docker v25.0.0-beta.2 e81a66661 docs/deprecated: mark logentries log-driver for removal f8dd8f074 docs: refresh --publish, add --publish-all 5400a48aa Plumb contexts through commands aec7ec7f6 vendor: github.com/docker/docker 92884c25b394 (v25.0.0-dev) 0a3a16d2b vendor: github.com/containerd/containerd v1.7.11 54c103aff vendor: upgrade OpenTelemetry to v1.19.0 / v0.45.0 d49970590 vendor: github.com/felixge/httpsnoop v1.0.4 7af509c7f cli/command: merge DockerCliOption and InitializeOpt types 1554ac3b5 cli-plugins: terminate plugin when CLI exits 2e394eb5f docs: rewrite section on working directory 4a8451455 docs: rewrite section on setting user id 259aa9005 docs: rewrite section on filesystem mounts 52716c813 docs: move --tmpfs to docker run reference 5ede4c82a docs: minor improvements to the healthcheck section 7585d66a0 docs: rewrite section on overriding environment variables 3eeac2059 docs: rewrite section on exposing ports 0a94d85cd docs: fix typo in "network create" docs b01e28752 docs: rewrite section on default entrypoint c695ad9d7 docs: rewrite section on overriding image defaults 4a6cde885 docs: move --log-driver to docker run reference 72df1960e docs: move --cgroup-parent to docker run reference 9e75a4cf6 docs: move --init to docker run reference 92c664b0d docs: move info about --security-opt to docker run reference f98444490 docs: move --rm to docker run reference 32189ca27 docs: improve description about container exit codes dbffa0d12 docs: move --restart to docker run reference 73620975d docs: simplify container networking intro 5dd6e9a4d docs: move --ipc to docker run reference ff62bf47b docs: move --uts to docker run reference d66fe7881 docs: move --pid to docker run reference 03dc8832e docs: improve docs on container identification fad227d3f docs: move info about fg/bg flags to run reference 2f48f41fc docs: improve introduction to docker run 3f519b824 docs/deprecated.md: add version for "-g" / "--graph" removal 6dc92b667 docs/deprecate.md: add version for devicemapper removal to table a682b8e65 Permit '=' separator and '[ipv6]' in --add-host 626e64ccf build(deps): bump actions/setup-go from 4 to 5 0cf7bff0b vendor: github.com/docker/docker 4046ae5e2fd4 (v25.0.0-dev) bdb45a9c2 update to go1.21.5 afc62d8d1 update to go1.21.4 8bbc97c86 prune: fix build cache prune warning e93ec2f6a Fix typo in dockerd reference documentation 5a0470888 vendor: github.com/docker/docker 029519a1498b (v25.0.0-dev) aa9fdb4dd vendor: github.com/gorilla/mux v1.8.1 a431b1dda exec.md: remove misleading part b62b5d48f Readme: remove reference to "Docker EE" 354f62f0c docs: reference/commandlin/cli: remove redundant italic e2626200a docs: remove "{% raw %}" / "{% endraw %}" Jekyl (liquid) leftovers 174cbb588 docs/man: fix -name flag with single hyphen 539537ddf vendor: github.com/docker/docker cfdca8dc1d4c (v25.0.0-dev) 6a74a63ee Dockerfile: update ALPINE_VERSION to 3.18 35c6e915d Dockerfile: update buildx to v0.12.0 6468c63c8 docs: update debian examples to use bookworm 0d95231cc Dockerfile: use "debian" in stages instead of distro name c5194a9e5 Dockerfile: update to debian bookworm 7be05a6f4 mount: bind-recursive: remove boolean convenience values dad4a1962 vendor: github.com/docker/docker v25.0.0-beta.1 30d36e977 templates: linting: fix "error return value is not checked (errchkjson) 4e2477f85 golangci-lint: enable more linters 0e73168b7 golangci-lint: revive: enable use-any 9c0c49a5f golangci-lint: revive: enable empty-lines 8e9aec690 golangci-lint: revive: enable import-shadowing f387558b5 Add zstd as supported in load command doc f4962c65b vendor: github.com/Microsoft/hcsshim v0.11.4 391668f57 golangci-lint: enable perfsprint linter 8bbdb93cf golangci-lint: enable nilerr linter 7e9d2c78c golangci-lint: enable dupword linter 2d61f70f0 golangci-lint: govet: enable shadow check 606cbd60a golangci-lint: enable predeclared linter 8661552e7 golangci-lint: enable thelper linter 8e98c765f cli/command/system: fix deprecated comments (gocritic) 9d7e21be2 cli/command/manifest: rename vars that collided with import 3f0c189e4 linting: address slice-append issues found by gocritic a2c9f3c6c linting: address else/if/elseif statements found by gocritic 888df0987 linting: address assorted issues found by gocritic d0dee3ceb linting: Consider pre-allocating sliceVar (prealloc) efbcdce9b linting: cli/command/trust: unusedwrite: unused write to field Hashes (govet) 580ebf41a dockerfiles: update golangci-lint to v1.55.2 8642b3c35 update authors and mailmap 685d1baa0 vendor: github.com/docker/docker 34e923e3e31b (v25.0-dev) f0816bf67 opts: remove unused IPOpt option b0ee27d65 opts: ValidateIPAddress: improve error, godoc, and tests b24e7f85a Fix setting ServerAddress property in NativeStore f65d4a479 vendor: github.com/docker/go-connections fa09c952e3ea (v0.5.0-dev) b7c31c36f not actually a maintainer f9622b659 vendor: update go-connections for TLS 1.3 support 4cf1c50ad Revert "update to go1.21.4" due to regressions / breaking changes. 6472dabe4 update to go1.21.4 3cd77c9d5 cli/command/container: ForwardAllSignals: rewrite to use ContainerAPIClient a2ec50a46 make `container` an explicit, required parameter a4abe42cb make runAttach public and allow passing context 2b1f5a2e3 TestParseWithMacAddress: check endpoint-specific MacAddress field 8f59f841a cli/command/container: mustParse: return network.NetworkingConfig d46de7087 vendor: github.com/docker/docker c14694a424ab (v25.0.0-dev) efc923679 --env-file about comments doc updated Signed-off-by: Saurabh Kumar <saurabhkumar0184@gmail.com> 07338fe96 docs: update redirect metadata for hugo 0239b8fd9 vendor: github.com/spf13/cobra v1.8.0 848fe622c docs: add default-network-opt daemon option 54eee599b Update container-device-interface to v0.6.2 e08866098 vendor: github.com/docker/docker ed1a61dcb789 (v25.0.0-dev) 13d34b21e vendor: github.com/containerd/containerd v1.7.8 aa24d611b vendor: google.golang.org/grpc v1.58.3 784149382 vendor: golang.org/x/tools v0.10.0 1a0ae8c6b vendor: golang.org/x/mod v0.11.0 39b1d37b3 Update CodeQL workflow 663a89b7a vendor: github.com/docker/docker fc4d035e7a4e (v25.0.0-dev) 6891974ee vendor: github.com/opencontainers/image-spec v1.1.0-rc5 827c404ca vendor: github.com/moby/swarmkit/v2 v2.0.0-20230911190601-f082dd7a0cee 137c495f7 vendor: github.com/go-logr/logr v1.2.4 6372c6aae vendor: github.com/klauspost/compress v1.17.2 8073525c0 vendor: google.golang.org/grpc v1.56.3 b7b5b31a7 update to golangci-lint v1.55.0 9e1f8d646 image/build: use "nolint" comment to work around gosec regression 2294b17e7 cli/command/network: runCreate: inline types.NetworkCreate 594aeb390 cli/command: remove dot-imports and unhandled errors b08e34b9f swarm: TestSwarmUpdate: remove non-existing "--quiet" flag defa52b8c stacks: Add support for start interval 9df7be5d5 cli/compose: add schema 3.12 (no changes with 3.11 yet) 7a2ea5c53 vendor: gotest.tools/v3 v3.5.1 f2fced487 cli/compose/loader: remove platform-specific path handling 74990623e cli/compose/loader: use gotest.tools/v3/golden 8bf121c3b Add docker ps status descriptions a252a106c - What I did Removed broken link in #937 - How I did it Removed first section of CONTRIBUTING.md - How to verify it Check CONTRIBUTING.md - Description for the changelog Removed broken link in contributing to Docker documentation. A picture of a cute animal (not mandatory but encouraged) Closes #937 74bace156 docs: add `bind-recursive` mount option 46d0ba20f vendor: github.com/docker/docker cdb3f9fb8dca (v25.0.0-dev) 3441151e0 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230823155524-12f0c246fed0 412ebb677 vendor: github.com/containerd/containerd v1.7.7 78eaac75c vendor: update OTEL dependencies a27466fb6 vendor: golang.org/x/net v0.17.0 612a17155 vendor: golang.org/x/crypto v0.14.0 392db31e2 vendor: golang.org/x/term v0.13.0 ac307788a vendor: golang.org/x/text v0.13.0 48655f794 vendor: golang.org/x/sys v0.13.0 6de525416 vendor: github.com/docker/distribution v2.8.3 ceab9b5e8 update to go1.21.3 d249ce279 update to go1.21.2 3f1195e4e update go-md2man to v2.0.3 fc6976db4 mount: add `bind-recursive=<bool|string>` and deprecate `bind-nonrecursive=<bool>` 0f59f04f5 Update minimum Go version to 1.19 d254cc3bb update golang to go1.21.1 4c75107a6 vendor: github.com/distribution/reference v0.5.0 112d79a41 appcontext: remove unused parts febb37a38 remove buildkit as dependency e9759cee6 Dockerfile: use GOTOOLCHAIN=local f07e7e1ee Dockerfile: build gotestsum and goversioninfo without cgo 9e424af5d e2e: update to use compose v2, and don't depend on distro-packages 3e2187b4c vendor: github.com/docker/docker d3afa80b96bf (v25.0.0-dev) f90890fb4 vendor: github.com/Microsoft/hcsshim v0.11.1 23f50a066 vendor: github.com/containerd/containerd v1.6.24 497b13c66 vendor: github.com/klauspost/compress v1.16.5 e0ad0127b vendor: google.golang.org/grpc v1.56.2 c2308ad6f vendor: google.golang.org/protobuf v1.31.0 56396ba35 vendor: golang.org/x/tools v0.8.0 c9d56b850 vendor: golang.org/x/crypto v0.9.0 ffea6940e vendor: golang.org/x/sys v0.10.0 1554b4932 vendor: golang.org/x/sync v0.3.0 78012b00a vendor: container-device-interface v0.6.1 3a16c3bb0 docs: fix duplicate words in "docker tag" reference 7e9467506 build(deps): bump docker/bake-action from 3 to 4 315ff202c build(deps): bump docker/setup-buildx-action from 2 to 3 4b00be585 update to go1.20.8 9e1b42e64 Add missing opts to --network advanced syntax 58f426087 Rename expectedCfg into expectedHostCfg f1048e1a3 Create default EndpointSettings if no --network provided 2c193b59d Fix extremely minor typo in docker-run man page 40dc66b26 vendor: github.com/docker/docker 06499c52e2b1 (v25.0.0-dev) f13b78672 vendor: github.com/docker/docker 032797ea4bcb (v25.0.0-dev) fb2ba5d63 migrate reference github.com/distribution/reference 04af12821 vendor: github.com/docker/docker 7abd7fa73965 (v25.0.0-dev) dee40053f build(deps): bump actions/checkout from 3 to 4 6dfdd1eae cli/command/system: fix "docker events" not supporting --format=json db6209abd update golangci-lint to v1.54.2 9ad079244 cli/registry/client: remove some redundant conditions 22b4bab90 cli/registry: client.iterateEndpoints: remove check for APIVersion1 5250f1bab cli/registry: fix client.pullManifestList not de-referencing manifest d40fc1a0f vendor: github.com/docker/docker a65c948e7edf (v25.0.0-dev) 261c18f9e ParseRestartPolicy: validate for missing policy-names 3d2aac6a0 docs/reference: run.md: remove stray whitespace 4cce7bb2f rewrite TestParseRestartPolicy to use sub-tests 42ac5d4bf force TestNewHistoryCommandSuccess to use UTC timezone 17f4c8259 update cli-docs-tool to v0.6.0 be219b317 adding -c option for docker run/build in manpages 273f2cd95 cli/command/manifest: update link to Go documentation 722e3aae4 man: update links to Go documentation dc4feccb8 docs/reference: update links to Go documentation 1d3af726e CONTRIBUTING.md: update links af05a6882 Dockerfile: use COPY --link where possible 1da67be9c Stop slowing bash init by caching plugins path slowly 5bff12354 replace dockerfile/dockerignore with patternmatcher/ignorefile 55ff9e609 vendor: github.com/moby/patternmatcher v0.6.0 e050312e6 update flag-description for --cgroup-parent d2047b954 cli/registry/client: set actions when authn with token 1c2cc4bbe info: add CDI spec directories to output bb57783ab cmd/docker: areFlagsSupported: don't Ping if not needed 6e2e92d77 Update docs/command output for volume pruning 4fc3f0e6f search: deprecate "is-automated" filter and "IsAutomated" field 299925f4c docs: document special host-gateway value for add-host 211220cbb cli/command: ResolveAuthConfig, GetDefaultAuthConfig: take ConfigFile as arg 57f0e46de cli/command/registry: cleanup login tests 84c956a17 cli/command/registry: cleanup search tests 3d0b14c3e vendor: github.com/docker/docker 4b19b2f4babd (25.0-dev) f38870e68 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230713153928-bc71908479e5 a53b03520 vendor: github.com/opencontainers/image-spec v1.1.0-rc4 8d51f36ca login: Add message about using PATs 6517db939 update to go1.20.7 373fa57ed vendor: github.com/containerd/containerd v1.6.22 0b535c791 vendor: gotest.tools/v3 v3.5.0 7a89e897e cli/command/container: waitExitOrRemoved: take APIClient as argument ce038e77b vendor: github.com/prometheus/common v0.42.0 bffe277c9 vendor: github.com/prometheus/procfs v0.9.0 92906a993 vendor: github.com/Microsoft/go-winio v0.6.1 aacdca0fe vendor: google.golang.org/protobuf v1.30.0 3cf34c6d9 vendor: google.golang.org/grpc v1.53.0 5b138189b vendor: github.com/cespare/xxhash/v2 v2.2.0 c1d065702 vendor: github.com/golang/protobuf v1.5.3 0b7c72c3b cli/command/container: RunStart: inline variable ad43df5e8 configfile: Initialize nil AuthConfigs b52fd79f1 docs: add missing docs for "DOCKER_TLS" env-var 298bddcc2 cli/command/container: deprecate NewStartOptions 00870d68f Dockerfile: update buildx to v0.11.2 78e463392 vendor: github.com/docker/docker-credential-helpers v0.8.0 ff9f1be19 Dockerfile: update buildx to v0.11.1 680fafdc9 update go to go1.20.6 223bf80d4 cli/context/docker: Endpoint.ClientOpts, withHTTPClient: inline variables 3469beb80 replace uses of deprecated api/types that moved to api/types/system 1f87420b5 vendor: github.com/docker/docker dab9ffb252186f4c47416addb136d579f9314c6a (25.0-dev) 4d03b935c vendor: github.com/moby/swarmkit/v2 v2.0.0-20230707182847-6f78b8199b05 fe7afb700 cli/container: Don't ignore error when parsing volume spec 323ca1d56 Bump container-device-interface dependency to v0.6.0 fca67dd81 Dockerfile: update to xx 1.2.1 de9f1f5b9 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230627115642-ad0f3ae162fa 125eeb7ab Add docs for health-start-interval 986879c07 Add flags to container/service for health start interval 9bfaa6ff7 revendor docker/docker from master dbd9d5d74 Update vendoring for CDI parser dad225d1e Support CDI devices in --device flag d5f564ada commandconn: return original error while closing 92d7a234d docker info: fix condition for printing debug information 88f44ec15 cli: SetupRootCommand: remove redundant flags return 3cad05fbf cli: move "config" flag to cli/flags/ClientOptions.InstallFlags() 1c1329fc7 cli/flags: add EnvEnableTLS const for "DOCKER_TLS" 0b3cadb05 cli/config: add EnvOverrideConfigDir const 13e842a11 cli/config: add synchronisation for configDir (Dir, SetDir) 9f4af6cb7 vendor: docker/docker 7f8b1cd7f928dee54174d51dc9da17f443c31480 (v25.0-dev) b32264a1a rename and update mergo module 5936fd2a8 docs: fix static ip example, network needs a subnet b85d6a8f9 docs: fix broken link 79ff64f06 cli/command/context: don't use pkg/homedir in test 6c7d17fa0 docs: update the runtime configuration section bf5d1ce97 Dockerfile: update buildx to v0.11.0 2133d0446 cli/command/context: remove deprecated k8s / orchestrator option-stubs 2d06cfcde cli/command: newAPIClientFromEndpoint: use WithUserAgent 8181aa887 cli/command/context: don't pass CLI if we only need context-store 3b8d5da66 update go to go1.20.5 acb248f8d Dockerfile: update ALPINE_VERSION to 3.17 9c2694d2b Dockerfile: update gotestsum to v1.10.0 c2535aa46 build: error if Dockerfile name is passed with Dockerfile from stdin 77dd05caa cli/command/image: remove errStdinConflict d68b36153 cli/compose/convert: convertEnvironment: sort results f4bde6869 replace some basic uses of fmt.Sprintf() 6a50c4f70 cli-plugins: remove deprecated Metadata.Experimental 58ec4161b vendor: github.com/moby/swarmkit/v2 v2.0.0-20230607145746-36334ed18760 bf492bffd vendor: docker/docker ed798d651a50cbd0af4dca127c4bfa243dda9cf7 (v25.0.0-dev) 54c80d49d vendor: github.com/opencontainers/image-spec v1.1.0-rc3 9ad605acc vendor: github.com/sirupsen/logrus v1.9.3 e15ae9e2e vendor: golang.org/x/net v0.10.0 3b62102ea vendor: golang.org/x/term v0.8.0 db7886eef vendor: golang.org/x/text v0.9.0 45fd37aaa vendor: golang.org/x/sys v0.8.0 a5ebe2282 commandconn: don't return error if command closed successfully 2331e4d52 cli/command/container: don't mutate ConfigFile.DetachKeys 23e26f40f cli/command/container: createContainer(): return container-ID c2c6fbe23 cli/command/container: TestCreateContainerImagePullPolicy: use sub-tests 0c5adb2e9 cli/command/container: attach: rename var that collided with import 47951ff44 docs: add "--detach-keys" example to docker run reference c17b0df2a docs: move "--detach-keys" example to examples section e4ceed468 docs: added example for specifying socket path with -H 5251d3748 cli/command: add EnvOverrideContext const for "DOCKER_CONTEXT" 6458dcbe5 Dockerfile.vendor: update GOPROXY to use default with fallback 0692d762a cli/command: fix GoDoc referencing wrong const 982857531 docs: rephrase section on credential stores for docker login 5d6612798 docs: remove devicemapper 4cf04988a remove uses of golang.org/x/sys/execabs db5e1fa54 vendor: update docker/docker to latest v25.0.0-dev 2713d0bcd docs: fix example for proxies in daemon.json b22290052 docs: remove AuFS from glossary e4211c91e docs: remove Docker Toolbox from glossary c246ea851 docs: remove boot2docker and docker-machine from glossary 4c11f73dc man: remove devicemapper from examples c61b56518 docs/deprecated: remove "disabled by default" for AuFS, overlay 9f537a756 docs: remove aufs and legacy overlay 73fbcdea0 contrib/completion: remove aufs, legacy overlay 1ec68fabe cli/command/system: remove aufs from fixtures 6460eea54 docs/deprecated: remove .patch release from deprecation status 035e26fb0 docs: update link location for the overlay driver 988e37956 Correct "ps --no-trunc" example output 2fc30fd45 replace uses of client.IsErrNotFound for errdefs.IsNotFound 537b88dab cli/command: don't use legacy "notfound" error-type in tests 353e0a942 vendor: github.com/docker/distribution v2.8.2 379122b03 cli/config: remove warning for deprecated ~/.dockercfg file 9b791b4fe cli/config: Load: remove outdated FIXME ff7111ae2 cli/command: remove deprecated EncodeAuthToBase64 d3ac80127 cli/command/stack: remove deprecated RunDeploy, RunPS, RunRemove, GetServices 72e3813ab cli-plugins/manager: fix deprecation comment of Metadata.Experimental 4119d268e Update tag docs to clarify name 28bc90f3b vendor: update docker/docker to v25.0.0-dev, API v1.44 60b4cdf04 Update version to v25.0.0-dev 759fa585c docs: update description for docker -H flag 1d8e2b652 vendor: github.com/docker/docker v24.0.0-rc.2 ce11b28d8 cli/config/credentials: skip unneeded exec.LookPath() 2ae223038 remove pre-go1.17 build-tags 1073b0269 cli/context/docker: rename receiver for Endpoint 2b7bfb399 cli/command/image/build: GetContextFromReader: rename var that collided ab17029c6 cli/command/container: hijackedIOStreamer: explicitly ignore err f5e224e94 un-skip history test and fix golden mismatches Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-03-15 17:17:19 +00:00
Bruce Ashfield	bf3b7371a3	moby: update to v24.0.7-tip ... Bumping moby to version v24.0.7-9-gafcd2cde95, which comprises the following commits: d0b5a5a8a5 integration/TestLiveRestore: Wait for process to exit f0b5ca47fb liverestore: Don't remove `--rm` containers on restart bfbb1dd890 update containerd binary to v1.7.9 8a9a6702d0 update containerd binary to v1.7.8 56d9d85c99 Dockerfile: update github.com/tc-hib/go-winres v0.3.1 6d5c35c0ce update runc binary to v1.1.10 05d7386665 daemon: daemon.containerRestart: don't cancel restart on context cancel Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-01-04 02:52:53 +00:00
Chen Qi	0eef35edee	docker: remove unnecessary dependencies ... The build is not using the codes from these source packages. Remove the dependencies. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2023-12-04 20:37:15 +00:00
Bruce Ashfield	c43ce48045	moby: update to v24.0.7 ... Bumping moby to version v24.0.7, which comprises the following commits: 05d7386665 daemon: daemon.containerRestart: don't cancel restart on context cancel dd37b0b960 vendor: github.com/klauspost/compress v1.17.2 7058c0d24d vendor: github.com/klauspost/compress v1.16.5 57bd388582 daemon: overlay2: Write layer metadata atomically 05d95fd503 daemon: release sandbox even when NetworkDisabled 2783345d3a daemon/c8d: Use non cancellable context in defers a9e20aeaed daemon/containerd: rename some vars that collided with imports a8d0a58b24 daemon/containerd: newROLayerForImage: remove unused args c981f8aff7 daemon/containerd: log errors when releasing leases 73814c48df internal: Add compatcontext.WithoutCancel 535b70e90c Update check-config.sh dde5995051 vendor: golang.org/x/net v0.17.0 8864727bae vendor: golang.org/x/crypto v0.14.0 81d73e17f7 vendor: golang.org/x/text v0.13.0 d8c62df0b6 vendor: golang.org/x/sys v0.13.0 d7a1fcef8f vendor: golang.org/x/net v0.13.0, golang.org/x/crypto v0.11.0 a22da0d5c4 vendor: golang.org/x/text v0.11.0 85234039a6 vendor: golang.org/x/crypto v0.9.0 9702281ba0 vendor: golang.org/x/sys v0.10.0 01860dc813 vendor: golang.org/x/crypto v0.3.0 daf599ea0a replace dockerfile/dockerignore with patternmatcher/ignorefile 1dffa3a814 vendor: github.com/moby/patternmatcher v0.6.0 58c1c7b8dc Limit OOMScoreAdj when running in UserNS ("Rootful-in-Rootless") 19039eae0b profiles/apparmor: deny /sys/devices/virtual/powercap 164a1a0f14 oci/defaults: deny /sys/devices/virtual/powercap Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2023-11-24 21:04:15 +00:00
Bruce Ashfield	9e8a6af947	moby: update to v24.0.6-tip ... Bumping moby to version v24.0.6-36-gf9b8a35ac4, which comprises the following commits: 58c1c7b8dc Limit OOMScoreAdj when running in UserNS ("Rootful-in-Rootless") f87492689e update to go1.20.10 3715eaf078 update to go1.20.9 31f49bd685 Make one-shot stats faster 37796c7029 Revert "daemon/logger/etwlogs: rewrite to use go-winio/pkg/etw" 51dc5fb58f integration/internal/swarm: rename max/min as it collides with go1.21 builtin 4e11c149d1 pkg/tailfile: rename max/min as it collides with go1.21 builtin 0b97ecddb0 pkg/plugins: rename max/min as it collides with go1.21 builtin 710c748801 pkg/sysinfo: rename max/min as it collides with go1.21 builtin b340a777c0 pkg/archive: rename max/min as it collides with go1.21 builtin e996dffe56 daemon: rename max/min as it collides with go1.21 builtin 334719141c api/types/versions: rename max/min as it collides with go1.21 builtin 0702941de6 restartmanager: rename max/min as it collides with go1.21 builtin bed0c789dd daemon/cluster: format code with gofumpt 30fe6540a5 libcontainerd/windows: Don't reap on failure 1320e79bd8 libcontainer/windows: Remove unneeded var declaration a1ba69a82b libcontainer/windows: Fix process not being killed after stdio attach failure 1f3ea9841e update containerd binary to v1.7.6 58224457c3 ipam: Replace ChildSubnet with parent Subnet when its mask is bigger df983b7990 daemon: fix under what conditions container's mac-address is applied f014c349a0 update to go1.20.8 e2ab5f72eb 24.0: Update buildkit to fix source policy order 8216da20af more robust dockerd-rootless-setuptools.sh c35376c455 volume/local: Don't unmount, restore mounted status 5d4cc0b5b5 integration/liveRestore: Check volume content Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2023-11-06 16:21:12 +00:00
Bruce Ashfield	7ed351dbdc	docker: drop docker-ce recipe ... docker-ce is now the same as moby. We've had a warning for quite some time now, so it is time to remove the recipe. We don't RPROVIDE docker-ce in the docker-moby recipe as part of this removal, as all docker packages have been RPROVIDING "docker" regardless of the variant. images and packagelists should be using that provider, not docker-moby and docker-ce Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2023-09-15 17:30:40 +00:00
Bruce Ashfield	103695c7b9	docker-moby: update to 24.0.6 ... Bumping moby to version v24.0.6, which comprises the following commits: c35376c455 volume/local: Don't unmount, restore mounted status 5d4cc0b5b5 integration/liveRestore: Check volume content 1d983e2e8a update golangci-lint to v1.54.2 d2e9a19358 CONTRIBUTING.md: update links to golang docs and blog 73f6053bb3 api: swagger: update link to Go documentation de13951b9d docs/api: update links to Go documentation 377af4c9b4 Dockerfile: Windows: update Golang download domains to cut down redirects 088cec8f0f hack: update link to GOPATH documentation ed2f5d1d85 c8d/builder: Don't drop fields from created image 1d10e8633d daemon: Handle NotFound when deleting container lease 63422515ba c8d/run: Allow running container without image 49671250f6 c8d/commit: Don't produce an empty layer b83f5a89f4 Don't return an error if the lease is not found 4ac2355d62 hack: use long SHA for DOCKER_GITCOMMIT ac2a80fcc3 ci(bin-image): clean up metadata 5eef5a7f59 ci(bin-image): clean up env var handling aaf84dd4cf remove Dockerfile.e2e a99e62fa3d distribution: show image schema deprecation on all registries e239799583 distribution: update warning for deprecated image formats bb22b8a418 ci(bin-image): check repo origin fb6784bdf0 gha: set 10-minute timeout on "report" actions 74bf46aea6 c8d/diff: Reuse mount, mount parent as read-only b76a0c7d00 c8d/export: Use ref counted mounter 54953f2f5a integration: Add test for not breaking overlayfs 3897724f4a volume/local: Fix debug log typo 0c131f58ba ci(bin-image): populate DOCKER_GITCOMMIT, take 2 448ae33f87 ci(bin-image): populate DOCKER_GITCOMMIT 3ce0dc7e35 bakefile: Remove default value of DOCKER_GITCOMMIT 600aa7b7a5 c8d/inspect: Ignore manifest with missing config 5d2c383d72 remove s390x and ppc64ls pipelines 15bd07b4fd update runc binary to v1.1.9 cc39fb9f6b Integration test for capabilities bf2b8a05a0 Do not drop effective&permitted set e67f9dadc6 hack/make/.binary: use with-go-mod.sh 314b84b023 hack: enable Go modules when building dockerd and docker-proxy 72947f5022 hack: use Git-free ROOTDIR convention 7e7bc0f1bc vendor: github.com/containerd/containerd v1.6.22 5f0df8c534 vendor github.com/containerd/ttrpc v1.1.2 25b709df48 windows: fix --register-service when executed from within binary directory b7d1e98ae7 libnet/d/bridge: Allow IPv6 ICC from any IP address 749e687e1b integration/windows: Unskip some kill tests 128838227e hack/test: Don't fail-fast before integration-cli b7c5385b81 update to go1.20.7 4cd50eb1ed TestDaemonProxy: use new scanners to check logs a49bca97df Fix daemon proxy test for "reload sanitized" d6536d44e9 TestDaemonProxy: check proxy settings early a6f8e97342 Improve test daemon logging Bumping docker-cli to version v24.0.6, which comprises the following commits: fab55e13c cli/command/system: fix "docker events" not supporting --format=json d3485b9e9 cli/registry: client.iterateEndpoints: remove check for APIVersion1 613380299 cli/registry: fix client.pullManifestList not de-referencing manifest b83959e00 force TestNewHistoryCommandSuccess to use UTC timezone 28a08a22b un-skip history test and fix golden mismatches 8e0393932 update cli-docs-tool to v0.6.0 efd052eb8 docs/reference: run.md: remove stray whitespace d9770a962 adding -c option for docker run/build in manpages 6efe73abe cli/command/manifest: update link to Go documentation d97753101 man: update links to Go documentation e9f843bf0 docs/reference: update links to Go documentation cfbaee468 CONTRIBUTING.md: update links daeee4697 update flag-description for --cgroup-parent 08ad72160 Update docs/command output for volume pruning 3c4fe7b3e docs: add missing docs for "DOCKER_TLS" env-var dc45bcc99 Stop slowing bash init by caching plugins path slowly 710dd00e9 replace dockerfile/dockerignore with patternmatcher/ignorefile bf632329d vendor: github.com/moby/patternmatcher v0.6.0 3c6c0bce1 cli/registry/client: set actions when authn with token 65655cc26 cmd/docker: areFlagsSupported: don't Ping if not needed 11606268f login: Add message about using PATs a8987063b docs: document special host-gateway value for add-host c0e376854 update to go1.20.7 We refresh one patch to adapt to the new build script structure. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2023-09-15 17:30:40 +00:00
Bruce Ashfield	23373571e7	moby: update to v24.0.5 ... Bumping moby to version v24.0.5-20-g00e46f85f6, which comprises the following commits: b7c5385b81 update to go1.20.7 6be708aa7d vendor: gotest.tools/v3 v3.5.0 b6568d2dd5 api/types/filters: fix errors not being matched by errors.Is() 02241b05fc update containerd binary to v1.7.3 3a6899c6fd update containerd binary to v1.7.2 7927cae910 c8d/container: Follow snapshot parents for size calculation 45ba926c6d daemon/list: Drop unused arg from containerReducer 6c4121a943 daemon/list: Refactor refreshImage fcb68e55fa daemon/list: Replace ErrImageDoesNotExist check 3029f554cc c8d/readConfig: Translate c8d NotFound to errdefs 35a8b00b18 hack/integration: Add TEST_INTEGRATION_FAIL_FAST fed26d5b3c vendor: github.com/moby/buildkit v0.11.7-dev eede7f09c7 Remove Upstart scripts 907f838603 Remove Upstart and cgroups bits from Debian sysvinit script f022632503 Dockerfile: update runc binary to v1.1.8 98a6422cbc c8d/inspect: Include platform Variant aab94fb340 Dockerfile: update buildx to v0.11.2 1be48ec553 c8d: Make sure the content isn't removed while we export ff0144de3b ci(buildkit): remove early-return from buildkit-ref a936ae7e98 ci(buildkit): remove misleading code from buildkit-ref 4c29864b02 hack/with-go-mod.sh: warn on stderr 3c5c192baf c8d/resolveImage: Fix Digested and Named reference 572de8764e c8d/inspect: Don't duplicate digested ref 5dded3340c ci: extract buildkit version correctly with replace-d modules bd1ae65aab quota: remove gotest.tools from testhelpers 544032f7a4 hack/d/cli.sh: properly handle errors in curl 0df2e1bdd8 Dockerfile: improve CLI/rootlesskit caching 05f82fdd00 Dockerfile(.simple): align APT_MIRROR support 151686a5c8 Makefile: pass through APT_MIRROR 31567e0973 Dockerfile: use default apt mirrors d94f2dcab2 client: Client.postHijacked: use Client.buildRequest bff68bf2cc client: Client.setupHijackConn: explicitly ignore errors 8bdf6d1baf ci(bin-image): add SHA-based tags 26a457e7a3 ci(bin-image): fix meta step b9904ba319 ci(bin-image): fix typo e7c333cb6e ci(bin-image): don't set tags when pushing by digest fcb87e8ae1 ci: push bin image to Docker Hub 68c0cec772 Disable tls when launching dockerd through hack/make.sh 738d8417e0 libnet: Return a 403 when overlay network isn't allowed a5c0fda157 libnet: Return proper error when overlay network can't be created deea880581 pkg/jsonmessage: use string-literals for easier grep'ing 962a4f434f pkg/ioutils: use string-literals for easier grep'ing cea5829402 pkg/idtools: use string-literals for easier grep'ing 69d77bc150 opts: use string-literals for easier grep'ing ff667ed932 integration: use string-literals for easier grep'ing efe9e90ef5 libnetwork: use string-literals for easier grep'ing 2d2df4376b daemon/cluster: use string-literals for easier grep'ing ae8e3294dd client: use string-literals for easier grep'ing 892857179a cli/debug: use string-literals for easier grep'ing 147b87a03e daemon: use string-literals for easier grep'ing a3f1f4eeb0 integration-cli: use string-literals for easier grep'ing 5bba60b1bb builder/builder-next: use string-literals for easier grep'ing 632fc235d6 builder/dockerfile: use string-literals for easier grep'ing 75a90f85ad gha: add note about buildkit using older go version fa909dfaf4 update go to go1.20.6 bdaadec788 testutil: use dummyhost for non-tcp connections 547ea18fbb pkg/plugins: use a dummy hostname for local connections 597a5f9794 client: define a "dummy" hostname to use for local connections fee4db80a0 client: TestSetHostHeader: don't use un-keyed literals 959889efd9 integration: Don't env cleanup before parallel subtests 6c5144d3e5 Add t.Helper() to the cli test helper functions 9ff2c3918c ci(buildkit): match moby go version for buildkit tests a4b1a5aef4 vendor: github.com/moby/buildkit@v0.11 0a0807e 6c7f6c2d47 daemon/containerd: fix assignment to entry in nil map during commit 0e88c57c47 integration: disable iptables in parallel tests a3049653c1 pkg/plugins: make unit test less time sensitive d3893b58ff daemon: daemon.prepareMountPoints(): fix panic if mount is not a volume 5892aae60f docs: api v1.28 - v1.40: add missing "force" query arg on plugin disable 7adb590e16 docs: api v1.41: add missing "force" query arg on plugin disable b5aacf8161 docs: api v1.42: add missing "force" query arg on plugin disable b732cfd392 docs: api v1.43: add missing "force" query arg on plugin disable 50fb65f0f5 docs: api: amend changelog for API 1.28 for "force" option 32bcbdfe65 api: swagger: add missing "force" query arg on plugin disable f66ef31605 docs: api v1.41: remove outdated information from ServerVersion acb95e4544 docs: api v1.42: remove outdated information from ServerVersion 335ed29345 docs: api v1.43: remove outdated information from ServerVersion 0ef846ce2e api: remove outdated information from ServerVersion af25852baa docs: api v1.42: remove "ClusterStore" and "ClusterAdvertise" fields 7a9c831e6a docs: api v1.43: remove "ClusterStore" and "ClusterAdvertise" fields 649bb2b9b8 api: remove "ClusterStore" and "ClusterAdvertise" fields 457399013b vendor: github.com/containerd/cgroups/v3 v3.0.2 016ad9b3e8 c8d/prune: Handle containers started from image id 87778af711 c8d/prune: Exclude dangling tag of the images used by containers 8bf037b246 c8d/softDelete: Deep copy Labels 8afe75ffa9 c8d/softDelete: Extract ensureDanglingImage e2bade43e7 testutil/environment: Add GetTestDanglingImageId e0091d6616 c8d: ImageService.softImageDelete: rename var that collided with import 42f3f7ed86 c8d: ImageService.softImageDelete: use OCI and containerd constants aace62f6d3 pkg/fileutils: GetTotalUsedFds(): use fast-path for Kernel 6.2 and up bb50485dfd pkg/fileutils: GetTotalUsedFds: reduce allocations 5dcea89ce1 pkg/fileutils: add BenchmarkGetTotalUsedFds 01eb4835c9 pkg/fileutils: GetTotalUsedFds(): don't pretend to support FreeBSD cd44aba8db [24.0] pkg/fileutils: switch to use containerd log pkg ee29fd944b gha: don't fail if no daemon.json is present b8ee9a7829 c8d/images: handle images without manifests for default platform d9e097e328 vendor: github.com/opencontainers/image-spec v1.1.0-rc3 806849eb62 seccomp: add name_to_handle_at to allowlist c24c37bd8a Restore active mount counts on live-restore c306276ab1 remove name_to_handle_at(2) from filtered syscalls d5e31e03b6 gha: Setup Runner: add missing sudo 85ad299668 Dockerfile: make cli stages more resilient against unclean termination e84365f967 Skip cache lookup for "FROM scratch" in containerd 96534f015d integration-cli: don't use pkg/homedir in test 6424ae830b Dockerfile: update buildx to v0.11.0 6055b07292 Fix missing Topology in NodeCSIInfo 2f379ecfd6 daemon: fix restoring container with missing task 136893e33b daemon: fix double-unlock in health check probe 290fc0440c daemon: fix panic on failed exec start 0556ba23a4 daemon: handleContainerExit(): use logrus.WithFields 35a29c7328 builder: pass host-gateway IP as worker label 210c4d6f4b daemon: ensure OCI options play nicely together f50cb0c7bd daemon: stop setting container resources to zero 0a6a5a9140 daemon: modernize oci_linux_test.go c92fd5220a c8d: mark stargz as requiring reference-counted mounts 5e48bbd14c contrib/busybox: Update to FRP-5007-g82accfc19 6776279896 daemon: registerName(): don't reserve name twice 7db3243e34 don't cancel container stop when cancelling context aec7a80c6f c8d: Use reference counting while mounting a snapshot 5652c59647 testing: temporarily pin docker-py tests to use "bullseye" aa47b29dbc vendor: github.com/moby/swarmkit/v2 v2.0.0-20230531205928-01bb7a41396b Bumping libnetwork to version v0.7.0-dev.3-1874-g67e0588f, which comprises the following commits: 11eaf1f0 sync MAINTAINERS file with new moby maintainers dbbf124d Clean up inDelete network atomically Bumping docker-cli to version v24.0.5-6-gb74562d91, which comprises the following commits: c0e376854 update to go1.20.7 1481c8ce9 vendor: gotest.tools/v3 v3.5.0 e97c76557 vendor: github.com/docker/docker v24.0.5 1ee40e2c7 configfile: Initialize nil AuthConfigs 3bd6d6902 Dockerfile: update buildx to v0.11.2 05bf7fbcc vendor: github.com/docker/docker v24.0.5-0.20230718221249-d4a26c153000 8b5023dd2 vendor: github.com/docker/docker v24.0.5-0.20230717072055-8443a06149b5 2a6348d1b Dockerfile: update buildx to v0.11.1 f4782b325 update go to go1.20.6 7d06f6b2f vendor: github.com/docker/docker v24.0.5-0.20230714235725-36e9e796c6fc 1447974b8 docs: rephrase section on credential stores for docker login 46293e97f Dockerfile: update to xx 1.2.1 bfe2ff820 cli/container: Don't ignore error when parsing volume spec b40742962 vendor: github.com/docker/docker v24.0.4 79c42c0b9 vendor: golang.org/x/net v0.10.0 a96d0a526 vendor: golang.org/x/text v0.9.0 5c5c50d71 vendor: golang.org/x/term v0.8.0 4bf11b756 vendor: golang.org/x/sys v0.8.0 224c7dbec vendor: github.com/sirupsen/logrus v1.9.3 e25d5c64c vendor: github.com/opencontainers/image-spec v1.1.0-rc3 419e94df4 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230531205928-01bb7a41396b 2d5f041bd commandconn: return original error while closing 520e3600e commandconn: don't return error if command closed successfully cd68c8f00 docker info: fix condition for printing debug information a78fd6ca6 docs: update link location for the overlay driver 9cd335d44 docs: fix static ip example, network needs a subnet d61e4fe87 docs: fix broken link 8e3a2942a cli/command/context: don't use pkg/homedir in test c3ef1cead docs: update the runtime configuration section 44eebb8bc Dockerfile: update buildx to v0.11.0 7ecfa2e7f Dockerfile: update gotestsum to v1.10.0 f11f30909 update go to go1.20.5 3a6c11773 Dockerfile: update ALPINE_VERSION to 3.17 11af1189d docs: add "--detach-keys" example to docker run reference f118c05e8 docs: move "--detach-keys" example to examples section Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2023-08-15 18:41:49 +00:00
Bruce Ashfield	49fdcebf5b	moby: update to v24.0.2 ... Bumping moby to version v24.0.2-56-gd7aa1e14e5, which comprises the following commits: 5652c59647 testing: temporarily pin docker-py tests to use "bullseye" 789a8755b8 run `getent` with a noop stdin f7298b326e vendor: github.com/sirupsen/logrus v1.9.3 1c18ad6ca6 vendor: github.com/rootless-containers/rootlesskit v1.1.1 ae4a10df67 update RootlessKit to v1.1.1 24c882c3e0 update go to go1.20.5 b3133d7471 contrib/check-config: move xt_bpf check to overlay section 8c552012ae contrib/check-config: check for xt_bpf 61d547fd06 Dockerfile: Move dockercli to base-dev e5fbc3f75a hack/cli.sh: Quiet origin cleanup 1a078977e1 Dockerfile/shell: Install buildx cli plugin c4198e6053 Dockerfile: Use separate cli for shell and integration-cli 647ba03224 builder-next: Set moby exporter as default 961fe27408 c8d/handlers: Handle error in walkPresentChildren 087cf6f238 c8d/load: Don't unpack pseudo images 0b9d68f59d c8d/load: Use walkImageManifests cbf0779bfc c8d/list: Use walkImageManifests 0139309fef c8d: Add walkImageManifests and ImageManifest wrapper e1c7956764 Dockerfile: use COPY --link for source code as well 75afe3201b containerd: add c8d version and storage-driver to User-Agent 8018ee4689 dockerversion: DockerUserAgent(): allow custom versions to be passed ed376a603f dockerversion: remove insertUpstreamUserAgent() 1d45ea52f4 dockerversion: simplify escapeStr() a27b0381a6 dockerversion: add a basic unit-test 1fc19772e0 Make sure the image is unpacked for the current snapshotter 4217d9ea0a Dockerfile: use COPY --link to copy artifacts from build-stages 4c6b8e737f added alias validation e370f224ae fixing consistent aliases for OCI spec imports ac1a867282 vendor: github.com/mistifyio/go-zfs/v3 v3.0.1 2949fee1d3 containerd: set user-agent when pushing/pulling images f9c68e5fbc libn: fix resolver restore w/ chatty 'iptables -C' 3452a76589 libnetwork: fix sandbox restore fec801a103 libnetwork: log why osl sandbox restore failed d9e39914a7 Fix npe in exec resize when exec errored 042f0799db libn/d/overlay: support encryption on any port ec8ec9056c builder/remotecontext: deprecate CachableSource, NewCachableSource 7a4ea19803 libcontainerd: work around exec start bug in c8d ae6e9333c0 vendor: github.com/moby/buildkit v0.11.7-0.20230525183624-798ad6b0ce9f 0d9acd24fe c8d/inspect: Fill `Created` time if available 04eccf8165 vendor: github.com/containerd/go-runc v1.1.0 d64bab35ee daemon: lock in snapshotter setting at daemon init 329d671aef Dockerfile: temporarily skip CRIU stage 4cc2081119 integration: Add TestImageInspectEmptyTagsAndDigests 27df42255c hack: Rename .ensure-emptyfs to .build-empty-images 9ee7d30aef hack/ensure-emptyfs: Create dangling image 8a4b7c5af8 Add testenv.UsingSnapshotter utility a753ca64e2 hack/make/.binary: don't use "netgo" when building Windows binaries 5276c2b6e0 c8d/pull: Use same progress action as distribution baf1fd1c3f libnetwork: check for netns leaks from prior tests 992dc33fc5 libnetwork/osl: restore the right thread's netns ef1545ed4a libnetwork: leave global logger alone in tests 876f5eda51 libnetwork: make resolver tests less confusing 47a3dad256 c8d/list: Show layerless images 0869b089e4 libnetwork: just forward the external DNS response 3467ba6451 reorder load funcs to match newServiceConfig()'s order f9b886c01b add mirror to daemon reload test for insecure registries 07140c0eca build: use daemon id as worker id for the graph driver controller d5ad186d49 ci(bin-image): distribute build across runners 4d924c35f7 api/server: allow empty body for POST /commit again 68b7ba0d03 api/inspect: Fix nil RepoTags and RepoDigests 5ea7b8d091 fix: `docker pull` with platform checks wrong image tag Bumping docker-cli to version v24.0.2-9-g0823df7da, which comprises the following commits: 11af1189d docs: add "--detach-keys" example to docker run reference f118c05e8 docs: move "--detach-keys" example to examples section f66f7ed7f cli/command: fix GoDoc referencing wrong const 2814c01b0 Dockerfile.vendor: update GOPROXY to use default with fallback 32f66cbe5 vendor: github.com/docker/docker v24.0.2 dc4707edb [24.0] vendor: github.com/docker/docker v24.0.1 298e67926 docs: fix example for proxies in daemon.json 9175ffa9b man: remove devicemapper from examples beb0330a7 Correct "ps --no-trunc" example output 405be9063 docs: remove AuFS from glossary 7a269817b docs: remove Docker Toolbox from glossary 41ef7c45c docs: remove boot2docker and docker-machine from glossary c184a61da docs/deprecated: remove "disabled by default" for AuFS, overlay e7a60449f docs: remove aufs and legacy overlay 77541afea contrib/completion: remove aufs, legacy overlay e67a7acd0 docs/deprecated: remove .patch release from deprecation status fb6ae356c vendor: github.com/docker/docker v24.0.0-rc.3 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2023-06-21 01:56:06 +00:00
Bruce Ashfield	28eda60a52	moby: update to v24.0.0 ... Bumping moby to version v24.0.0-2-g821e4ec4c7, which comprises the following commits: 5ea7b8d091 fix: `docker pull` with platform checks wrong image tag 907f037141 update containerd binary to v1.7.1 8bbfa32741 c8d: The authorizer needs to be set even if AuthConfig is empty 8587a1c617 c8d/builder: implement cache 9717369913 c8d: implement classic builder 233c49438b c8d: Don't create authorizer for empty AuthConfig 2b7424512a c8d/authorizer: Default to docker.io f77a3274b4 [chore] clean up reexec.Init() calls c76bb6a3a3 ci: bin-image workflow 71846e82c1 bin-image bake target ecbc27aa22 vendor: github.com/docker/distribution v2.8.2 1235338836 c8d: implement missing image delete logic 763d2b7996 c8d: fix image history for dangling images 86770904be c8d: fix missing image history bfffb0974e pkg/aaparser: deprecate GetVersion, as it's no longer used e28bc0d271 profiles/apparmor: remove use of aaparser.GetVersion() d169a57306 contrib/apparmor: remove remaining version-conditionals (< 2.9) from template 63640838ba daemon: handleContainerExit(): add execDuration in attributes 012dd239ce docs/api: version-history: also mention /system/df for VirtualSize a87313497b vendor: github.com/containerd/containerd v1.6.21 5f36d4af15 api: synchronize api/swagger.yaml with docs/api/v1.43.yaml 2b6761fd3e d/graphdriver/copy: support src fs w/o xattr support 3e6092f5b2 pkg/jsonmessage: touch-up GoDoc 05cb0e5a7d pkg/jsonmessage: JSONProgress.String(), JSONProgress.now(): simplify 4cadee65b3 pkg/jsonmessage: JSONMessage.Display(): remove special case for 401 errors 66cf0e3f55 client: slightly improve ContainerDiff tests dbb48e4b29 api/types/container: create type for changes endpoint b7e8868235 update go to go1.20.4 bf3c156654 vendor: github.com/moby/term v0.5.0 c1d420ec60 vendor: github.com/moby/term v0.0.0-20221205130635-1aeaba878587 0df38c3e2b vendor: github.com/opencontainers/runtime-spec v1.1.0-rc.2 167fa429f0 daemon: Daemon.CreateImageFromContainer(): remove intermediate vars bf5ae17c16 api/server/router/container: containerRouter.postCommit: inline struct 9613da63dc c8d: commit: generateCommitImageConfig: don't merge image config e510abbc8c daemon/containerd: containerConfigToOciImageConfig: add ArgsEscaped 3eebf4d162 container: split security options to a SecurityOptions struct 8142051a3b libnetwork/osl: unify stubs for NeighOption 0ea41eaa51 libnetwork/osl: unify stubs for IfaceOption 021e89d702 libnetwork/osl: rename var that collided with import 3a4158e4fa libnetwork: add missing stub for getInitializers() 939a4eb5c9 libnetwork: fix stubs 17feabcba0 libnetwork: overlayutils: remove redundant init() 44a6587608 c8d: delete dangling image on pull 1e9ebfb00c libnetwork: inline sendKey() into SetExternalKey() 9d8fcb3296 libnetwork: setKey(): remove intermediate buffer a813d7e961 libnetwork: don't register "libnetwork-setkey" re-exec on non-unix 881fff1a2f libnetwork: processSetKeyReexec: don't use logrus.Fatal() e974599593 libnetwork: processSetKeyReexec() remove defer() 1845a915b0 c8d/import: Don't gc unnamed images 0ffd3225d2 vendor: github.com/opencontainers/runc v1.1.7 2d0e899819 update runc binary to v1.1.7 56fbbde2ed libnetwork/resolvconf: fix some minor (linting) issues 820975595c libnetwork/resolvconf: improve tests for Build 93c7b25ccd libnetwork/resolvconf: refactor tests for readability 43378636d0 libnetwork/resolvconf: allow tests to be run on unix 73c637ad60 libnetwork/resolvconf: use t.TempDir(), change t.Fatal to t.Error fc1e698914 libnetwork/resolvconf: fix TestGet() testing wrong path 55d18b7db9 libnetwork/resolvconf: use []byte for hash instead of string 630fc3839e libnetwork/resolvconf: simplify hashData() and improve performance 12bf850c84 cmd/dockerd: gracefully shut down the API server 520aa08d42 c8d/prune: Logging fixes 52af6d957e c8d/prune: Remove gc.ref labels from configs of deleted images 993ca8c6de cmd/dockerd/trap: log to logrus directly 0f3c5d3893 cmd/dockerd/trap: don't force exit after cleanup a1e1038736 Use the image service instead of the reference store for tagging 9fe5ac6614 c8d: Handle nil container.ImageManifest 16d5d4b6e1 cmd/dockerd: ignore SIGPIPE using signal.Ignore 2d31697d82 daemon: set docker0 subpool as the IPAM pool d8b784a15e daemon/cluster: inline filters da8e07edb5 volume/service: inline filters in tests c0c4a16053 testutil: inline filters in tests b6154189e8 integration: inline filters in tests 1bc0d7080a integration-cli: inline filters in tests 5bc0832766 daemon: inline filters in tests 081b5e3d4e client: inline filters in tests aca8dde362 integration/TestKillContainer: Bigger timeout on Windows 391f9635cc c8d/list: Initialize capacity instead of length 4ec063fade pkg/sysinfo: omit Getpid call in numCPU f66684fdeb fix some comments c399963243 libn/d/overlay: make VNI matcher IPv6-compatible 7d9bb170b7 libn/d/overlay: test the VNI BPF matcher on IPv4 4876c09b2a build(deps): bump github.com/creack/pty from v1.1.11 to v1.1.18 8df3db4b97 c8d: add support for removing images by shortID 117ceac82b daemon/prune: Use errdefs for invalid "until" value e502c69140 builder: use typed error for invalid "until" value 9791756284 overlay2: remove deprecated overlay2.override_kernel_check option 54a125f677 builder-next/prune: Handle "until" filter timestamps 38e791fb2f vendor: update buildkit to v0.11.6 005150ed69 check-config.sh: do not check for RT_GROUP_SCHED f72548956f remove deprecated legacy "overlay" storage-driver 4ecb587eff daemon: skip TestGetInspectData when using containerd snapshotters a82c434447 daemon: setupFakeDaemon(): add fakeImageService 1261fe69a3 API: deprecate VirtualSize field for /images/json and /images/{id}/json eb7738221c Add no-new-privileges to SecurityOptions returned by /info e7980275c0 c8d: align "Size" and "VirtualSize" for images 1e1efe1f61 libnet/d/overlay: clean up iptables rules on network delete 9a9dfb1d0d api/server: getImagesJSON(): don't check version in a loop 3903f16cd6 daemon: remove deprecated AuFS storage driver 890959eea8 builder-next: fix buildkit version bc37e3f830 Fix returning errors from snapshotter.Prepare f846349824 c8d/list: Implement `until` filter d89590eab9 c8d: Implement prune e6ac640d2e vendor: github.com/opencontainers/runc v1.1.6 f531e3cf69 vendor: golang.org/x/net v0.8.0 3886faced8 vendor: golang.org/x/text v0.8.0 d0efca893b update runc binary to v1.1.6 7fe0f73838 Fix argument quoting bugs in dockerd-rootless.sh 9cb5da400c images/Children: Return error edf802956e c8d/list: Implement `label` and `label!` filter 03fc3aad12 daemon: touch-up flag description for --seccomp-profile 5a922dc162 daemon: deprecate --oom-score-adjust for the daemon f696a1b3b3 Fix error checking when pulling from an insecure registry c957ad0067 libnetwork: clean up inDelete network atomically e5dbd28afd Added timeout to validate job in github actions 106c694993 Dockerfile: update xx to 1.2.1 a5d46a15f5 split GetRepository from ImageService 893d28469f vendor: github.com/ishidawataru/sctp v0.0.0-20230406120618-7ff4192f6ff2 f66374f6a8 golangci-lint: enable importas linter to force consistent aliases 81e62af94a use consistent alias for containerd's errdefs package f691b13450 daemon: move code related to stats together 5c78cbd3be pkg/platform: deprecate OSType in favor or runtime.GOOS cf9a76fe8f pkg/platform: un-export consts that are only for internal use 790dd8cc92 pkg/platform: use const for OSType, improve GoDoc 87019144f6 pkg/platform: replace use of deprecated syscall.Syscall 7ca38d64d2 pkg/platform: move package doc to platform-agnostic file 9434919f76 pkg/platform: rename files for consistency be4abf9d6e Vendor containerd 1.6.x with the readonly mount fix 41a230758c c8d: Set the process user on exec 70229b55ec vendor: github.com/moby/swarmkit/v2 v2.0.0-20230406225228-75e92ce14ff7 3f09316e3b vendor: re-vendor to add missing file 8ed900263e libnetwork/overlay: remove host mode 1d46597c8b libnetwork/overlay: remove KVObject implementation f32f09e78f libnetwork/overlay: don't lock network when accessing subnet vni b67446a8fa libnetwork: remove local store from overlay driver 8aa1060c34 libnetwork/overlay: remove live-restore support e3708a89cc libnetwork/overlay: remove vni allocation e251837445 libnetwork/overlay: remove Serf-based clustering 644e3d4cdb libnetwork/netlabel: remove dead code f8b5fe5724 libnetwork/netutils: remove dead code c8d2c6ea77 libnetwork: remove unused props from windows overlay driver 0fa873c0fe libnetwork: remove global store from overlay driver 00037cd44b libnetwork: remove ovrouter cmd e0f36f9d8b ImageService: Pass ctx to Children bea751beb7 c8d: Implement Children by comparing diff ids ba47cdcc0b c8d/list: Implement `reference` filter 4aa2876c75 docker-rootless-setuptools.sh: improve readability of messages 4d04068184 libn/d/overlay: only program xt_bpf rules f6cc8e3512 update go to go1.20.3 465cbccdaf c8d: use the container's configured snapshotter where possible c8f8d11ac4 awslogs: fix non-blocking log drop bug 1b178dffa3 Send an event when an image is deleted 36d28b73fc Send an event when an image is tagged 750218c5e5 d/config: fix default-network-opts in daemon.json 36935bd869 libcontainerd: close stdin sync if possible 3beda17773 integration-cli: rename vars that collided with imports 92e38b6e27 c8d/list: Ignore attestation manifests 773a9d85a1 c8d: Send event when an image is exported 00545ef4d6 c8d: Send event when an image is imported e59f7fba6a pkg/fileutils: remove aliases for deprecated functions and types 6b9968e8b1 client: deprecate NewClient properly 027f70562e c8d/push: Rename jobs to avoid shadowing type e1dd9c0396 c8d/push: Ignore :port when comparing source repository 4a34c501c1 c8d/push: Parse source labels with multiple sources cb788bea9c c8d/push: Add distribution source labels only on success 013e44ec5d c8d/push: Log error if releasing the lease failed c9012c798e c8d/push: Sync mountableBlobs access f6b50d52d4 libnetwork/netutils: drop ElectInterfaceAddresses 61a0e79ad6 vendor: github.com/containerd/containerd v1.6.20 b8e963595e libnetwork: sbState: rename ExtDNS2 back to ExtDNS 0233029d5a vendor: opencontainers/image-spec v1.1.0-rc2.0.20221005185240-3a7f492d3f1b c733cf223d vendor: github.com/containerd/ttrpc v1.1.1 a0ef2ac59c c8d: push: addressing some nits a75354c045 c8d: Implement push e7393d0fc5 images/push: Accept reference 15b9176d53 Add the events services to the containerd image service 77be7b777c update runc binary to v1.1.5 a17029ba49 vendor: github.com/opencontainers/runc v1.1.5 24804e67f5 c8d/commit: Use manifest digest for dangling image 845b328734 Skip Buildkit digest tests 4c459ddabd c8d: add support for `docker diff` e85c69e1b7 Update `github.com/containerd/containerd` to the HEAD of `release/1.6` and vendor f09b1022aa c8d/inspect: Handle dangling images 9e3a6ccf69 libn/i/setmatrix: make generic and constructorless 713c9280ca Move buildkit client opts to new package 4f511bd06e Add akerouanton as curator bb2c5617d6 Add laurazard as curator 988d26afe4 vendor: github.com/moby/buildkit v0.11.5 6caaa8cadc Prefer loading `docker-init` from an appropriate "libexec" directory bae49ff278 libnet/d/windows: log EnableInternalDNS val after setting it 4f48a4ea2a Update delve version 0fa7a4e3b4 client: Add buildkit ClientOpts 965eda3b9a libnet/d/overlay: insert the input-drop rule 66dfc0169f dockerversion: DockerUserAgent(): use sync.Once to construct User-Agent 72dc7a0f7b vendor: github.com/moby/swarmkit/v2 v2.0.0-20230315203717-e28e8ba9bc83 c7ccc68b15 Silence GRPC logs unless our log level is debug be34e93f20 integration-cli: Enable TestExecStartFails on Windows cb76638699 registry/search: pass User-Agent through headers 88992de283 StartWithLogFile: Fix d.cmd race fed1c96e10 TestDaemonRestartKillContainers: Fix loop capture f5050d4ef2 ci: disable testing mergeop and diffop with the dockerd worker 0ac3bf837b builder-next: disable mergeop and diffop c14463d1e4 ci: enable BuildKit tests with containerd integration worker 105b9834fb libnet/d/overlay: add BPF-powered VNI matcher 44cf27b5fc libnet/d/overlay: extract VNI match rule builder 142f46cac1 libn/d/overlay: enforce encryption on sandbox init 0ac02ba342 vendor: github.com/opencontainers/runtime-spec v1.1.0-rc.1 ab131642a1 vendor: github.com/opencontainers/runc v1.1.4 b98c05dc50 vendor: github.com/klauspost/compress v1.16.3 664c0d3201 vendor: github.com/godbus/dbus/v5 v5.1.0 3e4ce10342 vendor: github.com/coreos/go-systemd/v22 v22.5.0 0a2e3f14e7 vendor: github.com/opencontainers/selinux v1.11.0 bc1dec71c5 vendor: github.com/imdario/mergo v0.3.13 9752e43644 vendor: golang.org/x/sys v0.6.0 d4fd582fb2 libnet/d/overlay: document some encryption code 58504620c5 api/types/container: IpcMode: use common function for container-mode 6f0e28d024 api/types/container: PidMode: fix validation for empty container name/ID 53c813961e api/types/container: fix .Container() returning a name, when it shouldn't c76331e13f api/types/container: put "valid" field as first check in tests 2d49080056 pkg/sysinfo: move MemInfo and ReadMemInfo to a separate package a050db4a6f libnetwork/d/overlay: handle peer ops directly 09d39c023c libnetwork/i/setmatrix: devirtualize 3b569cc686 daemon/graphdriver/windows: cleanup errors bbeaeee3c7 daemon/graphdriver/windows: remove some intermediate variables 9db5dc9a46 daemon/graphdriver/windows: use strings.EqualFold() d742188e3b daemon/graphdriver/windows: remove fileFlagSequentialScan const 3a8c97be45 daemon/graphdriver/windows: rename vars that collided with imports 605e8f53b1 daemon/graphdriver/windows: InitFilter() don't use idtools.MkdirAllAndChown() 34303ccd55 libnetwork/i/setmatrix: un-embed the mutex 127cd9def1 integration/plugin: fix duplicate import 2987393768 integration/volume: fix duplicate import 146df5fbd3 Fix pruning anon volume created from image config 058a31e479 volumes: fix error-handling when removing volumes with swarm enabled a2c29e9128 update containerd binary to v1.7.0 7531f05c7c integration/volumes: TestVolumesRemove: add coverage for force/no-force 7b3acdff5d registry: return concrete service type 3991faf464 Move filtered registry search out of image service 06619763a2 remove GetLayerByID from ImageService interface 02dec48bab update to go1.20.2 37a9d6aabe Fix listener parsering regression when no addr set 3bbffe96e1 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230309194213-a745a8755ce3 af677245fb c8d/builder: Store untagged images as dangling 8f716ca06a builder/overrides: Add consts for attribute key names e807ae4f2e vendor: github.com/containerd/cgroups/v3 v3.0.1 44d0522848 c8d/inspect: Add digested reference to details a8f5c524a0 libcontainerd: Upgrade to typeurl/v2 45ee4d7c78 c8d: Compute container's layer size 4026148ef1 Dockerfile: Update shfmt to 3.6.0 a0741cacef contrib/dockerize-disk.sh: Fix indentation 088aff1620 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230302163403-80a528a86877 f8b468fda2 builder-next: enable more cache backends bba77163ff c8d: Make build and buildx work b0b3c62a84 vendor: github.com/moby/buildkit v0.11.4 117cdb28ce regenerate AUTHORS 608a122aef integration: Extract StopContainerWindowsPollTimeout const 74dbb721aa TestLogs: Increase stop check poll timeout on Windows a34060cdb4 Resolve and store manifest when creating container 168ca2dcc8 Introduce support for docker commit 22f303e422 layer: NewStoreFromOptions(): include driver-name in error message f52e935f36 reference: add test-coverage for digested references f71439d527 reference: don't string-match errors in tests, and fix error format 669940065f reference: use t.TempDir() for tests 520dc12c0e reference: rename variables that collided with type / import c477cda59f c8d/list: Support dangling filter 3e4c4df664 builder/exporter: Remove commented unused const 324290a5eb vendor: buildkit v0.11.4-0.20230228113103-218e934edfba 6588b3eef0 builder: Remove buildkit's build information 4ea1c9f8e5 `docker image ls`: handle multi-platform images a9e7360775 daemon/config: remove AuthzMiddleware field 47e9caede7 libcontainerd/client: Rename `cp` to `checkpoint` 0c751f904f libcontainerd/client: Fix checkpoint not being set be39be87f6 api/server: delete Wait method 91c2b12205 Make default options for newly created networks configurable 19ad4ac03d registry: acquire mutex in IsInsecureRegistry ef6f5367dc vendor: github.com/containerd/containerd v1.6.19 5997ad8512 vendor: github.com/Microsoft/hcsshim v0.9.7 0a6a726d26 api/server: drop unused Config struct 248745004a api: Remove <none> in Repo(Tags|Digests) for >= 1.43 0ffaa6c785 daemon: add annotations to container HostConfig 3c59ef247f libnet/ipam: use netip types internally 01dbe23b6f libnet/ipam: simplify the data model 8273db28f3 libnet/ipam: inline parsePoolRequest function 9a8b45c133 libnet/ipam: drop vestiges of custom addrSpaces 18ac200efe libnet/ipam: get rid of superfluous closure 88f6b637a0 libnet/networkdb: fix nil-dereference panic in test f8791db4be c8d/list: Fix Repo(Digests|Tags) for untagged images cd779dae46 Upgrade to Go 1.20.1 d4e7a87b96 Upgrade to Go 1.20 3606d6a7cd Upgrade to golangci-lint v1.51.2 2f9e3cca3d api: Move Repo(Digests|Tags) <none> fallback from daemon 8657c87c8c c8d/tag: Don't create a separate error variable 9f6649b248 AUTHORS: regenerate 50d7164978 docs/api: add v1.43 OpenAPI definitions bb21e0f191 Close DecompressStream after layer is downloaded d6c4e17411 Upgrade containerd/fifo to v1.1.0 782a369f92 c8d/pull: Add CRI-compatible annotation of pulled content a770153af0 chore: use http constants to replace numbers 9104cd5441 vendor: github.com/moby/buildkit v0.11.3 b0eed5ade6 daemon: allow shimv2 runtimes to be configured 4a886a3e8f dependency: bump go.etcd.io/bbolt to v1.3.7 e40c4c997e update containerd binary to v1.7.0-beta.4 f8cfd3a61f libnetwork: devirtualize Resolver type faaa4fdf18 libnetwork: forward unknown PTR queries externally 8f5a9a741b libnetwork: fail loudly on resolver iptables setup 25b51cad3d libnetwork: replace ad-hoc semaphore implementation a1f7c644be libnetwork: use dns.Client for forwarded requests e6258e6590 libnetwork: reply SERVFAIL if DNS forwarding fails 9cf8c4f689 libnetwork: extract DNS client exchange to method 854ec3ffb3 libnetwork: extract dialExtDNS to method 51cdd7ceac libnetwork: truncate DNS msgs using library method 860e83e52f libnetwork: get rid of truncation red herring 8a35fb0d1c libnetwork: refactor ServeDNS for readability 0bd30e90bb libnetwork: reply SERVFAIL on resolve error 92aa6e6282 libnetwork: extract fn for external DNS forwarding 78792eae68 libnetwork: add regression test for issue 44575 94feb31516 update to go1.19.6 b62445871e libnet/ipam: fix racy, flaky unit test 81f9f90e47 Do not log connection info before the connection exists c4c54683a9 Revert "apparmor: Check if apparmor_parser is available" 174802e15f vendor: github.com/containerd/containerd v1.6.18 a4e3c67e44 api/s/r/swarm: log backend errors at Debug level e66995d840 d/l/awslogs: fix ineffective Add in test 713e02e03e daemon: handle EISDIR error from runtime 97921915a8 distribution/xfer: fix download fencepost bug 0c68b655f6 Fix loop-closure bugs in tests dea3f2b417 Migrate away from things deprecated in Go 1.20 a36286cf89 vendor: golang.org/x/net v0.7.0 c7de76569e vendor: golang.org/x/text v0.7.0 a53b44a266 vendor: golang.org/x/sys v0.5.0 c53e22af19 add new maintainers! 046cc9e776 libnetwork: check DNS loopback with user DNS opts d31fa84c7c libnet/networkdb: use atomics for stats counters 3539452ef0 libnetwork/networkdb: make go test -race ./libnetwork/networkdb pass 5287b2ddbf libnet/ipam: stop eagerly stringifying debug logs 2e19a4d56b contrib/apparmor: remove version-conditionals (< 2.9) from template 7008a51449 profiles/apparmor: remove version-conditional constraints (< 2.8.96) eaeaa7b7fd vendor: update buildkit to latest v0.11 335907d187 builder: define GetRemotes for the worker 80f8432b52 ci: fix branch filter pattern in buildkit workflow 62be425bcc api: Extract parsing reference from repo and tag afc6e3fa46 c8d/import: Use danglingImageName instead of hardcoded b3a8b6b198 api/tag: Reject digested target references eaa56afda9 daemon/c8d: Implement TagImageWithReference 1ca85e835c daemon/imageService: Remove TagImageWithReference 7b6f71dced daemon: Pass ctx to image tagging operations 22776f8fdb ci: enhance tests distribution e304e82b66 ci: update gotestlist to 0.3.1 ab3fa46502 apparmor: Check if apparmor_parser is available 0137446248 Implement run using the containerd snapshotter e564932792 gha: switch buildkit back to upstream for testing 91725ddc92 libnet/d/ipvlan: gracefully migrate from older dbs 21677816a0 Dockerfile: configure code dir as "safe" directory 3bcb350711 graphdriver/overlay2: usingMetacopy ENOTSUP is non-fatal 521c2b25c2 docs: fix JSON format error af32603ae3 daemon/c8d: Implement save and load 043dbc05df github: apply patch for CNI test that was incorrectly skipped 666334bd48 vendor: update buildkit to v0.11.2 85169a04cf vendor: github.com/tonistiigi/fsutil v0.0.0-20221114235510-0127568185cf cf83842304 Dockerfile: Make it easier to use ctr in shell container 0e4d3feb94 daemon: identify container exits by ProcessID 843fcc96f7 libc8d/remote: name task fifos after task ID 719b08313f libc8d/local: set task id to container id d634ae9b60 Wait longer for exit events on Windows 7950abcc46 libnetwork: delete CHANGELOG.md 31f4ec92f6 update containerd binary to v1.7.0-beta.3 c41c8c2f86 vendor: github.com/containerd/containerd v1.6.16 22098745e7 vendor: github.com/pelletier/go-toml v1.9.5 a264f2dc55 libnetwork/ipam: skip Destroy()ing bitseq.Handle values 6f08fe20e9 libnetwork/bit{seq,map}: delete CheckConsistency() a08a254df3 libnetwork: drop DatastoreConfig discovery type 28edc8e2d6 libnet: convert to new-style driver registration 5595311209 libnetwork/drvregistry: split up the registries d478e13639 libnet: un-plumb datastores from IPAM inits 27cca19c9a libnetwork/drvregistry: drop unused args befff0e13f libnetwork: remove more datastore scope plumbing 142b522946 libnetwork/config: remove vestiges of global scope 52d9883812 libnetwork: drop (*Controller).ReloadConfiguration 9900c7a348 client: improve error messaging on crash e8011d7872 libnw/ipamutils: make local defaults immutable 540d1e0561 libnw: untangle IPAM allocator from global state 48ad9e19e4 libnetwork/netutils: drop ElectInterfaceAddresses cc19eba579 daemon: let libnetwork assign default bridge IPAM a654cbfd2f Use GetBoolOrDefault to remove duplicated invalidFilter usages 0d68591c8e api/types/filters: Add GetBoolOrDefault 390532cbc6 libnetwork/windows/overlay: drop unused variables b3e6aa9316 libnetwork/netutils: clean up GenerateIfaceName 3775939303 libnetwork/netutils: refactor GenerateRandomName 1776f72c96 c8d/progress: Update progress when finished 54f0b0ec4b c8d: Implement image history c0eb207b76 libnetwork/bitseq: refactor JSON marshaling 89ae725d23 libnetwork/bitseq: make mutex an unexported field 94ef26428b libnetwork/bitseq: refactor in terms of bitmap 143c092187 libnetwork/bitmap: optimize binary serialization c4d7294b5c libnetwork/bitmap: remove datastore concerns ad03a09451 libnetwork/bitmap: dup from package bitseq cd2e7fafd4 libnetwork/bitseq: add marshal/unmarshal tests b3c5352386 rootless: support `--ipc=host` 67aa86f1e0 hack: check if cross-compiling before setting ARM target name 25f95b0000 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230119195359-904c221ac281 170a1c4709 hack: display build cmd when DOCKER_DEBUG set 877baae03e hack: remove unnecessary vars in make.sh script b80f16157e hack: remove ORIG_BUILDFLAGS var 0c008cc4f8 hack: remove -installsuffix build flag d2d6ef431f Dockerfile: prefer ld for building against arm64 518be73a5c Dockerfile: smoke tests for static builds f676dab8dc Dockerfile: use clang to build dockerd/docker-proxy f49c88f1c4 Disable chrootarchive.init() on Windows 9b5c21309b images: Pass context to commit related operations 596c8960b2 c8d: Fix resolving truncated id to a descriptor 65c6ba1fc4 vendor: golang.org/x/net v0.5.0 ff14f8ef16 Add GetLibHome stub for non-linux OS 824dc51341 vendor: golang.org/x/text v0.6.0 e66e6bb28a vendor: golang.org/x/sys v0.4.0 dcfe23a038 fix blockThreshold full bug 0b83fd3217 ioutils: add regression test for bytespipe deadlock 71fa3b1337 Dockerfile: fix PKG_CONFIG for xx 945704208a hack: name for target ARM architecture not specified 94639eb66f hack: typo in displayed platform name ffd75c2e0c libnetwork: Support IPv6 in arrangeUserFilterRule() (redux) 17723691e5 Revert "libnetwork: Support IPv6 in arrangeUserFilterRule()" 833096ce42 homedir: fallback to user.Current().homeDir if XDG_DATA_HOME/XDG_CONFIG_HOME and HOME are unset af6b5d55db vendor: github.com/moby/ipvs v1.1.0 f53feeea8b vendor: github.com/vishvananda/netns v0.0.2 8be470eea8 libnetwork: don't embed mutex in network c71555f030 libnetwork: return concrete-typed *Endpoint 581f005aad libnetwork: don't embed mutex in endpoint 0e91d2e0e9 libnetwork: return concrete-typed *Sandbox 0425baf883 libnetwork: don't embed mutex in sandbox f96b9bf761 libnetwork: return concrete-typed *Controller ae09fe3da7 libnetwork: don't embed mutex in controller bb5cae2c94 vendor: github.com/vishvananda/netns v0.0.1 102090916e libnetwork: addRedirectRules without reexec 582dd705c1 libnetwork: fwmarker without reexec d6cc02d301 libnetwork: drop (resolver).resolverKey field 50a4951ddc libnetwork: setup DNS resolver without reexec 4733127a04 libnetwork: set default VLAN without reexec 7037c48e58 libnetwork: set IPv6 without reexec 0246332954 libnetwork: create netns without reexec ef161d4aeb libnetwork: Clean up sysfs-based operations 9032e6779d c8d/resolver: Fallback to http for insecure registries c83fce86d4 c8d/resolver: Use hosts from daemon configuration 3a3f98b32b c8d/pull: Don't unpack manually 4a8c4110e3 produce progress events polling ctrd's content.Store 566a2e4c79 libnetwork: Remove iptables nat rule when hairpin is disabled d7deec1993 daemon/c8d: Implement import a254dad2e5 api/import: Guard from Digested instead of Canonical reference 28327f10a2 daemon/import: Extract common logic to api 8dbc5df952 daemon/config: inform the user when the input JSON contains invalid UTF-8 155e8d7d78 update to go1.19.5 d42495033e daemon/config: support alternate (common) unicode encodings using a BOM 8d1e56e210 CONTRIBUTING.md: drop reference to the Derek GitHub bot 0867d3173c cmd/dockerd: use default SIGQUIT behaviour 1dcf7d5b03 daemon/config: clean up tests to use common helper 1e1d326b50 plugins: Move GlobalSpecPaths into LocalRegistry 805aea501a docs: api: synchronise versioned API docs (v1.39 - v1.41) 92cbd1c69e docs: api: synchronise versioned API docs (v1.42) 4f81f9d5ea builder/dockerfile: use example.com for tests 65aa43bf66 libnetwork: use example.com for tests and examples dc30785947 ci: update buildkit to fix integration tests cba3edbc37 daemon/config: group JSON preprocessing steps bb19265ba8 daemon/config: ignore UTF-8 BOM in config JSON 2d397beb00 libnetwork: Support IPv6 in arrangeUserFilterRule() 6ab12ec8f4 rootless: move ./rootless to ./pkg/rootless c1bd5e9144 Use user paths for plugin discovery in rootless mode bffe6d5670 vendor: github.com/containerd/containerd v1.6.15 89fb8b32f6 graphdriver/btrfs: needs kernel headers >= 4.12, not >= 4.7 c12d7b6d21 upgrade to aws sdk go v2 aa80c33360 Dockerfile.*: drop libbtrfs c9d632e485 PACKAGERS: update Btrfs graphdriver dependencies d3778d65fa graphdriver/btrfs: use free wrapper consistently 3208dcabdc graphdriver/btrfs: use kernel UAPI headers 1449c82484 graphdriver/btrfs: drop version information fdcab58ccf Remove reference to "requireRegistryMatch" deb4910c5b integration-cli: Fix hanging TestLogsFollowGoroutines* 1616a09b61 add support for image inspect with containerd-integration bbe6e9e8d1 hack/make: Don't add -buildmode=pie with -race 7e7b0622a6 hack: restore copy_binaries func b37d34307d Clear conntrack entries for published UDP ports 1fdfd45995 Updated outdated docker contributing guidelines link 01fd23b625 Fix volume CreatedAt being altered on initialization d131147a5c use errors.Is() to handle image store errors 83280d44d0 docs: contributing docs update for cross comp e8a82ed24d Dockerfile: add "all" stage to build binaries and extra tools 113e95ec02 ci: add extra steps to check artifacts b565b496ba Dockerfile: rename dev stages 27ba1766e7 ci: use GITHUB_REF and GITHUB_SHA to set version and commit 0b3af098e1 bake: define additional vars 9bcf5bed05 bake: define DESTDIR 491467b0b9 hack: update buildmode pie condition 347a5f68da hack: do not set buildmode pie for statically linked binary e37985f590 hack: use PKG_CONFIG var when checking libdevmapper 84ea9ee0f9 IAmStatic not used anymore 04c90b8cf5 hack: remove containerutility script 8086f40123 Dockerfile: use TARGETPLATFORM to build Docker 722d477bc6 client: defaultHTTPClient(): don't ignore transport errors 31ee158394 client: defaultHTTPClient() accept URL 1de3966b84 image: store: rename vars that collided with types or shadowed vars 2910163df1 daemon/images: imageKey() accept string 040b5bbc52 image: store.restore(): use more structured logs 456ea1bb1d image: deprecate IDFromDigest() a5ebd28797 daemon/graphdriver/devicemapper: simplify Udev log, and update link 155e39187c daemon/logger/gcplogs: remove ensureHomeIfIAmStatic workaround 5fed968b1d api: can marshal and unmarshal when args.fields is empty ad8804885c Update delve version e7d75c8db7 api/types/container: fix validation for UTSMode, UsernsMode, PidMode 018347f802 integration-cli: remove waitInspectWithArgs() 61c434c030 integration-cli: remove inspectMountPointJSON() ffbbe3d103 daemon/graphdriver/btrfs: workaround field rename in btrfs-progs 6.1 0eb7b49a17 daemon: remove some intermediate vars, use struct-literals 288cf20f98 daemon: rename some vars that collided with imports c5d4b6b311 restartmanager: remove RestartManager interface efb97da0da restartmanager: add SetPolicy() to the RestartManager interface d68b68fc43 restartmanager: RestartManager.Cancel(): remove unused error return 42f1be8030 daemon: translateContainerdStartErr(): rename to setExitCodeFromError() 83dd99177f daemon: translateContainerdStartErr(): use exit code 128 as default 46dae0b8bb daemon: translateContainerdStartErr(): use early return for errors 4e750caf96 daemon: translateContainerdStartErr(): extract detecting wrong cmd a756fa60ef daemon: translateContainerdStartErr(): use const/enum for exit-statuses 2cf09c5446 daemon: translateContainerdStartErr(): remove unused cmd argument 087369aeeb daemon: containerStart(): rename return variable 940730093b integration-cli: remove cli.Build(), cli.Inspect() bc0885f364 integration-cli: remove WaitRestart(), un-export WaitForInspectResult() 1bd486666b api/types/container: use strings.Cut() and DRY ab5e69c442 api/types/container: rewrite tests to use subtests and asserts e155cb4fee hostconfig: move unit tests to api/types/container 12df6024db cmd/docker-proxy: add "-v / --version" flag c42b304f62 gha: update buildkit to fix integration tests 799cc143c9 Always use iptables -C to look for rules 205e5278c6 Merge iptables.probe() into iptables.detectIptables() 0787ea8b26 libnetwork: improve logs for DNS failures a959487597 libnetwork/netlabel: remove Key(), Value(), and KeyValue() utils 9015cb7111 libnetwork: controller: rename vars that collided or shadowed 96cfb076ce libnetwork/netlabel: make consts actual consts 36151bd1d7 libnetwork/drivers/bridge: remove "ioctl" fallback code for legacy kernels 6a91e09218 pkg/parsers: use strings.Cut(), and cleanup error-messages 3f935d0e2c daemon/graphdriver/zfs: use strings.Cut, and refactor f95e9b68d6 daemon: use strings.Cut() and cleanup error messages 46f7c92c9a libnetwork: use strings.Cut() and minor refactor 87ca9490b0 libnetwork/datastore: rename var that collided with import ff447f4fd5 runconfig/opts: use strings.Cut() bffb35612c plugin: use strings.Cut() 01365cbd74 libcontainerd/local: use strings.Cut() 6059d38f21 pkg/parsers/operatingsystem: don't use strings.SplitN() 451b8579ef pkg/parsers/kernel: use strings.Cut() and minor refactor 774cd9a26c opts: use strings.Cut() and refactor parseDaemonHost() d3cd746067 integration-cli: use strings.Cut() 38b0c47f37 integration-cli: links: use gotest.tools compare and assert.Check ebda2fa2b5 integration/internal: use strings.Cut() and minor refactor 39f59c3289 daemon/links: use strings.Cut() ad7f1a8dcc daemon/logger: use strings.Cut() 32c4c15f15 daemon/events: use strings.Cut() 5008409b5c cmd/dockerd: use strings.Cut() 19cd5ff164 client: use strings.Cut() 64adea1ce1 volume: use strings.Cut() and minor refactor 19db33afc9 pkg/tarsum: use strings.Cut() and minor refactor 59880cb855 builder/dockerfile: use strings.Cut() 604a2d67b5 builder/remotecontext/git: use strings.Cut() 380a2dfc3a api/types: use strings.Cut() 7841ce781c api/types/time: use strings.Cut() ba9bcf92f6 api/types/filters: use strings.Cut() 6db4af7bd5 graphdriver: windows: use strings.Cut() c545473920 daemon/cluster: use strings.Cut() ec878a3d89 pkg/sysinfo: unify ReadMemInfo implementation 09ea6744fe pkg/sysinfo: remove github.com/docker/go-units dependency 6a516acb2e pkg/system: move memory-info types to pkg/systeminfo 6919b9879b pkg/sysinfo: unify NumCPU implementation c63ea32a17 pkg/ioutils: TempDir: move to pkg/longpath 3314f4ef09 pkg/ioutils: unify TempDir implementation 2e67c85c13 pkg/longpath: fix package GoDoc c4c53659f1 integration-cli: remove uses of ioutils.TempDir 2e67c827bb errdefs: FromStatusCode() don't log "FIXME" debug message 83d7ae76e8 vendor: github.com/containerd/containerd v1.6.14 72ea8cfb43 registry: use http.NewServeMux for tests instead of gorilla/mux 54512f2184 pkg/stringid: optimize performance d20ddb6807 update containerd binary to v1.7.0-beta.1 35cbdc9661 vendor: github.com/containerd/containerd v1.6.13 9300aca2a6 vendor: github.com/Microsoft/hcsshim v0.9.6 19f3448c21 Dockerfile: delve cross build with TARGETPLATFORM ed95e1a9ff Dockerfile: swagger cross build with TARGETPLATFORM 879b023706 Dockerfile: containerutility cross build with TARGETPLATFORM 8d9a357a67 Dockerfile: registry cross build with TARGETPLATFORM a4bc2922c2 Dockerfile: dockercli cross build with TARGETPLATFORM 420591c4a2 Dockerfile: rootlesskit cross build with TARGETPLATFORM f0307892ea Dockerfile: tini cross build with TARGETPLATFORM 5e19d7ec54 Dockerfile: runc cross build with TARGETPLATFORM 81d704d15d Dockerfile: containerd cross build with TARGETPLATFORM b19c11621a Dockerfile: DOCKER_STATIC arg 69c9dfd6d5 Dockerfile: add dummy stage 6cba7d22e9 Dockerfile: add cross compilation helper 0007490b21 vendor: github.com/moby/swarmkit/v2 v2.0.0-20221215132206-0da442b2780f e19dff9285 daemon/config: remove deprecated RootDeprecated field 32b299f63e daemon/config: rename CommonTLSOptions to TLSOptions ef7ab7bde8 cli: remove cli/config package, integrate into cmd/dockerd 6a90113e68 cli: move cobra customizations into cmd/dockerd 3d58b43efe cli: remove unused Errors type 25c3421802 hack: introduce validate/no-module a449f77774 hack: replace go-mod-prepare.sh with wrapper script 388fe4aea8 daemon: drop side effect from registerLinks() 0141c6db81 daemon: don't checkpoint container until registered 00157a42d3 daemon: fix GetContainer() returning (nil, nil) 7b13076f56 daemon: CreateNetwork: remove redundant error check 389dacd6e2 vendor: github.com/tinylib/msgp v1.1.6 24496fe097 vendor: github.com/philhofer/fwd v1.1.2 8fb71ce208 manage image inspect data in backend a8eb15eafb ImageService.ImageHistory(): pass context 0426c76142 List images with multiple since/before filters e214503789 image/store: Use errdefs for errors 28382c58ec container: ViewDB: use logrus.WithError() 6549a270e9 container: ViewDB: return typed system errors 94dea2018e container: ViewDB: GetByPrefix() return typed errors da4d627e79 container: ViewDB: use errdefs for non-existing containers ddaba6d576 daemon: filterByNameIDMatches() fix error handling 8c9a240597 container: use const for null-terminator 200edf8030 libcontainerd/remote: remove stray import comment 12c76d4a15 vendor: github.com/containerd/containerd v1.6.12 4bbc37687e vendor: golang.org/x/net v0.4.0 18f85467e7 docs: add 401 to possible status codes of /auth d331bc3b03 vendor: github.com/containerd/containerd v1.6.11 52bc1ad744 update to go1.19.4 f577f31f50 Add Bjorn Neergaard to maintainers 9da935629e Better not pretend to be an active currator 383e23fd61 Add Kevin Alvarez ("crazy-max") to curators 521b8c02cc builder: handle host-gateway with extra hosts 381fa4afca ci(buildkit): update buildkit ref to fix issue with alpine image a6a539497a distribution: checkSupportedMediaType: allow additional media-types 57b229012a seccomp: block socket calls to AF_VSOCK in default profile eaa74497b8 libnetwork: use go-immutable-radix instead of radix 93fa093122 testing: move fuzzers over from OSS-Fuzz 3d97f1e22d client/list: Handle SharedSize e1c3305015 AUTHORS: regenerate 672383bc56 .mailmap: cleanup and additions b94d1604a9 hack/generate-authors.sh: refactor and simplify 6326ad1729 vendor.mod: remove outdated comment about replaced module 0f0fce5dcc libnetwork/netutils: FindAvailableNetwork(): simplify reading of resolv.conf 0cbe6524db libnetwork/drivers/overlay: getBridgeNamePrefix() simplify reading of resolv.conf 0ef0dab2f7 libnetwork: sandbox.rebuildDNS() make updating sandbox more atomic 806b4fbcad libnetwork: sandbox.rebuildDNS() move variables closer to where they're used d178a71b7c libnetwork: sandbox.rebuildDNS() simplify reading of resolv.conf 05b3356631 libnetwork: sandbox.setupDNS() don't parse host resolv.conf if not needed 08d5e3d0fa libnetwork: sandbox.setupDNS() simplify reading of resolv.conf a44f547343 registry: session: remove unused id fb77973201 pkg/system: move CheckSystemDriveAndRemoveDriveLetter to pkg/archive c4872b4519 pkg/system: CheckSystemDriveAndRemoveDriveLetter: fix error format ad371893f2 pkg/system: move GetLongPathName to integration-cli 9f3e5eead5 pkg/system: deprecate DefaultPathEnv, move to oci dec81e489f daemon/disk_usage: Use context aware singleflight f7e59cbccc Jenkinsfile: Fix dev image build fox ppc64le/s390x archs 85fddc0081 distribution: remove unused RequireSchema2 8feeaecb84 use ad-hoc libtrust key e854b2a459 distribution: use ad-hoc trustkey for tests 5cdd6ab7cd daemon/config: remove TrustKeyPath, and local utilities 1981706196 daemon: remove migrateTrustKeyID() c1756e1b63 update containerd binary to v1.7.0-beta.0 c1a9e82d3e vendor: google.golang.org/grpc v1.50.1 bade242ddd Makefile: always use buildx 426e3926ef ci: define timeout for jobs dc52e08bb5 vendor: github.com/prometheus/client_golang v1.14.0 b2fe29ba79 vendor: github.com/go-logr/logr v1.2.3 7c1b7842c6 vendor: golang.org/x/crypto v0.2.0 efe17dbdb4 vendor: golang.org/x/net v0.2.0 0588a83380 vendor: github.com/opencontainers/runc v1.1.3 38adf7a694 vendor: github.com/klauspost/compress v1.15.12 e1058e6bc3 go.mod: golang_protobuf_extensions v1.0.4 - prevent incompatible versions 62344f515c layer: layerStore.registerWithDescriptor: rename var to prevent shadowing e5e6480694 Add Sam Thibault (sam-thibault) as curator 4769809555 api/server/backend/build: sanitizeRepoAndTags() check for digest 64f9ea1cf5 vendor: github.com/moby/swarmkit/v2 v2.0.0-20221123162438-b17f02f0a054 a5898e3a2d vendor: github.com/prometheus/client_golang v1.13.0 2cc6a86fd3 vendor: github.com/aws/aws-sdk-go v1.37.0 8f1bc3a3b7 vendor: google.golang.org/grpc v1.48.0 b0e20e1b3c vendor: go.uber.org/zap v1.21.0 066fb6c69e vendor: go.uber.org/multierr v1.8.0 b41580d66e vendor: go.uber.org/atomic v1.9.0 341c9e77a8 vendor: github.com/jmespath/go-jmespath v0.4.0 9a8b46518b vendor: google.golang.org/genproto v0.0.0-20220706185917-7780775163c4 1e48b64538 vendor: github.com/fernet/fernet-go v0.0.0-20211208181803-9f70042a33ee 4113a88523 vendor: google.golang.org/protobuf v1.28.1 26c4429f7e vendor: github.com/spf13/cobra v1.6.1 8a46a2a364 Dockerfile: remove hardcoded platforms for vpnkit stage 4f17d17009 ignorefiles: cleanup 61f266f660 vendor: github.com/moby/term v0.0.0-20221120202655-abb19827d345 af8e955e8f hack/go-mod-prepare.sh: find root robustly; make steps transparent 30b0cb0cd4 vendor.mod: add comment about replaced dependency 62a4a45a72 vendor.mod: remove replace for github.com/rexray/gocsi a2d758acc9 vendor: github.com/armon/go-radix v1.0.1-0.20221118154546-54df44f2176c 9f004830a5 hack/validate/vendor: clean up license validation step dbd76848ca hack/validate/vendor: split tidy from vendor 72568286ab hack/vendor.sh: allow running tidy & vendor separately 40069797ef hack: remove obsolete sources for go-autogen 07ba3e35d3 Add additional loggig in case of error of renaming runtimes-old and removing it d591710f82 Handle docker start inside overlayfs ca807edac0 update github.com/tc-hib/go-winres v0.3.0 to fix schema version in manifest 25dc760162 Dockerfile: variant support in frozen-images stage 882ddf4b16 update gotestsum to v1.8.2 b529870558 daemon/config: use strings.Cut(), fix panic in BuilderGCFilter 7ca03c1a79 rootlesskit.installer: s/vendor.conf/vendor.mod/ a2cea992c2 libnetwork/iptables: Fix test panic when execute only one test a6cb8efd81 vendor: golang.org/x/oauth2 v0.1.0 9d7bd47cb6 vendor: golang.org/x/crypto v0.1.0 d9fb730148 update RootlessKit to v1.1.0 08516af897 vendor: github.com/rootless-containers/rootlesskit v1.1.0 be18f92bf4 hack/validate: drop changelog-related steps ec1bb21649 cleanup: drop historical CHANGELOG.md e8ad01594a cleanup: drop .DEREK.yml 4e5c3b82cb vendor: github.com/containerd/containerd v1.6.10 a5979a2106 update containerd binary to v1.6.10 06e4b7d1f8 vendor: github.com/moby/buildkit v0.10.6 40908fca45 fix vendor.mod: add hashicorp/go-multierror as direct dependency 81ccfd44e4 Fix grammar in README.md 6a02afa56f ci(actions): bump outdated actions on Linux 0557569947 ci(actions): migrate to file-based commands 79f9ffd401 vendor: golang.org/x/net v0.1.0 71fa64a272 vendor: golang.org/x/time v0.1.0 4965f19626 vendor: golang.org/x/sync v0.1.0 4bb95eef6f vendor: golang.org/x/sys v0.1.0 67b9f120d5 pkg/archive: switch back to os/exec b7d242f094 builder/remotecontext/gitutils: switch back to os/exec 6a15f40803 libnetwork_test: improve OptionBoltdbWithRandomDBFile a0f9caec99 libnetwork_test: stop controllers at end of test 010077ba0f libnet/d/bridge: fix race condition in test case 7b2308980c libnet/d/bridge: fix bridgeInterface.addresses() c2a087a9f7 libnet/d/bridge: use fresh PortAllocator in tests 1b64f2e28b libnetwork: stop caching global netlink handle d0096bba21 libnetwork_test: overhaul TestParallel 32ace57479 libnetwork_test: isolate tests from each other 0411336b49 libnetwork_test: pass controller into createTestNetwork 9a0953a0a0 libnet/testutils: spawn goroutines in test OS ctxs 07be7b087d libnetwork_test: remove in-container special case e2a89b7ad1 libnet/d/bridge: configure store when opts missing 8a20564847 libnet/datastore: stop sharing defaultScopes singleton 8404507b9b libnet/osl: stop assuming caller thread is clean 0f7c9cd27e Remove uses of deprecated go-digest.NewDigestFromHex, go-digest.Digest.Hex 6174d00c03 replace distribution/digestset with opencontainers/go-digest/digestset bbb1b82232 go.mod: github.com/miekg/dns v1.1.43 d43bc26717 vendor: gotest.tools/v3 v3.4.0 57ba2df970 vendor: github.com/google/go-cmp v0.5.9 to remove golang.org/x/xerrors dep f39b83e232 libnetwork: fix TestParallel "bad file descriptor" fe6706a2ce libnetwork: make tests less dependent on others cea8e9b583 libcontainerd/supervisor: use pkg/pidfile for reading and writing pidfile 14da1bfe40 cmd/dockerd: adjust error message for pidfile changes 7493debe26 pkg/pidfile: implement Read() 7d3e1ad943 pkg/pidfile: Write(): don't automatically create parent directories 81945da0ac pkg/pidfile: Write(): take pid as argument 735e250326 pkg/process: Alive(): fix PID 0, -1, negative values 55d15e9d05 pkg/pidfile, pkg/process: use single implementation for process alive 9d5e754caa move pkg/system: process to a separate package 0040fb93d6 pkg/system: IsProcessZombie() skip conversion to string, use bytes instead 970ad4e3c7 pkg/system: IsProcessZombie() ignore "os.ErrNotExist" errors 8d6da1e100 pkg/system: IsProcessAlive() remove redundant type-cast 2006d9f7d1 cmd/dockerd: Rewrite shutdownDaemon to use context timeout 66a0289081 builder: Don't store context in struct a181a825c8 daemon/start: Revert passing ctx to ctr.Start def549c8f6 imageservice: Add context to various methods 57c2545cd5 vendor: github.com/moby/swarmkit/v2 v2.0.0-20221102165002-6341884e5fc9 1bef9e3fbf Fix containerd task deletion after failed start be1829f63d daemon/logger: fix godoc 407e3a4552 distribution: Error when pulling OCI artifacts 4386e3f7c0 pkg/parsers/kernel: un-export Utsname 775dcab7a2 pkg/parsers/kernel: remove duplicate Package godoc 8d0dc69027 implement docker system df 952e1e62c5 Sort entries in pkg/namesgenerator 5bc17c3e54 Remove long-deprecated "arm" fallback 3d71555a47 Remove errant "runtime.GOARCH" from debug message f9d4589976 Update to Go 1.19.3 to address CVE-2022-41716 1e88fe578e pkg/idtools: remove execCmd() utility 3d73d32499 api/types/filters: add output to example c207947508 integration-cli: DockerPluginSuite: use gotest.tools compare utilities 346a438da8 opts: TestParseLink(): add test-case for legacy format ad4073edc1 daemon: fix docs for config-default constants dcd6c1d2e2 container: make path resolution fns Windows-only 2bdc7fb0a1 daemon: archive in a dedicated mount namespace 7d23c50599 integration: test more copy edge-cases 6750d1bac8 daemon: drop Windows-only code from archive_unix.go 4fd91c3f37 daemon: refactor isOnlineFSOperationPermitted 84cbe29d5b daemon: dupe the archive implementation 60ee6f739f Add reusable chroot and unshare utilities 317d3d10b8 Revert "Use real chroot if daemon is running in a user namespace" 5de229644f pkg/chrootarchive: stop reexec'ing before chroot f2f884a92f pkg/archive: create whiteout temp dir under dest 1f32e3c95d Add integration test for #38995, #43390 6c0aa5b00a Fix the max-concurrent-downloads and max-concurrent-uploads configs documentation 22529b81f8 libnetwork: drop InitOSContext() 7fc29c1435 libnetwork/osl: clean up Linux InvokeFunc() d1e3705c1a libnet/d/overlay: restore thread netns 3e2f0c7a39 libnetwork: fixup thread locking in Linux tests afa41b16ea libnetwork/testutils: restore netns on teardown 04dc007c76 vendor: github.com/containerd/containerd v1.6.9 ac79a02ace update containerd binary to v1.6.9 4f1d1422de integration: download busybox-w32 from GitHub Release 4fdc1bb1fb builder/remotecontext/git: allow building on go1.18 4f43cb660a skip TestImagePullStoredfDigestForOtherRepo() on Windows and rootless 27530efedb Validate digest in repo for pull by digest 92eca900b0 Revert "testutil/registry: remove unused WithStdout(), WithStErr() opts" 201fdf67ac gha: update buildkit to v0.10.5-6-ge27c8e24 to skip some tests 0760c6f4e1 gha: buildkit: make checks more readable cfa2f9a2f2 gha: buildkit: remove "skip-integration-tests" from matrix 67d010bd2c builder: add missing doc comment 94672c89cc builder: fix running git commands on Windows 61acc9939f builder: make git config isolation opt-in 72119f5d9b builder: isolate git from local system 0f7b0897cc builder: explicitly set CWD for all git commands 8deb92d653 builder: modernize TestCheckoutGit 0fc17c42af vendor: github.com/moby/buildkit v0.10.5 51fe170224 daemon: NewDaemon() fix import colliding with local variable 27bd49f4bf daemon: NewDaemon(): replace system.MkdirAll for os.Mkdir where possible 19c5d21e6f daemon: getPluginExecRoot(): pass config 17fb29c9e8 daemon: NewDaemon(): check system requirements early 7ff0f654fb daemon: add TEST_INTEGRATION_USE_SNAPSHOTTER for CI 0a004fd361 daemon: NewDaemon(): log message if containerd snapshotter is enabled 4fa853f5de pkg/fileutils: ReadSymlinkedDirectory: preserve underlying error 24e371c812 pkg/fileutils: improve tests d4d242ba76 pkg/chrootarchive: gofumpt test files dee3f716b3 pkg/chrootarchive: replace system.MkdirAll for os.Mkdir 8a8202fcdc pkg/chrootarchive: TestChrootTarUntar fix copy/paste mistake 0955c88c2e pkg/chrootarchive: use t.TempDir() 30e5333ce3 registry: allow "allow-nondistributable-artifacts" for Docker Hub 69f72417f4 pkg/idtools: remove CanAccess(), and move to daemon ee34a8ac29 pkg/idtools: setPermissions() accept Identity as argument bca90530fa pkg/idtools: simplify if-statement d68fa0382d pkg/idtools: don't use system.Stat() on unix 43d6eb7173 pkg/pidfile: remove PIDFile type, rename New() to Write() dd8983f96c pkg/pidfile: reduce cyclomatic complexity, and small optimisation 4917bcc039 pkg/pidfile: don't ignore all errors when reading file 3ce2a7d026 pkg/pidfile: pkg/pidfile: use strconv instead of fmt.Sprintf(), and unconvert a9fa147a92 daemon/logger/etwlogs: rewrite to use go-winio/pkg/etw f058afc861 pkg/system: synchronize mkdirall() with latest os.MkDirAll() 2e66c0b6f0 pkg/system: create SecurityAttribute only once (Windows) 55ceb5047c pkg/system: update volumePath regex to allow returning earlier cfef1b11e5 pkg/system: compile volume-path regex once, and update GoDoc 264706f804 hack: allow pkg/ to import internal/ packages 3246db3755 fix force remove for cluster volumes 624daf8d9e Change restart delay for Windows service to 15s 3c585e6567 cmd/dockerd: use golang.org/x/sys Service.SetRecoveryActions() 34f459423a Replace overlay2 mount reexec with in-proc impl 6176ab5901 cmd/dockerd: use golang.org/x/sys/windows.SetStdHandle() ffcddc908e cmd/dockerd: replace deprecated windows.IsAnInteractiveSession() 75bdbf02a6 daemon/graphdriver/windows: Remove() don't use defer() in a loop 90431d1857 daemon/graphdriver/windows: use go-winio.GetFileSystemType() e35700eb50 daemon/graphdriver/overlay2: remove deprecated overrideKernelCheck b43a7ac530 integration/plugin: remove deprecated overlay2.override_kernel_check de705907a5 client: remove solaris build-tag, simplify and gofumpt 6fd2d4e772 integration: remove uses of pkg/system.Stat() 0242fef89c integration-cli: remove uses of pkg/system.Stat() 402e0b58ca testutil: use filepath.WalkDir instead of filepath.Walk 3db11af44b libnetwork/drivers/overlay: use filepath.WalkDir instead of filepath.Walk 0ee5518e76 oci: use filepath.WalkDir instead of filepath.Walk ec000ce555 pkg/archive: use filepath.WalkDir instead of filepath.Walk f595434abc daemon/graphdriver/devmapper: use filepath.WalkDir instead of filepath.Walk 8f1bc0bccc daemon/graphdriver/btrfs: use filepath.WalkDir instead of filepath.Walk 1870d5f4aa builder: use filepath.WalkDir instead of filepath.Walk d33428f0bf pkg/system: remove solaris left-over a35bcd01c5 pkg/pidfile: replace uses of windows.Close() with windows.CloseHandle() 89de943401 pkg/pidfile: windows: replace magic consts for golang.org/x/sys consts 11cceea58a pkg/idtools: cleanup errors 8d5b17e939 pkg/idtools: don't use system.MkdirAll() where not needed 2e74e307d0 pkg/idtools: format code with gofumpt 0fc13104e7 pkg/idtools: CanAccess(): reorder checks to allow early return c7c02eea81 pkg/loopback: use ioctl helpers from x/sys/unix 6742f74e0e vendor: golang.org/x/sys v0.0.0-20221006211917-84dc82d7e875 1ffdac4502 layer: gofumpt c3a5641132 layer: use strconv instead of fmt.Sprintf() 1fccb39316 pkg/idtools: remove unused CanAccess() stub for Windows 3b9b5842b3 pkg/idtools: mkdirAs(): move var and comment to where it's used 838fc976c8 integration(-cli): remove some redundant formatting 07b2e4cb79 client: use strconv instead of fmt.Sprintf() 145817a9cf libnetwork: use strconv instead of fmt.Sprintf() 56e64270f3 daemon: use strconv instead of fmt.Sprintf() 533ecb44b1 daemon/logger: use strconv instead of fmt.Sprintf() 7fbf321c2a daemon/graphdriver: use strconv instead of fmt.Sprintf 27aea4956c pkg/idtools: mkdirAs() be more explicit about ignored args on Windows a19ee75bd1 pkg/system: fix missing assertions and use sub-tests for ChTimes a9c5a40087 pkg/system: rename some tests to be more descriptive ab7bc6b7d2 pkg/system: use t.TempDir(), remove some test-utils 7bd051eeec pkg/system: windows: setCTime(): remove redundant conversion 0b8444aa0c pkg/system: rename maxTime and re-use, define unixEpochTime, update GoDoc 2c9684e35c pkg/system: add note about maxTime 247f90c82e pkg/system: move maxTime init() back to Chtimes code 4347080b46 pkg/system: remove Umask() utility 76ce3fd9c9 remove aliases for deprecated pkg/pubsub 89a9d7d650 fix typo c1729f876c remove aliases for deprecated pkg/fsutils ce2abb82c0 remove aliases for deprecated pkg/urlutil a5e1baf3ab vendor: github.com/opencontainers/selinux v1.10.2 1f22b15030 Lock OS threads when exec'ing with Pdeathsig ab677c41ea pkg/system: unconvert 07b1aa822c pkg/system: move GetExitCode() to pkg/idtools, and un-export 5b6b42162b pkg/fsutils: deprecate in favor of containerd/continuity/fs 26659d5eb8 pkg/directory: remove unused MoveToSubdir() utility bd6217bb74 pkg/directory: minor refactor of Size() 0a861e68df pkg/directory: Size(): add back type-casts to account for platform differences 618f26ccbc Volume prune: only prune anonymous volumes by default 7b4e4c08b5 Update to go 1.19.2 to address CVE-2022-2879, CVE-2022-2880, CVE-2022-41715 271243d382 docs: swagger: update description for default builder version c523d6d25c libnetwork: remove some outdated comments 6f435e0bb9 Update awslogs driver batching documentation. 