mirror of
git://git.yoctoproject.org/meta-virtualization.git
synced 2025-07-05 05:15:25 +02:00
master
1195 Commits
| Author | SHA1 | Message | Date | |
|---|---|---|---|---|
Bruce Ashfield
|
79db703e34 |
runc-opencontainers: update to v1.2.0
Bumping runc to version v1.2.0-149-g610aa88a, which comprises the following commits:
06f1e076 libct: speedup process.Env handling
6171da60 libct/configs: add HookList.SetDefaultEnv
c49b8916 tests: add test to check StartContainer hook env
390641d1 libct/int: improve TestExecInEnvironment
9a545947 libct/int: add BenchmarkExecInBigEnv
a69d289f build(deps): bump google.golang.org/protobuf from 1.36.1 to 1.36.2
061483b6 build(deps): bump golang.org/x/net from 0.33.0 to 0.34.0
48ad17f4 build(deps): bump golang.org/x/sys from 0.28.0 to 0.29.0
83350c24 libct/system: rm Fexecve
c0abf76e Update README.md
f8483049 build(deps): bump google.golang.org/protobuf from 1.36.0 to 1.36.1
57462491 libct/configs/validate: add IOPriority.Class validation
7334ee01 libct/configs: rm IOPrioClassMapping
5d3942ee libct: unify IOPriority setting
ec465d39 utils: simplify newProcess
2dc3ea4b libct: simplify setIOPriority/setupScheduler calls
93091e6a libct: don't pass SpecState to init unless needed
8afeb583 libct: add/use configs.HasHook
171c4149 refactor init and setns process
5855ba53 build(deps): bump github.com/cilium/ebpf from 0.17.0 to 0.17.1
e809db84 build(deps): bump github.com/cilium/ebpf from 0.16.0 to 0.17.0
c2b11a63 build(deps): bump golang.org/x/net from 0.32.0 to 0.33.0
71327d7f build(deps): bump github.com/cyphar/filepath-securejoin
af929228 RELEASES: add formal release policy for runc
21c0968b remove broken fuzzer from oss-fuzz build script
9468986a ci: use a specific ubuntu version
e845f4be ci: bump golangci-lint to v1.62
705382ac build(deps): bump google.golang.org/protobuf from 1.35.2 to 1.36.0
394f4c3b Re-add tun/tap to default device rules
b15fcc1b keyring: update @kolyshkin key expiry
5a838ccb tests/cmd/sd-helper: switch from configs to cgroups
a56f85f8 libct/*: switch from configs to cgroups
04041f21 libct/cgroups/*: switch from configs to cgroups
ae477f15 libct/configs: move cgroup stuff to libct/cgroups
85c7c99d libct/cg/fs2: fix some revive linter warnings
66fe7db3 Move test helper binaries
47dc1858 Add runc_nocriu build tag
c487840f Remove main package dependency on criurpc
2f1b6626 deps: update to github.com/cyphar/filepath-securejoin@v0.3.5
c0044c7a cgroup: ebpf: make unexpected errors in haveBpfProgReplace louder
9bc6753d cgroups: ebpf: also check for ebpf.ErrNotSupported
dea0e04d cgroups: ebpf: use link.Anchor to check for BPF_F_REPLACE support
d5694eed build(deps): bump golang.org/x/net from 0.31.0 to 0.32.0
ec7e90b3 build(deps): bump golang.org/x/sys from 0.27.0 to 0.28.0
66969827 Switch to github.com/moby/sys/capability v0.4.0
fe73f1a9 libct/cap: switch to lazy init
cdee1b38 libct/cap: preallocate slices
b7da1673 build(deps): bump google.golang.org/protobuf from 1.35.1 to 1.35.2
fffc165d tests: add test for 'weird' external namespace joining
fadc55eb nsenter: implement a two-stage join for setns
a97d7cb2 nsenter: refuse to join unknown namespaces
49bee5c4 cfmt: use the Linux { a, b } decl style
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
ac82e30c68 |
podman-tui: update to v1.3.0
Bumping podman-tui to version v0.9.0-406-g37019c2f, which comprises the following commits:
37019c2f Bump to v1.3.0
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
9924532fa8 |
podman-compose: update to v1.3.0
Bumping podman-compose to version v1.3.0-4-g60ac5e4, which comprises the following commits:
48c6c38 build(deps): bump virtualenv from 20.25.1 to 20.26.6
ac5291e RELEASING: Fix release command
9cbc4c1 Release 1.3.0
6de335b Release notes for 1.3.0
2379924 Add documentation for how to create a release
eda4815 scripts: Add script to make new release
cbb0cab scripts: Add script to create release notes
483103a Declare compatibility with Python 3.13
804852b Provide support for cache_from and cache_to fields
f11e08e Read log output by chunks if a line is too long
35cf4bc tests: Add test for container_to_build_args()
9964604 Extract container_to_build_args()
ac7ec5c Support network level mac_address attribute
346f7a5 Ignore creating networks on network_mode=bridge.
5564224 Add integration test for network scoped aliases
978a138 Support network scoped service aliases
4a232f5 Merge single and multi network handling in get_net_args_from_networks()
aa8c6fd Simplify network handling in get_net_args_from_networks()
fb0bbd6 Cleanup network alias processing
b324029 Simplify network name processing when there is single network
590c371 Move network alias processing to common location
16196a1 Simplify ip address processing in get_net_args_from_networks()
2dfbb59 Extract multiple network handling in get_net_args_from_networks()
a34d1d1 Remove unused ip_assignments in get_net_args_from_networks()
d6da65e Extract get_net_args_from_networks()
de2c33d Simplify get_net_args_from_network_mode()
2891be0 Ensure that network_mode and networks are not present at the same time
a023dc1 Extract get_net_args_from_network_mode()
420d19d Add integration test for default network behavior
2cfc617 Support docker-compose like default network behavior
054c66b Add device_cgroup_rules support
145ae47 Simplified statements to retrieve keys from dictionaries
a67fa0b Adding support for conditional dependencies
3ba0396 Normalize depends_on service property
973e15b Wrap dependencies within a class
002c2e4 Extract run_container()
a9cfdb6 build(deps): bump actions/checkout from 2 to 4
c0dc3e4 build(deps): bump softprops/action-gh-release from 1 to 2
41e69be Fix Dockerfile link in readme
4203f79 add release.yml workflow
69e95be add Dockerfile and related scripts
db0aad9 podman-compose down removes networks
ab33954 add ssh support for build command
90f54b9 Add x-podman.no_hosts extension
df8fa58 tests/integration: Automate manual 'nets_test2' test
5c81bbf tests/integration: Automate manual 'nets_test1' test
deed4d5 tests/integration: Automate manual 'ipam_default' test
08b3ac2 tests/integration: Delete 'netprio' test
0de7e13 tests/integration: Automate manual 'multicompose' test
cb294d7 tests/integration: Automate manual 'nethost' test
8d0dd21 tests/integration: Automate manual 'interpolation' test
4a7329b Revert "Use defined environment variables in the image build process"
de3f93c tests/integration: Relocate 'filesystem' test
f4bf69b tests/integration: Automate manual 'extends_w_file_subdir' test
124879a tests/integration: Automate manual 'extends_w_file' test
368efe2 tests/integration: Automate manual 'extends_w_empty_service' test
5610949 test: Use stable apt-get cli for package installation
ea239c4 Simplify secrets assignment
9fdee76 Initialize default values in PodmanCompose constructor
0a6e0a3 Fix services replicas type
26e6651 Type hints via annotations
4626033 Remove is_dict,is_str for better pyright inference
8411db4 Minimum Python version 3.9
ed58ac0 clean up redundant default_net variable
305f25b clean up redundant proj_name
dc04108 tests/integration: Automate manual 'extends' test
92dbd36 tests/integration: Automate 'env-file-tests' manual tests
9e11c6b tests/integration: Automate manual 'exit-from' tests
0d24c41 tests/integration: Automate 'env-tests' manual test
34f5268 Add unittest for rec_subs
b5eaf31 Support variable substitution with service's environment
b3c49df podman_compose.py: support "platform" property in the build command
7d7e64f Update docs+messages to reflect uidmaps/gidmaps code
3c9c18c tests/integration: Automate `deps` manual test
1e66c28 Remove references to nonexistent devel and stable branches
d95b4d0 Add newsfragment
e2eb883 Add `--network=none` if `network_mode: none` is set; fixes #1001.
8505009 Support python direct call _parse_args or run
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
c2e487745f |
podman: update to v5.3.1-tip
Bumping libpod to version v5.3.1-21-g8dc23e107e, which comprises the following commits:
d9a47a6d87 Revert "win-installer test: revert to v5.3.0"
957b4da983 Avoid rebooting twice when installing WSL
439136d76e Avoid rebooting on Windows when upgrading and WSL isn't installed
434b0b6e4f Add win installer patch
d4a7688b06 Bump WiX toolset version to 5.0.2
1ca5ab6e9c Add man pages to Mac installer
139fd2a7cf Replace ExclusiveArch with ifarch
cd1b2981b4 Fixes missing binary in systemd.
d4976e0677 Packit: remove epel and re-enable c9s
fee50f0f31 Packit/copr: switch to fedora-all
0d22d7b74e Quadlet - Use = sign when setting the pull arg for build
62c096bbce win-installer test: revert to v5.3.0
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
7e6b171487 |
netavark: update to v1.13.1
Bumping netavark to version v1.13.1-1-g443d164, which comprises the following commits:
0935a20 Release v1.13.1
56428e7 Release notes for v1.13.1
ce52673 setup: on av errors cleanup again
f6fe9ed nftables: add daddr match to port forward jump rule
00e7472 Release v1.13.0
04650aa Updates release notes for v1.13.0
84f8e89 run cargo update
6ba9d5d fix(deps): update rust crate hyper-util to 0.1.10
5a31988 [skip-ci] Packit: Remove epel targets
4bc65c2 fix(deps): update rust crate nftables to 0.5.0
ca9c45e fix(deps): update rust crate anyhow to 1.0.91
31fc658 fix(deps): update rust crate tokio to 1.41.0
6284e8b fix(deps): update rust crate anyhow to 1.0.90
571e26d Updated to zbus4
bd29d93 chore(deps): update dependency containers/automation_images to v20241010
8114c82 test-dhcp: fix NOP test
acd2a9d fix new lint errors with rust 1.81
e848ea5 fix(deps): update rust crate clap to ~4.5.20
08333ad contrib/container_images: remove no longer used images
dc440ac cirrus: check for msrv build
bb0359d add new rust image to check for MSRV
e2eea81 define a MSRV policy
ef66137 [skip-ci] Packit: constrain koji and bodhi to the fedora package
bc6ad66 chore(deps): update rust crate once_cell to 1.20.2
7b6df6e fix(deps): update rust-futures monorepo to 0.3.31
0a3f78b OWNERS file audit and update
c198914 update tonic and prost dependencies
97d56bb update tower to v0.5.1
dccb834 fix(deps): update rust crate sysctl to 0.6.0
503298d fix(deps): update rust crate netlink-packet-route to 0.21.0
f0738f2 chore(deps): update rust crate tempfile to 3.13.0
6433c1c chore(deps): update rust crate once_cell to 1.20.1
4025d42 fix(deps): update rust crate nispor to 1.2.21
df781e3 fix(deps): update rust crate anyhow to 1.0.89
b497d6b nftables: add dns dnat rule first
22b5110 iptables: add dns dnat rule first
78ef87f fix(deps): update rust crate anyhow to 1.0.88
38c90f5 nft: remove port forwarding rules correctly
f599796 fix(deps): update rust crate tokio-stream to 0.1.16
ad840ab nft: do not parse localhost string ip
a7b65ac nft: use append() over push() where possible
17f8b04 Packit: add sidetag to release with aardvark-dns
34c742b fix(deps): update rust crate tokio to 1.40.0
6782bbf fix(deps): update rust crate libc to 0.2.157
e650a76 fix(deps): update rust crate tokio to 1.39.3
678beff fix(deps): update rust crate libc to 0.2.156
4f37d9f aardvark: on start failure delete entries again
23ac90f iptables: make dns rules cover tcp as well
7d2882a nftables: make dns rules cover tcp as well
a21509b fix(deps): update rust crate serde_json to 1.0.123
8c08678 remove superfluous formatters from debug stmt
558078f chore(deps): update rust crate tempfile to 3.12.0
06d8a9e fix new rust 1.80 lint issues
f0ae7ef silence new rust 1.80 warnings
748908a chore(deps): update rust crate tempfile to 3.11.0
af57295 fix(deps): update rust crate serde_json to 1.0.122
6dd091f Bumping main back to v1.13.0-dev for development
a4e1359 Release v1.12.1
8b6117d Update release notes for v1.12.1
f307944 Change nv cargo categories
fa2b5fc Bump to 1.13.0-dev
30d84df Release 1.12
f42922c Release Notes for 1.12
743ed24 run cargo update
097c32f rpm: use nftables as default for f41
30aee33 fix(deps): update rust crate serde_json to 1.0.121
7810238 fix(deps): update rust crate tokio to 1.39.2
0ab24f6 aardvark-dns: trim whitespaces from error text
d4da022 fix(deps): update rust crate env_logger to 0.11.5
74952f6 [skip-ci] RPM: handle iptables/nftables dependencies
ed0dad1 fix aardvark-dns error handling
63737b2 fix(deps): update rust crate tokio to 1.39.1
a2dc538 fix(deps): update rust crate env_logger to 0.11.4
03a2786 fix(deps): update rust crate tokio to 1.38.1
cf67881 update mozim to 0.2.4
1fe10c3 fix(deps): update rust crate serde_json to 1.0.120
26afe34 netavark: dhcp_proxy: use dns servers from dhcp lease
74b5637 fix(deps): update rust crate serde_json to 1.0.119
3a1d4a2 fix(deps): update rust crate netlink-packet-route to 0.20.1
8c2d015 fix(deps): update rust crate log to 0.4.22
2f02d57 Fix Epoch so upgrade path is preserved from Fedora/RHEL.
2052269 test: add macvlan metric test
351b9dc fix(deps): update rust crate serde_json to 1.0.118
5728114 fix(deps): update rust crate url to 2.5.2
38baefb fix(deps): update rust crate prost to 0.12.6
17e34de fix(deps): update rust crate url to 2.5.1
60ca130 fix(deps): update rust crate iptables to 0.5.2
5a4bf12 [CI:BUILD] rpm: Update Rust macro usage
19e72a0 fix(deps): update rust crate nftables to 0.4.1
fe96f0f fix(deps): update rust crate tokio to 1.38.0
9e3e310 Bump to 1.12.0-dev
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
120a507fd2 |
nerdctl: update to v2.0.2
Bumping nerdctl to version v2.0.2-90-g1259a55e, which comprises the following commits:
bcc9fa74 update containerd-fuse-overlayfs (2.1.0)
6dac2cf1 update BuildKit (0.18.1)
f9347742 build(deps): bump tonistiigi/xx from 1.5.0 to 1.6.0
e8bca251 build(deps): bump the docker group with 2 updates
e3e6c3de [doc] rootlesskit port driver configuration
c2d8b4c6 build(deps): bump github.com/cyphar/filepath-securejoin
b4ba0cbd build(deps): bump the golang-x group with 6 updates
d4130581 fix: Fix --env-file flag behavior in nerdctl compose
b8f4d9c2 Cleanup namespace validation
3d944cb5 validatePathComponent tests
9bbf24db Remove dependency on misplaced helper CreateBuildContext for next-gen tests
e536ed59 Increase timeouts on CI
f914ea38 gocontext -> context
775a0053 gocni -> cni
32ab7472 Create directory for bypass4netns pid file
e2708fb5 Fix hosts.toml resolution for docker domain
e28491fa Enhance CNI config load error condition UX
531e2036 Marking TestCreate/logs as flaky
69de5dd4 feat: add force-recreate and no-recreate for compose up command
5fa9f123 Relax compose concurrency lock
00763909 update CNI plugins (1.6.1)
09039a18 update stargz-snapshotter (0.16.2)
70679d49 update BuildKit (0.18.0)
4a21ba7d docs: the next release will be v2.0.1, not v2.1.0
442b01d2 Fix permissions for resolv.conf and hosts
dcaee106 build(deps): bump the stargz group with 3 updates
eac99f87 build(deps): bump github.com/containerd/nydus-snapshotter
159e0391 build(deps): bump docker/build-push-action from 6.9.0 to 6.10.0
2ad3f57c fix redundant error checks and comment format
b060ead7 fix: add fields such as CONTAINER_NAME to journald log entries sent to by containers
232b6adc build(deps): bump github.com/compose-spec/compose-go/v2
788fc0c2 fix nerdctl ps slow on heavy IO system by using goroutine
0e8abacc Update containerd (1.7.24) in CI
ba72ac7b build(deps): bump github.com/containerd/cgroups/v3 from 3.0.3 to 3.0.4
f128aac0 fix: refactor pkg/infoutil in order to resolve import cycle
1cbc1203 update stargz-snapshotter (0.16.1)
f572d40f build(deps): bump github.com/Masterminds/semver/v3 from 3.3.0 to 3.3.1
3b3c68c1 build(deps): bump docker/metadata-action from 5.5.1 to 5.6.1
c41cc9d9 Pass appropriate --device arguments from compose to run
2463f8b6 update BuildKit (0.17.1)
37df93d3 update runc (1.2.2)
1fdb4b0a fix: default json-file log size to 100MB
ae50153a build(deps): bump the stargz group across 1 directory with 3 updates
32de57ba build(deps): bump github.com/containerd/continuity from 0.4.4 to 0.4.5
7dce7c78 refactor: Fix golanglint action error
9c351383 Use a more direct and less error-prone return value
130397dd build(deps): bump the golang-x group with 2 updates
d1ea2d7b build(deps): bump github.com/containerd/typeurl/v2 from 2.2.2 to 2.2.3
a82ae7bb build(deps): bump github.com/compose-spec/compose-go/v2
b5a11731 build(deps): bump the golang-x group with 4 updates
7d116bf1 feat: configure custom IP for default bridge network
d30f66e1 build(deps): bump github.com/vishvananda/netns from 0.0.4 to 0.0.5
6f2e0326 Mark `nerdctl builder debug` as incompatible with Docker
417b6170 typo: remove extra spaces at the lead #3650 #3651
7e89bd3d typo: remove extra colons and whitespaces #3650
84cea659 [fix] avoid escaping '<', '>', '&'
7103b54b update SOCI snapshotter (0.8.0)
29f3ff63 update containerd-fuse-overlayfs (2.0.0)
2380710b update BuildKit (0.17.0)
4f64af98 update runc (1.2.1)
75be32df update containerd (2.0.0)
ccbaf82a build(deps): bump github.com/containerd/containerd/v2
b006beb5 build(deps): bump github.com/containerd/typeurl/v2 from 2.2.1 to 2.2.2
8ea1d0ac build(deps): bump github.com/containerd/containerd/api
68bd32d7 build(deps): bump actions/checkout from 4.2.1 to 4.2.2
83088ef8 build(deps): bump github.com/containerd/errdefs from 0.3.0 to 1.0.0
c607537e add 'none' logger
718e7cd2 fix: not to be deleted a container created with --rm when detaching
b776706a fix: Allow to untag images associated with running or paused containers by nerdctl rmi -f
dc2c7b93 Enable network_inspect tests to run on windows
93189e13 Annotate non-windows compatible image tests
46239308 Enable issues tests to run on Windows
465b52ca Enable image_remove tests to run on windows
4254a1fe build(deps): bump github.com/compose-spec/compose-go/v2
58318d51 build(deps): bump github.com/containerd/typeurl/v2 from 2.2.0 to 2.2.1
de193b39 Enable GHA cache for image build dependencies
b1e82268 Fix prior test-porting not aligned with description
f6d36c40 Move from AlpineImage to CommonImage to enable windows tests
bfc8e0b9 Add Infinity constant to enable windows testing compat
7b8edba6 Remove leftover workaround for fixed bug
bdc00760 Reduce calls to data.Identifier()
04ec4a3c Rewrite container_stats tests
5862baf7 build(deps): bump github.com/fsnotify/fsnotify from 1.7.0 to 1.8.0
75fdc499 Fix convert unable to find image
4760ee93 Rewrite container_top tests
54196647 Remove fixed-bug workaround
20987449 build(deps): bump github.com/compose-spec/compose-go/v2
8f9eccd9 build(deps): bump github.com/Microsoft/hcsshim from 0.12.8 to 0.12.9
6b3d6615 Container create tests cleanup
40ddd34e Update busybox image (support sleep inf)
708f1725 Fix test leaking tagged Alpine image
b7227211 Rewrite container prune test
38f74400 Rewrite container remove test
2336d3d1 Rewrite container diff test
a5f487d4 Align gitignore and dockerignore
4d06e730 Rewrite container_wait tests
eddb0eb8 go.mod: github.com/containerd/imgcrypt/v2 v2.0.0-rc.1
fcdd7262 build(deps): bump github.com/compose-spec/compose-go/v2
443d504b build(deps): bump github.com/containerd/continuity from 0.4.3 to 0.4.4
bb240f12 build(deps): bump github.com/compose-spec/compose-go/v2
af25fd40 add white image
50946054 update Kubo (0.31.0)
90fbd09b update Nydus (2.3.0)
98442f50 update CNI plugins (1.6.0)
5551d6d3 update containerd (2.0.0-rc.6)
247fcca2 build(deps): bump github.com/containerd/containerd/v2
0ee1a592 build(deps): bump actions/checkout from 4.2.1 to 4.2.2
bbb5b305 Add new requirements (HyperV, CgroupsAccessible)
5db8a48d build(deps): bump github.com/fatih/color from 1.17.0 to 1.18.0
3b203a35 update runc (1.2.0)
a4b2959b Add container run from oci-archive
62ad4046 Ensure rm uses -f when cleaning
05918629 Remove no-op description from top-level tests
cc78fb3b Remove old build tag syntax
d8ab512e Refactor load from archive functionality
ec12b584 Move image load func to imgutil package
4f20a14d CI: enable no-retry/retry testing separation and workflows cleanup
c3627e11 fix: Allow to delete images when names of images are short digest ids of another images.
e1622152 Add legacy tests into the 'retry' bucket
d963545a Fix ensurecontainerstarted logic and better debug
564ff06e Separate lint + enable on other platforms
0cc9d291 Enhance debugability for kubernetes rig
5609de3d Workaround and document weird docker issue
9603bf40 Registry testing tooling cleanup
914238eb Kuberneters testing tooling cleanup
36f7eb91 Rewrite commit tests
ca76611c Fix and enable CI unit testing for windows
54966d87 Rewrite build tests
83bf7e03 build(deps): bump go.uber.org/mock from 0.4.0 to 0.5.0
ce8e077d Chores: spurious comments and syntax simplification
d48be62f Fix semantic of Fail to not care about exit code
1ab6df3c (Un-)marking flaky tests
468b0df2 Fix duplicated test title
84b4d942 Change compose lock to use DataStore()
27a18162 [fix] fix image filter with nonexist image
d2b2637e Enable image completion on all platforms
97919c25 Remove unbuffer from test
7a0eaecb Add pseudo tty support for tests
76b265af Skip TestAttach until we fix it
95fe8c0a build(deps): bump github.com/containerd/accelerated-container-image
645988e8 Add delay to tentatively fix flakyness with Docker
fc1848b5 "ns:" network mode to use existing network namespace
24cbe252 Fix over-eager windows path restrictions
90b96354 Add image load quiet mode
e7101674 Quiet ancillary image pulls
320d5c38 Minor debugging / cleanup chores
d7adf399 RootFul/RootLess > Rootful/Rootless
7fab74c3 Lint fixes
fa39963a Global compose lock
496b2f05 Consistently enforce rmi -f in tests cleanup
efb9a876 Cleanup code to use simplified referenceutil package
afba9710 Cleanup referenceutil
bf395429 Skip TestRunWithTtyAndDetached on Windows
ad64f421 fix: nerdctl stats on a container without a memory limit returns host memory limit
516ed82e Update containerd (1.7.23) in CI
ddeae201 removing ipfs binary from nerdctl-full
c3c3f91f Add container run --security-opt systempaths=unconfined
2c6fb772 Alleviate image --filter missing digest issue
50ac0b6f Fix CNI concurrency issue
379e8ce6 build(deps): bump github.com/klauspost/compress from 1.17.10 to 1.17.11
33beb322 Migration aftermath
4451d75d Migrate image tests
157d1838 Migrate IPFS tests
7190bc66 ./cmd/nerdctl/. + issues + completion touchups
91f4eb4a ./cmd/nerdctl/network touchups
0fafd1af ./cmd/nerdctl/system touchups
2d2afe08 ./cmd/nerdctl/volume touchups
0e35a535 Test tooling iteration
93fb53b0 Enforce global lock in oci hooks
65363a66 build(deps): bump github.com/cyphar/filepath-securejoin
93152fa8 build(deps): bump github.com/compose-spec/compose-go/v2
456337f9 Update runc (1.1.15)
7ff3c68a build(deps): bump actions/checkout from 4.2.0 to 4.2.1
3e3517c2 Remove images from Docker Hub from tests, fix #3498
1fe34f86 Tests for net inspect
2e3b6365 Fix netwalker issues
c075a576 switch cosign registry from GCR to GHCR
92c3297f build(deps): bump the golang-x group with 5 updates
9755f22f Update BuildKit (0.16.0)
1ff8d48b Update to containerd 1.7.22, 1.6.36 in CI
e6c47ef3 build(deps): bump golangci/golangci-lint-action from 6.1.0 to 6.1.1
2c1a5b87 Fix tests broken by tooling update
5ce1e4b6 Fix parallelism for docker
19fa3d93 Increase delay of delayOnceReader to reduce flakyness of TestAttach
346b492b Test tooling fixes
bd1eefa6 Make CreateNetwork safer wrt concurrency
703bd581 Fix IPFS missing layer issue
bfeeabe5 3452: Filter Volumes by name if any of the names match
03c9de57 Update to containerd 2 rc.5
544991a0 Fix Docker Hub push regression
5cdb3e0b Fix login persistence regression against Hub
9d0f54a5 build(deps): bump github.com/Microsoft/hcsshim from 0.12.6 to 0.12.7
c661d16e Fix broken TestImageInspectDifferentValidReferencesForTheSameImage
7b64f827 build(deps): bump github.com/containerd/containerd/v2
f3215269 build(deps): bump github.com/cyphar/filepath-securejoin
befd089a build(deps): bump docker/build-push-action from 6.8.0 to 6.9.0
2c2745e8 fix: Cleaning up orphaned directories and files when containers creation fails
12e63b5d [fix] filter images panic
2a8d4ae0 build(deps): bump docker/build-push-action from 6.7.0 to 6.8.0
f231be8e build(deps): bump actions/checkout from 4.1.7 to 4.2.0
0aef2f2e Migrate completion tests to new tooling
36ab5832 Migrate network tests to new tooling
f363e6f0 Migrate system tests to new tooling
764a2aa5 Fix tests and add regression tests for #3425
1e52bf52 EnsureAllContent on tag
8e10d879 EnsureAllContent on save
ef09d191 EnsureAllContent on convert
8ba7ce78 EnsureAllContent on commit
9539f6b0 Add fetch and EnsureAllContent methods
93b5999a Fix regression from #3446
845902d6 build(deps): bump github.com/klauspost/compress from 1.17.9 to 1.17.10
79067831 build(deps): bump github.com/go-viper/mapstructure/v2
b4f002ca remove is shareable test
a74f0f30 Testtool initial documentation
cc56a093 Move root and volume tests to new test tooling
2c95d090 Adding NG test tooling
bfc2da40 increase golangci-lint timeout to 10min
2d297924 Prevent concurrency on commit and remove
062f4ff8 build(deps): bump github.com/go-viper/mapstructure/v2
de9a0045 build(deps): bump the docker group with 2 updates
06a257ef Fix panic 'provided file is not a console'
bc2a0070 build(deps): bump the docker group with 2 updates
b2174cbb Fix test to workaround docker credstore symlink fault
5864ea38 build(deps): bump github.com/cyphar/filepath-securejoin
646f8409 build(deps): bump github.com/containerd/accelerated-container-image
e22055bc build(deps): bump github.com/compose-spec/compose-go/v2
6f685c37 build(deps): bump the docker group with 2 updates
aeef5bed Fix Windows path check in 'LogURIGenerator'
4bb3fc02 build(deps): bump the golang-x group with 2 updates
1ecbd87a build(deps): bump the golang-x group with 3 updates
1a4a5a95 Hostsstore resolution cleanup
7bcfc505 Dockerfile: runc: set CC and STRIP explicitly
ea86ae9a Adding document about pkg/store
4c0c5a60 Move testing.md to docs/dev
935ee8a0 Fix TestRunApparmor: relax stdout matching to not fail when testing rootless
dbc05409 Fix TestLoadStdinFromPipe: do not leak test images breaking tests using prune
ca0f6453 Enforce linting for freebsd and windows
e0de7b1c Fix freebsd lint
efeb191a Fix windows linter complaints
23aca88a Refactor: cleanup prompting
bf89c084 Refactor filestores using store.Store
c9756a94 Remove mock for mountutil tests
92188e11 Add generic filestore
04cc74bd Auth code refactor: credstore and registry URL
9657f2c2 chore: update runc to v1.1.14
4e89ddf7 Minor cleanup, post-refactoring of cmd
b02b8f28 Move cmd/system to subpackage
05074f83 Moving cmd compose and inspect to subpackages
ca637fd6 Move cmd/container to subpackage
d5a00f46 Move cmd/internal to subpackage
c115c49c cmd/AppArmor moved to subpackage
4b8061d9 Move cmd/image & cmd/builder to subpackages
3ea64eb9 Move ipfs to subpackage
c8df501e Move a bunch of helpers
3b8a098d Move login/logout to subpackage
9c75f29d Move namespace code to subpackage
d1bc54d9 Move network to cmd/nerdctl/network
f7e033d9 Move IsExactArgs and FindIPv6 to helpers
d2741baf Rename completion.ShellCompleteX methods to completion.X
a07d9066 Move volume actions under subpackage
061d0cb1 Move UnknownSubcommandAction to helpers
ec530147 Move constants Categroy/Management to helpers
38bca1f3 Move completion to sub package
b8b5d707 Move away flagutil under helpers
51af3690 Add Confirm helper
d3a39fd2 Fix TestDiff failure with docker
c5d3309d Add a locking mechanism to prevent concurrent subpackage testing
76a828dd Adapt testing so that subpackages are not parallelized
5b9cf17d Do not load build output if dest is specified
7f0dec8e Fix nsenter working dir for child
95a3d697 Move testing to container v2 rc4
abb17d72 build(deps): bump github.com/containerd/containerd/v2
68be0cef Disable flaky #827 test
19fb8b60 build(deps): bump github.com/Masterminds/semver/v3 from 3.2.1 to 3.3.0
7192451f build(deps): bump github.com/coreos/go-iptables from 0.7.0 to 0.8.0
fee2b017 build(deps): bump the docker group with 2 updates
b954c7a3 Prevent presumably bogus reentrancy onPostStop when onCreateRuntime errored
6296bb35 Namestore hardening, workaround #3351
f85bba8f Hardening lifecycle state store
7eb1523e Changing bufio.Scanner to bufio.Reader to support large message
bc247660 Add lint-imports to the default lint task
fe677961 Allow Canary to fail the build
31989a2d Add reg. test for 'stop created'
971040e7 Release any existing ip lease onCreateRuntime (workaround #3355)
f353afb6 Allow containers to re-acquire their own name (fix #3354)
f9b56614 build(deps): bump github.com/containerd/accelerated-container-image
42adca9f build(deps): bump github.com/vishvananda/netlink from 1.2.1 to 1.3.0
93586e60 build(deps): bump github.com/pelletier/go-toml/v2 from 2.2.2 to 2.2.3
31debef4 build(deps): bump github.com/containerd/containerd/api
571799fb stop: do not error on created containers (fix #3353)
5f30141f Rollback rename in case of error
fc31dcd2 Ignore
2327cc85 Fix docker hub lag on golang versions breaking canary
0cd936b5 build(deps): bump github.com/vishvananda/netlink
6362afc1 Remove Docker incompat from image prune and build tests
439086fb Fix image prune filter until test rmi cleanup not running.
67449bca chore: fix some function names
f7b71e9c Add regression tests for network host
132276c4 Fix --add-host not working with network host
c57dc6ff Rename variable for readability
a4abf1e2 Use host hostname with network host
f5e247f8 Fix rename failure with network host/none
71c1558b Fix panic on malformed add-host argument
031aa1d4 K8s minor cleanup (rename and -f on delete)
0e8b3d45 Implement windows filename restrictions
572d368d fix: filter container state without option "-a"
a1bd4760 ParentMain/nsenter: do not fail if getwd errors
1201665e Add builder OCI layout build context
034f2e73 build(deps): bump github.com/Microsoft/hcsshim from 0.12.5 to 0.12.6
8352492b build(deps): bump tonistiigi/xx from 1.4.0 to 1.5.0
d2dace20 Fix import order
bd27d52e Workaround goimports-reviser bug
613f7c6e update RootlessKit (2.3.1)
f5a2962c build(deps): bump github.com/rootless-containers/rootlesskit/v2
3cb2cd1f update soci-snapshotter (0.7.0)
17a0749e update BuildKit (0.15.2)
6f7a56f2 update kind (0.24.0)
9efda227 update Go (1.23)
ddcf41c2 update Debian (12)
553ee688 update golangci-lint (1.60.1)
787b4ac6 Fix govet: printf: non-constant format string
068866ee Fix S1009 (see https://staticcheck.dev/docs/checks#S1009)
183b4395 Fix SA4032 (see https://staticcheck.dev/docs/checks#SA4032)
fd0f9547 Add lint job for canary and minor shell script cleanup
7c9751e2 Add image prune --filter support
ec7c3958 Refactor imgutil filtering
adf40354 Include init NetworkSettings within inspect response
97c5492b Kube on the CI
fc4b2700 support ci arm64
1fbd7766 fix: relax identifier limits
f5d1d6d5 Add builder prune --all and --force flag support
4fce7aaa Ensure binfmt does install emulation for arm7 on the CI
3d2db6e7 build(deps): bump docker/build-push-action from 6.6.1 to 6.7.0
4de7e5f4 build(deps): bump the docker group with 2 updates
f23fcd72 fix set go env in windows
81684636 build(deps): bump github.com/go-viper/mapstructure/v2
7f05aad9 Fix panics involving -ti when not on a tty
77b0a291 Go imports tooling
0b729e9e Import ordering consistency
6277d8f6 Move projectloader to testutil
02cb8a92 use slice.Contains
dc204e92 Get rid of naked returns
5d6d02b9 archived mitchellh/mapstructure -> go-viper/mapstructure
41448de9 Use http.ErrSchemeMismatch
d4152ca3 feat(compose): add mac-address parsing
9cc9a5bd gofumpt lint
af50cb59 enforce registry default host for login
cbe7cfe7 Uniformize import style
83914c5b Fix docker/errdefs -> containerd/errdefs
bd59961b Fix godoc to align with style
bc7e059f build(deps): bump github.com/containerd/accelerated-container-image
6f84540c migrate to github.com/moby/sys/userns
732656ad Make windows filelocking exclusive
98cc3689 Containerd v2
8cef1ce7 build(deps): bump golang.org/x/sys in the golang-x group
0721f443 feat: adding filter infrastructure + status and event filter
4cc911df build(deps): bump docker/build-push-action from 6.5.0 to 6.6.1
7df0fbd6 build(deps): bump github.com/compose-spec/compose-go/v2
93dfdaab build(deps): bump the golang-x group with 4 updates
56791faa build(deps): bump the golang-x group with 2 updates
99fdb17f build(deps): bump github.com/containerd/nydus-snapshotter
c6c7e132 add unpack commit images.
4d3f6988 Add SOCI handler wrapper
4b50583d feat: tail JSON log
3b61610c fix: output log after log rotation
915106fc gracefully terminate containers on nerdctl compose down
b60185e8 test: increase max-size && decrease log output
c5e06081 Remove gjson dependency
140c5fcc build(deps): bump golangci/golangci-lint-action from 6.0.1 to 6.1.0
e8a993b2 fix: sort images&containers by created_at
cc0f6437 build(deps): bump github.com/cyphar/filepath-securejoin
68e7ad34 build(deps): bump github.com/compose-spec/compose-go/v2
fa77fb49 build(deps): bump the docker group with 2 updates
fea8219d feat: add Status and ID as event attributes
4d70ed0b build(deps): bump github.com/awslabs/soci-snapshotter
e86fa4c5 build(deps): bump github.com/containerd/containerd
d941b4f8 containerd/containerd/errdefs -> containerd/errdefs
73f22413 build(deps): bump github.com/containernetworking/cni from 1.2.2 to 1.2.3
06f942c1 build(deps): bump the docker group with 2 updates
83cf033f build(deps): bump docker/login-action from 3.2.0 to 3.3.0
579f75e7 build(deps): bump docker/build-push-action from 6.4.1 to 6.5.0
e81fe541 build(deps): bump github.com/moby/sys/mount in the moby-sys group
9229c007 Reuse Makefile for CI commands
b76605b6 build(deps): bump github.com/compose-spec/compose-go/v2
b7025537 build(deps): bump github.com/rootless-containers/rootlesskit/v2
3e569488 build(deps): bump docker/build-push-action from 6.4.0 to 6.4.1
760f3560 Add `shellcheck` lint to CI
eddbb4e3 build(deps): bump github.com/moby/sys/signal in the moby-sys group
cf0e6e6e feat: support for -a and --attach in run
57951753 Account for availability delay of golang docker image
bbf2293d Fix shellscript issues
6eccd9af build(deps): bump github.com/Microsoft/hcsshim from 0.12.4 to 0.12.5
5affa4fb build(deps): bump docker/build-push-action from 6.3.0 to 6.4.0
67ade6db Move image pull args into ImagePullTypes
cfd89822 Enhance Makefile
e2ede62e Remove no longer useful DOCKER_BUILDKIT=1
f6308150 fix: add login component username validation
e7b567ca pkg/portutil: add ipv6 host ip test
99b05e63 pkg/portutil: use net.SplitHostPort to parse ip address with port
79b80d68 Update go.mod
164b9f65 Normalize curl invocations
db47b319 Adding a canary CI target to test against upcoming / unreleased versions
f759e035 Silence apt-get and uniformize calls format
b0288121 Update FUSE and buildkit in dockerfile
fdd88383 build(deps): bump github.com/cyphar/filepath-securejoin
41870985 build(deps): bump github.com/containerd/typeurl/v2 from 2.1.1 to 2.2.0
496c78e8 Test fixes
3a0df165 CI: shrink test matrix
c628ef1e Workaround delayed log file creation
af2f1402 Fix test: wait for systemd to come up
11a0d9ac Move to 24.04 for docker integration testing
c3ea8ff4 Fix nerdctl info missing on Windows
fee1ab36 fix the created tasks cannot be deleted
81aac851 rootless: add `Requires=dbus.socket`
c4ea3d0e Fix IPFS test flakyness
fceea23b Ensure we dont fail if containers disappear (#3167)
156b5fd0 Do not hard error if containers are gone
f83f2380 build(deps): bump golang.org/x/net from 0.26.0 to 0.27.0
fbf9a538 build(deps): bump golang.org/x/crypto from 0.24.0 to 0.25.0
09739c12 Improve tests debugging output
15191775 Volume QA: inspect, prune, create and other volume fixes
019cd003 test-integration-rootless: enable BuildKit for RootlessKit v2
e0248a4d Dependabot: add groups
19ae34b0 nerdctl run -v: dismiss warning "expected an absolute path, got a relative path"
faa28f89 Workaround flaky save
35424992 Re-enable project checks for .md only changes
5267e4ef Separate and expand information for newcomers on testing
1b96d8de Make systemctl happy by not passing an explicit signal for kill
4455d73a build(deps): bump golang.org/x/term from 0.21.0 to 0.22.0
e32d75c4 Add logo
60dc9421 Cleanup login command (remove global var and normalize to other commands
294caa66 build(deps): bump docker/build-push-action from 6.2.0 to 6.3.0
150f9cbd Fix wrong assumption about container availability
d627713b update containerd (1.7.19)
356b88dc Rewrite container remove
db152b91 build(deps): bump github.com/docker/docker
91c0b7f6 build(deps): bump github.com/docker/cli
3cece1b1 fix missing name container stats
2ed85e4f build(deps): bump docker/build-push-action from 6.1.0 to 6.2.0
d56f7a71 build(deps): bump github.com/docker/docker
6d97c6e9 build(deps): bump github.com/containerd/go-cni from 1.1.9 to 1.1.10
dd52560f CI: update Ubuntu (24.04)
ae277688 feat: support for --sig-proxy in run
6c1e9618 build(deps): bump github.com/containernetworking/cni from 1.2.1 to 1.2.2
c493afcd pkg/defaults: add defaults_darwin.go
b997648a Fix check for empty $HOME and $XDG_RUNTIME_DIR
8a5137b0 build(deps): bump docker/build-push-action from 6.0.2 to 6.1.0
02d5329a build(deps): bump docker/build-push-action from 6.0.1 to 6.0.2
c2fa1ed9 update soci-snapshotter (0.6.1)
820f7404 update Nydus (2.2.5)
480fc999 update gotestsum (1.12.0)
6cc63162 update Kubo (0.29.0)
f16b79c2 CI: cross: do not use Go 1.21 for nerdctl-full deps
f35e4251 update golangci-lint (1.59.1)
85a8bf86 update BuildKit (0.14.1)
465365a0 update CNI plugins (1.5.1)
bccfdc82 update containerd (2.0.0-rc.3)
ead5ce6c Volume QA: remove (fixes and tests)
a28dbf29 Dockerfile: use Go 1.22 for runc
97552985 Bump compose-go to v2
e13ff68b Remove duplicate function
515c3ade Add HOSTNAME environment variable
0c300dca fix: close the hosts file
15a8a8dc Aftermath docker migration: fix racyness in tests
5dd36b60 Implement network namespacing
58f7720e build(deps): bump docker/build-push-action from 6.0.0 to 6.0.1
6d0c8f87 Replace SetEnv invocation by base.Env to unlock parallelization
c0e4e92c Add mechanism to prevent Cmd from executing multiple times
ac4830df MAINTAINERS: move Ye Sijun (junnplus) from a COMMITTER to a EMERITUS
2606265d build(deps): bump github.com/containernetworking/cni from 1.2.0 to 1.2.1
34d7c310 build(deps): bump docker/build-push-action from 5.4.0 to 6.0.0
0b201417 build(deps): bump github.com/containernetworking/plugins
9a76ba10 Disable build and publish on PR for purely md changes
eace9da1 Add doc note about --ip and bridge
e789f2cd Docker v26 compatibility & test fixes
b63f4d6b Add --pull option to build command
091de746 update containerd (1.7.18), runc (1.1.13)
a3195b27 MAINTAINERS: promote Kay Yan (yankay) from a REVIEWER to a COMMITTER
f4a7e0c8 Restore logger output
37098ac6 build(deps): bump github.com/spf13/cobra from 1.8.0 to 1.8.1
14d8b42a build(deps): bump github.com/klauspost/compress from 1.17.8 to 1.17.9
4f8a70b6 build(deps): bump actions/checkout from 4.1.6 to 4.1.7
f942d2c5 test-integration-docker-compatibility: install Docker v24
972a9b10 build(deps): bump github.com/containerd/platforms from 0.2.0 to 0.2.1
37c0cb67 Safer / faster convert zstd
b20070d2 Revamped testregistry and login tests
edb8c19d build(deps): bump docker/build-push-action from 5.3.0 to 5.4.0
dc237a35 build(deps): bump github.com/Microsoft/hcsshim from 0.12.3 to 0.12.4
80731ff3 Caching and list optimizations
b0c23492 MAINTAINERS: move Hanchin Hsieh (yuchanns) from a REVIEWER to a EMERITUS
e021a92a MAINTAINERS: promote Jin Dong (djdongjin) from a REVIEWER to a COMMITTER
4907e59c fix container list with json format
b94caffe build(deps): bump github.com/docker/cli
47b45261 build(deps): bump github.com/containerd/containerd from 1.7.17 to 1.7.18
530b0913 build(deps): bump github.com/docker/docker
2240323d build(deps): bump golang.org/x/net from 0.25.0 to 0.26.0
5b8d5a30 build(deps): bump golang.org/x/crypto from 0.23.0 to 0.24.0
7675d267 update imgcrypt (1.1.11)
875a962e Remove spurious debugging leftover
11802cf3 Fix wrong package import
6917840b CI: .md files changes should not trigger tests
f491e83f Disabling test on unsupported platforms
eb001fad Image inspect rework
4d4fd5fb State how to run a single integration test
099ef7bd Image history enhancements
3d875395 build(deps): bump docker/login-action from 3.1.0 to 3.2.0
838d5a11 build(deps): bump github.com/containerd/imgcrypt from 1.1.10 to 1.1.11
eb5d4426 update slirp4netns (1.3.1)
1ec6764f update containerd (1.7.17)
03bee846 update CNI plugins (1.5.0)
4b0b69d3 go.mod: github.com/containernetworking/plugins v1.5.0
949dc8aa build(deps): bump github.com/awslabs/soci-snapshotter
11fcb6b0 Do not obtain task info when it is not necessary in commit command
713851de add retry on test
cf5073b4 support image label
0988c9b8 chore: remove impossible error check
8b34abdf Implement container inspect --size, SizeRootFs and SizeRw
0d470e7e Implementing StartedAt for containers
93b13817 build(deps): bump github.com/containerd/nydus-snapshotter
5f8c0c9d build(deps): bump github.com/docker/cli
80bc6835 build(deps): bump actions/checkout from 4.1.5 to 4.1.6
35a90ef6 build(deps): bump github.com/docker/docker
64af5a6d build(deps): bump github.com/containerd/containerd from 1.7.16 to 1.7.17
480eb6ee Support DHCP IPAM opts and set the hostname
274b8a6e Fix cni plugins sha after spurious 1.4.1 re-release
cc60f5d5 build(deps): bump actions/checkout from 4.1.4 to 4.1.5
b24582bc build(deps): bump github.com/fatih/color from 1.16.0 to 1.17.0
6b10870c Re-acquire name in onStartContainer (see #2992)
c60adf29 Add missing alias for container rm/remove
fac3d35e build(deps): bump github.com/docker/cli
c5d1b532 Allow directories for --device and in-container path
762fe91c Fix some /etc/ file permissions (see #2684)
926b88f3 build(deps): bump github.com/containerd/platforms from 0.1.1 to 0.2.0
41bf4414 build(deps): bump github.com/docker/docker
516503a0 Fix markdown link
c17badbc build(deps): bump golangci/golangci-lint-action from 5.1.0 to 6.0.1
83382d5b build(deps): bump golang.org/x/net from 0.24.0 to 0.25.0
4b9de97d inspect: show mounts info from CRI/ctr containers
d197e5b7 build(deps): bump github.com/docker/cli
227505ce build(deps): bump github.com/docker/docker
c6c4a7bd build(deps): bump github.com/pelletier/go-toml/v2 from 2.2.1 to 2.2.2
618639b3 build(deps): bump github.com/cyphar/filepath-securejoin
4e615922 CI: use Go 1.22
49993c5b build(deps): bump golangci/golangci-lint-action from 5.0.0 to 5.1.0
ad607362 build(deps): bump github.com/containerd/nydus-snapshotter
2c1d745b build(deps): bump github.com/rootless-containers/rootlesskit/v2
54b29564 fix: set mountpoint RW and Propagation in internal mount label
ff6c1c49 skip Kubo 0.28.0
bb6f9e66 update RootlessKit (2.1.0)
f34b02ad update slirp4netns (1.3.0)
e9535e52 update BuildKit (0.13.2)
47053926 update containerd (1.7.16)
a4f2ed07 build(deps): bump golangci/golangci-lint-action from 4.0.0 to 5.0.0
bd7fdb37 build(deps): bump github.com/containerd/containerd from 1.7.15 to 1.7.16
93f404c7 fix: error check in the ensureFile func
a279dfab build(deps): bump actions/checkout from 4.1.3 to 4.1.4
4f46cf94 build(deps): bump github.com/docker/cli
8765df23 build(deps): bump github.com/docker/docker
6b047d24 build(deps): bump github.com/Microsoft/hcsshim from 0.12.2 to 0.12.3
0439917f build(deps): bump actions/checkout from 4.1.2 to 4.1.3
199edf1a build(deps): bump github.com/Microsoft/go-winio from 0.6.1 to 0.6.2
79897c8b build(deps): bump github.com/docker/cli
a40d98d2 build(deps): bump github.com/containernetworking/cni from 1.1.2 to 1.2.0
03fd3c76 build(deps): bump github.com/awslabs/soci-snapshotter
47f272d2 build(deps): bump github.com/pelletier/go-toml/v2 from 2.2.0 to 2.2.1
c1c0fc93 build(deps): bump github.com/fahedouch/go-logrotate from 0.2.0 to 0.2.1
6ffb5466 build(deps): bump github.com/docker/cli
dc42456f build(deps): bump github.com/docker/docker
d4257170 build(deps): bump github.com/containerd/accelerated-container-image
9b8e1dd3 fix follow tail of rotate log
a3fdaafa fix: cleanup volume dir if create volume failed
27b8dd84 build(deps): bump github.com/klauspost/compress from 1.17.7 to 1.17.8
46acf060 build(deps): bump github.com/rootless-containers/bypass4netns
b5117a23 Rationalise build constraints for Go 1.19 onwards
5fac99b3 Implement autodetection of Windows buildkitd socket
6e6aa4a9 Enable building on Windows hosts
0d75e34f Remove unused defaults.BuildKitHost
62e031c6 bypass4netns: allow ignoring bind
f802ba87 update bypass4netns (0.4.1)
2c446522 build(deps): bump github.com/containerd/accelerated-container-image
2cfff270 update containerd (1.7.15)
a1fd53b7 build(deps): bump github.com/containerd/containerd from 1.7.14 to 1.7.15
858fa60e build(deps): bump golang.org/x/sync from 0.6.0 to 0.7.0
6b8a1c63 build(deps): bump golang.org/x/net from 0.23.0 to 0.24.0
af4c470d build(deps): bump golang.org/x/crypto from 0.21.0 to 0.22.0
cc495f2a build(deps): bump golang.org/x/net from 0.22.0 to 0.23.0
fc4c8e78 annotations: add `nerdctl/bypass4netns-ignore-subnets` (`[]string`)
f42ab2ff Implement `nerdctl run --annotation` (introduced in Docker v24)
9ba9ddca update BuildKit (0.13.1)
6f83a71d build(deps): bump github.com/Microsoft/hcsshim from 0.12.1 to 0.12.2
da2f576f build(deps): bump github.com/docker/docker
3809ec53 CI: FreeBSD: use Go 1.22
c0d7b734 build(deps): bump github.com/containerd/nydus-snapshotter
ea7769fc build(deps): bump github.com/Microsoft/hcsshim from 0.12.0 to 0.12.1
e7608c8b deflake TestImageConvertEStargz
c1c7e251 not check return of rmi in pushImageToIPFS
70ee810a pkg/api/types: remove dependencies on nerdctl
8ae661e9 build(deps): bump github.com/pelletier/go-toml/v2 from 2.1.1 to 2.2.0
2122a714 update cosign image to latest release
3b12a202 build(deps): bump docker/build-push-action from 5.2.0 to 5.3.0
1c371393 update imgcrypt (1.1.10)
9d60dbb0 build(deps): bump google.golang.org/protobuf from 1.32.0 to 1.33.0
0f9c8de4 feat(compose_up): add --abort-on-container-exit flag
d83f9f13 build(deps): bump github.com/containerd/imgcrypt from 1.1.9 to 1.1.10
5e785705 build(deps): bump github.com/containerd/accelerated-container-image
8c75ca70 build(deps): bump docker/login-action from 3.0.0 to 3.1.0
ee2f8d64 update Kubo (0.27.0)
4917c16a update RootlessKit (2.0.2)
4dbac7f8 update CNI plugins (1.4.1)
046bfc06 build(deps): bump github.com/containernetworking/plugins
6958d07c build(deps): bump actions/checkout from 4.1.1 to 4.1.2
0ec5c7e9 refactor: replace os.MkdirTemp with t.TempDir with cleanup
4d9abe27 update containerd (1.7.14),(1.6.30)
533f16b9 CI: update FreeBSD to 14
258362b8 build(deps): bump github.com/containerd/containerd from 1.7.13 to 1.7.14
bc8450e8 feat: add extra contexts to buildctl call #2835
341c60d4 update BuildKit (0.13.0)
ca56bc42 build(deps): bump docker/build-push-action from 5.1.0 to 5.2.0
41b669d7 feat: create network cleanup function for kill and stop cmd
da007062 build(deps): bump github.com/go-jose/go-jose/v3 from 3.0.1 to 3.0.3
62d013c1 build(deps): bump github.com/rootless-containers/rootlesskit/v2
74e27374 build(deps): bump github.com/Microsoft/hcsshim from 0.11.4 to 0.12.0
26c02362 chore: remove useless error check
f853ab85 Enhance default platform comparision for image shareablity #2810
45b86c21 build(deps): bump golang.org/x/net from 0.21.0 to 0.22.0
be006100 build(deps): bump golang.org/x/crypto from 0.20.0 to 0.21.0
f1595262 Use json marshal/unmarshal to copy
3d28dbf6 fix: typos
772d4791 build(deps): bump github.com/containerd/accelerated-container-image
d94c8f59 build(deps): bump golang.org/x/crypto from 0.19.0 to 0.20.0
18f29fb0 fix: add onstartcontainer hook
d8412eed build(deps): bump github.com/containerd/nydus-snapshotter
261bd97c build(deps): bump github.com/klauspost/compress from 1.17.6 to 1.17.7
41b83493 Rootlesskit Network Design
8d840dae doc: should use master tag for binfmt
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
0b47478ebc |
crun: update to 1.19.1
Bumping crun to version 1.19.1-13-g6f010b5f, which comprises the following commits:
25efd10a Remove surplus ENOENT error check
99f2824f utils: return error from set_home_env() if the user was not found
3158e491 criu: improve error handling for CRIU function calls
3cd9c2c9 criu: do not set network_lock if not specified
a542ecc7 github: enable unprivileged userns
38122ac9 test: fix compiler warnings
ec5947ce TMT: Add sanity tests from c9s downstream
d08e304a Packit: Remove RHEL jobs
3e32a70c NEWS: tag 1.19.1
8b972be9 linux: fix a hang if there are no reads from the tty
e50e47ca libcrun: add ring buffer implementation
20ec0982 utils: extend epoll_helper to monitor writeable fds
77a72bdf utils: use bool for set_blocking_fd()
5f9ca9eb utils: skip copy_file_range if not usable
e2380490 tests: adjust test to upstream code
d7933486 build-aux: use an init process for the nix container
0ec1522b nix: update packages list
9b014718 Generated crun.1
d700d9db Add missing periods at the end of sentence
1832c170 linux: remove tmpmount workaround
9e3615a4 ci: build tests_libcrun_fuzzer before fuzzing
6b2e6193 build: use libtool to create libcrun_testing
3c5292b2 build: don't compile tests during normal build
db31c42a NEWS: tag 1.19
c4f8c87a checkpoint/restore: allow passing network lock method to libcriu
1942efc9 Handle case where cgroup v1 freezer is disabled
b366a785 wamr: revitalize wamr handler
21219504 cgroup, systemd: do not override devices on update
d1531073 error: 'CHAR_BIT' undeclared. fix compile failure with musl libc
5d66b309 build: Don't build cloned_binary as part of crun
fd69065d test: add new test for exec-cpu-affinity
b941d6c5 linux: move reset cpu affinity to scheduler
ef33259c linux: honor exec cpu affinity mask
047b7485 src: move cpuset_string_to_bitmask to utils
2c8088c4 libocispec: sync
42b959b5 container: initialize max caps before accessing process block
46bd62b1 cgroup: do not stop process on exec
19bbd8da utils: silence compiler warning
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
3dcd679bb1 |
cri-o: update to v1.31.4-tip
Bumping cri-o to version v1.31.4, which comprises the following commits:
8aa8c7e42 server: fix panic when default annotations are specified
88939baf2 version: bump to 1.31.4
284eb9327 config: add default_annotations
26bb3c96a Allow to remove pod sandbox on netns removal
cf112c696 Disable actuated runners
0b449cebc version: bump to 1.31.3
ee2d73252 Fix container restore lint report
6aa6cbcb4 Only restore container if all bind mounts are defined
165504928 Add `--pull-progress-timeout` / `pull_progress_timeout` option
d3f39eaa9 RuntimeHandler inheritance bug-fix
c65eb63b1 RuntimeHandler inheritance
c918a52d1 nix: don't build gpgme with `--enable-fixed-path`
677d91db3 version: bump to 1.31.2
f334f80c3 config: fix validation of allowed annotations
e0fe09609 Cherry-pick changes from containers/storage/pull#2134
cae8a3ab5 Cherry-pick changes from containers/common/pull#2185
e9deb6cde version: bump to 1.31.1
b6226b8a3 config: pass down PullOptions from the storage configuration
a673a7ca4 test: fix empty pinned_images test
7d4f035b5 tests: improve wait_for_log to allow multiple calls for the same message
2d27da0f3 image: serialize RegistryImageReferences when checking signatures
4b55a1107 Pin govulncheck to specific version to match Go version requirements
abb6a439d Use nanosecond timestamp for evented pleg pod status
fbd73b339 test: fix CR test by unsetting SIGNATURE_POLICY
a379923f5 server/restore: mark signature validation incompatible with restore
1a9d36494 server: document difference between userRequestedImage/userSpecifiedImage
50075247a server: use imageID instead of a random digest
0dd7eaffe server: only check signatures if namespaced policy is defined
ec8545d2d server: use cached restore value instead of recomputing
7a67eb72b store canonical ref differently
1444e69d9 test: fix crun-wasm test to handle requirement of user_specified_image
6edecf30e Image verificaiton for namespaced policies
9d3da707d Revert "contrib: temporarily move to crun 1.15 to fix CI"
e54ea3407 Fix invalid syntax in test workflow
fc262592f ci: run setup commands for e2e because they weren't done for some reason
d24529f7d build(deps): bump the actions group with 2 updates
efa1690c0 test: setup runtimes correctly so drop-ins work
bfc509cd7 test: comment out ARM image digest as it's unused
45ee51d01 test: update memory limit tests to not be in image.bats
29803ef24 test: fix config test
fe5bdeb3b gh actions: set crun instead of runc
f174d5a3d oci: allow double delete
624b15b9c gh actions: spoof crun for unit tests on arm64
afe78eb68 config: refactor min memory handling a bit
d2cb4e4ae config: update min memory to account for crun
5e21d495c config: default to crun
c32f7b02a build(deps): bump crate-ci/typos in the actions group
2b8dfdf48 build(deps): bump github.com/opencontainers/runc in the gomod group
3fe3b4e81 build(deps): bump peter-evans/create-pull-request in the actions group
d23951276 refactor seccomp
f81fea25f Modify test case to verify blocking of clone
7d0d6ad49 Filter namespace creation args to clone in default seccomp policy
cc8b071b1 build(deps): bump the gomod group across 1 directory with 3 updates
f7fee64a7 build(deps): bump the actions group with 2 updates
dd0cb08d8 Update golangci-lint to v1.60.3 for better go 1.23 compatibility
1f212dc7b Add Makefile help
9ad5c5aed Add additional bind mount to image volumes
ff73a7a0b Fix Makefile `$PWD` when running using `sudo`
2c37d262f Make `prettier` target run in a privileged container
33fb00528 Fix lint
b1bf40749 build(deps): bump google-github-actions/upload-cloud-storage
1beb59cb8 build(deps): bump the gomod group across 1 directory with 8 updates
ba846966f config: add /dev/net/tun to default allowed devices
3ef7f9de4 build(deps): bump crate-ci/typos in the actions group
f7e8682ef Add `{verify-}prettier` makefile targets
53d958fa3 Change default tracing endpoint to 127.0.0.1
9d1a5f437 build(deps): bump crate-ci/typos in the actions group
13e701563 build(deps): bump github.com/onsi/ginkgo/v2 in the gomod group
e83973d7d Run prettier on supported files
8269859fd Make static build a GitHub action matrix
09bb40438 Change profile endpoint to 127.0.0.1
5f95cb5ce build(deps): bump the gomod group across 1 directory with 3 updates
aa1ca0d47 build(deps): bump google-github-actions/auth in the actions group
f83861120 build(deps): bump google-github-actions/upload-cloud-storage
a8950ce30 Pass around more contexts in hooks and metrics
7472e56e9 Trigger `test` workflow after release branch fast forward
6fb6e8d16 Run the runtime RuntimeType validation first
dff5305bb Avoid potential reallocs by pre-sizing some slices
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
f8b943afd4 |
containerd: update to v2.0.1
Bumping containerd to version v2.0.1-6-gce560bb24, which comprises the following commits:
f34147772 downgrade go-difflib and go-spew to tagged releases
dca769485 chore: add a build tag to disable containerd plugin import
5942b3fcb Update golangci to 1.60.3
b0ece5dc5 Prepare release notes for v2.0.1
fe6957084 build(deps): bump actions/attest-build-provenance from 1.4.4 to 2.1.0
eb2ce6882 update xx to v1.6.1 for compatibility with alpine 3.21 and file 5.46+
018d83650 internal/cri: should not apply IoOwner options
5eb7995a9 feat: update go-cni version for CNI STATUS
a53eff53d update runc binary to v1.2.3
a2302ea89 Add integration test for custom configuration
be5eda069 complete cri grpc config migration
44cdca68b ctr pull unpack for default platform using transfer service
62b790bfa CI: update Fedora to 41
290e8bc70 update to go1.23.4 / go1.22.10
3ba2df924 fix panic due to nil dereference cgroups v2
73f57acb0 Update differ to handle zstd media types
34a45cab2 Publish attestation as release artifact
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
5f8055f484 |
conmon: update to 2.1.12-tip
Bumping conmon to version v2.1.3-168-gaee638f, which comprises the following commits:
02c6ea6 Avoid bogus journal filling errors
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
343da075d5 |
buildah: update to v1.37.5
Bumping buildah to version v1.37.5-4-gc0602013a, which comprises the following commits:
e4deb56f6 [release-1.37][CI:DOCS] touchup changelog
f31d99d24 Update CHANGELOG.md
5fd40b989 [release-1.37] Bump Buildah to v1.37.5
b949f6572 Bump the containers/storage library to v1.55.1
cffa820dc Properly validate cache IDs and sources
93986b888 Packit: constrain koji job to fedora package to avoid dupes
9dfacbb47 Tag v1.37.4
b55cbb8eb vendor: update c/common to v0.60.4
e289e285d CVE-2024-9407: validate "bind-propagation" flag settings
956095ee1 [release-1.37] Bump to Buildah v1.37.3
8165aae9e Do not error on trying to write IMA xattr as rootless
a47261ec1 imagebuildah.StageExecutor: clean up volumes/volumeCache
7b28b9e4e `manifest add --artifact`: handle multiple values
8fb01fbc9 Packit: split out ELN jobs and reuse fedora downstream targets
a8f37392f Packit: Enable sidetags for bodhi updates
1c0e94ec6 Use Epoch: 2 and respect the epoch in dependencies.
eadda3bc0 [release-1.37] Bump Buildah to v1.37.2
a18969dea [release-1.37] Bump c/common to v0.60.2, c/image to v5.32.2
67cc51e90 [release-1.37] Bump to Buildah v1.37.1
02313cf69 [release-1.37] Bump c/common v0.60.1, c/image v5.32.1
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
fb973818ad |
docker: update to v27.5.0-rc.2
Bumping moby to version v27.5.0-rc.2, which comprises the following commits:
a167bc5c9a libnetwork/drivers/windows: fix error-matching for hcsshim "not found"
bdd3a95a13 pkg/fileutils: deprecate GetTotalUsedFds
5f81af6eaa libnetwork/drivers/bridge: format errors with '%v' for consistency
0f45f60e9e libnetwork/drivers/windows: fix non-constant format string
17e8cb2b06 distribution: fix non-constant format string
60f9e333b6 daemon: adjust tests for changes in go1.24 JSON errors
95b2f2ed49 Restore labels when re-creating Windows networks
623af65208 Use the roundtripper during build
771d1dc44e docs/api: allow for an empty string for Isolation (api v1.25-v1.47)
68b39f825d docs: Update example section for SwarmJoinRequest
4767dbd713 api: Allow for an empty string for Isolation in Swagger specs This adds an empty string as a valid option for the Isolation field when inspecting a container. On non windows systems, this is always empty, so no error should be returned. Fixes #47452
4359c8b08e vendor: update buildkit to v0.18.2
bbd14fc508 vendor: update buildkit to v0.18.1
fd86c39cc3 vendor: update buildkit to v0.18.0
1fd14d845f vendor: update buildkit to v0.18.0-rc2
68b0c87e05 vendor: github.com/moby/buildkit 94d0f6ed85e5 (master / v0.18.0-rc.2)
74600d8425 vendor: update buildkit to v0.18.0-rc1
4830f6db66 builder: fall back to defaultKeepStorage if keepStorage is unset for GC policy
0e43d1f642 vendor: github.com/containerd/containerd v1.7.23, hcsshim v0.12.8
800d735171 vendor: github.com/Microsoft/hcsshim v0.12.7
a57c1848b6 vendor: sigs.k8s.io/yaml v1.4.0
26eeb6e414 vendor: github.com/Azure/go-ansiterm v0.0.0-20230124172434-306776ec8161
f6f7c9f231 vendor.mod: github.com/microsoft/hcsshim v0.12.5
bdecc9d58e pkg/reexec: deprecate and migrate to github.com/moby/sys/reexec
46a8e5f8c5 pkg/reexec: Command: separate public API from implementation
d175e4f1f1 pkg/reexec: make platform-agnostic (again)
ed5c0a79e7 pkg/reexec: use const for name of test binary
4bf113f9bd all: Remove redundant `units` alias for `go-units`
7a512a9531 vendor: go.opentelemetry.io/contrib/instrumentation/xxx v0.53.0
cf4e196e77 vendor: go.opentelemetry.io/otel v1.28.0
2a3cc83f36 vendor: google.golang.org/genproto/googleapis/api f6361c86f094
4141379d07 Discard ErrDumpInterrupted and return data after maxRetries
4c50153e2e Fix comments
c5e72db8e8 vendor: github.com/vishvananda/netlink v1.3.1-0.20240922070040-084abd93d350
14b30aeb61 Add linting rules to spot use of un-wrapped netlink functions.
87fc62a648 Fix merge problem
3ca9a3be70 Add nlutil functions to retry on netlink EINTR
4729e446ce vendor: github.com/vishvananda/netlink v1.3.0
cbe4488a6b vendor: github.com/vishvananda/netlink v1.2.1
eda0a20deb libnetwork/iptables: deprecate Passthrough
b51622dd0d libnet/iptables: deprecate type IPV
08de719cf2 libnetwork/drivers/bridge: setupIPChains: fix defer checking wrong err
6855ca1e62 integration-cli: don't skip AppArmor tests on SLES
224b30556d docs/api: document correct case for Api-Version header
5b92b3e7e0 Accurately reflect the canonical casing of `API-Version` and `OS-Type` headers
1df9e896f2 pkg/system: deprecate types and functions that are only used internally
3a1e495a0f daemon: info: remove bridge-nf-call-iptables / ip6tables warnings
4082abad8b Dockerfile: update runc binary to v1.2.3
a379aae924 man: vendor: github.com/cpuguy83/go-md2man v2.0.5
c3968c6ab7 update xx to v1.6.1 for compatibility with alpine 3.21
2e6ca227cf otel: Use non-noop tracer provider for grpc
a5f86f9279 integration/build_traces: Create own tracer provider
3a05c5dcad otel: Avoid excessive memory allocations if not configured
adb8773adb Jenkins: don't modprobe kernel module
ff176d42d5 Don't try to modprobe ip6_tables in the moby dev container
86126b9af1 Try to load kernel module ip6_tables, when necessary.
58318d26fc Use ioctl to try to trigger kernel module loads
4775621ab6 Dockerd rootless: make {/etc,/var/run}/cdi available
0e34b3956b update to go1.22.10
7919b806e7 [27.x] vendor: github.com/moby/buildkit v0.17.3
525b929947 registry: deprecate RepositoryInfo.Class
d6d43b2912 c8d/tag: Don't log a warning if the source image is not dangling
e3564b52af Jenkinsfile: modprobe br_netfilter
46f6b9a259 integration: add wait
18aa104041 daemon/graphdriver/zfs: ignore non-existent dataset on removal
052f7d6461 Fix br_netfilter module loading logic
151c7565a9 Remove buildkit init timeout
465eb6aee2 vendor: github.com/cenkalti/backoff/v4 v4.3.0
e4d5bae9c5 vendor: github.com/go-logr/logr v1.4.2
339572db5d vendor: github.com/prometheus/client_golang v1.20.5
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
f9ba743dad |
docker: check for seccomp and ipv6
Without these (and their associated packageconfig options) docker may build, but it won't run correctly. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Leonard Anderweit
|
74087fc372 |
podman-compose: Add runtime dependencies
Add missing runtime dependencies on python modules asyncio, json and getpass provided by unixadmin. Sort the dependencies alphabetically while at it. Signed-off-by: Leonard Anderweit <l.anderweit@phytec.de> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Bruce Ashfield
|
755520c5fd |
crun: update to 1.18.2
Bumping crun to version 1.18.2-17-g52ed5880, which comprises the following commits:
fd69065d test: add new test for exec-cpu-affinity
b941d6c5 linux: move reset cpu affinity to scheduler
ef33259c linux: honor exec cpu affinity mask
047b7485 src: move cpuset_string_to_bitmask to utils
2c8088c4 libocispec: sync
42b959b5 container: initialize max caps before accessing process block
46bd62b1 cgroup: do not stop process on exec
19bbd8da utils: silence compiler warning
8a0ee4b5 src: use mount API to self-clone
85d4db3d crun: check for integer overflow
10b2146e linux: add check before deref
2525752d cgroup: drop unuseful check
1ae190b0 src: run make clang-format
00ab38af NEWS: tag 1.18.2
5bc6b50e cgroup, systemd: fix first rule selection for systemd
c41f034f NEWS: tag 1.18.1
6628d7a3 utils: check for snprintf truncation
7c4a3f9c cgroup: skip DevicePolicy if all devices are allowed
ef60ec90 libcrun: deprecate cgroup v1
77e4233a cgroup, systemd: ignore rules before a default deny one
8a30a57a cgroup: ignore redundant deny dev cgroup rules
369dd95b CONTRIBUTING.md: new file
3647ecab linux: copy map_file before tokenizing in uidgidmap_helper
8656b254 NEWS: tag 1.18
bf0a3516 rpm: use embedded yajl in RHEL builds
41461290 crun.1.md: add lsm-profile and lsm-mount-context
ed642593 criu: load lsm functions
ce89aa66 restore: add lsm-mount-context option
9efd6a87 restore: add lsm-profile option
aee13711 github: update run-on-arch-action
c4a65aad cgroup: split lines when writing raw unified files
dd7adb22 cgroup: write_cgroup_file_or_alias uses write_cgroup_file
22b018d0 cgroup: convert block_io devices to IODeviceWeight
c7745e9a cgroup, systemd: add support for IODeviceWeight
8e3e693e cgroup: refactor handling of io.weight
7d0e2cdb cgroup: report errors if value contains not parsed data
efae52ab cgroup: add support for the misc controller
d55194b2 cgroup systemd: ignore unsupported properties
500cf802 cgroup, systemd: honor cpu.idle
5f64da6a linux: pass down state_root to the cgroup handler
80d9677b cgroup, systemd: honor memory.zswap.max
01fa4993 cgroup: specify devices rules to systemd
667442e4 cgroup: move standard devs definition in a common place
335d8cfb cgroup: specify TasksMax to systemd
f6d8373f cgroup: specify MemorySwapMax to systemd
1a04566d cgroup: specify MemoryLow|MemoryHigh|MemoryMin to systemd
8d90eb3a cgroup: use macro to refactor common pattern
34061ab5 add duplicate namespace detection
b29ccd7e cgroup: rename function
af034b91 cgroup: special handle value "max"
2825a579 cgroup: set io weight on systemd owned cgroup
6cf5324b Packit: constrain koji and bodhi jobs to the fedora package
7140aea1 nix: replace gitMinimal with git
27b5a2f6 Fix running on kernel without user namespaces
b5ff44f2 nix: update list of packages
3b40d773 build: specify --extra-experimental-features to nix
da616875 release.sh: update nix image
dee824e6 Fix segfault in `crun features`
4ea62f25 Disable criu support on riscv64
Bumping libocispec to latest, which comprises the following commits:
ed23e6a runtime-spec: sync from upstream
412ce10 image-spec: sync from upstream
4b8feed common: make sizeof the last argument for calloc
Bumping image-spec to version v1.1.0-44-gc66e811, which comprises the following commits:
40d3096 add example using .wh. and move opaque example to its section
cee95e9 Ignore uname/gname where uid/gid are supported
d44515e Changes requested from review
5db69d9 Feat: Pin external references on a release
76b8bae README: update runtime-spec links to use main branch
716f83b Implementations should support zstd
Bumping runtime-spec to version v1.2.0-23-g9505701, which comprises the following commits:
9ceba9f update http links to https
faf82be doc: fix the invalid hyperlink naming-a-volume
adaa517 config: simplify final CPU affinity rule
119ae42 Add CPU affinity to executed processes
2149fb5 config-linux: describe the format of cpus and mems
c6af124 ci: remove redundunt actions
d4aa6d8 chore: format JSON file `make -C schema fmt`
b983fbf CODEOWNERS: remove vbatts
bf698d0 MAINTAINERS: move vbatts to EMERITUS
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
1adf3b6a83 |
docker: update to v27.4.0-rc.2
Bumping moby to version v27.4.0-rc.2-25-g33b6b826c2, which comprises the following commits:
151c7565a9 Remove buildkit init timeout
1abc35f098 Add label on PrepareSnapshot to warn about non-expiring leases
1d1da55382 Update containerd image builder to use lease prune label
a3afccd409 Fix lease management during image operations
33e5f87d0f [27.x] vendor: github.com/moby/buildkit 80e01a9dc7c1 (v0.17.3-dev)
752c0453d6 vendor: github.com/moby/buildkit v0.17.2
6cab48bd9b vendor: github.com/containerd/typeurl v2.2.3
a64812939f Update containerd to v1.7.24
179c7c7596 vendor: github.com/tonistiigi/go-actions-cache 394979b8119e
7f9c5b278a vendor: resenje.org/singleflight v0.4.3
b90c6e922c vendor: github.com/containerd/continuity v0.4.5
e956d4a370 Dockerfile: update to runc v1.2.2
b888333fe1 Dockerfile: update containerd to v1.7.24
6b04fcf560 vendor: github.com/golang-jwt/jwt/v4@v4.5.1
0f0b83a00b vendor: google.golang.org/grpc v1.66.3
b859373da2 vendor: tags.cncf.io/container-device-interface v0.8.0
2f816b2596 [27.x] daemon/containerd: add missing go:build tag
3e03c979da update go:build tags to use go1.22
346ac21032 daemon/logger/loggerutils: add //go:build directives to prevent downgrading to go1.16
f54e5b0b19 libnetwork/networkdb: add //go:build directives to prevent downgrading to go1.16
6ec5197103 [27.x] vendor: github.com/containerd/containerd v1.7.23
31c8d23e7e Dockerfile: update compose to v2.30.3
2ee3796e3f Dockerfile: update buildx to v0.18.0
2acf9893c6 Increase test handler sleep, replace deprecated assert
edfb2048ac deprecate pkg/platform and move internal
5ab7960b46 logger/journald: plumb contexts into reader
857fc4730c logfile: Close reader when caller cancels
a7badb2bb5 Logfile: Add tracing spans
d48c403efa Logfile: skip files that are corrupted
c9a7391911 Refactor logfile reads
49f5431807 Fix time comparison in sharedtemp implementation
173a9f2091 libnet: don't put external DNS answers in OTel spans
15b69c4200 vendor: update buildkit to v0.17.1
3280e50f65 vendor: update buildkit to v0.17.0
00774deb96 vendor: update buildkit to v0.17.0-rc2
0a67347003 vendor: google.golang.org/protobuf v1.34.2
033bd73bba [27.x] pin github.com/Microsoft/hcsshim to v0.11.x
0e4ab47f23 update to go1.22.9
d3b9ec90ba api/swagger: Improve description for platform in images/push
c902e1a187 c8d/inspect: Fix duplicate RepoDigests
b089f36796 volume: VolumesService.Create: fix log-level for debug logs
afd7c9913f client: prevent idle connections leaking FDs
de0135965e c8d/httpfallback: Handle connection errors
ddb56edd00 volume/mounts: fix anonymous volume not being labeled
b7bc29af50 daemon: use OwnCgroupPath in withCgroups
1e11f2a1c0 daemon: deprecate Daemon.IsPaused
0183f5dd13 daemon: deprecate Daemon.Exists
749f9ccee4 Fix: setup user chains even if there are running containers
8deb557451 api: GET /images/json: preserve original manifest order
e4c067af91 gha: shorter time limits for smoke, validate
525b19ff04 gha: use "ubuntu-24.04" instead of "ubuntu-latest"
ceb41b83f3 gha: dco: small tweaks to running the container
2690b70a09 gha: dco: update ALPINE_VERSION to 3.20
f53efc688f gha: build (binary), build (dynbinary): limit to 20 minutes
166565e3ac gha: dco: limit to 10 minutes
57a72c3c9d container: deprecate ErrNameReserved, ErrNameNotReserved
8804551902 container: viewDB.ReserveName, view.GetID: return errdefs errors
202aac0eb4 container: viewDB.withTxn: don't wrap errors
be8be11708 container: TestNames: don't string-match error assertions
bedbe333bf dockerd-rootless-setuptool.sh: let --force ignore smoke test errors
ffb5bd905a cmd/dockerd: Add workaround for OTEL meter leak
12cc7f7696 daemon/containerd: getPushDescriptor: fix formatting of platform in errors
01412dacf7 daemon/containerd: touch-up platform not found error
3c93981344 images: GetImage: touch-up error message for missing platform
03225b1a41 PushImage: remove misleading error about --platform without containerd
5376990d4d build: create distinct history db for each store
34d2e5e7e6 vendor: github.com/moby/swarmkit/v2 v2.0.0-20241017191044-e8ecf83ee08e
0f8fc3105e Enable bridge netfiltering if userland-proxy=false
505c4c32be Set NODAD on bridge IPv6 addresses
c00b3108e5 docs: api: document w (width) and h (height) query params as required
e39ced5c00 api: document w (width) and h (height) query params as required
3c258e6011 pkg/authorization: update link to API documentation
29f0dcd902 client: update link to API documentation
21c974b281 docs/api: version-history: update documentation links
0bc91d5dc8 gha: restrict cross and bin-image to 20 minutes
d755573aba vendor: github.com/moby/buildkit v0.17.0-rc1
32afa26719 gha: add guardrails timeouts on all jobs
8dc3ce5606 integration/build: remove TestBuildWithSession, and fsutil direct dependency
136fdfcdfc vendor: google.golang.org/grpc v1.66.2
6eed19d656 vendor: google.golang.org/protobuf v1.34.1
f29cc7c2cf vendor: github.com/cespare/xxhash/v2 v2.3.0
5f92ab397b vendor: golang.org/x/tools v0.25.0
9af7d06698 vendor: golang.org/x/mod v0.21.0
8fef24d9d4 vendor: golang.org/x/net v0.29.0
efc5252041 vendor: golang.org/x/crypto v0.27.0
a8e92fa662 vendor: golang.org/x/text v0.18.0
80cd75d7d5 vendor: golang.org/x/sys v0.25.0
a2a544202b vendor: go.etcd.io/bbolt v1.3.11
418a79d51b gha: buildkit: make sure expected Go version is installed
43580ccbc1 update to go1.22.8
af8b897560 Dockerfile: update compose to v2.29.7
d91a922ef3 Dockerfile: update docker CLI to v27.3.1
0138291345 gha: add CodeQL Analysis workflow
a6b772b24c gha: govulncheck: make sure read permissions are set
cd21af7e41 Do not DNAT packets from WSL2's loopback0
5c499fc4b2 Only enable bridge netfiltering when needed
8adc8e405d Dockerfile: update compose to v2.29.4
576fc88b1a Dockerfile: update buildx to v0.17.1
e928a0d22d man: dockerd: add description for --log-format option
82cf138590 internal/opts: SetOpts: invalidate empty option-names
487a2f5314 internal/opts: SetOpts.Set: remove redundant var assignment
6d4a507acc internal/opts: SetOpts,NamedSetOpts: test for optional value
bae46f6463 man: dockerd: value is optional for --feature flag
176e04d73b man: fix duplicate word in --feature flag description
06c9c72269 Update dlv in the dev-env
15fbba2169 man: update dockerd man-page to include --feature flag
b262a95d67 c8d/prune: Keep deletion order stable
39c17094b0 c8d/prune: Add OTEL spans
343800d7be adjust TestPruneDontDeleteUsedImage for 27.x branch
95ffe8493e c8d/prune: Keep the last tagged image instead of creating dangling image
c40cd54593 Add feature to daemon flags
dbee7b16df TestIPRangeAt64BitLimit: remove colon after XFAIL to help grepping
bd71b5d319 Explicitly disable nvidia device injection for --gpus=0
a5478dde0e Dockerfile: update RootlessKit to v2.3.1
80d0013217 Fix typos
ce86fade0d Dockerfile: update compose to v2.29.2
682b96c479 Dockerfile: update buildx to 0.17.0
c3aaaf2be0 Dockerfile: update docker CLI to v27.2.1
ce07360a1c vendor: update buildkit to v0.16.0
ab99508c07 docs/api: update deprecation version for erroneous fields (v1.46, v1.47)
c7a8942d6d api/swagger: update deprecation version for erroneous fields
57ba0b05e6 vendor: update buildkit to v0.16.0-rc2
16bf28ec2d test: update since session signature has changed
a0650bf67c vendor: update buildkit to v0.16.0-rc1
f7ea6bb4d9 vendor.mod: golang.org/x/net v0.28.0, etc.
da2b59d3a2 vendor.mod: golang.org/x/time v0.6.0
3e60519c9c vendor.mod: golang.org/x/sys v0.24.0
e6a4c5f840 vendor.mod: golang.org/x/sync v0.8.0
2514b02677 vendor.mod: golang.org/x/mod v0.20.0
69f9ab2958 vendor.mod: drop direct dependency on golang.org/x/exp
70c8d41445 vendor: github.com/containerd/nydus-snapshotter v0.14.0
54e4cdc044 vendor: github.com/containerd/nydus-snapshotter v0.13.14
dca7a36092 vendor: google.golang.org/grpc v1.62.0
458110ccd0 vendor: golang.org/x/time v0.5.0
27b5c33847 vendor: github.com/moby/sys/sequential v0.6.0
6e77ead91e vendor: github.com/moby/sys/symlink v0.3.0
0890631ac7 vendor: github.com/moby/sys/signal v0.7.1
508173c39d vendor: github.com/moby/sys/mount v0.3.4
9b26c10e8b vendor: github.com/moby/sys/mountinfo v0.7.2
d3884731cd Dockerfile: update containerd binary to v1.7.22
cdbc2b6869 vendor: github.com/containerd/containerd v1.7.22
d0462c0e80 seccomp: add riscv64 mapping to seccomp_linux.go
fc774f6dc0 docs: api: fix documentation for image push endpoint (API v1.25-v1.47)
84d78a8ad5 api: swagger: fix documentation for image push endpoint
e16197e51d gha/bin-image: Also run on branches like `27.x`
37bf6e81f9 update to go1.22.7
3a4c589290 vendor: github.com/opencontainers/runc v1.1.14
10cf2d64b6 update runc binary to 1.1.14
84cfcb0893 docs/api: add documentation for API v1.47
edeb6ba9fb golangci-lint: temporarily disable G115: integer overflow conversion
adb0b8536d update golangci-lint to v1.60.2
01f7ec0f21 update to go1.22.6
442462ad4e hack/make/.binary: set CGO_LDFLAGS=-latomic for arm/v5
a3eca63b5b hack/make/.binary: set CCGO_CFLAGS=-Wno-atomic-alignment for arm/v5
d036255b69 c8d/pull: Same error message for non-matching platform
b9f56706c5 man: create parent directories in install recipe
12d4379ad1 c8d/list: Don't exclude non-container images
0fbb78c187 daemon: fix non-constant format string in call (govet)
2bc17a1e5c api/types: fix non-constant format string in call (govet)
fe01a5fc30 api/server/router: fix non-constant format string in call (govet)
bf7ca4dc4b container/stream: fix non-constant format string in call (govet)
405a163620 libnetwork/drivers/bridge: fix non-constant format string in call (govet)
812b97d559 volume/testutils: fix non-constant format string in call (govet)
c4eef2a58c builder/dockerfile: parseChownFlag: fix non-constant format string in call (govet)
8dec1f216f layer: ignore G602: slice index out of range (gosec)
068e82bdd2 internal/cleanups: fix non-constant format string in call (govet)
8ae439ddaa libnetwork/cnmallocator: fix non-constant format string in call (govet)
c27f7de662 cmd/dockerd: fix non-constant format string in call (govet)
ec8ff9cbbd libnetwork: fix non-constant format string in call (govet)
e5bc931f17 integration-cli: fix non-constant format string in call (govet)
6c3b1992d4 integration-cli: DockerSwarmSuite: rm redundant Fprintf, handle errors
83171f6b5a integration-cli: DockerNetworkSuite: rm redundant Fprintf, handle errors
4cfa21bb92 integration-cli: use erors.New() instead of fmt.Errorf
28bdd819d0 libnetwork: TestDNSOptions: remove redundant skip check
cb2e98cfbf integration-cli: remove redundant platform checks
875e8aeef2 vendor: github.com/containerd/containerd v1.7.21
1900e4d8eb Dockerfile: update containerd binary to v1.7.21 (static binaries and CI only)
ecd2b6ff09 c8d/image: Add `hostPlatformMatcher`
d5b03423d1 man: support bringing your own go-md2man
56c5c23114 man: build dockerd man pages using make
77b2eb5734 Removed all mentions of "please" from docs and messages
805becdc7e docs: add default-network-opt daemon option
a5828ac742 docs: remove devicemapper
f7246a0e2c man/dockerd.8: assorted formatting fixes
f110e779f6 man/dockerd.8: escape asterisks and underscores
edbcbf8da7 docs: update dockerd usage output for new proxy-options
b7cc16b0b0 Fix styling of arguments
ecbc4f05bb Fix the max-concurrent-downloads and max-concurrent-uploads configs documentation
43298ad298 docs: remove documentation about deprecated cluster-store
8cc7f26f56 Document `--validate` daemon option
255eaa6647 Update man-page source MarkDown to work with go-md2man v2
ee27f4cd7f docs: update for cgroup v2 and rootless
c1d3c952e7 docker run: specify cgroup namespace mode with --cgroupns
fc9029a2e2 daemon: document --max-download-attempts option
115b10a467 Update document links and title.