60ace31be0 libnetwork: sandbox.updateDNS(): use const for file permissions f0be4d126d libnetwork: use object-literal for some structs 50a7c67363 libnetwork: fix some whitespace formatting 481185fb8a libnetwork/osl: fix GoDoc formatting 4c0e0979b4 Fix live-restore w/ restart policies + volume refs 3c69b9f2c5 replace pkg/fileutils Matching funcs with github.com/moby/patternmatcher 0249afc523 migrate pkg/pubsub to github.com/moby/pubsub 0440ca07ba pkg/fileutils: remove gotest.tools as dependency, use t.TempDir() f73d72bfdc pkg: replace some README's with GoDoc package descriptions b44b3193d0 oci.DevicesFromPath() switch to use containerd implementation c3a6de9ec8 logger/journald: unlock OS threads e2114731e7 contrib: make dockerd-rootless-setuptool.sh more robust 8a2e1245d4 runconfig, oci, image, layer, distribution: fix empty-lines (revive) f63dea4337 cmd/dockerd: fix empty-lines (revive) cd51c9fafb client: fix empty-lines (revive) f71fe8476a api/server: fix empty-lines (revive) b04f1416f6 opts: fix empty-lines (revive) ddb42f3ad2 daemon: fix empty-lines (revive) 05042ce472 daemon/images: fix empty-lines (revive) 0695a910c6 daemon/logger: fix empty-lines (revive) 9d9cca49b4 daemon/graphdriver: fix empty-lines (revive) 0c7b930952 daemon/cluster: fix empty-lines (revive) 4eb9b5f20e plugin: fix empty-lines (revive) 188724a597 volume: fix empty-lines (revive) e9f1b83a4a testutil: fix empty-lines (revive) 786e6d80ba integration: fix empty-lines (revive) ecb4ed172b builder: fix empty-lines (revive) dc0c2340b8 integration-cli: fix empty-lines (revive) 31441778fa api/types: fix empty-lines (revive) 412c650e05 pkg/*: fix "empty-lines" (revive) 8cd244a318 daemon: replace ErrExtractPointNotDirectory with errdefs c78af57e21 daemon: replace ErrVolumeReadonly with errdefs 0f1eeed5c2 daemon: replace ErrRootFSReadOnly with errdefs e31e9180cd integration-cli: remove isCpCannotCopyReadOnly utility 3564d03b0f daemon: remove getPortMapInfo alias ee5d8f43e1 pkg/signal: remove stubs for deprecated package 4a8b3b8bc5 api/types: remove aliases for deprecated Volume and VolumeUsageData 18ca7546f6 pkg/system: remove stubs for deprecated sequential functions 1e13247d6d pkg/idtools: mkdirAs(): fix infinite loops and repeated "chown" 7f3602f1c9 swagger: update links to logo 5dff494b87 test(pkg/archive): add TestImpliedDirectoryPermissions cd381aea56 libnetwork: fix empty-lines (revive) 267108e113 libnetwork/config: rename ParseConfigOptions() to New() 4831ff9f27 refactor(pkg/archive): factor out createImpliedDirectories helper 09cc2f9d0e libnetwork/config: inline LoadDefaultScopes() 528428919e libnetwork/config: merge DaemonCfg into Config 571baffd59 libnetwork: remove old integration tests 46f4a45769 libnetwork/config: remove ParseConfig() 7d574f5ac6 libnetwork/config: inline ProcessOptions a8a8bd1e42 libnetwork/config: remove "Experimental" and "Debug" options 2f1c382a6d golangci-lint: update to v1.49.0 a5be811269 chore(integration): delete outdated TODO comment 6ca4eda960 daemon: clean up vestiges of ContainerFS 9ce2b30b81 pkg/containerfs: drop ContainerFS type alias e332c41e9d pkg/containerfs: alias ContainerFS to string 95824f2b5f pkg/containerfs: simplify ContainerFS type be4f4644a8 pkg/containerfs: drop Driver abstraction 7014c0d65d pkg/containerfs: drop PathDriver abstraction e37a2d1879 pkg/containerfs: delete Archiver, Driver a7c8fdc55b pkg/containerfs: make ResolveScopedPath a free fn fd16e003fb pkg/containerfs: Remove NewLocalDriver() 4d48c00f94 pkg/containerfs: Trim away Driver interface part 1 489e7b61bf vendor: github.com/moby/sys/sequential v0.5.0 323ab8ef97 vendor: github.com/github.com/coreos/go-systemd v22.4.0 0af7b4961a client: TestNewClientWithOpsFromEnv(): use sub-tests 1a3d8019d1 Remove the OS check when creating a container 3e1601a980 vendor: gotest.tools v3.3.0 49de15cdcc libnetwork/resolvconf: removed unused GetIfChanged() and GetLastModified() 55fd77f724 set ReadHeaderTimeout to address G112: Potential Slowloris Attack (gosec) 6d59619d6e ci: reduce cache throttling limits 511a909ae6 container: remove ViewDB and View interfaces, use concrete types 419c47a80a Jenkinsfile: use Ubuntu 20.04 for DCO stage 5e50d002f1 ci: fix branch filter pattern 8596486743 Jenkinsfile: remove unit-validate stage cd54f31984 Jenkinsfile: remove report bundles creation in unit-validate a354970eaa Jenkinsfile: remove validation steps moved to GHA 85fa72c599 chore: update supported go version to 1.18+ c0fa14e8af vendor: github.com/armon/go-metrics v0.4.1 1d7ceb2fee vendor: github.com/google/btree v1.1.2 2597a71623 client: ignore kernel-memory on API >= 1.42 9b428a3d33 integration-cli: remove TestDockerSuite func 7b9877bd8a ci(test): report summary output 8ad8c6d887 fix debian sysvinit script fails to restart docker daemon when stopped 7602edfd06 ci: reusable dco workflow 5a98363a92 ci(test): dynamic validate matrix 9b71a46899 Revert "validation: temporarily allows changes in integration-cli" 3cb933db9d Update uses of Image platform fields in OCI image-spec a73d78f8d5 ci(test): validate job matrix c7e77dba7f Update some tests for supplementary group permissions f6b695d2fb use consistent alias for gotest.tools/v3/assert/cmp 9f8bd80487 Jenkinsfile: remove steps moved to GitHub Actions 36688496ca ci: fix .windows workflow name 807c849431 ci(test): send coverage to codecov 4c8af0e2f9 ci(test): upload reports 60864229b8 integration-cli: TestPluginInstallImage broken on GitHub Runner b8bf60c590 integration-cli: TestEventsOOM* broken on GitHub Runner df731c745a integration: TestNetworkLoopbackNat is broken on GitHub Runner 2e04be3fb9 ci: gha test workflow for integration and unit test 4dd86a0b33 containerd-integration: prefer error over panic where possible ff81dc3544 api/server/backend/build: remove Tagger and NewTagger 779a5b3029 ImageService.GetImage(): pass context 1eadbdd9fa Update to go 1.19.1 to address CVE-2022-27664, CVE-2022-32190 58413c15cb update to golang 1.19 9dab00a76e daemon/images: manifestMatchesPlatform() punch through context 518179f63e vendor: golang.org/x/net v0.0.0-20220906165146-f3363e06e74c cba36a064d Update to go 1.18.6 to address CVE-2022-27664, CVE-2022-32190 878906630b Wrap local calls to the content and lease service 0f052eb4f5 namesgenerator: remove Valentina Tereshkova 609d87003a pkg/archive: strip "write" bits again on Windows cddaa84777 pkg/archive: remove backward compat hack for go < 1.9 306b8c89e8 linting: host:port in url should be constructed with net.JoinHostPort 31fb92c609 linting: gosec: fix or suppress G112, G114 in test code 561a010161 linting: suppress false positive for G404 (gosec) a33d1f9a7c libnetwork/diagnostic: EnableDiagnostic(): use net.JoinHostPort de4af86e98 daemon: set containerd default snapshotter if none is configured 13f99eb65f vendor: github.com/docker/go-units v0.5.0 1557892c37 api: swagger: add errorDetail to CreateImageInfo d983fa0ebe api: docs: add errorDetail to CreateImageInfo (v1.42) 8b36298d7f pkg/archive: remove tests for CanonicalTarNameForPath d59758450b pkg/archive: make CanonicalTarNameForPath and alias for filepath.ToSlash 509f19f611 replace pkg/system Sequential funcs with moby/sys/sequential a4d081cc17 ci: move buildkit tests to a dedicated workflow 5cfc9c374c validate: address SC2155 (shellcheck) b9fd2cf605 validate: format vendor script with shfmt 6cef06b940 validate: add yamllint validation 91bb776bb8 validate: yamllint: ignore "truthy value should be one of" warnings cc2134ea83 validate: yamllint: set locale in config file f679d8c821 validate: yamllint: use "parsable" output 5f114b65b4 validate: yamllint rename config-file 1d7cd76ee9 Dockerfile: update yamllint to v1.27.1 5e0599cb6e pkg/jsonmessage: export "Stream" interface 2640aec0d7 pkg/system: make IsAbs() platform-agnostic 65fdd10d4e ci(windows): move windows-2019 to another workflow 8e8d9a3650 ci: fix broken workflow 8b748bd326 daemon: stop health checks before deleting task d0731af939 Unskip TestHealthCheckProcessKilled on Windows f7277806c8 vendor: github.com/klauspost/compress v1.15.9 d52ffce38f update containerd binary to v1.6.8 bd98bf38e9 update runc to v1.1.4 5dcaad0dd3 Upgrades buildx to 0.9.1 c500d8824d vendor: github.com/moby/buildkit v0.10.4 6217f8001e gha: temporarily pin BuildKit integration test version a09f8dbe6e daemon: Maintain container exec-inspect invariant 15b8e4a490 integration: synchronize TestWaitConditions 18e322bc7c Lock container when deleting its root directory 6a2f385aea Share logic to create-or-replace a container 4bafaa00aa Refactor libcontainerd to minimize c8d RPCs 57d2d6ef62 Update container OOMKilled flag immediately b75246202a Stop locking container exec store while starting 92d2e12a4d daemon: getInspectData(): reduce cyclomatic complexity 313a7d716d daemon: getInspectData(): skip graphdriver data for snapshotters 74b84d00b3 integration-cli: add utility to check if snapshotters are enabled 0cbb92bcc5 daemon: capture output of killed health checks 549d24b437 libnetwork/drivers/ipvlan: fix missing IpvlanFlag field in config JSON ba138d6201 daemon: don't set ignoreImagesArgsEscaped, managed where not needed e14924570c client: remove deprecated WithDialer() option 7f0cf432e9 client: remove redundant pluginPermissionDenied c3f0cd7457 client: remove deprecated IsErrUnauthorized, IsErrNotImplemented 23b8fcc74d ci: print Windows daemon event log timestamps 4b84a33217 daemon: kill exec process on ctx cancel 774e25de13 info: add driver-type d8d990f2e3 daemon: make the snapshotter configurable e6ee27a541 Allow containerd shim refs in default-runtime 7b7d1132e8 seccomp: allow "bpf", "perf_event_open", gated by CAP_BPF, CAP_PERFMON 360238e9e1 vendor: github.com/hasicorp/memberlist v0.4.0 b58de39ca7 daemon: complete the "--graph" / "-g" deprecation d2276ff3f2 daemon: remove daemon.graphdriver c6eab4077a daemon: info: fillDriverInfo() get driver-name from ImageService 8dd14509d7 ImageService: rename GraphDriverName to StorageDriver ca52e0a244 vendor: github.com/containerd/containerd v1.6.8 f27b74f0f7 Makefile: update buildx to v0.9.0 327c8fc52f daemon/config: use initialized config in more tests 2d7d81bc46 cmd/dockerd: use initialized config in tests b28e66cf4f daemon/config: New(): initialize config with platform-specific defaults 9d74c7ab99 daemon: Mount(): use container's driver information for error-message 239d9c5eda daemon: restore(): remove fallback for legacy containers 6ccda5a041 daemon: restore(): remove platform-check (was used for LCOW) 9a849cc83a introduce GetImageOpts to manage image inspect data in backend a4b28e23cf integration-cli: Correct emptyfs id under c8d 502d3a1fcb containerd/load: Load all platforms 8925f735a1 daemon/config: fix GoDoc for StockRuntimeName 226e07144e cmd/dockerd: initContainerd() use early return 6560e0b136 cmd/dockerd: initContainerD(): clean-up some logs b6b0b0a05f libcontainerd/supervisor: don't write log-level to config file bff3e85625 libcontainerd/supervisor: store location of config-file 7a9791f096 libcontainerd/supervisor: store location of pidFile 89ab14a115 libcontainerd/supervisor: make supervisor adjust OOM score for containerd 1d2a669445 libcontainerd/supervisor: use correct logger 2d511f28f2 libcontainerd/supervisor: platformCleanup(): use canonical socket address 7b0bd43a27 libcontainerd/supervisor: remove unused remote.rootDir 6b7e19ff42 libcontainerd/supervisor: remove unused RWMutex 37a241768d cmd/dockerd: fix some minor issues in Windows implementation df965f51bf pkg/idtools: remove deprecated NewIdentityMapping, UIDS() and GIDS() 9861dd069b vendor: github.com/moby/swarmkit/v2 v2.0.0-20220721174824-48dd89375d0a 7797480eb0 daemon, builder: rename variables that collided with imports acd0aa7d38 api/server/router/image: address some linter warnings e05f614267 vendor buildkit 8e2d9b9 (v0.10 branch) 4e46d9f963 update containerd binary to v1.6.7 7376bf948b vendor: github.com/containerd/containerd v1.6.7 30295c1750 api: swagger: fix invalid example value (API v1.39-v1.41) 9031de6a9b fix minor code unreachability error 5c96365c94 containerd: Unpack loaded images 50fb999bb1 add image load/save support 43956c1bfc api: swagger: document BuildCache fields (API v1.39-v1.41) 5371c889a8 api: swagger: document BuildCache fields (API v1.42) e0db8207f3 api: add BuildCache.Parents for API >= v1.42 ebf339628a api: deprecate BuildCache.Parent in API >= v1.42 e0286d7f4e api/types: add missing GoDoc for BuildCache fields. dc2b34af6a api: swagger: document BuildCache fields. d4579a983e containerd/pull: Use authorization 340711db3d api: add types/volume.ListOptions for a more consistent API f1d71f7cc3 Update golang to 1.18.5 051e604adc libcontainerd/supervisor: simplify logic for disabling CRI plugin d4d5e0ae0c libcontainerd/supervisor: remove unused options 0f5ac7761d api: api/server/router/build: fix API errors 69f077f1aa vendor: github.com/Microsoft/hcsshim v0.9.4 982f09f837 docs: api: add missing "platform" query-arg on create (v1.42) 1000e4ee7d docs: api: add missing "platform" query-arg on create (v1.41) 3dae8e9fc2 api: swagger: add missing "platform" query-arg on create 7ca66e3cfc api: add registry.EncodeAuthConfig 7819811835 api: add registry.DecodeAuthConfig, registry.DecodeAuthConfigBody e3a7a1c6ae client: linting: fix "invalid auth header" error 360d38adb1 daemon/containerd: use types/registry.AuthConfig 2b7416ef34 testutil, integration: use types/registry.AuthConfig d817f4dcee registry: use types/registry.AuthConfig 55d1a56826 plugin: use types/registry.AuthConfig 04c339a12b distribution: use types/registry.AuthConfig a02abca49a daemon: use types/registry.AuthConfig 39f3adc079 daemon/images: use types/registry.AuthConfig 05eacf92fe daemon/cluster: use types/registry.AuthConfig eaf1a604f2 client: use types/registry.AuthConfig d8a43399a8 api/server/router: use types/registry.AuthConfig 818ee96219 api/types: move AuthConfig to registry types 857cb260c7 api: add const for 'X-Registry-Auth' 26c65447df Implement ImageDelete for containerd f4c0ec8ffc integration-cli: Make service process live forever 547da0d575 daemon: support other containerd runtimes (MVP) 31f654a704 Fix file capabilities droping in Dockerfile ba2ff69894 libcontainerd: switch generated containerd.toml to v2 (v1 is deprecated) ef5b279887 logger/journald: implement --follow correctly e278d3f185 logger/*: fix reading w/ non-monotonic timestamps 342b44bf20 logger/journald: rewrite reader w/o cursors 3e8405aa82 logger/journald: refactor cgo out of business logic 7ff4b64319 logger/journald: simplify control flow f7fe2c2290 logger/journald: follow the thread-safety rules 12744335c0 logger/journald: simplify build constraints 0e0b300a1c Fix `make BIND_DIR=. DOCKER_SYSTEMD=1 shell` a61f7abf5a integration-cli: Enable TestGetContainersAttachWebsocket for Windows 1213881712 libnetwork: refactor networkdb test implementation 6cc644abef integration-cli: Remove unnecessary Windows-only code 7bdc0a6291 compute image's shared size a1bc0a6d79 daemon/containerd: add more TODO's for image list, and reformat f499c6b9ec Test: wait for network changes in TestNetworkDBNodeJoinLeaveIteration 669fbed1ac daemon/containerd: validate image filters 4d3b32bf3d add support for since, before, labels images filters 0e9a66d35a logger/journald: remove journald_compat (for systemd < 209) 75577fe7a8 logger/journald: fix SA4011: ineffective break statement a290f5d04c state/Wait: Fix race when reading exit status 5571d5139b integration: TestWaitRestartedContainer 498803bec9 daemon/restart: Don't mutate AutoRemove when restarting c492105b8f integration: Add TestContainerWithAutoRemoveCanBeRestarted 67c36d5d6e Windows: Re-create custom NAT networks after restart if missing from HNS a46ce37d25 compute image VirtualSize 9c8b0b6050 daemon/containerd: split methods to separate files e4cd1933c6 daemon/containerd: ImageService: rename receiver 91bd9a6642 daemon/containerd: change alias for oci-specs to match existing code b529fe0995 daemon/images: fix some linting issues b94f7157ca daemon/images: rename images.go to image_list.go for consistency 046b3fc5dd daemon/images: move SquashImage to its own file 6e0e5d7a31 daemon/images: rename variables that collided with imports 2527e6dd09 daemon/containerd: ImageService: remove unused LookupImage() 7b510fda0c daemon: ImageService: remove unused Map() method ff3d2eb589 Add Cory Snider (corhere) as maintainer 9464898b47 libnetwork: skip firewalld management for rootless 7d74269c0d Create the containerd image service 4f08346686 fix formatting of "nolint" tags for go1.19 34b8670b1a update golang to 1.18.4 68bf777ece daemon: remove deprecated fields and flags for cluster-advertise 494dadb8a3 api/types: remove deprecated fields for cluster-advertise f02cdb50be api/types/volume: remove deprecated types efb1f141a4 api/types/container: remove deprecated types 10829dd222 daemon: NewDaemon(): fail early on non-supported platforms 1de20b2012 API: bump version to 1.43 264b41fb9e docs: add API v1.42 e258d66f17 profiles: seccomp: add syscalls related to PKU in default policy 9cd67df5b2 timestamp: clarify doc for ParseTimestamp ee230d8fdd client: errors: remove dead code 52c1a2fae8 gofmt GoDoc comments with go1.19 e4e819b49c pkg/parsers/operatingsystem: fix stray import 6668801d40 gofmt files 5b0eb69635 Extract ImageService interface from the image service 98ce26624b maintainers: Add Paweł Gronowski as curator 4336271b57 maintainers: Add Bruno Sousa as curator ab6b40e5a9 Add github issue forms b1a6d5388d libnetwork: macvlan: reduce use of const for driver name aca80d1cda libnetwork: ipvlan: reduce use of const for driver name dddb4d25d2 libnetwork: macvlan: cleanup parseNetworkGenericOptions 1992190162 libnetwork: macvlan: make configuration.fromOptions a constructor 99bde59229 libnetwork: ipvlan: cleanup parseNetworkGenericOptions 1a1a885423 libnetwork: ipvlan: make configuration.fromOptions a constructor 4e39cdd9bb libnetwork: ipvlan: move validation into parseNetworkOptions() 9f0cb20d9f libnetwork: macvlan: move validation into parseNetworkOptions() b768d69c04 libnetwork: macvlan: processIPAM(): simplify 5d13b38479 libnetwork: macvlan: processIPAM(): remove unused arg and error return 798021af9f libnetwork: macvlan: set network ID as part of parseNetworkOptions 35cba9b1c9 libnetwork: ipvlan: processIPAM(): simplify 8d067bbdb4 libnetwork: ipvlan: processIPAM(): remove unused arg and error return a893540b66 libnetwork: ipvlan: set network ID as part of parseNetworkOptions afeb4c7a6e libnetwork: macvlan: use single ipSubnet type d3e3d43482 libnetwork: ipvlan: use single ipSubnet type 9fba1514d2 libnetwork: macvlan: clean up some consts aec4853498 libnetwork: ipvlan: clean up some consts 33121d3d45 introduce Containerd-snapshotter feature flag 2293de1c82 update runc binary to v1.1.3 af7236f85a Check ipt options before looking for ip6t 25345f2c04 AdditionalGids must include effective group ID 7b153b9e28 api: set default "Builder-Version" to "2" (BuildKit) on Linux 70dc392bfa Use hashicorp/go-memdb instead of truncindex 8d5eebcc6e vendor: github.com/bsphere/le_go v0.0.0-20200109081728-fc06dab2caa8 Bumping docker-cli to version v24.0.0, which comprises the following commits: fb6ae356c vendor: github.com/docker/docker v24.0.0-rc.3 de93c9b26 vendor: github.com/docker/distribution v2.8.2 cafdcf283 cli-plugins/manager: fix deprecation comment of Metadata.Experimental 3768143c2 Update tag docs to clarify name 52ac1a974 docs: update description for docker -H flag 58f37f630 vendor: github.com/docker/docker v24.0.0-rc.2 4f97f5599 vendor: github.com/docker/docker v24.0.0-rc.1.0.20230505222407-8d9a40a82034 0428418d6 vendor: github.com/containerd/containerd v1.6.21 05bf6fff2 vendor: github.com/opencontainers/runc v1.1.7 44fce0706 vendor: github.com/mattn/go-runewidth v0.0.14 fd0621d0f update go to go1.20.4 155f7d9e2 cli/command/system: add utilities for printing 1e89037d7 cli/command/system: prettyInfo: accept Streams 8cfefc6ea cli/command/system: prettyPrintServerInfo: accept Streams ba7a200f0 cli/command/system: prettyPrintClientInfo: accept Streams 73938cd61 cli/command/system: printSwarmInfo(): accept io.Writer 2d0ea86b0 cli/command/system: use io.Writer for printing warnings be6f4cd56 cli/command/system: prettyPrintServerInfo: refactor printing "runtimes" 1d70f7cdb cli/command/system: prettyPrintServerInfo: rename var that collided with import 416e55bed github.com/docker/cli/cli/command/system: add BenchmarkPrettyPrintInfo f233becf9 vendor: github.com/moby/term v0.5.0 bd2c26328 vendor: github.com/docker/docker v24.0.0-rc.1 f02301ab5 remove uses of deprecated VirtualSize field eeaaf5d01 e2e: Update alpine to 3.17.2 4569378ca e2e: Match notary server version with the main Dockerfile ec5504a83 test/e2e: Use "frozen" tag to reference test images 41b6ec07c e2e: Skip tests with platform-specific digests on other platforms 962e22c31 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230406225228-75e92ce14ff7 72192c75c vendor: github.com/moby/buildkit v0.11.6 c177e2060 vendor: github.com/creack/pty v1.1.18 e693e7f3b Docs freshness updates 1c1fca4eb docs: update deprecation status of "overlay" and "AuFS" c180202ce cli/command: remove deprecated Stream types 4e19b8128 docs: update deprecation status for overlay2.override_kernel_check 0dec5d20a volumes: prune: add --all / -a option ff7f76af7 Handle empty DOCKER_BUILDKIT like unset 271b9667e Swarm: allow additional properties in `build` e2bfd2199 cli/compose: add schema 3.11 (no changes with 3.10 yet) 6c4c3c23c build(deps): bump docker/bake-action from 2 to 3 8ef8f4131 man/dockerd.8: assorted formatting fixes e3cb324ed man/dockerd.8: escape asterisks and underscores a4bcabc7d vendor: github.com/docker/docker v24.0.0-beta.2 0286e36bb vendor: github.com/opencontainers/runc v1.1.6 1f1a6c5a8 vendor: golang.org/x/net v0.8.0 6e2163a71 vendor: golang.org/x/text v0.8.0 551d519b5 vendor: golang.org/x/term v0.6.0 c97c3211b docs: deprecation: OOM-score adjust for the daemon 88be16cb5 cli/command/container: implement `docker run --annotation` 6f415d240 docs: update deprecation status of BuildKit "buildInfo" for v24.0.0 da3871fd8 cli/command/system: printServerWarnings: use client API version from info be307c579 cli/command/system: prettyPrintServerInfo: move out collecting username 71fde20e1 cli/command/system: prettyPrintServerInfo: simplify username 375b17a31 docker info: don't print "registry" (IndexServerAddress) b87ed3435 cli/command: deprecate EncodeAuthToBase64 5d856a5d9 cli/command/container: pullImage: use DisplayJSONMessagesToStream utility b9b98aee5 cli/command/container/create: pullImage(): use RetrieveAuthTokenFromImage a27acd62b cli/command/container/create: pullImage() remove intermediate vars e0b47cc2c cli/command/image: imagePullPrivileged: remove intermediate variables 372bb56ad cli/command: replace EncodeAuthToBase64 for registry.EncodeAuthConfig 534bfc230 cli/command/registry: remove intermediate var that collided 5e76d41bf cli/command: ConfigureAuth: fix links to related tickets 68d791e56 cli/command: ConfigureAuth: trim whitespace both for username and password d0ec8fa5c cli/command: ConfigureAuth: fix terminal state not being restored on error c846428cb docs: update dockerd usage output for new proxy-options c730a8eb9 docs/reference: dockerd: remove default oom-score-adjust c20974361 docs/reference: dockerd: update seccomp flag description 32bc91200 docs/reference: dockerd: use table for env-vars 370174800 docs/reference: use table for proxy env-vars 879e0804a docs/reference: reformat env-vars table, and simplify 4a863df57 docs/reference: remove mention of DOCKER_NOWARN_KERNEL_VERSION c388fe4de cli: make cobra templates a const 341c843ac ci: remove fetch depth 0 for validate jobs 25ed7847e ci: add validation for generated markdown 04df70025 docs: deprecated: fix version (23.1.0 -> 24.0.0) 5bd359132 cli/command: fix documentation for ResolveAuthConfig 8ee771114 docker info: include Client Version and "platform name" 3347d7b5a cli/command/system: add newClientVersion() utility 3124e779c cli/command/system: clientVersion: make all fields "omitempty" 9202bef4a cli/command/system: add platformInfo type, and fix "omitempty" 5d37acdde cli/command/system:remove versionInfo.ServerOK() utility 5d33b7276 docs: update engine versions in some examples 23bd746c4 fix docker version --format=json not outputting json format 80640bca7 cli/command/system: make default version template a const 46234b82e fix docker info --format=json not outputting json format 1aaa179d9 cli/command/formatter: export JSONFormat const 37e02ff21 docker ps: print warning if both --format and --quiet are set f52290559 docker ps: always use --quiet, also combined with --format f36e4b094 cli/command/container: rename vars that collided c25b8f803 vendor: github.com/spf13/cobra v1.7.0 ca1d0eb90 Update version to v24.0.0-dev 08a794dc0 docs: regenerate markdown docs 37f234fbe scripts/docs/generate-md.sh: fix location of generate code 591bead14 update go to go1.20.3 683e4bf0c Fix plugin completion parsing for plugins using `ShellCompDirectiveFilterFileExt` 808032652 cli/streams: minor refactoring and docs touch-ups 66a1c3bab cli/config/configfile: remove deprecated StackOrchestrator field 328fac3a6 cli/context/docker: remove deprecated Endpoint.TLSPassword aace828bb cli/flags: remove deprecated CommonOptions, NewCommonOptions 8b418be6d cli/context/store: remove deprecated error-utilities 3405eb1f4 cli/command/formatter: remove deprecated KubernetesEndpoint 817897f89 cli/command: fix deprecation comments for Stream types 89583b92b improve plugins listing performance fc560038e vendor: github.com/docker/docker v24.0.0-beta.1 e14f5fc1a revert "improve plugins discovery performance" 05cffcbed vendor: github.com/docker/docker 7c93e4a09be1 (v24.0.0-dev) a36a54d3c vendor: github.com/containerd/containerd v1.6.20 f4b22fb6c vendor: github.com/opencontainers/image-spec v1.1.0-rc2.0.20221005185240-3a7f492d3f1b eb392ff4c cp: Do not block transfer on writing to terminal 7189716d5 replace uses of deprecated api/types.AuthConfig bfa79fd75 vendor: github.com/docker/docker master (v24.0.0-dev) e86d2f411 vendor: github.com/moby/buildkit v0.11.5 cd9c6a4c0 vendor: github.com/klauspost/compress v1.16.3 5843fbd5f vendor: github.com/imdario/mergo v0.3.13 149d28963 vendor: golang.org/x/sys v0.6.0 6dca335d0 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230315203717-e28e8ba9bc83 4389c966f vendor: github.com/opencontainers/runc v1.1.5 a79828287 update to go1.20.2 b8747b0f9 update golangci-lint to v1.52.2 399ded9b9 internal/test: FakeCli: remove name for unused arg (revive) 20a70cb53 internal/test/notary: remove name for unused arg (revive) 90380d957 cli/connhelper/commandconn: remove name for unused arg (revive) dd6ede210 cli/config/configfile: mockNativeStore: remove name for unused arg (revive) 7c8680c69 cli/compose/schema: remove name for unused arg (revive) 6355bcee6 cli/compose/convert: fakeClient: remove name for unused arg (revive) 607f290f6 cli/command/volume: remove name for unused arg (revive) 546cf6d98 cli/command/trust: fakeClient: remove name for unused arg (revive) b32b28041 cli/command/task: fakeClient: remove name for unused arg (revive) 40a51d554 cli/command/swarm: fakeClient: remove name for unused arg (revive) b0d0b0efc cli/command/stack: fakeClient: remove name for unused arg (revive) c69640d8c cli/command/service: fakeClient: remove name for unused arg (revive) 5254081fd cli/command/registry: fakeClient: remove name for unused arg (revive) da3416c02 cli/command/plugin: fakeClient: remove name for unused arg (revive) 625988c3a cli/command/node: fakeClient: remove name for unused arg (revive) 92d9e3bf6 cli/command/network: fakeClient: remove name for unused arg (revive) 316c4992c cli/command/image: fakeClient: remove name for unused arg (revive) ae5a86bb8 cli/command/image/build: remove name for unused arg (revive) 38ef40ee7 cli/command/idresolver: fakeClient: remove name for unused arg (revive) 45b5676ac cli/command/container: fakeClient: remove name for unused arg (revive) 5563c5a91 cli/command/checkpoint: fakeClient: remove name for unused arg (revive) 9dd012aa5 cli/command/secret: fakeClient: include context in fake client (revive) 66c66bdce cli/command/config: fakeClient: include context in fake client (revive) ac024a4d8 internal/test/network: FakeClient: embed interface to remove boilerplating a2d532819 cli/trust: remove name for unused args (revive) f5fad186c opts: NormalizeCapability(): fix redefinition of the built-in function (revive) 9252fae83 cli/registry/client: AuthorizeRequest(): remove name for unused arg (revive) 92506afd4 cli/command/service/progress: remove name for unused parameter (revive) c3d7f167b cli/command: RunPrune(): remove name for unused "all" parameter (revive) b4aff3a14 cli/command/completion: NoComplete(): remove unused argument (revive) f08252c10 cli/command/stack: deprecate now obsolete wrappers 78c474539 cli/command/context: remove redundant if ...; err != nil check (revive) be97731f1 cli/command/container: fix redefinition of the built-in function close (revive) b9a1b0928 cp: Make gocyclo happy 90b7bc36d cp: Reduce number of progress updates efd011b79 cp: reduce branching in progress printer e4436853e gha: align stray go 1.19.4 version 9335690a6 Fix grammar in docs by adding omitted word ccae6e929 cp: Improve tty flashing on progress updates f27927d93 cp: do not emit progress if stderr is not a term a39958846 vendor: github.com/docker/docker v23.0.2 c39c711a1 load plugin command stubs when required 62f2358b9 improve plugins discovery performance bebdb6fa2 ci: enhanced build workflow bec5d37e9 don't use null values in the bake definition b201ce5ef e2e: update notary certificates c6c33380d e2e: increase tests certificates duration (10 years) d234a81de bake target to generate certs for e2e tets 3ce95c7af Dockerfile: build binary if no target specified b854eff30 Dockerfile: align go version 0ba820ed0 cli/trust: remove special handling for "plugin" Class a3d56e7d0 cli/command: remove deprecated ElectAuthServer() 742881fc5 cli/command: fix imports formatting e3fa7280a cli/command: ElectAuthServer: fix deprecation comment db827d583 cli/command/volume: suppress err output in tests aa0aa4a6d Add bash completion for available plugins 8805f8ea2 build(deps): bump actions/setup-go from 3 to 4 e60c748c1 vendor: github.com/moby/buildkit v0.11.4 6c8cc226f vendor: google.golang.org/grpc v1.50.1 d213548bd vendor: golang.org/x/net v0.7.0 3a0d492d1 vendor: golang.org/x/term v0.5.0 f40bbf4f7 vendor: golang.org/x/time v0.3.0 a85537d34 vendor: golang.org/x/text v0.7.0 3e9c6e84c vendor: golang.org/x/sys v0.5.0 ca8783ef4 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230309194213-a745a8755ce3 33806760a vendor: github.com/containerd/containerd v1.6.19 71e495aa5 vendor: github.com/docker/docker v23.0.1 74c4ed417 Dockerfile: update buildx to v0.10.4 23da1cec6 update to go1.19.7 012b77952 stack: Change unexpected environment variable error a47058bbd stack/loader: Ignore cmd.exe special env variables 25ebf0ec9 connhelper: Allow socket path when using SSH 973333448 Don't automatically request size if `--size` was explicitly set to `false` 8bc1aacea docs: Deprecate buildkit's build information 89687d5b3 formatter: Consider empty RepoTags and RepoDigests as dangling a1953e19b test/cli: Use empty array as empty output of images/json e636747a1 docs: drop dated comments about graphdrivers dac79b19a Dockerfile: update buildx to v0.10.3 release notes: https://github.com/docker/buildx/releases/tag/v0.10.3 c2487c299 context: avoid corrupt file writes e921e103a update to go1.19.6 d2f726d5a changed the container name in docker stats page de9b47ae6 Fix styling of arguments 0f3959868 ci: fix branch filter pattern 4254cd19b MAINTAINERS: add myself as curator bbebebaed vendor: github.com/docker/docker v23.0.0 5195db1ff vendor: github.com/containerd/containerd v1.6.16 9b5ceb52b cli/command/container: exit 126 on EISDIR error 56051b84b Fix bad ThrottleDevice path 74973adaa cli/command: embed "Streams" interface in "Cli" 2753057c4 contrib/completion: bash `nounset` mode fixes Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2023-06-07 16:40:22 -04:00
Bruce Ashfield	d38fffa859	moby: update to v23.0.6 ... Bumping moby to version v23.0.6-2-gcb3fd005d4, which comprises the following commits: e94c22cc39 vendor: github.com/docker/distribution v2.8.2 e73310d8c9 update runc binary to v1.1.7 3f0402cb68 update runc binary to v1.1.6 edadebe177 update containerd binary to v1.6.21 14661fc010 vendor: github.com/containerd/containerd v1.6.21 e00f6efb20 Vendor containerd 1.6.x with the readonly mount fix bd4620f6ee vendor: github.com/containerd/containerd v1.6.20 d06cf03729 vendor: re-vendor to add missing file cf7742ea7c vendor: opencontainers/image-spec v1.1.0-rc2.0.20221005185240-3a7f492d3f1b 382e9ebbf6 vendor: github.com/containerd/ttrpc v1.1.1 e0843f264d Update `github.com/containerd/containerd` to the HEAD of `release/1.6` and vendor 94fcd2d2ef d/graphdriver/copy: support src fs w/o xattr support 70dbd2c870 [23.0] update go to go1.19.9 fe0a414613 Use the image service instead of the reference store for tagging 40ec0eb9fe vendor: github.com/opencontainers/runc v1.1.5 227d3f39a3 daemon: set docker0 subpool as the IPAM pool c82be35412 libnetwork: clean up inDelete network atomically ccccb7a170 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230315203717-e28e8ba9bc83 8a6bec6e16 Silence GRPC logs unless our log level is debug 844fd50c67 Added timeout to validate job in github actions 8cec683574 Dockerfile: update xx to 1.2.1 7ff53c3c78 Update delve version 4d57ee692d TestLogs: Increase stop check poll timeout on Windows 838d5ea058 chore: use http constants to replace numbers 61d084593c client: deprecate NewClient properly 28b694d32d awslogs: fix non-blocking log drop bug 3731ce10d4 Fix argument quoting bugs in dockerd-rootless.sh 23774ada04 vendor: github.com/moby/buildkit v0.10.7-0.20230412161310-d52b2d584242 9277e64444 vendor: github.com/ishidawataru/sctp v0.0.0-20230406120618-7ff4192f6ff2 09fbbd5677 docker-rootless-setuptools.sh: improve readability of messages d3e52936c3 [23.0] update go to go1.19.8 a0a597cbbe [23.0] fix vendor.mod: add hashicorp/go-multierror as direct dependency 063d3a6f1a daemon: let libnetwork assign default bridge IPAM 389e18081d update containerd binary to v1.6.20 348544e6e8 libnet/d/windows: log EnableInternalDNS val after setting it 3923e302a4 update runc binary to v1.1.5 f3946c14fe integration-cli: Enable TestExecStartFails on Windows b87f7f18b8 libnet/d/overlay: insert the input-drop rule c6bf3071fe StartWithLogFile: Fix d.cmd race 7f49ca259b TestDaemonRestartKillContainers: Fix loop capture 98cbcb8003 libnet/d/overlay: add BPF-powered VNI matcher 5c5fac2374 libnet/d/overlay: extract VNI match rule builder c492a22287 libn/d/overlay: enforce encryption on sandbox init 018edb0284 libnet/d/overlay: document some encryption code Bumping libnetwork to version v0.7.0-dev.3-1872-g3f004841, which comprises the following commits: dbbf124d Clean up inDelete network atomically d4d07f4a d/windows: log EnableInternalDNS val after setting it 91f0d508 update maintainers c5aa85f9 drivers/overlay: insert the input-drop rule bef66946 drivers/overlay: appease the old deprecated linter a94fe95b drivers/overlay: add BPF-powered VNI matcher e0376b6c drivers/overlay: extract VNI match rule builder f1945d37 drivers/overlay: enforce encryption on sandbox init 97442407 drivers/overlay: document some encryption code Bumping docker-cli to version v23.0.6-8-g44a7d9537, which comprises the following commits: a98af2b39 vendor: github.com/docker/distribution v2.8.2 6f353c800 cli-plugins/manager: fix deprecation comment of Metadata.Experimental 63b205048 Update tag docs to clarify name c76773b19 docs: update description for docker -H flag c769f2079 [23.0] update go to go1.19.9 802f17488 [23.0] vendor: github.com/docker/docker v23.0.5 498743aed [23.0] vendor: github.com/moby/swarmkit/v2 v2.0.0-20230315203717-e28e8ba9bc83 fde09d1d8 [23.0] vendor: github.com/opencontainers/runc v1.1.5 3cda7c30c [23.0] vendor: github.com/docker/docker v23.0.4 6c0f9022c Docs freshness updates 17357a778 build(deps): bump docker/bake-action from 2 to 3 2cf68537d ci: remove fetch depth 0 for validate jobs 4a4291708 ci: add validation for generated markdown f914316a9 fix docker version --format=json not outputting json format 9dfe5a29e cli/command/system: make default version template a const 2c1fde223 fix docker info --format=json not outputting json format 99124087e cli/command/formatter: export JSONFormat const 86e79b55e volumes: prune: add --all / -a option ada43812d cli/command/volume: suppress err output in tests c648e0b06 Handle empty DOCKER_BUILDKIT like unset b6cd3c85b docs: update dockerd usage output for new proxy-options aa85421ff docs/reference: dockerd: remove default oom-score-adjust 6bc4bf4f0 docs/reference: dockerd: update seccomp flag description 8a35f92ff docs/reference: dockerd: use table for env-vars 2cb152c41 docs/reference: use table for proxy env-vars 623da1997 docs/reference: reformat env-vars table, and simplify e76242fff docs/reference: remove mention of DOCKER_NOWARN_KERNEL_VERSION 4b4d7e2b4 cli/command: fix documentation for ResolveAuthConfig e67e5559d docs: deprecated: fix version (23.1.0 -> 24.0.0) a8e3b4b85 docs: update engine versions in some examples f88c159c7 [23.0] vendor: github.com/docker/docker v23.0.3 6c052fcda vendor: github.com/docker/docker v23.0.2 079e80889 vendor: golang.org/x/net v0.7.0 ff448ff45 vendor: golang.org/x/term v0.5.0 476933b68 vendor: golang.org/x/time v0.3.0 6131fe9e4 vendor: golang.org/x/text v0.7.0 bbc791ed7 vendor: golang.org/x/sys v0.5.0 dd6f77bba vendor: github.com/moby/swarmkit/v2 v2.0.0-20230309194213-a745a8755ce3 cb338ec97 vendor: github.com/containerd/containerd v1.6.19 ffafb38e3 vendor: github.com/docker/docker v23.0.1 a763e5114 Fix plugin completion parsing for plugins using `ShellCompDirectiveFilterFileExt` 3c7de6454 Fix grammar in docs by adding omitted word 3d0d576af ci: enhanced build workflow 2609bd23f docs: regenerate markdown docs 5fd2c0850 scripts/docs/generate-md.sh: fix location of generate code 5cd7710a0 update go to go1.19.8 209e9c0c1 cp: Do not block transfer on writing to terminal ce68ce7ae cp: Make gocyclo happy c28cb35c4 cp: Reduce number of progress updates 948dfa91c cp: reduce branching in progress printer f813c9639 cp: Improve tty flashing on progress updates 97d91f13a cp: do not emit progress if stderr is not a term 6efc4eacc cli/command: fix deprecation comments for Stream types c7cdab58d improve plugins listing performance d93d78588 load plugin command stubs when required 8e38271f2 gha: align stray go 1.19.4 version f6643207a don't use null values in the bake definition f381e0842 Dockerfile: align go version Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2023-06-07 16:40:22 -04:00
Chen Qi	668871ce79	docker-moby: fix docker run on NFS ... For now, a simple `docker run -it alpine' fails on NFS. This regression was introduced by a commit[1] which makes DirCopy error out if failing to copy xattr. As the vfs storage driver is supposed to just work on any filesystem[2], we need to allow its failure on copying extended attributes as the support for xattr depends on filesystem. [1] 31f654a704 [2] https://docs.docker.com/storage/storagedriver/select-storage-driver/ Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2023-05-17 11:35:04 -04:00
Bruce Ashfield	3f692e3fe1	docker: start depreciation of docker-ce ... docker-ce and docker-moby are now exactly the same. To allow layers which bbappend or otherwise consume docker-ce, we merge the two recipes and leave a warning in docker-ce that it will be removed in the future. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2023-05-03 12:17:06 -04:00
Bruce Ashfield	a77ed260c4	docker-ce: update to v23.0.2 ... Bumping docker to version v23.0.2, which comprises the following commits: c6bf3071fe StartWithLogFile: Fix d.cmd race 7f49ca259b TestDaemonRestartKillContainers: Fix loop capture 1363b3e372 ci: disable testing mergeop and diffop with the dockerd worker d43958b50b builder-next: disable mergeop and diffop fd80ca60da Fix pruning anon volume created from image config ae0cc08cab Dockerfile: Update shfmt to 3.6.0 42751cc892 contrib/dockerize-disk.sh: Fix indentation 6c65a9a07f volumes: fix error-handling when removing volumes with swarm enabled e3c642d1ea integration/volumes: TestVolumesRemove: add coverage for force/no-force c48f7fd12c [23.0] update to go1.19.7 f3416271a3 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230309194213-a745a8755ce3 3bd2fc8d62 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230302163403-80a528a86877 a79be4cf31 vendor: github.com/moby/buildkit v0.10.7-0.20230306143919-70f2ad56d3e5 6ac39568ee libnet/ipam: fix racy, flaky unit test 7158f76b8b vendor: github.com/containerd/containerd v1.6.19 67990f983b vendor: github.com/Microsoft/hcsshim v0.9.7 3125aa0aef [23.0] update containerd binary to v1.6.19 b1d9012969 Wait longer for exit events on Windows 2337258d28 libnet/networkdb: fix nil-dereference panic in test Bumping libnetwork to version v0.7.0-dev.3-1861-g25ec449c, which comprises the following commits: 91f0d508 update maintainers 615c9801 libnetwork/overlay:fix join sandbox deadlock 047ac186 Cleanup servicebindings only on Windows 6f36306d Delay network deletion until after lb cleanup a9c349a6 Log HNS policylist removal failures Bumping docker-cli to version v23.0.2, which comprises the following commits: f6643207a don't use null values in the bake definition f381e0842 Dockerfile: align go version d3a36fc38 e2e: update notary certificates 59bb07f2e e2e: increase tests certificates duration (10 years) 80f27987f bake target to generate certs for e2e tets a43c9f344 Don't automatically request size if `--size` was explicitly set to `false` 114e17ac4 cli/command: fix imports formatting e2c402118 cli/command: ElectAuthServer: fix deprecation comment d07453890 Add bash completion for available plugins 90a72a589 Dockerfile: update buildx to v0.10.4 4c63110a9 update to go1.19.7 b61b5a987 stack: Change unexpected environment variable error 84fe451ec stack/loader: Ignore cmd.exe special env variables 95066ff3a Dockerfile: update buildx to v0.10.3 release notes: https://github.com/docker/buildx/releases/tag/v0.10.3 0dbf70fad docs: Deprecate buildkit's build information 5af8077ee formatter: Consider empty RepoTags and RepoDigests as dangling 57a502772 context: avoid corrupt file writes 14ac8db96 test/cli: Use empty array as empty output of images/json 1810e922a docs: drop dated comments about graphdrivers 5051d82a1 update to go1.19.6 7f4e3ead7 changed the container name in docker stats page Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2023-04-05 16:03:56 -04:00
Bruce Ashfield	3516cca605	moby: update to v23.0.2 ... Bumping moby to version v23.0.2, which comprises the following commits: c6bf3071fe StartWithLogFile: Fix d.cmd race 7f49ca259b TestDaemonRestartKillContainers: Fix loop capture 1363b3e372 ci: disable testing mergeop and diffop with the dockerd worker d43958b50b builder-next: disable mergeop and diffop fd80ca60da Fix pruning anon volume created from image config ae0cc08cab Dockerfile: Update shfmt to 3.6.0 42751cc892 contrib/dockerize-disk.sh: Fix indentation 6c65a9a07f volumes: fix error-handling when removing volumes with swarm enabled e3c642d1ea integration/volumes: TestVolumesRemove: add coverage for force/no-force c48f7fd12c [23.0] update to go1.19.7 f3416271a3 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230309194213-a745a8755ce3 3bd2fc8d62 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230302163403-80a528a86877 a79be4cf31 vendor: github.com/moby/buildkit v0.10.7-0.20230306143919-70f2ad56d3e5 6ac39568ee libnet/ipam: fix racy, flaky unit test 7158f76b8b vendor: github.com/containerd/containerd v1.6.19 67990f983b vendor: github.com/Microsoft/hcsshim v0.9.7 3125aa0aef [23.0] update containerd binary to v1.6.19 b1d9012969 Wait longer for exit events on Windows 2337258d28 libnet/networkdb: fix nil-dereference panic in test Bumping libnetwork to version v0.7.0-dev.3-1861-g25ec449c, which comprises the following commits: 91f0d508 update maintainers 615c9801 libnetwork/overlay:fix join sandbox deadlock 047ac186 Cleanup servicebindings only on Windows 6f36306d Delay network deletion until after lb cleanup a9c349a6 Log HNS policylist removal failures docker-moby/cli: update to -tip f6643207a don't use null values in the bake definition f381e0842 Dockerfile: align go version d3a36fc38 e2e: update notary certificates 59bb07f2e e2e: increase tests certificates duration (10 years) 80f27987f bake target to generate certs for e2e tets a43c9f344 Don't automatically request size if `--size` was explicitly set to `false` 114e17ac4 cli/command: fix imports formatting e2c402118 cli/command: ElectAuthServer: fix deprecation comment d07453890 Add bash completion for available plugins 90a72a589 Dockerfile: update buildx to v0.10.4 4c63110a9 update to go1.19.7 b61b5a987 stack: Change unexpected environment variable error 84fe451ec stack/loader: Ignore cmd.exe special env variables 95066ff3a Dockerfile: update buildx to v0.10.3 release notes: https://github.com/docker/buildx/releases/tag/v0.10.3 0dbf70fad docs: Deprecate buildkit's build information 5af8077ee formatter: Consider empty RepoTags and RepoDigests as dangling 57a502772 context: avoid corrupt file writes 14ac8db96 test/cli: Use empty array as empty output of images/json 1810e922a docs: drop dated comments about graphdrivers 5051d82a1 update to go1.19.6 7f4e3ead7 changed the container name in docker stats page Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2023-04-05 16:03:55 -04:00
Bruce Ashfield	fd0958ed9e	containers: use VIRTUAL-RUNTIME variable to allow container runtime flexibility ... Rather than using virtual-runc (which choses between the old docker and opencontainer variants), use the newly added VIRTUAL-RUNTIME_container-runtime variable, which allows switching betwen runc and crun. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2023-03-08 17:08:02 -05:00
Bruce Ashfield	aaebd97ca8	docker-ce: update to v23.0.1-tip ... Bumping docker to version v23.0.1-34-gbfc8e1ae36, which comprises the following commits: 2337258d28 libnet/networkdb: fix nil-dereference panic in test d6d48dd95d Upgrade to golangci-lint v1.51.2 c4b655830d Migrate away from things deprecated in Go 1.20 c6bf777eae d/l/awslogs: fix ineffective Add in test da10937926 daemon: handle EISDIR error from runtime 938ed9a1ed distribution/xfer: make off-by-one error a feature ca712d6947 Fix loop-closure bugs in tests 2c55b264f7 Upgrade containerd/fifo to v1.1.0 8fd038fb71 dependency: bump go.etcd.io/bbolt to v1.3.7 87a1517f8f vendor: golang.org/x/net v0.7.0 d15010643c vendor: golang.org/x/text v0.7.0 0727310950 vendor: golang.org/x/sys v0.5.0 b8c448ef24 Revert "apparmor: Check if apparmor_parser is available" a3f5319563 vendor: github.com/containerd/containerd v1.6.18 52d667794f [23.0] update containerd binary to v1.6.18 11715a05ca update to go1.19.6 962c238c17 libnet/networkdb: use atomics for stats counters 20d05e235e libnetwork/networkdb: make go test -race ./libnetwork/networkdb pass c2d69d06b0 api/s/r/swarm: log backend errors at Debug level 7c09feb58c libnetwork: check DNS loopback with user DNS opts 6c2637be11 Do not log connection info before the connection exists 4002fa877b vendor: update buildkit to latest v0.10 Bumping docker-cli to version v23.0.1-2-g1ab7665be, which comprises the following commits: 1810e922a docs: drop dated comments about graphdrivers 27b19a6ac ci: fix branch filter pattern Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2023-03-08 17:08:01 -05:00
Bruce Ashfield	43b4f4ea95	moby: update to v23.01-tip ... Bumping moby to version v23.0.1-34-gbfc8e1ae36, which comprises the following commits: 2337258d28 libnet/networkdb: fix nil-dereference panic in test d6d48dd95d Upgrade to golangci-lint v1.51.2 c4b655830d Migrate away from things deprecated in Go 1.20 c6bf777eae d/l/awslogs: fix ineffective Add in test da10937926 daemon: handle EISDIR error from runtime 938ed9a1ed distribution/xfer: make off-by-one error a feature ca712d6947 Fix loop-closure bugs in tests 2c55b264f7 Upgrade containerd/fifo to v1.1.0 8fd038fb71 dependency: bump go.etcd.io/bbolt to v1.3.7 87a1517f8f vendor: golang.org/x/net v0.7.0 d15010643c vendor: golang.org/x/text v0.7.0 0727310950 vendor: golang.org/x/sys v0.5.0 b8c448ef24 Revert "apparmor: Check if apparmor_parser is available" a3f5319563 vendor: github.com/containerd/containerd v1.6.18 52d667794f [23.0] update containerd binary to v1.6.18 11715a05ca update to go1.19.6 962c238c17 libnet/networkdb: use atomics for stats counters 20d05e235e libnetwork/networkdb: make go test -race ./libnetwork/networkdb pass c2d69d06b0 api/s/r/swarm: log backend errors at Debug level 7c09feb58c libnetwork: check DNS loopback with user DNS opts 6c2637be11 Do not log connection info before the connection exists 4002fa877b vendor: update buildkit to latest v0.10 Bumping docker-cli to version v23.0.1-2-g1ab7665be, which comprises the following commits: 1810e922a docs: drop dated comments about graphdrivers 27b19a6ac ci: fix branch filter pattern Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2023-03-08 17:08:01 -05:00
Martin Jansa	9a78db8a91	docker-*: prevent -march being exported in arm builds ... * don't export CGO_CFLAGS/CGO_CXXFLAGS like the previous version didn't before: https://git.yoctoproject.org/meta-virtualization/commit/?id=aceed7bf95cc8a42c8f470d8edf3c6f03d49da00 * both docker-moby and docker-ce have the same issue as shown with qemuarm build: docker-moby: http://errors.yoctoproject.org/Errors/Details/690021/ docker-ce: http://errors.yoctoproject.org/Errors/Details/690020/ Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2023-02-21 10:11:32 -05:00
Bruce Ashfield	90ea5b7f28	docker-ce: update to v23.0.1 ... Bumping docker to version v23.0.1, which comprises the following commits: 4002fa877b vendor: update buildkit to latest v0.10 e697c9365f builder: define GetRemotes for the worker 4c544c3d5f ci: fix branch filter pattern in buildkit workflow 06aca27cc1 ci: enhance tests distribution 001b2e778a ci: update gotestlist to 0.3.1 38b70ebc3b apparmor: Check if apparmor_parser is available 8a5d341d94 [23.0] vendor: github.com/moby/buildkit v0.10.7-0.20230206124303-b8fdb4b78da0 427101f656 libnet/d/ipvlan: gracefully migrate from older dbs 5b7142073f Dockerfile: configure code dir as "safe" directory 7e03250780 graphdriver/overlay2: usingMetacopy ENOTSUP is non-fatal 975bdb2c96 daemon: identify container exits by ProcessID 610250f06e vendor: github.com/containerd/containerd v1.6.16 63a0f1fe09 vendor: github.com/pelletier/go-toml v1.9.5 699e853be3 hack: display build cmd when DOCKER_DEBUG set b7e0725e98 hack: remove unnecessary vars in make.sh script 96746238b2 hack: remove ORIG_BUILDFLAGS var df2fe70049 hack: remove -installsuffix build flag 8b83e09b9c client: improve error messaging on crash 26e9face5a [23.0] update containerd binary to v1.6.16 6641852d51 rootless: support `--ipc=host` 8fc49af4ab hack: check if cross-compiling before setting ARM target name 30134ab177 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230119195359-904c221ac281 3da45c0fe7 fix blockThreshold full bug 941a07b339 ioutils: add regression test for bytespipe deadlock a21381a55a Dockerfile: prefer ld for building against arm64 2616ebc5ac libnetwork: Support IPv6 in arrangeUserFilterRule() 7a5f3f8053 libnetwork: fix empty-lines (revive) 7cfd4b3471 libnetwork/config: rename ParseConfigOptions() to New() 1090c5fd4c libnetwork/config: inline LoadDefaultScopes() c93e1e9e66 libnetwork/config: merge DaemonCfg into Config 031fb72313 libnetwork: remove old integration tests a96a97bf47 libnetwork/config: remove ParseConfig() 9b383dbd51 libnetwork/config: inline ProcessOptions bed115e664 libnetwork/config: remove "Experimental" and "Debug" options 64cbbaa883 Dockerfile: smoke tests for static builds 4100226e27 Dockerfile: use clang to build dockerd/docker-proxy dadeec4205 Disable chrootarchive.init() on Windows f328486cb3 Add GetLibHome stub for non-linux OS 8e83d28f31 vendor: golang.org/x/net v0.5.0 06eb6ab794 vendor: golang.org/x/text v0.6.0 31cf0bf181 vendor: golang.org/x/sys v0.4.0 0e4548bbe1 Dockerfile: fix PKG_CONFIG for xx 8c12a6648b hack: name for target ARM architecture not specified 10c4ada049 hack: typo in displayed platform name 322149038a Add additional loggig in case of error of renaming runtimes-old and removing it a8926de2a1 Handle docker start inside overlayfs 524de97334 daemon/config: inform the user when the input JSON contains invalid UTF-8 0b2eecdc8a daemon/config: support alternate (common) unicode encodings using a BOM abff66b283 daemon/config: clean up tests to use common helper d9bdb61992 cmd/dockerd: use default SIGQUIT behaviour c627132dc8 vendor: github.com/moby/ipvs v1.1.0 13a31b67de vendor: github.com/vishvananda/netns v0.0.2 bd5d9f3190 vendor: github.com/vishvananda/netns v0.0.1 c8262e912f libnetwork: Remove iptables nat rule when hairpin is disabled 12e3398f64 update to go1.19.5 076d57104a docs: api: synchronise versioned API docs (v1.39 - v1.41) 8ce4ae1345 docs: api: synchronise versioned API docs (v1.42) f0fe353ca6 api: swagger: add errorDetail to CreateImageInfo 04371160f8 api: docs: add errorDetail to CreateImageInfo (v1.42) e753cce70f docs: add 401 to possible status codes of /auth 4d7792417e ci: update buildkit to fix integration tests 5802ca9e08 rootless: move ./rootless to ./pkg/rootless 33572e98c1 Use user paths for plugin discovery in rootless mode 52c7a5d96b daemon/config: New(): initialize config with platform-specific defaults 101bd10d0e daemon/config: group JSON preprocessing steps def679d0e0 daemon/config: ignore UTF-8 BOM in config JSON cf8c728f3c graphdriver/btrfs: needs kernel headers >= 4.12, not >= 4.7 e40c2410ca Dockerfile.*: drop libbtrfs 51a65e01ac PACKAGERS: update Btrfs graphdriver dependencies 0cf2b14994 graphdriver/btrfs: use free wrapper consistently 21e6c282e6 graphdriver/btrfs: use kernel UAPI headers 42e7a15a63 graphdriver/btrfs: drop version information 01883e1177 daemon/graphdriver: use strconv instead of fmt.Sprintf 25939ee45e libnetwork: improve logs for DNS failures 691b44b4c3 vendor: github.com/containerd/containerd v1.6.15 5aa0c2cae2 [23.0] update containerd binary to v1.6.15 6acc1701ea integration-cli: Fix hanging TestLogsFollowGoroutines* 8dfd907478 hack: restore copy_binaries func 0d1aba547e hack/make: Don't add -buildmode=pie with -race 4da19e2dca Clear conntrack entries for published UDP ports fe097e018c Fix volume CreatedAt being altered on initialization d778bbab84 docs: contributing docs update for cross comp 2dd577955c Dockerfile: add "all" stage to build binaries and extra tools 3ef71f9085 ci: add extra steps to check artifacts 8fbfc2676f Dockerfile: rename dev stages 7e286efcd3 ci: use GITHUB_REF and GITHUB_SHA to set version and commit f29fe2daec bake: define additional vars 3b90bb6ad3 bake: define DESTDIR 171471b613 hack: update buildmode pie condition 7d8c689923 hack: do not set buildmode pie for statically linked binary 75596bee28 hack: use PKG_CONFIG var when checking libdevmapper 29758a067f IAmStatic not used anymore 5d4ddce5ed hack: remove containerutility script a85bdbe1ca Dockerfile: use TARGETPLATFORM to build Docker 6a0a2c4f79 Always use iptables -C to look for rules 91f2d963c6 Merge iptables.probe() into iptables.detectIptables() 2bf66f725c Check ipt options before looking for ip6t 1b27ab4c73 libnetwork/iptables: Fix test panic when execute only one test 316231cced daemon/graphdriver/devicemapper: simplify Udev log, and update link 770ace39d8 daemon/logger/gcplogs: remove ensureHomeIfIAmStatic workaround 5e4464798f api: can marshal and unmarshal when args.fields is empty 515219b716 Update delve version 0393897695 daemon/graphdriver/btrfs: workaround field rename in btrfs-progs 6.1 7199300239 cmd/docker-proxy: add "-v / --version" flag e9075f70c7 gha: update buildkit to fix integration tests b2d2f012b4 errdefs: FromStatusCode() don't log "FIXME" debug message 9980e64341 vendor: github.com/containerd/containerd v1.6.14 5ebd78d5f8 update containerd binary to v1.6.14 f6c2f20cee Dockerfile: delve cross build with TARGETPLATFORM 3d6908c79b Dockerfile: swagger cross build with TARGETPLATFORM 1dc34e889c Dockerfile: containerutility cross build with TARGETPLATFORM effd7661df Dockerfile: registry cross build with TARGETPLATFORM f3e3266373 Dockerfile: dockercli cross build with TARGETPLATFORM fd6316e631 Dockerfile: rootlesskit cross build with TARGETPLATFORM fbe4db5be0 Dockerfile: tini cross build with TARGETPLATFORM f9a356c7e9 Dockerfile: runc cross build with TARGETPLATFORM 6e7cc3b7e3 Dockerfile: containerd cross build with TARGETPLATFORM 582b29f587 Dockerfile: DOCKER_STATIC arg daa28fcf2d Dockerfile: add dummy stage 4cab584a9c Dockerfile: add cross compilation helper 0b12468116 vendor: github.com/containerd/containerd v1.6.13 6570b654f4 vendor: github.com/Microsoft/hcsshim v0.9.6 d8d11bca37 update containerd binary to v1.6.13 a72fb70eb0 vendor: github.com/moby/swarmkit/v2 v2.0.0-20221215132206-0da442b2780f dca58c654a daemon: drop side effect from registerLinks() 6149c333ff daemon: don't checkpoint container until registered 42bffae5ff daemon: fix GetContainer() returning (nil, nil) a6818fd4cb hack: introduce validate/no-module 45fe08c93c hack: replace go-mod-prepare.sh with wrapper script c508d13372 hack/go-mod-prepare.sh: find root robustly; make steps transparent 036398f512 hack/validate/vendor: clean up license validation step a4957d2585 hack/validate/vendor: split tidy from vendor 394eaa8495 hack/vendor.sh: allow running tidy & vendor separately d80f235c47 vendor: github.com/tinylib/msgp v1.1.6 5ca9231b44 vendor: github.com/philhofer/fwd v1.1.2 ffa2c0b517 image/store: Use errdefs for errors c0c146fc82 Remove uses of deprecated go-digest.NewDigestFromHex, go-digest.Digest.Hex 6295320d91 use consistent alias for gotest.tools/v3/assert/cmp 1cc1395fae vendor: golang.org/x/net v0.4.0 0163808dbe vendor: github.com/prometheus/client_golang v1.14.0 9b62b83429 vendor: github.com/go-logr/logr v1.2.3 d5ffdeb76c vendor: golang.org/x/crypto v0.2.0 4da8dedaab vendor: golang.org/x/net v0.2.0 b14ffffffd vendor: github.com/opencontainers/runc v1.1.3 173df30ac5 vendor: github.com/klauspost/compress v1.15.12 fe62290eed go.mod: github.com/miekg/dns v1.1.43 4952dc2844 distribution: remove unused RequireSchema2 e7b26fa1b1 use ad-hoc libtrust key f2463e1e86 distribution: use ad-hoc trustkey for tests 139080d093 daemon/config: remove and local trustkey utilities 46e0317bc1 [23.0] remove libtrust tests docker-ce/libnetwork: update to -tip f7cdd0e7 Always use iptables -C to look for rules a6106f66 Merge iptables.probe() into iptables.detectIptables() 49bb4902 Check ipt options before looking for ip6t 51413ef1 libnetwork: processEndpointCreate: Fix deadlock between getSvcRecords and processEndpointCreate e460ffec skip TestPortMappingV6Config 64b196bd circleci: update to "next-gen" convenience image 50f192e9 circleci: update to docker 20.10 88744155 update to go1.18.9, gofmt, and regenerate proto 9ed130d8 fix linting issues 5e08bdb1 Revert: Added API to set ephemeral port allocator range 047ac186 Cleanup servicebindings only on Windows 6f36306d Delay network deletion until after lb cleanup a9c349a6 Log HNS policylist removal failures Bumping docker-cli to version v23.0.1, which comprises the following commits: 27b19a6ac ci: fix branch filter pattern 14aac2c23 vendor: github.com/docker/docker v23.0.0 0cd15abfd vendor: github.com/containerd/containerd v1.6.16 168f1b55e cli/command/container: exit 126 on EISDIR error 53ed25d9b Fix bad ThrottleDevice path 9e3d5d152 Fix issue where one bad credential helper causes none to be returned 1e3622c50 docs: move doc generation scripts to subdir 9b54d860c rm: allow `docker container remove` as an alias 00070e6e2 docs: add note about MKE CA rotation, which is potentially dangerous 67b961789 manifest: save raw manifest content on download 285e137aa manifest: explicitly error if whitespace reconstruction has failed 070825bc7 manifest: add support for oci image types 551c4e9ab Fix typo in reference doc for docker Signed-off-by: Craig Osterhou <craig.osterhout@docker.com> 8672540f8 vendor: github.com/docker/docker v23.0.0-rc.3 c4fff9da1 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230119195359-904c221ac281 526e5e7c9 vendor: golang.org/x/net v0.5.0 d7f21ea9c vendor: golang.org/x/term v0.4.0 ae43eb0e0 vendor: golang.org/x/text v0.6.0 caf8b152c vendor: golang.org/x/sys v0.4.0 be30cb370 Fix section docker ps --size 5d04b1c49 note `--user` args usage restriction 9bb70217f Add extra newline after additionalHelp output 59e74b44a cli: additionalHelp() don't decorate output if it's piped fc6be6ad3 cli: pass dockerCLI's in/out/err to cobra cmds d347678cd README: fix badges e04f3dd0d docs: fix duplicated format anchor in plugin_ls c453cc687 vendor: github.com/docker/docker v23.0.0-rc.2 0d16330dd vendor: github.com/containerd/containerd v1.6.15 b9e1ad3d1 update to go1.19.5 d1f02a273 deprecated: update deprecation for btrfs on CentOS/RHEL 7 bdc7e37b3 deprecation: mark btrfs driver as deprecated for CentOS 7 and RHEL7 35d7fbc81 docs: inspect: remove trailing whitespace from example 79c9e527a docs: generate markdown 186dcf30b docs: fix anchors c49f1ccb4 update cli-docs-tool to v0.5.1 5a5b7a61d contrib: fix engine logging docs link 4595ce588 cmd: set double quotes as code delimiter 81b051298 docs: fix some more anchors 71e561780 docs: fix anchor links 3613fcc86 docs: deprecated: fix link to Docker Desktop 3.2.0 release notes b81105718 cli/rm_test: Fix TestRemoveForce race condition 42de5cc7f service/logs: use strings.Cut 3fa18636e internal/test: use strings.Cut c8bd8932a cli/config: use strings.Cut 3bed830a2 cli/compose: use strings.Cut cb19bf9f7 cli/command: use strings.Cut acc45f549 cli/command/volume: use strings.Cut 806f9eab6 cli/command/swarm: use strings.Cut b3557b284 cli/command/stack: use strings.Cut 2b06c0c42 cli/command/service: use strings.Cut f29992c0f cli/command/network: use strings.Cut 424401233 cli/command/container: use strings.Cut 6c39bc1f6 opts: use strings.Cut for handling key/value pairs a473c5b38 opts: rename logOptsValidator, fix unhandled errors in tests d84256132 remove redundant conversions and braces 720a6a823 docs/run: Fix url to blog "Docker can now run within Docker" 946bb9471 Missing exec_die event 784f66014 cli/command/container: remove unused NetworkDisabled field 6fe14e61f vendor: github.com/docker/docker v23.0.0-rc.1 (use tag) c5982f373 vendor: github.com/inconshreveable/mousetrap v1.1.0 cc859412c vendor: github.com/docker/docker v23.0.0-beta.1.0.20221221173850-cba986b34090 70d24e854 vendor: github.com/moby/swarmkit/v2 v2.0.0-20221215132206-0da442b2780f bab905a44 vendor: golang.org/x/crypto v0.2.0 929f23fcf vendor: golang.org/x/net v0.4.0 2df9ff91e vendor: golang.org/x/term v0.3.0 1b75c7c52 vendor: golang.org/x/text v0.5.0 e3e0b7a6c vendor: golang.org/x/sys v0.3.0 6f2f021b6 vendor: github.com/prometheus/client_golang v1.14.0 dedbcec46 vendor: github.com/opencontainers/runc v1.1.3 cd2098c46 vendor: github.com/klauspost/compress v1.15.12 d7869bead vendor: github.com/containerd/containerd v1.6.14 06eba426d cmd/docker: fix typo in deprecation warning 895e7a3df Added missing backslash to documentation sites cli snippet 2f733b87f cli/flags: remove outdated TODO 60d62fb72 cmd/docker: improve error message if BUILDKIT_ENABLED=0 e547881e2 Fix ssh process killed when context is done 35b42efad [completion/zsh] add volume completion Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2023-02-10 12:58:29 -05:00
Bruce Ashfield	a04b3f6c9d	moby: update to v23.0.1 ... Refresh two patches for context in the udpated docker-moby. Bumping moby to version v23.0.1, which comprises the following commits: 4002fa877b vendor: update buildkit to latest v0.10 e697c9365f builder: define GetRemotes for the worker 4c544c3d5f ci: fix branch filter pattern in buildkit workflow 06aca27cc1 ci: enhance tests distribution 001b2e778a ci: update gotestlist to 0.3.1 38b70ebc3b apparmor: Check if apparmor_parser is available 8a5d341d94 [23.0] vendor: github.com/moby/buildkit v0.10.7-0.20230206124303-b8fdb4b78da0 427101f656 libnet/d/ipvlan: gracefully migrate from older dbs 5b7142073f Dockerfile: configure code dir as "safe" directory 7e03250780 graphdriver/overlay2: usingMetacopy ENOTSUP is non-fatal 975bdb2c96 daemon: identify container exits by ProcessID 610250f06e vendor: github.com/containerd/containerd v1.6.16 63a0f1fe09 vendor: github.com/pelletier/go-toml v1.9.5 699e853be3 hack: display build cmd when DOCKER_DEBUG set b7e0725e98 hack: remove unnecessary vars in make.sh script 96746238b2 hack: remove ORIG_BUILDFLAGS var df2fe70049 hack: remove -installsuffix build flag 8b83e09b9c client: improve error messaging on crash 26e9face5a [23.0] update containerd binary to v1.6.16 6641852d51 rootless: support `--ipc=host` 8fc49af4ab hack: check if cross-compiling before setting ARM target name 30134ab177 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230119195359-904c221ac281 3da45c0fe7 fix blockThreshold full bug 941a07b339 ioutils: add regression test for bytespipe deadlock a21381a55a Dockerfile: prefer ld for building against arm64 2616ebc5ac libnetwork: Support IPv6 in arrangeUserFilterRule() 7a5f3f8053 libnetwork: fix empty-lines (revive) 7cfd4b3471 libnetwork/config: rename ParseConfigOptions() to New() 1090c5fd4c libnetwork/config: inline LoadDefaultScopes() c93e1e9e66 libnetwork/config: merge DaemonCfg into Config 031fb72313 libnetwork: remove old integration tests a96a97bf47 libnetwork/config: remove ParseConfig() 9b383dbd51 libnetwork/config: inline ProcessOptions bed115e664 libnetwork/config: remove "Experimental" and "Debug" options 64cbbaa883 Dockerfile: smoke tests for static builds 4100226e27 Dockerfile: use clang to build dockerd/docker-proxy dadeec4205 Disable chrootarchive.init() on Windows f328486cb3 Add GetLibHome stub for non-linux OS 8e83d28f31 vendor: golang.org/x/net v0.5.0 06eb6ab794 vendor: golang.org/x/text v0.6.0 31cf0bf181 vendor: golang.org/x/sys v0.4.0 0e4548bbe1 Dockerfile: fix PKG_CONFIG for xx 8c12a6648b hack: name for target ARM architecture not specified 10c4ada049 hack: typo in displayed platform name 322149038a Add additional loggig in case of error of renaming runtimes-old and removing it a8926de2a1 Handle docker start inside overlayfs 524de97334 daemon/config: inform the user when the input JSON contains invalid UTF-8 0b2eecdc8a daemon/config: support alternate (common) unicode encodings using a BOM abff66b283 daemon/config: clean up tests to use common helper d9bdb61992 cmd/dockerd: use default SIGQUIT behaviour c627132dc8 vendor: github.com/moby/ipvs v1.1.0 13a31b67de vendor: github.com/vishvananda/netns v0.0.2 bd5d9f3190 vendor: github.com/vishvananda/netns v0.0.1 c8262e912f libnetwork: Remove iptables nat rule when hairpin is disabled 12e3398f64 update to go1.19.5 076d57104a docs: api: synchronise versioned API docs (v1.39 - v1.41) 8ce4ae1345 docs: api: synchronise versioned API docs (v1.42) f0fe353ca6 api: swagger: add errorDetail to CreateImageInfo 04371160f8 api: docs: add errorDetail to CreateImageInfo (v1.42) e753cce70f docs: add 401 to possible status codes of /auth 4d7792417e ci: update buildkit to fix integration tests 5802ca9e08 rootless: move ./rootless to ./pkg/rootless 33572e98c1 Use user paths for plugin discovery in rootless mode 52c7a5d96b daemon/config: New(): initialize config with platform-specific defaults 101bd10d0e daemon/config: group JSON preprocessing steps def679d0e0 daemon/config: ignore UTF-8 BOM in config JSON cf8c728f3c graphdriver/btrfs: needs kernel headers >= 4.12, not >= 4.7 e40c2410ca Dockerfile.*: drop libbtrfs 51a65e01ac PACKAGERS: update Btrfs graphdriver dependencies 0cf2b14994 graphdriver/btrfs: use free wrapper consistently 21e6c282e6 graphdriver/btrfs: use kernel UAPI headers 42e7a15a63 graphdriver/btrfs: drop version information 01883e1177 daemon/graphdriver: use strconv instead of fmt.Sprintf 25939ee45e libnetwork: improve logs for DNS failures 691b44b4c3 vendor: github.com/containerd/containerd v1.6.15 5aa0c2cae2 [23.0] update containerd binary to v1.6.15 6acc1701ea integration-cli: Fix hanging TestLogsFollowGoroutines* 8dfd907478 hack: restore copy_binaries func 0d1aba547e hack/make: Don't add -buildmode=pie with -race 4da19e2dca Clear conntrack entries for published UDP ports fe097e018c Fix volume CreatedAt being altered on initialization d778bbab84 docs: contributing docs update for cross comp 2dd577955c Dockerfile: add "all" stage to build binaries and extra tools 3ef71f9085 ci: add extra steps to check artifacts 8fbfc2676f Dockerfile: rename dev stages 7e286efcd3 ci: use GITHUB_REF and GITHUB_SHA to set version and commit f29fe2daec bake: define additional vars 3b90bb6ad3 bake: define DESTDIR 171471b613 hack: update buildmode pie condition 7d8c689923 hack: do not set buildmode pie for statically linked binary 75596bee28 hack: use PKG_CONFIG var when checking libdevmapper 29758a067f IAmStatic not used anymore 5d4ddce5ed hack: remove containerutility script a85bdbe1ca Dockerfile: use TARGETPLATFORM to build Docker 6a0a2c4f79 Always use iptables -C to look for rules 91f2d963c6 Merge iptables.probe() into iptables.detectIptables() 2bf66f725c Check ipt options before looking for ip6t 1b27ab4c73 libnetwork/iptables: Fix test panic when execute only one test 316231cced daemon/graphdriver/devicemapper: simplify Udev log, and update link 770ace39d8 daemon/logger/gcplogs: remove ensureHomeIfIAmStatic workaround 5e4464798f api: can marshal and unmarshal when args.fields is empty 515219b716 Update delve version 0393897695 daemon/graphdriver/btrfs: workaround field rename in btrfs-progs 6.1 7199300239 cmd/docker-proxy: add "-v / --version" flag e9075f70c7 gha: update buildkit to fix integration tests b2d2f012b4 errdefs: FromStatusCode() don't log "FIXME" debug message 9980e64341 vendor: github.com/containerd/containerd v1.6.14 5ebd78d5f8 update containerd binary to v1.6.14 f6c2f20cee Dockerfile: delve cross build with TARGETPLATFORM 3d6908c79b Dockerfile: swagger cross build with TARGETPLATFORM 1dc34e889c Dockerfile: containerutility cross build with TARGETPLATFORM effd7661df Dockerfile: registry cross build with TARGETPLATFORM f3e3266373 Dockerfile: dockercli cross build with TARGETPLATFORM fd6316e631 Dockerfile: rootlesskit cross build with TARGETPLATFORM fbe4db5be0 Dockerfile: tini cross build with TARGETPLATFORM f9a356c7e9 Dockerfile: runc cross build with TARGETPLATFORM 6e7cc3b7e3 Dockerfile: containerd cross build with TARGETPLATFORM 582b29f587 Dockerfile: DOCKER_STATIC arg daa28fcf2d Dockerfile: add dummy stage 4cab584a9c Dockerfile: add cross compilation helper 0b12468116 vendor: github.com/containerd/containerd v1.6.13 6570b654f4 vendor: github.com/Microsoft/hcsshim v0.9.6 d8d11bca37 update containerd binary to v1.6.13 a72fb70eb0 vendor: github.com/moby/swarmkit/v2 v2.0.0-20221215132206-0da442b2780f dca58c654a daemon: drop side effect from registerLinks() 6149c333ff daemon: don't checkpoint container until registered 42bffae5ff daemon: fix GetContainer() returning (nil, nil) a6818fd4cb hack: introduce validate/no-module 45fe08c93c hack: replace go-mod-prepare.sh with wrapper script c508d13372 hack/go-mod-prepare.sh: find root robustly; make steps transparent 036398f512 hack/validate/vendor: clean up license validation step a4957d2585 hack/validate/vendor: split tidy from vendor 394eaa8495 hack/vendor.sh: allow running tidy & vendor separately d80f235c47 vendor: github.com/tinylib/msgp v1.1.6 5ca9231b44 vendor: github.com/philhofer/fwd v1.1.2 ffa2c0b517 image/store: Use errdefs for errors c0c146fc82 Remove uses of deprecated go-digest.NewDigestFromHex, go-digest.Digest.Hex 6295320d91 use consistent alias for gotest.tools/v3/assert/cmp 1cc1395fae vendor: golang.org/x/net v0.4.0 0163808dbe vendor: github.com/prometheus/client_golang v1.14.0 9b62b83429 vendor: github.com/go-logr/logr v1.2.3 d5ffdeb76c vendor: golang.org/x/crypto v0.2.0 4da8dedaab vendor: golang.org/x/net v0.2.0 b14ffffffd vendor: github.com/opencontainers/runc v1.1.3 173df30ac5 vendor: github.com/klauspost/compress v1.15.12 fe62290eed go.mod: github.com/miekg/dns v1.1.43 4ee3cc2531 vendor: github.com/containerd/containerd v1.6.12 48a0d8a8d1 [23.0] update containerd binary to v1.6.12 (addresses CVE-2022-23471) 4952dc2844 distribution: remove unused RequireSchema2 e7b26fa1b1 use ad-hoc libtrust key f2463e1e86 distribution: use ad-hoc trustkey for tests 139080d093 daemon/config: remove and local trustkey utilities 46e0317bc1 [23.0] remove libtrust tests Bumping libnetwork to version v0.7.0-dev.3-1857-g05b93e0d, which comprises the following commits: f7cdd0e7 Always use iptables -C to look for rules a6106f66 Merge iptables.probe() into iptables.detectIptables() 49bb4902 Check ipt options before looking for ip6t 51413ef1 libnetwork: processEndpointCreate: Fix deadlock between getSvcRecords and processEndpointCreate e460ffec skip TestPortMappingV6Config 64b196bd circleci: update to "next-gen" convenience image 50f192e9 circleci: update to docker 20.10 88744155 update to go1.18.9, gofmt, and regenerate proto 9ed130d8 fix linting issues 5e08bdb1 Revert: Added API to set ephemeral port allocator range 047ac186 Cleanup servicebindings only on Windows 6f36306d Delay network deletion until after lb cleanup a9c349a6 Log HNS policylist removal failures docker-moby/cli: update to 23.0.x 27b19a6ac ci: fix branch filter pattern 14aac2c23 vendor: github.com/docker/docker v23.0.0 0cd15abfd vendor: github.com/containerd/containerd v1.6.16 168f1b55e cli/command/container: exit 126 on EISDIR error 53ed25d9b Fix bad ThrottleDevice path 9e3d5d152 Fix issue where one bad credential helper causes none to be returned 1e3622c50 docs: move doc generation scripts to subdir 9b54d860c rm: allow `docker container remove` as an alias 00070e6e2 docs: add note about MKE CA rotation, which is potentially dangerous 67b961789 manifest: save raw manifest content on download 285e137aa manifest: explicitly error if whitespace reconstruction has failed 070825bc7 manifest: add support for oci image types 551c4e9ab Fix typo in reference doc for docker Signed-off-by: Craig Osterhou <craig.osterhout@docker.com> 8672540f8 vendor: github.com/docker/docker v23.0.0-rc.3 c4fff9da1 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230119195359-904c221ac281 526e5e7c9 vendor: golang.org/x/net v0.5.0 d7f21ea9c vendor: golang.org/x/term v0.4.0 ae43eb0e0 vendor: golang.org/x/text v0.6.0 caf8b152c vendor: golang.org/x/sys v0.4.0 be30cb370 Fix section docker ps --size 5d04b1c49 note `--user` args usage restriction 9bb70217f Add extra newline after additionalHelp output 59e74b44a cli: additionalHelp() don't decorate output if it's piped fc6be6ad3 cli: pass dockerCLI's in/out/err to cobra cmds d347678cd README: fix badges e04f3dd0d docs: fix duplicated format anchor in plugin_ls c453cc687 vendor: github.com/docker/docker v23.0.0-rc.2 0d16330dd vendor: github.com/containerd/containerd v1.6.15 b9e1ad3d1 update to go1.19.5 d1f02a273 deprecated: update deprecation for btrfs on CentOS/RHEL 7 bdc7e37b3 deprecation: mark btrfs driver as deprecated for CentOS 7 and RHEL7 35d7fbc81 docs: inspect: remove trailing whitespace from example 79c9e527a docs: generate markdown 186dcf30b docs: fix anchors c49f1ccb4 update cli-docs-tool to v0.5.1 5a5b7a61d contrib: fix engine logging docs link 4595ce588 cmd: set double quotes as code delimiter 81b051298 docs: fix some more anchors 71e561780 docs: fix anchor links 3613fcc86 docs: deprecated: fix link to Docker Desktop 3.2.0 release notes b81105718 cli/rm_test: Fix TestRemoveForce race condition 42de5cc7f service/logs: use strings.Cut 3fa18636e internal/test: use strings.Cut c8bd8932a cli/config: use strings.Cut 3bed830a2 cli/compose: use strings.Cut cb19bf9f7 cli/command: use strings.Cut acc45f549 cli/command/volume: use strings.Cut 806f9eab6 cli/command/swarm: use strings.Cut b3557b284 cli/command/stack: use strings.Cut 2b06c0c42 cli/command/service: use strings.Cut f29992c0f cli/command/network: use strings.Cut 424401233 cli/command/container: use strings.Cut 6c39bc1f6 opts: use strings.Cut for handling key/value pairs a473c5b38 opts: rename logOptsValidator, fix unhandled errors in tests d84256132 remove redundant conversions and braces 720a6a823 docs/run: Fix url to blog "Docker can now run within Docker" 946bb9471 Missing exec_die event 784f66014 cli/command/container: remove unused NetworkDisabled field 6fe14e61f vendor: github.com/docker/docker v23.0.0-rc.1 (use tag) c5982f373 vendor: github.com/inconshreveable/mousetrap v1.1.0 cc859412c vendor: github.com/docker/docker v23.0.0-beta.1.0.20221221173850-cba986b34090 70d24e854 vendor: github.com/moby/swarmkit/v2 v2.0.0-20221215132206-0da442b2780f bab905a44 vendor: golang.org/x/crypto v0.2.0 929f23fcf vendor: golang.org/x/net v0.4.0 2df9ff91e vendor: golang.org/x/term v0.3.0 1b75c7c52 vendor: golang.org/x/text v0.5.0 e3e0b7a6c vendor: golang.org/x/sys v0.3.0 6f2f021b6 vendor: github.com/prometheus/client_golang v1.14.0 dedbcec46 vendor: github.com/opencontainers/runc v1.1.3 cd2098c46 vendor: github.com/klauspost/compress v1.15.12 d7869bead vendor: github.com/containerd/containerd v1.6.14 06eba426d cmd/docker: fix typo in deprecation warning 895e7a3df Added missing backslash to documentation sites cli snippet 2f733b87f cli/flags: remove outdated TODO 60d62fb72 cmd/docker: improve error message if BUILDKIT_ENABLED=0 e547881e2 Fix ssh process killed when context is done 35b42efad [completion/zsh] add volume completion Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2023-02-10 12:58:29 -05:00
Bruce Ashfield	6adc065b5c	docker-ce: update to 23.0-beta ... Bumping docker to version v23.0.0-beta.1-16-g3083236871, which comprises the following commits: 4ee3cc2531 vendor: github.com/containerd/containerd v1.6.12 48a0d8a8d1 [23.0] update containerd binary to v1.6.12 (addresses CVE-2022-23471) 3d902fe719 [23.0] update containerd binary to v1.6.11 0da8917add vendor: github.com/containerd/containerd v1.6.11 623f6f7702 update to go1.19.4 4952dc2844 distribution: remove unused RequireSchema2 e7b26fa1b1 use ad-hoc libtrust key f2463e1e86 distribution: use ad-hoc trustkey for tests 139080d093 daemon/config: remove and local trustkey utilities 46e0317bc1 [23.0] remove libtrust tests 1da1a3ea87 builder: handle host-gateway with extra hosts 7620f72fb8 ci(buildkit): update buildkit ref to fix issue with alpine image 304c56f7f5 distribution: checkSupportedMediaType: allow additional media-types 6875e7f1be seccomp: block socket calls to AF_VSOCK in default profile 978690e4f9 client/list: Handle SharedSize da6bb8c408 AUTHORS: regenerate a889a17a63 .mailmap: cleanup and additions 6f581c1808 hack/generate-authors.sh: refactor and simplify de3143c6b9 Jenkinsfile: Fix dev image build fox ppc64le/s390x archs f547f2f3c0 Makefile: always use buildx 0c4b6b1742 ci: define timeout for jobs f088bcadd5 ignorefiles: cleanup 5770145433 vendor.mod: remove outdated comment about replaced module d15fe0d782 registry: session: remove unused id 546005804c go.mod: golang_protobuf_extensions v1.0.4 - prevent incompatible versions 73a98393c6 vendor: github.com/moby/swarmkit/v2 v2.0.0-20221123162438-b17f02f0a054 acb8204a7f Dockerfile: remove hardcoded platforms for vpnkit stage 313f105443 hack: remove obsolete sources for go-autogen 2b1ba3ea6b vendor: github.com/prometheus/client_golang v1.13.0 f493b770a9 vendor: github.com/aws/aws-sdk-go v1.37.0 36430f7970 vendor: google.golang.org/grpc v1.48.0 fb24b99a2b vendor: go.uber.org/zap v1.21.0 0c65191c49 vendor: go.uber.org/multierr v1.8.0 bf78bf3458 vendor: go.uber.org/atomic v1.9.0 dcf06b3f5f vendor: github.com/jmespath/go-jmespath v0.4.0 aba1d597bc vendor: google.golang.org/genproto v0.0.0-20220706185917-7780775163c4 e37ac41afb vendor: github.com/fernet/fernet-go v0.0.0-20211208181803-9f70042a33ee 963e3ec65c vendor: google.golang.org/protobuf v1.28.1 526203dd7f vendor: github.com/spf13/cobra v1.6.1 f528e2ab96 vendor: github.com/moby/term v0.0.0-20221120202655-abb19827d345 3989be2f7b vendor: github.com/bsphere/le_go v0.0.0-20200109081728-fc06dab2caa8 df2427022a vendor.mod: add comment about replaced dependency 9e4c508b55 vendor.mod: remove replace for github.com/rexray/gocsi cb358e8a19 vendor: github.com/armon/go-radix v1.0.1-0.20221118154546-54df44f2176c 3768c71d9e Dockerfile: variant support in frozen-images stage 7b9e86f789 update github.com/tc-hib/go-winres v0.3.0 to fix schema version in manifest 5052c38846 update gotestsum to v1.8.2 3508cfb149 hack/validate: drop changelog-related steps 67633130c6 cleanup: drop historical CHANGELOG.md 2dc7a1dc25 cleanup: drop .DEREK.yml fc657692c7 daemon/config: use strings.Cut(), fix panic in BuilderGCFilter e75fa6684c daemon: use strconv instead of fmt.Sprintf() abe6b3dc9b rootlesskit.installer: s/vendor.conf/vendor.mod/ 297f224a92 update RootlessKit to v1.1.0 f48f4dde24 vendor: github.com/rootless-containers/rootlesskit v1.1.0 2dce69e001 update containerd binary to v1.6.10 5c4dc48995 vendor: github.com/containerd/containerd v1.6.10 10fa0d5321 vendor: golang.org/x/oauth2 v0.1.0 356f483038 vendor: golang.org/x/crypto v0.1.0 c0edbfd621 vendor: golang.org/x/net v0.1.0 e46e43470b vendor: golang.org/x/time v0.1.0 d4e2341f93 vendor: golang.org/x/sync v0.1.0 e32bfd347c vendor: golang.org/x/sys v0.1.0 65c7f3bac3 pkg/loopback: use ioctl helpers from x/sys/unix 5f35b157a3 vendor: golang.org/x/sys v0.0.0-20221006211917-84dc82d7e875 11973d0c0a vendor: github.com/moby/buildkit v0.10.6 251610397c vendor: gotest.tools/v3 v3.4.0 83f90039ef vendor: github.com/google/go-cmp v0.5.9 to remove golang.org/x/xerrors dep 2fd846d40f vendor: gotest.tools v3.3.0 f9ab209417 chore: update supported go version to 1.18+ bfca3185ee ci(actions): bump outdated actions on Linux 7f45eb041c ci(actions): migrate to file-based commands 7370bbc034 replace distribution/digestset with opencontainers/go-digest/digestset 21feb1808d Revert "validation: temporarily allows changes in integration-cli" 5e15ce3a4a pkg/directory: remove unused MoveToSubdir() utility 92b96ac2ed pkg/directory: minor refactor of Size() e0b105623e pkg/system: unconvert 9d86e1d204 pkg/system: move GetExitCode() to pkg/idtools, and un-export 3a946f5291 pkg/system: remove Umask() utility cf1e138ab1 pkg/directory: Size(): add back type-casts to account for platform differences 7175841ebd Remove long-deprecated "arm" fallback f3e180b704 Update to Go 1.19.3 to address CVE-2022-41716 07e84005ac distribution: Error when pulling OCI artifacts 39d3d3db56 vendor: github.com/moby/swarmkit/v2 v2.0.0-20221102165002-6341884e5fc9 1e0f2186a9 Fix containerd task deletion after failed start 75634f9a1e daemon: fix docs for config-default constants ad11d3f232 Fix the max-concurrent-downloads and max-concurrent-uploads configs documentation 03015fe6de fix force remove for cluster volumes 09a2f7a667 integration: download busybox-w32 from GitHub Release 24de1f7adc vendor: github.com/containerd/containerd v1.6.9 c4685540e4 update containerd binary to v1.6.9 80dc5186ec builder/remotecontext/git: allow building on go1.18 f72c96c5c4 gha: buildkit: make checks more readable 1bbb6f2454 gha: buildkit: remove "skip-integration-tests" from matrix c0be73f88d skip TestImagePullStoredfDigestForOtherRepo() on Windows and rootless 727c4fdee3 Validate digest in repo for pull by digest b4c4be1f22 Revert "testutil/registry: remove unused WithStdout(), WithStErr() opts" 4bef6f5510 gha: update buildkit to v0.10.5-6-ge27c8e24 to skip some tests f056df579a builder: add missing doc comment c062238ea4 builder: fix running git commands on Windows 20ff8a2380 builder: make git config isolation opt-in ca99cab891 builder: isolate git from local system 5829b244ec builder: explicitly set CWD for all git commands 3bc8fccc1b builder: modernize TestCheckoutGit 00b44caa69 vendor: github.com/moby/buildkit v0.10.5 aaa8f96cc9 registry: allow "allow-nondistributable-artifacts" for Docker Hub 671bf589e2 Change restart delay for Windows service to 15s e1b240d6bd cmd/dockerd: use golang.org/x/sys Service.SetRecoveryActions() 18a54ed59c cmd/dockerd: use golang.org/x/sys/windows.SetStdHandle() 0c66bc948a cmd/dockerd: replace deprecated windows.IsAnInteractiveSession() a12d359c1a daemon/graphdriver/windows: Remove() don't use defer() in a loop 2d12e69c9f daemon/graphdriver/windows: use go-winio.GetFileSystemType() fa10084a82 daemon/graphdriver/overlay2: remove deprecated overrideKernelCheck 43ce8f7d24 integration/plugin: remove deprecated overlay2.override_kernel_check a5ecbf4d22 vendor: github.com/opencontainers/selinux v1.10.2 ac6624773e pkg/fsutils: deprecate in favor of containerd/continuity/fs 4669418731 Volume prune: only prune anonymous volumes by default 1fe550cfc7 Update to go 1.19.2 to address CVE-2022-2879, CVE-2022-2880, CVE-2022-41715 edef49eeac docs: swagger: update description for default builder version 0a87dc9f71 Fix live-restore w/ restart policies + volume refs 262ad3bb2f libnetwork/resolvconf: removed unused GetIfChanged() and GetLastModified() 44d42c2b16 replace pkg/fileutils Matching funcs with github.com/moby/patternmatcher f8e5145e96 runconfig, oci, image, layer, distribution: fix empty-lines (revive) 24888a10f6 cmd/dockerd: fix empty-lines (revive) 3a1896db63 client: fix empty-lines (revive) 47319e065d api/server: fix empty-lines (revive) b9b6e68903 opts: fix empty-lines (revive) c6c4d07830 daemon: fix empty-lines (revive) 9136c32327 daemon/images: fix empty-lines (revive) 7cb488934b daemon/logger: fix empty-lines (revive) aea1aa0daa daemon/graphdriver: fix empty-lines (revive) 79caa2f955 daemon/cluster: fix empty-lines (revive) 87552f2e67 plugin: fix empty-lines (revive) aad639c1fa volume: fix empty-lines (revive) bee5153c5b testutil: fix empty-lines (revive) 31a938c73c integration: fix empty-lines (revive) 9d44956d8c builder: fix empty-lines (revive) 08d01be870 integration-cli: fix empty-lines (revive) 3660ee30e3 api/types: fix empty-lines (revive) 3424a7c2e3 pkg/*: fix "empty-lines" (revive) 541fda8e90 migrate pkg/pubsub to github.com/moby/pubsub a8b1fec072 pkg/fileutils: remove gotest.tools as dependency, use t.TempDir() fd0904805c contrib: make dockerd-rootless-setuptool.sh more robust f6ebfaea19 test(pkg/archive): add TestImpliedDirectoryPermissions daa8708601 refactor(pkg/archive): factor out createImpliedDirectories helper 7114360901 pkg/idtools: mkdirAs(): fix infinite loops and repeated "chown" 5dfec22079 swagger: update links to logo cee2490d84 Jenkinsfile: use Ubuntu 20.04 for DCO stage 3ce520ec80 golangci-lint: update to v1.49.0 1d7fb64a6e vendor: github.com/moby/sys/sequential v0.5.0 ae65811be2 vendor: github.com/github.com/coreos/go-systemd v22.4.0 2bc36de638 Remove the OS check when creating a container 997ec12ec8 set ReadHeaderTimeout to address G112: Potential Slowloris Attack (gosec) 4a8f744255 ci: reduce cache throttling limits 07efcaf3b2 ci(test): report summary output 7f94f2b393 fix debian sysvinit script fails to restart docker daemon when stopped 970c938b56 client: ignore kernel-memory on API >= 1.42 d41ebd79f7 vendor: github.com/armon/go-metrics v0.4.1 d0fadc859d vendor: github.com/google/btree v1.1.2 44c5f7721a ci: fix branch filter pattern 00b1722fb4 Jenkinsfile: remove unit-validate stage 8fdaad4018 Jenkinsfile: remove report bundles creation in unit-validate fefe6290e5 Jenkinsfile: remove validation steps moved to GHA f925f295f4 ci: reusable dco workflow cc770330f8 ci(test): dynamic validate matrix e42f7db450 ci(test): validate job matrix 9a57be4ac4 integration-cli: remove TestDockerSuite func 95831246a2 Update uses of Image platform fields in OCI image-spec 6236ebaed5 vendor: github.com/klauspost/compress v1.15.9 366d551cd2 Update some tests for supplementary group permissions 393027d1b1 AdditionalGids must include effective group ID b9b8ddc160 Jenkinsfile: remove steps moved to GitHub Actions d96d56ff09 ci: fix .windows workflow name cc7b8cc980 ci(test): send coverage to codecov 8ca74127d9 ci(test): upload reports fc2942d4e0 integration-cli: TestPluginInstallImage broken on GitHub Runner 874954d8bd integration-cli: TestEventsOOM* broken on GitHub Runner 0bfb1bded3 integration: TestNetworkLoopbackNat is broken on GitHub Runner 4765040aa3 ci: gha test workflow for integration and unit test c853881610 Update to go 1.19.1 to address CVE-2022-27664, CVE-2022-32190 2450c5a46b update to golang 1.19 5d2b3687b0 Wrap local calls to the content and lease service 287d1656de vendor: golang.org/x/net v0.0.0-20220906165146-f3363e06e74c 39976cd2bf Update to go 1.18.6 to address CVE-2022-27664, CVE-2022-32190 1650fa8889 vendor: github.com/docker/go-units v0.5.0 e9e7491f2b linting: host:port in url should be constructed with net.JoinHostPort 2609d4e252 linting: gosec: fix or suppress G112, G114 in test code 188c5d4a7c linting: suppress false positive for G404 (gosec) ff4ec67b90 libnetwork/diagnostic: EnableDiagnostic(): use net.JoinHostPort fee68df273 namesgenerator: remove Valentina Tereshkova f7cf9fbe48 ci: move buildkit tests to a dedicated workflow ee87eaf9ad ci(windows): move windows-2019 to another workflow 09a0b0a84a Upgrades buildx to 0.9.1 8e6ed32610 Makefile: update buildx to v0.9.0 f10c50958c replace pkg/system Sequential funcs with moby/sys/sequential 40515da6d6 pkg/system: make IsAbs() platform-agnostic 3b9370fcf8 validate: address SC2155 (shellcheck) 51bf7da729 validate: format vendor script with shfmt f1bd611d41 validate: add yamllint validation e9f7c05ae1 validate: yamllint: ignore "truthy value should be one of" warnings 72156dd7a4 validate: yamllint: set locale in config file 554a933944 validate: yamllint: use "parsable" output 8d43d7fa6b validate: yamllint rename config-file a61b411ceb Dockerfile: update yamllint to v1.27.1 704e7a2d71 ci: fix broken workflow 87b7e40a34 update containerd binary to v1.6.8 901fb577cb update runc to v1.1.4 9aeda305fd vendor: github.com/moby/buildkit v0.10.4 48e314fbe2 gha: temporarily pin BuildKit integration test version 292d352ee4 libnetwork/drivers/ipvlan: fix missing IpvlanFlag field in config JSON 2293a20972 Test: wait for network changes in TestNetworkDBNodeJoinLeaveIteration 76fa56b62d vendor: github.com/containerd/containerd v1.6.8 e5958a8f08 client: remove deprecated WithDialer() option e7f4963e73 daemon: kill exec process on ctx cancel dfcb3e17ae Allow containerd shim refs in default-runtime 2c17e9a333 api: set default "Builder-Version" to "2" (BuildKit) on Linux d1d9fd50c2 daemon: complete the "--graph" / "-g" deprecation 8912c1fade seccomp: allow "bpf", "perf_event_open", gated by CAP_BPF, CAP_PERFMON 332de3f1e3 vendor: github.com/hasicorp/memberlist v0.4.0 b73c27ef6b vendor: github.com/moby/swarmkit/v2 v2.0.0-20220721174824-48dd89375d0a 15f9cb5c4d vendor: github.com/containerd/containerd v1.6.7 6c78a1166e vendor buildkit 8e2d9b9 (v0.10 branch) 8ae63006f1 update containerd binary to v1.6.7 aeb600bc4a update runc binary to v1.1.3 e0d8418ddc vendor: github.com/Microsoft/hcsshim v0.9.4 0133759476 api: swagger: fix invalid example value (API v1.39-v1.41) 572457e265 api: swagger: document BuildCache fields (API v1.39-v1.41) 49377cdd63 api: swagger: document BuildCache fields (API v1.42) 910d5c44fc api: add BuildCache.Parents for API >= v1.42 0e3d20cb20 api: deprecate BuildCache.Parent in API >= v1.42 a96b75191e api/types: add missing GoDoc for BuildCache fields. a285cd4d88 api: swagger: document BuildCache fields. 1240460547 Update golang to 1.18.5 e88c28941f docs: api: add missing "platform" query-arg on create (v1.42) 9c4984db6b docs: api: add missing "platform" query-arg on create (v1.41) af7c8ff045 api: swagger: add missing "platform" query-arg on create 6de52a29a8 daemon: support other containerd runtimes (MVP) 85b9568d0e state/Wait: Fix race when reading exit status 826003ecae integration: TestWaitRestartedContainer e2bd8edb0d daemon/restart: Don't mutate AutoRemove when restarting 44fde1bdb7 integration: Add TestContainerWithAutoRemoveCanBeRestarted 6ab3b50a3f libcontainerd: switch generated containerd.toml to v2 (v1 is deprecated) 6d41219bae Fix file capabilities droping in Dockerfile 112fb22152 Windows: Re-create custom NAT networks after restart if missing from HNS a9081299dd logger/journald: fix SA4011: ineffective break statement e34ab5200d fix formatting of "nolint" tags for go1.19 863ca3f185 libnetwork: skip firewalld management for rootless edcc51cbee profiles: seccomp: add syscalls related to PKU in default policy c51efa8617 docs: add API v1.42 52791b1c14 client: errors: remove dead code cdbca4061b gofmt GoDoc comments with go1.19 c52e221207 gofmt files e417e8dfc2 pkg/parsers/operatingsystem: fix stray import 6905fe7488 update golang to 1.18.4 420142a886 profiles: seccomp: allow clock_settime64 when CAP_SYS_TIME is added 71e2aa78e4 hack: don't generate checksums for individual binaries 1cab8eda24 replace golint with revive, as it's deprecated 65e1adc219 Dockerfile: update golangci-lint to v1.46.2 968ff5ab44 fix some minor linting issues 10c56efa97 linting: error strings should not be capitalized (revive) e5a1514c6e Dockerfile: update to latest syntax 43feaa9f8f Dockerfile.e2e: remove redundant INSTALL_BINARY_NAME d6f9b4d73b hack: remove version from binaries, and remove symlinks 2b0bd34d47 Dockerfile: don't install delve on ppc64le, s390x 66f14e4ae9 Fix AppArmor profile docker-default /proc/sys rule 3a3a0cb54e project: Add label kind/regression 4e632a13c3 Dockerfile: use consistent format for CONTAINERD_VERSION 1f187e640c daemon/config: use more assertions in tests 10e42f599a daemon/config: TestUnixValidateConfigurationErrors: use subtests 751222d907 daemon/config: verify that flags were set correctly in tests f73aadb230 daemon/config: New(): set more defaults a0d0db126c daemon/config: set default MTU when initializing config 62f71c4505 daemon/config: fix TestDaemonConfigurationMerge 9b39cab510 daemon/config: improve some tests f8231c62f4 daemon/config: Validate() also validate default MTU fce7ebdaa5 cmd/dockerd: loadDaemonCliConfig() safeguard for unparsed flags 0281f50efa cmd/dockerd: move setting defaults to loadDaemonCliConfig() 717a503590 api: add Hosts to API Config fee8a6a5c4 cmd/dockerd: make newAPIServerConfig() more idiomatic b053376741 cmd/dockerd: reserve port before creating sockets/listeners 986725b466 daemon: improve some errors cbe354b12a vendor.mod: group replace rules 384dc22de7 Add more detail to cluster volumes docs 421b93dcf5 vendor: github.com/hashicorp/go-msgpack v0.5.5 (indirect) 4e87a758f6 vendor: github.com/hashicorp/serf v0.8.5 06a7f41488 vendor: github.com/hashicorp/serf v0.8.2, go-msgpack v0.5.3 f3b2df7b0b vendor: github.com/armon/go-metrics v0.0.0-20180917152333-f0300d1749da 6b023b2eb6 vendor: github.com/prometheus/client_golang v1.12.1, procfs v0.7.3 bd9412e36b vendor: un-pin github.com/matttproud/golang_protobuf_extensions f0647f33f5 vendor: go.opencensus.io v0.23.0 939d124731 vendor: github.com/hashicorp/go-multierror v1.1.1 917f620874 vendor: un-pin github.com/coreos/systemd 6488695a2c vendor: un-pin github.com/coreos/pkg f70a9788c5 drivers/ipvlan: add ipvlan_flag option, support l3s ipvlan_mode db977355b0 fix typo (cluser -> cluster) 0bce64f08d api: POST /containers/{id}/wait: fix validation for "condition" parameter cf543a0bd5 vendor: github.com/moby/sys/mount v0.3.3 4178caade6 vendor: github.com/moby/sys/mountinfo v0.6.2 53aefba7f3 vendor: golang.org/x/sys v0.0.0-20220520151302-bc2c85ada10a 88916949ef build: force unlazy of refs by calling extract 56a20dbc19 container/exec: Support ConsoleSize 04c51cba84 Add new people to the curators list b4ffe3a9fb Move the inspect code away from the image service f1c111b176 fix flaky TestRunContainerWithRmFlag tests (take 2) 068ab51442 layer: layerstore.Cleanup(): improve some logging c2e32c144c volumes/service: NewStore: add more context to error 15716fc9ae ci(windows): test report summary output ca8b659a06 ci(integration-cli): move integration-cli run to make script 1887d85e21 ci(integration-cli): dynamically split tests in matrix 0e6a1b9596 integration-cli: split DockerSuite into subsequent build suites 7ed823ead9 validation: temporarily allows changes in integration-cli 5edfd6d081 bump netlink library bump netlink to 1.2.1 change usages of netlink handle .Delete() to Close() remove superfluous replace in vendor.mod make requires of github.com/Azure/go-ansiterm direct cf6058941c Dockerfile: add crun to dev image 2ec3e14c0f test: Add tests for logging f90056a79d daemon: LogDaemonEventWithAttributes: don't call SystemInfo() b2795564dc codecov: disable "patch" status 73b4b07c4d vendor: github.com/containerd/containerd v1.6.6 a7e3182757 update containerd binary to v1.6.6 c3eefab550 hack: remove error_on_leaked_containerd_shims 1fcd9f73d4 hack: stop installing containerd-shim (io.containerd.runtime.v1.linux) 658a4b0fec libcontainerd: remove support for runtime v1 API 2c7a6d7bb1 daemon: remove support for deprecated io.containerd.runtime.v1.linux 89db5a6fd4 vendor: github.com/containerd/containerd v1.6.5 a747cd3702 update containerd binary to v1.6.5 b241e2008e daemon.NewDaemon(): fix network feature detection on first start 1db286c5e8 Fix alphabetisation of possible names ca6e94f994 update AUTHORS and mailmap cd58d11b2a volume/local.New(): extract loading options to a function 7e907e29a3 volume/local.New() always unmount existing mounts c0f0cf6c19 volume/local: extract saving options to a separate method d3930330a7 volume/local: store both volume's "data" and "root" path e106e3f5c6 volume/local: make "validateOpts()" a method on Root 29c6224fe9 volume/local.Create(): validate early a77b90c35e volume/local: make setOpts() a method of localVolume b56fc2d0f8 volume/local.New(): don't register volume before we're done eecf7a0840 volume/local: localVolume.mount() move errors.Wrap() c1671abf14 volume/local: add test for validation b4b2a0323b libnetwork/portallocator: un-export consts for defaults 414dd017b3 Revert "Added API to set ephemeral port allocator range." 9adad264d2 distribution: match manifest list resolution with containerd 585c147b7a fix flaky TestRunContainerWithRmFlag tests a0a6b82a0d ci: add concurrency check c1a9ffc97a update golang to 1.18.3 bb69104381 Openrc: Depend on containerd init script 6ecbd078c2 ci(windows): upload test reports with logs e3c14acd33 Jenkinsfile: remove Windows stages 553b0edb4c fix unclosed file-handles in tests 293cfd6c76 Ensure performance tuning is always applied c51d34dcfb vendor: github.com/moby/ipvs v1.0.2 2463c40144 daemon/logger: Fix TestConcurrentLogging race test d8a731c3aa daemon/logger: Increase initial buffers size 98810847c4 daemon/logger: Put Message back as soon as possible 8fe2a68698 daemon/logger: Global buffer pools 152467d185 api: swagger: adjust ContainerWaitResponse error as optional 2359da802b docs: api: adjust ContainerWaitResponse error as optional 0afc71fc90 archive: add human-readable hint to Lchown error cb7b329911 daemon: fix daemon.Shutdown, daemon.Cleanup not cleaning up overlay2 mounts a3b1b66bb3 integration: TestPingSwarmHeader(): fix incorrect ping, and cleanup 795ecf02ce builder: fix empty reference fdd2772547 vendor: gotest.tools v3.2.0 a5f6500958 replace deprecated gotest.tools' env.Patch() with t.SetEnv() 3cadb1f63f update gotestsum to v1.8.1 7493342926 daemon/logger: Share buffers by sync.Pool c6cc03747d daemon/images: use gotest.tools for tests, and use sub-tests a04e3326e7 Fix constant `WARNING: No swap limit support` on cgroup v2 hosts 2f6b8a2aec vendor: github.com/containerd/cgroups v1.0.4 c3d7a0c603 Fix validation of IpcMode, PidMode, UTSMode, CgroupnsMode cba8cf34d2 Set ExternalPortReserved for dummy proxy 18529568d3 integration-cli: TestRemoveContainerAfterLiveRestore use overlay2 345346d7c6 Annotate some swagger documented types as int64 c576de88ed vendor: github.com/Microsoft/hcsshim v0.9.3 493d3ca0c3 fix docker-proxy not statically linked 15ed58ffb5 ci(windows): upload coverage to codecov 80862d61d0 gha: temporarily override buildkit version for tests 90fb4eca20 vendor: github.com/moby/buildkit v0.10.3 a67e159909 daemon/logger: hold LogFile lock less on ReadLogs c609523a8c pkg/filenotify: delete unused package 01915a725e daemon/logger: follow LogFile without file watches 6d5bc07189 daemon/logger: fix refcounting decompressed files 49aa66b597 daemon/logger: rotate log files, never truncate 990b0e28ba daemon/logger/local: fix appending newlines 3844d1a3d1 daemon/logger: drain readers when logger is closed 906b979b88 daemon/logger: remove ProducerGone from LogWatcher ae5f664f4e daemon/logger: open log reader synchronously 9aa9d6fafc daemon/logger: add test suite for LogReaders 961d32868c daemon/logger: improve jsonfilelog read benchmark 0ca6e28807 integration-cli: TestSlowStdinClosing is flaky on GitHub Runner ac82b2519a integration-cli: refactor TestStartReturnCorrectExitCode 440d051ce9 integration-cli: TestRestartContainer is flaky on GitHub Runner 890de00f02 ci: windows gha workflow (integration test) 71ba8cf24f ci: windows gha workflow (unit test) 958fa08711 ci: windows gha workflow (build) 304fbf0804 introduce CreateMountpoint for parity between binds and mounts 3b157dc3b6 integration-cli: fix test rogue certs 85a7f5a09a daemon/linux: Set console size on creation 8a5c13155e all: use unix.ByteSliceToString for utsname fields a5a77979dd docs: api: /containers/{id}/attach/ws: remove unsupported query-args < v1.42 d4a0a422da docs: api: add note about websocket attach streams 0dd3a2eade Apply performance tuning to new sandboxes also ce3e2d1955 overlay2: account for UserNS/userxattr in metacopy test ea6760138c wsContainersAttach attach to stdin/out/err streams as requested cc3848f2b7 Rename Reservation to Reservations in the open API 9a7298a3e6 volume: mask password in cifs mount error messages 4e025b54d5 Remove mount spec backport 2c3d1f7b4b overlay2: test for and report metacopy status 7de9f4f82d Allow different syscalls from kernels 5.12 -> 5.16 d9524d92a9 api/types/swarm: Version: implement stringer interface 240a9fcb83 Add Swarm cluster volume supports 73f0b01da1 volume/local.New(): remove redundant filepath.Base() a4bfd9788f volume/local.New(): remove some intermediate variables 74be0fed6f volume/local: remove redundant Root.scopedPath(), Root.scope 0abd7ba229 volume/local: remove hack for downgrading docker 1.7 to 1.6 c9e19a2aa1 Remove "seccomp" build tag 91c254a189 vendor: github.com/opencontainers/runc v1.1.2 bc0fd3f617 update runc binary to v1.1.2 af5d83a641 Make it explicit raw|multiplexed stream implementation being used f9cef468f9 vendor: golang.org/x/sys v0.0.0-20220412211240-33da011f77ad d294078dd0 update golang to 1.18.2 61fec7b36e daemon/initlayer: Init(): remove unused stub for Windows 1f21c4dd05 testutil/registry: remove unused WithStdout(), WithStErr() opts 78095e4d12 Remove unused image/v1 code 14fdd97b69 Remove unused distribution/metadata/V1IDService 4573cd9c30 Improved readability of the run hack script 7873c27cfb all: replace strings.Replace with strings.ReplaceAll f0d1911ddf api/server: fix stray import in container_routes.go d6115b8f40 daemon: fix some minor nits d733481399 daemon: daemon.ContainerKill() accept stop-signal as string 521807837b plugin: Executor.Signal() accept syscall.Signal 21df9a04e0 container: StopSignal(): return syscall.Signal ea1eb449b7 daemon: killWithSignal, killPossiblyDeadProcess: accept syscall.Signal 2ec2b65e45 libcontainerd: SignalProcess(): accept syscall.Signal 070da63310 daemon: only create trust-key if DOCKER_ALLOW_SCHEMA1_PUSH_DONOTUSE is set bb1208639b daemon: separate daemon ID from trust-key 6e376e32d8 update containerd binary to v1.6.4 a35040222c vendor: github.com/containerd/containerd v1.6.4 9880e6a1ef vendor: github.com/opencontainers/selinux v1.10.1 789223f2dc api: postContainersStop, postContainersRestart remove redundant validation 4c2f18f6cc seccomp: support riscv64 a3ae9a5956 opts: ParseTCPAddr(): extract parsing logic, consistent errors 82088364e1 vendor: github.com/moby/buildkit v0.10.2 fca0c20cd4 vendor: github.com/containerd/continuity v0.3.0 16cd359664 vendor: golang.org/x/sys v0.0.0-20220405210540-1e041c57c461 63b13a70ee vendor: github.com/Microsoft/go-winio v0.5.2 e62382d014 daemon/config: remove uses of pointers for ints dbd575ef91 daemon: daemon.initNetworkController(): dont return the controller bdc6473d2d health: Start probe timeout after exec starts 41b96bff55 update uses of container.ContainerCreateCreatedBody to CreateResponse 3bb2d0026b api: rename container.ContainerCreateCreatedBody to container.CreateResponse ff197417fa api: swagger: move ContainerCreateResponse to definitions 64e96932bd api: rename volume.VolumeCreateBody to volume.CreateOptions 18281c92fa api: rename volume.VolumeListOKBody to volume.ListResponse 4caf68f4f6 api/types: rename volume.VolumeUsageData to volume.UsageData 3cae9fef16 imports: remove "volumetypes" aliases for api/types/volume 7293857456 api: rename ContainerWaitOKBody to container.WaitResponse 5ecb6fb68b vendor: github.com/containerd/containerd v1.6.3 4cf904494e daemon: reloadMaxDownloadAttempts() remove validation c46e2e85ee daemon/config: Reload(): add TODO for config reload logic 9a54dadc44 daemon/config: MergeDaemonConfigurations() don't validate intermediates b819480899 daemon/config: Reload(): normalize labels before validation 21dac5e441 opts: remove IPOpt as it's no longer used ccb75439ff cmd/dockerd: use flags.IPVar() instead of custom type 5d352f6a87 cmd/dockerd: remove config_common_unix.go 92d9e892b5 cmd/dockerd: combine installUnixConfigFlags with installConfigFlags 83f67c63a6 cmd/dockerd: combine installRegistryServiceFlags with installCommonConfigFlags 1483905024 cmd/dockerd: remove some intermediate variables 782de17bd0 cmd/dockerd: installCommonConfigFlags() re-group some flags 0ff0b8693e cmd/dockerd: move storage-driver flag to unix-only file a9be008f00 update containerd binary to v1.6.3 314a47492a chore: fix linguist for Dockerfile 0603f87fab cmd/dockerd: validate API configuration as part of --validate e16c3616e2 cmd/dockerd: change newAPIServerConfig() to only receive config.Config 57c20c1b79 cmd/dockerd: normalize hosts when loading config 7b3463f2c5 cmd/dockerd: loadDaemonCliConfig(): minor cleanup d9d0683862 cmd/dockerd: un-export config methods, and don't pass flags "twice" 390c7d6871 daemon/config: Validate(): validate log-level cc8dd9b4a7 Extended contribution guide with how to enable GoLand IDE syntax highlighting and code completion in Moby project 7d328ea1d6 Added Delve debugger to the development container (including instructions in the contribution guide). 63ea9eb594 cmd/dockerd: don't call registry.SetCertsDir() twice 350fadbdd4 rootless: remove redundant sync.Once cd054983ff api/server: remove "Logging" from config 3b56c0663d daemon: daemon.networkOptions(): don't pass Config as argument 36049a04d2 test: use `T.Setenv` to set env vars in tests 1c129103b4 Bump swarmkit to v2 2b0da89366 distribution: move newPusher() and newPuller() together with definition 566c8db66d distribution: add GetRepository(), un-export NewV2Repository, ValidateRepoName 572c7e0184 distribution: remove RootFSFromConfig(), PlatformFromConfig() from ImageConfigStore 1e75ab0ab9 distribution: remove Pusher interface, NewPusher(), and redundant V1 checks 41999abcbe distribution: remove Puller interface, remove redundant V1 checks 074e41679d distribution: un-export internal errors and error-utilities fb5485f5d0 distribution: un-export ImageTypes, make ImagePullConfig.Schema2Types optional 176f66df9c api/types: replace uses of deprecated types.Volume with volume.Volume 54386f0c8f api: docs: move VolumeListResponse to definitions (v1.39-v1.41) cd635e465d api: swagger: move VolumeListResponse to definitions f19ef20a44 api: move types.Volume to volume.Volume 0e4f473a9f pkg/chrootarchive: remove redundant init() stub for Windows df650a1aeb panic() instead of logrus.Fatal() in init funcs ab5ebefa0d opts: TestParseHost(): also check the error fc83834ebb opts: use subtests, and split checks 83b71e0ed0 opts: re-order test-cases and use more consistent values eebd8d3c0c opts: ParseTCPAddr(): remove workaround for go1.5 c66271f4da opts: TestParseDockerDaemonHost(), TestParseTCP() remove workaround 90647e22b2 api/types/time: remove DurationToSecondsString() utility as it's no longer used e8fa708ae5 client: ContainerStop(), ContainerRestart(): support stop-signal 9060126639 client, integration-cli: remove unneeded import aliases 83a185897d API: add "signal" parameter to container stop and restart endpoints 90de570cfa backend: add StopOptions to ContainerRestart and ContainerStop 952902efbc daemon: containerStop(): use a regular "defer" to log container event 5edf9acf9c daemon: move default stop-timeout to containerStop() f3bce92a24 daemon: cleanupContainer(): pass ContainerRmConfig as parameter 4430992af8 daemon: rename some variables, import-aliases and receivers 301b252b58 libnetwork: don't use strings.Fields() to improve performance b9de761c26 docs: api: document ImageSummary fields (api v1.39-v1.41) f8a1d6b50a api: swagger: document ImageSummary fields b365924ec3 client: ContainerKill(): don't send signal query-param if none was set 07dba5d9fe api: docs: improve documentation of ContainerConfig type (API v1.30-v1.41) a46700dbdb Cleanup servicebindings only on Windows 6861aade58 Delay network deletion until after lb cleanup 556cb3ae81 Log HNS policylist removal failures cb62919d28 api: improve documentation of ContainerConfig type ef64db5021 update golang to 1.18.1 013d648888 client: CopyToContainer(), CopyFromContainer(): remove status-code handling 83969fa3dd daemon: move DefaultShutdownTimeout to daemon/config 690a6fddf9 daemon: move default namespaces to daemon/config 881e326f7a daemon/config: remove unneeded alias 4039850bef add instructions to generate events message table bin 1efda78f2b use go-winres for windows build and cleanup autogen and winresources fd2143e0b0 use go-winres for cross to create Windows resources 1d6e0fb103 metrics: DRY metric definitions efe03aa2d8 Jenkinsfile: add workaround for CVE-2022-24765 449250994f builder/remotecontext/urlutil: simplify and improve documentation 5f89a6a78e pkg/urlutil: deprecate, and move to builder/remotecontext/urlutil 074bc1c3ab pkg/urlutil: remove unused IsTransportURL() b6d58d749c runconfig: ContainerDecoder(): fix handling of invalid JSON ff5f70e55f api/server/httputils: move WriteJSON() together with ReadJSON() 0c9ff0b45a api/server/httputils: add ReadJSON() utility ef490cae45 api/server/httputils: matchesContentType(): return error instead of logging 3e47a7505e daemon/logger/fluentd: remove udp, tcp+tls, unixgram, add tls scheme 12424cfa6f daemon/logger/fluentd: fix missing host, remove urlutil.IsTransportURL() 0f40aefccd daemon/logger/fluentd: validate path element b161616202 daemon/logger/fluentd: make error-handling less DRY 0dd2b4d577 daemon/logger/fluentd: rename var that collided with import 40182954fa daemon/logger/fluentd: add coverage for ValidateLogOpt(), parseAddress() c2ca3e1118 daemon/logger/syslog: remove uses of pkg/urlutil.IsTransportURL() 87206a10b9 daemon/logger/splunk: remove uses of pkg/urlutil.IsURL() 2e831c76c2 daemon/logger/gelf: remove uses of pkg/urlutil.IsTransportURL() 170049225c ci: add cross job in ci workflow 12558c8d6e fix cross compilation for arm platforms d730d550e2 ci: set shorter retention period for artifacts c2dfb60e31 ci: update upload-artifact and download-artifact actions to v3 5d9e99ead3 missing windows arm64 arch detection eb4c6d8316 maintainers: update metadata for samuelkarp 101dafd049 daemon/config: move proxy settings to "proxies" struct within daemon.json 2bc07370ec daemon/graphdriver: remove unused graphdriver.IsInitialized() d570bc4922 remove deprecated support for overlay(2) on backing FS without d_type (fstype=1) 758714ed6d api/server/router/grpc: fix some nits in NewRouter() 87948c7892 Jenkinsfile: allow all ppc64le / s390x stages through checkbox 2ff043c9fe Updated AUTHORS and .mailmap files a35b4ac54a daemon/config: Validate(): validate hosts 5cfcd88d57 daemon/config: fix TestReloadDefaultConfigNotExist if file exists ecbfe73193 opts: ParseTCPAddr(): fix validation of hosts to not ignore path elements 846af8e413 cmd/dockerd: update --ip6tables description to include "experimental" ae7d3efafd Makefile: update buildx to v0.8.2 ffc903d7a6 update runc binary to v1.1.1 69993c1c57 vendor: github.com/opencontainers/runc v1.1.1 482d1d15bf distribution: use the maximum compatible platform by default 890231f46b client: container ps: don't set "limit" if none was set fcc42d5682 distribution: use correct platform matcher for containerd d74bf97f40 vendor: github.com/moby/buildkit d7744bc 064650dd09 Pass TestPsListContainersFilterCreated if other created containers exist 31e1fec950 Suport vpci-class-guid in the non-containerd backend cb07afa3cc Implement :// separator for arbitrary Windows Device IDTypes 92f13bad88 Allow Windows Devices to be activated for HyperV Isolation c60f70f112 Break out `setupWindowsDevices` and add tests 1e645fb70f client: Ping(): add handling for swarm status headers adf4bf772d API: add "Swarm" header to _ping endpoint 4d7ab4b214 update RootlessKit to v1.0.0 19a7875c3c vendor: golang.org/x/sys v0.0.0-20220319134239-a9b59b0215f8 85572cac14 registry: remove dependency on rootlesskit, add `SetCertsDir()` 3853eb59d1 daemon: require storage-driver to be set if the driver is deprecated 020fd68326 daemon: graphdriver: some minor cleanup 7b277f62cc Remove comment that is no longer relevant ec221d6881 vendor: github.com/containerd/containerd v1.6.2 e69529c94a update containerd binary to v1.6.2 8c7ea316d1 Mount (accessible) host devices in --privileged rootless containers ff35785cfc vendor buildkit 8d45bd6 that fixes dockerd worker integration tests 32f0561715 ci: buildkit integration test fda0226a89 builder: add buildinfo for buildkit b899db6423 builder: enable shm-size and ulimit for buildkit aadb3bf766 builder: changes needed since buildkit 0.10.0 e5812117a5 bridge: also flush conntrack entries when setting up endpoints a2aaf4cc83 vendor buildkit v0.10.0 feab0cca9f libnetwork/overlay:fix join sandbox deadlock e82b7b2fa0 errdefs: move GetHTTPErrorStatusCode to api/server/httpstatus 45067cda33 client: remove wrapResponseError() 5e9829b75d registry: remove unused fallbackError 8947730124 registry: un-export AuthTransport() 2f466a9f88 registry: remove unused Service.TLSConfig() 64e50ce86a search: remove parsing JSON filters out of the backend bdb878ab2c filters: lowercase error 2d45b5ddbc api: filters: return correct status on invalid filters a5be5801e9 search: un-export registry.DefaultSearchLimit, and fix API status codes bee8f006fe registry: serviceConfig: don't embed registry.ServiceConfig 2b5dc81582 registry: move allowNondistributableArtifacts, isSecureIndex to config 382b986520 registry: make defaultService.ServiceConfig() more idiomatic 18de76a420 registry: make serviceConfig.loadInsecureRegistries() more atomic dae2173568 registry: defaultService: use sync.RWMutex 9cb0aa4c91 registry: minor improvements and cleanup d3c3e2c867 registry: remove unneeded alias for api/types/registry import 79aa65c1fa registry: return "errdefs" compatible error types 98202c86ad registry: remove ErrInvalidRepositoryName 273dca4e3c registry: remove unused error return from HostCertsDir() 6e3e657ea6 registry: un-export config.LoadXXX() functions 4ebb18479d registry: un-export Session, remove NewSession() 286992ef53 registry: un-export Ping(), PingResult, remove v1Endpoint.Path() 6a01a3cfa4 registry: un-export V1Endpoint and NewV1Endpoint() 8b8bbbd445 registry: un-export HTTPClient() and NewTransport() 569dc6d692 registry: un-export DefaultService 541ed077a6 registry: remove unused authConfig from Session 02ed265854 registry: remove unused RepositoryData and ImgData 2bcf4628a7 registry: remove TODO for removing localhost as insecure by default d9261561f9 registry: add TODO for removing ParseSearchIndexInfo() 746c51b54f registry: tests: remove unused mock code and use gotest.tools 917b44799d vendor: golang.org/x/crypto v0.0.0-20220315160706-3147a52a75dd 9bf40d7edd pkg/system: move IsWindowsClient to pkg/parsers/operatingsystem 427b0cd636 api/types: fix KernelMemory deprecation comment, and omitempty 5d10c6ec67 Update handling of deprecated kernel (tcp) memory options af6307fbda Remove KernelMemory option from /containers/create and /update endpoints 85c4d633db pkg/system: remove deprecated (and unused) windows consts 590e34eaf4 update golang to 1.18.0 4203a97aad staticcheck: ignore "SA1019: strings.Title is deprecated" 98f027813f api: swagger: add IPAMConfig on IPAM abc2f095ab api: docs: add IPAMConfig on IPAM (v1.41) 8ac2f84f9a docs: cleanup swagger API with multiple examples (v1.25-v1.41) 8ba83f63a0 client: ImageSearch(): don't send limit if none was specified 3671cb90a3 cleanup swagger API with multiple examples de6732a403 version: add RootlessKit, slirp4netns, and VPNKit version 098a44c07f Finish refactor of UID/GID usage to a new struct da068165f6 ci: simple gha workflow to build docker daemon a768652fd6 Support STOPSIGNAL instruction in commit change c28a8e9cf7 layer: remove layerstore.setOS(), layerstore.getOS() 7df7357e08 vendor: cloud.google.com/go v0.92.0, google.golang.org/api v0.54.0 f9f549cbe4 plugin: add EndpointResolver interface 61599d0a4d plugin: remove unused pluginRegistryService 06abe8dd2d update containerd binary to v1.6.1 b36fb04e03 vendor: github.com/containerd/containerd v1.6.1 00ba5bdb98 Unpin grpc, protobuf dependencies 06c797f517 vendor: github.com/docker/swarmkit 616e8db4c3b0 b92af14a1c vendor: github.com/docker/distribution v2.8.1 14cb9d22df api/types: add godoc on MountPoint 0a438f2612 api: docs: document MountPoint fields (v1.25-v1.41) 69ba3713d5 api: swagger: document MountPoint fields b0b71dbe1c pkg/sysinfo: remove libcontainer dependency 2c97295ad8 daemon: remove v1 shim configuration for containerd 5979d6e7e3 client: add const for environment variables, and document them c2c7e9d449 client: improve GoDoc, and minor touch-ups 8512cf076c client: TestNegotiateAPIVersion(), TestClientRedirect(): use sub-tests 25a336ab6a client: TestGetAPIPath(): update test to use more realistic results 65e4ea27cd client: various small test-improvements c04dff7623 Correct type of Mounts in ContainerSummary in docs (v1.25-v1.40) 16e3ca35eb Correct type of Mounts in ContainerSummary in docs ed843fe42f Correct type of Mounts in ContainerSummary 948c2c45bb client: use canonical names for HTTP Headers a34fe9b422 Add locking to the ZFS driver b94a319fdf remove deprecated builder/dockerignore d89bfac728 remove deprecated pkg/symlink 7449ca078b remove deprecated pkg/locker 4a6dc85e40 remove deprecated pkg/term, pkg/term/windows 97a235196e remove deprecated pkg/mount 0759f013a4 api: docs: fix indentation of HostConfig.SecurityOpt (v1.39-v1.41) a4567903a8 api: swagger: fix indentation of HostConfig.SecurityOpt 352d1bb8e0 api: docs: move ContainerWaitResponse to definitions (v1.39-v1.41) e4c6ca36ae api: swagger: move ContainerWaitResponse to definitions 444b27910c api: docs: move VolumeCreateOptions to definitions (v1.39-v1.41) 0119f7973b api: swagger: move VolumeCreateOptions to definitions 5c0aae359f api: docs: move Volume examples inline (v1.39-v1.41) e444ac3470 api: swagger: move Volume examples inline 9f3b1a9664 distribution: retry downloading schema config on retryable error 8e9c8ff7f2 api: docs: remove deprecated RootFS.BaseLayer (API v1.25-v1.41) fd1f34cacd api: docs: remove deprecated RootFS.BaseLayer (current API version) 25c896fcc2 api: remove unused RootFS.BaseLayer 9aacaeb667 pkg/parsers: support Windows 11; drop ProductName 9ed8cd128a Dockerfile.windows; update containerd binary to v1.5.10 2c8f0a0c99 update containerd binary to v1.5.10 b4a943afab vendor: github.com/containerd/containerd v1.5.10 e781cf5f64 update to go 1.17.8 to address CVE-2022-24921 a0230f3d9a remove unneeded "digest" alias for "go-digest" 06df530b6d image: improve godoc for V1Image 34c2c14775 api: improve godoc for ImageInspect struct d19dd22257 api: docs: fix warning about comment indentation (API v1.40-v1.41) 9565606222 api: docs: update docs for /images/{name}/json (API v1.39-v1.41) 697f42582a api: docs: fix warning about comment indentation (current API version) 3193d7e101 api: docs: update docs for /images/{name}/json (current API version) 90c54320c8 daemon/logger: fix data race in LogFile 9080e5a1f7 daemon/logger: add test to detect data races 5263bea70f daemon: move check for CPU-realtime daemon options dee9f422c8 pkg/system: remove github.com/docker/go-units dependency 25ee00c494 pkg/system: move EnsureRemoveAll() to pkg/containerfs d492101172 daemon: SystemInfo() extract collecting debugging information to a helper ac2cd5a8f2 daemon: unexport Daemon.ID and Daemon.RegistryService a27f8aecad daemon: SystemInfo() extract container counts to a helper function 82f96da04d layer: remove unused ErrActiveMount, ErrNotMounted, ErrNotSupported de0eabbd66 vendor: github.com/vishvananda/netns v0.0.0-20210104183010-2eb08e3e575f d8e1746466 vendor: github.com/tonistiigi/fsutil v0.0.0-20220115021204-b19f7f9cb274 931b455f27 vendor: github.com/hashicorp/errwrap v1.1.0 4d1c323796 vendor: golang.org/x/text v0.3.7 7f9c77b2fe vendor: golang.org/x/oauth2 v0.0.0-20210819190943-2bc19b11175f a69cda092b vendor: golang.org/x/lint v0.0.0-20210508222113-6edffad5e616 c03ae0b726 vendor: github.com/cespare/xxhash/v2 v2.1.2 2634edec6e vendor: github.com/klauspost/compress v1.14.3 8bf694b427 vendor: github.com/google/go-cmp v0.5.7 89d39e5e77 vendor: gotest.tools/v3 v3.1.0 c35143f92e vendor: github.com/moby/sys/mount v0.3.1 9efa8b3500 all: fix typos 203fcd6997 layers: remove layerStore.getWithoutLock() 7d70d95d8e registry: add DefaultRegistryHost const, and improve documentation 9d6382f2b3 vendor: github.com/Microsoft/hcsshim v0.9.2 ace606fd75 vendor: github.com/aws/aws-sdk-go v1.31.6 0809bd6859 vendor: github.com/klauspost/compress v1.14.2 20e5d6b3e3 vendor: github.com/pelletier/go-toml v1.9.4 812dacb676 vendor: github.com/containerd/continuity v0.2.2 461845bfbc vendor: github.com/containerd/cgroups v1.0.3 7876c53424 vendor: golang.org/x/tools v0.1.5 1b829c2a6a vendor: golang.org/x/mod v0.4.2 6be521ccb8 vendor: golang.org/x/oauth2 v0.0.0-20210805134026-6f1e6394065a 8f106d4576 vendor: github.com/google/go-cmp v0.5.6 9393cf73f6 removed mentions of the archived Docker CE repo ff408210da distribution: remove use of deprecated dial.DualStack 3c44ade6d0 daemon: fix error-message for minimum allowed kernel-memory limit 9f3c238c29 docs: add missing KernelMemoryTCP to api v1.40 and v1.41 203d97df59 api/swagger.yml: add KernelMemoryTCP to /info endpoint 3f0abde50d integration-cli: TestSlowStdinClosing: use sub-tests 496a4bd15e integration-cli: TestSlowStdinClosing: add logs, and potential naming conflict 821b4d4108 daemon/config: DefaultShmSize: minor tweak and improve docs 705f9b68cc some cleaning up of isolation checks, and platform information 1b3fef5333 Windows: require Windows Server RS5 / ltsc2019 (build 17763) as minimum 833139f390 pkg/archive: audit gosec file-traversal lints e9bbc41dd1 Remove local fork of archive/tar package 79ea1b16b1 distribution/xfer: un-export DoFunc type 4d6c6a5000 distribution/xfer: smaller interface, rename to DigestRegisterer 047e032461 distribution/xfer: define DownloadOption type 69b0913e1f distribution/xfer: add TODO for return error on Registered() 3309ea9419 distribution/xfer: slightly more idomatic type assertion 4c7dc9806c distribution/xfer: un-export transfer interface accessors 849d8c2d02 distribution/xfer: un-export Watcher 96a750aab4 distribution/xfer: un-export Transfer interface 765844e419 distribution/xfer: un-export NewTransfer() 587c474b57 distribution/xfer: use "transferManager" in godoc 874b11495b distribution/xfer: un-export transferManager.setConcurrency() and .transfer() d746a836fc distribution/xfer: remove TransferManager interface, un-export newTransferManager cf31aa0fa0 distribution/xfer: fix some nits in tests 79cad59d97 daemon/images: ImageService.Cleanup(): return error instead of logging dd4cf4b641 daemon: remove some unused stubs on Windows 1240f8b41d daemon: remove kernel version check and DOCKER_NOWARN_KERNEL_VERSION c79a169a35 Remove opts.QuotedString implementation 699174347c daemon: use RWMutex for stateCounter cad6c8f7f1 Update Go to 1.17.7 2ac898c232 vendor: github.com/moby/sys/signal v0.7.0 9c2646e486 vendor: github.com/moby/sys/mountinfo v0.6.0 c2b33f8684 vendor: github.com/fsnotify/fsnotify v1.5.1 3776fe6256 vendor: github.com/containerd/containerd v1.5.9 3ddf696a2d vendor: golang.org/x/oauth2 v0.0.0-20210514164344-f6687ab2804c 42d2f0bbc7 vendor: github.com/google/go-cmp v0.5.5 b9c8eca468 libnetwork/networkdb: remove some redundant fmt.Sprintf()'s abaf4b25d7 integration-cli: remove some redundant fmt.Sprintf()'s 7e06add3c8 testutil/daemon: remove redundant fmt.Sprintf()'s 737e8c6ab8 api: POST /containers/{id}/wait: validate "condition" parameter a832635e51 client.ContainerWait(): don't send empty "condition" query parameter 5e2b7dea02 docs/api: add missing 400 response for POST /containers/{id}/wait 41b137962d docs/api: update /containers/{id}/wait "condition" parameter (v1.30-v1.41) 0e5929f99d api/swagger: add missing 400 response for POST /containers/{id}/wait 0ac746fabb api/swagger: update /containers/{id}/wait "condition" parameter to match code fada92c393 vendor: github.com/prometheus/common v0.10.0 147752ee05 vendor: github.com/grpc-ecosystem/go-grpc-middleware v1.3.0 f9f11050cc vendor.mod: don't replace github.com/stretchr/testify 738bd5a90e vendor.mod: don't replace github.com/containerd/containerd be4144c153 vendor.mod: don't replace gopkg.in/fsnotify.v1 9f7280f2d2 vendor: github.com/google/uuid v1.3.0 24a7b61800 vendor.mod: don't replace github.com/hpcloud/tail c1fa01deb8 vendor.mod: don't replace github.com/onsi/ginkgo, github.com/onsi/gomega 40bf5d414e vendor: github.com/pelletier/go-toml v1.9.1 8f6d58915d vendor: github.com/klauspost/compress v1.12.3 40b8495735 vendor: go.etcd.io/bbolt v1.3.6 03f45fafc5 vendor: golang.org/x/net v0.0.0-20211112202133-69e39bad7dc2 368d680dfe vendor: golang.org/x/time v0.0.0-20211116232009-f0f3c7e86c11 ce4ca67d52 vendor: golang.org/x/text v0.3.6: 2deec80dba fix(check-config.sh): Check for existence of /etc/os-release before sourcing 624b3cfbe8 Freeze the namesgenerator package against new additions eae20b1a1b client: extract FromEnv parts to separate WithXX options 0d9a37d0c2 oci: inheritable capability set should be empty 646ace6ee3 Dockerfile: update golangci-lint v1.44.0 89f63f476b integration-cli: SA5011: possible nil pointer dereference (staticcheck) 85ed9b8746 libnetwork: fix unhandled errors in tests (ineffassign) 99935ff803 client.NewClientWithOpts(): remove redundant type assertion (gosimple) b88f4e2604 daemon/logger/awslogs: suppress false positive on hardcoded creds (gosec) be63b7d7f6 vendor: github.com/docker/distribution v2.8.0 b79dec8138 vendor: github.com/opencontainers/runc v1.1.0 0d04359ec2 vendor: golang.org/x/sys v0.0.0-20220114195835-da31bd327af9 c55eb6b824 update runc binary to v1.1.0 325c3a457b hack/vendor.sh: run "go mod tidy" before vendoring 347a85787b pkg/namesgenerator: remove names-generator binary 2cff05e960 client/request.go:157:8: SA1019: err.Temporary is deprecated (staticcheck) af819bf623 seccomp: add support for Landlock syscalls in default policy f9fb5d4f25 daemon/graphdriver/fuse-overlayfs: Init(): fix directory permissions (staticcheck) ab9796b0e9 pkg/system: rewrite IsWindowsClient() using golang.org/x/sys/windows be463cbd6c pkg/system: remove unused HasWin32KSupport() b36d896fce layer: remove OS from layerstore da277f891a daemon.cleanupContainer() remove named return variable cae1dbee01 ImageService.ReleaseLayer(): remove unused containerOS argument e30a4a438b daemon: remove leftover LCOW platform checks cfddecc3d2 builder/dockerfile: remove leftover LCOW platform checks 1ef0a5bb91 image: remove leftover LCOW platform checks b2ef2e8c83 daemon/images: remove leftover LCOW platform checks f9a1846ca2 distribution: PushLayer.Size(): remove unused error return f5db4b01c0 daemon/images: ImageService.LookupImage(): minor cleanup e1ea911aba layer: remove unused error return from .Size() and .DiffSize() 01ae9525dd Add support for platform (os and architecture) on image import 6b69de61f9 integration-cli: TestImportBadURL: use proper rfc6761 "invalid domain" 9839ddd800 api: postImagesCreate(): use local variable for platform 81ac487d71 api: postImagesCreate(): rename ambiguous err variable 5c870b421a daemon/images.NewImageService() don't print debug logs bb66ebd621 distribution: xfer.LayerDownloadManager.Download(): remove "os" argument 0b0a995d9d distribution: remove RootFSDownloadManager interface 38e2e756c9 Avoid platform-specific NewPatternMatcher function in TestCompile 839e2ecc1b docs: remove HostConfig.LxcConf field from API docs 75a1ad0c9f api: remove HostConfig.LxcConf field 16cb04c2e8 api/swagger: move DistributionInspect to definitions ebd709f80c api/swagger: rename PluginPrivilegeItem to PluginPrivilege 0b5a2e3c87 api/swagger: fix up event-types and move to definitions a65804adc4 api/swagger: move DistributionInspect to definitions 24a43d934c api/swagger: rename PluginPrivilegeItem to PluginPrivilege 92ed6ca356 api/swagger: fix up event-types and move to definitions 62cf748df9 Fix swagger docs to match the opencontainers image-spec 6153c2f08d Extract PluginPrivilegeItem as explicit type definition be93e50a58 Use explicit object names for improved swagger based code generation 8168d1877d Fix ContainerSummary swagger docs 0e719f8a00 Add "changes" query parameter for /image/create to swagger docs d3d78c1ae3 Add RestartPolicy "no" to swagger docs c0bc82cef1 Fix swagger docs to match the opencontainers image-spec 7248ebcd7e Extract PluginPrivilegeItem as explicit type definition 6e421a1823 Use explicit object names for improved swagger based code generation 9ac2d04617 Fix ContainerSummary swagger docs 050f5f29f7 Add "changes" query parameter for /image/create to swagger docs 90294e9bdb Add RestartPolicy "no" to swagger docs 037b4c0e8e docker-py: skip CreateContainerTest::test_create_with_device_cgroup_rules ace8c7896c vendor: cloud.google.com/go v0.59.0 to remove some test-deps 3bd74488fd Makefile: use volume for go mod cache when running dev-container e5d28115ee vendor: regenerate a46f968229 vendor: replace vndr with `go mod vendor` fa73c24471 Fixed broken links in project documentation files. 7b052cdc63 Removed the slack archives f85ae526f0 Update Go to 1.17.6 8d250be008 Add unit test for (*Pattern).compile 483aa6294b daemon: load and cache sysInfo on initialization df3ea5da03 update containerd binary to v1.5.9 9326ea5b99 Jenkinsfile: remove Windows RS1 as it reached end of support 436abb458c hack/ci: remove unused entrypoint scripts 745700d2ef remove unused poule.yml 5d96e09628 Do not panic on empty quoted string argument 71119a5649 awslogs: use gotest.tools/v3/assert more f0e450992c awslogs: replace channel-based mocks 2145f3ba2c docs: fixing /exec/{id}/resize response code in API documentation 3dda7311cd xfer: fix a simple goroutine leak in unit test 7b692a421b libnetwork: remove more config bits related to external k/v stores 745ba3ecbc libnetwork: remove etcd-related code and tests 147173b099 libnetwork: remove consul-related code and tests 25594c33b9 libnetwork: replace consul with boltdb in test a7d0f3060a libnetwork: remove zookeeper-related code and tests e202ac3f38 remove pkg/discovery as it's now unused 00f9b23c3a libnetwork: remove external DS-based host discovery c741ab0efa daemon: remove daemon/discovery as it's now unused 9492354782 daemon: remove daemon.discoveryWatcher f28fc8bc8d daemon: remove discovery inits d2c6602cac integration-cli: use unique names for custom bridges ff2a5301b8 daemon: remove discovery-related config handling 9f2240c56f cmd/dockerd: produce error when using discovery options 65b92a730a integration(-cli): remove discovery related tests 702cb7fe14 daemon: remove discovery related tests 834272f978 Added error codes for exec resize in API docs 1a933e113d Fixed exec resize success code in API docs ffd5a20ab8 vendor: bump etcd v3.3.27 cfd26afabe Use syscall.Timespec.Unix 4bdc208449 hack: remove a workaround for go-tools 22f19f8243 hack: do not exclude SQL-related checks 136f93ea05 hack: remove non-existent directories from golangci-lint's skip-dirs c91e09bee2 daemon/logger: replace flaky TestFollowLogsHandleDecodeErr 7a10f5a558 daemon/logger: refactor followLogs to write more unit tests 5cbc08ce57 The flag ForceStopAsyncSend was added to fluent logger lib in v1.9.0 60f868c263 Ensure system clock was set 8b4c445f54 test: use os.CreateTemp instead of ioutil.TempFile 9a0b1f4f6b hack: use golangci-lint to find io/ioutil 3500d7e472 vendor: github.com/fluent/fluent-logger-golang v1.9.0 f415028976 integration-cli: delete existing docker0 bridge to prevent it interfering dd66dcad9c fileutils: Avoid compiling a regexp for simple patterns 85eaf23bf4 seccomp: add support for "swapcontext" syscall in default policy 26dafe43a4 system: unbreak build for darwin f2e458ebc5 daemon/logger: test followLogs' handleDecodeErr case 48d387a757 daemon/logger: read the length header correctly d620cb6afc Update Go to 1.17.5 6bb3891c60 Update Go to 1.17.4 7c17ad8735 docker-rootless-setuptools.sh: use context after install 934f955e3d vendor: github.com/opencontainers/runc v1.0.3 53397ac539 update runc binary to v1.0.3 d78b883576 Fix grammar for "does not exist" dd9782fe94 go.mod: golang.org/x/crypto 5770296d904e90f15f38f77dfc2e43fdf5efc083 bd61629b6b fluentd: Turn ForceStopAsyncSend true when async connect is used e24d61b7ef vendor: github.com/fluent/fluent-logger-golang v1.8.0 9d9b8e0cf3 daemon.WithDevices(): use containerd's HostDevices() 55da5245de Fix missing parent info case in MatchesUsingParentResults 0f1b68df16 Adjust deprecation comments 7c216bcabe distribution: validate blob type 715e78631d fix image spec JSON example 4555d3aa54 pkg/fileutils: Track incremental pattern match results against each pattern a715bfb857 vendor: github.com/Microsoft/hcsshim v0.8.23 cbb4aed0b4 vendor: github.com/containerd/ttrpc v1.1.0 ce25968008 vendor: github.com/moby/sys/mount v0.3.0, mountinfo v0.5.0, signal v0.6.0, symlink v0.2.0 875969251b vendor: golang.org/x/sys v0.0.0-20211025201205-69cdffdb9359 6d92d2c7c4 TestConntrackFlowsLeak: use busybox "nc" c3537ec24c Dockerfile.windows: update containerd binary to v1.5.8 238180d292 integration-cli: remove manifest v2 schema 1 push tests cef0a7c14e vendor: github.com/opencontainers/image-spec v1.0.2 458b4aae19 vendor: github.com/containerd/containerd v1.5.8 aef782f348 update containerd binary to v1.5.8 615ff22437 vendor: github.com/opencontainers/selinux v1.9.1 c721bad8cc Fix flaky TestPortMappingV6Config 080529dfea Jenkinsfile: update check-config script to latest version 2a6a4587fa testing: skip TestBuildWCOWSandboxSize for now eea2758761 TestBuildUserNamespaceValidateCapabilitiesAreV2: cleanup daemon storage 1a15a1a061 testutil: daemon.Cleanup(): cleanup more directories 24aaa7f8c9 log error message when receiving an unexpected type error 502b35c8f6 Fix windows rxReservedNames 61b43b1eb8 bump up rootlesskit from v0.14.4 to v0.14.6 582ef29426 vendor: github.com/containerd/containerd v1.5.7 c97d09b1e1 vendor: github.com/Microsoft/hcsshim v0.8.22 5f79e03624 vendor: github.com/imdario/mergo v0.3.12 ce668d6c1e Update Go to 1.17.3 b865204042 cmd/dockerd: create panic.log file without readonly flag 3a938df4b5 Make the network allocator handle IPv4 blocks too small for network/broadcast addresses. 894230b82d Fixed docker.internal.gateway not displaying properly on live restore e7583ab859 testutil/daemon: ReadLogFile() trigger os.Sync() before reading 040b1d5eeb integration/daemon: use "windows" to skip tests 76016b846d daemon: make sure proxy settings are sanitized when printing bad4b30e65 integration: skip TestDaemonProxy on rootless CI 427c7cc5f8 Add http(s) proxy properties to daemon configuration a6ce7eff65 daemon: move maskCredentials to config package 1cdad98a7a distribution: do not retry unsupported layer media types 13cff6d583 Fix race in TestCreateServiceSecretFileMode, TestCreateServiceConfigFileMode eadf839530 fix TestInvalidRemoteDriver() to check underlying error 195558de5a pkg/fileutils: escape additional regex meta characters 27ba755f70 Fix racey TestHealthKillContainer 0c887404a8 daemon: fix TestVerifyPlatformContainerResources not capturing variable 3e5e7a6de3 CI: update docker-py to 5.0.3 b4e056d556 buildkit: normalize build target and local platform a8ce4d47c3 dockerd-rootless.sh: Fix variable not double quotes cause unexpected behavior 8f1b2a0fd3 Port testutil/daemon to FreeBSD 59511e1234 vendor: Update go-winio to v0.5.1 485cf38d48 oci/caps: limit available capabilities to current environment 79d6e935ad libnetwork: some minor refactoring / cleanup d86a331fa4 libnetwork: improve consistency in log messages fa4a9702be Update containerd binary to v1.5.7 b746a2bf9b Update containerd binary to v1.5.6 23abee412b compression: support zstd with skippable frame 1c7a47f709 Dockerfile: switch CRIU install to Debian 11 "bullseye" packages 13adcfafde Revert "Dockerfile: CRIU: disable GPG validation, due to expired signing key" 9a09448540 libnetwork: ServeDNS(): don't panic on unsupported query types 089a33e7c5 Dockerfile: CRIU: disable GPG validation, due to expired signing key 68e3034322 Add an option to specify log format for awslogs driver e7fb0c8201 Update Go to 1.17.2 9f39889dee Fixes #41871: Update daemon/daemon.go: resume healthcheck on restore 9dbec13362 registry: EndPointV1.Ping() remove redundant "Standalone" and cleanup logs 37dc2582d1 registry: remove use of iota for consts 4a52c46e37 registry: trimV1Address(): simplify trimming trailing slash 542edf0c21 registry: inline newV1Endpoint() into newV1EndpointFromStr() c8754f44d7 registry: remove unused ToV1Endpoint() afbeec8bda registry: remove tlsConfigForMirror() 9f874e53b9 registry: remove unused registry.ErrAlreadyExists cec4e69813 chrootarchive: don't create parent dirs outside of chroot 03f1c3d78f Lock down docker root dir perms. ce715505bd Dockerfile: update test-registries to released versions 25381123d3 Makefile: update bfirsh/redoc to 1.14.0, and fix swagger warnings b954e4793b Dockerfile: move installers into Dockerfile ec9c8545f8 Makefile: remove passing proxy env-vars 3ce1dcc25d daemon.UsingSystemd(): don't call getCD() multiple times 7ccf750daa Allow switching Windows runtimes. f3d3994a4b Port pkg/system/mknod.go to FreeBSD e187eb2bb5 compression: add support for the zstd algorithm 0050ddd43b Update Go to 1.17.1 f586a473cf pkg/namesgenerator: replace uses of fmt.Sprintf() 1b8db06785 Dockerfile: update gotestsum to v1.7.0 14ff070469 Dockerfile: use "go install" to install utilities a7a7c732c0 Dockerfile: use version for some utilities instead of commit-sha 3cec4b8cd4 Dockerfile: remove GOPROXY override (was for go < 1.14) 3c7c18a499 remove deprecated "nokmem" build-tag for runc 1de1d26eda api/swagger: move DistributionInspect to definitions 9c0ca67e95 api/swagger: rename PluginPrivilegeItem to PluginPrivilege a207eea6a4 api/swagger: fix up event-types and move to definitions 303ea8e820 pkg/plugins: fix compatibility with go1.16 a826ca3aef daemon.WithCommonOptions() fix detection of user-namespaces 4045c4ceaf client: use subtests for TestNetworkInspect c23eae3114 libnetwork/ipamapi: godoc fixes 92ea7df3d1 libnetwork: fix some linting issues c425188bc0 libnetwork: remove API, as it's no longer used accec292c1 pkg/sysinfo: use containerd/pkg/seccomp.IsEnabled() 7ce810c771 use defer to unlock mutex 073f8df0fe libnetwork/types: remove TransportPort.FromString() as it's unused 7c0d8fa5da libnetwork/types: remove PortBinding.FromString() as it's unused 513310f776 libnetwork/types: remove GetMinimalIPNet() as it's unused 1a67e9572e cmd/dockerd: add the link of "the documentation" c55a4ac779 refactor: move from io/ioutil to io and os package 6f5beea146 Remove platform argument from Puller interface. 6a72e73c1d fix potential goroutine leak by making channel non-blocking Signed-off-by: Shihao Xia <charlesxsh@hotmail.com> ee9e526764 Only check if route overlaps routes with scope: LINK aa606307b7 vendor: update archive/tar to match Go 1.17.0 686be57d0a Update to Go 1.17.0, and gofmt with Go 1.17 21faae85ee vendor: update tar-split to v0.11.2 247f4796d2 api/types/events: add "Type" type for event-type enum 9ed88a0801 hack/vendor.sh: allow go version to be specified with .0 d48c8b70a1 vendor: golang.org/x/sys 63515b42dcdf9544f4e6a02fd7632793fde2f72d (for Go 1.17) 82c978ad95 vendor: github.com/opencontainers/runc v1.0.2 14189170d1 update runc binary to v1.0.2 b585c64e2b info: remove "expected" check for tini version 25dbeab78e Fix a typo in project/GOVERANCE.md 96e4adfdc2 api/types/versions: simplify compare if versions are equal 83ec46a7e6 libcontainerd/local: fix GoDoc f68260ba22 Dockerfile: frozen images: update to bullseye, remove buildpack-dep 1effe7435a Dockerfile: add back libseccomp-dev to cross-compile runc 43c6a3d359 Dockerfile: update to debian bullseye d7abbd01eb Jenkinsfile: windows 2022 LTSC mcr.microsoft.com/windows/servercore:ltsc2022 7e67bc067f integration/libnetwork: make delInterface() a t.Helper() 3ab8decad7 Dockerfile: remove aufs-tools, as it's not available on bullseye 882fd19f39 Dockerfile: update to docker/dockerfile:1.3, and remove temporary fix d215d3477b libnetwork/resolvconf: remove README.md 98caf09f0f fix go-digest to make sure the algorithms are registered 572498be56 move pkg/ioutils.HashData() to libnetwork/resolvconf c21be64e1a libnetwork: remove resolvconf/dns package c9ba301a49 libnetwork: move resolvconf consts into the resolvconf package 8f75d8d4d5 Fix swagger docs to match the opencontainers image-spec ef44b22085 Extract PluginPrivilegeItem as explicit type definition 52a9f1689a Use explicit object names for improved swagger based code generation 9275268110 Fix ContainerSummary swagger docs 6b53f2c5a2 Add "changes" query parameter for /image/create to swagger docs d741c14f1f Add RestartPolicy "no" to swagger docs a6692ccc0b Windows CI: Make sure that correct version of containerd-shim-runhcs-v1.exe is used b90dd66bdd testutil: don't import "opts" package 427ad30c05 libnetwork: remove unused "testutils" imports 1285c6d125 Windows CI: Add support for testing with containerd c44b90f3bf Test fix for Windows compatibility 97ede9df26 Rename Matches to MatchesOrParentMatches 9bae4f2f24 Add more optimal MatchesUsingParentResult method, use it in pkg/archive 002b38dc36 integration/network: remove unused CheckKernelMajorVersionGreaterOrEqualThen 8a25d752a9 integration/network: remove IsUserNamespace in favor of testenv equivalent e53f65a916 pkg/signal: remove DefaultStopSignal const 3b316814f9 container: un-export DefaultStopTimeout 8e0d43dda7 docs/api: add node about concurrency on /system/df endpoint 135cec5d4d daemon,volume: share disk usage computations 5adc29ffe2 daemon: sort imports according to gofmt 4706e1c37d Jenkinsfile: update Windows 2022 insider to latest tag (10.0.20348.1) d081e5d70c runconfig: decodeContainerConfig() return early if there's no HostConfig e8e278c44f daemon: simplify networking config b1f7ffea9f Update Go to 1.16.7 27aaadb710 daemon: normalize seccomp profile as part of setupSeccompProfile() 04f932ac86 daemon: move custom seccomp profile warning from CLI to daemon side f8795ed364 daemon: allow "builtin" as valid value for seccomp profiles 68e96f88ee Fix daemon.json and daemon --seccomp-profile not accepting "unconfined" ac449d6b5a daemon/config: rename the default seccomp profile to "builtin" ee02257553 Add const for "unconfined" and default seccomp profiles a6dd341ca2 client: remove deprecated SetCustomHTTPHeaders(), CustomHTTPHeaders() 8afb57e633 client: deprecate client.CustomHTTPHeaders() 0fdd23b7fe API: discard `/system/df` `type` parameter pre-1.42 6948ab4fa1 api/types: hostconfig: fix LogMode enum 5ae1c1f4cf api/types: hostconfig: clean up enum for Isolation 09cf117b31 api/types: hostconfig: create enum for CgroupnsMode 98f0f0dd87 api/types: hostconfig: define consts for IpcMode a18cf3e4ef daemon: paralellize disk usage computations 58c4c120a8 oci/caps: simplify, and remove types that were not needed fc3f98848a oci/caps: improve error message for unsupported capabilities 72b1fb59fe oci/caps: use map for capabilities to simplify lookup d786a52364 oci/caps: generate list of all capabilities on "init" 0ec6f7ea23 oci/caps: minor optimization in init b00b21b93c oci/caps: rename some vars that conflicted with imports / built-ins 94334153b5 oci/caps: remove hack for RHEL6 kernels 9499acc360 bump up rootlesskit to v0.14.4 c1c973e81b Revert "Temporarily disable CAP_PERFMON, CAP_BPF, and CAP_CHECKPOINT_RESTORE" 3af2217dc4 hack/test/unit: run libnetwork tests sequentially b821590461 libnetwork/networkdb: consistently wait for nodes in tests 8fbba73f42 libnetwork: wait until t.Deadline() instead of hardcoded value fb794166d9 seccomp: Use explicit DefaultErrnoRet 5f0703c549 client: remove containerd "platform" dependency b33f3c7802 client: remove unused Platform field from configWrapper 3d58d13811 vendor: github.com/containerd/containerd v1.5.5 4a07b89e9a update containerd binary to v1.5.5 e3491ab56a pkg/archive: gzDecompress(): use local vars for MOBY_DISABLE_PIGZ b321474747 pkg/archive: DetectCompression(): use bytes.HasPrefix() ebeda658bc pkg/archive: remove some debug logs dc7c06ce4e vendor: github.com/docker/swarmkit 3629f50980f6c0dd5ccd7dbfa0956b57ea0cd78d e05fc8ca35 builder/dockerfile: make normalizeDest() platform-specific again 337500f374 builder/dockerfile: make containsWildcards() platform-specific again 131fac6eb4 builder/dockerfile: remove fromSlash() and separator() utils 190b6f64e3 builder/dockerfile: copy: remove LCOW code c33b9bcfd4 libcontainerd/local: remove LCOW bits 13cb04e57c remove various LCOW bits (container, image, pkg/containerfs) 0998c7e363 system: remove LCOWSupported() utility dc70e55c9b distribution: remove LCOW code 79f89ed9b7 hack/ci: remove LCOW from examples, and fix minor linting issue 0c84c322ae daemon, oci: remove LCOW bits 47ad2f3dd6 API,daemon: support `type` URL parameter to /system/df 9f6b562dd1 seccomp: add support for "clone3" syscall in default policy 384517218a volume/mounts: remove windowsValidateRegex() utility 71b0e47bee volume/mounts: add destination validation to "validators" cff0276aaf volume/mounts: rename windowsSplitRawSpec() to splitRawSpec() f77eb5349b volume/mounts: minor formatting and linting fixes efb87ad106 volume/mounts: pre-compile regular expressions 3deac5dc85 btrfs: annotate error with human-readable hint string a34d804572 integration: remove deprecated endpoint test 90f8d1b675 fileutils: Fix incorrect handling of "**/foo" pattern 17f39dcb4d fix a typo 28409ca6c7 replace pkg/signal with moby/sys/signal v0.5.0 dd01abf9bf integration: copy loop variable into parallel test closures d5dbbb5369 storage-driver: promote overlay2, make Btrfs and ZFS opt-in 4fc2d4df03 vendor: github.com/containerd/containerd v1.5.4 22316ff1d8 Makefile: update buildx version to v0.6.0 cf1328cd46 update containerd binary v1.4.8 549060a1d3 vendor: github.com/sirupsen/logrus v1.8.1 82b264bd2d vendor: github.com/coreos/go-systemd/v22 v22.3.2 9f9a0b872c vendor: github.com/cilium/ebpf v0.6.2 1256aa0241 vendor: github.com/opencontainers/runc v1.0.1 f50c7644cf update runc binary to v1.0.1 8de724390e Makefile: do not tag docker-dev image with GIT_BRANCH 0ef7e727d2 seccomp: Seccomp: embed oci-spec LinuxSeccomp, add support for seccomp flags bfd4b64600 seccomp: setupSeccomp(): update errors and remove redundant check c815b86f40 seccomp: add additional unit-tests c1ced23544 seccomp: use oci-spec consts in tests b309e96b11 seccomp: improve GoDoc for Seccomp fields 6ff6913ac4 pkg/signal: remove gotest.tools dependency 0880df4644 pkg/signal: move Trap() to cmd/dockerd ea5c94cdb9 pkg/signal: move signal.DumpStacks() to a separate package 7d63cbfd38 api/types: add GoDoc to Info.Warnings field 4ace1998e5 pkg/sysinfo: use correct name for AppArmor in t.Skip() 9b795c3e50 pkg/sysinfo.New(), daemon.RawSysInfo(): remove "quiet" argument 1fb62f455c pkg/sysinfo: collect warnings in SysInfo struct 208d3c6efb pkg/sysinfo: move cg2Controllers to be a field in SysInfo and unify v1/v2 5cc20ad9e5 pkg/sysinfo: adjust Opt to set new field ca27b473cc pkg/sysinfo: move cg2GroupPath to be a field in SysInfo e70c5ea1a9 pkg/sysinfo.newV2() remove redundant path.Clean() 6677ab6a63 pkg/sysinfo: move cgMounts to be a field in SysInfo 10ce0d84c2 pkg/sysinfo.New() move v1 code to a newV1() function 1d055267a8 updated names-generator.go for alphabetization 84df737f50 vendor: github.com/containerd/containerd v1.5.3 5ae2af41ee Update containerd binary to v1.5.3 3334fb9af1 Fix up vndr tooling 2af9bd3b26 API: add shared-size parameter to image queries bf9c76f0a8 API, daemon/images: add ImageListOptions and pass context fe6f1a4067 Bump go 1.16.6 (addresses CVE-2021-34558) 2837fba75f libnetwork: ensure all nodes are available in tests cdd04a94bc vendor: hashicorp/memberlist, google/btree (dep) update d7a2635537 libnetwork: make rejoin intervals configurable a985655ac4 Move containerd.service from Requires= to Wants= 31348afa19 API: deprecate `BuilderSize` in API versions >= 1.42 115b37b8f7 daemon: use object literal for stats 0ff80c844d daemon/config.New(): rewrite to be slightly more idiomatic 5588a78ab3 daemon/config: restrict "unix" code is linux 96f843ef30 daemon/config: move "common" tests 9d9679975f daemon/config: remove CommonUnixConfig type defeab7387 daemon/config: remove commonUnixBridgeConfig a65f83317c daemon/config: reorganize code between unix and windows files f7eaf2bf78 Update hcsshim vendor to v0.8.20 83e3dd68ca swagger: add BuildCache example to `/system/df` aff02dbcaf Updated check_config 5d244675bd seccomp: Sync fields with runtime-spec fields f2225933bb API: ensure empty build cache is represented as empty JSON array 68b095d4df API: fix 404 status description on container create 477244cca5 API: update API version to v1.42 42d2048b9d Dockerfile: update go-swagger to fix validation on Go1.16 8e3f9fd032 volume/mounts: use sub-tests, and use gotest.tools 73378d2042 volume/mounts: don't use global variable for fileinfoprovider 28b0f47599 volume/mounts: add constructors for each parser df179a1d6a volume/mounts: split tests per parser 536818508d volume/mounts: move TestConvertTmpfsOptions 300c11c7c9 volume/mounts: remove "containerOS" argument from NewParser (LCOW code) f3d08d59aa volume/mounts: move some code to correct location, and minor linting/formatting af3e5568fc daemon/images: fix shared size computation for filtered requests a8d92be6e8 Use crypto/rand 9f0e268b00 Fix use of unsafe ptr #42444 b308097ec3 daemon/images: refactor image listing 00a4f67ddf Reduce TestClientWithRequestTimeout flakiness 7a6cac2b23 Run s390x tests on Ubuntu 20.04 0c1a125644 libnetwork: processEndpointCreate: Fix deadlock between getSvcRecords and processEndpointCreate 345a180a55 there is no file named mkimage-rinse.sh in contrib floder, should delete it 2050e085f9 hack: remove proxy.installer 2bec9f607f Remove spurious libnetwork vendor entry. 116f200737 Fix gosec complaints in libnetwork 0645eb8461 Remove libnetwork/client package e7cf711c02 Move proxy CLI to main cmd/ 7266a956a8 Remove dnet libnetwork cli 42bcc2df68 Remove leftovers from libnetwork move b5835646eb registry: remove const for 'Docker-Distribution-Api-Version' header e93132e273 Add s390x to cross platforms target 3a208c0ff9 Add ppc64le to cross platforms target f558056d2b Make validate flag description more generic 9973dc67dd Jenkinsfile: add stage for Windows 2022 on containerd 8f80e55111 Add configuration validation option and tests. 52744fccdd contrib: remove report-issue.sh script 7168d98c43 Remove libseccomp dependency in runtime-dev-cross-true image It turns out libseccomp is not used for building docker at all. It is only used for building runc (and needs libseccomp > 2.4) 7c97896747 libnetwork: processEndpointDelete: Fix deadlock between getSvcRecords and processEndpointDelete 72549d4ca1 Fix cross compilation in Jenkinsfile 64badfc018 update runc binary to v1.0.0 GA af1e74555a vendor: moby/term, Azure/go-ansiterm for golang.org/x/sys/windows compatibility 8610d8ce4c rootless: fix "x509: certificate signed by unknown authority" on openSUSE Tumbleweed 967ec6f2e8 Fix typo in macvlan_setup.go 46c591b045 pkg/system: deprecate some consts and move them to pkg/idtools 26f5db7a1d pkg/system: remove unused system.Unmount() utility 5f04517c48 pkg/system: remove deprecated GetOSVersion(), consts, SecurityInfo utils. 6988f786f1 vendor swarmkit to 2dcf70aafdc9ea55af3aaaeca440638cde0ecda6 472f21b923 replace uses of deprecated containerd/sys.RunningInUserNS() c7cd1b9436 profiles/seccomp.Syscall: use pointers and omitempty d92739713c seccomp.Syscall: embed runtime-spec Syscall type 7cf079acdb quota: adjust build-tags to allow build without CGO ff141d366f netutils: minor cleanups 888e75dfc9 netutils: remove unused ErrNoDefaultRoute c21eaf9a07 portmapper: move mockProxyCommand to a _test file ac8c80d6f1 portmapper: change userlandProxyCommandName to a const f6be7f2945 portmapper: minor linting fix, and comment purpose of newProxy variable 4231dbca23 portmapper: don't compile linux-only code on Windows c2c0b8dc4e docs: fix image name in testing guide 3eb1257698 revendor BuildKit (master branch) 8733144f8b vendor: github.com/tonistiigi/fsutil d72af97c0eaf93c1d20360e3cb9c63c223675b83 225f764652 vendor: golang.org/x/sync 036812b2e83c0ddf193dd5a34e034151da389d09 037c26d863 vendor: golang.org/x/net e18ecbb051101a46fc263334b127c89bc7bff7ea e1ae2d28fb vendor: golang.org/x/time 3af7569d3a1e776fc2a3c1cec133b43105ea9c2e 28156f4a2e vendor: golang.org/x/crypto 0c34fe9e7dc2486962ef9867e3edb3503537209f 1dac53860c Adjust buildmode comment to link to commit 73aef6edfe ReplaceFileTarWrapper: permit to override file name 2cd68d5268 don't use buildmode=pie on ppc64 13828e430d Bump swarmkit to get fix for rollback failure 76640e5d39 drivers/bridge: format comments da0a006b14 drivers/bridge: dont use types.ParseCIDR() for fixed value 31d3468146 windows: remove redundant init() dc7cbb9b33 remove layerstore indexing by OS (used for LCOW) 3ed804aeca updated vendored archive/tar to go1.16.5 f400e84a43 update archive/tar patch for go 1.16 ae5ddd257c Bump go 1.16.5 594c972fc5 golangci.yml: do not limit max reported issues 22ce0f8faa golangci.yml: skip some tests ea74765a58 golangci.yml: update regex for ignoring SA1019 e6dabfa977 graphdriver: temporarily ignore unsafeptr: possible misuse of reflect.SliceHeader d61b7c1211 daemon: var-declaration: should omit type bool (revive) 16ced7622b daemon/config: error strings should not be capitalized bb17074119 reformat "nolint" comments dd1374f7b2 if-return: redundant if ...; err != nil check (revive) 4004a39d53 daemon/splunk: ignore G402: TLS MinVersion too low for now 7b071e0557 pkg/archive: RebaseArchiveEntries(): ignore G110 09191c0936 daemon/stats: fix notRunningErr / notFoundErr detected as unused (false positive) 7c91fd4240 unused: ignore false positives b4c0c7c076 G601: Implicit memory aliasing in for loop d13997b4ba gosec: G601: Implicit memory aliasing in for loop f77213efc2 gosimple: S1039: unnecessary use of fmt.Sprintf f7433d6190 staticcheck: SA4001: &*x will be simplified to x. It will not copy x b92be7e297 client: S1031: unnecessary nil check around range (gosimple) d43bcc8974 daemon/logger/journald: fix linting errors 6b0ecacd92 gosec: G404: Use of weak random number generator c7b1e5ba38 portallocator: log instead of discard port-range failures 1f398f06aa portallocator: minor refactor for readability 1f90fdd973 portallocator: use const for default port-ranges, instead of init() 076d9c6037 daemon: remove graphdriver indexing by OS (used for LCOW) 350e303c7f endpoint: remove redundant doUpdateHostsFile() function 508a0979d9 bridge: remove unused "others" argument from isolateNetwork() 08ddbfbdac libcontainerd: remove LCOW bits 117bca149f libnetwork/resolver: fix minor linting issues 0d9b0ed678 Fix possible overlapping IPs 774b970cb1 libnetwork: remove MAINTAINERS and LICENSE e90d6abfcd libnetwork: update Dockerfile to Go 1.13.15 a384f83e7a libnetwork: remove CircleCI config and code bc8acc5b08 pkg/fileutils: PatternMatcher.Matches(): remove debug logging 9f6add406e networkdb: mark test-helpers as t.Helper() 25879d3134 Remove a lot of outdated "project/PACKAGERS.md" text b6052669e6 vendor: swarmkit master (after libnetwork move) d15ce134ef Fix log statement 'failed to exit' timeout accuracy 424c0eb3c0 docker pull: warn when pulled single-arch image does not match --platform 22186d2645 vendor: github.com/opencontainers/selinux v1.8.2 aa4dce742f daemon: improve handling of ROOTLESSKIT_PARENT_EUID a7ecbd4b29 libnetwork: replace BurntSushi/toml with pelletier/go-toml 7c1c123555 vendor: github.com/containerd/containerd v1.5.2 989cd6e8f6 vendor: github.com/containerd/typeurl v1.0.2 0bc4035f76 vendor: github.com/containerd/go-runc v1.0.0 (add version comment) 0691addf6a vendor: github.com/containerd/cgroups v1.0.1 134b73a1ea vendor: github.com/containerd/continuity v0.1.0 bfb5b8017b vendor: github.com/containerd/fifo v1.0.0 778c8f787d Update AUTHORS and mailmap 7ef6ece774 Fix setting swaplimit=true without checking ffc6d8d3dd contrib/check-config.sh: Remove awk dependency e047d984dc Remove LCOW code (step 1) 0dd8bc6d31 Fix flakey test TestNetworkDBIslands b3c883bb2f Skip libnetwork integration tests on Windows 7186fd8a95 More libnetwork windows test fixes d414c0c1e8 replace uses of deprecated libcontainer/configs.Device a927fc7831 vendor: github.com/opencontainers/runc v1.0.0-rc95 f0d3e905b6 vendor: golang.org/x/sys d19ff857e887eacb631721f188c7d365c2331456 8db4c4ca01 vendor: golang.org/x/net 6772e930b67bb09bf22262c7378e7d2f67cf59d1 b7dbed85b3 vendor: github.com/opencontainers/runtime-spec v1.0.3-0.20210326190908-1c3f411f0417 56481e899d vendor: github.com/cilium/ebpf v0.5.0 473817206e vendor: rename ebpf README 6c954ffd32 vendor: temp rename ebpf readme 4b981436fe Fixup libnetwork lint errors b53b85ca40 Remove libnetwork leftover vendor stuff 00b2c13a1b Fix some windows issues in libnetwork tests 9184f7fdff Ensure ip6table_filter module on all ci nodes for libnetwork 20fd1dd7d2 Skip some windows network driver tests 72c4a7b496 Fix issues running libnetwork tests. 