488872bcb4 Allow user to specify default address pools for docker networks This is separate commit for CLI files to address PR 36054
f623030fac Update docs and completion-scripts for deprecated features
ac7032bff9 Added docs for dockerd
161006302f fix a number of minor typos
a6de17d230 Introduce/document new IPC modes
6513e80c84 docs: add documentation for dm.libdm_log_level
3d917f3fd6 Restore dockerd man page
e854a5c201 c8d/pull: Replace pointer to interface with interface
ea58dab95e c8d/pull: Keep the replaced image as dangling
0a38589add c8d/load: Only unpack host platform images
7c069d3021 c8d/load: Don't fail whole operation if unpack failed
5002faebe8 integration/TestAPIImagesListManifests: Check `Containers`
a15a309832 c8d/list: Update benchmark to also have containers
fd5cede287 c8d/list: Fix race condition when traversing containers
65c4e49aff govulncheck to report known vulnerabilities
7ebb277873 Dockerfile: update xx to v1.5.0
ad5eb875d4 c8d/list: Don't require `opts.ContainerCount` for manifest containers
3d845e0e8c c8d/list: Add test for total and content size
3563a707d0 c8d/list: Fix `Total` size calculation
89757f83ff api/list: Expose manifests
bb2fec6425 api: Bump default version to 1.47
0f8fcec1d9 swagger: Disable ImageSummary model generation
1ec5e86154 api/types/registry: fix godoc, and add some doc-links
62f32e9a97 plugin: fix deprecation comments
830c76c6f2 vendor: update buildkit to v0.15.2
354bf75675 libcontainerd: gofumpt
4ab7d90669 pkg/plugins: gofumpt
c11b2d9c7d pkg/archive: gofumpt
ccdc79d55a libnetwork: gofumpt
35b1a30028 layer: gofumpt
9f63aa7435 internal: gofumpt
4d16ac993e integration: gofumpt
6d5266a650 integration-cli: gofumpt
4084dac566 daemon: gofumpt
c36ab4c2ca daemon/containerd: gofumpt
904867593b daemon/config: gofumpt
72876770d0 builder: gofumpt
e8109ee4da api/types: gofumpt
ed65e1224e api/server: gofumpt
d54aff9312 API 1.46: end per-interface sysctl migration in major release
8f12906274 Migrate per-endpoint sysctls until 28.0.0
c53be2f3d5 Allow --ip-range ending on a 64-bit boundary
fc0150b962 daemon/containerd: rm use of regexp
73c01d0b6a image/v1: rm regexp use
c93fe4a27d layer: rm regexp use
31459c8268 docs/api: swagger: fix x-nullable for SystemInfo.Containerd (api v1.46)
35d430c62e api/swagger: fix x-nullable for SystemInfo.Containerd
80a59c2f1a migrate to github.com/moby/sys/userns
e7fe276c00 update to go1.21.13
e8cd19e810 gha: set permissions to read-only by default
e0c52e0ba6 vendor: update buildkit to v0.15.1
efb67b16b0 api/server/router/grpc: NewRouter: set correct MaxRecvMsgSize, MaxSendMsgSize
f96e26f68d migrate to github.com/moby/sys/user/userns
78b59867f2 vendor: github.com/moby/sys/user v0.2.0
018137b01a vendor: github.com/gofrs/flock v0.12.1
650e06ac75 vendor: golang.org/x/sys v0.22.0
bfe5339c7e dockerd-rootless-setuptool.sh: move RootlessKit smoke test
99471ac2fe hack: explicitly control enabling the journald logging driver
b9b43b3bdf README: replace obsolete Docker EE mention
1bc907c97c vendor: github.com/containerd/containerd v1.7.20
1c0885d60d gha: check-pr-branch: fix branch check regression
ed83a9e3a1 update containerd binary to v1.7.20
422ef48c2f gha: check-pr-branch: verify major version only
c9d37a9198 [27.1] pkg/rootless/specconv: deprecate, and add temporary aliases
1f16a44b3d pkg/rootless/specconv: move to internal
c8f1317585 pkg/directory: deprecate, and move to internal
68587c38fe pkg/directory: fix comment, and remove import comments
d1ea2b1fec [27.1] pkg/containerfs: deprecate, and add temporary aliases
31c1b7dc17 pkg/containerfs: move to internal
6231ea4a34 pkg/containerfs: cleanup GoDoc, and make Windows a proper wrapper
dc33eb81d8 pkg/containerfs: remove CleanScopedPath and make it internal
bc6ae42031 Dockerfile: update compose to v2.29.0
af8866f324 Dockerfile: update buildx to v0.16.1
5e4ddd81a2 api/types/system: remove Info.ExecutionDriver
c7e4d181a1 vendor: cloud.google.com/go/logging v1.9.0
3d7e824bc2 vendor: golang.org/x/oauth2 v0.21.0
d66b76d2e6 vendor: cloud.google.com/go/compute/metadata v0.3.0
03dc388f63 c8d/build: Log `image tag` event when image was built with Buildkit
5ee23b6050 builder-next: Add ImageNamedByBuildkit callback
53c521a6b2 builder-next: Don't return error from exported callback
eccccd7577 Fix API version in TestSetInterfaceSysctl
d9e3d1b815 update containerd binary to v1.7.19
b91e20cc2e vendor: update buildkit to v0.15.0
505be6557b vendor: update buildkit to v0.15.0-rc2
b1613dc2a1 vendor: update buildkit to v0.15.0-rc1
52f6163746 vendor: golang.org/x/net v0.25.0
c70e404e9e vendor: golang.org/x/crypto v0.23.0
d7a3f01421 vendor: golang.org/x/text v0.15.0
0f2f9e0049 vendor: golang.org/x/sys v0.21.0
45a1c34202 vendor: github.com/klauspost/compress v1.17.9
7b31435cf8 Migrate to github.com/containerd/platforms module
99df4fee0b vendor: github.com/containerd/containerd v1.7.19
9f08d1e357 vendor: github.com/microsoft/hcsshim v0.11.7
d1bbb61844 If url includes scheme, urlPath will drop hostname, which would not match the auth check
0835eaa5a1 Authz plugin security fixes for 0-length content and path validation Signed-off-by: Jameson Hyde <jameson.hyde@docker.com>
b039de78d7 docs/api: Add missing `
7d99ebe418 rootless: add `Requires=dbus.socket`
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
f220803306 |
podman: update to v5.3.1
Bumping libpod to version v5.3.1-5-gc2f09d78d5, which comprises the following commits:
0d22d7b74e Quadlet - Use = sign when setting the pull arg for build
62c096bbce win-installer test: revert to v5.3.0
7bf22277ca Bump to v5.3.2-dev
4cbdfde5d8 Bump to v5.3.1
50960afe33 Update release notes for v5.3.1
d26990702c Update windows installer tests
2739822424 Windows: don't install WSL/HyperV on update
a8d61c034b Switch to non-installing WSL by default
98353f27ed docs: add 5.3 as Reference version
4886a0ba64 only read ssh_config for non machine connections
93562b4955 ssh_config: allow IdentityFile file with tilde
28e7b239ba ssh_config: do not overwrite values from config file
c49944ea02 connection: ignore errors when parsing ssh_config
f7877bf9db spec: clamp rlimits in a userns
dcedf5f211 cirrus: set proper DEST_BRANCH for 5.3
a39a749ce3 libpod: addHosts() prevent nil deref
9a9f07aa4b Bump bundled krunkit to 0.1.4
5546dc6c20 fix podman machine init --ignition-path
8efa1c1075 Bump to v5.3.1-dev
874bf2c301 Bump to v5.3.0
2e3836d226 Update release notes for v5.3.0
31df1bb97c [v5.3] Bump to Buildah v1.38.0
9556882bbf [v5.3] Skip FIPS mode secrets run test
c6dd2c77ab [v5.3] Buildah treadmill tweaks
0710e83c41 test/buildah-bud: build new inet helper
d852c58d6c test/system: add regression test for TZDIR local issue
ac59fb9231 vendor latest c/{buildah,common,image,storage}
1f0e2db2a9 Reapply "CI: test nftables driver on fedora"
16acfd7edb Revert "cirrus: test only on f40/rawhide"
dc97a7e0de test f41 VMs
9e38b455e4 volume ls: fix race that caused it to fail
44df7344fe AdditionalSupport for SubPath volume mounts
17224fcb05 Bump to v5.3.0-dev
8469dcc4f0 Bump to v5.3.0-rc3
a18365c665 Update release notes for v5.3-rc3
10309bfb45 podman: update roadmap
b237b4dc2a libpod: journald do not lock thread
2597eeae70 Add key to control if a container can get started by its pod
c6be5a6684 Honor users requests in quadlet files
2c01264568 CI: systests: workaround for parallel podman-stop flake
528b085438 Fix inconsistent line ending in win-installer project
5ae5ab8c26 fix(deps): update module github.com/opencontainers/runc to v1.2.1
dbfc8cccda Quadlet - support image file based mount in container file
e6d987882e API: container logs flush status code
768ad8653a rework event code to improve API errors
e3abf5c9e8 events: remove memory eventer
6348778348 libpod: log file use Wait() over event API
0acd192b59 Makefile: vendor target should always remove toolchain
ef20e75a77 cirrus: check consitent vendoring in test/tools
f4ad93d5f6 test/tools/go.mod: remove toolchain
3f15f710ce fix(deps): update module github.com/shirou/gopsutil/v4 to v4.24.10
d8311353b9 fix(deps): update module github.com/onsi/gomega to v1.35.1
37c8e10031 doc: explain --interactive in more detail
cd1b6b7121 fix(deps): update golang.org/x/exp digest to f66d83c
2dff79bd2c fix(deps): update github.com/opencontainers/runtime-tools digest to 6c9570a
5722304613 fix(deps): update github.com/linuxkit/virtsock digest to cb6a20c
1e7593d17f Bump to v5.3.0-dev
ffad01fbc8 Bump to v5.3.0-rc2
b6919a5712 Update release notes for v5.3.0-rc2
314dece926 add default polling interval to Container.Wait
d633824a95 Instrument cleanup tracer to log weird volume removal flake
6b8e8cbbf7 make podman-clean-transient.service work as user
b455f94ca8 Add default remote socket path if empty
48a8a9c22c Use current user if no user specified
e523734ab6 Add support for ssh_config for connection
c98538db7d libpod: use pasta Setup() over Setup2()
c7ff3b75cb fix(deps): update module github.com/onsi/ginkgo/v2 to v2.21.0
5a1bc6126e fix(deps): update module github.com/onsi/gomega to v1.35.0
bd75a4e0e0 logformatter: add cleanup tracer log link
2a0a52469c docs: fix broken example
f4be5e34c2 docs: add missing swagger links for the stable branches
b9fed4fcf2 readthedocs: build extra formats
ce24ab0683 pkg/machine/e2e: remove debug
4a54fd8756 fix(docs): Integrate pasta in rootless tutorial
5f66277138 chore(deps): update dependency setuptools to ~=75.3.0
1f44d0f8b2 libpod: report cgroups deleted during Stat() call
9abc17f1e1 chore: fix some function names in comment
41a82c9a95 CI: parallelize 450-interactive system tests
10d056cc5e CI: parallelize 520-checkpoint tests
e6b7e4ff84 CI: make 070-build.bats use safe image names
64516e1b8f test/system: add podman network reload test to distro gating
743a0d49eb System tests: clean up unit file leaks
c0f4e2ce67 healthcheck: do not leak service on failed stop
6069cdda00 healthcheck: do not leak statup service
45e1ffb799 fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.8.0
afedb83917 Add Startup HealthCheck configuration to the podman inspect
d2ba730f33 buildah version display: use progress()
825eed4bde new showrun() for displaying and running shell commands
9db04e87b6 Buildah treadmill: redo the .cirrus.yml tweaks
a925c9f831 Buildah treadmill: more allow-empty options
ba8375c9e4 Buildah treadmill: improve test-failure instructions
ee9c681f31 Buildah treadmill: improve wording in test-fail instructions
eb90154975 doc: Remove whitespace before comma
da783f3f70 fix(deps): update module github.com/checkpoint-restore/checkpointctl to v1.3.0
0cdb9b3b22 ps: fix display of exposed ports
73fb6623cd ps: do not loop over port protocol
390aec18b2 readme: Add reference to pasta in the readme
5b131b8273 test/system: Fix spurious "duplicate tests" failures in pasta tests
6fd0e227b4 Improve "podman load - from URL"
77ef28c14f Try to repair c/storage after removing an additional image store
1d7ec1ef5f Use the config digest to compare images loaded/pulled using different methods
bf8f2b5551 Simplify the additional store test
3bc6072142 Fix the store choice in "podman pull image with additional store"
6a11e75c48 Bump to v5.3.0-dev
d306e80127 Bump to v5.3.0-rc1
23ab7b858a Set quota on volume root directory, not _data
1a5ff0765e fix(deps): update module github.com/opencontainers/runc to v1.2.0
94878af151 test: set soft ulimit
ef26488fd7 Vagrantfile: Delete
642b61a091 Enable pod restore with crun
2e94ca5816 vendor: update c/{buildah,common,image,storage}
fdc9feea0e Fix 330-corrupt-images.bats in composefs test runs
67e0fa8b89 quadlet: add default network dependencies to all units
57b022782b quadlet: ensure user units wait for the network
203ab6573b add new podman-user-wait-network-online.service
a6c4e00e9a contrib/systemd: switch user symlink for file symlinks
1462b52090 Makefile: remove some duplication from install.systemd
21d0711a02 contrib/systemd: move podman-auto-update units
9c6b1e20a3 quadlet: do not reject RemapUsers=keep-id as root
ada75c0bb8 test/e2e: test quadlet with and without --user
fa920f54c7 CI: e2e: fix checkpoint flake
fe96c843bf APIv2 test fix: image history
67e39c1ec5 pasta udp tests: new bytecheck helper
a92958eb0c Document packaging process
cf124ee1bb [skip-ci] RPM: remove dup Provides
927cb7624c Update dependency setuptools to ~=75.2.0
1ddb15c81f System tests: safer pause-image creation
40d4f7240b Update module github.com/opencontainers/selinux to v1.11.1
1227f19393 Added escaping to invoked powershell command for hyperv stubber.
b7b2ef48e8 use slices.Clone instead of assignment
768aaadca1 libpod API: only return exit code without conditions
b3302e8e18 Housekeeping: remove duplicates from success_task
1bf37eecf3 Thorough overhaul of CONTRIBUTING doc.
b0f2ebbe9d test/e2e: fix default signal exit code test
dc55b59987 Test new VM build
1b57dcab61 CI: fix changing-rootFsSize flake
feb46513f0 scp: add option types
06b470d79b Unlock mutex before returning from function
7ea6120794 Note in the README that we are moving to timed releases
5d10e6e16b cirrus: let tar extract figure out the compression
94dcf76eb2 Make error messages more descriptive
3a4c4468f2 Mention containers.conf settings for podman machine commands
7dc58c105b [skip-ci] Packit: re-enable CentOS Stream 10/Fedora ELN teasks"
3d57560a21 cmd: use logrus to print error
71d5ee0e04 podman: do not set rlimits to the default value
5ebba75dbd spec: always specify default rlimits
8896ace2a4 vendor: update containers/common
92a188ea38 Note in the README that we are moving to timed releases
7f836df303 Revert "CI: test nftables driver on fedora"
9e35fead03 cirrus: use zstd over bzip2 for repo archive
6e69978d2e cirrus: use shared repo_prep/repo_artifacts scripts
7eb4a6fe2b cirrus: speed up postbuild
04dffbc2c7 cirrus: change alt arch task to only compile binaries
9082a14d76 cirrus: run make with parallel jobs where useful
bc3db7c95b Makefile: allow man-page-check to be run in parallel
39963cc984 cirrus: use fastvm for builds
4e3a03795d test/e2e: skip some Containerized checkpoint tests
fe404959ed test: update timezone checks
a79fec5e98 cirrus: update CI images
f517e52167 test/e2e: try debug potential pasta issue
38803713d6 CI: quadlet system tests: use airgapped testimage
bac655a6b1 Allow removing implicit quadlet systemd dependencies
05a449c61e fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.4
b3829a2932 libpod API: make wait endpoint better against rm races
3215d5124f podman-remote run: improve how we get the exit code
3d1a4301af [skip-ci] Packit: constrain koji and bodhi jobs to fedora package to avoid dupes
e7833d52cf 055-rm test: clean up a test, and document
3cedd0c2b5 CI: remove skips for libkrun
858472aa83 Bump bundled krunkit to 0.1.3
43a4bddd10 fix(deps): update module google.golang.org/protobuf to v1.35.0
385e2ea650 fix(deps): update module golang.org/x/net to v0.30.0
45df394072 server: fix url parsing in info
b8dbe09f98 fix(deps): update module golang.org/x/tools to v0.26.0
e2e1996c6a Makefile: fix ginkgo FOCUS option
fbd9fe45cb fix(deps): update module golang.org/x/crypto to v0.28.0
d0cb62aacc podman-systemd.unit.5: adjust example options
374844817d docs: prefer --network to --net
1470961e6c fix(deps): update module golang.org/x/term to v0.25.0
567906ed5b fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.24
53785ed055 fix(deps): update module golang.org/x/sys to v0.26.0
505c585b49 OWNERS file audit and update
8061553c0f Exposed ports are only included when not --net=host
e46ae46f18 libpod: hasCurrentUserMapped checks for gid too
e948c4ed90 [CI:DOCS] Document TESTFLAGS in test README file
985b57d9f7 Validate the bind-propagation option to `--mount`
d8b26ac1b4 Fix typo in secret inspect examples
6f9cc3755a Mention `no_hosts` and `base_hosts_file` configs in CLI option docs
043b82ef59 Fixes for vendoring Buildah
83a0299309 vendor: update buildah to latest
23f256349b Makefile - silence skipped tests when focusing on a file
dde1c3d98c vendor: update to latest c/common
fc25a3a5fc Quadlet - prefer "param val" over "param=val" to allow env expansion
410537808e System tests: sdnotify: wait for socket file creation
28e01cc8cc Switch to moby/sys/capability
6a91149b53 platformInspectContainerHostConfig: rm dead code
b791dfb558 CI: require and test CI_DESIRED_NETWORK on RHEL
edc3dc5e11 Add ExposedPorts to Inspect's ContainerConfig
28d3775c4d fix(deps): update golang.org/x/exp digest to 701f63a
abc4cfb049 quadlet: allow variables in PublishPort
7cde3abd17 fix(deps): update module github.com/shirou/gopsutil/v4 to v4.24.9
8ef495594c fix(deps): update github.com/godbus/dbus/v5 digest to a817f3c
bb35ad1da4 Document that zstd:chunked is downgraded to zstd when encrypting
ce9716ee41 fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.3
ece76a2537 chore(deps): update dependency ubuntu to v24
b5e1863d1c rpm: do not load iptables modules on f41+
e07c31068f adding docs for network-cmd-path
a619c03eff Include exposed ports in inspect output when net=host
1dd90dbe20 feat(libpod): support kube play tar content-type (#24015)
1950555b26 podman mount: some better error wrapping
5c3019e028 podman mount: ignore ErrLayerUnknown
ebbec00b0d Quadlet - make sure the order of the UnitsDir is deterministic
f47abd8e1e packit: disable Centos Stream/fedora ELN teasks
5de7b7c3f3 libpod: remove shutdown.Unregister()
0bbef4b830 libpod: rework shutdown handler flow
2de82d523b libpod: ensure we are not killed during netns creation
27838b26d6 Update module github.com/moby/sys/capability to v0.3.0
6e4ef2c54d Update documentation of `--no-hosts`, `--hostname`, and `--name` CLI options
c67d8baeb6 Update documentation of `--add-host` CLI option
70c131ed68 System tests: set a default XDG_RUNTIME_DIR
e9b8564690 Modify machine "Remove machine" test
73cbc13190 CORS system test: clean up
de856dab99 Add --health-max-log-count, --health-max-log-size, --health-log-destination flags
7fbc6d9370 troubleshooting: adjust home path in tip 44
1f2658e0ef test/system: For pasta port forwarding tests don't bind socat server
24deec835c Update connection on removal
c709be3a29 Simplify `RemoveConnections`
9febd2c27a Move `DefaultMachineName` to `pkg/machine/define`
7f29233a3f vendor: update containers/image
c81c77109b vendor: update containers/storage
fd4c63838b CI: skip the flaking quadlet test
faf4604883 CI: make systemd tests parallel-safe (*)
09ba5db035 CI: run and collect cleanup tracer logs
0b59f67c3a add epbf program to trace podman cleanup errors
4be6bf2270 CI: parallelize logs test as much as possible
600634c62c CI: format test: use local registry if available
d92f2d39ee CI: make 700-play parallel-safe
62e5eb4734 docs: Fix missing negation
6ef0288ca6 bin/docker support warning message suppression from user config dir
6d4006b123 Update module github.com/docker/docker to v27.3.1+incompatible
133ea31ffb Quadlet - add full support for Symlinks
792796183f libpod: setupNetNS() correctly mount netns
f6bda786ed vendor latest c/common
7dccf8faee docs: remove usage of deprecated `--storage`
597773464c Update module github.com/docker/docker to v27.3.0+incompatible
a08ae98161 CI: Quadlet rootfs test: use container image as rootfs
9c51eead06 CI: system test registry: use --net=host
e3af5a38d3 CI: rm system test: bump grace period
3396dabdf3 CI: system tests: minor documentation on parallel
31cdf1197b fix typo in error message Fixes: containers/podman#24001
1d5c8ac18e CI: system tests: always create pause image
5e5c68ffbe CI: quadlet system test: be more forgiving
6dcda2196a vendor latest c/common
6fe832d5d6 CI: make 200-pod parallel-safe
d7335855d7 allow exposed sctp ports
755a06aa44 test/e2e: add netns leak check
2d469e517d test/system: netns leak check for rootless as well
2505381551 test/system: Improve TODO comments on IPv6 pasta custom DNS forward test
4919440428 test/system: Clarify "Local forwarder" pasta tests
63e286ac55 test/system: Simplify testing for nameserver connectivity
6c79fe292b test/system: Consolidate "External resolver" pasta tests
85045406b5 test/system: Move test for default forwarder into its own case
5468718f22 CI: make 090-events parallel-safe
8402b6535f Misc minor test fixes
7fcf94d7b5 Add network namespace leak check
b3da5be2b1 Add workaround for buildah parallel bug
5fc3de5583 registry: lock start attempts
bf6131780a Update system test template and README
6502e30cfd bats log: differentiate parallel tests from sequential
6b621d9571 ci: bump system tests to fastvm
bcffa9ce30 clean_setup: create pause image
812c7e9436 CI: make 012-manifest parallel-safe
00c13afcb9 podman-manifest-remove: update docs and help output
aa108924ea test/system: remove wait workaround
fbed3a01d2 wait: fix handling of multiple conditions with exited
e04668c8ca Match output of Compat Top API to Docker
d571ca6536 system test parallelization: enable two-pass approach
8d119f0c2d New VMs: test crun 1.17
a5e9b4d126 libpod: hides env secrets from container inspect
111a4bbe71 CI: e2e: workaround for events out-of-sequence flake
49a07fce49 update golangci-lint to 1.61.0
432325236b libpod: convert owner IDs only with :idmap
f4d0e124d6 Podman CLI --add-host with multiple host for a single IP
a664708f35 Quadlet - Split getUnitDirs to small functions
1a1001d824 fix(deps): update module github.com/cpuguy83/go-md2man/v2 to v2.0.5
c436a9b658 chore(deps): update dependency setuptools to ~=75.1.0
fdb2edf46a Fxi typo in cache-ttl.md
b2e6d53265 Get WSL disk as an OCI artifact
c6616004f1 CI: make 260-sdnotify parallel-safe
42a1f5e87c quadlet: do not log ENOENT errors
91dbd6dc33 pkg/specgen: allow pasta when running inside userns
9a8e17816a troubleshooting: add tip about the user containers
95833a6207 chore(deps): update dependency setuptools to v75
1857d7e50f Convert windows paths in volume arg of the build command
d124d90e18 Improve error when starting multiple machines
fe08440ec3 fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.2
01a1761fd9 Minor typo noticed when reading podman man page
e041f2a7b7 Remove `RemoveFilesAndConnections`
54b71b637c Add `GetAllMachinesAndRootfulness`
ac4a31cc4a rewrite typo osascript
089d2513d8 typo
31a1fd8f33 fix(deps): update module github.com/docker/docker to v27.2.1+incompatible
cb03ca31b2 Add radio buttons to select WSL or Hyper-V in windows setup.exe
297ec1c083 [skip-ci] Packit: split out ELN jobs and reuse fedora downstream targets
5f6a22dc1b [skip-ci] Packit: Enable sidetags for bodhi updates
b9fe4097dd vendor: update c/common
e61682f50e CI: make 710-kube parallel-safe
0ff89a00af CI: mark 320-system-df *NOT* parallel safe
db12343e27 Add kube play support for image volume source
837755e643 refactor: add sshClient function
a83fef34a9 fix(deps): update module golang.org/x/tools to v0.25.0
22ec8ea06d CI: make 505-pasta parallel safe
18932e0339 CI: make 020-tag parallel-safe
a165289574 CI: make 410-selinux parallel-safe
359092e463 Bump VMs. ShellCheck is now built-in
005d9b543b troubleshooting: add tip about auto, keep-id, nomap
a1e6603133 libpod: make use of new pasta option from c/common
2f858675b3 vendor latest c/common
0abbcfa50a podman images: sort repository with tags
eb396705c6 Remove containers/common/pkg/config from pkg/util
2840b21862 fix(deps): update module golang.org/x/net to v0.29.0
38555305c2 fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.23
1c23bd5acf fix(deps): update module golang.org/x/crypto to v0.27.0
133bbd3769 Fix CI
c203c48c70 Detect and fix typos using codespell
12b3d01438 Fix typo: replace buildin with built-in
4700b5a58a Add codespell config, pre-commit definition, and move options from Makefile
901f621daa prune: support clearing build cache using CleanCacheMount
1543c5f0ad test/e2e: fix network prune flake
bdf96e7df2 Add support for Job to kube generate & play
c317da8deb Add podman-rootless.7 man page
15bde1abdb Add DNS, DNSOption and DNSSearch to quadlet pod
0f77363ff5 podman.1.md: improve policy.json section
579e8b2d7a e2e: flake fix: SIGPIPE in hook test
01296038dc libpod: fix rootless cgroup path with --cgroup-parent
5a15e70345 vendor: update c/storage
7b019e9905 CI: make 055-rm parallel-safe
e5624510ce CI: make 130-kill parallel-safe
f38953c156 CI: make 125-import parallel-safe
0e1ac9cee1 CI: make 110-history parallel-safe
bca7c20530 CI: system tests: parallelize low-hanging fruit
8eb7eff899 Add disclaimer to `podman machine info` manpage.
d803bb3407 man pages: refactor two more options
beffd05d5a update github.com/opencontainers/runc to v1.2.0-rc.3
77702d73ef update go.etcd.io/bbolt to v1.3.11
a269f098cd update github.com/onsi/{ginkgo,gomega}
e9a4534cb1 Update module github.com/shirou/gopsutil to v4
54b8c4fb64 packit: update fedora and epel targets
f93fcf7dee bump go to 1.22
d03e8ffc56 cirrus: test only on f40/rawhide
2ca4efb9f4 cirrus: remove CI_DESIRED_NETWORK reference
e598bcafb8 cirrus: prebuild use f40 for extra tests
c68c2974a3 chore(deps): update dependency setuptools to ~=74.1.0
60af13ca0f libpod: fix HostConfig.Devices output from 'podman inspect' on FreeBSD
70358ecf18 fix(deps): update golang.org/x/exp digest to 9b4947d
1732338630 Implement publishing API UNIX socket on Windows platforms
c6fe5e5395 Vendor c/common:8483ef6022b4
71fd15726d quadlet: support container network reusing
f40eb5f06a docs: update read the docs changes
abea5ad4ac CI: parallel-safe network system test
2b14db2af3 Quadlet - Support multiple image tags in .build files
3bdddea8fa fix(deps): update module github.com/vbauerster/mpb/v8 to v8.8.3
6a0ab6f7bc cirrus: remove _bail_if_test_can_be_skipped
d5c5261e6f cirrus: move renovate check into validate
ac18b1a0af cirrus: remove 3rd party connectivity check
34a7d8dd10 cirrus: remove cross jobs for aarch64 and x86_64
186f50ad7d cirrus: do not upload alt arch cross artifacts
94431c29b4 cirrus: remove ginkgo-e2e.json artifact
78be80f2cd cirrus: fix default timeouts
775d27fcd8 github: remove fcos-podman-next-build-prepush
63545126c2 Clarify podman machine volume mounting behavior under WSL
41f945fc24 machine: Add -all-providers flag to machine list
5389eee737 Create a podman-troubleshooting man page
33b96e78c8 chore(deps): update dependency setuptools to v74
565ad236a5 fix(deps): update module github.com/docker/docker to v27.2.0+incompatible
6e027c0e37 Fix an improperly ignored error in SQLite
678323efd8 CI: flake workaround: ignore socat waitpid warnings
00027bc251 fix(deps): update module github.com/rootless-containers/rootlesskit/v2 to v2.3.1
4f4ebdce5b Stop skipping machine volume test on Hyper-V
a89fef6e2a cleanup: add new --stopped-only option
bf74797c69 fix races in the HTTP attach API
dbd2adc798 cirrus: skip windows/macos machine task on RHEL branches
a508d7631f Update module github.com/containers/gvisor-tap-vsock to v0.7.5
dc724e5e80 run: fix detach passthrough and --rmi
8e78028e2c podman run: ignore image rm error
7c5d8bec0d Add support for AddHost in quadlet .pod and .container
07c9fe82a8 [CI:DOCS] Update dependency golangci/golangci-lint to v1.60.3
df3c9efb03 update github.com/vishvananda/netlink to v1.3.0
5f57f4ea22 build: Update gvisor-tap-vsock to 0.7.5
3e58e04d3e Quote systemd DefaultEnvironment Proxy values, as documented in systemd.conf man page:
16007e4370 fix typo in podman-network-create.1.md
6c68f4ad97 Use HTTP path prefix of TCP connections to match Docker context behavior
cae427e2f8 Makefile: remotesystem: use real podman server, no --url
215af114ab Update module github.com/openshift/imagebuilder to v1.2.15
11547942b1 CI: parallel-safe userns test
7164177c68 Update module github.com/onsi/ginkgo/v2 to v2.20.1
d55b12f70b Add support for IP in quadlet .pod files
b2fb944e19 Specify format to use for referencing fixed bugs.
68efa7e3a1 CI: parallel-safe run system test
4dc5708f14 Revert "test/e2e: work around for pasta issue"
17193af962 CI: On vX.Y-rhel branches, ensure that some downstream Jira issue is linked
4fbfa7de6e quadlet: support user mapping in pod unit
5ccaa699f1 Update Release Process
154d832696 Test new VM build
29071ac498 command is not optional to podman exec
9c3921ca58 CI: parallel-safe namespaces system test
13b31845c8 [CI:DOCS] Update dependency golangci/golangci-lint to v1.60.2
1ccccde183 quadlet: add key CgroupsMode
458ba5a8af Fix `podman stop` and `podman run --rmi`
e5c91ff03a quadlet: set infra name to %s-infra
990fc335fa chore(deps): update dependency setuptools to v73
76e1bbb57d [skip-ci] Packit: update targets for propose-downstream
fc30620cdb Do not segfault on hard stop
d5cd388729 Fix description of :Z to talk about pods
145c7511aa CI: disable ginkgo flake retries
b755a1c60b vendor: update go-criu to latest
84a85319e1 golangci-lint: make darwin linting happy
666d839157 golangci-lint: make windows linting happy
cd2a4c7cac test/e2e: remove kernel version check
6c0d94328f golangci-lint: remove most skip dirs
942f789a88 set !remote build tags where needed
c17daf2b09 update golangci-lint to 1.60.1
57016f5cc3 test/e2e: rm systemd start test
e2e2763b0e fix(deps): update module github.com/vbauerster/mpb/v8 to v8.8.1
80639df27a podman wait: allow waiting for removal of containers
ddece758a4 libpod: remove UpdateContainerStatus()
7a7aec355b podman mount: fix storage/libpod ctr race
480d43748a CI: quadlet tests: make parallel-safe
420bd16a21 CI: system tests: make random_free_port() parallel-safe
478b262f9b remove trailing comma in example
1a1d2646df CI: format test: make parallel-safe
004c040ca2 Fix podman-docker.sh under -eu shells (fixes #23628)
6fb10421fb docs: update podman-wait man page
94fd5fe6f7 libpod: remove duplicated HasVolume() check
a65aecd260 podman volume rm --force: fix ABBA deadlock
b6beed9f76 test/system: fix network cleanup restart test
30eb6b6aae libpod: do not stop pod on init ctr exit
8a943311db libpod: simplify WaitForExit()
5b6de98ee8 CI: remove build-time quay check
6b1c7de3d5 Fix known_hosts file clogging and remote host id
c4cdb6defa Update docker.io/library/golang Docker tag to v1.23
0d1c19248a Update dependency setuptools to ~=72.2.0
9945736a3e Update module github.com/docker/docker to v27.1.2+incompatible
0d7e14fb83 healthcheck system check: reduce raciness
30ee9c0114 CI: healthcheck system test: make parallel-safe
8f191618e4 Validate renovate config in every PR
0177f74dc6 pkg/machine: Read stderr from ssh-keygen correctly
e30b0978b8 Fix renovate config syntax error
36f9a04499 CI: 080-pause.bats: make parallel-safe
6656a18c3f CI: 050-stop.bats: make parallel-safe
25d66d97d2 Additional potential race condition on os.Readdir
5ec413fac7 pkg/bindings/containers: handle ignore for stop
6fce734f42 remote: fix invalid --cidfile + --ignore
e111b6c0be Update/simplify renovate config header comment
6c0b8b64d4 Migrate renovate config to latest schema
d33abcdf10 Fix race condition when listing /dev
d26341332c docs/podman-systemd: Try to clarify `Exec=` more
ecf88f17b6 libpod: reset state error on init
20f3e8909e test/system: pasta_test_do add explicit port check
20a32d33cd test/e2e: work around new push warning
be41ee4131 vendor: update c/common to latest
4aaa5cb6f0 stopIfOnlyInfraRemains: log all errors
78cb1e28cb libpod: do not save expected stop errors in ctr state
f276d53532 libpod: fix broken saveContainerError()
b0948a5cd0 Quadlet: fix filters failure when the search paths are symlinks
2043d1647c readme: replace GPG with PGP
a48cd241ad Drop APIv2 CNI configuration
dcdb5408de De-duplicate docker-py testing
ec59508d4c chore(podmansnoop): explain why crun comm is 3
f2a03e5753 libpod: cleanupNetwork() return error
61a889de4c fix(deps): update module golang.org/x/sys to v0.24.0
7936809f75 Reduce python APIv2 test net dependency
bf091abdc5 Fix not testing registry.conf updates
be2212804b test/e2e: improve command timeout handling
52ff2a41fa Update module github.com/onsi/ginkgo/v2 to v2.20.0
09639a07fb Update module github.com/moby/sys/user to v0.3.0
f041d059b5 Add passwd validate and generate steps
4620e91f86 podman container cleanup: ignore common errors
795851edd3 Quadlet - Allow the user to override the default service name
1a2e1eb46e CI: e2e: serialize root containerPort tests
a06a7d7ba8 Should not force conversion of manifest type to DockerV2ListMediaType
2038d88680 fix(deps): update module golang.org/x/tools to v0.24.0
6714b6302d fix(deps): update github.com/containers/common digest to 05b2e1f
f99c7ead92 CI: mount system test: parallelize
53ae4ea927 Update module golang.org/x/net to v0.28.0
81003f2d08 Ignore ERROR_SHARING_VIOLATION error on windows
f9b67cea57 CI: manifest system tests: make parallel-safe
eb7ce80cf9 Create volume path before state initialization
84a5119d17 vendor: update c/storage
029f9b38cc CI: fix broken libkrun test
1912dd4bf6 test/e2e: work around for pasta issue
71bcd25ab6 test/e2e: fix missing exit code checks
082650b68f Test new CI images
abd586cb1c Remove another race condition when mounting containers or images
91b3fdbba3 fix(deps): update github.com/containers/common digest to c0cc6b7
01d739a65e Change Windows installer MajorUpgrade Schedule
d628e14355 Ignore missing containers when calling GetExternalContainerLists
37226e2e93 Remove runc edit to lock to specific version
67ce828152 fix(deps): update module golang.org/x/sys to v0.23.0
87dad1caef CI: podman-machine: do not use cache registry
bfb42b3b15 CI: completion system test: use safename
e429160e5b Temporarly disable failing Windows Installer CI test
3ae1568933 libpod: fix volume copyup with idmap
61def05cd9 libpod: avoid hang on errors
457c64564a Temp. disable PM basic Volume ops test
029a9aa34e Add libkrun Mac task
014b7af4f3 Never skip checkout step in release workflow
83e90a2f5b System tests: leak_test: readable output
f446f59d71 fix(deps): update github.com/docker/go-plugins-helpers digest to 45e2431
75a316aae4 vendor: bump c/common
fcf7cd7d5c Version: bump to v5.3.0-dev
7610cedc80 libpod: inhibit SIGTERM during cleanup()
2550a7290a Tweak versions in register_images.go
4c3531a1a4 fix network cleanup flake in play kube
84f57e4ba0 WIP: Fixes for vendoring Buildah
b8a9b184af Add --compat-volumes option to build and farm build
286fbf98d1 Bump to Buildah v1.37.0
7d9c1a2c53 Quadlet test - Split between success, warning and error cases
77081df8cd libpod: bind ports before network setup
cfac059d14 Disable compose-warning-logs if PODMAN_COMPOSE_WARNING_LOGS=false
1c46686a41 Use new syntax for selinux options in quadlet
616005e0ad fix(deps): update module github.com/onsi/gomega to v1.34.1
396961069c CI: kube test: fix broken external-storage test
8b5b9d0bb5 Update dependency setuptools to v72
bf3f207a49 Convert additional build context paths on Windows
1b91df012d pkg/api: do not leak config pointers into specgen
f3a86266e6 Quadlet - Allow the user to set the service name for .pod files
1c4fbe7965 Quadlet tests - allow overriding the expected service name
41cc3ae6f9 fix(deps): update module github.com/moby/sys/user to v0.2.0
884c43d416 fix(deps): update module github.com/vbauerster/mpb/v8 to v8.7.5
7bb3b83c17 CI: enable root user namespaces
b59918e536 libpod: force rootfs for OCI path with idmap
1d23f3ff11 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.19.1
a18bd3e9c0 Add test steps for automount with multi images
25fffdb74f CI: cp tests: use safename
1ecb68d92b [skip-ci] RPM: podman-iptables.conf only on Fedora
fd0ff9060f CI: 700-play: fix a leaked non-safename
d9c2806461 test: check that kube generate/play restores the userns
fef125c7b1 test: disable artifacts cache with composefs
8403f4c33f test: fix podman pull tests
90411b2290 vendor: bump c/storage
eadfbbc809 Update module github.com/cyphar/filepath-securejoin to v0.3.1
ce7dded38b Add /run/containers/systemd, ${XDG_RUNTIME_DIR}/containers/systemd quadlet dirs
599c0d167c build: Update gvisor-tap-vsock to 0.7.4
2e20681f05 test/system: fix borken pasta interface name checks
da3edce4e6 test/system: fix bridge host.containers.internal test
f70976a7e2 api: honor the userns for the infra container
fa2590a97a play: handle 'private' as 'auto'
61f0230c31 kube: record infra user namespace
bf8c3065f2 infra: user ns annotation higher precedence
bbe0e4a5db specgenutil: record the pod userns in the annotations
e97bb79b7a kube: invert branches
64f2d85e4f CI: system log test: use safe names
84eb640160 Update encryption tests to avoid a warning if zstd:chunked is the default
059c298389 Fix "podman pull and decrypt"/"from local registry"
6c55ef505d Use unique image names for the encrypted test images
b61667470c CI: system tests: instrument to allow failure analysis
96771eec53 Fix outdated comment for the build step win-gvproxy
71d6e2fbaf Add utility to convert VMFile to URL for UNIX sockets
7768cf235e Run codespell on source
83160b1d02 fix(deps): update module github.com/docker/docker to v27.1.0+incompatible
a493a584c0 chore(deps): update dependency setuptools to ~=71.1.0
a05a9cae07 logformatter: tweaks to pass html tidy
174190132c More information for podman --remote build and running out of space.
2e4b640ad2 Fix windows installer deleting machine provider config file
7202e6172d Use uploaded .zip for Windows action
5e9ab00063 pr-should-include-tests: no more CI:DOCS override
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
7bdfb7806e |
runc-docker: update to v1.2.0
Bumping runc to version v1.2.0-69-gb7da1673, which comprises the following commits:
b7da1673 build(deps): bump google.golang.org/protobuf from 1.35.1 to 1.35.2
119111a0 libct/cg: add test for remove a non-existent dir in a ro mount point
068d7da7 Revert "Temporary set vagrant to 2.4.1-1"
ac435895 memfd-bind: elaborate kernel requirements for overlayfs protection
ba3d026e libct/cg: RemovePath: improve comments
12e06a7c libct/cg: RemovePath: simplify logic
db59489b runc delete: fix for rootless cgroup + ro cgroupfs
ca4a7a86 build(deps): bump golang.org/x/net from 0.30.0 to 0.31.0
43af111e MAINTAINERS: move dqminh and hqhq to EMERITUS
ec5e7eb7 build(deps): bump golang.org/x/sys from 0.26.0 to 0.27.0
9cb59b46 ci: rm "skip on CentOS 7" kludges
5000f169 Temporary set vagrant to 2.4.1-1
b9dfb22d readme: drop unused memfd-bind reference
aa505bfa memfd-bind: mention that overlayfs obviates the need for it
9bc42d61 dmz: overlay: set xino=off to disable dmesg spam
9ce7392b Vagrantfile.fedora: bump Fedora to 41
609e9a51 Vagrantfile.fedora: stop using dnf shell
80c46d31 build(deps): bump golang.org/x/net from 0.24.0 to 0.30.0
5586d7ca libct: rm obsoleted comment
f9fd70b7 CHANGELOG: add (forward-port) v1.1.15 changes
8cc73754 libct: fix a comment
ee1bced1 script/check-config.sh: add OVERLAY_FS check
c8f5d033 docs: remove prompt symbols from shell snippets
871057d8 drop runc-dmz solution according to overlay solution
34a92855 test join other container userns with selinux enabled
c78f3f2e libct/nsenter: become root after joining userns
1e674098 libct/int: add exec benchmark
cb201487 libct/int: use testing.TB for utils
4df7b1b1 build(deps): bump golang.org/x/sys from 0.22.0 to 0.26.0
cbb9b309 ci: use Go 1.23
732806e2 runc update: fix updating swap for cgroup v2
cb9f3d6d libct/cg: improve ConvertMemorySwapToCgroupV2Value
69b3be76 build(deps): bump github.com/vishvananda/netlink from 1.1.0 to 1.3.0
eb2ff52a libct: rm x/sys/execabs usage
f20f273a build(deps): bump github.com/opencontainers/selinux
139789f1 build(deps): bump google.golang.org/protobuf from 1.33.0 to 1.35.1
93db63ab build(deps): bump github.com/urfave/cli from 1.22.14 to 1.22.16
af024b6c build(deps): bump github.com/moby/sys/mountinfo from 0.7.1 to 0.7.2
42f96305 VERSION: back to development
0b9fa21b VERSION: release v1.2.0
568231cc Revert "increase memory.max in cgroups.bats"
e6699266 fix an error caused by fd reuse race when starting runc init
515f09f7 dmz: use overlayfs to write-protect /proc/self/exe if possible
8cfbccb6 tests: integration: add helper to check if we're in a userns
54ef07d8 tests/int: skip "update memory vs CheckBeforeUpdate" on EL9
ff775363 tests/int: rm centos-7 exclusion
76a821fa tests/int: update info about EL9 kernel
b5bdf592 libct: rm initWaiter
9fa324c4 dmz: cloned binary: set +x permissions when creating regular tmpfile
324fcea4 Terminate execution for criu that does not meet version requirements
eff6f049 libct/cap: no need to load capabilities
9b60a93c libcontainer/userns: migrate to github.com/moby/sys/userns
1623cde1 go: update github.com/cyphar/filepath-securejoin to v0.3.4
4fdd5616 memfd-bind: more specific doc URL
9e554587 memfd-bind: fixup systemd unit file and README
13a6f560 runc run: fix mount leak
b096459a vendor: update github.com/cyphar/filepath-securejoin to v0.3.3
f55957de build(deps): bump bats-core/bats-action from 2.1.1 to 3.0.0
bb2bd38d change go minimum version in README
faffe1b9 replace strings.SplitN with strings.Cut
1be06760 libcontainer/cgroups/fs: remove todo since strings.Fields performs well
7a449109 libct/README: simplify example, rm inheritable caps
0de19533 runc spec, libct/int: do not add ambient capabilities
3e3f9603 runc exec --cap: do not add capabilities to ambient
5b161e04 update bats-action to 2.1.1
35f999dd remove installation of unused bats support libs
10c951e3 add ErrCgroupNotExist
319e133c go.mod: Use toolchain 1.22.4
8671a7db ci: update to setup bats action from bats-core
30f8f51e runc create/run: warn on rootless + shared pidns + no cgroup
21c61165 tests/int: log when teardown starts
b1449fd5 libct: use Namespaces.IsPrivate more
d8844e29 tests: integration: add setgid mkdirall test
066b109e vendor: update to github.com/cyphar/filepath-securejoin@v0.3.2
646efe70 utils: mkdirall: mask silently ignored mode bits to match os.MkdirAll
457e1ffa tests: add regression test for CVE-2019-19921 / CVE-2023-27561
216175a9 Upgrade Cilium's eBPF library version to 0.16
a31efe70 libct/seccomp/patchbpf: use binary.NativeEndian
429e06a5 libct: Signal: honor RootlessCgroups
dd827f7b utils: switch to securejoin.MkdirAllHandle
1d308c7d vendor: update to github.com/cyphar/filepath-securejoin@v0.3.1
5ab5ef3d deps: update to golang.org/x/sys@v0.22
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
c253e8bf85 |
runc-opencontainers: update to v1.2.0
Bumping runc to version v1.2.0-69-gb7da1673, which comprises the following commits:
b7da1673 build(deps): bump google.golang.org/protobuf from 1.35.1 to 1.35.2
119111a0 libct/cg: add test for remove a non-existent dir in a ro mount point
068d7da7 Revert "Temporary set vagrant to 2.4.1-1"
ac435895 memfd-bind: elaborate kernel requirements for overlayfs protection
ba3d026e libct/cg: RemovePath: improve comments
12e06a7c libct/cg: RemovePath: simplify logic
db59489b runc delete: fix for rootless cgroup + ro cgroupfs
ca4a7a86 build(deps): bump golang.org/x/net from 0.30.0 to 0.31.0
43af111e MAINTAINERS: move dqminh and hqhq to EMERITUS
ec5e7eb7 build(deps): bump golang.org/x/sys from 0.26.0 to 0.27.0
9cb59b46 ci: rm "skip on CentOS 7" kludges
5000f169 Temporary set vagrant to 2.4.1-1
b9dfb22d readme: drop unused memfd-bind reference
aa505bfa memfd-bind: mention that overlayfs obviates the need for it
9bc42d61 dmz: overlay: set xino=off to disable dmesg spam
9ce7392b Vagrantfile.fedora: bump Fedora to 41
609e9a51 Vagrantfile.fedora: stop using dnf shell
80c46d31 build(deps): bump golang.org/x/net from 0.24.0 to 0.30.0
5586d7ca libct: rm obsoleted comment
f9fd70b7 CHANGELOG: add (forward-port) v1.1.15 changes
8cc73754 libct: fix a comment
ee1bced1 script/check-config.sh: add OVERLAY_FS check
c8f5d033 docs: remove prompt symbols from shell snippets
871057d8 drop runc-dmz solution according to overlay solution
34a92855 test join other container userns with selinux enabled
c78f3f2e libct/nsenter: become root after joining userns
1e674098 libct/int: add exec benchmark
cb201487 libct/int: use testing.TB for utils
4df7b1b1 build(deps): bump golang.org/x/sys from 0.22.0 to 0.26.0
cbb9b309 ci: use Go 1.23
732806e2 runc update: fix updating swap for cgroup v2
cb9f3d6d libct/cg: improve ConvertMemorySwapToCgroupV2Value
69b3be76 build(deps): bump github.com/vishvananda/netlink from 1.1.0 to 1.3.0
eb2ff52a libct: rm x/sys/execabs usage
f20f273a build(deps): bump github.com/opencontainers/selinux
139789f1 build(deps): bump google.golang.org/protobuf from 1.33.0 to 1.35.1
93db63ab build(deps): bump github.com/urfave/cli from 1.22.14 to 1.22.16
af024b6c build(deps): bump github.com/moby/sys/mountinfo from 0.7.1 to 0.7.2
42f96305 VERSION: back to development
0b9fa21b VERSION: release v1.2.0
568231cc Revert "increase memory.max in cgroups.bats"
e6699266 fix an error caused by fd reuse race when starting runc init
515f09f7 dmz: use overlayfs to write-protect /proc/self/exe if possible
8cfbccb6 tests: integration: add helper to check if we're in a userns
54ef07d8 tests/int: skip "update memory vs CheckBeforeUpdate" on EL9
ff775363 tests/int: rm centos-7 exclusion
76a821fa tests/int: update info about EL9 kernel
b5bdf592 libct: rm initWaiter
9fa324c4 dmz: cloned binary: set +x permissions when creating regular tmpfile
324fcea4 Terminate execution for criu that does not meet version requirements
eff6f049 libct/cap: no need to load capabilities
9b60a93c libcontainer/userns: migrate to github.com/moby/sys/userns
1623cde1 go: update github.com/cyphar/filepath-securejoin to v0.3.4
4fdd5616 memfd-bind: more specific doc URL
9e554587 memfd-bind: fixup systemd unit file and README
13a6f560 runc run: fix mount leak
b096459a vendor: update github.com/cyphar/filepath-securejoin to v0.3.3
f55957de build(deps): bump bats-core/bats-action from 2.1.1 to 3.0.0
bb2bd38d change go minimum version in README
faffe1b9 replace strings.SplitN with strings.Cut
1be06760 libcontainer/cgroups/fs: remove todo since strings.Fields performs well
7a449109 libct/README: simplify example, rm inheritable caps
0de19533 runc spec, libct/int: do not add ambient capabilities
3e3f9603 runc exec --cap: do not add capabilities to ambient
5b161e04 update bats-action to 2.1.1
35f999dd remove installation of unused bats support libs
10c951e3 add ErrCgroupNotExist
319e133c go.mod: Use toolchain 1.22.4
8671a7db ci: update to setup bats action from bats-core
30f8f51e runc create/run: warn on rootless + shared pidns + no cgroup
21c61165 tests/int: log when teardown starts
b1449fd5 libct: use Namespaces.IsPrivate more
d8844e29 tests: integration: add setgid mkdirall test
066b109e vendor: update to github.com/cyphar/filepath-securejoin@v0.3.2
646efe70 utils: mkdirall: mask silently ignored mode bits to match os.MkdirAll
457e1ffa tests: add regression test for CVE-2019-19921 / CVE-2023-27561
216175a9 Upgrade Cilium's eBPF library version to 0.16
a31efe70 libct/seccomp/patchbpf: use binary.NativeEndian
429e06a5 libct: Signal: honor RootlessCgroups
dd827f7b utils: switch to securejoin.MkdirAllHandle
1d308c7d vendor: update to github.com/cyphar/filepath-securejoin@v0.3.1
5ab5ef3d deps: update to golang.org/x/sys@v0.22
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
99b730a7cc |
containerd: update to v2.0.0
Bumping containerd to version v2.0.0-25-g961cac9aa, which comprises the following commits:
34a45cab2 Publish attestation as release artifact
7dec6b460 move rocky 9.4 to almalinux/9 in CI
cf07f28ee *: should align pipe's owner with init process
986088866 fix: set the credentials even if not provided
9081e979f update runc binary to 1.2.2
6399c936f Revert "Disable vagrant strict dependency checking"
a7f2b562f fsverity_linux.go: Fix fsverity.IsEnabled() for big endian systems
389e781ea build(deps): bump github.com/containerd/typeurl/v2 from 2.2.2 to 2.2.3
30b929ece fsverity_test.go: fix major/minor device number resolving
10996a334 fsverity_test.go: fix nil pointer dereference, fix test fail
5b879f30c update to go1.23.3 / go1.22.9
e99c2b55c Avoid arch info in the sed/replace when building cri-cni-containerd.tar.gz
458215f6c ci: enable marking 2.0 releases as latest
03ba4ce1f Update release notes for v2.0.0
f2da3fd68 Update release docs for v2.0.0
ff09b428e Update typeurl to v2.2.2
a43e7c1e2 build(deps): bump softprops/action-gh-release from 2.0.8 to 2.0.9
edf367cab build(deps): bump github.com/containerd/nri from 0.7.0 to 0.8.0
21f636751 build(deps): bump github.com/containerd/typeurl/v2 from 2.2.0 to 2.2.1
1edc2147f build(deps): bump google-github-actions/auth from 2.1.6 to 2.1.7
2d8fec45a go.mod: k8s.io/* v0.31.2
bef201fe6 build(deps): bump google-github-actions/upload-cloud-storage
bd10a6096 Update platforms to v1.0.0-rc.0
ae73e3013 Disable vagrant strict dependency checking
33677d56d Update containerd API to v1.8.0 release
d38911808 Prepare release notes for api/v1.8.0
93f9db2ad Update errdefs tag to v1.0.0
bddeba825 Make TestContainerPids more resilient
edb980ac0 update runc binary to 1.2.1
bf47b6ebc docs/containerd-2.0.md: add more highlights
f5ce859ee docs/containerd-2.0.md: fix the deprecation release of AUFS
bedd85a36 RELEASES.md: k8s: fix CRI v1alpha2 removal release, remove old releases
4594f5cac services/snapshots: include name of snapshotter in debug logs
77d783e2c Update hcsshim to v0.12.9
79089232b build(deps): bump actions/checkout from 4.2.1 to 4.2.2
2789ba30e build(deps): bump actions/cache from 4.1.1 to 4.1.2
6b655d093 build(deps): bump github/codeql-action from 3.26.13 to 3.27.0
9ed6e05b2 config: v1Migrate: support DisabledPlugins and RequiredPlugins
4b2bca00b config: migrate version before merging
700b90618 resolver/docker: fix confusing "trying next host" log
3cc2343de local: avoid writing to content root on readonly store
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Zhang Peng
|
88949aa04f |
cri-o: enable ptest
The ptest build for cri-o was previously disabled due to issues introduced with Go 1.11, which borken the build process. With the current Go version, these issues no longer occur, and the ptest build is now functional. This commit enables ptest support and resolves the "TMPDIR [buildpaths]" issue encountered during the ptest build process. A total of 382 test cases were executed, with the following results: PASS: 317 FAIL: 33 SKIP: 32 Signed-off-by: Zhang Peng <peng.zhang1.cn@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Bruce Ashfield
|
87b0a869c6 |
containerd: update to v2.0.0-rc.6
Bumping containerd to version v2.0.0-rc.6-23-g1e6fdb531, which comprises the following commits:
0208cb58c go.mod: github.com/containerd/imgcrypt v2.0.0-rc-1
588b7a100 testutil: avoid conflict with continuity/testutil
181491032 build(deps): bump github.com/containerd/continuity from 0.4.3 to 0.4.4
497dc7bf3 build(deps): bump github.com/checkpoint-restore/checkpointctl
fddeb6f3c pkg/protobuf: fix typo in godoc
96a1e498f Update containerd plugin to v1.0.0
3b45a44cc Update to ttrpc v1.2.6 tag
3cc2343de local: avoid writing to content root on readonly store
778defa31 Add back ZFS snapshotter
d3ff3e2ff CI: move crun from Ubuntu to Fedora
5c65a3d7b Update version to v2.0.0-rc.6
9aa637b22 Update api vendor to latest
4b9d6c014 deps: bump github.com/containerd/nri
2535b187a Scope writer locks to each writer.
bc819bc97 docs: add command for finding schema 1 images
c86b2772c docs: update min version for deprecation warnings
a1ce18816 CI: bump up crun to 1.17
021895985 Update hcsshim version to v0.12.8
373311a84 build(deps): bump github.com/opencontainers/selinux
cf9cf8b5a build(deps): bump github.com/prometheus/client_golang
03860c208 build(deps): bump azure/CLI from 1.0.9 to 2.1.0
cf7218fb0 build(deps): bump actions/checkout from 4.1.1 to 4.2.1
78ec6ef02 build(deps): bump actions/upload-artifact from 4.1.0 to 4.4.3
bfe8fa330 build(deps): bump github/codeql-action from 3.24.0 to 3.26.13
38ba7f2f7 dedup BuildLabels
a5cd0d0a5 dedup GetPassthroughAnnotations
269997ac5 dedup GetRepoDigestAndTag
f61dbc2d0 dedup ParseImageReferences
530db2e8d Introduce two additional unit tests for two runtimes and pod annotations.
a21e379b6 Allow sections of Plugins to be merged, and not overwritten as entire sections.
2f24aa00a Update errdefs to 0.3.0
92d327af1 Update tracing docs for containerd 2.0
943b196ad Update NRI documentation for containerd 2.0
a6ceb4be0 containerd 2.0 guide: add image verifier plugins
347423a11 Request 'allow' setgroups when spawning new userns
249dd7474 Format link text in containerd 2.0 doc for readability
18e4ea9a6 Add After=dbus.service to containerd.service
3eea3536f docs/containerd-2.0.md: mention the removal of `cri-containerd-*.tar.gz`
f8d50f6e8 README.md: put a link to docs/containerd-2.0.md
b724b9f23 Add containerd 2.0 doc
fc5086a74 cri: remove sandbox controller from client
e4df672ab sandbox: add sandbox controller v2
4f2bc1580 build(deps): bump lycheeverse/lychee-action from 1.10.0 to 2.0.2
4bd3a71dd go.{mod,sum}: update NRI deps and re-vendor.
bff82e196 [StepSecurity] ci: Harden GitHub Actions
5eb0be994 build(deps): bump github.com/urfave/cli/v2 from 2.27.4 to 2.27.5
0742238cd Handle teardown failure to avoid blocking cleanup
c3d84a87f build(deps): bump the otel group with 8 updates
bfe59daae build(deps): bump github.com/klauspost/compress from 1.17.10 to 1.17.11
b7c333ce2 Revert "update runc binary to 1.1.15"
c6d089090 metrics: Use UnmarshalTo instead of UnmarshalAny
1db0064c6 CI: install OVMF for Vagrant
4d02217b5 CI: fix "Unable to find a source package for vagrant" error
38beeb359 Revert "use vagrant from jammy in noble"
e2daa20ed Revert "use older version of OVMF package"
ee921689f Switch from actuated.dev to GH Action runners for arm64
f89ed3c62 build(deps): bump golang.org/x/sys in the golang-x group
428df99db build(deps): bump google.golang.org/grpc from 1.67.0 to 1.67.1
72126a984 update sample go test commands
9c42dd959 build(deps): bump google.golang.org/protobuf from 1.34.2 to 1.35.1
f0f1bfca0 update runc binary to 1.1.15
46f5a0d93 update to go1.23.2,go1.22.8
7b1809851 Update runner images to macOS13
e479431e0 core/runtime: Fix a typo in error message
b85909cd4 shim: Move pprof server to plugin
b2681dfbd shim: Move ttrpc interceptors to plugins
d7f83034c Fix the race condition during GC of snapshots when client retries
24fe444eb script/setup/install-runc: Add trap statement to clean up tmp files
6ffdabf72 Makefile: fix shim tags overwritten
095131abf add use systemd cgroup e2e
2123855ee Add build tag to omit grpc
64d29ebe5 snapshots: core: Remove dependency on api types
11ffba3dc shim: Do not depend on pkg/oci
0d4e606bb Update hcsshim to v0.12.7
78e39f7c5 build(deps): bump github.com/intel/goresctrl from 0.7.0 to 0.8.0
17d4a1357 Propagate trace contexts to shims
bc4646067 Prepare release notes for v2.0.0-rc.5
ccb2a8d74 [cri] use 'UserSpecifiedImage' to set the image-name annotation
b7b6b324b Add check for CNI plugins before tearing down pod network
b5290726d Add timestamp to PodSandboxStatusResponse for kubernetes Evented PLEG
146a977f9 Move features section to a separate file
30f289335 core/mount: Only remove dirs if unmount succeeded
f8d84ecf9 core/mount: Prevent accidental removal of rootfs files
004f3951d core/mount: Use MNT_DETACH for umount of tmp layers
f7ca91fa3 build(deps): bump github.com/prometheus/client_golang
c75178d93 build(deps): bump google.golang.org/grpc from 1.66.2 to 1.67.0
519cbda1d build(deps): bump github.com/klauspost/compress from 1.17.9 to 1.17.10
d72051036 Enable the selinux on cri test
b03a3c5a2 build(deps): bump the k8s group with 4 updates
017efe05a build(deps): bump the otel group with 8 updates
7c89148a1 build(deps): bump google.golang.org/grpc from 1.65.0 to 1.66.2
6e2c4d00d build(deps): bump golang.org/x/mod
ee0ed75d6 internal/cri: simplify netns setup with pinned userns
fd3f3d5a1 pkg/sys: add GetUsernsForNamespace interface
490e45a08 pkg/sys: Add UnshareAfterEnterUserns function
83aaa89b6 update ctr run to support multiple uid/gid mappings
1dedcb784 build(deps): bump github.com/checkpoint-restore/go-criu/v7
7599d4df2 build(deps): bump github.com/prometheus/client_golang
9037069da update to go1.23.1, go1.22.7
6f43197c2 Remove cri SandboxInfo RuntimeHandler
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
c7834dbd3c |
podman: update to v5.2.3
Bumping libpod to version v5.2.3-4-g18e0d84c6c, which comprises the following commits:
daae27b7b0 vendor: update c/common to v0.60.4
f6a31e013d Bump to v5.2.4-dev
c5366a308e Bump to v5.2.3
b5ededbce5 Update release notes for v5.2.3
35d2fc8de6 [v5.2] Bump Buildah to v1.37.3
f0ddea707a pkg/specgen: allow pasta when running inside userns
aaf15f81c4 libpod: convert owner IDs only with :idmap
ec4ac087b4 docs: update read the docs changes
c60961839a allow exposed sctp ports
a995b6db5d libpod: setupNetNS() correctly mount netns
d2c2539ee0 vendor: update c/common to v0.60.3
a17fd8c0aa [skip-ci] Packit: split out ELN jobs and reuse fedora downstream targets
b9691547ca [skip-ci] Packit: Enable sidetags for bodhi updates
02d400e7b7 build: Update gvisor-tap-vsock to 0.7.5
5c856c81b0 CI: podman-machine: do not use cache registry
2f7011ab43 [CI:DOCS] Add v5.2.2 lib updates to RELEASE_NOTES.md
602f71991c Bump to v5.2.3-dev
fcee48106a Bump to v5.2.2
37af07836a Update RELEASE_NOTES for v5.2.2
570fbc49aa [v5.2] Bump Buildah to v1.37.2, c/common v0.60.2, c/image v5.32.2
458d15cf5d [v5.2] golangci-lint: make darwin linting happy
faf3edb5f4 [v5.2] golangci-lint: make windows linting happy
b96312af0f [v5.2] test/e2e: remove kernel version check
462c1c6d8e [v5.2] golangci-lint: remove most skip dirs
35290c9b32 [v5.2] set !remote build tags where needed
3ca3c1d456 [v5.2] update golangci-lint to 1.60.1
d61b5d9409 Packit: update targets for propose-downstream
dbdff97042 Create volume path before state initialization
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
718da5ae40 |
containerd: make network configuration a conflist
parsing errors occur if this fragment ends with .conf, so we renamed it to make sure it is processed as a conflist. Tested with containerd + nerdctl Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Bruce Ashfield
|
7afd21085b |
packagegroups: add iproute, iptables and tini
As it turns out CNI needs iptables to configure some plugins, and without it we get a silent fail. It will also be added to the recipe as a RRECOMMENDS, but we also put it in the packagegroup for more visibility. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Bruce Ashfield
|
5dfe66298a |
crun: conditionally offer runc binary via symlink
When integrating into some container stacks (such as containerd), the detailed configuration toml changes to change the container runtime from runc to crun is not always trivial. To avoid (for now) carrying configuration snippets as part of the recipes, we can symlink runc to crun as crun is fully compatible with runc. Note: this means you can't have runc and crun installed on the same image if the symlinking is done. Hence why this symlinking is conditional. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Bruce Ashfield
|
e2c3d012f9 |
containerd: add cni-networking configuration
When running a containerd-only stack, we need a CNI configuration to be available. When running containerd as part of something like K3S, we expect the orchestration package will provide that configuration. This commit makes a containerd-cni package available that contains a starting point configuration. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Bruce Ashfield
|
e8f51968a2 |
netavark: disable nmap for aarch64 ptests
nmap is not currently buidling for aarch64, so we disable it as a ptest rdepends when that is our target arch. Some tests may not work, but having a buildable stack is more important than all tests working. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Bruce Ashfield
|
5141d3f3f9 |
podman: add VIRTUAL-RUNTIME_container_dns to RDEPENDS
Allow aardvark-dns to be specified as a rdepends for podman Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Bruce Ashfield
|
b5b94c2f51 |
docker-moby: tweak check-config script for 6.1+ kernels
We are showing one warning on check-config that isn't valid, as the option has been changed in kernels 6.1+. We tweak the check-config script to make that conditional Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Chen Qi
|
e340d5b548 |
criu: fix buildpaths QA issue for arm
The settings of CFLAGS:arm overrides the previous CFLAGS settings, causing buildpaths QA error for arm. Use CFLAGS:append:arm instead to fix this issue. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Lukasz Czechowski
|
b4fe1f4933 |
container-host-config: Remove centos registry
Update registry list by removing 'registry.centos.org' entry. This registry is no longer available. Decommissioning of the registry was announced in the thread: https://lists.centos.org/hyperkitty/list/devel@lists.centos.org/thread/EHGCQUHLDQ6LI474ZAB7MPRZFJD77P3S/ Signed-off-by: Lukasz Czechowski <lukasz.czechowski@thaumatec.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Bruce Ashfield
|
a748f51ec4 |
runc: package configuration test script
Like docker, there is runc / OCI check-config.sh script that is useful when determining if your kernel is properly configured. We can package it in a -check package, and install it to a similar location as the docker variant. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Bruce Ashfield
|
7ea990b79d |
crun: update to 1.17
Bumping crun to version 1.17-5-g4b75c7c, which comprises the following commits:
4ea62f2 Disable criu support on riscv64
969fd2e Packit: Create missing path components in files_to_sync
000fa0d NEWS: tag 1.17
e3b5a26 Packit: Reuse Fedora targets wherever possible
556b808 Packit: separate out ELN build jobs
a5320ae Add debug logs for container creation
228ad7c container: remove manual dup operation
13ea475 libocispec: sync from upstream
3dbf152 error: do not write error twice to stderr
5e35dfe libcrun: vanity, color debug messages
2c4db99 linux: ignore EPIPE for hooks
7fcede6 RPM/Packit: Fix wasm conditionals, cleanup rpm spec, update packit config
0f556b7 build: force install symlinks
23d5e49 Fix warning around unused result on chdir("/")
6bf9e7c Report executable not found errors after tty has been setup
a295e70 Only log to stderr if `--log` is not provided
fb593fc fix getpwuid_r error handling
d29fdae tests: bump containerd version
f36c216 tests: bump ubuntu version
d065a5a Revert "Add `--log-stderr` option"
dc31069 src/libcrun: fix handling of device paths with trailing slashes
ab64a5c linux: fix recvfrom error handling
a32d433 Fix `additional_gids_size` on `process_user_dup`
b98e0dd Add `--log-stderr` option
544fe3f Allow passing an ID to journald log driver
6d92b28 Log only after crun context has been setup
29259e4 Add log options documentation
f72483a Fix double-free in crun exec
e4b4a21 src/libcrun: fix error handling in libcrun_kill_linux
83c1355 src/libcrun: improve error handling for the mnt namespace restoration
6fb1f08 src/libcrun: added custom error message for ESRCH case
9f06d3c Add autoPatchelfHook to static build
19b9893 Add `--log-level` option
fd7f50a tests: fix wasmedge build
0380369 Remove libcrun_setup_terminal_ptmx
1edf6d0 src/libcrun: ensure DefaultDependencies respects CRI-O annotation
42b0b99 configure.ac: fix condition for wasm detection
afa829c NEWS: tag 1.16.1
c6ecb3b linux: attempt to make rootfs private too
109f1e9 container: fix comment
f23aaa1 linux: fix error message
72b4eea Inherit user from original process on exec
cf1ec33 cgroup-utils: check for open error
a958fcd cgroup-systemd: fix comment
7112df4 cgroup: remove redundant check
3bcd26a Use write_file_at_with_flags in write_file_with_flags
2dc1598 NEWS: tag 1.16
bfa0640 Add more O_PATH flags
0613ec5 cgroup-systemd: check for sd_bus_message_append error
fcfac99 Fix sd-bus error handling for cpu quota and period props update.