4da0dc974c Ensure docker-proxy is installed in unit-test ci e837dd0fb8 Add urfave/cli for libnetwork cmd's 86c8b8f1a0 Move proxy build into hack/make 94017da880 Use buildkit fork which uses new libnetwork import 7abc3e83c9 Use tmp swarmkit fork for libnetwork import a0a473125b Fix libnetwork imports c8e6ad1adc Dockerfile: install criu from binary repo bf07c06c63 daemon: move DefaultShimBinary, DefaultRuntimeBinary to config package 34b854f965 daemon: un-export ModifyRootKeyLimit() 95d69658be daemon: un-export VerifyCgroupDriver() a506630e57 daemon: use sync.Once for systemd detection e7ba5cacc6 daemon: un-export IsRunningSystemd() 61b04b3a02 vendor: github.com/moby/buildkit v0.8.3-3-g244e8cde 7a1716462c changelog: fix incorrectly named libnetwork label cd40eb89ae Fix client request error handling 2865d17233 Update contrib/check-config.sh f1e7d02a78 Update contrib/check-config.sh 0f77b22dbe Update contrib/check-config.sh 79ee285d76 vendor: github.com/moby/buildkit v0.8.3 a6a98d6928 vendor: github.com/fluent/fluent-logger-golang 1.6.1 1ce955ec83 contrib/check-config.sh: Make script POSIX 05f520dd3c pkg/signal: ignore SIGURG on all platforms 22b9e2a7e5 vendor: github.com/ishidawataru/sctp f2269e66cdee387bd321445d5d300893449805be e4109b3b6b vendor: github.com/docker/libnetwork 64b7a4574d1426139437d20e81c0b6d391130ec8 fb5a9ec741 Limit the rate at which logger errors are logged into daemon logs d72722f97c Add Samuel Karp as a maintainer 31b2c3bbd9 hack/vendor: add check for vendored archive/tar 8e3186fc8f update containerd binary to v1.5.2 b7ebf32ba3 pkg/signal.CatchAll: ignore SIGURG on Linux 719504b810 vendor: github.com/ishidawataru/sctp f2269e66cdee387bd321445d5d300893449805be efec2bb368 update runc binary to v1.0.0-rc95 151ec207b9 Makefile: install buildx from binary release, instead of building 7070df3a3e integration: ensurePlugin: disable go modules when building plugin 8bae2278ba hack/ci/windows.ps1: disable go modules fe54215fb3 Update test certificates 2fea30f146 hack: add script to regenerate certificates 2842639e0e pkg/fileutils: TestMatches: remove cases no longer valid for go1.16 466e21b273 hack/validate: skip DCO in "default" 22c0291333 update containerd binary to v1.5.1 85167fc634 builder-next: relax second cache key requirements for schema1 82c7e906ea Jenkinsfile: skip ppc64le and s390x by default on pull requests 35c1542ec7 contrib: remove unused "rpm" variant of systemd unit 2f0d6664a1 integration: remove KernelMemory tests 9303376242 Swarm config: use absolute paths for mount destination strings 8c019e830a Update runc binary to v1.0.0-rc94 3987dc264b vendor: github.com/godbus/dbus/v5 v5.0.4 7a956d1342 vendor: github.com/coreos/go-systemd/v22 v22.3.1 a40197328e oci/caps: remove unused GetCapability() and ValidateCapabilities() e5ae83e503 volumes: only send "create" event when actually creating volume 8844c48523 vendor: github.com/moby/sys/mountinfo v0.4.1, github.com/moby/sys/mount v0.2.0+ 4d3f64da63 API-client: remove unused ContainerListOptions.Quiet field 9b2f55bc1c update containerd binary to v1.5.0 56c88c94dd Added missing test cleanup for temporary directory cf259eb8a0 Wait for `run` goroutine to exit before `Close` 489f57b877 Add security privilege needed to write layers when windows VHDX used as docker data root 4300a52606 rootless: disable overlay2 if running with SELinux cdaf82ba3f dockerd-rootless.sh: avoid /run/xtables.lock EACCES on SELinux hosts 42b1175eda hack/dind: fix cgroup v2 evacuation with `docker run --init` 325668315c fix port forwarding with ipv6.disable=1 7c731e02a9 grpc: make sure typed errors handler is installed 42a485f7fa Update Microsoft/go-winio to version 0.4.19 b6a05b7371 Add John Howard to our alumni c9a62831ba Move Michael Crosby to alumni 5a5f8564ba builder/dockerfile: add "ALL_PROXY" to list of default build args e928692c69 dockerd-rootless.sh: use `command -v` instead of `which` 6d1eceb509 Fix panic in TestExecSetPlatformOpt, TestExecSetPlatformOptPrivileged bffa730860 Prepare tests for Windows containerd support f41a6d5c95 enforce order of lock acquisitions on network/controller, fixes #2632 1c7585a7da vendor: github.com/docker/swarmkit 5a5494a9a7b408b790533a5e4e1cb43ca1c32aad 2bef937507 vendor: github.com/coreos/etcd v3.3.25 6202322b60 vendor: github.com/containerd/containerd 19ee068f93c91f7b9b2a858457f1af2cabc7bc06 8b385fde57 vendor: github.com/gogo/protobuf v1.3.2 3980d0462d Remove needless check 825e9855b7 Remove lowenna (aka jhowardmsft) from maintainters 3cd025bc67 bump up rootlesskit to v0.14.2 c35cefb489 Dockerfile: update yamllint to v1.26.1 to fix build 225e046d9d Error string match: do not match command path e57a365ab1 docker kill: fix bug where failed kills didnt fallback to unix kill 8e362b75cb docker daemon container stop refactor 1ec689c4c2 btrfs: Do not disable quota on cleanup 948e201c1c vendor: github.com/containerd/console v1.0.2 a0d1a1f78c Update contrib/nuke-graph-directory.sh 8f4b3b0ad4 pkg/archive temporarily skip some tests on Windowsd V19H1 (1903) and up b5f0096584 Jenkinsfile: temporarily use insider build for Windows 2022 (SAC) e13d41db1b Jenkinsfile: update to Windows 2022 0100a9ebc1 Jenkinsfile: windows-1903: send junit.xml results fa194ec86c Jenkinsfile: add stage for Windows 1903 (SAC) 2834f842ee Use containerd's apparmor package to detect if apparmor can be used 42ef2c5036 vendor: github.com/containerd/containerd 55eda46b22f985cde99b599e469ff9c13994bf68 928227a456 vendor: golang.org/x/sync 6e8e738ad208923de99951fe0b48239bfd864f28 e538720da7 vendor: github.com/coreos/go-systemd/v22 v22.1.0 5761fca80d vendor: github.com/containerd/containerd fbf1a72de7da110187b7d3dace433914b9beca10 ab1dd80877 vendor: github.com/containerd/containerd b9092fae15f1814a5402bea1ceb0fa21ce1c785c 398cb1dc4f Fixes subvol delete on a non-btrfs volume 452f82d5fc Bump hcsshim to get some fixes. eefb6c672a Fix typo on the v1.41 changelog 257b4db186 testing: update docker-py 5.0.0 a876ede24f Use docker media type for plugin layers 00cb3073f4 Fix flaky TestInspect bedefacfd5 Jenkinsfile: update check-config.sh to latest version 2a7c1cc1d6 libcontainerd/supervisor: replace BurntSushi/toml with pelletier/go-toml 1d4a273487 validate/toml: switch to github.com/pelletier/go-toml 97a5b797b6 Use designated test domains (RFC2606) in tests 248f98ef5e rootless: bind mount: fix "operation not permitted" b7c3548c82 Pin arm64 machines to a specific Ubuntu version 45021ee354 bump up rootlesskit to v0.14.1 b14bf43764 check-config.sh: add SELinux and AppArmor 6322dfc217 archive: do not use overlayWhiteoutConverter for UserNS 67aa418df2 overlay2: doesSupportNativeDiff: add fast path for userns dd97134232 overlay2: call d.naiveDiff.ApplyDiff when useNaiveDiff==true 62b5194f62 btrfs: Allow unprivileged user to delete subvolumes (kernel >= 4.18) 0450728267 vendor: docker/libnetwork b3507428be5b458cb0e2b4086b13531fb0706e46 c8599a6537 fix assertPortList normalizing being too strict 5ffcd162b5 discovery & test: Fix goroutine leaks by adding 1 buffer to channel d6ddfb6118 rootless: fix getCurrentOOMScoreAdj cbc6cefdcb hack: use GOPROXY for rootlesskit to workaround issue with old git on CentOS/RHEL 7 1c72a68f2a check-config.sh: add SECCOMP_FILTER a432eb4b3a ContainerExecStart(): don't wrap getExecConfig() errors, and prevent panic 6eb5720233 Fix daemon.getExecConfig(): not using typed errNotRunning() error c6038b4884 integration-cli: rely less on "docker port" output format f845b98ca6 integration: update getExternalAddress to prefer IPv4 54ca929a70 integration/container: wrap some long lines for readability e166af959d update rootlesskit to v0.14.0 0f32beb4f8 libcontainerd: remove unused consts 9637be0e9d libcontainerd: remove unused win32 errors (leftover from TP4) 601707a655 TestPushMultipleTags: Add support for 20.10 CLI 5a664dc87d jsonfile: more defensive reader implementation e31086320e Remove cli test for duplicate --net/--network opts 0c3be53107 integration-cli: Fix race in TestServiceLogsFollow test case 039e9670cb info: unset cgroup-related fields when CgroupDriver == none fb886a119b vendor: github.com/spf13/cobra v1.1.3 a09c0276a2 builder: produce error when using unsupported Dockerfile option 4be98a38e7 Fix handling for json-file io.UnexpectedEOF a8008f7313 overlayutils/userxattr.go: add "fast path" for kernel >= 5.11.0 11ef8d3ba9 overlay2: support "userxattr" option (kernel 5.11) 1600e851b5 Use buster backports to build with libseccomp-2.4.4 d10046f228 Add an option to skip create log stream for awslogs driver 7024564c48 Correct name (right) sort order 1a49393403 update containerd binary to v1.4.4 d39b075302 Enable `process_vm_readv` and `process_vm_writev` for kernel > 4.8 ae6cf966f9 fix typo in comments f23c1c297d pkg/archive: TestUntarParentPathPermissions requires root f2f1c0fe38 dockerd-rootless-setuptool.sh: create CLI context "rootless" 5f6db3a077 rootless: Set service type to `notify` 328de0b8d9 Update documentation links 088e6ee790 Include VPNkit binary for arm64 9bf93e90fa builder: fix incorrect cache match for inline cache with empty layers 9962a3f74e vendor: github.com/moby/buildkit v0.8.2 8dc6c109b5 dockerd-rootless.sh: add typo guard 9351e19658 dockerd-rootless.sh: prohibit running as root 80cc1f1d6f registry.Auth: try next endpoints on non-auth failures 588da41f52 distribution: fix errors tests 7a50fe8a52 Remove more of registry v1 code. 083dbe9fcd Dockerfile: switch to "stable" dockerfile front-end cbd2f726bf Update Swarmkit to pick up fixes to heartbeat period and stalled tasks 0f3b94a5c7 daemon: remove migration code from docker 1.11 to 1.12 ff1d9a3ec5 Update v1.41.yaml e8ceb97646 check-config.sh: add NETFILTER_XT_MARK 50f39e7247 Move cpu variant checks into platform matcher 8d73c1ad68 Check the length of the correct variable #42039 1cd1925acd oci.Device() fix FileMode to match runtime spec 4be5453215 Fallback to manifest list when no platform match 25ada76437 pkg/archive: Unpack() use 0755 permissions for missing directories b53ea19c49 builder: fix pull synchronization regression 8128a9a478 Fix grammar in client function comments 1d2a660093 Move cgroup v2 out of experimental fa480403c7 TestBuildUserNamespaceValidateCapabilitiesAreV2: verify build completed 26965fbfa0 TestBuildUserNamespaceValidateCapabilitiesAreV2: use correct image name e32ae1973a Update rootlesskit to v0.13.1 to fix handling of IPv6 addresses 5c01d06f72 builder: fix blobs releasing via leases after pull 28e5a3c5a4 update runc binary to v1.0.0-rc93 2ad187fd4a Fix userns-remap option when username & UID match 8e2343ffd4 docs: fix NanoCPUs casing 2bd46ed7e5 api: fix NanoCPUs casing in swagger 58825ffc32 Fix for lack of syncromization in daemon/update.go 96e103feb1 Update TestDaemonRestartWithLiveRestore: fix docker0 subnet missmatch Fix docker0 subnet missmatch when running from docker in docker (dind) ba7906aef3 archive: avoid creating parent dirs for XGlobalHeader 137f86067c Add test coverage for seccomp implementation dd7ee8ea3e Dockerfile.simple: Fix compile docker binary error with btrfs 654f854fae reject null manifests c747d9f8ee pull: Validate layer digest format 94c07441c2 buildkit: Apply apparmor profile 28a623aa3a vendor buildkit 68bb095353c65bc3993fd534c26cf77fe05e61b1 7f5e39bd4f Use real root with 0701 perms 4b5aa28f24 Do not set DOCKER_TMP to be owned by remapped root 66dffbec86 Ensure MkdirAllAndChown also sets perms 227687f2ef rootless: support --pid=host 7994443c15 integration: port TestRunModePIDHost from CLI test to API test c23b99f4db Jenkinsfile: add cgroup2 c316dd7cc5 TestInspectOomKilledTrue: skip on cgroup v2 e192ce4009 Move container exit state to after cleanup. 05566adf71 rootless: set systemd KillMode to mixed 240d0b37bb docs: fix double "the" in existing API versions 54eff4354b profiles: seccomp: update to Linux 5.11 syscall list 30b20a6bdd Dockerfile.buildx: update buildx to v0.5.1 14fb165085 testing: update docker-py 4.4.1 d5d5cccb7e pkg/archive: allow mknodding FIFO inside userns 7ca0cb7ffa Use golang.org/x/sys/execabs 5d3b0102f7 Use hostIP to decide on Portmapper version 2db5676c6e swagger.yaml: Remove extra 'the' wrapped by newline 5cc1753f2c Fix daemon panic when starting container with invalid device cgroup rule ec416c51b7 TestCgroupNamespacesRunOlderClient: support cgroup v2 42dba8c3f9 Fix spurious error from "docker load" bb11365e96 Handle long log messages correctly on SizedLogger 00225e220f docker info: adjust warning strings for cgroup v2 8086443a44 docker info: silence unhandleable warnings 4f9af99194 Fix regression in docker-proxy 399695305c Fix builder inconsistent error on buggy platform 2903863a1d Add shim config for custom runtimes for plugins 4f36640553 volumes/local: gofmt 06d9020fac contrib/check-config.sh: fix INET_XFRM_MODE_TRANSPORT 18e0543587 contrib/check-config.sh: fix IOSCHED_CFQ CFQ_GROUP_IOSCHED 070f9d9dd3 contrib/check-config.sh: fix MEMCG_SWAP_ENABLED 03da41152a contrib/check-config.sh: fix NF_NAT_NEEDED eeb53c1f22 contrib/check-config.sh: fix NF_NAT_IPV4 76b59065ae contrib/check-config.sh: support for cgroupv2 c9ec21e17a replace json.Unmarshal with NewFromJSON in Create 46dfc31342 integration: fix TestBuildUserNamespaceValidateCapabilitiesAreV2 not using frozen image 7c7e168902 builder: ensure libnetwork state file do not leak a6d7b43dfc fixed IPv6 iptables rules for enabled firewalld 64465f3b5f Fix Error in daemon_unix.go and docker_cli_run_unit_test.go e6591a9c7a Make test work with rootless mode 4e8f3bcee1 docs: fix typos in API docs f47b27e590 API: fix typos in swagger 95eb490780 Use v2 capabilities in layer archives 33a82a26a8 Fix IPv6 Port Forwarding for the Bridge Driver 06308f4d37 setup IPv4 and IPv6 iptables chain d14b7a5191 fixed ip6tables command in error message b7c663c2ec Make sure IPv6 is enabled for IP6tables 273eae8a11 Revert "systemd: add multi-user.target to After list" 4886e5e5b1 Added improved IP validation for port mapper 27801b9ef8 vendor: update github.com/Microsoft/hcsshim v0.8.10 (back to tagged release) 19eda6b9a2 Update daemon_linux.go for preventing off-by-one f4aafedc48 container: minor cleanup/refactor 5c0b694ef3 container: make hostconfig.json non-world-readable (0600) 1571e9331b Use specific APIs for shared mount-point behaviour 695b151a18 Work around small disk on Windows-RS5 CI nodes db7b7f6df9 Parse storage-opt in GraphDriver init on Windows 56d378a88f Apply a 127GB default WCOW Sandbox size globally 142b2b785b Add TestBuildWCOWSandboxSize integration test 009639e0f4 Do not "Bind" docker "To" containerd. 21578530d7 systemd: set OOMScoreAdjust for dockerd 77096349e1 vendor: github.com/coreos/pkg v4 768ba77d37 plugin.Manager.setupNewPlugin() remove unused blobsums argument 959dfca7e6 service_linux: Fix null dereference in findLBEndpointSandbox e9646aafa4 vendor: docker/docker 7ca355652fe0e2f7401d424d65a81dc248360127 b3b8f561f7 vendor: github.com/gogo/protobuf v1.3.1 77c68a7f6e vendor: golang.org/x/crypto 75b288015ac94e66e3d6715fb68a9b41bf046ec2 d321fc2f61 vendor: golang.org/x/sync cd5d95a43a6e21273425c7ae415d3df9ea832eeb b14bf0e66e vendor: golang.org/x/sys ed371f2e16b4b305ee99df548828de367527b76b 3c90d159f8 vendor: golang.org/x/net ab34263943818b32f575efc978a3d24e80b04bd7 b95a3f1f23 vendor: github.com/coreos/etcd v3.3.12 5ce882207d vendor: runtime-spec v1.0.3-0.20200728170252-4d89ac9fbff6 64e852ee65 vendor github.com/Microsoft/hcsshim 9dcb42f100215f8d375b4a9265e5bba009217a85 0aad792f1d vendor: containerd/cgroups 318312a373405e5e91134d8063d04d59768a1bff 2fdc3e86b1 vendor: logrus v1.6.0 05701c485e vendor: go.etcd.io/bbolt v1.3.5 e11c7fe3ab vendor: vishvananda/netns db3c7e526aae966c4ccfa6c8189b693d6ac5d202 6cbe360e47 vendor: github.com/gorilla/mux v1.8.0 e18c7629c3 vendor: docker/go-events e31b211e4f1cd09aa76fe4ac244571fab96ae47f 3e1e9e878c vendor: gotest.tools v3.0.2 5186d9e1b1 vendor: github.com/pkg/errors v0.9.1 dc6e4d8881 replace github.com/docker/docker/locker with github.com/moby/locker 6796c2cc9b client/mflag: remove use of docker/docker/pkg/homedir 681196c8f2 Remove dependency on github.com/docker/docker/opts bf28003c99 Replace use of deprecated functions 0e8b02bac4 Makefile: enable BuildKit 53688d374e CircleCI: update to Docker 19.03.12 6dde6cb0b0 drivers/macvlan: skip kernel version check 02d313ca15 drivers/bridge: skip kernel version check 304bb14ffc vendor.conf: reformat to match spacing in docker/docker a65c65d801 systemd: add multi-user.target to After list 34f4706174 added TODOs for open IPv6 point 648d891827 reworked allocatePorts 9f98bd79d8 reworked comment of IPTable struct 1e1408f421 additional EnableIPTables check in isolateNetwork a4fcced708 enabled ipv6 parameter in TestSetupIPForwarding 4d1c92c155 resorted EnableIP6Tables in driver configure 9bc2f88f04 isolateNetwork for both IP version ccad03a139 split setupIPTables into setupIP4Tables and setupIP6Tables 9cf5335269 default DROP policy on firewall reload also for IPv6 ec7df93731 replace string.Contains* with net.IP.To4() check 3475f006b7 moved some ipv6 config to setupIPForwarding dfd1925ed1 Renamed driver config variable to EnableIP6Tables 8dbb5b5a7d Implement NAT IPv6 to fix the issue https://github.com/moby/moby/issues/25407 b1a3fe4934 Add more error details on plugin get 570c5f9e76 testing: remove use of docker/docker/errdefs in tests 27345e8f8f log error instead if disabling IPv6 router advertisement failed 9fd12a5e31 client/mflag: remove use of docker/docker/pkg/homedir 42b87e6a4b types: remove some dead code 521ac858e7 doc: server API Correct ImagesCreate - platform parameter added in 1.32 e65003a722 bridge: disable IPv6 router advertisements 0c8ffda2ab Fix 'failed to get network during CreateEndpoint' 07ed00102d store.getNetworksFromStore() remove unused error return efe0ab37a1 Resolver: fix error handling if we didn't receive a response a24e5f5fd4 reduce parameters for func JoinOptionPriority 23d1ca4426 Add docker interfaces to firewalld docker zone c30d55d067 vendor: update moby/ipvs v1.0.1 c7f0b0152e Fix NPE due to null value returned by ep.Iface() 1e02aae252 Fixes a panic in the DNS resolver 4dda50d226 Fixes moby/moby#40388 d846c2b1ab vendor: update vishvananda/netlink v1.1.0 a533fe7094 Use vendored ipvs package 76b5905cbe Macvlan: Separate empty parent and internal d339e6d480 Don't disable socket activation when stopping docker service c39ac9c05e Cleanup VFP during overlay network removal 41a91e9a5d fix InhibitIPv4 nil panic 7ca71f2c49 vendor godbus/dbus v5 add7253d68 Dockerfile: update to Go 1.13.8 129e28baa3 Fix gofmt in preparation of Go 1.13 update 847f469e76 regenerate protobufs with debian buster 6dc0d4ff60 Dockerfile: update to Golang 1.12.17 c18a3a075e Dockerfile: switch to debian "buster" 2a480d515e Bump the DNS library and revendor 9cd3fb6796 Re-vendor with newer vndr c7f8bfa001 Fix internal ipvlan network to work in swarm b0bce9159e Fix internal macvlan network to work in swarm 76bccc5ad4 Ipvlan internal network should not change gw 14fbe41991 Update design.md 9ced389e6e Improving load balancer performance 5cc6ffae0c Migrate from github.com/codegangsta/cli to github.com/urfave/cli cc7847ddd2 Update vendored dependency hcsshim to v0.8.7 6492936018 Add Arko to maintainers 8899d916c0 Improving load balancer performance c27bb1189d Added document describing libnetwork traffic flow. fcb70a0e86 DOCKER-USER chain not created when IPTableEnable=false. cd864b50a2 Fix panic in drivers/overlay/encryption.go fdf46323f4 Update Golang 1.12.12 (CVE-2019-17596) 2c4a868f64 Added API to set ephemeral port allocator range. f042605a42 Revert "Merge pull request #2339 from phyber/iptables-check" 0ca676db49 Revert "Always configure iptables forward policy" 34a636bf51 Fix flaky NetworkDB tests 87b082f365 Fix Error Check in NewNetwork ff27bb0db4 Resolve "bridge fdb show" hang issue edd44eede9 trigger new CI run beb0c82841 Rerun CI 8c8a25d524 Support for com.docker.network.host_ipv4 driver label 0a99a5f152 adding the constants to the test file 4d1db69bcc weighted scheduling methods constants for ipvs Signed-off-by: Jakub Drahos <jack.drahos@gmail.com> a1ab732711 return immediately on error 7e584c1d69 Configure iptables forward policy when ip forwarding is enabled 43a3151db2 Fixed getNetworkFromStore, which returned incorrect network information - notably, the 'resolver' field was empty. This fixes https://github.com/moby/moby/issues/38901 c4fcd7059c etchosts: additionally include the container's IPv6 address if available 226fde5cdd etchosts: allow adding multiple container ips 27fc6e9bae log the actual error when failing to add IPv6 route 049966bdc2 Shorten controller ID in exec-root to not hit UNIX_PATH_MAX 55adbae783 bump hashicorp/go-sockaddr v1.0.2 5ee62a9c70 bump hashicorp/go-multierror v1.0.0, add errwrap v1.0.0 f366d37c72 Updating IPAM config with results from HNS create network call. In windows HNS manages IPAM. If the user does not specify a subnet, HNS will choose one for them. However, in order for the IPAM to show up in the output of "docker inspect", we need to update the network IPAMv4Config field. 7ab62b791f Fix parseIP error when parseIP before get AddressFamily 4818e89751 Bump the GO Version to 1.12.8 which contains security fixes https://groups.google.com/forum/?utm_medium=email&utm_source=footer#!msg/golang-announce/65QixT3tcmg/DrFiG6vvCwAJ f79533d720 Revert "Apply load balancer properly" 9a4025d79f Revert "Adjust LockOSThread" 402efabec5 Remove vlanLinkExists and dummyLinkExists since these are redundant d22824dc11 Move dummyLinkExists into createDummyLink 5fa03a4a8e Dockerfile: use GO_VERSION build-arg for overriding Go version 66a82d7268 Log when endpoint joins internal macvlan network ddd22a8198 Support dockerd and system restarts for ipvlan and macvlan networks 12a182e937 Ipvlan network handles netlabel.Internal wrong d132acb485 Fix hardcoded AF_INET for IPv6 address handling afcb9fb299 Allow network with --config-from to be --internal ecc7bd0540 vendor: update netns to 7109fa855 e5353649f6 Macvlan network handles netlabel.Internal wrong 3eeda3d91c Dockerfile: Update to Go 1.12.6, matching moby/moby 84414583f0 gofmt: Fix formatting warnings 746e680871 vet: Fix format string warnings 0275b007c6 vet: Fix composite literal uses unkeyed fields warnings e2b2318e14 Macvlan internal network shouldln't change gw 75bc82fe5c bridge: add riscv64 build tags 1f1d9898c9 road map loss tracing, just keep use 'Design' describe the 'Future' c5c8653912 Update sctp package 1425fd4fcc controller.loadIPAMDriver: Unwrap error type returned by PluginGetter e9e18d993c bump github.com/vishvananda/netns 13995c7128ccc8e51e9a6bd2b551020a27180abd d152888722 Bump vishvananda/netlink to 1.0.0 0fce3b3653 Maintainers update 313d2b8a74 Make DNS records and queries case-insensitive 599e037a24 remove gosimple - package is gone and it's not important c575631528 resolvconf: use /run/systemd/resolve/resolv.conf if systemd-resolved manages DNS e9bd147bb7 Add Delete endpoint for plugin in test cc38e3a35c Fix TestValidRemoteDriver GetCapabilities errors 6038ef390d bridge: Fix hwaddr set race between us and udev ee574c1b7d Correctly clean up --config-only networks a04a30717e Forcing a nil IP specified in PortBindings to IPv4zero (0.0.0.0). 74013a3899 add check on node LB in support.sh 301a7724fb Move hasIPTablesEnabled check into firewall_linux.go b4d0319424 controller: Check if IPTables is enabled for arrangeUserFilterRule 1909ecb27a Pick a random host port if the user does not specify a host port. 6b5dc55e93 Use fewer modprobes 6ee0b5fcd8 update docker/docker and dependencies 0b40402976 Reformat vendor.conf for readability, pin to git-sha's f126923aeb re-vendor with current version of LK4D4/vndr 5c6423fb29 Adding error log if peerAdd fails 94ab7b2df6 Adding synchronization to endpoint addition/deletion to prevent network connectivity issue 5ae7f4daf7 Use errors.Wrap to preserve original error efeae5e7ee [ipvs] Add SetConfig test with timeout=0 8e650a9685 [ipvs] Add tests for get/set timeout 7374284841 [ipvs] Add support for timeout configuration (Get/SetConfig) 068ca7d046 Revert "debian has iptables-legacy and iptables-nft now" cfde9c717f systemd: fix typo in TasksMax comment e744b62f49 Update setup_ip_forwarding.go 23c763ef1c systemd: set --containerd socket patch to prevent race-condition 7ca0bc66d3 Cleanup the cluster provider when the agent is closed 916927d970 Bump Go to 1.10.7 d7f397c236 Touch-up error-message and godoc for ConfigVXLANUDPPort 151f42aeaa Fix possible nil pointer exception d021af7d2d Start docker.service after containerd.service d418337502 Fix gosimple 10027e8c01 Allow bridge net driver to skip IPv4 configuration of bridge interface ef2741452c Removed roadmap 33d47f95e8 Build with latest docker stable engine 5338928eb8 account for removal of configs.HookState bb3ae82008 vndr runc 96ec217 a937bc3825 Add docker.socket requirement for docker.service 6821d80881 Add socket activation for RHEL based distributions 03b2393a80 Improve error if auto-selecting IP-range failed. 38c8a3f84d Use sync.RWMutex for VXLANUDPPort 07c9fef311 Add the docker.socket back in 56ca280b27 VXLAN port configuration - late review comments update d635844ed7 Do not add IP to Name records for aliases 077ccabc45 VXLAN UDP Port configuration support 387aed91bf Update golint tool 7adcd856fe debian has iptables-legacy and iptables-nft now 1caeac8b64 clarifications and typo fixes for the design documentation 6dd3f45248 Handle NXDOMAIN, REFUSED and log errors a72bff0da3 Remove if/else and redundant brackets in resolver 013ca3bdf8 Make DSR an overlay-specific driver "option" 9a2464f436 Set east-west load balancing to use direct routing 0922883b7e Add a `DstStats` type to track Destination (real server) stats e427c4ee2e Add `Stats` to the `Destination` 0fa3c8c277 Restore `Type=notify` in Systemd unit 4fd54c2aea Do not fail with an empty transparent IPv4 address 619e3d6706 typo fix about mismatch b19e8d3319 Remove Environment, not needed anymore 08796e04ea Removing experimental driver interface f7b7e74624 Moving IPVLAN driver out of experimental 212521b1e9 Use image artifacts as daemon and dependencies 14103caff2 systemd/docker.service: fix PATH ea996b88c1 Add `/usr/sbin` to our path variable for systemd ce5bc0079b allow propagating custom exec-root (e.g. "/run/docker") to libnetwork-setkey 55b80035ed Don't build portallocator on Windows 40b6ebfe75 Add init_windows.go for compilation 44094fae9f Remove unused syndtr/gocapability from vendor.conf 9ca55c7a60 Bump libkv to 458977154600b9f23984d9f4b82e79570b5ae12b 65860893bf Fix typo: assigment -> assignment a906968a3f Bump Microsoft/go-winio to v0.4.11 c15a478047 Bump Microsoft/hcsshim to v0.7.3 d642cfdeb6 Increase max concurrent requests for DNS from 100 to 1000 03ba96c5cf Rolling back the port configs if failed to programIngress() 09e8b411dc Remove offline installer to install shim-process 1adcfa9aa1 fix error when make lint 36375881f3 Fix some typos ce46100a27 doc: fix typo cb95442fc7 systemd: set start burst limits e7ad8e2b28 systemd: add support for reloading daemon configuration through systemd f30757f439 systemd: set systemd KillMode 26eddc16a8 systemd: add "Delegate=yes" to docker's service file 7daf2db62a systemd: don't limit tasks 80039b4699 systemd: set Limit* to infinity ef9ee10914 systemd: no limit on core size 53343f1bf3 added RestartSec 0c8e758012 Add post-stop 72eed906b8 bridge: fix error handling for stale default gateways 99c4c6d5fc ipvs support rs connection information e56475aa14 Set containerd to be a systemd bind for docker 814f6c1f4b Add getter function for Default Address Pools a478edc819 Added support for Swarm Service Driller (ssd) 52e85b4b9a Global Default Address Pool support cdb1e7033d Some changes to get this working on CentOS 7 e086064b2c Revive pre / post steps, update offline location a5c809e809 Round out systemd for RPM packaging 6cd66eaa2d Add systemd files, add containerd-proxy config 17966c940a Move SSD image to docker 05c05ea5e9 Add NetworkDB docs f9442ee314 Apply load balancer properly 94af1e5af2 Adjust LockOSThread 72905ebb13 Dockerfile: Install a fixed version of gogoprotobuf 5041b74451 Give LB sandboxes predictable names 55ad3ef1a4 Fix handling of the resolv.conf 204ce3e31d Create internal directory e88eed1d65 Add required imports to example code in README.md 012fcea177 Add support for Internal and Private network types on windows 6defa7c807 Make protobuf check silent a06f1b2c4e Spelling fixes b9223019c2 support.sh: also inspect stopped containers 4e6580c4c1 Refactor locking for join/leave to avoid race 56c4a6dd3f Makefile: Add check for out of date protocol buffer code 2b602bf3d0 Makefile: Add protobuf-local target, runnable within build container 3bebfbc34e Makefile: Document and organize into sections 348ed0a1a8 circleci: Rename 'lint' to 'check' to match build target 5fdfa8c52c Cleanup interfaces properly when vxlan plumbling fails c699a1215e Makefile: Run containers with --init for proper signal handling 9da8e04c70 Updated handling of disable_ipv6 file 06d471d186 Migrate to gotest.tools :) 6c0f597a82 Remove unused deps from vendor.conf ffe33f932e Create tag for master code 06922d2d81 Use fmt precision to limit string length 5ef4c59574 Fix error handling about bridgeSetup 1383aadf59 ipam: Test rejection of overlapping pool requests 6fd25eea33 ipam, types: Expand documentation 4cbba0da48 CircleCI use latest image 55e4cc7262 Optimize networkDB queue b09cb39fa5 Enhance testing infra 9295e124bb Update stretchr/testify to v1.2.2 341845b5f2 ndots: produce error on negative numbers b306706062 improve error message for invalid ndots number 7fc1795cdf Allows to set generic knobs on the Sandbox 6e260332e8 do not ignore user-provided "ndots:0" option 6e6ac3d2ac Remove redundant and faulty assert messages ac0aa6485b Adjust warnings for transient LB endpoint conds 0b14b45f0c Prevent race between add-binding and net-delete ea2fa20859 Add endpoint load-balancing mode 85a3483b4b Refactor [add|rm]LBBackend() to use lb struct 78b684a24a Add ability to alias any interface in a sanbox f2c6009583 Add SrcName() method to return interface name 31d3de0994 Fix error handling in createLoadBalncerSandbox() 1449e88f7a Avoid default gateway collisions 04bfc61497 Add option processing to network.Delete() 1abac50c8d Generate LB sandbox/endpoint names in one place 5525c22635 Fix unknow driver test error fe9a5a225d Fix net driver response loss on createEndpoint f04280986e Reduce libcontainer dep 791700aed3 Use new plugin interfaces provided by plugin pkg e07681c8ca Bump docker commit 62ebaeac7a Added back dockerignore 96c7cba64c networkdb, drivers: Regenerate protocol buffers 22a24df515 Makefile, Dockerfile: Add support for regenerating protocol buffers 500d9f4515 Adjust corner case for reconnect logic 4f3fb7ee6a Add retry to cluster-peers 705bf07f05 vendor.conf: Update vendored components to match moby 9b114971e5 controller: Unwrap error type returned by PluginGetter 5de876c7ae Add auto update to support.sh 9dbf55097a Create support as a container 8f1fca3e66 Multistage for build 24bdb26483 Dockerfile.build: Bump Go to 1.10.2 f5fa40f9aa Fixing the unit test for overlapping subnet 48196df4a2 Further makefile cleanup fbf02c3794 Migration from CircleCI1.0 to CircleCI2.0 bef873c9df support.sh: add host links e31e906e4e Add pool reuse test to unit tests cc8b2cac28 Allocate subnets in order rather than restarting f0c86fb56e Fix deadlock introduced in b64997ea 3d2b2f1c7e Possible race on ingress programming 01e6a24545 Update miekg/dns to v1.0.7 c4d507b566 Remove non-service cluster info on sbLeave b0b5e14b77 test: update tests to use sub-benchmarks e3c212c224 types: Handle IPv6 literals correctly in port bindings 328948d35a Fix type in error message 1784a46e64 Enable network-db test image creation f6d9d22e6f test: fix ineffectual assignments f9f3b1bdeb typo: fix misspells in code and comments 67dbb04852 Improve interface order e7fcca2f9f Makefile: build image is a prerequisite of the shell target 35f505210b types/types: Correct docstring typo for (PortBinding)FromString f6ddf88cec types/types_test: Rename test to match function ebf0054912 ipam/allocator: Fix typos in error message 48eba3c2c9 Maintainers update 35a81f8173 ipam/allocator_test: Test pool double-release behavior b4c09ceae2 Makefile: Add shell target 2f2811dd14 Adding logs for ipam state dfa303e568 fixing test cases 9fe5cc10b2 Add check for overlapping subnets 5eb96dfbba fix markdown style in doc c97bb41620 Remove race in encrypted overlay key update 40b55d2336 Remove race condition from ovnmanager b64997ea82 Fix race conditions in overlay network driver 3df00a6c64 Add wait time into xtables lock warning 606e28015a Add test for parallel request pool 16e077b884 Filter xtable wait messages when using firewalld 0f6cb61f2d Switch from x/net/context -> context a6ec9e673b Bump golang.org/x/net 96472cdaea Adding a recovery mechanism for a split gossip cluster bc465326fe networkdb: Use write lock in handleNodeEvent bab08251c0 Allow for larger preset property values, do not override 67ecbba4ff bridge: fix lint issue 6b782b4b82 Modify awk to use cut in check_ip_overlap 74d7da907a Vendor go-sockaddr c67ee787da Adding goreport card 20faf0adf0 Retry other external DNS servers on ServFail 9b7922ff6e Fix README flag and expose orphan network peers 4ce05845db bridge: fix handling errors during setupIPChains() 6362d28969 Make go-tools happy 40923e7353 Use ordered array instead of heap for sb.endpoints ed6d70c0c1 Improve scalabiltiy of bridge network isolation rules 7d7412f957 Gracefully remove LB endpoints from services a360943a48 Fix golang.org/x/sync canonical import path 4c8d751400 IPAM tests b8c14de74a Vendor golang/sync a0085a47fd IPAM and Bitseq test cases fe629b6eba Fixing concurrent map access 6a8a15dd9d Fixing Duplicate IP issue in IPAM library 9ba57c93b8 Add warning message for the failure of deleting link device cf89f97a14 Add check for IP overlap in support.sh c8a3950d8b Delete stale HNS endpoints when creating a network d84f182717 Prevent ingress deletion when endpoint count == 1 1f55734d4c Fix crash if the len was < maxSetStringLen 83d1ce9fb5 fix for #1333, calling LinkDel to delete link device when the err of LinkByName is NULL 85791fb3fd Limit max length transient log d1e6cfa6a1 Add an explicit flag to join network in diagnostic 4484ea17c3 Allow user to specify default address pools for docker networks This is new feature that allows user to specify which subnetwork Docker contrainer should choose from when it creates bridge network. d5aab13c38 Various support script improvements ba5b3ee8d9 Bump BurntSushi/toml for MIT License 71c0bc0b89 Revendor dependencies 2120ed2363 Support SCTP port mapping f5c62864e9 Make ssd portable and usuable outside the default image. Add error check when network on a particular node has no services a16d469867 Import the ssd tool in libnetwork bbbfa21a94 libnetwork Windows driver support for outboundnat policy via generic options 5a658d4cc1 Fix user specified ndots option 2f6921cbba Diagnostic client a59ecd9537 Change diagnose module name to diagnostic b6f640a9ff Bump Go to 1.9.3 64da6b8889 Avoid delay on node rejoin, avoid useless witness 5f773281d2 Revendor memberlist d5fef4ca1c Reload DOCKER-USER chain on frewalld reload. e975f3caa0 Fix watchMiss thread context 5ab37a55a1 Delete service info from cluster when service is disabled 88df74659a Add unit tests for MX and A DNS queries dd47466a4d Remove watchMiss for swarm mode d28d679080 Enable IPV6 config on Sandbaox creation on live-restore fe032eeb07 change base image version in Dockerfile.build to enable unit test in arm64 for multi-arch image issue 6a4c8d0ac9 Handle DNS querries of type MX b190ee3ccf Cleanup node management logic 66b65b471a VETH interface cleanup when dockerD suddenly crashes 8c21351e3e Changed the name of the server pointer 1a2efea39e Call the Shutdown on the server f7023e11c8 Remove useless error log 5b89af1bba Vendor latest netlink library 6736b223ec Set socket timeout on netlink sockets 3e544bc500 Avoid extra notification on node leave b578cdce86 Diagnose framework for networkDB 4aab854d6d Addressing feedback from PR https://github.com/docker/libnetwork/pull/2011 f0fcb0bbe6 Fixed race on quick node fail/join 5a5b7fee33 Added a new network creation driver option (disable_gatewaydns) for the Windows driver 2a219a04cc Fix for docker intercepting DNS requests on ICS network 4037132b33 Fix listen port for test infra ecb4442ab3 Fixing circleci. Signed-off-by: Pradip Dhara <pradipd@microsoft.com> 92f9f38103 Use containerId instead of sandboxid for windows 0d1f9c4c97 Move load balancer sandbox creation/deletion into libnetwork. 12891fe687 Support override of binary name 2c8670b496 endpoint_cnt store updates should not create an object f864421ead bump docker/docker to master and unfork dependencies 276a452f17 Remove Solaris support 1b49b17ef5 wait for iptables lock in support script e4f3bcb696 Add test for dns options 7fbaf6de2c Add test to confirm garbage collection 78627b6f14 Fix ndots configuration aa81c6d265 Add test for cleanupServiceDiscovery 1732ab426d Handle cleanup DNS for attachable container da1e931693 Explicitly pass the sha to codecov d64c34e4a5 Bump Go to 1.8.4 1dcffbeb3f Disable hostname lookup on chain exists check 01688ba253 Fix typo in overlay log message 1fe48e8608 Fix IPMask marshalling 3d44975995 Adding a unit case to verify rollover 955b8b4593 Changing containerID to sandboxID based off feedback/conversation with Madhu. b0888450a9 Enable Hot Add/Remove of Network Endpoints for Windows ad577a25fe Changed ipMask to string 181115b350 Addressing code review comments 2bad0fbedf log for miss notification 3e7b6c9cb0 flush peerdb entries on network delete 711d033757 Handle IP reuse in overlay b92d91d6a1 Fix comparison against wrong constant 813a24a51c Minor unit test change a52bcf48f2 Serializing bitseq alloc 955c532735 Repair (*Broadcaster).run goroutine leak 8c31217a44 NetworkDB create NodeID for cluster nodes a4e64d05c1 Avoid alignment of reapNetwork and tableEntries 8b400916ce Ignore failure to save hns endpoint to store 053a534ab1 Changed ReapTable logic 2d2a2bc568 Fix reapTime logic in NetworkDB 729d45379f Fix lint issues 7d466c6600 Fix concurrent CreateNetwork in bridge driver a3c3a596dd PR feedback 495252723d Fixing a race condition that caused a Panic when deleting overlay network then quickly leaving swarm. This issue was uncovered in TestOverlayAttachableReleaseResourcesOnFailure. 89aeeb294c support flush services API cc08cacfab Vendoring microsoft/hcsshim v0.6.3 b76166c110 Increase code coverage for set_matrix 43360c627f Enabling ILB/ELB on windows using per-node, per-network LB endpoint. 0482b29df1 Enable codeconv reporting 0fc6ce881f fix log 10c88fc3ab Ignore "no such file" error when docker cannot find `resolv.conf` 5ab9b5e6a9 Docker deamon doesn't work with --fixed-cidr on windows 663672b8c7 Lock goroutine to OS thread while changing NS a6073649e9 Add a minimum value for the CP MTU a15113e012 Remove useless flags on operations 998a93783e Fix test using com.docker.network.mtu b7c258cf07 PeerDbDelete was passing the wrong field 0651183f84 gofmt and lint changes. 404a9ffa5a For RS3, tasks connected to a swarm network will have 1 endpoint . 3c1ebfaef9 Add service virtual IP to sandbox's loopback address 710e0664c4 Update logrus to v1.0.1 2e38c53def PeerInit for the sandbox init 5c52ff49e0 Funnel peerAdd and peerDelete in a channel b8d514432d Revert "Avoid peerUpdate logic in swarm mode" 19fd1c37fb Fixes bug which makes restoring endpoint mess b65a4ee10e Avoid peerUpdate logic in swarm mode d261ccb89f Revert "Funnel peerAdd and peerDelete in a channel" 7bd4fc1de4 Improve debugging for resolver 3252a10845 Revert "Fixes bug that mistook gw6 for gw." d6440c9139 optimize the rebroadcast for failure case a3ecb8902a fix join/leave e77c245e45 2x faster to converge fee89e0490 Funnel peerAdd and peerDelete in a channel 115519e0b3 Fixes bug that mistook gw6 for gw. d51ed8a97b Remove the error message on mac delete failure.. ecb3daa49e Fix warn log e5bba51d4f Revert "use builtin package context rather than vendored one" 585964bf32 NetworkDB testing infra 60b5add4af NetworkDB allow setting PacketSize 1c67f2592b Fix the Gateway type in remote network plugin spec daba67d67b Avoid flakiness of TestLinkContainers 5c01dcd401 iptables: jump to DOCKER-USER first 051a0d5ce9 NetworkDB incorrect number of entries in networkNodes 738fc5201b Fix debug statement in startResolver a50e885121 When the gc_thresh3 value is reached kenel might remove existing neighbor entries. On an l3 miss try to reprogram the neighbor entry if the peer is valid. Its a best effort attempt because if the arp table is still at gc_thresh3 value, addition will fail. 680832b7b0 use builtin package context rather than vendored one 3dd1fb1217 Make node join event logging less noisy 746070c39a Adding a unit test to catch offset scenarios b5d09df0c3 dnet: remove unused method for dnetConnection struct af5e370627 Add gosimple check 6bd57f977d Fix go generate for protobuf f969f26966 Service discovery race on serviceBindings delete. Bug on IP reuse (#1808) c48c1a3748 Flavio as Libnetwork maintainer 2d278dece0 Fixes docker daemon not restarting after endpoint leak on windows with transaprent network ba788519d6 Fix handleEPTable log 65860255c6 Fixed code issues a018694f40 Added more code checks d69db01eb8 Bump docker base image to 1.8.3 c0f59f9643 IPVS fix 39d2204896 Service discovery logic rework 7ae2b025be Fixing issue with bit allocation byteoffset calculation 2111d4cafb Create SetMatrix data structure 233aa636d7 Fix OS tweaks call b8bcf7005c Use internal systemd scripts for DEB packaging 509b86caa2 Use internal systemd scripts for RPM packaging bb68bc5ae2 Add initial systemd scripts acf9c53292 Vendoring netlink library d5c69190d1 Fix leak of watchMiss goroutine 4abd54d419 Set kernel specific config on linux e49955988a Remove dynamic mac entry from fdb on endpoint deletion ca9a768d80 Handle single manager reload by having workers reconnect 6d768ef73c Fix leak of handleTableEvents 26fb58d3a8 Removing the override for ipamdriver for local scope networks ae9f1f9f04 Removed printfs 34ce7c7e6a Revert "Move Cluster provider back to Moby" 0f17689abf [Bug]Fix race between sandbox.delete() and SetKey() 79a76217db fix review comments e777305c7f Moby vendoring 627da8bf04 Moved the cluster provider to Moby 9376cd3c63 Fix typos and review comments 81296dda15 Update GetService(*Service) api. Update UT with new apis and remove dependency from ipvsadm f585f33042 Node failure timeout fix 000775b918 Initial Checkin GetServices and GetDestinations c7d77e9e89 Simplify network scope setting logic 6d7e9ea6b4 Changes to support ICS network on windows 08d8cfa00f Restore isAgent || n.dynamic check bf98dc6a40 Reject scope settings in config-only network 3fdce29e1d Do not accept swarm scope network creation if swarm is off f566d6384e Added persistence to windows driver so that cleanup happens properly f2db3987e1 Remove unused package in circle.yml c348cebe99 Add a filter chain to allow persistent rules f626582c16 Do not reset network scope during store read 047f7c0793 Add support for FreeBSD in portallocator ece544627b Adding manager pkg for swarm visible network drivers 254d082cc3 Add ConnectivityScope capability for network drivers along with scope network option 06c3489bb8 retry once on a bulk sync failure 5e8c5d68fb Add network inspect -v to the support script 25082206df Support configuration networks cc0b7e6aad all: Avoid trivial uses of Sprintf da9ac65ea6 Remove explicit set of memberlist protocol a2bf0b35d6 Fix for swarm/libnetwork init race condition 552c16dc92 Fix for remote addr parsing 3d7bc23901 Change GetRemoteAddr to return all managers 541cafdb30 Vendoring memberlist tag 0.1.0 95f6336157 Clarify endpoint definition in documentation. 1323730eca On send node envents, notify only if there are peers 102f9d230d Avoid nDB stale entries because of intermittent nw issues. 46ebc9613e agentSetup to first check if clusterProvider is nil b4e5078bd5 Make sure sbJoin programming rollback happens on each error e24adf94a1 Change wording for Endpoint description a0e0231909 Add the data-path-addr 23b43b1557 Remove gw endpoint on gw nw join failure 421c089e98 ingress sandbox hosts and resolve.conf files location didn't respect the custom daemon root directory 3684df4a66 Flush container flows in conntrack (Bug #8795) 6f062c298a Vendoring the netlink changes cddead94d2 Do not manage ipv6 for host mode containers e5c1a4cabd Remove firewalld running log 18098ab1c8 Add AgentStopWait method 79bf46fd79 improve error for getStore() b04b258243 Do not clear ingress network in libnetwork 69ad7ef244 control-plane hardning: cleanup local state on peer leaving a network 34f4304a71 Sandbox.SetKey() should not reset the osl sandbox on failure 6e31451d16 print name and id infomation when has active endpoints a143df7d99 revendor x/net and gogo/protobuf to match docker/docker 869e907fcf Re-run vndr with latest version 9155e456b6 fix some misspells in api/api_test.go 9dc694de18 Always program the kernel state if triggered by l2 or l3 miss ed935930b5 Fix rename for containers on swarm network 83837617b4 Handle kernel's l2miss notification in the overlay driver 495f534317 Fix typo 9c3c86a931 Do not invalidate table event messages 4b306ee83d Fix panic in networkdb test code dce60f5afb Remove enpoint state from cluster on join failure b9d820faf4 Fix misspelling fmt verb in dnet 9272c89bb7 Clear encryption states when joining cluster bfab379411 swarm mode network inspect should provide cluser-wide task details 54d6daf95e Expose ingress network option fc2414f988 Ensure iptables initialization only happens once 442640a8b8 Update maintainers file d718efd92f Add anonymous container alias to service record on attachable network c679b071f0 fix endpoint error 200410dd18 Lock linux namespace structure when adding neighbors d07e1a02a4 Support for com.docker.network.bridge.container_interface_prefix label Signed-off-by: Wolfgang Nagele <mail@wnagele.com> eb8c603046 Add logs around service records modifications 138c4b2a77 Serialize non-atomic jump rule programming in bridge c00467aaac Removed unused integration test code 91f5b1669e Once a network is encrypted, do not accept clear packets from it 2243480e99 Fix typo in remote.md 8059597722 Fix typo in IPAM doc 4a04857a68 Fix bug in datapath key rotation in 1-1 NAT case 4208a2f75a Update the local VTEP in peerdb on receiving self discovery 66895dfdfc Clearing up windows overlay driver to just work in swarm mode e94edd6d6b Ignore previous serf user events to avoid wrong fdb programming dd10eb794c Do not hold the peer map lock during the peerDBNetworkWalk 242af665c1 handle err and fix t.Skip() in ipvs/ipvs_test.go adb8720634 Report failure in subscribing to neighbor notifications bee7d9219f Properly construct CIDR in policy selector 6a2d86f0a9 Do not leak ipvs netlink socket 2a9be357f9 Trust the endpoint state if we have a valid sandbox-id 71fff44c0b replace individual endpoint_cnt read from store with 1 bulk read 8e2ca0471c Revert "validate network and endpoint name more strictly" 4d1334c9ee Revert "Allow spaces in network names" bb560a1f44 Generating node discovery events to the drivers from networkdb a02b4ef4a4 Fix service logs 4e69afc4f3 Make virtual service programming more robust d565d5f2d2 Gracefully handle redundant ipvs service create failures 53c84ac767 Fix GetNameServerAsCIDR 5713ca4694 Remove stale files 66197b7787 Fix incorrect error log message 6f507f53e3 Fix the data model inconsistency that breaks daemon upgrade to 1.14-dev d3e7ca726d proxy: clean up code (addendum to #1598) bfd1683e74 Use vndr for managing libnetwork dependencies 6ea22f2f50 carry docker/docker #29564 3178e13246 Godep update for docker plugingetter pkg d94be29ec5 return an error on overlay subnet is overlapped with hosts c6dfc70b33 Make use of GetAllManagedPluginsForCap to avoid loading v1-plugins 69cf4bc83e Updating Godeps to pull in plugingetter dependancy 32e713eca6 fix json cdd56ba07e Prioritize nw endpoint which can provide both v4 and v6 connectivity 16af9918c0 ResolveName should return copy of IPs 11be70cf5e docs/remote.md: Remove unnecessary backquote c702e19e44 fix typos bc85efdb4f fix nits in comments 7c85ed3eac make network connect error message readable 9fb8d5696e proxy: fix an issue about half-closing net.TCPConn after io.Copy() bf832ec2a7 Add embedded DNS server support for host loopback resolver 879d94edbd Defer PTR queries to external servers based on A/AAAA response 92efad001c drvregistry to allow overriding plugin 1b28c5e01d Internal interface to differentiate built-in drivers from remote bc45d84e8d Handle the case of registering active plugins during remote init 721518279a Handling the new experimental daemon flag 6c3fc691e7 Fix fqdn hostnames not added to /etc/hosts 3776604aab Correct regexp to match v6 addresses with zone ID 0c2b4b267c Check for node's presence in networkDB's node map before accessing. c80348596b fix review comments bb8b9a6040 networkdb: Properly format memberlist logs fac86cf69a Add missing locks in agent and service code 46b59b7964 Fix incorrect debug message b495131861 Fix a bug in idm.GetIDInRange() f89d6b0073 Fixed misspelling 5217602776 Create vxlan-id space from 0 instead of starting from 1 f195563a4e Control IPv6 on container's interface e2f0070492 Fix xtables_lock message probe 23ac56fdd0 Remove unnecessary string formats 94845a80f7 Serialize embedded resolver Start and Stop 0f745fbb23 Refactoring logrus import and formatting Fix import name to use original project name 'logrus' instead of 'log' Removing `f` from `logrus.Debugf` when formatting string is not present. 69c2f8d6db Fix bug in link-local unmarshalling 684ea92515 Add a ICMP reply rule for service VIP b6540296b0 Revert "Enable ping for service vip address" 1770ced6c0 Fix bug in needDefaultGW() 27500b1e35 Separate service LB & SD from network plumbing 85b22fabbe Allow spaces in network names 763f0fa1da Set a timeout on the netlink handle sockets c3e00a2611 Update netlink @17ea11b d07d6814f3 Add a nil check for sandbox.osSbox 6afe20096d Fix bug in DeleteNeighbor 5b4059e087 Fix new golint reported errors 236dc57a9e fix unsafe acces on arm 1066f9ed5c IDM need not be bound by default vxlan-id start index cbe520b62c Add GetIDInRange API in idm package 1685e48b03 Increase timeout for local store client 83dd2c193a Respect auto allocation for --ipv6 e755b439fa Update libkv @1d84310 db69cfc151 Support attachable in network. 261fedba8c Default GW support for overlay networks 7f473c779a Refactoring logrus import and formatting This fix tries to fix logrus formatting by removing `f` from `logrus.[Error|Warn|Debug|Fatal|Panic|Info]f` when formatting string is not present. Also fix import name to use original project name 'logrus' instead of 'log' 0d32a1924e Check subnet overlap when programming of sandbox interface 0b4f68390d remove unused mConfig 99f84ff5a7 update reapNode interval 4ca7b01a5c Register remote network driver on Windows. 9f2ecdcd9d If enabling ip forwarding set the default forward policy to drop 3e11ddc4d9 Change vxlan-id start-idx to 4096 d1b012d97a Windows overlay driver support 93914ef0f6 Vendoring hcsshim to pick overlay changes c52c8ca6eb Add NetworkDB API to fetch the per network peer (gossip cluster) list 3be080496d Fixing incorrect resovler error message shown on daemon startup efc25da851 Allow concurrent calls to agentClose 807f14746d Modify the serial number from 1 to 9 a1ed5b7be2 fix nits in comments and log 4218a0a650 Respect icc option for internal networks 97915bde44 Fix some typos a21d577b8b Block non exposed port traffic on ingress nw interfaces ddc74ffced Enable ping for service vip address a7e1718800 Add sandbox API for task insertion to service LB and service discovery 53bf987984 Fix issue for `--fixed-cidr` when bridge has multiple addresses b859ce411b Do not update hosts file with internal networks endpoint IP e98b152bac Reap failed nodes after 24 hours 0a2537eea3 Use monotonic clock for reaping networkDB entries 6293a1b8ca Updated vagrant box, ubuntu/vivid64 was remove from atlas.hasicorp.com ef50edefde overlay driver support for Solaris Signed-off-by: Puneet Pruthi <puneetpruthi@gmail.com> 65356ed861 Do not use logrus for proxy eae800acf0 Fix map access race in populatedEndpoints 761722395d validate network and endpoint name more strictly 3504ed88d9 Update loadDriver to use pluginv2. a48b541da3 libnetwork support for Solaris Signed-off-by: Puneet Pruthi <puneetpruthi@gmail.com> e18c1ffd0c Avoid controller/service lock AB/BA situation 8e37c3160a add Created to NetworkInfo 433e3dfe98 Remove driver endpoints on network deleting 795697d823 Check for presence before installing forward rules 2781cb0e1e Force go 1.7.1 in circle.yml to resolve failure to get golint cff2573d1f Reset endpoint port info on connectivity revoke in bridge driver c772d14e58 networkdb: fix race in deleteNetwork a4f56880b2 Run API check to assert xfrm modules 7a51c79979 fix race in serializing sandbox to string 5c77ba43e2 Update plugingetter import path. e2008b82e8 Handle containers with different network drivers b48e25b44f Add support for NetworkAllocate and NetworkFree in remote driver 03088ace1b networkdb: fix race in access to nodes len c7b9435004 Do not add names to ingress network 47759a5d4b WIP: Update golang version to 1.7.1 f649d5ae61 Do not hold ack channel in ack table after closing ded6e1934a Clear ingress resources on graceful shutdown 003e04775b Make libnetwork understand pluginv2. 952520472f Godep changes. 22c322dded Avoid returning early on agent join failures 38338863dc bridge,portmapper: custom docker-proxy path 7b905d3c63 Purge stale nodes with same prefix and IP d1f6eb1812 Allow the memberlist shutdown even if networkdb leave fails bd7fc6431b Fix macvlan private mode argument vaildation d6e596b3a0 Serialize overlay filter plumbing a4d0e53f14 Fix test failures b0a7084c05 Honor user provided listen address for gossip 3c9d05fba5 Delay port redirect until packet reaches container 2b0d5b1339 Check for ExecFunc failure 093a017f68 Use complete port configs when plumbing mark rules 8653b72786 Lock agent access in addDriverWatches ce65a4cf2a Vendoring dependencies 7f43fd30f3 DNS support 5f5dad3c02 Recover from transient gossip failures d4f3963a26 In overlay driver reset any state on setkey() 5b632d752c Make nodenames unique in Gossip cluster e31db5d6af Name the ingress sandbox explicitly 989d9b2cc4 Check if IPv6 is enabled before restoring the network pools c9bf3b594e Revert "Add sandbox API for task insertion to service LB and service discovery" f43e4ec066 Fix bitseq.SetAnyInRange c69d42d6b8 Update Godeps ff59f1baab Serialize dynamic network creation db9a7021ac Drop queries in root doamin when ndots is set 8d63e73522 Revert "add s390x arch build info at the netlink_deprecated_linux bridge driver" 8298e278be Add sandbox API for task insertion to service LB and service discovery 56175d6f97 add missed defer to unlock ad10ae9b3b Move engine-api to docker/docker/api 68ed10ff07 Update Godeps f5516d817d Add mflag package locally to libnetwork 56de900a7b Decrement epCnt only after all cleanup 2ba6c399ea Ensure purging neighbor cache for stale deletes 6bd15397b2 don't delete the bridge interface if it was not created by libnetwork d46e5c83dd Remove pkg/tlsconfig dependency 6205a5d616 make sure the user-provided bridge interface is a bridge 7fac070519 uprev docker/docker/pkg/reexec for libnetwork Signed-off-by: Puneet Pruthi <puneetpruthi@gmail.com> bace4fb6ff Cleanup on error in ProgramExternalConnectivity bf7ef3fd7b Do not hold sandbox if not in distributed control ddcc220eb7 Adjust WaitForDetachment to also accept networkID 92e20b70e6 Fix potential deadlock in getSvcRecords() 7912e19488 Fix CircleCI b551a61694 Do not try LB populate on interface-less endpoint 416a730dad Allow reachability across services on different networks in the same host 9041996509 Nil check ingressSandbox before deleting b29ba21551 Avoid double close of agentInitDone 02ef43380e Simple support script to gather libnetwork info 1f4c1cb75c Avoid k/v store endpoint update in swarm mode 547c342c1b Add network attachment methods to cluster provider d39893a9a0 Updated godeps ba8714e585 Propage the vxlan device creation error in driver to libnetwork 4f55b50f93 Cleanup service bindings when leaving cluster 8a1092fe78 Notify agentInitDone after joining the cluster 1b027335f1 Ensure add newly joined node to networknodes 2bead02c87 Ignore delete events for non-existent entries 4b80c3411d Cleanup ingress network and sandbox on leave 6e965c03ad Reset the encryption keys on swarm leave 6d877647e1 Add a narrower SNAT rule for LB egress 55564fda1d network: fix race in read access to map 149af45509 Relax SRV name validation and fix external SRV query handling e28730d44b Fix a panic introduced by #1389 cd0b6bac4c For service name DNS resolution prioritize IP on user overlay network 2bab9b6bdb Cleanup networkdb state when the network is deleted locally 004e56a4d1 Fix spurious overlay errors 09da6a6f59 overlay: fix data race in map access 392b089170 networkdb: fix data races in map access ab02b015ef Remove unused key handling functions aced41a3d2 Make service LB work from self d19e1f22cb Fix typo in error message cd488c6d18 Do not add ingress loadbalancer on service tasks bd5051931f Fix external DNS responses > 512 bytes getting dropped b54a4b5936 Add container short-id as an alias for swarm mode tasks cfd97fc7d2 Godep update for gogo/protobuf components 3f542419ac Check size of keys slice 82457d17b0 Make sure to not remove backends on stale notices 91ec1a2cf4 Ensure drivertable entries in joininfo is uptodate 4f8c645173 Allow reattempt of overlay network sbox join 1b899469a6 portmapper: touch iptables only for IPv4 d69747e19e fix typo in comments and log 7acedb94f3 Fix crash when remote plugin returns empty address string 83b0be7f1a Check for isAgent() outside the network lock to avoid deadlocks 849712f35d Better error handling in restoring sandbox states 8af5fdb9b1 Do not create network entry in networkdb for the local node based on table event from peer bc6a60dae5 Fix bug in ipsec key rotation 8bc99ae906 Check for advertise IP when deriving ipsec nodes 147b646e79 On network creation, reset mangle rule 801bd7b3b2 Allow user to set the overlay network's mtu e415b1f495 Do not use 4 byte ip addresses in encryption code 44fabf5343 Remove UDP connection cachig in embedded DNS server b2603e895a Send truncated external responses to the client 902ead3109 Update service DB on deletion of containers in bridge networks 3c36b06cb3 Lock in isAgent() and inMaster() b042dbe312 add s390x arch build info at the netlink_deprecated_linux bridge driver df728f4e0c Remove commented code from libnetwork_test.go 47c071b654 Save the controller config on config reload 6368406c26 Adding Advertise-addr support 6aa25f33d4 Adjust container's veth MTU when encryption is on ddff1b5a87 Use fnv1-a to construct the SPI 7301999c2a added locks for all other accesses to controller.svcRecords 1e0c61c3a2 added mutex on read from controller.svcRecords map 829a4ee4be Fix several typos on macvlan docs 253c103b8c Use aead for dataplane encryption daf4c97f7a Actually retry LinkSetUp 744d5332bd ipvlan: remove endpoint from network on deleting endpoint 25f0573785 Make osl sandbox basepath configurable via execroot. 0b0678677f Update vishvananda/netlink to e73bad4 32e08e7700 Moving the UDS file out of /var/lib/docker and into /run/ 4999c5707d Fix endpoint cnt decline overflow 804f93bdff Fix update endpoint cnt to store 46f525c7d6 Overlay driver to cleanup stale endpoints 2e88dfa406 Return proper error types on sandbox creation d0192db0cd On agent init, re-join on existing cluster networks f0292e04b8 Add Virtual-IP of an endpoint as a secondary IP 9d01c1fcd5 manage network dynamic flag appropriately under various scenarios af3158ecdb networkdb: do nothing in bulkSync if nodes is empty f2ae8467e3 Avoids panic when checking for conflicts against an uninitalized network 576267bfb9 Moving IPAM initalization out of drvRegistry into libnetwork core 5202f95604 Make the docker proxy a standalone binary not a re-exec ccabedfbe3 Fix file descriptor leaks dc4487dbb0 docs/ipam.md: spelling error 8936daab5e Retain deleted entries for longer time 2988086ab1 Do not remove service record while scaling down de766cc7e6 ovmanager: Error out on vxlan id alloc failure bc89397105 Index service on both id and portconfigs 3925ea0a2d Fix panic calling `ep` instead of `endpoint` 5146f05b33 Do not error on non discovery type messages in remote driver d3b8412ac6 Update ovmanager to support maximum vni 91e8d5bfb9 Fix sanbox typo fa68f9d017 Make sure route selected is direct Signed-off-by: Clint Armstrong <clint@clintarmstrong.net> 115cdb52b3 Remove Lock in datastore for global scope 64673bce0a Remove locator check on endpoint force removal 500a255181 Fixed missing v6 enable flag in macvlan doc 5f7577bbb4 fix typos 93cada0d94 make sure interface up successful 117131c41b Gracefully handle missing xfrm modules b39f13f80e Update vishvananda/netlink 734d02c 165a1f6021 Added docs for macvlan driver 6538faa880 Do not bulk sync state which is getting deleted d7d88ce37d Make getSvcRecords() more robust ad35d257ff Match only locally destined requests for ingress c963031a44 Bridge driver to detect and remove stale network 6034058dc3 Fix infinite loop in bulk sync d5ce149555 Do not add loadbalancer to unpopulated sandboxes 48739b5868 Reduce overlay encryption log noise ec17841ea4 Switch overlay encryption to use IPSec susbsystem keys 9328f1ea1e Refresh special drivers networks if present in store acac7ee812 Add service alias support e2b0934ac2 Delete endpoint from network map for macvlan driver upon endpoint deletion f5f576ad34 Properly purge node networks when node goes away 5c5a43124a design.md: fixed anchor reference 929921a640 Add debugs for key change events in networkdb 1272f90eae Sequence non-persistent objects in cache 54f694c913 For cached connections ignore late replies after read timeout 8ee94f8349 Make sure sandbox GC is started after live-restore 2e9c30a4a1 Persist and restore overlay endpoints to handle daemon restart 41ca84c950 Populate nlHandle and use it on netns restore 8ca4ed0c68 IPvlan and macvlan driver to persist endpoints c63b7b005f Bridge driver to persist endpoints ae90761a21 Reserve addresses of existing local endpoints 055c5dd496 Add network restore to support docker live restore container fe56a8d3dc Moving MacVlan driver out of experimental 8245296aa5 Make sure node map is valid before accessing it d2cc81c023 Make sure to close nshandle in ipvs.New 297a7e9039 Change port names in agent proto 3859a7e394 Make sure to notify watchers on node going away c79a49235d Purge vniTbl after cleaning up network sandbox 78a3cf5f6c Do not rebroacast bulk sync updates 04f3247c3d Add support for ingress LB in localhost 98b571a524 Make sure broadcast queue is valid broadcasting 64d8c5f87f Resolve host-name before trying the interface-name in agent bind 96b424b9b8 Process only misses on IP belonging to network a70909792a Reserve IPAM pools before resource cleanup 8ded762a0b Update key handling logic to process keyring with 3 keys fd72f6e318 Do not wait on ack in bulksync response 8d1adbd665 Properly cleanup ingress sandbox in controller 0e284be943 Handle the case of reseting the Cluster Provider for leave cases 1dbff60121 Do not panic if failed to get ipvs family 0deffeac4b Cleanup any stale overlay bridge with overlapping subnet in hostMode 96cc604cf1 Setup external DNS servers after daemon restart with live-restore cd1362e370 Revert "Handle the case of reseting the Cluster Provider for leave caes" f65ae3c742 Fix panic if miss notification sock is nil 74fdcb1f4b Handle the case of reseting the Cluster Provider for leave caes 10fcb9dd2a Add all backend ip into service records if no vip a95260646a Allow maximum possible VNI 93b5073a7d Overlay driver to support network layer encryption 6d3fa9e0f2 Migrate libnetwork to use netlink.Handle da61c5d37f Allow to program Endpoint link-local addresses a2cc703dae Overlay driver's NetworkAllocate method must honor driver options 26ae9499f0 Set controller ingress state only if ingress 4d1a5ce968 Fix a lb rule race in loadbalancer dea36fd997 Move ingress port forwarding rules to a chain fdc385573c Do not plumb local peers as remote peers 3eff69860d Reset agentInitDone channel when leaving a cluster 6e47b07b39 Cleanup vxlan interfaces inside namespace a63fca344f Add agent initialization wait method in controller f98cfa5597 Fix a missing unlock on ingress sandbox failure 9054ac2b48 Provide a way for libnetwork to make use of Agent mode functionalities 3b3d49cc4c Do not attempt LB plumbing until sandbox is ready c4d5bbad7a Use controller methods for handling the encyrption keys from agent instead of the Provider interface methods. 0f89c9b7bc Add ingress load balancer b2b87577d4 Add support for encrypting gossip traffic 9f415d0cdb use grep to find a/an misuse 774399fd66 Fix couple of panics in networkdb 68de30a57c Update address-space in ipam-info for remote driver 1607b4be6f Update netlink to 7995ff5 de588f950d fix typos d05adebf30 Add loadbalancer support 5889b279fb Separate pool parsing from pool auto-allocation 4b549ce428 Add IPVS netlink support 034f587706 for fix CI tools/cmd/vet has been deleted 87e023dfc2 Switch to golang 1.5.4 0051e39750 Add support for SRV query in embedded DNS dec79c21f2 Convert overlay peer updates to use protobuf b93c2c69ac Vendor vishvananda/netlink b824519 b1e5178bc3 Convert endpoint gossip to use protobuf 92f074c095 Fix flakiness in dnet_exec 77abea9c1e Use protobuf in networkdb core messages 9dd822b8cc Add gogoproto to Godeps b52748bb26 Vendoring vishvananda/netlink f9bc7a684edbe780a09b87689db6cb1706bf327f b82101c4cc Protect cap access in driver() a9c9765b33 IPAM allocator to not accept a datastore update if already present bc6203bd0a Do not allow network creation if datastore is missing 651f6ea0fa Avoid persisting ipam data if it can be reconstructed abb3b9b12d Fixes #22466 Embedded DNS problem after renaming container 8c2a2ff471 Do not perform the overlap check on user chosen pool 22422dad64 Changelog for 0.8.0-dev.2 680ce6e69e changelog for 0.8.0-dev.1 f2c5ff41de Set persist flag on the dummy network object during cleanup ffdceda255 Add service support bd74df7b41 Dnet agent mode support and IT d0f96c5846 Fix cleanup logic in case of ipv6 allocation failure 0580043718 Add libnetwork agent mode support e57d2f987d don't add /etc/hosts record if ip is empty (issue #1146) b1d422b6b5 Make overlay driver work without a kv store 84682eb59a Fix bug in osl.SetGatewayIPv6() function ff2200b397 Fix default gw logic for internal networks 060aa49a70 Fix gossip network event overwriting self 24d11b1533 Fix cross compilation issues 87e4661332 Remove files for no longer used docker/swarm Godep f09dae40f7 uprev docker/docker, dbus to v4.0.0, boltdb to v1.2.0 to vendor dependencies required for build clean on Solaris 43a2b083e8 Static ip support for windows 6fb69f0816 Add driver api enhancements for gossip 088c3cafb2 Increase concucrrent query limit 6a96717344 Fix a panic in handling forwarded queries 6149b1f32f Fix bad order of iptables filter rules 61510dc222 Move the iptables setup for embedded DNS into a reexec process 04f5343139 Make o/p of ipam DumpDatabase() consistent 716af1c1ee Need boltdb Register only in tests 89e72d8888 Remove kvstore deps from datastore package 64a2d2a3a2 Fix ipams builtin package for darwin 0eb215c7e6 Update libkv in godeps 4289ea637a Make IPAM work even without a backing store 7d7b9f2405 Add support to accepting arbitrary network ID 69cf50c305 Enable cross platform build check in circle-ci c7684b5ff7 Get libnetwork to build on Solaris c0162f53a6 Add overlay manager driver e82b92182f typo fix cf65861f59 Overlay driver to check for chain presence 39bc023caf Correct the check in l3 miss handling in overlay driver 83d8a3527a Fix broken CI because of newly introduced NetworkAllocate/NetworkFree api b6d5c12ea2 Add NetworkAllocate/Free to driver api 15237db7d6 Fix IT test breakages b0d046a1af Remove all netlink/osl deps from ipam/ipamutils d81a91ebad Resolver sockets not flushed on default gw change f539be8a63 Create driver registry package 8e6d52fa80 Use newly introduce plugins method to validate plugin response 28f4561e3f Add network scoped gossip database 01c9083626 Update Godeps 865951c6e8 Persist ipam driver options d0c34749d9 tools/cmd/vet has been deleted and go tool vet works natively on 1.5+ 5e4fa21005 Fix the panic when a query response comes after the read() timesout a5aeffcb59 Fix when connecting/disconnecting to/from default gw network 12f04e292f Revert "Do not leave/delete gw endpoint twice" 3ad5bd6d88 Bridge driver needs to store the network config internal flag c957564753 Do not leave/delete gw endpoint twice 0e7a19521c Have resources initialized before deleting overlay network 22801e071f Remove pre-defined networks from package init 30d649c3e8 Fix the handling for concurrent queries over UDP cea4dd457c Do not allow overlay destroySandbox() to be interrupted a9c3a9821b bitseq: fix races 7cbc3e76f6 Handle endpoint & network object in notifyEvent avoiding id lookup bd0d8222aa Limit number of concurrent DNS queries df975778fc Log time taken to set sandbox key 5b3524af9f Added maximum egress bandwidth qos for Windows c92b196d2e Reload config should initialize only the appropriate datastore 70be85fa40 Change 'an user' to 'a user' 52da8bda47 modprobe when needed ca06f1ed80 On network disconnect clear the cached connections to external nameservers 97ce9f457f Changelog for v0.7.0-dev.10 0c22e1bd07 Avoid V6 queries in docker domain going to external nameservers 2ac1e5b088 Changelog for v0.7.0-dev.9 7ad482ffc7 label support for networks on creation 4b9dc647be Honor enableIPv6 network flag on IP allocation 8d480263c0 Fix CI 2e566e3882 Add AAAA record handling in embedded DNS server 937702b74d Format network address using %v instead of %p 639fd9a131 Changelog for 0.7.0-dev.8 9c88ee206e Log stale resource cleanup 7089723ee2 Fixing support for static mac and updating dependencies 880d0ada95 Fix netns path setting from hook 4dde205544 Fixing a possible endpoint_cnt state inconsistency issue c92a4e9fd6 Avoid network/endpoint count inconsistences 4e2e0f148b Fix nil pointer reference in ServeDNS() with concurrent go routines. 9a91bbeb4f Clear cached udp connections on resolver Stop() 2b2d011899 Reject a null v4 IPAM slice in exp vlan drivers 62c6bb12db changelog for 0.7.0-dev.7 dda75448c3 Removed experimental drivers modprobe check fcf79b55ff Bumped ipvlan kernel version to >= 4.2 e052aeaaa0 changelog for 0.7.0-dev.6 60bd944921 ipvlan slaves must inherit the mac-address from parent 64edd40fcc Use osl.InitOSContext appropriately af75e8a624 Added kernel version checks for macvlan/ipvlan fe10aae30b Adding the missing ExternalConnectivity driver methods ed9601e4c6 Make macvlan and ipvlan drivers as experimental a971c561d1 Close dbus connection if firewalld is not started 5ada0fa920 changelog for v0.7.0-dev.5 8cf7270d06 Miscellaneous fixes 392750e74c changelog for v0.7.0-dev.4 dbf16c8302 Fix veth leak in overlay driver 679ee7a070 Fixed IP information not displayed properly in docker network inspect dd48b1c688 If anonymous container has alias names use it for DNS PTR record 82f3d55fa4 Fix out of bound slice access in Delete() 1638fbdf27 Move exposed ports from Endpoint to Sandbox 51058eecec Implement DNS RR in the Docker embedded DNS server 093df0b922 Fixed a panic issue in clearNetworkResources 43e3da2f3a Source external DNS queries from container namespace 6b209991aa Fix IPAM driver documentation ea30113303 Added macvlan and ipvlan drivers 9ba3f70d8e bridge/overlay driver should fail to create network with empty ip pool passed ac1ec348ff Add nil ipam driver 13451d9a07 Fix some typos in comments and strings 92af10a0fe Extract hostname from (hostname.domainname) 0eb01bbbee Fix race in Statistics 67596cc84c Fix some typos. b1c4ec6f05 Renaming driver name to lower case for usability and allowing portmapping to surface c09c312f64 Update vishvananda/netlink package 2cb645bf57 Fix iptables.Exists logic fb4e5ff417 Chen Chun as libnetwork maintainer 1417b4ba1d Fix error message on bridge network creation conflict. 48a7860211 Fix cross compilation breakage 9e57eb5467 changelog for v0.7.0-dev.3 935150ef95 Fixing bulid break because of gofmt 209cb0b476 Allow to pass global datastore config 3ff94689ef Fixed build tags for linux files 5dc5acfa58 Handle datastore update in Ipam and overlay drivers 2fb14185cb Add a check for invalid/junk messages 9871032e4d Windows HNS integration 421a3ec5d7 Use gofmt with -s instead of goimports f6868a007f Make sure iptables chains are recreated on firewall reload 16a62955cd changelog for v0.7.0-dev.2 799369da81 getNetworksFromStore should not fail on inconsistent network state f335e2c1eb changelog for v0.7.0-dev.1 b017aeb8ca Add Santhosh as libnetwork maintainer dfe437eace Bridge driver to Warn if xt_conntrack not present 101e63f593 getNetworksFromStore should return all valid networks 5e5dc809cc Register natChain with portmapper cbb59adbd8 Set the compress flag for the responses from external DNS servers to avoid sending DNS replies > 512 bytes defcd4afb9 Change in programming iptables in container 9db2b791bc Allow inter-network connectivity via exposed ports cfb3ce460b Don't allow passing EnableIPv6 as a driver option (a label) 83f1107e59 Delete the interface on endpoint delete in overlay 74cf622463 Fix some races in getNetworkFromStore 01d2ad412f Expose the enableIPv6 setting 247e8034b8 Introduce discoverapi.Discover interface 187e179e6b Remove overlay's ipAllocator f719512ab4 Cleanup stale overlay sandboxes dbfc99eb94 Change in bridge/setup_ip_tables.go 81c586e0e5 Stop referring to requested IP address as "preferred", since it is an error if that address is unavailable. 7086da757a Handle concurrent creation of default GW network 7a76968485 expose Endpoints API for a Sandbox 36fd9d02be Set Recursion Available bit in query response and reduce the ttl 1419d96a01 Reducing the complexity in default gateway service handling a509244057 Fix predefined pool reservation 62b34aa361 Adding TCP listener for embedded DNS 411bc69949 Embedded DNS server should resolve only in docker network domain 30ef9bcf4a Retain V6 DNS server in resolv.conf; use only V4 servers for fallback 4e25ffc8d9 Loopback IP shouldn't be filtered from resolv.conf in host mode 5f22db217a Enable embedded DNS server on network connect to a user defined network 315004b575 Cache scope in network object 3d9c5a959c Fixes docker/docker#19404 a7c52918fd Force delete sandbox during sandboxCleanup 94f4fb0b10 changelog for v0.5.5 b48c479b17 changelog for v0.5.6 05bd52dbb6 Setup embedded DNS server correctly on container restart 21219731d3 IPAM to run consistency check over its bitmasks 854fe82ba1 Allow bitseq caller to run consistency check b8d2ac9b65 Honor --iptables=false in bridge f9e4b40e5e Allow network-scoped alias to be resolved for annonymous endpoint 0b07ad6202 Fixes some typo errors 4161ddd747 changelog for v0.5.4 e88b95c13f Remove `isNodeAlive` check while force deleting endpoint 5e78e49f76 Adding changelog for vendoring libnetwork into docker 02d6721763 dnet client update for -force unpublish and Integration Tests ec622bf158 Forced endpoint delete 7b64b1c293 Add internal network support for bridge networks c6dfe4b795 Fix etchosts.Update to not target hosts with given hostname as prefix 3e154b3cef EP lock shouldn't be held when trying network lock 3569adad28 Fix race in setting ctrlr for network 2db863e5d7 Global alias support 16ff947fb6 IpamOptions per network not per ipam subnet be981267c0 alias support in dnet and integration-tests 63e20c2f3d Alias support e22b54dee1 Check if present before programming IPv6 in bridge fe2fa218d8 Delete veth on ep leave in overlay driver cf7ed0a717 Embedded DNS server 1051418559 Fix golang.org/x/tools breakage in go 1.4 69fe328789 Add network options to NetworkInfo to display internal network option 31016faad5 Disable DAD for sandbox IPv6 addresses 5b82b93285 Fix default make target 797c32bcac Clean up docker chain of filter table as well on driver init 54145fdd20 Godep fixup to import miekg/dns library abaaa23a8c Vendoring netlink - bfd70f556483c008636b920dda142fdaa0d59ef9 0ce2a2dba0 Fix regex for IPv6 95f1bcc249 Change isolation rules for multiple bridge networks e026deb981 Fix up Godeps and update docker/docker packages 921be8b633 Fix up example code 2ecc6aa49e Add support for Endpoint's preferred IPv6 address 9b31fc50ba Don't treat non-nil output as error in ChainExists 6cff09f710 Check existence of network chain before creating 59e1e42ce7 Add tests for internal network 186a32acab Add internal network option 66141b879f Cleanup vxlan interface by id before creating 30ec1b5081 Bridge driver to honor IPv6 network gateway 29299b73df Allow remote IPAM driver to express capability b7d0fefabc Add overlay network support < 3.16 kernels 294b858f2c Add IpamInfo() function to retrun ipamV4Info and ipamV6Info 4cb0d27cf9 Improve ipam test coverage ad95559d74 Replaced reference to dockerinit by dockerenv for func isRunningInContainer() 256e15a6fc Increase test coverage in bitsequence 46077fcfb1 Fix mutex copy 6b40581ea5 Libnetwork to set container interface's MAC 158b2852b9 Skip defaultGw check if sandbox is being deleted 6b81e3a868 update maintainers file for parsing 44f532f16e When assigning an address for an endpoint set preferred address and options. eef129c103 Do not attempt serf query when not initialized 141c51273f Add DisableGatewayService in JoinInfo to offering drivers the ability to disable default gateway 2eadfb8290 Don't connect sbx to default gw nw if default static route is provided dc4285b9a4 Adjust ipam errors a87a58e2be Changing image file-path in design doc 1d88c10f98 Adds cnm directly to repo 20e5a0503a Add nice image illustrating CNM dee3acc574 Release address pool before removing the network from store d0f3f77432 bitseq: fix race between CopyTo and set 0ae6d496bd Allow libnetwork to compile on freebsd 84abbcefa8 Fix a couple of edge cases in service discovery ffbe62a8f7 sandbox_externalkey.go: split for cross compilation b67e986b75 Multi-Arch Support e758f136a4 Updating README 90711b0def Fix bug in bitsequence.pushReservation f24b0aae51 English please. d778845791 Fix in endpoint Info() method c1b67065e6 godeps: update coreos/go-systemd to v4 and godbus/dbus to v3 1aa88fa870 Allow endpoint delete if sandbox identifier is stale 7ff429e32d Use documentation IPv6 addresses (RFC 3849) in tests ea14d68757 libnetwork to honor explicit mac-address 7fa78a97c4 Remove redundant assignment to ep.network af7bc494f9 Allow IPv6 allocation post endpoint create 6531b0c4cd Use Docker Machine for Test Environments e4ce59b7aa Cleanup iptables after bridge network is removed 14b21d5d88 Fix bug in getAddressRange() in default ipam driver 229e735837 Clean unused variables and fix typo dd85700005 Fix bug in bridge driver 1452fc31d4 Retain sandbox only if network is not available d9ad8c961c Skip non-persistent endpoints in sandbox store 670302e66b Fix stale sandbox from store problem 967917c8b4 Fix race in os sandbox sharing 6c23d4073f Fix race in host sandbox creation e636d8398b set cntlr sandbox before cleaning endpoints in ungraceful restart case 64547e43c0 Minor spelling fix ("likey" => "likely") c8a66f5e72 Fixes a case of ungraceful daemon restart + unreachable store ab0c0df288 Add IT case for external connectivity 71207b575e Reconcile persistent state after driver config 320219829b Fix in DriverInfo() 2f03577ec8 Use serf logger for memberlist log 7b4b56169b Some functions' logic cleanup 5a0dbbd986 log an error if advertise is configured with a non-local ip-address fbb2269109 Format the code e5d280edac Tidy up the IPAM driver doc 0e2ff9dd71 Add more integration test cases 824bdec0bd Add customer_prefix to the store URL for integration test 92f7f2e1a0 Add IT case for proper /etc/hosts handling e5b34e1435 Cleanup service db for the network 4cc65d01a6 Clean hosts entries on endpoint leave 473ce7db08 Dont notify the leave if the serf is not inited 84b1ef9bd5 Fix an issue in overlay network peer EP list maintenance a687e431c0 Default Gateway endpoints must be annonymous 4850c5f1e6 Avoid duplicate entries in /etc/hosts 36a8f5822c Use simple scanner instead of regexp for etchosts.Delete de7607f509 Add benchmark for etchosts.Delete aababdc1c7 Fix the issue to parse file path for boltdb b339bb2707 Fix the issue for the --cluster-store URL with path 3da8471681 Handling container rename in libnetwork 115d2ec7d8 Do not manipulate bitseq length to reserve broadcast address 133ee32980 Fix Endpoint Unmarshal to retrieve the fields correctly 5ef8d0f038 Add watch retrigger when store restarts c3c4825f80 Purge remote endpoints from watch if it is local cdb82dc22d Synchronize /etc/hosts updates at file level 3cc33dc491 Update libkv 379609e362 Allow remote ipam driver to return nil address f1b2705d5e Do not refresh the bitmasks on all operations in IPAM 07bb3dcdba Dont fail the Get functions if there is an error in one of the stores e41a9cf59d Allow anonymous endpoint d686fbb9c4 Handle maskable error during endpoint delete 33d336ac72 Cleanup dangling local endpoints 773648507d TC for ungraceful restart of default network 96d819cb06 Make sandbox cleanup robust for ungraceful exits 27908bfeb4 Update netlink library. 316a652e6e Fixes #680 4df4ba70ca Fix the daemon panic on consul server restart afd6162240 Bridge driver should return maskable error 537ba03dd1 Use netlink.LinkByName instead of net.InterfaceByName 604753b43a Fix build image name 04126b850a Fixed Vagrantfile to use systemd script 79b37def48 Explicitly set namepsace for ipamutils.ElectInterface e0f1ac4b2e Fix ipam state cleanup logic 33aa626bc9 Add etcd integrations tests e8370e78d0 Changed Labels to DriverOpts 82e3c49b0a Fix docker daemon failed to start with multiple cluster store address ac1cf3f784 Add support for selectively running a suite b92b013820 Add overlay zookeeper test 72b8f80dc3 Ensure the parent directory for key prefix exists c42e2cf44d Update libkv godeps 3365af97c2 Initializing generic to emtpy map 6b77f04e9b IPAM driver doc 71220e2a88 Made use of map[string]string for nw options in default-gateway impl 9ae62c93dd Updated Vagrant with the latest UX 8d56508190 Change in remote IPAM API payload 6d6490b91c Check if address space valid in getStore ab8dfb54fe Separate endpoint count data from network object 74376e8676 Moved the default local and global store to new root a6c2dd75b5 Synchronize datastore apis 93bc5ed4c7 Update libkv godeps 7391338323 Make ipamutils compile for windows 750671e633 Default bridge need not have persistence in bridge driver c2064dc18d Reduce logging verbosity in allocator 6026fe772c Remove 2^32 bits restriction on bitsequence 50db985c1d Few more fixes identified during integration dbbc561c18 Network ep count increment/decrement needs retry 24339bea43 Relax restriction on IpamConfig af95bfd273 Preserve default ipam driver setting 0e04c8555e Network to expose ipam config 1ffe6fef02 Move sandbox resources when container restarts bd45253fb5 move Labels from array to map to be consistent with cotnainers 0f8a6b392f Fixed a bridge driver bug in unmarshalling DefaultBridge 3d3bd9331f Fixed a couple of error messages to address UX related comments 2401496d2a Enable network labels in Rest API 02386e85d5 Enable Network labels in backend b7c2b8111f Add netlable. KeyValue() and ToMap() 888f13d17b Make the integration tests robust be700ec0eb Add default network restart test case 268d41835d Make bridge driver networks persistent 9a8c636a40 Retire ipallocator af3eb25d44 Phase-2 bridge driver changes to support IPAM 284c9cd0f5 Revert "Share libkv store handles across datastore handles" 9c2541b774 Removing boltdb timeout 87f5a70f0a Godep update to libkv 1.9.0-integ branch f2f536032b Phase-1 bridge driver changes to support IPAM e41b4765bd Cleanup dangling sandboxes on boot up 50098e5c7b Add support for configuring TLS 2a392e5a98 Any newly added data to an existing marshalled object must nil check e5ee4ada8b Removing the endpoint name restriction b9596c89d6 libnetwork to handle allocation of ipv6 0cfaa590de Fix in handling aux addresses 3f7e26160e Share libkv store handles across datastore handles a226c36b75 Pass down store configs to driver 344b653478 Remove unconditional debug logging 94b6e5e18b Default IPAM to use ipamutils pkg a22ce0938c Add bridge network integration tests a13f78369f IPAM watch removal and multistore support 71e14dd52a Remove always-on watch for networks and endpoints d74384b1d4 Add local store caching support 782d9a4618 ipam must honor preferedIP ahead of random allocation from subPool cc1e49cbbb Fixed a bug in AuxAddresses handling in libnetwork core fd00a53019 Add ipamutils package e5d44569fb fix the regexp for matching an ip address b061382c5e Default IPAM to handle local ds 67b1e3c5f2 Fix in bitseq.NewHandle() b75601e84d Updating the network driver document with IPAM data ddcfab5f81 libnetwork <-> ipam driver interaction 2aaef377f3 IPAM driver - Add IPAM cotract and remote IPAM hooks - Add ipam registration in controller - Have default IPAM follow ipamapi contract 1081687e38 Allowing local joins to happen even when serf is not initialized fac4e67c16 serfJoin doesnt happen if self notification comes later 0b40559c69 Fix the overlay cleanup in the multi-subnet case 0066225da5 Integration with Docker Discovery 19f466369b marshal/unmarshal for overlay multiple subnets 1b393486b5 Godeps update aa3db80a5b Update overlay.md 6e327a5afb Support for multiple subnets in a overlay network caab594ffb Moved InterfaceStatistics from osl into types package e8593bdb65 Docker GCCGO CI is causing compilation errors as the varibale is declared and not used. Signed-off-by: Srini Brahmaroutu <srbrahma@us.ibm.com> a41025e9c0 Fixed a few more issues observed during docker integration 7305922385 Moving overlay configure out of Init and into network create e4e77353c9 Setting bridgename to be network-id[:12] if bridgename option is empty a42e5f0663 Flip the default for the flag AllowNonDefaultBridge in bridge driver ce44f2478d Add overlay network integration test 50ec2d3a50 Add Sandbox ID to `service ls` output 24f1845a18 Do not overwrite the /etc/hosts file on Join 08d9578e48 Updating tests to use controller.Stop() to cleanup states 27397dcbdf libnetwork to make use of boltdb ConnectionTimeout to avoid deadlock dd6b8cb408 Update libkv to support boltdb timeout e82989f845 Fix outdated docs and comments 725280d03f Providing KVObject option to skip persisting object in kvstore 72567c355b Various refactor and fixes for the previous two commits including: 1. Don't save localscope endpoints to localstore for now. 2. Add common function updateToStore/deleteFromStore to store KVObjects. 3. Merge `getNetworksFromGlobalStore` and `getNetworksFromLocalStore` 4. Add `n.isGlobalScoped` before `n.watchEndpoints` in `addNetwork` 5. Fix integration-tests 6. Fix test failure in drivers/remote/driver_test.go 7. Restore network to store if deleteNework failed 8babc3d4d3 Add local datastore to persist states of LocalScope network 56e3c1e9d5 Update godep to support boltdb backend d565a4df48 Push driver config during `Init` 1cd9c4dcaa Serialize the endpoint join/leave at the sandbox level 6b1fcf3e6a fix bad docs format f33a362b48 Introduce multi-node integration tests 09fec4e411 Allow to set bits in a range in bitseq eb54ed5d42 Support for default gateway for containers 3342e5591b Remove unwanted lock 9e6378ad57 Correct formatting in remote.md ba83cbc058 Set interfaces routes after the interface is up bd20fd4813 Add cmd/dnet/dnet binary to .gitignore 437dfd3a43 Correct perms for directory creation 2479562e72 Introduce test remote plugin in dnet d46d5178b5 Make integration-tests an indipendent target d04c177a10 Fix for zookeeper backend bb6449bedb Fix unmarshal error in endpoint interface ea4cdf441e Add simple integration test cases ebbca4814e Update libkv to latest commit 59fd1a605a Update Godeps and add codegangsta/cli 304bfd6261 Add negotiation process for driver scope 4104c0d0e5 Cleanup external sandbox from test 84ac14e295 Reexec external key handling 2682309a23 Limit valid object names 9ea1f56cdf Godeps update on libcontainer a5bd12b963 Remove multiple interface in an endpoint 636a967df1 Fix CI failure due to mistaken imports f59502e1bd Support to provide external key to sandbox 06d8585503 Make lookupSandboxID() reliable 27b37e7473 Remove possible stale containers first aade3e7a92 remove the useless get netns code in createNetworkNamespace 0e40539ebc Add integration test infra bc4160be38 Fix inability to detach service 72eb02d807 Add missing sandboxes routes 3528fd9830 Fix CI failure due to conflicting merges 5f69a077da Fix bug for `docker service ls` cc02894a50 Move test specific functions to a testutils package. 46a773fba6 Fix libkv source out-of-sync with Godeps 84a0a0a98f Fix bitsequence set() 005d8f1f52 Fix bridge driver panic in CreateNetwork 33780a2ed5 Fix go fmt errors in the build 36e7a8b168 Add TestEndToEndErrorMessage af323c7006 Don't discard error message on sending response Error messages are always discarded and it makes diagnostic difficult when error occurs. 1426728a64 For the endpoints on overlay network set the MTU to 1450 to avoid fragmentation when the vxlan header gets added d216db6ef2 Do not print the word `nil` in a log. b0dd4944f5 Add Refresh() to Sandbox ddfa448536 Allow tests to be interrupted ef659c9049 Fix resolv.conf and hosts handling in sandbox bcd996f4c3 Explicitly set namespace for all network operations 27296caeb8 Add DNS 'options' support cd3fbc2a95 Fixes ip allocation for multi bridge networks fd43ee1323 Introduce Sandbox entity 27e0db309f Adding ppc64le build tag to compile on IBM Power Signed-off-by: Srini Brahmaroutu <srbrahma@us.ibm.com> 44cb162f3d lock port mapper when reapply iptables rules c09fe6a7c1 Fix panic due to mismatched types 1f28387d21 fix typo d7803ee53a Fix ip range allocation in ipam b2ff78548a Fix preferred ip allocation in ipam 5c926bb344 idm and ipam to use bitseq atomic APIs 01d6585a31 bitseq to provide atomic functions ee31009744 bitseq to only handle and return unsigned types 467876e723 Control exported types in bitseq e5842be694 network byte order to bitseq serializer d715041cd0 Fix typo e4853a4ada Overlay driver should assign interface mac based on the IP 9169198dc6 Update vishvananda/netlink 61f3a2e253 Fix racy joinSandbox behavior 8d73de9722 Adding libnetwork support to publish on custom host port ranges. See https://github.com/docker/docker/pull/12927 for docker portion. 50ac01f7f4 Updated Godeps to the latest vishvanandha/netlink 960639fbb9 Pass the vxlan port in network endian order 1bf751ef93 Fix in bridge delete endpoint 26ac09e004 Simplify NetworkOverlaps function 021d71de29 Fix bug "...has already joined the endpoint" 5a259d55f0 modify /proc/sys only if needed 12df37fdd0 Seperates the driver-specific and network-specific iptable operations for the bridge driver. 