6682432 linux: make_parent_mount_private uses fds
5943335 container: use relative path for rootfs if possible
27d7dd3 README: update podman demo
f916acf Enable systemd in s390x builds
e6eab76 wasmedge: access container environment variables for WasmEdge configuration
Bumping libocispec to latest, which comprises the following commits:
4b8feed common: make sizeof the last argument for calloc
2ba727a sources: silence compiler warning
3ec73ba generate: generate clone operations for deep-copy
d371222 ocispec: fix style
2236d50 github: test with the embedded yajl library
bed19ad configure.ac: --enable-embedded-yajl skips check for yajl
b633f89 Makefile.am: distribute the src/yajl symlink
Bumping image-spec to version v1.1.0-35-gda92727, which comprises the following commits:
716f83b Implementations should support zstd
7327da4 Add deprecation notices to nondistributable layers
1d3daab Update linter and Go releases
16101e2 Remove misleading "must" in `ref.name` requirements
65dea7a Remove IRC link
a977bd3 Remove validation warnings to stdout
4bbdd7f Switch jsonschema validation libraries
89fee07 MAINTAINERS: move jonboulle to EMERITUS
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
2ef1ee0412 |
k3s: update to v1.31.1+k3s1
Bumping k3s to version v1.31.1+k3s1, which comprises the following commits:
452dbbc14c update kubernetes to v1.31.1-k3s3 (#10910)
9ae2c39004 Update Kubernetes to v1.31.1 (#10895)
d926e69073 Fix hosts.toml header var
2caa785e17 Only clean up containerd hosts dirs managed by k3s
4c8ef7f477 Fix rotateca validation failures when not touching default self-signed CAs
0c8d3c0d58 Bump helm-controller for skip-verify/plain-http and updated tolerations
db3cf9370e Bump containerd to v1.7.21, runc to v1.1.14
28a1fd0302 Update coredns to 1.11.3 and metrics-server to 0.7.2
944b3b2830 Bump traefik to v2.11.8
703e7697b0 Tag PR image build as latest before scanning
88d5576be6 Fix /trivy action running against target branch instead of PR branch
9c537cb705 Bump aquasecurity/trivy-action from 0.20.0 to 0.24.0 (#10795)
be60661f18 Add trivy scanning trigger for PRs (#10758)
e0c4e60171 Update CNI plugins version
3923e0c699 Cover edge case when on new minor release for E2E upgrade test (#10781)
8bfcfd70cc Fix deploy latest commit on E2E tests (#10725)
e8de533e90 Remove secrets encryption controller (#10612)
34be6d96d1 Update kubernetes to v1.31.0-k3s3 (#10780)
c7468edbe7 Bump go dependencies to match upstream 1.31
ebbb109840 Update VERSION_K8S to handle any k3s revision
f5c6472b16 Bump Kine to v0.12.0
d358a89171 Fix secrets-encrypt metrics
178aadbe20 Add k3s-io/kubernetes tags
5087240e32 Downgrade Microsoft/hcsshim to v0.8.26
8cbcbcd044 go generate
20b50426ab Update to v1.31.0
876d54cf49 chore: Bump Trivy version (#10670)
518276fb77 adding MariaDB to README.md (#10717)
649678bd89 Fix k3s-killall.sh support for custom data dir
38df76708d Fix caching name for e2e vagrant box (#10695)
ae0d79c7ea Update to v1.30.3-k3s1 and Go 1.22.5 (#10536)
019b0afdd8 Fix: Add $SUDO prefix to transactional-update commands in install script (#10531)
22fb7049bd Add tolerations support for DaemonSet pods
daf0094cc7 Bump helm-controller to v0.16.3 to drop Helm v2 support
ac247d29cf Update to newer OS images for install testing (#10681)
0ee714d62b Bump containerd to v1.7.20 (#10659)
acb71ee379 Allow Amazon Linux 2 rpm installs
79ec016b6d Allow kylin V10 rpm installs
8ff7d162cc Allow fedora iot rpm installs
45c04f3502 Allow Amazon Linux 2023 rpm installs
3aceb85c22 Add a change for killall to not unmount server and agent directory
82ba778a86 bump docker/docker to v25.0.6
38e8b01b8f update stable channel to v1.30.3+k3s1 (#10647)
bffdf463e1 Fix cloudprovider controller name
e168438d44 Wire lasso metrics up to common gatherer
e2179aa957 Update pkg/cluster/managed.go
3ec086f6f7 Update pkg/secretsencrypt/config.go
e4f3cc7b54 remove deprecated use of wait functions
e514940020 Fix inconsistent loading of config dropins when config file does not exist
9111b1f77e Add K3S_DATA_DIR as env var for --data-dir flag
a26a5ab1d7 Don't set K3S_DATA_DIR env var
59e0761043 Use higher QPS for secrets reencryption (#10571)
a70157c12e Allow Pprof and Superisor metrics in standalone mode (#10576)
ecff337e00 Enhance E2E Hardened option (#10558)
d4c3422a85 Fix ipv6 sysctl required by non-ipv6 LoadBalancer service
21611c5665 Cap length of generated name used for servicelb daemonset
891e72f90f Update secretsencrypt pagination
c2216a62ad Use pagination when retrieving etcd snapshot list
37830fe170 Don't use server and token values from config file for etcd-snapshot commands
cb6bf74bc4 Add dial duration to debug error message
118acabec2 Fix IPv6 primary node-ip handling
9841517457 Fix agents removing configured supervisor address
9d0c2e0000 Fix reentrant rlock in loadbalancer.dialContext
b999a5b23d Bump kine to v0.11.11
58ab25927f For E2E upgrade test, automatically determine the channel to use (#10461)
c36db53e54 Add etcd s3 config secret implementation
5508589fae chore: Bump Trivy version
eb8bd15889 Ensure remotedialer kubelet connections use kubelet bind address
a0b374508e Bump Local Path Provisioner version (#10394)
0b417385a4 chore: Bump golang:alpine version
f6942f3de4 Bump github.com/hashicorp/go-retryablehttp from 0.7.4 to 0.7.7
b045465178 Add data-dir to uninstall and killall scripts
d1709d60ce Fix INSTALL_K3S_PR support
047664b610 Bump k3s-root to v0.14.0
4204248bc3 Check for bad token permissions when install via PR (#10387)
8f9ad1f992 Move test-compat to GHA (#10414)
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Michal Sieron
|
75b6a5cf61 |
crun: Add PACKAGECONFIG options
Neither systemd nor seccomp is hard required by crun. They can actually be disabled during configuration with --disable-systemd or --disable-seccomp. Introduce PACKAGECONFIG options for them and default them to presence of corresponding entries in DISTRO_FEATURES. Now REQUIRED_DISTRO_FEATURES and features_check can also be removed. Similarly dependency on libcap can be made optional. crun actually contains pregenerated manpages in the repository so dependency on go-md2man-native can be made optional as well. As there is a configuration option for embedding yajl I added an option for that as well. However, as PACKAGECONFIG can only specify dependencies when config is enabled I had to invert the options so the config is for external-yajl. I set default PACKAGECONFIG value to match previous state (except detecting if systemd and seccomp are in DISTRO_FEATURES). Signed-off-by: Michal Sieron <michalwsieron@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Bruce Ashfield
|
4c996d1b17 |
runc: update to v1.2.0-rc.3
Bumping runc to version v1.2.0-rc.3-3-gf9f57641, which comprises the following commits:
429e06a5 libct: Signal: honor RootlessCgroups
961b8031 VERSION: back to development
45471bc9 VERSION: release v1.2.0-rc.3
6c24b2e8 changelog: update to include 1.1.14 notes
63c29081 rootfs: try to scope MkdirAll to stay inside the rootfs
767bc008 Makefile: Don't read COMMIT, BUILDTAG, EXTRA_BUILDTAGS from env vars
2cd24a4d ci/gha: add all-done jobs
cc2078cc Makefile: Add EXTRA_VERSION
f76489f0 mv contrib/cmd tests/cmd (except memfd-bind)
f4cc3d83 Revert "allow overriding VERSION value in Makefile"
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
abbe4686b0 |
containerd: update to v2.0.0-rc.4
Bumping containerd to version v2.0.0-rc.4-40-g19430264c, which comprises the following commits:
9037069da update to go1.23.1, go1.22.7
18725f010 integration: regression test for issue 10589
5f37a2c20 fifosync: cross-process synchronization
421a4b568 runc-shim: handle pending execs as running
299a9717f update runc binary to 1.1.14
f4529ace1 build(deps): bump the otel group with 8 updates
e7357916b runc-shim: refuse to start execs after init exits
def477b07 Bump crun to 1.16
3d7955bf7 remove duplicated descriptor from/to proto
93d6f0f92 remove duplicated sandbox to proto func
bfc1465a2 Reorganize mount/unmount code so it is easier to add Darwin-specific implementation
9c3400572 reduce ptypes.Empty creation by defining it in as a var
7f3bf993d runc-shim: remove misleading comment
f6677a4ec Cumulative stats can't decrease
94c163209 TestNewBinaryIOCleanup: fix a comment, minor rewrite
d83184ced avoid repeated calls in Tricolor gc
6b97a08ee add benchmark
1b03ca57c build(deps): bump github.com/prometheus/client_golang
9906fac59 build(deps): bump github.com/vishvananda/netlink
cdbfcc257 Prepare release notes for v2.0.0-rc.4
4ba502a03 Update api vendor to latest tag
a36d38fb4 Add mailmap entry for Michael Zappa
bf5fc240b build(deps): bump google-github-actions/upload-cloud-storage
faaafd6de build(deps): bump github.com/pelletier/go-toml/v2 from 2.2.2 to 2.2.3
47350982b build(deps): bump go.etcd.io/bbolt from 1.3.10 to 1.3.11
3cd8f9734 core/mount: use ptrace instead of go:linkname
35b029257 remove sha256-simd
1195b68eb build(deps): bump github.com/prometheus/client_golang
50b06182f Register local content plugin from separate package
021063c4a build(deps): bump the k8s group with 5 updates
1bff3bfed build(deps): bump dario.cat/mergo from 1.0.0 to 1.0.1
429085c84 build(deps): bump google-github-actions/upload-cloud-storage
93abc2fdd Update hcsshim to v0.12.6
bcdf50736 core/mount: add benchmark test for GetUsernsFD
6f3833f25 CRI: remove `disable_cgroup`
fc1637d16 Attest artifacts in release workflow
337d8c52c Update release job to generate artifacts attestation
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
e8b6a87d5b |
cri-o: update to v1.30.0-tip
Bumping cri-o to version v1.30.0-387-g20c06a19c, which comprises the following commits:
2562cea42 build(deps): bump the actions group with 2 updates
7472e56e9 Trigger `test` workflow after release branch fast forward
5aa911d5a Update shfmt to v3.9.0
d1e6111e5 Fix space at EOL in actions
a15d14d23 fixed token-permission and pinned-dependencies issue
99b02b97b Switch to go 1.23
c36f2b5bd build(deps): bump the gomod group across 1 directory with 8 updates
8e48b06da Add `crun` integration tests
9f47c4738 Fix tab in Info to string, add tests
8e313e986 Vendor Kubernetes v1.31.0
0262d1980 Squash MetaHostPortManager into HostPortManager
6cdc457b6 Drop port-opening code from hostport manager
aa6d034d6 Skip storage directory corruption recovery tests on Kata Containers
ba0bd3e8b Add crio check sub-command used to check storage for errors
269137ede contrib: temporarily move to crun 1.15 to fix CI
0c7f36a16 Remove custom golang version for runc
211de0d70 build(deps): bump sigstore/cosign-installer in the actions group
a79fa8ba4 Make internal repair the new default and disable internal wipe
fc7a26bea Allow for storage directory removal to be forced
1a20443b2 Wipe storage only after giving storage.Repair() a chance
1348885f8 Remove orphaned mounts before removing storage directory
5cf0fc68a internal/oci: improve container termination process in killContainer
04143e0e0 build(deps): bump actions/upload-artifact in the actions group
9ee915794 Move config warning for NoSyncLog
6d76b7841 build(deps): bump the actions group with 2 updates
895c2cab8 Make the storage shutdown force unmount images on error
7b058f26b Move log message from HandleUncleanShutdown() function
8f5557429 Replace open-coded repair options with the RepairEverything() helper
46b167de3 Use custom set of checks over the CheckEverything() for storage checks
ffcf8ecb3 Log how configuration gets loaded
46ef7a1c5 Update conmon-rs to v0.6.5
af0d3e79d build(deps): bump google-github-actions/upload-cloud-storage
f03eef4d8 Run critest in parallel
07addee6b Update nixpkgs
c8ff7aec7 Add pause image to dependencies.yaml
3a7bfdfa0 build(deps): bump actions/upload-artifact in the actions group
136b3ed5e build(deps): bump crate-ci/typos in the actions group
32ad0fde5 build(deps): bump golangci/golangci-lint-action in the actions group
d1c4129b1 Enable and fix `gomoddirectives`, `gomodguard`, `noctx` and `wastedassign` linters
b98f56996 Make container and image removal/stop idempotent
0c0c7f6d2 Fix unshare index
c60000697 build(deps): bump ossf/scorecard-action in the actions group
a46e1d98a build(deps): bump the gomod group with 5 updates
c20d16cfb Trim `crio version Version: …` prefix from `crio -v`
a048e1530 Fix trailing whitespace in docs
3d778ed26 Rework no_sync_log to be a runtimes.runtime setting
988444bdd build(deps): bump crate-ci/typos in the actions group
877a4b0fa Fix lint timeout option
de0d48a57 build(deps): bump the gomod group across 1 directory with 4 updates
b9b7f089e Remove error log message if mountpoint cannot be found
8b4759730 build(deps): bump crate-ci/typos in the actions group
3a256325a Make ImageVolume garbage collection work
cfa3f2979 Add documentation for setting up CRI-O with Flatcar
b6ad92802 ci: Add timeout value on WaitEvent for TestContainerEvents
6ed96dcaf oci_volumes: require crictl that can request OCI volumes
cca74fe23 Use cri-tools master for CI tests
2cd9ad326 Log version only for main CRI-O command
8bc0487a4 Disable network ping tests for actuated runners
6e98e4210 test: config tests should ignore default runtime environment variable
c39e8014f Add OCI Volume Source support
04c768a26 test: re-enable hooks.bats in integration tests for kata
3f08208eb test: use kata 3.6.0 for testing
50046c72b test: kata test - set skip_mount_home in storage options
14e5af098 ci: kata-specific testing in integration tests
e30e13907 ci: cleanup kata processes during teardown
7f9efe304 ci: enable debug log level for the kata container runtime
2e9d44dbf Use `.gitignore` in nix build excludes
c2c0bae26 KEP-3619: implement RuntimeStatus.features.supplemental_groups_policy field
f05dac5d5 KEP-3619: update cri-api version
5f66ac000 oci: separate out timer logic from the backoff manager
08180027b oci: move oci-specific code into their respective runtime
8693692a7 test: add test coverage for multiple stop calls
c119e524e oci: remove redundant ShouldBeStopped check for stopping containers
bf9b5a309 Remove duplicate `exclude_graphdriver_devicemapper` from static builds
0bc0e6c6f Dedup installation docs
ff047539d updates pause image to 3.10
b8d9714fe Fix "data loss" description of no_sync_log setting
d1a7ee15f build(deps): bump the gomod group across 1 directory with 6 updates
031c6af6b build(deps): bump crate-ci/typos in the actions group
e14676520 Remove go-setup from jobs not using golang
0f4ab88eb Remove config migration
b3c7ebc43 build(deps): bump actions/setup-go in the actions group
481b25a72 Add table of contents to README.md
b4c6af21a Cleanup install docs
8eed3d8e1 Update crio.conf manpage for no_sync_log
6e3685c81 Update manpage for --no-sync-log
beae8bd53 server: propagate the pinned status of an image when queried via crictl
5a2e10ea2 Allow disabling fsync on log rotate and pod shutdown
33ceea55e Add automatic markdown table of contents generation
52707b8be Move hostport tests to use ginkgo
6d6149a0b build(deps): bump the actions group with 2 updates
bc86390e0 Sanitize CRI-O version set in the User-Agent header
fc1bd923a nri: pass around context and log failed pid for not spoofed containers
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
dbe850feaa |
buildah: update to v1.37.1
Bumping buildah to version v1.37.1-1-g0117c423e, which comprises the following commits:
67cc51e90 [release-1.37] Bump to Buildah v1.37.1
02313cf69 [release-1.37] Bump c/common v0.60.1, c/image v5.32.1
f9de1bbd1 Buildah v1.37.0
7de5d5d6e Bump c/storage, c/image, c/common for v1.37.0
6373be5a1 "build with basename resolving user arg" tests: correct ARG use
dcf3ea5fd bud-multiple-platform-no-run test: correct ARG use
3e38e5e13 imagebuildah: always have default values for $TARGET... args ready
7f1fe46fc bump github.com/openshift/imagebuilder to v1.2.14
f6f2da76d fix(deps): update module github.com/docker/docker to v27.1.1+incompatible
5e20b928c fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.1
54d84483a fix(deps): update module github.com/docker/docker to v27.1.0+incompatible
3ad0fd1ed CI: use local registry, part 2 of 2
52df6e0e0 CI: use local registry, part 1 of 2
2a99f9bcd fix(deps): update module github.com/fsouza/go-dockerclient to v1.11.1
b756a3d00 Revert "fix(deps): update github.com/containers/image/v5 to v5.31.1"
b1dff416b Replace libimage.LookupReferenceFunc with the manifests version
9bb25a6da conformance tests: enable testing CompatVolumes
1861c1320 conformance tests: add a test that tries to chown a volume
a7098c776 imagebuildah: make traditional volume handling not the default
b5eafdf55 StageExecutor.prepare(): mark base image volumes for preservation
5940e721c fix(deps): update module github.com/containers/image/v5 to v5.31.1
e2f080554 Vendor in latest containers/(common, storage, image)
5d8b53910 fix(deps): update module golang.org/x/term to v0.22.0
b08c9cf1c fix(deps): update module golang.org/x/sys to v0.22.0
2d172d50e fix(deps): update golang.org/x/exp digest to 7f521ea
aa6f75225 fix(deps): update github.com/containers/luksy digest to a8846e2
d6771f81a imagebuildah.StageExecutor.Copy(): reject new flags for now
a63fbba3f bump github.com/openshift/imagebuilder to v1.2.11
21fb5ea4f Rework parsing of --pull flags
feb17a95c fix(deps): update module github.com/containers/image/v5 to v5.31.1
d79a36fae imagebuildah.StageExecutor.prepare(): log the --platform flag
3a35d2fd6 CI VMs: bump
14f19e980 buildah copy: preserve owner info with --from= a container or image
bfa84dfcb conformance tests: enable testing CompatSetParent
bfaee577d containerImageRef.NewImageSource(): move the FROM comment to first
66957cc05 commit: set "parent" for docker format only when requested
a7224d167 Update godoc for Builder.EnsureContainerPathAs
75ae17c0f fix(deps): update module github.com/spf13/cobra to v1.8.1
a4cdb7879 fix(deps): update module github.com/containernetworking/cni to v1.2.0
6bef4b71c fix(deps): update module github.com/opencontainers/runc to v1.1.13
fe2fd8620 Change default for podman build to --pull missing
b9c43961a fix(deps): update module github.com/containers/common to v0.59.1
5afd52fd9 Clarify definition of --pull options
1480f147f buildah: fix a nil pointer reference on FreeBSD
8b0ecd787 Use /var/tmp for $TMPDIR for vfs conformance jobs
0569f3728 Cirrus: run `df` during job setup
5891afffe conformance: use quay.io/libpod/centos:7 instead of centos:8
56fb08092 Stop setting "parent" in docker format
ba0947a3d conformance: check if workdir trims path separator suffixes
9565585a6 push integration test: pass password to docker login via stdin
afe1a5dd5 Re-enable the "copy with chown" conformance test
f552bd57f healthcheck: Add support for `--start-interval`
420beb248 fix(deps): update module github.com/docker/docker to v26.1.4+incompatible
a4f32a142 fix(deps): update module github.com/containerd/containerd to v1.7.18
04e5423ae tests: set _CONTAINERS_USERNS_CONFIGURED=done for libnetwork
a9e5a1496 Cross-build on Fedora
a42019d61 Drop copyStringSlice() and copyStringStringMap()
b8c3530cb fix(deps): update module golang.org/x/crypto to v0.24.0
cb302075b fix(deps): update module github.com/openshift/imagebuilder to v1.2.10
e591844e9 Provide an uptime_netbsd.go
30c2e31d8 Spell unix as "!windows"
e47ffc831 Add netbsd to lists-of-OSes
159425c45 fix(deps): update golang.org/x/exp digest to fd00a4e
bf33b9291 [skip-ci] Packit: enable c10s downstream sync
7602e9e1d CI VMs: bump, to debian with cgroups v2
9521672fd Document when BlobDirectory is overridden
939a58b96 fix secret mounts for env vars when using chroot isolation
7ff83d505 Change to take a types.ImageReference arg
e6c7949aa imagebuildah: Support custom image reference lookup for cache push/pull
a33fda67a fix(deps): update module github.com/onsi/ginkgo/v2 to v2.19.0
f39d5fba2 Bump to v1.37.0-dev
671f29870 CI: Clarify Debian use for conformance tests
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
7a4ae86e89 |
skopeo: update to v1.16.0
Bumping skopeo to version v1.16.0, which comprises the following commits:
88aad2e5 Bump Skopeo to v1.16.0
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
3f7eda960f |
runc-opencontainers: update to v1.2.0-rc.2-tip
Bumping runc to version v1.2.0-rc.2-44-g376e875f, which comprises the following commits:
cc2078cc Makefile: Add EXTRA_VERSION
f4cc3d83 Revert "allow overriding VERSION value in Makefile"
606257c6 Bump golangci-lint to v1.60, fix new warnings
adedeb99 ci/gha: add Go 1.23, drop 1.21
be539412 ensure we can download the specific version's go
a7c8d86f tests/int: fix "cpu burst" failure on new kernels
b437ed30 tests/int: check_{systemd,cgroup}_value: better log
2c398bb4 libct/int/seccomp_test: simplify exit code checks
171304c8 docs/systemd: fix a broken link
1410a698 rootfs: consolidate mountpoint creation logic
6fc2733a document build prerequsites for different platforms
15ec295b ci/gha: bump golangci-lint to v1.59
bb2db7b4 libct: drop error from (*Container).currentState return
c8395b6e Enable govet nilness, fix an issue
a5e660ca seccomp-notify.bats: add fcntl to the important syscall list
e7848482 Revert "libcontainer: seccomp: pass around *os.File for notifyfd"
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
16c9845d70 |
containerd: update to v2.0.0-rc.3
Bumping containerd to version v2.0.0-rc.3-209-ge8104a485, which comprises the following commits:
93abc2fdd Update hcsshim to v0.12.6
66817fccc script/setup/install-dev-tools: include patch version in versions
cd4e24ef7 script/setup/install-dev-tools: update protoc-gen-go-ttrpc to v1.2.5
9e2357f33 docs: add k8s 1.31 to support matrix to RELEASES
a3d84a172 docs: update for containerd v2
43568373f docs: Update BUILDING.md
ebc47359e use format string when using printf like commands
1027b314a ignore the static check when using anonymous struct in testing
f8e075336 remove windows check in linux_test file
20ee6de0b update golangci-lint to v1.60.1
fb8cd045b add go1.23.0
3f53e7a6e build(deps): bump github.com/urfave/cli/v2 from 2.27.3 to 2.27.4
1127908ae build(deps): bump k8s.io/cri-api in the k8s group
6ed54e966 build(deps): bump golang.org/x/sys in the golang-x group
1de84c29f build(deps): bump google-github-actions/upload-cloud-storage
a100b055c update to go1.22.6
977604724 migrate to github.com/moby/sys/userns
8ef73c5dd Fix TestNewBinaryIOCleanup on Go 1.23 and Linux 5.4
7d4da0cb2 ctr: shim state query for old shims
d59e8a840 ctr: shim state for secondary tasks
32c2d1493 use ctx object from cliContext instead of a creating a new one
349d2b5c1 script/setup/install-runc: fix runc using incorrect version
267fac568 build(deps): bump the golang-x group with 3 updates
6814cc354 build(deps): bump google-github-actions/upload-cloud-storage
d036988ee docs/content-flow: fix code fence delimiter
83c26962c Remove extra span created in the instrumented service layer
c0cdcb34f Add spans to CRI runtime service and related client methods
0e4f2108b support to syncfs after pull by using diff plugin
551ac0600 Ensure /run/containerd is created with correct perms
4cfeb7b19 core/metadata: migrate sandboxes bucket into v1
a97b11898 Make `StopContainer` RPC idempotent
c6cea95d9 Make `StopPodSandbox` RPC idempotent
ad24ca960 build(deps): bump github.com/urfave/cli/v2 from 2.27.2 to 2.27.3
71b5b34de build(deps): bump ossf/scorecard-action from 2.3.3 to 2.4.0
eddd90d7c remove deprecated pkg/userns
8437c567d pkg/userns: deprecate and migrate to github.com/moby/sys/user/userns
40a315b95 vendor: github.com/moby/sys/user v0.2.0
f9146c051 deprecation: update warnings for CRI config fields
0dcc51aed introspection: regenerate UUID if state is empty
abdb4fd77 build(deps): bump the k8s group across 1 directory with 4 updates
bc51d4b20 build(deps): bump the otel group across 1 directory with 8 updates
025d1161e build(deps): bump github.com/containernetworking/cni from 1.2.2 to 1.2.3
81ef46584 KEP-3619: update cri-api version
ee2c0d9e7 KEP-3619: implement features.supplemental_groups_policy in RuntimeStatus
2d97134e5 build(deps): bump github.com/containerd/imgcrypt
f0aecaa2e Fix TestNewBinaryIOCleanup failing with gotip
b41bb6df7 Avoid potential reallocs by pre-sizing some slices
a779449c4 vendor: github.com/moby/sys/sequential v0.6.0
1bfa7c8fe vendor: github.com/moby/sys/symlink v0.3.0
95b429c01 vendor: github.com/moby/sys/signal v0.7.1
08d6c9323 vendor: github.com/moby/sys/mountinfo v0.7.2
fb674f8b4 Add resolver workaround for error: name resolver error: produced zero addresses
63b468817 Use grpc.NewClient instead of deprecated ones
a5be62993 Vendor GRPC 1.64
1a5c711c3 update documentation for content-flow
c8254dfae Include filename in error
9eda0b73a build(deps): bump github.com/Microsoft/hcsshim from 0.12.4 to 0.12.5
9315d59bf build(deps): bump tags.cncf.io/container-device-interface
7480de28a Remove static link to images outside of the repository
edd84f4a6 Add read permission limit on link workflow
274de35fe updated the domain in the link
807f32573 cri: optimize ListPodSandboxStats with parallelism
7c4de2821 Update cri-tools to v1.30.1
0772d0a37 Fix for `[cri] ttrpc: closed` during ListPodSandboxStats
300fd770a use typeurl funcs for marshalling anypb.Any
e1adfaeb9 script/setup/config-containerd: Use slow_chown
89a2cac37 scripts/critest.sh: Prepare for userns tests in runc
63b55e6df build(deps): bump the golang-x group with 2 updates
203cb303e script: bump up imgcrypt version to v1.2.0-rc1
efd441506 client: fix tasks with PID 0 cannot be forced to delete
eaa1afe63 Set stderr to empty string when using terminal on Windows.
fe5f85c7d Fix incorrect comment about ordering of parent layers
0f76e35fd added the openssf scorecard badge
98544a358 Add file name to device type check failure message
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
82fe694454 |
podman: update to v5.2.1
Bumping libpod to version v5.2.1-5-g679276e136, which comprises the following commits:
dbdff97042 Create volume path before state initialization
628446c88c Update Cirrus DEST_BRANCH
30f104cf36 Bump to v5.2.2-dev
d0582c9e1e Bump to v5.2.1
1cec5dc24e Update release notes for v5.2.1
8227722c3c [v5.2] Add zstd:chunked test fix
854e0c2eb4 [v5.2] Bump Buildah to v1.37.1, c/common v0.60.1, c/image v5.32.1
8f198092d7 libpod: reset state error on init
669767c3a9 libpod: do not save expected stop errors in ctr state
851ec1f81c libpod: fix broken saveContainerError()
6b45888959 Bump to v5.2.1-dev
b22d5c61ee Bump to v5.2.0
3f13c38048 Never skip checkout step in release workflow
c83c891fb2 Bump to v5.2.0-dev
028bee289e Bump to v5.2.0-rc3
23c6e0fb9f Update release notes for v5.2.0-rc3
784856b6ae Tweak versions in register_images.go
d6ae7427f7 fix network cleanup flake in play kube
c0f3ce462c WIP: Fixes for vendoring Buildah
a8f4c12003 Add --compat-volumes option to build and farm build
8bc493324a Bump Buildah, c/storage, c/image, c/common
4fbcece05f libpod: bind ports before network setup
3f14fcf7c3 pkg/api: do not leak config pointers into specgen
02a932372b build: Update gvisor-tap-vsock to 0.7.4
929c64ecf3 test/system: fix borken pasta interface name checks
c231ba8b23 test/system: fix bridge host.containers.internal test
b1ad869560 CI: system tests: instrument to allow failure analysis
5da126dc49 Use uploaded .zip for Windows action
5f4acdf227 RPM: podman-iptables.conf only on Fedora
11f56fa42c Bump to v5.2.0-dev
716874f44e Bump to v5.2.0-rc2
d72fefc418 Update release notes for v5.2.0-rc2
5209495865 test/e2e: fix ncat tests
b6b61a6a49 libpod: add hidden env to set sqlite timeout
0ecd6fa59f Add support for StopSignal in quadlet .container files
55b6e4c3e8 podman pod stats: fix race when ctr process exits
742d29e9d8 Update module github.com/vbauerster/mpb/v8 to v8.7.4
5e8884ab0d libpod: correctly capture healthcheck output
5a7199015a Bump bundled krunkit to 0.1.2
55749af0c7 podman stats: fix race when ctr process exists
7995e3de53 nc -p considered harmful
182224defb podman pod stats: fix pod rm race
e1caf80e81 podman ps: fix racy pod name query
85f4f89810 system connection remove: use Args function to validate
f630eebcfa pkg/machine/compression: skip decompress bar for empty file
7100ead475 nc -p considered harmful
46f4044893 podman system df: fix fix ErrNoSuchCtr/Volume race
1413a28409 podman auto-update: fix ErrNoSuchCtr race
02c094425f Fix name for builder in farm connection
2f7fd64e98 700-play.bats: use unique pod/container/image/volume names
380ed3a40d safename: consistent within same test, and, dashes
6d01ce417d 700-kube.bats: refactor $PODMAN_TMPDIR/test.yaml
987d15a378 700-play.bats: eliminate $testYaml
48aea083c0 700-play.bats: refactor clumsy yamlfile creation
517c6e6f10 700-play.bats: move _write_test_yaml up near top
ed71000e6d chore(deps): update dependency setuptools to v71
3c52ef43f5 Expand drop-in search paths * top-level (pod.d) * truncated (unit-.container.d)
5666100c2e Remove references and checks for --gpus
1ec3edd3f6 Do not crash on invalid filters
692d2a5b08 fix(deps): update module github.com/rootless-containers/rootlesskit/v2 to v2.2.0
59696341b5 Bump to v5.2.0-dev
973e865422 Bump to v5.2.0-rc1
f3e945c86e Keep the volume-driver flag deprecated
b28027148b System tests: safe container/image/volume/etc names
d26f0ca90f Implement disable default mounts via command line
fa75599569 Remove the unused machine volume-driver
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
2534e6a07c |
docker: use nobranch
The upstream repository has both removed tags and renamed branches. To prevent some of these failures in the future, let's run with nobranch=1 for a bit. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Mingli Yu
|
e434aaac29 |
docker-distribution: Enable support for riscv64
Revert [1] to enable support for riscv64. [1] https://git.yoctoproject.org/meta-virtualization/commit/?id=3626f2c9ccd56c6a3ee51304a7da7aafb395a588 Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Pawan Badganchi
|
dc96aa7a14 |
lxc: Fix meson build issue
Build is failing during do_configure stage for lxc as meson does not support --with-systemdsystemunitdir config parameter. Error: meson: error: unrecognized arguments: --with-systemdsystemunitdir=/etc/systemd/system/ Hence, use -Dsystemd-unitdir config parameter instead. Signed-off-by: Pawan Badganchi <badganchipv@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Bruce Ashfield
|
3569724c16 |
umoci: update to v0.4.7 -tip
Bumping umoci to version v0.4.7-224-gff684ba, which comprises the following commits:
3078d6b build(deps): bump github.com/vbatts/go-mtree from 0.5.3 to 0.5.4
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
13a0ab610f |
skopeo: update to v1.15.2
Bumping skopeo to version v1.15.1-8-g80626759, which comprises the following commits:
0002d9ca [release-1.15] Bump to v1.15.2
260f444b [release-1.15] Fixes an interoperability issue while listing tags
cda43af4 [skip-ci] Packit: enable c10s downstream sync
7e81106f Refer to registry.k8s.io instead of k8s.gcr.io
e2ea4269 [release-1.15] Bump to v1.15.1
5267baab [release-1.15] Freeze the fedora-minimal image reference
cd5f7090 [release-1.15] CVE-2024-3727
99e3c448 Bump to v1.15.0
6d6d5b7b chore(deps): update module google.golang.org/protobuf to v1.33.0 [security]
78ddfd9d fix(deps): update module github.com/containers/ocicrypt to v1.1.10
e46c71c3 chore(deps): update module gopkg.in/go-jose/go-jose.v2 to v2.6.3 [security]
549fc862 chore(deps): update module github.com/go-jose/go-jose/v3 to v3.0.3 [security]
cca855ac [CI:DOCS] Migrate skopeo container image
2ffc4ec3 fix(deps): update module github.com/containers/common to v0.58.0
086701bd fix(deps): update module github.com/containers/image/v5 to v5.30.0
96443048 fix(deps): update module github.com/containers/storage to v1.53.0
a80f634f fix(deps): update module golang.org/x/term to v0.18.0
4d80bf8c fix(deps): update github.com/containers/image/v5 digest to faa4f4f
2db09313 Move a go.mod dependency entry to the right section
95f6eac4 Avoid a warning by gopls / VSCode
dbf465d6 fix typo
55abe69d update docs based on review
439dd5f4 docs: make sure that CGO_ENABLED='1'
f0b07848 [CI:DOCS] Update dependency golangci/golangci-lint to v1.56.2
8b6774b4 fix(deps): update module github.com/opencontainers/image-spec to v1.1.0
e294a380 [CI:DOCS] Update dependency golangci/golangci-lint to v1.56.1
c3e2b202 Update c/image after https://github.com/containers/image/pull/2273
8f2a7c65 Also change the MIME type in manifest when decompressing a layer
812a02af Replace decompress-dirs.sh with Go code
09f282e4 Split decompressDir from runDecompressDirs
9fd98112 [CI:DOCS] Update dependency golangci/golangci-lint to v1.56.0
122bf968 fix(deps): update module github.com/containers/common to v0.57.4
149fec0a fix(deps): update golang.org/x/exp digest to 1b97071
d77f7153 fix(deps): update module github.com/containers/common to v0.57.3
c941d813 Update github.com/containers/image/v5 to post-v5.29.2 main
b412ed6e Run codespell on code
58ff9fdb fix(deps): update module github.com/containers/storage to v1.52.0
177d4adb add kubasobon:semver changes
4baf4fe9 fix(deps): update module github.com/opencontainers/image-spec to v1.1.0-rc6
e32dfefb Bump to v1.15.0-dev
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
fda631c22f |
runc-opencontainers: update to 1.2.0-rc2
Bumping runc to version v1.2.0-rc.2-21-g3778ae60, which comprises the following commits:
309a6d91 ci/gha: add go-fix job
a5e660ca seccomp-notify.bats: add fcntl to the important syscall list
e7848482 Revert "libcontainer: seccomp: pass around *os.File for notifyfd"
b18d052b ci/cirrus: switch from CentOS to Almalinux
8b1c0f7e CHANGELOG.md: dedup v1.2.0-rc.2 notes
6980adb6 libct/userns: implement RunningInUserNS with sync.OnceValue
b3b31ff2 libct/userns: make fuzzer Linux-only, and remove stub for uidMapInUserNS
5b09a712 libct/userns: change RunningInUserNS to a wrapper instead of an alias
30b530ca libct/userns: split userns detection from internal userns code
c1421339 remove pre-go1.17 build-tags
5ea76254 VERSION: back to development
f2d2ee5e VERSION: release 1.2.0-rc.2
ee601b87 MAINTAINERS_GUIDE: rm chief maintainer role
d6563f6b MAINTAINERS: move crosbymichael to EMERITUS
ad976aa1 put the changelog of v1.1.13 after v1.2.0-rc.1
4e2d7c0a update changelog after v1.1.13 released
2cb46c6e script/keyring_validate.sh: fix a typo
d6e427e1 runc exec: avoid stuttering in error messages
a6d46ed1 runc exec: improve options parsing
42cea2ec libct: don't allow to start second init process
e3e10725 libct: fix locking in Start/Run/Exec
304a4c0f libct: createExecFifo: rm unneeded os.Stat
e7294527 try to delete exec fifo file when failure in creation
1c505fff Revert "Set temporary single CPU affinity..."
f8f1bc9a Vagrantfile.fedora: bump to F40
77190360 libct/cg: write unified resources line by line
40dd884a MAINTAINERS: add Rodrigo Campos
3019e842 libct/cg: use clear built-in
b7fdd524 libct: use slices package
a1e87f8d libct: rm eaccess
6b2eb52f go.mod,README: require Go 1.21
17380da2 Dockerfile: switch to Go 1.22 and Debian 12
a3302f20 ci: switch to go 1.22 as main version
e660ef61 libct/nsenter: stop blacklisting go 1.22+
24c2d28d fix a debug msg for user ns in nsexec
3083bd44 tests/cgroups: separate cgroup v2 swap test
4209439b libct/cg/fs/v2: ignore setting swap in some cases
dbb011ec tests/int/helpers: fix cgroups_swap check for v2
8626c717 tests/int: fixup find statements
e530b2a6 tests/int/update: fix v2 swap check
024c2711 make trimpath optional
760105ab script/*: fix gpg usage wrt keyboxd
67f6c37b ci/gha: switch to ubuntu 24.04
40bb9c46 ci/cirrus: rm centos stream 8
48c4e733 ci: workaround for centos stream 8 being EOLed
5c5ebe77 tests/int/scheduler: require smp
b24fc9d2 ci: pin codespell
584afc67 libct/system: ClearRlimitNofileCache for go 1.23
b74b33c4 Dockerfile: bump Debian to 12, Go to 1.21
d697725a libct/cg/dev: fix TestSetV1Allow panic
177c7d4f Fix codespell warnings
a35f7d80 fix comments for ClearRlimitNofileCache
6ab3d8ad vendor: golang.org/x/net@v0.24.0
f8052066 libct/cg/fs: fix setting rt_period vs rt_runtime
e5e8f336 .cirrus.yml: rm FIXME from rootless fs on CentOS 7
36be6d05 libct/int: checkpoint test: skip pre-dump if not avail
e42d981d libct/int: rm double logging in checkpoint_test
62a31465 libct/int/cpt: simplify test pre-check
e676dac5 libct/criu: simplify checkCriuFeatures
f6a8c9b8 libct: checkCriuFeatures: return underlying error
4ea0bf88 update/add some tests for rlimit
da68c8e3 libct: clean cached rlimit nofile in go runtime
a853a826 runc exec: setupRlimits after syscall.rlimit.init() completed
f452f667 ci/gha: bump golangci-lint-action from 5 to 6
bac50646 libct: fix a comment
dbd0c334 libct/system: rm Execv
9d9273c9 allow overriding VERSION value in Makefile
75e02193 use go mod instead of go get in spec.bats
b032fead libct/cg/fs: don't write cpu_burst twice on ENOENT
6bf1d3ad tests/int/tty: increase the timeout
8732eada Vagrantfile.fedora: bump Fedora to 39
d63018c2 ci/gha: bump golangci-lint to v1.57
0eb8bb5f Format sources with gofumpt v0.6
6bcc7361 ci/gha: bump golangci/golangci-lint-action to v5
baba55e2 ci/actuated: re-enable CRIU tests
f6b7167b tests/int/checkpoint: add requires criu_feature_xxx
e5c82f00 tests/int/checkpoint: rm double logging
00238f5d CI: add actuated-arm64
758b2e2b helpers.bats: cgroups_cpu_burst: check kernel version
d618c6fe cgroups.bats: check cgroups_io_weight
053f6a0d seccomp_syscall_test1: use ftruncate instead of kcmp
30dc98f5 CI: run apt with -y
4f3319b5 libct: decouple libct/cg/devices
afc23e33 Set temporary single CPU affinity before cgroup cpuset transition.
cde1d090 libcontainer: force apps to think fips is enabled/disabled for testing
6b1f7308 tests/integration: Fix remount on debian testing
5052c075 tests/integration/mounts_sshfs.bats: Fix test on debian testing
e4bf49ff runc update: distinguish nil from zero
afcb9c2e add a test case for runc update cpu burst
5194bd8d VERSION: back to development
275e6d85 VERSION: release v1.2.0-rc.1
fc3e04dc changelog: update to include all new changes since 1.1.0
b47fb3fd changelog: sync changelog entries up to runc 1.1.12
d4b670fc changelog: mention key breaking changes for mount options
851e3882 ci/test: exclude some runc_nodmz jobs
e377e168 [hotfix] nsenter: refuse to build with Go 1.22 on glibc
ac31da6b ci/cross-i386: pin Go to 1.21.x
bfbd0305 Add I/O priority
ccc500c4 seccomp: patchbpf: always include native architecture in stub
b288abea seccomp: patchbpf: rename nativeArch -> linuxAuditArch
ab6788d3 Remove dependabot ignore
cdccf6d6 build: update libseccomp to v2.5.5
da79b616 fix runc-dmz bin path error in Makefile
37581ad3 dmz: remove SELinux special-casing
eefc6ae2 features: implement returning potentiallyUnsafeConfigAnnotations list
606251ab build(deps): bump github.com/opencontainers/runtime-spec
bb5673f2 build(deps): bump golang.org/x/net from 0.21.0 to 0.22.0
7ab66b18 build(deps): bump google.golang.org/protobuf from 1.32.0 to 1.33.0
6056ed2d build(deps): bump golang.org/x/sys from 0.17.0 to 0.18.0
fc76b136 Makefile: Fix runc-dmz removal
46b72107 contrib/cmd/memfd-bind: Mention runc-dmz needs RUNC_DMZ=true
1dae66f7 libct/dmz: Require RUNC_DMZ=true to opt-in
935d586b build(deps): bump tim-actions/get-pr-commits from 1.3.0 to 1.3.1
86360598 tests/int: fix flaky kill tests
82499d42 Fixed spelling mistake in the Makefile at .PHONY vendor
93e37723 ci/golangci-lint: add checks permission
302b2e89 tests/int: use gawk where needed
3a9859bd libct/nsenter: rm unused include
ea140db7 libct/nsenter: rm unused code
27cbabd0 build(deps): bump golangci/golangci-lint-action from 3 to 4
afd90f44 build(deps): bump golang.org/x/net from 0.20.0 to 0.21.0
97632a6d build(deps): bump github.com/containerd/console from 1.0.3 to 1.0.4
174940a7 build(deps): bump golang.org/x/sys from 0.16.0 to 0.17.0
a596a055 update go version to 1.21 in cirrus ci
bc4a869d test: no execve error msg synced to parent process
d0750587 close the sync pipe explicitly in exec
0bc4732c test for execve error without runc-dmz
35aa63ea never send procError after the socket closed
d8edada9 init: don't special-case logrus fds
ee73091a libcontainer: mark all non-stdio fds O_CLOEXEC before spawning init
89c93ddf cgroup: plug leaks of /sys/fs/cgroup handle
f2f16213 init: close internal fds before execve
8e1cd2f5 init: verify after chdir that cwd is inside the container
7094efb1 init: use *os.File for passed file descriptors
093c83e1 keyring: update AkihiroSuda key expiry
34eceb21 keyring: update cyphar@cyphar.com key expiry
fe95a2a0 tests/integration: Test exec failures
8afeccc8 libct/dmz: Print execve() errors
b1e3c3c7 build(deps): bump golang.org/x/net from 0.19.0 to 0.20.0
2a473a76 Add CONFIG_NETFILTER_XT_MATCH_COMMENT to check
e1e3ca02 build(deps): bump golang.org/x/sys from 0.15.0 to 0.16.0
68438ba2 fix scheduler validate
55c9d6bf we have implemented idmapped-mounts with no limitations
e90d8cb8 we have supported rsvd hugetlb cgroup
a7c3e07c libct: Improve error msg when idmap is not supported
43306be3 build(deps): bump google.golang.org/protobuf from 1.31.0 to 1.32.0
5a4f5217 script/check-config.sh: check CONFIG_BLK_CGROUP_IOCOST
d87366f0 scripts/check-config: fix kernel version checks
7f65cc75 script/check-config.sh: check CONFIG_CHECKPOINT_RESTORE
6aa4c1a1 script/check-config: disable colors
b94b5590 scripts/check-config: don't check MEMCG_SWAP on newer kernels
3f4a73d6 TestCheckpoint: skip on ErrCriuMissingFeatures
c8113085 remove remap-rootfs bin when running make clean
0bbb7e9f move the target 'clean' next to 'all'
d08ba9ca fix a (u|g)IDMappings type value convertion error
7b655782 build(deps): bump actions/upload-artifact from 3 to 4
482e5637 configs: make id mappings int64 to better handle 32-bit
fa93c8b0 tests: mounts: add some tests to check mount ordering
3b57e45c mount: add support for ridmap and idmap
7795ca46 specconv: handle recursive attribute clearing more consistently
cdff09ab rootfs: fix 'can we mount on top of /proc' check
8e8b136c tree-wide: use /proc/thread-self for thread-local state
a04d88ec vendor: update to github.com/moby/sys/mountinfo@v0.7.1
5ae88daf idmap: allow arbitrary idmap mounts regardless of userns configuration
ba0b5e26 libcontainer: remove all mount logic from nsexec
ebcef3e6 specconv: temporarily allow userns path and mapping if they match
e66ba70f build(deps): bump actions/setup-go from 4 to 5
c045886f tests: remap rootfs for userns tests
6fa8d068 integration: add mega-test for joining namespaces
e6fb7fe5 nsexec: allow timens to work with non-rootless userns
09822c3d configs: disallow ambiguous userns and timens configurations
3bab7e92 configs: clean up error messages for Host[UG]ID
9387eac3 init: don't pre-flight-check the set[ug]id arguments
1912d598 *: actually support joining a userns with a new container
88411747 tests: integration: fix spurious SC203[01] shellcheck errors
c25493fc build(deps): bump golang.org/x/net from 0.17.0 to 0.19.0
b2782965 build(deps): bump golang.org/x/sys
a6f40817 libct: Destroy: don't proceed in case of errors
ab3cd8d7 runc delete, container.Destroy: kill all processes
7396ca90 runc delete: do not ignore error from destroy
d3d7f7d8 libct/cg: improve cgroup removal logic
29283bb7 runc delete -f: fix for no pidns + no init case
dcf1b731 runc kill: fix sending KILL to non-pidns container
542cce01 libct: Signal: slight refactor
d9f2a24a libct: replace runType with hasInit
94505a04 *: introduce pidfd-socket flag
3bde5111 fix some unit test error after bump ebpf to 0.12.3
b2f7614a bump github.com/cilium/ebpf from 0.12.2 to 0.12.3
823636c3 ci/cirrus: disable selinux-dmz kludge for centos-stream-8
9d8fa6d6 libcontainer: dmz: fix "go get" builds
669f4dbe configs: validate: add validation for bind-mount fsflags
4bf8b555 libct: Remove old comment
87bd7846 Add dmz-vs-selinux kludge and a way to disable it
393c7a81 README: fix reference to memfd-bind
b39781b0 tests/int: add selinux test case
b2539a7d libct/cg: skip TestWriteCgroupFileHandlesInterrupt on CentOS 7
a2f7c6ad internal/testutil: create, add SkipOnCentOS
2c9598c8 libct/cgroups.OpenFile: clean "file" argument
98511bb4 linux: Support setting execution domain via linux personality
6d279220 tests/int: fix flaky "runc run with tmpfs perm"
104b8dc9 libct/cg: add swapOnlyUsage in MemoryStats
7c71a227 rootfs: remove --no-mount-fallback and finally fix MS_REMOUNT
153865d0 tests/int: fix teardown in mounts_sshfs.bats
7f5daa88 libct/cg/fs.Set: fix error message
5ea7c60f tests/int: fix cgroup tests
bbf8eff8 tests/int: fix "runc run (hugetlb limits)"
d60d17a6 build(deps): bump github.com/cilium/ebpf from 0.12.1 to 0.12.2
9cd5d6cd libct/cg: remove retry on EINTR in
54d38c61 build(deps): bump github.com/cilium/ebpf from 0.12.0 to 0.12.1
f944d7b6 ci/gha: fix downloading Release.key
b6a0c483 libct/dmz: Support compiling on all arches
4a7d3ae5 libct/cg: support hugetlb rsvd
aec0dc7d build(deps): bump github.com/cilium/ebpf from 0.11.0 to 0.12.0
6f7266c3 libcontainer: drop system.Setxid
2860708d build(deps): bump golang.org/x/net from 0.16.0 to 0.17.0
b8f75f39 Makefile: move .PHONY to before each target
bdf78b44 libct/cg/dev: add sync.Once to test case
46bfcac8 Makefile: avoid calling sub-make
961d0f12 Makefile: make verify-dmz-arch less talkative
fa8f3817 ci: skip TestPodSkipDevicesUpdate on CentOS 7
927a5836 build(deps): bump golang.org/x/net from 0.15.0 to 0.16.0
0ab58aa2 build(deps): bump golang.org/x/sys from 0.12.0 to 0.13.0
730bc844 Fix directory perms vs umask for tmpcopyup
770728e1 Support `process.scheduler`
efbebb39 libct: rename root to stateDir in struct Container
c89faacc libc: rm _LIBCONTAINER_STATEDIR
6538e6d0 libct: fix a typo
109dcadd fix two typos
f755c808 libct/cg/stats: support misc for cgroup v2
2e2ecf29 libct: use chmod instead of umask
4b3b7e99 docs/spec-conformance: update
531e29e1 script/lib.sh: set GOARM=5 for armel, GOARM=6 for armhf
90606665 docs: clarify the supported architectures (No MIPS)
9976be86 libct/dmz: Move comment out of the Makefile rule
90f5da65 libct/dmz: Reduce the binary size using nolibc
8da42aae sync: split init config (stream) and synchronisation (seqpacket) pipes
ccc76713 sync: rename procResume -> procHooksDone
99469eba Handle kmem.limit_in_bytes removal
90c8d36a dmz: use sendfile(2) when cloning /proc/self/exe
f8348f64 tests: integration: add runc-dmz smoke tests
6be763ee tests: integration: fix capability setting for CAP_DAC_OVERRIDE
b9a4727f contrib: memfd-bind: add helper for memfd-sealed-bind trick
dac41717 runc-dmz: reduce memfd binary cloning cost with small C binary
e089db3b dmz: add fallbacks to handle noexec for O_TMPFILE and mktemp()
0e9a3358 nsexec: migrate memfd /proc/self/exe logic to Go code
321aa20c scripts: add proper 386 and amd64 target triples and builds
d9ea71bf deprecate libcontainer/user
ca32014a migrate libcontainer/user to github.com/moby/sys/user
65a1074c increase memory.max in cgroups.bats
b17c6f23 validator: Relax warning for not abs mount dst path
c378602b libct/specconv: remove redundant nil check
c7ad2749 build(deps): bump github.com/cyphar/filepath-securejoin
e1584831 libct/cg: add CFS bandwidth burst for CPU
1fe9447f build(deps): bump golang.org/x/net from 0.14.0 to 0.15.0
2d0cd0b3 build(deps): bump actions/checkout from 3 to 4
d8e9ed3e libcontainer/userns: simplify, and separate from "user" package.
5f05b96e build(deps): bump golang.org/x/sys from 0.11.0 to 0.12.0
937ca107 Fix File to Close
e8525238 tests/int: add a test for host mntns vs hooks
41778ddc Fix for host mount ns containers
fe6f33b2 build(deps): bump tim-actions/commit-message-checker-with-regex
0f3eeb9b tests/int: add failed hooks tests
cadf0a14 tests/int: rename hooks.bats to hooks_so.bats
6a4870e4 libct: better errors for hooks
f62f0bdf Remove nolint annotations for unix errno comparisons
17e7e230 ci/gha: bump golangci-lint to v1.54
b3e97214 Add issue reference to nolint annotation
cc7e607a features: Expose idmap support
671e211e vendor: Update runtime-spec to expose mountExtensions
b22073c5 ci/gha: add job timeouts
1f25724a configs: fix idmapped mounts json field names
8aa97ad3 nsexec: remove cgroupns special-casing
5c7839b5 rootfs: use empty src for MS_REMOUNT
20b95f23 libcontainer: seccomp: pass around *os.File for notifyfd
f81ef149 libcontainer: sync: cleanup synchronisation code
c6e7b1a8 libct: initProcess.start: fix sync logic
b0c7ce51 makefile: quote TESTFLAGS when passing to containerised make
aa5f4c11 tests: add several timens tests
9acfd7b1 timens: minor cleanups
46d6089f ci/gha: re-enable go caching
5741ea23 ci: add go 1.21, remove go 1.19
ec2ffae5 libct: Allow rel paths for idmap mounts
19d26a65 Revert "libct/validator: Error out on non-abs paths"
61a454cc build(deps): bump golang.org/x/net from 0.13.0 to 0.14.0
883aef78 libct/init: unify init, fix its error logic
789a73db init.go: move logger setup to StartInitialization
0d890ad6 nsenter: cloned_binary: use MFD_EXEC and F_SEAL_EXEC
b999376f nsenter: cloned_binary: remove bindfd logic entirely
38676931 criu: do not add log file into error message
c77aaa3f criu checkpoint/restore: print errors from criu log
e4478e9f criuSwrk: simplify switch
cb981e51 libct: move criu-related stuff to separate file
f88a7654 ci: fix flaky test "update memory vs CheckBeforeUpdate"
5c6b334c ci: fix TestOpenat2 when no systemd is used
962019d6 ci: fix TestNilResources when systemd not available
cfc801b7 Fix running tests under Docker/Podman and cgroup v2
ebc2e7c4 Support time namespace
83137c68 add a test case about missing stricky bit
6092a4b4 fix some file mode bits missing when doing mount syscall
06882888 contrib/fs-idmap: Move logic to a new function
855c5a0e contrib/fs-idmap: Don't hardcode sleep path
882e5fe3 contrib/fs-idmap: Check exactly 2 args are received
821d0018 contrib/fs-idmap: Remove not needed flags
7d2becdf libct/cg/fs2: use `file` + `anon` + `swap` for usage
99340bb0 contrib/fs-idmap: Reap childs
c537cb3d build(deps): bump golang.org/x/net from 0.12.0 to 0.13.0
70f4e46e utils: use close_range(2) to close leftover file descriptors
57f31c68 libct/nsenter: Show better errors for idmap mounts
701dff79 libct/cg/sd: use systemd v240+ new MAJOR:* syntax
da780e4d Fix bind mounts of filesystems with certain options set
237acdd8 add some important announcements in unreleased section
c875ea85 use the length of UIDMappings/GIDMappings to check whether empty or not
d9494fc6 CHANGELOG: forward-port 1.1.6-1.1.8 changes
11b6c9b6 build(deps): bump github.com/opencontainers/runtime-spec
a3785c88 Remove idmapFD field for mountEntry
46ada59b Use an *int for srcFD
c47f58c4 Capitalize [UG]idMappings as [UG]IDMappings
f92057aa tests/int: update set_cgroups_path doc
19f76b66 tests/int/ps: enable for rootless
867ee905 docs: Update spec conformance for idmap mounts
b460dc39 tests/integration: Add tests for idmap mounts
fda12ab1 Support idmap mounts on volumes
98317c16 ci: bump golangci-lint, remove fixed exception
fe4528b1 libcontainer: Just print the mountFds slice len on errors
73b64970 libcontainer: Add mountFds struct
0172016a libcontainer: Add generic parseFdsFromEnv()
f5814a10 libcontainer: Add generic sendFdsSources()
96bd4875 nsenter: Add idmap helpers
5166164d nsexec: Add generic receive_sources()
4b668a82 Switch setupUserNamespace() to use the toConfigIDMap() helper
fbf183c6 Add uid and gid mappings to mounts
83418f88 build(deps): bump github.com/cilium/ebpf from 0.10.0 to 0.11.0
2c844977 build(deps): bump golang.org/x/net from 0.11.0 to 0.12.0
881e92a3 libct/validator: Error out on non-abs paths
45c75ac7 build(deps): bump golang.org/x/sys from 0.9.0 to 0.10.0
017d6996 libct/nsenter: namespace the bindfd shuffle
3b191ff7 libct/nsenter: set FD_CLOEXEC on received fd
8f671781 libct/nsenter: refactor ipc funcs for reusability
890dceee libct/nsenter: annotate write_log() prototype
35fddfd2 chore(libct/nsenter): extract utility code
37732d1e MAINTAINERS: add Li Fu Bang
ad040b1c tests/int/delete: make sure runc delete removes failed unit
58a811f6 tests/int: add/use "requires systemd_vNNN"
43564a7b runc delete: call systemd's reset-failed
91b4cd25 libct/cg/sd: remove logging from resetFailedUnit
dacb3aaa tests/int/cgroups: remove useless/wrong setting
5cdf7671 libct/cg: IsCgroup2UnifiedMode: don't panic
5e53e659 ci: bump shellcheck to 0.9.0, fix new SC2016 warnings
a57d94d3 build(deps): bump google.golang.org/protobuf from 1.30.0 to 1.31.0
9fa8b9de Fix tmpfs mode opts when dir already exists
eb55472e Fix integration tests failure when calling "ip"
a52efc1f build(deps): bump golang.org/x/net from 0.10.0 to 0.11.0
e3627658 .codespellrc: update for 2.2.5
c9209fd2 ci/gha: don't skip rootless+systemd on ubuntu 22.04
1aa7ca80 libct/cg/stats: support PSI for cgroup v2
bc390b2e build(deps): bump golang.org/x/sys from 0.8.0 to 0.9.0
73b5dc02 docs/systemd: fix a broken link
62963fef libct/cg/sd/v1: do not update non-frozen cgroup after frozen failed.
0ac3376c go.mod: runtime-spec v1.1.0-rc.3
78d31a49 ci/cirrus: enable rootless tests on cs9
41e04aa6 tests/int: rename a variable
e83ca519 tests/int/cgroups: filter out rdma
31e3c229 build(deps): bump github.com/sirupsen/logrus from 1.9.2 to 1.9.3
7d09ba10 libct: implement support for cgroup.kill
f8ad20f5 runc kill: drop -a option
9583b3d1 libct: move killing logic to container.Signal
2a7dcbbb libct: fix shared pidns detection
5b8f8712 libct: signalAllProcesses: remove child reaping
e0e8d9c8 tests/int/kill: add kill -a with host pidns test
67bc4bc2 tests/rootless.sh: drop set -x
fed0b124 tests/int: increase num retries for oom tests
5929b019 ci/gha: add space-at-eol check, fix existing issues
511c7614 man/runc: fixes
bb4dbbc4 ci/cirrus: limit numcpu
650efb2c Fix Vagrant caching
b9d2d8d8 build(deps): bump github.com/sirupsen/logrus from 1.9.0 to 1.9.2
7e481ee2 libct/int: remove logger from init
eba31a7c libct/StartInitialization: rename returned error
4f0a7e78 libct/init: call Init from containerInit
72657eac libct: move StartInitialization
2a347045 build(deps): bump tim-actions/get-pr-commits from 1.2.0 to 1.3.0
62cc13ea gha: disable setup-go cache for golangci job
083e9789 ci/gha: rm actions/cache from validate/deps job
da5cdfed ci/gha: fix cross-i386
b32655d2 ci/gha: rm kludges for cross-i386 job
f6c393da features: graduate from experimental
6beb3c6a go.mod: runtime-spec v1.1.0-rc.2
882a2cc8 build(deps): bump golang.org/x/net from 0.9.0 to 0.10.0
02afa9f1 build(deps): bump golang.org/x/sys from 0.7.0 to 0.8.0
a60933bb libct/rootfs: introduce and use mountEntry
976748e8 libct: add mountViaFDs, simplify mount
5a177463 deps: bump urfave/cli
20e38fb2 init: do not print environment variable value
5f6aafb3 libct: document process.LogLevel field
defb1cc7 libct/cg/dev: optimize and test findDeviceGroup
13091eee ci: bump bats 1.8.2 -> 1.9.0
a1920009 Vagrantfile.fedora: bump to 38
33b6ec29 ci/cirrus: use vagrant from hashicorp repo
14d6c7df runc.keyring: add Akihiro Suda
d7208f59 libct/cg/sd: use systemd version when generating dev props
cfc3c6da scripts: keyring validate: print some more information
a7583103 runc.keyring: add Kolyshkin
42a10919 runc-kill(8): amend the --all description
fe278b9c libct: fix a race with systemd removal
056ec0ca keyring: add Aleksa's <cyphar@cyphar.com> signing key
0c9c60aa keyring: add Aleksa's <asarai@suse.com> signing key
22538f89 keyring: verify runc.keyring has legitimate maintainer keys
957bccfe scripts: release: add verification checks for signing keys
87214947 release: add runc.keyring file and script
d9230602 Implement to set a domainname
6053aea4 Fix undefined behavior. Do not accept setjmp return value as variable.
953e1cc4 ci/gha: switch to or add ubuntu 22.04
439673d5 build(deps): bump golang.org/x/net from 0.8.0 to 0.9.0
fd1a79ff ci/cirrus: improve host_info
873d7bb3 ci/cirrus: use Go 1.19.x not 1.19
611bbacb libct/cg: add misc controller to v1 drivers
9b71787b tests/int: fix some checks
9dbb9f90 ci: bump bats 1.3.0 -> 1.8.2
a6e95c53 build(deps): bump golang.org/x/sys from 0.6.0 to 0.7.0
fd5debf3 libct/cg: rm GetInitCgroup[Path]
1034cfa8 build(deps): bump lumaxis/shellcheck-problem-matchers from 1 to 2
ed9651bc libct/cg/sd: support setting cpu.idle via systemd
b5ecad7b tests/int/update: test bad cpu.idle values
3ffbd4c8 tests/int: fix update cpu.idle failure on CS9
509b312c libct/cg/sd/v2: unifiedResToSystemdProps nit
82bc89cd runc run: refuse a non-empty cgroup
1d18743f libct/cg/sd: reset-failed and retry startUnit on UnitExists
c2533420 libct/cg/sd: ignore UnitExists only for Apply(-1)
c6e8cb79 libct/cg/sd: refactor startUnit
9f32ce6a CHANGELOG: forward-port 1.1.4 and 1.1.5 changes
73acc77b libct/cg: rm EnterPid
4ff49046 Makefile: add verify-changelog as release dependency
b2fc0a58 verify-changelog: allow non-ASCII
370e3be2 tests/int/mounts: only check non-shadowed mounts
a37109ce tests/int/mount: fix issues with ro cgroup test
8293ef2e tests/int: test for CAP_DAC_OVERRIDE
8491d334 Fix runc run "permission denied" when rootless
99a337f6 Dockefile: bump go go 1.20
da98076c mountToRootfs: minor refactor
54e20217 libctr/cgroups: don't take init's cgroup into account
a7a836ef libct/cg/dev: skip flaky test of CentOS 7
65df6b91 fix wrong notes for `const MaxNameLen`
9d45ae8d tests: Fix fuzzer location in oss-fuzz config
0d72adf9 Prohibit /proc and /sys to be symlinks
8f0d0c4d build(deps): bump google.golang.org/protobuf from 1.29.1 to 1.30.0
cecb039d nsexec: retry unshare on EINVAL
e3cf217c build(deps): bump actions/setup-go from 3 to 4
a7046b83 build(deps): bump google.golang.org/protobuf from 1.29.0 to 1.29.1
df4eae45 rootless: fix /sys/fs/cgroup mounts
afeffb7e .github/ISSUE_TEMPLATE/config.yml: fix contact links
7d940bdf Add `.github/ISSUE_TEMPLATE/config.yml`
6b41f8ed build(deps): bump google.golang.org/protobuf from 1.28.1 to 1.29.0
6faef164 build(deps): bump golang.org/x/net from 0.7.0 to 0.8.0
7b4c3fc1 Add support for umask when exec container
f2e71b08 libct/int: make TestFdLeaks more robust
be7e0394 libct/int: wording nits
7c75e84e libc/int: add/use runContainerOk wrapper
97ea1255 Fix runc crushes when parsing invalid JSON
b3b0bde6 build(deps): bump golang.org/x/net from 0.6.0 to 0.7.0
2e44a202 Makefile: fix typo in LDFLAGS_STATIC
92a4ccb8 specconv: avoid mapping "acl" to MS_POSIXACL
2adeb6f9 nsexec: Remove bogus kill to stage_2_pid
4d0a60ca tests: Fix weird error on centos-9
2ca3d230 nsexec: Add debug logs to send mount sources
e412b4e8 docs: add docs/spec-conformance.md
787fcf09 go.mod: github.com/opencontainers/runtime-spec v1.1.0-rc.1
fbfc6afe tests: add tests for capabilities
bc8d6e3b build(deps): bump github.com/opencontainers/selinux
0e1346fe build(deps): bump golang.org/x/net from 0.5.0 to 0.6.0
42dffaaa Dockerfile: fix build wrt new git
14e3ce9e build(deps): bump golang.org/x/sys from 0.4.0 to 0.5.0
1bb6209a tests/int: test for /dev/null owner regression
7e5e017d libcontainer: skip chown of /dev/null caused by fd redirection
5ecd40b9 Add Go 1.20, require Go 1.19, drop Go 1.18
81ca678f Disable clang-format
81c379fa support SCHED_IDLE for runc cgroupfs
5ce511d6 nsexec: Check for errors in write_log()
3fbc5ba7 ci: add tests/int/get-images.sh check
6d28928c Explicitly pin busybox and debian downloads
e29e57b5 libcontainer: configs: ensure can build on darwin
cc63d074 build(deps): bump github.com/cilium/ebpf from 0.9.3 to 0.10.0
6676f980 tests/integration/get-images.sh: fix busybox.tar.xz URL
eacada76 build(deps): bump golang.org/x/net from 0.4.0 to 0.5.0
0ac98807 libct/cg/sd: stop using regex, fix systemdVersionAtoi
b44da4c0 libct: validateID: stop using regexp
15677e7b ci: fix delete.bats for GHA
c4aa452b tests/int/checkpoint: fix lazy migration flakiness
68352878 man/runc-restore: describe restore into different cgroup
d4582ae2 tests/int: add "--manage-cgroups-mode ignore" test
e8cf8783 libct/criuApplyCgroups: add a TODO
3438ef30 restore: fix --manage-cgroups-mode ignore on cgroup v2
212d25e8 checkpoint/restore: add --manage-cgroups-mode ignore
ff3b4f3b restore: fix ignoring --manage-cgroups-mode
4f2af605 build(deps): bump golang.org/x/net from 0.2.0 to 0.4.0
19a9d9fc tests/int: use runc features in seccomp flags test
ac04154f seccomp: set SPEC_ALLOW by default
076745a4 runc features: add seccomp filter flags
ab848089 types/features: fix docstrings
8e9128ff Vagrantfile.fedora: upgrade Fedora to 37
9fc707e7 Fixed init state error variable
067ca8f5 notify_socket.go: use sd_notify_barrier mechanism
ee88b900 notify_socket.go: avoid use of bytes.Buffer
313723fd fix libcontainer example
9f383793 build(deps): bump golang.org/x/net from 0.1.0 to 0.2.0
467dd234 build(deps): bump golang.org/x/sys from 0.1.0 to 0.2.0
e0d3c3e0 build(deps): bump github.com/coreos/go-systemd/v22 from 22.4.0 to 22.5.0
783f9ffe runc checkpoint: destroy only on success
79aedac1 go.mod: golang.org/x/*: use tagged versions
6462e9de runc update: implement memory.checkBeforeUpdate
56edc41c ci: bump shfmt to 3.5.1, simplify CI setup
18f8f482 Fix comment of signalAllProcesses for process wait due to sigkill
2cd05e44 libct/seccomp/patchbpf: rm duplicated code
fbce47a6 deps: bump github.com/checkpoint-restore/go-criu to 6.3.0
b265d128 libct/seccomp: enable binary tree optimization
65840f64 tests/int/seccomp: fix flags test on ARM
6bf2c3b6 ci/gha: use v3 tag for actions/cache
a04363c1 build(deps): bump actions/cache from 3.0.10 to 3.0.11
4a8750d9 tests/int: add a "update cpuset cpus range via v2 unified map" test
77cae9ad cgroups: cpuset: fix byte order while parsing cpuset range to bits
462e719c Fixes inability to use /dev/null when inside a container
04389ae9 libcontainer/cgroups: return concrete types
ae53cde3 cirrus-ci: install EPEL on CentOS 7 conditionally
8584900e build(deps): bump actions/cache from 3.0.9 to 3.0.10
1be5d45d build(deps): bump github.com/cilium/ebpf from 0.9.1 to 0.9.3
79a5c110 build(deps): bump actions/cache from 3.0.8 to 3.0.9
da9126f7 build(deps): bump github.com/opencontainers/selinux
7189ba8d build(deps): bump github.com/coreos/go-systemd/v22 from 22.3.2 to 22.4.0
491713e8 cirrus-ci: enable EPEL for CentOS 7
4e65118d tests/int/helpers: gawk -> awk
0ffb49db tests/int: suppress bogus error
6fce0a1c build(deps): bump github.com/checkpoint-restore/go-criu/v6
e965e10c tests/int: do not set inheritable capabilities
29a28848 Add check for CONFIG_CGROUP_BPF in check-config.sh
746f4580 deps: bump go-criu to v6
45041985 build(deps): bump github.com/docker/go-units from 0.4.0 to 0.5.0
26dc55ef seccomp: fix flag test to actually check the value
c7dc8b1f libct/seccomp/patchbpf: support SPEC_ALLOW
8206f5b2 build(deps): bump actions/cache from 3.0.7 to 3.0.8
58b1374f Fix failed exec after systemctl daemon-reload
df9e32bc ci: fix for codespell 2.2
b7dcdcec Add go 1.19, require go 1.18, drop go 1.17
0f4bf2c8 ci/gha: bump golangci-lint to 1.48
45cc290f libct: fixes for godoc 1.19
bf8d7c71 build(deps): bump actions/cache from 3.0.5 to 3.0.7
589a9d50 ci/gha: fix cross-386 job vs go 1.19
450dd3e2 build(deps): bump google.golang.org/protobuf from 1.28.0 to 1.28.1
6d00bf6c build(deps): bump github.com/sirupsen/logrus from 1.8.1 to 1.9.0
ea0bd782 libct/intelrdt: check if available iff configured
56daf36b libct/intelrdt: skip remove unless configured
c156bde7 libct/intelrdt: elide parsing mountinfo
9f107489 libct/intelrdt: skip reading /proc/cpuinfo
13674f43 libct/intelrdt: delete IsMBAScEnabled()
d9a3acb9 build(deps): bump github.com/cilium/ebpf from 0.9.0 to 0.9.1
58ea21da seccomp: add support for flags
c152e831 go.mod: update runtime-spec
4fd4af5b CI: workaround CentOS Stream 9 criu issue
5fd3d09e build(deps): bump actions/cache from 3.0.4 to 3.0.5
66bf3718 tests: replace local hello world bundle with busybox bundle
e119db7a tests: enable seccomp default action tests on arm
d2a5acd2 CHANGELOG.md: forward-port 1.1.x changes
957d97bc Fix error from runc run on noexec fs
086ddb15 Vagrantfile.fedora: upgrade Fedora to 36
35e6c3bf libct/nsenter: switch to sane_kill()
7481c3c9 ci: bump golangci-lint to 1.46
66625701 libct: fix staticcheck warning
d370e3c0 libct: fix mounting via wrong proc fd
c0be1aa2 export blockIODevice
56fcc938 Switch to newer v0.10.0 release of libseccomp-golang
cc0feb4b build(deps): bump actions/cache from 3.0.2 to 3.0.4
5ed3fdff build(deps): bump github.com/moby/sys/mountinfo from 0.6.1 to 0.6.2
343951a2 cgroups: systemd: skip adding device paths that don't exist
03a210d0 libcontainer: relax getenv_int sanity check
72ad2099 docs/cgroup-v2.md: update the distro list
65f41d57 vendor: bump urfave/cli, add urfave_cli_no_docs tag
e0406b4b vendor: bump cilium/ebpf to v0.9.0
6b96cbdd ci: improve shellcheck job
e1d04cdf script/seccomp.sh: check tarball sha256
fbafaf31 ci: drop docker layer caching from release job
f7b07fd5 Dockerfile,scripts/release: bump libseccomp to v2.5.4
6a79271c seccomp: patchbpf: minor cleanups
be6488a5 seccomp: enosys: always return -ENOSYS for setup(2) on s390(x)
0ca0bb9f libct/cg/sd: check dbus.ErrClosed instead of isDbusError
47e09976 libct/cg/dev: privatize some functions
b6967fa8 Decouple cgroup devices handling
25f18562 libct/cg/sd: factor out devices.go
d1601160 libct: use `unix.Getwd` instead of `os.Getwd` to avoid symlink
cab38885 go.mod: golang.org/x/sys v0.0.0-20220310020820-b874c991c1a5
a14cc405 release: add riscv64 binary
1d7b2971 libct/seccomp: add riscv64
dafcacb5 Makefile: set CGO_ENABLED=1 when needed
21e32d47 Makefile: add support for static PIE
ab5c60d0 Makefile: fix GO_BUILDMODE setting
f2f6e599 Makefile: add LDFLAGS_COMMON and LDFLAGS_STATIC
f0f1b5f9 Dockerfile: don't use crossbuild-essential-*
476aa18a Dockerfile: rm dpkg --add-architecture lines
d542ad65 Dockerfile: nit
98fe566c runc: do not set inheritable capabilities
009e627c Vagrantfile.fedora: fix build wrt new git
4d3e52f2 tests/int: fix a bad typo
2ce40b6a Remove tun/tap from the default device rules
68427f33 libct/seccomp/config: add missing KillThread, KillProcess
df2bc138 vendor: bump seccomp/libseccomp-golang to f33da4d
29a56b52 fix deprecated ActKill
9c710564 vendor: bump urfave/cli to v1.22.6
fa83a17c ci/gha: convert lint-extra from a job to a step
de25777a build(deps): bump github.com/moby/sys/mountinfo from 0.6.0 to 0.6.1
d73579ca build(deps): bump actions/cache from 3.0.1 to 3.0.2
66be704d ci/gha: remove stable: when installing Go
b6eb9476 build(deps): bump actions/upload-artifact from 2 to 3
9d2268b9 build(deps): bump actions/setup-go from 2 to 3
b76b6b93 Allow mounting of /proc/sys/kernel/ns_last_pid
67e06706 ci/gha: limit jobs permissions
7260bae6 build(deps): bump actions/cache from 2 to 3.0.1
ae6cb653 man/*sh: fix shellcheck warnings, add to shellcheck
cacc8237 ci: add call to check-config.sh
5d1ef78c script/check-config.sh: enable set -u, fix issues
d66498e7 script/check-config.sh: fix remaining shellcheck warnings
baa06227 script/check-config.sh: fix SC2166 warnings
dc73d236 script/check-config.sh: fix wrap_color usage
6b16d005 shfmt: add more files
01f30162 ci/gha: run on main branch
d77f898f build(deps): bump github.com/opencontainers/selinux
52229286 libct/specconv: use a local variable in CreateCgroupConfig()
d0c89dfa libct/cg: IsCgroup2HybridMode: don't panic
82bc042d build(deps): bump google.golang.org/protobuf from 1.27.1 to 1.28.0
d620a401 tests/int: remove $ROOTLESS, use $EUID
d330f94b tests/int/update.bats: fix extra reqs
a2123baf tests/int: replace CGROUP_UNIFIED with CGROUP_V{1,2}
25ef852a tests/int: use = in test for strings comparison
102b8abd libct: rm BaseContainer and Container interfaces
6a3fe161 libcontainer: remove LinuxFactory
6a29787b libct/factory: make some methods functions
8358a0ec libct: StartInitialization: decouple from factory
a78c9a01 libct: remove Factory interface
71bc308b libct/New: remove options argument
b6514469 libct: remove TmpfsRoot
87cf5d20 CI/cirrus: add centos-stream-9
a0f8847e Drop go 1.16
5211cc3f Add / switch to Go 1.18
7cec81e0 libct: suppress strings.Title deprecation warning
fcab941e ci: switch to golangci-lint 1.45
3618079c README.md: add cirrus-ci badge
f309a69a README,libct/README: fix pkg.go.dev badges
48006d00 libct/configs/validate: rootlessEUIDMount: speedup
a99f82ad tests: Add comment to clarify intent of seccomp-notify tests
9f9acd1a tests: Improve name of seccomp notify test
728571c1 tests/int: runc delete: fix flake, enable for rootless
f7637def ci: use golangci-lint-action v3, GO_VERSION
f7d46134 ci: bump golangci-lint to v1.44
89733cd0 Format sources using gofumpt 0.2.1
a43485c9 build(deps): bump actions/checkout from 2 to 3
1a935208 libct/cg/sd: simplify DetectUserDbusSessionBusAddress
11895cd0 libct/cg/sd: escape dbus address value
38c21694 tests/integration/helpers: set -u
c8c3e852 tests: fix checks for non-existent variables
99d5c023 tests/int/{root,list}.bats: ALT_ROOT fixups in teardown
7da77d80 tests/int: don't add --root if $ROOT is not set
9e2a0463 tests/int: fix runc_spec for set -u
ab9609db build(deps): bump github.com/godbus/dbus/v5 from 5.0.6 to 5.1.0
8c04b981 libct/cg/sd/v2: fix ENOENT on cgroup delegation
01f00e1f ensure the path is a sub-cgroup path
40b00886 loadFactory: remove
d1fca8e5 list: report error when non-existent --root is specified
2b07e751 reviseRootDir: skip default values, add validation
899342b5 main: improve XDG_RUNTIME_DIR handling
eb2f08dc checkpoint,restore,list: don't call fatal
36786c36 list, utils: remove redundant code
1d5c3310 configs/validate: looser validation for RDT
0f0f1f61 build(deps): bump github.com/cilium/ebpf from 0.8.0 to 0.8.1
be00ae07 ci: shellcheck: update to 0.8.0, fix/suppress new warnings
0b74e49d runc run/exec: ignore SIGURG
24ab543f build(deps): bump github.com/moby/sys/mountinfo from 0.5.0 to 0.6.0
dbd990d5 libct: rm intelrtd.Manager interface, NewIntelRdtManager
85932850 libct: rm TestGetContainerStats, mockIntelRdtManager
9258eac0 libct/start: use execabs for newuidmap lookup
39bd7b72 libct: Container, Factory: rm newuidmap/newgidmap
0d215150 libct: remove Validator interface
630c0d7e libct: Container, Factory: rm InitPath, InitArgs
376c9886 libct/specconv: improve checkPropertyName
d37a9726 libct/specconv: test nits
58c1ff39 signals: fix signal name debug print
0767b782 build(deps): bump tim-actions/get-pr-commits from 1.1.0 to 1.2.0
7346dda3 libcontainer: remove "pausing" state
18e28626 libct/nsenter: fix extra runc re-exec on tmpfs
6e1d476a runc: remove --criu option
485e6c84 Fix some revive warnings
bb6a8388 libct: initContainer: rename Id -> ID
1b14d974 libct/configs: rm Windows TODO
76c398f8 libct/README: rm Cgroupfs
0fec1c2d libct: Mount: rm {Pre,Post}mountCmds
dffb8db7 libct: handleCriuConfigurationFile: use utils.SearchLabels
3d86d31b libct/utils: SearchLabels: optimize
1a3ee496 list: use Info(), fix race with delete
095929b1 list: getContainers: less indentation
cb364108 build(deps): bump github.com/cilium/ebpf from 0.7.0 to 0.8.0
146c8c0c libct: fixStdioPermissions: ignore EROFS
18c4760a libct: fixStdioPermissions: skip chown if not needed
b7fdb688 libct: fixStdioPermissions: minor refactoring
2eb6ac53 CHANGELOG: add #3306
e4d23d50 CHANGELOG.md: nit
5e201e7c libct/intelrdt: explain why mountinfo is required
c45eed9a libct/specconv: rm empty key from mountPropagationMapping
b5cb4056 ci: add go 1.18beta1
907aefd4 libct: StartInitialization: fix %w related warning
024adbb1 libct: Create: rm unneeded chown
edeb3b37 libct/intelrdt: faster init if rdt is unsupported
6c6b14e0 libct/intelrdt: remove findMountpointDir test
02e961bc libct/intelrdt: wrap Root in sync.Once
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
2cf563716f |
podman-compose: update to v1.2.0 -tip
Bumping podman-compose to version v1.2.0-29-g0866492, which comprises the following commits:
8505009 Support python direct call _parse_args or run
9fe3038 tests/integration: Automate 'build_fail' manual test
0f8348b tests/integration: Automate 'build' manual test
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
ac6a273778 |
podman: update to v5.2.0-rc1
Bumping libpod to version v5.2.0-rc1-2-g72fd507205, which comprises the following commits:
59696341b5 Bump to v5.2.0-dev
973e865422 Bump to v5.2.0-rc1
eb750f61f6 Vendor in latest containers(common, storage,image, buildah)
b08b630c84 test: drop unmount for overlay
e16e528f39 test: gracefully terminate server
fbc4768a00 libpod: shutdown Stop waits for handlers completion
6832a35f65 libpod: cleanup store at shutdown
54fce37968 Add NetworkAlias= support to quadlet
317a88ee4e cmd: call shutdown handler stop function
3280da0500 fix race conditions in start/attach logic
04fb77efe2 swagger: exlude new docker network types
f90bd48859 vendor: bump c/storage
e24367aa14 update to docker 27
b1e535b911 contrib: use a distinct --pull-option= for each flag
02af4f8bd6 Update warning message when using external compose provider
7c775a3f4c Update module github.com/cyphar/filepath-securejoin to v0.3.0
830e550073 Ignore result of EvalSymlinks on ENOENT
926547f7d3 test/upgrade: fix tests when netavark uses nftables
5856adb9f8 test/system: fix network reload test with nftables
c4b2015e3a test/e2e: rework some --expose tests
9945981afb test: remove publish tests from e2e
43f6173cc6 CI: test nftables driver on fedora
07b69943a4 CI: use local registry, part 3 of 3: for developers
dd1bcabae9 CI: use local registry, part 2 of 3: fix tests
2e8c074234 CI: use local registry, part 1 of 3: setup
d4c0e7ecbd CI: test composefs on rawhide
176630b5db chore(deps): update module google.golang.org/grpc to v1.64.1 [security]
4487f17a47 chore(deps): update dependency setuptools to ~=70.3.0
bd71b75de4 Improve container filenname ambiguity.
4336c5a4f5 containers/attach: Note bug around goroutine leak
1dd8a35b2f Drop minikube CI test
6f6e0e7126 add libkrun test docs
766955fc6d fix(deps): update module tags.cncf.io/container-device-interface to v0.8.0
4b7aaafb2d cirrus: check for header files in source code check
336c45f68e pkg/machine/e2e: run debug command only for macos
c819c7a973 create runtime's worker queue before queuing any job
34ba26ec52 test/system: fix pasta host.containers.internal test
81250cc5a9 Visual Studio BuildTools as a MinGW alternative
a2c83cb0fd SetupRootless(): only reexec when needed
3350cd3eed pkg/rootless: simplify reexec for container code
049942db04 cirrus: add missing test/tools to danger files
1d9ac9a203 fix(deps): update module golang.org/x/tools to v0.23.0
e2ff5d4e5d Windows Installer: switch to wix5
f90060bff3 fix(deps): update module golang.org/x/net to v0.27.0
5e3d821814 pkg/machine/e2e: print tests timings at the end
527c0f0bfa pkg/machine/e2e: run debug commands after init
ada4e1a8c1 pkg/machine/e2e: improve timeout handling
62956ac192 libpod: first delete container then cidfile
ea86582f6c fix(deps): update module golang.org/x/term to v0.22.0
a181b7bc61 System test fixes
55ad0d6e0e cirrus.yml: automatic skips based on source
2c2da039de fix(deps): update module github.com/containers/ocicrypt to v1.2.0
d00e68e550 podman events: fix error race
b6f151ad1c chore(deps): update dependency setuptools to ~=70.2.0
1c704157c2 fix(deps): update module github.com/gorilla/schema to v1.4.1 [security]
5c41eb6df8 Update CI VM images
3c0176b2d0 pkg/machine/e2e: fix broken cleanup
f84f4a9cce pkg/machine/e2e: use tmp file for connections
fad1f757cc test/system: fix podman --image-volume to allow tmpfs storage
e810b340ef CI: mount tmpfs for container storage
9814ed40c7 docs: --network remove missing leading sentence
83863a6863 specgen: parse devices even with privileged set
5e156c424f vendor: update c/storage
22b57d3230 feat(quadlet): log option handling
786ea01a64 Error when machine memory exceeds system memory
0d0418a5bf machine: Always use --log-file with gvproxy
c9e3458c99 CI: Build-Each-Commit test: run only on PRs
d2ca2058c6 Small fixes for testing libkrun
069eace84b Podman machine resets all providers
e58e715583 Clearly indicate names w/ URLencoded duplicates
926e6dd0aa [skip-ci] Packit: split rhel and centos-stream jobs
fdb736d282 apple virtiofs: fix racy mount setup
67df6d60c3 cirrus: fix broken macos artifacts URL
6db8ff7f7b libpod/container_top_linux.c: fix missing header
3703cbf1d7 refactor(build): improve err when file specified by -f does not exist
905e7ae070 Minor: Remove unhelpful comment
541cdaa441 Update module github.com/openshift/imagebuilder to v1.2.11
439fe90208 Minor: Rename the OSX Cross task
02b922ebfc [skip-ci] Remove conditionals from changelog
65ed96585d podman top: join the container userns
6c75a10875 Run linting in parallel with building
7ff4bbae26 Fix missing Makefile target dependency
a3d5842746 build API: accept platform comma separated
180cc6f863 [skip-ci] RPM: create podman-machine subpackage
de58c5f292 ExitWithError() - more upgrades from Exit()
a7415c9316 test/e2e: remove podman system service tests
a0b2b0d34c cirrus: reduce int tests timeout
8f2d403cd1 cirrus: remove redundant skip logic
7562f4ccdb pkg/machine/apple: machine stop timeout
1a6a200403 CI: logformatter: link to correct PR base
d1bfc6d8d0 Update module github.com/crc-org/crc/v2 to v2.38.0
f50734636c ExitWithError(): continued
31888f23aa test/system: Add test steps for journald log check in quadlet
def182d396 restore: fix missing network setup
a158eae7ff podman run use pod userns even with --pod-id-file
5815195528 macos-installer: bundle krunkit
e404976d1b remote API: fix pod top error reporting
29ecf5984c libpod API: return proper error status code for pod start
945226a844 fix #22233
5d009715f6 added check for `registry.IsRemote()`. and correct error message.
e4f64f91fe fix #20686
4dc98e3a5a pkg/machine/e2e: Remove unnecessary copy of machine image.
49eb5af301 libpod: intermediate mount if UID not mapped into the userns
08a8429459 libpod: avoid chowning the rundir to root in the userns
c81f075f43 libpod: do not chmod bind mounts
094bc673ef libpod: unlock the thread if possible
d53fee511f CI Cleanup: Remove cgroups v1 support
d810f4187e ExitWithError() - more upgrades from Exit()
4b3890ccac remote: fix incorrect CONTAINER_CONNECTION parsing
7d22f04f56 container: pass KillSignal and StopTimeout to the systemd scope
e48f3137c0 libpod: fix comment
8be9ec7216 e2e: test container restore in pod by name
c22ae53d31 docs: Adds all PushImage supported paramters to openapi docs.
3f785e8735 systests: kube: bump up a timeout
f134ab77bc cirrus.yml: add CI:ALL mode to force all tests
d9183f0587 cirrus.yml: implement skips based on source changes
2f680eb4b5 CI VMs: bump
7dc288dbed restore: fix container restore into pod
6dd9abf9ec sqlite_state: Fix RewriteVolumeConfig
83549ba11f chore(deps): update dependency setuptools to ~=70.1.0
91a5c0de2a Quadlet - use specifier for unescaped values for templated container name
0eaec1a2e9 cirrus: check for system test leaks in nightly
4e0cd49148 test/system: check for leaks in teardown suite
81c90f51c2 test/system: speed up basic_{setup,teardown}()
a2352fa3ea test/system: fix up many tests that do not cleanup
e9c6cd1559 test/system: fix podman --authfile=nonexistent-path
f611ac9304 Update module github.com/containernetworking/plugins to v1.5.1
043ce618bc Update module github.com/checkpoint-restore/checkpointctl to v1.2.1
f4aa71e730 Update module github.com/spf13/cobra to v1.8.1
0627fce798 Update module github.com/gorilla/schema to v1.4.0
5c1e5cd026 pkg/machine/wsl: force terminate wsl instance
bd906cb314 pkg/machine/wsl: wrap command errors
dca94be028 [CI:DOCS] Quadlet - add note about relative path resolution
c20767120f CI: do not install python packages at runtime
54edf3d8ee Release workflow: Include candidate descriptor
19989380b8 Minor: Fix indentation in GHA release workflow
82973c38e4 GHA: Send release notification mail
ad56dc7e2b GHA: Validate release version number
64091777fe Remove references to --pull=true and --pull=false
267d838e38 ExitWithError, continued
730a215025 podman: add new hidden flag --pull-option
5a4416be08 [CI:DOCS] Fix typos in podman-build
8fececcdb9 infra: mark storageSet when imagestore is changed
18c7a55ccd [CI:DOCS] Add jnovy as reviewer and approver
5b24d1b48c fix(deps): update module google.golang.org/protobuf to v1.34.2
0c587f0246 refactor(machine,wsl): improve operations of Windows API
ad8fc6a74b --squash --layers=false should be allowed
858b3b7def fix(deps): update module github.com/checkpoint-restore/checkpointctl to v1.2.0
fa4f11facc update golangci-lint to v1.59.1
3825e73120 Rename master to main in CONTRIBUTING.md
cec6859369 podman 5, pasta and inter-container networking
a9de888a15 libpod: do not resuse networking on start
4b29c9dd73 machine/linux: Switch to virtiofs by default
bf541c6740 machine/linux: Support virtiofs mounts (retain 9p default)
406f130590 machine/linux: Use memory-backend-memfd by default
f317eb29ab ExitWithError() - continued
550cb07fc0 Enable libkrun provider to open a debug console
dcec81e694 Add new targets on Windows makefile (winmake.ps1)
5b23a2e1c7 fix(deps): update module github.com/docker/docker to v26.1.4+incompatible
2334a7ea6c fix(deps): update module github.com/crc-org/crc/v2 to v2.37.1
f4b14c11ef fix(deps): update module golang.org/x/tools to v0.22.0
8cc9bb1842 fix(deps): update module golang.org/x/net to v0.26.0
ffc8522646 libpod: fix 'podman kube generate' on FreeBSD
df0c2e5d03 fix(deps): update module golang.org/x/sys to v0.21.0
e8ea1e7632 libpod: do not leak systemd hc startup unit timer
15a4e1dffd vendor latest c/common
7c5c60bc39 pkg/rootless: set _CONTAINERS_USERNS_CONFIGURED correctly
80ed85dc17 run bats -T, to profile timing hogs
350dfabf66 test/system: speed up podman ps --external
8fa1ffbbec test/system: speed up podman network connect/disconnect
8640ce998c test/system: speed up podman network reload
609146fb75 test/system: speed up quadlet - pod simple
7f3bb2d238 test/system: speed up podman parallel build should not race
8852614792 test/system: speed up podman cp dir from host to container
8d3f65b026 test/system: speed up podman build - workdir, cmd, env, label
471e001c7f test/system: speed up podman --log-level recognizes log levels
26bdb5d110 test/system: remove obsolete debug in net connect/disconnect test
c466377013 test/system: speed up quadlet - basic
6b021dd4ba test/system: speed up user namespace preserved root ownership
2e70d4201f System tests: add `podman system check` tests
fec58a4571 Add `podman system check` for checking storage consistency
f18298181b fix(deps): update module github.com/crc-org/crc/v2 to v2.37.0
7243c7109c fix(libpod): add newline character to the end of container's hostname file
6e4d7c7159 fix(deps): update module github.com/openshift/imagebuilder to v1.2.10
e8514bde85 fix(deps): update github.com/containers/image/v5 digest to aa93504
af7bd67d4e Fix 5.1 release note re: runlabel
164573dc34 test/e2e: use local skopeo not image
b9b60f14b4 fix(deps): update golang.org/x/exp digest to fd00a4e
e4123026b5 [CI:DOCS] Add contrib/podmanimage/stable path back in repo
b146f9126a chore(deps): update dependency requests to ~=2.32.3
dffac6ecb1 fix(deps): update github.com/containers/image/v5 digest to 2343e81
900e29549a libpod: do not move podman with --cgroups=disabled
12f634edf0 Update release notes on Main to v5.1.0
5dc1738c05 test: look at the file base name
6243f5cebe tests: simplify expected output
7552735fa9 Sigh, new VMs again
4adb5cbbff Fail earlier when no containers exist in stats
fb4ddf86cc Add Hyper-V option in windows installer
4ece83bdf9 libpod: cleanup default cache on system reset
aa08552bf6 vendor: update c/image
ad661b5b31 test/system: speed up kube generate tmpfs on /tmp
bff0697de8 test/system: speed up podman kube play tests
67356a71b3 test/system: speed up podman shell completion test
01642c64ea test/system: simplify test signal handling in containers
6fa064f991 test/system: speed up podman container rm ...
37120bbe80 test/system: speed up podman ps - basic tests
4f3c691087 test/system: speed up read-only from containers.conf
edf6f1814e test/system: speed up podman logs - multi ...
fe05e25edf test/system: speed up podman run --name
1ae05473c1 Debian: switch to crun
1093ebb72b test/system: speed up podman generate systemd - envar
15606148e5 test/system: speed up podman-kube@.service template
42f43fb3a3 test/system: speed up kube play healthcheck initialDelaySeconds
9e321aafda test/system: speed up exit-code propagation test
94ba2cf1a1 test/system: speed up "podman run --timeout"
82bffb9c50 test/system: fix slow kube play --wait with siginterrupt
7ce3c6bf1e undo auto-formatting
9a7ffaa077 test/system: speed up podman events tests
9f823ecb25 Quadlet: Add support for .build files
9de1d4f653 test/system: speed up "podman auto-update using systemd"
a09152ab28 test/system: remove podman wait test
7f567a4e51 tests: disable tests affected by a race condition
2b43f62233 update golangci-lint to v1.59.0
6dcde80999 kubernetes_support.md: Mark volumeMounts.subPath as supported
b45364254f working name of pod on start and stop
c5597cb12c fix(deps): update module github.com/onsi/ginkgo/v2 to v2.19.0
f8cc1b4807 Bump Buildah to v1.36.0
661e9ee804 fix(deps): update module github.com/burntsushi/toml to v1.4.0
9c92bc64a7 fix typo in Tutorials.rst
74e8f98772 Mac PM test: Require pre-installed rosetta
db3abd0d28 test/e2e: fix new error message
23c830704d Add configuration for podmansh
4fd425429b Update containers/common to latest main
046c0e5fc2 Only stop chowning volumes once they're not empty
d094a9f18e podman: fix --sdnotify=healthy with --rm
e166f6bfe0 libpod: wait another interval for healthcheck
ad1d3f8fc7 quadlet: Add a network requirement on .image units
d418391ce6 test, pasta: Ignore deprecated addresses in tests
18557659e4 [CI:DOCS] performance: update network docs
08507f3ffe fix(deps): update module github.com/onsi/ginkgo/v2 to v2.18.0
93ef340071 CI: disable minikube task
8f8dfb971f [CI:DOCS] Fix windows action trigger
1766a1a24b chore(deps): update dependency setuptools to v70
3ab9e864f6 Check AppleHypervisor before accessing it
e590cced06 fix(deps): update module github.com/containernetworking/plugins to v1.5.0
d9d0840a4d [CI:DOCS] Update dependency golangci/golangci-lint to v1.58.2
63df724a40 add podman-clean-transient.service service to rootless
9a8c3433c1 [CI:DOCS] Update podman network docs
fb2ab832a7 fix incorrect host.containers.internal entry for rootless bridge mode
54ce5c6af1 vendor latest c/common main
fe7cc67ef4 Add Rosetta support for Apple Silicon mac
ad297b1823 bump main to 5.2.0-dev
8afa06ee89 Use a defined constant instead of a hard-coded magic value
47f01e85c5 cirrus: use faster VM's for integration tests
943ddfb0fe fix(deps): update github.com/containers/gvisor-tap-vsock digest to 01a1a0c
4b0ae78e00 [CI:DOCS] Fix Mac pkg link
061bcc06ea test: remove test_podman* scripts
cb905f59ea test/system: fix documentation
6408a05927 Return StatusNotFound when multiple volumes matching occurs
35375e0af8 container_api: do not wait for healtchecks if stopped
b06c58b4a5 libpod: wait for healthy on main thread
bcb7edfded remote API: restore v4 payload in container inspect
6c78a72995 Remove duplicate call
164aef814e fix(deps): update module github.com/onsi/ginkgo/v2 to v2.17.3
590fec7a78 Change tmpDir for macOS
120660e239 fix: close resource file
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
5c7becd086 |
oci-runtime-spec: update to v1.2.0
Bumping runtime-spec to version v1.2.0-17-g7017384, which comprises the following commits:
119ae42 Add CPU affinity to executed processes
2149fb5 config-linux: describe the format of cpus and mems
c6af124 ci: remove redundunt actions
d4aa6d8 chore: format JSON file `make -C schema fmt`
b983fbf CODEOWNERS: remove vbatts
bf698d0 MAINTAINERS: move vbatts to EMERITUS
12b653d Update golangci-lint to v1.56.1 in CI
8547911 Add Go v1.21 and v1.22 to GitHub Actions CI matrix
1a729af Update GitHub Actions packages to resolve warnings in CI
65cd1f8 Back to +dev
36852b0 version: release v1.2.0
021ba94 config.md: allow empty mappings for [r]idmap
5e98fec features: add potentiallyUnsafeConfigAnnotations
cabeea7 specs-go: mark LinuxMemory.Kernel as deprecated
4005c81 specs-go: add missing deprecation comment for Hooks.Prestart
2f6b090 config: improve bind mount and propagation doc
0ec4e6b fix link to hooks in features
6ffddf6 mount: Allow relative mount destinations on Linux
f329913 features-linux: Expose idmap information
7b8eb69 config: add reference to mount_setattr(2) for idmapped mounts
2547bb0 config: add idmap and ridmap mount options
3f552ce version: release v1.1.0+dev
0625254 version: release v1.1.0
d56ba70 ChangeLog: squash v1.1.0-rc.1...v1.1.0
5430e36 ChangeLog: Document changes since v1.1.0-rc.3
2bd22fa features.md: add a note to avoid confusion about annotations
5612d21 Remove outdated meeting.ics
085728a README.md: update chat information
8b4cadd version: v1.1.0-rc.3+dev
ae35e39 version: release v1.1.0-rc.3
d8be1e3 ChangeLog: Document changes since v1.1.0-rc.2
1beaf68 CODEOWNER: Add Toru Komatsu(@utam0) to sync with MAINTAINERS
fccfb09 config: add support for org.opencontainers.image annotations
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
9aa6ae98f2 |
oci-image-spec: update to v1.1.0 latest
Bumping image-spec to version v1.1.0-25-g39ab2d5, which comprises the following commits:
a977bd3 Remove validation warnings to stdout
4bbdd7f Switch jsonschema validation libraries
535d657 Fix a typo in the annotations spec
89fee07 MAINTAINERS: move jonboulle to EMERITUS
f17d647 CODEOWNERS: remove vbatts
818209a MAINTAINERS: move vbatts to EMERITUS
652ec7c Add note about `ImageID` to the `config` section of `manifest.md`
2d95dde Reformat "Platform Variants", especially to add amd64, ppc64le, riscv64
e191267 Update Go versions in release scripts
4da0cfc Update GitHub Actions packages to resolve warnings in CI
a32e6c3 Pin golangci-lint for Go v1.20
8baa69b media-types: Fix broken links
0a41c19 version: bump back to +dev
e7f7c0c version: release v1.1.0
d0f90e6 Clarify that subject references a separate DAG
8b1e951 version: bump back to +dev
6c2b5fa version: release v1.1.0-rc6
53d9855 new section for projects no longer maintained
b391bc0 fix: SPDX licenses URL
dd66b54 Test older versions of Go with toolchain=local
93f6e65 Makefile: remove stray trailing space (#1126)
d881fa8 deps: remove deprecated github.com/pkg/errors (#1125)
072574d add ORAS to implementations.md
9954739 specs-go: group MediaTypes
344b098 fix markdown table formatting
c7a064f Update supported Go range to 1.19 - 1.21
f0ef80e version: bump back to +dev
1e54f01 version: release v1.1.0-rc5
061cba3 Fix golangci-lint install on older versions of Go
a2a5750 Add step to update website after a release
0c1622e Add `riscv64` arch to `check{Architecture|Platform}`
e6a75e6 Provide a decision tree for artifacts
9ac8f92 Quote lint-md wildcard expression
a6af2b4 Add a markdown linter and fix linting issues
af9c838 OCI has a distribution-spec
37bac87 Create artifacts guidance
ddf2dfd chore(descriptor.md): correct canonicalization reference
d36ccf1 MediaType is required in the descriptor
f6c60b5 Clean up the markdown in considerations
da8994a Cleanup broken links and markdown spacing
56877ad Remove deprecated golangci lint checks
b29a06c Hacking markdown and Makefile cleanup
73aca56 Cleanup markdown in governance
fd95ded Fix label schema link
aed07a8 Test subject field in index
8620a49 version: bump HEAD back to +dev
82e8329 version: bump for release of v1.1.0-rc.4
988df0a specs-go: remove artifact prefixed annotations
a845c7a image-index: add artifactType to specs and schema
73f386c Add constants for "index.json" and "blobs"
25fc553 Switch from scratch to empty
749ea9a Add artifactType to image index
32036d8 Apply version change from #1050
e13840d Add language from artifacttype field to forbid allowlists of media types
77efc6e spec: clarify descriptor, align with de facto artifact usage
c6854a6 image-index: add the `subject` field
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
4b7ae4b6e9 |
netavark: update to v1.11.0
Bumping netavark to version v1.11.0-34-ge182147, which comprises the following commits:
ab4f101 Release v1.11.0
8d63716 Update release notes for 1.11.0
8c28d20 update netlink-packet-route to 0.20.0
46e4559 run cargo update
38d0ab1 fix: remove extra / in make install and uninstall
4fb2bd9 chore(deps): update dependency containers/automation_images to v20240529
3ec4fd7 fix(deps): update rust crate nix to 0.29.0
e87aae4 fix(deps): update rust crate nispor to 1.2.19
ecfae2c fix(deps): update rust crate anyhow to 1.0.86
6f445a5 fix(deps): update rust crate anyhow to 1.0.85
e5514d1 [skip-ci] Packit: do not create dup jobs on podman-next
f27cd29 fix(deps): update rust crate anyhow to 1.0.84
abdd8ec [skip-ci] RPM: use default __cargo macro across all envs
c29c09c [skip-ci] RPM: switch default firewall to nftables on EL10+
79bdee1 chore(deps): update dependency containers/automation_images to v20240513
b161e75 Add conditional compilation of default firewall driver
7f69bae fix(deps): update rust crate serde_json to 1.0.117
87fe59f fix new clippy warnings
ed7cfd8 Update CI image to fedora 40
e6c6d99 fix ncat sctp tests
ad5adfc fix(deps): update rust crate anyhow to 1.0.83
b04b3de build(deps): bump h2 from 0.3.25 to 0.3.26
da57e62 [skip-ci] Packit: distinct `-rhel` packages value
5e1484c [skip-ci] Packit: enable c10s downstream sync
4233d47 fix(deps): update rust crate libc to 0.2.154
42c6735 fix(deps): update rust crate ipnet to 2.9.0
5869654 fix(deps): update rust crate tower to 0.4.13
7c575c5 fix(deps): update rust crate tokio-stream to 0.1.15
93b8c98 fix(deps): update rust crate prost to 0.12.4
8242916 fix(deps): update rust crate iptables to 0.5.1
41c3281 [skip-ci] Packit: remove el8 jobs
16de016 fix(deps): update rust crate anyhow to 1.0.82
8f5cbf3 fix(deps): update rust crate serde to 1.0.199
0e03c7c Add suffix to Aardvark internal network filenames
9a73a52 fix port forward with strict RPF and multi networks
6e19894 renovate: stop rebasing PRs automatically
f2f137f chore(deps): update rust crate chrono to 0.4.38
ded8d36 fix(deps): update rust crate serde_json to 1.0.116
0ce4586 fix(deps): update rust crate netlink-sys to 0.8.6
055b37e nftables: only dump netavark table rules
42c634f update nftables to 0.4
b2bcf47 fix aardvark-dns netns check
c309491 fix(deps): update rust crate tokio to 1.37
1df8633 fix(deps): update rust crate netlink-packet-route to 0.19.0
4846563 Update to nix-0.28.0
e506776 fix(deps): update rust crate mozim to 0.2.3
a76f3d9 fix(deps): update rust crate nispor to 1.2.18
829b2db Update chrono
cae2d5e fix(deps): update rust crate serde_json to 1.0.115
92bd069 build(deps): bump mio from 0.8.9 to 0.8.11
1e10e01 [skip-ci] rpm: aardvark-dns is a hard dep across the board
131c28c Update Rust crate env_logger to 0.11.3
370722f Update Rust crate serde to 1.0.197
6288762 Update Rust crate tempfile to 3.10.1
6d67358 Update Rust crate log to 0.4.21
943cd88 Update Rust crate zbus to 3.15.2
1a5850a Update Rust crate serde_json to 1.0.114
fe40711 Update Rust crate env_logger to 0.11.2
1efb4e5 Update Rust crate chrono to 0.4.34
5601e0a Update Rust crate tonic-build to 0.11
09ccedc Update Rust crate tonic to 0.11
bba73d6 fix netavark update to not start a new aardvark-dns
37d6f55 Update Rust crate tempfile to 3.10.0
8c2c8c6 Update Rust crate zbus to 3.15.0
dd1a057 Update Rust crate tokio to 1.36
b6be4de Update Rust crate chrono to 0.4.33
45f1581 Do not perform network namespace detection on AV update
6c69f60 [CI:BUILD] Packit/rpm: fix aardvark-dns handling
733a785 Update Rust crate serde_json to 1.0.113
6786828 Update Rust crate serde_json to 1.0.112
c5a23fc Update Rust crate env_logger to 0.11.1
d8143a6 update README with nftables support
c5acdec Bump to v1.11.0-dev
468f885 perf-netavark: accept fw driver as argument
61a990f perf-netavark: fix missing --config arg
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
485f225bb7 |
nerdctl: update to v2.0.0-rc.0
Bumping nerdctl to version v2.0.0-rc.0-79-gd273fd20, which comprises the following commits:
6d97c6e9 build(deps): bump github.com/containerd/go-cni from 1.1.9 to 1.1.10
dd52560f CI: update Ubuntu (24.04)
ae277688 feat: support for --sig-proxy in run
6c1e9618 build(deps): bump github.com/containernetworking/cni from 1.2.1 to 1.2.2
c493afcd pkg/defaults: add defaults_darwin.go
b997648a Fix check for empty $HOME and $XDG_RUNTIME_DIR
8a5137b0 build(deps): bump docker/build-push-action from 6.0.2 to 6.1.0
02d5329a build(deps): bump docker/build-push-action from 6.0.1 to 6.0.2
c2fa1ed9 update soci-snapshotter (0.6.1)
820f7404 update Nydus (2.2.5)
480fc999 update gotestsum (1.12.0)
6cc63162 update Kubo (0.29.0)
f16b79c2 CI: cross: do not use Go 1.21 for nerdctl-full deps
f35e4251 update golangci-lint (1.59.1)
85a8bf86 update BuildKit (0.14.1)
465365a0 update CNI plugins (1.5.1)
bccfdc82 update containerd (2.0.0-rc.3)
ead5ce6c Volume QA: remove (fixes and tests)
a28dbf29 Dockerfile: use Go 1.22 for runc
97552985 Bump compose-go to v2
e13ff68b Remove duplicate function
515c3ade Add HOSTNAME environment variable
0c300dca fix: close the hosts file
15a8a8dc Aftermath docker migration: fix racyness in tests
5dd36b60 Implement network namespacing
58f7720e build(deps): bump docker/build-push-action from 6.0.0 to 6.0.1
6d0c8f87 Replace SetEnv invocation by base.Env to unlock parallelization
c0e4e92c Add mechanism to prevent Cmd from executing multiple times
ac4830df MAINTAINERS: move Ye Sijun (junnplus) from a COMMITTER to a EMERITUS
2606265d build(deps): bump github.com/containernetworking/cni from 1.2.0 to 1.2.1
34d7c310 build(deps): bump docker/build-push-action from 5.4.0 to 6.0.0
0b201417 build(deps): bump github.com/containernetworking/plugins
9a76ba10 Disable build and publish on PR for purely md changes
eace9da1 Add doc note about --ip and bridge
e789f2cd Docker v26 compatibility & test fixes
b63f4d6b Add --pull option to build command
091de746 update containerd (1.7.18), runc (1.1.13)
a3195b27 MAINTAINERS: promote Kay Yan (yankay) from a REVIEWER to a COMMITTER
f4a7e0c8 Restore logger output
37098ac6 build(deps): bump github.com/spf13/cobra from 1.8.0 to 1.8.1
14d8b42a build(deps): bump github.com/klauspost/compress from 1.17.8 to 1.17.9
4f8a70b6 build(deps): bump actions/checkout from 4.1.6 to 4.1.7
f942d2c5 test-integration-docker-compatibility: install Docker v24
972a9b10 build(deps): bump github.com/containerd/platforms from 0.2.0 to 0.2.1
37c0cb67 Safer / faster convert zstd
b20070d2 Revamped testregistry and login tests
edb8c19d build(deps): bump docker/build-push-action from 5.3.0 to 5.4.0
dc237a35 build(deps): bump github.com/Microsoft/hcsshim from 0.12.3 to 0.12.4
80731ff3 Caching and list optimizations
b0c23492 MAINTAINERS: move Hanchin Hsieh (yuchanns) from a REVIEWER to a EMERITUS
e021a92a MAINTAINERS: promote Jin Dong (djdongjin) from a REVIEWER to a COMMITTER
4907e59c fix container list with json format
b94caffe build(deps): bump github.com/docker/cli
47b45261 build(deps): bump github.com/containerd/containerd from 1.7.17 to 1.7.18
530b0913 build(deps): bump github.com/docker/docker
2240323d build(deps): bump golang.org/x/net from 0.25.0 to 0.26.0
5b8d5a30 build(deps): bump golang.org/x/crypto from 0.23.0 to 0.24.0
7675d267 update imgcrypt (1.1.11)
875a962e Remove spurious debugging leftover
11802cf3 Fix wrong package import
6917840b CI: .md files changes should not trigger tests
f491e83f Disabling test on unsupported platforms
eb001fad Image inspect rework
4d4fd5fb State how to run a single integration test
099ef7bd Image history enhancements
3d875395 build(deps): bump docker/login-action from 3.1.0 to 3.2.0
838d5a11 build(deps): bump github.com/containerd/imgcrypt from 1.1.10 to 1.1.11
eb5d4426 update slirp4netns (1.3.1)
1ec6764f update containerd (1.7.17)
03bee846 update CNI plugins (1.5.0)
4b0b69d3 go.mod: github.com/containernetworking/plugins v1.5.0
949dc8aa build(deps): bump github.com/awslabs/soci-snapshotter
11fcb6b0 Do not obtain task info when it is not necessary in commit command
713851de add retry on test
cf5073b4 support image label
0988c9b8 chore: remove impossible error check
8b34abdf Implement container inspect --size, SizeRootFs and SizeRw
0d470e7e Implementing StartedAt for containers
93b13817 build(deps): bump github.com/containerd/nydus-snapshotter
5f8c0c9d build(deps): bump github.com/docker/cli
80bc6835 build(deps): bump actions/checkout from 4.1.5 to 4.1.6
35a90ef6 build(deps): bump github.com/docker/docker
64af5a6d build(deps): bump github.com/containerd/containerd from 1.7.16 to 1.7.17
480eb6ee Support DHCP IPAM opts and set the hostname
274b8a6e Fix cni plugins sha after spurious 1.4.1 re-release
cc60f5d5 build(deps): bump actions/checkout from 4.1.4 to 4.1.5
b24582bc build(deps): bump github.com/fatih/color from 1.16.0 to 1.17.0
6b10870c Re-acquire name in onStartContainer (see #2992)
c60adf29 Add missing alias for container rm/remove
fac3d35e build(deps): bump github.com/docker/cli
c5d1b532 Allow directories for --device and in-container path
762fe91c Fix some /etc/ file permissions (see #2684)
926b88f3 build(deps): bump github.com/containerd/platforms from 0.1.1 to 0.2.0
41bf4414 build(deps): bump github.com/docker/docker
516503a0 Fix markdown link
c17badbc build(deps): bump golangci/golangci-lint-action from 5.1.0 to 6.0.1
83382d5b build(deps): bump golang.org/x/net from 0.24.0 to 0.25.0
4b9de97d inspect: show mounts info from CRI/ctr containers
d197e5b7 build(deps): bump github.com/docker/cli
227505ce build(deps): bump github.com/docker/docker
c6c4a7bd build(deps): bump github.com/pelletier/go-toml/v2 from 2.2.1 to 2.2.2
618639b3 build(deps): bump github.com/cyphar/filepath-securejoin
4e615922 CI: use Go 1.22
49993c5b build(deps): bump golangci/golangci-lint-action from 5.0.0 to 5.1.0
ad607362 build(deps): bump github.com/containerd/nydus-snapshotter
2c1d745b build(deps): bump github.com/rootless-containers/rootlesskit/v2
54b29564 fix: set mountpoint RW and Propagation in internal mount label
ff6c1c49 skip Kubo 0.28.0
bb6f9e66 update RootlessKit (2.1.0)
f34b02ad update slirp4netns (1.3.0)
e9535e52 update BuildKit (0.13.2)
47053926 update containerd (1.7.16)
a4f2ed07 build(deps): bump golangci/golangci-lint-action from 4.0.0 to 5.0.0
bd7fdb37 build(deps): bump github.com/containerd/containerd from 1.7.15 to 1.7.16
93f404c7 fix: error check in the ensureFile func
a279dfab build(deps): bump actions/checkout from 4.1.3 to 4.1.4
4f46cf94 build(deps): bump github.com/docker/cli
8765df23 build(deps): bump github.com/docker/docker
6b047d24 build(deps): bump github.com/Microsoft/hcsshim from 0.12.2 to 0.12.3
0439917f build(deps): bump actions/checkout from 4.1.2 to 4.1.3
199edf1a build(deps): bump github.com/Microsoft/go-winio from 0.6.1 to 0.6.2
79897c8b build(deps): bump github.com/docker/cli
a40d98d2 build(deps): bump github.com/containernetworking/cni from 1.1.2 to 1.2.0
03fd3c76 build(deps): bump github.com/awslabs/soci-snapshotter
47f272d2 build(deps): bump github.com/pelletier/go-toml/v2 from 2.2.0 to 2.2.1
c1c0fc93 build(deps): bump github.com/fahedouch/go-logrotate from 0.2.0 to 0.2.1
6ffb5466 build(deps): bump github.com/docker/cli
dc42456f build(deps): bump github.com/docker/docker
d4257170 build(deps): bump github.com/containerd/accelerated-container-image
9b8e1dd3 fix follow tail of rotate log
a3fdaafa fix: cleanup volume dir if create volume failed
27b8dd84 build(deps): bump github.com/klauspost/compress from 1.17.7 to 1.17.8
46acf060 build(deps): bump github.com/rootless-containers/bypass4netns
b5117a23 Rationalise build constraints for Go 1.19 onwards
5fac99b3 Implement autodetection of Windows buildkitd socket
6e6aa4a9 Enable building on Windows hosts
0d75e34f Remove unused defaults.BuildKitHost
62e031c6 bypass4netns: allow ignoring bind
f802ba87 update bypass4netns (0.4.1)
2c446522 build(deps): bump github.com/containerd/accelerated-container-image
2cfff270 update containerd (1.7.15)
a1fd53b7 build(deps): bump github.com/containerd/containerd from 1.7.14 to 1.7.15
858fa60e build(deps): bump golang.org/x/sync from 0.6.0 to 0.7.0
6b8a1c63 build(deps): bump golang.org/x/net from 0.23.0 to 0.24.0
af4c470d build(deps): bump golang.org/x/crypto from 0.21.0 to 0.22.0
cc495f2a build(deps): bump golang.org/x/net from 0.22.0 to 0.23.0
fc4c8e78 annotations: add `nerdctl/bypass4netns-ignore-subnets` (`[]string`)
f42ab2ff Implement `nerdctl run --annotation` (introduced in Docker v24)
9ba9ddca update BuildKit (0.13.1)
6f83a71d build(deps): bump github.com/Microsoft/hcsshim from 0.12.1 to 0.12.2
da2f576f build(deps): bump github.com/docker/docker
3809ec53 CI: FreeBSD: use Go 1.22
c0d7b734 build(deps): bump github.com/containerd/nydus-snapshotter
ea7769fc build(deps): bump github.com/Microsoft/hcsshim from 0.12.0 to 0.12.1
e7608c8b deflake TestImageConvertEStargz
c1c7e251 not check return of rmi in pushImageToIPFS
70ee810a pkg/api/types: remove dependencies on nerdctl
8ae661e9 build(deps): bump github.com/pelletier/go-toml/v2 from 2.1.1 to 2.2.0
2122a714 update cosign image to latest release
3b12a202 build(deps): bump docker/build-push-action from 5.2.0 to 5.3.0
1c371393 update imgcrypt (1.1.10)
9d60dbb0 build(deps): bump google.golang.org/protobuf from 1.32.0 to 1.33.0
0f9c8de4 feat(compose_up): add --abort-on-container-exit flag
d83f9f13 build(deps): bump github.com/containerd/imgcrypt from 1.1.9 to 1.1.10
5e785705 build(deps): bump github.com/containerd/accelerated-container-image
8c75ca70 build(deps): bump docker/login-action from 3.0.0 to 3.1.0
ee2f8d64 update Kubo (0.27.0)
4917c16a update RootlessKit (2.0.2)
4dbac7f8 update CNI plugins (1.4.1)
046bfc06 build(deps): bump github.com/containernetworking/plugins
6958d07c build(deps): bump actions/checkout from 4.1.1 to 4.1.2
0ec5c7e9 refactor: replace os.MkdirTemp with t.TempDir with cleanup
4d9abe27 update containerd (1.7.14),(1.6.30)
533f16b9 CI: update FreeBSD to 14
258362b8 build(deps): bump github.com/containerd/containerd from 1.7.13 to 1.7.14
bc8450e8 feat: add extra contexts to buildctl call #2835
341c60d4 update BuildKit (0.13.0)
ca56bc42 build(deps): bump docker/build-push-action from 5.1.0 to 5.2.0
41b669d7 feat: create network cleanup function for kill and stop cmd
da007062 build(deps): bump github.com/go-jose/go-jose/v3 from 3.0.1 to 3.0.3
62d013c1 build(deps): bump github.com/rootless-containers/rootlesskit/v2
74e27374 build(deps): bump github.com/Microsoft/hcsshim from 0.11.4 to 0.12.0
26c02362 chore: remove useless error check
f853ab85 Enhance default platform comparision for image shareablity #2810
45b86c21 build(deps): bump golang.org/x/net from 0.21.0 to 0.22.0
be006100 build(deps): bump golang.org/x/crypto from 0.20.0 to 0.21.0
f1595262 Use json marshal/unmarshal to copy
3d28dbf6 fix: typos
772d4791 build(deps): bump github.com/containerd/accelerated-container-image
d94c8f59 build(deps): bump golang.org/x/crypto from 0.19.0 to 0.20.0
18f29fb0 fix: add onstartcontainer hook
d8412eed build(deps): bump github.com/containerd/nydus-snapshotter
261bd97c build(deps): bump github.com/klauspost/compress from 1.17.6 to 1.17.7
41b83493 Rootlesskit Network Design
8d840dae doc: should use master tag for binfmt
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
bb2f6b880b |
lxc: update to v6.0.1
Bumping lxc to version v6.0.1, which comprises the following commits:
f1be0d814 Release LXC 6.0.1
9fb53cfa1 meson: fix build with -Dtools-multicall=true on NixOS
f92aa6066 github: exclude clang & ubuntu-24.04 combination
6a0b1504e lxc/storage/zfs: ignore false-positive use-after-free warning
6ba6c3208 github: properly check apparmor profile changes
8e72b94bd github: start using ubuntu-24.04
f91ce0d8b apparmor: regenerate rules
cba7a6746 apparmor: use /{,**} instead of /**
e97321ff9 apparmor: regenerate rules
89071ba7b apparmor: fix rule path pattern specification syntax
32c7a157d lxc-local: remove check for template existence before extraction
81a2c8253 lxc-local: fix incorrect path to `templates` file
fdeb88655 lxc-local: fix use of `LXC_PATH` before init
be7179a08 Update lxc-execute.sgml.in
247f5eed5 Update lxc-{attach,execute}.sgml.in
bb23a71af Update lxc-execute.sgml.in
f98b7ab53 Update lxc-attach.sgml.in
e31ce9753 network: netdev_configure_server_veth: reduce scope of disable_ipv6_fd/path vars
bd8d5b747 lxc/network: handle non-existing sysctl <ifname>/disable_ipv6
41aa42e27 github: test the lxc multicall binary builds too
1b3b06d8e meson: fix build on NixOS
3dee5fb88 Release LXC 6.0.0
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
244d5882c5 |
kubernetes: update to v1.30.2
Bumping kubernetes to version v1.30.2-19-g7e92bb98e30, which comprises the following commits:
b5ac4e577a3 Fix pv reclaim failed due to its phase is wrongly updated to the Failed state by kcm
3b5b3a80be1 Mark a test case which sets up a sample-apiserver as serial due to potential conflicts with other test cases which do the same.
95f23fd9637 defaultMaskedPaths must be kept in sync with moby/moby.
50428ed169f gitRepo volume: directory must be max 1 level deep
dc7f0cac7df Bump images, dependencies and versions to go 1.22.5 and distroless iptables
c1aea3d7bac Fix endpoints status out-of-sync when the pod state changes rapidly
a805b38229f fix: skip isPodWorthRequeuing only when SchedulingGates gates the pod
81a15801b68 Clean up the featureGates during the matchSuccessPolicy unit tests
49a2366ddb6 Initialize terminating field in the Job controller unit tests
46f9e4b41f6 Job: Fix a bug that the SuccessCriteriaMet condition is added to the Job with successPolicy even if the JobSuccessPolicy featureGate is disabled
85fad5b874c Update CHANGELOG/CHANGELOG-1.30.md for v1.30.2
39683505b63 Release commit for Kubernetes v1.30.2
47c36d4bbfa Bump images, dependencies and versions to go 1.22.4 and distroless iptables/setcap/debian-base
cd73ad187cc update driver installer
654c085cb16 Don't fill in NodeToStatusMap with UnschedulableAndUnresolvable
1ddcf348612 Revert "scheduler: preallocation for NodeToStatusMap"
0df7267723b kubeadm: use the actual configured kubelet healthz address:port
398ab938efc kubectl create cronjobs: Manually set OwnerReferences
42b93b35ba7 add an integration test when nodeAffinity specifies a non-existent node.
f73bb17efbf base on allNodes when calculating nextStartNodeIndex
a26f2c59e3e Fix printPod panic with spurious container statuses
85fc4758204 Update CHANGELOG/CHANGELOG-1.30.md for v1.30.1
6911225c3f7 Release commit for Kubernetes v1.30.1
3d896724760 Adding the feature gates to fix cost for VAP and webhook matchConditions.
b762a187f4a cherry pick #124618 to 1.30
1c8b0f697c5 fix requests tracker concurrency
2956e294c44 fix conflict race in statefulset rest update
7d9b913d106 fix stateful set pod recreation and event spam
a58d4f54cf8 fix pods tracking and internal error checking in statefulset tests
f20b6672b8e [go] Bump images, dependencies and versions to go 1.22.3 and distroless iptables
d8c37e81539 Updated & added visibility to apiserver x509 test certificates expiring this year
ad1353499eb Clean up PersistentVolumeLabel admission plugin
42742942f5d scheduler: preallocation for NodeToStatusMap
d17cd6ef75c tag service.spec.TrafficDistribution field as alpha
d3795353625 tag TrafficDistribution tests to avoid running on clusters without the feature enabled
37e7cbdd3a6 fix(api): make LocalObjectReference.Name and HostAlias.IP required (#124553)
1410806d2af kubeadm: check for available nodes during 'CreateJob' preflight
e1594967bbb Idempotent transformers in scheduler & kcm
dabc4428f2f kubeadm: fix bug of kubeletconfig not being downloaded on upgrade
7e5e4c3f616 e2e framework: configure Ginkgo logger and klog consistently
6bb6b07b185 e2e node: fix -v support
4d1dd9cd079 Update applyconfig-gen for pacakges where group and dir differ in name
933272d3333 kube_codegen: expose applyconfig-openapi-schema flag for client generation
502d9434a40 Update CHANGELOG/CHANGELOG-1.30.md for v1.30.0
7c48c2bd72b Release commit for Kubernetes v1.30.0
69e332560d0 CHANGELOG: Update directory for v1.27.13 release
128d6cc1462 Add envFrom to serviceaccount admission plugin
fb5140f5622 Rename `cluster` to `storage_cluster_id` for apiserver_storage_size_bytes metric
d51a005d25a Update CHANGELOG/CHANGELOG-1.30.md for v1.30.0-rc.2
7606cf7b3d7 CHANGELOG: Update directory for v1.30.0-rc.2 release
22140b6a070 Release commit for Kubernetes v1.30.0-rc.2
be4b7176dc1 Fix Abs path validation on Windows (#124084)
d19bff9a022 Update publishing-bot rules to Go 1.21.9
1366f1f4470 [go] Bump images, dependencies and versions to go 1.22.2 and distroless iptables
99fac38d286 Update x/net for CVE-2023-45288
f4750e52e66 Update CHANGELOG/CHANGELOG-1.30.md for v1.30.0-rc.1
6673e7a93d8 CHANGELOG: Update directory for v1.30.0-rc.1 release
77aa9c21c29 Release commit for Kubernetes v1.30.0-rc.1
f338ab5f959 svm test: wait after updating CRD to avoid flakes
363fee59e4b fix panic with SIGSEGV in kubeadm certs check-expiration
0add741012c fix test flake caused by not waiting for CRD schema update
02139c91028 Deflake authz config reload test
fc428df4914 update setcap/debian-base to bookworm-v1.0.2
06e69e4b099 releng: update publishing bot rules for 1.30
d098af353c6 CHANGELOG: Update directory for v1.30.0-rc.0 release
6a00808f1d7 Release commit for Kubernetes v1.30.0-rc.0
c893c484328 Use the right feature gate when updating uncertain volumes
6f5240b19c6 e2e_node: fix podresources test
9ce994af9fc e2e_node: remove `Dbus` test case
247392271f1 Fix admission error
84750fe52e7 Revert "enhancement(scheduler): share waitingPods among profiles"
a67d1dc0102 Revert "Fix flaky test on multi profiles waiting pod"
225749eb68b Undo double run of the TestWatchSemantics test to avoid hitting timeout
4f1c91b24a4 Fix for TestStorageVersionMigrationWithCRD integration test failure
f2d4848e49c add stefan as apimachinery tech lead
0130072b053 Serve watch without resourceVersion from cache and introduce a WatchFromStorageWithoutResourceVersion feature gate to allow serving watch from storage.
a7f23e46da4 Fix OOMKiller test warnings
fc555839d73 Allow installing newer containerd/runc on COS
10b6319e64b fix slow dra unit test
2b56de43e5c register Node/UpdateNodeTaint event to plugins which has Node/Add only, doesn't have Node/UpdateNodeTaint
656cb1028ea CHANGELOG: Update directory for v1.29.3 release
e5b497df4fb Add alpha endpoint getStoragemigrationAPIGroup
fa97f37fea6 CHANGELOG: Update directory for v1.27.12 release
bf38ed0e5b7 CHANGELOG: Update directory for v1.28.8 release
26881132bd0 kubelet: assign Node as an owner for the ResourceSlice
80db011202e remove VolumeAttachment endpoints
55302de991e Promote VolumeAttachment e2e test to Conformance
4048598620d Change the API operation e2e test to conformance test.
045d91d882c Add e2e tests for GA API
a0add8d2c75 dra api: NodeResourceModel -> ResourceModel
c78812868f5 CHANGELOG: Update directory for v1.26.15 release
0b8e79580eb Fix enabling consistent list from watch cache also works for resourceVersion=0
c44cc9a575f apiserver/storage/cacher: deflake TestGetListNonRecursiveWithConsistentListFromCache
f5d945eb43c apiserver/storage/cacher: decrease running time of TestWatchNotHangingOnStartupFailure
8963e73f120 kubelet: fix mixing up runtime classes with runtime handlers
1dc05009fe7 api: NodeStatus: rename RuntimeClasses to RuntimeHandlers
4a776f66ec4 kubelet: silence "unknown runtime class" errors when unsupported
6680700b5dc Add e2e and integration tests for Service.spec.trafficDistribution (#123812)
5a74c8e2202 apiserver/storage/cacher: decrease the running time of tests in the cacher package.
926122c035a apiserver/storage/cacher: decrease of running time of TestEmptyWatchEventCache
c9384550cbf CHANGELOG: Update directory for v1.30.0-beta.0 release
4f6212fb0e6 generated: ./hack/update-conformance-yaml.sh
2c2d424b012 make type checking tests non-conformance.
19ae61bab0d innocent-pod should not be evicted due to exceeding requests/limits
7ab1ef644e2 Revert "Implement a field selector for ClusterIP on Services"
3ecbb4dee00 apiserver/storage/cacher: decrease of running time of TestWaitUntilWatchCacheFreshAndForceAllEvents
a527cab9fce Fix non-recursive list when consistent list from cache is enabled
727d127e6f6 don´t run openapi spec with ConsistentListFromCache feature gate enabled
dc2974c6461 retry policy creation for CRD type checking E2E test
9fcf279e2b9 Fix SetFeatureGateDuringTest handling of Parallel tests
4aed5652ed2 Disable `aws` drivers for `In-tree Volumes` test
21a0dd1d705 dra scheduler: create default claim/class parameters instead of nil
fc2134c84cc dra kubelet: fix error log
51c26b7002a fix test flake in TestStructuredAuthenticationConfigReload
ea14ccdf13f e2e_node: mount_rro: fix error string comparison
5cc1e562483 e2e_node: mount_rro: add SkipUnlessFeatureGateEnabled(RecursiveReadOnlyMounts)
3ce6c104e21 Support fetching NPD from github releases in standalone mode
56da06b6dd9 Fix the dirname command in macOS does not have a -z option
62ac88b9ea5 Add metrics for authentication config reload
b4935d910dc Add dynamic reload support for authentication configuration
13a6dcc21c5 dra kubelet: add StructuredResourceModel to UnprepareResources call
d4925ce8f83 e2e: KEP-3857: Recursive Read-only (RRO) mounts
c7f52b34f34 kubelet: KEP-3857: Recursive Read-only (RRO) mounts
6f12e1d8e59 kubelet: expose `containerStatuses.volumeMounts`
dd0882a83e0 kubelet: expose `node.status.runtimeClasses`
8db07446f19 api: validate RecursiveReadOnlyMounts
8828530fd5b node: dropDisabledFields: recognize RecursiveReadOnlyMounts gate
ce1918875f6 pod: dropDisabledFields: recognize RecursiveReadOnlyMounts
d940886d0a4 api: KEP-3857: Recursive Read-only (RRO) mounts
0b1a507b002 pkg/features: add RecursiveReadOnlyMounts
76081a10c26 kubelet: RuntimeHandler: add SupportsRecursiveReadOnlyMounts
27f24a62e30 kubelet: change map[string]RuntimeHandler to []RuntimeHandler
f2508df279e Job: Use the fake clock in TestTrackJobStatusAndRemoveFinalizers
9161302e7fd feat: implements svm controller
121607e8096 Require email_verified to be used when email is set as username via CEL
79fe37537c3 Adjust the validation to the current state
1163c7ed9c6 Adjust the API comments to the current state
ee64b30d05c Check taints as well for control-plane
acf6b500eef Follow up fix to the job status update test
91a7708cdce feat: implements Storage Version Migration API in-tree
04ac13b6b76 Keep providing the deprecated AppArmor CRI API for runtimes that haven't migrated
6a361e1f364 dra api: enable new CEL features by faking their version
7f5566ac6f6 dra e2e: enable more tests for usage with structured parameters
251b3859b0b dra scheduler: consider in-flight allocation for resource calculation
2c6246c9066 dra e2e: move ResourceSlice test
0b6a0d686a0 dra api: rename NodeResourceSlice -> ResourceSlice
42ee56f0931 dra api: implement semver attribute value type
234dc1f63d7 dra e2e: run more test scenarios with structured parameters
d59676a5453 dra kubelet: publish NodeResourceSlices
5e40afca060 dra testing: add tests for structured parameters
3de376ecf69 dra controller: support structured parameters
6f1ddfcd2e3 kubelet: support structured parameters for preparing resources
4ed2b3eaeb6 scheduler_perf: test DRA with structured parameters
d4d5ade7f5b dra: add "named resources" structured parameter model
096e9489050 dra scheduler: support structured parameters
49ee96eed43 pod security test: add user namespaces feature
1f9c271c8c6 PSA: update procmount tests to have hostUsers
23706cb90c8 api validation: validate proc mount against user namespace
e216742672a Job: Support for the JobSuccessPolicy (alpha)
7bd78b06e93 Warn on deprecated AppArmor annotation use
b1341c87957 Revert portion of the GPU testcase
194009fac9d Add integration test for managedBy and cleanup of finalizers
2867be47b31 followup to allow special characters
a92d2a4cea6 noderestriction admission: lock down create of NodeResourceSlice
2e34e187c99 node authorizer: lock down access for NodeResourceSlice
39bbcedbcae dra api: add structured parameters
eb1470d60d5 scheduler: fix assume cache with no index
48daa91857a Update publishing-bot rules to Go 1.21.8
30857658e42 Adjust GPU test to work with latest nvidia daemonset
ffafb2b9ca9 adds portforward streamtunnel unit tests
758dc535107 Enabled conformance test for VAP which is GAed.
df7f5fca27f Don't embed plural exceptions in tools
39e1c9108c0 Support multiple JWT authenticators with structured authn config
2d86cbf2616 Separate feature-gate for AppArmor fields
22068e0cc7b Validate annotation & field match in PodTemplate
06caf32ecd7 Validate localhost profile max length
0eb5f52d06f Rename AppArmor annotation constants with Deprecated
8373f3035ad fix aggregator path filtering to include /
70221e8405e [go] Bump images, dependencies and versions to go 1.22.1 and distroless iptables
6f2842c08c2 Avoid clearing go version in go.work update script
c6673d2346c Bump github.com/golang/protobuf v1.5.4, google.golang.org/protobuf v1.33.0
1395c801098 Update Job conformance test to do a legal update
2e465cd6fa0 Remove _tmp from test/images/image-util.sh
be7ee821b97 Make verify-vendor use verify::generated
778644154f3 Remove _tmp from verify-openapi-docs-urls
4d6f56d3985 Make vendor-licenses use verify::generated
8a3a299c650 Remove _tmp from pin-dependency
813787489b7 Make verify-openapi-spec use verify::generated
e90782bec8e fail LimitedSwap with cgroupv1
5d83282823d Auto updates
de506ce7ac9 Promote ValidatingAdmissionPolicy to GA.
6a4e19a4ec9 add no swap as the default option for swap
27df75c577a dra api: fix status updates
ec325b328db Match annotations against pod AppArmor field
d25b1ded761 PodSecurity check for AppArmor fields
24537a91317 Stop appending AppArmor status to node ready condition
207a965b3ff Update AppArmor e2e tests
bf3c8464bae Implement Kubelet AppArmor field handling
289ec02e8b5 Implement version skew strategy
b7f620c12b7 Generated code
855bc740239 Adds OWNERS files to client-go streaming dirs
94927afb50c AppArmor API changes
6b03166beda update to inject only the list of excluded resources.
7a57bcea6cd fix e2e test for kubectl interactive delete
646d4642038 e2e_node: use kubelet_exec_t instead of bin_t for kubelet
e568a77a931 Support for the Job managedBy field (alpha) (#123273)
5122fe07323 don't watch headless services on kubelet
0595ec79423 implement field selector for clusterIP on services
b502aa6f31d Duplicate v1alpha1 AuthenticationConfiguration to v1beta1
290f2a7e1b6 Fix AuthenticationConfiguration docs around nested claims via CEL
bc7aa13bf79 Mark StructuredAuthenticationConfiguration feature gate as beta
53d38a31611 node-controller require providerID to initialize a node
3f7d4b787b7 apimachinery/meta/types.go: define InitialEventsAnnotationKey const
221ad9f7c25 storage/cacher: mark the addition of a metric for waitUntilFreshAndBlock as completed
01689d0906e add e2e tests for relaxed validation
fa3c1014393 relax validation pod envfrom
e56240b2e1b add validation method at the top level
5b072a59a29 Fix flaky test on multi profiles waiting pod
96a16a7bc9f add relaxed env var name function
af2dadcb18a Add custom debug profiles on top of static profiles
2bd7f4f8e06 storage e2e: update hostpath and mock images
9ac9fdac8f8 Bump npd from v0.8.13 to v0.8.16
4a5fe2decad Addd negative case for the fix in #123570
ec6fd2befac Add options construct to EndpointSlice NewReconciler for the new trafficDistributionEnabled field
b04d1177efb extend deadlines to one minute
3d56ff21fd3 adds comments to tunnelingResponseWriter
33af937b4a5 re-write fallback dialer unit test
e8bbb221d36 removes extra upgrade aware proxy logging; returns tunneling connection close error
2443b3fa694 Fix headerInterceptingConn handling
9e154628430 adds return context in RunPortForward()
8b447d8c97e portforward: tunnel spdy through websockets
79b344d85e3 Add authorization webhook duration/count/failopen metrics
1cf4cec449c Test that separation of streams work by using progress notifies
8345ad0bac4 jwt: fail on empty username via CEL expression
606cae9b479 Add new metric servicesCountByTrafficDistribution
05e1eff7933 Prevent conflicts between service account and jwt issuers
57d1b68dc2d Remove deprecated sets.String
c4163a9cb84 Add label with access mode to SELinux metrics
31d404b182d Prevent watch cache starvation, by moving its watch to separate RPC and add a SeparateCacheWatchRPC feature flag to disable this behavior
eb6abf04623 scheduler_perf: automatically delete created objects
51f86b91249 Change kube-proxy behaviour to consider hints when ServiceTrafficDistribution feature gate is enabled
51a3fa2e6ff Start reconciling on the new field
9513f75089f Add trafficdist package for handling reconciliation of new field
646fd200b85 Run 'make update'
996d11d4e87 Add new field trafficDistribution to Service spec
d72448a41c2 cleanup: if triggerValue has a value, fast break
78fb0bae22f wire up discovery url in authenticator
84852ff56f9 Add `DiscoveryURL` to AuthenticationConfiguration
c61b2a3975a Check length of instance name before truncating
ebcb78df529 promote aggregated discovery conformance tests
b33c5a82928 Switch to newer cos-gpu-installer - v2.1.10
968aefd1bf2 Ensure GCP instance names are a max of 63 characters
c2ccb921ea0 e2e pod: fail fast on failed pod
c134bfe9ebc agnhost/mounttest: add new line to output
db115ca929e [kubeadam] do not set authorization-mode in api server when authorization-config is provided
22adf221a14 print nodename
0da5e8137b8 Add `apiserver_authentication_jwt_authenticator_latency_seconds` metric
a0215badb8d Change `pushd $d; go ...; popd` to `go -C $d ...`
90e6546c689 Use go.work to auto-find internal modules
eb5f31b9e1a Add x-kubernetes-selectable-fields to fields excluded in publish openapi conformance comparisons
6174f199dfb kublet/userns: Add test switching feature gate off/on
4bb508dd303 kubelet/userns: Add unit test
0b69c2bc81d kubelet/userns: Use kubelet maxPods
39c68156766 kubelet/userns: Remove alpha maxPods limitation
4180284dc97 pkg/kubelet/userns: Remove outdated test
4c81e5c9dc6 features: promote UserNamespacesSupport to beta
87a057d4170 KEP-127: kubelet: honor kubelet user mappings
3bada5d4515 test: Bump CUDA images
30256c8909a Promote StructuredAuthorizationConfiguration feature gate to beta
0605a75c5e3 Duplicate v1alpha1 AuthorizationConfiguration to v1beta1
b48b4ebc697 address reviews
1d4be7527f8 increases client-side websocket write deadline to 30 seconds
948d9ca2217 Rely only on `source` cli parameter in conformance/walk
0e9cdf76ad2 Fix discovery v2 conversion registration data race
e2b96b25661 Add a header to go.work
467d5d745c2 Get rid of unused API type NodeResources
d2051503a3e e2e/service.go: remove same node nodeport test
e76fce75666 add authz webhook matchcondition metrics
9633e25579d feat: add csaupgrade option to upgrade subresource
1503997b4f9 Make CBOR roundtrip cases pass through interface{} as well.
3b630ae1af7 test/e2e_node:add more coverage for the kubelet config drop-in dir feature
f34782bb927 hack: re-enable protobindings which use k8s.io/api
9a404b590b1 Filter aggregated apiservice gv
b40b5f86d8e *: promote KubeletConfigDropInDir feature to beta
8854d360a5d printers: add status to jobs table
462dd326c2e Use v2 types with agg discovery
301e804c3f2 Promote AggregatedDiscovery to GA
0593746f609 Remove test for disabling aggregated discovery
dde48918dda promote match conditions e2e tests to conformance
74417b517a0 Tag all feature gates required by a test
99313bea88c kubeadm: remove constants for mirror pod timeout
ded6354a8fc kubeadm: add Timeouts struct to v1beta4.UpgradeConfiguration
ce8bd8584e0 Configure cpumanager policy options in local-up-cluster
ba525460e05 change result size to numAllNodes
45783a630cc increase parallelism on node controller ccm
dce0d8a3d3f increase parallelism on service controller
20b28312ea9 Add namespace to NotFound error for kubectl logs command (#120111)
6b08919473a Revert "[cloud-provider] require providerID to initialize node"
1d653e6185a test: use cancelation from ktesting
d58ff6c0560 allow for cadvisor to detect split filesystem and add some e2e tests
00e09374b6f Make update-codegen avoid sub-workspaces
21715e6bbd1 Fix up go.mod files after reviews
78f82b972f8 Sort publishing/rules.yaml
ac5664086ba Use path instead of filepath for pkg-paths
70d803c1ff3 Make `make` fail better with bad inputs
81ba0f3b44b Make golang::setup-env turn on workspaces
2e2ae029c33 Fix instrumentation tests
706c88863f5 Use go 1.22 for KMS mock
812d5fff401 Remove old gengo detritus
16c26b22cb0 Run latest openapi generation
d6cf98f8ac6 Remove errant +required with no validation code
1a4450f6ffd Get rid of code-generator/cmd/openapi-gen
067a328284e Move import-boss: k/code-generator/cmd -> k/k/cmd
7776496309c EOL code-generator/generate-groups scripts
9cf189f4e02 Fix lint found by golangci-lint
14321ef959b Move doc-generation funcs into only caller
8288c06b2b4 Make hack scripts use `go install` and assume PATH
ea3696dbcf3 Remove legacy references to './output'
242b4e27c05 No need to check nil iterating gengo Inputs
7a084b33528 Renamed gengo SourcePath -> Dir
96b91f364ac Renamed gengo Builder -> Parser
cb86010d206 Gengo utils moved
236ce54aa8a The gengo "args" package is gone
b40e4d7e705 Get rid of gengo CustomArgs
86d2ecbf9a8 Move gengo/examples/defaulter -> code_generator
cb7f0593aea Move gengo/examples/deepcopy -> code_generator
01a18659347 Fix lint in code-generator/cmd/...
b68340e5b6a Get rid of gengo InputDirs flag
299b0453070 codegen: Remove most uses of InputDirs
e78dc862885 Move import-boss to k/k, retool to not use gengo
08ce6a0f148 Get rid of gengo WithoutDefaultFlagParsing
5b2d4384c70 codegen: Make import-boss do it's own flags
1fed36b9842 codegen: Minor: fix wrong comments
6420e646621 Move go-header-file flag to each tool
3a77592b2cb Remove gengo verify-only - unused and untested
d0dd72b01e0 Move OutputFileBase flag to each tool
26a1a13b805 Rename output-package -> output-pkg
6a375b8f4cd Move the OutputBase flag to each tool
875566f997a Type-assert gengo CustomArgs blindly
0ff7dd19430 Rename gengo DefaultGen -> GolangGenerator
2ac119bea94 Rename gengo Target.SourcePath() -> Dir()
fcd6c19c246 Rename gengo generator.Package -> Target
d2c74019109 Drop `generator.Packages` type
b2832697d50 Rename DefaultPackage to SimplePackage
bd31265d23e Make update-vendor log the go env
4627a15ac00 Get rid of vendor baggage in go-to-proto
43206312659 codegen: Don't need to pass --logtostderr
2c0da11c0a0 Make verify-shellcheck take optional args
19b37f046f1 Rename update-generated-* dockerized
94b709c0e22 codegen: Use single-dash for '-v'
dd4e456875c codegen:proto: Use revised API to gengo parser
4b55936ab0c Remove defunct trim-path-prefix
2348e949082 Conversion: Better logging
6dbc754ed68 Retool typecheck to be simpler
4d37426a3ab Update Makefile comments
965341390f8 Remove KUBE_GO_PACKAGE
5a96a56c80c Fix make test-integration for workspaces
4b20f81c194 Fix verify-conformance-yaml for workspaces
d61f2996140 Call verify_go_version at the END of setup_env
e84adf611f4 Remove references to "GO111MODULE"
2a1147a4341 Call setup_env from verify-vendor
d2a4a1958fc Tidy update-vendor-licenses for workspaces
d772f7719dc Remove defunct references to "vendor"
7f5982e7084 code-generator: Remove now unused helper function
10c32b3e2f4 Get rid of most references to GOPATH
3c2940f2ae2 Kill off PRJ_SRC_PATH
651297220ef Fix pin-dependency for workspaces
1c3e701e0c9 Fix verify-spelling for workspaces
032dd890a57 Fix verify-external-dependencies-version for workspaces
bff2e92edd1 Fix update-netparse-cve for workspaces
fad5bb1cdd4 Fix lint-dependencies for workspaces
b2b9de88eba Fix update-import-aliases for workspaces
530c4352fb4 Rename new::setup_env back to setup_env
bece9bc3f4d Remove old::setup_env
f9ca58efe9e Remove run-in-gopath.sh
b32e2072569 Fix last run-in-gopath user: typecheck
91efe7e5712 Fix import-boss wrt gengo/v2
c8b61bb98b4 Fix register-gen wrt gengo/v2
f772410082b Make code-gen subprojects work on gengo/v2
251b22a7f89 Make update-codegen protobuf work on gengo/v2
b0a70dec4ab Fix go-to-protobuf wrt gengo/v2
7506048d3f2 Make update-codegen client work on gengo/v2
b961b39efa7 Fix client-gen wrt gengo/v2
130a9f8426e Make update-codegen applyconfig work on gengo/v2
5ddd6772a4c Fix applyconfiguration-gen wrt gengo/v2
9c62235266d Make update-codegen informer work on gengo/v2
0aa98ee8e38 Fix informer-gen wrt gengo/v2
46665fa76a9 Make update-codegen lister work on gengo/v2
b82527b6fb5 Fix lister-gen wrt gengo/v2
1965f56f59d Make update-codegen openapi work on gengo/v2
5475797f433 Make update-codegen conversion work on gengo/v2
ed35118664b Fix conversion-gen wrt gengo/v2
1e96f4e50a7 Make update-codegen prerelease work on gengo/v2
fd2ca0a3444 Fix prerelease-lifecycle-gen wrt gengo/v2
b5b8c9d8698 Make update-codegen swagger work on gengo/v2
8420278c7fe Make update-codegen defaulter work on gengo/v2
1fb4e824ba0 Make update-codegen deepcopy work on gengo/v2
d5e8e9c29cf Change update-codegen.sh to use new setup_env
db590ecd896 Fix scripts to avoid testdata
514dd0e1f6d Convert all gengo references to gengo/v2
6f2f3735e04 Re-vendor latest kube-openapi and gengo/v2
b3dd7241741 Remove dep on set-gen: gone in gengo/v2
487cd027118 Change verify-generated to new setup_env
c79e5abec42 Change test-e2e-node to use new setup_env
7a7dff1eeb4 Change verify-imports to use new setup_env
3be358ecc15 Make verify-conformance-requirements use new setup_env
08622aa6858 Make verify-no-vendor-cycles use new setup_env
854037d5b52 Change update-generated-api-compatibility-data test to new setup_env
25b97dae82d Change ipamperf test to new setup_env
238b33de3be Change test/instrumentation/update-* to new setup_env
cbc887a1d6b Change verify-govulncheck to new setup_env
024f4e9c09f Change verify-generated-docs to new setup_env
35aa5b3c698 Change verify-fieldname-docs to new setup_env
0d30f918fae Change verify-description to new setup_env
bad67dc973c Fix golangci-lint for workspaces
3163fc4f69a Change update-golangci-lint-config to new setup_env
714f8a0855f Change verify-yamlfmt to new setup_env
3dc447708b8 Change verify-gofmt to new setup_env
d785f13c059 Change verify-licenses to new setup_env
974276e4a08 Change update-openapi-spec to new setup_env
2ee339b0236 Simplify verify-cli-conventions; use new setup_env
2924b90d75a Change verify-api-groups.sh to s/vendor/staging/
b725fd20c2a Fix update/verify-mocks.sh
58ab5eea89f Remove some references to GOPATH
5f490b4fe89 Clarify, document KUBE_OUTPUT_* variables
e6dd36759f0 [kubernetes/scheduler] use lockless diagnosis collection in findNodesThatPassFilters
e9b30a0d29b fix UT failure TestPrintIPAddressList
c05e541793b Bump cAdvisor to v0.49.0
6c1a935da2d Keep streams from being set up after closeAllStreamReaders is called
a51a5b46223 kep-3716 GA, remove feature gate
26484df2108 Make websocket heartbeat test timing less flaky
fc86811cbe8 Avoid logging binary junk for frame write failure
e2575228890 add transient types to admission test.
b57d7d6ad79 add min valid jwt payload to API docs for structured authn config
8b035cd582b Revert "Update kubedns and nodelocaldns to v1.23.0"
e38531e9a23 Add `image_id` to CRI `ContainerStatus` message
e6ed0f37c65 Add apiserver_watch_cache_read_wait metric to cache refresh time
d6851ec7356 scheduler_perf: fail when input YAML is invalid
f47e0cb779a Rename KUBE_OUTPUT_BINPATH -> KUBE_OUTPUT_BIN
aaf6fc07d82 Make build scripts use Go import paths
f3c8e92def7 Clean up test.sh and get rid of GOPATH
8cb8535d9cd Excise KUBE_GOPATH from coverage build
0af31064421 Dedup binaries when building
9256031a871 Workspaces: excise vendor from golang.sh
df42d56947f Remove vendor from ldflags
81d932906aa Make golang::binaries_from_targets smarter
8b579b23473 Change the build_binaries path to use modules
65b841c077e Generate go.work files
e54f2296ed3 Require Go 1.22.0 in go.mod
e2b529fda73 Fix a test that doesn't build on Windows
ffa183a7a41 generated files
01db4ae9e74 Graduate PodSchedulingReadiness to stable
466019b1b27 kubeadm: implementation of API types
3b5a79f6471 cleanup: add zero as a value for token create duration and act as default, added test, updated the help text
d303cec1183 Update test
55e9d509e61 Promote KEP-2681 to GA in 1.30
a3dfba8f506 Create e2e test for VolumeAttachment endpoints
b115df227ab update tests due to change of NewPluginInitializer.
64ee859aa82 make ValidatingAdmissionPolicy ignore excluded resources.
5b1fffa3e40 add resource filter to admission initializer.
a0dc949ce32 Improve error handling for json path results
61d6026d23a Fix field paths
45742d1d9af Add integration tests
31f7efab20f Add cost stability tests for chained and nested CEL comprehensions
7ef3eea8a73 Generate code
291703482d5 Add selectableFields to CRDs
d49949b6420 Bump cel-go to v0.17.8 to pick up CEL estimated cost fix
fa44b9ca150 Fix panic in getNpdPodStat
f46df21cad3 update comments on API
5f7c36a4e97 kubeadm: fix a bug in default apiserver "authorizaion-mode"
2a22b6f6b8d Add information about SELinux test tags
ba3562776f1 Update SELinuxMount stage/unstage tests to allow RWO
52558a03104 Add e2e tests for SELinuxMount
92bdc7b3873 Ensure that initial events are sorted for WatchList
58a826a59a7 graduate MinDomainsInPodTopologySpread to stable
20ded275705 apiserver/storage: improve RunWatchSemanticInitialEventsExtended test
e663285ccf4 Add `image_id` to CRI `Container` message
3327bb36749 CHANGELOG: Update directory for v1.30.0-alpha.3 release
b394aac4ce3 Use the websocket protocol header, verify selected protocol
03812ddb169 streamtranslator counter metric by status code
e89dddd4af6 jwt: strictly support compact serialization only
dc4c92f5a56 add support for map
4fe78a17ddd Add duplicate key and field case-sensitivity CBOR decode tests.
374e4b56861 Address review nit, use longer variable identifiers.
3852d1c0c15 Make explicit check in CronJob if Job is successful before setting LastSuccessfulTime (#123380)
cb39dfc9deb Promote ImageMaximumGCAge to beta
f832692d980 uid is also supported in field ref for downward api
ecaf2093f51 storage/watch_cache: rework getAllEventsSinceLocked
d629d3fa355 storage/cacher: add TestGetWatchCacheResourceVersion, TestGetBookmarkAfterResourceVersionLockedFunc
f90bcf649e0 storage/cacher: ensure the cache is at the Most Recent ResourceVersion when streaming was requested
0e2b4472694 kubelet/userns: Test new functionality with feature gate enabled
658b45cd035 kublet/userns: Test new functionality with feature gate disabled
1fb1218f57f kublet/userns: Switch TestGetOrCreateUserNamespaceMappingsDisabled to table format
b2a92406efd KEP-127: check for runtime handler userns support
024146f7058 KEP-127: the kubelet stores runtime helpers
ea69a5ea987 in the new output API output.kubeadm.k8s.io/v1alpha3 modify the UpgradePlan structure to include a list of multiple available upgrades.
c3caddf3e69 e2e_apps:stop using deprecated framework.ExpectError
a147693deb2 remote command turn on feature gates
0a1edf8bda8 Re-add KUBE_TIMEOUT explicitly to make test
dd1e617ba0b Scheduler first fit (#123384)
ca41a9222d5 Fix makefile variable expansion for test-integration target
aefaf66d2b4 remove unused service keys from aggregated discovery
0045ef5294a system:kube-scheduler: extend the RBAC with pods/finalizers
fd5019a5468 ktesting: ut flake fix for CI
a24f2c11923 Validate restartable init container state transition
c99996efab1 bump metrics server to v0.7.0
0ab006b8a1e node-controller reconcile node labels on each update
03bd3e25b16 [cloud-provider] require providerID to initialize node
099f26296b2 integration test for cloud provider
ef83ec27536 don't use leader elect on ccm integration tests
08f8be99039 fix goroutine leak on legacy-cloud-provider gce
3636971c39c add aojea as reviewer
b4b4784c6c4 enable ip aliases on clusters by default
3908a46b222 bump cloud controller manager to v29.0.0
b584b87a94d kube-controller-manager: readjust log verbosity - Increase the global level for broadcaster's logging to 3 so that users can ignore event messages by lowering the logging level. It reduces information noise. - Making sure the context is properly injected into the broadcaster, this will allow the -v flag value to be used also in that broadcaster, rather than the above global value. - test: use cancellation from ktesting - golangci-hints: checked error return value
dc7114fa911 fix default IPMode set in UT
9f6b48f1e7f fix node lifecycle controller panic when conditionType ready is nil
0f083966a7a set actual podToMake values
840ef149071 ktesting: doc updates and fixes
fb3ab538221 Replace fmt.Print with printer in upgrade plan code and fix configVersions are not printed when output is json or yaml
e6d6d8e14c2 feat: print etcd ready status
07e0a80216c graduate HPAContainerMetrics to stable
df92ad9bcbf Run autoscaler as non root in kube-up
d7735f32d0b Skip autoscaling tests when we hit rate limits
1ecd4053de7 ktesting: skip timing check in unit test
8980b4b846c Revert "fix flaky ut in TestCause contexthelper_test"
18ba3b388ee fix(scheduling queue): ignore events that interest no registered plugin
bbef156ef5d update 129
b3216214f95 Fix sample-apiserver rbac for v1.27 and bump e2e
e2ff63103df fix for persistent Horizontal pod autoscaling failures
148757903ae release v1.29.2 for sampleapiserver
247233f7b40 bugfix: modifying argument causes wrong fieldpath
e2506906d61 kubelet: fix flaky unit test with TestRotateLogs due to improper handling of goroutine in the tests
75238e592d6 kubeadm: remove bridge-nf-call-iptables and bridge-nf-call-ip6tables preflight checks since not all the network implementations require this setting
e1ac3e1de76 Fix kubectl proxy e2e test
52dd6030551 initial e2e for aggregated discovery
13dddca6a2c Add "disable-force-detach-on-timeout" flag to kube-controller-manager
4760e0cc44f refactor: use shared CollectParams from VAP
64cd09f7208 refactor: use match from generic pkg in vap
96c418a7b73 add generic policy dispatcher
9f9858b6caa Hit APIServer cache when testing healthiness
2e920365766 Rename "new" reconstruction just to reconstruction
e9193b4f336 e2e: remove dead code for providers
d816ab7657b Promote LoadBalancerIPMode to Beta
4cb4228522a ktesting: improve unit test coverage
4ffa628ead5 ktesting: add missing methods to error context
dc6abc3ff8f ktesting: add Underlier type alias
fe10bfb044f ktesting: fix ExpectNoError
2a2542289f9 Remove usage of NewVolumeManagerReconstruction feature gate
513c2a3690f Mark NewVolumeManagerReconstruction GA
78c96102351 hack/tools: update to golangci-lint v1.56.2 + golang v1.21
cc515bd8f13 Job: Fix test case names for the validations
0c4df640920 fix api
aaa9b6ebd75 Fix NFS related issues on GCP/Ubuntu
f3cb5059a7b kubeadm: fix a bug during kubeadm upgrade, where it is not possible to mount a new device and create a symbolic link for /etc/kubernetes (or a sub-directory) so that kubeadm stores its information on the mounted device
9bc5257c450 [KEP-3962]Add feature gate for MAP (#123425)
11ed3032c09 test: infer gvk of objects
acf1d850c61 refactor: handle paramKind directly
83751630081 Add test to validate non empty pod log dir
81e4c3002a7 add nil check to avoid passing fakeCh for all discovery tests
ecaf269d3c1 add new test cases to test json output when fetch kubeadm config from server
dd890b899fa Make PodResources API include restartable init containers
16794502eeb kube_codegen: expose external-applyconfigurations flag for client generation
f6682370b1a fix flaky ut in TestCause contexthelper_test
98437cb4be6 fix json output when fetch kubeadm config from server
ce6bacb5acd fix persistent volume docs link
6726e656190 Aggregated Discovery, mark stale before initial health check
5fb002147bd Remove unused Resolver interface in pkg/proxy/util
43ba0bd53b7 kubeadm certs check-expiration support json/yaml output
4172d364865 Codegen: use plain find instead of git ls-files
527d2ea9d0f Codegen: use plain grep instead of git grep
9f4b82bf3b0 Cleanup: s/depreciated/deprecated/g
d7028a8ed50 Add SELinuxMount feature gate
ba8fcb5ef6c kubelet: don't disable gc if max age is specified
8dddf6d3140 e2e_node: add test for max age after kubelet start
a8ea9363648 image gc: don't start until max age has passed since kubelet started
6cd78bc5fc5 node e2e: add image max gc test
be7856e3402 e2e_node: factor out waitForKubeletToStart
da8ffcd1dc3 Switch 'ContainerCheckpoint' from Alpha to Beta
5a8579a3e40 kubelet/userns: Remove tests that fail as root
cb3180950ef dra e2e: fix stack unwinding in helper function
c6b483ea05c kube_codegen: expose plural-exceptions flag for client generation
fe8e896df87 Improve the doc comment for the Job status.active field
3c9c141d980 exchange the order of comparators
7b108d8ee19 Add testcase covering unknown plugin config
611f8ba8153 bump nfs-provisioner-to-v4.0.8
c74ec3df094 graduate PodLifecycleSleepAction to beta
e158a83d9d3 KEP-127: Add UserNamespacesPodSecurityStandards e2e test
65faa9c6800 Consider initContainer images in pod scheduling
b3ba6bda2b4 Add missed clusterEvents to UnrollWildCardResource
fa6429a31c9 Use new 1.4 NFS image
ec394ec53db Fix NFS related CI failures
c29450eb009 kubeadm: apply retries to all API calls in idempotency.go
0f49a1e36e0 fix panic in CRI stats of windows
dfc598b6feb Bump containerLogMonitorInterval to the minimum allowed
01ce36dd9e3 KEP-127: add RuntimeHandler message to cri-api
ae0a813be10 Fix tests after rebase
c8b4d8ebedb kubelet: add reason field to image gc metric
d3a0e296def Update x/crypto to 0.19.
f38852768e3 bump the stability level of apiserver_storage_size_bytes to STABLE
5fcbc9d2fca Fix permission denied error
ff4f2907c51 Use non-default directory for pod logs and limit path to ASCII characters
19d9405a1c3 Update comments and error messages
d9e2487d0c3 Add PodLogsPath to kubelet config
3e431adb036 Add AdditionalLabels to cloudprovider.InstanceMetadata
7db7222592e kubeadm: introduce the WaitForAllControlPlaneComponents feature gate
d5d3eddb95b Add allowed/denied metrics for authorizers
59bf8b02e63 Refactoring to encourage use of switch case
7b2698a5e5c Add handler to run watch serving in separate goroutine
c1f2fe7bcb0 golangci-lint: optionally skip it during "make verify", II
7faa8bbac3b Add e2e test for kubectl interactive delete
6d5133f3ecd add functions to policy accessors for getting match information and params
def05a20e22 flake: avoid flake by ensuring params appear in the initial list
57fc5d24013 Add decode and roundtrip tests for CBOR marshaling.