7a5224afe4 Fix example package error e8771c868e Bug in bridge network mask c38d2d4601 Remove unused config check 0b458d70ce Fixing Vagrant to use ubuntu 15.04 to get Experimental docker working again 3da75632f7 Reorganize MAC generation functions 6901ea51dc Prefer Netlink calls over ioctl c266c843a7 Incorrect kernel version check in bridge 0c2293e0a0 Fix bridge and br_netfilter modules loading. Signed-off-by: mikael.davranche <mikael.davranche@corp.ovh.com> 092437ad0e Fix data race in controller sandboxes 140616a7d6 Simplify and fix os.MkdirAll() usage d6685f61a7 make sure the interfaces is cleared on error 6461057521 Misc fixes to ipallocator & bridge driver about FixedCIDR 88c2c05ce9 Misc fixes to ip allocation in bridge driver 2dd9a6fa75 Use sysfs to set hairpin mode 21b0927720 Fix ICC on Firewalld enabled fedora systems, add in missing firewalld functionality to re-apply configuration when reloaded b62013c24c deadlock fix in RemoveStaticRoute 83b6a338a4 Reduced the two spaces for network help, required to pass tests at docker build 94ca1f5bba make libnetwork compile on freebsd (again) 524b3dca97 Sometimes fdb points to wrong vtep 951dcbe85e FIX incorrect usage about libnetwork.New() in README.md 55e7175f64 Remove dependency on libcontainer 850bdd0923 Expose the remote driver API structs publicly. b4e87d5c98 fix for #14633, use original nexthop ip value instead of obtained via RouteGet 9487241f5c Fix duplicate POSTROUTING MASQUERADE rules 981686787b Fixed a bug in DeleteEndpoint to properly release v6 ip 90a410eb3d Refactor of docker PR #11405 f88ad7d340 fix file descriptor leak of ".../ip_local_port_range" 6692b6d072 BitSequence should unmarshal data during get 8c3c747c62 Fix incorrect error handling in bitseq constructor 6bba1cd7b1 Use IANA assigned VXLAN port 00456020f5 Adjust overlay driver for netlink api change 70429527b0 Honor driver side resolv.conf file a22d29b7cf Update vishvananda/netlink package 10444cb448 Manually bring up the host side veth interface 15759edb38 Fix networking issues in RHEL/Centos 6.6 885056b243 Use ioctls to create bridge a35025569e Updated Godeps ca7aa81de8 Some users docs with a Vagrant setup e714096b54 small typo in the requirements 1a52238be9 Use github golang tools mirror 1f1bb1700a Updating to latest netns to fix amd64 / RPI issues a3879fc169 Endpoint interface stats read fails when invoked from docker 5ac330aca2 Endpoint to expose interfaces' statistics 1cba00c62b Fixed URL used by curl in overlay readme 2e64ce637b Minor spelling fixes in documentation and code comments 6ed26709bd multi-host overlay driver quick start doc cacdd39761 netns: Update to latest for arm64 04bd8f67ad Datastore handles creating objects atomically. 1d5698936a Remove extra conditional. df56ce5f47 Update error return in bridge driver's getNetwork 28c2445dad Do not update /etc/hosts for empty endpoints 63514b2749 Resurrect firewalld support f7c37712ea Fixing a windows compile error in docker during vendor-in 34708355bd removed a duplicate and incorrect unlock 1ac72c85cb Add LeaveAll support bdeeda1703 leave must not use join options in the defer during failures 49d9787749 Ignoring locally scoped endpoints/networks from distributed delete 7084bc27f9 set the kv-provider driver labels only if it is a valid config 271bcd7ba1 Service discovery 362568467d Add/Delete etc hosts record support b40774bb02 Fix endpoint ip data-store sync issue 12ac5827e4 Updated Godeps 421ef35df2 Support driver labels ec68d342d1 Add ovrouter binary aac063b4b6 Add neighbor support to sandbox 6e4a572529 Overlay driver cc6fb95c0c Fix datastore value handling in bitseq 8b59f48537 Reading the top level element (network) from datastore on init b818ea981d Add datastore to IPAM for configuration 2677a461de Distributed delete processing e39fc16c55 Rework push reservation w/ datastore 390a9702d2 Change subnet key schema in ipam c395cf2eb6 Datastore additions to bitmask management 4c4f71e2ac Added a new RetryError to indicate the caller to possibly retry 883fc7bca4 Make bitseq.Handle thread-safe d1a16bbb84 Add numerical ids manager 1f76a79bf7 bitseq to provide handle 3ff75bd42d Reorganize libnetwork ipam datastructures a0e0d07250 Add locking to libnetwork ipam 75443aaf72 Add serialize/deserialize for sequence list 873ea8a224 Add libnetwork ipam implementation 3287a4c830 Add ipam contract 5034c9bb11 Add bitseq package 4d60688464 Update modprobe bridge output 3a8213e40a Fixed the tests. 9e7d2fe74e Fix duplicated iptables rules f843e44805 Cleaning up iptables nat table on driver bootup 11094f2645 Pass proper regex to mux for query fields c0bcb8dff3 Fixed a basic UI regression due to a recent godep update 678d50f5b5 Updating CallFunc to match the Docker CLI API changes 0969e192f2 Add implementation for lookupContainerID 04e96f3811 workaround to a minor bug in mux which filters out empty query 03504cab65 Few changes to the UI and API implementation 613e60bcec support for libnetwork daemon labels c85a58b6df Return an empty config if nil 9f3d1ce3ff Moved the TOML based Configuration to dnet b2a5ea49f3 Windows: Compiles again 3d805de246 Pass a canonical subnet to ipallocator 903fcbd154 enable hairpin mode on the bridge port & fix iptables rule 8c9c68bec9 Remove dnet binary 3b2d2aa3ee Replace swarm store with libkv 7de9f71eb5 Promote Service cli 8aaf82c5b3 Endpoint to provide ContainerInfo 0912ecfc05 Add Service hierarchy to rest api b92d253d60 Make sure sandbox files are removed after tests 9e8974cc64 Replacing isReservedNetwork with Driver capability f88824fb8a Reworked endpoint store operation to address a few cases 47a3f3690d datastore delete support for network and endpoints 8dcdbbabd0 GetObject support dca35085f5 datastore support for Endpoint 0fda541b37 Updating to new Swarm discovery and store APIs a14da7ba36 Updating to latest Swarm dependancies fcca4484cb Generate container mac address based on IP fc9b204f39 handling error condition for network and endpoint deletes 6628cf7f5a Check GC loop is active/necessary before triggering GC 8d7e5cbb68 Minor changes in bridge.go cc6d1be37e Update ROADMAP.md e27586de4e Provide isolation b/w bridge networks a0cccbbcfa Moved services to dnet top-level and removed experimental fa22255b2d Windows: Allow compilation (again) 4ceec05f1b Add support to add bridge to the sandbox. f5c1c78179 Refactor sandbox code to use interfaces 6d6aeff780 Make GenerateIfaceName generic 991f50a10c Add note on EndpointInfo semantics 8ac0d7709f Add restrictions for default drivers/bridge name 15ddc3717a Add support to trigger immediate garbage collection f770d4b448 make libnetwork compile on freebsd 65519600f0 Document the remote driver protocol 71f08ec63f Update netns to include support for PowerPC LE (ppc64le) architecture 031e09d888 duplicate endpoint error handling e67f9f4f79 Copy default configs from default Bridge to new bridge if not user configured 5fff515028 Including hostdiscovery conditionaly under a build tag 9d1cc7d56a Fixing a few go-vet issues 3be66461ba Change in bridge EndpointOperInfo() a93d08aef5 Add container join priority option to endpoint 36303270c6 Introduce UnsetGateway(IPv6) methods c3d02744c6 Cleanup libnetwork test code ea8580d1e2 Remove only the endpoint owned interfaces 5c153bd018 Add static routes to the remote driver. 5ad02e8c48 Change scope to LINK when setting device routes 0ae84dad55 Fixes https://github.com/docker/docker/issues/13426 bc70ed60cb Fix miscellaneaus data races 61993ec6c2 Modprobe bridge driver r specific kernel modules db5f2f40fb Removee the init time cleanup of namespace files 7560ca63f5 Reworkkgarbage collection code to use tick f429a2528d Loopback interface not t brought up 3ec19ff62b Workaround kernel bugs s related to namespaces 96295af687 Do not warn in packages ce64bdbd9f Fix dnet service cli help o/p 8ec7f0d7ac Remove dead code 3c0d5c3a8b Update remote driver to use destiantion prefix. cfc28a900a One port mapper per bridge network 12117f349d cleanup: remove unused variable 3ed8beaa4b json friendly struct field in API structure 800029abb6 Remove container data return value from Join 930d27c06c Add Alessandro as a libnetwork maintainer a4de736345 fix typo d56c6de9b2 Windows: Enable compile 65acaaf0b5 Allow drivers to supply static routes for interfaces ae8643748d Libnetwork Host Discovery using Swarm Discovery pkg ef1293ce5a Updating Godep to pull in Set functionality 481568035f TOML based Configuration support for libnetwork 8324230320 Godeps for TOML parser - BurntSushi 594361552e Avoid adding local reserved networks (bridge, none, host) to the datastore 87161e8935 Added Network Watch support 9b952fc982 Initial kv store integration and datastore implementation c46a023902 Updating Godep to reuse Swarm discovery and store packages 9c9c79f1b0 fixed some typos 820712cae6 Fix RemoveInterface in sandbox e20e7bbbfe Added API support for both /vx.x/networks & /networks e244043eb3 In bridge, network config to be validated last 35fab0aa6f Bridge driver to support multiple networks 5d9c59e523 Support network options in rest api a550562ad4 UI formatting applied on top of Experimental Service PR f1712c0bf6 Moved all the service commands under experimental build tag a1c3dce3e9 Added a catch-all root hierarchy for the API path 97adea5b77 Add dummy proxy on port map 49f742eaff Orthographic corrections 0653afc5f5 Service endpoint UI support b5a6c849e3 Adding support for network/id/endpoints in api 5ee5e2452f Modified Client to make use of the corrected REST API e97b1e05a8 REST API: Support query by partial id 89045ca381 Modify driver Join api to only allow dst prefix 7934979f40 Remote driver implementation dbb71728f9 Revert "Added more test coverage for portmapper package." 8942de9410 Fix test failure in api c70cfcb150 Provide interface to categorize errors 7d80a5a84a Changes in rest api a9fa764cbb Move network types to types package 407e41d394 Fix /etc/resolv.conf permission issue 56375f3687 Porting https://github.com/docker/docker/pull/12437 8c5750558a Cleanup namespace files 36a0f91b5d Initial dnet tool to test and manage libnetwork end-to-end 57628535ba Godep update to pull in parsers and term packages 977fcdd952 Client to make use of REST API 2d3758619b Fixed some basic client UI issues for the "network" command a794fa07b7 Fix Makefile 9d4b69df73 Fix panic on leave of host driver endpont leave 1589c43f9d Restore anonymus import in iptables_test.go 902e8746d3 Optional Userland Proxy 030817808c Change default namespace path b323d571b5 Driver api refactor 80ca3c2330 Remote Driver integration with Plugin Framework cb8bbd3ded Upgrading Godep to the Latest Docker Pacakages that brings in the Plugins infra 4aa71f337c Fix misuse urlNwName and urlNwID in api. 8dc3f3be47 fix createTestNetwork bug f16db2c3ad Remove pkg directory e2fea0f945 Ignore the OldHash if the resolvConfPath is invalid 1e91009978 Network and Endpoint query methods to return error on not found d96e94897e Fix DNS entry update issue 4a3c7e1bb5 Changed portallocator New() method to Get() 7ae3e91c8d fixing a link in design.md 9fad1812d9 Initial libnetwork rest api 26a5a79374 Update resolvconf and iptables packages from docker 10fafb06eb Fixed an intermittent issue in the libnetwork test 79556b1ccc Fix issue in ipv6 when a non-default link-local ipv6 address is present. 382fe75607 Simplify the code in the RegisterSubnet method of ipallocator. d69e66c894 By ID and By Name query methods to return error 1cd241686c Create a build image to avoid install-deps every time 614d82390c Make driver packages register themselves via DriverCallback 1739626f4d NewNetwork and CreateEndpoint to validate resource name 7f7d9abd87 Make endpoint Join and Leave multi-thread safe 2fc4f3154f Added more test coverage for portmapper package. 0db03ebaa3 Add some tests fd04ef2d00 Cleaning up the Endpoint Joins with proper defered Leave 27d34d67ab Fixed some convoluted texts in remote.md and fixed a remote driver bug e1003fb078 fix some typos 904a313396 Remote Driver Registration 0d45fb66b3 Added remote driver design doc df3cde525a Small typo fixed Signed-off-by: Kunal Kushwaha <kunal.kushwaha@gmail.com> 067e8977d5 Updated godeps 9714bcac87 Brought in iptables package into libnetwork. d10b8aca74 Updated Godeps 9a5217b514 Copied etchosts and resolvconf packages to libnetwork. 142825b2f3 Updated Design Document 570a76384a Handled endpoint delete with active containers attached to it 4f7eb502bf Add design documentation 3919b126a9 Added support for network specific enable ipv6 label 94a9f12280 Moved most of the driver configuration to network configuration. c9b54861e7 - Moved label definitions to a new package - Added a network scope well-defined label to enable ipv6 dc3a4a007c In bridge.go: Join(), Leave(), getnetwork() are not thread safe ff36e97f45 Properly handle Leave by - Removing interface from the sandbox - Deleting Iptable rules in the bridge driver f055e06f3a Added RemoveInterface support to sandbox. 8c2d72096f Don't fail the build on coveralls upload ec4e1da3c5 Separate ExposedPorts from PortBindings in libnetwork API 8265de6325 chang the type of ports form PortBinding to TransportPort in link.go 3b8b2ffee8 - Changed ContainerConfiguration to simply use strings - Made ContainerConfiguration fields to be exported so options package can access them. eb98e212cb Reuse existing docker chain constant in link.go 706c01073d CreateOptionPortMapping to store a copy of the passed bindings d4851b95ec Incorrect assumption with golang net package causes Overlapping IP 55099e9656 - Removed sandbox override option from the driver. - Reworked the host network mode support by introducing a new JoinOption. a983569c0c Added mac address to EndpointInfo 560d156e36 Replaced all proto numbers in netutils with the defined const db2f7c6f28 Added support for /etc/resolv.conf 4399989c53 Updated Godeps to the latest versions of docker packages. 5f8bfa8ade Added "host" driver and test code. 66eb3e1cd4 - Added support for JoinInfo so that driver can override certain container config. - Added JoinOption processing for extra /etc/hosts record. - Added support for updating /etc/hosts entries of other containers. - Added sandbox support for adding a sandbox without the OS level create. 68cae04fe9 Fixed a bug in bridge driver when docker0 has no IP address it doesn't select and configure a proper IP address. 30e2ee9793 Fix a minor but in utils parsing UDP/TCP ports 56741e7d60 Provide API to retrieve Endpoint operational data 446b158581 Link implementation in bridge driver 95c5eb2856 Ignoring Driver failure on Leave. da97978469 Remove redundant code in endpoint.go da1cddc320 Bridge to handle port mapping - libnetwork cares for list of exposed ports, driver cares for list of port bindings. At endpoint creation: - list of exposed ports will be passed as libnetwork otion - list of port mapping will be passed as driver option 781bcc94a7 Params of non-exported struct should be non-exported bfc5721970 Re-arrange MAC election code for sandbox iface 9db6a1b8e4 Join / Leave Driver API cc4f27f6af Minor API modifications 0d3ad0eaee Control scope of JoinOption functions 4bf442a510 Updated Godeps b8f81862d0 - Added Join option support - Added basic /etc/hosts generation support in libnetwork d684600cdf Added null driver support for handling --net=none and -n=false cases 713ff79ed5 Reorganized the libnetwork code to seperate Controller, Network and Endpoint d438fd59cd Port PR #11526 to libnetwork e2d8531a40 - Added support for Join/Leave methods to Endpoint. - Removed sandbox key argument for CreateEndpoint. - Refactored bridge driver code to remove sandbox key. - Fixed bridge driver code for gaps in ipv6 behavior observed during docker integration. - Updated test code, readme code, README.md according api change. - Fixed some sandbox issues while testing docker ipv6 integration. 35693a1a47 Issue #88: Handle default v4/v6 gw setting 263ee2dbbb libnetwork client base infra d152bb91c4 Added docker mflag package to Godeps 8f63aa82b0 Initial bats based integration tests for testing daemon network configs 21ed154c79 Rename setGatewayIP() in sandbox pkg 6a5e4a83e4 Provide Query API for Network and Endpoint 1c7c0f371b Add methods to walk Endpoints and Networks 6e80af6ee8 - Re-enabled Bridge test case which got disabled because lower case test case function name c6fd92a565 - Fixed an assortment of bugs in sandbox - Added more test coverage to sandbox 1fae5573d2 Refactor NetworkController interface 198e3d3ee9 Libnetwork bridge to handle MTU option 69437b1009 Libnetwork bridge to handle --mac-address option f4fd5dacbf Rename simplebridge to bridge 468ebf3816 Issue #68: In bridge.go driver remove veth on endpoint delete 3da12c7219 Add TestSandboxInfoEqual in sandbox_test.go 7d24e974cf Refactor driverapi, sandbox pkgs dee9e06bbb Fixing a few typos 95958d7610 Enhance Endpoint interface a004b52ab3 fix some typos f151cc23ab Add Network method to return list of endpoints 88eb07fb8d Update Godeps docker/pkg/common => /stringid 8098113830 Fix libnetwork_test.go 0957eed04b Minor language cleanup in ROADMAP.md d449658d91 Expose Endpoint IDs in their public interface. e91ed59cb2 Changed all the naked error returns in bridge driver to proper error types, except the naked error returns which were just prefixing strings to previously returned error strings. 3e6a889cd6 Port Allocator as a libnetwork package 38ea74e2b5 - Fixed the makefile which was not checking failures in test code - Cleaned up the makefile to remove output clutter b0a38a0d1b Fixed a bug in bridge driver where when the bridge already exists the bridgeInterface.bridgeIPv4 is not getting initialized properly 56c3adda07 - Added more testcases for libnetwork API testing - Added new error types for all of libnetwork errors ec7d417a37 Added a test binary to test README.md code 8fe2d88db1 Fix typos and formatting in docs. Add Godoc badge. e797f80ad4 Added driver specific config support - Added api enhancement to pass driver specific config - Refactored simple bridge driver code for driver specific config - Added an undocumented option to add non-default bridges without manual pre-provisioning to help libnetwork testing - Reenabled libnetwork test to do api testing - Updated README.md d8f88b2afb Name/Mac generation and libcontainer dep removal 2c797384ff Report Code Coverage and Add Status Badges 6c0ffdd70a Added unsupported implementations for sandbox and sandbox test code 0a25032277 Converted IP address and gateway values to be proper types rather than strings in the sandbox and driverapi protocol 53c755b79d Updated godeps 68ae284db5 Libnetwork refactor for container network model - Added controller, network, endpoint and sandbox interfaces - Created netutils package for miscallaneous network utilities - Created driverapi package to break cyclic dependency b/w driver and libnetwork - Made libnetwork multithread safe - Made bridge driver multithread safe - Fixed README.md 1f3f37b2f8 Sync libnetwork code to latest docker/master 2d364e2c34 - Added support to bridgeNetwork.Link - Removed MAC and MTU configuration via AddInterface 7b05ee2ac4 Added initial README and ROADMAP files d1a6ee35ea Run libnetwork test case only when it's specifically enabled 5d7b430801 Issue #33: Move portmapper and portallocator into libnetwork bc59294da8 Point to Docker contrib guidelines in README 18d485a466 Add Makefile 4ac519f7b6 - Added initial test cases for libnetwork api - Introduce delete api f76372ed74 Add MAINTAINERS 68d223a0e0 Issue #18: IP Allocator rework f2d7564f2c Resolve Godeps 694c5ee788 Reimplement create namespace and move interafec to ns without reexec This removes the dependency on reexec so that libnetwork can be used as a library. 2d16187d8c Refactor the drivers interface to get rid of reflect way 6311a96710 Add implementation and test for SetupIPTables() fc6b36e2bb Fix Godeps in CI db5d4c3de3 Use Godeps 0ac3833edb Circle CI 2457d2549f Fix govet warnings edebcebfee Circle CI e718ea9d2a Circle CI 4e22b7b1f7 Add circle.yml 6424c7a875 Remove golint warnings 58a3934282 Add a diagnostic message to ip forwading code e40794cdc4 Fix minor static analysis issue in setup_ipv4.go 80809c42c6 Add implementation and test for SetIPForwarding() b9bd3a7dd0 Add network name ba111871ea Renaming and comments cb96e4149d Test coverage 94e8db8774 Next steps 882f4d7e74 Add FixedCIDRv6 test 3845ec20c4 Test coverage on bridge 8ca185e2ee Move bridge to drivers/ 38f01266e3 Add tests 3125c1f7c7 WIP - Code moves 4a8b8498a7 WIP - Remove commented code 46864de1d7 WIP - Fixed CIDR v4 and v6 796d58af9e WIP - Bridge refactoring 1f3b1febc7 WIP - Bridge refactoring 76a8cbba11 WIP - Bridge refactoring 8ad4ec910b Generic argument passing to drivers 79ae90940c Generic options model 7d4450e647 Unexport reexec symbols 8ebeb1da5c Rename strategy to driver 0d29ca540f Initial import d7c688f0f6 Initial commit cli: update to -tip Bumping docker-cli to version v23.0.0-beta.1-8-g83ca73f9a, which comprises the following commits: 0f6023a9c vendor: github.com/docker/docker v23.0.0-beta.1 016846e95 update to go1.19.4 0e15d73c6 Dockerfile: update buildx to v0.9.1 006c94638 cmd/docker: make feature detection lazy again 20ba591b7 Fix bug where incorrect response is returned 121c61387 cil/command: use dummy client for build-tests 21e45ff85 cli/command: add WithAPIClient 60833d204 docs/reference: exec: update some examples cac78c237 docs/reference: info: update example output 9ba371f66 docs: update examples to not use deprecated images 74086bc93 doc/reference: update attach reference 82805ad71 docs/extend: remove note about first supported version 3da0e959d updated additionalHelp text e547881e2 Fix ssh process killed when context is done 1b0d6fc80 Dockerfile: add ALPINE_VERSION build-arg 60b09ea7f vendor: docker/docker v20.10.3-0.20221201203946-b21e8f72f254 (v23.0.0-dev) 1768240bc cli/command/container: runPort: sort ports before printing c5613ac03 cli/command/container: TestNewPortCommandOutput improve test 58487e088 cli/command/container: runPort(): slight refactor f0435fd3f cli/command/container: runPort(): update godoc, and add todo f2566760a Update AUTHORS header to indicate it's generated b81acd7c4 Update mailmap and AUTHORS 25c06c755 vendor: docker/docker v20.10.3-0.20221201081640-bb2eab21c6db (v23.0.0-dev) 2c9dff143 cli/command/context: context ls: always show current context ed4b0a67b cli/command/context: context ls: add ERROR column, and don't fail early 14f97cc10 cli/command: DockerCli.ServerInfo() load info lazily 3b7235edc cli/command: initialize client and load content lazily 2c41bbc49 cli/command/task: taskContext.Error(): use ellipsis utility 0ed80a3a5 cli/command/formatter: NewClientContextFormat(): unconvert 30a0d0c6d cli/command/formatter: define const for error column-headers 60987b8d7 cli/command: DockerCli: keep reference to options for later use 181769f18 cli/command: remove DockerCli.loadConfigFile() 36441fc5f cli: NewTopLevelCommand: don't use unnamed assignments 6ba7de3b5 cli/command/context: "docker context show": don't validate context a7e2c3ea1 cli/command: add Cli.CurrentVersion() function 536aef9c6 vendor: update github.com/moby/term to fix interrupt handling a52d922f8 vendor: golang_protobuf_extensions v1.0.4 - prevent incompatible versions 13493edcd Add Sam Thibault (sam-thibault) as curator da6b2ab9e docs: update version to v23.0.0-dev 7c123d37c Update version to v23.0.0-dev 7d597de96 vendor: docker/docker v20.10.3-0.20221124164242-a913b5ad7ef1 (v23.0.0-dev) dbffb29ff vendor: github.com/moby/swarmkit/v2 v2.0.0-20221123162438-b17f02f0a054 9c42cd9a3 cli/command: TestInitializeFromClientHangs fix unhandled error e36d5a092 cli/command: DockerCli.CurrentContext: improve GoDoc 793f09705 cli/command: resolveContextName() move conflicting options check 2f5698511 cli/command: resolveContextName() don't validate if context exists 592d90caf cli/command/context: minor cleanup in runList() 0cc3f688d cli/command: use more descriptive const in test acb934cc9 cli/command: move default context description to context itself 3499669e1 cli/flags: merge CommonOptions into ClientOptions 6a734df1c cli/context/store: make sure we handle wrapped errors a51ce7ca9 go.mod: github.com/google/certificate-transparency-go v1.1.4 7d4450dbb vendor: docker 394f6c14add7c1a5a80257c9111f43b7edc78d0b / v22.06-dev d4b51a343 vendor: github.com/moby/term v0.0.0-20221120202655-abb19827d345 1158788c8 Remove deprecated note 700099159 update gotestsum to v1.8.2 e064f893a docs: docker inspect --size 802c53fa9 docs: docker inspect: reformat with prettier bf3f419b6 cli/command/stack: TestConfigMergeInterpolation: various fixes 4d2fb68b9 cli/compose/loader: fix error messages, and various tests 5aba4860d cli-plugins/manager: TestPluginError: don't use yaml.Marshal 0644aa390 cli/compose/types: UlimitsConfig.MarshalYAML() fix recursion c18dd2719 cli/compose/loader: TestMarshallConfig: fix duplicate version 845f002d3 vendor: docker d15be0c54de92a4d868ebd66dbb1065e264554f2 / v22.06-dev 722cde068 vendor: golang.org/x/sys v0.2.0 275b7ddd1 vendor: github.com/sirupsen/logrus v1.9.0 f51c4ff31 vendor: docker cd8873dd3d21b1fc1b957c98dcd0f5c7a507fb70 / v22.06-dev 86038fdb6 vendor: github.com/containerd/containerd v1.6.10 88b33a667 vendor: github.com/moby/buildkit v0.10.6 af3007960 vendor: github.com/moby/swarmkit/v2 v2.0.0-20221102165002-6341884e5fc9 633ef7a09 vendor: golang.org/x/crypto v0.1.0 (fix OpenSSL > 9.3 compatibility) 880b7fc67 vendor: golang.org/x/net v0.1.0 0f568cfa9 vendor: golang.org/x/text v0.4.0 63ea1e424 vendor: golang.org/x/term v0.1.0 57b6ed34c vendor: golang.org/x/time v0.1.0 7b3900145 vendor: golang.org/x/sys v0.1.0 c855e4ba3 vendor: gotest.tools/v3 v3.4.0 46ba87dcf vendor: github.com/google/go-cmp v0.5.9 to remove golang.org/x/xerrors 85eee32f4 Update to Go 1.19.3 to address CVE-2022-41716 997846918 build: keep "buildx install" behavior d1cabdff9 build: set default context builder if not specified 8dec4bcce cleanup leftovers for --stream build flag d978d0dd5 go.mod: github.com/spf13/cobra v1.6.1 02e782692 Add compose support for cluster volumes 7c0d6ecf6 docs: update link to docker cp bfcadab0b docs: improved docker run cli reference 684dcd7b6 Fix the max-concurrent-downloads and max-concurrent-uploads configs documentation a7717513b docs: fix links to BuildKit backend 67e6ba0d0 vendor: docker 5aac513617f072b15322b147052cbda0d451d389 / v22.06-dev 5d78cc13a vendor: docker v20.10.3-0.20221021122114-f9cb47a052b (22.06 branch) 6fe31557c vendor: docker v20.10.3-0.20221006185438-87d9d96ab0b6 (v22.06-dev) 9505330b0 Remove "experimental" gates around "--platform" in bash completion 759f3aa10 vendor: github.com/moby/buildkit v0.10.5 3da9499e5 fixed the plugin command docker-runc 68330e099 add ability to override ints in compose files with 0 aea2a8c41 docs/reference: run.md update confusing example name bacc5e3aa docs: update deprecation status for "overlay2.override_kernel_check" 4648c0084 docs: use correct separator in --security-opt 485f1f79c Update to go 1.19.2 to address CVE-2022-2879, CVE-2022-2880, CVE-2022-41715 c2f167159 Use gofumpt if available, and enable gofumpt linter 616124525 format go with gofumpt (with -lang=1.19) 1da95ff6a format code with gofumpt cd7c493ea cli/context/store: rename removeAllContextData(), removeAllEndpointData() 09c94c1c2 cli/context/store: List(): don't interrupt listing for not-found errors 951bb481c cli/context/store: New(): return concrete type de6020a24 cli/context/store: simplify error handling, and make it more idiomatic 38f54e792 cli/context/store: remove filePath(), make contextDir() accept name 9720d5b45 cli/context/store: listContextData(): accept name instead of ID 712cc9a1c cli/context/store: remove(): accept name instead of ID 0bcdff257 cli/context/store: getData(): accept name instead of ID 3b7f13a5e cli/context/store: createOrUpdate(): accept name instead of ID c3eb116f9 cli/context/store: removeAllEndpointData(): accept name instead of ID 42e275eaf cli/context/store: TestTlsCreateUpdateGetRemove(): use correct ID d0398c423 cli/context/store: removeAllContextData(): accept name instead of ID f843c42c0 cli/context/store: listRecursivelyMetadataDirs(): use filepath.Join() c6dfff131 cli/context/store: metadataStore.get(), .remove(): accept name instead of ID 90f1238fb cli-plugins/manager: add IsPluginCommand(() utility 7af8aac16 fix broken alias check is buildx is installed as alias for builder a9ccb6552 cli/compose: remove redundant reflection from tests 9a493b1bf docker context rm: allow --force to ignore non-existing contexts ef2a82663 vendor: gotest.tools v3.3.0 28b0aa9f1 replace uses of deprecated env.Patch() 843e71672 vendor: github.com/docker/docker-credential-helpers v0.7.0 de2105d15 vendor: docker v20.10.3-0.20220922131805-e143eed8bc4f (22.06 branch) 90db6b82a cli: use N/A as placeholder for old CREATED dates 0253634f5 cli: hide old CREATED times, instead of "52 years ago" beb92650d vendor: docker v20.10.3-0.20220909113731-8af2e62556de (22.06 branch) 8771b956e vendor: github.com/klauspost/compress v1.15.9 3a17d8a90 Update to go 1.19.1 to address CVE-2022-27664, CVE-2022-32190 07ac2d8dc update to golang 1.19 fc7e831a6 vendor: golang.org/x/net v0.0.0-20220906165146-f3363e06e74c 1061f7449 Update to go 1.18.6 to address CVE-2022-27664, CVE-2022-32190 0dd2c1808 golangci-lint: update to v1.49.0 for compatibilty with go1.19 3dfdaa645 linting: assigned to src, but reassigned without using the value (wastedassign) 98654202c linting: G112: Potential Slowloris Attack b58731fa4 linting: ST1005: error strings should not be capitalized (stylecheck) b508b0fc3 linting: ST1017: don't use Yoda conditions (stylecheck) 7cec7101c linting: tabwriter: ignore stylecheck cef858170 linting: os.Setenv() can be replaced by `t.Setenv()` (tenv) ce01160e7 linting: ST1019: package is being imported more than once (stylecheck) 491407b54 linting: remove unused nolint comments (nolintlint) d3d9301d2 linting: use consts from stdlib (usestdlibvars) c645c9928 opts: remove unused RuntimeOpt 0e4f0e4a7 vendor: github.com/docker/go-units v0.5.0 67ae2c097 cli: createContainer() remove intermediate variable 23a0fb071 vendor: docker v20.10.3-0.20220831131523-b5a0d7a188ac (22.06 branch) fb0788f18 build: replace uses of archive.CanonicalTarNameForPath e484243c2 cli/command: NewDockerCli(): use WithStandardStreams() eaf6461ee vendor: golang.org/x/sys v0.0.0-20220825204002-c680a09ffe64 0e3d54261 replace pkg/system Sequential funcs with moby/sys/sequential 948482b77 vendor: docker v20.10.3-0.20220826112928-d2590dc3cd4f (22.06 branch) b105b22f1 vendor: github.com/moby/buildkit v0.10.4 649aa6175 vendor: golang.org/x/sys v0.0.0-20220728004956-3c1f35247d10 440fb75c9 vendor: github.com/containerd/containerd v1.6.8 da81c096b ci: add concurrency check fd5590dcd chore: dependabot to keep gha up to date d598646f1 ci: update github actions 304c100ed complete the "-g" / "--graph" daemon option deprecation c24ec2502 Update issues form 6eec719d3 update cli-docs-tool to v0.5.0 ad2bff2c0 Dockerfile: update buildx to v0.9.0 f41cbf9dc Move notes about required buildkit 2475b07d0 Update link to libnetwork docs 6191b662b Update golang to 1.18.5 1d9ab7803 cli: set timeout connection ping on sockets as well f87d7ed86 context use: don't create/update config file and directories if not needed cee286ff6 context use: skip validation for "default" context 50893d72d also treat DOCKER_CONTEXT='' as unset aa7b1b24a command: treat DOCKER_HOST the same if it's empty or unset 6f799c1a1 dockerfile: llvm needed on debian for cross comp 87b085c8c missing DWARF symbol table 049811fef cli/command/context: remove newContextMetadata() utility 5ed92699f cli/command: remove WithContextEndpointType() as it's unused 6874c2e80 cli/command: remove unused args from ResolveDefaultContext() 07113638c vendor: docker v20.10.3-0.20220720171342-a60b458179aa (22.06 branch) f175f5d17 vendor: remove replace rule for github.com/gogo/googleapis 65d45664b vendor: golang.org/x/sys v0.0.0-20220520151302-bc2c85ada10a 82427d1a0 format (GoDoc) comments with Go 1.19 to prepare for go updates 046e7e61f update golang to 1.18.4 a4caf8e89 remove uses of client.IsErrUnauthorized() 0b1b5957c Removed feminine reference e7a1f14d3 maintainers: Add Paweł Gronowski as curator c25ff58cb maintainers: Add Bruno de Sousa as curator 80b1285fe cli: use custom annotation for aliases 190dac77b container: validate --pull option on create and run 2d88c896b cli: print full command as aliases in usage output 5a434d8f7 cli/command/container: rename variable that collided with import a929ac0f3 vendor: Bump github.com/spf13/cobra to v1.5.0 f3ed630f8 docs: dockerfile reference moved to buildkit repo a141f1c26 command/exec: Fill ConsoleSize 9373b2611 vendor: github.com/docker/docker 4eb1c5bd52afa08595d9a082a9ba05c81f79be07 e458cf1af Improve doc code formatting 7227c0145 docs: fix misleading example of setting an env variable for a single command a51ea675b opts: fix potential panic in trimQuotes 0929bed42 Fix psFormat's Size handling in config file 8e0afc648 bake: align platforms 0f6a0eb2d bake: use no-cache-filter for outdated stage 0c17225df Dockerfile: update xx to 1.1.1 c47aa3dfa info: fix output including "Labels:" if no labels were set 787077d41 docs: add missing --no-trunc in example cc78788bb vendor: github.com/docker/docker 38633e797195643580ce5c4af7c5422aad3eb7de 1f179ac65 vendor: github.com/docker/docker cf4595265e7703e1e9745a30f1dd265acbc075d3 a4ffbcd95 update AUTHORS and mailmap 1d85b4d0e Deflake TestVolumeCreateClusterOpts 2119f425b docs: reference: version: add info about API version negotiation 99bb525f9 docs: reference: version: improve description aa720f154 update golang to 1.18.3 b9e2659a0 info: update plugin section to show installed path 86a7a7aa7 vendor: github.com/docker/docker 3e32104e0e39af9019a3ea9aa7093bb7c97fcf05 73c6231b4 vendor: github.com/docker/docker cb01202de88e20d5699c76efe948dfb065da873f baafc8f28 vendor: github.com/docker/docker 8abb84c7342a19009d777ef3d871c0b2a5c032a5 d945856e6 vendor: github.com/docker/docker d633169483bbe22b92b8310c47e827451b594364 8378b4277 vendor: github.com/docker/docker c9d04033d443e359e73e5da58a6b46ec1b8f2373 6d3bda1e7 cli/container: Move filling ConsoleSize to create 3997f3431 Added Swarm Job support to Stack Deploy 77e8c6f68 Update version to 22.06.0-dev a1c4af764 docs/deprecated: update version to 22.06 86c30e6a0 add --signal option to stop and restart 5eb24bfd1 completion: remove options related to deprecated cluster-store 1fafae3ef info: remove cluster store from docker info output 28e2b92b5 docs: remove documentation about deprecated cluster-store 7236f7824 man: use "console" hints in markdown a7c8cb514 remove unused poule.yml a2e9ed3b8 cli/command/container: use RWMutex for stats to allow concurrent reads 34dd43bf1 cli/command/container: some small performance optimizations for formatting stats 7bcc03d97 cli/command/container: add BenchmarkStatsFormat() 868adb13c lint: update some nolint comments: 0fab8ecf3 volume: annotate cluster-volumes flags for API version and swarm 3455580eb Add cluster volume support 9bf28fc00 vendor: github.com/docker/docker f1dd6bf84e28930e1ccd903361f9284fb22d3b8a 20138a81b docker kill: don't set default signal on the client side 66b905650 completion v2: some small follow-ups cbec75e2f Adopt Cobra completion v2 to support completion by CLI plugins b59219f0e vendor: github.com/moby/buildkit v0.10.3 ef3790757 vendor: github.com/docker/docker 7c69b6dc08c7 1629df514 vendor: github.com/containerd/containerd v1.6.4 05279c7c6 vendor: golang.org/x/sys v0.0.0-20220412211240-33da011f77ad f5d16893d update golang to 1.18.2 13e053387 Fixing stats race condition 9dc54f3fb info: don't print server info if we failed to connect e96e17d10 info: improve handling of empty Info 2585b6a79 Fix dead external link b901f5d14 TestSaveFileToDirs: use filepath.Join() 0c2d0072c Sleep for 1.5 seconds before looking at the resize error db141c21e hide swarm-related commands based on the current swarm status and role 374d0f88c cli: initializeFromClient(): detect swarm status from ping (if available) 9598c4c90 Retry initializing TTY size a bit more f1632c0dd remove some swarm annotations from flags 2d74be89e contrib/completion: remove orchestrator flags from zsh completion ea0ae30d8 contrib/completion: remove unused options variable 6cee6085d Add example get API version 863780d0d vendor: github.com/moby/buildkit v0.10.2 b3f3beb73 vendor: github.com/klauspost/compress v1.15.1 acf6aee91 vendor: golang.org/x/sys v0.0.0-20220405210540-1e041c57c461 165c5da00 vendor: github.com/Microsoft/go-winio v0.5.2 11924f498 vendor: github.com/moby/swarmkit/v2 v2.0.0-20220420172245-6068d1894d46 7aa0b273e vendor: github.com/docker/docker 2ed904cad7055847796433cc56ef1d1de0da868c 15301e7cf vendor: github.com/containerd/containerd v1.6.3 57e28d64d vendor: github.com/miekg/pkcs11 v1.1.1 15be07a07 vendor: github.com/opencontainers/image-spec v1.0.3-0.20220303224323-02efb9a75ee1 381fb1dbd Remove unsupported alias from `docker stack config` help output 6712447e4 Remove bash completion for deprecated orchestrator flags 14d7fe441 Add bash completion for `docker stack config` 0ea587b0d Add --force option to network rm subcommand 052b4086b cli/command/image: remove use of docker/docker/pkg/urlutil 7b4d7717b Always set the console size fd2bc1fa5 use our own version of text/tabwriter e9a4d7e61 introduce `context show` command 9fc2dd497 Add Djordje Lukic to maintainers c3fe1b962 update golang to 1.18.1 05ae1fdd2 Add Nicolas De Loof to maintainers 95b0c43e4 docs: deprecated: add entry for "fluent-async-connect" log-opt b66f4b2c2 cli: use "Swarm Subcommands" instead of "Orchestrator" aaa912c9f move commonly used top-level commands to the top of --help a058f9774 remove exec, push, pull, ps, images, info from "legacy" commands cea26ac86 commands.AddCommands(): re-order/group commands ed71a5091 move global flags to end of --help output ae611f4c0 move orchestration commands to their own section in --help output bb610a59b cli: annotate "stack" command to be a swarm subcommand bbc95c7bb remove "Experimental" client field from "docker version" 51a84fe86 cli/command: fix documentation of CopyToFile mentioning ioutil cff702d88 Add merge to ShellCommand properties in config fbea85d47 Change merge strategy for service volumes dfc214115 Add stack config command 51aa683a8 cli/command/system: remove printStorageDriverWarnings() f3a6e7ede docs: update deprecation status of "experimental" cli 47cad508a docs: update deprecation status for overlay(2) on backingfs without d_type 60a0e67e0 docs: update deprecation status of legacy overlay networks 9630e1490 docs: update deprecation status of aufs, overlay, and devicemapper 41fd1c49b update deprecation status of --kernel-memory(-tcp) 49a7d75a2 docs: reformat table for compatibility 167a624bd Update v21.xx to v22.04 f06606f60 Update version to 22.04.0-dev ee218fa89 Deprecation: config: remove support for old ~/.dockercfg b1f18b700 fix: remove asterisk from docker command suggestions 94e08f2e2 Makefile: don't warn "outside container" for some targets 90b60b5d8 Dockerfile.dev: set prompt, add nano and jq, and set MOTD 258640ab4 Makefile: add missing help messages for some targets 62bf7b703 update mailmap and authors 8fd92f186 scripts/build: make sure build-time is in UTC 72ed7bd3e scripts/build: fix date formatting on macOS bcd4101f3 tweak description of login/logout 028d5c39b Dockerfile: update buildx to v0.8.2 4b35192d7 docs: reference: remove trailing space to fix yaml formatting b7b923db4 tweak description of "docker push" and "docker pull" commands 6e6652b70 tweak description of "docker run" command ac22b2bf5 tweak description of "docker exec" command 9688f62d2 fix race condition in TestRemoveForce 22edabb58 fix version quad logic that trims 0 digit so returns an empty one 525845572 trim leading 0 for minor in the version quad 391e6ad94 use GO_LDFLAGS instead of LDFLAGS to prevent inheriting unrelated options 801113fb8 cli/registry/client: remove unused IsNotFound(), and slight refactor 48745da16 cli/registry/client: remove unused RegistryClient.GetTags() e83d6cd2c cli/registry/client: remove unused GetRegistryAuth() 04347f793 context: Endpoint.ClientOpts(): use client.WithVersionFromEnv() 1db2da57c use client consts for environment variable names 2b976720f docs: add anchor-tags for flags 885f44a5b docs: fix (table) formatting, fix some broken links b87a0c1b0 docs: build: add named anchor tags for flags 7d4ae1375 docs: build: fix minor markdown and syntax issues ccbaaf072 search: remove client-side default for --limit 2dc178c80 search: change "the Docker Hub" to just "Docker Hub" f00c06f6c docs: commandline/index.md: reformat tables a3c4a42d4 Dockerfile: update buildx to v0.8.1 8e2d63d5d Fix flaky TestContainerList tests 635c55d52 update go to 1.18.0 bf29b40a8 staticcheck: ignore SA1019: strings.Title is deprecated a1e67401d vendor: github.com/docker/docker 8941dcfcc5db4aefc351cd5b5bb4d524823035c0 dce592979 Update to debian bullseye d45030380 Dockerfile: prefer ld for cross-compiling arm64 in bullseye 3ffe6a337 lint: update golangci-lint to v1.45.2 4ab70bf61 linting: fix incorrectly formatted errors (revive) d7c1fb911 linting: ignore some "G101: Potential hardcoded credentials" warnings 5a65aadd8 cli/command/container: unnecessary use of fmt.Sprintf (gosimple) d382a7103 update run.md c569d2574 Bump cobra to v1.4.0 bc2b48aaf e2e: cleanup TestGlobalHelp() to be less brittle 4cd2d9ddd Change "COMPANY_NAME" to "PACKAGER_NAME" a0f057829 gofmt with go1.17 f3a05eb80 vendor dependencies with go1.17 6119e4ba9 update go to 1.17.8 3a1fc21e7 Dockerfile: use xx-apt-get instead of xx-apt e20572d04 scripts/build: make sure osusergo is set for static with CGO enabled 40d801662 Dockerfile: update xx to 1.1 5f74020de vendor: github.com/moby/buildkit v0.10.0 adadd5472 vendor: github.com/prometheus/client_golang v1.11.0 7408799ec vendor: github.com/prometheus/procfs v0.7.3 29f799aae vendor: github.com/containerd/containerd v1.6.2 b2cef834f vendor: google.golang.org/grpc v1.44.0 51ef2ccff docs: hyphens are not dashes bc2c8d759 vendor: golang.org/x/crypto v0.0.0-20220315160706-3147a52a75dd 994d6b7fc Dockerfile: use syntax=docker/dockerfile:1 4f118c763 vendor: github.com/docker/swarmkit 616e8db4c3b0 02a06cf9a vendor: golang.org/x/time v0.0.0-20210723032227-1f47c861a9ac bc54802f5 vendor: golang.org/x/term v0.0.0-20210615171337-6886f2dfbf5b 56f51a35c vendor: golang.org/x/crypto v0.0.0-20211202192323-5770296d904e 1bb259144 vendor: golang.org/x/net v0.0.0-20211216030914-fe4d6282115f ce2e036ad vendor: github.com/opencontainers/runc v1.1.0 fdbb5953a vendor: github.com/klauspost/compress v1.15.0 2b7cb5b1b vendor: github.com/cespare/xxhash v2.1.2 119c7fb84 Fix CMD --ignored-param1 example b4ca1c736 registry: don't call "/info" API endpoint to get default registry 9c0234bbc Output compact JSON by default for --format=json d8ecb00dd Update shell completion scripts b4af79968 Update reference documentation 0611be0f0 Update man pages a4a734df4 Update list commands with better format flag description eb27a94c3 Added "json" as specific value for --format flag in list commands, as an alias to `{{json .}}` 84d47b544 Add "json" as default value to format flag in all inspect commands. c700bbcb4 Add specific "json" value to format flag with inspect commands to output json, as empty flag does. Added tests on that new behavior. 831704e56 search: do not sort results by stars on client side 4f1ba37e1 docs: remove note about buildkit not supporting git subdirectories ab35e3fac Handle relative source mounts e5f5d946e docs: dockerd: fix broken link in blockquote area de0549926 align wording of push --all-tags parameter description dc9e069ff vendor: github.com/docker/docker v20.10.3-0.20220309172631-83b51522df43 e90cb7515 vendor: github.com/docker/distribution v2.8.1 30e47e5a0 vendor: github.com/prometheus/common v0.10.0 576e4dce4 vendor: golang.org/x/text v0.3.7 7880acb05 vendor: golang.org/x/sys v0.0.0-20220114195835-da31bd327af9 6da0fc299 vendor: github.com/moby/sys/signal v0.7.0 4adea808c vendor: github.com/google/go-cmp v0.5.7 12b06fa37 vendor: github.com/coreos/etcd v3.3.27 16554e999 vendor: github.com/containerd/containerd v1.5.10 41a5e0e4d improve cp documentation with some illustration examples fe8a12c62 vendor: github.com/opencontainers/image-spec v1.0.2 3669aa351 vendor: github.com/Microsoft/go-winio v0.5.1 257f6149b Remove ClientInfo as it is not practically used. ac06c971f remove unneeded "digest" alias for "go-digest" e40529aa3 use consistent alias for api/types/registry b7e4f3daa remove alias for cli/config imports cc08fc1af Implement WithDefaultContextStoreConfig() DockerCliOption d35b50c0c NewAPIClientFromFlags: rename variable to not collide with import 398026d31 vendor: gotest.tools/v3 v3.1.0 58747a631 vendor: github.com/google/go-cmp v0.5.5 9f0430b8f vendor: remove redundant replace rules 5b9256333 vendor: move github.com/moby/sys packages to "requires" ("indirect") 8a3e3b22a vendor: gotest.tools/v3 v3.0.3 20b5dfa59 vendor: gopkg.in/yaml.v2 v2.4.0 a26de1de0 vendor: golang.org/x/text v0.3.4 7917946a5 vendor: golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1 109cc4ea4 vendor: golang.org/x/sys v0.0.0-20211025201205-69cdffdb9359 25366b6a5 vendor: remove replace rules for k8s.io packages 1d4431c1e cli/command: Add quiet option for create and run bdfeae899 docs: daemon: remove LCOW configuration options 6c16afe1d docs: unify "docker create" and "docker run" reference 7eb61e2ff docs: add missing documentation for --pull flag 60c383636 cli/compose/schema: make version: "3" equivalent to "3.x" (latest) a3d53e319 dummy circleci config f160fd3e3 remove circleci 7dc35c03f validate manpages target a650f4ddd switch to cli-docs-tool for yaml docs generation 76a2a1945 fix inherits for vendor bake defs bea6c0d24 validate authors target ede32747b add common args bake target 8c3ae386c golangci-lint: prevent io/ioutil from being used 6c06950cd cli-plugins/manager: remove uses of deprecated io/ioutil 38e62571f opts: remove deprecated io/ioutil and use t.Cleanup() 85754c9ab man: remove deprecated io/ioutil and use t.TempDir() 7491c5ac6 internal/test: remove deprecated io/ioutil e89af84ff e2e: remove deprecated io/ioutil and use t.TempDir() 39ace6806 docs/yaml: remove deprecated io/ioutil and use t.TempDir() 0e3197ebd cmd/docker: remove deprecated io/ioutil 86db51e86 cli: remove deprecated io/ioutil 1e54bca83 cli/trust: remove deprecated io/ioutil and use t.TempDir() 58cf16da4 cli/manifest: remove deprecated io/ioutil and use t.TempDir() cca80cddd cli/context: remove deprecated io/ioutil and use t.TempDir() 71575ab3b cli/config: remove deprecated io/ioutil and use t.TempDir() b9f0340b6 cli/compose: remove deprecated io/ioutil 3f7e7bf9d cli/command: remove deprecated io/ioutil and use t.TempDir() cca73bff4 cli/command/volume: remove deprecated io/ioutil b5dce3c9e cli/command/trust: remove deprecated io/ioutil and use t.TempDir() e0299ff86 cli/command/system: remove deprecated io/ioutil 78cb61c61 cli/command/swarm: remove deprecated io/ioutil and use t.TempDir() d59330f40 cli/command/stack: remove deprecated io/ioutil d1f26de64 cli/command/service: remove deprecated io/ioutil c558df7ce cli/command/secret: remove deprecated io/ioutil 3b3a0b898 cli/command/registry: remove deprecated io/ioutil f61aab59f cli/command/plugin: remove deprecated io/ioutil 9bdeb09ae cli/command/node: remove deprecated io/ioutil f28c063e2 cli/command/context: remove deprecated io/ioutil 43795ec8f cli/command/manifest: remove deprecated io/ioutil and use t.TempDir() d14b5bff8 cli/command/image: remove deprecated io/ioutil and use t.TempDir() 76b47359c cli/command/context: remove deprecated io/ioutil and use t.TempDir() e946bf080 cli/command/container: remove deprecated io/ioutil bc1790c5c cli/command/config: remove deprecated io/ioutil 8dc53344e cli/command/checkpoint: remove deprecated io/ioutil e7a8748b9 build: use legacy builder for wcow if not opt-in with a builder component e38e6c51f bring back and expose BuildKitEnabled func ee9d17cae cli/context: update package documentation 242857dd8 update/remove various tests and options related to kubernetes support 7ccee6d60 remove unused KubernetesEnabled() test-utility 2d268392d publish RunExec for use by docker/compose 467e650d4 formatter: mark KubernetesEndpoint templating option as deprecated 6ea276728 config: mark stackOrchestrator option as deprecated b7d0f5c66 docs: add more details to stack kubernetes deprecation 6dcfbe662 docs: update list of supported filters for stack services 039018b6d docs: remove deprecated orchestrator flags 869370a3f docs: remove mention of DOCKER_STACK_ORCHESTRATOR env-var 16ece9bb8 system/version: remove dead-code 1924bc9f0 stack/swarm: remove unneeded getStackServiceFilter() cff010c61 context export: remove docker context export --kubeconfig options 013a74f00 document kubernetes feature as "removed" in 21.xx d9a2a555d introduce plugin.RunningStandalone as utility func for a plugin to know it is run standalone ee97fe95b Fix incorrect pointer inputs to `json.Unmarshal` 193ede9b1 remove obsolete mutli-orchestrator support 1d48749c1 warn user kubernetes is deprecated and options won't be stored in context 7b9580df5 Drop support for (archived) Compose-on-Kubernetes a7778806a cli/compose/schema: make version optional, default to "latest" a9fd69773 cli/compose: add schema 3.10 (no changes with 3.9 yet) d44eca129 cli/compose/schema: Validate(): normalize version before validating a3c131496 vendor: compose-on-kubernetes v0.5.0 to remove use of github.com/golang/glog 8b408372f Describe privileged mode in terms of capabilities 16edf8bff builder: conditional warning for wcow fd2274692 Update deprecation docs bce65f0ed builder: simplify error generation, and rephrase error/warning 4d8e45782 builder: fallback to legacy 6fef143db Set buildx as default builder 0ca2d25ba Update dockerd.md 2d6ebd1e3 Correct device syntax to --gpus 0d5b24b01 Dockerfile.vendor: use GOPROXY=direct 5c4a395c5 scripts/vendor: run go mod tidy when vendoring 08a1ccc60 Remove support for encrypted TLS private keys ae3a61439 docs/daemon: replace deprecated '-g' option for '--data-root' 663f01b9c use uuid to invalidate cache 77b1031be make compose plugin detection in bash completion work on Mac OS dfb39e9e5 Fix Typos 2725f0987 Fix typo caa31d937 fix linguist with .gitattributes 7e560ae76 vendor with go mod a1204a50b Update stats.md add example json output 5fab1b2b1 ensure version quad for goversioninfo 3425e9dc3 ci: add glibc to build matrix 418dbc4e7 docker exec cli docs: show 2 env vars, not just 1 a18514370 added missing closing parenthese c6636d4d6 Change IO order in description 6ad2ceba3 Update Ubuntu version number references in push.md 4d93717ae ci: github actions test workflow dedd4b79c Update Go to 1.16.11 62ea2bf1a GitHub Actions e2e tests a4e746087 Bump moby/sys 8b85274d2 Fix typo e285f1500 Update Go to 1.16.10 83c253770 fix .dockerignore to avoid dirty working tree 417f97605 Update most links in docs to use https by default dbac82681 Fix checkout behavior and FileVersion 75284bd1d Use goversioninfo to create Windows Version Info 8c73a9392 docs: some minor touch-ups in checkpoint reference bf310f863 Update Go to 1.16.9 795c9c96b docs: remove trailing space to fix generated YAML format 1f8cb1fbb registry: ensure default auth config has address a3832808f docs: create.md: typo fix cbda0760b docs: man page: typo fix in docker_1 c4619fb34 Update deprecated.md 1de937c14 docs: fix search results by filterd is-official d9f4352c2 GitHub Actions cross a90532e29 doc: Add `default-runtime` opt to daemon.json 47e5cfa9e docs: fix description of restart-delay to mention max (1 minute) 221bf5761 bump imdario/mergo v0.3.12 6482f3f9b Use private network address for default-address-pools setting in daemon.json example 47c7a096f Dockerfile: update tonistiigi/xx to 1.0.0-rc.2, add XX_VERSION arg 01fa5d925 Update Go to 1.16.8 2621af848 docs: fix some broken anchors ea98f6c92 experimental: fix broken link to "checkpoint and restore" page b0ec87afd format create.md table 172b2dc37 Fixing typo (his --> its) 214cd05aa create/run: remove default --stop-signal 61a1775ad vendor: golang.org/x/sys 63515b42dcdf9544f4e6a02fd7632793fde2f72d (for Go 1.17) aa89e6847 docs: move checkpoint/restore doc from experimental into reference 463746ff2 docs: add missing redirect, and remove /go/experimental redirect b5f4a6e45 fix innocuous data-race when config.Load called in parallel 47ba76afb docs: use "console" code-hint for shell examples 16466f1ce docs: rewrite reference docs for --stop-signal and --stop-timeout af1bb80c3 Enable ssh forwarding when building a remote target 7e15d136b cli.SetupRootCommand(): minor cleanup 818564af5 cli/compose: use go1.16 native embed functionality for schemas 509cc3218 vendor: google.golang.org/grpc v1.5.2 2ef71e502 vendor: genproto 8816d57aaa9a, google.golang.org/protobuf v1.26.0, github.com/golang/protobuf v1.5.2 fc85fe4eb vendor: update docker to current master (API v1.42) 3e50224fd vendor: github.com/docker/swarmkit 3629f50980f6c0dd5ccd7dbfa0956b57ea0cd78d 847aef321 build: fix AddDockerfileToBuildContext not de-referencing tar header template fcc2ce349 vendor: github.com/containerd/containerd v1.5.5 cfb07a75a vendor: github.com/opencontainers/runc v1.0.1 ecad24d47 vendor: github.com/sirupsen/logrus v1.8.1 23ed50c10 replace docker/pkg/signal with github.com/moby/sys/signal 3112b382a Update Go to 1.16.7 698c15547 GitHub Actions for lint 896459569 info: skip client-side warning about seccomp profile on API >= 1.42 b86f5135f docs/yaml: add TODO for conditionally skipping root command c509ef710 yamldocs: various improvements a477a727f Update to go1.16.6 0b2eaa7f7 cli/command: don't use client.CustomHTTPHeaders(), and simplify asserts 8916855c2 docs: update deprecation status of LCOW 40c6b117e change TestNewAPIClientFromFlagsWithHttpProxyEnv to an e2e test 60fe32243 e2e: update gotestsum to v1.7.0 15535d459 context: deprecate support for encrypted TLS private keys 2688f25eb cli/context: ignore linting warnings about RFC 1423 encryption 0695578d4 CircleCI: update BUILDX_VERSION to v0.6.0 ecaaa35be Add doc for BUILDKIT_PROGRESS env var 48dbf6f3c Update Dockerfiles to latest syntax, remove "experimental" 13e822500 vendor: cpuguy83/go-md2man/v2 v2.0.1 ef14ae09b vendor: github.com/russross/blackfriday/v2 v2.1.0 7a0dc924f Add support for ALL_PROXY 5a8d7d506 Detect compose plugin f3d1b02e2 Dockerfile: remove custom go build for windows/arm64 d9f17025c Fix typo in documentation - build.md 0ebdad749 vendor: github.com/containerd/containerd v1.5.3 to reduce indirect dependencies 4ce521c50 info: print errors to stderr 1148163c3 Add completion for docker-compose plugin d738e7c48 docker info: skip API connection if possible a033cdf51 Deprecate Kubernetes context support c05f0f595 Deprecate Kubernetes stack support 7190255a6 Deprecate Kubernetes stack support 0c723fd68 Fix the (dead) link for docs for Dockerfile syntax reference 384b59b73 Updated docker attach example. 918168c40 Bolded SIGKILL & fixed backslash escaping. 2a167065d Cleaned up formatting/typesetting. 64b2e9528 Document `--validate` daemon option 711334e9a vendor: github.com/moby/buildkit 9f254e18360a24c2ae47b26f772c3c89533bcbb7 (master / v0.9.0-dev) 678c2fde9 UX: don't reverse progress-bars when rolling back a04c8210a vendor: github.com/docker/docker 25917217cab38eab40c3db0010b915258f4a8491 29fed6bff vendor: github.com/docker/swarmkit 2dcf70aafdc9ea55af3aaaeca440638cde0ecda6 f647fce89 vendor: github.com/containerd/containerd v1.5.2 f269e7fc3 vendor: github.com/coreos/etcd v3.3.25 83c915857 vendor: github.com/tonistiigi/fsutil d72af97c0eaf93c1d20360e3cb9c63c223675b83 79a9fd61f vendor: github.com/opencontainers/runc v1.0.0-rc95 579279ce0 vendor: github.com/Microsoft/hcsshim v0.8.16 ab46952ba vendor: github.com/Microsoft/go-winio v0.4.19 f114f6c87 vendor: github.com/json-iterator/go v1.1.10 c451d82af vendor: github.com/containerd/typeurl v1.0.2 3ea82da31 vendor: github.com/containerd/continuity v0.1.0 9ee3d08ae vendor: github.com/containerd/console v1.0.2 945f1237e vendor: github.com/containerd/cgroups v1.0.1 adb118d29 vendor.conf: sort alphabetically 6d25af0cd vendor: golang.org/x/time 3af7569d3a1e776fc2a3c1cec133b43105ea9c2e 8ebe404df vendor: golang.org/x/sys d19ff857e887eacb631721f188c7d365c2331456 af1687406 vendor: golang.org/x/sync 036812b2e83c0ddf193dd5a34e034151da389d09 dea997614 vendor: golang.org/x/net e18ecbb051101a46fc263334b127c89bc7bff7ea 716291337 vendor: golang.org/x/crypto 0c34fe9e7dc2486962ef9867e3edb3503537209f 2cbb88f4c vendor: github.com/modern-go/reflect2 v1.0.1 d6c55a105 vendor: github.com/moby/sys mountinfo/v0.4.1 f44563747 vendor: github.com/gogo/protobuf v1.3.2 b5bc27990 vendor: moby/term, Azure/go-ansiterm for golang.org/x/sys/windows compat e12aade59 Update WORKDIR command information 524e3b215 e2e: update docker-compose to 1.29.2 c6cd0493a circleCI: update docker engine to 20.10.6 661b87ac9 Jenkinsfile: update old engine version to 19.03 2849437f2 Jenkinsfile: update labels to prevent running on cgroups v2 79638e6ea feat(docker): add context argument completion f3b6ed744 e2e: make sure that os.environ is preserved 7672267e1 vendor: github.com/docker/docker-credential-helpers v0.6.4 49f607153 vendor: github.com/docker/docker v20.10.7 3b502ca00 Fix minor wording 16131fb45 Slight cleanup/refactor of attachContainer 04e6884f6 docs: fix link to command-line reference cedaf44ea Ignore SIGURG on Darwin too 57e768059 docs: Fix broken jump link f3034ee92 docs: dockerd: fix broken link and markdown touch-ups 782192a6e Swap "LABEL maintainer" for the OCI pre-defined "org.opencontainers.image.authors" 05ec0188f printServerWarningsLegacy: silence "No oom kill disable support" on cgroup v2 731f52cfe printServerWarningsLegacy: silence "No kernel memory limit support" 3c8d65963 docs: cleanup / refactor cli doc 276e7180f docs: add reference for "docker config" commands 68284ff59 docs: update some examples for proxy configuration be327a4f0 cli/config/configfile: various test cleanups f3886f354 Use designated test domains (RFC2606) in tests caa4742e5 docs: remove experimental ipvlan docs, as they were migrated 12370ad1f Add progress bar to copy into and from container 30359cbdb docs/reference/builder: update "syntax" section 17a9eb60e docs/reference/builder: update example output, and some rephrasing 22b14dac8 docs/reference/builder: remove outdated example Dockerfiles 168173a3f Use net.JoinHostPort() to fix formatting with IPv6 addresses 5dd7a2826 docs/reference/builder: touch-up code-hints and some minor changes 2586decba docs: document log-opts for "dual logging" cache 83e9eeb8a scripts: Allow skipping windres when WINDRES= (empty string) 2c40960ba scripts: use WINDRES env var if set 6e45f4bfe scripts: fix VERSION_QUAD corner case in windows resource 26b633d37 set default version from git b099c9c9e update readme with new examples 706e857a9 remove unused targets bd3e853c7 update circleci cross target a2a1de5f0 add windows/arm64 target 8b822c921 update windows resources generation 6423da8dc dockerfile based binary building 41d169d21 Update stop.md 75dd73f64 vendor: github.com/theupdateframework/notary v0.7.0-21-gbf96a202 09ddcffb2 config.Load() remove unneeded locks 25dc8034f vendor: github.com/spf13/cobra v1.1.3 e05e66f4b docs: remove trailing spaces to prevent yamldocs using "compact" notation d051df994 docs: improve example for "remove all stopped containers" b83bc6713 config: print deprecation warning when falling back to ~/.dockercfg a54577b75 vendor: update notary to 5f1f4a34 e50cf7957 vendor: update x/sys to 134d130e 10e909a26 docs: Fix wrong bridge driver option e1a751751 Fix `docker start` blocking on signal handling 9342ec6b7 ForwardAllSignals: check if channel is closed, and remove warning cb1bb72fd Fix mistake with env var example in docker run docs 040210bfa Update the list of log drivers b43b85203 context: Add tarball e2e tests 8c2872d2a context: Ensure context name is valid on import a2f0cf527 context: Ensure import paths are valid f52a9e2fe Add docs and completion for docker node ls --filter node.label 8d199d5bb Use golang.org/x/sys/execabs 7bef24876 vendor docker, docker-credential-helpers and golang/sys for execabs package c0b7b5813 fix docker-run man page table formatting 852fe0599 docs: Fix wrong variable name a4fb01f95 docs: add redirect for old reference URL 104469be0 service rollback: always verify state ce26a165b docker service rollback: fix non-zero exit code in some cases c85a37dbb cli/config: prevent warning if HOME is not set 26a6a724a fix --update-order and --rollback-order flags fff164c22 Ignore SIGURG on Linux. 9f6966d4e vendor: github.com/theupdateframework/notary v0.7.0 697c3a5b4 docs: fix typo in deprecated.md c2820a7e3 Fix panic when failing to get DefaultAuthConfig fb2ea098a deprecate blkio-weight options with cgroups v1 69b5487e3 Remove duplicate word in push.md ba2fef9bc Add bash completion for `dockerd --ip6tables` 5a252fb3a Update bash completion for fluentd --log-options 8242fe1fc Add bash completion for `docker run|create --pull` b04241d95 Removed format flag for inspect 584c08e1f Added zsh completion for docker context subcommands 6e2607c6a Rename bin/md2man to bin/go-md2man a4e86b543 Add bash completion for jobs fc9ca9a94 Fix reading context and dockerfile from stdin with BuildKit 9d40c7464 scripts/build/.variables: Support SOURCE_DATE_EPOCH Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2023-02-10 12:36:10 -05:00
Bruce Ashfield	aceed7bf95	docker-moby: update to 23.0-beta ... Bumping moby to version v23.0.0-beta.1-8-g3fd34324a8, which comprises the following commits: 48a0d8a8d1 [23.0] update containerd binary to v1.6.12 (addresses CVE-2022-23471) 3d902fe719 [23.0] update containerd binary to v1.6.11 0da8917add vendor: github.com/containerd/containerd v1.6.11 623f6f7702 update to go1.19.4 1da1a3ea87 builder: handle host-gateway with extra hosts 7620f72fb8 ci(buildkit): update buildkit ref to fix issue with alpine image 304c56f7f5 distribution: checkSupportedMediaType: allow additional media-types 6875e7f1be seccomp: block socket calls to AF_VSOCK in default profile 978690e4f9 client/list: Handle SharedSize da6bb8c408 AUTHORS: regenerate a889a17a63 .mailmap: cleanup and additions 6f581c1808 hack/generate-authors.sh: refactor and simplify de3143c6b9 Jenkinsfile: Fix dev image build fox ppc64le/s390x archs f547f2f3c0 Makefile: always use buildx 0c4b6b1742 ci: define timeout for jobs f088bcadd5 ignorefiles: cleanup 5770145433 vendor.mod: remove outdated comment about replaced module d15fe0d782 registry: session: remove unused id 546005804c go.mod: golang_protobuf_extensions v1.0.4 - prevent incompatible versions 73a98393c6 vendor: github.com/moby/swarmkit/v2 v2.0.0-20221123162438-b17f02f0a054 acb8204a7f Dockerfile: remove hardcoded platforms for vpnkit stage 313f105443 hack: remove obsolete sources for go-autogen 2b1ba3ea6b vendor: github.com/prometheus/client_golang v1.13.0 f493b770a9 vendor: github.com/aws/aws-sdk-go v1.37.0 36430f7970 vendor: google.golang.org/grpc v1.48.0 fb24b99a2b vendor: go.uber.org/zap v1.21.0 0c65191c49 vendor: go.uber.org/multierr v1.8.0 bf78bf3458 vendor: go.uber.org/atomic v1.9.0 dcf06b3f5f vendor: github.com/jmespath/go-jmespath v0.4.0 aba1d597bc vendor: google.golang.org/genproto v0.0.0-20220706185917-7780775163c4 e37ac41afb vendor: github.com/fernet/fernet-go v0.0.0-20211208181803-9f70042a33ee 963e3ec65c vendor: google.golang.org/protobuf v1.28.1 526203dd7f vendor: github.com/spf13/cobra v1.6.1 f528e2ab96 vendor: github.com/moby/term v0.0.0-20221120202655-abb19827d345 3989be2f7b vendor: github.com/bsphere/le_go v0.0.0-20200109081728-fc06dab2caa8 df2427022a vendor.mod: add comment about replaced dependency 9e4c508b55 vendor.mod: remove replace for github.com/rexray/gocsi cb358e8a19 vendor: github.com/armon/go-radix v1.0.1-0.20221118154546-54df44f2176c 3768c71d9e Dockerfile: variant support in frozen-images stage 7b9e86f789 update github.com/tc-hib/go-winres v0.3.0 to fix schema version in manifest 5052c38846 update gotestsum to v1.8.2 3508cfb149 hack/validate: drop changelog-related steps 67633130c6 cleanup: drop historical CHANGELOG.md 2dc7a1dc25 cleanup: drop .DEREK.yml fc657692c7 daemon/config: use strings.Cut(), fix panic in BuilderGCFilter e75fa6684c daemon: use strconv instead of fmt.Sprintf() abe6b3dc9b rootlesskit.installer: s/vendor.conf/vendor.mod/ 297f224a92 update RootlessKit to v1.1.0 f48f4dde24 vendor: github.com/rootless-containers/rootlesskit v1.1.0 2dce69e001 update containerd binary to v1.6.10 5c4dc48995 vendor: github.com/containerd/containerd v1.6.10 10fa0d5321 vendor: golang.org/x/oauth2 v0.1.0 356f483038 vendor: golang.org/x/crypto v0.1.0 c0edbfd621 vendor: golang.org/x/net v0.1.0 e46e43470b vendor: golang.org/x/time v0.1.0 d4e2341f93 vendor: golang.org/x/sync v0.1.0 e32bfd347c vendor: golang.org/x/sys v0.1.0 65c7f3bac3 pkg/loopback: use ioctl helpers from x/sys/unix 5f35b157a3 vendor: golang.org/x/sys v0.0.0-20221006211917-84dc82d7e875 11973d0c0a vendor: github.com/moby/buildkit v0.10.6 251610397c vendor: gotest.tools/v3 v3.4.0 83f90039ef vendor: github.com/google/go-cmp v0.5.9 to remove golang.org/x/xerrors dep 2fd846d40f vendor: gotest.tools v3.3.0 f9ab209417 chore: update supported go version to 1.18+ bfca3185ee ci(actions): bump outdated actions on Linux 7f45eb041c ci(actions): migrate to file-based commands 7370bbc034 replace distribution/digestset with opencontainers/go-digest/digestset 21feb1808d Revert "validation: temporarily allows changes in integration-cli" 5e15ce3a4a pkg/directory: remove unused MoveToSubdir() utility 92b96ac2ed pkg/directory: minor refactor of Size() e0b105623e pkg/system: unconvert 9d86e1d204 pkg/system: move GetExitCode() to pkg/idtools, and un-export 3a946f5291 pkg/system: remove Umask() utility cf1e138ab1 pkg/directory: Size(): add back type-casts to account for platform differences 7175841ebd Remove long-deprecated "arm" fallback f3e180b704 Update to Go 1.19.3 to address CVE-2022-41716 07e84005ac distribution: Error when pulling OCI artifacts 39d3d3db56 vendor: github.com/moby/swarmkit/v2 v2.0.0-20221102165002-6341884e5fc9 1e0f2186a9 Fix containerd task deletion after failed start 75634f9a1e daemon: fix docs for config-default constants ad11d3f232 Fix the max-concurrent-downloads and max-concurrent-uploads configs documentation 03015fe6de fix force remove for cluster volumes 09a2f7a667 integration: download busybox-w32 from GitHub Release 24de1f7adc vendor: github.com/containerd/containerd v1.6.9 c4685540e4 update containerd binary to v1.6.9 80dc5186ec builder/remotecontext/git: allow building on go1.18 f72c96c5c4 gha: buildkit: make checks more readable 1bbb6f2454 gha: buildkit: remove "skip-integration-tests" from matrix c0be73f88d skip TestImagePullStoredfDigestForOtherRepo() on Windows and rootless 727c4fdee3 Validate digest in repo for pull by digest b4c4be1f22 Revert "testutil/registry: remove unused WithStdout(), WithStErr() opts" 4bef6f5510 gha: update buildkit to v0.10.5-6-ge27c8e24 to skip some tests f056df579a builder: add missing doc comment c062238ea4 builder: fix running git commands on Windows 20ff8a2380 builder: make git config isolation opt-in ca99cab891 builder: isolate git from local system 5829b244ec builder: explicitly set CWD for all git commands 3bc8fccc1b builder: modernize TestCheckoutGit 00b44caa69 vendor: github.com/moby/buildkit v0.10.5 aaa8f96cc9 registry: allow "allow-nondistributable-artifacts" for Docker Hub 671bf589e2 Change restart delay for Windows service to 15s e1b240d6bd cmd/dockerd: use golang.org/x/sys Service.SetRecoveryActions() 18a54ed59c cmd/dockerd: use golang.org/x/sys/windows.SetStdHandle() 0c66bc948a cmd/dockerd: replace deprecated windows.IsAnInteractiveSession() a12d359c1a daemon/graphdriver/windows: Remove() don't use defer() in a loop 2d12e69c9f daemon/graphdriver/windows: use go-winio.GetFileSystemType() fa10084a82 daemon/graphdriver/overlay2: remove deprecated overrideKernelCheck 43ce8f7d24 integration/plugin: remove deprecated overlay2.override_kernel_check a5ecbf4d22 vendor: github.com/opencontainers/selinux v1.10.2 ac6624773e pkg/fsutils: deprecate in favor of containerd/continuity/fs 4669418731 Volume prune: only prune anonymous volumes by default 1fe550cfc7 Update to go 1.19.2 to address CVE-2022-2879, CVE-2022-2880, CVE-2022-41715 edef49eeac docs: swagger: update description for default builder version 0a87dc9f71 Fix live-restore w/ restart policies + volume refs 262ad3bb2f libnetwork/resolvconf: removed unused GetIfChanged() and GetLastModified() 44d42c2b16 replace pkg/fileutils Matching funcs with github.com/moby/patternmatcher f8e5145e96 runconfig, oci, image, layer, distribution: fix empty-lines (revive) 24888a10f6 cmd/dockerd: fix empty-lines (revive) 3a1896db63 client: fix empty-lines (revive) 47319e065d api/server: fix empty-lines (revive) b9b6e68903 opts: fix empty-lines (revive) c6c4d07830 daemon: fix empty-lines (revive) 9136c32327 daemon/images: fix empty-lines (revive) 7cb488934b daemon/logger: fix empty-lines (revive) aea1aa0daa daemon/graphdriver: fix empty-lines (revive) 79caa2f955 daemon/cluster: fix empty-lines (revive) 87552f2e67 plugin: fix empty-lines (revive) aad639c1fa volume: fix empty-lines (revive) bee5153c5b testutil: fix empty-lines (revive) 31a938c73c integration: fix empty-lines (revive) 9d44956d8c builder: fix empty-lines (revive) 08d01be870 integration-cli: fix empty-lines (revive) 3660ee30e3 api/types: fix empty-lines (revive) 3424a7c2e3 pkg/*: fix "empty-lines" (revive) 541fda8e90 migrate pkg/pubsub to github.com/moby/pubsub a8b1fec072 pkg/fileutils: remove gotest.tools as dependency, use t.TempDir() fd0904805c contrib: make dockerd-rootless-setuptool.sh more robust f6ebfaea19 test(pkg/archive): add TestImpliedDirectoryPermissions daa8708601 refactor(pkg/archive): factor out createImpliedDirectories helper 7114360901 pkg/idtools: mkdirAs(): fix infinite loops and repeated "chown" 5dfec22079 swagger: update links to logo cee2490d84 Jenkinsfile: use Ubuntu 20.04 for DCO stage 3ce520ec80 golangci-lint: update to v1.49.0 1d7fb64a6e vendor: github.com/moby/sys/sequential v0.5.0 ae65811be2 vendor: github.com/github.com/coreos/go-systemd v22.4.0 2bc36de638 Remove the OS check when creating a container 997ec12ec8 set ReadHeaderTimeout to address G112: Potential Slowloris Attack (gosec) 4a8f744255 ci: reduce cache throttling limits 07efcaf3b2 ci(test): report summary output 7f94f2b393 fix debian sysvinit script fails to restart docker daemon when stopped 970c938b56 client: ignore kernel-memory on API >= 1.42 d41ebd79f7 vendor: github.com/armon/go-metrics v0.4.1 d0fadc859d vendor: github.com/google/btree v1.1.2 44c5f7721a ci: fix branch filter pattern 00b1722fb4 Jenkinsfile: remove unit-validate stage 8fdaad4018 Jenkinsfile: remove report bundles creation in unit-validate fefe6290e5 Jenkinsfile: remove validation steps moved to GHA f925f295f4 ci: reusable dco workflow cc770330f8 ci(test): dynamic validate matrix e42f7db450 ci(test): validate job matrix 9a57be4ac4 integration-cli: remove TestDockerSuite func 95831246a2 Update uses of Image platform fields in OCI image-spec 6236ebaed5 vendor: github.com/klauspost/compress v1.15.9 366d551cd2 Update some tests for supplementary group permissions 393027d1b1 AdditionalGids must include effective group ID b9b8ddc160 Jenkinsfile: remove steps moved to GitHub Actions d96d56ff09 ci: fix .windows workflow name cc7b8cc980 ci(test): send coverage to codecov 8ca74127d9 ci(test): upload reports fc2942d4e0 integration-cli: TestPluginInstallImage broken on GitHub Runner 874954d8bd integration-cli: TestEventsOOM* broken on GitHub Runner 0bfb1bded3 integration: TestNetworkLoopbackNat is broken on GitHub Runner 4765040aa3 ci: gha test workflow for integration and unit test c853881610 Update to go 1.19.1 to address CVE-2022-27664, CVE-2022-32190 2450c5a46b update to golang 1.19 5d2b3687b0 Wrap local calls to the content and lease service 287d1656de vendor: golang.org/x/net v0.0.0-20220906165146-f3363e06e74c 39976cd2bf Update to go 1.18.6 to address CVE-2022-27664, CVE-2022-32190 1650fa8889 vendor: github.com/docker/go-units v0.5.0 e9e7491f2b linting: host:port in url should be constructed with net.JoinHostPort 2609d4e252 linting: gosec: fix or suppress G112, G114 in test code 188c5d4a7c linting: suppress false positive for G404 (gosec) ff4ec67b90 libnetwork/diagnostic: EnableDiagnostic(): use net.JoinHostPort fee68df273 namesgenerator: remove Valentina Tereshkova f7cf9fbe48 ci: move buildkit tests to a dedicated workflow ee87eaf9ad ci(windows): move windows-2019 to another workflow 09a0b0a84a Upgrades buildx to 0.9.1 8e6ed32610 Makefile: update buildx to v0.9.0 f10c50958c replace pkg/system Sequential funcs with moby/sys/sequential 40515da6d6 pkg/system: make IsAbs() platform-agnostic 3b9370fcf8 validate: address SC2155 (shellcheck) 51bf7da729 validate: format vendor script with shfmt f1bd611d41 validate: add yamllint validation e9f7c05ae1 validate: yamllint: ignore "truthy value should be one of" warnings 72156dd7a4 validate: yamllint: set locale in config file 554a933944 validate: yamllint: use "parsable" output 8d43d7fa6b validate: yamllint rename config-file a61b411ceb Dockerfile: update yamllint to v1.27.1 704e7a2d71 ci: fix broken workflow 87b7e40a34 update containerd binary to v1.6.8 901fb577cb update runc to v1.1.4 9aeda305fd vendor: github.com/moby/buildkit v0.10.4 48e314fbe2 gha: temporarily pin BuildKit integration test version 292d352ee4 libnetwork/drivers/ipvlan: fix missing IpvlanFlag field in config JSON 2293a20972 Test: wait for network changes in TestNetworkDBNodeJoinLeaveIteration 76fa56b62d vendor: github.com/containerd/containerd v1.6.8 e5958a8f08 client: remove deprecated WithDialer() option e7f4963e73 daemon: kill exec process on ctx cancel dfcb3e17ae Allow containerd shim refs in default-runtime 2c17e9a333 api: set default "Builder-Version" to "2" (BuildKit) on Linux d1d9fd50c2 daemon: complete the "--graph" / "-g" deprecation 8912c1fade seccomp: allow "bpf", "perf_event_open", gated by CAP_BPF, CAP_PERFMON 332de3f1e3 vendor: github.com/hasicorp/memberlist v0.4.0 b73c27ef6b vendor: github.com/moby/swarmkit/v2 v2.0.0-20220721174824-48dd89375d0a 15f9cb5c4d vendor: github.com/containerd/containerd v1.6.7 6c78a1166e vendor buildkit 8e2d9b9 (v0.10 branch) 8ae63006f1 update containerd binary to v1.6.7 aeb600bc4a update runc binary to v1.1.3 e0d8418ddc vendor: github.com/Microsoft/hcsshim v0.9.4 0133759476 api: swagger: fix invalid example value (API v1.39-v1.41) 572457e265 api: swagger: document BuildCache fields (API v1.39-v1.41) 49377cdd63 api: swagger: document BuildCache fields (API v1.42) 910d5c44fc api: add BuildCache.Parents for API >= v1.42 0e3d20cb20 api: deprecate BuildCache.Parent in API >= v1.42 a96b75191e api/types: add missing GoDoc for BuildCache fields. a285cd4d88 api: swagger: document BuildCache fields. 1240460547 Update golang to 1.18.5 e88c28941f docs: api: add missing "platform" query-arg on create (v1.42) 9c4984db6b docs: api: add missing "platform" query-arg on create (v1.41) af7c8ff045 api: swagger: add missing "platform" query-arg on create 6de52a29a8 daemon: support other containerd runtimes (MVP) 85b9568d0e state/Wait: Fix race when reading exit status 826003ecae integration: TestWaitRestartedContainer e2bd8edb0d daemon/restart: Don't mutate AutoRemove when restarting 44fde1bdb7 integration: Add TestContainerWithAutoRemoveCanBeRestarted 6ab3b50a3f libcontainerd: switch generated containerd.toml to v2 (v1 is deprecated) 6d41219bae Fix file capabilities droping in Dockerfile 112fb22152 Windows: Re-create custom NAT networks after restart if missing from HNS a9081299dd logger/journald: fix SA4011: ineffective break statement e34ab5200d fix formatting of "nolint" tags for go1.19 863ca3f185 libnetwork: skip firewalld management for rootless edcc51cbee profiles: seccomp: add syscalls related to PKU in default policy c51efa8617 docs: add API v1.42 52791b1c14 client: errors: remove dead code cdbca4061b gofmt GoDoc comments with go1.19 c52e221207 gofmt files e417e8dfc2 pkg/parsers/operatingsystem: fix stray import 6905fe7488 update golang to 1.18.4 420142a886 profiles: seccomp: allow clock_settime64 when CAP_SYS_TIME is added 71e2aa78e4 hack: don't generate checksums for individual binaries 1cab8eda24 replace golint with revive, as it's deprecated 65e1adc219 Dockerfile: update golangci-lint to v1.46.2 968ff5ab44 fix some minor linting issues 10c56efa97 linting: error strings should not be capitalized (revive) e5a1514c6e Dockerfile: update to latest syntax 43feaa9f8f Dockerfile.e2e: remove redundant INSTALL_BINARY_NAME d6f9b4d73b hack: remove version from binaries, and remove symlinks 2b0bd34d47 Dockerfile: don't install delve on ppc64le, s390x 66f14e4ae9 Fix AppArmor profile docker-default /proc/sys rule 3a3a0cb54e project: Add label kind/regression 4e632a13c3 Dockerfile: use consistent format for CONTAINERD_VERSION 1f187e640c daemon/config: use more assertions in tests 10e42f599a daemon/config: TestUnixValidateConfigurationErrors: use subtests 751222d907 daemon/config: verify that flags were set correctly in tests f73aadb230 daemon/config: New(): set more defaults a0d0db126c daemon/config: set default MTU when initializing config 62f71c4505 daemon/config: fix TestDaemonConfigurationMerge 9b39cab510 daemon/config: improve some tests f8231c62f4 daemon/config: Validate() also validate default MTU fce7ebdaa5 cmd/dockerd: loadDaemonCliConfig() safeguard for unparsed flags 0281f50efa cmd/dockerd: move setting defaults to loadDaemonCliConfig() 717a503590 api: add Hosts to API Config fee8a6a5c4 cmd/dockerd: make newAPIServerConfig() more idiomatic b053376741 cmd/dockerd: reserve port before creating sockets/listeners 986725b466 daemon: improve some errors cbe354b12a vendor.mod: group replace rules 384dc22de7 Add more detail to cluster volumes docs 421b93dcf5 vendor: github.com/hashicorp/go-msgpack v0.5.5 (indirect) 4e87a758f6 vendor: github.com/hashicorp/serf v0.8.5 06a7f41488 vendor: github.com/hashicorp/serf v0.8.2, go-msgpack v0.5.3 f3b2df7b0b vendor: github.com/armon/go-metrics v0.0.0-20180917152333-f0300d1749da 6b023b2eb6 vendor: github.com/prometheus/client_golang v1.12.1, procfs v0.7.3 bd9412e36b vendor: un-pin github.com/matttproud/golang_protobuf_extensions f0647f33f5 vendor: go.opencensus.io v0.23.0 939d124731 vendor: github.com/hashicorp/go-multierror v1.1.1 917f620874 vendor: un-pin github.com/coreos/systemd 6488695a2c vendor: un-pin github.com/coreos/pkg f70a9788c5 drivers/ipvlan: add ipvlan_flag option, support l3s ipvlan_mode db977355b0 fix typo (cluser -> cluster) 0bce64f08d api: POST /containers/{id}/wait: fix validation for "condition" parameter cf543a0bd5 vendor: github.com/moby/sys/mount v0.3.3 4178caade6 vendor: github.com/moby/sys/mountinfo v0.6.2 53aefba7f3 vendor: golang.org/x/sys v0.0.0-20220520151302-bc2c85ada10a 88916949ef build: force unlazy of refs by calling extract 56a20dbc19 container/exec: Support ConsoleSize 04c51cba84 Add new people to the curators list b4ffe3a9fb Move the inspect code away from the image service f1c111b176 fix flaky TestRunContainerWithRmFlag tests (take 2) 068ab51442 layer: layerstore.Cleanup(): improve some logging c2e32c144c volumes/service: NewStore: add more context to error 15716fc9ae ci(windows): test report summary output ca8b659a06 ci(integration-cli): move integration-cli run to make script 1887d85e21 ci(integration-cli): dynamically split tests in matrix 0e6a1b9596 integration-cli: split DockerSuite into subsequent build suites 7ed823ead9 validation: temporarily allows changes in integration-cli 5edfd6d081 bump netlink library bump netlink to 1.2.1 change usages of netlink handle .Delete() to Close() remove superfluous replace in vendor.mod make requires of github.com/Azure/go-ansiterm direct cf6058941c Dockerfile: add crun to dev image 2ec3e14c0f test: Add tests for logging f90056a79d daemon: LogDaemonEventWithAttributes: don't call SystemInfo() b2795564dc codecov: disable "patch" status 73b4b07c4d vendor: github.com/containerd/containerd v1.6.6 a7e3182757 update containerd binary to v1.6.6 c3eefab550 hack: remove error_on_leaked_containerd_shims 1fcd9f73d4 hack: stop installing containerd-shim (io.containerd.runtime.v1.linux) 658a4b0fec libcontainerd: remove support for runtime v1 API 2c7a6d7bb1 daemon: remove support for deprecated io.containerd.runtime.v1.linux 89db5a6fd4 vendor: github.com/containerd/containerd v1.6.5 a747cd3702 update containerd binary to v1.6.5 b241e2008e daemon.NewDaemon(): fix network feature detection on first start 1db286c5e8 Fix alphabetisation of possible names ca6e94f994 update AUTHORS and mailmap cd58d11b2a volume/local.New(): extract loading options to a function 7e907e29a3 volume/local.New() always unmount existing mounts c0f0cf6c19 volume/local: extract saving options to a separate method d3930330a7 volume/local: store both volume's "data" and "root" path e106e3f5c6 volume/local: make "validateOpts()" a method on Root 29c6224fe9 volume/local.Create(): validate early a77b90c35e volume/local: make setOpts() a method of localVolume b56fc2d0f8 volume/local.New(): don't register volume before we're done eecf7a0840 volume/local: localVolume.mount() move errors.Wrap() c1671abf14 volume/local: add test for validation b4b2a0323b libnetwork/portallocator: un-export consts for defaults 414dd017b3 Revert "Added API to set ephemeral port allocator range." 9adad264d2 distribution: match manifest list resolution with containerd 585c147b7a fix flaky TestRunContainerWithRmFlag tests a0a6b82a0d ci: add concurrency check c1a9ffc97a update golang to 1.18.3 bb69104381 Openrc: Depend on containerd init script 6ecbd078c2 ci(windows): upload test reports with logs e3c14acd33 Jenkinsfile: remove Windows stages 553b0edb4c fix unclosed file-handles in tests 293cfd6c76 Ensure performance tuning is always applied c51d34dcfb vendor: github.com/moby/ipvs v1.0.2 2463c40144 daemon/logger: Fix TestConcurrentLogging race test d8a731c3aa daemon/logger: Increase initial buffers size 98810847c4 daemon/logger: Put Message back as soon as possible 8fe2a68698 daemon/logger: Global buffer pools 152467d185 api: swagger: adjust ContainerWaitResponse error as optional 2359da802b docs: api: adjust ContainerWaitResponse error as optional 0afc71fc90 archive: add human-readable hint to Lchown error cb7b329911 daemon: fix daemon.Shutdown, daemon.Cleanup not cleaning up overlay2 mounts a3b1b66bb3 integration: TestPingSwarmHeader(): fix incorrect ping, and cleanup 795ecf02ce builder: fix empty reference fdd2772547 vendor: gotest.tools v3.2.0 a5f6500958 replace deprecated gotest.tools' env.Patch() with t.SetEnv() 3cadb1f63f update gotestsum to v1.8.1 7493342926 daemon/logger: Share buffers by sync.Pool c6cc03747d daemon/images: use gotest.tools for tests, and use sub-tests a04e3326e7 Fix constant `WARNING: No swap limit support` on cgroup v2 hosts 2f6b8a2aec vendor: github.com/containerd/cgroups v1.0.4 c3d7a0c603 Fix validation of IpcMode, PidMode, UTSMode, CgroupnsMode cba8cf34d2 Set ExternalPortReserved for dummy proxy 18529568d3 integration-cli: TestRemoveContainerAfterLiveRestore use overlay2 345346d7c6 Annotate some swagger documented types as int64 c576de88ed vendor: github.com/Microsoft/hcsshim v0.9.3 493d3ca0c3 fix docker-proxy not statically linked 15ed58ffb5 ci(windows): upload coverage to codecov 80862d61d0 gha: temporarily override buildkit version for tests 90fb4eca20 vendor: github.com/moby/buildkit v0.10.3 a67e159909 daemon/logger: hold LogFile lock less on ReadLogs c609523a8c pkg/filenotify: delete unused package 01915a725e daemon/logger: follow LogFile without file watches 6d5bc07189 daemon/logger: fix refcounting decompressed files 49aa66b597 daemon/logger: rotate log files, never truncate 990b0e28ba daemon/logger/local: fix appending newlines 3844d1a3d1 daemon/logger: drain readers when logger is closed 906b979b88 daemon/logger: remove ProducerGone from LogWatcher ae5f664f4e daemon/logger: open log reader synchronously 9aa9d6fafc daemon/logger: add test suite for LogReaders 961d32868c daemon/logger: improve jsonfilelog read benchmark 0ca6e28807 integration-cli: TestSlowStdinClosing is flaky on GitHub Runner ac82b2519a integration-cli: refactor TestStartReturnCorrectExitCode 440d051ce9 integration-cli: TestRestartContainer is flaky on GitHub Runner 890de00f02 ci: windows gha workflow (integration test) 71ba8cf24f ci: windows gha workflow (unit test) 958fa08711 ci: windows gha workflow (build) 304fbf0804 introduce CreateMountpoint for parity between binds and mounts 3b157dc3b6 integration-cli: fix test rogue certs 85a7f5a09a daemon/linux: Set console size on creation 8a5c13155e all: use unix.ByteSliceToString for utsname fields a5a77979dd docs: api: /containers/{id}/attach/ws: remove unsupported query-args < v1.42 d4a0a422da docs: api: add note about websocket attach streams 0dd3a2eade Apply performance tuning to new sandboxes also ce3e2d1955 overlay2: account for UserNS/userxattr in metacopy test ea6760138c wsContainersAttach attach to stdin/out/err streams as requested cc3848f2b7 Rename Reservation to Reservations in the open API 9a7298a3e6 volume: mask password in cifs mount error messages 4e025b54d5 Remove mount spec backport 2c3d1f7b4b overlay2: test for and report metacopy status 7de9f4f82d Allow different syscalls from kernels 5.12 -> 5.16 d9524d92a9 api/types/swarm: Version: implement stringer interface 240a9fcb83 Add Swarm cluster volume supports 73f0b01da1 volume/local.New(): remove redundant filepath.Base() a4bfd9788f volume/local.New(): remove some intermediate variables 74be0fed6f volume/local: remove redundant Root.scopedPath(), Root.scope 0abd7ba229 volume/local: remove hack for downgrading docker 1.7 to 1.6 c9e19a2aa1 Remove "seccomp" build tag 91c254a189 vendor: github.com/opencontainers/runc v1.1.2 bc0fd3f617 update runc binary to v1.1.2 af5d83a641 Make it explicit raw|multiplexed stream implementation being used f9cef468f9 vendor: golang.org/x/sys v0.0.0-20220412211240-33da011f77ad d294078dd0 update golang to 1.18.2 61fec7b36e daemon/initlayer: Init(): remove unused stub for Windows 1f21c4dd05 testutil/registry: remove unused WithStdout(), WithStErr() opts 78095e4d12 Remove unused image/v1 code 14fdd97b69 Remove unused distribution/metadata/V1IDService 4573cd9c30 Improved readability of the run hack script 7873c27cfb all: replace strings.Replace with strings.ReplaceAll f0d1911ddf api/server: fix stray import in container_routes.go d6115b8f40 daemon: fix some minor nits d733481399 daemon: daemon.ContainerKill() accept stop-signal as string 521807837b plugin: Executor.Signal() accept syscall.Signal 21df9a04e0 container: StopSignal(): return syscall.Signal ea1eb449b7 daemon: killWithSignal, killPossiblyDeadProcess: accept syscall.Signal 2ec2b65e45 libcontainerd: SignalProcess(): accept syscall.Signal 070da63310 daemon: only create trust-key if DOCKER_ALLOW_SCHEMA1_PUSH_DONOTUSE is set bb1208639b daemon: separate daemon ID from trust-key 6e376e32d8 update containerd binary to v1.6.4 a35040222c vendor: github.com/containerd/containerd v1.6.4 9880e6a1ef vendor: github.com/opencontainers/selinux v1.10.1 789223f2dc api: postContainersStop, postContainersRestart remove redundant validation 4c2f18f6cc seccomp: support riscv64 a3ae9a5956 opts: ParseTCPAddr(): extract parsing logic, consistent errors 82088364e1 vendor: github.com/moby/buildkit v0.10.2 fca0c20cd4 vendor: github.com/containerd/continuity v0.3.0 16cd359664 vendor: golang.org/x/sys v0.0.0-20220405210540-1e041c57c461 63b13a70ee vendor: github.com/Microsoft/go-winio v0.5.2 e62382d014 daemon/config: remove uses of pointers for ints dbd575ef91 daemon: daemon.initNetworkController(): dont return the controller bdc6473d2d health: Start probe timeout after exec starts 41b96bff55 update uses of container.ContainerCreateCreatedBody to CreateResponse 3bb2d0026b api: rename container.ContainerCreateCreatedBody to container.CreateResponse ff197417fa api: swagger: move ContainerCreateResponse to definitions 64e96932bd api: rename volume.VolumeCreateBody to volume.CreateOptions 18281c92fa api: rename volume.VolumeListOKBody to volume.ListResponse 4caf68f4f6 api/types: rename volume.VolumeUsageData to volume.UsageData 3cae9fef16 imports: remove "volumetypes" aliases for api/types/volume 7293857456 api: rename ContainerWaitOKBody to container.WaitResponse 5ecb6fb68b vendor: github.com/containerd/containerd v1.6.3 4cf904494e daemon: reloadMaxDownloadAttempts() remove validation c46e2e85ee daemon/config: Reload(): add TODO for config reload logic 9a54dadc44 daemon/config: MergeDaemonConfigurations() don't validate intermediates b819480899 daemon/config: Reload(): normalize labels before validation 21dac5e441 opts: remove IPOpt as it's no longer used ccb75439ff cmd/dockerd: use flags.IPVar() instead of custom type 5d352f6a87 cmd/dockerd: remove config_common_unix.go 92d9e892b5 cmd/dockerd: combine installUnixConfigFlags with installConfigFlags 83f67c63a6 cmd/dockerd: combine installRegistryServiceFlags with installCommonConfigFlags 1483905024 cmd/dockerd: remove some intermediate variables 782de17bd0 cmd/dockerd: installCommonConfigFlags() re-group some flags 0ff0b8693e cmd/dockerd: move storage-driver flag to unix-only file a9be008f00 update containerd binary to v1.6.3 314a47492a chore: fix linguist for Dockerfile 0603f87fab cmd/dockerd: validate API configuration as part of --validate e16c3616e2 cmd/dockerd: change newAPIServerConfig() to only receive config.Config 57c20c1b79 cmd/dockerd: normalize hosts when loading config 7b3463f2c5 cmd/dockerd: loadDaemonCliConfig(): minor cleanup d9d0683862 cmd/dockerd: un-export config methods, and don't pass flags "twice" 390c7d6871 daemon/config: Validate(): validate log-level cc8dd9b4a7 Extended contribution guide with how to enable GoLand IDE syntax highlighting and code completion in Moby project 7d328ea1d6 Added Delve debugger to the development container (including instructions in the contribution guide). 