871279978fc Add roundtrip tests for all CBOR examples in RFC 8949 Appendix A.
71479b55777 [kube-proxy] add log verbosity to endpoint topology hint loop.
f84d643c204 Use the Defer for pod replacement policy
066421f108c Add CBOR Serializer implementation.
ab8cdae3b1f Reset metrics in the Job integration test before testing
ec7e051bc00 Always test PDB's during service upgrade test
115dc90633f Increase accuracy of the pods_creation_total metric and improve test exec time
b5b62d4f0ed Update kubedns and nodelocaldns to v1.23.0
0feb1d5173c Add integration test for multiple audience in structured authn
bd27c99262e move OWNERS from validating to all new parent policy folder
5dc92ada068 Implement authz config file reloading
3a98e60a719 Move authz construction to reloader
2b00035b5fc Split construction of authorizer / ruleResolver
1fddc948ed8 Split node/rbac/abac construction
49124293c3c Store constructed node/rbac/abac authorizers
75a30692945 Remove unused lookupIP field in NodeIPAM Controller struct
41435d045db Guard empty status.acceptedNames
18c563546a7 support multiple audiences with jwt authenticator
3cc3b002ba1 CHANGELOG: Update directory for v1.29.2 release
b202d053fa7 CHANGELOG: Update directory for v1.26.14 release
cf99360c1f3 CHANGELOG: Update directory for v1.27.11 release
14045bf340e CHANGELOG: Update directory for v1.28.7 release
aac43dc96f2 Bump github.com/fxamacker/cbor/v2 to v2.6.0.
5f4cb8b09a4 Move kube-apiserver authz validation functions
b5e0068325d Support all key algs with structured authn config
630ff96f9d6 Revert "Scheduler first fit"
e8b08cd056f e2e_node: replace `registry.k8s.io/stress:v1` with agnhost
5d861b6f12e promote agnhost to v2.47
aa772d77fbc e2e pod: dump pod in unexpected phase
008b075b462 DRA: fix data race in resourceclaim.Lookup
9c726b015c5 agnhost: v2.47
2383fbe53a8 CHANGELOG: Update directory for v1.30.0-alpha.2 release
b8a59346fe6 test/oidc: extract key type to allow testing different algs
b7e70f0e000 update-vendor after package rename
3094395fa76 bugfix: avoid NPE possibility by making composition environment global
18fbc48b015 refactor: implement VAP off of policy plugin fw
a6366573d5c refactor: create generic policy plugin type similar to webhook
2fa02552ebf remove comment
48b1576980d use table test pattern and replace hardcoded values
19da90d6396 Add AudienceMatchPolicy to AuthenticationConfiguration
6ff675310c9 image-util.sh: fix `gcr.io/.../agnhost:2.46-linux-amd64 is a manifest list`
39606af8c3d golangci-lint: optionally skip it during "make verify"
7ee89440c39 agnhost: v2.46
07c701fecb6 agnhost: merge registry.k8s.io/stress:v1 (github.com/vishh/stress)
8876b68a604 golangci-lint: add hints for error wrapping
8e2c1b559ac update images to have the full semver in the tag
1b1b902f81d codegen: don't nuke files if only verifying
e53ac426335 e2e labels: add placeholder docs for existing items
445443bd8a5 e2e labels: ensure that the lists remain sorted
a834bd84b54 cri-api: KEP-3857: Recursive Read-only (RRO) mounts
77241d31253 Add `apiserver_encryption_config_controller_automatic_reloads_total` metric
4ae2b3f75f7 Revert "kubeadm: increase ut coverage for app/util"
0e6409873a4 remove --v arg from kubetest2-tester-ginkgo test args
7dd624d3443 ci: bump kind to latest for kms jobs
5b899d9303b make use of latest snapshot controller version v6.3.3 in the deployment
d697f43d738 refactor: move matching logic into parent policy folder
8b14116509a refactor: move vap into parent `policy` folder
8b26b6eec1b refactor: move celmetrics close to its usage in vap
5ba3883be02 Adding unit test for makeWinContainerStats
5c825d8a226 core/v1: remove comment about non-existing constants
a8abed80153 Update publishing-bot rules to Go 1.21.7
da0c9a93aea scheduler_perf: use dynamic client to create arbitrary objects
c46ae1b26ae scheduler_perf: use ktesting.TContext + staging StartTestServer
63aa2615834 ktesting: add TContext
75210d0840e Clean up dead code in node controller
593b1c6c63e Do service.spec.LoadBalancerSourceRanges validation inline
d9302157944 Update service.Spec.LoadBalancerSourceRanges validation tests
73cc31847fc fix
eec508e488f use patch number
ddb0b8da9db [go] Bump images, dependencies and versions to go 1.22
ab8c784ee97 kubelet: enable configurable rotation duration and parallel rotate
36904475db4 kubeadm: increase ut coverage for app/util
d42d9a9b079 features: promote NodeLogQuery to beta
3e777540fda add test case for error inside variables.
13c848f562c self nominate kevin hannon as a sig-node reviewer
3a813049d3a add aojea as feature-approvers on OWNER_ALIASES
6d6398ef926 chore: adds consistent vanity import to files and provides tooling for verifying and updating them. (#120642)
e821e0de15e remove error wrapping from builder
de6989041a7 added OWNERS to test/e2e/feature/feature.go
0f5cf6c1cd9 Add image pull duration metric with bucketed image size
c8d18da4377 Scheduler: Fix the feature stage of preemptionPolicy in the API comment
1ef469343f0 Job: Use generic sets to avoid unnecessary string casts in valiations
42672ee2ea1 Make comment about reject action more accurate
c7e48f1ebf5 kube-proxy: flush nftables base chains on startup
7a56b6e3f7a Add validation.IsValidCIDR
658e3308f34 etcd: Update to version 3.5.12
fc610f0941f kubeadm: use current-context when validating kubelet kubeconfig
105ec3d48fb fix linter failures
852c03a49b9 check key is set before deleting from map
4d8c3530f57 fix regular bound service account token test
ac9482d15f4 update distroless-iptables to v0.5.0 debian-base to bookworm-v1.0.1 and setcap to bookworm-v1.0.1
eceaed8c075 Put validation utility packages used by API validation under API review
1ae7553744a Revert "print error message regardless verbosity level"
e087acc7917 refuse to allow apiserver to startup if ServiceAccountTokenNodeBinding is enabled without ServiceAccountTokenNodeBindingValidation
1085c0b15a4 Bump sample-device-plugin image version
9e37ccedc7f apiserver: refactor handleError in endpoints/filters
6a98704229a Bump to latest version
63e91ed0232 remove deprecated framework.ExpectNotEqual
dfc20d19c8a fix integration tests now JTI feature is enabled by default
cae710d9e96 kublet/userns: Test error messages on init failures
1eab8be822b KEP-4193: promote ServiceAccountTokenJTI, ServiceAccountTokenPodNodeInfo and ServiceAccountTokenNodeBindingValidation to beta
5855f5178f4 Fix the syntax error in the comment of the checkQuotas method. (#121428)
4ddf69a8358 Remove checks of the CloudDualStackNodeIPs feature gate
eba4fd82eba KEP-3705 CloudDualStackNodeIPs to GA
deec79ad8d6 kubeadm: increase ut coverage for apiclient/idempotency
7f12735fffd use authentication.kubernetes.io/issued-credential-id audit annotation in serviceaccount token registry endpoint
becb25c01f9 Bump version for the sample-device-plugin image
f97dec28407 Add comments about wildcard clusterEvent
31c86e38ac6 Update in-tree azureDisk and azureFile tests
0cd9d40a654 Test_Run_OneVolumeDetachFailNodeWithReadWriteOnce use waitForAttachStateToNode instead of time.Sleep
d81023db30c When matching clusterEvent, we should consider the "*" additionally
3a4c35cc89c Comment on QHint for CSILimit when CSINodes are added (#122758)
960d7fbf094 add admission tests
a0770386abe fix copy paste
b0c9a18673b add TestPIDPressure
195a7747180 eviction_manager: add unit test for PID pressure
774d666d1ce kubeadm: better checks if the node is CP during "upgrade node"
f47c2a1ba63 Revert "kubeadm: fix a bug where the uploaded kubelet configuration in kube-system/kubelet-config ConfigMap does not respect user patch"
9027049f2ce local-up-cluster.sh: Use config file instead of flags for kubelet
dc832c6e59e add support of variables for Type Checking.
b636984004c test: remove unnecessary skip healthz check from test
71bf5630343 Job: Stop unnecessary sting casts in validations
21ba0d59d3a refactor type checking to use CompositedCompiler.
7cab0ad2d2b apiserver: warning should not panic when request times out
c82c80099d8 add some comments, redesign style of enums in simple and long view, fix tests to these new changes
a56d483df06 kubelet/userns: Use t.TempDir()
0f7b9cc4f53 pkg/kubelet/userns: Simplify error messages
fdc20de5004 kubelet/userns: Wrap error message
065066d1aba kubeadm: support digests in DeployedDNSAddon()
1db6e434f3a build etcd image v3.5.12
227c1915db3 enhancement(scheduler): share waitingPods among profiles
8bf03e83d3e Stop claiming --node-labels is alpha
2cab79710d5 kubeadm: enhance encryption algorithm support in v1beta4
2dd81563a96 Update to runc 1.1.12
60483ac1824 CHANGELOG: Update directory for v1.30.0-alpha.1 release
d190fa3e7de Fix race condition between external-resizer and kubelet
593654eaa3b Fix cleanup of file subpaths
97640d3e2de fix test test should assign default SC to PVCs that have no SC set failure
9d4997ea69e change the extractEnum function to add limit, intent and add tests for new behaviours
67926c3777c Update in-tree vSphere tests
01dbb85974d fix: correct incorrect comment & function name about SchedulingGated
717a0002b75 [gce_runner] use metadata file when values have special characters
b8c19dd1d21 Fix deprecated version for pod_scheduling_duration_seconds
77f03c17449 Don't export single-use types
01155f59c35 Merge pkg/util/config into pkg/kubelet/config
049261aca1b Delete unused config utilities
e198938671c Remove deprecated comment about cleanup the target_path of CSI volumes
77fed9d2b7b fix GenerateUnmapVolumeFunc missing globalUnmapPath when kubelet tries to clean up all volumes that failed reconstruction.
0283498ab40 fix gofmt error
0c7281624ea change style of enums
f589b911f85 node_controller: improve taint eviction queue add worker time args
71559bd0267 bugfix: dont skip reconcile for unchanged policy if last sync failed
c222db1429e fixes kubectl explain to shows enum for field types if they were defined
2216361c59e fixes kubectl explain to shows enum for field types if they were defined
d7c1a61e04e kubeadm: increase ut coverage certs/renewal/readwriter
7f2d78656ca Updating FG based tests
8bc63027d9f remove extra space in log
2c829cf29b6 chore: Refactor network load balancer creation in e2e tests
6cc99274872 Add DEPRECATION for CloudAllocator in node-ipam-controller
da05076868a Reorganize a bit of winkernel proxier setup
33bd5fb3c44 Remove unused param to winkernel proxier
4716bf8bd45 Fix issues found by linter
ee86ca9f13b [go] Bump images, dependencies and versions to go 1.22rc2
c9991e42704 [go] Bump images, dependencies and versions to go 1.22rc1
76ea1420516 Use gcloud for gce_runner
a62579a5ebe fix(scheduler/metrics) correct the documentation on plugin_evaluation_total
1baf7d45866 Corrected some spelling and grammatical errors
a7cf7fe55a2 Bump shellcheck to 0.9.0
20ec766adfb bugfix: disable ratcheting for typemeta fields
7353f52bc8c test: add CRDValidationRatcheting e2e tests
768c169dd82 feature: promote CRDValidationRatcheting to beta
5f75c35edf1 apiserver: allow zero value for the 'nominalConcurrencyShares' field
85684ec4852 fixing issue with GetCPUUsageNanoCores on Windows
d60a25b2db5 Add DeletionHandlingObjectToName
a15f4376697 KEP 3458 - promote to stable
ceabc4aba84 DRA: always returns Unschedulable in PostFilter
6cf42037512 dra scheduler: reformat code
a809a6353b6 scheduler: publish PodSchedulingContext during PreBind
5d1509126fc dra: patch ReservedFor during PreBind
6a60a1ddadd Mark conntrack/fake as linux-only, add non-OS doc.go
5ab9f3d15f0 kubeadm: fix the err check bug in certlist test
ebba2d4472d Move some code in the proxiers
536364266c1 Sort messy kube-proxy imports
c2c4f4616d4 cleanup structured authn/authz error logic
c89dcf52b12 convert the expectedValues to be cel.Val.
d6991638029 extra case for affirmative has(map) test.
139c6daf302 Missed a spot! testing verify-licenses.sh
7801173f6ed get the error claim in dra
6e5e1d03177 Remove useless org mutate code
09a1abda998 Update vendoring to take new CBOR library dependency.
ef27338bef9 Add skeleton CBOR package and introduce library dependency.
89db64e0534 collect generated files and logs
39afee443f1 enable testing import check for kubeadm binary
ec1516b45dc kubeadm: don't fail post upgrade in EnsureAdminClusterRoleBindingImpl if the error is crb already exists
4d6c0ba518d kubectl debug: add sysadmin profile
bcf512693a0 kep-3836: promote to beta in 1.30
8bccf4873bd change --nodeport-addresses behavior to default to primary node ip only
9b96ab46eee Fix license verification script
1ad143177c3 Added metric resource name to HPA table (#122804)
af35b7ff2e0 Update Changelog with Release Notes 1.30 Team
b98e47dd801 tests: Cleanup for Job e2e tests global vars (#121695)
e490439262f drop deprecated pointer package
83de1586e08 boilerplate_test:fix pylint warnings
4473dfebbf9 fix boilerplate test
9dc1da1e5bf boilerplate_test: fix bad indentation
65d67101e72 Drop vsphere cloud provider
d0c323fb8fb fix convertField and its comments.
df9620c9f6f add support for equality check.
9bbdbc510eb mutation library for CEL.
eafa9bd24b2 Add validation tests
7972f0309ce Fix service account token projected volume validation
35004e8f77c Fix AtomicWriter may not create user visible files after kubelet was restarted
1d59d6b6c65 Use validation.IsValidIP in a few more places
519dd6887dc Make validation.IsValidIP return a field.ErrorList for consistency
f999b24fad9 Expand IsValidIP unit tests
8fc691be940 Drop validation.IsValidSocketAddr
09abfa46be8 Update knftables, with new sigs.k8s.io module name
367bbd01d76 update testcase on podreadytostartcontainercondition
8371e4cf931 quick break when met
740b4c456d7 k8s.io/client-go: add OverridingClientConfig overriding RawConfig
db80aa56ed8 k8s.io/client-go: add ClientConfig option to override raw config
e92a4debcbd Fix lint warning about unchecked error
d2c1a23a8ae Add stub methods for kube-proxy on non-linux/windows
8b22cb46969 Revert "Make verify-typecheck.sh only check valid targets for a platform"
b88fefad1f8 Add note about directory structure
62eb7cb4f93 make update: add update-golangci-lint-config
31de75f62cb KEP 3836 - promote to beta
0ef42133a18 Reduce verbose logs in MetaAllocator
b8df7e76845 unittests: Fixes unit tests for Windows (part 10)
b46455ddfe9 Fix to previous EnsureAdminClusterRoleBindingImpl fix
b18caee5dfc Fix EnsureAdminClusterRoleBindingImpl error handling
25a40b1c7c3 pkg/proxy/nftables: handle traffic to node ports with no endpoints
4b40299133e pkg/proxy/nftables: handle traffic to cluster ip
01d7de5464b pkg/proxy/nftables: rename constant names for nftable objects
80ca91c90c5 pkg/proxy/nftables: refactor packet tracer address matching
d23483dd7c2 pkg/proxy/config: rename import aliases
212c5dd2162 pkg/proxy/config: use blank identifier instead of ignoring error
43539c855f5 e2e framework: unify logging, support skipping helpers
dd0cee48955 e2e node runner: remove dependency on e2e/framework
3bf2bf81913 chore: Cleanup in-tree credential provider azure and cloud provider azure
a05db0dd22a Add retry around create
ed289f875e3 Remove some dead options in KubeSchedulerConfiguration
1645667297b compatibility fixture
6d65c063caa describer: improve job and pod template output
1a38fb3c354 init.sh fix
a2be736c027 vendor update
0bc023bc28c Add aggregated discovery v2 types
6ae264464ca Make local-up-cluster non-verbose by default
41e706600ae client-go/reflector: make UseWatchList a pointer
0ba903fd574 kubeadm: enable parallel pulls of images
510df7eab17 kubeadm: add validation of ImagePullPolicy in the API
754ffa3477c kubeadm: add ImagePullSerial field to v1beta4 NodeRegistationOptions
a4afaeda372 print error message regardless verbosity level
de014579a18 e2e: enforce usage of WithFlaky instead of [Flaky]
e3ee4e35851 e2e: replace klog.Fatal with assertion
427e0fadbac Fix flaking test: CSI Mock workload info CSI PodInfoOnMount Update
2cdd9a71306 kubeadm: use separate context in GetConfigMapWithShortRetry
5691a7899e7 Fixing bug with windows criStatsProvider sometimes not reporting AvailableBytes correctly
1192f313b8b Fix local-up-cluster on darwin
e2222f1e304 dependencies: klog v2.120.1
8a89a1f5a5c mark density tests as flaky
18f0af1f000 dependencies: ginkgo v2.15.0, gomega v1.31.0
26a79e4c0ba kubeadm: special case context errors in GetConfigMapWithShortRetry
365cbe1b41f remove formatted newline
fd5353eb721 check for error message and type
8668c7f718f kube-controller-manager/options: unit test WatchListClient feature gate for command line options
3a6060745cc Remove unneeded permissions of node-controller role
83ff8a2f49f Negative index regression test for json-patch (#122625)
f40ff3d9ffb CHANGELOG: Update directory for v1.26.13 release
14294ce870f CHANGELOG: Update directory for v1.28.6 release
4a9906fd340 CHANGELOG: Update directory for v1.27.10 release
4f8aa21da88 CHANGELOG: Update directory for v1.29.1 release
f8e25eff926 client-go events: also support context for NewEventBroadcasterAdapter
ee354366f58 sig-instrumentation: add rexagod to other groups
6451fb0fe2c kubeadm: increase ut coverage for certs/renewal/manager
8f4c9c7605a k8s.io/component-base/logs: replace klog text implementation
2ce04fc04bf flag PersistentVolumeLastPhaseTransitionTime field as beta
3aa366a3eb1 e2e: remove dead code
041e97af1f0 fix evaluate resource quota if a resource is updated when the InPlacePodVerticalScaling feature-gate is on
5ff42b23687 fix issue with using feature HonorPVReclaimPolicy in csi-provisioner
98054dd9d3a Clean unused code in kubelet server.
d21fc96db35 Fix type assertion error in init and join commands for kubeadm
8a32f346a09 kube/features: improve unit testing known/registered features
995135973d6 Inject feature gate instance into client-go for kube components.
54a6e6a7729 kubeadm: keep a function with short timeout in idempotency.go
ec89154276f Handles clean up errors
80fbc4c319b Revert using ginkgo.DeferCleanup as it doesn't run in the correct order
66ea02684b4 e2e: add NodeLogQuery tests for Windows nodes
c65d9e4d59f Replaces path.Operation with filepath.Operation
fcb51554a19 Plumb the conntrack.Interface up to the proxiers
cdf934d5bc9 Remove redundant iptables/nftables conntrack cleanup tests
db12cbe2ae5 Add conntrack.Interface, test CleanStaleEntries
51063cb5c41 Clean up conntrack unit tests
46c4249e3ec Remove code to be removed in 1.30
5cfd75a84ea Ignore vendor folder on client code generation
f29d6970c96 doc(scheduler_perf): enrich the documentation
7773b0f53fd client-go/features: introduce WatchListClient feature gate
9263a66aec7 kubelet: make log more clearer for not create a mirror pod
d652596e429 Remove redundant string conversions in print statements
0d366dd99ae codegen: Use long flag names for clarity
0f849d3b55b update-codegen: rename "base"->"file" for clarity
f2b550180c6 codegen: don't use xargs w/ maybe-empty input
582312d9650 Sync json-patch ver to the same as everyone else
7162b930bec code-gen: Use the passed FlagSet, not hardcoded
8b8f0a70cd3 Make verify-fieldname-docs actually error
0c3e49e64c0 Run test/instrumentation/update-*
5f876b9d0a5 kubeadm: switch from ExponentialBackoff() to PollUntilContextTimeout()
caf53114132 kubeadm: start using the Timeouts struct values
374e41cf663 kubeadm: replace deprecated wait.Poll() and wait.PollImmediate()
9b5ad7e1191 Add processStartTime in metrics/slis
8af9a177b2a If a pvc has an empty storageclass name, don't try to assign a default StorageClass to it.
d2b16b2a21c vac support ResourceDescriber
9860e12d6ee expected and actual field position adjustment
08645984b0a Revert "Save a list of images used by e2e.test"
73565cde13d Use gomega.Consistently instead of sleeping
dcdfd714501 Fix kubeadm init regression
9a3f1a3164a Avoid panics when logging a nil pod.deletionTimestamp
46d0e1d5aaa Support overrides for registered feature defaults.
d954b25b118 hack/tools: bump logcheck to v0.8.1
6cd25f43a63 fix version typo of namespace indexer
4db86556e5f Update publishing-bot rules to Go 1.20.13 and 1.21.6
04b772c6611 logs benchmark: really write through pipe
7f1a30f8d59 logs benchmark: fix config handling
3fb67901642 Update env version, Add cost for previous func, add tests, etc.
5ca73197b3f Document the nftables kube-proxy packet flow
ddbf3ab6629 local-up-cluster: use the newly built library always
a5861a12626 [go] Bump images, dependencies and versions to go 1.21.6 and distroless iptables to 0.4.4
3c86d21316c bump klog to v2.120.0
6f021e99cf8 dra: increase timeout in setupFakeDRADriverGRPCServer to prevent tests to flake.
6376dd62961 component-base/featuregate: store atomic.Value fields as value not reference
56321a77799 Revert "Graduate Evented PLEG to Beta"
57ec7d20e89 client-go/features: move the defaultKubernetesFeatureGates variable to the new file
9c39f2b7760 Fix kubelet_server_journal --until parms.
b0e929264fb e2e/network/conntrack: rename invalid conntrack state test
6073d1cd3d5 Adds tests for bypassing scheduler processing
9387a66c71f Clean up encryption config reading and hashing logic
4ffa12b9d97 pkg/proxy/nftables: drop ct-state-invalid rule
04bbd3481f7 client-go/features: warn when ordering initialization issue
d74c57d4f59 client-go/features: introduce feature gates
71c3593f85b support nodeAnnotationsChanged event to trigger rescheduling
70e20b58dd8 Add missing string formatting directive
8abe5394ac9 Use v1beta1 endpoints when cleaning up ValidatingAdmissionPolicies
4df39d89e0b Correct the link to install Docker Desktop on Mac.
ce263d88281 Address comments during Review
1a69fd4cb0d kubeadm: increase ut coverage app/componentconfigs
f21f8d99844 kube-proxy: fix LoadBalancerSourceRanges not working for nftables mode
50b3ffc71fd kube-proxy: LoadBalancerSourceRanges as *net.IPNet
9eac24c6563 kube-proxy: store ExternalIPs as net.IP
d2294007b0f kube-proxy: store LoadBalancerVIPs as net.IP
564b80b1e11 kube-proxy: don't use invalid cidrs in unit test
41ba76d23e7 kube-proxy: don't use invalid cidrs in unit test
2e999fff026 Fix compiling e2e.test on macOS
6b5e973e5f6 Migrate cmd/kube-proxy to contextual logging (#122197)
e46778a246a remove dead code
87816ffb2c0 Support ignore scheduler extender error when binding
f8abe71238f Add an post-upgrade condition to ensure the job is running
67cf648ab77 Add a new neverTerminate job behavior just for upgrade
b7012da2ad4 Remove providerless tag in controller_test.go
377f521038e kube-proxy: change implementation of LoadBalancerSourceRanges for wider kernel support
ca8c27c480f kube-proxy: do not delete previously stale but currently active chains
073cfdfac90 kubeadm: skip unmount on missing /var/lib/kubelet
0fc1b9c9aad Promote LegacyServiceAccountTokenCleanUp to GA
683f7f43af0 e2e/endpointslice: add ready conditions
d5664276bf5 refact IsLikelyNotMountPoint
e25e1d39bd1 Add KUBE_PROVIDERLESS for CI jobs to run with providerless tag
fdf6503e601 Enable more storage tests to work independent of the providerless tag
5704a588101 add test for the registered feature gates
4b296699af8 Add fake GCE provider to make CI jobs happy
549ef5da1bd split ingress tests into multiple files
88bfefad0f5 import providers selectively based on the tag
220a559f45e Add missing doc.go for some providers
7a236bd7e06 Add providerless tags appropriately in test/
c019b51be41 Remove unnecessary providerless tag in azure legacy provider
5c196ddaef5 add patch integration test to disable nodeport for LB type service
4a18b4e9fe6 allow service NodePort to be updated to 0 in case AllocateLoadBalancerNodePorts=false
edff1c3b2fd swap originalPod and modifiedPod to match the comments.
801afbf888f refactor TestPriorityQueue_Update
288c00c0c7b Allow framework plugins to be closed
73bec0f6d95 api: remove SecurityContextDeny admission plugin
d9e48705ff6 kubeadm: make the active timeouts structure accessible from anywhere
ea0fa414457 kubeadm: implement mutators for "config migrate"
492c0619dc8 kubeadm: add a Timeouts struct to v1beta4
2f5121671fc kubeadm: add ResetConfiguration.UnmountFlags
afefc6f4ebe Make EndpointSlice API e2e test faster
af6e653f175 Use errors.Is() to handle err returned by LookPath()
2431a964af3 Drop hack/verify-govet-levee
9c6b42af46e promote contextual logging to beta, enabled by default
d6bfd7daeb8 kubeadm: throw errors on unmount instead of warnings
289bd72631b Add ut for pkg/registry/networking/servicecidr
4aecb151b83 Fix kubectl drain error handling bug.
99979fd98a6 kubelet: cleanup system-reserved and kube-reserved flag usage
1d144f518e2 Fix SELinux e2e tests: add label to observed metrics
246e69fb990 Use http/2 for localhost webhook
55c5db172ed lock GA feature-gate ConsistentHTTPGetHandlers to default
55e1646fa42 removed the deprecated azureFile in-tree storage plugin
a3c4a609950 Save a list of images used by e2e.test
10a6885da15 feat(cli-runtime): wrap meta.NoKindMatchErrors
2e8e2989d15 Removing Windows image from e2e test image utils
af8da8e01c2 [StructuredAuthnConfig] add comment for extra keys unique requirement
5405dd0f9b8 Update goleak from v1.2.1 to v1.3.0
d3b8eba690f Update konnectivity to 0.29.0
be88a79b6ab Remove unused csi-hostpath-testing.yaml
7503440ba85 bump runc to v1.1.11
09abd6be5a8 address reviews
a2f397a4b84 kubeadm: increase ut coverage fo phases/kubeconfig
97db0caf6b6 kubeadm: fix flaky test TestRunRenewCommands
c3775de7479 fix logic error
5ab23179473 run all PreFilter when the preemption will happen later in the same scheduling cycle
e1e035e3a80 doc: make it clear that newly scheduled Pods are Pod/Add events
bf1b3a161b8 add(nodevolumelimits): return UnschedulableAndUnresolvable when PVC is not found
2203cb7dde8 fix: create tls secret cert to crt for --cert flag
5607349e39a remove wrong warning event (FileSystemResizeFailed) during a pod creation when it uses a readonly volume.
8f2aaf63d7b Fix incorrect error checking
20fe2a3539e Add decoding time to the audit log
e3686246ea9 Fix update-openapi-spec to not change caller CWD
41a508f5388 kubeadm: print supported shell types in error message for 'kubeadm completion'
bd269e06baa feat: support annotation in nodewrapper
feb833f1296 fix nil pointer dereference when EventedPLEG is enabled
f73bba51c97 flowcontrol: set the serialization version to v1
430fd83454d kubeadm: increase ut coverage for util/etcd
3b67181c93b remove GA featuregate RemoveSelfLink
719844e196a Fix dry-run flag in go-runner and run_e2e.sh scripts
d849c625ec2 Remove kube-proxy proxy detection & increase timeout
86873d33352 NodeProblemDetector tags
d12416e2f31 remove duplicated check on validateTokenRequests for new object
f8f24cf8e7e ValidateVolumeAttributesClassUpdate also validates new vac
acbbaddada4 Initialize default attach func regardless of the value of flag
041efcd1d40 scheduler: update an old comment
1c089afcf37 Fix a set type
147114e6485 Update some change tracker doc comments
a8a12be3d30 Rename cache's endpointSliceInfo/endpointInfo to endpointSliceData/endpointData
764cb0457f5 Move some code around in servicechangetracker.go/endpointschangetracker.go
a73b275031a Split ServicePort/Endpoint from ServiceChangeTracker/EndpointsChangeTracker
ede0dc1d079 Make newBaseServiceInfo a function rather than a method
0779042a6f1 Remove a useless "_" assignment to appease the linter
452fcc5fd6e Remove some dead code in service.go
51f3b705c64 hack/tools: bump logtools to v0.8.0
90e68e3a024 Update the help mesage of interactive flag in kubectl delete
f89c744b7bb Only run Prioritize() for extenders with prioritizeVerb configured
cd3f7a31e81 Add unit tests for no score plugin scenario
7abba242312 Fix existing unit test (add no op scoring plugin)
e19be41f584 Don't evaluate extra nodes if there's no score plugin defined
4ede571f8bc dra e2e: unify per-node resource specification
bc83cea0eb4 test/e2e: add kubelet test for hostAliases with hostNetwork=true
d317b01244a Fixed Inappropriate Logical Expression
47ee56a7f25 core/v1: remove note about hostAliases not working with hostNetwork
4658f769456 CHANGELOG: Update directory for v1.26.12 release
c0e9fddfd97 CHANGELOG: Update directory for v1.28.5 release
38f4f9d8c4c CHANGELOG: Update directory for v1.27.9 release
c8a2d5684d0 etcd: Update to version 3.5.11
36cceff0a3c e2e: forbid usage of gomega.BeTrue/False
a8da4202c0a .*: bump golang.org/x/tools to v0.16.1
b0d4a8cd6df dra scheduler: fix incorrect tracking of claim candidates for reallocation
32fbb23f3b3 kubeadm: remove usage of the TryRunCommand() function
557118897de kubeadm: drop concurrency when waiting for kubelet /healthz
4a7592f8a42 Remove GA feature gate LegacyServiceAccountTokenTracking in 1.30
1f3e668e180 Use semantic comparation for API
725b107f494 Correct typo from 'gingko' to 'ginkgo'
626f349fef5 Drop PendingChanges methods from change trackers, move into UpdateResults
5d0656b1f69 Squash some unnecessarily-chained methods in the change trackers
c8f9ebfb72b dependencies: gomega v1.30.0 + ginkgo v2.13.2
538248df0de More understandable error for scheduler configuration validation
64da4345231 kubeadm: hide unwanted global klog flags
b6eac505fb4 Add testcase setup scheduler
2edb3349933 kubeadm: hide unwanted global klog flags
c1ce1e00ee9 Properly build-tag the Linux kube-proxy backend code
b69510b0690 Remove an unnecessary abstraction
75695dae109 move encryption config types to standard API server config location
868114a41de k8s.io/code-generator: include all metav1 applyconfigs
b6e34187ca4 Update duplicate env var warning
1d0453127d8 feature(NodeAffinity): return Skip in PreScore when nothing to do in Score
85cc2b38336 cluster/gce: upgrade cos-97-lts -> cos-109-lts
1ee81839036 add extra locations to check for release-tars
09a80df1d13 podtopologyspread: scheduler queueing hints
d36a7089cd9 scheduler/NodeUnschedulable: reduce pod scheduling latency
b6c1f8ef08c Fix etcd repository path to prevent redirects.
642574e9643 WatchEvents seems useless
aee1d54a0dc Drop SubcontainerInfo
c865ad532a4 fixing based on feedback in PR
9d1829c33ac Make OpenAPIGetter tolerant of nil
d621e09a528 remove unused GetRawContainerInfo
15e0c416019 Fix CSI migration for vSphere volumes
b3285fa8df4 Add tests for CIDR type
31f9384646a Add tests for IP type
e1f9aa450b7 Add costing estimations for IP and CIDR
4710f085b3d Add IP and CIDR libraries to CEL environment for 1.30
2f585b45123 Add CIDR network CEL extension
13b22b23a1a Add special IP validations to IP CEL type
c6aa360d3ef Add IP address CEL extension
85d08833bfa warnning on relaim policy when it is Recycle
eb8f3f194fe use build-in max and min func to instead of k8s.io/utils/integer funcs
fe29f47372e Remove GA featuregate about ExpandedDNSConfig in 1.30
4d7c5d9257e nodeaffinity: scheduler queueing hints
f676c99d6e4 Wire in field dropping for CRDs
88cfff678bb Drop v1.27.0 API testdata
8cf0c79fc85 Add v1.29.0 API testdata
06679402e75 remove PruneWhitelist, use prune-allowlist instead
c62155a7705 refactor healthCheck's CreateJob with TTLSecondsAfterFinished
be48c93689b Sched framework: expose NodeInfo in all functions of PluginsRunner interface
16b6be1e503 add unit test for the scheduling queue for QueueingHint disabled
e2cf9692fc0 Remove unused code in kubelet - take 1
ced99383d55 logcheck: remove redundant entry for pkg/scheduler
b450224c129 golangci-lint: inline logcheck configuration
49084fe5771 golangci-lint: logcheck v0.7.0, golangci-lint v1.55.2
e706b6ba14b Use a separate function for checking if device was reconstructed
87d817e62d8 handlers/watch: refactor watch serving to prepare offloading
16f35785f9f Drop publishing-bot rules for the release-1.25 branch
8251e4dfdf5 Update kubedns and nodelocaldns to v1.22.28
1160521a4f6 Revert "Scheduler first fit"
86ab185fa1e Migrate client-go/metadata to contextual logging (#122225)
01916625dab Remove unnecessary error catch in scheduling failure (#121981)
7a82c03daa3 nominate self (carlory) as sig storage reviewer
31710a799d4 fix: Refactor TestFinalizerCleanup unit test by asserting job and pod informer state (#121856)
2e388dd7e91 keep existing PDB conditions when updating status
16aad468b65 Replace test.name with test.namespace
a3a4192eb97 Move expensive test setup (apiserver and running controller) to be run once in TestAutodeleteOwnerRefs parameterized tests
8f5efce8e03 Update publishing-bot rules to Go 1.20.12
9573eb54c71 etcd: Build image 3.5.11
221897d7513 CHANGELOG: Update directory for v1.29.0 release
1ae5594fb2a Update cni-plugins to v1.4.0
b0a27ff34e3 cluster: bump cloud-provider-gcp image verison to v28.2.1
7aeecc42a46 Revert "scheduler/NodeUnschedulable: reduce pod scheduling latency"
329b873e4e8 Revert "scheduler/nodeaffinity: reduce pod scheduling latency"
9e1adced5db noderesourcefit: scheduler queueing hints
324816a883b dra: enable adding ReservedFor entries through strategic-merge-patch
983f6a4a84b Update cri-tools to v1.29.0
917027b42e4 fix incorrect function comment
56dd5ab10ff Add tests for checking of uncertain device paths
87c6b0d69fe Smallish update-vendor cleanup
477176a4674 kubeadm: add supported etcd version for v1.30
34bc590418a Add unit test for Job Controller for panic when PodFailurePolicy is used on 1.28
1e54c050936 leaderelection: Instrument for when slowpath is exercised
1d9f7fd516b leaderelection: optimistically update leader lock
d5060de93f4 use e2e f.Timeouts.PodDelete instead of 1 minute
7dfe3d866b7 Fix verify-licenses.sh
6fee657d3ac Makefile: enable warn-undefined-variables
2208cb94936 e2e: only select linux nodes for NodeLogQuery tests
b9ff6b25f22 Simpler and less noisy make-clean
39417e9d449 kubeadm: update the help msg for `kubeadm upgrade plan`
7897709ed0f Add timezone column in cronjob get command
1d11bc4aca6 e2e framework: provide more guidance to developers
28f8e56d553 Fix prerelease codegen log string
44898f79099 Address comment
ed0facacfa4 Fix device uncertain errors on reboot
48671a3a20b explicitly stop/start docker to fix up local-up-cluster.sh
048cb8b2ed3 Keep presence cost to 0 to ensure backward compatibility.
20b67a4d1ac kubeadm: increase ut coverage of util/config
78b4ab11d5b also report scheduling_algorithm_duration_seconds metric when the pods is unschedulable
210ed2ebbd8 add preScore for volumeBinding
e92501b8fc6 optimize the comment
56262ca56aa kubeadm: cleanup unused CreateCSR and associated functions
2fd4758359b change func WithTracing parameter naming
51495bb4c59 optimize the unit test
ceb7ca93875 Fix etcd storage_events_received_total metric not being registered
4b1408c2e78 Fix typos: update registerCidrsetMetrics to registerCIDRSetMetrics
2d952528cfa belated updates to feature-approvers for SIG Network leads changes
69c40a33965 fix lints
74a6a4581f0 fix by linters
24c4d6f7c9c add unit test for kubelet trace
eed6e29a5b8 client-go events: support context.Background() as context
5310abe14ad make scheduler_perf usable from other repositories
08e5e8681dd E2E - Sig-autoscaling: Refactor the Autoscaling utils to use gomega.Consistenly according to e2e test framework guidance
a23b26913fc DRA helper: enhance context support
d11511b1e81 kubelet: enhance context support
0c33ada8503 update func CreateJoinControlPlaneKubeConfigFiles variable name
fa31b4d30da Remove GA featuregate about KubeletPodResources in 1.30
eb60b31e6eb Remove GA featuregate about KubeletPodResourcesGetAllocatable in 1.30
a20093aa07c Remove GA featuregate about IPTablesOwnershipCleanup in 1.30
965b3634ff8 Remove GA featuregate about remove_MinimizeIPTablesRestore in 1.30
84c0ed2642f Add SidecarContainers feature beta version
e13dca64cf0 Remove GA featuregate about ProxyTerminatingEndpoints in 1.30
b1ad834dfb1 No need to calculate ResourceEphemeralStorage additionally
a80c3d03011 e2e/openapi: fix test panic when OpenAPI CRD doesn't show up within timeout
d9070623085 Minor cleanup in watch handlers
d8bd150784b support pod namespace indexer
9efff41b8e0 making suggested changes
55e60db88b1 Unify watch handler across http and websockets
a82ee6d4168 fix error check
8acf1857917 Use a generic Set for utiliptables.GetChainsFromTable
7cedc3d7417 Simplify creation/tracking of chains
1f5738df848 fix(scheduler): fix incorrect loop logic in MultiPoint to avoid a plugin being loaded multiple times
38c67af789b Use tristate for provideclusterinfo to manage provided flag
f035fea63ab remove unnecessary code
3df00d1bdde Only run Prioritize() for extenders with prioritizeVerb configured
56dcde86270 Add unit tests for no score plugin scenario
6d92b330e31 use ctx withoutcancel
5e7c4c245b9 remove the deprecated in-tree vsphere volume's code
a6e48ef978e Remove GA featuregate about ExperimentalHostUserNamespaceDefaultingGate in 1.30
90fc108f6da fix kubelet trace broke in 1.28
f7aca72155e unittests: Fixes unit tests for Windows (part 8)
feb23ec581b Fix existing unit test (add no op scoring plugin)
199dc03bdd4 Don't evaluate extra nodes if there's no score plugin defined
2d943801ad3 Clean up unused type `HealthcheckType`.
5e5f8b1dd29 move provideclusterinfo assignment into correct place
c86189d1de8 clean up unused parameters for volume zone unit test
eddf65849df Fix list_type_missing in k8s.io/apiserver
18f3941c24b Fix list_type_missing in k8s.io/metrics
58fb9f6e66b Fix list_type_missing in api/storage
e96578fb4d0 Fix list_type_missing in api/rbac
b2458e456a1 Fix list_type_missing in api/networking
7fc3ef1fec0 Fix list_type_missing in api/imagepolicy
cddfa437698 Fix list_type_missing in api/extensions
cfe146615ac Fix list_type_missing in api/core
fe902f7384a Fix list_type_missing in api/autoscaling
ad397373970 Fix list_type_missing in api/authorization
b24cffb1744 Fix list_type_missing in api/authentication
a3ea994fa28 Fix list_type_missing in api/apps
460df86f2a6 Fix list_type_missing in api/admissionregistration
b8982be2684 Fix list_type_missing in sample-apiserver
e9bd9262dc9 Fix list_type_missing in apiextensions-apiserver
dd80194d967 Re-run codegen with new kube-openapi
1f55357d993 Re-vendor k8s.io/kube-openapi
44060fb1f36 Fix "list_type_missing" API violations in meta/v1
9f8f55a6ed2 Use DBG=1 for conformance verification
37b7ae6b933 build: use -trimpath in non-DBG mode
2315d3fed54 uncomment ktesting.AnyToString
f86249c68e6 kubeadm: remove outdated notes during upgrade
e38362501b7 dynamic-resource-allocation Update API comments
e5b86c1034c Fix node update event will miss some potential changes
a601ebd6b60 Changed the log message
02b0dc98dd9 remove unnecessary fmt.Sprintf call
57a5db8da3d remove feature-gate APISelfSubjectReview
eb45a8f2f5b Added comments
76be319571b Optimzed the code
5c99f3a24e3 Logged the return value of ListPlugins
3e1dbccf4d3 Don't sort under lock
91c94d007fa fix falky test pkg/registry/core/persistentvolume/storage TestUpdateStatus
f221098d2c9 Fix: modify a flag doc of pod-max-in-unschedulable-pods-duration
468e2dac81d fix: requeue pods rejected by Extenders properly
b088e650077 kubectl config set-credentials: Add InteractiveMode and ProvideClusterInfo flags
c494e8b18e7 fix incorrect getDeviceNameFromMount comment
03b8241fcef put storage related plugins under SIG-Storage reviewing
4d9df1134f6 fix(doc): elaborate the documentation of SnapshotSharedLister
52ff7f8dc0c fix(framework): elaborate the document on PostFilter
9cb2d1cf6de Removed Comments
1dca49157a5 Utilized ListPlugins method
59c75b001a4 cleanup: remove getStorageAccountName warning messages
1dcb31aebbb kubeadm: fix flaky test TestRetrieveValidatedConfigInfo
7ba546cfeb7 drop alpha comment on ephemeral storage
aba817ac1d6 return not-found errors properly from fake listeres
f0aab8c984d encoding: avoid setting GVK unnecessarily
1489a992060 Update mount_windows.go
a3e27aa1ade ad controller: optimize populateActualStateOfWorld
854347ac818 ad controller populator: check for inUse sync in test
a85f5879849 Job: Use built-in min function instead of integer package
140abfc010c Remove `leaky` package and move `PodInfraContainerName` to staging
2076429e434 Enable pod container resources tests on Windows
19da26005b3 kube-proxy: Fix etp:Local for externalIPs
81d040d5381 remove import hack about k8s.io/utils/clock/testing
565ac50bafb Drop testing dependency from shipped binaries
12c9bfc21d6 k8s.io/apiserver: refactor GenericAPIServer healthz code.
5164db066cd Drop testing dependency from shipped binaries
3df90134ca5 add script for restricting import of test only libraries
1dadf576f29 Updated Added Imagefs inodes in default Eviction Hard
b8533f79769 kubelet: add metric for the first pod with network latency
f9ceab37ca3 e2e: pass context into pod helper functions
4de02f2dec9 kubelet:memorymanager: add metrics e2e tests
ddd60de3f3a memorymanager:metrics: add metrics
d6b8a660b08 Fix kubelet panic when allocate resource for pod.
33aa56097a3 Set the initial length of set[T] in sets.KeySet
4c06bd5bbb8 fix bad assumptions in gce network tests
f040d9012cf verify-no-vendor-cycles: set up Go environment
30dc2f0773c Added Imagefs inodes in default Eviction Hard
60520b6d4a2 look for the cm after the lb is created
ae3235aa01b Remove --use-real-proxier support from kubemark
407b9d96104 remove duplicated check in operator_generator.go
bd4707ac9a9 fix dns autoscaling test to run with coredns
4a4940694f4 remove stale comments
1c0044594dc cleanup todo after feature.BlockVolume gate was removed
3fb16abfca4 make the decode function respect the timeout context
fec63d5ea0e fix: use generic set in pkg/util/iptables
ae24846c487 add comments for switch of syncUnboundClaim
29335763feb kubeadm: increase ut coverage app/upgrade/versiongetter
166b71757b9 dependencies: zapr v1.3.0, zap v1.26.0
abaf7a800db increase timeout in fakeDraDriverGrpcServer to fix flake in dra/manger_test
ab1eb8ff244 Add comment in noderestriction on Node-bound-tokens
ed8d10f6605 Update sig-auth aliases
d78a794be22 Remove unnecessary sort in kube-proxy ipvs
1cd1092dd98 Remove NodeAlphaFeature label from sidecar e2e tests
b91f07008cc add ut
c26bb7eb85a update util/sets to use standard package cmp
a00a610d15c move SidecarContainers featureGate checking to PreFilter
6cca6e05246 bump kube-dns to v1.22.27
e48aa093402 Make verify-typecheck.sh only check valid targets for a platform
090b79f65d7 Update version.sh
957e9a7f1a0 adc remove redundant check
a96d21b4b0c Add logs for event handler
84da8e6a532 cluster/gce: add match conditions to PersistentVolume labeling webhook
624169c5b50 k8s.io/apiserver/storage/etcd: refactor etcd GetList.
1186e25a452 Remove ability to re-enable serving deprecated storagev1beta1 and storagev1alpha1 APIs
6b3476b79fe node labels and taints do not change, node events are ignored in daemonset controller
7b60e7e2a31 Added plugins enabled at each extension point
d96a9858d39 client-go: allow adding indexes after informer starts
58236aa3ebf remove EventRecorder from ControllerParameters of pv base controller
fade7463cd4 Add String() to framework status
083818f9e29 fix wrong condition description in PVC
e2227a24fbc switch to e2 machine types
4fa3247a61e use context for lazy evaluation.
6b00f3a7976 add StructuredAuthenticationConfiguration feature to kube feature gates file
8e5b959e122 windows-tests: Add retries to Windows `assertConsistentConnectivity` func
32db5774a34 Fixed extra lines
81bf3a59d1c Added mutex locks when accessing file object : addressed review comments
63b3085f2a8 fix ad controller populators test
21cf23b4faf Added extra info about default plugins in component config
0e76e2c2bbf Added mutex locks when accessing file object : lint check fix
9ed4c58a1f1 Added mutex locks when accessing file object
e1e6f341999 test-autoscaling stop using deprecated framework.ExpectNotEqual
3c530eea2da automatically setup etcd when running verify/update openapi-spec.sh
4bba73a2bd9 Add comments to cpu accumulator and minor renames
ae5bf8e4c64 verify-golangci-lint.sh: clarify intended usage of warnings
95f2c859a39 snapshot controller version bump to latest
48452fef8de kube_codegen: Add a --one-input-api flag
87d158e4571 kube_codegen: genclient can look in any Go file
a789a9d44bb kube_codegen: avoid dups in dirs with >1 file
3df3b832265 e2e_api: stop using deprecated framework.ExpectNotEqual
e69a960792e skip deploying csi driver if it is already installed
e20ecbe1b49 cleanup:e2e-cloud:stop using deprecated framework.ExpectNotEqual
f53ff68edd1 Generated files
531324cb1df allow FSGroupPolicy and PodInfoOnMount to be mutable in CSIDriver.Spec
d9545976ede using wait.Interrupted instead of deprecated wait.ErrWaitTimeout for utils
47b1002bab4 fallback to origin IsLikelyNotMountPoint to avoid regression
81ef146e2fe feat: support statx STATX_ATTR_MOUNT_ROOT attribute
dbb6927ec22 Replace stat syscall with statx
b20bc79a602 remove not register event code
6e0ece85c49 cleanup the retrun style for cp execute function
aa9b2b16968 use generic Set in api
567fca7baa9 Use copy() instead of a for loop
61023579c11 Fix Windows credential provider cannot find binary Windows credential provider binary path may have ".exe" suffix so it is better to use LookPath() to support it flexibly.
76919e95697 Updated descriptions in kubectl create deployment help , added example for multiple images
56c241783e3 fix
ab1f97bd6ed fix
c7549fe340d fix(kubectl): delete pod declare no controllor note
286628b0304 Fix error message for invalid resource reservation
e40d00cf53a fix: 119921
ad0b671b56d getPersistentVolume remove reduant deep copy
12b370cbbb4 bugfix(namespace-controller): Correctly cascade ctx when making API calls
3579674df2d fix comment of rbac decision for NoOpinion
c2049c7961b chore: loop optimization
defe307ec22 chore: io/ioutil deprecated
e6900f5ead7 Optimize the performance of the Clone method of preFilterState
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
4fbc98c93c |
k3s: update to v1.30.2+k3s2
Bumping k3s to version v1.30.2+k3s2-2-g16321f2554, which comprises the following commits:
faeaf1b01b Update flannel to v0.25.4 and fixed issue with IPv6 mask
a08ac6fcdc update stable channel to v1.29.6+k3s1 (#10417)
aa4794b372 Replace 1-weight semaphore on snapshots with simple mutex
b4d4ed8f01 Fix agent supervisor port using apiserver port instead
9af17d2997 Update Kubernetes to v1.30.2 (#10349)
f10cb29534 fix typo, use rancher/permissions
c0450a2cb4 Fix race condition panic in loadbalancer.nextServer
cff6f7aa1d Expand GHA go caching to includ newest release branch (#10307)
d9b8ba8d71 Add snapshot retention etcd-s3-folder fix
043b1eac5d Add test for `isValidResolvConf` (#10302)
df5db28a68 Add ADR for support for etcd s3 config secret (#9364)
1661f1024a Fix bug that caused agents to bypass local loadbalancer
79ba10f5ec fix: Use actual warningPeriod in certmonitor
1268779ea0 Bump Local Path Provisioner version (#10268)
f9130d537d Fix embedded mirror blocked by SAR RBAC and re-enable test
7a0ea3c953 Add write-kubeconfig-group flag to server (#9233)
307f07bd61 Fix issue caused by sole server marked as failed under load
ed23a2bb48 Fix netpol crash when node remains tained unintialized
f2e7c01acf chore: Bump Trivy version
4cb4542c3a Bump ubuntu from 22.04 to 24.04 in /tests/e2e/scripts
84b578ec74 Use busybox tar to avoid issues with fchmodat2 on arm
86875c97bb Bump alpine from 3.18 to 3.20 in /package
de4cda57e6 Bump alpine from 3.18 to 3.20 in /conformance
2eca3f1e2c Update golangci-lint to stop using deprecated skip files/dirs
f8e0648304 Convert remaining http handlers over to use util.SendError
ff679fb3ab Refactor supervisor listener startup and add metrics
3d14092f76 Fix issue with k3s-etcd informers not starting
eb192197eb Updating the script binary_size_check to complete the command name by adding .exe extension to the k3s binary name to make it available to run stat command
6683fcdb65 Bump klipper-helm image for tls secret support
c2738231ec update channel server for may 2024 (#10137)
3f62ec3207 Add extra log in e2e tests
99f543a2d4 fix: use absolute path
86b2554772 test: copy vpn-auth-file to guest
b8f101fd89 test: increment agentCount
ab29054887 test: use absolute path to auth file
a8f88aa9e5 test: add agent with auth file
6dcd52eb8e Use TrafficManager interface when calling flannel
af7bcc3900 Bump flannel version to v0.25.2
aadec85501 Fix go.mod
6fcaad553d allow helm controller set owner reference
6886c0977f Follow directory symlinks in auto deploying manifests (#9288)
3e48386c6e git_workflow filename correction
c1cb5d63b9 add missing kernel config check
f24ba9d3a9 Validate resolv.conf for presence of nameserver entries
2669d67a9b Bump kine to v0.11.9 to fix pagination
afdcc83afe bump minio-go to v7.0.70
423675b955 Create ADR for branching strategy (#10147)
aa36341f66 Update kube-router version to v2.1.2
5a0162d8ee Drop check for legacy traefik v1 chart
37f97b33c9 Add support for svclb pod PriorityClassName
b453630478 Update local-path-provisioner helper script
095ecdb034 Fix issue with local traffic policy for single-stack services on dual-stack nodes.
e8950a0a3b Fix issue installing artifacts from builds with multiple runs
5cf4d75749 Bump spegel version
bf8b15e7ae bump etcd to v3.5.13
aaa578785c Bump containerd to v1.7.17
30999f9a07 Switch stargz over to cri registry config_path
7374010c0c Use fixed stream server bind address for cri-dockerd
5f6b813cc8 Add WithSkipMissing to not fail import on missing blobs
811de8b819 Fix bug when using tailscale config by file
80978b5b9a Update to v1.30.1 (#10105)
1d22b6971f windows changes
1cd7986b50 Update channels with 1.30 (#10097)
dba30ab21c Replace deprecated ruby function
14549535f1 Fix e2e tests (#10061)
6531fb79b0 Deprecate pod-infra-container-image kubelet flag (#7409)
144f5ad333 Kubernetes V1.30.0-k3s1 (#10063)
fe7d114c6a Bump E2E opensuse leap to 15.6, fix btrfs test (#10057)
0981f0069d Add E2E Split Server to Drone, support parrallel testing in Drone (#9940)
5c94ce2cf8 update stable channel to v1.29.4+k3s1 (#10031)
94e29e2ef5 Make /db/info available anonymously from localhost
d3b60543e7 Fix 10 second etcd-snapshot request timeout
5b431ca531 Fix on-demand snapshots not honoring folder
d973fadbed Update to v1.29.4 (#9960)
06b6444904 Add startup testlet on preloaded images (#9941)
4e26ee1f84 Match setup-go caching key in GitHub Actions (#9890)
81cd630f87 Update kube-router to v2.1.0
c59820a52a Allow LPP to read helper logs (#9834)
3f906bee79 Update packaged manifests
b10cd8fe28 Bump latest to v1.29.3+k3s1
4cc73b1fee Actually fix agent certificate rotation
08f1022663 Don't log 'apiserver disabled' error sent by etcd-only nodes
7d9abc9f07 Improve etcd load-balancer startup behavior
fe465cc832 Move etcd snapshot management CLI to request/response
0792461885 Bump containerd and cri-dockerd
a064ae2f17 Add quotes to avoid useless updatecli updates
60248c42de Add supervisor cert/key to rotate list
9846a72e92 Bump spegel to v0.0.20-k3s1 (#9863)
0e118fe6d3 fix: agent volume in example docker compose (#9838)
f2961fb5d2 Add workaround for containerd hosts.toml bug
49414a8def chore: Bump Trivy version (#9840)
52712859c5 Add updatecli policy to update k3s-root
7f659759dd Add certificate expiry check and warnings
6624273a97 Fix embeddedmirror test
93bcaccad1 E2E setup: Only install jq when we need it
c98ca14198 Add wasm test to e2e matrix
6a42c6fcfe Remove old pinned dependencies (#9806)
14f54d0b26 Transition from deprecated pointer library to ptr (#9801)
5d69d6e782 Add tls for kine
c51d7bfbd1 Add health-check support to loadbalancer
edb0440017 Fix etcd snapshot reconcile for agentless nodes
7474a6fa43 Add /etc/passwd and /etc/group to k3s docker image
6c52235848 update channel server (#9808)
c47c85e5da Move to ubuntu 23.10 for E2E tests (#9755)
b5d0d4ee21 Bump Trivy version (#9780)
41377540fd Use ubuntu latest for better golang caching keys (#9711)
5461c3e1c1 Bump k3s-root
3f649e3bcb Add a new error when kine is with disable apiserver or disable etcd
f099bfa508 Fix error when image has already been pulled
65cd606832 Respect cloud-provider fields set by kubelet
d7cdbb7d4d Send error response if member list cannot be retrieved
7a2a2d075c Move error response generation code into util
8aecc26b0f Update to v1.29.3-k3s1 and Go 1.21.8 (#9747)
bba3e3c66b Fix wildcard entry upstream fallback
364dfd8b89 Fix flaky check in btrfs test
21c170512c Fix e2e vagrant cacheing
aea81c0822 Run docker tests in E2E GH Action
ec5d34dac0 remove repetitive words (#9671)
fe2ca9ecf1 Warn and suppress duplicate registry mirror endpoints
9bd4c8a9fc Bump upload and download actions to v4 (#9666)
2a091a693a Bump metrics-server to v0.7.0
1c8be1d011 Improve E2E Aftersuite cleanup
af4c51bfc3 Move to ubuntu 2204 for all E2E tests
da7312d082 Convert snapshotter test in e2e test
d022a506d5 Migrate E2E tests to GitHub Actions
75ccaf9942 Allow non-sudo vagrant
6f331ea7b5 Include flannel version in flannel cni plugin version
d37d7a40da Bump Trivy version (#9528)
88c431aea5 Adjust first node-ip based on configured clusterCIDR
1fe0371e95 Improve tailscale e2e test
82cfacb2f3 Update contrib/util/check-config.sh
ce0765c9f8 Rename `RAW_OUTPUT` -> `NO_COLOR`
ff7cfa2235 Disable color outputs using RAW_OUTPUT env var
59c724f7a6 Fix wildcard with embbeded registry test
f82d438f39 e2e tests: cover WebAssembly integration
64e4f0e6e7 fix: use correct wasm shims names
2c4773a5aa chore(deps): Remediating CVEs found by trivy; CVE-2023-45142 on otelrestful and CVE-2023-48795 on golang.org/x/crypto (#9513)
091a5c8965 Don't register embedded registry address as an upstream registry
b5a4846e9d Remove filtering of wildcard mirror entry
84a071a81e Add env var to allow spegel mirroring of `latest` tag
26feb25c40 Bump spegel to v0.0.18-k3s4
88d30f940d Use and version flannel/cni-plugin properly
0b3593205a Move snapshot-retention to EtcdSnapshotFlags in order to support loading from config
3576ed4327 Clean up snapshotDir create/exists logic
b164d7a270 Fix additional corner cases in registries handling
29c73e6965 Fix setup-go typos (#9634)
935ad1dbac Move docker tests into tests folder (#9555)
138a107f4c Reenable Install and Snapshotter Testing (#9601)
81a60de256 update stable channel to v1.28.7+k3s1 (#9615)
109e3e454c Bump helm-controller/klipper-helm versions
82432a2df7 Fix issue with etcd node name missing hostname
513c3416e7 Tweak netpol node wait logs
be569f65a9 Fix NodeHosts on dual-stack clusters
8c83b5e0f3 Rootless mode also bind service nodePort to host for LoadBalancer type
3e948aa0d5 Correct formatting of GH PR sha256sum artifact (#9472)
8f777d04f8 Better GitHub CI caching strategy for golang (#9495)
736fb2bc8d Add an integration test for flannel-backend=none
3b4f13f28d Update klipper-lb image version
fa37d03395 Update install test OS matrix (#9480)
922c5a6bed Unit Testing Matrix and Actions bump (#9479)
57e11c72d1 Testing ADR (#9562)
86f102134e Fix netpol startup when flannel is disabled
fae0d99863 Use 3/2/1 cluster for split role test
f90fd7b744 Change default number of etcd nodes in E2E splitserver test
fae41a8b2a Rename AgentReady to ContainerRuntimeReady for better clarity
91cc2feed2 Restore original order of agent startup functions
1c1746114c remove e2e logs drone step (#9517)
085ccbb0ac Fix drone publish for arm (#9503)
3e13e3619c Update Kubernetes to v1.29.2 (#9493)
de825845b2 Bump kine and set NotifyInterval to what the apiserver expects
0ac4c6a056 Expose rootless containerd socket directories for external access
14c6c63b30 Expose rootless state dir under ~/.rancher/k3s/rootless
e3b237fc35 Don't verify the node password if the local host is not running an agent
701e7e45ce Fix iptables check when sbin isn't in user PATH
fa11850563 Readd `k3s secrets-encrypt rotate-keys` with correct support for KMSv2 GA (#9340)
cfc3a124ee [Testing]: Test_UnitApplyContainerdQoSClassConfigFileIfPresent (Created) (#8945)
cc04edf05f Update Kube-router to v2.0.1
a36cc736bc allow executors to define containerd and docker behavior
b1323935dc Add codcov secret for integration tests on Push (#9422)
753c00f30c Consistently handle component exit on shutdown
9e076db724 Bump cri-dockerd
e9cec46a23 Runtimes refactor using exec.LookPath
f9ee66f4d8 Changed how lastHeartBeatTime works in the etcd condition
358c4d6aa9 build: Align drone base images (#8959)
950473e35f Bump flannel version
8224a3a7f6 Fix ipv6 endpoint address selection for on-demand snapshots
888f866dae Fix issue with coredns node hosts controller
77ba9904d1 Bump CNI plugins to v1.4.0
6ec1926f88 Add check for etcd-snapshot-dir and fix panic in Walk
82e3c32c9f Retry startup snapshot reconcile
4005600d4e Fix excessive retry on snapshot reconcile
6a57db553f update channel (#9388)
5c92345423 Bump codecov/codecov-action from 3 to 4 (#9353)
a324146b76 Bump Trivy version (#9237)
fcd1108e73 Add ability to install K3s PR Artifact from GitHub (#9185)
f249fcc2f1 Bump Local Path Provisioner version (#8953)
57482a1c1b Bump helm-controller to fix issue with ChartContent
c635818956 Bump runc and helm-controller versions
97a22632b9 gofmt config_test.go
29848dea3d Fix issues with certs.d template generation
2d98c44fb3 Delete old stalebot
cef7e9e2dc New stale action
d8907ce62c Update to v1.29.1 (#9259)
9a70021a9e Error getting node in setEtcdStatusCondition
c87e6e5f7e Move proxy dialer out of init() and fix crash
5303aa60e9 Fix nonexistent dependency repositories (#9213)
76fa022045 Enable network policy controller metrics
c5a299d0ed Bump quic-go for CVE-2023-49295
6072476432 Add e2e test for embedded registry mirror
37e9b87f62 Add embedded registry implementation
ef90da5c6e Add server CLI flag and config fields for embedded registry
b8f3967ad1 Add ADR for embedded registry
77846d63c1 Propagate errors up from config.Get
16d29398ad Move registries.yaml load into agent config
5c99bdd9bd Pin images instead of locking layers with lease
df5e983fc8 add e2e startup test for rootless k3s (#8383)
64dbbba996 update s3 e2e test (#9025)
4a92ced8ee Handle etcd status condition when cluster reset and disable etcd
8d2c40cdac Use `ipFamilyPolicy: RequireDualStack` for dual-stack kube-dns (#8984)
ac8fe8de2b fix: update trivy from 0.46.1 to 0.48.1 (#8812)
6330e26bb3 Wait for taint to be gone in the node before starting the netpol controller
102ff76328 Print error when downloading file error inside install script (#6874)
eae221f9e5 Fix OS PRETTY_NAME on tagged releases
b297996b92 Add runtime checking of golang version
5fe074b540 Add more paths to crun runtime detection (#9086)
c45524e662 Add support for containerd cri registry config_path
319dca3e82 Fix nil map in full snapshot configmap reconcile
db7091b3f6 Handle logging flags when parsing kube-proxy args
1e663622d2 Fix the OTHER log message that prints the wrong variable
08ccea5cb6 Fix install script checksum
9d21b8a135 add system-agent-installer-k3s step to ga release (#9153)
a7fe1aaaa5 Dockerfile.dapper: set $HOME properly
30449e0128 Add 2>dev/null when checking nm-cloud systemd unit
0ad5d65a1e Added support for env *_PROXY variables for agent loadbalancer (#9118)
a27d660a24 Add ServiceLB support for PodHostIPs FeatureGate
baaab250a7 Silence SELinux warning on INSTALL_K3S_SKIP_SELINUX_RPM (#8703)
aca1c2fd11 Add a retry around updating a secrets-encrypt node annotations (#9039)
bbd68f3a50 Rebase & Squash (#9070)
c7a8eef977 update stable channel to v1.28.5+k3s1 and add v1.29 channel (#9110)
d87851d46e chore: Update Code of Conduct to Redirect to CNCF CoC (#9104)
9d9fbf4ff4 Bump actions/setup-go from 4 to 5 (#9036)
798eecf112 chore: Update sonobuoy image versions (#8910)
3190a5faa2 Remove rotate-keys subcommand (#9079)
9411196406 Update flannel to v0.24.0 and remove multiclustercidr flag (#9075)
7101af36bb Update Kubernetes to v1.29.0+k3s1 (#9052)
bf3f29f9e8 Only publish to code_cov on merged E2E builds (#9051)
231cb6ed20 Remove GA feature-gates (#8970)
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
be406f8ae4 |
docker-distribution: update to v3.0.0-beta.1
Bumping docker-distribution to version v3.0.0-beta.1-2-gf22dd618, which comprises the following commits:
9ba73406 vendor: github.com/opencontainers/image-spec v1.1.0
c72db410 Prep for v3-beta1 release
d3cc664f Update docs: JWKS credentials and AZ identity
558ace13 feat: implement 'rewrite' storage middleware
6d591190 Update Redis configuration docs with TLS options
d9050bb9 remove layer's link file by gc
43a64480 Update dockerhub.md
f36b44ff docs: disable base element override
83a071e9 Bump alpine version
5316d3bd Bump Go and golang linter
a008d360 Create type alias for redis.UniversalOptions
f27799d1 Add custom TLS config to Redis
b63cbb33 Replace custom Redis config struct with go-redis UniversalOptions
050e1a3e build(deps): bump github.com/Azure/azure-sdk-for-go/sdk/azidentity
52d68216 feature: Bump go-jose and require signing algorithms in auth
975613d4 New path for distribution config
c40c4b28 Enable configuration of index dependency validation
119c608f docs: update location of `filesystem.md`
062309c0 Stop proxy scheduler on system exit
421a359b Add a go.mod toolchain version
f1875862 Set readStartAtFile context aware for purge uploads
16a305eb Add registry.Shutdown method for graceful shutdown of embedded registry
a2afe23f add concurrency limits for tag lookup and untag
a5882d66 vendor: update manifest dependencies
11215632 fix: ignore error of manifest tag path not found in gc
2fe34420 chore: fix some typos in comments
e0a1ce14 chore: fix some typos in comments
601b37d9 Handle OCI image index and V2 manifest list during garbage collection
2db0a598 build(deps): bump golang.org/x/net from 0.20.0 to 0.23.0
8654a0ee Allow setting s3 forcepathstyle without regionendpoint
21c718d5 Add Go 1.22 support to CI
2446e110 chore: remove repetitive words in comments
167d7996 chore: bump distriution/reference dependency
fdbb3a82 fix: upgrade scorecard version
e8820b25 Don't try to parse error responses with no body
127fa7e0 proxy: Do not configure HTTP secret for proxy registry
1cb89e3e Update go versions
cb2b51ca build(deps): bump google.golang.org/protobuf from 1.31.0 to 1.33.0
de450c90 update: support redirects in gcs storage with default credentials
1c5fe22d build(deps): bump github.com/go-jose/go-jose/v3 from 3.0.1 to 3.0.3
6465b4cd fix: typo
63eb22d7 Fix: ‘autoRedirect’ hardcode ‘https’ scheme
71a069dc Standardize OTEL error logging format to match application logs
f690b3eb Added Open Telemetry Tracing to Filesystem package
a4918b67 fix: typo
2763ba1e Do not write manifests on HEAD requests
1c3d44ec Update notifications.md
6ca646ca Initialize proxy prometheus counters values to 0 to prevent gaps after registry restart
1e8ea031 Add support for `Basic Authentication` to `proxyingRegistry`
5bebd152 Add a trademarks and docs license link
04182455 Include headers when serving blob through proxy
939061d1 build(deps): bump codecov/codecov-action from 3 to 4
e5f5ff7a build(deps): bump peter-evans/dockerhub-description from 3 to 4
ee58e343 build(deps): bump actions/upload-artifact from 4.1.0 to 4.3.0
11f50c03 feat: Add HTTP2 for unencrypted HTTP
41161a6e refactor(storage/s3): remove redundant len check
c78c1561 Update labeler.yml
65c6a6d3 Update .github/labeler.yml
b1d1be8e chore: Migrate PR labeler config to v5
a626871f chore: Sort entries
d2c57396 chore: Remove `area/config` duplicate entry in `labeler.yml`
45cea887 chore: Remove duplicate `area/ci` entry in PR labeler
ef1db8ac build(deps): bump actions/upload-artifact from 3.0.0 to 4.1.0
5e75227f docs: fix broken links and improve link resolution
6b14735d ci: disable provenance when generating docs
f09bf31f ci: handle provenance for built artifacts
f4a3149a build(deps): bump docker/bake-action from 2 to 4
50332793 remove deprecated ReadSeekCloser interfaces
5c585db7 build(deps): bump docker/metadata-action from 4 to 5
5c5d8d3d build(deps): bump docker/login-action from 2 to 3
fc992dfe build(deps): bump actions/upload-pages-artifact from 2 to 3
87ae3eb8 build(deps): bump fossa-contrib/fossa-action from 2 to 3
053fd16a build(deps): bump ossf/scorecard-action from 2.0.6 to 2.3.1
f2342966 build(deps): bump docker/setup-buildx-action from 2 to 3
78a6be85 build(deps): bump actions/setup-go from 3 to 5
f0a66954 build(deps): bump actions/configure-pages from 3 to 4
38a2d53c build(deps): bump actions/checkout from 3 to 4
ba702e1d build(deps): bump github/codeql-action from 1.0.26 to 3.22.12
af2fa0ff build(deps): bump actions/deploy-pages from 2 to 4
587f9e28 chore: generate authors
befbaa68 chore: update mailmap
bdfa8324 vendor: github.com/mitchellh/mapstructure v1.5.0
5bd7f258 fix: load gcs credentials and client inside DriverConstructor
6908e0d5 fix: add missing skip in s3 driver test
b2bd724b chore: sort and fix mailmap
ea02d9c4 fix: add labeler action
7838a369 chore: dependabot to keep gha up to date
55e91b39 chore: use no-cache-filter for outdated stage
5bd45551 fix: update Dockerfile version output
4f9fe183 vendor: github.com/gorilla/handlers v1.5.2
e96fce17 feat: add PR labeler
5f397b87 update to alpine 3.19
e29a5c8e update: readme cleanup and fxes
0e0d74b0 docs: remove legacy kramdown options from link
59929031 fix: build status badge
535b6586 feat: add GH issue template
a74cacff version: export getter functions
ab27c9d5 version: use go list -m
f23c675d release: prep for the v3 alpha-1 release
d59a570c update: set User-Agent header in GCS storage driver
dcee8e93 build(deps): bump golang.org/x/crypto from 0.15.0 to 0.17.0
7fb303e9 Update s3.md
2f98b771 fix: don't override storage driver useragent if it's set
290dba5d update: S3 driver docs
7ba91015 fix: remove disabling of multipart combine small parts
def497a8 update: add tests for S3 driver client SkipVerify settings
4f84c086 Update the gotcha in the proxy guide
8fa7a81c fix: use http.DefaultTransport in S3 client
3f3e61e2 fix: update incorrect godoc comment for (writer).Writer()
4baddbc6 fix: update S3 storage driver writer
80cbd744 refactor: apply suggestions from code review
ed5d4934 refactor: apply suggestions from code review
bcbf0431 testing: replace legacy `gopkg.in/check.v1`
68ac02b5 Otel tracing MVP: fixed gofmt
fb7cdf89 Otel tracing MVP
0e3018f2 Otel tracing MVP: vendor changes
a1b262f0 Update nginx.md
1054d157 update: remove gcs storage driver build tags
f3ba0acd update: bump Go runtime to 1.21.5 and the rest to latest 1.20
6f84e878 update: AWS Go SDK bump to the latest release
1f6afab6 vendor: github.com/spf13/cobra v1.8.0
79976446 vendor: github.com/klauspost/compress v1.17.4
db187ae5 vendor: github.com/gorilla/mux v1.8.1
d6dd652f vendor: github.com/sirupsen/logrus v1.9.3
2cf41640 update: missed the CI workflow
f08898c2 update: bump Go version
b3681c4c feat: add tparallel linter to improve handling parallel tests
d8ff41a3 cleanup: move init funcs to the top of the source
f2cbfe24 health: improve periodic polling of checks
a1b49d3d health: plumb contexts into health checks
8b889c04 health: use request context when logging
35abc922 fix: if reference exceeds the threshold return 400 and detail
d0b78f5e dockerfile: keep context mount as read only
f33e5a69 fix: invalid conversion when using Content-Range in client
b8b390f4 build(deps): bump github.com/go-jose/go-jose/v3 from 3.0.0 to 3.0.1
c90b0b26 docs: fix typo in mirror.md
7ce129d6 feat(linter): enable errcheck linter in golangci-lint
e001fad0 refactor: gcs storage driver
bb156255 remove uuid package
7686bdc2 fix: fix broken build
186d522d docs: remove unused go.mod
74306515 cleanup: make blob sizes easier to understand
bf933f54 Fix proxy statistics
b4dc4f34 storage/driver: plumb contexts into middlewares
b45b6d18 storage/driver: plumb contexts into factories
f7e5eaae internal/dcontext: drop GetRequest() function
f089932d storage/driver: replace URLFor method
868faeec registry: unexport auth-related context utilities
bd80d759 reg/auth: remove contexts from Authorized method
49e22cbf registry/auth: pass request to AccessController
9157226e Extract request utilities into its own package
d0f5aa67 Move context package internal
852de2c2 cleanup: make chunk sizes easier to understand and change writer append
e8e46b21 cleanup: a small Azure driver cleanup
e5f16bea docs: remove unused images
57a6fa46 docs: fix broken image references
9d12b47b docs: allow unsafe HTML
32316367 Bump google.golang.org/grpc from 1.53.0 to 1.56.3
da92c34a ci: add cloud storage driver integration tests to CI
ef8651ec Switch to github.com/google/uuid
3831c8cc feat: push distribution images to GHCR
8a86dc61 Make our UUID package internal
6999f230 Delete reference package
cc23fdac Move registry client internal
2ce5c81f Address PR review feedback
9861a46d Add prometheus proxy related metrics
fe21f439 feat: replace docker/libtrust with go-jose/go-jose
cb0d083d feat: Add context to storagedriver.(Filewriter).Commit()
46d13ff7 update to go1.20.10, test go1.21.3
9cc6e5b2 update to go1.20.9, test go1.21.2
c8c2bc27 reference: fix broken alias for DomainRegexp
ea417229 refactor: Storage driver errors
eac19987 Remove test for nested file delete on S3
647ec33c Bump minio version and test less storage classes
4dce8b86 Add annotation for descriptor
777ad032 Update docs GHA
4f506663 Update dockerhub-readme GH Action
dc07c428 Move dockerhub-readme workflow to the correct path
a66f6c37 ci: add github pages workflow for docs
c3ae793f And other content...
83dd4ff0 Cleanup of naming in docs
31707d54 docs: add github link in header
1596da68 docs: add tests
b911020c docs: fix markup and broken links
fee6faef json encode storage driver enclosed error
758c0f9d Bump golang.org/x/net from 0.8.0 to 0.17.0
e2ae76f1 docs: add hugo site
6183f230 docs: remove blank line
f2a72d7f Update Docker Hub README and keep it in sync with this repository.
504a3baf Properly indent prometheus docs
3df7e28f registry: add loglevel support for aws s3 storage driver
993af6fe Add few more sentences for the debug endpoint
4fce3c00 Move completedParts type back to the original position
46a9da16 refactor redis cache
dca71db9 fix comment typos
6c724a1a use manifestTagsPathSpec for listing all tags
b888b14b Optimise push in S3 driver
0b72b0b8 docs: remove README.md that point to Docker's repo
a5c04b36 Update Makefile
cf956106 Update BUILDING.md
98ffc56a Only set COMPOSE if it doesnt have a value
14361b3a Update Makefile and docker-compose
8e630ae2 Update BUILDING.md readme file.
ecf492ab Update tests/docker-compose-storage.yml
dfb8514a Update Makefile
6f05474f Update tests/docker-compose-storage.yml
8af25245 Update tests/docker-compose-storage.yml
075d81d7 Update Makefile
6b0c3918 Update Makefile
71c532e6 driver testsuite: Add zero byte file checks
06acf2de remove go build directive for older go version
a0d9279e add repositoriesRootPathSpec in pathFor documentation
797b1e39 Add make targets to allow starting local cloud storage environment.
f4d5210b Do not close HTTP request body in HTTP handler
34654f6c remove not exist function name in comment
ca1b8753 document resource class deprecation
a9399e9e Improve socket-activation message
9721db95 Add info message regarding socket-activation
741f9bb5 Add documentation for socket activation
2435def4 Support systemd socket-activation
17952924 avoid redundant blob fetching
23115ff6 update to go1.20.8
c8ba5d70 registry/client: combine SuccessStatus and HandleErrorResponse
e4dd28b8 Bump github.com/cyphar/filepath-securejoin from 0.2.3 to 0.2.4
612a30a7 Remove libtrust from handler tests
6baa31a2 Remove duplicate code that instruments Redis OTLP
0104adf4 registry/api/errcode: split Register to internal / exported
292e30bc registry/api: move all errors to "errcode" package
823cd4a3 Add a comment why prealloc linter is disabled when configuring endpoints
10898006 Preallocate created slice in S3 tests
a9d31ec7 Avoid unnecessary type assertion in mfs driver
59fd8656 Enable prealloc linter
dcdd8bb7 Propagate storage driver context to S3 API calls
06341600 Remove outdated docs
8c7eea76 Add note on custom storage drivers
acf804a2 go.mod: remove outdated comment
152af63e deprecate reference package, migrate to github.com/distribution/reference
2513dd1f fix typos in registry/storage/paths.go
eda5fe2d remove duplicated code
e22f7cbc Pass the last paging flag to storage drivers
0742b566 feat!: remove schema1 manifest
a41613ba Don't make a new buffer for catalog listing
b889cc2e Add username to create redis client
45b7b9ce Dont parse errors as JSON unless Content-Type is set to JSON
c7bdabad add back getKeys + cleanup manifeststore test
f9bc9220 feat(storage)!: remove schema1 except manifeststore_test
d0c0b7bd Update Makefile
1a3e73cb Handle rand deprecations in go 1.20
0eb8fee8 Update to go 1.20
fcbc25e7 Replace redigo with redis-go
506cb451 Small Makefie update
be7f29b4 Fix: use new scorecard badge viewer
a9a5b22b Update milosgajdos maintainer email
1284c487 fix typo in comment and log
5b3be398 s3: add interface assertion
df2787c6 Update test asserts
3e4c4ead Remove bugsnag
11c341a3 Remove schema1 references from registry client
3dbfbc72 Enable bodyclose linter
10b8a247 fix: upgrade scorecard action to 2.0.6
77239356 chore: enable scorecard action and badge
37a213dc Revert "optimize catalog last param"
8fd504de Revert "Rename catalog funcs and update their godocs."
ad111050 Revert "removed redundant check"
8e4a8517 Revert "fix: resolve most comments"
6fea5489 remove contrib folder
77c33cd2 remove NewRelic
279fa01b Small update of API docs
c0a15e64 Regroup direct and indirect dependencies
40c56bf1 Keep returning image for default arch to old clients fetching lists
f48e0ecd Remove waynr from MAINTAINERS
e51cfa66 Add James Hewitt as a reviewer
0f006548 update golang-lru to v2
9d862f09 fix(deps): update module github.com/aws/aws-sdk-go to v1.44.325
f517191d Add small update to api tests
7e39a7c6 Remove references to schema1 pacakge from handlers
3f1859af Remove oss storage driver and alicdn storage driver middleware
46ff5f85 Fix Azure tests
7622d0a4 Don't return the from of a walk
f7bdd912 Don't test the OUTPOSTS storage class
6ceb904c Don't check returned storage class if we use NONE
2d316a12 We don't use gocheck in these tests
f78d81e7 Remove test as S3 does not support empty directories
c6b9944a Remove SWIFT storage driver
24de708d Set Content-Type header in registry client ReadFrom
c1147cc1 Add David van der Spek as a new reviewer
02a92efb Drop docker prefix from storage driver API user agent
ae0001f5 Remove references to schema1 pacakge from proxy package
565dafa4 Remove references to schema1 pacakge from notifications package
6a5846b3 fix: resolve most comments
0f846853 removed redundant check
230cc72a Rename catalog funcs and update their godocs.
65f4ce4d optimize catalog last param
32a476b8 feat: added support for redis username configuration
c19adfdf Cleanup storage cache metrics
e7505464 Update Code of Conduct
b3ca53df Update OCI conformance workflow check
0cf87b1f Fix the code and update tests that verify the new code works
916b94eb Added support for configuring array values with environment variables #3511
316e1c6b Get rid of unnecessary import alias
a3eb9564 use path.Join() for building path
a1cfd267 Make redirect middleware can use path
e7b1bfb9 Centered logo in README.md
dedc8fa7 docs: fix typo
36dd5b79 Update to golang 1.19.10
6b388b1b Enable Go build tags
87081252 registry/handlers/app: log healthcheck error before return
2b72c4d1 registry/storage/driver/azure: fix Move method
db1d0cbf Add registry middleware access to storage drivers
4bbe0ba0 Added support for specifying ACME-server by using REGISTRY_HTTP_TLS_LETSENCRYPT_DIRECTORYURL
421a97ff registry/api/v2: fix ContentType in RouteNameBlobUpload
93010cae docs/specs/api: fix Content-Type typo
2338ee4f Add option to enable caller information in logger
afe5a2a9 Support ztsd compression as Content-Encoding
9d1a8fc9 Remove duplicated platform field from oci index
9d1f71c8 docs: note restriction on URL format of mirrors
817dd286 vendor: update gcs driver dependencies files
69510289 go.mod: update gcs driver dependencies
0207adaa registry/storage/driver/gcs: fix code to use updated gcs driver
d0bc83d8 registry/storage/driver: receive context on Cancel methods
0d20e7ae registry/storage/driver/testsuites: use 4MB for Azure append test
0c33bb10 registry/storage/driver/azure: consider CannotVerifyCopySource as 404
d2e16fc7 registry/storage/driver/azure: fix driver parameters on tests
90ece48d registry/storage/driver: add test call to Stat on "/"
035a8ec5 Fix panic in the s3 backend walk logic
7caf058a bump azure sdk
f3eb91cf Update testutil/manifests.go
61e576f3 Remove blobstore from manifest builder
6a429612 `vallye` typo again and `ignore` section table layout is broken
435c7b9a Dockerfile: fix filenames of artifacts
5d301a9b Update configuration.md
322eb4ee update to go1.19.9
dec03ea3 update golangci-lint to v1.52
ebe9d674 ignore SA1019: ac.(*accessController).rootCerts.Subjects has been deprecated
84a85a40 Ignore SA1019: SplitHostname is deprecated.
999527f9 Ignore SA1019: "schema1 is deprecated" linting errors
3c144f22 registry/auth/token: fix the surrounding loop is unconditionally terminate
4052d269 reference, registry: fix loop variable captured by func literal (govet)
f03d966e cloudfront: use consistent names for test-tables, t.Parallel()
5301ae14 cloudfront: rename vars that collided with type
85028a80 registry/handlers: use consistent names for test-tables
f4acd988 registry/api/v2: checkTestRouter(): use sub-tests, t.Parallel()
2444c328 registry/api/v2: use consistent names for test-tables
9266220c registry/auth/token: TestAudienceList_Unmarshal: t.Parallel()
5e67a40e registry/auth/token: use consistent names for test-tables
f884a079 registry/api/errorcode: TestErrorCodes: use sub-tests
57f9f31a notifications: don't use un-keyed structs
e9ac1728 notifications: use consistent names for test tables
f4be328b context: TestWithTrace(): inline checkContextForValues, use sub-tests
2829f7b7 context: use consistent names for test-tables
f238f7dc reference: TestMatch(): use sub-tests
2819bca9 reference: TestNormalizedSplitHostname(): use sub-tests
fa1d14c5 reference: TestParseAnyReference(): use sub-tests
fcbddfc6 reference: use consistent names for test-tables
8c4d2b9d Dockerfile: update xx to v1.2.1
99a8ad00 fix: rename log to logrus
f0fdaff0 Fix the issue that the debug server with port 5001 run twice
e2a43ec8 Fuzzing: Move over two fuzzers from cncf-fuzzing
9fb201e2 Remove registry storage testdriver
434cc087 Bump to 2.8.x as the current version
d141b657 We already had instructions for this, use them.
7e51e717 Add information about security
49e2de28 reference: add BenchmarkParse
b50c049f reference: TestParseRepositoryInfo: use subtests
af36dd69 reference: TestParseDockerRef: capture test in loop
3fa6d5a3 remove dot-imports for gopkg.in/check.v1
5f1df021 registry/errors: Parse http forbidden as denied
ba4a6bbe Update Azure SDK and support additional authentication schemes
973bfbb6 Fix Go Idioms
8fe4ca40 Option to configure proxy cache TTL
c624b9ed Use docker-compose spec v3 in nginx receipt
88646f54 Support annotations in the OCI Image Index
4c1561e9 Fix runaway allocation on /v2/_catalog
e72294d0 Split OCI Image Index from Docker Manifest List
5fa926a6 Enable pushing empty blobs
2074688b Fix S3 multipart upload pagination loop condition
9594fbcf build(deps): bump golang.org/x/net from 0.4.0 to 0.7.0
3117e2eb Use default http.Transport for AWS S3 session
2179a5f6 add double newlines in ADOPTERS.md
165fd5f9 Update fossa-contrib/fossa-action action to v2
a811c1bb Log username on successful requests
d1c18681 Fix separator regex
345be954 vendor: golang.org/x/net v0.4.0
59f13577 remove script directory and fuzz left-overs
19233195 Align code to match order of fields
86cd830f Descriptor: align field order with OCI image specification
0b4311d5 manifest: improve test output and use const
f2db7faa registry/storage: rename variables that collided with imports
030489ca testutil: rename variables that collided with imports
0e3efe74 manifest: rename variables that collided with imports
b91c9a22 ci: add concurrency check
2400718d ci: update github actions
ff2bce27 manifest/schema1: mark docker manifest v2, schema 1 deprecated
89384541 Fix json formatting in registry api docs
02e88c0f reference: move exported regexes to separate block
a4cec8ca reference: introduce const for "localhost"
bbd41f40 reference: introduce remoteName variable
71a06663 reference: optional repeated == any number of times
919bd8ab reference: add const for (optional) port, and rename "domain" variable
f0c7c97e reference: remove remaining uses of "expression()"
04d6592d reference: remove "literal()" utility
c786a2bd reference: inline "group()"
1d4917d4 reference: expression(): use strings.Join()
a7e7ff93 reference: align docs and variables with grammar
32a4d8e3 reference: fix docs for NameRegexp
226b21be reference: make some regexp vars a const, remove intermediate vars
10eace9a reference: document consts for normalizing and legacy domain
53757ea3 reference: ParseDockerRef: slight refactor, and update docs
2bf5e187 reference: remove left-over occurrences of "short-identifier"
8163e20c reference: splitDockerDomain: remove incorrect "TODO"
b6a040fa reference: run tests with t.Parallel()
5703bcf1 reference: use subtests for regex tests
f481f877 reference: use subtests for reference tests
9337b8df Fuzzing: Rewrite existing fuzzers to native go fuzzers
35cae109 Realloc slice exponentially in mfs
1d8cd5e4 registry/client: use struct literals
d71ad5b3 transport.NewHTTPReadSeeker: return concrete type, deprecate ReadSeekCloser
019ead86 deprecate ReadSeekCloser in favor of io.ReadSeekCloser
842d4c04 cloudfront: use strings.Equalfold()
3b391d32 replace strings.Split(N) for strings.Cut() or alternatives
2cd52d5c simplify mocks
552b1526 reference: check for prefix instead of splitting, and use consts
7b651a96 digestset: deprecate package in favor of go-digest/digestset
1052518d reference: implement Sort()
bf725364 Remove uses of deprecated go-digest.NewDigestFromHex, go-digest.Digest.Hex
30f5f41d Use GitHub https url
3c71f493 referene: fix formatting of "deprecated" comment.
79d19015 replace deprecated function
6d4f62d7 reference: remove support for deprecated "shortid" refs
b73c0380 registry: configureLogging() simplify logic a bit
f1dff3e4 registry: use consts for some defaults
f8b3af78 replace deprecated io/ioutil
e0281dc6 format code with gofumpt
6dbb55ad Update doc to reflect that logs go to stderr
f9ccd2c6 use http consts for request methods
b1285c33 go.mod: github.com/spf13/cobra v1.6.1
ebc4234f Delete S3 keys incrementally in batches
bad5dcb6 fit get status issue
d6ea77ae refactor: rename WeakStringList to AudienceList
9c04d0b3 Revert "registry/client: set Accept: identity header when getting layers"
8cc5b4f5 Add Go 1.19 to GHA
3472f7a8 feat: accept lists in the token audience claim
97fa1183 feat: add WeakStringList type to support lists in aud claim
10975dea build: harden codeql-analysis.yml permissions
e09a9f2d build: harden e2e.yml permissions
c26fe145 build: harden conformance.yml permissions
1ca9af01 build: harden fossa.yml permissions
feaa75c5 build: harden validate.yml permissions
1667a668 build: harden build.yml permissions
e36cb0a5 registry/storage/cache/memory: Use LRU cache to bound cache size
f9dee9dc vendor: golang.org/x/net v0.0.0-20220906165146-f3363e06e74c
e24be4e8 fix all json syntax error
567158c3 configuration: use "fake" values for tests
fbdfd1ac Use http.NewRequestWithContext for outgoing HTTP requests
0e17e540 dockerfiles: formatting
b066451b dockerfiles: set ALPINE_VERSION
7e546784 ci: move test step to build workflow and remove ci workflow
1a905ab9 ci: git validation target
8b2c54bf ci: remove dco check (dco bot already does this)
52a88c59 Update to xx 1.1.1
c3074d09 Change GET in example request to POST
57ea90fe Update the BUILDING.md to a world with modules
3801e37d Fix grammar mistake
87d9edf7 Add build tags to BUILDING.md
853e2e92 Do not recreate mux router for each incoming request
d5b2f94c Say when a config error is caused by an env var
c895369b Review contributing for Docker references
9e74396f Fix API doc parameter placeholder: last
bbeffe6a Fix comment for manifest list
53a6f7d7 registry: support ipv6 addresses
8628eab4 fix json syntax error in error api spec
ba29eb8a Update maintainers mailing list
3bd75427 go.mod: remove outdated comment
9f2bc25b Fix CVE-2022-28391 by bumping alpine from 3.15 to 3.16
ec47096e vendor: github.com/prometheus/client_golang v1.12.1
6e8dd268 update to go 1.18 (continue testing against 1.17)
18b4da91 Update golang-ci-lint to v1.45.x
7548c315 cleanup old check behavior
26a586cf lint target and workflow job
87f93ede Dockerfile: switch to xx
b2b3f860 Remove workaround from 2.1.1 for faulty 2.1.0 manifest links
de240721 cleanup old vendor validation behavior
c0526595 mod-outdated target to check for outdated dependencies
ffa3019c validate and update vendor target
15de9e21 Add forcepathstyle parameter for s3
d64056af Explain important caveat in htpasswd tutorial
48f3d9ad Fix typo
8eab5d1b Update s3 ListObjects to V2 API
18b2b9f4 Added some secure compilation options PIE
80952c9e Rename s3accelerate parameter to accelerate
ea27621d Fix review
51c0c814 Add new parameter s3accelerate to S3 storage driver.
966fae54 Add tests for all supported storage classes
69b1e011 Added some secure compilation options, especially PIE and RELRO.
fb937dea Support all S3 instant retrieval storage classes
1a75c719 Fix panic in inmemory driver
25bd1f70 Incorrect variable in test output
decc64eb go.mod: github.com/aws/aws-sdk-go v1.43.16
fabf9cd4 ci: use proper git ref for versioning
4f1c1e42 go.mod: github.com/Azure/go-autorest/autorest v0.11.24
ebd3f441 Update golangci-lint version and fix reports
676691ce Fix: Avoid a false type assertion in the inmemory driver
79ead619 go.mod: spf13/cobra v1.0.0
f9c1b86f go.mod: add replace rule to prevent unwanted updateds of grpc and jwt-go
4363fb1e disable insecure cipher suites
ea65fe2e update build workflow
3b83bce7 docs: update some URLs and remove some of the Docker branding
ae248991 Remove code related to building docs with Hugo
ff0c463f Remove docs.docker.com "include" directives
706f2170 fix image cache incompletely
342aff71 Revert "Remove old documentation source, add README on migration"
89622d99 Replace references to `re` with `regexp.MustCompile`
1c89ce5f Improve how reference regexps are built
846be378 Update note on Docker official images
936d7eda ci: upload conformance test results
6332e963 ci: fix conformance and e2e workflows
4941d83c ci: build workflow to release artifacts and multi-platform image
117757a5 feat: add option to disable combining the pending part
e2caaf9c Add dualstack option to S3 storage driver
81a2d171 Update aws-sdk to 1.42.27
f13d1e02 dockerfile: native cross-compilation
99c408aa Add cncf-distribution-maintainers@cncf.io to maintainers file
6f3cc81b Add CNCF Security email account
90d24a63 Fix email address for milos
d0ca0c33 Fuzzing: Add 3 fuzzers
4f173262 patch-1 - adding more info to the error message
579107cf Improve error message in case invalid env var found
6fbba6a9 go.mod: github.com/opencontainers/image-spec v1.0.2
f637481c fix go check issues
b59a6f82 manifest: validate document type before unmarshal
f2f9b296 Update insecure.md
f619db73 Fixed typo in error message
3f4c558d bump up golang v1.17
7736319f fix: paginate through s3 multipart uploads
f6a54b0d Update most links to use https by default
f5709b28 updatefrequency should not be saved into duration
dea56fae (docs) Fix rendering of markdown links in OAuth docs HTML
7b77a24b Revert "Remove info on service accounts"
715959c1 Remove info on service accounts
3e68d47d chore: update azure go-autorest dependencies
b07018ff docs: update release-tool link
1660df4b Change should to must in v2 spec
cf81f67a storagedriver/s3: Optimized Walk implementation + bugfix
072bad48 Add missing code-hints, and minor markdown edits
9b971331 Desktop: move "docker-for-windows" to "desktop/windows"
31c9a9d7 Desktop: move "docker-for-mac" to "desktop/mac"
576f4fc0 fix broken link for setting up local registry with auth
9e873f31 storagedriver/s3: Adding back missing import.
e625bc71 storagedriver/s3: Removed temporary S3 test
dc5b7710 storagedriver/s3: Cleaning up tests
6da7217b storagedriver/s3: Optimize s3 Delete test cleanup.
03f9eb3a storagedriver/s3: Fixed a Delete noop edgecase
05a258e7 storagedriver/s3: Added Delete tests to s3_test
a07b54eb Update to go 1.16, and run CI on 1.15.x and 1.16.x
ee8c75cb registry: use "console" for shell examples
0f50e038 use memory as the cache in test
351b2607 Fix OCI conformance workflow report and README badge
21ffbdbe Change GH workflows job names
9c7967a3 Update PUT and PATCH APIs
3f09e31e Fixing http status for PUT/PATCH APIs
1003ce30 Update deploying.md
4ff7f21b Update pull limits for service accounts
d3cd41aa Propose Sargun as a maintainer
7244cd3b typo: a client implementation
6d9a3aba fix the /v2/_catalog n parameter description
8f211541 Update link to logo
9b8feef0 Update distribution logo
56413091 Update API spec
033683d6 apply feedback
3d717101 Updated service account links (#12953)
aaca79bf add oci conformance test gitaction
1777a5ba Updating registry help (#12948)
1fa75f31 Indent webhook notifications Authorization header
81f081f9 Group case values
1398d3b5 Remove unrelated spec update
22053f57 Fix listener tests
6ae6df7d Add tag delete API
933ee1fd fix the /v2/_catalog n parameter description
8ef268df Add tests for tags list pagination
df39a779 FOSSA scan enabled
d7a2b144 add content range handling in patch blob
09334b5e fix typo
8e8d5099 add documentation how to access pull-through proxy stats
fefc0e2b Fix html not rendering markdown link properly
835651e5 Release ticker resources
9cf39997 added pagination error to api docs
4da2712b added pagination to `v2/<name>/tags/list` endpoint
febc8733 added error codes for pagination
226ad1e6 go.mod: update logrus to v1.8.1
06c8d441 go.mod: gopkg.in/yaml.v2 v2.4.0
a49afdbd Adding in points to clarify usage of official images (#12713)
0a7648ed Fixes docker/distribution-library-image/issues/107
9e618c90 registry: verify digest and check blob presence when put manifest
62fc5c8a Remove autobuild
a0aad572 Make workflow name shorter.
334a7e7f close the io.ReadCloser from storage drive
23b57027 Add docker image release workflow
68ce1586 fix CI dependency error
b2ac3a28 TASK: Add codeblocks to code examples
1a059fe7 Populate the platform information when calling the References() method of manifest list
32ccbf19 Add configuration option for Redis TLS
43e50259 log: Include configured fields in all logs
8ad73297 Remove duplicate code of conduct
1e625d00 Added flag for user configurable cipher suites
c432849e docs/spec/manifest-v2-2.md: fix ARM variant
49f7426d Bump Golang to `1.15` and Alpine to `3.12`.
9c43ba9d fix: disable DisableHTMLEscape on logrus json logging
907e7be5 Bump Logstash hook for logrus to `v1.0.0`.
c95293bb Add Codecov badge
1d338749 go.mod: change imports to github.com/distribution/distribution/v3
e7dc768a Self-signed certificate with Kubernetes fix
639de6a0 Fix typo for digest regexp
4d34a317 Correct spelling: decription -> description
084c0bd1 Fix typo in docu of NewURLBuilderFromString()
f0c93f65 Fix typo in NewSimpleManager() documentation
5a3f698f Change Build Status badge URL
0517a1c7 Propose two maintainers from Mirantis
fa289406 get rid of apache2-utils
6e4e8298 Update README badges
bddb8d42 Removing travis
edf4afcb Revert "Merge branch 'main' of https://github.com/distribution/distribution into main"
98868008 Add a basic e2e test for CI
402d3c94 Fixing push workflow
b659eb06 Update ci.yml
da9a88bc Fixing push workflow
64874d17 First draft of actions based ci
b431b34f update slack channel to CNCF slack
a63bd4d3 Add CodeQL Security Scanning
977c98e0 Fix broken links
239c368f Per distribution call, adding Steve Lasker as a maintainer to help with OCI and Notary collaboration.
c30c5b31 Replace Arko with Milos as a maintainer
67c504de Update roadmap, add code of conduct file
78242c79 Update insecure.md for Docker Desktop (#11964)
07b948ea Dummy workflow to enable GitHub Actions
2d16db2a Add Adopters
911eaf03 Update README a bit
d11c4f9a Add new maintainers
87cbd09f Ignore self reference object on empty prefix
03aaf6ab Bump Gorilla Handlers to `v1.5.1`.
c8d90f90 Remove empty Content-Type header
430bf259 update http://dockr.ly links to use TLS
82f04d03 Remove references to obsolete engine versions
c26fa61e Update repo normalize error message to include the name of the repo.
2059160c Remove Docker Toolbox docs
e02cd812 Use https:// for links and examples
3ec5e7e0 Add rel="noopener" to external links
a19e1847 Fix bug in parsing domain from repository reference
34f13226 Fix hardcoded credential provides.
264e26fd Bump Redigo to `v1.8.2`.
545596ae Bump Gorilla Mux to `v1.8.0`.
1cee02e7 scripts: remove unused md2man from dev-tools
8a8d9152 vendor: opencontainers/go-digest v1.0.0
9466dd4e Update logrus to v1.6.0
e1464fd3 Bump AWS SDK
95f1eea5 manifests: Return UNSUPPORTED when deleting manifests by tag
a784441b catalog: List repositories with no unique layers
eaeb3160 Add azure config container example (#11152)
f361d443 clean up code because err is always nil
32c77af6 Clarify repo name regex intention
2672c0eb Relax filesystem driver folder permissions to 0777 (cont)
7728c5e4 docs: add redirect for old URL
dc7801c5 Add note on Docker Hub
989101c8 Remove some references to enterprise products
9690d843 Support ECS TaskRole in S3 storage driver
81ba770e Fix CI failures, upgrade to Go 1.14+
40f4476d Remove not really implemented s3accelerate option (#10993)
a2ed1b5e Added dist: bionic, updated go version to 1.14.x and set GO111MODULE=on
b338d2f6 Get Docker: fix broken links and wrap markdown to 80 char (#10691)
aee0eeb3 registry: use relative markdown links
55f88c35 Adding s390x support.
267e231d Fix various links that were generating URLs with `.md` (#10548)
78c2ab66 Fix gosimple checks
cdb4ba94 Fix err shadowing in gcs driver
bf56f348 Update oci library
be29c05a Remove deprecated cache metrics code
495a4af7 Fix goimports
74d442a0 Consider redis.ErrNil as distribution.ErrBlobUnknown for Stat HGET
79589266 redis metrics
ce101280 fix redis caching issue
4c7c63b5 Add cache unit test
800cb958 Use go-events package
1e25ecef Update governance and maintainers
db3c418a Update reporting issues guidelines
98dcc519 vendor: update docker/go-metrics v0.0.1
cb2a09fa Update tables from html to markdown format (#10360)
15f7bd29 Remove {get,head}WithContext()
282351e9 Use http.NewRequestWithContext()
58331abf Honor contexts passed to registry client methods
5e3911c2 update registry s3 storage driver docs to add skipverify flag
e65b3f13 Fix CI for test updates
efdba4f2 Increase Unit Test Code Coverage
1f77c9a5 Update Golang 1.13.8
9b6a0190 prevent dev-tools from updating go.mod
7e290869 vendor: update golang.org/x/crypto v0.0.0-20200128174031-69ecbb4d6d5d (CVE-2020-7919)
01654953 Dockerfile: use alpine 3.11
974375f6 re-vendor with go 1.13
4ae059c7 Update Golang 1.13.7 (CVE-2020-0601, CVE-2020-7919)
66809646 Migrate to golangci-lint
23f6bdd7 Use same env var in Dockerfile and Makefile
fdb1abd3 Added Nginx Recipe Redirect
6ca7b9e9 Fix TestRegistryAsCacheMutationAPIs
f5e84a49 Update readme and contributing docs
0f5e2753 Fix typo cloudfront updatefrenquency
c9c33243 Add unit tests for BlobEnumerator
5538da49 fixes to make layersPathSpec work
fa7d9494 allow Repository.BlobStore to enumerate over blobs
cf771137 add pathspec for repo _layers directory
b4694b0d Fixing broken table
070cc010 bump golang to 1.13.4
f580993c fix typo
cc97b94f use travis, not circle, build badge
07a50201 Adding deprecated schema instructions
1c481d34 registry: Fix typo in RepositoryRemover warning
a994bb83 use latest version of alpine when building the Docker container
d6167089 removing section for Chinese mirror
c486db2d make it possible to wrap the client transport in another one
dfcc7bcc [sec] nginx/compose: Drop aforementioned loophole
92d213d2 allow for VERSION and REVISION to be passed in during docker builds
dd3bdee2 implement Repository Blobs upload resuming
898b1f2a test httpBlobUpload.Write method
c5d5f938 fast-stop ServeBlob if we're doing a HEAD request
3800c47f Implement Repository ServeBlob
a45e5cb1 handle create blob if the uuid couldn't be retrieved from headers or URL
8b31a894 deduce blob UUID from location if it wasn't provided in the headers
94097512 extract blob upload resume into its own method
b23dd1ef swift: correct segment path generation
afe29bb6 update the golang compiler version and the versions of several dependencies
45b2d049 use latest version of alpine when building the Docker container
5223c274 migrate to go modules from vndr
8f9c8094 replace rsc.io/letsencrypt in favour of golang.org/x/crypto
414cebd4 Update link to DTR
0e2d080a append the written bytes to the blob writer's size
5afbf324 fix no error returned in fetchTokenWithOAuth
74f429a5 Fix typo: offest -> offset
51bb5cee import alicdn package
fd77cf43 change package name & format document
c18c6c33 S3 Driver: added comment for missing KeyCount workaround
f8777265 Fix s3 driver for supporting ceph radosgw
3390f32a fix Context issue
ae91d1f4 fix ci issue
6e10631d fix default cdn auth duration
e1e72e95 Fix cloudfront documentation formatting
f9a05061 Bugfix: Make ipfilteredby not required
a683c7c2 Fixes #2835 Process Accept header MIME types in case-insensitive way
bbc9885a fix func name
92a64367 rename the metrics label
3be1cdec Update help.md
d5a615b8 update the event number
09a63caa run go fmt and goimports
228bafca run go fmt
76da6290 add label to the metrics
8b706168 Add notification metrics
ec6566c0 Log authorized username
3aa2a282 support alicdn middleware
297ba124 Use consistent formatting for notes
48818fde Remove err nil check
da8db466 Fix gometalint errors
43b914b6 Update nginx.md
b98fb58a Document registry s3 transfer acceleration option.
560471b5 Update deploying.md
582d8e62 Revert "Fix error (small change, only 1 line)"
06205627 Fix error
bda79219 Add code to handle pagination of parts. Fixes max layer size of 10GB bug
15b02047 registry: fix binary JSON content-type
cdb62b2b Registry - make minimum TLS version user configurable
c7386154 Update insecure.md
7df881dc change default Dockerfile to install ssl utils
f9d531c4 404 registry API
0ac367fd Add reference.ParseDockerRef utility function
eb1a2cd9 default autoredirect to false
f89f0867 Update nginx.md
b7839211 Update doc for BYOK support in OSS storage driver
90bed671 Support BYOK for OSS storage driver
01ceef9f Restoring open source registry garbage collection page
1251e51a better name and updated tests
9ebf151a API to retrive tag's digests
e92760a3 Spelling revision
2fda032d Delete tag-pruning.md
b0bb8437 Delete garbage-collection.md
50dacc55 Initial draft of product manual for tag-pruning
71d02b10 Add online garbage collection feature and known limitation as described on DTR Workshop doc
f04f6208 Revert "Revert "Merge branch 'master' of github.com:docker/docs-private into test-branch-2""
88038ffd Revert "Merge branch 'master' of github.com:docker/docs-private into test-branch-2"
b9c4182e Revert "Revert "Merge branch 'master' of github.com:docker/docs-private into test-branch-2""
2df45044 Revert "Merge branch 'master' of github.com:docker/docs-private into test-branch-2"
7eac5fad Revert absolute path change
bfd7156f Grammatical and spelling updates
955f7ef6 fix: configuration reference link
8112d01b nginx.md: Add note about potential security isues
ff786644 Update deploying.md
f497e79c Update part2.md (#6475)
1b6e19d6 Update link to Docker Trusted Registry (#6479)
9042088f Fix "Run the registry as a service" link (#6289)
f0fe5c38 registry/filesystem: mention umask (#6276)
e80e5f2e Update swift.md (#6054)
4a9ec817 Update azure.md (#6053)
c594eb1f Mention that rootdirectory prefix has to be pre-existcreated
198ebadc Fix links not rendering properly (#6049)
35cca3f0 Update compatibility.md (#6043)
db6444ac Update mirror.md
947af10c Update insecure.md
1edd9dcc Update notifications.md
a92ed35a Fix port requirement for SSL of docker registry (#5973)
09d8e4bd Favor docker <object> <verb> format of commands (#5914)
f1fb0683 Various copyedits to reduce future tense, wordiness, and use of 'please' (#5788)
b5bbca9e Improve Cloudfront notes regarding private buckets (#5225)
a6edcada Correct parameter names for --publish long syntax (#5457)
a8dac1ad Navigation under "Reference" and "Manuals," Registry warning, "Latest" UCP/DTR (#5469)
82530e5a Add alt text to images which are missing it (#5047)
93600752 Update docs for new publish syntax (#5323)
3d5f8b03 Add link to forums in registry docs (#5308)
e6983745 Add tests for configuration parser
c9eba1a5 Fix the pointer initialization
d549a5cc Prefer daemon.json over command-line flag
e25f858b Remove deprecated '-d' option to start daemon
b5975461 Update deploying.md
e95522ec Update notifications.md (#5045)
e61eb68b Deploying Registry: Fixed ports on HTTPS (#4965)
c8d82bbd Docker service registry not running correctly (Replicas 0/1) (#4641)
1f640d19 contraint instead of label to create Registry on node1 (#4644)
8b93c509 Update b.o. Error while creating Registry Service (#4465)
675ffdbd Fix Typo (#4575)
fd9fc031 Use nginx image which supports bcrypt (#4489)
f01d83d6 Update mirror.md (#4506)
5096a16d Update garbage-collection.md (#4317)
e4f126c1 nginx does not support bcrypt when using auth_basic (#4332)
90a402d9 fix registry template plist location for launchctl (#4333)
aa6e6971 Update compatibility.md (#4321)
c1950e12 Update index.md (#4323)
aa2955a7 Update index.md (#4322)
3ae7d9ca Update insecure.md (#4318)
e98a162c Update osx-setup-guide.md (#4316)
d18e3a63 Update filesystem.md (#4324)
a2500623 Add China registry mirror section (#84)
a9549228 Fix borked link (#4097)
a1088938 Remove sentence about super old Docker (#4099)
2aa6e2ae Documentation typo fix (#4087)
c2bbc7ea fix default secrets path in container (#4011)
3c1aeebc Fix links to subtopics in index.md files by include full path (#4054)
23c116b7 Fix link to requirements (#3970)
a59d321e Fix link to requirements in Nginx recipe (#3969)
c6f6c44e Remove v2-registry-auth image (#3965)
cb3f2ace Update mirror.md
cf36ad3c Improve tip on log messages (#3888)
82998e10 Add tip about error message in registry cache (#3874)
b19b19cc Fixed spelling of 'exammple' (#3769)
31619aed Reorganize registry deployment guide (#3485)
8ac75794 Point to newer registry topic (#3719)
55aec8a4 htpasswd passwords should use bcrypt hashing (#3401)
c60e7107 Add use case for China registry mirror (#3682)
6508f123 Reword sentence
bbbafb0e Update notifications.md (#3399)
efa76b98 Update oss.md (#3448)
4da4fc02 Update compatibility.md (#3445)
528d2279 Update insecure.md (#3444)
78d25013 Update garbage-collection.md (#3443)
a6fc3fa7 Update osx-setup-guide.md (#3442)
2c19d1ca Update apache.md (#3441)
119a48eb docs/spec: provide a valid manifest-v2-s1 example
3244e471 docs/spec: provide a valid manifest-list-v2-s2 example
b9220191 Fix typo in markdown (#3371)
864905cf "as mall as possible"=>"as small as possible" (#3372)
a5b2b63b Update deploying.md (#3373)
aed6cb22 Reverted (#3393)
1b6da36a Add section on China registry mirror (#3379)
7c5b1e60 Remove registry/architecture.md from docs repo (#3365)
9161e93e Update introduction.md (#3353)
4f582ad9 Add instructions to remove also proxy_set_header Host (#3156) (#3342)
ed56794d Use daemon.json everywhere possible (#3252)
eb2763d8 Update index.md (#3102)
f1899170 Self-signed certificates setup on Windows (Part 1) (#2909)
b5889701 add warning class and a linebreake to the warning blogquote (#2937)
7cf8dc7c Spelling mistakes (#2970)
547233ee replaced docker/docker with moby/moby (#2879)
b2635632 Updated the registry documentation to include an example for the config.yml file
13022287 init
39a8fcd8 Fix table formatting and endpoint template examples (#2726)
5cf92032 Updating table to remove extra closing table row (#2725)
fde52284 Fix some links (#2584)
00d1f820 Fix spelling errors (#2409)
eb77e2f7 Docker 17.03 release (#2050)
6f785666 Add info about fetching credentials from IAM role
d12fce88 Change erroneous push to pull (#1555)
ee6aa7d3 Update links to DTR
042cf0f5 Updates broken links for #1068
8edea601 Correct wrong default value
943860f0 Update gcs.md
09fdbf47 Lossless Image optimization (#959)
5a2e1bf6 improve formatting on insecure registry openssl command (#873)
5e614987 Do not add second Api-Version header
81498934 Disable parameters substitution in heredoc
cc72cef9 Transform html into markdown
c7bc40bc registry/azure.md: fix broken syntax/links
ea84d17e Improve section about AWS policy
c7dab7f3 fix typo in spec/api.md
82eb4bc3 Pull distribution reference docs from upstream
cc71beda fix type of keywords entry in frontmatter (in /registry/) (#517)
bc1e1621 Change instances of alias: to redirect_from:
908a1f14 Converges titles to imperative-form, front-matter based, and sentence-case (#438)
8c922b0c Revert "Merge pull request #437 from gdevillele/fix_keywords_format"
3d147416 fix more frontmatter keywords values (#439)
2ecf05a7 absolute links to docs.docker.com are now relative links
81b038a8 removed menu.md files
e63f5950 Formatting fixes
8e8290bd Formatting fix
bd9f8c7f Update mirror.md
70c7657c Update branding for macOS
b206e8b2 Add note about configuring a registry cache with delete enabled
50bd0cce Delete api.md.tmpl
677eaaa3 Change 'draft: true' to 'published: false' for Jekyll
9204a649 Rendering fixes, part 2
856dacad Content rendering fixes
b3b099f0 Removing merge detritus
9e3c43c6 Removing empty front-matter
2d32aa43 Fixed typos
0fb207c8 Convert TOML to YAML, tweaks to work with Jekyll
dd414106 Moved registry docs to registry subdirectory
b2da4f33 Moved imported orca docs into ucp directory
a56d36fd Initial commit -f https://github.com/docker/orca
be487836 Moved docker-trusted-registry imported docs to apidocs and docker-trusted-registry subdirectories
d4f01b81 Initial import of https://github.com/docker/dhe-engine
e9de6f2a Moved cs-engine docs to the cs-engine subdirectory
734f334d Initial import of https://github.com/docker/cs-docker
f0a62ccf Initial repo commit
1f3cc591 Document TOOMANYREQUESTS error code
8d287d43 Improve flag help consistency, and update docs
93f029e8 Allow v1 search to use v2 auth with identity token
c8aba9b4 registry: avoid formatting errors with %#v
9e211edc Changes the client Tags All() method to follow links
1c5cb127 fixed s3 Delete bug due to read-after-delete inconsistency
6eadd3f4 fix typos
d2e5d5c2 If resumable digest support is disabled, detct this when closing the blobwriter and allow the close to continue. Also update the name of the function.
7b97265d Expose EndpointType parameter in swift storage driver
9a27ea73 Add support for Let's Encrypt
a58c7430 Fix logrus formatting
5de53e34 Update "Accept" header parsing for list values
f3ae941c Add option to get content digest from manifest get
ec7c5913 Clarify API documentation around catalog fetch behavior
4e09e1b6 registry: use const for status code 429
08426ad1 Add `--limit` option to `docker search`
6d0db0e2 fix typos
d265da73 fix typos
d3b61b61 Remove signature store from registry. Return a generated signature for manifest pull.
f1b815ed Pass in `app` as context to apply{N}Middleware
04476ff5 Add Unit test to daemon.SearchRegistryForImages…
dd66aabe Add support for layers from foreign sources
50e6eef0 Add support for blobAccessController middleware
bb841197 Add 'us-gov-west-1' to the valid region list.
e57fd4fa StorageDriver: GCS: allow Cancel on a closed FileWriter
af00617b Blobwriter: call BlobWriter.Size after BlobWriter.Close
ddec5464 StorageDriver: Test case for #1698
1e05d81a Don't wrap thead limits when using a negative int
db274d3c registry: do not use http.StatusTooManyRequests
8762c800 registry: type too many requests error
cbae4dd7 Implement regulator in filesystem driver
28be207b Pass through known errors
2a2577d7 When a blob upload is committed prevent writing out hashstate in the subsequent close.
63d28d3b Add a test with a missing _manifests directory
3a034b47 Move garbage collect code into storage package
898fdb48 Ensure GC continues marking if _manifests is nonexistent
8775da93 Fix wording for dry-run flag in useage message for garbage collector.
a88088a5 Regulate filesystem driver to max of 100 calls
54edbdfe separate the go/non-go imports and reorder
c4778ea1 Respect ALL_PROXY during registry operations
3336cc13 modify redirect test to include port
fba2e3a2 scheme and host mandatory in baseurl
cec7248b separate the go/non-go imports and reorder
d11a9795 Sorting completed parts by part number for a better accordance with the S3 spec
56480ce8 Add default `serveraddress` value in remote API `/auth`
6615b77a Add blobWrtiter.Close() call into blobWriter.Commit()
a691d82a add middleware storage driver for redirect
fdb0fb77 add cn-north-1 to valid check
ea5abc99 wait for DLO segments to show up when Close()ing the writer
346bfed9 docs + fix test Signed-off-by: Nikita Tarasov <nikita@mygento.ru>
007af250 fix test Signed-off-by: Nikita Tarasov <nikita@mygento.ru>
b55719da test
63fe2d14 Update swift.go
84aa48b5 detect outdated container listings during Stat() and getAllSegments()
c6552412 Only check validity of S3 region if not using custom endpoint
86ca50df Ensure we log io.Copy errors and bytes copied/total in uploads
53a8806b 1.change validateNoSchema into validateNoScheme 2.change schema into scheme in docs and some annotations.
3d4b652b Update the gc documentation.
31ece3d3 Fix signature handling with GC.
15e3ffb3 Add a --dry-run flag. If enabled this will print the mark and sweep process with removing any files.
59ef6d2d garbagecollect: Clean up errors
b015bf06 don't swallow errors in Swift driver's GetContent()
091ad891 Remove the example
0f09bcd1 Add documentation for how to register new StorageDrivers
0f4b8d34 Correct login debug log message
d52cbf92 utulize config log format within gc
3dd506d8 Enable URLs returned from the registry to be configured as relative.
f93d1660 Propogate tag as a functional argument into the notification system to attach tags to manifest push and pull event notifications.
5f38f0b1 fix manifest revision search, closes #1535
e6b317f9 registry: client: auth: type errors
20bba402 registry: client: repository: close response body
7f7cb821 *: fix response body leaks
b4d9ae60 registry: endpoint_v1: fix outdated comment
d5160a02 daemon: update: check len inside public function
9638c764 Include status code in UnexpectedHTTPResponseError
98140ca0 Update missing blob error checking with latest Azure API
c94c2a47 Don't return empty errcode.Errors slices
789c90ac registry/storage/driver/s3-aws kms support
2f170573 Remove Windows-specific default registry definitions
eea043dc Removes ceph rados driver in favor of Swift API gateway support
7caf33d6 Move registry service options to the daemon configuration.
3e2da426 fix some typos.
19cfa36e Added support to specifiy custom endpoint
cbd95acb Add support for identity token with token handler
259ef42c Add client ID to token fetch to GET endpoint
490a2f5a Updates Swift driver to support new storagedriver.FileWriter interface
5b48c815 Support FileWriter interface for OSS storage driver
9432b18e Storagedriver: GCS: add chunksize parameter
115a6e58 Storagedriver: GCS: implement resumable uploads
34891eb7 StorageDriver: Testsuite: call Close before getting Size
c69c8a32 Adds new storagedriver.FileWriter interface
5ca3b616 Fix two misspellings in source code comments
e09891e2 URL parse auth endpoints to normalize hostname to lowercase.
2494c28e [driver/s3aws] Update s3aws driver parameter parsing to match s3goamz
c536ae90 Fix oauth cross repository push
e0420f40 Add offline token option
d6a17782 Add post token implementation
6a6c22e2 Add options struct to initialize handler
f49bf187 Fetch token by credentials and refresh token
396a73de StorageDriver: GCS: remove support for directory Moves
065ddf01 Login update and endpoint refactor
e123ca92 Remove email address field from login
b7d34241 Implements garbage collection subcommand
d16f3046 Fix some typos in comments and strings
ecc560f4 Commit blob with known size
29e0411f Enable proxying registries to downgrade fetched manifests to Schema 1.
776e01f8 Defined ErrAccessDenied error
c58aa8a5 compare error output in tagstore unit test
9a2cef38 Change APIEndpoint to contain the URL in a parsed format
18fd1c07 Extend authChallenger interface to remove type cast.
2e824482 Fix description of StorageDriver.WriteStream
20bc910c Cleanup: remove unused log
c6871737 [driver/s3aws] Fix TestStorageClass
7d16fee7 To avoid any network use unless necessary, delay establishing authorization challenges with the upstream until any proxied data is found not to be local.
c21f4eb5 Add credential authenticator interface
7ca24a7f fix gofmt
ad6a0735 closes #1461, enhance log message of oss driver
d5a38e4c Adds new s3 driver using aws-sdk-go instead of goamz
4bb475cd Push/pull errors improvement and cleanup
cffb4bbb Export "no basic auth credentials" as an error value
f77c82eb Typo fixes in comments
956ece5c Add option to disable signatures
ae595179 Fix schema1 manifest etag and docker content digest header
4bb5f808 Improves flexibility of configuration handling for S3 driver
c89f5b37 Add information about manifest content types to API spec
9894643c Correct type for repo reference Signed-off-by: Richard Scothern <richard.scothern@gmail.com>
6158eb54 Rename Name method of Repository to Named
95b9c728 read the actual number of bytes according to the initial size.
bbf983c0 On redirect, only copy headers when they don't already exist in the redirected request
091c12f8 Print the correct token expiration time Signed-off-by: Richard Scothern <richard.scothern@gmail.com>
95a50c72 Correct ErrAuthenticationFailure message
a2ade36e Adds test for S3 storage class configuration option
8e791082 Adds "storageclass" configuration parameter for S3 driver.
f41a408e Adds custom registry User-Agent header to s3 HTTP requests
badd8c49 Update auth context keys to use constant
8e571dff Add a CheckRedirect function to the HTTP client
a58b7625 Support range requests in the client's httpReadSeeker
377f5564 Respond with 401 when there is an unauthorized error from the registry.
3e570e59 Invalidate the blob store descriptor caches when content is removed from from the proxy. Also, switch to reference in the scheduler API.
a7740f5d Correct test digest lengths and enable all unit tests
f757372d Add manifest put by digest to the registry client Signed-off-by: Richard Scothern <richard.scothern@gmail.com>
1eed0ddd Update token header struct to use json.RawMessage pointer
7dee3d19 Storage: remove bufferedFileWriter (dead code)
586b3d47 Storage: blobwriter.Write/Seek test case
6149a8c6 Change URLBuilder methods to use references for tags and digests
e9692b80 Use reference package internally
e9bcc96a If the media type for a manifest is unrecognized, default to schema1
59254013 Handle nonstandard token endpoint errors
0e06c1ca Clarify error message when a .cert file is missing a corresponding key
59a96077 StorageDriver: GCS: retry all api calls
ffc95277 StorageDriver: Test suite: improve cleanup
f9a3f028 Fix content type for schema1 signed manifests
3da0ee00 Do not require "charset=utf-8" for a schema1 with content type application/json
6e85a8d9 Remove the use of dockerversion from the registry package
985c0d60 StorageDriver GCS: try google.DefaultTokenSource first
d3d9282a In testsuites.go, enlarge the size of randomBytes to 128M to fix the crash of running TestConcurrentStreamReads
67aef89b Splits up blob create options definitions to be package-specific
e0d4a45c Fixes cross-repo blob mounting in the BlobUploadHandler
5d35fa34 Change the parameters to the GCS drivers to allow CircleCI testing.
36023174 Adds functional options arguments to the Blobs Create method
93b65847 Fix manifest API unit tests Signed-off-by: Richard Scothern <richard.scothern@gmail.com>
44d95e58 Allows token authentication handler to request additional scopes
41e30f62 Adds cross-repository blob mounting behavior
bbabb55c Move MediaType into manifest.Versioned
fce65b72 Recognize clients that don't support manifest lists
7ef71988 Add support for manifest list ("fat manifest")
66a33baa Add API unit testing for schema2 manifest
f14c6a48 Recognize clients that don't support schema2, and convert manifests to schema1 on the fly
9c13a829 Factor out schema-specific portions of manifestStore
981a573e Modify import paths to point to the new engine-api package.
5c6fdc71 GCS Storagedriver: fix test failure caused by #1187
bf1e41a9 GCS driver: fix retry function
fea0a7ed Remove tags referencing deleted manifests.
72432a70 Show the legacy registry flag only in the daemon arguments
4f4b3d52 Remove usage of pkg sockets and tlsconfig.
b89c4e8c Print error for failed HTTP auth request.
5dc714b3 Replace 404 to http.StatusNotFound
165507a6 Relaxes filesystem driver permissions to 0777 (dirs) and 0666 (files)
cf4fdc1b Serve blobs when a storage driver supports redirects but are disabled
9c7dc47d use the scheme and host from x-forward-proto and x-forward-host if they exits and correct the scheme for Location header during image upload
dc6944d9 In HEAD request for missing resource, only 404 NOT FOUND is returned
693eb14e Allow v1 protocol fallback when pulling all tags from a repository unknown to v2 registry
71ddfd40 When a manifest is not found, allow fallback to v1
8efb9ca3 Implementation of the Manifest Service API refactor.
5717c824 Do not fall back to the V1 protocol when we know we are talking to a V2 registry
46683f61 Update Named reference with validation of conversions
9b8f1a08 Add own reference package wrapper
a077202f Remove tarsum support for digest package
14d27ab7 Move the TestEncodeAuth test to the correct package.
0a56a1cb Move registry.SearchResult types to api/types/registry.
58232e50 Simplify digest.FromBytes calling convention
55fad57a Remove timeout shared function.
aead731d Move IndexInfo and ServiceConfig types to api/types/registry/registry.go
6fc54d04 Move AuthConfig to api/types
11e8c03c Fix typos found across repository
f7bb65ca Refactor ResolveAuthConfig to remove the builder dependency on cli code.
4ebaacfc Remove unnecessary stat from blob Get method
cfd2f039 Support large layer for OSS driver
00cca12e Improved push and pull with upload manager and download manager
d68acc86 storage/driver/s3: adjust s3 driver to return unmunged path
d38e02c5 Print error for failed HTTP auth request.
533c912d Fix the issue for listing root directory
3a5c6446 Fix for stevvooe:check-storage-drivers-list-path-not-found in OSS driver
aa08ced9 driver/swift: treat empty object list as a PathNotFoundError
c39158d4 driver/rados: treat OMAP EIO as a PathNotFoundError
10f7b7bf storage/driver/s3: correct response on list of missing directory
dc5b71af storage/driver/base: use correct error format style
c46d32bf driver/filesystem: address filesystem driver on behavior of List
4829e968 registry/storage/driver: checking that non-existent path returns PathNotFoundError
03778bd1 Add missing bounds in ContinueOnError
be2985a3 storage/driver: decrease memory allocation done during testsuite
ecb84029 Make the catalog more efficient
fb214214 Add clearer messaging around missing content-length headers. Signed-off-by: Richard Scothern <richard.scothern@gmail.com>
d6cc3296 Fix comment for PathRegexp
b596464d Use bulk delete to remove segments in Swift driver
1f5f9bad Validate digest length on parsing
bf2cc0a9 Avoid stat round-trips when fetching a blob
b7d246ef rename req to resp
6693e966 storage: add further tests for Walk implementation
93f92498 storage: enforce sorted traversal during Walk
7bf8f846 storage: correctly handle error during Walk
e1cf7c41 Map error type to error code
beeff299 Use well-known error type
82999376 Verify manifest name format
6fb61830 Verify manifest name length
a9a1b579 Remove name verification
8257e8c4 Use case of type name
73a20910 Check if CertsDir is not empty
6bb27bcf move defer statement for readability
7efcb749 Update daemon and docker core to use new content addressable storage
dde006ba registry/registry.go: simplify logical expression
3eeebe7b Make NormalizeLocalName to not reach the network to normalize names.
18207042 Fix for #17168 misleading pull error
accfa46f Fix empty delete requests with Swift fs driver
9516a01c dockerversion placeholder for library import
f01a70c8 De-obfuscate error message
78b6d648 Before allowing a schema1 manifest to be stored in the registry, ensure that it contains equal length History and FSLayer arrays.
e79324ed Add a generic error type to capture non-typed errors
7840a5bc Fix for issue 664: https://github.com/docker/distribution/issues/664 Errors thrown by storage drivers don't have the name of the driver, causing user confusion about whether the error is coming from Docker or from a storage driver. This change adds the storage driver name to each error message.
34c1d0ed Ensure read after write for segments
11546b53 Add support for temporary URL for Swift driver
afd61ce8 Vendor updated version of docker/distribution
854fa0a4 registry/storage: close filereader after allocation
94913b8f Fix go vet warnings
00f02b5f Buffer writing the scheduler entry state to disk by periodically checking for changes to the entries index and saving it to the filesystem.
98ad17f7 Storage driver for: Google Cloud Storage (gcs)
24de26a8 Revert "dockerversion placeholder for library-import"
c2d5c294 dockerversion placeholder for library-import
b38b98c8 Add `expires_in` and `issued_at` to the auth spec.
9293e3db Fix failing test case
8263cdeb Update "type auth.Challenge" comment example code
fc5ee720 Correct two golint comment issues
84595fc6 Simplify proxy scheduler
c40b2e23 Redundant digest verification in validateBlob
26762a54 Correct unmarshal order for SignedManifest
582a0661 Update to provide small and clear interfaces
b72f1fd2 Add a new reference package abstracting repositories, tags and digests
ed69ef01 Update distribution package
36fa22c8 Fix a race condition in pull through cache population by removing the functionality of readers joining current downloads. Concurrent requests for the same blob will not block, but only the first instance will be comitted locally.
d5ca577a Allow hostname components in component names.
0b543b47 change flag name to better follow the other flags that start with disable;
82965f6c Fix docker search problem
6573d5c1 Add http.host parameter
fa4c33f5 [api spec] Update authN and authZ errors
b045aa2a Avoid importing "testing" in externally-facing code
ebaa771c Prevent push and pull to v1 registries by filtering the available endpoints. Add a daemon flag to control this behaviour. Add a warning message when pulling an image from a v1 registry. The default order of pull is slightly altered with this changset.
cbf83ecd Add an "enabled" parameter under "readonly", and make it as if the mutable handlers don't exist when read-only mode is enabled
df9758ba Add a read-only mode as a configuration option
84e7c07c Remove initial access check from S3 driver
9fb5fe4f Don't return a nil array and a nil error if the Tags endpoint cannot be found Signed-off-by: Richard Scothern <richard.scothern@gmail.com>
b8a1ec41 Avoid returning nil, nil when fetching a manifest by tag by introducing a new error ErrManifestNotModified which can be checked by clients.
49f080ac Add WithVersion to context and other cleanup
cabf1fd2 Allow interface{} keys when using logger
6403bf64 Only use the distribution/context package in registry.go
045db617 Add a cobra command that implements the entire main function for registry
8dd51d64 Move initialization code from main.go to the registry package
2b658054 Make RegistryConfig a typed value in the api.
8ceca304 Skip creating swift container if already exists
8f5f6a4e Add TrustId parameter to swift driver
6e7718df Correctly sanitize location url preserving parameters
bb098c72 Move manifest package to schema1
7dd03e12 More consistent return from ErrorCode.Error()
5b804f76 Add headers parameter for HTTP checker
ca3d4602 Add a TCP health checker
cdc3143b Expose a Registry type in health package, so unit tests can stay isolated from each other
bbd46991 Switch tests to import "github.com/docker/distribution/context"
68e8532c Add storagedriver section to health check configuration
c48e4609 Add configurable file-existence and HTTP health checks
142b68aa Add a unit test which verifies the ResponseWriter endpoints see implements CloseNotifier
7fb68446 Functional options for NewRegistryWithDriver
11133181 Fix CloseNotifier handling and avoid "the ResponseWriter does not implement CloseNotifier" warnings in logs
2e4c6434 Fix tests after #846
614e8c82 Remove pathMapper object
5878a8f4 Maintain manifest link compatibility
5dd78c82 Use correct path for manifest revision path
d9a20377 Add a section to the config file for HTTP headers to add to responses
43fc9a19 Change some incorrect error types in proxy stores from API errors to distribution errors. Fill in missing checks for mutations on a registry pull-through cache. Add unit tests and update documentation.
ed3ecfdc Move common error codes to errcode package
288c46e9 Provide simple storage driver health check
9bf231e0 fix(rados): Create OMAP for root directory
cf901659 typofix - https://github.com/vlajos/misspell_fixer
777fd4c7 Update Windows TP3 registry endpoints
b82b0694 Remove unnecessary func parameter, add mirror endpoint test
e7435725 Don't panic when a http.ResponseWriter does not implement CloseNotifier
a7eb16ad registry: Do not push to mirrors
66761c02 Better/more specific error messages on connect
86a3ea91 Windows: Fix certificate directory for registry
d1cb12fa Add pull through cache functionality to the Registry which can be configured with a new `proxy` section in the configuration file.
54f0c70d Fix vet issue
40563361 Add blob delete entry to api description and regenerate api.md Signed-off-by: Richard Scothern <richard.scothern@gmail.com>
b51913f6 Set the response code to 499 when a client disconnects during an upload
b0d13304 Factor CloseNotifier use into a new function
8fbc1de0 Use CloseNotifier to supress spurious HTTP 400 errors on early disconnect
83c8617c Spelling corrections Signed-off-by: Richard Scothern <richard.scothern@gmail.com>
cfb0b7aa Fix uses of "int" where "int64" should be used instead
f01a0694 remove unused code and fix todo format
90595c7e fix goimports
235ccc05 add include_oss build tag
9c27080c Update the comment for the consistency model
5d34d317 Update the comments for consistence model
faee4224 fix testcase TestReadStreamWithOffset incompatible with oss
a9c3f86c fix oss: got 403 in TestContinueStreamAppendLarge
440664a1 Update the OSS test case for latest code change
fc20dd72 check access key and secret before run
d28a3fa2 add endpoint support
46148721 Add the secure access with HTTPS
bffce572 Fix the warning of golint
d7917988 Support OSS driver
048339e3 registry: allow fallback on unknown errors
6a11f5a0 Add image name tests around hostnames
6f83ba2b registry: Change default endpoint on windows to a windows-specific one
fd404e78 When a request completes ensure only one log line is printed which includes the http response.
e83af616 Automatically generate a HTTP secret if none is provided
9d73bfe5 Fix for api_test.go
ba358690 Fix login and search TLS configuration
29a810b6 Allow disabling of starage driver redirects
6b457322 Make the registry client more tolerant about HTTP status codes
c219afdb Use notary library for trusted image fetch and signing
345174a3 Etags must be quoted according to http spec
24408263 Manifest PUT should return 201 Created
52136ab0 Improve documentation and golint compliance of registry package
390bb97a Manifest and layer soft deletion.
911c0d9f Do not replace logger when adding hooks
e42a8ca5 auth.AccessController interface now uses distribution/context
4a2300aa Simplify auth.Challenge interface to SetHeaders
a246ab0a cli: new daemon command and new cli package
0ec762c0 Remove dead code
153ef321 Clean up pagination specification
683dc197 Unify the testcases for the two tests in names_test.go
a49594a0 Add Registry to client bindings for Repositories
aae59d54 Make Error.Error() return the post-arg-substitution Message
bf62b7eb Create Repositories method
f3207e76 Catalog for V2 API Implementation
0790a298 Paginate catalog and tag results with Link header
1d68d81b Catalog V2 API specification proposal
726f3e07 better i/o timeout error on pull
ceb2c7de Add additional test coverage for the regexp contained in RepositoryNameRegexp
2b7788f2 Remove v1 registry mirror configuration from LookupEndpoints.
00edb3bb Configure TLS for private registry mirrors.
b2935158 Remove IPC support from test file
81765f8c Catch either missing containers or objects
52d28ec8 Do not use Swift server side copy for manifests to handle >5G files
000dec3c Inline Swift errors handling
661f197f Retrieve all the objects using pagination
704e0822 Do not create objects for directories
f190aa4a Refactor segment path concatenation code
08072828 Use http.StatusRequestedRangeNotSatisfiable instead of error code
7a5aa32a Use file instead of filepath as it may cause troubles on Windows
91d74a3e Protect against deletion of objects with the same prefix
01686e2c Show distribution version in User-Agent
913fe195 Do not use suite style testing for Swift specific tests
1b28eea2 Rename environment variables to run Swift testsuite
2524f300 Check file has been opened before closing it
fbc74a64 Rename DriverParameters structure to Parameters
80bfcb68 Change folder mime type to application/vnc.swift.directory
7b0276dc Add code documentation
5cce023a Do not read segment if no padding is necessary
d91c4cb6 Improve 404 errors handling
9ab55eae Use only one Swift container for both files and manifests
a1ae7f71 Increase default chunk size to 20M
062d6266 Add support for Openstack Identity v3 API
3f9e7ed1 Use 'prefix' parameter instead of 'path' when listing files
1d46bb2b Create full folder hierarchy instead of just the top level folder
4e619bc9 Remove one level of indentation in swift path handling code
75ce67c4 Use mitchellh/mapstructure library to parse Swift parameters
ea81e208 Move Dynamic Large Object handling to dedicated methods
8a22c0f4 Simplify code that handles non existing manifests
16a49ade Handle error during copy of original content
9f7f23e3 Update the import path for swift driver test
1f4eb7b7 Use gofmt to format the code of swift driver.
cce49561 Add Openstack Swift storage driver
5280103c Remove unused types in registry package
4c255a0d Remove dead code in registry package
138ba392 golint for cliconfig
249ad3b7 Use "Size" field to describe blobs over "Length"
3552960e fix 8926: rmi dangling is unsafe when pulling
feebd69d Close reader after the test is finished.
41aadeac Reduces log level of auth error lines from error->warn
81c21411 Export ServeJSON for serving error codes
7fed379d Update graph to use vendored distribution client for the v2 codepath
950cf586 remove pkg/transport and use the one from distribution
45bd073e Fix issue where Search API endpoint would panic due to empty AuthConfig
cd31d466 Allow Manifest Service to be configured with function arguments
db30d384 Add ability to pass in substitution args into an Error
01c8fb36 Set canonical name correctly
caf989a5 Allow conditional fetching of manifests with the registry client.
6f2f8499 Fix build when using build tag 'noresumabledigest'
b425c402 Allow one character repository name components
a58848a0 Allow single character repository names
c82a9a81 Add the X-Docker-Token header to the /v1/search requests.
970efb6b Fix typo in Version doc
8e857d11 Add 500 check for registry api call
376cc5fe Add challenge manager interface
5a3a9c6a Separate version and challenge parsing from ping
b66ee14e Refactor client auth
855ecb84 Remove timeout for http.Client in registry/client/repository.go.
fa17f925 Pass correct context into tracer Signed-off-by: Richard Scothern <richard.scothern@gmail.com>
6167220c Remove half-baked Storage Driver IPC support
6d46ae5f Prevent the ErrUnsupportedMethod error from being returned up the stack.
f432bcc9 Remove RC4 from the list of registry cipher suites
ebd56996 Remove dead code
6bedf7d1 Add Etag header for manifests.
79661b8a Unconditionally add AuthTransport.
805b135b Add 'message' back to BlobTest sample json
365de1b2 Add back in the "errors" wrapper in the Errors serialization
cff1a5ff Move challenge http status code logic
d4c7ea43 Use distribution's ValidateRepositoryName for remote name validation.
f9e152d9 Ensure that rados is disabled without build tag
5c372ded storage/driver/azure: Update vendored Azure SDK
13b279f5 Only pulling single repository tag on pull for a specific tag. extending TestGetRemoteTags unit test Splitting out GetRemoteTag from GetRemoteTags. Adding registry.ErrRepoNotFound error
56349665 Round 4
f6ee0f46 Minor formatting fixes related to htpasswd auth
280b9c50 Saner default data location
e667be38 Rename the basic access controller to htpasswd
14f3b07d Harden basic auth implementation
427c4578 Refactor Basic Authentication package
35044456 Unexported function to comply with golint
fe9ca889 Removed dashes from comments, unexported htpasswd struct
15bbde99 Fixed golint, gofmt warning advice.
ff67393b Added support for bcrypt, plaintext; extension points for other htpasswd hash methods.
d2b7988b Aligned formatting with gofmt
7733b6c8 Fixed WWW-Authenticate: header, added example config and import into main, fixed golint warnings
60262521 Implementation of a basic authentication scheme using standard .htpasswd files
5b3e2c7d Registry: remove unwanted return variable name
5a8f6904 Do not set auth headers if 302
60967cbd Clarify that manifests can only be deleted by digest
630334b3 Add more repository name validation test cases
c01c508e Make the v2 logic fallback on v1 when v2 requests cannot be authorized.
b8b16b78 Round 3 - Add Register function
040d7038 doc: coherence between requests and parameters + typo
5418e3be Upon HTTP 302 redirect do not include "Authorization" header on 'untrusted' registries.
6640f60c registry: debugTransport should print with testing.T.Log
767c5283 Fix race condition in registry/session
4bc53818 Fix rados build, remove uuid dependency
9d7c6923 Feature: Web Panic Reporting via hooks
58912344 fixed typos
0ecc7596 Properly verify manifests and layer digests on pull
7d11fc6e Remove PortSpecs from Config
00b1e8fc Round 2 Make Errors a []Error
f565d6ab Move ErrorCode logic to new errcode package Make HTTP status codes match the ErrorCode by looking it up in the Descriptors
287cf411 Registry v2 mirror support.
8fc7d769 Fix race in httpsRequestModifier.ModifyRequest when writing tlsConfig
f8c0086e Replace uuid dependency with internal library
bdaed4c7 Refactor specification of supported digests
d4c50637 Better error message when failing to get AWS auth
a1ade52b registry: fix auth bug
a0d242d9 Remove digest package's dependency on external sha implementation
812c8099 Decouple redis dependency from blob descriptor cache
cd543091 client: fix a typo preventing compilation
754a8e80 Remove error message shortening
aac3ce46 Only do auth checks for endpoints starting with v2
7e4d5eaf Update transport package to sever distribution dependency
3b5a2bbe Add unauthorized error check
07e5885d Fix wording in comment
b4972a6b Break down type dependencies
8db2145b Feedback update
2c1a83f9 Storage Driver: Ceph Object Storage (RADOS)
38f0c6fa Windows: fix registry filepath and location
ea39e348 Fix typo: respository->repository
808c87ce Add transport package to support CancelRequest
9e6affc3 requestdecorator: repurpose the package and rename to useragent
89bd4848 registry: Refactor requestfactory to use http.RoundTrippers
3c34b3c8 Increase default connection timeout to 30s
eb2ac430 Lint and documentation fixes
131b608a Create client transport package
e0e13209 Remove unused and duplicate error types
296a8415 Update to track refactor updates
568df315 Open cache interface
60b314ad Rename layer files to blob
67e2e834 Update to use blob interfaces
6bf4c45e Add missing defer on Tags
89c396e0 Simplify configuration and transport
8b0ea19d Add base transport to interface
a9b0f49c Removed unused mirror flags
17cbbf64 Update ReadFrom to wrap reader in NopCloser
ecaa643c Create authentication handler
7d630192 Add tags implementation
2eb9b286 Use distribution context instead of google
b78727cb Cleanup session and config interface
07cee840 Split layer and upload from repository
03e08731 Add unit tests for auth challenge and endpoint
837a12db Remove deprecated client interface
4c8e4dc3 Add client implementation of distribution interface
08401cfd Refactor Blob Service API
351babbf Fix invalid tag name
2db0327d Set cache headers for layers.
b292f31d [Server] Listen and serve on a unix socket
12354621 Modify blob upload API
7f3a57fd Ensure the instrumentedResponseWriter correctly sets the http status in the context.
6fbda8fa Update API spec to reference digest instead of tarsum
80abf9fc Use done channel to avoid goroutine leak
5d9105bd Make Storage Driver API calls context aware.
bb93129d trivial: typo cleanup
9a26753d Small if err cleaning
5caa1fe3 Add configuration for upload purging
10f32bfc simplify the embedded method expression of repository
2c7489e6 Updated urlbuilder X-Forwarded-Host logic
0f897aea Attempt to address intermittent s3 RequestTimeout error
0d8cb4dc Correctly check s3 chunksize parameter
8d4b636a Return after error in handler
a8b9bec1 Move CLI config processing out from under registry dir
ecda1f4e Include driver name in trace messsages
b361b481 Require storage drivers to report their name
c49f7cd0 Pool buffers used in S3.WriteStream
e4794ff7 Allow configuration of chunksize parameter
f1ea982e Check error returned from io.Copy
36ffe0c1 Backoff retry on verification to give s3 time to propagate
77b30cfb log canonical digest on verification error
d4ce8f5e Attempt to deal with eventual consistency by retrying
43181105 Add logging for generic handler errors.
34d1494c Make .docker dir have 0700 perms not 0600
7b8b61bd Add .docker/config.json and support for HTTP Headers
47784682 Removes redundant else in registry/session.go
742cf000 Refactor else branches
bc2b6efa Add path and other info to filesytem trace methods.
f3f46307 fix some typos in source comments
0b2feaf6 Automatically purge old upload files.
136f0ed8 Instantiate http context before dispatch
480d864f Use a build flag to disable resumable digests.
16174241 Update final upload chunk api doc
2bd5eb9d What if authConfig or factory is Null?
98985526 Add auth.user.name to logging context
ad3d8799 Refactor utils/utils, fixes #11923
12bf470b Trace function calls to Base storage driver
4ac515fd Prevent Close() from being called after Finish()
e83e3761 Rename top level registry interface to namespace
36a07699 Disassociate instance id from application
250e61e2 Prevent false sharing in signature fetch
2b4ad94c Defer case-sensitive support to storage backend
8c0859e3 Handle cloudFront bucket prefix issue
def60f34 Parallelize signature fetch in signature store
e5408bd9 Remove engine.Table from docker search and fix missing field
6b748a74 Move expvar under the registry section
4e1ecad6 Allow control over which storage cache to use
6ab228f7 Integrate layer info cache with registry and storage
a7c2dcee Define and implement layer info cache
b96de45b Use resumable digest for efficient upload finish
06acde06 Avoid crash on invalid Move arguments
6eb804a1 Stronger validation for uuid field in urls
38ae1cb4 Add redis pool to registry webapp
638ccff5 Remove jobs from registry.Service
67e5c940 Use vendored v2 registry api
5fa2d814 Refactor utils/http.go, fixes #11899
d5045d05 Replace aliased imports of logrus, fixes #11762
b085d555 Changed snake case naming to camelCase
eff5278d Fix for issue 9922: private registry search with auth returns 401
9c08a436 Remove engine.Status and replace it with standard go error
dffd1bab Updating MSOpenTech/azure-sdk-for-go to latest master
594f733e storage/driver/azure: Allow non-default realms
10128f6e Add struct tags on v2 remote tags struct
0e7650f9 Fix decode tags value error when call get /v2/<name>/tags/list in registry api v2.
9f5184c1 Add check for 404 on get repository data
bcccf35b Separate init blob upload
11d08c30 Add verification of image manifest digests
4bf67913 Update auth client configuration to use proper tls config
7d4c1d1e print detailed error info for docker pull
4b813b38 Add ability to refer to image by name + digest
1d6ccc1b Quote registry error strings
9879aefa Use request factory for registry ping
dc4e9c6e Docker Tag command: Relax the restriction on namespace (username) length from 30 to 255 characters.
6d140193 Refactor Layer interface to return a Handler
fdd63147 Insert request method option storage driver URLFor
4b5af16f Send WWW-Authenticate header for silly auth
83571e57 don't panic during a request when configuring repository middleware. Return a 500 with an appropriate error Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
5c3f53b7 Fix Godoc typos
6a72d1ae Final polish to cloudfront and larger middleware refactor Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
30bcc17b Middleware!
952f39ed Refactoring cloudfactory layer handler into a more generic storage middleware concept.
3e658d29 digest: Minor refactoring
eccae81c minor refactor + tests for app.go just to improve test coverage. Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
7a35d98c Remove subdirectories MAINTAINERS files
99401d72 Allow single name component repository names
ccfadc93 Remove max repository component length restriction
2a786bfc fixing up tests to work with for non-tarsum future Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
98daae17 Switch to SHA256 as canonical digest
4e3bf4ba Update notification event Target fields
19061f34 doc: move storage driver readmes into docs
008236cf Implement immutable manifest reference support
f46a1b73 spec: fetch manifests by tag or digest
a65662c1 Expose Signatures() on Repository
0b34048f Remove unnecessary close in client
b870e3fd wrap buffered writer around filewriter
ac7af800 documentation for name validation grammar
3bf768a5 Adding test cases to confirm path traversal attempts are mitigated and bad characters in URI return 404 Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
32f5965c Specify and implement Docker-Upload-UUID
871cf9dd Path prefix support for running registry somewhere other than root of server
d3ad1c3c Rename package timeout to timeoutconn.
ec7ed3ee Move TimeoutConn to seperate pkg dir.
2867d39c Removing -X flag option and autogenerated code to create Dockerversion.go functionality Addresses #9207
606c5c8c A digest missing parameter should result in a bad request
b87459b3 Rename auth.token.rootCertBundle yml field
58269e73 Fix S3 driver's list when the root directory is either "" or "/"
02718ee2 Add an empty root directory s3 driver specific test
3e906311 Add error return to Repository method on Registry
ed8827c3 Move notifications package to distribution
09bf7522 Remove Name from Layer and LayerUpload interface
553d48d6 Move layer interface definitions to distribution package
8728074d storagedriver/azure: Add README
fac0f541 Run goimports/gofmt on previous changes
6e4f9a2e Move storagedriver package to registry/storage/driver
71e7ac33 Move storage package under registry package
d6308bc6 Move client package under registry package
c3b07952 Move auth package under registry package
3822e685 Move registry api definitions under registry package
54ae545e Move registry package into handler package
287e11e1 Correctly return when repo name is not available
9bde7d98 Integrate context with storage package
3e840699 Integrate contextual logging with regsitry app
904b35a2 Use context for auth access controllers
92de07ce Pretty the help text
1f06e4f8 Manifest PUT should return 202 Accepted status
1089cae2 Separate request data from actor in Event
2aed7c2d Webhook notification support in registry webapp
3790b5d6 Fix some go vet errors
b6270d9c Handle empty blob files more appropriately
63af81b8 Fix token basic auth header issue
050337b2 Handle gorilla/mux route url bug
5589ce8b delete duplicated word in registry/session.go
33a1f4ef Address server errors received during layer upload
9dc3529d Add distribution maintainers to maintainers files
0818476c Open up v2 http status code checks for put and head checks
d96d4aa9 Better error messaging and logging for v2 registry requests
41703e2b Fix write after close on http response
6a736c20 Split API Version header when checking for v2
1c727112 Resolve ambiguity on registry v2 ping
acfcc955 Add Docker Distribution API Version header
4eaf6443 Make .dockercfg with json.MarshallIndent
825da388 Update the registry app to use the new storage interfaces
9c24fc93 Add token cache
5bf94a64 Cleanup v2 session to require endpoint
735a1124 Fix list tags
e5744a3b Refactor from feedback
826bde85 Add Tarsum Calculation during v2 Pull operation
6f09abd5 Correctly check and propagate errors in v2 session
22c73285 Get token on each request
6f36ce3a Allow private V2 registry endpoints
751a1a8d Update push and pull to registry 2.1 specification
ee1e1abb Remove dependencies on registry packages
2fcad2a1 Registry V2 HTTP route and error code definitions
e256a0e0 Update token response handling
24895820 Update push to use mount blob endpoint
06d0ef41 Push flow
6b400cd6 Adds support for v2 registry login
1f983479 Fix format calls as suggested by vet
594263a3 Correctly handle missing layer upload
cd92071c Directly manage layerUploadState in webapp
fdcfc56f Refactor handling of hmac state packing
9d3436c1 Fixes tests, moves layerhandler in config file
23f9f8c3 registry: fix minor type
b11d549f Adds support for content redirects for layer downloads
c899a49a Moving NewIndexInfo, NewRepositoryInfo and associated helpers into config.go
64b000c3 Deprecating ResolveRepositoryName
c02f1a55 Move registry package out of repo root
eb9ddb7b Allow hyphens in namespaces.
4170effd registry: remove accidentally added --insecure-registry feature
d1fcbd90 registry: handle unresolvable domain names in isSecure to allow HTTP proxies to work as expected.
807bb5eb registry: add tests for unresolvable domain names in isSecure
b11b1e06 Chnage LookupRemoteImage to return error This commit is patch for following comment // TODO: This method should return the errors instead of masking them and returning false
cb4f9160 Fix conflicts.
fdd4f4f2 validate image ID properly & before load
6ad54e3d Refactor put image function's redirect loop
3911c8b8 Prevent loop with var overshadowing
b62a9ac9 validate image ID properly & before load
df85a0f7 registry: fix ServerAddress setting
6638cd7b Add the possibility of specifying a subnet for --insecure-registry
8065dad5 registry: parse INDEXSERVERADDRESS into a URL for easier check in isSecure
8b0e8b66 Put mock registry address in insecureRegistries for unit tests
44d97c1f registry: refactor registry.IsSecure calls into registry.NewEndpoint
ae0ebb9d Add the possibility of specifying a subnet for --insecure-registry
f0920e61 registry: parse INDEXSERVERADDRESS into a URL for easier check in isSecure
cca910e8 Put mock registry address in insecureRegistries for unit tests
80255ff2 registry: refactor registry.IsSecure calls into registry.NewEndpoint
524aa8b1 registry: always treat 127.0.0.1 as insecure for all cases anytime anywhere
8582d043 registry: default --insecure-registry to localhost and 127.0.0.1
cd246bef registry: add tests for IsSecure
7dd4199f registry: don't iterate through certs
47a494e0 Fix login command
1b72e023 Do not verify certificate when using --insecure-registry on an HTTPS registry
552c17d6 Don't hard code true for auth job
50e11c9d Refactor IsSecure change
034c1cfb make http usage for registry explicit
0481c669 Fix login command
22f87eb9 Fix error on successful login.
1a8edd0d excluding unused transformation to []byte
0827b711 Mass gofmt
32654af8 Use logrus everywhere for logging
bcbb7e0c registry/endpoint: make it testable
ef57ab12 Use dual-stack Dialer when talking to registy
dff06789 Avoid fallback to SSL protocols < TLS1.0
798fd3c7 Do not verify certificate when using --insecure-registry on an HTTPS registry
27ddc260 Don't hard code true for auth job
2b9798fa Refactor IsSecure change
8b1c4073 make http usage for registry explicit
3a6fe4c5 On Red Hat Registry Servers we return 404 on certification errors.