63ea9eb594 cmd/dockerd: don't call registry.SetCertsDir() twice 350fadbdd4 rootless: remove redundant sync.Once cd054983ff api/server: remove "Logging" from config 3b56c0663d daemon: daemon.networkOptions(): don't pass Config as argument 36049a04d2 test: use `T.Setenv` to set env vars in tests 1c129103b4 Bump swarmkit to v2 2b0da89366 distribution: move newPusher() and newPuller() together with definition 566c8db66d distribution: add GetRepository(), un-export NewV2Repository, ValidateRepoName 572c7e0184 distribution: remove RootFSFromConfig(), PlatformFromConfig() from ImageConfigStore 1e75ab0ab9 distribution: remove Pusher interface, NewPusher(), and redundant V1 checks 41999abcbe distribution: remove Puller interface, remove redundant V1 checks 074e41679d distribution: un-export internal errors and error-utilities fb5485f5d0 distribution: un-export ImageTypes, make ImagePullConfig.Schema2Types optional 176f66df9c api/types: replace uses of deprecated types.Volume with volume.Volume 54386f0c8f api: docs: move VolumeListResponse to definitions (v1.39-v1.41) cd635e465d api: swagger: move VolumeListResponse to definitions f19ef20a44 api: move types.Volume to volume.Volume 0e4f473a9f pkg/chrootarchive: remove redundant init() stub for Windows df650a1aeb panic() instead of logrus.Fatal() in init funcs ab5ebefa0d opts: TestParseHost(): also check the error fc83834ebb opts: use subtests, and split checks 83b71e0ed0 opts: re-order test-cases and use more consistent values eebd8d3c0c opts: ParseTCPAddr(): remove workaround for go1.5 c66271f4da opts: TestParseDockerDaemonHost(), TestParseTCP() remove workaround 90647e22b2 api/types/time: remove DurationToSecondsString() utility as it's no longer used e8fa708ae5 client: ContainerStop(), ContainerRestart(): support stop-signal 9060126639 client, integration-cli: remove unneeded import aliases 83a185897d API: add "signal" parameter to container stop and restart endpoints 90de570cfa backend: add StopOptions to ContainerRestart and ContainerStop 952902efbc daemon: containerStop(): use a regular "defer" to log container event 5edf9acf9c daemon: move default stop-timeout to containerStop() f3bce92a24 daemon: cleanupContainer(): pass ContainerRmConfig as parameter 4430992af8 daemon: rename some variables, import-aliases and receivers 301b252b58 libnetwork: don't use strings.Fields() to improve performance b9de761c26 docs: api: document ImageSummary fields (api v1.39-v1.41) f8a1d6b50a api: swagger: document ImageSummary fields b365924ec3 client: ContainerKill(): don't send signal query-param if none was set 07dba5d9fe api: docs: improve documentation of ContainerConfig type (API v1.30-v1.41) a46700dbdb Cleanup servicebindings only on Windows 6861aade58 Delay network deletion until after lb cleanup 556cb3ae81 Log HNS policylist removal failures cb62919d28 api: improve documentation of ContainerConfig type ef64db5021 update golang to 1.18.1 013d648888 client: CopyToContainer(), CopyFromContainer(): remove status-code handling 83969fa3dd daemon: move DefaultShutdownTimeout to daemon/config 690a6fddf9 daemon: move default namespaces to daemon/config 881e326f7a daemon/config: remove unneeded alias 4039850bef add instructions to generate events message table bin 1efda78f2b use go-winres for windows build and cleanup autogen and winresources fd2143e0b0 use go-winres for cross to create Windows resources 1d6e0fb103 metrics: DRY metric definitions efe03aa2d8 Jenkinsfile: add workaround for CVE-2022-24765 449250994f builder/remotecontext/urlutil: simplify and improve documentation 5f89a6a78e pkg/urlutil: deprecate, and move to builder/remotecontext/urlutil 074bc1c3ab pkg/urlutil: remove unused IsTransportURL() b6d58d749c runconfig: ContainerDecoder(): fix handling of invalid JSON ff5f70e55f api/server/httputils: move WriteJSON() together with ReadJSON() 0c9ff0b45a api/server/httputils: add ReadJSON() utility ef490cae45 api/server/httputils: matchesContentType(): return error instead of logging 3e47a7505e daemon/logger/fluentd: remove udp, tcp+tls, unixgram, add tls scheme 12424cfa6f daemon/logger/fluentd: fix missing host, remove urlutil.IsTransportURL() 0f40aefccd daemon/logger/fluentd: validate path element b161616202 daemon/logger/fluentd: make error-handling less DRY 0dd2b4d577 daemon/logger/fluentd: rename var that collided with import 40182954fa daemon/logger/fluentd: add coverage for ValidateLogOpt(), parseAddress() c2ca3e1118 daemon/logger/syslog: remove uses of pkg/urlutil.IsTransportURL() 87206a10b9 daemon/logger/splunk: remove uses of pkg/urlutil.IsURL() 2e831c76c2 daemon/logger/gelf: remove uses of pkg/urlutil.IsTransportURL() 170049225c ci: add cross job in ci workflow 12558c8d6e fix cross compilation for arm platforms d730d550e2 ci: set shorter retention period for artifacts c2dfb60e31 ci: update upload-artifact and download-artifact actions to v3 5d9e99ead3 missing windows arm64 arch detection eb4c6d8316 maintainers: update metadata for samuelkarp 101dafd049 daemon/config: move proxy settings to "proxies" struct within daemon.json 2bc07370ec daemon/graphdriver: remove unused graphdriver.IsInitialized() d570bc4922 remove deprecated support for overlay(2) on backing FS without d_type (fstype=1) 758714ed6d api/server/router/grpc: fix some nits in NewRouter() 87948c7892 Jenkinsfile: allow all ppc64le / s390x stages through checkbox 2ff043c9fe Updated AUTHORS and .mailmap files a35b4ac54a daemon/config: Validate(): validate hosts 5cfcd88d57 daemon/config: fix TestReloadDefaultConfigNotExist if file exists ecbfe73193 opts: ParseTCPAddr(): fix validation of hosts to not ignore path elements 846af8e413 cmd/dockerd: update --ip6tables description to include "experimental" ae7d3efafd Makefile: update buildx to v0.8.2 ffc903d7a6 update runc binary to v1.1.1 69993c1c57 vendor: github.com/opencontainers/runc v1.1.1 482d1d15bf distribution: use the maximum compatible platform by default 890231f46b client: container ps: don't set "limit" if none was set fcc42d5682 distribution: use correct platform matcher for containerd d74bf97f40 vendor: github.com/moby/buildkit d7744bc 064650dd09 Pass TestPsListContainersFilterCreated if other created containers exist 31e1fec950 Suport vpci-class-guid in the non-containerd backend cb07afa3cc Implement :// separator for arbitrary Windows Device IDTypes 92f13bad88 Allow Windows Devices to be activated for HyperV Isolation c60f70f112 Break out `setupWindowsDevices` and add tests 1e645fb70f client: Ping(): add handling for swarm status headers adf4bf772d API: add "Swarm" header to _ping endpoint 4d7ab4b214 update RootlessKit to v1.0.0 19a7875c3c vendor: golang.org/x/sys v0.0.0-20220319134239-a9b59b0215f8 85572cac14 registry: remove dependency on rootlesskit, add `SetCertsDir()` 3853eb59d1 daemon: require storage-driver to be set if the driver is deprecated 020fd68326 daemon: graphdriver: some minor cleanup 7b277f62cc Remove comment that is no longer relevant ec221d6881 vendor: github.com/containerd/containerd v1.6.2 e69529c94a update containerd binary to v1.6.2 8c7ea316d1 Mount (accessible) host devices in --privileged rootless containers ff35785cfc vendor buildkit 8d45bd6 that fixes dockerd worker integration tests 32f0561715 ci: buildkit integration test fda0226a89 builder: add buildinfo for buildkit b899db6423 builder: enable shm-size and ulimit for buildkit aadb3bf766 builder: changes needed since buildkit 0.10.0 e5812117a5 bridge: also flush conntrack entries when setting up endpoints a2aaf4cc83 vendor buildkit v0.10.0 feab0cca9f libnetwork/overlay:fix join sandbox deadlock e82b7b2fa0 errdefs: move GetHTTPErrorStatusCode to api/server/httpstatus 45067cda33 client: remove wrapResponseError() 5e9829b75d registry: remove unused fallbackError 8947730124 registry: un-export AuthTransport() 2f466a9f88 registry: remove unused Service.TLSConfig() 64e50ce86a search: remove parsing JSON filters out of the backend bdb878ab2c filters: lowercase error 2d45b5ddbc api: filters: return correct status on invalid filters a5be5801e9 search: un-export registry.DefaultSearchLimit, and fix API status codes bee8f006fe registry: serviceConfig: don't embed registry.ServiceConfig 2b5dc81582 registry: move allowNondistributableArtifacts, isSecureIndex to config 382b986520 registry: make defaultService.ServiceConfig() more idiomatic 18de76a420 registry: make serviceConfig.loadInsecureRegistries() more atomic dae2173568 registry: defaultService: use sync.RWMutex 9cb0aa4c91 registry: minor improvements and cleanup d3c3e2c867 registry: remove unneeded alias for api/types/registry import 79aa65c1fa registry: return "errdefs" compatible error types 98202c86ad registry: remove ErrInvalidRepositoryName 273dca4e3c registry: remove unused error return from HostCertsDir() 6e3e657ea6 registry: un-export config.LoadXXX() functions 4ebb18479d registry: un-export Session, remove NewSession() 286992ef53 registry: un-export Ping(), PingResult, remove v1Endpoint.Path() 6a01a3cfa4 registry: un-export V1Endpoint and NewV1Endpoint() 8b8bbbd445 registry: un-export HTTPClient() and NewTransport() 569dc6d692 registry: un-export DefaultService 541ed077a6 registry: remove unused authConfig from Session 02ed265854 registry: remove unused RepositoryData and ImgData 2bcf4628a7 registry: remove TODO for removing localhost as insecure by default d9261561f9 registry: add TODO for removing ParseSearchIndexInfo() 746c51b54f registry: tests: remove unused mock code and use gotest.tools 917b44799d vendor: golang.org/x/crypto v0.0.0-20220315160706-3147a52a75dd 9bf40d7edd pkg/system: move IsWindowsClient to pkg/parsers/operatingsystem 427b0cd636 api/types: fix KernelMemory deprecation comment, and omitempty 5d10c6ec67 Update handling of deprecated kernel (tcp) memory options af6307fbda Remove KernelMemory option from /containers/create and /update endpoints 85c4d633db pkg/system: remove deprecated (and unused) windows consts 590e34eaf4 update golang to 1.18.0 4203a97aad staticcheck: ignore "SA1019: strings.Title is deprecated" 98f027813f api: swagger: add IPAMConfig on IPAM abc2f095ab api: docs: add IPAMConfig on IPAM (v1.41) 8ac2f84f9a docs: cleanup swagger API with multiple examples (v1.25-v1.41) 8ba83f63a0 client: ImageSearch(): don't send limit if none was specified 3671cb90a3 cleanup swagger API with multiple examples de6732a403 version: add RootlessKit, slirp4netns, and VPNKit version 098a44c07f Finish refactor of UID/GID usage to a new struct da068165f6 ci: simple gha workflow to build docker daemon a768652fd6 Support STOPSIGNAL instruction in commit change c28a8e9cf7 layer: remove layerstore.setOS(), layerstore.getOS() 7df7357e08 vendor: cloud.google.com/go v0.92.0, google.golang.org/api v0.54.0 f9f549cbe4 plugin: add EndpointResolver interface 61599d0a4d plugin: remove unused pluginRegistryService 06abe8dd2d update containerd binary to v1.6.1 b36fb04e03 vendor: github.com/containerd/containerd v1.6.1 00ba5bdb98 Unpin grpc, protobuf dependencies 06c797f517 vendor: github.com/docker/swarmkit 616e8db4c3b0 b92af14a1c vendor: github.com/docker/distribution v2.8.1 14cb9d22df api/types: add godoc on MountPoint 0a438f2612 api: docs: document MountPoint fields (v1.25-v1.41) 69ba3713d5 api: swagger: document MountPoint fields b0b71dbe1c pkg/sysinfo: remove libcontainer dependency 2c97295ad8 daemon: remove v1 shim configuration for containerd 5979d6e7e3 client: add const for environment variables, and document them c2c7e9d449 client: improve GoDoc, and minor touch-ups 8512cf076c client: TestNegotiateAPIVersion(), TestClientRedirect(): use sub-tests 25a336ab6a client: TestGetAPIPath(): update test to use more realistic results 65e4ea27cd client: various small test-improvements c04dff7623 Correct type of Mounts in ContainerSummary in docs (v1.25-v1.40) 16e3ca35eb Correct type of Mounts in ContainerSummary in docs ed843fe42f Correct type of Mounts in ContainerSummary 948c2c45bb client: use canonical names for HTTP Headers a34fe9b422 Add locking to the ZFS driver b94a319fdf remove deprecated builder/dockerignore d89bfac728 remove deprecated pkg/symlink 7449ca078b remove deprecated pkg/locker 4a6dc85e40 remove deprecated pkg/term, pkg/term/windows 97a235196e remove deprecated pkg/mount 0759f013a4 api: docs: fix indentation of HostConfig.SecurityOpt (v1.39-v1.41) a4567903a8 api: swagger: fix indentation of HostConfig.SecurityOpt 352d1bb8e0 api: docs: move ContainerWaitResponse to definitions (v1.39-v1.41) e4c6ca36ae api: swagger: move ContainerWaitResponse to definitions 444b27910c api: docs: move VolumeCreateOptions to definitions (v1.39-v1.41) 0119f7973b api: swagger: move VolumeCreateOptions to definitions 5c0aae359f api: docs: move Volume examples inline (v1.39-v1.41) e444ac3470 api: swagger: move Volume examples inline 9f3b1a9664 distribution: retry downloading schema config on retryable error 8e9c8ff7f2 api: docs: remove deprecated RootFS.BaseLayer (API v1.25-v1.41) fd1f34cacd api: docs: remove deprecated RootFS.BaseLayer (current API version) 25c896fcc2 api: remove unused RootFS.BaseLayer 9aacaeb667 pkg/parsers: support Windows 11; drop ProductName 9ed8cd128a Dockerfile.windows; update containerd binary to v1.5.10 2c8f0a0c99 update containerd binary to v1.5.10 b4a943afab vendor: github.com/containerd/containerd v1.5.10 e781cf5f64 update to go 1.17.8 to address CVE-2022-24921 a0230f3d9a remove unneeded "digest" alias for "go-digest" 06df530b6d image: improve godoc for V1Image 34c2c14775 api: improve godoc for ImageInspect struct d19dd22257 api: docs: fix warning about comment indentation (API v1.40-v1.41) 9565606222 api: docs: update docs for /images/{name}/json (API v1.39-v1.41) 697f42582a api: docs: fix warning about comment indentation (current API version) 3193d7e101 api: docs: update docs for /images/{name}/json (current API version) 90c54320c8 daemon/logger: fix data race in LogFile 9080e5a1f7 daemon/logger: add test to detect data races 5263bea70f daemon: move check for CPU-realtime daemon options dee9f422c8 pkg/system: remove github.com/docker/go-units dependency 25ee00c494 pkg/system: move EnsureRemoveAll() to pkg/containerfs d492101172 daemon: SystemInfo() extract collecting debugging information to a helper ac2cd5a8f2 daemon: unexport Daemon.ID and Daemon.RegistryService a27f8aecad daemon: SystemInfo() extract container counts to a helper function 82f96da04d layer: remove unused ErrActiveMount, ErrNotMounted, ErrNotSupported de0eabbd66 vendor: github.com/vishvananda/netns v0.0.0-20210104183010-2eb08e3e575f d8e1746466 vendor: github.com/tonistiigi/fsutil v0.0.0-20220115021204-b19f7f9cb274 931b455f27 vendor: github.com/hashicorp/errwrap v1.1.0 4d1c323796 vendor: golang.org/x/text v0.3.7 7f9c77b2fe vendor: golang.org/x/oauth2 v0.0.0-20210819190943-2bc19b11175f a69cda092b vendor: golang.org/x/lint v0.0.0-20210508222113-6edffad5e616 c03ae0b726 vendor: github.com/cespare/xxhash/v2 v2.1.2 2634edec6e vendor: github.com/klauspost/compress v1.14.3 8bf694b427 vendor: github.com/google/go-cmp v0.5.7 89d39e5e77 vendor: gotest.tools/v3 v3.1.0 c35143f92e vendor: github.com/moby/sys/mount v0.3.1 9efa8b3500 all: fix typos 203fcd6997 layers: remove layerStore.getWithoutLock() 7d70d95d8e registry: add DefaultRegistryHost const, and improve documentation 9d6382f2b3 vendor: github.com/Microsoft/hcsshim v0.9.2 ace606fd75 vendor: github.com/aws/aws-sdk-go v1.31.6 0809bd6859 vendor: github.com/klauspost/compress v1.14.2 20e5d6b3e3 vendor: github.com/pelletier/go-toml v1.9.4 812dacb676 vendor: github.com/containerd/continuity v0.2.2 461845bfbc vendor: github.com/containerd/cgroups v1.0.3 7876c53424 vendor: golang.org/x/tools v0.1.5 1b829c2a6a vendor: golang.org/x/mod v0.4.2 6be521ccb8 vendor: golang.org/x/oauth2 v0.0.0-20210805134026-6f1e6394065a 8f106d4576 vendor: github.com/google/go-cmp v0.5.6 9393cf73f6 removed mentions of the archived Docker CE repo ff408210da distribution: remove use of deprecated dial.DualStack 3c44ade6d0 daemon: fix error-message for minimum allowed kernel-memory limit 9f3c238c29 docs: add missing KernelMemoryTCP to api v1.40 and v1.41 203d97df59 api/swagger.yml: add KernelMemoryTCP to /info endpoint 3f0abde50d integration-cli: TestSlowStdinClosing: use sub-tests 496a4bd15e integration-cli: TestSlowStdinClosing: add logs, and potential naming conflict 821b4d4108 daemon/config: DefaultShmSize: minor tweak and improve docs 705f9b68cc some cleaning up of isolation checks, and platform information 1b3fef5333 Windows: require Windows Server RS5 / ltsc2019 (build 17763) as minimum 833139f390 pkg/archive: audit gosec file-traversal lints e9bbc41dd1 Remove local fork of archive/tar package 79ea1b16b1 distribution/xfer: un-export DoFunc type 4d6c6a5000 distribution/xfer: smaller interface, rename to DigestRegisterer 047e032461 distribution/xfer: define DownloadOption type 69b0913e1f distribution/xfer: add TODO for return error on Registered() 3309ea9419 distribution/xfer: slightly more idomatic type assertion 4c7dc9806c distribution/xfer: un-export transfer interface accessors 849d8c2d02 distribution/xfer: un-export Watcher 96a750aab4 distribution/xfer: un-export Transfer interface 765844e419 distribution/xfer: un-export NewTransfer() 587c474b57 distribution/xfer: use "transferManager" in godoc 874b11495b distribution/xfer: un-export transferManager.setConcurrency() and .transfer() d746a836fc distribution/xfer: remove TransferManager interface, un-export newTransferManager cf31aa0fa0 distribution/xfer: fix some nits in tests 79cad59d97 daemon/images: ImageService.Cleanup(): return error instead of logging dd4cf4b641 daemon: remove some unused stubs on Windows 1240f8b41d daemon: remove kernel version check and DOCKER_NOWARN_KERNEL_VERSION c79a169a35 Remove opts.QuotedString implementation 699174347c daemon: use RWMutex for stateCounter cad6c8f7f1 Update Go to 1.17.7 2ac898c232 vendor: github.com/moby/sys/signal v0.7.0 9c2646e486 vendor: github.com/moby/sys/mountinfo v0.6.0 c2b33f8684 vendor: github.com/fsnotify/fsnotify v1.5.1 3776fe6256 vendor: github.com/containerd/containerd v1.5.9 3ddf696a2d vendor: golang.org/x/oauth2 v0.0.0-20210514164344-f6687ab2804c 42d2f0bbc7 vendor: github.com/google/go-cmp v0.5.5 b9c8eca468 libnetwork/networkdb: remove some redundant fmt.Sprintf()'s abaf4b25d7 integration-cli: remove some redundant fmt.Sprintf()'s 7e06add3c8 testutil/daemon: remove redundant fmt.Sprintf()'s 737e8c6ab8 api: POST /containers/{id}/wait: validate "condition" parameter a832635e51 client.ContainerWait(): don't send empty "condition" query parameter 5e2b7dea02 docs/api: add missing 400 response for POST /containers/{id}/wait 41b137962d docs/api: update /containers/{id}/wait "condition" parameter (v1.30-v1.41) 0e5929f99d api/swagger: add missing 400 response for POST /containers/{id}/wait 0ac746fabb api/swagger: update /containers/{id}/wait "condition" parameter to match code fada92c393 vendor: github.com/prometheus/common v0.10.0 147752ee05 vendor: github.com/grpc-ecosystem/go-grpc-middleware v1.3.0 f9f11050cc vendor.mod: don't replace github.com/stretchr/testify 738bd5a90e vendor.mod: don't replace github.com/containerd/containerd be4144c153 vendor.mod: don't replace gopkg.in/fsnotify.v1 9f7280f2d2 vendor: github.com/google/uuid v1.3.0 24a7b61800 vendor.mod: don't replace github.com/hpcloud/tail c1fa01deb8 vendor.mod: don't replace github.com/onsi/ginkgo, github.com/onsi/gomega 40bf5d414e vendor: github.com/pelletier/go-toml v1.9.1 8f6d58915d vendor: github.com/klauspost/compress v1.12.3 40b8495735 vendor: go.etcd.io/bbolt v1.3.6 03f45fafc5 vendor: golang.org/x/net v0.0.0-20211112202133-69e39bad7dc2 368d680dfe vendor: golang.org/x/time v0.0.0-20211116232009-f0f3c7e86c11 ce4ca67d52 vendor: golang.org/x/text v0.3.6: 2deec80dba fix(check-config.sh): Check for existence of /etc/os-release before sourcing 624b3cfbe8 Freeze the namesgenerator package against new additions eae20b1a1b client: extract FromEnv parts to separate WithXX options 0d9a37d0c2 oci: inheritable capability set should be empty 646ace6ee3 Dockerfile: update golangci-lint v1.44.0 89f63f476b integration-cli: SA5011: possible nil pointer dereference (staticcheck) 85ed9b8746 libnetwork: fix unhandled errors in tests (ineffassign) 99935ff803 client.NewClientWithOpts(): remove redundant type assertion (gosimple) b88f4e2604 daemon/logger/awslogs: suppress false positive on hardcoded creds (gosec) be63b7d7f6 vendor: github.com/docker/distribution v2.8.0 b79dec8138 vendor: github.com/opencontainers/runc v1.1.0 0d04359ec2 vendor: golang.org/x/sys v0.0.0-20220114195835-da31bd327af9 c55eb6b824 update runc binary to v1.1.0 325c3a457b hack/vendor.sh: run "go mod tidy" before vendoring 347a85787b pkg/namesgenerator: remove names-generator binary 2cff05e960 client/request.go:157:8: SA1019: err.Temporary is deprecated (staticcheck) af819bf623 seccomp: add support for Landlock syscalls in default policy f9fb5d4f25 daemon/graphdriver/fuse-overlayfs: Init(): fix directory permissions (staticcheck) ab9796b0e9 pkg/system: rewrite IsWindowsClient() using golang.org/x/sys/windows be463cbd6c pkg/system: remove unused HasWin32KSupport() b36d896fce layer: remove OS from layerstore da277f891a daemon.cleanupContainer() remove named return variable cae1dbee01 ImageService.ReleaseLayer(): remove unused containerOS argument e30a4a438b daemon: remove leftover LCOW platform checks cfddecc3d2 builder/dockerfile: remove leftover LCOW platform checks 1ef0a5bb91 image: remove leftover LCOW platform checks b2ef2e8c83 daemon/images: remove leftover LCOW platform checks f9a1846ca2 distribution: PushLayer.Size(): remove unused error return f5db4b01c0 daemon/images: ImageService.LookupImage(): minor cleanup e1ea911aba layer: remove unused error return from .Size() and .DiffSize() 01ae9525dd Add support for platform (os and architecture) on image import 6b69de61f9 integration-cli: TestImportBadURL: use proper rfc6761 "invalid domain" 9839ddd800 api: postImagesCreate(): use local variable for platform 81ac487d71 api: postImagesCreate(): rename ambiguous err variable 5c870b421a daemon/images.NewImageService() don't print debug logs bb66ebd621 distribution: xfer.LayerDownloadManager.Download(): remove "os" argument 0b0a995d9d distribution: remove RootFSDownloadManager interface 38e2e756c9 Avoid platform-specific NewPatternMatcher function in TestCompile 839e2ecc1b docs: remove HostConfig.LxcConf field from API docs 75a1ad0c9f api: remove HostConfig.LxcConf field 16cb04c2e8 api/swagger: move DistributionInspect to definitions ebd709f80c api/swagger: rename PluginPrivilegeItem to PluginPrivilege 0b5a2e3c87 api/swagger: fix up event-types and move to definitions a65804adc4 api/swagger: move DistributionInspect to definitions 24a43d934c api/swagger: rename PluginPrivilegeItem to PluginPrivilege 92ed6ca356 api/swagger: fix up event-types and move to definitions 62cf748df9 Fix swagger docs to match the opencontainers image-spec 6153c2f08d Extract PluginPrivilegeItem as explicit type definition be93e50a58 Use explicit object names for improved swagger based code generation 8168d1877d Fix ContainerSummary swagger docs 0e719f8a00 Add "changes" query parameter for /image/create to swagger docs d3d78c1ae3 Add RestartPolicy "no" to swagger docs c0bc82cef1 Fix swagger docs to match the opencontainers image-spec 7248ebcd7e Extract PluginPrivilegeItem as explicit type definition 6e421a1823 Use explicit object names for improved swagger based code generation 9ac2d04617 Fix ContainerSummary swagger docs 050f5f29f7 Add "changes" query parameter for /image/create to swagger docs 90294e9bdb Add RestartPolicy "no" to swagger docs 037b4c0e8e docker-py: skip CreateContainerTest::test_create_with_device_cgroup_rules ace8c7896c vendor: cloud.google.com/go v0.59.0 to remove some test-deps 3bd74488fd Makefile: use volume for go mod cache when running dev-container e5d28115ee vendor: regenerate a46f968229 vendor: replace vndr with `go mod vendor` fa73c24471 Fixed broken links in project documentation files. 7b052cdc63 Removed the slack archives f85ae526f0 Update Go to 1.17.6 8d250be008 Add unit test for (*Pattern).compile 483aa6294b daemon: load and cache sysInfo on initialization df3ea5da03 update containerd binary to v1.5.9 9326ea5b99 Jenkinsfile: remove Windows RS1 as it reached end of support 436abb458c hack/ci: remove unused entrypoint scripts 745700d2ef remove unused poule.yml 5d96e09628 Do not panic on empty quoted string argument 71119a5649 awslogs: use gotest.tools/v3/assert more f0e450992c awslogs: replace channel-based mocks 2145f3ba2c docs: fixing /exec/{id}/resize response code in API documentation 3dda7311cd xfer: fix a simple goroutine leak in unit test 7b692a421b libnetwork: remove more config bits related to external k/v stores 745ba3ecbc libnetwork: remove etcd-related code and tests 147173b099 libnetwork: remove consul-related code and tests 25594c33b9 libnetwork: replace consul with boltdb in test a7d0f3060a libnetwork: remove zookeeper-related code and tests e202ac3f38 remove pkg/discovery as it's now unused 00f9b23c3a libnetwork: remove external DS-based host discovery c741ab0efa daemon: remove daemon/discovery as it's now unused 9492354782 daemon: remove daemon.discoveryWatcher f28fc8bc8d daemon: remove discovery inits d2c6602cac integration-cli: use unique names for custom bridges ff2a5301b8 daemon: remove discovery-related config handling 9f2240c56f cmd/dockerd: produce error when using discovery options 65b92a730a integration(-cli): remove discovery related tests 702cb7fe14 daemon: remove discovery related tests 834272f978 Added error codes for exec resize in API docs 1a933e113d Fixed exec resize success code in API docs ffd5a20ab8 vendor: bump etcd v3.3.27 cfd26afabe Use syscall.Timespec.Unix 4bdc208449 hack: remove a workaround for go-tools 22f19f8243 hack: do not exclude SQL-related checks 136f93ea05 hack: remove non-existent directories from golangci-lint's skip-dirs c91e09bee2 daemon/logger: replace flaky TestFollowLogsHandleDecodeErr 7a10f5a558 daemon/logger: refactor followLogs to write more unit tests 5cbc08ce57 The flag ForceStopAsyncSend was added to fluent logger lib in v1.9.0 60f868c263 Ensure system clock was set 8b4c445f54 test: use os.CreateTemp instead of ioutil.TempFile 9a0b1f4f6b hack: use golangci-lint to find io/ioutil 3500d7e472 vendor: github.com/fluent/fluent-logger-golang v1.9.0 f415028976 integration-cli: delete existing docker0 bridge to prevent it interfering dd66dcad9c fileutils: Avoid compiling a regexp for simple patterns 85eaf23bf4 seccomp: add support for "swapcontext" syscall in default policy 26dafe43a4 system: unbreak build for darwin f2e458ebc5 daemon/logger: test followLogs' handleDecodeErr case 48d387a757 daemon/logger: read the length header correctly d620cb6afc Update Go to 1.17.5 6bb3891c60 Update Go to 1.17.4 7c17ad8735 docker-rootless-setuptools.sh: use context after install 934f955e3d vendor: github.com/opencontainers/runc v1.0.3 53397ac539 update runc binary to v1.0.3 d78b883576 Fix grammar for "does not exist" dd9782fe94 go.mod: golang.org/x/crypto 5770296d904e90f15f38f77dfc2e43fdf5efc083 bd61629b6b fluentd: Turn ForceStopAsyncSend true when async connect is used e24d61b7ef vendor: github.com/fluent/fluent-logger-golang v1.8.0 9d9b8e0cf3 daemon.WithDevices(): use containerd's HostDevices() 55da5245de Fix missing parent info case in MatchesUsingParentResults 0f1b68df16 Adjust deprecation comments 7c216bcabe distribution: validate blob type 715e78631d fix image spec JSON example 4555d3aa54 pkg/fileutils: Track incremental pattern match results against each pattern a715bfb857 vendor: github.com/Microsoft/hcsshim v0.8.23 cbb4aed0b4 vendor: github.com/containerd/ttrpc v1.1.0 ce25968008 vendor: github.com/moby/sys/mount v0.3.0, mountinfo v0.5.0, signal v0.6.0, symlink v0.2.0 875969251b vendor: golang.org/x/sys v0.0.0-20211025201205-69cdffdb9359 6d92d2c7c4 TestConntrackFlowsLeak: use busybox "nc" c3537ec24c Dockerfile.windows: update containerd binary to v1.5.8 238180d292 integration-cli: remove manifest v2 schema 1 push tests cef0a7c14e vendor: github.com/opencontainers/image-spec v1.0.2 458b4aae19 vendor: github.com/containerd/containerd v1.5.8 aef782f348 update containerd binary to v1.5.8 615ff22437 vendor: github.com/opencontainers/selinux v1.9.1 c721bad8cc Fix flaky TestPortMappingV6Config 080529dfea Jenkinsfile: update check-config script to latest version 2a6a4587fa testing: skip TestBuildWCOWSandboxSize for now eea2758761 TestBuildUserNamespaceValidateCapabilitiesAreV2: cleanup daemon storage 1a15a1a061 testutil: daemon.Cleanup(): cleanup more directories 24aaa7f8c9 log error message when receiving an unexpected type error 502b35c8f6 Fix windows rxReservedNames 61b43b1eb8 bump up rootlesskit from v0.14.4 to v0.14.6 582ef29426 vendor: github.com/containerd/containerd v1.5.7 c97d09b1e1 vendor: github.com/Microsoft/hcsshim v0.8.22 5f79e03624 vendor: github.com/imdario/mergo v0.3.12 ce668d6c1e Update Go to 1.17.3 b865204042 cmd/dockerd: create panic.log file without readonly flag 3a938df4b5 Make the network allocator handle IPv4 blocks too small for network/broadcast addresses. 894230b82d Fixed docker.internal.gateway not displaying properly on live restore e7583ab859 testutil/daemon: ReadLogFile() trigger os.Sync() before reading 040b1d5eeb integration/daemon: use "windows" to skip tests 76016b846d daemon: make sure proxy settings are sanitized when printing bad4b30e65 integration: skip TestDaemonProxy on rootless CI 427c7cc5f8 Add http(s) proxy properties to daemon configuration a6ce7eff65 daemon: move maskCredentials to config package 1cdad98a7a distribution: do not retry unsupported layer media types 13cff6d583 Fix race in TestCreateServiceSecretFileMode, TestCreateServiceConfigFileMode eadf839530 fix TestInvalidRemoteDriver() to check underlying error 195558de5a pkg/fileutils: escape additional regex meta characters 27ba755f70 Fix racey TestHealthKillContainer 0c887404a8 daemon: fix TestVerifyPlatformContainerResources not capturing variable 3e5e7a6de3 CI: update docker-py to 5.0.3 b4e056d556 buildkit: normalize build target and local platform a8ce4d47c3 dockerd-rootless.sh: Fix variable not double quotes cause unexpected behavior 8f1b2a0fd3 Port testutil/daemon to FreeBSD 59511e1234 vendor: Update go-winio to v0.5.1 485cf38d48 oci/caps: limit available capabilities to current environment 79d6e935ad libnetwork: some minor refactoring / cleanup d86a331fa4 libnetwork: improve consistency in log messages fa4a9702be Update containerd binary to v1.5.7 b746a2bf9b Update containerd binary to v1.5.6 23abee412b compression: support zstd with skippable frame 1c7a47f709 Dockerfile: switch CRIU install to Debian 11 "bullseye" packages 13adcfafde Revert "Dockerfile: CRIU: disable GPG validation, due to expired signing key" 9a09448540 libnetwork: ServeDNS(): don't panic on unsupported query types 089a33e7c5 Dockerfile: CRIU: disable GPG validation, due to expired signing key 68e3034322 Add an option to specify log format for awslogs driver e7fb0c8201 Update Go to 1.17.2 9f39889dee Fixes #41871: Update daemon/daemon.go: resume healthcheck on restore 9dbec13362 registry: EndPointV1.Ping() remove redundant "Standalone" and cleanup logs 37dc2582d1 registry: remove use of iota for consts 4a52c46e37 registry: trimV1Address(): simplify trimming trailing slash 542edf0c21 registry: inline newV1Endpoint() into newV1EndpointFromStr() c8754f44d7 registry: remove unused ToV1Endpoint() afbeec8bda registry: remove tlsConfigForMirror() 9f874e53b9 registry: remove unused registry.ErrAlreadyExists cec4e69813 chrootarchive: don't create parent dirs outside of chroot 03f1c3d78f Lock down docker root dir perms. ce715505bd Dockerfile: update test-registries to released versions 25381123d3 Makefile: update bfirsh/redoc to 1.14.0, and fix swagger warnings b954e4793b Dockerfile: move installers into Dockerfile ec9c8545f8 Makefile: remove passing proxy env-vars 3ce1dcc25d daemon.UsingSystemd(): don't call getCD() multiple times 7ccf750daa Allow switching Windows runtimes. f3d3994a4b Port pkg/system/mknod.go to FreeBSD e187eb2bb5 compression: add support for the zstd algorithm 0050ddd43b Update Go to 1.17.1 f586a473cf pkg/namesgenerator: replace uses of fmt.Sprintf() 1b8db06785 Dockerfile: update gotestsum to v1.7.0 14ff070469 Dockerfile: use "go install" to install utilities a7a7c732c0 Dockerfile: use version for some utilities instead of commit-sha 3cec4b8cd4 Dockerfile: remove GOPROXY override (was for go < 1.14) 3c7c18a499 remove deprecated "nokmem" build-tag for runc 1de1d26eda api/swagger: move DistributionInspect to definitions 9c0ca67e95 api/swagger: rename PluginPrivilegeItem to PluginPrivilege a207eea6a4 api/swagger: fix up event-types and move to definitions 303ea8e820 pkg/plugins: fix compatibility with go1.16 a826ca3aef daemon.WithCommonOptions() fix detection of user-namespaces 4045c4ceaf client: use subtests for TestNetworkInspect c23eae3114 libnetwork/ipamapi: godoc fixes 92ea7df3d1 libnetwork: fix some linting issues c425188bc0 libnetwork: remove API, as it's no longer used accec292c1 pkg/sysinfo: use containerd/pkg/seccomp.IsEnabled() 7ce810c771 use defer to unlock mutex 073f8df0fe libnetwork/types: remove TransportPort.FromString() as it's unused 7c0d8fa5da libnetwork/types: remove PortBinding.FromString() as it's unused 513310f776 libnetwork/types: remove GetMinimalIPNet() as it's unused 1a67e9572e cmd/dockerd: add the link of "the documentation" c55a4ac779 refactor: move from io/ioutil to io and os package 6f5beea146 Remove platform argument from Puller interface. 6a72e73c1d fix potential goroutine leak by making channel non-blocking Signed-off-by: Shihao Xia <charlesxsh@hotmail.com> ee9e526764 Only check if route overlaps routes with scope: LINK aa606307b7 vendor: update archive/tar to match Go 1.17.0 686be57d0a Update to Go 1.17.0, and gofmt with Go 1.17 21faae85ee vendor: update tar-split to v0.11.2 247f4796d2 api/types/events: add "Type" type for event-type enum 9ed88a0801 hack/vendor.sh: allow go version to be specified with .0 d48c8b70a1 vendor: golang.org/x/sys 63515b42dcdf9544f4e6a02fd7632793fde2f72d (for Go 1.17) 82c978ad95 vendor: github.com/opencontainers/runc v1.0.2 14189170d1 update runc binary to v1.0.2 b585c64e2b info: remove "expected" check for tini version 25dbeab78e Fix a typo in project/GOVERANCE.md 96e4adfdc2 api/types/versions: simplify compare if versions are equal 83ec46a7e6 libcontainerd/local: fix GoDoc f68260ba22 Dockerfile: frozen images: update to bullseye, remove buildpack-dep 1effe7435a Dockerfile: add back libseccomp-dev to cross-compile runc 43c6a3d359 Dockerfile: update to debian bullseye d7abbd01eb Jenkinsfile: windows 2022 LTSC mcr.microsoft.com/windows/servercore:ltsc2022 7e67bc067f integration/libnetwork: make delInterface() a t.Helper() 3ab8decad7 Dockerfile: remove aufs-tools, as it's not available on bullseye 882fd19f39 Dockerfile: update to docker/dockerfile:1.3, and remove temporary fix d215d3477b libnetwork/resolvconf: remove README.md 98caf09f0f fix go-digest to make sure the algorithms are registered 572498be56 move pkg/ioutils.HashData() to libnetwork/resolvconf c21be64e1a libnetwork: remove resolvconf/dns package c9ba301a49 libnetwork: move resolvconf consts into the resolvconf package 8f75d8d4d5 Fix swagger docs to match the opencontainers image-spec ef44b22085 Extract PluginPrivilegeItem as explicit type definition 52a9f1689a Use explicit object names for improved swagger based code generation 9275268110 Fix ContainerSummary swagger docs 6b53f2c5a2 Add "changes" query parameter for /image/create to swagger docs d741c14f1f Add RestartPolicy "no" to swagger docs a6692ccc0b Windows CI: Make sure that correct version of containerd-shim-runhcs-v1.exe is used b90dd66bdd testutil: don't import "opts" package 427ad30c05 libnetwork: remove unused "testutils" imports 1285c6d125 Windows CI: Add support for testing with containerd c44b90f3bf Test fix for Windows compatibility 97ede9df26 Rename Matches to MatchesOrParentMatches 9bae4f2f24 Add more optimal MatchesUsingParentResult method, use it in pkg/archive 002b38dc36 integration/network: remove unused CheckKernelMajorVersionGreaterOrEqualThen 8a25d752a9 integration/network: remove IsUserNamespace in favor of testenv equivalent e53f65a916 pkg/signal: remove DefaultStopSignal const 3b316814f9 container: un-export DefaultStopTimeout 8e0d43dda7 docs/api: add node about concurrency on /system/df endpoint 135cec5d4d daemon,volume: share disk usage computations 5adc29ffe2 daemon: sort imports according to gofmt 4706e1c37d Jenkinsfile: update Windows 2022 insider to latest tag (10.0.20348.1) d081e5d70c runconfig: decodeContainerConfig() return early if there's no HostConfig e8e278c44f daemon: simplify networking config b1f7ffea9f Update Go to 1.16.7 27aaadb710 daemon: normalize seccomp profile as part of setupSeccompProfile() 04f932ac86 daemon: move custom seccomp profile warning from CLI to daemon side f8795ed364 daemon: allow "builtin" as valid value for seccomp profiles 68e96f88ee Fix daemon.json and daemon --seccomp-profile not accepting "unconfined" ac449d6b5a daemon/config: rename the default seccomp profile to "builtin" ee02257553 Add const for "unconfined" and default seccomp profiles a6dd341ca2 client: remove deprecated SetCustomHTTPHeaders(), CustomHTTPHeaders() 8afb57e633 client: deprecate client.CustomHTTPHeaders() 0fdd23b7fe API: discard `/system/df` `type` parameter pre-1.42 6948ab4fa1 api/types: hostconfig: fix LogMode enum 5ae1c1f4cf api/types: hostconfig: clean up enum for Isolation 09cf117b31 api/types: hostconfig: create enum for CgroupnsMode 98f0f0dd87 api/types: hostconfig: define consts for IpcMode a18cf3e4ef daemon: paralellize disk usage computations 58c4c120a8 oci/caps: simplify, and remove types that were not needed fc3f98848a oci/caps: improve error message for unsupported capabilities 72b1fb59fe oci/caps: use map for capabilities to simplify lookup d786a52364 oci/caps: generate list of all capabilities on "init" 0ec6f7ea23 oci/caps: minor optimization in init b00b21b93c oci/caps: rename some vars that conflicted with imports / built-ins 94334153b5 oci/caps: remove hack for RHEL6 kernels 9499acc360 bump up rootlesskit to v0.14.4 c1c973e81b Revert "Temporarily disable CAP_PERFMON, CAP_BPF, and CAP_CHECKPOINT_RESTORE" 3af2217dc4 hack/test/unit: run libnetwork tests sequentially b821590461 libnetwork/networkdb: consistently wait for nodes in tests 8fbba73f42 libnetwork: wait until t.Deadline() instead of hardcoded value fb794166d9 seccomp: Use explicit DefaultErrnoRet 5f0703c549 client: remove containerd "platform" dependency b33f3c7802 client: remove unused Platform field from configWrapper 3d58d13811 vendor: github.com/containerd/containerd v1.5.5 4a07b89e9a update containerd binary to v1.5.5 e3491ab56a pkg/archive: gzDecompress(): use local vars for MOBY_DISABLE_PIGZ b321474747 pkg/archive: DetectCompression(): use bytes.HasPrefix() ebeda658bc pkg/archive: remove some debug logs dc7c06ce4e vendor: github.com/docker/swarmkit 3629f50980f6c0dd5ccd7dbfa0956b57ea0cd78d e05fc8ca35 builder/dockerfile: make normalizeDest() platform-specific again 337500f374 builder/dockerfile: make containsWildcards() platform-specific again 131fac6eb4 builder/dockerfile: remove fromSlash() and separator() utils 190b6f64e3 builder/dockerfile: copy: remove LCOW code c33b9bcfd4 libcontainerd/local: remove LCOW bits 13cb04e57c remove various LCOW bits (container, image, pkg/containerfs) 0998c7e363 system: remove LCOWSupported() utility dc70e55c9b distribution: remove LCOW code 79f89ed9b7 hack/ci: remove LCOW from examples, and fix minor linting issue 0c84c322ae daemon, oci: remove LCOW bits 47ad2f3dd6 API,daemon: support `type` URL parameter to /system/df 9f6b562dd1 seccomp: add support for "clone3" syscall in default policy 384517218a volume/mounts: remove windowsValidateRegex() utility 71b0e47bee volume/mounts: add destination validation to "validators" cff0276aaf volume/mounts: rename windowsSplitRawSpec() to splitRawSpec() f77eb5349b volume/mounts: minor formatting and linting fixes efb87ad106 volume/mounts: pre-compile regular expressions 3deac5dc85 btrfs: annotate error with human-readable hint string a34d804572 integration: remove deprecated endpoint test 90f8d1b675 fileutils: Fix incorrect handling of "**/foo" pattern 17f39dcb4d fix a typo 28409ca6c7 replace pkg/signal with moby/sys/signal v0.5.0 dd01abf9bf integration: copy loop variable into parallel test closures d5dbbb5369 storage-driver: promote overlay2, make Btrfs and ZFS opt-in 4fc2d4df03 vendor: github.com/containerd/containerd v1.5.4 22316ff1d8 Makefile: update buildx version to v0.6.0 cf1328cd46 update containerd binary v1.4.8 549060a1d3 vendor: github.com/sirupsen/logrus v1.8.1 82b264bd2d vendor: github.com/coreos/go-systemd/v22 v22.3.2 9f9a0b872c vendor: github.com/cilium/ebpf v0.6.2 1256aa0241 vendor: github.com/opencontainers/runc v1.0.1 f50c7644cf update runc binary to v1.0.1 8de724390e Makefile: do not tag docker-dev image with GIT_BRANCH 0ef7e727d2 seccomp: Seccomp: embed oci-spec LinuxSeccomp, add support for seccomp flags bfd4b64600 seccomp: setupSeccomp(): update errors and remove redundant check c815b86f40 seccomp: add additional unit-tests c1ced23544 seccomp: use oci-spec consts in tests b309e96b11 seccomp: improve GoDoc for Seccomp fields 6ff6913ac4 pkg/signal: remove gotest.tools dependency 0880df4644 pkg/signal: move Trap() to cmd/dockerd ea5c94cdb9 pkg/signal: move signal.DumpStacks() to a separate package 7d63cbfd38 api/types: add GoDoc to Info.Warnings field 4ace1998e5 pkg/sysinfo: use correct name for AppArmor in t.Skip() 9b795c3e50 pkg/sysinfo.New(), daemon.RawSysInfo(): remove "quiet" argument 1fb62f455c pkg/sysinfo: collect warnings in SysInfo struct 208d3c6efb pkg/sysinfo: move cg2Controllers to be a field in SysInfo and unify v1/v2 5cc20ad9e5 pkg/sysinfo: adjust Opt to set new field ca27b473cc pkg/sysinfo: move cg2GroupPath to be a field in SysInfo e70c5ea1a9 pkg/sysinfo.newV2() remove redundant path.Clean() 6677ab6a63 pkg/sysinfo: move cgMounts to be a field in SysInfo 10ce0d84c2 pkg/sysinfo.New() move v1 code to a newV1() function 1d055267a8 updated names-generator.go for alphabetization 84df737f50 vendor: github.com/containerd/containerd v1.5.3 5ae2af41ee Update containerd binary to v1.5.3 3334fb9af1 Fix up vndr tooling 2af9bd3b26 API: add shared-size parameter to image queries bf9c76f0a8 API, daemon/images: add ImageListOptions and pass context fe6f1a4067 Bump go 1.16.6 (addresses CVE-2021-34558) 2837fba75f libnetwork: ensure all nodes are available in tests cdd04a94bc vendor: hashicorp/memberlist, google/btree (dep) update d7a2635537 libnetwork: make rejoin intervals configurable a985655ac4 Move containerd.service from Requires= to Wants= 31348afa19 API: deprecate `BuilderSize` in API versions >= 1.42 115b37b8f7 daemon: use object literal for stats 0ff80c844d daemon/config.New(): rewrite to be slightly more idiomatic 5588a78ab3 daemon/config: restrict "unix" code is linux 96f843ef30 daemon/config: move "common" tests 9d9679975f daemon/config: remove CommonUnixConfig type defeab7387 daemon/config: remove commonUnixBridgeConfig a65f83317c daemon/config: reorganize code between unix and windows files f7eaf2bf78 Update hcsshim vendor to v0.8.20 83e3dd68ca swagger: add BuildCache example to `/system/df` aff02dbcaf Updated check_config 5d244675bd seccomp: Sync fields with runtime-spec fields f2225933bb API: ensure empty build cache is represented as empty JSON array 68b095d4df API: fix 404 status description on container create 477244cca5 API: update API version to v1.42 42d2048b9d Dockerfile: update go-swagger to fix validation on Go1.16 8e3f9fd032 volume/mounts: use sub-tests, and use gotest.tools 73378d2042 volume/mounts: don't use global variable for fileinfoprovider 28b0f47599 volume/mounts: add constructors for each parser df179a1d6a volume/mounts: split tests per parser 536818508d volume/mounts: move TestConvertTmpfsOptions 300c11c7c9 volume/mounts: remove "containerOS" argument from NewParser (LCOW code) f3d08d59aa volume/mounts: move some code to correct location, and minor linting/formatting af3e5568fc daemon/images: fix shared size computation for filtered requests a8d92be6e8 Use crypto/rand 9f0e268b00 Fix use of unsafe ptr #42444 b308097ec3 daemon/images: refactor image listing 00a4f67ddf Reduce TestClientWithRequestTimeout flakiness 7a6cac2b23 Run s390x tests on Ubuntu 20.04 0c1a125644 libnetwork: processEndpointCreate: Fix deadlock between getSvcRecords and processEndpointCreate 345a180a55 there is no file named mkimage-rinse.sh in contrib floder, should delete it 2050e085f9 hack: remove proxy.installer 2bec9f607f Remove spurious libnetwork vendor entry. 116f200737 Fix gosec complaints in libnetwork 0645eb8461 Remove libnetwork/client package e7cf711c02 Move proxy CLI to main cmd/ 7266a956a8 Remove dnet libnetwork cli 42bcc2df68 Remove leftovers from libnetwork move b5835646eb registry: remove const for 'Docker-Distribution-Api-Version' header e93132e273 Add s390x to cross platforms target 3a208c0ff9 Add ppc64le to cross platforms target f558056d2b Make validate flag description more generic 9973dc67dd Jenkinsfile: add stage for Windows 2022 on containerd 8f80e55111 Add configuration validation option and tests. 52744fccdd contrib: remove report-issue.sh script 7168d98c43 Remove libseccomp dependency in runtime-dev-cross-true image It turns out libseccomp is not used for building docker at all. It is only used for building runc (and needs libseccomp > 2.4) 7c97896747 libnetwork: processEndpointDelete: Fix deadlock between getSvcRecords and processEndpointDelete 72549d4ca1 Fix cross compilation in Jenkinsfile 64badfc018 update runc binary to v1.0.0 GA af1e74555a vendor: moby/term, Azure/go-ansiterm for golang.org/x/sys/windows compatibility 8610d8ce4c rootless: fix "x509: certificate signed by unknown authority" on openSUSE Tumbleweed 967ec6f2e8 Fix typo in macvlan_setup.go 46c591b045 pkg/system: deprecate some consts and move them to pkg/idtools 26f5db7a1d pkg/system: remove unused system.Unmount() utility 5f04517c48 pkg/system: remove deprecated GetOSVersion(), consts, SecurityInfo utils. 6988f786f1 vendor swarmkit to 2dcf70aafdc9ea55af3aaaeca440638cde0ecda6 472f21b923 replace uses of deprecated containerd/sys.RunningInUserNS() c7cd1b9436 profiles/seccomp.Syscall: use pointers and omitempty d92739713c seccomp.Syscall: embed runtime-spec Syscall type 7cf079acdb quota: adjust build-tags to allow build without CGO ff141d366f netutils: minor cleanups 888e75dfc9 netutils: remove unused ErrNoDefaultRoute c21eaf9a07 portmapper: move mockProxyCommand to a _test file ac8c80d6f1 portmapper: change userlandProxyCommandName to a const f6be7f2945 portmapper: minor linting fix, and comment purpose of newProxy variable 4231dbca23 portmapper: don't compile linux-only code on Windows c2c0b8dc4e docs: fix image name in testing guide 3eb1257698 revendor BuildKit (master branch) 8733144f8b vendor: github.com/tonistiigi/fsutil d72af97c0eaf93c1d20360e3cb9c63c223675b83 225f764652 vendor: golang.org/x/sync 036812b2e83c0ddf193dd5a34e034151da389d09 037c26d863 vendor: golang.org/x/net e18ecbb051101a46fc263334b127c89bc7bff7ea e1ae2d28fb vendor: golang.org/x/time 3af7569d3a1e776fc2a3c1cec133b43105ea9c2e 28156f4a2e vendor: golang.org/x/crypto 0c34fe9e7dc2486962ef9867e3edb3503537209f 1dac53860c Adjust buildmode comment to link to commit 73aef6edfe ReplaceFileTarWrapper: permit to override file name 2cd68d5268 don't use buildmode=pie on ppc64 13828e430d Bump swarmkit to get fix for rollback failure 76640e5d39 drivers/bridge: format comments da0a006b14 drivers/bridge: dont use types.ParseCIDR() for fixed value 31d3468146 windows: remove redundant init() dc7cbb9b33 remove layerstore indexing by OS (used for LCOW) 3ed804aeca updated vendored archive/tar to go1.16.5 f400e84a43 update archive/tar patch for go 1.16 ae5ddd257c Bump go 1.16.5 594c972fc5 golangci.yml: do not limit max reported issues 22ce0f8faa golangci.yml: skip some tests ea74765a58 golangci.yml: update regex for ignoring SA1019 e6dabfa977 graphdriver: temporarily ignore unsafeptr: possible misuse of reflect.SliceHeader d61b7c1211 daemon: var-declaration: should omit type bool (revive) 16ced7622b daemon/config: error strings should not be capitalized bb17074119 reformat "nolint" comments dd1374f7b2 if-return: redundant if ...; err != nil check (revive) 4004a39d53 daemon/splunk: ignore G402: TLS MinVersion too low for now 7b071e0557 pkg/archive: RebaseArchiveEntries(): ignore G110 09191c0936 daemon/stats: fix notRunningErr / notFoundErr detected as unused (false positive) 7c91fd4240 unused: ignore false positives b4c0c7c076 G601: Implicit memory aliasing in for loop d13997b4ba gosec: G601: Implicit memory aliasing in for loop f77213efc2 gosimple: S1039: unnecessary use of fmt.Sprintf f7433d6190 staticcheck: SA4001: &*x will be simplified to x. It will not copy x b92be7e297 client: S1031: unnecessary nil check around range (gosimple) d43bcc8974 daemon/logger/journald: fix linting errors 6b0ecacd92 gosec: G404: Use of weak random number generator c7b1e5ba38 portallocator: log instead of discard port-range failures 1f398f06aa portallocator: minor refactor for readability 1f90fdd973 portallocator: use const for default port-ranges, instead of init() 076d9c6037 daemon: remove graphdriver indexing by OS (used for LCOW) 350e303c7f endpoint: remove redundant doUpdateHostsFile() function 508a0979d9 bridge: remove unused "others" argument from isolateNetwork() 08ddbfbdac libcontainerd: remove LCOW bits 117bca149f libnetwork/resolver: fix minor linting issues 0d9b0ed678 Fix possible overlapping IPs 774b970cb1 libnetwork: remove MAINTAINERS and LICENSE e90d6abfcd libnetwork: update Dockerfile to Go 1.13.15 a384f83e7a libnetwork: remove CircleCI config and code bc8acc5b08 pkg/fileutils: PatternMatcher.Matches(): remove debug logging 9f6add406e networkdb: mark test-helpers as t.Helper() 25879d3134 Remove a lot of outdated "project/PACKAGERS.md" text b6052669e6 vendor: swarmkit master (after libnetwork move) d15ce134ef Fix log statement 'failed to exit' timeout accuracy 424c0eb3c0 docker pull: warn when pulled single-arch image does not match --platform 22186d2645 vendor: github.com/opencontainers/selinux v1.8.2 aa4dce742f daemon: improve handling of ROOTLESSKIT_PARENT_EUID a7ecbd4b29 libnetwork: replace BurntSushi/toml with pelletier/go-toml 7c1c123555 vendor: github.com/containerd/containerd v1.5.2 989cd6e8f6 vendor: github.com/containerd/typeurl v1.0.2 0bc4035f76 vendor: github.com/containerd/go-runc v1.0.0 (add version comment) 0691addf6a vendor: github.com/containerd/cgroups v1.0.1 134b73a1ea vendor: github.com/containerd/continuity v0.1.0 bfb5b8017b vendor: github.com/containerd/fifo v1.0.0 778c8f787d Update AUTHORS and mailmap 7ef6ece774 Fix setting swaplimit=true without checking ffc6d8d3dd contrib/check-config.sh: Remove awk dependency e047d984dc Remove LCOW code (step 1) 0dd8bc6d31 Fix flakey test TestNetworkDBIslands b3c883bb2f Skip libnetwork integration tests on Windows 7186fd8a95 More libnetwork windows test fixes d414c0c1e8 replace uses of deprecated libcontainer/configs.Device a927fc7831 vendor: github.com/opencontainers/runc v1.0.0-rc95 f0d3e905b6 vendor: golang.org/x/sys d19ff857e887eacb631721f188c7d365c2331456 8db4c4ca01 vendor: golang.org/x/net 6772e930b67bb09bf22262c7378e7d2f67cf59d1 b7dbed85b3 vendor: github.com/opencontainers/runtime-spec v1.0.3-0.20210326190908-1c3f411f0417 56481e899d vendor: github.com/cilium/ebpf v0.5.0 473817206e vendor: rename ebpf README 6c954ffd32 vendor: temp rename ebpf readme 4b981436fe Fixup libnetwork lint errors b53b85ca40 Remove libnetwork leftover vendor stuff 00b2c13a1b Fix some windows issues in libnetwork tests 9184f7fdff Ensure ip6table_filter module on all ci nodes for libnetwork 20fd1dd7d2 Skip some windows network driver tests 72c4a7b496 Fix issues running libnetwork tests. 4da0dc974c Ensure docker-proxy is installed in unit-test ci e837dd0fb8 Add urfave/cli for libnetwork cmd's 86c8b8f1a0 Move proxy build into hack/make 94017da880 Use buildkit fork which uses new libnetwork import 7abc3e83c9 Use tmp swarmkit fork for libnetwork import a0a473125b Fix libnetwork imports c8e6ad1adc Dockerfile: install criu from binary repo bf07c06c63 daemon: move DefaultShimBinary, DefaultRuntimeBinary to config package 34b854f965 daemon: un-export ModifyRootKeyLimit() 95d69658be daemon: un-export VerifyCgroupDriver() a506630e57 daemon: use sync.Once for systemd detection e7ba5cacc6 daemon: un-export IsRunningSystemd() 61b04b3a02 vendor: github.com/moby/buildkit v0.8.3-3-g244e8cde 7a1716462c changelog: fix incorrectly named libnetwork label cd40eb89ae Fix client request error handling 2865d17233 Update contrib/check-config.sh f1e7d02a78 Update contrib/check-config.sh 0f77b22dbe Update contrib/check-config.sh 79ee285d76 vendor: github.com/moby/buildkit v0.8.3 a6a98d6928 vendor: github.com/fluent/fluent-logger-golang 1.6.1 1ce955ec83 contrib/check-config.sh: Make script POSIX 05f520dd3c pkg/signal: ignore SIGURG on all platforms 22b9e2a7e5 vendor: github.com/ishidawataru/sctp f2269e66cdee387bd321445d5d300893449805be e4109b3b6b vendor: github.com/docker/libnetwork 64b7a4574d1426139437d20e81c0b6d391130ec8 fb5a9ec741 Limit the rate at which logger errors are logged into daemon logs d72722f97c Add Samuel Karp as a maintainer 31b2c3bbd9 hack/vendor: add check for vendored archive/tar 8e3186fc8f update containerd binary to v1.5.2 b7ebf32ba3 pkg/signal.CatchAll: ignore SIGURG on Linux 719504b810 vendor: github.com/ishidawataru/sctp f2269e66cdee387bd321445d5d300893449805be efec2bb368 update runc binary to v1.0.0-rc95 151ec207b9 Makefile: install buildx from binary release, instead of building 7070df3a3e integration: ensurePlugin: disable go modules when building plugin 8bae2278ba hack/ci/windows.ps1: disable go modules fe54215fb3 Update test certificates 2fea30f146 hack: add script to regenerate certificates 2842639e0e pkg/fileutils: TestMatches: remove cases no longer valid for go1.16 466e21b273 hack/validate: skip DCO in "default" 22c0291333 update containerd binary to v1.5.1 85167fc634 builder-next: relax second cache key requirements for schema1 82c7e906ea Jenkinsfile: skip ppc64le and s390x by default on pull requests 35c1542ec7 contrib: remove unused "rpm" variant of systemd unit 2f0d6664a1 integration: remove KernelMemory tests 9303376242 Swarm config: use absolute paths for mount destination strings 8c019e830a Update runc binary to v1.0.0-rc94 3987dc264b vendor: github.com/godbus/dbus/v5 v5.0.4 7a956d1342 vendor: github.com/coreos/go-systemd/v22 v22.3.1 a40197328e oci/caps: remove unused GetCapability() and ValidateCapabilities() e5ae83e503 volumes: only send "create" event when actually creating volume 8844c48523 vendor: github.com/moby/sys/mountinfo v0.4.1, github.com/moby/sys/mount v0.2.0+ 4d3f64da63 API-client: remove unused ContainerListOptions.Quiet field 9b2f55bc1c update containerd binary to v1.5.0 56c88c94dd Added missing test cleanup for temporary directory cf259eb8a0 Wait for `run` goroutine to exit before `Close` 489f57b877 Add security privilege needed to write layers when windows VHDX used as docker data root 4300a52606 rootless: disable overlay2 if running with SELinux cdaf82ba3f dockerd-rootless.sh: avoid /run/xtables.lock EACCES on SELinux hosts 42b1175eda hack/dind: fix cgroup v2 evacuation with `docker run --init` 325668315c fix port forwarding with ipv6.disable=1 7c731e02a9 grpc: make sure typed errors handler is installed 42a485f7fa Update Microsoft/go-winio to version 0.4.19 b6a05b7371 Add John Howard to our alumni c9a62831ba Move Michael Crosby to alumni 5a5f8564ba builder/dockerfile: add "ALL_PROXY" to list of default build args e928692c69 dockerd-rootless.sh: use `command -v` instead of `which` 6d1eceb509 Fix panic in TestExecSetPlatformOpt, TestExecSetPlatformOptPrivileged bffa730860 Prepare tests for Windows containerd support f41a6d5c95 enforce order of lock acquisitions on network/controller, fixes #2632 1c7585a7da vendor: github.com/docker/swarmkit 5a5494a9a7b408b790533a5e4e1cb43ca1c32aad 2bef937507 vendor: github.com/coreos/etcd v3.3.25 6202322b60 vendor: github.com/containerd/containerd 19ee068f93c91f7b9b2a858457f1af2cabc7bc06 8b385fde57 vendor: github.com/gogo/protobuf v1.3.2 3980d0462d Remove needless check 825e9855b7 Remove lowenna (aka jhowardmsft) from maintainters 3cd025bc67 bump up rootlesskit to v0.14.2 c35cefb489 Dockerfile: update yamllint to v1.26.1 to fix build 225e046d9d Error string match: do not match command path e57a365ab1 docker kill: fix bug where failed kills didnt fallback to unix kill 8e362b75cb docker daemon container stop refactor 1ec689c4c2 btrfs: Do not disable quota on cleanup 948e201c1c vendor: github.com/containerd/console v1.0.2 a0d1a1f78c Update contrib/nuke-graph-directory.sh 8f4b3b0ad4 pkg/archive temporarily skip some tests on Windowsd V19H1 (1903) and up b5f0096584 Jenkinsfile: temporarily use insider build for Windows 2022 (SAC) e13d41db1b Jenkinsfile: update to Windows 2022 0100a9ebc1 Jenkinsfile: windows-1903: send junit.xml results fa194ec86c Jenkinsfile: add stage for Windows 1903 (SAC) 2834f842ee Use containerd's apparmor package to detect if apparmor can be used 42ef2c5036 vendor: github.com/containerd/containerd 55eda46b22f985cde99b599e469ff9c13994bf68 928227a456 vendor: golang.org/x/sync 6e8e738ad208923de99951fe0b48239bfd864f28 e538720da7 vendor: github.com/coreos/go-systemd/v22 v22.1.0 5761fca80d vendor: github.com/containerd/containerd fbf1a72de7da110187b7d3dace433914b9beca10 ab1dd80877 vendor: github.com/containerd/containerd b9092fae15f1814a5402bea1ceb0fa21ce1c785c 398cb1dc4f Fixes subvol delete on a non-btrfs volume 452f82d5fc Bump hcsshim to get some fixes. eefb6c672a Fix typo on the v1.41 changelog 257b4db186 testing: update docker-py 5.0.0 a876ede24f Use docker media type for plugin layers 00cb3073f4 Fix flaky TestInspect bedefacfd5 Jenkinsfile: update check-config.sh to latest version 2a7c1cc1d6 libcontainerd/supervisor: replace BurntSushi/toml with pelletier/go-toml 1d4a273487 validate/toml: switch to github.com/pelletier/go-toml 97a5b797b6 Use designated test domains (RFC2606) in tests 248f98ef5e rootless: bind mount: fix "operation not permitted" b7c3548c82 Pin arm64 machines to a specific Ubuntu version 45021ee354 bump up rootlesskit to v0.14.1 b14bf43764 check-config.sh: add SELinux and AppArmor 6322dfc217 archive: do not use overlayWhiteoutConverter for UserNS 67aa418df2 overlay2: doesSupportNativeDiff: add fast path for userns dd97134232 overlay2: call d.naiveDiff.ApplyDiff when useNaiveDiff==true 62b5194f62 btrfs: Allow unprivileged user to delete subvolumes (kernel >= 4.18) 0450728267 vendor: docker/libnetwork b3507428be5b458cb0e2b4086b13531fb0706e46 c8599a6537 fix assertPortList normalizing being too strict 5ffcd162b5 discovery & test: Fix goroutine leaks by adding 1 buffer to channel d6ddfb6118 rootless: fix getCurrentOOMScoreAdj cbc6cefdcb hack: use GOPROXY for rootlesskit to workaround issue with old git on CentOS/RHEL 7 1c72a68f2a check-config.sh: add SECCOMP_FILTER a432eb4b3a ContainerExecStart(): don't wrap getExecConfig() errors, and prevent panic 6eb5720233 Fix daemon.getExecConfig(): not using typed errNotRunning() error c6038b4884 integration-cli: rely less on "docker port" output format f845b98ca6 integration: update getExternalAddress to prefer IPv4 54ca929a70 integration/container: wrap some long lines for readability e166af959d update rootlesskit to v0.14.0 0f32beb4f8 libcontainerd: remove unused consts 9637be0e9d libcontainerd: remove unused win32 errors (leftover from TP4) 601707a655 TestPushMultipleTags: Add support for 20.10 CLI 5a664dc87d jsonfile: more defensive reader implementation e31086320e Remove cli test for duplicate --net/--network opts 0c3be53107 integration-cli: Fix race in TestServiceLogsFollow test case 039e9670cb info: unset cgroup-related fields when CgroupDriver == none fb886a119b vendor: github.com/spf13/cobra v1.1.3 a09c0276a2 builder: produce error when using unsupported Dockerfile option 4be98a38e7 Fix handling for json-file io.UnexpectedEOF a8008f7313 overlayutils/userxattr.go: add "fast path" for kernel >= 5.11.0 11ef8d3ba9 overlay2: support "userxattr" option (kernel 5.11) 1600e851b5 Use buster backports to build with libseccomp-2.4.4 d10046f228 Add an option to skip create log stream for awslogs driver 7024564c48 Correct name (right) sort order 1a49393403 update containerd binary to v1.4.4 d39b075302 Enable `process_vm_readv` and `process_vm_writev` for kernel > 4.8 ae6cf966f9 fix typo in comments f23c1c297d pkg/archive: TestUntarParentPathPermissions requires root f2f1c0fe38 dockerd-rootless-setuptool.sh: create CLI context "rootless" 5f6db3a077 rootless: Set service type to `notify` 328de0b8d9 Update documentation links 088e6ee790 Include VPNkit binary for arm64 9bf93e90fa builder: fix incorrect cache match for inline cache with empty layers 9962a3f74e vendor: github.com/moby/buildkit v0.8.2 8dc6c109b5 dockerd-rootless.sh: add typo guard 9351e19658 dockerd-rootless.sh: prohibit running as root 80cc1f1d6f registry.Auth: try next endpoints on non-auth failures 588da41f52 distribution: fix errors tests 7a50fe8a52 Remove more of registry v1 code. 083dbe9fcd Dockerfile: switch to "stable" dockerfile front-end cbd2f726bf Update Swarmkit to pick up fixes to heartbeat period and stalled tasks 0f3b94a5c7 daemon: remove migration code from docker 1.11 to 1.12 ff1d9a3ec5 Update v1.41.yaml e8ceb97646 check-config.sh: add NETFILTER_XT_MARK 50f39e7247 Move cpu variant checks into platform matcher 8d73c1ad68 Check the length of the correct variable #42039 1cd1925acd oci.Device() fix FileMode to match runtime spec 4be5453215 Fallback to manifest list when no platform match 25ada76437 pkg/archive: Unpack() use 0755 permissions for missing directories b53ea19c49 builder: fix pull synchronization regression 8128a9a478 Fix grammar in client function comments 1d2a660093 Move cgroup v2 out of experimental fa480403c7 TestBuildUserNamespaceValidateCapabilitiesAreV2: verify build completed 26965fbfa0 TestBuildUserNamespaceValidateCapabilitiesAreV2: use correct image name e32ae1973a Update rootlesskit to v0.13.1 to fix handling of IPv6 addresses 5c01d06f72 builder: fix blobs releasing via leases after pull 28e5a3c5a4 update runc binary to v1.0.0-rc93 2ad187fd4a Fix userns-remap option when username & UID match 8e2343ffd4 docs: fix NanoCPUs casing 2bd46ed7e5 api: fix NanoCPUs casing in swagger 58825ffc32 Fix for lack of syncromization in daemon/update.go 96e103feb1 Update TestDaemonRestartWithLiveRestore: fix docker0 subnet missmatch Fix docker0 subnet missmatch when running from docker in docker (dind) ba7906aef3 archive: avoid creating parent dirs for XGlobalHeader 137f86067c Add test coverage for seccomp implementation dd7ee8ea3e Dockerfile.simple: Fix compile docker binary error with btrfs 654f854fae reject null manifests c747d9f8ee pull: Validate layer digest format 94c07441c2 buildkit: Apply apparmor profile 28a623aa3a vendor buildkit 68bb095353c65bc3993fd534c26cf77fe05e61b1 7f5e39bd4f Use real root with 0701 perms 4b5aa28f24 Do not set DOCKER_TMP to be owned by remapped root 66dffbec86 Ensure MkdirAllAndChown also sets perms 227687f2ef rootless: support --pid=host 7994443c15 integration: port TestRunModePIDHost from CLI test to API test c23b99f4db Jenkinsfile: add cgroup2 c316dd7cc5 TestInspectOomKilledTrue: skip on cgroup v2 e192ce4009 Move container exit state to after cleanup. 05566adf71 rootless: set systemd KillMode to mixed 240d0b37bb docs: fix double "the" in existing API versions 54eff4354b profiles: seccomp: update to Linux 5.11 syscall list 30b20a6bdd Dockerfile.buildx: update buildx to v0.5.1 14fb165085 testing: update docker-py 4.4.1 d5d5cccb7e pkg/archive: allow mknodding FIFO inside userns 7ca0cb7ffa Use golang.org/x/sys/execabs 5d3b0102f7 Use hostIP to decide on Portmapper version 2db5676c6e swagger.yaml: Remove extra 'the' wrapped by newline 5cc1753f2c Fix daemon panic when starting container with invalid device cgroup rule ec416c51b7 TestCgroupNamespacesRunOlderClient: support cgroup v2 42dba8c3f9 Fix spurious error from "docker load" bb11365e96 Handle long log messages correctly on SizedLogger 00225e220f docker info: adjust warning strings for cgroup v2 8086443a44 docker info: silence unhandleable warnings 4f9af99194 Fix regression in docker-proxy 399695305c Fix builder inconsistent error on buggy platform 2903863a1d Add shim config for custom runtimes for plugins 4f36640553 volumes/local: gofmt 06d9020fac contrib/check-config.sh: fix INET_XFRM_MODE_TRANSPORT 18e0543587 contrib/check-config.sh: fix IOSCHED_CFQ CFQ_GROUP_IOSCHED 070f9d9dd3 contrib/check-config.sh: fix MEMCG_SWAP_ENABLED 03da41152a contrib/check-config.sh: fix NF_NAT_NEEDED eeb53c1f22 contrib/check-config.sh: fix NF_NAT_IPV4 76b59065ae contrib/check-config.sh: support for cgroupv2 c9ec21e17a replace json.Unmarshal with NewFromJSON in Create 46dfc31342 integration: fix TestBuildUserNamespaceValidateCapabilitiesAreV2 not using frozen image 7c7e168902 builder: ensure libnetwork state file do not leak a6d7b43dfc fixed IPv6 iptables rules for enabled firewalld 64465f3b5f Fix Error in daemon_unix.go and docker_cli_run_unit_test.go e6591a9c7a Make test work with rootless mode 4e8f3bcee1 docs: fix typos in API docs f47b27e590 API: fix typos in swagger 95eb490780 Use v2 capabilities in layer archives 33a82a26a8 Fix IPv6 Port Forwarding for the Bridge Driver 06308f4d37 setup IPv4 and IPv6 iptables chain d14b7a5191 fixed ip6tables command in error message b7c663c2ec Make sure IPv6 is enabled for IP6tables 273eae8a11 Revert "systemd: add multi-user.target to After list" 4886e5e5b1 Added improved IP validation for port mapper 27801b9ef8 vendor: update github.com/Microsoft/hcsshim v0.8.10 (back to tagged release) 19eda6b9a2 Update daemon_linux.go for preventing off-by-one f4aafedc48 container: minor cleanup/refactor 5c0b694ef3 container: make hostconfig.json non-world-readable (0600) 1571e9331b Use specific APIs for shared mount-point behaviour 695b151a18 Work around small disk on Windows-RS5 CI nodes db7b7f6df9 Parse storage-opt in GraphDriver init on Windows 56d378a88f Apply a 127GB default WCOW Sandbox size globally 142b2b785b Add TestBuildWCOWSandboxSize integration test 009639e0f4 Do not "Bind" docker "To" containerd. 21578530d7 systemd: set OOMScoreAdjust for dockerd 77096349e1 vendor: github.com/coreos/pkg v4 768ba77d37 plugin.Manager.setupNewPlugin() remove unused blobsums argument 959dfca7e6 service_linux: Fix null dereference in findLBEndpointSandbox e9646aafa4 vendor: docker/docker 7ca355652fe0e2f7401d424d65a81dc248360127 b3b8f561f7 vendor: github.com/gogo/protobuf v1.3.1 77c68a7f6e vendor: golang.org/x/crypto 75b288015ac94e66e3d6715fb68a9b41bf046ec2 d321fc2f61 vendor: golang.org/x/sync cd5d95a43a6e21273425c7ae415d3df9ea832eeb b14bf0e66e vendor: golang.org/x/sys ed371f2e16b4b305ee99df548828de367527b76b 3c90d159f8 vendor: golang.org/x/net ab34263943818b32f575efc978a3d24e80b04bd7 b95a3f1f23 vendor: github.com/coreos/etcd v3.3.12 5ce882207d vendor: runtime-spec v1.0.3-0.20200728170252-4d89ac9fbff6 64e852ee65 vendor github.com/Microsoft/hcsshim 9dcb42f100215f8d375b4a9265e5bba009217a85 0aad792f1d vendor: containerd/cgroups 318312a373405e5e91134d8063d04d59768a1bff 2fdc3e86b1 vendor: logrus v1.6.0 05701c485e vendor: go.etcd.io/bbolt v1.3.5 e11c7fe3ab vendor: vishvananda/netns db3c7e526aae966c4ccfa6c8189b693d6ac5d202 6cbe360e47 vendor: github.com/gorilla/mux v1.8.0 e18c7629c3 vendor: docker/go-events e31b211e4f1cd09aa76fe4ac244571fab96ae47f 3e1e9e878c vendor: gotest.tools v3.0.2 5186d9e1b1 vendor: github.com/pkg/errors v0.9.1 dc6e4d8881 replace github.com/docker/docker/locker with github.com/moby/locker 6796c2cc9b client/mflag: remove use of docker/docker/pkg/homedir 681196c8f2 Remove dependency on github.com/docker/docker/opts bf28003c99 Replace use of deprecated functions 0e8b02bac4 Makefile: enable BuildKit 53688d374e CircleCI: update to Docker 19.03.12 6dde6cb0b0 drivers/macvlan: skip kernel version check 02d313ca15 drivers/bridge: skip kernel version check 304bb14ffc vendor.conf: reformat to match spacing in docker/docker a65c65d801 systemd: add multi-user.target to After list 34f4706174 added TODOs for open IPv6 point 648d891827 reworked allocatePorts 9f98bd79d8 reworked comment of IPTable struct 1e1408f421 additional EnableIPTables check in isolateNetwork a4fcced708 enabled ipv6 parameter in TestSetupIPForwarding 4d1c92c155 resorted EnableIP6Tables in driver configure 9bc2f88f04 isolateNetwork for both IP version ccad03a139 split setupIPTables into setupIP4Tables and setupIP6Tables 9cf5335269 default DROP policy on firewall reload also for IPv6 ec7df93731 replace string.Contains* with net.IP.To4() check 3475f006b7 moved some ipv6 config to setupIPForwarding dfd1925ed1 Renamed driver config variable to EnableIP6Tables 8dbb5b5a7d Implement NAT IPv6 to fix the issue https://github.com/moby/moby/issues/25407 b1a3fe4934 Add more error details on plugin get 570c5f9e76 testing: remove use of docker/docker/errdefs in tests 27345e8f8f log error instead if disabling IPv6 router advertisement failed 9fd12a5e31 client/mflag: remove use of docker/docker/pkg/homedir 42b87e6a4b types: remove some dead code 521ac858e7 doc: server API Correct ImagesCreate - platform parameter added in 1.32 e65003a722 bridge: disable IPv6 router advertisements 0c8ffda2ab Fix 'failed to get network during CreateEndpoint' 07ed00102d store.getNetworksFromStore() remove unused error return efe0ab37a1 Resolver: fix error handling if we didn't receive a response a24e5f5fd4 reduce parameters for func JoinOptionPriority 23d1ca4426 Add docker interfaces to firewalld docker zone c30d55d067 vendor: update moby/ipvs v1.0.1 c7f0b0152e Fix NPE due to null value returned by ep.Iface() 1e02aae252 Fixes a panic in the DNS resolver 4dda50d226 Fixes moby/moby#40388 d846c2b1ab vendor: update vishvananda/netlink v1.1.0 a533fe7094 Use vendored ipvs package 76b5905cbe Macvlan: Separate empty parent and internal d339e6d480 Don't disable socket activation when stopping docker service c39ac9c05e Cleanup VFP during overlay network removal 41a91e9a5d fix InhibitIPv4 nil panic 7ca71f2c49 vendor godbus/dbus v5 add7253d68 Dockerfile: update to Go 1.13.8 129e28baa3 Fix gofmt in preparation of Go 1.13 update 847f469e76 regenerate protobufs with debian buster 6dc0d4ff60 Dockerfile: update to Golang 1.12.17 c18a3a075e Dockerfile: switch to debian "buster" 2a480d515e Bump the DNS library and revendor 9cd3fb6796 Re-vendor with newer vndr c7f8bfa001 Fix internal ipvlan network to work in swarm b0bce9159e Fix internal macvlan network to work in swarm 76bccc5ad4 Ipvlan internal network should not change gw 14fbe41991 Update design.md 9ced389e6e Improving load balancer performance 5cc6ffae0c Migrate from github.com/codegangsta/cli to github.com/urfave/cli cc7847ddd2 Update vendored dependency hcsshim to v0.8.7 6492936018 Add Arko to maintainers 8899d916c0 Improving load balancer performance c27bb1189d Added document describing libnetwork traffic flow. fcb70a0e86 DOCKER-USER chain not created when IPTableEnable=false. cd864b50a2 Fix panic in drivers/overlay/encryption.go fdf46323f4 Update Golang 1.12.12 (CVE-2019-17596) 2c4a868f64 Added API to set ephemeral port allocator range. f042605a42 Revert "Merge pull request #2339 from phyber/iptables-check" 0ca676db49 Revert "Always configure iptables forward policy" 34a636bf51 Fix flaky NetworkDB tests 87b082f365 Fix Error Check in NewNetwork ff27bb0db4 Resolve "bridge fdb show" hang issue edd44eede9 trigger new CI run beb0c82841 Rerun CI 8c8a25d524 Support for com.docker.network.host_ipv4 driver label 0a99a5f152 adding the constants to the test file 4d1db69bcc weighted scheduling methods constants for ipvs Signed-off-by: Jakub Drahos <jack.drahos@gmail.com> a1ab732711 return immediately on error 7e584c1d69 Configure iptables forward policy when ip forwarding is enabled 43a3151db2 Fixed getNetworkFromStore, which returned incorrect network information - notably, the 'resolver' field was empty. This fixes https://github.com/moby/moby/issues/38901 c4fcd7059c etchosts: additionally include the container's IPv6 address if available 226fde5cdd etchosts: allow adding multiple container ips 27fc6e9bae log the actual error when failing to add IPv6 route 049966bdc2 Shorten controller ID in exec-root to not hit UNIX_PATH_MAX 55adbae783 bump hashicorp/go-sockaddr v1.0.2 5ee62a9c70 bump hashicorp/go-multierror v1.0.0, add errwrap v1.0.0 f366d37c72 Updating IPAM config with results from HNS create network call. In windows HNS manages IPAM. If the user does not specify a subnet, HNS will choose one for them. However, in order for the IPAM to show up in the output of "docker inspect", we need to update the network IPAMv4Config field. 7ab62b791f Fix parseIP error when parseIP before get AddressFamily 4818e89751 Bump the GO Version to 1.12.8 which contains security fixes https://groups.google.com/forum/?utm_medium=email&utm_source=footer#!msg/golang-announce/65QixT3tcmg/DrFiG6vvCwAJ f79533d720 Revert "Apply load balancer properly" 9a4025d79f Revert "Adjust LockOSThread" 402efabec5 Remove vlanLinkExists and dummyLinkExists since these are redundant d22824dc11 Move dummyLinkExists into createDummyLink 5fa03a4a8e Dockerfile: use GO_VERSION build-arg for overriding Go version 66a82d7268 Log when endpoint joins internal macvlan network ddd22a8198 Support dockerd and system restarts for ipvlan and macvlan networks 12a182e937 Ipvlan network handles netlabel.Internal wrong d132acb485 Fix hardcoded AF_INET for IPv6 address handling afcb9fb299 Allow network with --config-from to be --internal ecc7bd0540 vendor: update netns to 7109fa855 e5353649f6 Macvlan network handles netlabel.Internal wrong 3eeda3d91c Dockerfile: Update to Go 1.12.6, matching moby/moby 84414583f0 gofmt: Fix formatting warnings 746e680871 vet: Fix format string warnings 0275b007c6 vet: Fix composite literal uses unkeyed fields warnings e2b2318e14 Macvlan internal network shouldln't change gw 75bc82fe5c bridge: add riscv64 build tags 1f1d9898c9 road map loss tracing, just keep use 'Design' describe the 'Future' c5c8653912 Update sctp package 1425fd4fcc controller.loadIPAMDriver: Unwrap error type returned by PluginGetter e9e18d993c bump github.com/vishvananda/netns 13995c7128ccc8e51e9a6bd2b551020a27180abd d152888722 Bump vishvananda/netlink to 1.0.0 0fce3b3653 Maintainers update 313d2b8a74 Make DNS records and queries case-insensitive 599e037a24 remove gosimple - package is gone and it's not important c575631528 resolvconf: use /run/systemd/resolve/resolv.conf if systemd-resolved manages DNS e9bd147bb7 Add Delete endpoint for plugin in test cc38e3a35c Fix TestValidRemoteDriver GetCapabilities errors 6038ef390d bridge: Fix hwaddr set race between us and udev ee574c1b7d Correctly clean up --config-only networks a04a30717e Forcing a nil IP specified in PortBindings to IPv4zero (0.0.0.0). 74013a3899 add check on node LB in support.sh 301a7724fb Move hasIPTablesEnabled check into firewall_linux.go b4d0319424 controller: Check if IPTables is enabled for arrangeUserFilterRule 1909ecb27a Pick a random host port if the user does not specify a host port. 6b5dc55e93 Use fewer modprobes 6ee0b5fcd8 update docker/docker and dependencies 0b40402976 Reformat vendor.conf for readability, pin to git-sha's f126923aeb re-vendor with current version of LK4D4/vndr 5c6423fb29 Adding error log if peerAdd fails 94ab7b2df6 Adding synchronization to endpoint addition/deletion to prevent network connectivity issue 5ae7f4daf7 Use errors.Wrap to preserve original error efeae5e7ee [ipvs] Add SetConfig test with timeout=0 8e650a9685 [ipvs] Add tests for get/set timeout 7374284841 [ipvs] Add support for timeout configuration (Get/SetConfig) 068ca7d046 Revert "debian has iptables-legacy and iptables-nft now" cfde9c717f systemd: fix typo in TasksMax comment e744b62f49 Update setup_ip_forwarding.go 23c763ef1c systemd: set --containerd socket patch to prevent race-condition 7ca0bc66d3 Cleanup the cluster provider when the agent is closed 916927d970 Bump Go to 1.10.7 d7f397c236 Touch-up error-message and godoc for ConfigVXLANUDPPort 151f42aeaa Fix possible nil pointer exception d021af7d2d Start docker.service after containerd.service d418337502 Fix gosimple 10027e8c01 Allow bridge net driver to skip IPv4 configuration of bridge interface ef2741452c Removed roadmap 33d47f95e8 Build with latest docker stable engine 5338928eb8 account for removal of configs.HookState bb3ae82008 vndr runc 96ec217 a937bc3825 Add docker.socket requirement for docker.service 6821d80881 Add socket activation for RHEL based distributions 03b2393a80 Improve error if auto-selecting IP-range failed. 38c8a3f84d Use sync.RWMutex for VXLANUDPPort 07c9fef311 Add the docker.socket back in 56ca280b27 VXLAN port configuration - late review comments update d635844ed7 Do not add IP to Name records for aliases 077ccabc45 VXLAN UDP Port configuration support 387aed91bf Update golint tool 7adcd856fe debian has iptables-legacy and iptables-nft now 1caeac8b64 clarifications and typo fixes for the design documentation 6dd3f45248 Handle NXDOMAIN, REFUSED and log errors a72bff0da3 Remove if/else and redundant brackets in resolver 013ca3bdf8 Make DSR an overlay-specific driver "option" 9a2464f436 Set east-west load balancing to use direct routing 0922883b7e Add a `DstStats` type to track Destination (real server) stats e427c4ee2e Add `Stats` to the `Destination` 0fa3c8c277 Restore `Type=notify` in Systemd unit 4fd54c2aea Do not fail with an empty transparent IPv4 address 619e3d6706 typo fix about mismatch b19e8d3319 Remove Environment, not needed anymore 08796e04ea Removing experimental driver interface f7b7e74624 Moving IPVLAN driver out of experimental 212521b1e9 Use image artifacts as daemon and dependencies 14103caff2 systemd/docker.service: fix PATH ea996b88c1 Add `/usr/sbin` to our path variable for systemd ce5bc0079b allow propagating custom exec-root (e.g. "/run/docker") to libnetwork-setkey 55b80035ed Don't build portallocator on Windows 40b6ebfe75 Add init_windows.go for compilation 44094fae9f Remove unused syndtr/gocapability from vendor.conf 9ca55c7a60 Bump libkv to 458977154600b9f23984d9f4b82e79570b5ae12b 65860893bf Fix typo: assigment -> assignment a906968a3f Bump Microsoft/go-winio to v0.4.11 c15a478047 Bump Microsoft/hcsshim to v0.7.3 d642cfdeb6 Increase max concurrent requests for DNS from 100 to 1000 03ba96c5cf Rolling back the port configs if failed to programIngress() 09e8b411dc Remove offline installer to install shim-process 1adcfa9aa1 fix error when make lint 36375881f3 Fix some typos ce46100a27 doc: fix typo cb95442fc7 systemd: set start burst limits e7ad8e2b28 systemd: add support for reloading daemon configuration through systemd f30757f439 systemd: set systemd KillMode 26eddc16a8 systemd: add "Delegate=yes" to docker's service file 7daf2db62a systemd: don't limit tasks 80039b4699 systemd: set Limit* to infinity ef9ee10914 systemd: no limit on core size 53343f1bf3 added RestartSec 0c8e758012 Add post-stop 72eed906b8 bridge: fix error handling for stale default gateways 99c4c6d5fc ipvs support rs connection information e56475aa14 Set containerd to be a systemd bind for docker 814f6c1f4b Add getter function for Default Address Pools a478edc819 Added support for Swarm Service Driller (ssd) 52e85b4b9a Global Default Address Pool support cdb1e7033d Some changes to get this working on CentOS 7 e086064b2c Revive pre / post steps, update offline location a5c809e809 Round out systemd for RPM packaging 6cd66eaa2d Add systemd files, add containerd-proxy config 17966c940a Move SSD image to docker 05c05ea5e9 Add NetworkDB docs f9442ee314 Apply load balancer properly 94af1e5af2 Adjust LockOSThread 72905ebb13 Dockerfile: Install a fixed version of gogoprotobuf 5041b74451 Give LB sandboxes predictable names 55ad3ef1a4 Fix handling of the resolv.conf 204ce3e31d Create internal directory e88eed1d65 Add required imports to example code in README.md 012fcea177 Add support for Internal and Private network types on windows 6defa7c807 Make protobuf check silent a06f1b2c4e Spelling fixes b9223019c2 support.sh: also inspect stopped containers 4e6580c4c1 Refactor locking for join/leave to avoid race 56c4a6dd3f Makefile: Add check for out of date protocol buffer code 2b602bf3d0 Makefile: Add protobuf-local target, runnable within build container 3bebfbc34e Makefile: Document and organize into sections 348ed0a1a8 circleci: Rename 'lint' to 'check' to match build target 5fdfa8c52c Cleanup interfaces properly when vxlan plumbling fails c699a1215e Makefile: Run containers with --init for proper signal handling 9da8e04c70 Updated handling of disable_ipv6 file 06d471d186 Migrate to gotest.tools :) 6c0f597a82 Remove unused deps from vendor.conf ffe33f932e Create tag for master code 06922d2d81 Use fmt precision to limit string length 5ef4c59574 Fix error handling about bridgeSetup 1383aadf59 ipam: Test rejection of overlapping pool requests 6fd25eea33 ipam, types: Expand documentation 4cbba0da48 CircleCI use latest image 55e4cc7262 Optimize networkDB queue b09cb39fa5 Enhance testing infra 9295e124bb Update stretchr/testify to v1.2.2 341845b5f2 ndots: produce error on negative numbers b306706062 improve error message for invalid ndots number 7fc1795cdf Allows to set generic knobs on the Sandbox 6e260332e8 do not ignore user-provided "ndots:0" option 6e6ac3d2ac Remove redundant and faulty assert messages ac0aa6485b Adjust warnings for transient LB endpoint conds 0b14b45f0c Prevent race between add-binding and net-delete ea2fa20859 Add endpoint load-balancing mode 85a3483b4b Refactor [add|rm]LBBackend() to use lb struct 78b684a24a Add ability to alias any interface in a sanbox f2c6009583 Add SrcName() method to return interface name 31d3de0994 Fix error handling in createLoadBalncerSandbox() 1449e88f7a Avoid default gateway collisions 04bfc61497 Add option processing to network.Delete() 1abac50c8d Generate LB sandbox/endpoint names in one place 5525c22635 Fix unknow driver test error fe9a5a225d Fix net driver response loss on createEndpoint f04280986e Reduce libcontainer dep 791700aed3 Use new plugin interfaces provided by plugin pkg e07681c8ca Bump docker commit 62ebaeac7a Added back dockerignore 96c7cba64c networkdb, drivers: Regenerate protocol buffers 22a24df515 Makefile, Dockerfile: Add support for regenerating protocol buffers 500d9f4515 Adjust corner case for reconnect logic 4f3fb7ee6a Add retry to cluster-peers 705bf07f05 vendor.conf: Update vendored components to match moby 9b114971e5 controller: Unwrap error type returned by PluginGetter 5de876c7ae Add auto update to support.sh 9dbf55097a Create support as a container 8f1fca3e66 Multistage for build 24bdb26483 Dockerfile.build: Bump Go to 1.10.2 f5fa40f9aa Fixing the unit test for overlapping subnet 48196df4a2 Further makefile cleanup fbf02c3794 Migration from CircleCI1.0 to CircleCI2.0 bef873c9df support.sh: add host links e31e906e4e Add pool reuse test to unit tests cc8b2cac28 Allocate subnets in order rather than restarting f0c86fb56e Fix deadlock introduced in b64997ea 3d2b2f1c7e Possible race on ingress programming 01e6a24545 Update miekg/dns to v1.0.7 c4d507b566 Remove non-service cluster info on sbLeave b0b5e14b77 test: update tests to use sub-benchmarks e3c212c224 types: Handle IPv6 literals correctly in port bindings 328948d35a Fix type in error message 1784a46e64 Enable network-db test image creation f6d9d22e6f test: fix ineffectual assignments f9f3b1bdeb typo: fix misspells in code and comments 67dbb04852 Improve interface order e7fcca2f9f Makefile: build image is a prerequisite of the shell target 35f505210b types/types: Correct docstring typo for (PortBinding)FromString f6ddf88cec types/types_test: Rename test to match function ebf0054912 ipam/allocator: Fix typos in error message 48eba3c2c9 Maintainers update 35a81f8173 ipam/allocator_test: Test pool double-release behavior b4c09ceae2 Makefile: Add shell target 2f2811dd14 Adding logs for ipam state dfa303e568 fixing test cases 9fe5cc10b2 Add check for overlapping subnets 5eb96dfbba fix markdown style in doc c97bb41620 Remove race in encrypted overlay key update 40b55d2336 Remove race condition from ovnmanager b64997ea82 Fix race conditions in overlay network driver 3df00a6c64 Add wait time into xtables lock warning 606e28015a Add test for parallel request pool 16e077b884 Filter xtable wait messages when using firewalld 0f6cb61f2d Switch from x/net/context -> context a6ec9e673b Bump golang.org/x/net 96472cdaea Adding a recovery mechanism for a split gossip cluster bc465326fe networkdb: Use write lock in handleNodeEvent bab08251c0 Allow for larger preset property values, do not override 67ecbba4ff bridge: fix lint issue 6b782b4b82 Modify awk to use cut in check_ip_overlap 74d7da907a Vendor go-sockaddr c67ee787da Adding goreport card 20faf0adf0 Retry other external DNS servers on ServFail 9b7922ff6e Fix README flag and expose orphan network peers 4ce05845db bridge: fix handling errors during setupIPChains() 6362d28969 Make go-tools happy 40923e7353 Use ordered array instead of heap for sb.endpoints ed6d70c0c1 Improve scalabiltiy of bridge network isolation rules 7d7412f957 Gracefully remove LB endpoints from services a360943a48 Fix golang.org/x/sync canonical import path 4c8d751400 IPAM tests b8c14de74a Vendor golang/sync a0085a47fd IPAM and Bitseq test cases fe629b6eba Fixing concurrent map access 6a8a15dd9d Fixing Duplicate IP issue in IPAM library 9ba57c93b8 Add warning message for the failure of deleting link device cf89f97a14 Add check for IP overlap in support.sh c8a3950d8b Delete stale HNS endpoints when creating a network d84f182717 Prevent ingress deletion when endpoint count == 1 1f55734d4c Fix crash if the len was < maxSetStringLen 83d1ce9fb5 fix for #1333, calling LinkDel to delete link device when the err of LinkByName is NULL 85791fb3fd Limit max length transient log d1e6cfa6a1 Add an explicit flag to join network in diagnostic 4484ea17c3 Allow user to specify default address pools for docker networks This is new feature that allows user to specify which subnetwork Docker contrainer should choose from when it creates bridge network. d5aab13c38 Various support script improvements ba5b3ee8d9 Bump BurntSushi/toml for MIT License 71c0bc0b89 Revendor dependencies 2120ed2363 Support SCTP port mapping f5c62864e9 Make ssd portable and usuable outside the default image. Add error check when network on a particular node has no services a16d469867 Import the ssd tool in libnetwork bbbfa21a94 libnetwork Windows driver support for outboundnat policy via generic options 5a658d4cc1 Fix user specified ndots option 2f6921cbba Diagnostic client a59ecd9537 Change diagnose module name to diagnostic b6f640a9ff Bump Go to 1.9.3 64da6b8889 Avoid delay on node rejoin, avoid useless witness 5f773281d2 Revendor memberlist d5fef4ca1c Reload DOCKER-USER chain on frewalld reload. e975f3caa0 Fix watchMiss thread context 5ab37a55a1 Delete service info from cluster when service is disabled 88df74659a Add unit tests for MX and A DNS queries dd47466a4d Remove watchMiss for swarm mode d28d679080 Enable IPV6 config on Sandbaox creation on live-restore fe032eeb07 change base image version in Dockerfile.build to enable unit test in arm64 for multi-arch image issue 6a4c8d0ac9 Handle DNS querries of type MX b190ee3ccf Cleanup node management logic 66b65b471a VETH interface cleanup when dockerD suddenly crashes 8c21351e3e Changed the name of the server pointer 1a2efea39e Call the Shutdown on the server f7023e11c8 Remove useless error log 5b89af1bba Vendor latest netlink library 6736b223ec Set socket timeout on netlink sockets 3e544bc500 Avoid extra notification on node leave b578cdce86 Diagnose framework for networkDB 4aab854d6d Addressing feedback from PR https://github.com/docker/libnetwork/pull/2011 f0fcb0bbe6 Fixed race on quick node fail/join 5a5b7fee33 Added a new network creation driver option (disable_gatewaydns) for the Windows driver 2a219a04cc Fix for docker intercepting DNS requests on ICS network 4037132b33 Fix listen port for test infra ecb4442ab3 Fixing circleci. Signed-off-by: Pradip Dhara <pradipd@microsoft.com> 92f9f38103 Use containerId instead of sandboxid for windows 0d1f9c4c97 Move load balancer sandbox creation/deletion into libnetwork. 