20867c3b Avoid fallback to SSL protocols < TLS1.0
479ed10e Support tarsum dev version to fix issue with mtime
1538e42d Update manifest format to rename blobsums and use arrays of dictionaries
f290f446 Use direct registry url
7bfdb6d4 registry: lint
c47aa21c Add comment for permission and fix wrong format variable
b7f7b0a2 Add provenance pull flow for official images
d629bebc registry: getting Endpoint ironned out
48b43c26 Replace get.docker.io -> get.docker.com and test.docker.io -> test.docker.com
b7da79fd Refactor all pre-compiled regexp to package level vars Addresses #8057
898bcf0f TarSum: versioning
eaf57e8f Fix SEGFAULT if dns resolv error
2c780195 registry/session: fix panic in GetRemoteImageLayer
307e253d Restrict repository names from matching hexadecimal strings
27e0ec3d Style fixes for registry/registry.go
4d8f45a9 fix return values in registry mock service
283fba48 Expand hostname before passing it to NewRegistry()
744919be Enable `docker search` on private docker registry. The cli interface works similar to other registry related commands:
94ff3f3e move utils.Fataler to pkg/log.Fataler
2a7cf96c Extract log utils into pkg/log
7ef3a5bc registry.Registry -> registry.Session
94c52da6 Expand hostname before passing it to NewRegistry()
d768343c Enable `docker search` on private docker registry. The cli interface works similar to other registry related commands:
47261aa8 Remove CheckSum from utils; replace with a TeeReader
7f2dca77 utils/tarsum* -> pkg/tarsum
052128c4 Move parsing functions to pkg/parsers and the specific kernel handling functions to pkg/parsers/kernel, and parsing filters to pkg/parsers/filter. Adjust imports and package references.
775ca3ca move resumablerequestreader to pkg
822f8c1b update go import path and libcontainer
6365d94e Joining registry maintainers
78a499ac get layer: remove HEAD req & pass down response
19b4616b Add Content-Type header in PushImageLayerRegistry
7cd8de13 Fix go vet errors
d95235cc Add support for client certificates for registries
46cc7603 registry: remove unneeded time.Duration()
4ec6e68e Disable timeout for push
5cef006c improve trusted location detection
8e8ffacf only forward auth to trusted locations
0ac3b398 Add redirect and env proxy support to docker login
96412d40 resume pulling the layer on disconnect
3a21f339 Use Timeout Conn wrapper to set read deadline for downloading layer
a9a754da registry: adding vbatts to the MAINTAINERS
f293adf7 import sha512 to make sha512 ssl certs work
bbebff75 Move 'search' to the registry subsystem
8934560b Move 'auth' to the registry subsystem
3e064ac7 Use proper scheme with static registry Docker-DCO-1.1-Signed-off-by: Michael Crosby <michael@crosbymichael.com> (github: crosbymichael)
2b89f579 static_registry: update the test for the new struct
52893cae Added support for multiple endpoints in X-Docker-Endpoints header Docker-DCO-1.1-Signed-off-by: Joffrey F <joffrey@docker.com> (github: shin-)
4bc35225 allow dot in repo name
dbb92965 Added specific error message when hitting 401 over HTTP on push Docker-DCO-1.1-Signed-off-by: Joffrey F <joffrey@docker.com> (github: shin-)
4f29181d Payload checksum now match the checksum simple
d2b2bf03 Inverted layer checksum and tarsum.
50ec0bbd Docker-DCO-1.1-Signed-off-by: Ryan Thomas <rthomas@atlassian.com> (github: rthomas)
fffa920a Docker-DCO-1.1-Signed-off-by: Ryan Thomas <rthomas@atlassian.com> (github: rthomas)
9bad706a Harmonize / across all name-related commands/Validate images names
47c4e542 use mock for search
c18c4b8d registry: Info collection
471d923b registry: make certain headers optional
f6fefb0b Merge auth package within registry
1c101d00 Remove manual http cookie management
f29683f7 registry: Fixed unexported field
ba8dbe4b registry: Removed checksumPayload from exported fields
bae6dc35 registry: Fixed tests
3bf0ee5e registry: Added simple checksums (sha256) for layers
bac83c76 Fix registry auth by storing the string passed on the command line, and allowing for credential selection by normalizing on hostname. Also, remove remote ping calls from CmdPush and CmdPull.
9274def6 Fix login prompt on push and pull because of error message Docker-DCO-1.1-Signed-off-by: Michael Crosby <michael@crosbymichael.com> (github: crosbymichael)
4fe7a141 Added missing attributes to api search calls: - Added an argument to the call() method in order to control the auth sharing - Enabled it only for search. Pulls and pushes were enabled already. - Grouped a few variable declarations
275109a6 Make sure new repositories can be pushed with multiple tags
78bc8d73 move legacy stuff outside the job
9bafa726 Fixed registry unit tests
79e0ed25 Check standalone header when pinging a registry server. Standalone has to be true to use basic auth (in addition to previous requirements)
10eeaec7 fix progressbar in docker push
d2f7d65d Don't return req as result of setTokenAuth
1ff180d1 missed one call to setTokenAuth
0fca0f12 Factorized auth token setting
d4a00ebe gofmt
097f4124 Use basic auth for private registries when over HTTPS. RequestFactory is no longer a singleton (can be different for different instances of Registry) Registry now has an indexEndpoint member Registry methods that needed the indexEndpoint parameter no longer do so Registry methods will only use token auth where applicable if basic auth is not enabled.
52a0a052 go fmt.
c86cee21 Closing connection after ping
2c26420b update docker search to reflect future changes of the api
77f6f327 Removes \\n from debugf calls
2f94790d registry: fix content-type for PushImageJSONIndex
8d77082c Fix some error cases where a HTTP body might not be closed
cbb906e4 fix the error message so it is the same as the regex issue #1999
9c366e09 Modify repository name regex to match index
49736d5f Prevent panic upon error pulling registry
ee38e490 Login against private registry
a7b3e7eb registry: removing opaqueRequest
ecd70a19 hot fix display in parallel pull and go fmt
e55267bc Add GitHub usernames to MAINTAINERS
42b6e56d Fix typo: fmt.Sprint -> fmt.Sprintf
03c1bbbf Adapted tests to latest registry changes
5ea461f3 Cleanup
da046e94 Mock access logs don't show up in non-debug mode
7c3b31e5 gofmt
4d9dcc3c New registry unit tests remade from scratch, using the mock registry
93877a85 Mock registry: Fixed a bug where the index validation path would return a 200 status code instead of the expected 204
04cbff8d registry: Fixed a bug where token and cookie info wouldn't be sent when using LookupRemoteImage(). Fixed a bug where no error would be reported when getting a non-200 status code in GetRemoteImageLayer()
28f0f0ff Disabled test server in the tests
34fc4b84 Mocked registry: Added X-Docker-Size when fetching the layer
3ca4529f Fixed mocked registry
14cc9fcf Implemented a Mocked version of the Registry server
fec63826 Always consider localhost as a domain name when parsing the FQN repos name
1fe03a4b Reduce connect and read timeout when pinging the registry (fixes issue #1363)
95b4a0c3 Return JSONError for HTTPResponse error
762dfbfc reqFactory in Registry
11cd5760 Return registy status code in error
0b59dcfa Make sure the index also receives the checksums
1c62aded Handle extra-paremeter within checksum calculations
4a818a5e Refactor checksum
64a8dea9 Make sure the cookie is used in all registry queries
262838e0 Rename: VersionChecker->VersionInfo.
5f13f194 documentation.
4b7dbfbc reduce the number of string copy operations.
14155d60 format in the user agent header should follow RFC 2616
e9e0d3c1 Removed an unnecessary nil assignment
6a2aee30 Removed an unnecessary error check.
cf8afcf6 added client's kernel version
342460ed inserted setUserAgent in each HTTP request
2e95c379 Added version checker interface
358574ab Hardened repos name validation
bf8d59a1 Fixed potential security issue (never try http on official index when polling the endpoint). Also fixed local repos name when pulling index.docker.io/foo/bar
67115ec4 fmt.Errorf instead of errors.New
98060903 Fixed ping URL
16fa043e Allowing namespaces in standalone registry
c6068fef Restoring old changeset lost by previous merge
ec6d1d60 Adding support for nicer URLs to support standalone registry (+ some registry code cleaning)
7df93a5a Implement several golint suggestions, including:
7e215123 fix two obvious bugs???
03a77bd8 Fixed issue in registry.GetRemoteTags
259eeb38 Remove https prefix from registry
e1d8d024 Rolled back of previous commit (skip cert verification)
dc97156c Skip certificate check (don't error out on self-signed certs)
7a664e6a Tentative support for independent registries
0d85570c URL schemes of both Registry and Index are now consistent
3238f3ea Use opaque requests when we need to preserve urlencoding in registry requests
7e786279 hotfix: nil pointer uppon some registry error
ff418e9c gofmt and test sub directories in makefile
c7e86e5e use go 1.1 cookiejar and revome ResetClient
ca71aa4f Send X-Docker-Endpoints header when validating the images upload with the index at the end of a push
deddb3c7 Make the progressbar take the image size into consideration
ead91d94 linted names
93c7079f fix proxy
f085aa4a drop/omit
b9e67a88 Disabled HTTP keep-alive in the default HTTP client for Registry calls
6189c3cb Minor changes in registry.go
fc340ec9 Fixed missing Body.Close when doing some HTTP requests. It should improve some request issues.
e6cc4ff6 move auth to the client WIP
3e3a7c03 Documented who decides what and how.
2312a0e4 Cereate a new registry object for each request (~session)
6bd45ee6 fix docker login when same username
9373c8e4 Update Push to reflect the correct API
40ccd26d Remove hijack from api when not necessary
c8c892fe Disable registry unit tests
5e6d1a0d Update tests to reflect new AuthConfig
0933aa44 Move authConfig from runtime to registry
4a0228fd Allow to change login
a82a6bfd Upload images only when necessary
ffa1e567 Move httpClient within registry object
b5d89306 Remove stdout from registry
a2e94b28 Refactor registry Push
1b23cb09 Begin to implement push with new project structure
36b58e5a Split registry into subpackage
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
ccf640f50c |
docker-compose: update to v2.28.1
Bumping compose to version v2.26.1-80-gf79c28168, which comprises the following commits:
f79c28168 Remove `console.Terminal` check and use `IsTerminal` from `streams.Out`
6a000dcff go.mod: github.com/compose-spec/compose-go v2.1.3
2636dcf06 go.mod: docker/docker and docker/cli v27.0.1-rc.1
77377f2df build(deps): bump github.com/spf13/cobra from 1.8.0 to 1.8.1
af1bc285a build(deps): bump github.com/docker/buildx from 0.15.0 to 0.15.1
e1fd7a656 using as flag of the up command, watch was blocking process shutdown This happened when sunsetting the application from docker compose down command
de478f84b Add open watch docs in up menu
24a281fa5 bump buildkit to v0.14.0 and buildx to v0.15.0
54a5e7d4a stop watch process when associated up process is stopped
36ef5b388 build(deps): bump github.com/docker/docker
5694a2b0f build(deps): bump github.com/containerd/containerd from 1.7.17 to 1.7.18
695d3419c build(deps): bump golang.org/x/sys from 0.20.0 to 0.21.0
981bcbbe7 build(deps): bump github.com/hashicorp/go-version from 1.6.0 to 1.7.0
5ec37d08a build: replace uses of archive.CanonicalTarNameForPath
1a14fcb1e update gh actions versions, update engine matrix, bump golang to 1.21.11
084a5ca31 enforce keyboard.Close is always executed to restore terminal
d633c33a1 config --environment
cc09f39f2 Readd event
918b508bd remove unreachable code
10531f630 Fix dot env file to define COMPOSE_* variables
bf1bd3fc6 return an error when --detach and --watch are used together in up command
02f40eea6 Correct 'cancellation' typo in comment
250c3112b Fix: change append to use slice index in ps.go
495a087fb COMPOSE_PROFILES can be set by .env file
fd1f73a5e prevent concurrent map write relying on project immutability
bf1dd0c26 build(deps): bump github.com/containerd/containerd from 1.7.16 to 1.7.17
1cf6dea44 build(deps): bump github.com/docker/buildx from 0.14.0 to 0.14.1
1adc4cb16 drop COMPOSE_EXPERIMENTAL_OTEL as docker/cli has opentelemetry in
2ed40e804 add gui/composeview as part of available commands
7ad73c289 fix opentelemetry
259325698 bump compose-go to version v2.1.1
048fd136d Set endpoint-specific DriverOpts
663866cbe Bump compose-go version to latest main
fb25e88a0 Backport OpenBSD patches
363530337 add new navigation menu to open Compose app configuration in Docker Desktop
2cee028e9 build(deps): bump github.com/fsnotify/fsevents from 0.1.1 to 0.2.0
c78f84aeb build(deps): bump golang.org/x/sys from 0.19.0 to 0.20.0
5c6924ec6 fix --resolve-image-digests
9e8c8caa2 allow a local .env file to override compose.yaml sibling .env
da8189cf2 Bump docker engine and cli to version 26.1.3
e64b96d0f Bump docker to v26.1.2
b81624185 Add documentation for --menu up option and COMPOSE_MENU environemnt variable
591d9eb3a chore(deps): bump docker to v26.1.1 (#11794)
9c0b92259 fix: overlapping logs and menu navigation (#11765)
cfb110653 build(deps): bump github.com/moby/buildkit
36bf0c458 chore(e2e): fix flaky cascade failure test
299fcd57f use v2.26.1 tag for moby and Docker cli
b90cb48a1 chore(deps): update to Moby v26.1 & buildx v0.14
f8808d81c bump compose-go version to v2.1.0
9970a84ae fix support for --context=foo
568248072 Fix #11710: Avoid to try to close channel twice after hitting Ctrl-C on compose up (#11719)
fd532a37e fix(desktop): remove overly-aggressive feature flag check (#11748)
2aa568ceb chore: fix typo in comment
4ae2e0ec5 bump dependencies
922422a53 fix: do not try to create file shares for non-directories
d239f0f31 check container_name is not in use by another service we will create
ca734ce56 don't clear line when navigation is disabled
c9e070f0f fix: return correct exit code with `--exit-code-from` (#11715)
b3792dd25 progress for resource can be restarted after more Working event comes
d8ee474e0 Revert "Stop the resource timer after last expected event"
7d3616474 Revert change to allow trying to kill again if a kill fails
6a3501f90 Handle errors and allow to send multiple kills if one failed
5daed33c6 Ignore errors when killing on second Ctrl-C
5c1e5f3fc docker compose up always kills the containers on second Ctrl-C
b032999f0 read COMPOSE_REMOVE_ORPHANS from .env
5059a1d7b Set Required false to depends_on containers for compose -p stop/down
54a525bbe Ignore missing containers when compose stop -p
8ceaf4929 Ignore missing containers when compose down -p
1d3259205 Introduce support for build.entitlements
85567ae09 Remove dead url reference.
b4280fb56 e2e test for --all-resources
865a64afe introduce --all-resources to _not_ exclude resources not used by services
29692b592 Introduce --abort-on-container-failure
2658c372a bump golang version to 1.21.9
d71d8bce2 don't use ansi espace sequence when disabled
ff20b641c Does not start keyboard manager if there is no tty
339b331a8 Change menu information text to dim
dd5614ec3 Handle --no-build and --watch args
4b7b6adc7 build(deps): bump github.com/opencontainers/image-spec
466374bdd Unwrap error message.
2e85b3c26 Include error message in pull warning/errors
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
61f643c386 |
moby: update to v27.0.3
Bumping moby to version v27.0.3-4-g7fa33a539a, which comprises the following commits:
7d99ebe418 rootless: add `Requires=dbus.socket`
540b29c0c6 update to go1.21.12
276a648ec3 Fix incorrect validation of port mapping
23b8b023dd Fix duplicate subnet allocations
bf222d635b fix some gofmt issues reported by goreportcard
f8231b52d3 daemon/graphdriver/overlay2: set TarOptions.InUserNS for native differ
b951474404 pkg/archive: createTarFile: consistently use the same value for userns
c5794e23ec pkg/archive: handleTarTypeBlockCharFifo: don't discard EPERM errors
02e24483be pkg/archive: getWhiteoutConverter: don't error with userns enabled
838330bac3 Dockerfile: update docker CLI to v27.0.2
e419e22f29 Dockerfile: update compose to v2.28.1
3557077867 update golangci-lint to v1.59.1
c95b917167 pkg/archive: reformat code to make #nosec comment work again
c0ff08acbd builder/remotecontext: reformat code to make #nosec comment work again
4587688258 api/types: deprecate ContainerJSONBase.Node, ContainerNode
6da604aa6a deprecate experimental Graphdriver plugins, and disable by default
ce5571f343 api: swagger: fix definition of TmpFsOptions (API v1.46)
a9ab04603e cmd/dockerd: initMiddlewares: use containerd/logs
e355e10011 vendor: github.com/containerd/ttrpc v1.2.5
f8c088be05 Lookup docker-proxy in libexec paths
d22d8a78f1 runconfig: deprecate IsPreDefinedNetwork
0a4277abf4 api/types: move stats-types to api/types/container
91a2a574d7 api/types: rename container.StatsResponse to StatsResponseReader
6fafc8762f api/types: fix typo in GoDoc
42cb29f6ea registry: Search.searchUnfiltered: inline variable
43d4a4c63e registry: v2AuthHTTPClient: inline some vars and slight refactor
bf35f3d8c8 update one more entry in mailmap and AUTHORS
b4c20da143 volume: use AtomicWriteFile to save volume options
39b4448e12 docs/api: update some example values to be more accurate (API v1.46)
37b57c2ae0 api: swagger: update some example values to be more accurate
2a7bb2a7bd update .mailmap and AUTHORS
68b8e97849 vendor: github.com/spf13/cobra v1.8.1
b5cc61a243 Dockerfile: update buildx to v0.15.1
f741ca857c libnetwork/drivers/macvlan: getDummyName don't use stringid.TruncateID
d241862f36 libnetwork/drivers/macvlan: move truncating ID to getDummyName
dab918b2b0 libnetwork/drivers/ipvlan: getDummyName don't use stringid.TruncateID
b8c80b19de libnetwork/drivers/ipvlan: move truncating ID to getDummyName
8599213b52 vendor: update buildkit to v0.14.1
2df4391473 Fix hairpin between networks with mapped port
b06b6b3648 docs: add API documentation for API v1.46
517fb0991e api/types/container: provide alias for github.com/docker/go-units.Ulimit
ad716b223b integration/container: use consistent alias for import
25f44885ed daemon/cluster/executor/container: use consistent alias for import
084219a5f9 update AUTHORS
f09f756851 daemon/cluster: minor linting issues and cleanup
74d77d8811 Revert "Internal resolver for default bridge network"
6d35673504 Revert "No default nameservers for internal resolver"
01efb9a5ab daemon/cluster/executor/container: fix error-handling
b640582436 Add OomScoreAdj options
8e91b64e07 runconfig: deprecate DefaultDaemonNetworkMode, move to daemon/network
437e1ae15e runconfig/opts: deprecate ConvertKVStringsToMap and move internal
b3e236d3b5 daemon: rename some inconsistent import aliases
2851ddc44c Add containerd image ref to created containers
812f319a57 Add containerd connection info to info endpoint (API v1.46)
1327342b14 hack: Ignore deprecate-integration-cli validation
7b8f4922a5 daemon: Emit Image Create event when image is built
09eb6ec4f1 builder/exporter: Wrap exporter to hook the image export
0e84482ef5 builder-next: Move exporter wrapper to exporter package
48ff86ec64 pkg/longpath: AddPrefix: use early returns
424c22390e pkg/longpath: deprecate Prefix const
2f45cbf69f api/types/container: NetworkMode align code between Windows and Linux
7b56fa8dc0 api/types/container: NetworkMode.NetworkName: use switch
7b438c5c31 daemon: rename variables that shadowed imports
4c7228663c api/server/router/container.postCommit: add TODO about use of CreateRequest
c692af36c3 runconfig: deprecate ContainerConfigWrapper, move to api/types/container
afdfe4ff86 runconfig: deprecate SetDefaultNetModeIfBlank
4af9f418a3 runconfig: remove ContainerConfigWrapper.getHostConfig() utility
98bd08c534 runconfig: remove redundant import-alias
e42503213d runconfig: ContainerConfigWrapper: unify Linux and Windows implementations
2954b05b03 runconfig: remove conversion code for API < v1.18
37f4616751 integration-cli: fix TestCreateWithTooLowMemoryLimit: using deprecated API fields
964aba696c libnetwork: windows/overlay: remove endpointRequest wrapper
c316ed0c22 libnetwork: remove special handling for Windows 14393 (RS1, V1607, LTSC2016)
3108165c94 pkg/archive: TestChangesDirsEmpty, TestChangesDirsMutated: no kernel-version check
17ca8b62bd pkg/archive: remove uses of iota
94caeeb401 pkg/archive: don't call system.Lgetxattr on unsupported platforms
c565a3a1fe pkg/archive: collectFileInfo: don't create FileInfo if unused
7ce1edd7c6 pkg/archive: deprecate NewTempArchive, TempArchive
92b8d93f47 pkg/archive: deprecate CanonicalTarNameForPath
0ffc0c95e6 pkg/tarsum: format #nosec comments to standard format
cb19b59b65 pkg/archive: format #nosec comments to standard format
805ccd2365 pkg/dmesg: deprecate, and use internal utility instead
c7f4abc14a pkg/dmesg: use unix.SYSLOG_ACTION_READ_ALL instead of local variable
528ffa9cae Allow multiple macvlan networks to share a parent
9389f76f6d pkg/chrootarchive: remove dependency on pkg/longpath
f657a75bf6 pkg/archive: remove dependency on pkg/longpath
2100a70741 pkg/stringid: deprecate IsShortID
e19e6cf7f4 pkg/stringid: deprecate ValidateID
0fb6360fa7 builder/dockerfile: createDestInfo: remove platform arg (LCOW left-over)
c5d95fdb04 builder/dockerfile: fix some minor linting issues
6fa6812c51 builder/dockerfile: rename vars that shadowed types and builtins
074932966d builder/dockerfile: remove endsInSlash utility
c8e7fcf91a api: adjust health start interval on swarm update
dd1ca95ef9 Add exec option to API TmpfsOptions
07053a0991 testutil/daemon: Wait() until the daemon is Kill()'ed
955b923352 daemon: releaseNetwork: clear SandboxID, SandboxKey
e3c5665d21 daemon: restore: clear net state for stopped containers
17a59a7506 Don't log an error about route-add for IPv6 bridge
57c6a5e691 libnet: SetKey: propagate traces from API to SetKey reexec
b7186bdfc8 libnet: Sandbox: add ctx to SetKey
6c71ebd82c libcontainerd: Start: add ctx
2d8c4265c7 libcontainerd: NewTask: add ctx
19f72d6fc4 libnet: add more OTel spans
224d7291df container: add a span to CheckpointTo
642242a26b builder/mobyexporter: Add missing nil check
44f19518f9 move the cli/debug package to cmd/dockerd/debug
e4e40558ba builder/builder-next: gofmt
88e5e4cfb4 Prevent data race during version negotiation
9101392309 update runc binary to v1.1.13
ec24e19d69 vendor: github.com/opencontainers/runc v1.1.13
d20739b6fe vendor: golang.org/x/net v0.24.0
535898dd9a vendor: golang.org/x/crypto v0.22.0
4b2aa9f875 vendor: golang.org/x/sys v0.19.0
cec0d50361 libnet: add ctx to Sandbox.Destroy()
af23a024a1 libnet: Endpoint: add ctx to Join and Leave
566026af8f libnet: Controller: add ctx to store methods
9391052700 libnet: Add ctx to NewSandbox
4924f56e7b libnet/driverapi: Add ctx to ProgramExternalConnectivity
c5c1d133ef libnet/driverapi: Add ctx to Join
8dcded102e libnet: add OTel spans to CreateEndpoint
cf376170ed Add more go:build statements to prevent downgrading Go language version
b7d5a42168 Update go:build comments to go1.21
5343c7b451 remove internal/compatcontext and use context instead
13c3384303 hack/vendor.sh: remove redundant -compat 1.18
f20fd3c8a0 golangci-lint: ignore ineffassign & staticcheck on ctx shadowing
d0790fd03e Trivial tidying in osl.setIPv6()
b7f1036cd9 Remove the option to ignore failure to disable ipv6
44d00e3b9b Dev container: try to load kernel module ip6_tables
d0a135772e Dockerfile: update buildx to v0.15.0
215410316f daemon: cleanup getDefaultNetworkSettings
01eecb6cdf Validate port bindings for gateway_mode=routed
2a291c1855 Improve PortBinding.String()
a1f8bbeeef Remove unused bridge.driver.portAllocator
043db3be68 Bind the same port for multiple addresses
20c99e4156 Option to disable NAT for IPv4/IPv6 for a bridge network.
18ff5ef537 vendor: update buildkit to v0.14.0
e05848c002 Set up bridge-specific iptables rules in the bridge driver
4f09af6267 Allocate same port for IPv4/IPv6 for 'any interface' mappings.
03577884d9 Retry port mapping for a range if ports are in-use
931eea20ff Add portallocator.RequestPortsInRange()
e0b762ed1b daemon/containerd: fix duplicate import
7f2ed139fe remove uses of platforms.Platform alias
896de6d426 seccomp: allow specifying a custom profile with `--privileged`
2ccce36d10 c8d/progress: Allow updating "Unavailable" ids
e2326c27b5 c8d/push: Fix wrong Originalindex descriptor in aux error
af0cdc36c7 api: deprecate erroneous Config fields in `GET /images/{name}/json` response
58641c7b5c docs: api: use separate definition for Image.Config (api v1.39 - v1.45)
5e0e34fafd api: swagger: use separate definition for Image.Config
8d96d759bb c8d/image_manifest: IsPseudoImage return true for unknown/unknown platform
b4d2283c89 api/push: Ignore Platform on older APIs
68a63d0611 c8d/push: Extract missing content note to an Aux progress
0a31437208 c8d/push: Support platform selection
999f1c63db testutils/specialimage: Add MultiPlatform
c16d676266 c8d/blobsDirContentStore: Return ErrNotExists
85249a8401 c8d/image_manifest: Add helper functions
c514952774 Changed default value of the startInterval to 5s
6c2934f373 api/types: move ImageLoadResponse to api/types/image
eb675cce71 api/types: move ImageImportSource to api/types/image
f6cc76ceb9 api/types: move ImageSearchOptions to api/types/registry
b5f15bc0aa api/types: move EventsOptions to api/types/events
ecb24afaaf api/types: move ImagesPruneReport to api/types/image
162ef4f8d1 api/types: move VolumesPruneReport to api/types/volume
17c3269a37 api/types: move ContainerStats to api/types/container
fd1d8f323b api/types: move CopyToContainerOptions to api/types/container
47d7c9e31d api/types: move ContainerPathStat to api/types/container
db2f1acd5d api/types: move ContainersPruneReport to api/types/container
5b27e71521 api/types: move ContainerExecInspect to api/types/container
d91638e295 api/types: move ExecStartCheck to api/types/container
452e134001 api/types: move ExecStartOptions to api/types/backend
cd76e3e7f8 api/types: move ExecConfig to api/types/container
ac27a5379b docs: api: image inspect: remove Container and ContainerConfig
52580b2673 vendor: github.com/creack/pty v1.1.21
fa95f8a070 client: fix typos in test-names and godoc
08939f21ad integration-cli: remove DockerAPISuite.TestContainerAPICopyNotExistsAnyMore
75843620a6 api/server/router/container: minor nits in exec router
18e1afd1a1 vendor: github.com/distribution/reference v0.6.0
7501b90a22 vendor: go.etcd.io/bbolt v1.3.10
cf796aa56a pkg/reexec: touch-up GoDoc, and remove "import" comments
d20a074f33 pkg/reexec: remove gotest.tools from tests
defd5a08f4 pkg/reexec: unify non-Linux implementation of Command
004451c812 pkg/reexec: unify implementation of Self() and remove stub
79bff9461c pkg/reexec: don't mix syscall and golang.org/x/sys package
a445f7fa8a daemon/graphdriver: fix GoDoc for ProtoDriver.GetMetadata
a76b768fea daemon/graphdriver: remove redundant Mounted function
837b3f9576 Allow startup with no kernel support for ip6_tables
fd3fa4b28a Add Rob Murray (@robmry) as maintainer
854130eee0 deps: remove `grpc-ecosystem/go-grpc-middleware`
49ca0d0d03 otel: remove deprecated usages of `otelgrpc`
1243f9da6d Revert "libnet/i/defaultipam: Disambiguate PoolID string format"
6af0646236 Revert "libnet/i/defaultipam: Use InternalErrorf instead of InvalidParameterErrof"
4aa85cd159 ci: enable debug for buildkit container builder
fc9dd6acb4 api/types/network: make CheckDuplicate optional
e5f9484ab6 api/types: move NetworksPruneReport to api/types/network
ad6edc139f api/types: move NetworkCreate, NetworkCreateRequest to api/types/network
4f61fa21cb vendor: update buildkit to v0.14.0-rc2
ca0529f984 api/server: ContainerList returns container annotations
b3c8216873 vendor: google.golang.org/appengine v1.6.8
0b5f7b9ff8 builder-next: Adjust NewGatewayFrontend invocation
fa03db1b82 builder: Update detect usage for new detect API from buildkit
995604236e builder: Adjust usage of shlex.ProcessWord
438371e1fe builder: Pass nil linter to instructions.Parse
3bcbb561ad vendor: update github.com/moby/buildkit to v0.14.0-rc2-dev
d365702dbd No default nameservers for internal resolver
18f4f775ed Internal resolver for default bridge network
5318c38eae update containerd binary to v1.7.18
86f7762d48 vendor: github.com/containerd/containerd v1.7.18
91e2c29865 update to go1.21.11
163c6ca9ad api: Make EnableIPv6 optional
83c532c9b7 daemon/cluster: remove Cluster.getRequestContext()
69b2a05d27 api/types: migrate NetworkResource to api/types/network
3306034c64 api/types: remove aliases for deprecated Image types
70bac42113 integration/network: remove used of deprecated NetworkInspectOptions
1ec92ea60b opts: remove alias for ipamutils
e6f41e22a7 client: Client.doRequest: fix closing filehandle and reversed errors
9110ef1eec client: ensureReaderClosed: make linters happier
57f597b866 client: Client.NetworkInspectWithRaw: minor cleanup
42f4db26c7 api/server/httpstatus: FromError: remove redundant checks and cleanup
f78dac35e5 api/types: migrate NetworkListOptions to api/types/network
d18b88fd32 daemon: add ULA prefix by default
68bf0e7625 api/types: migrate EndpointResource to api/types/network
5bea0c38bc api/types: migrate NetworkInspectOptions to api/types/network
245d12175f api/types: migrate NetworkConnect, NetworkDisconnect to api/types/network
89624e09e6 api/types: migrate NetworkCreateResponse to network.CreateResponse
32418e9753 daemon: set the default local addr pool if none configured
0071832226 Add per-endpoint sysctls to DriverOpts
347bb4122a update docker-py to 7.1.0
69f1e2a923 docs/api: add Scope, ConfigOnly, ConfigFrom, Peers (v1.41 - v1.45)
53542fefd5 api: swagger: Network: add Peers
44125530bf api: swagger: POST /networks/create: document Scope, ConfigOnly, ConfigFrom
8b7a54f622 api: swagger: Network: inline examples, and add ConfigOnly, ConfigFrom
6cab6d0302 docs/api: POST /networks/create: inline examples per-field (v1.41 - v1.45)
51885166b9 api: swagger: POST /networks/create: inline examples per-field
d64e220afb api/types: NetworkCreate: add GoDoc
cd1ed46d73 don't depend on containerd platform.Parse to return a typed error
56086c9952 integration/container: remove redundant type-conversion, and minor cleanup
070e90a94c integration/system: remove redundant type-conversion, and minor cleanup
667094924d testutil/fakestorage: fix minor (linting) issues
4a074c809e integration/internal/swarm: remove unused ContainerPoll
fe78d6d9da integration/internal/swarm: rename vars that collided with imports
4619b14403 refactor: rename attach config var
2d134c5abd Fix goroutine/fd leak when client disconnects
8361baf8d9 Dockerfile: update compose to v2.27.1
387be6ec91 Dockerfile: update buildx to v0.14.1
500eff0ae9 libnet/i/defaultipam: improve address pools validation
0c022307e9 libnet/i/defaultipam: Unmap IPv4-mapped IPv6 addrs
9d288b5b43 libnet/i/defaultipam: introduce a linear allocator
a9ebb0c267 Replace dead RFC8878 go doc hyperlink
16e5c41591 Fix issue where node promotion could fail
5a2fa59688 libnet/i/defaultipam: Use InternalErrorf instead of InvalidParameterErrof
9369132879 libnet/i/defaultipam: Disambiguate PoolID string format
6d21574535 libnet: Controller: drop getStore()
49888559cc libnet: Controller: drop closeStores
2336363e28 libnet: init datastore in ctrler constructor
3847da374b integration/TestDiskUsage: Make 4096 also a 'empty' value
1e29f9b12f Move EndpointSettings.DriverOpts from op-state to config
a35716f5b9 Factor out selection of endpoint for config migration
4f0cb7d964 Dockerfile: update containerd binary to v1.7.17 (static binaries and CI only)
e459487feb Update containerd to v1.7.17
707ab48cbb Explicity write http headers on streaming endpoints
50d3028464 Fix fd leak/goroutine when attaching stdin only
ad0f263eb5 tarexport: Plumb ctx, add OTEL spans, handle cancellation
33f9a5329a Default to "windows-dns-proxy":true
77a47dba3b Forward DNS requests into --internal networks
6fbae5ff26 libnet/d/bridge: don't parse the MacAddress netlabel
41ddc47bbf Don't explicitly enable ip6tables in tests
07ccaf028d Enable 'ip6tables' by default, don't require 'experimental'.
5705cbf6e3 Make it an error to set up filtering on an unnamed bridge
d6b6a5122f Enable filtering on IPv6 bridges with no IPv6 address
4df97f2e1e Gate setting of bridge-nf-call-ip6tables on "--ip6tables=true".
8751562d3f Set up IPv6 n/w isolation rules when --ip6tables=true
23fd15985b Allow "--ip6tables=true" when "--iptables=false"
9a8ffe38fc Disable ip6tables in tests that disable iptables
5952920380 libnet/d/remote: replace errorWithRollback
7216541b17 libnet: don't check if ctrler store is nil
7ea9acc97f cmd/dockerd: deprecate `api-cors-header`
6c97e0e0b5 update to go1.21.10
72eb615490 Makefile: bundles is not PHONY
fda708f55d Delete broken/unused test requirement helper "IPv6"
4aff2fbc98 Remove integration-cli TestDaemonSuite/TestDaemonIPv6Enabled
346a7c07a0 Fix TestDockerSwarmSuite/TestSwarmInitIPv6
b11e95f5bc Don't delete IPv6 multicast addresses from a bridge
a5f82ba4bf Disallow IPv6 multicast as bridge n/w subnet
aa3a86c038 Refactor IPv6 subnet validation
f46473b29c Do not remove kernel-ll addresses from bridges
01ea18f1e3 Allow for a read-only "/proc/sys/net".
57ada4b848 Option to avoid deleting the kernel_ll address from bridges.
c5376e534c libnet/ipams/null: move driver name to its pkg
f2387f3632 libnet/ipams/defaultipam: move driver name to its pkg
0db56de78e libnet/ipamutils: no more global state
3c9718144f libnet/ipams: register all drivers
eda47500fc libnet/ipams: Unconditionally call windowsipam.Register
ae9e4319b0 libnet/ipams/windowsipam: that driver knows its name
8cec9f0dca libnet/ipams/defaultipam: add a Register fn
218394cada libnet/ipams/builtin: move to libnet/ipams
29f2ca04e0 libnet: move ipam pkg to ipam/defaultipam
e8644c3e0e libnet/ipam: default-address-pools as Register arg
1d5a12dfb1 integration-cli: createNetwork: add t.Helper()
115de5ff3d libnet/ipamapi: add in/out structs for RequestPool
82aae0fe50 libnet/netutils: remove dead util NetworkRange
37a81cd04d libnet/ipam: split v4/v6 address spaces
199c72cb5d libnet/ipam: remove dead DumpDatabase()
df88857e6c libnet/ipam: put `addrSpace` into a separate file
a047d4b1df libnet/ipam: un-embed mutex from `addrSpace`
eeec716e33 Update containerd to v1.7.16
efca9303a4 refactor: updated native diff error message
ff8de5e156 Add firewalld policy "docker-forwarding".
5ebe2c0d6b apparmor: Allow confined runc to kill containers
87506142d8 Do not forward DNS requests to self.
147f701bd1 chore: fix function names in comment
e3c59640d5 vendor: github.com/Microsoft/go-winio v0.6.2
2140e7e0f5 vendor: golang.org/x/tools v0.16.0
85c9900377 vendor: golang.org/x/mod v0.17.0
e314113ad7 Dockerfile: update docker CLI to v26.1.0
df831c943f vendor: github.com/cilium/ebpf v0.12.3
194cbd6e7d Makefile: refactoring .PHONY
57a12a372f Update GoDoc for ioutils on atomic writers
98d51b510d chore: remove repetitive words
8bbba6315f API: bump version to 1.46
80d92fd450 feat: ctx to client API
838047a1f5 archive: fix ConvertRead/ConvertWrite functions for rootless docker & native diff overlay
aef6905e01 overlay2: better documentation of user namespace behavior when checking native diff support
f6b80253b8 overlay2: get rid of unnecessary kernel version check
b2fd67de77 overlay2: support rootless native overlay diff in kernel 5.11 and above
d4f61f92fd Move StartedAt time to before starting the container
Bumping docker-cli to version v27.0.3-15-gd41cb083c, which comprises the following commits:
0a8bb6e5b chore: regenerate docs
c777dd16d docs: update cli-docs-tool (v0.8.0)
eea26c50d docs: update links to docker cli reference
1cf2c4efb docs: regenerate base command
c2b9c1474 docs: align heading structure for base command
598442d37 docs: remove frontmatter for base command
c964b80e5 docs: rename cli.md to docker.md (base command)
0ca7be015 docs: remove empty docker base command reference
27bf78d33 docs: make buildx build the canonical reference doc
5ed8f858c update to go1.21.12
6b99e0370 vendor: github.com/docker/docker v27.0.3
3134d5582 vendor: github.com/docker/docker v27.0.2
c97e8091a vendor: github.com/docker/docker v27.0.2-dev (e953d76450b6)
894584802 vendor: github.com/docker/docker v27.0.2-dev (861fde8cc974)
cd560916f gha/e2e: Update latest version to 27.0
50fae2074 cli/config/credentials: ConvertToHostname: handle IP-addresses
217971d48 re-introduced support for port numbers in docker registry URL
6e35a78fd update golangci-lint to v1.59.1
bf1a70182 vendor: github.com/docker/docker v27.0.1
617eb5271 cli: make initializing the global meter- and tracing providers optional
9f8bda1df cli/config: replace pkg/homedir dependency with local copy
ad583961b vendor: github.com/docker/docker v27.0-dev (ff1e2c0de72a, master)
c8c13bdca docs/deprecated: update status for graphdriver-plugins
1f7561ecb Dockerfile: update compose to v2.28.0
1a0481007 vendor: github.com/docker/docker v27.0.1-rc.1
faf7647dc refactor: remove test
d1cb7d41c cli/command: Don't copy fakeClient
1322f585f test: cli force exit signal handler
34d42bdf0 vendor: github.com/docker/docker v27.0-dev (018d93decfb5)
443617c0f update mailmap and AUTHORS
2088c5963 vendor: github.com/docker/docker 1a1f3cff45ec (master, v27.0-dev)
64c20f301 Additional typo corrections
a84536eb4 Fix RFC3339 typo in docs
e5d26a8d4 build: allow BuildKit to be used on Windows daemons that advertise it
55a1f6eb7 cli-plugins/manager: add GoDoc for getPluginDirs, defaultSystemPluginDirs
4f00eee52 vendor: github.com/spf13/cobra v1.8.1
00b0eb778 update go-md2man to v2.0.4
b0793613a Dockerfile: update buildx to v0.15.1
0bc092496 deprecate experimental graphdriver plugins
1f1b70dfd docs: add deprecation warning to experimental grapdriver plugins
a4bfd8c74 feat: add a global sigint/sigterm handler as a fallback to ctx cancellation
eae63069e vendor: github.com/moby/swarmkit/v2 v2.0.0-20240611172349-ea1a7cec35cb
3d017f30d vendor: github.com/docker/docker v27.0.0-rc.2
e0972e94b gha: e2e: test against v27.0 release candidates
43210216f bump version to v27.0.1-dev
c07cee05e Update go:build comments to go1.21
1fd8e2434 cli/command/image: add go:build tag to prevent downgrading go version
c8f5d4cc6 build(deps): bump docker/bake-action from 4 to 5
3b0d297aa vendor: github.com/docker/docker caf502a0bc44 (v27.0.0-dev)
11a3d8728 vendor: github.com/docker/docker ec4bac431c88 (v27.0.0-dev)
1bfec63b9 vendor: github.com/docker/docker ba69bd9c1e48 (v27.0.0-rc.2-dev)
8376b3e42 use local ConvertToHostname() implementation
4ea91a73e vendor: golang.org/x/net v0.24.0
91b63ac45 vendor: golang.org/x/crypto v0.22.0
a2ccd3eb0 vendor: golang.org/x/term v0.19.0
634b19f5e vendor: golang.org/x/sys v0.19.0
872935f1c vendor: github.com/docker/docker v27.0.0-rc.1
1fc73b470 vendor: github.com/docker/docker v27.0.0-dev (bcd280a3ed2d)
e9c0fc330 docs: extend deprecation target for non-TLS API
3dcc65353 plugins: cleanup sockets when done
f80d7182c cli/command: remove deprecated EventHandler, InitEventHandler
ad62b6869 vendor: github.com/containerd/platforms v0.2.1
6e7266a72 cli/command/registry: fix link to credential stores
6b93cf221 cli: Wrap Err stream
b79d68465 Deprecate non-standard (config) fields in image inspect output
e06ef800f Removed all mentions of "please" from docs and messages
32ac7a08f cli/push: Print aux notes
966fa7c47 cli/push: Add `platform` switch
892784dee vendor: github.com/docker/docker v27.0.0-dev (9d9488468fe2)
3ce317747 gha: switch to Ubuntu 24.04
43b97e888 update golangci-lint to .v1.59.0
df474d517 cli/command/image/build: fix nosec comment
0ba14fde4 linting: fmt.Sprintf can be replaced with string concatenation (perfsprint)
7db922cf9 cli/command: TestGetDefaultAuthConfig: remove unused expectedErr
dfec976e8 linting: fmt.Errorf can be replaced with errors.New (perfsprint)
e93abde7a cli/command/network: fix linting issue and pass client instead of cli
43b840ed9 vendor: github.com/docker/docker a736d0701c41 (master, v27.0.0-dev)
c481c6492 cli/command: remove some import aliases
851277f96 cli/command/container: rename some variables
1a83595c7 cli/command/container: legacyWaitExitOrRemoved rm intermediate var
0d4de2392 cli/command/container: inline some variables to prevent shadowing
d11fbda36 vendor: github.com/distribution/reference v0.6.0
d0057db3a cli/command: more go1.19 ("predeclared any")
3f0d90a2a feat: global signal handling with context cancellation
97b7746df vendor: github.com/docker/docker 59996a493cfc (v27.0.0-dev)
94f9de592 Handle networks.driver_opts for a service
a73172265 cli/compose: add schema 3.13 (no changes from 3.12 yet)
0502189e2 cli/command/network: add minimal test for --ipv6 option
db2672e68 network create: make --ipv6 optional
0ed8a7e31 vendor: github.com/docker/docker 00f18ef7a455 (master / v27.0.0-dev)
9acfbbd74 Correct typos in docs/ and man/
bc2e27478 vendor: migrate to github.com/go-viper/mapstructure/v2 v2.0.0
23148220e vendor: github.com/docker/docker c6aaabc9fc82 (master / v27.0.0-dev)
a9ea03481 vendor: github.com/containerd/containerd v1.7.18
630e1d3e9 update to go1.21.11
558a910b8 vendor: github.com/containerd/containerd v1.7.17
be2c284ee vendor: tags.cncf.io/container-device-interface v0.7.2
20d1b661b cli/command: use shallower interface for completions
b6a3ce416 vendor: github.com/docker/docker cd3804655a25 (master / v27.0.0-dev)
d4491fc09 Correct typos in the cli/ folder
b9cd72259 gha: update to actions/upload-artifact@v4
2ef6bc1c1 Update CODEOWNERS
e2fc6bd77 vendor: github.com/docker/docker e622cea55698 (master / v27.0.0-dev)
16c8f4942 vendor: github.com/Microsoft/hcsshim v0.11.5
b7548ba7f vendor: github.com/opencontainers/image-spec v1.1.0
12aaeae21 vendor: github.com/Microsoft/go-winio v0.6.2
fed9fa0f7 context list: temporarily add ContextType to JSON output
40a1da8b4 cli/command/context: list: add test for JSON output
2e9eff235 cli/command/context: test inspecting context with custom metadata
54291dd47 cli/command/context: add test-utility to create multiple contexts
9d9bb19f0 docs: deprecate daemon's api-cors-header flag
7dc271a8b migrate to new github.com/containerd/platforms package
d5d94e46f Explain how to use "network connect --driver-opt" to set sysctls
7f9dba60e Test quoted fields in --driver-opt
b7583a2c2 Explain how to use "--network driver-opt" to set sysctls
068f118f8 Test quoted field in --network
82ed39e31 docs: use --quiet in example to simplify output
e70f68595 Dockerfile: update ALPINE_VERSION to 3.20
0b7aff333 Dockerfile: update compose to v2.27.1
f0e7e07b8 Dockerfile: update buildx to v0.14.1
05905bd92 vendor: github.com/docker/docker-credential-helpers v0.8.2
dc75e9ed6 cli/config: do not discard permission errors when loading config-file
c80adf4e8 cli/config: TestLoadDefaultConfigFile: check that no warnings are printed
de91207b8 cli/config: add test for dangling symlink for config-file
426fb2fd8 cli/config: Load(), LoadDefaultConfigFile(): improve GoDoc
6d21372db run, create: update "--rm" flag description to mention anonymous volumes
296a6f587 plugins/hooks: Don't show empty hooks
1527d625f Plumb context to API callbacks
3fdf377b6 vendor: github.com/docker/docker master (06e3a49d66fa)
6a4d38c7f docs: fix json syntax error
ffd57fac1 Updated engine versions in e2e text matrix
dbf844366 vendor: github.com/moby/swarmkit/v2 master (c1c857e2dca1)
5f4f4f64d OTel: implement missing MeterProvider `ForceFlush`
f07834d18 OTel: add `command.time` metric to plugin commands
02537eac5 Use funcs on DockerCli to return Meter/TracerProviders, not initialize them. Initialize them during DockerCli struct init
4758ed0b0 Document the extended '--network' syntax
e8bfedd26 Fix TestNetworkConnectWithFlags
eb99994c7 update to go1.21.10
8d6e571c0 Add e2e tests for run w/ bad entrypoint
31644d5ea Fix hang when container fails to start
b7e25a4b4 docstring: typo: settings -> setting
e3216ca64 go.mod: use SemVer format for go version to assist CodeQL AutoBuild
692c7ee7e gha: CodeQL: move go.mod/go.sum symlink earlier to help caching
e1dcc194e OTEL collector/prometheus/aspire-dashboard stack for testing purposes
1d666b410 feat: wire ctx into plugin hooks
5ccb48459 cli-plugins: PluginRunCommand: use cmd.Environ instead of os.Environ
86162f781 feat: use main func ctx for cobra and use ctx in tests
e73fde8ca vendor: update github.com/docker/docker to v26.1.0
dccfd6e4d chore: fix function names in comment
116db4fc8 docs: tidy up CDI docs
73959eef7 chore: remove deprecated DualStack field
1433df8fe bake/bin-image-cross: Add darwin
0c2697d77 Dockerfile: Remove xx-sdk-extras
094af6ea0 darwin/build: Disallow CGO_ENABLED=1 when cross-compiling
faf096b25 docs: clarify that --data-path-addr doesn't restrict access
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
099e911253 |
crun: update to v1.15-tip
Bumping crun to version 1.15-51-g6c158dd, which comprises the following commits:
e6eab76 wasmedge: access container environment variables for WasmEdge configuration
0475016 restore: update console-socket option description
9861254 tests: bump wasmedge to 0.14
fd6b748 cgroup: use MemoryMax instead of MemoryLimit
3980447 nix: upgrade dependencies
526f959 test: pass volume for /var/lib/containers
adb5cb3 linux: improve error message on EACCES
474bc17 remove duplicate initialization cgroup manager in the cgroup args
cb947d0 tests: use vault.centos.org
61fdfc6 tests: skip push tests with podman
42b9fd1 [crun run] Avoid setting crun_context.handler redundantly
976029a libcrun: fix error message argument
ca42c18 RPM: Remove wasmtime support
6879c4c Packit: enable epel9 on c9s targets to fetch wasmedge
315f732 RPM: no separate krun symlink creation
0b33840 Downstream: Add rpm/gating.yaml to handle downstream gating tests
c017ce5 Packit: sync downstream gating test files on every upstream release
e452395 TMT: rewrite podman revdep tests to be usable without CI
163037a tests: fix issues reported by shellcheck
4cbab15 RPM: Fix epoch value for copr builds
fd745e0 dist: install symlinks as part of make install
9533613 ci: Cancel in progress tests on updates
c6c1c7f crun run --help: say --no-subreaper is ignored
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
20eb3ca57e |
cri-tools: update to v1.30.0
Bumping cri-tools to version v1.26.0-676-g767879cc, which comprises the following commits:
c81525da userns: Fix running tests inside a userns
316d6d3c userns: Call runtime only once
934f1ccb userns: Skip tests if the host doesn't support idmap mounts
6b2eef6d Bump golang.org/x/net from 0.26.0 to 0.27.0
5a43b750 Bump golang.org/x/term from 0.21.0 to 0.22.0
09fce9cf Bump k8s.io/cri-client from 0.31.0-alpha.2 to 0.31.0-alpha.3
4dc80b8e Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc
d18ca301 Bump google.golang.org/grpc from 1.64.0 to 1.65.0
8c8981cb Bump k8s.io/client-go from 0.31.0-alpha.2 to 0.31.0-alpha.3
c62b1c28 Bump go.opentelemetry.io/otel/sdk from 1.27.0 to 1.28.0
6e074fd8 Bump github.com/docker/docker
9ab98677 Bump k8s.io/cri-api from 0.31.0-alpha.2 to 0.31.0-alpha.3
19f8f74f Fix invalid context on `Status` RPC
d898927a Sort commands by their name
77f866ad Bump go.opentelemetry.io/otel/trace from 1.27.0 to 1.28.0
4fcec096 Switch to macOS 12
cd111361 Add `crictl [create,runp,run,pull] jsonschema` subcommands
35c97282 Add support to reopen container logs
34b940cd Make all RPC's interruptable
31af2ddb Pin `k8s.io/cri-{api,client}` repos
d5af0dd4 Bump github.com/docker/docker
6bde37b2 Bump github.com/docker/docker
c6918dee Make image RPCs interruptable using Ctrl-C
d19c808b Bump k8s.io/klog/v2 from 2.130.0 to 2.130.1
689447c6 Bump k8s.io/klog/v2 from 2.120.1 to 2.130.0
23d9ff4e Bump github.com/opencontainers/runc from 1.1.12 to 1.1.13
33976da3 `crictl run`: Rename `--timeout`/`-t` to `--cancel-timeout`/`-T`
3689ac17 Fix `pull-timeout` flag for `crictl pull`
f45fe651 Bump k8s.io/kubelet from 0.30.1 to 0.30.2
991c4b55 Bump k8s.io/kubectl from 0.30.1 to 0.30.2
146cc612 Bump github.com/docker/docker
6d5008c4 Revert "Fixes invalid JSON in crictl info"
780d0449 Add `--pull-timeout` flag to `crictl` `create`, `run` and `pull` commands
88df400d Fixes invalid JSON in crictl info
65f9232a Bump github.com/docker/docker
37e0b57a Update e2e tests
2194b4bd Bump golang.org/x/net from 0.25.0 to 0.26.0
09c81cff Bump golang.org/x/term from 0.20.0 to 0.21.0
bc128afb Revert "Fixes invalid JSON in crictl info"
39a77d4d Fixes invalid JSON in crictl info
3329bbea Make cri-tools independent from k/k
631f1c27 --- updated-dependencies: - dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc dependency-type: direct:production update-type: version-update:semver-minor ...
1eeda666 Bump github.com/onsi/ginkgo/v2 from 2.17.3 to 2.19.0
10ad3a15 Regenerate docs
869863ba Use versioned tools for supply chain provenance
aa92e358 --- updated-dependencies: - dependency-name: go.opentelemetry.io/otel/sdk dependency-type: direct:production update-type: version-update:semver-minor ...
fd01c401 Bump github.com/docker/docker
d4d80f43 Bump golang to v1.22 in CI
e1edc9fc Bump github.com/docker/docker
5409233e Bump github.com/onsi/ginkgo/v2 from 2.17.2 to 2.17.3
3f6ce817 Move project under `sigs.k8s.io` namespace
5c9de8f7 Bump golang.org/x/net from 0.24.0 to 0.25.0
ef2f92a0 Bump golang.org/x/term from 0.19.0 to 0.20.0
756d4a82 Bump golang.org/x/sys from 0.19.0 to 0.20.0
4a0ef9a0 Bump golang.org/x/text from 0.14.0 to 0.15.0
9b0d496e Fix latest version in README.md
f152cc06 Bump github.com/onsi/gomega from 1.33.0 to 1.33.1
57ba23dd Bump github.com/docker/docker
ee2e56ed Enable and fix `perfsprint` linter
d14448a6 Bump github.com/onsi/ginkgo/v2 from 2.17.1 to 2.17.2
556eb46e Bump github.com/urfave/cli/v2 from 2.27.1 to 2.27.2
6362c63c LinuxContainerSecurityContext field apparmor_profile has been deprecated in favor of the newer structured apparmor field.
79b255b6 Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc
84c0104b Bump go.opentelemetry.io/otel/sdk from 1.25.0 to 1.26.0
1d447cf4 Bump github.com/docker/docker
b243d7e3 Bump github.com/onsi/gomega from 1.32.0 to 1.33.0
1ead2d65 Bump github.com/docker/docker
a2247b1b Added changes for fixing a vulnerability - CVE-2023-47108
d87857f9 Update `release-notes` to v0.16.8
ce92f0d3 Vendor Kubernetes v1.30.0
543d65fa Bump github.com/docker/docker
ac2b2f6a Add criu binary to CRI-O tests
8ab45a03 Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc
03d73acb Bump go.opentelemetry.io/otel/sdk from 1.24.0 to 1.25.0
3e39574b Bump golang.org/x/net from 0.23.0 to 0.24.0
e49c1cff Bump golang.org/x/term from 0.18.0 to 0.19.0
8370833d Bump golang.org/x/sys from 0.18.0 to 0.19.0
9985ba3a Bump golang.org/x/net from 0.22.0 to 0.23.0
89a95677 Bump github.com/distribution/reference from 0.5.0 to 0.6.0
175bbd58 Add `--transport` option to port-forward
14291ae9 Bump github.com/onsi/ginkgo/v2 from 2.17.0 to 2.17.1
85bcb15c Support websocket transport for exec and attach
3ee504ac Bump github.com/docker/docker
0e0044e1 Bump github.com/docker/docker
316e0e9c Bump github.com/onsi/gomega from 1.31.1 to 1.32.0
bf53cf5a Bump github.com/onsi/ginkgo/v2 from 2.16.0 to 2.17.0
8d7da814 Bump github.com/docker/docker
6d8d5847 Bump github.com/golang/protobuf from 1.5.3 to 1.5.4
97f12268 Bump golang.org/x/net from 0.21.0 to 0.22.0
fe3c6d64 Bump github.com/onsi/ginkgo/v2 from 2.15.0 to 2.16.0
80254e6d Bump golang.org/x/term from 0.17.0 to 0.18.0
94ca2fc9 KEP-3857: Recursive Read-only (RRO) mounts
07b21d85 Do not auto find runtime handler for user namespaces tests
4d1e3040 Add user namespaces tests
70ccffb9 Vendor Kubernetes v1.30.0-alpha.3
949545e1 Readd the logPath to the list
5afb4c73 Matching kubelet's containerLogManager.rotateLog() glob pattern
09b9303e Applying comment
64e373b2 Changing option to keep-logs and inverting default
67679ee3 1197: adding rm --dl (--deletelog) option
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
ebc4831a3f |
cri-o: update to v1.31.0
Bumping cri-o to version v1.30.0-230-g04500243e, which comprises the following commits:
6d6149a0b build(deps): bump the actions group with 2 updates
922718c3f Fix typo
199f018fc build(deps): bump crate-ci/typos in the actions group
2389743df build(deps): bump k8s.io/kubelet from 0.31.0-alpha.2 to 0.31.0-alpha.3
58a9d7ed8 Enable `gci`, `godot`, `nolintlint` and `protogetter` linters
e2f93c800 Add `kubernetes` group in dependabot
c9844d98d Allow setting `CRICTL_BINARY` externally
6d00aaacc build(deps): bump k8s.io/client-go from 0.31.0-alpha.2 to 0.31.0-alpha.3
3789c2181 build(deps): bump the gomod group with 7 updates
49890645a Sort `crio` subcommands by name
a7f937588 Fix version output in help
4148aca47 test: ensure correct parsing of supplemental groups policy in JSON
ecf2c1770 build(deps): bump the gomod group across 1 directory with 3 updates
7d460145f changed the scorecard badge link to the standard format
fd967972a Update nixpkgs
506badaa2 Reload config should remove pinned images when an empty list is provided
2f16f8bae Update go dependencies
11562fd1c Add space to the error message
f8b860970 test: add coverage for fine-grained supplemental groups
c931b90a3 server/*: add fine-grained SupplementalGroups control for enhanced security
52f3004c5 Mark v1.27 as EOL
efd4385b4 server/*: Fix bug to add gid in /etc/group
ffd15afda build(deps): bump crate-ci/typos in the actions group
6cb3925d9 OWNERS: adding littlejawa to the list of reviewers
486d768dc Update nixpkgs
1705f891c Update nix to v2.22.1
1494f809a Update shfmt to v3.8.0
7ad9c74e4 Update zeitgeist to v0.5.3
9cd0a9ed0 Update cni-plugins to v1.5.1
d27a9a8e3 Update shellcheck to v0.10.0
ccc030003 build(deps): bump actions/upload-artifact from 3.pre.node20 to 4.3.3
07ac2d0a7 build(deps): bump ossf/scorecard-action in the actions group
02574a396 build(deps): bump peter-evans/create-pull-request in the actions group
6d2ff549e build(deps): bump github.com/go-chi/chi/v5 in the gomod group
293359157 Fix container volume restore
cf1875acc Added the scorecard github action and its badge
f62cf94cd build(deps): bump the gomod group across 1 directory with 3 updates
eccab8ac5 Restore container logs from checkpoint
20eba5edf server: remove container after failed start
8efa17c6a high perf hooks: short circut when writing cpuset values
80fcdafa9 build(deps): bump the gomod group across 1 directory with 14 updates
6af15ae30 Skip `[sig-network] KubeProxy should update metric…` test
d85efd773 build(deps): bump the actions group with 2 updates
e543c4d8e release-notes: Skip first commit
935579087 build(deps): bump crate-ci/typos in the actions group
8a08f2233 Add `conntrack-tools` to CI system packages
25e2e3566 build(deps): bump crate-ci/typos in the actions group
a12fa31f2 .packit.yaml: Fix `%global commit0 <sha>` generation
4572f79b5 build(deps): bump crate-ci/typos in the actions group across 1 directory
3da7b0699 Update scripts/automated-patch-releases.md
c84c357d5 Allow pull timeout set by RPC context
0a673b9ac Make unit tests work rootless
00ecf9532 Update cni-plugins to v1.5.0
4d6b85942 build(deps): bump crate-ci/typos in the actions group
b9487a0b0 Fix container stats label filter
ef7880da4 Don't fail CI on GitHub pages push
07ffbd248 Rebase to correct branch on patch release creation
594295d94 Update nixpkgs
7e778525a Update scripts/automated-patch-releases.md
af5358508 Update scripts/automated-patch-releases.md
e316beb95 Update scripts/automated-patch-releases.md
ab6739e2d Update scripts/automated-patch-releases.md
b48aa8ec9 Update scripts/automated-patch-releases.md
1ed84cd13 golangci-lint: bump cyclomatic complexity again
3e862ecbe server: warn about container /etc not being a regular directory
37c76ad52 server: use SecureJoin when setting container /etc directory
1c457dfe1 add mermaid flow diagram for patch releases
bcea85b46 build(deps): bump the gomod group across 1 directory with 10 updates
af597f05f Readd GOARCH in `Makefile`
c491001e9 Switch to `containers/common/pkg/crutils`
ef3d4eea6 Update conmon to v2.1.12
a9d80aa26 Update nixpkgs
dde54fcad build(deps): bump the actions group with 2 updates
148cacab0 fix memory leakage
7fec7bf61 Keep the monitor exits from stopping when the watcher gets error
1e12bed7d Add small tutorial how to run CRI-O in KIND
82af00dd2 delete deprecated registries config
2da2e6830 Fix tag reconciler permissions
63f443b1f build(deps): bump cachix/install-nix-action in the actions group
a5b126c0a Run workflow after tag push
5a306d4c5 Allow workflow dispatch for `integration`, `test` and `verify` actions
0a76ebe5d Create tag on reconciler
8d66907f5 Fix lint
0df965310 server: use max function instead of manually calculating max
ca3c711a3 build(deps): bump the actions group with 2 updates
0540a8e90 build(deps): bump the gomod group across 1 directory with 11 updates
b1b3c92ae Update a typo in the code comment
55cc11975 test: reenable crun-wasm test
64b991b1f server: support ping_group_range if in a userns
474a2ce87 contrib/test/ci: cleanup archived package for Fedora and ansible code
d1db27fb2 Add parser tag for DisallowedAnnotations
8b1ce9235 Update scripts/release/release.go
3914eeb59 fix rebase branch error on patch release
8ac0907f2 Enable `revive` linter
e7e37c567 build(deps): bump ossf/scorecard-action in the actions group
cbe71afae Show runtime configuration
f03faf99a Kill exec PIDs after main container exited
8b867c6ed build(deps): bump the gomod group across 1 directory with 4 updates
137f8a5a9 build(deps): bump golangci/golangci-lint-action in the actions group
794ce67db Remove surplus newline from the log message
0a9110393 pinns: write sysctls in correct process when userns
ee49fad01 Check for nil values when importing container definition
e07608b4e Fix mocks
8f4b32a53 build(deps): bump the gomod group across 1 directory with 25 updates
64c510043 Set an integration test timeout
62fede365 build(deps): bump the actions group with 2 updates
e01608257 Enhance tag reconciler logging
6657190b7 build(deps): bump github.com/containers/podman/v5 from 5.0.0 to 5.0.1
5327c246b build(deps): bump github.com/docker/docker
52f185309 Fix tag-reconciler job by using `GITHUB_TOKEN`
ead3cca6e Dependency update for podman 5
5f54ca9c5 build(deps): bump golangci/golangci-lint-action in the actions group
e783e930e Update internal/version/version.go
481baea60 Update golangci-lint to v1.58.0 and fix lints
8132c7d15 Remove archived `containerd-cri` repo
aefd7ac37 Use `codecov/codecov-action` to fix coverage report
907685a82 add tag-reconciler for patch releases
c3bfcd3b4 wait for reload completion for stable e2e
7371d2170 dashboard: switch to non-deprecated metrics
f0cd27e15 Replace go env GOARCH to ARCH
dea6c628e Drop GOPROXY/GOSUMDB from Makefile and fix unary operator error while building crio
1585cb921 version: bump to 1.31
1beecbe27 Pin crate-ci/typos GitHub action
980db0610 test:add coverage for automatic reloading of mirror registries
01450abb7 server: implement automatic reloading of mirror registries configuration
882ce4afc Fix kubelet image GC by using new `image_id` CRI field
d91496190 Fix AppArmour profile Apply() function to correctly handle an "Unconfined" mode.
97384f9a9 test/cri-metrics.bats: skip test for kata VMs
1955ce5d7 internal/criocli: Update criocli with new added metrics flags
820522dcf - internal/stats: Pass the container_server context down to statsserver
33d2f4785 - Better naming for ContainerStats struct
2ba4de466 New slice for each metric collection
b4ac9a966 Add metrics integration tests
d7fe9a3bb - Add missing fields and functions to unsupported stats
274a509eb - Implement ListPodSandboxMetrics
e851caffb Replace libcontainer.Stats with cgmgr.CgroupStats
352afeddd Add file_mapped and failcnt fields to memory stats
40ea8516a Add metrics decscriptors list
38e296b15 - Add cri-metrics implementations
4d93b7ec4 build(deps): bump the actions group across 1 directory with 3 updates
e66cd346d drop loop variable, which is no longer needed in go 1.22
8b966a886 Re-add `GITHUB_TOKEN` for GitHub actions jobs
4b4e66c63 Remove `GH_TOKEN` usage from repo
e0c06c4b5 golangcilint: potentially fix lint from broken linter
8d3a11eef hack/build-rpms.sh: Update for new builder image
c2d743dc6 Add debug log line to track newly started exec PIDs
614eb160e Add debug log to expose details of an exec PID being killed
6470daf8c Vendor Kubernetes v1.30.0
8c78850c1 Install `cri-tools` from `master`
b7e687853 fix typo and lints of CVE-2024-3154 fix
976ab1f4c annotations: add OCI runtime specific annotations to the AllowedAnnotations
b40648e43 Pin golangci-lint action
b20fce0b8 build(deps): bump golangci/golangci-lint-action in the actions group
9af6c1717 Fix verify.yml for GitHub actions
2e81eedc8 contrib/test: skip fips test for kata containers
81a98deb9 test: add coverage for disabling crypto.fips_enabled when FIPS_DISABLE is set
9977160f7 server: allow containers within a cluster to opt out of FIPS mode when necessary
316c23534 Pin GitHub actions commits
0c284bea2 replace patch-release.go with release.go
e34ea18ae Updates pinned images list on config reload
f326ace51 oci: keep track of exec PIDs and stop them on container stop
04be0b7cc build(deps): bump crate-ci/typos in the actions group
2edec2888 Build s390x binaries using musl libc
f98b96534 stop using BytesSize when merging the config
49b4a5fa4 bump ocicrypt to v1.1.10
13efa1ae1 Run patch release and nixpkgs jobs only on cri-o/cri-o
46d815d17 Distinguish conmon version parse from execution error
9e8848281 Remove duplicate comment in crio.conf
87cea5626 Rename `cron` workflow to `release-branch-forward`
d5b4ae531 drop hooks from kata integration tests
cd8333627 Use release-note block instead of label
b01cb1886 Update cri-tools to v1.30.0
3099a8fa7 patch-release: configure the default git user and fix file update
ddbd81955 Use default `cri-o` org for patch releases
da1999a6a Add missing kernel version check to the RRO mounts integration tests
dfc851483 Update `release-notes` to v0.16.8
851c13a05 build(deps): bump crate-ci/typos in the actions group
e3873837d sasha comments
cf44dd802 drop version
43f7ae0d1 Update golangci-lint to v1.57.2 and config
99aad640c Fix patch release workflow restriction
09a529bdf config,factory: use updated CDI interface.
fd9aa7625 go.{mod,sum}: update CDI dependency past 0.7.1.
283ac9cb1 add imagefs integration tests
8cffb6590 Move test volume creation to a local helper function
36d5b2359 Lower verbosity of `Allowed annotations are specified for workload` message
c69b09563 Enable and fix errorlint
7a098653b feat: add release versions for manual workflow run
5c4fb9a0e Use debug log level for CRI-O prow tests
25d397f98 Remove device mapper support
55857d8dd hack/govulncheck.sh: nit
0302c4150 Move to use new SELinux test helpers over the opencoded checks
9331b8628 Add test helpers to check for current SELinux status and mode
1234e86f2 Add test helpers to check for kernel and crictl versions
39be41ef9 Add support for Recursive Read-only (RRO) mounts
e1b983ac7 Makefile: rm $(PROJECT) use from paths
0e20dcddb Makefile: rm i386 hack
9e2727a9b build(deps): bump crate-ci/typos in the actions group
c848ba727 Print runtime version info on CRI-O startup
9bac613f5 Implement configurable container minimum memory limit per OCI runtime.
f7c3a7fff server: do not chmod bind mounts
bb8d956d5 server: chown secrets to root in the container
57a29faf1 add powertools repo for gpgme-devel
083656490 contrib/test/ci: use force_clone for crun to avoid outdated codebase
4fe7bc348 drop rootless dependency from podman
9231bcfa8 Add docs about the prow CI images
27982a07a update runtime spec to 1.2
0484ce3dd Fix Actuated badge in README.md
e480e5b28 Cherry-pick changes from containers/image/pull#2363
4ebe38670 Remove pinned conmon-rs version
74145d0b3 contrib/test/ci: use the main branch for building crun
46feeca20 build(deps): bump crate-ci/typos in the actions group
9d0acb9c1 Disable cron workflow for forks
0490e18b3 skip crun-wasm test in image bats
e3e629a5f build(deps): bump crate-ci/typos in the actions group
6718d4708 *: address issues with the latest typos update
31a0e9c12 build(deps): bump the actions group with 2 updates
a3496374e contrib/test/ci: fix ansible code for building runc
618a4cf1f Do not abort startup if CRIU binary not found
03839cb0a Don't fail-fast integration test matrix
ce21e6ae5 test: fix potential flake in timezone tests.
b5319fd54 Allow runc to build with go 1.21 and revert wasmedge changes Signed-off-by: Kevin Hannon <kehannon@redhat.com>
12a281f4c create go1.21.9 directory
33db97543 setup golang to 1.22
0f887e69e build golang 1.29 in runc
4e1bb0ba9 ci at 1.22
f407aa06b use golang 1.21 until runc works with 1.22
aedcfd1ac Run seccomp notifier tests on arm
dc44631dc add x to set for traceability
0a4272d03 test: remove references to crioctl
3c6b0e089 use wasmedge and drop crun-wasm
a63bc4d7a WIP: patch release workflow and script
ecd7c6ab5 Change `progressGoRoutine` to `consumeImagePullProgress`
b3b0089f0 fix: validation check should handle zero values
9d1cff8f3 oci: AttachContainer: always read attach socket
6ec4e5f38 refactor: moved cpulimit to crio config
3c1fc985b test: added test to cover parsing annotations
34223ab23 upkeep: small wording changes
2c666e7cc feat: add support for cpu limits for workloads
1a377ccd8 Add dynamic pull timeout
7084db255 packit: Update config and sync to Fedora
d6d21a12d In some cases the seccomp_notifier does not have time to stop the workload, in that cases exit code of container is 0.
39b3003e2 Update install.md
9b0e2b9b1 Update bats to v1.11.0
bea30a002 add a more clear pointer to what is supported for packaging
ba25bb584 Migrate off deprecated AppArmorProfile CRI API
b8e947a08 Add exponential backoff to the container stop loop
8460c2c1b add selinux package to crio Signed-off-by: Kevin Hannon <kehannon@redhat.com>
5bd10e270 Update OCI CNI to v0.4.2
d6ebb48a1 Use CRIU version check go-criu; not from Podman
ab7961676 drop specgen from crio
a6abdb326 Remove Podman `lookup` dependency
bcd879fe8 Change duplicated string values into constants
511572c5a Enable and fix `ginkgolinter` reports
7de6d9882 Remove Podman `annotations` package dependency
65ffd1737 Use upcoming version as release notes `endRev`
5677831ca Update cni-plugins to v1.4.1
8c41a868f Deflake `pod annotations capability for chained cni plugins` test
169c5f0c6 Use contextual logs in `server/container_restore.go`
3b29ce532 Remove Podman `errorhandling` package dependency
7824651ac Update google.golang.org/protobuf package to version v1.33.0
6649d97af Update the CNI plugins instructions
9b9318132 Update golangci-lint to v1.56.2 and fix lints
3372a225d build(deps): bump the actions group with 1 update
3f046d1df build(deps): bump github.com/go-jose/go-jose/v3 from 3.0.1 to 3.0.3
7afcf3f46 build(deps): bump gopkg.in/go-jose/go-jose.v2 from 2.6.1 to 2.6.3
863e51424 Add OCI artifact layer cache
c434ea8ad Change CRIU support from default off to default on
a9ba094a1 deps: update otelttrpc to @latest and re-vendor.
365eaff17 Update zeitgeist to v0.4.4
5b246ba0a build(deps): bump the actions group with 1 update
624564010 Sync changes of PR#7719 & other defaults
791ce8045 Change process metrics collector log levels
03c4bcacc Remove `--seccomp-use-default-when-empty` option
ae00cdf9b fix a minor typo in the comment of pullImageImplementation
115e11d09 Disable Recursive Read-only (RRO) mounts feature
0b7cd2f34 Do not overwrite stored latency/governor on container restart
097fe3bf0 Add s390x architecture support
a1b8cb9c9 Add OCI artifact pull unit tests
ed7963f03 Keep versions file simple to source only
338ea986f In-memory OCI artifact pull
b302bc1a0 server: report the runtime handlers features
66ac43688 config: make error message clearer
0fa57582a vendor: bump kubernetes dependencies
08c393d17 Update release-notes to v0.16.5
b826a7f8c Remove `crun` from `dependencies.yaml`
3193916ac build(deps): bump github.com/opencontainers/image-spec
c692bec92 Fix markdown lint
6bd4f6855 Allow plain annotation `seccomp-profile.kubernetes.cri-o.io` for images
7b610e32c build(deps): bump the actions group with 6 updates
474fc7780 test: always override NRI socket location.
d3808e4ca Add all update types to dependabot groups
9241d7492 build(deps): bump the gomod group with 8 updates
8cc853085 build(deps): bump the actions group with 1 update
4c682eb0d Group all dependabot updates
bf5cc00bc config, docs, completions: enable NRI by default.
031ba9b11 Run checkpoint restore tests on arm
f1408edbe Update nixpkgs
e4a4024e5 Rename seccomp profile annotation to `seccomp-profile.kubernetes.cri-o.io`
fe8ec1940 Run integration tests with JOBS=2
14ef21bd2 Reduce amount of parallel jobs in integration tests
6f28ea99a Remove deprecated metrics
edebdd00f Revert "Fix ImageRef field for containers to default to an image ID"
91f888a3d Filter image annotations before used
ea8f1054e Don't fail-fast matrix
d43d8fd92 Don't use CRLF when generating CRI-O documentation
abf38859c CRI: An empty DNSConfig != unspecified
567eed921 Switch to go 1.22 and update deps
162594e9b Update openSUSE's OBS URL in install-distro.md file
a38b9b956 .golangci: Bump gocyclo to enforce code complexity checks
aff565f82 test: add test for timezone support
66c2aeb83 *: add support for specifying timezone for pod/container
05f4cbb19 release-notes: fix startTag calculation
b20d06cc7 Add support for OCI artifact seccomp profiles
ff60ac14a When crio restarts, restore the infraContainer
d955623e6 go.{mod,sum}: update NRI dependency, re-vendor.
4619ca724 server,nri: enable otel tracing over ttrpc.
9613e6075 Fix ctr log max test on arm64
e84b65477 oci: handle early exited container faster in stop loop
d8d3670be Update runc to 1.1.12
aedf47129 build(deps): bump github.com/opencontainers/runc from 1.1.10 to 1.1.12
511877186 report memory Swap-only values
601d85941 clean up the Populate* functions with their helpers
3bd73f662 libcontainer-based stats server for linux
5a2bbb90f Run integration tests on arm64
6fb83141a higeperfhooks: mixedcpus: set only exclusive cpus in child cgroup
63ff1eee8 Add integration tests
ea75b9bef Move metrics endpoint listener to use 127.0.0.1 as default
fbe8bbbee highperfhooks: add precreate hook for injecting envs
5e83e9697 Update nixpkgs
7e94aa19a server: implement stopPodSandbox for FreeBSD
f70aa434c server: implement runPodSandbox for FreeBSD
c13044276 internal/sandbox/infra: make this build on FreeBSD
bdaa98b66 internal/node/config: implement ValidateConfig for FreeBSD
2eb3db455 internal/config/nsmgr: implement nsmgr for FreeBSD
479e316db internal/oci: Implement getPidStartTime for FreeBSD
19e407c2e server: make configureMaxThreads platform-specific...