12891fe687 Support override of binary name 2c8670b496 endpoint_cnt store updates should not create an object f864421ead bump docker/docker to master and unfork dependencies 276a452f17 Remove Solaris support 1b49b17ef5 wait for iptables lock in support script e4f3bcb696 Add test for dns options 7fbaf6de2c Add test to confirm garbage collection 78627b6f14 Fix ndots configuration aa81c6d265 Add test for cleanupServiceDiscovery 1732ab426d Handle cleanup DNS for attachable container da1e931693 Explicitly pass the sha to codecov d64c34e4a5 Bump Go to 1.8.4 1dcffbeb3f Disable hostname lookup on chain exists check 01688ba253 Fix typo in overlay log message 1fe48e8608 Fix IPMask marshalling 3d44975995 Adding a unit case to verify rollover 955b8b4593 Changing containerID to sandboxID based off feedback/conversation with Madhu. b0888450a9 Enable Hot Add/Remove of Network Endpoints for Windows ad577a25fe Changed ipMask to string 181115b350 Addressing code review comments 2bad0fbedf log for miss notification 3e7b6c9cb0 flush peerdb entries on network delete 711d033757 Handle IP reuse in overlay b92d91d6a1 Fix comparison against wrong constant 813a24a51c Minor unit test change a52bcf48f2 Serializing bitseq alloc 955c532735 Repair (*Broadcaster).run goroutine leak 8c31217a44 NetworkDB create NodeID for cluster nodes a4e64d05c1 Avoid alignment of reapNetwork and tableEntries 8b400916ce Ignore failure to save hns endpoint to store 053a534ab1 Changed ReapTable logic 2d2a2bc568 Fix reapTime logic in NetworkDB 729d45379f Fix lint issues 7d466c6600 Fix concurrent CreateNetwork in bridge driver a3c3a596dd PR feedback 495252723d Fixing a race condition that caused a Panic when deleting overlay network then quickly leaving swarm. This issue was uncovered in TestOverlayAttachableReleaseResourcesOnFailure. 89aeeb294c support flush services API cc08cacfab Vendoring microsoft/hcsshim v0.6.3 b76166c110 Increase code coverage for set_matrix 43360c627f Enabling ILB/ELB on windows using per-node, per-network LB endpoint. 0482b29df1 Enable codeconv reporting 0fc6ce881f fix log 10c88fc3ab Ignore "no such file" error when docker cannot find `resolv.conf` 5ab9b5e6a9 Docker deamon doesn't work with --fixed-cidr on windows 663672b8c7 Lock goroutine to OS thread while changing NS a6073649e9 Add a minimum value for the CP MTU a15113e012 Remove useless flags on operations 998a93783e Fix test using com.docker.network.mtu b7c258cf07 PeerDbDelete was passing the wrong field 0651183f84 gofmt and lint changes. 404a9ffa5a For RS3, tasks connected to a swarm network will have 1 endpoint . 3c1ebfaef9 Add service virtual IP to sandbox's loopback address 710e0664c4 Update logrus to v1.0.1 2e38c53def PeerInit for the sandbox init 5c52ff49e0 Funnel peerAdd and peerDelete in a channel b8d514432d Revert "Avoid peerUpdate logic in swarm mode" 19fd1c37fb Fixes bug which makes restoring endpoint mess b65a4ee10e Avoid peerUpdate logic in swarm mode d261ccb89f Revert "Funnel peerAdd and peerDelete in a channel" 7bd4fc1de4 Improve debugging for resolver 3252a10845 Revert "Fixes bug that mistook gw6 for gw." d6440c9139 optimize the rebroadcast for failure case a3ecb8902a fix join/leave e77c245e45 2x faster to converge fee89e0490 Funnel peerAdd and peerDelete in a channel 115519e0b3 Fixes bug that mistook gw6 for gw. d51ed8a97b Remove the error message on mac delete failure.. ecb3daa49e Fix warn log e5bba51d4f Revert "use builtin package context rather than vendored one" 585964bf32 NetworkDB testing infra 60b5add4af NetworkDB allow setting PacketSize 1c67f2592b Fix the Gateway type in remote network plugin spec daba67d67b Avoid flakiness of TestLinkContainers 5c01dcd401 iptables: jump to DOCKER-USER first 051a0d5ce9 NetworkDB incorrect number of entries in networkNodes 738fc5201b Fix debug statement in startResolver a50e885121 When the gc_thresh3 value is reached kenel might remove existing neighbor entries. On an l3 miss try to reprogram the neighbor entry if the peer is valid. Its a best effort attempt because if the arp table is still at gc_thresh3 value, addition will fail. 680832b7b0 use builtin package context rather than vendored one 3dd1fb1217 Make node join event logging less noisy 746070c39a Adding a unit test to catch offset scenarios b5d09df0c3 dnet: remove unused method for dnetConnection struct af5e370627 Add gosimple check 6bd57f977d Fix go generate for protobuf f969f26966 Service discovery race on serviceBindings delete. Bug on IP reuse (#1808) c48c1a3748 Flavio as Libnetwork maintainer 2d278dece0 Fixes docker daemon not restarting after endpoint leak on windows with transaprent network ba788519d6 Fix handleEPTable log 65860255c6 Fixed code issues a018694f40 Added more code checks d69db01eb8 Bump docker base image to 1.8.3 c0f59f9643 IPVS fix 39d2204896 Service discovery logic rework 7ae2b025be Fixing issue with bit allocation byteoffset calculation 2111d4cafb Create SetMatrix data structure 233aa636d7 Fix OS tweaks call b8bcf7005c Use internal systemd scripts for DEB packaging 509b86caa2 Use internal systemd scripts for RPM packaging bb68bc5ae2 Add initial systemd scripts acf9c53292 Vendoring netlink library d5c69190d1 Fix leak of watchMiss goroutine 4abd54d419 Set kernel specific config on linux e49955988a Remove dynamic mac entry from fdb on endpoint deletion ca9a768d80 Handle single manager reload by having workers reconnect 6d768ef73c Fix leak of handleTableEvents 26fb58d3a8 Removing the override for ipamdriver for local scope networks ae9f1f9f04 Removed printfs 34ce7c7e6a Revert "Move Cluster provider back to Moby" 0f17689abf [Bug]Fix race between sandbox.delete() and SetKey() 79a76217db fix review comments e777305c7f Moby vendoring 627da8bf04 Moved the cluster provider to Moby 9376cd3c63 Fix typos and review comments 81296dda15 Update GetService(*Service) api. Update UT with new apis and remove dependency from ipvsadm f585f33042 Node failure timeout fix 000775b918 Initial Checkin GetServices and GetDestinations c7d77e9e89 Simplify network scope setting logic 6d7e9ea6b4 Changes to support ICS network on windows 08d8cfa00f Restore isAgent || n.dynamic check bf98dc6a40 Reject scope settings in config-only network 3fdce29e1d Do not accept swarm scope network creation if swarm is off f566d6384e Added persistence to windows driver so that cleanup happens properly f2db3987e1 Remove unused package in circle.yml c348cebe99 Add a filter chain to allow persistent rules f626582c16 Do not reset network scope during store read 047f7c0793 Add support for FreeBSD in portallocator ece544627b Adding manager pkg for swarm visible network drivers 254d082cc3 Add ConnectivityScope capability for network drivers along with scope network option 06c3489bb8 retry once on a bulk sync failure 5e8c5d68fb Add network inspect -v to the support script 25082206df Support configuration networks cc0b7e6aad all: Avoid trivial uses of Sprintf da9ac65ea6 Remove explicit set of memberlist protocol a2bf0b35d6 Fix for swarm/libnetwork init race condition 552c16dc92 Fix for remote addr parsing 3d7bc23901 Change GetRemoteAddr to return all managers 541cafdb30 Vendoring memberlist tag 0.1.0 95f6336157 Clarify endpoint definition in documentation. 1323730eca On send node envents, notify only if there are peers 102f9d230d Avoid nDB stale entries because of intermittent nw issues. 46ebc9613e agentSetup to first check if clusterProvider is nil b4e5078bd5 Make sure sbJoin programming rollback happens on each error e24adf94a1 Change wording for Endpoint description a0e0231909 Add the data-path-addr 23b43b1557 Remove gw endpoint on gw nw join failure 421c089e98 ingress sandbox hosts and resolve.conf files location didn't respect the custom daemon root directory 3684df4a66 Flush container flows in conntrack (Bug #8795) 6f062c298a Vendoring the netlink changes cddead94d2 Do not manage ipv6 for host mode containers e5c1a4cabd Remove firewalld running log 18098ab1c8 Add AgentStopWait method 79bf46fd79 improve error for getStore() b04b258243 Do not clear ingress network in libnetwork 69ad7ef244 control-plane hardning: cleanup local state on peer leaving a network 34f4304a71 Sandbox.SetKey() should not reset the osl sandbox on failure 6e31451d16 print name and id infomation when has active endpoints a143df7d99 revendor x/net and gogo/protobuf to match docker/docker 869e907fcf Re-run vndr with latest version 9155e456b6 fix some misspells in api/api_test.go 9dc694de18 Always program the kernel state if triggered by l2 or l3 miss ed935930b5 Fix rename for containers on swarm network 83837617b4 Handle kernel's l2miss notification in the overlay driver 495f534317 Fix typo 9c3c86a931 Do not invalidate table event messages 4b306ee83d Fix panic in networkdb test code dce60f5afb Remove enpoint state from cluster on join failure b9d820faf4 Fix misspelling fmt verb in dnet 9272c89bb7 Clear encryption states when joining cluster bfab379411 swarm mode network inspect should provide cluser-wide task details 54d6daf95e Expose ingress network option fc2414f988 Ensure iptables initialization only happens once 442640a8b8 Update maintainers file d718efd92f Add anonymous container alias to service record on attachable network c679b071f0 fix endpoint error 200410dd18 Lock linux namespace structure when adding neighbors d07e1a02a4 Support for com.docker.network.bridge.container_interface_prefix label Signed-off-by: Wolfgang Nagele <mail@wnagele.com> eb8c603046 Add logs around service records modifications 138c4b2a77 Serialize non-atomic jump rule programming in bridge c00467aaac Removed unused integration test code 91f5b1669e Once a network is encrypted, do not accept clear packets from it 2243480e99 Fix typo in remote.md 8059597722 Fix typo in IPAM doc 4a04857a68 Fix bug in datapath key rotation in 1-1 NAT case 4208a2f75a Update the local VTEP in peerdb on receiving self discovery 66895dfdfc Clearing up windows overlay driver to just work in swarm mode e94edd6d6b Ignore previous serf user events to avoid wrong fdb programming dd10eb794c Do not hold the peer map lock during the peerDBNetworkWalk 242af665c1 handle err and fix t.Skip() in ipvs/ipvs_test.go adb8720634 Report failure in subscribing to neighbor notifications bee7d9219f Properly construct CIDR in policy selector 6a2d86f0a9 Do not leak ipvs netlink socket 2a9be357f9 Trust the endpoint state if we have a valid sandbox-id 71fff44c0b replace individual endpoint_cnt read from store with 1 bulk read 8e2ca0471c Revert "validate network and endpoint name more strictly" 4d1334c9ee Revert "Allow spaces in network names" bb560a1f44 Generating node discovery events to the drivers from networkdb a02b4ef4a4 Fix service logs 4e69afc4f3 Make virtual service programming more robust d565d5f2d2 Gracefully handle redundant ipvs service create failures 53c84ac767 Fix GetNameServerAsCIDR 5713ca4694 Remove stale files 66197b7787 Fix incorrect error log message 6f507f53e3 Fix the data model inconsistency that breaks daemon upgrade to 1.14-dev d3e7ca726d proxy: clean up code (addendum to #1598) bfd1683e74 Use vndr for managing libnetwork dependencies 6ea22f2f50 carry docker/docker #29564 3178e13246 Godep update for docker plugingetter pkg d94be29ec5 return an error on overlay subnet is overlapped with hosts c6dfc70b33 Make use of GetAllManagedPluginsForCap to avoid loading v1-plugins 69cf4bc83e Updating Godeps to pull in plugingetter dependancy 32e713eca6 fix json cdd56ba07e Prioritize nw endpoint which can provide both v4 and v6 connectivity 16af9918c0 ResolveName should return copy of IPs 11be70cf5e docs/remote.md: Remove unnecessary backquote c702e19e44 fix typos bc85efdb4f fix nits in comments 7c85ed3eac make network connect error message readable 9fb8d5696e proxy: fix an issue about half-closing net.TCPConn after io.Copy() bf832ec2a7 Add embedded DNS server support for host loopback resolver 879d94edbd Defer PTR queries to external servers based on A/AAAA response 92efad001c drvregistry to allow overriding plugin 1b28c5e01d Internal interface to differentiate built-in drivers from remote bc45d84e8d Handle the case of registering active plugins during remote init 721518279a Handling the new experimental daemon flag 6c3fc691e7 Fix fqdn hostnames not added to /etc/hosts 3776604aab Correct regexp to match v6 addresses with zone ID 0c2b4b267c Check for node's presence in networkDB's node map before accessing. c80348596b fix review comments bb8b9a6040 networkdb: Properly format memberlist logs fac86cf69a Add missing locks in agent and service code 46b59b7964 Fix incorrect debug message b495131861 Fix a bug in idm.GetIDInRange() f89d6b0073 Fixed misspelling 5217602776 Create vxlan-id space from 0 instead of starting from 1 f195563a4e Control IPv6 on container's interface e2f0070492 Fix xtables_lock message probe 23ac56fdd0 Remove unnecessary string formats 94845a80f7 Serialize embedded resolver Start and Stop 0f745fbb23 Refactoring logrus import and formatting Fix import name to use original project name 'logrus' instead of 'log' Removing `f` from `logrus.Debugf` when formatting string is not present. 69c2f8d6db Fix bug in link-local unmarshalling 684ea92515 Add a ICMP reply rule for service VIP b6540296b0 Revert "Enable ping for service vip address" 1770ced6c0 Fix bug in needDefaultGW() 27500b1e35 Separate service LB & SD from network plumbing 85b22fabbe Allow spaces in network names 763f0fa1da Set a timeout on the netlink handle sockets c3e00a2611 Update netlink @17ea11b d07d6814f3 Add a nil check for sandbox.osSbox 6afe20096d Fix bug in DeleteNeighbor 5b4059e087 Fix new golint reported errors 236dc57a9e fix unsafe acces on arm 1066f9ed5c IDM need not be bound by default vxlan-id start index cbe520b62c Add GetIDInRange API in idm package 1685e48b03 Increase timeout for local store client 83dd2c193a Respect auto allocation for --ipv6 e755b439fa Update libkv @1d84310 db69cfc151 Support attachable in network. 261fedba8c Default GW support for overlay networks 7f473c779a Refactoring logrus import and formatting This fix tries to fix logrus formatting by removing `f` from `logrus.[Error|Warn|Debug|Fatal|Panic|Info]f` when formatting string is not present. Also fix import name to use original project name 'logrus' instead of 'log' 0d32a1924e Check subnet overlap when programming of sandbox interface 0b4f68390d remove unused mConfig 99f84ff5a7 update reapNode interval 4ca7b01a5c Register remote network driver on Windows. 9f2ecdcd9d If enabling ip forwarding set the default forward policy to drop 3e11ddc4d9 Change vxlan-id start-idx to 4096 d1b012d97a Windows overlay driver support 93914ef0f6 Vendoring hcsshim to pick overlay changes c52c8ca6eb Add NetworkDB API to fetch the per network peer (gossip cluster) list 3be080496d Fixing incorrect resovler error message shown on daemon startup efc25da851 Allow concurrent calls to agentClose 807f14746d Modify the serial number from 1 to 9 a1ed5b7be2 fix nits in comments and log 4218a0a650 Respect icc option for internal networks 97915bde44 Fix some typos a21d577b8b Block non exposed port traffic on ingress nw interfaces ddc74ffced Enable ping for service vip address a7e1718800 Add sandbox API for task insertion to service LB and service discovery 53bf987984 Fix issue for `--fixed-cidr` when bridge has multiple addresses b859ce411b Do not update hosts file with internal networks endpoint IP e98b152bac Reap failed nodes after 24 hours 0a2537eea3 Use monotonic clock for reaping networkDB entries 6293a1b8ca Updated vagrant box, ubuntu/vivid64 was remove from atlas.hasicorp.com ef50edefde overlay driver support for Solaris Signed-off-by: Puneet Pruthi <puneetpruthi@gmail.com> 65356ed861 Do not use logrus for proxy eae800acf0 Fix map access race in populatedEndpoints 761722395d validate network and endpoint name more strictly 3504ed88d9 Update loadDriver to use pluginv2. a48b541da3 libnetwork support for Solaris Signed-off-by: Puneet Pruthi <puneetpruthi@gmail.com> e18c1ffd0c Avoid controller/service lock AB/BA situation 8e37c3160a add Created to NetworkInfo 433e3dfe98 Remove driver endpoints on network deleting 795697d823 Check for presence before installing forward rules 2781cb0e1e Force go 1.7.1 in circle.yml to resolve failure to get golint cff2573d1f Reset endpoint port info on connectivity revoke in bridge driver c772d14e58 networkdb: fix race in deleteNetwork a4f56880b2 Run API check to assert xfrm modules 7a51c79979 fix race in serializing sandbox to string 5c77ba43e2 Update plugingetter import path. e2008b82e8 Handle containers with different network drivers b48e25b44f Add support for NetworkAllocate and NetworkFree in remote driver 03088ace1b networkdb: fix race in access to nodes len c7b9435004 Do not add names to ingress network 47759a5d4b WIP: Update golang version to 1.7.1 f649d5ae61 Do not hold ack channel in ack table after closing ded6e1934a Clear ingress resources on graceful shutdown 003e04775b Make libnetwork understand pluginv2. 952520472f Godep changes. 22c322dded Avoid returning early on agent join failures 38338863dc bridge,portmapper: custom docker-proxy path 7b905d3c63 Purge stale nodes with same prefix and IP d1f6eb1812 Allow the memberlist shutdown even if networkdb leave fails bd7fc6431b Fix macvlan private mode argument vaildation d6e596b3a0 Serialize overlay filter plumbing a4d0e53f14 Fix test failures b0a7084c05 Honor user provided listen address for gossip 3c9d05fba5 Delay port redirect until packet reaches container 2b0d5b1339 Check for ExecFunc failure 093a017f68 Use complete port configs when plumbing mark rules 8653b72786 Lock agent access in addDriverWatches ce65a4cf2a Vendoring dependencies 7f43fd30f3 DNS support 5f5dad3c02 Recover from transient gossip failures d4f3963a26 In overlay driver reset any state on setkey() 5b632d752c Make nodenames unique in Gossip cluster e31db5d6af Name the ingress sandbox explicitly 989d9b2cc4 Check if IPv6 is enabled before restoring the network pools c9bf3b594e Revert "Add sandbox API for task insertion to service LB and service discovery" f43e4ec066 Fix bitseq.SetAnyInRange c69d42d6b8 Update Godeps ff59f1baab Serialize dynamic network creation db9a7021ac Drop queries in root doamin when ndots is set 8d63e73522 Revert "add s390x arch build info at the netlink_deprecated_linux bridge driver" 8298e278be Add sandbox API for task insertion to service LB and service discovery 56175d6f97 add missed defer to unlock ad10ae9b3b Move engine-api to docker/docker/api 68ed10ff07 Update Godeps f5516d817d Add mflag package locally to libnetwork 56de900a7b Decrement epCnt only after all cleanup 2ba6c399ea Ensure purging neighbor cache for stale deletes 6bd15397b2 don't delete the bridge interface if it was not created by libnetwork d46e5c83dd Remove pkg/tlsconfig dependency 6205a5d616 make sure the user-provided bridge interface is a bridge 7fac070519 uprev docker/docker/pkg/reexec for libnetwork Signed-off-by: Puneet Pruthi <puneetpruthi@gmail.com> bace4fb6ff Cleanup on error in ProgramExternalConnectivity bf7ef3fd7b Do not hold sandbox if not in distributed control ddcc220eb7 Adjust WaitForDetachment to also accept networkID 92e20b70e6 Fix potential deadlock in getSvcRecords() 7912e19488 Fix CircleCI b551a61694 Do not try LB populate on interface-less endpoint 416a730dad Allow reachability across services on different networks in the same host 9041996509 Nil check ingressSandbox before deleting b29ba21551 Avoid double close of agentInitDone 02ef43380e Simple support script to gather libnetwork info 1f4c1cb75c Avoid k/v store endpoint update in swarm mode 547c342c1b Add network attachment methods to cluster provider d39893a9a0 Updated godeps ba8714e585 Propage the vxlan device creation error in driver to libnetwork 4f55b50f93 Cleanup service bindings when leaving cluster 8a1092fe78 Notify agentInitDone after joining the cluster 1b027335f1 Ensure add newly joined node to networknodes 2bead02c87 Ignore delete events for non-existent entries 4b80c3411d Cleanup ingress network and sandbox on leave 6e965c03ad Reset the encryption keys on swarm leave 6d877647e1 Add a narrower SNAT rule for LB egress 55564fda1d network: fix race in read access to map 149af45509 Relax SRV name validation and fix external SRV query handling e28730d44b Fix a panic introduced by #1389 cd0b6bac4c For service name DNS resolution prioritize IP on user overlay network 2bab9b6bdb Cleanup networkdb state when the network is deleted locally 004e56a4d1 Fix spurious overlay errors 09da6a6f59 overlay: fix data race in map access 392b089170 networkdb: fix data races in map access ab02b015ef Remove unused key handling functions aced41a3d2 Make service LB work from self d19e1f22cb Fix typo in error message cd488c6d18 Do not add ingress loadbalancer on service tasks bd5051931f Fix external DNS responses > 512 bytes getting dropped b54a4b5936 Add container short-id as an alias for swarm mode tasks cfd97fc7d2 Godep update for gogo/protobuf components 3f542419ac Check size of keys slice 82457d17b0 Make sure to not remove backends on stale notices 91ec1a2cf4 Ensure drivertable entries in joininfo is uptodate 4f8c645173 Allow reattempt of overlay network sbox join 1b899469a6 portmapper: touch iptables only for IPv4 d69747e19e fix typo in comments and log 7acedb94f3 Fix crash when remote plugin returns empty address string 83b0be7f1a Check for isAgent() outside the network lock to avoid deadlocks 849712f35d Better error handling in restoring sandbox states 8af5fdb9b1 Do not create network entry in networkdb for the local node based on table event from peer bc6a60dae5 Fix bug in ipsec key rotation 8bc99ae906 Check for advertise IP when deriving ipsec nodes 147b646e79 On network creation, reset mangle rule 801bd7b3b2 Allow user to set the overlay network's mtu e415b1f495 Do not use 4 byte ip addresses in encryption code 44fabf5343 Remove UDP connection cachig in embedded DNS server b2603e895a Send truncated external responses to the client 902ead3109 Update service DB on deletion of containers in bridge networks 3c36b06cb3 Lock in isAgent() and inMaster() b042dbe312 add s390x arch build info at the netlink_deprecated_linux bridge driver df728f4e0c Remove commented code from libnetwork_test.go 47c071b654 Save the controller config on config reload 6368406c26 Adding Advertise-addr support 6aa25f33d4 Adjust container's veth MTU when encryption is on ddff1b5a87 Use fnv1-a to construct the SPI 7301999c2a added locks for all other accesses to controller.svcRecords 1e0c61c3a2 added mutex on read from controller.svcRecords map 829a4ee4be Fix several typos on macvlan docs 253c103b8c Use aead for dataplane encryption daf4c97f7a Actually retry LinkSetUp 744d5332bd ipvlan: remove endpoint from network on deleting endpoint 25f0573785 Make osl sandbox basepath configurable via execroot. 0b0678677f Update vishvananda/netlink to e73bad4 32e08e7700 Moving the UDS file out of /var/lib/docker and into /run/ 4999c5707d Fix endpoint cnt decline overflow 804f93bdff Fix update endpoint cnt to store 46f525c7d6 Overlay driver to cleanup stale endpoints 2e88dfa406 Return proper error types on sandbox creation d0192db0cd On agent init, re-join on existing cluster networks f0292e04b8 Add Virtual-IP of an endpoint as a secondary IP 9d01c1fcd5 manage network dynamic flag appropriately under various scenarios af3158ecdb networkdb: do nothing in bulkSync if nodes is empty f2ae8467e3 Avoids panic when checking for conflicts against an uninitalized network 576267bfb9 Moving IPAM initalization out of drvRegistry into libnetwork core 5202f95604 Make the docker proxy a standalone binary not a re-exec ccabedfbe3 Fix file descriptor leaks dc4487dbb0 docs/ipam.md: spelling error 8936daab5e Retain deleted entries for longer time 2988086ab1 Do not remove service record while scaling down de766cc7e6 ovmanager: Error out on vxlan id alloc failure bc89397105 Index service on both id and portconfigs 3925ea0a2d Fix panic calling `ep` instead of `endpoint` 5146f05b33 Do not error on non discovery type messages in remote driver d3b8412ac6 Update ovmanager to support maximum vni 91e8d5bfb9 Fix sanbox typo fa68f9d017 Make sure route selected is direct Signed-off-by: Clint Armstrong <clint@clintarmstrong.net> 115cdb52b3 Remove Lock in datastore for global scope 64673bce0a Remove locator check on endpoint force removal 500a255181 Fixed missing v6 enable flag in macvlan doc 5f7577bbb4 fix typos 93cada0d94 make sure interface up successful 117131c41b Gracefully handle missing xfrm modules b39f13f80e Update vishvananda/netlink 734d02c 165a1f6021 Added docs for macvlan driver 6538faa880 Do not bulk sync state which is getting deleted d7d88ce37d Make getSvcRecords() more robust ad35d257ff Match only locally destined requests for ingress c963031a44 Bridge driver to detect and remove stale network 6034058dc3 Fix infinite loop in bulk sync d5ce149555 Do not add loadbalancer to unpopulated sandboxes 48739b5868 Reduce overlay encryption log noise ec17841ea4 Switch overlay encryption to use IPSec susbsystem keys 9328f1ea1e Refresh special drivers networks if present in store acac7ee812 Add service alias support e2b0934ac2 Delete endpoint from network map for macvlan driver upon endpoint deletion f5f576ad34 Properly purge node networks when node goes away 5c5a43124a design.md: fixed anchor reference 929921a640 Add debugs for key change events in networkdb 1272f90eae Sequence non-persistent objects in cache 54f694c913 For cached connections ignore late replies after read timeout 8ee94f8349 Make sure sandbox GC is started after live-restore 2e9c30a4a1 Persist and restore overlay endpoints to handle daemon restart 41ca84c950 Populate nlHandle and use it on netns restore 8ca4ed0c68 IPvlan and macvlan driver to persist endpoints c63b7b005f Bridge driver to persist endpoints ae90761a21 Reserve addresses of existing local endpoints 055c5dd496 Add network restore to support docker live restore container fe56a8d3dc Moving MacVlan driver out of experimental 8245296aa5 Make sure node map is valid before accessing it d2cc81c023 Make sure to close nshandle in ipvs.New 297a7e9039 Change port names in agent proto 3859a7e394 Make sure to notify watchers on node going away c79a49235d Purge vniTbl after cleaning up network sandbox 78a3cf5f6c Do not rebroacast bulk sync updates 04f3247c3d Add support for ingress LB in localhost 98b571a524 Make sure broadcast queue is valid broadcasting 64d8c5f87f Resolve host-name before trying the interface-name in agent bind 96b424b9b8 Process only misses on IP belonging to network a70909792a Reserve IPAM pools before resource cleanup 8ded762a0b Update key handling logic to process keyring with 3 keys fd72f6e318 Do not wait on ack in bulksync response 8d1adbd665 Properly cleanup ingress sandbox in controller 0e284be943 Handle the case of reseting the Cluster Provider for leave cases 1dbff60121 Do not panic if failed to get ipvs family 0deffeac4b Cleanup any stale overlay bridge with overlapping subnet in hostMode 96cc604cf1 Setup external DNS servers after daemon restart with live-restore cd1362e370 Revert "Handle the case of reseting the Cluster Provider for leave caes" f65ae3c742 Fix panic if miss notification sock is nil 74fdcb1f4b Handle the case of reseting the Cluster Provider for leave caes 10fcb9dd2a Add all backend ip into service records if no vip a95260646a Allow maximum possible VNI 93b5073a7d Overlay driver to support network layer encryption 6d3fa9e0f2 Migrate libnetwork to use netlink.Handle da61c5d37f Allow to program Endpoint link-local addresses a2cc703dae Overlay driver's NetworkAllocate method must honor driver options 26ae9499f0 Set controller ingress state only if ingress 4d1a5ce968 Fix a lb rule race in loadbalancer dea36fd997 Move ingress port forwarding rules to a chain fdc385573c Do not plumb local peers as remote peers 3eff69860d Reset agentInitDone channel when leaving a cluster 6e47b07b39 Cleanup vxlan interfaces inside namespace a63fca344f Add agent initialization wait method in controller f98cfa5597 Fix a missing unlock on ingress sandbox failure 9054ac2b48 Provide a way for libnetwork to make use of Agent mode functionalities 3b3d49cc4c Do not attempt LB plumbing until sandbox is ready c4d5bbad7a Use controller methods for handling the encyrption keys from agent instead of the Provider interface methods. 0f89c9b7bc Add ingress load balancer b2b87577d4 Add support for encrypting gossip traffic 9f415d0cdb use grep to find a/an misuse 774399fd66 Fix couple of panics in networkdb 68de30a57c Update address-space in ipam-info for remote driver 1607b4be6f Update netlink to 7995ff5 de588f950d fix typos d05adebf30 Add loadbalancer support 5889b279fb Separate pool parsing from pool auto-allocation 4b549ce428 Add IPVS netlink support 034f587706 for fix CI tools/cmd/vet has been deleted 87e023dfc2 Switch to golang 1.5.4 0051e39750 Add support for SRV query in embedded DNS dec79c21f2 Convert overlay peer updates to use protobuf b93c2c69ac Vendor vishvananda/netlink b824519 b1e5178bc3 Convert endpoint gossip to use protobuf 92f074c095 Fix flakiness in dnet_exec 77abea9c1e Use protobuf in networkdb core messages 9dd822b8cc Add gogoproto to Godeps b52748bb26 Vendoring vishvananda/netlink f9bc7a684edbe780a09b87689db6cb1706bf327f b82101c4cc Protect cap access in driver() a9c9765b33 IPAM allocator to not accept a datastore update if already present bc6203bd0a Do not allow network creation if datastore is missing 651f6ea0fa Avoid persisting ipam data if it can be reconstructed abb3b9b12d Fixes #22466 Embedded DNS problem after renaming container 8c2a2ff471 Do not perform the overlap check on user chosen pool 22422dad64 Changelog for 0.8.0-dev.2 680ce6e69e changelog for 0.8.0-dev.1 f2c5ff41de Set persist flag on the dummy network object during cleanup ffdceda255 Add service support bd74df7b41 Dnet agent mode support and IT d0f96c5846 Fix cleanup logic in case of ipv6 allocation failure 0580043718 Add libnetwork agent mode support e57d2f987d don't add /etc/hosts record if ip is empty (issue #1146) b1d422b6b5 Make overlay driver work without a kv store 84682eb59a Fix bug in osl.SetGatewayIPv6() function ff2200b397 Fix default gw logic for internal networks 060aa49a70 Fix gossip network event overwriting self 24d11b1533 Fix cross compilation issues 87e4661332 Remove files for no longer used docker/swarm Godep f09dae40f7 uprev docker/docker, dbus to v4.0.0, boltdb to v1.2.0 to vendor dependencies required for build clean on Solaris 43a2b083e8 Static ip support for windows 6fb69f0816 Add driver api enhancements for gossip 088c3cafb2 Increase concucrrent query limit 6a96717344 Fix a panic in handling forwarded queries 6149b1f32f Fix bad order of iptables filter rules 61510dc222 Move the iptables setup for embedded DNS into a reexec process 04f5343139 Make o/p of ipam DumpDatabase() consistent 716af1c1ee Need boltdb Register only in tests 89e72d8888 Remove kvstore deps from datastore package 64a2d2a3a2 Fix ipams builtin package for darwin 0eb215c7e6 Update libkv in godeps 4289ea637a Make IPAM work even without a backing store 7d7b9f2405 Add support to accepting arbitrary network ID 69cf50c305 Enable cross platform build check in circle-ci c7684b5ff7 Get libnetwork to build on Solaris c0162f53a6 Add overlay manager driver e82b92182f typo fix cf65861f59 Overlay driver to check for chain presence 39bc023caf Correct the check in l3 miss handling in overlay driver 83d8a3527a Fix broken CI because of newly introduced NetworkAllocate/NetworkFree api b6d5c12ea2 Add NetworkAllocate/Free to driver api 15237db7d6 Fix IT test breakages b0d046a1af Remove all netlink/osl deps from ipam/ipamutils d81a91ebad Resolver sockets not flushed on default gw change f539be8a63 Create driver registry package 8e6d52fa80 Use newly introduce plugins method to validate plugin response 28f4561e3f Add network scoped gossip database 01c9083626 Update Godeps 865951c6e8 Persist ipam driver options d0c34749d9 tools/cmd/vet has been deleted and go tool vet works natively on 1.5+ 5e4fa21005 Fix the panic when a query response comes after the read() timesout a5aeffcb59 Fix when connecting/disconnecting to/from default gw network 12f04e292f Revert "Do not leave/delete gw endpoint twice" 3ad5bd6d88 Bridge driver needs to store the network config internal flag c957564753 Do not leave/delete gw endpoint twice 0e7a19521c Have resources initialized before deleting overlay network 22801e071f Remove pre-defined networks from package init 30d649c3e8 Fix the handling for concurrent queries over UDP cea4dd457c Do not allow overlay destroySandbox() to be interrupted a9c3a9821b bitseq: fix races 7cbc3e76f6 Handle endpoint & network object in notifyEvent avoiding id lookup bd0d8222aa Limit number of concurrent DNS queries df975778fc Log time taken to set sandbox key 5b3524af9f Added maximum egress bandwidth qos for Windows c92b196d2e Reload config should initialize only the appropriate datastore 70be85fa40 Change 'an user' to 'a user' 52da8bda47 modprobe when needed ca06f1ed80 On network disconnect clear the cached connections to external nameservers 97ce9f457f Changelog for v0.7.0-dev.10 0c22e1bd07 Avoid V6 queries in docker domain going to external nameservers 2ac1e5b088 Changelog for v0.7.0-dev.9 7ad482ffc7 label support for networks on creation 4b9dc647be Honor enableIPv6 network flag on IP allocation 8d480263c0 Fix CI 2e566e3882 Add AAAA record handling in embedded DNS server 937702b74d Format network address using %v instead of %p 639fd9a131 Changelog for 0.7.0-dev.8 9c88ee206e Log stale resource cleanup 7089723ee2 Fixing support for static mac and updating dependencies 880d0ada95 Fix netns path setting from hook 4dde205544 Fixing a possible endpoint_cnt state inconsistency issue c92a4e9fd6 Avoid network/endpoint count inconsistences 4e2e0f148b Fix nil pointer reference in ServeDNS() with concurrent go routines. 9a91bbeb4f Clear cached udp connections on resolver Stop() 2b2d011899 Reject a null v4 IPAM slice in exp vlan drivers 62c6bb12db changelog for 0.7.0-dev.7 dda75448c3 Removed experimental drivers modprobe check fcf79b55ff Bumped ipvlan kernel version to >= 4.2 e052aeaaa0 changelog for 0.7.0-dev.6 60bd944921 ipvlan slaves must inherit the mac-address from parent 64edd40fcc Use osl.InitOSContext appropriately af75e8a624 Added kernel version checks for macvlan/ipvlan fe10aae30b Adding the missing ExternalConnectivity driver methods ed9601e4c6 Make macvlan and ipvlan drivers as experimental a971c561d1 Close dbus connection if firewalld is not started 5ada0fa920 changelog for v0.7.0-dev.5 8cf7270d06 Miscellaneous fixes 392750e74c changelog for v0.7.0-dev.4 dbf16c8302 Fix veth leak in overlay driver 679ee7a070 Fixed IP information not displayed properly in docker network inspect dd48b1c688 If anonymous container has alias names use it for DNS PTR record 82f3d55fa4 Fix out of bound slice access in Delete() 1638fbdf27 Move exposed ports from Endpoint to Sandbox 51058eecec Implement DNS RR in the Docker embedded DNS server 093df0b922 Fixed a panic issue in clearNetworkResources 43e3da2f3a Source external DNS queries from container namespace 6b209991aa Fix IPAM driver documentation ea30113303 Added macvlan and ipvlan drivers 9ba3f70d8e bridge/overlay driver should fail to create network with empty ip pool passed ac1ec348ff Add nil ipam driver 13451d9a07 Fix some typos in comments and strings 92af10a0fe Extract hostname from (hostname.domainname) 0eb01bbbee Fix race in Statistics 67596cc84c Fix some typos. b1c4ec6f05 Renaming driver name to lower case for usability and allowing portmapping to surface c09c312f64 Update vishvananda/netlink package 2cb645bf57 Fix iptables.Exists logic fb4e5ff417 Chen Chun as libnetwork maintainer 1417b4ba1d Fix error message on bridge network creation conflict. 48a7860211 Fix cross compilation breakage 9e57eb5467 changelog for v0.7.0-dev.3 935150ef95 Fixing bulid break because of gofmt 209cb0b476 Allow to pass global datastore config 3ff94689ef Fixed build tags for linux files 5dc5acfa58 Handle datastore update in Ipam and overlay drivers 2fb14185cb Add a check for invalid/junk messages 9871032e4d Windows HNS integration 421a3ec5d7 Use gofmt with -s instead of goimports f6868a007f Make sure iptables chains are recreated on firewall reload 16a62955cd changelog for v0.7.0-dev.2 799369da81 getNetworksFromStore should not fail on inconsistent network state f335e2c1eb changelog for v0.7.0-dev.1 b017aeb8ca Add Santhosh as libnetwork maintainer dfe437eace Bridge driver to Warn if xt_conntrack not present 101e63f593 getNetworksFromStore should return all valid networks 5e5dc809cc Register natChain with portmapper cbb59adbd8 Set the compress flag for the responses from external DNS servers to avoid sending DNS replies > 512 bytes defcd4afb9 Change in programming iptables in container 9db2b791bc Allow inter-network connectivity via exposed ports cfb3ce460b Don't allow passing EnableIPv6 as a driver option (a label) 83f1107e59 Delete the interface on endpoint delete in overlay 74cf622463 Fix some races in getNetworkFromStore 01d2ad412f Expose the enableIPv6 setting 247e8034b8 Introduce discoverapi.Discover interface 187e179e6b Remove overlay's ipAllocator f719512ab4 Cleanup stale overlay sandboxes dbfc99eb94 Change in bridge/setup_ip_tables.go 81c586e0e5 Stop referring to requested IP address as "preferred", since it is an error if that address is unavailable. 7086da757a Handle concurrent creation of default GW network 7a76968485 expose Endpoints API for a Sandbox 36fd9d02be Set Recursion Available bit in query response and reduce the ttl 1419d96a01 Reducing the complexity in default gateway service handling a509244057 Fix predefined pool reservation 62b34aa361 Adding TCP listener for embedded DNS 411bc69949 Embedded DNS server should resolve only in docker network domain 30ef9bcf4a Retain V6 DNS server in resolv.conf; use only V4 servers for fallback 4e25ffc8d9 Loopback IP shouldn't be filtered from resolv.conf in host mode 5f22db217a Enable embedded DNS server on network connect to a user defined network 315004b575 Cache scope in network object 3d9c5a959c Fixes docker/docker#19404 a7c52918fd Force delete sandbox during sandboxCleanup 94f4fb0b10 changelog for v0.5.5 b48c479b17 changelog for v0.5.6 05bd52dbb6 Setup embedded DNS server correctly on container restart 21219731d3 IPAM to run consistency check over its bitmasks 854fe82ba1 Allow bitseq caller to run consistency check b8d2ac9b65 Honor --iptables=false in bridge f9e4b40e5e Allow network-scoped alias to be resolved for annonymous endpoint 0b07ad6202 Fixes some typo errors 4161ddd747 changelog for v0.5.4 e88b95c13f Remove `isNodeAlive` check while force deleting endpoint 5e78e49f76 Adding changelog for vendoring libnetwork into docker 02d6721763 dnet client update for -force unpublish and Integration Tests ec622bf158 Forced endpoint delete 7b64b1c293 Add internal network support for bridge networks c6dfe4b795 Fix etchosts.Update to not target hosts with given hostname as prefix 3e154b3cef EP lock shouldn't be held when trying network lock 3569adad28 Fix race in setting ctrlr for network 2db863e5d7 Global alias support 16ff947fb6 IpamOptions per network not per ipam subnet be981267c0 alias support in dnet and integration-tests 63e20c2f3d Alias support e22b54dee1 Check if present before programming IPv6 in bridge fe2fa218d8 Delete veth on ep leave in overlay driver cf7ed0a717 Embedded DNS server 1051418559 Fix golang.org/x/tools breakage in go 1.4 69fe328789 Add network options to NetworkInfo to display internal network option 31016faad5 Disable DAD for sandbox IPv6 addresses 5b82b93285 Fix default make target 797c32bcac Clean up docker chain of filter table as well on driver init 54145fdd20 Godep fixup to import miekg/dns library abaaa23a8c Vendoring netlink - bfd70f556483c008636b920dda142fdaa0d59ef9 0ce2a2dba0 Fix regex for IPv6 95f1bcc249 Change isolation rules for multiple bridge networks e026deb981 Fix up Godeps and update docker/docker packages 921be8b633 Fix up example code 2ecc6aa49e Add support for Endpoint's preferred IPv6 address 9b31fc50ba Don't treat non-nil output as error in ChainExists 6cff09f710 Check existence of network chain before creating 59e1e42ce7 Add tests for internal network 186a32acab Add internal network option 66141b879f Cleanup vxlan interface by id before creating 30ec1b5081 Bridge driver to honor IPv6 network gateway 29299b73df Allow remote IPAM driver to express capability b7d0fefabc Add overlay network support < 3.16 kernels 294b858f2c Add IpamInfo() function to retrun ipamV4Info and ipamV6Info 4cb0d27cf9 Improve ipam test coverage ad95559d74 Replaced reference to dockerinit by dockerenv for func isRunningInContainer() 256e15a6fc Increase test coverage in bitsequence 46077fcfb1 Fix mutex copy 6b40581ea5 Libnetwork to set container interface's MAC 158b2852b9 Skip defaultGw check if sandbox is being deleted 6b81e3a868 update maintainers file for parsing 44f532f16e When assigning an address for an endpoint set preferred address and options. eef129c103 Do not attempt serf query when not initialized 141c51273f Add DisableGatewayService in JoinInfo to offering drivers the ability to disable default gateway 2eadfb8290 Don't connect sbx to default gw nw if default static route is provided dc4285b9a4 Adjust ipam errors a87a58e2be Changing image file-path in design doc 1d88c10f98 Adds cnm directly to repo 20e5a0503a Add nice image illustrating CNM dee3acc574 Release address pool before removing the network from store d0f3f77432 bitseq: fix race between CopyTo and set 0ae6d496bd Allow libnetwork to compile on freebsd 84abbcefa8 Fix a couple of edge cases in service discovery ffbe62a8f7 sandbox_externalkey.go: split for cross compilation b67e986b75 Multi-Arch Support e758f136a4 Updating README 90711b0def Fix bug in bitsequence.pushReservation f24b0aae51 English please. d778845791 Fix in endpoint Info() method c1b67065e6 godeps: update coreos/go-systemd to v4 and godbus/dbus to v3 1aa88fa870 Allow endpoint delete if sandbox identifier is stale 7ff429e32d Use documentation IPv6 addresses (RFC 3849) in tests ea14d68757 libnetwork to honor explicit mac-address 7fa78a97c4 Remove redundant assignment to ep.network af7bc494f9 Allow IPv6 allocation post endpoint create 6531b0c4cd Use Docker Machine for Test Environments e4ce59b7aa Cleanup iptables after bridge network is removed 14b21d5d88 Fix bug in getAddressRange() in default ipam driver 229e735837 Clean unused variables and fix typo dd85700005 Fix bug in bridge driver 1452fc31d4 Retain sandbox only if network is not available d9ad8c961c Skip non-persistent endpoints in sandbox store 670302e66b Fix stale sandbox from store problem 967917c8b4 Fix race in os sandbox sharing 6c23d4073f Fix race in host sandbox creation e636d8398b set cntlr sandbox before cleaning endpoints in ungraceful restart case 64547e43c0 Minor spelling fix ("likey" => "likely") c8a66f5e72 Fixes a case of ungraceful daemon restart + unreachable store ab0c0df288 Add IT case for external connectivity 71207b575e Reconcile persistent state after driver config 320219829b Fix in DriverInfo() 2f03577ec8 Use serf logger for memberlist log 7b4b56169b Some functions' logic cleanup 5a0dbbd986 log an error if advertise is configured with a non-local ip-address fbb2269109 Format the code e5d280edac Tidy up the IPAM driver doc 0e2ff9dd71 Add more integration test cases 824bdec0bd Add customer_prefix to the store URL for integration test 92f7f2e1a0 Add IT case for proper /etc/hosts handling e5b34e1435 Cleanup service db for the network 4cc65d01a6 Clean hosts entries on endpoint leave 473ce7db08 Dont notify the leave if the serf is not inited 84b1ef9bd5 Fix an issue in overlay network peer EP list maintenance a687e431c0 Default Gateway endpoints must be annonymous 4850c5f1e6 Avoid duplicate entries in /etc/hosts 36a8f5822c Use simple scanner instead of regexp for etchosts.Delete de7607f509 Add benchmark for etchosts.Delete aababdc1c7 Fix the issue to parse file path for boltdb b339bb2707 Fix the issue for the --cluster-store URL with path 3da8471681 Handling container rename in libnetwork 115d2ec7d8 Do not manipulate bitseq length to reserve broadcast address 133ee32980 Fix Endpoint Unmarshal to retrieve the fields correctly 5ef8d0f038 Add watch retrigger when store restarts c3c4825f80 Purge remote endpoints from watch if it is local cdb82dc22d Synchronize /etc/hosts updates at file level 3cc33dc491 Update libkv 379609e362 Allow remote ipam driver to return nil address f1b2705d5e Do not refresh the bitmasks on all operations in IPAM 07bb3dcdba Dont fail the Get functions if there is an error in one of the stores e41a9cf59d Allow anonymous endpoint d686fbb9c4 Handle maskable error during endpoint delete 33d336ac72 Cleanup dangling local endpoints 773648507d TC for ungraceful restart of default network 96d819cb06 Make sandbox cleanup robust for ungraceful exits 27908bfeb4 Update netlink library. 316a652e6e Fixes #680 4df4ba70ca Fix the daemon panic on consul server restart afd6162240 Bridge driver should return maskable error 537ba03dd1 Use netlink.LinkByName instead of net.InterfaceByName 604753b43a Fix build image name 04126b850a Fixed Vagrantfile to use systemd script 79b37def48 Explicitly set namepsace for ipamutils.ElectInterface e0f1ac4b2e Fix ipam state cleanup logic 33aa626bc9 Add etcd integrations tests e8370e78d0 Changed Labels to DriverOpts 82e3c49b0a Fix docker daemon failed to start with multiple cluster store address ac1cf3f784 Add support for selectively running a suite b92b013820 Add overlay zookeeper test 72b8f80dc3 Ensure the parent directory for key prefix exists c42e2cf44d Update libkv godeps 3365af97c2 Initializing generic to emtpy map 6b77f04e9b IPAM driver doc 71220e2a88 Made use of map[string]string for nw options in default-gateway impl 9ae62c93dd Updated Vagrant with the latest UX 8d56508190 Change in remote IPAM API payload 6d6490b91c Check if address space valid in getStore ab8dfb54fe Separate endpoint count data from network object 74376e8676 Moved the default local and global store to new root a6c2dd75b5 Synchronize datastore apis 93bc5ed4c7 Update libkv godeps 7391338323 Make ipamutils compile for windows 750671e633 Default bridge need not have persistence in bridge driver c2064dc18d Reduce logging verbosity in allocator 6026fe772c Remove 2^32 bits restriction on bitsequence 50db985c1d Few more fixes identified during integration dbbc561c18 Network ep count increment/decrement needs retry 24339bea43 Relax restriction on IpamConfig af95bfd273 Preserve default ipam driver setting 0e04c8555e Network to expose ipam config 1ffe6fef02 Move sandbox resources when container restarts bd45253fb5 move Labels from array to map to be consistent with cotnainers 0f8a6b392f Fixed a bridge driver bug in unmarshalling DefaultBridge 3d3bd9331f Fixed a couple of error messages to address UX related comments 2401496d2a Enable network labels in Rest API 02386e85d5 Enable Network labels in backend b7c2b8111f Add netlable. KeyValue() and ToMap() 888f13d17b Make the integration tests robust be700ec0eb Add default network restart test case 268d41835d Make bridge driver networks persistent 9a8c636a40 Retire ipallocator af3eb25d44 Phase-2 bridge driver changes to support IPAM 284c9cd0f5 Revert "Share libkv store handles across datastore handles" 9c2541b774 Removing boltdb timeout 87f5a70f0a Godep update to libkv 1.9.0-integ branch f2f536032b Phase-1 bridge driver changes to support IPAM e41b4765bd Cleanup dangling sandboxes on boot up 50098e5c7b Add support for configuring TLS 2a392e5a98 Any newly added data to an existing marshalled object must nil check e5ee4ada8b Removing the endpoint name restriction b9596c89d6 libnetwork to handle allocation of ipv6 0cfaa590de Fix in handling aux addresses 3f7e26160e Share libkv store handles across datastore handles a226c36b75 Pass down store configs to driver 344b653478 Remove unconditional debug logging 94b6e5e18b Default IPAM to use ipamutils pkg a22ce0938c Add bridge network integration tests a13f78369f IPAM watch removal and multistore support 71e14dd52a Remove always-on watch for networks and endpoints d74384b1d4 Add local store caching support 782d9a4618 ipam must honor preferedIP ahead of random allocation from subPool cc1e49cbbb Fixed a bug in AuxAddresses handling in libnetwork core fd00a53019 Add ipamutils package e5d44569fb fix the regexp for matching an ip address b061382c5e Default IPAM to handle local ds 67b1e3c5f2 Fix in bitseq.NewHandle() b75601e84d Updating the network driver document with IPAM data ddcfab5f81 libnetwork <-> ipam driver interaction 2aaef377f3 IPAM driver - Add IPAM cotract and remote IPAM hooks - Add ipam registration in controller - Have default IPAM follow ipamapi contract 1081687e38 Allowing local joins to happen even when serf is not initialized fac4e67c16 serfJoin doesnt happen if self notification comes later 0b40559c69 Fix the overlay cleanup in the multi-subnet case 0066225da5 Integration with Docker Discovery 19f466369b marshal/unmarshal for overlay multiple subnets 1b393486b5 Godeps update aa3db80a5b Update overlay.md 6e327a5afb Support for multiple subnets in a overlay network caab594ffb Moved InterfaceStatistics from osl into types package e8593bdb65 Docker GCCGO CI is causing compilation errors as the varibale is declared and not used. Signed-off-by: Srini Brahmaroutu <srbrahma@us.ibm.com> a41025e9c0 Fixed a few more issues observed during docker integration 7305922385 Moving overlay configure out of Init and into network create e4e77353c9 Setting bridgename to be network-id[:12] if bridgename option is empty a42e5f0663 Flip the default for the flag AllowNonDefaultBridge in bridge driver ce44f2478d Add overlay network integration test 50ec2d3a50 Add Sandbox ID to `service ls` output 24f1845a18 Do not overwrite the /etc/hosts file on Join 08d9578e48 Updating tests to use controller.Stop() to cleanup states 27397dcbdf libnetwork to make use of boltdb ConnectionTimeout to avoid deadlock dd6b8cb408 Update libkv to support boltdb timeout e82989f845 Fix outdated docs and comments 725280d03f Providing KVObject option to skip persisting object in kvstore 72567c355b Various refactor and fixes for the previous two commits including: 1. Don't save localscope endpoints to localstore for now. 2. Add common function updateToStore/deleteFromStore to store KVObjects. 3. Merge `getNetworksFromGlobalStore` and `getNetworksFromLocalStore` 4. Add `n.isGlobalScoped` before `n.watchEndpoints` in `addNetwork` 5. Fix integration-tests 6. Fix test failure in drivers/remote/driver_test.go 7. Restore network to store if deleteNework failed 8babc3d4d3 Add local datastore to persist states of LocalScope network 56e3c1e9d5 Update godep to support boltdb backend d565a4df48 Push driver config during `Init` 1cd9c4dcaa Serialize the endpoint join/leave at the sandbox level 6b1fcf3e6a fix bad docs format f33a362b48 Introduce multi-node integration tests 09fec4e411 Allow to set bits in a range in bitseq eb54ed5d42 Support for default gateway for containers 3342e5591b Remove unwanted lock 9e6378ad57 Correct formatting in remote.md ba83cbc058 Set interfaces routes after the interface is up bd20fd4813 Add cmd/dnet/dnet binary to .gitignore 437dfd3a43 Correct perms for directory creation 2479562e72 Introduce test remote plugin in dnet d46d5178b5 Make integration-tests an indipendent target d04c177a10 Fix for zookeeper backend bb6449bedb Fix unmarshal error in endpoint interface ea4cdf441e Add simple integration test cases ebbca4814e Update libkv to latest commit 59fd1a605a Update Godeps and add codegangsta/cli 304bfd6261 Add negotiation process for driver scope 4104c0d0e5 Cleanup external sandbox from test 84ac14e295 Reexec external key handling 2682309a23 Limit valid object names 9ea1f56cdf Godeps update on libcontainer a5bd12b963 Remove multiple interface in an endpoint 636a967df1 Fix CI failure due to mistaken imports f59502e1bd Support to provide external key to sandbox 06d8585503 Make lookupSandboxID() reliable 27b37e7473 Remove possible stale containers first aade3e7a92 remove the useless get netns code in createNetworkNamespace 0e40539ebc Add integration test infra bc4160be38 Fix inability to detach service 72eb02d807 Add missing sandboxes routes 3528fd9830 Fix CI failure due to conflicting merges 5f69a077da Fix bug for `docker service ls` cc02894a50 Move test specific functions to a testutils package. 46a773fba6 Fix libkv source out-of-sync with Godeps 84a0a0a98f Fix bitsequence set() 005d8f1f52 Fix bridge driver panic in CreateNetwork 33780a2ed5 Fix go fmt errors in the build 36e7a8b168 Add TestEndToEndErrorMessage af323c7006 Don't discard error message on sending response Error messages are always discarded and it makes diagnostic difficult when error occurs. 1426728a64 For the endpoints on overlay network set the MTU to 1450 to avoid fragmentation when the vxlan header gets added d216db6ef2 Do not print the word `nil` in a log. b0dd4944f5 Add Refresh() to Sandbox ddfa448536 Allow tests to be interrupted ef659c9049 Fix resolv.conf and hosts handling in sandbox bcd996f4c3 Explicitly set namespace for all network operations 27296caeb8 Add DNS 'options' support cd3fbc2a95 Fixes ip allocation for multi bridge networks fd43ee1323 Introduce Sandbox entity 27e0db309f Adding ppc64le build tag to compile on IBM Power Signed-off-by: Srini Brahmaroutu <srbrahma@us.ibm.com> 44cb162f3d lock port mapper when reapply iptables rules c09fe6a7c1 Fix panic due to mismatched types 1f28387d21 fix typo d7803ee53a Fix ip range allocation in ipam b2ff78548a Fix preferred ip allocation in ipam 5c926bb344 idm and ipam to use bitseq atomic APIs 01d6585a31 bitseq to provide atomic functions ee31009744 bitseq to only handle and return unsigned types 467876e723 Control exported types in bitseq e5842be694 network byte order to bitseq serializer d715041cd0 Fix typo e4853a4ada Overlay driver should assign interface mac based on the IP 9169198dc6 Update vishvananda/netlink 61f3a2e253 Fix racy joinSandbox behavior 8d73de9722 Adding libnetwork support to publish on custom host port ranges. See https://github.com/docker/docker/pull/12927 for docker portion. 50ac01f7f4 Updated Godeps to the latest vishvanandha/netlink 960639fbb9 Pass the vxlan port in network endian order 1bf751ef93 Fix in bridge delete endpoint 26ac09e004 Simplify NetworkOverlaps function 021d71de29 Fix bug "...has already joined the endpoint" 5a259d55f0 modify /proc/sys only if needed 12df37fdd0 Seperates the driver-specific and network-specific iptable operations for the bridge driver. 7a5224afe4 Fix example package error e8771c868e Bug in bridge network mask c38d2d4601 Remove unused config check 0b458d70ce Fixing Vagrant to use ubuntu 15.04 to get Experimental docker working again 3da75632f7 Reorganize MAC generation functions 6901ea51dc Prefer Netlink calls over ioctl c266c843a7 Incorrect kernel version check in bridge 0c2293e0a0 Fix bridge and br_netfilter modules loading. Signed-off-by: mikael.davranche <mikael.davranche@corp.ovh.com> 092437ad0e Fix data race in controller sandboxes 140616a7d6 Simplify and fix os.MkdirAll() usage d6685f61a7 make sure the interfaces is cleared on error 6461057521 Misc fixes to ipallocator & bridge driver about FixedCIDR 88c2c05ce9 Misc fixes to ip allocation in bridge driver 2dd9a6fa75 Use sysfs to set hairpin mode 21b0927720 Fix ICC on Firewalld enabled fedora systems, add in missing firewalld functionality to re-apply configuration when reloaded b62013c24c deadlock fix in RemoveStaticRoute 83b6a338a4 Reduced the two spaces for network help, required to pass tests at docker build 94ca1f5bba make libnetwork compile on freebsd (again) 524b3dca97 Sometimes fdb points to wrong vtep 951dcbe85e FIX incorrect usage about libnetwork.New() in README.md 55e7175f64 Remove dependency on libcontainer 850bdd0923 Expose the remote driver API structs publicly. b4e87d5c98 fix for #14633, use original nexthop ip value instead of obtained via RouteGet 9487241f5c Fix duplicate POSTROUTING MASQUERADE rules 981686787b Fixed a bug in DeleteEndpoint to properly release v6 ip 90a410eb3d Refactor of docker PR #11405 f88ad7d340 fix file descriptor leak of ".../ip_local_port_range" 6692b6d072 BitSequence should unmarshal data during get 8c3c747c62 Fix incorrect error handling in bitseq constructor 6bba1cd7b1 Use IANA assigned VXLAN port 00456020f5 Adjust overlay driver for netlink api change 70429527b0 Honor driver side resolv.conf file a22d29b7cf Update vishvananda/netlink package 10444cb448 Manually bring up the host side veth interface 15759edb38 Fix networking issues in RHEL/Centos 6.6 885056b243 Use ioctls to create bridge a35025569e Updated Godeps ca7aa81de8 Some users docs with a Vagrant setup e714096b54 small typo in the requirements 1a52238be9 Use github golang tools mirror 1f1bb1700a Updating to latest netns to fix amd64 / RPI issues a3879fc169 Endpoint interface stats read fails when invoked from docker 5ac330aca2 Endpoint to expose interfaces' statistics 1cba00c62b Fixed URL used by curl in overlay readme 2e64ce637b Minor spelling fixes in documentation and code comments 6ed26709bd multi-host overlay driver quick start doc cacdd39761 netns: Update to latest for arm64 04bd8f67ad Datastore handles creating objects atomically. 1d5698936a Remove extra conditional. df56ce5f47 Update error return in bridge driver's getNetwork 28c2445dad Do not update /etc/hosts for empty endpoints 63514b2749 Resurrect firewalld support f7c37712ea Fixing a windows compile error in docker during vendor-in 34708355bd removed a duplicate and incorrect unlock 1ac72c85cb Add LeaveAll support bdeeda1703 leave must not use join options in the defer during failures 49d9787749 Ignoring locally scoped endpoints/networks from distributed delete 7084bc27f9 set the kv-provider driver labels only if it is a valid config 271bcd7ba1 Service discovery 362568467d Add/Delete etc hosts record support b40774bb02 Fix endpoint ip data-store sync issue 12ac5827e4 Updated Godeps 421ef35df2 Support driver labels ec68d342d1 Add ovrouter binary aac063b4b6 Add neighbor support to sandbox 6e4a572529 Overlay driver cc6fb95c0c Fix datastore value handling in bitseq 8b59f48537 Reading the top level element (network) from datastore on init b818ea981d Add datastore to IPAM for configuration 2677a461de Distributed delete processing e39fc16c55 Rework push reservation w/ datastore 390a9702d2 Change subnet key schema in ipam c395cf2eb6 Datastore additions to bitmask management 4c4f71e2ac Added a new RetryError to indicate the caller to possibly retry 883fc7bca4 Make bitseq.Handle thread-safe d1a16bbb84 Add numerical ids manager 1f76a79bf7 bitseq to provide handle 3ff75bd42d Reorganize libnetwork ipam datastructures a0e0d07250 Add locking to libnetwork ipam 75443aaf72 Add serialize/deserialize for sequence list 873ea8a224 Add libnetwork ipam implementation 3287a4c830 Add ipam contract 5034c9bb11 Add bitseq package 4d60688464 Update modprobe bridge output 3a8213e40a Fixed the tests. 9e7d2fe74e Fix duplicated iptables rules f843e44805 Cleaning up iptables nat table on driver bootup 11094f2645 Pass proper regex to mux for query fields c0bcb8dff3 Fixed a basic UI regression due to a recent godep update 678d50f5b5 Updating CallFunc to match the Docker CLI API changes 0969e192f2 Add implementation for lookupContainerID 04e96f3811 workaround to a minor bug in mux which filters out empty query 03504cab65 Few changes to the UI and API implementation 613e60bcec support for libnetwork daemon labels c85a58b6df Return an empty config if nil 9f3d1ce3ff Moved the TOML based Configuration to dnet b2a5ea49f3 Windows: Compiles again 3d805de246 Pass a canonical subnet to ipallocator 903fcbd154 enable hairpin mode on the bridge port & fix iptables rule 8c9c68bec9 Remove dnet binary 3b2d2aa3ee Replace swarm store with libkv 7de9f71eb5 Promote Service cli 8aaf82c5b3 Endpoint to provide ContainerInfo 0912ecfc05 Add Service hierarchy to rest api b92d253d60 Make sure sandbox files are removed after tests 9e8974cc64 Replacing isReservedNetwork with Driver capability f88824fb8a Reworked endpoint store operation to address a few cases 47a3f3690d datastore delete support for network and endpoints 8dcdbbabd0 GetObject support dca35085f5 datastore support for Endpoint 0fda541b37 Updating to new Swarm discovery and store APIs a14da7ba36 Updating to latest Swarm dependancies fcca4484cb Generate container mac address based on IP fc9b204f39 handling error condition for network and endpoint deletes 6628cf7f5a Check GC loop is active/necessary before triggering GC 8d7e5cbb68 Minor changes in bridge.go cc6d1be37e Update ROADMAP.md e27586de4e Provide isolation b/w bridge networks a0cccbbcfa Moved services to dnet top-level and removed experimental fa22255b2d Windows: Allow compilation (again) 4ceec05f1b Add support to add bridge to the sandbox. f5c1c78179 Refactor sandbox code to use interfaces 6d6aeff780 Make GenerateIfaceName generic 991f50a10c Add note on EndpointInfo semantics 8ac0d7709f Add restrictions for default drivers/bridge name 15ddc3717a Add support to trigger immediate garbage collection f770d4b448 make libnetwork compile on freebsd 65519600f0 Document the remote driver protocol 71f08ec63f Update netns to include support for PowerPC LE (ppc64le) architecture 031e09d888 duplicate endpoint error handling e67f9f4f79 Copy default configs from default Bridge to new bridge if not user configured 5fff515028 Including hostdiscovery conditionaly under a build tag 9d1cc7d56a Fixing a few go-vet issues 3be66461ba Change in bridge EndpointOperInfo() a93d08aef5 Add container join priority option to endpoint 36303270c6 Introduce UnsetGateway(IPv6) methods c3d02744c6 Cleanup libnetwork test code ea8580d1e2 Remove only the endpoint owned interfaces 5c153bd018 Add static routes to the remote driver. 5ad02e8c48 Change scope to LINK when setting device routes 0ae84dad55 Fixes https://github.com/docker/docker/issues/13426 bc70ed60cb Fix miscellaneaus data races 61993ec6c2 Modprobe bridge driver r specific kernel modules db5f2f40fb Removee the init time cleanup of namespace files 7560ca63f5 Reworkkgarbage collection code to use tick f429a2528d Loopback interface not t brought up 3ec19ff62b Workaround kernel bugs s related to namespaces 96295af687 Do not warn in packages ce64bdbd9f Fix dnet service cli help o/p 8ec7f0d7ac Remove dead code 3c0d5c3a8b Update remote driver to use destiantion prefix. cfc28a900a One port mapper per bridge network 12117f349d cleanup: remove unused variable 3ed8beaa4b json friendly struct field in API structure 800029abb6 Remove container data return value from Join 930d27c06c Add Alessandro as a libnetwork maintainer a4de736345 fix typo d56c6de9b2 Windows: Enable compile 65acaaf0b5 Allow drivers to supply static routes for interfaces ae8643748d Libnetwork Host Discovery using Swarm Discovery pkg ef1293ce5a Updating Godep to pull in Set functionality 481568035f TOML based Configuration support for libnetwork 8324230320 Godeps for TOML parser - BurntSushi 594361552e Avoid adding local reserved networks (bridge, none, host) to the datastore 87161e8935 Added Network Watch support 9b952fc982 Initial kv store integration and datastore implementation c46a023902 Updating Godep to reuse Swarm discovery and store packages 9c9c79f1b0 fixed some typos 820712cae6 Fix RemoveInterface in sandbox e20e7bbbfe Added API support for both /vx.x/networks & /networks e244043eb3 In bridge, network config to be validated last 35fab0aa6f Bridge driver to support multiple networks 5d9c59e523 Support network options in rest api a550562ad4 UI formatting applied on top of Experimental Service PR f1712c0bf6 Moved all the service commands under experimental build tag a1c3dce3e9 Added a catch-all root hierarchy for the API path 97adea5b77 Add dummy proxy on port map 49f742eaff Orthographic corrections 0653afc5f5 Service endpoint UI support b5a6c849e3 Adding support for network/id/endpoints in api 5ee5e2452f Modified Client to make use of the corrected REST API e97b1e05a8 REST API: Support query by partial id 89045ca381 Modify driver Join api to only allow dst prefix 7934979f40 Remote driver implementation dbb71728f9 Revert "Added more test coverage for portmapper package." 8942de9410 Fix test failure in api c70cfcb150 Provide interface to categorize errors 7d80a5a84a Changes in rest api a9fa764cbb Move network types to types package 407e41d394 Fix /etc/resolv.conf permission issue 56375f3687 Porting https://github.com/docker/docker/pull/12437 8c5750558a Cleanup namespace files 36a0f91b5d Initial dnet tool to test and manage libnetwork end-to-end 57628535ba Godep update to pull in parsers and term packages 977fcdd952 Client to make use of REST API 2d3758619b Fixed some basic client UI issues for the "network" command a794fa07b7 Fix Makefile 9d4b69df73 Fix panic on leave of host driver endpont leave 1589c43f9d Restore anonymus import in iptables_test.go 902e8746d3 Optional Userland Proxy 030817808c Change default namespace path b323d571b5 Driver api refactor 80ca3c2330 Remote Driver integration with Plugin Framework cb8bbd3ded Upgrading Godep to the Latest Docker Pacakages that brings in the Plugins infra 4aa71f337c Fix misuse urlNwName and urlNwID in api. 8dc3f3be47 fix createTestNetwork bug f16db2c3ad Remove pkg directory e2fea0f945 Ignore the OldHash if the resolvConfPath is invalid 1e91009978 Network and Endpoint query methods to return error on not found d96e94897e Fix DNS entry update issue 4a3c7e1bb5 Changed portallocator New() method to Get() 7ae3e91c8d fixing a link in design.md 9fad1812d9 Initial libnetwork rest api 26a5a79374 Update resolvconf and iptables packages from docker 10fafb06eb Fixed an intermittent issue in the libnetwork test 79556b1ccc Fix issue in ipv6 when a non-default link-local ipv6 address is present. 382fe75607 Simplify the code in the RegisterSubnet method of ipallocator. d69e66c894 By ID and By Name query methods to return error 1cd241686c Create a build image to avoid install-deps every time 614d82390c Make driver packages register themselves via DriverCallback 1739626f4d NewNetwork and CreateEndpoint to validate resource name 7f7d9abd87 Make endpoint Join and Leave multi-thread safe 2fc4f3154f Added more test coverage for portmapper package. 0db03ebaa3 Add some tests fd04ef2d00 Cleaning up the Endpoint Joins with proper defered Leave 27d34d67ab Fixed some convoluted texts in remote.md and fixed a remote driver bug e1003fb078 fix some typos 904a313396 Remote Driver Registration 0d45fb66b3 Added remote driver design doc df3cde525a Small typo fixed Signed-off-by: Kunal Kushwaha <kunal.kushwaha@gmail.com> 067e8977d5 Updated godeps 9714bcac87 Brought in iptables package into libnetwork. d10b8aca74 Updated Godeps 9a5217b514 Copied etchosts and resolvconf packages to libnetwork. 142825b2f3 Updated Design Document 570a76384a Handled endpoint delete with active containers attached to it 4f7eb502bf Add design documentation 3919b126a9 Added support for network specific enable ipv6 label 94a9f12280 Moved most of the driver configuration to network configuration. c9b54861e7 - Moved label definitions to a new package - Added a network scope well-defined label to enable ipv6 dc3a4a007c In bridge.go: Join(), Leave(), getnetwork() are not thread safe ff36e97f45 Properly handle Leave by - Removing interface from the sandbox - Deleting Iptable rules in the bridge driver f055e06f3a Added RemoveInterface support to sandbox. 8c2d72096f Don't fail the build on coveralls upload ec4e1da3c5 Separate ExposedPorts from PortBindings in libnetwork API 8265de6325 chang the type of ports form PortBinding to TransportPort in link.go 3b8b2ffee8 - Changed ContainerConfiguration to simply use strings - Made ContainerConfiguration fields to be exported so options package can access them. eb98e212cb Reuse existing docker chain constant in link.go 706c01073d CreateOptionPortMapping to store a copy of the passed bindings d4851b95ec Incorrect assumption with golang net package causes Overlapping IP 55099e9656 - Removed sandbox override option from the driver. - Reworked the host network mode support by introducing a new JoinOption. a983569c0c Added mac address to EndpointInfo 560d156e36 Replaced all proto numbers in netutils with the defined const db2f7c6f28 Added support for /etc/resolv.conf 4399989c53 Updated Godeps to the latest versions of docker packages. 5f8bfa8ade Added "host" driver and test code. 66eb3e1cd4 - Added support for JoinInfo so that driver can override certain container config. - Added JoinOption processing for extra /etc/hosts record. - Added support for updating /etc/hosts entries of other containers. - Added sandbox support for adding a sandbox without the OS level create. 68cae04fe9 Fixed a bug in bridge driver when docker0 has no IP address it doesn't select and configure a proper IP address. 30e2ee9793 Fix a minor but in utils parsing UDP/TCP ports 56741e7d60 Provide API to retrieve Endpoint operational data 446b158581 Link implementation in bridge driver 95c5eb2856 Ignoring Driver failure on Leave. da97978469 Remove redundant code in endpoint.go da1cddc320 Bridge to handle port mapping - libnetwork cares for list of exposed ports, driver cares for list of port bindings. At endpoint creation: - list of exposed ports will be passed as libnetwork otion - list of port mapping will be passed as driver option 781bcc94a7 Params of non-exported struct should be non-exported bfc5721970 Re-arrange MAC election code for sandbox iface 9db6a1b8e4 Join / Leave Driver API cc4f27f6af Minor API modifications 0d3ad0eaee Control scope of JoinOption functions 4bf442a510 Updated Godeps b8f81862d0 - Added Join option support - Added basic /etc/hosts generation support in libnetwork d684600cdf Added null driver support for handling --net=none and -n=false cases 713ff79ed5 Reorganized the libnetwork code to seperate Controller, Network and Endpoint d438fd59cd Port PR #11526 to libnetwork e2d8531a40 - Added support for Join/Leave methods to Endpoint. - Removed sandbox key argument for CreateEndpoint. - Refactored bridge driver code to remove sandbox key. - Fixed bridge driver code for gaps in ipv6 behavior observed during docker integration. - Updated test code, readme code, README.md according api change. - Fixed some sandbox issues while testing docker ipv6 integration. 35693a1a47 Issue #88: Handle default v4/v6 gw setting 263ee2dbbb libnetwork client base infra d152bb91c4 Added docker mflag package to Godeps 8f63aa82b0 Initial bats based integration tests for testing daemon network configs 21ed154c79 Rename setGatewayIP() in sandbox pkg 6a5e4a83e4 Provide Query API for Network and Endpoint 1c7c0f371b Add methods to walk Endpoints and Networks 6e80af6ee8 - Re-enabled Bridge test case which got disabled because lower case test case function name c6fd92a565 - Fixed an assortment of bugs in sandbox - Added more test coverage to sandbox 1fae5573d2 Refactor NetworkController interface 198e3d3ee9 Libnetwork bridge to handle MTU option 69437b1009 Libnetwork bridge to handle --mac-address option f4fd5dacbf Rename simplebridge to bridge 468ebf3816 Issue #68: In bridge.go driver remove veth on endpoint delete 3da12c7219 Add TestSandboxInfoEqual in sandbox_test.go 7d24e974cf Refactor driverapi, sandbox pkgs dee9e06bbb Fixing a few typos 95958d7610 Enhance Endpoint interface a004b52ab3 fix some typos f151cc23ab Add Network method to return list of endpoints 88eb07fb8d Update Godeps docker/pkg/common => /stringid 8098113830 Fix libnetwork_test.go 0957eed04b Minor language cleanup in ROADMAP.md d449658d91 Expose Endpoint IDs in their public interface. e91ed59cb2 Changed all the naked error returns in bridge driver to proper error types, except the naked error returns which were just prefixing strings to previously returned error strings. 3e6a889cd6 Port Allocator as a libnetwork package 38ea74e2b5 - Fixed the makefile which was not checking failures in test code - Cleaned up the makefile to remove output clutter b0a38a0d1b Fixed a bug in bridge driver where when the bridge already exists the bridgeInterface.bridgeIPv4 is not getting initialized properly 56c3adda07 - Added more testcases for libnetwork API testing - Added new error types for all of libnetwork errors ec7d417a37 Added a test binary to test README.md code 8fe2d88db1 Fix typos and formatting in docs. Add Godoc badge. e797f80ad4 Added driver specific config support - Added api enhancement to pass driver specific config - Refactored simple bridge driver code for driver specific config - Added an undocumented option to add non-default bridges without manual pre-provisioning to help libnetwork testing - Reenabled libnetwork test to do api testing - Updated README.md d8f88b2afb Name/Mac generation and libcontainer dep removal 2c797384ff Report Code Coverage and Add Status Badges 6c0ffdd70a Added unsupported implementations for sandbox and sandbox test code 0a25032277 Converted IP address and gateway values to be proper types rather than strings in the sandbox and driverapi protocol 53c755b79d Updated godeps 68ae284db5 Libnetwork refactor for container network model - Added controller, network, endpoint and sandbox interfaces - Created netutils package for miscallaneous network utilities - Created driverapi package to break cyclic dependency b/w driver and libnetwork - Made libnetwork multithread safe - Made bridge driver multithread safe - Fixed README.md 1f3f37b2f8 Sync libnetwork code to latest docker/master 2d364e2c34 - Added support to bridgeNetwork.Link - Removed MAC and MTU configuration via AddInterface 7b05ee2ac4 Added initial README and ROADMAP files d1a6ee35ea Run libnetwork test case only when it's specifically enabled 5d7b430801 Issue #33: Move portmapper and portallocator into libnetwork bc59294da8 Point to Docker contrib guidelines in README 18d485a466 Add Makefile 4ac519f7b6 - Added initial test cases for libnetwork api - Introduce delete api f76372ed74 Add MAINTAINERS 68d223a0e0 Issue #18: IP Allocator rework f2d7564f2c Resolve Godeps 694c5ee788 Reimplement create namespace and move interafec to ns without reexec This removes the dependency on reexec so that libnetwork can be used as a library. 2d16187d8c Refactor the drivers interface to get rid of reflect way 6311a96710 Add implementation and test for SetupIPTables() fc6b36e2bb Fix Godeps in CI db5d4c3de3 Use Godeps 0ac3833edb Circle CI 2457d2549f Fix govet warnings edebcebfee Circle CI e718ea9d2a Circle CI 4e22b7b1f7 Add circle.yml 6424c7a875 Remove golint warnings 58a3934282 Add a diagnostic message to ip forwading code e40794cdc4 Fix minor static analysis issue in setup_ipv4.go 80809c42c6 Add implementation and test for SetIPForwarding() b9bd3a7dd0 Add network name ba111871ea Renaming and comments cb96e4149d Test coverage 94e8db8774 Next steps 882f4d7e74 Add FixedCIDRv6 test 3845ec20c4 Test coverage on bridge 8ca185e2ee Move bridge to drivers/ 38f01266e3 Add tests 3125c1f7c7 WIP - Code moves 4a8b8498a7 WIP - Remove commented code 46864de1d7 WIP - Fixed CIDR v4 and v6 796d58af9e WIP - Bridge refactoring 1f3b1febc7 WIP - Bridge refactoring 76a8cbba11 WIP - Bridge refactoring 8ad4ec910b Generic argument passing to drivers 79ae90940c Generic options model 7d4450e647 Unexport reexec symbols 8ebeb1da5c Rename strategy to driver 0d29ca540f Initial import d7c688f0f6 Initial commit cli: update to -tip Bumping docker-cli to version v23.0.0-beta.1-8-g83ca73f9a, which comprises the following commits: 0f6023a9c vendor: github.com/docker/docker v23.0.0-beta.1 016846e95 update to go1.19.4 0e15d73c6 Dockerfile: update buildx to v0.9.1 006c94638 cmd/docker: make feature detection lazy again 20ba591b7 Fix bug where incorrect response is returned 121c61387 cil/command: use dummy client for build-tests 21e45ff85 cli/command: add WithAPIClient 60833d204 docs/reference: exec: update some examples cac78c237 docs/reference: info: update example output 9ba371f66 docs: update examples to not use deprecated images 74086bc93 doc/reference: update attach reference 82805ad71 docs/extend: remove note about first supported version 3da0e959d updated additionalHelp text e547881e2 Fix ssh process killed when context is done 1b0d6fc80 Dockerfile: add ALPINE_VERSION build-arg 60b09ea7f vendor: docker/docker v20.10.3-0.20221201203946-b21e8f72f254 (v23.0.0-dev) 1768240bc cli/command/container: runPort: sort ports before printing c5613ac03 cli/command/container: TestNewPortCommandOutput improve test 58487e088 cli/command/container: runPort(): slight refactor f0435fd3f cli/command/container: runPort(): update godoc, and add todo f2566760a Update AUTHORS header to indicate it's generated b81acd7c4 Update mailmap and AUTHORS 25c06c755 vendor: docker/docker v20.10.3-0.20221201081640-bb2eab21c6db (v23.0.0-dev) 2c9dff143 cli/command/context: context ls: always show current context ed4b0a67b cli/command/context: context ls: add ERROR column, and don't fail early 14f97cc10 cli/command: DockerCli.ServerInfo() load info lazily 3b7235edc cli/command: initialize client and load content lazily 2c41bbc49 cli/command/task: taskContext.Error(): use ellipsis utility 0ed80a3a5 cli/command/formatter: NewClientContextFormat(): unconvert 30a0d0c6d cli/command/formatter: define const for error column-headers 60987b8d7 cli/command: DockerCli: keep reference to options for later use 181769f18 cli/command: remove DockerCli.loadConfigFile() 36441fc5f cli: NewTopLevelCommand: don't use unnamed assignments 6ba7de3b5 cli/command/context: "docker context show": don't validate context a7e2c3ea1 cli/command: add Cli.CurrentVersion() function 536aef9c6 vendor: update github.com/moby/term to fix interrupt handling a52d922f8 vendor: golang_protobuf_extensions v1.0.4 - prevent incompatible versions 13493edcd Add Sam Thibault (sam-thibault) as curator da6b2ab9e docs: update version to v23.0.0-dev 7c123d37c Update version to v23.0.0-dev 7d597de96 vendor: docker/docker v20.10.3-0.20221124164242-a913b5ad7ef1 (v23.0.0-dev) dbffb29ff vendor: github.com/moby/swarmkit/v2 v2.0.0-20221123162438-b17f02f0a054 9c42cd9a3 cli/command: TestInitializeFromClientHangs fix unhandled error e36d5a092 cli/command: DockerCli.CurrentContext: improve GoDoc 793f09705 cli/command: resolveContextName() move conflicting options check 2f5698511 cli/command: resolveContextName() don't validate if context exists 592d90caf cli/command/context: minor cleanup in runList() 0cc3f688d cli/command: use more descriptive const in test acb934cc9 cli/command: move default context description to context itself 3499669e1 cli/flags: merge CommonOptions into ClientOptions 6a734df1c cli/context/store: make sure we handle wrapped errors a51ce7ca9 go.mod: github.com/google/certificate-transparency-go v1.1.4 7d4450dbb vendor: docker 394f6c14add7c1a5a80257c9111f43b7edc78d0b / v22.06-dev d4b51a343 vendor: github.com/moby/term v0.0.0-20221120202655-abb19827d345 1158788c8 Remove deprecated note 700099159 update gotestsum to v1.8.2 e064f893a docs: docker inspect --size 802c53fa9 docs: docker inspect: reformat with prettier bf3f419b6 cli/command/stack: TestConfigMergeInterpolation: various fixes 4d2fb68b9 cli/compose/loader: fix error messages, and various tests 5aba4860d cli-plugins/manager: TestPluginError: don't use yaml.Marshal 0644aa390 cli/compose/types: UlimitsConfig.MarshalYAML() fix recursion c18dd2719 cli/compose/loader: TestMarshallConfig: fix duplicate version 845f002d3 vendor: docker d15be0c54de92a4d868ebd66dbb1065e264554f2 / v22.06-dev 722cde068 vendor: golang.org/x/sys v0.2.0 275b7ddd1 vendor: github.com/sirupsen/logrus v1.9.0 f51c4ff31 vendor: docker cd8873dd3d21b1fc1b957c98dcd0f5c7a507fb70 / v22.06-dev 86038fdb6 vendor: github.com/containerd/containerd v1.6.10 88b33a667 vendor: github.com/moby/buildkit v0.10.6 af3007960 vendor: github.com/moby/swarmkit/v2 v2.0.0-20221102165002-6341884e5fc9 633ef7a09 vendor: golang.org/x/crypto v0.1.0 (fix OpenSSL > 9.3 compatibility) 880b7fc67 vendor: golang.org/x/net v0.1.0 0f568cfa9 vendor: golang.org/x/text v0.4.0 63ea1e424 vendor: golang.org/x/term v0.1.0 57b6ed34c vendor: golang.org/x/time v0.1.0 7b3900145 vendor: golang.org/x/sys v0.1.0 c855e4ba3 vendor: gotest.tools/v3 v3.4.0 46ba87dcf vendor: github.com/google/go-cmp v0.5.9 to remove golang.org/x/xerrors 85eee32f4 Update to Go 1.19.3 to address CVE-2022-41716 997846918 build: keep "buildx install" behavior d1cabdff9 build: set default context builder if not specified 8dec4bcce cleanup leftovers for --stream build flag d978d0dd5 go.mod: github.com/spf13/cobra v1.6.1 02e782692 Add compose support for cluster volumes 7c0d6ecf6 docs: update link to docker cp bfcadab0b docs: improved docker run cli reference 684dcd7b6 Fix the max-concurrent-downloads and max-concurrent-uploads configs documentation a7717513b docs: fix links to BuildKit backend 67e6ba0d0 vendor: docker 5aac513617f072b15322b147052cbda0d451d389 / v22.06-dev 5d78cc13a vendor: docker v20.10.3-0.20221021122114-f9cb47a052b (22.06 branch) 6fe31557c vendor: docker v20.10.3-0.20221006185438-87d9d96ab0b6 (v22.06-dev) 9505330b0 Remove "experimental" gates around "--platform" in bash completion 759f3aa10 vendor: github.com/moby/buildkit v0.10.5 3da9499e5 fixed the plugin command docker-runc 68330e099 add ability to override ints in compose files with 0 aea2a8c41 docs/reference: run.md update confusing example name bacc5e3aa docs: update deprecation status for "overlay2.override_kernel_check" 4648c0084 docs: use correct separator in --security-opt 485f1f79c Update to go 1.19.2 to address CVE-2022-2879, CVE-2022-2880, CVE-2022-41715 c2f167159 Use gofumpt if available, and enable gofumpt linter 616124525 format go with gofumpt (with -lang=1.19) 1da95ff6a format code with gofumpt cd7c493ea cli/context/store: rename removeAllContextData(), removeAllEndpointData() 09c94c1c2 cli/context/store: List(): don't interrupt listing for not-found errors 951bb481c cli/context/store: New(): return concrete type de6020a24 cli/context/store: simplify error handling, and make it more idiomatic 38f54e792 cli/context/store: remove filePath(), make contextDir() accept name 9720d5b45 cli/context/store: listContextData(): accept name instead of ID 712cc9a1c cli/context/store: remove(): accept name instead of ID 0bcdff257 cli/context/store: getData(): accept name instead of ID 3b7f13a5e cli/context/store: createOrUpdate(): accept name instead of ID c3eb116f9 cli/context/store: removeAllEndpointData(): accept name instead of ID 42e275eaf cli/context/store: TestTlsCreateUpdateGetRemove(): use correct ID d0398c423 cli/context/store: removeAllContextData(): accept name instead of ID f843c42c0 cli/context/store: listRecursivelyMetadataDirs(): use filepath.Join() c6dfff131 cli/context/store: metadataStore.get(), .remove(): accept name instead of ID 90f1238fb cli-plugins/manager: add IsPluginCommand(() utility 7af8aac16 fix broken alias check is buildx is installed as alias for builder a9ccb6552 cli/compose: remove redundant reflection from tests 9a493b1bf docker context rm: allow --force to ignore non-existing contexts ef2a82663 vendor: gotest.tools v3.3.0 28b0aa9f1 replace uses of deprecated env.Patch() 843e71672 vendor: github.com/docker/docker-credential-helpers v0.7.0 de2105d15 vendor: docker v20.10.3-0.20220922131805-e143eed8bc4f (22.06 branch) 90db6b82a cli: use N/A as placeholder for old CREATED dates 0253634f5 cli: hide old CREATED times, instead of "52 years ago" beb92650d vendor: docker v20.10.3-0.20220909113731-8af2e62556de (22.06 branch) 8771b956e vendor: github.com/klauspost/compress v1.15.9 3a17d8a90 Update to go 1.19.1 to address CVE-2022-27664, CVE-2022-32190 07ac2d8dc update to golang 1.19 fc7e831a6 vendor: golang.org/x/net v0.0.0-20220906165146-f3363e06e74c 1061f7449 Update to go 1.18.6 to address CVE-2022-27664, CVE-2022-32190 0dd2c1808 golangci-lint: update to v1.49.0 for compatibilty with go1.19 3dfdaa645 linting: assigned to src, but reassigned without using the value (wastedassign) 98654202c linting: G112: Potential Slowloris Attack b58731fa4 linting: ST1005: error strings should not be capitalized (stylecheck) b508b0fc3 linting: ST1017: don't use Yoda conditions (stylecheck) 7cec7101c linting: tabwriter: ignore stylecheck cef858170 linting: os.Setenv() can be replaced by `t.Setenv()` (tenv) ce01160e7 linting: ST1019: package is being imported more than once (stylecheck) 491407b54 linting: remove unused nolint comments (nolintlint) d3d9301d2 linting: use consts from stdlib (usestdlibvars) c645c9928 opts: remove unused RuntimeOpt 0e4f0e4a7 vendor: github.com/docker/go-units v0.5.0 67ae2c097 cli: createContainer() remove intermediate variable 23a0fb071 vendor: docker v20.10.3-0.20220831131523-b5a0d7a188ac (22.06 branch) fb0788f18 build: replace uses of archive.CanonicalTarNameForPath e484243c2 cli/command: NewDockerCli(): use WithStandardStreams() eaf6461ee vendor: golang.org/x/sys v0.0.0-20220825204002-c680a09ffe64 0e3d54261 replace pkg/system Sequential funcs with moby/sys/sequential 948482b77 vendor: docker v20.10.3-0.20220826112928-d2590dc3cd4f (22.06 branch) b105b22f1 vendor: github.com/moby/buildkit v0.10.4 649aa6175 vendor: golang.org/x/sys v0.0.0-20220728004956-3c1f35247d10 440fb75c9 vendor: github.com/containerd/containerd v1.6.8 da81c096b ci: add concurrency check fd5590dcd chore: dependabot to keep gha up to date d598646f1 ci: update github actions 304c100ed complete the "-g" / "--graph" daemon option deprecation c24ec2502 Update issues form 6eec719d3 update cli-docs-tool to v0.5.0 ad2bff2c0 Dockerfile: update buildx to v0.9.0 f41cbf9dc Move notes about required buildkit 2475b07d0 Update link to libnetwork docs 6191b662b Update golang to 1.18.5 1d9ab7803 cli: set timeout connection ping on sockets as well f87d7ed86 context use: don't create/update config file and directories if not needed cee286ff6 context use: skip validation for "default" context 50893d72d also treat DOCKER_CONTEXT='' as unset aa7b1b24a command: treat DOCKER_HOST the same if it's empty or unset 6f799c1a1 dockerfile: llvm needed on debian for cross comp 87b085c8c missing DWARF symbol table 049811fef cli/command/context: remove newContextMetadata() utility 5ed92699f cli/command: remove WithContextEndpointType() as it's unused 6874c2e80 cli/command: remove unused args from ResolveDefaultContext() 07113638c vendor: docker v20.10.3-0.20220720171342-a60b458179aa (22.06 branch) f175f5d17 vendor: remove replace rule for github.com/gogo/googleapis 65d45664b vendor: golang.org/x/sys v0.0.0-20220520151302-bc2c85ada10a 82427d1a0 format (GoDoc) comments with Go 1.19 to prepare for go updates 046e7e61f update golang to 1.18.4 a4caf8e89 remove uses of client.IsErrUnauthorized() 0b1b5957c Removed feminine reference e7a1f14d3 maintainers: Add Paweł Gronowski as curator c25ff58cb maintainers: Add Bruno de Sousa as curator 80b1285fe cli: use custom annotation for aliases 190dac77b container: validate --pull option on create and run 2d88c896b cli: print full command as aliases in usage output 5a434d8f7 cli/command/container: rename variable that collided with import a929ac0f3 vendor: Bump github.com/spf13/cobra to v1.5.0 f3ed630f8 docs: dockerfile reference moved to buildkit repo a141f1c26 command/exec: Fill ConsoleSize 9373b2611 vendor: github.com/docker/docker 4eb1c5bd52afa08595d9a082a9ba05c81f79be07 e458cf1af Improve doc code formatting 7227c0145 docs: fix misleading example of setting an env variable for a single command a51ea675b opts: fix potential panic in trimQuotes 0929bed42 Fix psFormat's Size handling in config file 8e0afc648 bake: align platforms 0f6a0eb2d bake: use no-cache-filter for outdated stage 0c17225df Dockerfile: update xx to 1.1.1 c47aa3dfa info: fix output including "Labels:" if no labels were set 787077d41 docs: add missing --no-trunc in example cc78788bb vendor: github.com/docker/docker 38633e797195643580ce5c4af7c5422aad3eb7de 1f179ac65 vendor: github.com/docker/docker cf4595265e7703e1e9745a30f1dd265acbc075d3 a4ffbcd95 update AUTHORS and mailmap 1d85b4d0e Deflake TestVolumeCreateClusterOpts 2119f425b docs: reference: version: add info about API version negotiation 99bb525f9 docs: reference: version: improve description aa720f154 update golang to 1.18.3 b9e2659a0 info: update plugin section to show installed path 86a7a7aa7 vendor: github.com/docker/docker 3e32104e0e39af9019a3ea9aa7093bb7c97fcf05 73c6231b4 vendor: github.com/docker/docker cb01202de88e20d5699c76efe948dfb065da873f baafc8f28 vendor: github.com/docker/docker 8abb84c7342a19009d777ef3d871c0b2a5c032a5 d945856e6 vendor: github.com/docker/docker d633169483bbe22b92b8310c47e827451b594364 8378b4277 vendor: github.com/docker/docker c9d04033d443e359e73e5da58a6b46ec1b8f2373 6d3bda1e7 cli/container: Move filling ConsoleSize to create 3997f3431 Added Swarm Job support to Stack Deploy 77e8c6f68 Update version to 22.06.0-dev a1c4af764 docs/deprecated: update version to 22.06 86c30e6a0 add --signal option to stop and restart 5eb24bfd1 completion: remove options related to deprecated cluster-store 1fafae3ef info: remove cluster store from docker info output 28e2b92b5 docs: remove documentation about deprecated cluster-store 7236f7824 man: use "console" hints in markdown a7c8cb514 remove unused poule.yml a2e9ed3b8 cli/command/container: use RWMutex for stats to allow concurrent reads 34dd43bf1 cli/command/container: some small performance optimizations for formatting stats 7bcc03d97 cli/command/container: add BenchmarkStatsFormat() 868adb13c lint: update some nolint comments: 0fab8ecf3 volume: annotate cluster-volumes flags for API version and swarm 3455580eb Add cluster volume support 9bf28fc00 vendor: github.com/docker/docker f1dd6bf84e28930e1ccd903361f9284fb22d3b8a 20138a81b docker kill: don't set default signal on the client side 66b905650 completion v2: some small follow-ups cbec75e2f Adopt Cobra completion v2 to support completion by CLI plugins b59219f0e vendor: github.com/moby/buildkit v0.10.3 ef3790757 vendor: github.com/docker/docker 7c69b6dc08c7 1629df514 vendor: github.com/containerd/containerd v1.6.4 05279c7c6 vendor: golang.org/x/sys v0.0.0-20220412211240-33da011f77ad f5d16893d update golang to 1.18.2 13e053387 Fixing stats race condition 9dc54f3fb info: don't print server info if we failed to connect e96e17d10 info: improve handling of empty Info 2585b6a79 Fix dead external link b901f5d14 TestSaveFileToDirs: use filepath.Join() 0c2d0072c Sleep for 1.5 seconds before looking at the resize error db141c21e hide swarm-related commands based on the current swarm status and role 374d0f88c cli: initializeFromClient(): detect swarm status from ping (if available) 9598c4c90 Retry initializing TTY size a bit more f1632c0dd remove some swarm annotations from flags 2d74be89e contrib/completion: remove orchestrator flags from zsh completion ea0ae30d8 contrib/completion: remove unused options variable 6cee6085d Add example get API version 863780d0d vendor: github.com/moby/buildkit v0.10.2 b3f3beb73 vendor: github.com/klauspost/compress v1.15.1 acf6aee91 vendor: golang.org/x/sys v0.0.0-20220405210540-1e041c57c461 165c5da00 vendor: github.com/Microsoft/go-winio v0.5.2 11924f498 vendor: github.com/moby/swarmkit/v2 v2.0.0-20220420172245-6068d1894d46 7aa0b273e vendor: github.com/docker/docker 2ed904cad7055847796433cc56ef1d1de0da868c 15301e7cf vendor: github.com/containerd/containerd v1.6.3 57e28d64d vendor: github.com/miekg/pkcs11 v1.1.1 15be07a07 vendor: github.com/opencontainers/image-spec v1.0.3-0.20220303224323-02efb9a75ee1 381fb1dbd Remove unsupported alias from `docker stack config` help output 6712447e4 Remove bash completion for deprecated orchestrator flags 14d7fe441 Add bash completion for `docker stack config` 0ea587b0d Add --force option to network rm subcommand 052b4086b cli/command/image: remove use of docker/docker/pkg/urlutil 7b4d7717b Always set the console size fd2bc1fa5 use our own version of text/tabwriter e9a4d7e61 introduce `context show` command 9fc2dd497 Add Djordje Lukic to maintainers c3fe1b962 update golang to 1.18.1 05ae1fdd2 Add Nicolas De Loof to maintainers 95b0c43e4 docs: deprecated: add entry for "fluent-async-connect" log-opt b66f4b2c2 cli: use "Swarm Subcommands" instead of "Orchestrator" aaa912c9f move commonly used top-level commands to the top of --help a058f9774 remove exec, push, pull, ps, images, info from "legacy" commands cea26ac86 commands.AddCommands(): re-order/group commands ed71a5091 move global flags to end of --help output ae611f4c0 move orchestration commands to their own section in --help output bb610a59b cli: annotate "stack" command to be a swarm subcommand bbc95c7bb remove "Experimental" client field from "docker version" 51a84fe86 cli/command: fix documentation of CopyToFile mentioning ioutil cff702d88 Add merge to ShellCommand properties in config fbea85d47 Change merge strategy for service volumes dfc214115 Add stack config command 51aa683a8 cli/command/system: remove printStorageDriverWarnings() f3a6e7ede docs: update deprecation status of "experimental" cli 47cad508a docs: update deprecation status for overlay(2) on backingfs without d_type 60a0e67e0 docs: update deprecation status of legacy overlay networks 9630e1490 docs: update deprecation status of aufs, overlay, and devicemapper 41fd1c49b update deprecation status of --kernel-memory(-tcp) 49a7d75a2 docs: reformat table for compatibility 167a624bd Update v21.xx to v22.04 f06606f60 Update version to 22.04.0-dev ee218fa89 Deprecation: config: remove support for old ~/.dockercfg b1f18b700 fix: remove asterisk from docker command suggestions 94e08f2e2 Makefile: don't warn "outside container" for some targets 90b60b5d8 Dockerfile.dev: set prompt, add nano and jq, and set MOTD 258640ab4 Makefile: add missing help messages for some targets 62bf7b703 update mailmap and authors 8fd92f186 scripts/build: make sure build-time is in UTC 72ed7bd3e scripts/build: fix date formatting on macOS bcd4101f3 tweak description of login/logout 028d5c39b Dockerfile: update buildx to v0.8.2 4b35192d7 docs: reference: remove trailing space to fix yaml formatting b7b923db4 tweak description of "docker push" and "docker pull" commands 6e6652b70 tweak description of "docker run" command ac22b2bf5 tweak description of "docker exec" command 9688f62d2 fix race condition in TestRemoveForce 22edabb58 fix version quad logic that trims 0 digit so returns an empty one 525845572 trim leading 0 for minor in the version quad 391e6ad94 use GO_LDFLAGS instead of LDFLAGS to prevent inheriting unrelated options 801113fb8 cli/registry/client: remove unused IsNotFound(), and slight refactor 48745da16 cli/registry/client: remove unused RegistryClient.GetTags() e83d6cd2c cli/registry/client: remove unused GetRegistryAuth() 04347f793 context: Endpoint.ClientOpts(): use client.WithVersionFromEnv() 1db2da57c use client consts for environment variable names 2b976720f docs: add anchor-tags for flags 885f44a5b docs: fix (table) formatting, fix some broken links b87a0c1b0 docs: build: add named anchor tags for flags 7d4ae1375 docs: build: fix minor markdown and syntax issues ccbaaf072 search: remove client-side default for --limit 2dc178c80 search: change "the Docker Hub" to just "Docker Hub" f00c06f6c docs: commandline/index.md: reformat tables a3c4a42d4 Dockerfile: update buildx to v0.8.1 8e2d63d5d Fix flaky TestContainerList tests 635c55d52 update go to 1.18.0 bf29b40a8 staticcheck: ignore SA1019: strings.Title is deprecated a1e67401d vendor: github.com/docker/docker 8941dcfcc5db4aefc351cd5b5bb4d524823035c0 dce592979 Update to debian bullseye d45030380 Dockerfile: prefer ld for cross-compiling arm64 in bullseye 3ffe6a337 lint: update golangci-lint to v1.45.2 4ab70bf61 linting: fix incorrectly formatted errors (revive) d7c1fb911 linting: ignore some "G101: Potential hardcoded credentials" warnings 5a65aadd8 cli/command/container: unnecessary use of fmt.Sprintf (gosimple) d382a7103 update run.md c569d2574 Bump cobra to v1.4.0 bc2b48aaf e2e: cleanup TestGlobalHelp() to be less brittle 4cd2d9ddd Change "COMPANY_NAME" to "PACKAGER_NAME" a0f057829 gofmt with go1.17 f3a05eb80 vendor dependencies with go1.17 6119e4ba9 update go to 1.17.8 3a1fc21e7 Dockerfile: use xx-apt-get instead of xx-apt e20572d04 scripts/build: make sure osusergo is set for static with CGO enabled 40d801662 Dockerfile: update xx to 1.1 5f74020de vendor: github.com/moby/buildkit v0.10.0 adadd5472 vendor: github.com/prometheus/client_golang v1.11.0 7408799ec vendor: github.com/prometheus/procfs v0.7.3 29f799aae vendor: github.com/containerd/containerd v1.6.2 b2cef834f vendor: google.golang.org/grpc v1.44.0 51ef2ccff docs: hyphens are not dashes bc2c8d759 vendor: golang.org/x/crypto v0.0.0-20220315160706-3147a52a75dd 994d6b7fc Dockerfile: use syntax=docker/dockerfile:1 4f118c763 vendor: github.com/docker/swarmkit 616e8db4c3b0 02a06cf9a vendor: golang.org/x/time v0.0.0-20210723032227-1f47c861a9ac bc54802f5 vendor: golang.org/x/term v0.0.0-20210615171337-6886f2dfbf5b 56f51a35c vendor: golang.org/x/crypto v0.0.0-20211202192323-5770296d904e 1bb259144 vendor: golang.org/x/net v0.0.0-20211216030914-fe4d6282115f ce2e036ad vendor: github.com/opencontainers/runc v1.1.0 fdbb5953a vendor: github.com/klauspost/compress v1.15.0 2b7cb5b1b vendor: github.com/cespare/xxhash v2.1.2 119c7fb84 Fix CMD --ignored-param1 example b4ca1c736 registry: don't call "/info" API endpoint to get default registry 9c0234bbc Output compact JSON by default for --format=json d8ecb00dd Update shell completion scripts b4af79968 Update reference documentation 0611be0f0 Update man pages a4a734df4 Update list commands with better format flag description eb27a94c3 Added "json" as specific value for --format flag in list commands, as an alias to `{{json .}}` 84d47b544 Add "json" as default value to format flag in all inspect commands. c700bbcb4 Add specific "json" value to format flag with inspect commands to output json, as empty flag does. Added tests on that new behavior. 831704e56 search: do not sort results by stars on client side 4f1ba37e1 docs: remove note about buildkit not supporting git subdirectories ab35e3fac Handle relative source mounts e5f5d946e docs: dockerd: fix broken link in blockquote area de0549926 align wording of push --all-tags parameter description dc9e069ff vendor: github.com/docker/docker v20.10.3-0.20220309172631-83b51522df43 e90cb7515 vendor: github.com/docker/distribution v2.8.1 30e47e5a0 vendor: github.com/prometheus/common v0.10.0 576e4dce4 vendor: golang.org/x/text v0.3.7 7880acb05 vendor: golang.org/x/sys v0.0.0-20220114195835-da31bd327af9 6da0fc299 vendor: github.com/moby/sys/signal v0.7.0 4adea808c vendor: github.com/google/go-cmp v0.5.7 12b06fa37 vendor: github.com/coreos/etcd v3.3.27 16554e999 vendor: github.com/containerd/containerd v1.5.10 41a5e0e4d improve cp documentation with some illustration examples fe8a12c62 vendor: github.com/opencontainers/image-spec v1.0.2 3669aa351 vendor: github.com/Microsoft/go-winio v0.5.1 257f6149b Remove ClientInfo as it is not practically used. ac06c971f remove unneeded "digest" alias for "go-digest" e40529aa3 use consistent alias for api/types/registry b7e4f3daa remove alias for cli/config imports cc08fc1af Implement WithDefaultContextStoreConfig() DockerCliOption d35b50c0c NewAPIClientFromFlags: rename variable to not collide with import 398026d31 vendor: gotest.tools/v3 v3.1.0 58747a631 vendor: github.com/google/go-cmp v0.5.5 9f0430b8f vendor: remove redundant replace rules 5b9256333 vendor: move github.com/moby/sys packages to "requires" ("indirect") 8a3e3b22a vendor: gotest.tools/v3 v3.0.3 20b5dfa59 vendor: gopkg.in/yaml.v2 v2.4.0 a26de1de0 vendor: golang.org/x/text v0.3.4 7917946a5 vendor: golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1 109cc4ea4 vendor: golang.org/x/sys v0.0.0-20211025201205-69cdffdb9359 25366b6a5 vendor: remove replace rules for k8s.io packages 1d4431c1e cli/command: Add quiet option for create and run bdfeae899 docs: daemon: remove LCOW configuration options 6c16afe1d docs: unify "docker create" and "docker run" reference 7eb61e2ff docs: add missing documentation for --pull flag 60c383636 cli/compose/schema: make version: "3" equivalent to "3.x" (latest) a3d53e319 dummy circleci config f160fd3e3 remove circleci 7dc35c03f validate manpages target a650f4ddd switch to cli-docs-tool for yaml docs generation 76a2a1945 fix inherits for vendor bake defs bea6c0d24 validate authors target ede32747b add common args bake target 8c3ae386c golangci-lint: prevent io/ioutil from being used 6c06950cd cli-plugins/manager: remove uses of deprecated io/ioutil 38e62571f opts: remove deprecated io/ioutil and use t.Cleanup() 85754c9ab man: remove deprecated io/ioutil and use t.TempDir() 7491c5ac6 internal/test: remove deprecated io/ioutil e89af84ff e2e: remove deprecated io/ioutil and use t.TempDir() 39ace6806 docs/yaml: remove deprecated io/ioutil and use t.TempDir() 0e3197ebd cmd/docker: remove deprecated io/ioutil 86db51e86 cli: remove deprecated io/ioutil 1e54bca83 cli/trust: remove deprecated io/ioutil and use t.TempDir() 58cf16da4 cli/manifest: remove deprecated io/ioutil and use t.TempDir() cca80cddd cli/context: remove deprecated io/ioutil and use t.TempDir() 71575ab3b cli/config: remove deprecated io/ioutil and use t.TempDir() b9f0340b6 cli/compose: remove deprecated io/ioutil 3f7e7bf9d cli/command: remove deprecated io/ioutil and use t.TempDir() cca73bff4 cli/command/volume: remove deprecated io/ioutil b5dce3c9e cli/command/trust: remove deprecated io/ioutil and use t.TempDir() e0299ff86 cli/command/system: remove deprecated io/ioutil 78cb61c61 cli/command/swarm: remove deprecated io/ioutil and use t.TempDir() d59330f40 cli/command/stack: remove deprecated io/ioutil d1f26de64 cli/command/service: remove deprecated io/ioutil c558df7ce cli/command/secret: remove deprecated io/ioutil 3b3a0b898 cli/command/registry: remove deprecated io/ioutil f61aab59f cli/command/plugin: remove deprecated io/ioutil 9bdeb09ae cli/command/node: remove deprecated io/ioutil f28c063e2 cli/command/context: remove deprecated io/ioutil 43795ec8f cli/command/manifest: remove deprecated io/ioutil and use t.TempDir() d14b5bff8 cli/command/image: remove deprecated io/ioutil and use t.TempDir() 76b47359c cli/command/context: remove deprecated io/ioutil and use t.TempDir() e946bf080 cli/command/container: remove deprecated io/ioutil bc1790c5c cli/command/config: remove deprecated io/ioutil 8dc53344e cli/command/checkpoint: remove deprecated io/ioutil e7a8748b9 build: use legacy builder for wcow if not opt-in with a builder component e38e6c51f bring back and expose BuildKitEnabled func ee9d17cae cli/context: update package documentation 242857dd8 update/remove various tests and options related to kubernetes support 7ccee6d60 remove unused KubernetesEnabled() test-utility 2d268392d publish RunExec for use by docker/compose 467e650d4 formatter: mark KubernetesEndpoint templating option as deprecated 6ea276728 config: mark stackOrchestrator option as deprecated b7d0f5c66 docs: add more details to stack kubernetes deprecation 6dcfbe662 docs: update list of supported filters for stack services 039018b6d docs: remove deprecated orchestrator flags 869370a3f docs: remove mention of DOCKER_STACK_ORCHESTRATOR env-var 16ece9bb8 system/version: remove dead-code 1924bc9f0 stack/swarm: remove unneeded getStackServiceFilter() cff010c61 context export: remove docker context export --kubeconfig options 013a74f00 document kubernetes feature as "removed" in 21.xx d9a2a555d introduce plugin.RunningStandalone as utility func for a plugin to know it is run standalone ee97fe95b Fix incorrect pointer inputs to `json.Unmarshal` 193ede9b1 remove obsolete mutli-orchestrator support 1d48749c1 warn user kubernetes is deprecated and options won't be stored in context 7b9580df5 Drop support for (archived) Compose-on-Kubernetes a7778806a cli/compose/schema: make version optional, default to "latest" a9fd69773 cli/compose: add schema 3.10 (no changes with 3.9 yet) d44eca129 cli/compose/schema: Validate(): normalize version before validating a3c131496 vendor: compose-on-kubernetes v0.5.0 to remove use of github.com/golang/glog 8b408372f Describe privileged mode in terms of capabilities 16edf8bff builder: conditional warning for wcow fd2274692 Update deprecation docs bce65f0ed builder: simplify error generation, and rephrase error/warning 4d8e45782 builder: fallback to legacy 6fef143db Set buildx as default builder 0ca2d25ba Update dockerd.md 2d6ebd1e3 Correct device syntax to --gpus 0d5b24b01 Dockerfile.vendor: use GOPROXY=direct 5c4a395c5 scripts/vendor: run go mod tidy when vendoring 08a1ccc60 Remove support for encrypted TLS private keys ae3a61439 docs/daemon: replace deprecated '-g' option for '--data-root' 663f01b9c use uuid to invalidate cache 77b1031be make compose plugin detection in bash completion work on Mac OS dfb39e9e5 Fix Typos 2725f0987 Fix typo caa31d937 fix linguist with .gitattributes 7e560ae76 vendor with go mod a1204a50b Update stats.md add example json output 5fab1b2b1 ensure version quad for goversioninfo 3425e9dc3 ci: add glibc to build matrix 418dbc4e7 docker exec cli docs: show 2 env vars, not just 1 a18514370 added missing closing parenthese c6636d4d6 Change IO order in description 6ad2ceba3 Update Ubuntu version number references in push.md 4d93717ae ci: github actions test workflow dedd4b79c Update Go to 1.16.11 62ea2bf1a GitHub Actions e2e tests a4e746087 Bump moby/sys 8b85274d2 Fix typo e285f1500 Update Go to 1.16.10 83c253770 fix .dockerignore to avoid dirty working tree 417f97605 Update most links in docs to use https by default dbac82681 Fix checkout behavior and FileVersion 75284bd1d Use goversioninfo to create Windows Version Info 8c73a9392 docs: some minor touch-ups in checkpoint reference bf310f863 Update Go to 1.16.9 795c9c96b docs: remove trailing space to fix generated YAML format 1f8cb1fbb registry: ensure default auth config has address a3832808f docs: create.md: typo fix cbda0760b docs: man page: typo fix in docker_1 c4619fb34 Update deprecated.md 1de937c14 docs: fix search results by filterd is-official d9f4352c2 GitHub Actions cross a90532e29 doc: Add `default-runtime` opt to daemon.json 47e5cfa9e docs: fix description of restart-delay to mention max (1 minute) 221bf5761 bump imdario/mergo v0.3.12 6482f3f9b Use private network address for default-address-pools setting in daemon.json example 47c7a096f Dockerfile: update tonistiigi/xx to 1.0.0-rc.2, add XX_VERSION arg 01fa5d925 Update Go to 1.16.8 2621af848 docs: fix some broken anchors ea98f6c92 experimental: fix broken link to "checkpoint and restore" page b0ec87afd format create.md table 172b2dc37 Fixing typo (his --> its) 214cd05aa create/run: remove default --stop-signal 61a1775ad vendor: golang.org/x/sys 63515b42dcdf9544f4e6a02fd7632793fde2f72d (for Go 1.17) aa89e6847 docs: move checkpoint/restore doc from experimental into reference 463746ff2 docs: add missing redirect, and remove /go/experimental redirect b5f4a6e45 fix innocuous data-race when config.Load called in parallel 47ba76afb docs: use "console" code-hint for shell examples 16466f1ce docs: rewrite reference docs for --stop-signal and --stop-timeout af1bb80c3 Enable ssh forwarding when building a remote target 7e15d136b cli.SetupRootCommand(): minor cleanup 818564af5 cli/compose: use go1.16 native embed functionality for schemas 509cc3218 vendor: google.golang.org/grpc v1.5.2 2ef71e502 vendor: genproto 8816d57aaa9a, google.golang.org/protobuf v1.26.0, github.com/golang/protobuf v1.5.2 fc85fe4eb vendor: update docker to current master (API v1.42) 3e50224fd vendor: github.com/docker/swarmkit 3629f50980f6c0dd5ccd7dbfa0956b57ea0cd78d 847aef321 build: fix AddDockerfileToBuildContext not de-referencing tar header template fcc2ce349 vendor: github.com/containerd/containerd v1.5.5 cfb07a75a vendor: github.com/opencontainers/runc v1.0.1 ecad24d47 vendor: github.com/sirupsen/logrus v1.8.1 23ed50c10 replace docker/pkg/signal with github.com/moby/sys/signal 3112b382a Update Go to 1.16.7 698c15547 GitHub Actions for lint 896459569 info: skip client-side warning about seccomp profile on API >= 1.42 b86f5135f docs/yaml: add TODO for conditionally skipping root command c509ef710 yamldocs: various improvements a477a727f Update to go1.16.6 0b2eaa7f7 cli/command: don't use client.CustomHTTPHeaders(), and simplify asserts 8916855c2 docs: update deprecation status of LCOW 40c6b117e change TestNewAPIClientFromFlagsWithHttpProxyEnv to an e2e test 60fe32243 e2e: update gotestsum to v1.7.0 15535d459 context: deprecate support for encrypted TLS private keys 2688f25eb cli/context: ignore linting warnings about RFC 1423 encryption 0695578d4 CircleCI: update BUILDX_VERSION to v0.6.0 ecaaa35be Add doc for BUILDKIT_PROGRESS env var 48dbf6f3c Update Dockerfiles to latest syntax, remove "experimental" 13e822500 vendor: cpuguy83/go-md2man/v2 v2.0.1 ef14ae09b vendor: github.com/russross/blackfriday/v2 v2.1.0 7a0dc924f Add support for ALL_PROXY 5a8d7d506 Detect compose plugin f3d1b02e2 Dockerfile: remove custom go build for windows/arm64 d9f17025c Fix typo in documentation - build.md 0ebdad749 vendor: github.com/containerd/containerd v1.5.3 to reduce indirect dependencies 4ce521c50 info: print errors to stderr 1148163c3 Add completion for docker-compose plugin d738e7c48 docker info: skip API connection if possible a033cdf51 Deprecate Kubernetes context support c05f0f595 Deprecate Kubernetes stack support 7190255a6 Deprecate Kubernetes stack support 0c723fd68 Fix the (dead) link for docs for Dockerfile syntax reference 384b59b73 Updated docker attach example. 918168c40 Bolded SIGKILL & fixed backslash escaping. 2a167065d Cleaned up formatting/typesetting. 64b2e9528 Document `--validate` daemon option 711334e9a vendor: github.com/moby/buildkit 9f254e18360a24c2ae47b26f772c3c89533bcbb7 (master / v0.9.0-dev) 678c2fde9 UX: don't reverse progress-bars when rolling back a04c8210a vendor: github.com/docker/docker 25917217cab38eab40c3db0010b915258f4a8491 29fed6bff vendor: github.com/docker/swarmkit 2dcf70aafdc9ea55af3aaaeca440638cde0ecda6 f647fce89 vendor: github.com/containerd/containerd v1.5.2 f269e7fc3 vendor: github.com/coreos/etcd v3.3.25 83c915857 vendor: github.com/tonistiigi/fsutil d72af97c0eaf93c1d20360e3cb9c63c223675b83 79a9fd61f vendor: github.com/opencontainers/runc v1.0.0-rc95 579279ce0 vendor: github.com/Microsoft/hcsshim v0.8.16 ab46952ba vendor: github.com/Microsoft/go-winio v0.4.19 f114f6c87 vendor: github.com/json-iterator/go v1.1.10 c451d82af vendor: github.com/containerd/typeurl v1.0.2 3ea82da31 vendor: github.com/containerd/continuity v0.1.0 9ee3d08ae vendor: github.com/containerd/console v1.0.2 945f1237e vendor: github.com/containerd/cgroups v1.0.1 adb118d29 vendor.conf: sort alphabetically 6d25af0cd vendor: golang.org/x/time 3af7569d3a1e776fc2a3c1cec133b43105ea9c2e 8ebe404df vendor: golang.org/x/sys d19ff857e887eacb631721f188c7d365c2331456 af1687406 vendor: golang.org/x/sync 036812b2e83c0ddf193dd5a34e034151da389d09 dea997614 vendor: golang.org/x/net e18ecbb051101a46fc263334b127c89bc7bff7ea 716291337 vendor: golang.org/x/crypto 0c34fe9e7dc2486962ef9867e3edb3503537209f 2cbb88f4c vendor: github.com/modern-go/reflect2 v1.0.1 d6c55a105 vendor: github.com/moby/sys mountinfo/v0.4.1 f44563747 vendor: github.com/gogo/protobuf v1.3.2 b5bc27990 vendor: moby/term, Azure/go-ansiterm for golang.org/x/sys/windows compat e12aade59 Update WORKDIR command information 524e3b215 e2e: update docker-compose to 1.29.2 c6cd0493a circleCI: update docker engine to 20.10.6 661b87ac9 Jenkinsfile: update old engine version to 19.03 2849437f2 Jenkinsfile: update labels to prevent running on cgroups v2 79638e6ea feat(docker): add context argument completion f3b6ed744 e2e: make sure that os.environ is preserved 7672267e1 vendor: github.com/docker/docker-credential-helpers v0.6.4 49f607153 vendor: github.com/docker/docker v20.10.7 3b502ca00 Fix minor wording 16131fb45 Slight cleanup/refactor of attachContainer 04e6884f6 docs: fix link to command-line reference cedaf44ea Ignore SIGURG on Darwin too 57e768059 docs: Fix broken jump link f3034ee92 docs: dockerd: fix broken link and markdown touch-ups 782192a6e Swap "LABEL maintainer" for the OCI pre-defined "org.opencontainers.image.authors" 05ec0188f printServerWarningsLegacy: silence "No oom kill disable support" on cgroup v2 731f52cfe printServerWarningsLegacy: silence "No kernel memory limit support" 3c8d65963 docs: cleanup / refactor cli doc 276e7180f docs: add reference for "docker config" commands 68284ff59 docs: update some examples for proxy configuration be327a4f0 cli/config/configfile: various test cleanups f3886f354 Use designated test domains (RFC2606) in tests caa4742e5 docs: remove experimental ipvlan docs, as they were migrated 12370ad1f Add progress bar to copy into and from container 30359cbdb docs/reference/builder: update "syntax" section 17a9eb60e docs/reference/builder: update example output, and some rephrasing 22b14dac8 docs/reference/builder: remove outdated example Dockerfiles 168173a3f Use net.JoinHostPort() to fix formatting with IPv6 addresses 5dd7a2826 docs/reference/builder: touch-up code-hints and some minor changes 2586decba docs: document log-opts for "dual logging" cache 83e9eeb8a scripts: Allow skipping windres when WINDRES= (empty string) 2c40960ba scripts: use WINDRES env var if set 6e45f4bfe scripts: fix VERSION_QUAD corner case in windows resource 26b633d37 set default version from git b099c9c9e update readme with new examples 706e857a9 remove unused targets bd3e853c7 update circleci cross target a2a1de5f0 add windows/arm64 target 8b822c921 update windows resources generation 6423da8dc dockerfile based binary building 41d169d21 Update stop.md 75dd73f64 vendor: github.com/theupdateframework/notary v0.7.0-21-gbf96a202 09ddcffb2 config.Load() remove unneeded locks 25dc8034f vendor: github.com/spf13/cobra v1.1.3 e05e66f4b docs: remove trailing spaces to prevent yamldocs using "compact" notation d051df994 docs: improve example for "remove all stopped containers" b83bc6713 config: print deprecation warning when falling back to ~/.dockercfg a54577b75 vendor: update notary to 5f1f4a34 e50cf7957 vendor: update x/sys to 134d130e 10e909a26 docs: Fix wrong bridge driver option e1a751751 Fix `docker start` blocking on signal handling 9342ec6b7 ForwardAllSignals: check if channel is closed, and remove warning cb1bb72fd Fix mistake with env var example in docker run docs 040210bfa Update the list of log drivers b43b85203 context: Add tarball e2e tests 8c2872d2a context: Ensure context name is valid on import a2f0cf527 context: Ensure import paths are valid f52a9e2fe Add docs and completion for docker node ls --filter node.label 8d199d5bb Use golang.org/x/sys/execabs 7bef24876 vendor docker, docker-credential-helpers and golang/sys for execabs package c0b7b5813 fix docker-run man page table formatting 852fe0599 docs: Fix wrong variable name a4fb01f95 docs: add redirect for old reference URL 104469be0 service rollback: always verify state ce26a165b docker service rollback: fix non-zero exit code in some cases c85a37dbb cli/config: prevent warning if HOME is not set 26a6a724a fix --update-order and --rollback-order flags fff164c22 Ignore SIGURG on Linux. 9f6966d4e vendor: github.com/theupdateframework/notary v0.7.0 697c3a5b4 docs: fix typo in deprecated.md c2820a7e3 Fix panic when failing to get DefaultAuthConfig fb2ea098a deprecate blkio-weight options with cgroups v1 69b5487e3 Remove duplicate word in push.md ba2fef9bc Add bash completion for `dockerd --ip6tables` 5a252fb3a Update bash completion for fluentd --log-options 8242fe1fc Add bash completion for `docker run|create --pull` b04241d95 Removed format flag for inspect 584c08e1f Added zsh completion for docker context subcommands 6e2607c6a Rename bin/md2man to bin/go-md2man a4e86b543 Add bash completion for jobs fc9ca9a94 Fix reading context and dockerfile from stdin with BuildKit 9d40c7464 scripts/build/.variables: Support SOURCE_DATE_EPOCH Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2023-02-10 12:36:10 -05:00
Bruce Ashfield	2119189361	treewide: bulk update patches with status field ... While the insane.bbclass upstream-status check hasn't been made default, users of meta-virtualization may have it enabled in their distros .. so the effect is the same. We must have this tracking tag in out patches. This is a bulk update to add the tag and silence the QA message. As packages get updated, the normal/routine process of checking the patches will continue, and the status fields may (or may not) get more useful. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2023-01-27 10:32:06 -05:00
Bruce Ashfield	d3acb1a378	docker/moby: use generic DOCKER_COMMIT in do_compile ... do_compile() is shared and shouldn't have been using SRCREV_moby as that is obviously only set in the moby recipe. Switch to using a generic DOCKER_COMMIT variable and set it in both docker_moby and docker-ce. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2022-12-07 16:40:04 -05:00
Bruce Ashfield	3f45dc8e69	docker: add seccomp to default packageconfig settings ... Much of meta-virt requires seccomp to function properly, so we update docker to match that common default. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2022-12-07 16:12:33 -05:00
Bruce Ashfield	9d84fcdc6d	docker: add mobyproject:moby to CVE_PRODUCT ... Add mobyproject:moby to CVE_PRODUCT to reflect where the source is coming from for both docker recipes. We keep the old 'docker' designation for compatibility. It is unclear whether or not we should also be adding the cli and libnetwork to the CVE_PRODUCT. But since they are on different SRCREVs and not vendored, we keep them out for now. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2022-12-07 16:12:33 -05:00
Bruce Ashfield	11caf690da	moby: update to v20.10.21 ... Bumping moby to version v20.10.21-4-g4ed81ac0e2, which comprises the following commits: f292bf0f4f distribution: Error when pulling OCI artifacts 0211f9e44d [20.10] update to Go 1.18.8 to address CVE-2022-41716 f99cb8297b integration: download busybox-w32 from GitHub Release 3f9dc25f5c update containerd binary to v1.6.9 87ccd38cea vendor: moby/term, Azure/go-ansiterm for golang.org/x/sys/windows compatibility e83e465ae2 [20.10] vendor: github.com/moby/buildkit eeb7b65ab7d651770a5ec52a06ea7c96eb97a249 (v0.8 branch) 9c84417c1b skip TestImagePullStoredfDigestForOtherRepo() on Windows and rootless 5b5b5c6f13 builder: add missing doc comment 05e25f7892 builder: fix running git commands on Windows 2f3bf18014 [20.10] vendor moby/buildkit v0.8.3-31-gc0149372 6699afa549 registry: allow "allow-nondistributable-artifacts" for Docker Hub 4b9902bad4 Validate digest in repo for pull by digest c0d1188c14 builder: make git config isolation opt-in 9f5f3abcee builder: isolate git from local system 10db4c2db7 builder: explicitly set CWD for all git commands 8816c3c2aa builder: modernize TestCheckoutGit 11bdbf40b9 [20.10] Update to go 1.18.7 to address CVE-2022-2879, CVE-2022-2880, CVE-2022-41715 66ddb7f91c Fix live-restore w/ restart policies + volume refs c003392582 contrib: make dockerd-rootless-setuptool.sh more robust 53313be0f3 docker-rootless-setuptools.sh: use context after install 9c486bd267 swagger: update links to logo fa17fab895 vendor: github.com/containerd/console v1.0.2 481bee51b5 vendor: github.com/armon/go-metrics v0.4.1 39ba2873e8 vendor: github.com/google/btree v1.1.2 c2755f40cd vendor: github.com/hasicorp/memberlist v0.4.0 5ba3208ec7 Dockerfile: Update Dockerfile syntax, switch to bullseye, add missing libseccomp-dev, remove build pack 6d6a236286 [20.10] Update uses of Image platform fields in OCI image-spec 2570784169 [20.10] vendor: github.com/moby/buildkit 3a1eeca59a9263613d996ead67d53a4b7d45723d (v0.8 branch) fcd4df906b Update some tests for supplementary group permissions 6a0186b357 Wrap local calls to the content and lease service 3d4616f943 Update to go 1.18.6 to address CVE-2022-27664, CVE-2022-32190 23c7d84b84 docs: api: adjust ContainerWaitResponse error as optional 3e9e79d134 docs: api: document ImageSummary fields (api v1.39-v1.41) fdd438ae03 api: docs: improve documentation of ContainerConfig type (API v1.30-v1.41) 97014a8db5 namesgenerator: remove Valentina Tereshkova e44d7f735e AdditionalGids must include effective group ID 9e7662e4a7 [20.10] vendor: update containerd to latest of docker-20.10 branch 7dac25a3a9 vendor: update tar-split to v0.11.2 8bd86a0699 update containerd binary to v1.6.8 6c8dd6a6f2 update runc to v1.1.4 418c141e64 [20.10 backport] daemon: kill exec process on ctx cancel d127287d92 Allow different syscalls from kernels 5.12 -> 5.16 57db169641 seccomp: add support for Landlock syscalls in default policy 7ba8ca042c Update golang to 1.18.5 f2a3c3bcef update golang to 1.18.4 a99c9cd852 update golang to 1.18.3 82939f536b update golang to 1.18.2 ecd1aa081f update golang to 1.18.1 7ba67d05a8 [20.10] vendor: update archive/tar for go 1.18 0bc432241e update golang to 1.18.0 bb95d09f9a staticcheck: ignore "SA1019: strings.Title is deprecated" a7299ae72c Dockerfile: update golangci-lint v1.44.0 d97fd533cf integration-cli: SA5011: possible nil pointer dereference (staticcheck) e6aee04a88 client.NewClientWithOpts(): remove redundant type assertion (gosimple) 0523323c28 daemon/logger/awslogs: suppress false positive on hardcoded creds (gosec) adeb29c64c client/request.go:157:8: SA1019: err.Temporary is deprecated (staticcheck) 50361d91a6 registry: trimV1Address(): simplify trimming trailing slash ae3a9337dd golangci.yml: do not limit max reported issues 9820255a1c golangci.yml: skip some tests d223f37300 golangci.yml: update regex for ignoring SA1019 ec3bfba89d graphdriver: temporarily ignore unsafeptr: possible misuse of reflect.SliceHeader f2f387b131 daemon: var-declaration: should omit type bool (revive) 2fb7c9fea7 daemon/config: error strings should not be capitalized fa6954cb98 reformat "nolint" comments 45fa675a35 if-return: redundant if ...; err != nil check (revive) 9e88f8435a daemon/splunk: ignore G402: TLS MinVersion too low for now 2de90ebbe4 pkg/archive: RebaseArchiveEntries(): ignore G110 14b475d091 daemon/stats: fix notRunningErr / notFoundErr detected as unused (false positive) db7b3f4737 unused: ignore false positives b6de0ca7c5 G601: Implicit memory aliasing in for loop e8b838e99f gosec: G601: Implicit memory aliasing in for loop 2ddf6e598a gosimple: S1039: unnecessary use of fmt.Sprintf fadf8bbdff staticcheck: SA4001: &*x will be simplified to x. It will not copy x 7573e32577 client: S1031: unnecessary nil check around range (gosimple) e738a57a6d daemon/logger/journald: fix linting errors 34f6b94255 gosec: G404: Use of weak random number generator a6d7b61c8b update containerd binary to v1.6.7 b4ba1ee22f update runc binary to v1.1.3 da8828c4b3 api: swagger: fix invalid example value (API v1.39-v1.41) 9501d91e19 api: swagger: document BuildCache fields (API v1.39-v1.41) 61fdea902b api: swagger: document BuildCache fields. c77432c889 [20.10] Update golang to 1.17.13 2833aa1e4b docs: api: add missing "platform" query-arg on create (v1.41) a8c28260ad api: swagger: add missing "platform" query-arg on create cfdc075b1c Fix file capabilities droping in Dockerfile 2daa6bb6b3 Windows: Re-create custom NAT networks after restart if missing from HNS 903cd53ce4 vendor: libnetwork 0dde5c895075df6e3630e76f750a447cf63f4789 eccaf6d368 [20.10] update golang to 1.17.12 ff7feeac37 vendor: github.com/containerd/continuity v0.3.0 Bumping libnetwork to version v0.7.0-dev.3-1841-gdcdf8f17, which comprises the following commits: 5e08bdb1 Revert: Added API to set ephemeral port allocator range 563fe8e2 README.md: repo was moved to https://github.com/moby/moby/tree/master/libnetwork bea0bcf5 libnetwork: skip firewalld management for rootless af0c46d8 Apply peformance tuning to new sandboxes also Bumping docker-cli to version v20.10.21, which comprises the following commits: 3e3677e47d docs: fix links to BuildKit backend 20e3951aeb Remove "experimental" gates around "--platform" in bash completion 75d7ce92a2 fixed the plugin command docker-runc a12c535f6e [20.10] vendor docker 03df974ae9e6c219862907efdd76ec2e77ec930b (v20.10.20) d18a3e9004 [20.10] vendor moby/buildkit v0.8.3-31-gc0149372 932ca73874 [20.10] vendor: github.com/docker/docker v20.10.19 7d51e65e72 [20.10] vendor: github.com/moby/buildkit 3a1eeca59a9263613d996ead67d53a4b7d45723d (v0.8 branch) 1ea8d69d6f feat(docker): add context argument completion e82aa85741 [20.10] vendor: github.com/docker/docker v20.10.18 e9176b36cc [20.10] vendor: github.com/containerd/continuity v0.3.0 bc6ff39e42 docs/reference: run.md update confusing example name 3fa7a8654f docs: update deprecation status for "overlay2.override_kernel_check" 3e06ce8bfa [20.10] Update go 1.18.7 to address CVE-2022-2879, CVE-2022-2880, CVE-2022-41715 93eead45ee Update to go 1.18.6 to address CVE-2022-27664, CVE-2022-32190 45075ea08c [20.10] vendor: github.com/docker/docker v20.10.17 c2dcaecf19 make compose plugin detection in bash completion work on Mac OS 613b9362d0 Detect compose plugin b30d250320 Add completion for docker-compose plugin 6b25bc3003 fix race condition in TestRemoveForce bdac0b38d9 Update golang to 1.18.5 c70b01ec1f update golang to 1.18.4 0389090aeb update golang to 1.18.3 c904936d69 update golang to 1.18.2 386d50c2e9 update golang to 1.18.1 990186f2f6 update go to 1.18.0 86bf1966e2 staticcheck: ignore SA1019: strings.Title is deprecated b3022b91d1 [20.10] Dockerfile.lint: use go install f14ba9f5d7 [20.10] Dockerfile: use syntax=docker/dockerfile:1 c189c4dbea [20.10] vendor: github.com/json-iterator/go v1.1.12 for Go 1.18 compatibility 0c46ffc1f9 [20.10] vendor: github.com/modern-go/reflect2 v1.0.2 for Go 1.18 compatibility 6be9ce798e [20.10] vendor: github.com/google/gofuzz v1.0.0 779ed309a8 lint: update golangci-lint to v1.45.2 2f7e84be65 linting: fix incorrectly formatted errors (revive) e628209d9b linting: ignore some "G101: Potential hardcoded credentials" warnings 80a3add604 cli/command/container: unnecessary use of fmt.Sprintf (gosimple) 80fb0d575e [20.10] Update golang to 1.17.13 d72bef2088 [20.10] update golang to 1.17.12 7502d7e560 Fix dead external link 308624c3b1 fix: remove asterisk from docker command suggestions de7d866b6a [20.10] update golang to 1.17.11 240e4b5501 [20.10] vendor: golang.org/x/sys v0.0.0-20220412211240-33da011f77ad 5d4776bd90 [20.10] update golang to 1.17.10 49e9c2ae3d vendor: golang.org/x/sys 63515b42dcdf9544f4e6a02fd7632793fde2f72d (for Go 1.17) 87a3ce2699 vendor: golang.org/x/sys d19ff857e887eacb631721f188c7d365c2331456 1d8abed17d vendor: update x/sys to 134d130e 31dad66f9a [20.10] update golang to 1.17.9 80f673bf9e gofmt with go1.17 3d4cc8e699 [20.10] update remaining files to go1.17.8 30277a8f80 update go to 1.17.8 cfef3a7dc1 docs: deprecated: add entry for "fluent-async-connect" log-opt 53426025c3 [20.10] docs: reformat table for compatibility 573a664639 Describe privileged mode in terms of capabilities cf0ab7ac4c [20.10] vendor: github.com/docker/distribution v2.8.1 d05fd4ffc8 [20.10] vendor: github.com/opencontainers/image-spec v1.0.2 870f138250 [20.10] vendor: github.com/docker/docker v20.10.14 198d6b8724 [20.10] circleci: update buildx to v0.8.2 55a14ec851 [20.10] update remaining Dockerfiles to go 1.16.15 1f9a0df05a e2e: update docker-compose to 1.29.2 4ae338b33a docs: reference: remove trailing space to fix yaml formatting 6380142dd4 docs: fix (table) formatting, fix some broken links 82f422fcf3 docs: build: fix minor markdown and syntax issues 80fd77903b Update the list of log drivers c3d4d623c8 Fix CMD --ignored-param1 example 2e82d11def docs: dockerd: fix broken link in blockquote area 738a6ee1cc improve cp documentation with some illustration examples 246d96bb6c docs: unify "docker create" and "docker run" reference 2fd0f17057 docs: add missing documentation for --pull flag 5fa500000a Fix incorrect pointer inputs to `json.Unmarshal` 1e6a8ce2b7 Dockerfile: update xx to 1.1 6f7a931a2d [20.10] use GO_LDFLAGS instead of LDFLAGS to prevent inheriting unrelated options 91bab605f7 [20.10] vendor.conf: don't use git:// protocol a282e0c5d2 [20.10] update to go 1.16.15 to address CVE-2022-24921 700364e304 Fix mistake with env var example in docker run docs 62d27c32ff Update WORKDIR command information c0e952cf04 Fix the (dead) link for docs for Dockerfile syntax reference 04104a04d3 Update dockerd.md b721998b7b Fixing typo (his --> its) 4065e1246e format create.md table f1002eb9fb Fix typo e97c7b240e added missing closing parenthese aa78937634 Update stats.md add example json output 40fe0573aa Update Ubuntu version number references in push.md c9737e1c37 docs/daemon: replace deprecated '-g' option for '--data-root' 5c6723d080 Correct device syntax to --gpus fd5fc61ecd [20.10] Update Go to 1.16.14 3624019d83 [20.10] update Go to 1.16.13 f3ff8e6ad6 [20.10] vendor: compose-on-kubernetes v0.5.0 to remove github.com/golang/glog ee1ac1b319 fix innocuous data-race when config.Load called in parallel 38dd744a11 [20.10] Update Go to 1.16.12 4de40a825e Update Go to 1.16.11 03fa8f92c8 Update Go to 1.16.10 9989fdbc40 Update most links in docs to use https by default 0e20c1fd21 Update Go to 1.16.9 1c0927a041 Dockerfile: update tonistiigi/xx to 1.0.0-rc.2, add XX_VERSION arg 82f9d5921b info: skip client-side warning about seccomp profile on API >= 1.42 adb01ca79d docs: some minor touch-ups in checkpoint reference 8260476a06 docs: remove trailing space to fix generated YAML format bce2e1f953 docs: create.md: typo fix 44064f51c8 Fix typo in documentation - build.md 292779add5 Add doc for BUILDKIT_PROGRESS env var f2e79b826c docs: use "console" code-hint for shell examples fa46b92361 docs: rewrite reference docs for --stop-signal and --stop-timeout 400f81089a experimental: fix broken link to "checkpoint and restore" page c72057c8db docs: move checkpoint/restore doc from experimental into reference 77db97d595 Use private network address for default-address-pools setting in daemon.json example cbf0d2b7b7 docs: fix some broken anchors d0014a86bc docs: fix description of restart-delay to mention max (1 minute) 6c1c8b55aa docs: fix search results by filterd is-official 44fdac11f5 Update Go to 1.16.8 061051c24d docs: add missing redirect, and remove /go/experimental redirect 2012fbf111 Update Go to 1.16.7 42d1c02750 registry: ensure default auth config has address 0b924e51fc Update to go1.16.6 6288e8b1ac change TestNewAPIClientFromFlagsWithHttpProxyEnv to an e2e test 1e9575e81a cli/config/configfile: various test cleanups c98e9c47ca Use designated test domains (RFC2606) in tests 8437cfefae context: deprecate support for encrypted TLS private keys 68a5ca859f cli/context: ignore linting warnings about RFC 1423 encryption 8a64739631 Update Dockerfiles to latest syntax, remove "experimental" 1d37fb3027 Deprecate Kubernetes context support 0793f96394 Deprecate Kubernetes stack support b639ea8b89 Deprecate Kubernetes stack support Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> docker-ce: update to v20.10.21 Bumping docker to version v20.10.21-4-g4ed81ac0e2, which comprises the following commits: f292bf0f4f distribution: Error when pulling OCI artifacts 0211f9e44d [20.10] update to Go 1.18.8 to address CVE-2022-41716 f99cb8297b integration: download busybox-w32 from GitHub Release 3f9dc25f5c update containerd binary to v1.6.9 87ccd38cea vendor: moby/term, Azure/go-ansiterm for golang.org/x/sys/windows compatibility e83e465ae2 [20.10] vendor: github.com/moby/buildkit eeb7b65ab7d651770a5ec52a06ea7c96eb97a249 (v0.8 branch) 9c84417c1b skip TestImagePullStoredfDigestForOtherRepo() on Windows and rootless 5b5b5c6f13 builder: add missing doc comment 05e25f7892 builder: fix running git commands on Windows 2f3bf18014 [20.10] vendor moby/buildkit v0.8.3-31-gc0149372 6699afa549 registry: allow "allow-nondistributable-artifacts" for Docker Hub 4b9902bad4 Validate digest in repo for pull by digest c0d1188c14 builder: make git config isolation opt-in 9f5f3abcee builder: isolate git from local system 10db4c2db7 builder: explicitly set CWD for all git commands 8816c3c2aa builder: modernize TestCheckoutGit 11bdbf40b9 [20.10] Update to go 1.18.7 to address CVE-2022-2879, CVE-2022-2880, CVE-2022-41715 66ddb7f91c Fix live-restore w/ restart policies + volume refs c003392582 contrib: make dockerd-rootless-setuptool.sh more robust 53313be0f3 docker-rootless-setuptools.sh: use context after install 9c486bd267 swagger: update links to logo fa17fab895 vendor: github.com/containerd/console v1.0.2 481bee51b5 vendor: github.com/armon/go-metrics v0.4.1 39ba2873e8 vendor: github.com/google/btree v1.1.2 c2755f40cd vendor: github.com/hasicorp/memberlist v0.4.0 5ba3208ec7 Dockerfile: Update Dockerfile syntax, switch to bullseye, add missing libseccomp-dev, remove build pack 6d6a236286 [20.10] Update uses of Image platform fields in OCI image-spec 2570784169 [20.10] vendor: github.com/moby/buildkit 3a1eeca59a9263613d996ead67d53a4b7d45723d (v0.8 branch) fcd4df906b Update some tests for supplementary group permissions 6a0186b357 Wrap local calls to the content and lease service 3d4616f943 Update to go 1.18.6 to address CVE-2022-27664, CVE-2022-32190 23c7d84b84 docs: api: adjust ContainerWaitResponse error as optional 3e9e79d134 docs: api: document ImageSummary fields (api v1.39-v1.41) fdd438ae03 api: docs: improve documentation of ContainerConfig type (API v1.30-v1.41) 97014a8db5 namesgenerator: remove Valentina Tereshkova e44d7f735e AdditionalGids must include effective group ID 9e7662e4a7 [20.10] vendor: update containerd to latest of docker-20.10 branch 7dac25a3a9 vendor: update tar-split to v0.11.2 8bd86a0699 update containerd binary to v1.6.8 6c8dd6a6f2 update runc to v1.1.4 418c141e64 [20.10 backport] daemon: kill exec process on ctx cancel d127287d92 Allow different syscalls from kernels 5.12 -> 5.16 57db169641 seccomp: add support for Landlock syscalls in default policy 7ba8ca042c Update golang to 1.18.5 f2a3c3bcef update golang to 1.18.4 a99c9cd852 update golang to 1.18.3 82939f536b update golang to 1.18.2 ecd1aa081f update golang to 1.18.1 7ba67d05a8 [20.10] vendor: update archive/tar for go 1.18 0bc432241e update golang to 1.18.0 bb95d09f9a staticcheck: ignore "SA1019: strings.Title is deprecated" a7299ae72c Dockerfile: update golangci-lint v1.44.0 d97fd533cf integration-cli: SA5011: possible nil pointer dereference (staticcheck) e6aee04a88 client.NewClientWithOpts(): remove redundant type assertion (gosimple) 0523323c28 daemon/logger/awslogs: suppress false positive on hardcoded creds (gosec) adeb29c64c client/request.go:157:8: SA1019: err.Temporary is deprecated (staticcheck) 50361d91a6 registry: trimV1Address(): simplify trimming trailing slash ae3a9337dd golangci.yml: do not limit max reported issues 9820255a1c golangci.yml: skip some tests d223f37300 golangci.yml: update regex for ignoring SA1019 ec3bfba89d graphdriver: temporarily ignore unsafeptr: possible misuse of reflect.SliceHeader f2f387b131 daemon: var-declaration: should omit type bool (revive) 2fb7c9fea7 daemon/config: error strings should not be capitalized fa6954cb98 reformat "nolint" comments 45fa675a35 if-return: redundant if ...; err != nil check (revive) 9e88f8435a daemon/splunk: ignore G402: TLS MinVersion too low for now 2de90ebbe4 pkg/archive: RebaseArchiveEntries(): ignore G110 14b475d091 daemon/stats: fix notRunningErr / notFoundErr detected as unused (false positive) db7b3f4737 unused: ignore false positives b6de0ca7c5 G601: Implicit memory aliasing in for loop e8b838e99f gosec: G601: Implicit memory aliasing in for loop 2ddf6e598a gosimple: S1039: unnecessary use of fmt.Sprintf fadf8bbdff staticcheck: SA4001: &*x will be simplified to x. It will not copy x 7573e32577 client: S1031: unnecessary nil check around range (gosimple) e738a57a6d daemon/logger/journald: fix linting errors 34f6b94255 gosec: G404: Use of weak random number generator a6d7b61c8b update containerd binary to v1.6.7 b4ba1ee22f update runc binary to v1.1.3 da8828c4b3 api: swagger: fix invalid example value (API v1.39-v1.41) 9501d91e19 api: swagger: document BuildCache fields (API v1.39-v1.41) 61fdea902b api: swagger: document BuildCache fields. c77432c889 [20.10] Update golang to 1.17.13 2833aa1e4b docs: api: add missing "platform" query-arg on create (v1.41) a8c28260ad api: swagger: add missing "platform" query-arg on create cfdc075b1c Fix file capabilities droping in Dockerfile 2daa6bb6b3 Windows: Re-create custom NAT networks after restart if missing from HNS 903cd53ce4 vendor: libnetwork 0dde5c895075df6e3630e76f750a447cf63f4789 eccaf6d368 [20.10] update golang to 1.17.12 ff7feeac37 vendor: github.com/containerd/continuity v0.3.0 Bumping libnetwork to version v0.7.0-dev.3-1841-gdcdf8f17, which comprises the following commits: 5e08bdb1 Revert: Added API to set ephemeral port allocator range 563fe8e2 README.md: repo was moved to https://github.com/moby/moby/tree/master/libnetwork bea0bcf5 libnetwork: skip firewalld management for rootless af0c46d8 Apply peformance tuning to new sandboxes also Bumping docker-cli to version v20.10.21, which comprises the following commits: 3e3677e47d docs: fix links to BuildKit backend 20e3951aeb Remove "experimental" gates around "--platform" in bash completion 75d7ce92a2 fixed the plugin command docker-runc a12c535f6e [20.10] vendor docker 03df974ae9e6c219862907efdd76ec2e77ec930b (v20.10.20) d18a3e9004 [20.10] vendor moby/buildkit v0.8.3-31-gc0149372 932ca73874 [20.10] vendor: github.com/docker/docker v20.10.19 7d51e65e72 [20.10] vendor: github.com/moby/buildkit 3a1eeca59a9263613d996ead67d53a4b7d45723d (v0.8 branch) 1ea8d69d6f feat(docker): add context argument completion e82aa85741 [20.10] vendor: github.com/docker/docker v20.10.18 e9176b36cc [20.10] vendor: github.com/containerd/continuity v0.3.0 bc6ff39e42 docs/reference: run.md update confusing example name 3fa7a8654f docs: update deprecation status for "overlay2.override_kernel_check" 3e06ce8bfa [20.10] Update go 1.18.7 to address CVE-2022-2879, CVE-2022-2880, CVE-2022-41715 93eead45ee Update to go 1.18.6 to address CVE-2022-27664, CVE-2022-32190 45075ea08c [20.10] vendor: github.com/docker/docker v20.10.17 c2dcaecf19 make compose plugin detection in bash completion work on Mac OS 613b9362d0 Detect compose plugin b30d250320 Add completion for docker-compose plugin 6b25bc3003 fix race condition in TestRemoveForce bdac0b38d9 Update golang to 1.18.5 c70b01ec1f update golang to 1.18.4 0389090aeb update golang to 1.18.3 c904936d69 update golang to 1.18.2 386d50c2e9 update golang to 1.18.1 990186f2f6 update go to 1.18.0 86bf1966e2 staticcheck: ignore SA1019: strings.Title is deprecated b3022b91d1 [20.10] Dockerfile.lint: use go install f14ba9f5d7 [20.10] Dockerfile: use syntax=docker/dockerfile:1 c189c4dbea [20.10] vendor: github.com/json-iterator/go v1.1.12 for Go 1.18 compatibility 0c46ffc1f9 [20.10] vendor: github.com/modern-go/reflect2 v1.0.2 for Go 1.18 compatibility 6be9ce798e [20.10] vendor: github.com/google/gofuzz v1.0.0 779ed309a8 lint: update golangci-lint to v1.45.2 2f7e84be65 linting: fix incorrectly formatted errors (revive) e628209d9b linting: ignore some "G101: Potential hardcoded credentials" warnings 80a3add604 cli/command/container: unnecessary use of fmt.Sprintf (gosimple) 80fb0d575e [20.10] Update golang to 1.17.13 d72bef2088 [20.10] update golang to 1.17.12 7502d7e560 Fix dead external link Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> containerd: update to v1.6.9 Bumping containerd to version v1.6.9-12-g6c41694da, which comprises the following commits: 5af8d89ce overlayutils: Add fastpath for userxattr check 303f608dd [release/1.6] update to Go 1.18.8 to address CVE-2022-41716 3f9f9508d ctr export strictly match default platform df73acad5 [release/1.6] go.mod: Bump hcsshim to v0.9.5 658490b78 ctr import: strictly match platform 4907b4d72 Migrate away from GitHub actions set-output f1493f665 Prepare release notes for v1.6.9 346412f5a adding support of CAP_BPF and CAP_PERFMON 99578d1fc Update mailmap a956d8415 Add logging volume metrics to Containerd CRI plugin 29e2dea50 fix pusher concurrent close channel 8a9d69385 [release/1.6] Stats() shouldn't assume s.container is non-nil a9adc7938 cri: PodSandboxStatus should tolerate missing task b66eb726a migrate from k8s.gcr.io to registry.k8s.io 5b40993a5 [release/1.6] upgrade containerd/continuity from v0.2.2 to v0.3.0 f2376e659 Update container with sandbox metadata after NetNS is created 06f82efef archive: validate digests before use 28324c529 [release/1.6] Update go 1.18.7, addresses CVE-2022-2879, CVE-2022-2880, CVE-2022-41715 0aeeb62cb [release/1.6] update golangci-lint to v1.19.0 7db9d1f76 Fix linter warnings 4dc932e62 [release/1.6] gofmt with go1.19 7b8d679ad [release/1.6] integration: remove use of deprecated io/ioutil 926b9c72f retry request on writer reset b9a35c6af Add integration tests with failpoint 1f29fac48 Persist container and sandbox if resource cleanup fails, like teardownPodNetwork a85709c6c integration: simplify CNI-fp and add README.md d89a8d223 pkg/failpoint: add FreeBSD link and update pkg doc b0ce2965a integration: Add injected failpoint testing for RunPodSandbox a7f956d86 integration: CNI bridge wrapper with failpoint 07c479471 pkg/failpoint: add DelegatedEval API 4a5bc05aa runtime/v2/shim: return if error in load plugin 71ee7de24 bin/ctr,integration: new runc-shim with failpoint 3e2e77849 runtime/v2: manager supports server interceptor cb935bf49 pkg/failpoint: init failpoint package 2fdfd564c make xattr EPERM non-fatal in createTarFile 89e49609d remotes/docker/config: Skipping TLS verification for localhost b720be2ce remove stray .zuul.yaml 6b30bc4b4 .zuul: remove the zuul because it is offline 0f7e258ee Set grpc code for unimplemented cri-api methods fb753e5cd update intergration 6ee5bb7ea bump cri-api ae8598615 ContainerStatus to return container resources d3c7e31c8 Update CRI-API 5b44c5271 vendor: golang.org/x/crypto v0.0.0-20220315160706-3147a52a75dd 3507d600b update runc binary to v1.1.4 1efd8b947 ci: remove GOPROXY environment variable due to https://github.com/go-yaml/yaml/issues/887 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2022-12-07 16:12:33 -05:00
Jose Quaresma	2d0f7255a7	docker/proxy: don't use -linkshared unconditionally ... The linkshared is not supported in some machines like riscv64 and when supported we can use the GO_LINKSHARED instaed. So export GO_LINKSHARED on the recipe to be available for Makefile. This is currently only used in libnetwork for the proxy build, but could be used in additional locations in the future. Signed-off-by: Jose Quaresma <jose.quaresma@foundries.io> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2022-09-20 08:42:10 -04:00
Bruce Ashfield	7cea149bb0	docker: reproducibility add -trimpath to go -> $GO patches ... With this, we build and package docker without QA warnings due to references to TMPDIR. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2022-09-13 11:25:46 -04:00
Bruce Ashfield	f6bf30aca6	docker: ensure that sysvinit and systemd are exclusive ... The sysvinit functionality conflicts with the docker daemon settings required for the systemd docker.socket. Ensure that the sysvinit capabilities are only enabled if systemd is not present. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2022-08-25 22:55:48 -04:00
Bruce Ashfield	bd60f149dc	docker-ce: update to 20.10.17 ... Bumping moby to version v20.10.17-2-g3949ff121e, which comprises the following commits: ff7feeac37 vendor: github.com/containerd/continuity v0.3.0 6f3f2b6d08 update containerd binary to v1.6.6 b3bcb15da8 update containerd binary to v1.6.5 f55b030fa0 system: unbreak build for darwin 63ab12cd3a Port pkg/system/mknod.go to FreeBSD 081e538fbd vendor: libnetwork f6ccccb1c082a432c2a5814aaedaca56af33d9ea 8e9d647c01 [20.10] update golang to 1.17.11 87ead7fd2a vendor: hcsshim a11a2c44e8a4aa9d66314b1d759ef582df5ab5e8 27f8322324 vendor: libnetwork 2dab5620d4462865c6151e573b3e7fa5d3b8458b 829951ec19 docs: api: /containers/{id}/attach/ws: remove unsupported query-args < v1.42 6cbe73bfc0 Rename Reservation to Reservations in the open API d9ed3d7e28 update runc binary to v1.1.2 a15acb4bd6 [20.10] vendor: golang.org/x/sys v0.0.0-20220412211240-33da011f77ad 5f2e0b79ad [20.10] update golang to 1.17.10 Bumping libnetwork to version v0.7.0-dev.3-1835-gf6ccccb1, which comprises the following commits: af0c46d8 Apply peformance tuning to new sandboxes also 23ffb31f Set ExternalPortReserved for dummy proxy 9b82e422 Bump hcsshim 9db86fb7 Only check if route overlaps routes with scope: LINK Bumping docker-cli to version v20.10.17, which comprises the following commits: 7502d7e56 Fix dead external link 308624c3b fix: remove asterisk from docker command suggestions de7d866b6 [20.10] update golang to 1.17.11 240e4b550 [20.10] vendor: golang.org/x/sys v0.0.0-20220412211240-33da011f77ad 5d4776bd9 [20.10] update golang to 1.17.10 49e9c2ae3 vendor: golang.org/x/sys 63515b42dcdf9544f4e6a02fd7632793fde2f72d (for Go 1.17) 87a3ce269 vendor: golang.org/x/sys d19ff857e887eacb631721f188c7d365c2331456 1d8abed17 vendor: update x/sys to 134d130e 31dad66f9 [20.10] update golang to 1.17.9 80f673bf9 gofmt with go1.17 3d4cc8e69 [20.10] update remaining files to go1.17.8 30277a8f8 update go to 1.17.8 cfef3a7dc docs: deprecated: add entry for "fluent-async-connect" log-opt 53426025c [20.10] docs: reformat table for compatibility 573a66463 Describe privileged mode in terms of capabilities cf0ab7ac4 [20.10] vendor: github.com/docker/distribution v2.8.1 d05fd4ffc [20.10] vendor: github.com/opencontainers/image-spec v1.0.2 870f13825 [20.10] vendor: github.com/docker/docker v20.10.14 198d6b872 [20.10] circleci: update buildx to v0.8.2 55a14ec85 [20.10] update remaining Dockerfiles to go 1.16.15 1f9a0df05 e2e: update docker-compose to 1.29.2 4ae338b33 docs: reference: remove trailing space to fix yaml formatting 6380142dd docs: fix (table) formatting, fix some broken links 82f422fcf docs: build: fix minor markdown and syntax issues 80fd77903 Update the list of log drivers c3d4d623c Fix CMD --ignored-param1 example 2e82d11de docs: dockerd: fix broken link in blockquote area 738a6ee1c improve cp documentation with some illustration examples 246d96bb6 docs: unify "docker create" and "docker run" reference 2fd0f1705 docs: add missing documentation for --pull flag 5fa500000 Fix incorrect pointer inputs to `json.Unmarshal` 1e6a8ce2b Dockerfile: update xx to 1.1 6f7a931a2 [20.10] use GO_LDFLAGS instead of LDFLAGS to prevent inheriting unrelated options 91bab605f [20.10] vendor.conf: don't use git:// protocol a282e0c5d [20.10] update to go 1.16.15 to address CVE-2022-24921 700364e30 Fix mistake with env var example in docker run docs 62d27c32f Update WORKDIR command information c0e952cf0 Fix the (dead) link for docs for Dockerfile syntax reference 04104a04d Update dockerd.md b721998b7 Fixing typo (his --> its) 4065e1246 format create.md table f1002eb9f Fix typo e97c7b240 added missing closing parenthese aa7893763 Update stats.md add example json output 40fe0573a Update Ubuntu version number references in push.md c9737e1c3 docs/daemon: replace deprecated '-g' option for '--data-root' 5c6723d08 Correct device syntax to --gpus fd5fc61ec [20.10] Update Go to 1.16.14 3624019d8 [20.10] update Go to 1.16.13 f3ff8e6ad [20.10] vendor: compose-on-kubernetes v0.5.0 to remove github.com/golang/glog ee1ac1b31 fix innocuous data-race when config.Load called in parallel 38dd744a1 [20.10] Update Go to 1.16.12 4de40a825 Update Go to 1.16.11 03fa8f92c Update Go to 1.16.10 9989fdbc4 Update most links in docs to use https by default 0e20c1fd2 Update Go to 1.16.9 1c0927a04 Dockerfile: update tonistiigi/xx to 1.0.0-rc.2, add XX_VERSION arg 82f9d5921 info: skip client-side warning about seccomp profile on API >= 1.42 adb01ca79 docs: some minor touch-ups in checkpoint reference 8260476a0 docs: remove trailing space to fix generated YAML format bce2e1f95 docs: create.md: typo fix 44064f51c Fix typo in documentation - build.md 292779add Add doc for BUILDKIT_PROGRESS env var f2e79b826 docs: use "console" code-hint for shell examples fa46b9236 docs: rewrite reference docs for --stop-signal and --stop-timeout 400f81089 experimental: fix broken link to "checkpoint and restore" page c72057c8d docs: move checkpoint/restore doc from experimental into reference 77db97d59 Use private network address for default-address-pools setting in daemon.json example cbf0d2b7b docs: fix some broken anchors d0014a86b docs: fix description of restart-delay to mention max (1 minute) 6c1c8b55a docs: fix search results by filterd is-official 44fdac11f Update Go to 1.16.8 061051c24 docs: add missing redirect, and remove /go/experimental redirect 2012fbf11 Update Go to 1.16.7 42d1c0275 registry: ensure default auth config has address Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2022-08-09 14:26:28 -04:00
Bruce Ashfield	dbe9ce60c2	docker-moby: update to 20.10.17 ... Bumping moby to version v20.10.17-2-g3949ff121e, which comprises the following commits: ff7feeac37 vendor: github.com/containerd/continuity v0.3.0 6f3f2b6d08 update containerd binary to v1.6.6 b3bcb15da8 update containerd binary to v1.6.5 f55b030fa0 system: unbreak build for darwin 63ab12cd3a Port pkg/system/mknod.go to FreeBSD 081e538fbd vendor: libnetwork f6ccccb1c082a432c2a5814aaedaca56af33d9ea 8e9d647c01 [20.10] update golang to 1.17.11 87ead7fd2a vendor: hcsshim a11a2c44e8a4aa9d66314b1d759ef582df5ab5e8 27f8322324 vendor: libnetwork 2dab5620d4462865c6151e573b3e7fa5d3b8458b 829951ec19 docs: api: /containers/{id}/attach/ws: remove unsupported query-args < v1.42 6cbe73bfc0 Rename Reservation to Reservations in the open API d9ed3d7e28 update runc binary to v1.1.2 a15acb4bd6 [20.10] vendor: golang.org/x/sys v0.0.0-20220412211240-33da011f77ad 5f2e0b79ad [20.10] update golang to 1.17.10 Bumping libnetwork to version v0.7.0-dev.3-1835-gf6ccccb1, which comprises the following commits: af0c46d8 Apply peformance tuning to new sandboxes also 23ffb31f Set ExternalPortReserved for dummy proxy 9b82e422 Bump hcsshim 9db86fb7 Only check if route overlaps routes with scope: LINK Bumping docker-cli to version v20.10.17, which comprises the following commits: 7502d7e56 Fix dead external link 308624c3b fix: remove asterisk from docker command suggestions de7d866b6 [20.10] update golang to 1.17.11 240e4b550 [20.10] vendor: golang.org/x/sys v0.0.0-20220412211240-33da011f77ad 5d4776bd9 [20.10] update golang to 1.17.10 49e9c2ae3 vendor: golang.org/x/sys 63515b42dcdf9544f4e6a02fd7632793fde2f72d (for Go 1.17) 87a3ce269 vendor: golang.org/x/sys d19ff857e887eacb631721f188c7d365c2331456 1d8abed17 vendor: update x/sys to 134d130e 31dad66f9 [20.10] update golang to 1.17.9 80f673bf9 gofmt with go1.17 3d4cc8e69 [20.10] update remaining files to go1.17.8 30277a8f8 update go to 1.17.8 cfef3a7dc docs: deprecated: add entry for "fluent-async-connect" log-opt 53426025c [20.10] docs: reformat table for compatibility 573a66463 Describe privileged mode in terms of capabilities cf0ab7ac4 [20.10] vendor: github.com/docker/distribution v2.8.1 d05fd4ffc [20.10] vendor: github.com/opencontainers/image-spec v1.0.2 870f13825 [20.10] vendor: github.com/docker/docker v20.10.14 198d6b872 [20.10] circleci: update buildx to v0.8.2 55a14ec85 [20.10] update remaining Dockerfiles to go 1.16.15 1f9a0df05 e2e: update docker-compose to 1.29.2 4ae338b33 docs: reference: remove trailing space to fix yaml formatting 6380142dd docs: fix (table) formatting, fix some broken links 82f422fcf docs: build: fix minor markdown and syntax issues 80fd77903 Update the list of log drivers c3d4d623c Fix CMD --ignored-param1 example 2e82d11de docs: dockerd: fix broken link in blockquote area 738a6ee1c improve cp documentation with some illustration examples 246d96bb6 docs: unify "docker create" and "docker run" reference 2fd0f1705 docs: add missing documentation for --pull flag 5fa500000 Fix incorrect pointer inputs to `json.Unmarshal` 1e6a8ce2b Dockerfile: update xx to 1.1 6f7a931a2 [20.10] use GO_LDFLAGS instead of LDFLAGS to prevent inheriting unrelated options 91bab605f [20.10] vendor.conf: don't use git:// protocol a282e0c5d [20.10] update to go 1.16.15 to address CVE-2022-24921 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2022-08-09 14:26:28 -04:00
Bruce Ashfield	3cf7b71086	docker-ce: update to 20.10.16 ... Bumping moby to version v20.10.16, which comprises the following commits: a15acb4bd6 [20.10] vendor: golang.org/x/sys v0.0.0-20220412211240-33da011f77ad 5f2e0b79ad [20.10] update golang to 1.17.10 be7855fdbe vendor: update github.com/containerd/cgroups and github.com/cilium/ebpf 414a9e24a7 update containerd binary to v1.6.4 47b6a924b6 update containerd binary to v1.6.3 6d7c2b2d26 update containerd binary to v1.6.2 91708bf704 update containerd binary to v1.6.1 53ae17008e Revert "[20.10] update containerd binary to 1.5.11" 961b9a78d5 update runc binary to v1.1.1 97972dac5f update runc binary to v1.1.0 033a819714 [20.10] update golang to 1.17.9 a80884126b Jenkinsfile: add workaround for CVE-2022-24765 09d6fcdfec update to go 1.17.8 to address CVE-2022-24921 5957684b2c Update Go to 1.17.7 55b72c70ba Update Go to 1.17.6 fdf3020bd5 Update Go to 1.17.5 36e164ba80 Update Go to 1.17.4 ecfba8f588 Update Go to 1.17.3 4e14dcc125 Update Go to 1.17.2 c32b5ece31 Update Go to 1.17.1 7096508811 vendor: update archive/tar to match Go 1.17.0 a1150245cc Update to Go 1.17.0, and gofmt with Go 1.17 95cc7115fb hack/vendor.sh: allow go version to be specified with .0 949c33b1c5 vendor: golang.org/x/sys 63515b42dcdf9544f4e6a02fd7632793fde2f72d (for Go 1.17) 8392285876 vendor: golang.org/x/sys d19ff857e887eacb631721f188c7d365c2331456 4e81bcf380 Makefile: update buildx to v0.8.2 74e699c8d3 Makefile: update buildx version to v0.6.0 bc3cc2e7ac Makefile: install buildx from binary release, instead of building 492fac20af api: docs: fix indentation of HostConfig.SecurityOpt (v1.39-v1.41) 3cba2682d8 api: docs: move ContainerWaitResponse to definitions (v1.39-v1.41) 55e71450ae api: docs: move VolumeCreateOptions to definitions (v1.39-v1.41) c54362cd64 api: docs: move Volume examples inline (v1.39-v1.41) c60ff9b296 doc: server API Correct ImagesCreate - platform parameter added in 1.32 7a45f7a8cc docs: cleanup swagger API with multiple examples (v1.25-v1.41) 29bb9204bf api: docs: add IPAMConfig on IPAM (v1.41) 77f6564369 api: docs: document MountPoint fields (v1.25-v1.41) 51ea235ab8 api: docs: remove deprecated RootFS.BaseLayer (API v1.25-v1.41) 3d6b4ae572 Correct type of Mounts in ContainerSummary in docs (v1.25-v1.40) 6e8b9809b7 Correct type of Mounts in ContainerSummary in docs 621a98dac0 api: docs: fix warning about comment indentation (API v1.40-v1.41) bb9ef98060 api: docs: update docs for /images/{name}/json (API v1.39-v1.41) 88ca5cec4e daemon: fix error-message for minimum allowed kernel-memory limit 3ea996abd7 docs: add missing KernelMemoryTCP to api v1.40 and v1.41 b475bc95cd docs/api: add missing 400 response for POST /containers/{id}/wait ae07b3cc96 docs/api: update /containers/{id}/wait "condition" parameter (v1.30-v1.41) 19555fa92d [20.10] vendor: github.com/docker/distribution v2.8.1 32fe0bbb91 daemon: use RWMutex for stateCounter ed8fb00b65 errdefs: move GetHTTPErrorStatusCode to api/server/httpstatus 3bd611d7a5 log error message when receiving an unexpected type error 7dfe7a1752 [20.10] update containerd binary to 1.5.11 af953d2f38 [20.10] vendor: containerd 7cfa023d95d37076d5ab035003d4839f4b6ba791 5f9753ae73 client: remove containerd "platform" dependency 4df345e65d client: remove unused Platform field from configWrapper dd38613d0c oci: inheritable capability set should be empty 2825bf7123 Only check if route overlaps routes with scope: LINK f5c56eaca8 [20.10] bump swarmkit for config size increase ce3b6d1ae9 distribution: retry downloading schema config on retryable error Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2022-06-03 09:32:13 -04:00
Bruce Ashfield	ade7848788	docker/moby/libnetwork: update to -latest ... Bumping libnetwork to version v0.7.0-dev.3-1830-g339b972b, which comprises the following commits: 9db86fb7 Only check if route overlaps routes with scope: LINK 7b9c2905 fix port forwarding with ipv6.disable=1 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2022-06-03 09:32:13 -04:00
Bruce Ashfield	ea4c3c3eba	docker/moby: update to 20.10.16 ... Bumping moby to version v20.10.16, which comprises the following commits: a15acb4bd6 [20.10] vendor: golang.org/x/sys v0.0.0-20220412211240-33da011f77ad 5f2e0b79ad [20.10] update golang to 1.17.10 be7855fdbe vendor: update github.com/containerd/cgroups and github.com/cilium/ebpf 414a9e24a7 update containerd binary to v1.6.4 47b6a924b6 update containerd binary to v1.6.3 6d7c2b2d26 update containerd binary to v1.6.2 91708bf704 update containerd binary to v1.6.1 53ae17008e Revert "[20.10] update containerd binary to 1.5.11" 961b9a78d5 update runc binary to v1.1.1 97972dac5f update runc binary to v1.1.0 033a819714 [20.10] update golang to 1.17.9 a80884126b Jenkinsfile: add workaround for CVE-2022-24765 09d6fcdfec update to go 1.17.8 to address CVE-2022-24921 5957684b2c Update Go to 1.17.7 55b72c70ba Update Go to 1.17.6 fdf3020bd5 Update Go to 1.17.5 36e164ba80 Update Go to 1.17.4 ecfba8f588 Update Go to 1.17.3 4e14dcc125 Update Go to 1.17.2 c32b5ece31 Update Go to 1.17.1 7096508811 vendor: update archive/tar to match Go 1.17.0 a1150245cc Update to Go 1.17.0, and gofmt with Go 1.17 95cc7115fb hack/vendor.sh: allow go version to be specified with .0 949c33b1c5 vendor: golang.org/x/sys 63515b42dcdf9544f4e6a02fd7632793fde2f72d (for Go 1.17) 8392285876 vendor: golang.org/x/sys d19ff857e887eacb631721f188c7d365c2331456 4e81bcf380 Makefile: update buildx to v0.8.2 74e699c8d3 Makefile: update buildx version to v0.6.0 bc3cc2e7ac Makefile: install buildx from binary release, instead of building 492fac20af api: docs: fix indentation of HostConfig.SecurityOpt (v1.39-v1.41) 3cba2682d8 api: docs: move ContainerWaitResponse to definitions (v1.39-v1.41) 55e71450ae api: docs: move VolumeCreateOptions to definitions (v1.39-v1.41) c54362cd64 api: docs: move Volume examples inline (v1.39-v1.41) c60ff9b296 doc: server API Correct ImagesCreate - platform parameter added in 1.32 7a45f7a8cc docs: cleanup swagger API with multiple examples (v1.25-v1.41) 29bb9204bf api: docs: add IPAMConfig on IPAM (v1.41) 77f6564369 api: docs: document MountPoint fields (v1.25-v1.41) 51ea235ab8 api: docs: remove deprecated RootFS.BaseLayer (API v1.25-v1.41) 3d6b4ae572 Correct type of Mounts in ContainerSummary in docs (v1.25-v1.40) 6e8b9809b7 Correct type of Mounts in ContainerSummary in docs 621a98dac0 api: docs: fix warning about comment indentation (API v1.40-v1.41) bb9ef98060 api: docs: update docs for /images/{name}/json (API v1.39-v1.41) 88ca5cec4e daemon: fix error-message for minimum allowed kernel-memory limit 3ea996abd7 docs: add missing KernelMemoryTCP to api v1.40 and v1.41 b475bc95cd docs/api: add missing 400 response for POST /containers/{id}/wait ae07b3cc96 docs/api: update /containers/{id}/wait "condition" parameter (v1.30-v1.41) 19555fa92d [20.10] vendor: github.com/docker/distribution v2.8.1 32fe0bbb91 daemon: use RWMutex for stateCounter ed8fb00b65 errdefs: move GetHTTPErrorStatusCode to api/server/httpstatus 3bd611d7a5 log error message when receiving an unexpected type error 7dfe7a1752 [20.10] update containerd binary to 1.5.11 af953d2f38 [20.10] vendor: containerd 7cfa023d95d37076d5ab035003d4839f4b6ba791 5f9753ae73 client: remove containerd "platform" dependency 4df345e65d client: remove unused Platform field from configWrapper dd38613d0c oci: inheritable capability set should be empty 2825bf7123 Only check if route overlaps routes with scope: LINK f5c56eaca8 [20.10] bump swarmkit for config size increase ce3b6d1ae9 distribution: retry downloading schema config on retryable error Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2022-06-03 09:32:13 -04:00
Bruce Ashfield	e3087cd666	docker-ce: update to v20.10.12 ... Bumping docker to version v20.10.12-84-g906f57ff5b, which comprises the following commits: ce3b6d1ae9 distribution: retry downloading schema config on retryable error 180f3b9cc7 update containerd binary to v1.5.10 0fa0d70489 [20.10] update to go 1.16.15 to address CVE-2022-24921 4679ffd01c docs: remove HostConfig.LxcConf field from API docs fbbe1fcfd8 api: remove HostConfig.LxcConf field a5a697143d docs: fixing /exec/{id}/resize response code in API documentation 42b13c09a6 Added error codes for exec resize in API docs aa69e8ed3f Fixed exec resize success code in API docs ca5ba4890e Fix typo on the v1.41 changelog db214206e5 vendor: bump etcd v3.3.27 df6a536193 vendor: github.com/coreos/etcd v3.3.25 9502dec32f [20.10] Update Go to 1.16.14 878b9de935 daemon/graphdriver/fuse-overlayfs: Init(): fix directory permissions (staticcheck) d1b3497bfa [20.10] vendor: github.com/docker/distribution v2.8.0 f9344b45fe api/swagger: move DistributionInspect to definitions 13cb9d9723 api/swagger: rename PluginPrivilegeItem to PluginPrivilege 7f9760e10c api/swagger: fix up event-types and move to definitions e6739a2884 api/swagger: move DistributionInspect to definitions d445d24804 api/swagger: rename PluginPrivilegeItem to PluginPrivilege 5e38ae84b2 api/swagger: fix up event-types and move to definitions 012fdff916 Fix swagger docs to match the opencontainers image-spec 13cbf7fbb7 Extract PluginPrivilegeItem as explicit type definition 8fbcf0611b Use explicit object names for improved swagger based code generation b8bee972c4 Fix ContainerSummary swagger docs 7092a6091c Add "changes" query parameter for /image/create to swagger docs adf1e470a1 Add RestartPolicy "no" to swagger docs b4b469eac2 Fix swagger docs to match the opencontainers image-spec 2c38a2a635 Extract PluginPrivilegeItem as explicit type definition 621bfddd6e Use explicit object names for improved swagger based code generation 8a5240a8aa Fix ContainerSummary swagger docs 751cf68e36 Add "changes" query parameter for /image/create to swagger docs a961b76aef Add RestartPolicy "no" to swagger docs ad21bcd94e Jenkinsfile: remove Windows RS1 as it reached end of support b2684c1857 Fix for lack of syncromization in daemon/update.go 8268f70ebb daemon/logger: replace flaky TestFollowLogsHandleDecodeErr 78d0b936b8 daemon/logger: refactor followLogs to write more unit tests 39519221c2 daemon/logger: test followLogs' handleDecodeErr case ada1b01de1 daemon/logger: read the length header correctly 829f071228 update containerd binary to v1.5.9 3e5eea4192 update runc binary to v1.0.3 bd42e17284 update containerd binary to v1.5.8 3fd0b8d6eb Update containerd binary to v1.5.7 3700adb70a Update containerd binary to v1.5.6 0f37f2989b Dockerfile: update gotestsum to v1.7.0 2716336abd Dockerfile: use "go install" to install utilities b35a1707e3 Dockerfile: use version for some utilities instead of commit-sha 2a18825cdf Dockerfile: remove GOPROXY override (was for go < 1.14) 0f925d5d3d remove deprecated "nokmem" build-tag for runc fb45fe614d info: remove "expected" check for tini version fd32c70031 update containerd binary to v1.5.5 302114634c update containerd binary v1.4.8 1cd13dcb6c Update containerd binary to v1.5.3 5f09d5c76a update containerd binary to v1.5.2 23f23c99ed update containerd binary to v1.5.1 f036a34c5b update containerd binary to v1.5.0 1dd37750a6 Revert "[20.10] update containerd binary to v1.4.5" b097d29705 Revert "[20.10] update containerd binary to v1.4.6" de656f9da4 Revert "[20.10] update containerd binary to v1.4.7" 9e36f77577 Revert "[20.10] update containerd binary v1.4.8" eb2acf2fb3 Revert "[20.10] update containerd binary to v1.4.9" 4e838e50ea Revert "[20.10] update containerd binary to v1.4.10" 79fd9c1541 Revert "[20.10] update containerd binary to v1.4.11" 13de46fd4b Revert "[20.10] update containerd binary to v1.4.12" aa92e697cb [20.10] update Go to 1.16.13 f9df098e76 fluentd: Turn ForceStopAsyncSend true when async connect is used 81fc02b7e1 vendor: github.com/fluent/fluent-logger-golang v1.8.0 d6f3add5c6 vendor: github.com/fluent/fluent-logger-golang 1.6.1 660b9962e4 daemon.WithCommonOptions() fix detection of user-namespaces a621bc007b [20.10] update Go to 1.16.12 f4daf9dd08 [20.10] update Go to 1.16.11 dc015972bb vendor: github.com/opencontainers/image-spec v1.0.2 e0108db2bd [20.10] fix vendor validation d47de2a4c7 [20.10] update containerd binary to v1.4.12 da9c983789 [20.10] vendor: github.com/moby/buildkit v0.8.3-4-gbc07b2b8 c1f352c4b1 distribution: validate blob type c96ed28f2f vendor: update github.com/containerd/containerd 7677aeafd7 TestBuildUserNamespaceValidateCapabilitiesAreV2: cleanup daemon storage 34eb6fbe60 testutil: daemon.Cleanup(): cleanup more directories 0e76a0a418 info: unset cgroup-related fields when CgroupDriver == none c7edd308ad [20.10] Update Go to 1.16.10 b3456925ca vendor: update github.com/docker/distribution 6611c72b65 cmd/dockerd: create panic.log file without readonly flag 4b9a3dac46 Fix race in TestCreateServiceSecretFileMode, TestCreateServiceConfigFileMode acb4f263b3 Fix racey TestHealthKillContainer 59d2a2c397 dockerd-rootless.sh: Fix variable not double quotes cause unexpected behavior 2c6aa5aad9 Remove needless check 3285c27503 Fix log statement 'failed to exit' timeout accuracy a4bcd4c64f docker daemon container stop refactor bed624fdc9 docker kill: fix bug where failed kills didnt fallback to unix kill 80b7e8b5d7 buildkit: normalize build target and local platform c2b9a32875 vendor: Update go-winio to v0.4.20 c580a02873 [20.10] Update Go to 1.16.9 129a2000cf [20.10] update containerd binary to v1.4.11 6835d15f55 [20.10] update containerd binary to v1.4.10 5730c139f7 Bump swarmkit to get fix for rollback 59f10e3435 quota: adjust build-tags to allow build without CGO fa78afebcf Update Go to 1.16.8 567c01f6d1 seccomp: add support for "clone3" syscall in default policy 07728cd2bd update runc binary to v1.0.2 964768f200 cmd/dockerd: add the link of "the documentation" 80f1169eca chrootarchive: don't create parent dirs outside of chroot 93ac040bf0 Lock down docker root dir perms. b0c0b73798 bump up rootlesskit to v0.14.4 decb56ac89 Update Go to 1.16.7 Bumping docker-cli to version v20.10.12-22-ga22408634, which comprises the following commits: a282e0c5d [20.10] update to go 1.16.15 to address CVE-2022-24921 700364e30 Fix mistake with env var example in docker run docs 62d27c32f Update WORKDIR command information c0e952cf0 Fix the (dead) link for docs for Dockerfile syntax reference 04104a04d Update dockerd.md b721998b7 Fixing typo (his --> its) 4065e1246 format create.md table f1002eb9f Fix typo e97c7b240 added missing closing parenthese aa7893763 Update stats.md add example json output 40fe0573a Update Ubuntu version number references in push.md c9737e1c3 docs/daemon: replace deprecated '-g' option for '--data-root' 5c6723d08 Correct device syntax to --gpus fd5fc61ec [20.10] Update Go to 1.16.14 3624019d8 [20.10] update Go to 1.16.13 f3ff8e6ad [20.10] vendor: compose-on-kubernetes v0.5.0 to remove github.com/golang/glog ee1ac1b31 fix innocuous data-race when config.Load called in parallel 38dd744a1 [20.10] Update Go to 1.16.12 4de40a825 Update Go to 1.16.11 03fa8f92c Update Go to 1.16.10 9989fdbc4 Update most links in docs to use https by default 0e20c1fd2 Update Go to 1.16.9 1c0927a04 Dockerfile: update tonistiigi/xx to 1.0.0-rc.2, add XX_VERSION arg 82f9d5921 info: skip client-side warning about seccomp profile on API >= 1.42 adb01ca79 docs: some minor touch-ups in checkpoint reference 8260476a0 docs: remove trailing space to fix generated YAML format bce2e1f95 docs: create.md: typo fix 44064f51c Fix typo in documentation - build.md 292779add Add doc for BUILDKIT_PROGRESS env var f2e79b826 docs: use "console" code-hint for shell examples fa46b9236 docs: rewrite reference docs for --stop-signal and --stop-timeout 400f81089 experimental: fix broken link to "checkpoint and restore" page c72057c8d docs: move checkpoint/restore doc from experimental into reference 77db97d59 Use private network address for default-address-pools setting in daemon.json example cbf0d2b7b docs: fix some broken anchors d0014a86b docs: fix description of restart-delay to mention max (1 minute) 6c1c8b55a docs: fix search results by filterd is-official 44fdac11f Update Go to 1.16.8 061051c24 docs: add missing redirect, and remove /go/experimental redirect 2012fbf11 Update Go to 1.16.7 42d1c0275 registry: ensure default auth config has address Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2022-03-21 17:31:28 -04:00