887c4421d internal/lib/sandbox: make NeedsInfra plaform-specific
5cb9fa77a internal/factory/containers: allow non-linux containers
5d3d7260d pkg/config: only validate the pinns path on Linux
c9975a3c4 build(deps): bump ocicni to latest master
3333f2fa7 build(deps): bump the opentelemetry group with 2 updates
1b9754486 fix missing line ending on crio.8.md
3cbaa5294 fix grep for whitespace
8dea35388 add metrics_host to config
8cffd22e3 fix typo for time out
e510f3854 metrics: remove deleted containers from OOM count metrics
56e46815d build(deps): bump github.com/go-git/go-git/v5 from 5.10.0 to 5.11.0
0c67d8b5a version: bump to 1.30.0
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
e28407eda5 |
containerd: update to 2.0.0-rc-latest
Bumping containerd to version v2.0.0-rc.3-82-g1b24e53d0, which comprises the following commits:
63b55e6df build(deps): bump the golang-x group with 2 updates
51f34ff49 CI: update Fedora to 40
56495b404 update go version to 1.22.5
23170e20d Move fsverity package to internal
f6e731c80 cri: get pid count from container metrics
96352ad22 update runhcs binary to v0.12.4
10aec359a cri: ensure NRI API never has nil CRI
a723c0c6e pkg/reference: remove deprecated SplitObject
ef98c7198 Implement fsverity functionality
fec33aa73 pkg/reference: deprecate SplitObject
a5fce38f3 pkg/reference: Spec.Digest(): inline SplitObject code
42145950b pkg/reference: SplitObject: add proper GoDoc
74a6156ac pkg/reference: SplitObject: zero allocations
799bca97f pkg/reference: Spec.String(): use string-concatenation instead of sprintf
c097022a5 build(deps): bump github.com/containernetworking/cni from 1.2.1 to 1.2.2
14b053fb4 build(deps): bump github.com/containerd/go-cni from 1.1.9 to 1.1.10
8f9607eed Use the transactor interface in metadata
2cf8237a1 build(deps): bump k8s.io/klog/v2 in the k8s group
a2f9101aa build(deps): bump github.com/containernetworking/plugins
2304cd9d5 build(deps): bump google.golang.org/protobuf from 1.34.1 to 1.34.2
469f95026 build(deps): bump github.com/containernetworking/cni from 1.2.0 to 1.2.1
243b803a1 Add pprof to runc-shim
b323e9eec vendor: github.com/containerd/ttrpc v1.2.5
cb38b1e2b api: update github.com/containerd/ttrpc v1.2.5
2f1bf791b Cleanup metadata godoc
907796811 update release runners to ubuntu 24.04
dd0542f7c cmd: don't alias context package, and use cliContext for cli.Context
c25183ff1 use older version of OVMF package
1bfdccee0 use vagrant from jammy in noble
769e0c8c1 add debian sources for ubuntu-24
624aa49d4 increase xfs base image size to 300Mb
027414ee5 enable ubuntu 24 runners
9edde8106 build(deps): bump github.com/klauspost/compress from 1.17.8 to 1.17.9
becb2b2d3 build(deps): bump github.com/checkpoint-restore/checkpointctl
f6f655ccf build(deps): bump k8s.io/klog/v2 in the k8s group
531da9960 Reduce scope of permissions in stale workflow
15887d7ef sandbox: add update api for controller
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
e977aba247 |
conmon: update to 2.1.12
Bumping conmon to version v2.1.3-147-ga500cbd, which comprises the following commits:
a500cbd logging: remove unuseful fsync
1578849 fix(deps): update module golang.org/x/sys to v0.20.0
c7a88f8 Remove CI VM OS names
be3e546 chore(deps): update dependency containers/automation_images to v20240513
e889663 Bump version to 2.1.12
ff8794c Make 'docs' target not depend on 'install.tools' if GOMD2MAN is set
10f7826 Packit: enable downstream sync to CentOS Stream 10
e21e7c8 Build s390x binaries using musl libc
9ce7b1a Add support for s390x
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
1195b00fe9 |
buildah: update to 1.36-tip
Bumping buildah to version v1.36.0-2-g0d08edeed, which comprises the following commits:
34518c5fa Packit: enable c10s downstream sync
6ceba8838 Bump to v1.36.0
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
e7033d206d |
aardvark-dns: update to v1.11.0
Bumping aardvark-dns to version v1.11.0-10-g5ad6420, which comprises the following commits:
2873fe5 Be sure to have at least Epoch 2 to preserve upgrade path in c10s.
db1afc8 fix(deps): update rust crate log to 0.4.22
43ea35b [CI:BUILD] rpm: Update Rust macro usage
03d1c0a fix(deps): update rust crate tokio to 1.38.0
cbdc655 Bump to 1.12.0-dev
666d7b1 Release v1.11.0
802a5de v1.11.0 release notes
882c7b0 run cargo update
ed6c573 chore(deps): update dependency containers/automation_images to v20240529
011f352 Internal networks cannot make external DNS requests
9db7996 fix(deps): update rust crate anyhow to 1.0.86
e30a92e fix(deps): update rust crate nix to 0.29.0
dc946ea [skip-ci] RPM: use default __cargo macro across all envs
9ebb8f2 chore(deps): update dependency containers/automation_images to v20240513
db186b4 fix(deps): update rust crate anyhow to 1.0.83
d591c8a [skip-ci] Packit: separate `packages` key for rhel jobs
ae9ff92 fix(deps): update rust crate libc to 0.2.154
abba8d0 [skip-ci] Packit: enable rhel10, c10s tests and c10s downstream sync
ed98d62 [skip-ci] Packit: Remove EL8 jobs
fb414d9 fix(deps): update rust crate syslog to ^6.1.1
591a636 fix reverse ipv6 lookup test flake
40f76b6 fix(deps): update hickory-dns monorepo to 0.24.1
4646a22 chore(deps): update rust crate chrono to 0.4.38
1f96f76 Don't tear down all server threads on SIGHUP
f244f33 fix(deps): update rust crate anyhow to 1.0.82
dfa66f6 fix(deps): update rust crate tokio to 1.37.0
f8a2e2c Update to nix-0.28.0
12a8e25 update chrono package
25dee15 chore(deps): update dependency containers/automation_images to v20240320
f3f615e fix(deps): update rust crate anyhow to 1.0.81
99d3d62 tests: check queried domain name in reverse lookup tests
a256241 fix: set name for answers in reverse lookups
13055be chore: fix typo in runner script
593e007 chore: fix log message when doing reverse lookup
33817d2 fix(deps): update rust crate log to 0.4.21
7656598 fix(deps): update rust crate anyhow to 1.0.80
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
58cddd438e |
podman-compose: update to v1.2.0
Bumping podman-compose to version v1.2.0-27-gdaab93b, which comprises the following commits:
9fe3038 tests/integration: Automate 'build_fail' manual test
0f8348b tests/integration: Automate 'build' manual test
2091ade Add newsfragment
ca58d7c Pass build description labels to podman build
5bf4c0f Add a way to remove dashes in default network names
67c5352 Extract default_network_name_for_project()
5040a37 tests: Add integration tests for up -d with single container at a time
29195be github: Install requirements unconditionally
9a4af0c Discover tests instead of passing a list of files to unittest
24038da Check whether pod exists before trying to create one
2056e70 tests/integration: Reduce base path calculation duplication
4ec57c1 unittests: Added unit tests for podman-compose secrets
fa3e0a7 Alt Dockerfile names fix
18472b5 Move all tests to single directory "tests"
d38b26b Release 1.2.0
37e2cb2 Add release notes for v1.2.0
6ef759c Use newsfragments pattern for the release notes
67ce900 Commit .env in tests/env-file-tests, bypassing root .gitignore
4e9f767 Load .env from Compose file's directory and cwd
405001b Fix comment
6b1aeff Add unittests for type=env secret
f06975b Update tests for type=env secret
546cad5 Add type=env secret support
935029d Fix environment variable precedents
360b85b Allow providing custom in_pod argument as a global compose file variable
82740cc Add ability to input docker-compose.yaml via stdin
0f645e4 Add ability to input docker-compose.yaml via stdin
3b15170 Changed the global parser help message for file input, to reflect changes for reading from stdin
3359380 Add ability to input docker-compose.yaml via stdin
e799a0b Fix x-podman.gidmap typo
65d1fde github: Add verbose option to integration tests
2e8ed2f pytests: Add test for object required but path non existent
040b73a pytests: Add tests for several multi-line environment files
f3e9a96 Fixes #908: Add support for multi-line environment files
2c5d00d github/workflows: Add codespellignore file to address false positives
b513f50 test: add missing unit tests for selinux in verbose mount
cac836b Support additional_contexts
09034a0 test: Split test_gpu test
0065082 refine the test_include for multi subcomposes
4f73f2b fix: add include test file, edit the assertion
1d64f2c Update podman_compose.py
4e22fae Fix logging build error message
79865c2 Add support for enabling GPU access
c23a8b2 Do not pass --ipam-driver option when value set to default
b202a09 Add support for `env_file` as objects
5c4aa40 add await for create_pods call
cef1785 Add instructions on install from Homebrew
b761050 tests: Merge multiple compose merging tests into single test class
e1d0ea7 tests: Move normalize_service tests to a separate test class
1430578 tests: Simplify command and entrypoint normalization tests
d31a8b1 Don't create pods/container when registering systemd unit
5df4e78 README: explain that netavark is an alternative to the dnsname plugin
70a0e2d Fix handling of --in-pod argument
eea8bac Add images command
a6c4263 Add tests for x-podman.uidmaps and x-podman.gidmaps
9599cc0 Migrate x-podman dictionary to x-podman.* fields in container root
2b4ecee Add docs for podman specific compose file extensions
77f2e8e Support podman's external rootfs management
72a94d5 implement --publish in docker-compose run
2681566 Release 1.1.0
c97f003 Add release notes for v1.1.0
131010b Use x- prefix for x-podman.mac_address
cdcedeb Use "service.build.ulimits" when present instead of "service.ulimits"
3e1f7d5 add tests for selinux with verbose bind mount
d7cf096 add support for selinux in verbose mount
1f35c00 Add unit test for depends_on normalization as a dict
6c09ce7 FIX issue https://github.com/containers/podman-compose/issues/704 - Windows fix sock not working.
953534a Support and document all podman-specific network_modes
6feff24 slirp4netns can be used without options
9fd4cf4 Add unit tests for network_mode
65849c9 add comment about per-network aliases
9baea70 use preferred format of podman command line options
bdff78d Ignore files generated by tests
45ca1f9 Support podman-specific per-network mac_address specifiation
91fbea3 Add unit tests for get_net_args()
2743d69 Fix support for multiple networks with explicitly specified ipv4/ipv6 addresses
dd34a90 Add testcase for failing network config
f0bae1e Don't resolve links to compose file
81d81fb Formats CONTRIBUTING.md
b263dc1 Fixes typos and enhances CONTRIBUTING.md
078ee7b Updates Signed-off-by link in CONTRIBUTING.md
a6e3ae7 Fixes invalid name of test package in setup.py
1e9cf1d Pass file secrets to "podman build" via parameter "--secret"
bbfff78 Bump actions/checkout from 3 to 4
c351f99 Add coverage to Github Action summary
829cde0 Rename test classes to match filenames
da63048 Don't spellcheck requirementfiles
5e55df8 fix python < 3.9 compatibility
fde7995 Fix python < 3.11 compatibility
c592596 Split out the different tests into separate CI steps
688ee9a Fix pylint issues
c3a152e Enable pylint, because it catches stuff that ruff misses
bd60bc9 Run tests on all supported python versions
9d8b0b8 add editorconfig
f2f5483 Extract compose_run args parsing and add unit tests
c4fa8f7 Split exec args parsing into new function and add unit tests for it
4c270b9 Allow run/exec -e with equals sign in value
c5f7f55 Remove implemented commands from Missing Commands
c98cbaa Fix #782: add support for http_proxy
91d316f Added handling `pid` option
969edb8 Add support for enable_ipv6
bba1f33 Factor out arg creation for "network create". Add unit tests.
a9c335b Handle sysctls maps
e67c52f test_container_to_args: handle async tests
2cdfb3e Fix stop/restart args stacking
8ec5e03 github: Add PR template
da520e2 switch to % string lazy formatting * fix black and pylint issues
1e9e2ee Output: use logging, remove garbage output by default
0f693ee Replaces asyncio timeout with bespoke timeout function
cf90ab2 Run codespell throughout fixing typos automagically
d2fa801 ignore poped (not sure why not to make it popped)
2477748 Add pre-commit definition for codespell
6e65a73 Add rudimentary codespell config
f95ca7a Add github action to codespell devel on push and PRs
0c0e77c Bump actions/checkout from 3 to 4
bb2338e Fix unsorted imports
15ae214 Add support for runtime service configuration key
ed39523 github: Enable ruff check
4e43606 Shorten too long lines
91052cb Fix ambiguous variable name
a6e0092 Remove unused variable
59a1fa3 Use 'not in' for membership test
36139fb Remove unused f-string
b0da6f8 Fix import formatting
94df95a README: Fix link to tests badge
3a5a283 README: Remove link to pylint test badge
7c81044 github: Run actions on python:3.11-bookworm
1a24cde tests: Properly tear down containers in extends_w_file_subdir test
a90da4d github: Fix test names
27c8ceb tests: Add verbose debug option via env variable
0614687 tests: Print decoded subprocess output in case of failure
6af7a2d tests: Optimize speed by using dumb-init to handle SIGTERM signal
f4dc5f3 tests: Print output in case subprocess returns unexpected code
b34f699 Add SPDX license identifiers to each source file
2c6c1be github: Run tests on all branches
91737ee Bump actions/setup-python from 4 to 5
b65d4a3 github: Fix ruff job setup
23fe9e7 Migrate tests to unittest
7539257 requirements: Install . for tests
a967cab Format codebase with ruff
a5c354d Replace flake8, black, pylint with ruff
e4e5b7d Make test requirements reproducible
e0edd5d Fix package installation
831caa6 remove recursion
9ac3339 Fix issue #831
c5be5ba Fixup tests
c6a1c4c Add tests to make sure all async paths are covered
3c9628b Fix a couple issues and update docs
38b13a3 Use asyncio for subprocess calls
bce40c2 Change "an key-value" to "a key-value"
78f8cad Fix typos
7942a54 fix styling errors
cb9cf60 add stats command
06587c1 rm redundant tests
bc9168b add no-normalize flag
57c527c add edits from review
d1f5ac9 convert build context path to absolute during final normalisation
0164c1d Simplify the fix using `or`.
e5cdce4 default to an empty dict for the from service if the service is None
280f177 Add a test to extend using an empty service (placeholder)
f75d12a broken in py 3.7
5454c3a Add 'links' aliases to container aliases
901adf4 Use defined environment variables in the image build process
bf07e91 Implement `include` from `compose-spec`
c31b4e2 Fixes #723: merge short & long syntax of depends_on dependencies
79bfad1 move logic from rec_merge to normalize_service
d150946 allow empty list to be a command/entrypoint
9011e9f add tests, dry up code, use shlex.split instead of str.split
517aeba Allow config to merge strings and lists in command and entrypoint
85d5d5d move logic from rec_merge to normalize_service
1ffd24d Python version support: sync verified and advertised versions
8c66b1c add test case for when build is a complex dictionary
a0005db add code implementing build value merge
221cf14 add tests for build value merge
a61945b fix format
6b6330c add build subcommand and --build arg to compose_run
5d279c4 Build-fail test example
5a3bdbf Exit code managed at PodmanCompose.run()
1eb1664 Linting fixes
82182b7 Finish execution in compose_build only on command=build calls
3f46188 Update project-1.env
91bc6eb Keep chdir after loading env file
59a59c1 Fixes #636: env-file shall be resolved relative to the CWD
620f5d7 pre-commit black config: run in check only mode
6f902fa Fix linting issues
ccdf01e Revert "Use SELinux mount flag for secrets"
e6b1eab Revert "Use more lenient SELinux mount flag for secrets"
75de39c Use more lenient SELinux mount flag for secrets
8741925 Use SELinux mount flag for secrets
0b853f2 Ignore access mode when merging volumes short syntax
847f01a Add a docker-compose test file for uidmaps/gidmaps
e511e64 FIXES #228: Add support for uidmap and gidmap
a9723ec Added a way to start containers with multiple ips and nets
1cb608d allow project name to be fetched from dotenv
252f1d5 updating black formatting for podman-compose.py
13856d2 updating black formatting
8d8df0b Adding basic support for --profile argument
bc5f012 add option to start podman in existing network namespace
9a08f85 FIXES #586: preserve exit code for podman-compose build
8625d7a add ipam-driver support
016c97f Fixes #663 - Fixes linting/pylint errors
2df1167 Fixes #661 - Fixes linting/flake8 errors
5eff38e Fixes #659: fix permissions when installing OS packages for linting/black
7f5ce26 start version 1.0.7 and default with pod enabled by default
f6dbce3 version 1.0.6
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Mingli Yu
|
66961d278a |
aardvark-dns: Improve the ptest output
The previous ptest result show as ✓ or ✗ , improve the result to PASS or FAIL. # ./run-ptest [snip] PASS: 6 basic container - dns itself with long network name PASS: 7 two containers on the same network PASS: 8 two containers on different networks [snip] Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Mingli Yu
|
7d0768c428 |
netavark: Improve the ptest output
* The previous ptest result show as ✓ or ✗ , improve the result to PASS or FAIL. * Skip some cases related to sit0 device(sit kernel module) and firewalld. * Add nftables to RDEPENDS for netavark-ptest as 250-bridge-nftables.bats needs it. Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Xiangyu Chen
|
e15a5484e4 |
lxc: update ptest cases in black list
Released lxc-test-shutdowntest and lxc-test-state-server due to those back to normal since lxc upgraded to 6.0.0. lxc-test-no-new-privs and lxc-test-checkpoint-restore are broken test, already reported to upstream[1][2], move them to blacklist until upstream fix them. lxc-test-usernic always fails when use ptest-runner, but normal with run-ptest by manual. Ref: [1] https://github.com/lxc/lxc/issues/4296 [2] https://github.com/lxc/lxc/issues/4435 Signed-off-by: Xiangyu Chen <xiangyu.chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Bruce Ashfield
|
93113db99c |
moby: update to v26.1.4
Bumping moby to version v26.1.4-4-gf5334644ec, which comprises the following commits:
c1d4587d76 builder/mobyexporter: Add missing nil check
daba2462f5 docs: api: image inspect: remove Container and ContainerConfig
17315a20ee vendor: github.com/containerd/containerd v1.7.18
cbd94183ab update containerd binary to v1.7.18
3115daaa91 update to go1.21.11
12072173df Update containerd to v1.7.17
92f00d41ba vendor: github.com/Microsoft/go-winio v0.6.2
a046857fbf vendor: golang.org/x/tools v0.16.0
476d9314d0 vendor: golang.org/x/mod v0.17.0
4021fa775e update docker-py to 7.1.0
0fd5efe64a docs/api: add Scope, ConfigOnly, ConfigFrom, Peers (v1.41 - v1.45)
1017246d24 api: swagger: Network: add Peers
fbfa1bcc96 api: swagger: POST /networks/create: document Scope, ConfigOnly, ConfigFrom
e12db89eef api: swagger: Network: inline examples, and add ConfigOnly, ConfigFrom
5838467405 docs/api: POST /networks/create: inline examples per-field (v1.41 - v1.45)
1033f561af api: swagger: POST /networks/create: inline examples per-field
0fa6816991 api/types: NetworkCreate: add GoDoc
eaad6f503d don't depend on containerd platform.Parse to return a typed error
fda7b48363 Fix issue where node promotion could fail
dbec963cee integration/TestDiskUsage: Make 4096 also a 'empty' value
e35c6f5625 Dockerfile: update containerd binary to v1.7.17 (static binaries and CI only)
06e19ec444 Explicity write http headers on streaming endpoints
c21fe3efa3 Forward DNS requests into --internal networks
9326cda7bf Do not forward DNS requests to self.
76fcf9a8e0 apparmor: Allow confined runc to kill containers
10739af81a update to go1.21.10
2f5bbbe16b Option to avoid deleting the kernel_ll address from bridges.
40618081f1 Allow for a read-only "/proc/sys/net".
2c91196921 Update containerd to v1.7.16
c9689eccf5 vendor: update buildkit to v0.13.2
7d95fe8db5 c8d/list: Ignore unexpected image target
6667e96dad Include more details in errnotManifestOrIndex
ab570ab3d6 nil dereference fix on image history Created value
7532420f3b container/SetupWorkingDirectory: Don't mutate config
a4d5b6b4d0 builder/normalizeWorkdir: Always return cleaned path
6c68be24a2 Windows DNS resolver forwarding
745e2356ab Update tags.cncf.io/container-device-interface to v0.7.1
0d6a1a212b vendor: github.com/opencontainers/runtime-spec v1.2.0
f5209d23a8 daemon: add nolint-comments for deprecated kernel-memory options, hooks
f07644e17e Add netiputil.AddrPortFromNet()
d3c051318f daemon/cluster/executor: Add volume `Subpath`
5368c3a04f vendor: github.com/moby/swarmkit/v2 master (f3ffc0881d0e)
f51e18f58e Fix typo
57dd56726a Disable IPv6 for endpoints in '--ipv6=false' networks.
9954d7c6bd Run ipvlan tests even if 'modprobe ipvlan' fails
cd7240f6d9 Stop macvlan with no parent from using ext-dns
17b8631545 Enable DNS proxying for ipvlan-l3
5ae5969739 vendor: github.com/containerd/containerd v1.7.15
3485cfbb1e update containerd binary to v1.7.15
fb92caf2aa ci/validate-pr: Use `::error::` command to print errors
61269e718f github/ci: Check if backport is opened against the expected branch
d8b768149b Move dummy DNS server to integration/internal/network
329d403e20 update to go1.21.9
d66589496e vendor: golang.org/x/net v0.23.0
e1ca74361b vendor: golang.org/x/net v0.22.0, golang.org/x/crypto v0.21.0
cf933115b6 Minor fix for illumos support
9160b9fda6 save: Remove platform from config descriptor
0a48d26fbc Fix cases where we are wrapping a nil error
c4689034fd daemon: don't call NetworkMode.IsDefault()
4eed3dcdfe api: normalize the default NetworkMode
c187f95fe1 CONTRIBUTING.md: update Slack link
aff003139c ci: update workflow artifacts retention
1014f481de Restore the SetKey prestart hook.
fde80fe2e7 Restore the SetKey prestart hook.
14a8fac092 chore: fix mismatched function names in godoc
61e2199b78 AUTHORS,.mailmap: update with recent contributors
ea72f9f72c Dockerfile: update docker CLI to v26.0.0
22726fb63b api: document changed behavior of the `Aliases` field in v1.45
3312b82515 c8d/list: Add a test case for images sharing a top layer
ad8a5a5732 c8d/list: Fix diffIDs being outputted instead of chainIDs
0c2d83b5fb c8d/list: Handle unpacked layers when calculating shared size
f696e0d2a7 Dockerfile: avoid hardcoding arch combinations for delve
3d2a56e7cf docs/api: add documentation for API v1.45
731a64069f c8d/list: Generate image summary concurrently
dade279565 c8d/list: Add `Images` benchmark
e7c60a30e6 vendor: github.com/moby/buildkit v0.13.1
2e4ebf032a c8d/list: Pass ctx to setupLabelFilter
153de36b3f c8d/list: Add empty index test case
4ff655f4b8 resolvconf: add //go:build directives to prevent downgrading to go1.16 language
1c03312378 integration: Remove Parallel from TestDiskUsage
f512dba037 c8d/list: Fix premature `Images` return
89dc2860ba c8d/list: Handle missing configs in label filter
6f3892dc99 c8d/list: Don't setup label filter if it's not specified
fe8fb9b9a1 Dockerfile: update mvdan/shfmt to v3.8.0
4bd30829d1 Dockerfile: update docker compose to v2.25.0
971562b005 Dockerfile: update docker CLI to v26.0.0-rc2
d742659877 rootless: fix `open /etc/docker/plugins: permission denied`
4f46c44725 Dockerfile: update xx to v1.4.0
25c9e6e8df Makefile: generate-files: fix check for empty TMP_OUT
762ec4b60c plugin: fix mounting /etc/hosts when running in UserNS
7b414f5703 daemon: move getUnprivilegedMountFlags to internal package
790c3039d0 libnet: Don't forward to upstream resolvers on internal nw
10bdc7136c builder-next: Add env-var to override runc used by buildkit
1ca89d7eae vendor: google.golang.org/protobuf v1.33.0, github.com/golang/protobuf v1.5.4
f40bdf5f63 Dockerfile: update compose to v2.24.7
3f73d23ea0 Dockerfile: update buildx to v0.13.1
388ecf65bc c8d: Send push metrics to prom
bb3ab1edb7 c8d: Send pull metrics to prom
da245cab15 c8d: Send history metrics to prometheus
1cfd763214 c8d: Send image delete metrics to prometheus
0ce714a085 images: Export the image actions prometheus counter
bcb4794eea Be more explicit about non-TLS TCP access deprecation
0d5ef431a1 docker-py: Temporarily skip `test_commit` and `test_commit_with_changes`
03cddc62f4 api/image-inspect: Remove Container and ContainerConfig
ec19fd6fed vendor: github.com/containerd/containerd v1.7.14
d19f6d4b6d vendor: github.com/containerd/ttrpc v1.2.3
a6a445d86b set-up-git.md: clarify URL in git clone command
294fc9762e volume: Don't decrement refcount below 0
eef352b565 devcontainer: Use a separate devcontainer target
5a009cdd5b inte/networking: add isIPv6 flag
2f1a32e3e5 c8d/list: Skip images with non matching platform
72f1f82f28 c8d/list: Remove outdated TODO
52a80b40e2 c8d/list: Extract imageSummary function
288a14e264 c8d/list: Simplify "best" image selection
b37ced2551 c8d/list: Count containers by their manifest
a535a65c4b c8d/list: Combine size
582de4bc3c c8d/list: Add TestImageList
a6e7e67d3a specialimage: Return optional ocispec.Index
1b108bdfeb daemon/c8d: Cache SnapshotService
74e2f23e1a daemon/c8d: Use i.images and i.content
e8496b1ee4 imageService: Extract common code from `MakeImageCache`
d66177591e c8d/cache: Use the same cache logic as graphdrivers
bf30fee58a image/cache: Refactor backend specific code
f5a5e3f203 golangci-lint: enable dupword linter
4adc40ac40 fix duplicate words (dupwords)
8921897e3b Ignore bad ndots in host resolv.conf
37545cc644 builder-next: fix missing lock in ensurelayer
ef5295cda4 Don't configure IPv6 addr/gw when IPv6 disabled.
49b77753cb builder-next/export: Use leaseutil for descref lease
c4fc6c3371 builder-next/executor: Replace removed network.Sample
0f30791a0d vendor: github.com/moby/buildkit v0.13.0
4e8d9a4522 Add IPv6 nameserver to the internal DNS's upstreams.
06628e383a remove repetitive words
21835a5696 inte/networking: rename linkLocal flag into isLinkLocal
b32cfc3b3a dockerd-rootless-setuptool.sh: check RootlessKit functionality
49fd8df9b9 Dockerfile: update RootlessKit to v2.0.2
72ec187dfe go.mod: github.com/rootless-containers/rootlesskit/v2 v2.0.2
83cda67f73 go.mod: golang.org/x/sys v0.18.0
57b7ffa7f6 update to go1.21.8
cadb124ab6 daemon: overlay2: remove world writable permission from the lower file
b2921509e5 api/search: Reset `is_automated` field to `false`
f04f69e366 Accumulate resolv.conf options
7f69142aa0 resolv.conf comments have '#' or ';' in the first column
91d9307738 Replace uses of slices.Clone()
12dea3fa9e devcontainer: Add Golang extension automatically
9f4e824a6e vendor: github.com/miekg/dns v1.1.57
ef681124ca fix typo in error message
7ebd88d2d9 hack: block imports of vendored testify packages
4f30a930ad libn/cnmallocator: migrate tests to gotest.tools/v3
a580544d82 Don't create endpoint config for MAC addr config migration
ebf3f8c7fe distribution/xfer: fix pull progress message
2af2496c8c Dockerfile: Update dev cli to v26.0.0-rc1
fc0e5401f2 ci: Update `teststat` to v0.1.25
7b0ab1011c Vendor dependency cycle-free swarmkit
62b33a2604 disable pulling legacy image formats by default
5fe96e234d integration: Reset `OTEL_EXPORTER_OTLP_ENDPOINT` for sub-daemons
84eecc4a30 Revert "integration/TestDaemonProxy: Remove OTEL span"
261dccc98a builder-next: Add `Info` to `emptyProvider`
2c9c5e1c03 vendor: github.com/moby/buildkit v0.13.0-rc3
b649e272bb Allow to enable host loopback and use 10.0.2.2 to connect to the host (OPTIONALLY)
e4de4dea5c ci: Make `find` for test reports more specific
9be820d8ca vendor: go.etcd.io/bbolt v1.3.9
da643c0b8a libcontainerd: change the digest used when restoring
9083c2f10d Test DNS on Windows 'nat' networks
44167988c3 c8d/windows: Temporarily skip two failing tests
2d31532a00 otel: Default metrics protocol to http/protobuf
60358bfcab ci(buildkit): dedicated step to build test image
f5722da5e0 mobyexporter: Store temporary config descriptor
951e42cd60 builder-next: Replace ResolveImageConfig with ResolveSourceMetadata
e01a1c5d09 builder/mobyexporter: Set `image.name` response key
fa467caf4d builder-next/mobyexporter: Use OptKeyName const
59ad1690f7 builder-next: Adjust to source changes
b04a2dad6b builder/controller: Adjust NewWorkerOpt call
bc6d88c09a cmd/dockerd: Fix overriding OTEL resource
a79bb1e832 builder-next/exporter: Sync with new signature
e68f71259a integration/build: Use fsutil.NewFS
dd6992617e integration/build: Use new buildkit progressui
31545c3b67 vendor: github.com/moby/buildkit v0.13.0-rc2
f90b03ee5d go.mod: bump to go 1.21 and use local toolchain when vendoring
16aa7dd67f c8d/pull: Output truncated id for `Pulling fs layer`
881260148f api: omit missing Created field from ImageInspect response
432390320e api/pre-1.44: Default `ReadOnlyNonRecursive` to true
6aea26b431 client: fix connection-errors being shadowed by API version mismatch errors
913478b428 client: doRequest: make sure we return a connection-error
901b90593d client: NegotiateAPIVersion: do not ignore (connection) errors from Ping
349abc64ed client: fix TestPingWithError
05b883bdc8 mounts/validate: Don't check source exists with CreateMountpoint
c516804d6f vendor: OTEL v0.46.1 / v1.21.0
83c02f7a11 libnet/ds: remove extra space in error msg
14df52b709 c8d/pull: Don't emit `Downloading` with 0 progress
ff5f780f2b c8d/pull: Emit `Pulling fs layer`
5689dabfb3 pkg/streamformatter: Make `progressOutput` concurrency safe
1d473549e8 ci: Require changelog description
b2aaf5c2b0 vendor: github.com/containerd/continuity v0.4.3
cbd45e83cf libnet: Replace DeleteAtomic in retry loops with DeleteIdempotent
d9e082ff54 libnetwork: resolve: use structured logs for DNS error
8761bffcaf Makefile: Pass PAGER/GIT_PAGER variable
56aeb548b2 integration/TestDaemonProxy: Remove OTEL span
38827ba290 ci: set codecov token
bddd892e91 c8d: Adjust "image list" to return only a single item for each image store entry
2aa13e950d awslogs: Replace depreacted WithEndpointResolver usage
70a4a9c969 vendor: bump github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs to v1.32.0
9faf4855d5 Simplify macvlan/ipvlan integration test structure
4eb95d01bc Run the macvlan/ipvlan integration tests
7c2975d2df update to go1.21.7
903412d0fc api/history: Mention empty `Created`
443f56efb0 Set up DNS names for Windows default network
b4fbe226e8 Set `Created` to `0001-01-01T00:00:00Z` on older API versions
5bcd2f6860 builder/dockerfile: ADD with best-effort xattrs
999f90ac1c vendor: bump github.com/aws/aws-sdk-go-v2 to v1.24.1
ef7766304c vendor: github.com/containerd/nydus-snapshotter v0.13.7
6932939326 vendor: google.golang.org/genproto/googleapis/rpc 49dd2c1f3d0b
10a72f2504 vendor: cloud.google.com/go/logging v1.8.1
a60fef0c41 vendor: golang.org/x/exp v0.0.0-20231006140011-7918f672742d
03a17a2887 migrate image spec to github.com/moby/docker-image-spec
a26c953b94 Add comment explaining network-create flow for Swarm
571af915d5 Don't enforce new validation rules for existing networks
b71c2792d2 image/spec: remove link to docs.docker.com "registry" specification
4ab11a1148 vendor: github.com/containerd/containerd v1.7.13
419f5a6372 Make 'internal' bridge networks accessible from host
475019d70a vendor: github.com/prometheus/procfs v0.12.0
63c354aae2 vendor: github.com/prometheus/client_golang v1.17.0
beb97f7fdf Refactor 'resolv.conf' generation.
14503ccebd api/server/middleware: NewVersionMiddleware: add validation
e1897cbde4 api/server/middleware:use API-consts in tests
0fef6e1c99 api/server/middleware: VersionMiddleware: improve docs
6b01719ffb api: add MinSupportedAPIVersion const
19a04efa2f api: remove API < v1.24
8758d08bb4 api: remove handling of HostConfig on POST /containers/{id}/start (api < v1.24)
ffd877f948 api: remove plain-text error-responses (api < v1.24)
b3a0ff9944 api: remove POST /containers/{id}/copy endpoint (api < v1.23)
83f790cccc api: POST /exec/{id}/start: remove support for API < v1.21
d1974aa492 api: remove code for container stats on api < v1.21
ed93110e11 api: update test to reflect reality on Windows
570d5a9645 api: remove code for ContainerInspect on api v1.20
f0dd554e3c api: remove code for ContainerInspect on api < v1.20
dfdf2adf0c api: POST /containers/{id}/kill: remove handling for api < 1.20
2970b320aa api: remove code for adjusting CPU shares (api < v1.19)
ef25f0aa52 api: POST /build: remove version-gate for "pull" (api < v1.16)
7fa116830b api: POST /build: remove version-gate for "rm", "force-rm" (api < v1.16)
1b1147e46b api: POST /commit: remove version-gate for "pause" (api < v1.16)
d26bdfe226 runconfig: remove fixtures for api < v1.19
f1e6958295 c8d: Use the same logic to get the present images
2c01d53d96 image/cache: Use Platform from ocispec
d69729e053 seccomp: add futex_wake syscall (kernel v6.7, libseccomp v2.5.5)
10d344d176 seccomp: add futex_wait syscall (kernel v6.7, libseccomp v2.5.5)
df57a080b6 seccomp: add futex_requeue syscall (kernel v6.7, libseccomp v2.5.5)
8826f402f9 seccomp: add map_shadow_stack syscall (kernel v6.6, libseccomp v2.5.5)
6f242f1a28 seccomp: add fchmodat2 syscall (kernel v6.6, libseccomp v2.5.5)
4d0d5ee10d seccomp: add cachestat syscall (kernel v6.5, libseccomp v2.5.5)
1251982cf7 seccomp: add set_mempolicy_home_node syscall (kernel v5.17, libseccomp v2.5.4)
7f1b700227 Dockerfile: update RootlessKit to v2.0.1
f1730a6512 go.mod: github.com/rootless-containers/rootlesskit/v2 v2.0.1
f7192bb0b4 vendor.mod: github.com/google/uuid v1.6.0
91ea04089b image/cache: Ignore Build and Revision on Windows
2ef0b53e51 integration/save: Add tests checking OCI archive output
74d51e8553 plugins: fix panic installing from repo w/ digest
e910a79e2b Remove 'VERSION' from the text
9fcea5b933 Fix broken links in project/README.md
10d6f5213a Dockerfile: update docker compose to v2.24.5
9c92c07acf Dockerfile: update dev-shell version of the cli to v25.0.2
89470a7114 libnet: bridge: ignore EINVAL when configuring bridge MTU
e37172c613 api/t/network: ValidateIPAM: ignore v6 subnet when IPv6 is disabled
c59e93a67b Revert "daemon: automatically set network EnableIPv6 if needed"
83af50aee3 libnet: boltdb: inline getDBhandle()
4d7c11c208 libnet: boltdb: remove PersistConnection
8070a9aa66 libnet: drop TestMultipleControllersWithSameStore
82dda18898 tests: add plugin install test w/ digest
dd20bf4862 libcontainerd/supervisor: fix data race
0c3b8ccda7 api: Document `version` in `/build`
2cc627932a Add internal n/w bridge to firewalld docker zone
8c64b85fb9 No inspect 'Config.MacAddress' unless configured.
dae33031e0 Only restore a configured MAC addr on restart.
a2026ee442 ci: update to docker/bake-action@v4
5a3c463a37 ci: update to codecov/codecov-action@v4
9babc02283 ci: update to actions/download-artifact@v4 and actions/upload-artifact@v4
a83557d747 ci: update to actions/cache@v3
2200c0137f libnetwork/datastore: don't parse file path
d21d0884ae libnetwork: share a single datastore with drivers
835cdcac95 update containerd binary to v1.7.13
f4a93b6993 vendor: github.com/moby/buildkit v0.12.5
b20dccba5e vendor: github.com/opencontainers/runc v1.1.12
44bf407d4d update runc binary to v1.1.12
ecb217cf69 hack/make.ps1: Fix go list pattern
3a8191225a gha: update to crazy-max/ghaction-github-runtime@v3
08251978a8 gha: update to docker/login-action@v3
5d396e0533 gha: update to docker/setup-qemu-action@v3
4a1839ef1d gha: update to docker/bake-action@v4
b7fd571b0a gha: update to docker/setup-buildx-action@v3
00a2626b56 gha: update to docker/metadata-action@v5
e27a785f43 gha: update to actions/setup-go@v5
fb53ee6ba3 gha: update to actions/github-script@v7
0ffddc6bb8 gha: update to actions/checkout@v4
987fe37ed1 d/logger/journald: quit waiting when logger closes
d53b7d7e46 d/logger/journald: sync logger on close in tests
39c5c16521 d/logger/loggertest: improve TestConcurrent
5792bf7ab3 d/logger/journald: log journal-remote cmd output
982e777d49 d/logger/journald: fix data race in test harness
ca40ac030c vendor: google.golang.org/grpc v1.59.0
0818a476e5 vendor: github.com/go-logr/logr v1.3.0
a0b53f6fd2 vendor: golang.org/x/net v0.18.0
2ddec74d59 Remove unused params from etchosts.Build()
5e13f54f57 c8d/save: Handle digested reference same as ID
d131f00fff image/save: Fix untagged images not present in index.json
21136865ac libnet: remove arg `options` from (*Endpoint).Leave()
a8e8a4cdad libn/d/overlay: drop miss flags from peerAddOp
6ee58c2d29 libnetwork/d/overlay: drop miss flags from peerAdd
905477c8ae logger/journald: drop errDrainDone sentinel
d70fe8803c logger/journald: wait no longer than the deadline
e94ec8068d logger/journald: use deadline for drain timeout
71bfffdad1 l/journald: make tests compatible with systemd 255
931568032a daemon/logger/loggertest: expand log-follow tests
388ba9a69c Dockerfile: update docker compose to v2.24.3
3eb1527fdb Dockerfile: update dev-shell version of the cli to v25.0.1
7f94acb6ab docs: remove dead links from api verison history
5c2eda6f71 vendor swarmkit v2.0.0-20240125134710-dcda100a8261
96d461d27e builder/windows: Don't set ArgsEscaped for RUN cache probe
877ebbe038 image/cache: Check image platform
96ac22768a image/cache: Restrict cache candidates to locally built images
c6156dc51b daemon/imageStore: Mark images built locally
537348763f image/cache: Compare all config fields
bd4ff31775 add more //go:build directives to prevent downgrading to go1.16 language
e245fb76de internal/sliceutil: add utilities to map values
3147a013fb libnet/ds: remove unused param `key` from List
f7ef0e9fc7 libnet/ds: remove unused param `key` from GetObject
3a617e5463 c8d: Use a specific containerd namespace when userns are remapped
f7e2357745 image: remove deprecated IDFromDigest
13f46948dd api/types: remove deprecated container-types
4b09bc2145 api/types: remove deprecated service-types
49637d0206 api/types: remove deprecated image-types
eccb1a3eb8 api/types: remove deprecated checkpoint-types
0b1921649f api/types: remove deprecated system info types and functions
6f44138269 libnetwork: fix tiny grammar mistake on design.md
9a41cc58d9 libnetwork: fix typo in iptables.go
ac2a028dcc api/types: move image options to api/types/image
80c44b4b2e daemon: rename: don't reload endpoint from datastore
250886741b volume/local: Fix cifs url containing spaces
f4beb130b0 volume/local: Add tests for parsing nfs/cifs mounts
df43311f3d volume/local: Break early if `addr` was specified
9f37672ca8 daemon: only add short cid to aliases for custom networks
c25773ecbf cmd/dockerd: newRouterOptions: pass cluster as argument, and slight cleanup
00c9785e2e fix "host-gateway-ip" label not set for builder workers
0d51cf9db8 volume/local: Make host resolution backwards compatible
05d952b246 Dockerfile: update docker compose to v2.24.2
20bd690844 integration-cli: simplify test-file creation
34668a5945 pkg/archive: fixe some unclosed file-handles in tests
1090aaaedd libnetwork: fix some unclosed file-handles in tests
c482383458 fix some leaking mounts in tests
43bf65c174 pkg/system: return even richer xattr errors
a3a42c459e api/types/image: move GetImageOpts to api/types/backend
cd53b7380c Remove generated MAC addresses on restart.
fb19f1fc20 c8d/snapshot: Create any platform if not specified
6100190e5c daemon/cluster/executer: Add missing `StartInterval`
17fd6562bf image/save: Fix layers order in OCI manifest
4979605212 image/save: Change layers type to DiffID
fcc651972e daemon: return an InvalidParameter error when ep settings are wrong
a0466ca8e1 integration-cli: TestInspectAPIMultipleNetworks: use current version
13a384a6fa integration-cli: TestInspectAPIBridgeNetworkSettings121: use current version
52e3fff828 integration-cli: TestPutContainerArchiveErrSymlinkInVolumeToReadOnlyRootfs: use current API
521123944a docs/api: remove version matrices from swagger files
d54be2ee6d docs: remove documentation for deprecated API versions < v1.23
64a6cc3afd integration/build: improve some asserts, and add asserts for unhandled errs
a88cd68d3e integration/images: improve some asserts, and add asserts for unhandled errs
a404017a86 vendor: golang.org/x/tools v0.14.0
41a2aa2ee2 vendor: golang.org/x/oauth2 v0.11.0
2799417da1 vendor: golang.org/x/mod v0.13.0, golang.org/x/tools v0.13.0
407ad89ff0 vendor: golang.org/x/sync v0.5.0
94b4765363 pkg/platforms: internalize in daemon/containerd
0a9bc3b507 libnetwork: Sandbox.ResolveName: refactor ordering of endpoints
058b30023f libnetwork: loosen container IPAM validation
844ca49743 pkg/containerfs: remove deprecated ResolveScopedPath
2767d9ba05 pkg/homedir: remove deprecated Key() and GetShortcutString()
f16a2179a6 pkg/system: remove deprecated ErrNotSupportedOperatingSystem, IsOSSupported
e2086b941f remove deprecated pkg/loopback (utility package for devicemapper)
f07c45e4f2 daemon: remove --oom-score-adjust flag
307fe9c716 Dockerfile: update docker compose to v2.24.1
dfced4b557 Dockerfile: update dev-shell version of the cli to v25.0.0
c655b7dc78 Assert temp output directory is not an empty string
a8f7c5ee48 Detect IPv6 support in containers.
0046b16d87 daemon: set libnetwork sandbox key w/o OCI hook
5bbcc41c20 volumes/subpath: Plumb context
cb1af229f2 daemon/populateVolumes: Support volume subpath
349a52b279 container: Change comment into debug log
42afac91d7 internal/safepath: Add windows implementation
5841ed4e5e internal/safepath: Adapt k8s openat2 fallback
56bb143a4d internal/safepath: Import k8s safeopen function
3784316d46 internal/safepath: Handle EINTR in unix syscalls
9a0cde66ba internal/safepath: Add linux implementation
bfb810445c volumes: Implement subpath mount
f2e1105056 Introduce a helper that collects cleanup functions
f07387466a daemon/oci: Extract side effects from withMounts
9c8752505f volume/mounts: Rename errors in defer block
5bcbedb7ee API: bump version to 1.45
35789fce99 daemon.images: ImageService.getImage: use named fields in struct literals
7c1914411f daemon/images: ImageService.manifestMatchesPlatform: optimize logger
5581efe7cd rename "ociimage" var to be proper camelCase
66cf6e3a7a rename "image" vars to prevent conflicts with imports
c72e458a72 Fix libnetwork/osl test TestAddRemoveInterface
768146b1b0 Fix isGitURL regular expression
585d74bad1 pkg/ioutils: Make subsequent Close attempts noop
fbdc02534a De-flake TestSwarmClusterRotateUnlockKey... again... maybe?
Bumping docker-cli to version v26.1.4-2-g6eb67bf57, which comprises the following commits:
5bab750c2 cli/command: more go1.19 ("predeclared any")
e8bc27d4c vendor: github.com/docker/docker de5c9cf0b96e (v26.1.4-dev)
2acb9c2e8 vendor: github.com/containerd/containerd v1.7.18
230d4d0ba vendor: github.com/containerd/containerd v1.7.17
6d47c06b0 vendor: tags.cncf.io/container-device-interface v0.7.2
a6d757c0e vendor: github.com/Microsoft/hcsshim v0.11.5
c463d968f vendor: github.com/opencontainers/image-spec v1.1.0
0576b3dad update to go1.21.11
60b13f1f8 Dockerfile: update ALPINE_VERSION to 3.20
b600054c5 migrate to new github.com/containerd/platforms package
dafe63b08 gha: update to actions/upload-artifact@v4
079107e1b [26.1] vendor: github.com/docker/docker v26.1.3
14d7485d9 vendor: github.com/Microsoft/go-winio v0.6.2
50bb59277 docs: tidy up CDI docs
c4767b314 docs: fix json syntax error
258e27438 context list: temporarily add ContextType to JSON output
29cd8591e cli/command/context: list: add test for JSON output
e23a63eb4 cli/command/context: test inspecting context with custom metadata
1e52a86d4 cli/command/context: add test-utility to create multiple contexts
e382a5f22 plugins/hooks: Don't show empty hooks
26e9ff49c vendor: github.com/docker/docker v26.1.3-dev (8e96db1c328d)
326c7138b OTel: implement missing MeterProvider `ForceFlush`
ee359a394 OTel: add `command.time` metric to plugin commands
669108501 Use funcs on DockerCli to return Meter/TracerProviders, not initialize them. Initialize them during DockerCli struct init
81b482ea5 docs: clarify that --data-path-addr doesn't restrict access
e64914c89 vendor: github.com/docker/docker v26.1.2-dev (ef1912d8b6ae)
c1d70d1fb update to go1.21.10
4add46d68 Add e2e tests for run w/ bad entrypoint
ccea7d8a3 Fix hang when container fails to start
1c6a8ecf2 cli-plugins: PluginRunCommand: use cmd.Environ instead of os.Environ
6d1c387af vendor: github.com/docker/docker ac2de55998d4 (v26.1.1)
840016ea0 waitExitOrRemoved: Handle context cancellation
aec1d364b vendor: github.com/docker/docker v26.1.0-dev (c8af8ebe4a89)
43cb06e1a hooks: pass command execution error to plugins
9d8320de9 hooks: include full configured command
6ad512068 vendor: github.com/docker/docker v26.1.0-dev (ee8b788538ea)
c3243a8cc ci/validate-pr: Use `::error::` command to print errors
f92fcdef1 github/ci: Check if backport is opened against the expected branch
745704d7b ci: Require changelog description
762a85a10 Warn about deprecation of windows-dns-proxy flag
501175905 hooks: set expected environment when executing
d6796c002 Fix OTLP env var overriding
c449c1a49 plugins/hooks: run hooks when exit code != 0
287f482e3 Feature option 'windows-dns-proxy'
867061b00 plugins/templates: break on newlines when printing hooks
718203d50 cli-bin/windows: Add .exe extension
5515b8651 vendor: github.com/docker/docker v26.0.1-0.20240410103514-f9dfd139ec0d+incompatible (master)
c1053bf9d vendor: github.com/moby/swarmkit/v2 v2.0.0-20240227173239-911c97650f2e
8a3a7b945 vendor: github.com/containerd/containerd v1.7.15
458580984 docs: add systempaths=unconfined security-opt
5fcbbde4b vendor: golang.org/x/net v0.23.0
4745b957d vendor: golang.org/x/net v0.22.0, golang.org/x/crypto v0.21.0
c7a50ebb9 vendor: golang.org/x/term v0.18.0
9a2133f2d vendor: golang.org/x/sys v0.18.0
0a5bd6c75 update to go1.21.9
cefcba987 otel: capture exit code as int64
ee1b2836a otel: capture whether process was invoked from a terminal
8f45f1495 command: include default otel error handler for the cli
910d5d024 chore: remove backticks and resolve linting issues
2a3b6c03f cli: add go:build tag to the docker telemetry
efd82e1e3 Initial otel impl using our utils
b6e2eca4b Enable overriding of the otel exporter otlp endpoint via env var for testing purposes
160f65d9d Added some telemetry utils
9a1b0f8bb CONTRIBUTING.md: update Slack link
7c722c08d feat: standardize error for prompt
7ea10d5ce refactor: prompt tests
89db01ef9 cli: add otel sdk tracing and metric providers to the core cli
c5016c6d5 cli-plugins: Introduce support for hooks
509123f93 plugin: drop explicit unlink
fdb48a066 vendor: github.com/docker/docker v26.0.0
542e82cae plugin: update/improve process lifecycle documentation
d68cc0e8d plugin: closer-based plugin notification socket
d2ea5adfe fix: flaky prompt termination on reader close test
ccfd0b2cc test/ Improve test coverage in volume.go
69575f617 vendor: github.com/docker/docker 8b79278316b5 (master)
b70a26dea vendor: github.com/docker/docker 330d777c53fb (v26.0.0-rc3-dev)
f96d8e78c docs/deprecated: update status of short cid alias deprecation
b120b96ac ci: set DISABLE_WARN_OUTSIDE_CONTAINER=1 for CodeQL action
24186d800 ci: fix CodeQL 2.16.4 autobuild
48b5efee0 Dockerfile: update mvdan/gofumpt to v0.6.0
38c3ff67a vendor: github.com/docker/docker 70e46f2c7c2d (v26.0.0-rc3-dev)
f8fc5b6bc scripts/vendor: remove -compat=1.19
a4a79d75c vendor: google.golang.org/protobuf v1.33.0, github.com/golang/protobuf v1.5.4
115c8d56e vendor: github.com/containerd/containerd v1.7.14
939283181 builder: correct the command path for docker build
dc4163fb1 docs/deprecated: Deprecate Container fields in image inspect
3da26a5e7 docs: add description and link for --userns flag
4bb2abaa5 docs: typo fixes and other corrections
90c33dbfd deprecate legacy image formats
800a51d6c Set CGO_ENABLED=1 on riscv64
9349f58b8 docs: clarify what the --privileged flag does
adb018084 Dockerfile: update to xx 1.4.0
46afd26c4 cli/command: deprecate EventHandler and InitEventHandler
5c54f75f2 cli/command/container: use ping-result for OS-version
617377c04 Describe an 'internal' network.
860b4f3a7 'docker daemon' flags refer to the default bridge
645b97352 vendor: github.com/docker/docker v26.0.0-rc2
3cf2fe0ff docs: deprecate TCP connection without TLS
a8379092a vendor: github.com/docker/docker f4c696eef17d62a42
ab9d56057 bake: Add `windows/arm64` target to bin-image-cross
3b7747794 update to go1.21.8
10bf91a02 fix: cli prompt termination exit code
238d659ff Add support for --detach/-d flag in stack rm
b086d7276 Add support for --detach flag in stack deploy
5e8023239 vendor: github.com/docker/docker v26.0.0-rc1
d51ba4179 docs: prefer -it over -ti
a5b82e9f8 docs: fix typo in tty example
abe78b79d chore: `docker help` should not show plugin vendor and version
5786f2068 plugins: fix encoding for OTEL env var passed to plugin
85dcacd78 plugins: set OTEL_RESOURCE_ATTRIBUTES when invoking a plugin
acc675014 vendor: github.com/docker/docker c70d7905fbd9 (v26.0.0-dev)
79541b7e2 vendor: google.golang.org/grpc v1.59.0
096ced089 vendor: OTEL v0.46.1 / v1.21.0
f3c77df31 vendor: github.com/prometheus/client_golang v1.17.0
1b42d04d6 vendor: github.com/go-logr/logr v1.3.0
f5a29ff8e vendor: github.com/containerd/containerd v1.7.13
2663c1057 ci: set codecov token
48a670f26 docs: fix invalid daemon.json examples
f2e98f9a9 docs: regenerate markdown
caf72655f docs: update url scheme for reference docs
e24404494 deps: update cli-docs-tool version (v0.7.0)
20b9d489e update to go1.21.7
c514003e6 Fixed typo in bash completion functions
ff5b0d18f man/docker-build.1: typo in parameter variable: CID => IID
3b5e81424 cli-plugins/socket: remove use of deprecated distribution uuid package
69ed6588a Cleanup of dockerfiles, compose files and env vars
6b67b9549 Update gha runners and engines used in e2e tests
edc09e603 mount: Add `volume-subpath` option
9831fea4d testenv: Add DaemonAPIVersion helper
8bae66271 cli/connhelper/commandconn: inline variables
df6220d43 vendor: github.com/docker/docker 86b86412a1b7 (v26.0-dev)
30dd7c131 Minor test fixes necessary for eventually upgrading ci runners and engine version
2c214241f Avoid keeping @docker_cli_[UUID] files
c986d09bc docker stack: allow '=' separator in extra_hosts
324309b08 vendor: github.com/docker/docker 9e075f3808a5 (master, v26.0.0-dev)
93ad9fbdf vendor: github.com/moby/swarmkit/v2 v2.0.0-20240125134710-dcda100a8261
69e0f53a0 Uniform volume prune output msg with other prune commands
809eb8cde images: print hint when invoking "docker images" with ambiguous argument
b158181a1 cli/command/images: runImages: use proper camel-case for dockerCLI
1328bb338 cli/command/images: runImages: inline intermediate var
b123ce652 build(deps): Bump codecov/codecov-action from 3 to 4
1587b70ee Remove dummy circleci config
cfa9fef77 tests: add plugin-socket-compatibility tests
dfdff11a2 cli/command: don't use pflags.XXXVarP for flags without shorthand
690f63e6d cli/command/container: minor cleanup in attach
53e2e54c2 Dockerfile: update docker compose to v2.24.3
1c4d6d85d scripts: don't hardcode architecture in e2e script
4fa2fe9b9 Replace deprecated types.Image* usage
68dac842a vendor: github.com/docker/docker 43ffb1ee9d5a (v26.0.0-dev)
4b1ed1f44 vendor: github.com/docker/docker v25.0.1
d9294f06b info: remove printSecurityOptionsWarnings, printServerWarnings
ec0a62436 docs: update host-gateway-ip to use daemon.json instead of cli flag
469bfc05e tests: add tests for `cli-plugins/socket`
091af560c Dockerfile: update docker compose to v2.24.2
2402dac81 cli/command/container: remove deprecated NewStartOptions
b43377a38 cli/command: remove deprecated DockerCliOption, InitializeOpt
a71d39bca info: remove printServerWarningsLegacy
8cd3b0042 socket: return from loop after EOF
337dd82d8 vendor: github.com/docker/docker v25.0.0
d633890f9 docs: move base command to docker.md
aff4649cb docs: fix broken links to alias pages
852d198bb docs: add documentation for CDI
1f9573bb0 Add Linode docker volume plugin
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
59a433c1f2 |
podman-tui: update to v1.1.0
Bumping podman-tui to version v0.9.0-336-g6bcf5993, which comprises the following commits:
6bcf5993 Bump to v1.1.0
d4bee0e9 Bump github.com/containers/podman to v5.1.0
4bd183c1 Bump github.com/BurntSushi/toml from 1.3.2 to 1.4.0
e31f2ee6 Bump github.com/rs/zerolog from 1.32.0 to 1.33.0
b404db37 Bump to v1.1.0-dev
35fb1650 Bump to v1.0.1
834150f0 Bump github.com/containers/podman/v5 from 5.0.2 to 5.0.3
372cedf6 Bump golang.org/x/crypto from 0.22.0 to 0.23.0
f9752fa9 Bump golang.org/x/net from 0.22.0 to 0.23.0
4da6d71f Bump github.com/containers/podman/v5 from 5.0.1 to 5.0.2
a41cf8b3 Bump github.com/containers/common from 0.58.1 to 0.58.2
2aad7a8e Bump golang.org/x/crypto from 0.21.0 to 0.22.0
9fa703c8 Bump github.com/distribution/reference from 0.5.0 to 0.6.0
46ed43e6 Bump github.com/containers/podman/v5 from 5.0.0 to 5.0.1
775d389e Bump github.com/containers/common from 0.58.0 to 0.58.1
ac74c549 Bump github.com/containers/buildah from 1.35.1 to 1.35.2
c3440609 Bump to v1.1.0-dev
47c47d46 Bump to v1.0.0
45253e1e Bump github.com/docker/docker
f39102a5 podman v5
b5297884 Bump to v0.19.0-dev
64ea1b82 Bump to v0.18.0
bee2b067 README.md update
445fc4d5 Bump google.golang.org/protobuf from 1.31.0 to 1.33.0
da408b5d Bump github.com/go-jose/go-jose/v3 from 3.0.1 to 3.0.3
b138f049 Bump gopkg.in/go-jose/go-jose.v2 from 2.6.1 to 2.6.3
ff1f99ca install.md update - ArchLinux (AUR)
52a56ac0 install.md update - Alpine Linux, AlmaLinux and Rocky Linux
34bd6420 golangci-lint update 1.56.2
2afefdd3 Bump github.com/gdamore/tcell/v2 from 2.7.1 to 2.7.4
aba7af2c Bump golang.org/x/crypto from 0.19.0 to 0.21.0
7c81b05b Vagrantfile update (fedora 39)
feafd1a9 ghaction update
26620476 Bump tim-actions/get-pr-commits from 1.3.0 to 1.3.1
b793ec2c Bump codecov/codecov-action from 3 to 4
61b81c38 unit test
31fa7523 unit tests
0ec32f51 resolves #438 Substitute env variables in config file
8eb6b865 Bump github.com/gdamore/tcell/v2 from 2.7.0 to 2.7.1
b3cfedb2 README update
341f1b2c unit test coverage
75c926a5 podman-tui installation via homebrew for Mac
6d5c1a0a Bump github.com/containers/podman/v4 from 4.9.2 to 4.9.3
6023f58d Bump golang.org/x/crypto from 0.18.0 to 0.19.0
b8b3cc3d Bump pre-commit/action from 3.0.0 to 3.0.1
1b393f33 Bump github.com/rs/zerolog from 1.31.0 to 1.32.0
20985d53 Bump to v0.18.0-dev
b4350927 Bump to v0.17.0
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
c3c9c8a01f |
podman: update to 5.1.1
Bumping libpod to version v5.1.1-2-gef359624cb, which comprises the following commits:
7a1f39dc4d Bump to v5.1.2-dev
bda6eb03dc Bump to v5.1.1
cd0a0d7d6d Update release notes for v5.1.1
aa031ad1ba libpod: do not leak systemd hc startup unit timer
d79b94c82b Check AppleHypervisor before accessing it
a9377a8ec3 [v5.1] Bump c/common to v0.59.1
4dc75c67f9 [v5.1] pkg/rootless: set _CONTAINERS_USERNS_CONFIGURED ... correctly
d5cc37f78a test/e2e: use local skopeo not image
2906582149 [v5.1] Mac PM test: Require pre-installed rosetta
7ad138c3db Fix typo in release notes
515e44be74 Bump to v5.1.1-dev
4e9486dbc6 Bump to v5.1.0
2f343ce778 Release notes for v5.1
8ba3626c94 Add configuration for podmansh
8eff425410 [v5.1] Bump c/* for vendor dance
178600e531 test/e2e: fix new error message
7df3715430 Add Hyper-V option in windows installer
6ad6132987 Only stop chowning volumes once they're not empty
65d26b0cde remote API: restore v4 payload in container inspect
3949bf8af1 Fix windows action trigger
acf137b342 Update podman network docs
7207461196 Add Rosetta support for Apple Silicon mac
d1a86a4b61 fix incorrect host.containers.internal entry for rootless bridge mode
c837ebc44e vendor latest c/common main
97251d0ee6 Bump to v5.1.0-dev
6a8f2e7f29 Bump to v5.1.0-rc1
bd4e4a1d8f Add release notes for v5.1.0 (preliminary)
c46884aa93 `podman events`: check for an error after we finish reading events
277312d282 Fix updating connection when SSH port conflict happens
2a609b0f74 rootless: fix reexec to use /proc/self/exe
d4e40fedaf ExitWithError() - enforce required exit status & stderr
82f9811a8d ExitWithError() - a few that I missed
44825ab428 [skip-ci] Packit: use only one value for `packages` key for `trigger: commit` copr builds
92338642d1 Revert "Temporarily disable rootless debian e2e testing"
5901bf52b9 CI tests: enforce TMPDIR on tmpfs
6e655c7fd2 use new CI images with tmpfs /tmp
e771618531 run e2e test on tmpfs
3122549d6b Update module github.com/crc-org/crc/v2 to v2.36.0
6830d0e3c8 Address CVE-2024-3727
07ed2ddb93 [CI:DOCS] Use checkout@v4 in GH Actions
755fc021f9 ExitWithError() - rmi_test
5e240ab1f5 ExitWithError() - more r files
0c22de7811 ExitWithError() - s files
03f036b515 ExitWithError() - more run_xxx tests
3b1c735b67 Fix podman-remote support for `podman farm build`
71473976ac [CI:DOCS] Trigger windows installer action properly
8433a01aa2 Revert "container stop: kill conmon"
3fa8e98a31 Ensure that containers do not get stuck in stopping
279e2d0cb2 [CI:DOCS] Improvements to make validatepr
9e43e586c9 ExitWithError() - rest of the p files
dfbb6ea9ff [CI:DOCS] Update dependency golangci/golangci-lint to v1.58.1
a2cf948f90 Graceful shutdown during podman kube down
521bbab864 test/system: fix broken "podman volume globs" test
6d1098f823 Quadlet/Container: Add GroupAdd option
7bfac4f349 Don't panic if a runtime was configured without paths
d4c7ca39fd update c/{buildah,common,image,storage} to latest main
6bdebea8ae update golangci-lint to 1.58
ee5153c545 machine: Add LibKrun provider detection
641cd7c5a2 ExitWithError() - continue tightening
b59edad58b fix(deps): update module google.golang.org/protobuf to v1.34.1
303d0b398e test: improve test for powercap presence
9865511d00 fix(deps): update module go.etcd.io/bbolt to v1.3.10
be5cbc443e fix(deps): update module golang.org/x/tools to v0.21.0
36c05b5c6a [skip-ci] RPM: `bats` required only on Fedora
42cc712485 fix(deps): update module golang.org/x/exp to v0.0.0-20240506185415-9bf2ced13842
e3b0e58d2e gpdate and remove parameter settings in `.golangci.yml`
7d12ae0973 ExitWithError() - play_kube_test.go
02b8fd7156 Temporarily disable rootless debian e2e testing
7745854155 fix(deps): update module golang.org/x/crypto to v0.23.0
b520e909e0 CI Docs: Clarify passthrough_envars() comments
87747ca820 Skip machine tests if they don't need to be run
e8ef36e26e Update CI VMs to F40, F39, D13
83ee16b9ba ExitWithError() - v files
22eff26916 Update module golang.org/x/term to v0.20.0
431cbffab6 machine: Add provider detection API
419efb9eb5 util: specify a not empty pause dir for root too
1d1dba3843 Add missing option 'healthy' to output of `podman run --help`
b09f764ef5 [CI:DOCS] Add info on the quay.io images to the README.md
4fd84190b8 Add a random suffix to healthcheck unit names
7a43c2ed1b test/e2e: remove toolbox image
46f247d880 Also substitute $HOME in runlabel with user's homedir
7f6108233f Update module github.com/cyphar/filepath-securejoin to v0.2.5
275c068df7 ExitWithError() - pod_xxx tests
c378f2d03a ExitWithError() -- run_test.go
f8115d203c Update module golang.org/x/exp to v0.0.0-20240416160154-fe59bbe5cc7f
a96326f608 Update module github.com/shirou/gopsutil/v3 to v3.24.4
61b09333a8 Update module github.com/docker/docker to v26.1.1+incompatible
8942e2dbda GHA: Attempt fix exceeded a secondary rate limit
1bc6f16bd0 vendor ginkgo 2.17.2 into test/tools
a140c74ba4 Fix machine volumes with long path and paths with dashes
d1f8933a93 Update module google.golang.org/protobuf to v1.34.0
d886d87edf Update module github.com/crc-org/crc/v2 to v2.35.0
c17f7af6b4 Update module github.com/onsi/gomega to v1.33.1
88b80c1df6 test/e2e: podman unshare image mount fix tmpdir leak
0faded53b8 test/e2e: do not leak /tmp/private_file
88a625d319 test/e2e: "persistentVolumeClaim with source" do not leak file
eaf60c7fe7 e2e tests: use /var/tmp, not $TMPDIR, as workdirs
60b5488308 Update dependency pytest to v8.1.2
cd6ff71cc3 Remove unncessary lines at the end of specfile summary
e412eff33f Clean machine pull cache
d2c1de5993 Add krun support to podman machine
ca23774b5b Use custom image for make validatepr
9a0ed6929a test/e2e: force systemd cgroup manager
d1bfdc7900 e2e and bindings tests: fix $PATH setup
5040c6e390 Makefile: remove useless HACK variable in e2e test
537c21a49a test/e2e: fix volumes and suid/dev/exec options
31034a1b6f test/e2e: volumes and suid/dev/exec options works remote
cc6e999f2a test/e2e: fix limits test
c2d7b5415f Update module github.com/rootless-containers/rootlesskit/v2 to v2.1.0
3c1c6a44ef Correct option name `ip` -> `ip6`
30e2c923d6 Add the ability to automount images as volumes via play
693ae0ebc6 Add support for image volume subpaths
5f57571d65 Bump Buildah to latest main
e8a9c58125 Update Makefile to Go 1.22 for in-container
e4c9910aec ExitWithError() - yet more low-hanging fruit
80c3a22440 ExitWithError() - more low-hanging fruit
4da5c5d3aa ExitWithError() - low-hanging fruit
c681df35c0 chore: fix function names in comment
3f78c39c50 Remove redundant Prerequisite before build section
fa1fd1646e Remove PKG_CONFIG_PATH
3b28cdfb20 Add installation instructions for openSUSE
83dbbc3a51 Replace golang.org/x/exp/slices with slices from std
c04d03ef8c Update to go 1.21
c31728ca57 fix(deps): update module github.com/docker/docker to v26.1.0+incompatible
c22eefb939 [CI:DOCS] Fix artifact action
333682132a [skip-ci] Packit/rpm: remove el8 jobs and spec conditionals
ac04cb4ac5 e2e tests: stop littering
27174ff3fb [CI:DOCS] format podman-pull example as code
e7f0c1947e [CI:DOCS] Build & upload release artifacts with GitHub Actions
2681ab23d1 libpod: getHealthCheckLog() remove unessesary check
2ae6d0d4dd add containers.conf healthcheck_events support
33def2eea7 vendor latest c/common
b026e1d635 libpod: make healthcheck events more efficient
ce9054ff45 libpod: wrap store setup error message
e83b2cce82 [skip-ci] Packit: enable CentOS 10 Stream build jobs
e58972cd1d pkg/systemd: use fileutils.(Le|E)xists
acc78af0c3 pkg/bindings: use fileutils.(Le|E)xists
94c699192f pkg/util: use fileutils.(Le|E)xists
0e8d1ad811 pkg/trust: use fileutils.(Le|E)xists
1991990d5a pkg/specgen: use fileutils.(Le|E)xists
aab06ac445 pkg/rootless: use fileutils.(Le|E)xists
af24326133 pkg/machine: use fileutils.(Le|E)xists
cbffddc72e pkg/domain: use fileutils.(Le|E)xists
bd00c6fef9 pkg/api: use fileutils.(Le|E)xists
5656ad40b1 libpod: use fileutils.(Le|E)xists
90304dd507 cmd: use fileutils.(Le|E)xists
598fc516a6 vendor: update containers/{buildah,common,image,storage}
a169c4ec5c fix(deps): update module github.com/docker/docker to v26.0.2+incompatible [security]
dc68a47d7a fix podman-pod-restart.1.md typo
eacc3f07e5 [skip-ci] Packit: switch to EPEL instead of centos-stream+epel-next
af78b69208 fix(deps): update module github.com/onsi/gomega to v1.33.0
422eb0e58a Add more annnotation information to podman kupe play man page
b1736c472a test/compose: remove compose v1 code
2c61ee9a31 CI: remove compose v1 tests
713c026b4d [CI:DOCS] Fix windows installer action
d6b68ecfad fix(deps): update module tags.cncf.io/container-device-interface to v0.7.2
7b3456b5d9 add `list` as an alias to list networks
482ef7bfcf Add support for updating restart policy
ddea30e40e Add Compat API for Update
be3f075402 Make `podman update` changes persistent
7ef0290a1d Emergency fix (well, skip) for failing bud tests
7c4f2c79ea fix swagger doc for manifest create
d4ecae59bd [CI:DOCS] options/network: fix markdown lists
714920512e Makefile: do not hardcode `GOOS` in `podman-remote-static` target
3dc69a01e3 chore(deps): update module golang.org/x/crypto to v0.17.0 [security]
0e291ce760 chore(deps): update dependency setuptools to ~=69.5.0
1600cfffa5 Fix some comments
e8055904e1 swagger fix infinitive recursion on some types
5e9725983d install swagger from source
f95b9d4e37 Revert "Swap out javascript engine"
5e68fbd132 podman exec CID without command should exit 125
df69b36ee5 (minor) prefetch systemd image before use
49729c82a9 Update go-swagger version
1b6e8d73aa Swap out javascript engine
3418405351 fix(deps): update module github.com/docker/docker to v26.0.1+incompatible
08a49389c8 Add os, arch, and ismanifest to libpod image list
e773ed42b3 [CI:DOCS]Initial PR validation
4a07131f83 fix(deps): update github.com/containers/gvisor-tap-vsock digest to d744d71
67c6d7ec80 vendor ginkgo 2.17.1 into test/tools
999d6c0750 fix "concurrent map writes" in network ls compat endpoint
26f866b5df chore(deps): update dependency pytest to v8
2d9159821a e2e: redefine ExitWithError() to require exit code
8de92ec912 docs: fix missleading run/create --expose description
0bedf7f1d2 podman ps: show exposed ports under PORTS as well
aee1e1408d rootless: drop function ReadMappingsProc
9d18a48803 fix(deps): update module github.com/vbauerster/mpb/v8 to v8.7.3
0313693d48 New CI VMs, to give us pasta 2024-04-05
394820c4f0 Add big warning to GHA workflow
7f0268a2e7 GHA: Fix intermittent workflow error
266801bf2d fix(deps): update module golang.org/x/tools to v0.20.0
847ca1f9ea e2e tests: remove requirement for fuse-overlayfs
36e4d512b3 docs: update Quadlet volume Options desc
b8670a3834 fix(deps): update module golang.org/x/sync to v0.7.0
0b36126e92 Fix relabeling failures with Z/z volumes on Mac
f8533c71c4 fix(deps): update module golang.org/x/net to v0.24.0
b9a8a2c61c Makefile: fix annoying errors in docs generation
59ee130048 chore: fix function names in comment
a40cf3195a Bump tags.cncf.io/container-device-interface to v0.7.1
3f83164526 fix(deps): update module golang.org/x/crypto to v0.22.0
3560ccd5df Detect unhandled reboots and require user intervention
fcf9327773 podman --runroot: remove 50 char length restriction
10995192f8 update github.com/rootless-containers/rootlesskit to v2
156ae500f2 Update module github.com/gorilla/schema to v1.3.0
beb4fd1b4a Update dependency requests-mock to ~=1.12.1
e8f26699df Update module github.com/crc-org/crc/v2 to v2.34.1
f2c365c6f6 rm --force work for more than one arg
71f6f50ee1 [CI:DOCS] Update kube docs
81d2ef889b fix(deps): update module github.com/shirou/gopsutil/v3 to v3.24.3
0f949d884c [CI:DOCS] Add GitHub action to update version on Podman.io
ccb71f9ffa [CI:DOCS] Update dependency golangci/golangci-lint to v1.57.2
ff133a544d Windows: clean up temporary perl install
498445871c pkg/util: FindDeviceNodes() ignore ENOENT errors
549dbf8327 [CI:DOCS] build deps: make-validate needs docs
a61ae8c0a9 test/system: add rootless-netns test for setup errors
ce04fbc16a vendor latest c/common main
519a66c6a9 container: do not chown to dest target with U
fbd6df92d4 [CI:DOCS] golangci-lint: update deprecated flags
d27313ad10 systests: conditionalize slirp4netns tests
e697631af9 CI: systests: instrument flaky tests
d2143fac59 s3fs docs
7d68362cf5 test: do not skip tests under rootless
d3927f9076 Add note about host networking to Kube PublishPort option
1a99d87746 Inject additional build tags from the environment
d81319eb71 libpod: use original IDs if idmap is provided
f3434298df Switch back to checking out the same branch the action script runs in
f7b9168649 docs/podman-login: Give an example of writing the persistent path
aab4674feb CI: Bump VMs to 2024-03-28
4c2a44ef9b [skip-ci] Update dawidd6/action-send-mail action to v3.12.0
fc18dbad70 fix(deps): update module github.com/openshift/imagebuilder to v1.2.7
ffb8b2dc36 Fix reference to deprecated types.Info
c0e32e93c0 Use logformatter for podman_machine_windows_task
d305e70af8 applehv: Print vfkit logs in --log-level debug
23bf357fc3 [CI:DOCS]Add Mario to reviewers list
c8e1e0034a [CI:DOCS] Document CI-maintenance job addition
48b8d7f8be Add golang 1.21 update warning
b56331cd2f Add rootless network command to `podman info`
80e2bc6966 libpod: don't warn about cgroupsv1 on FreeBSD
c62c74970f hyperv: error if not admin
83671f95d8 Properly parse stderr when updating container status
492f0b7c5f [skip-ci] Packit: specify fedora-latest in propose-downstream
11415b3e74 Use built-in ssh impl for all non-pty operations
83fe867c14 Add support for annotations
a6ffb5656f hyperv: fix machine rm -r
f632663f26 [skip-ci] Packit: Enable CentOS Stream 10 update job
3c611c47e4 5.0 release note fix typo in cgroupv1 env var
3a9968ef81 fix remote build isolation on client side
17aa152459 chore: remove repetitive words
b2d0b92db2 Dont save remote context in temp file but stream and extract
493179be45 fix remote build isolation when server runs as root
4740367330 util: use private propagation with bind
9a13b8f17d util: add some tests for ProcessOptions
50d764b0e6 util: refactor ProcessOptions into an internal function
49ab250cf9 util: rename files to snake case
c03256e23c Add LoongArch support for libpod
f2073ca397 fix(deps): update github.com/containers/common digest to bc5f97c
5e017a87a0 [CI:DOCS] Update dependency golangci/golangci-lint to v1.57.1
5fe1945e41 fix(deps): update module github.com/docker/docker to v25.0.5+incompatible [security]
77c4cb5721 fix(deps): update module github.com/onsi/gomega to v1.32.0
c66400f624 [CI:DOCS] Update dependency golangci/golangci-lint to v1.57.0
a872003a2a Update module github.com/cpuguy83/go-md2man/v2 to v2.0.4
b1fd03f9f5 Fix type-o
3f2b8bb314 Use correct extension in suite
aa5c4879b4 minikube: instrument tests, to allow debugging failures
15b8bb72a8 libpod: restart always reconfigure the netns
dc1795b4b2 use new c/common pasta2 setup logic to fix dns
2566ee2f38 utils: drop conversion float->string->float
816c7279e1 utils: do not generate duplicate range
f16ab115ed logformatter: handle Windows logs
0e38815387 utils: add test for the new function
cda3dc83d8 utils: move rootless code to a new function
079bfb085a CVE-2024-1753 fix for main
1141962e2a xref-helpmsgs-manpages: cross-check Commands.rst
23433ec7bd test/system: Add support for multipath routes in pasta networking tests
73a12b0c07 [skip-ci] rpm: use macro supported vendoring
7fbdd9e6e2 Adjust to the standard location of gvforwarder used in new images
7711833827 Makefile: add target `podman-remote-static`
fdad9ab1ff Switch to 5.x WSL machine os stream using new automation
3a9eef4bee Cleanup build scratch dir if remote end disconnects while passing the context
ee4b1efb24 bump main to 5.1.0-dev
3f068d1973 Use faster gzip for compression for 3x speedup for sending large contexts to remote
e82d196269 pkg/machine: make checkExclusiveActiveVM race free
b238303a40 pkg/machine/wsl: remove unused CheckExclusiveActiveVM()
c9a5c4b943 pkg/machine: CheckExclusiveActiveVM should also check for starting
1dfd3d3d12 pkg/machine: refresh config after we hold lock
d5e0ecc619 Update dependency setuptools to ~=69.2.0
60a3eb8491 [skip-ci] rpm: update containers-common dep on f40+
2ff5716b7e fix invalid HTTP header values when hijacking a connection
c6ae7fd145 Add doc to build podman on windows without MSYS
1901403eda Removing CRI-O related annotations
83e671a2c5 fix(deps): update module github.com/containers/ocicrypt to v1.1.10
d7fa0aa351 Pass the restart policy to the individual containers
cb81da9bee kube play: always pull when both imagePullPolicy and tag are missing
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
ea2a7de432 |
containerd: update to 2.0.0-rc.3
Bumping containerd to version v2.0.0-rc.3-19-g741c4bde5, which comprises the following commits:
531da9960 Reduce scope of permissions in stale workflow
ed64e6503 core/mount: remove logrus import
ea8265fb1 core/transfer/local: remove logrus import
75fd7a5a7 pkg/shim: remove logrus imports
38e2f0038 Adds a mutex to protect fallback host
587ee80f6 pkg/tracing: LogrusHook.Fire: micro-optimisation
ccf793812 pkg/tracing: remove direct use of github.com/sirupsen/logrus
4203e2de8 pkg/tracing/plugin: rename var that collided with import
e2e09b384 pkg/tracing: rename func that shadowed builtin, rm makeSpanName
e69ad9442 build(deps): bump the k8s group across 1 directory with 4 updates
5b8dfbd11 Allow proxy plugins to have capabilities
cc2cedae0 Revert "install-runc: pin Go to 1.21"
3c097352a update runc binary to v1.1.13
8c13ed1b8 Prepare v2.0.0-rc.3 release
86b8a8824 Remove pkg/seed
09d3e20d3 Allow running test in usernamespace
8bcffa944 KEP-3619: Fine grained SupplementalGroups control
87dd4309d vendor: github.com/containerd/platforms v0.2.1
939135ae3 CI: golangci-lint v1.59.1
df7f6ba5b ctr: return explicit errors for flags unsupported by transfer service
686a610ee build(deps): bump github.com/checkpoint-restore/checkpointctl
156458e54 build(deps): bump the golang-x group with 2 updates
08c1e12e9 CI: add back EL 8
149ca6880 Update hcsshim tag to 0.12.4
b1a23c495 Fail integration test early when a plugin load fails
d23c4b8b5 Use unix and windows specific connection error checks
02b6c6939 Allow fallback across default ports
80ce8bd61 build(deps): bump github.com/containerd/containerd/api
cde2527fc ctr: pull: Do not ignore labels when transfer service is used
1c123efb4 Update Go version to 1.22.4
e1e793e4a Update rockylinux vagrant build
5611fdd4a Transfer: Push: Enable to specify platforms
0e8cc9146 Transfer: Push: fix failure on pushing duplicated blobs
4123170a3 *: export RemoveVolatileOption for CRI image volumes
3e71ccafc Add type alias for event Envelope
da1d9672f Enable imgcrypt in cri pull
9857afda4 Add vendor for github.com/containerd/imgcrypt
359d84351 Update api minimum go version to 1.21
2d73340c2 Explicitly set release latest to false
ca59fb0b4 Cleanup shim manager configuration
9831a62d7 auth: add span to FetchToken helpers
58be88189 sandbox: do retry for wait to remote sandbox controller
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
c138943fed |
podman-compose: switch to main branch
The upstream project has made the "interesting" decision to delete the stable branch and move to "main" for recent releases. So rather than being able to simply switch for our updates, we have to switch to main on all releases that had podman-compose recipes using the stable branch. Luckily, the commit hashes haven't changed, so we only have to modify the branch in the SRC_URI. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Marcus Flyckt
|
e8214becb9 |
podman: Use slirp4netns instead of pasta
podman uses pasta as the default rootless network command since 5.0.0, but only slirp4netns is available when building for Yocto. This commit adds a containers.conf file setting slirp4netns as default rootless command if 'rootless' is set in PACKAGECONFIG Signed-off-by: Marcus Flyckt <mafl@kvaser.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Bruce Ashfield
|
f487ea4aa0 |
lxc: update to v6.0.0
Bumping lxc to version v6.0.0, which comprises the following commits:
3dee5fb88 Release LXC 6.0.0
17ac6f691 lxc.spec: Align SPDX license id
5fe2de84c Makefile: Align SPDX license id
97f93be72 meson: Align SPDX license id
d4cd3741d COPYING: Clarify licensing of files without SPDX
8e67eb07c doc: Add SPDX headers and remove Author field
cb94edf53 src/include: Add SPDX headers
7bc33ef6e src/tests: Add SPDX headers
007642c89 hooks: Add SPDX headers
1e9e66be3 lxc.spec: Clear default changelog
202d649d1 lxc.spec: Use SPDX
85abd4026 template: Use SPDX
a074b3d27 config/yum: Use SPDX header
7ed43e5e9 COPYING: Remove whitespace
522721216 MAINTAINERS: Remove Dwight from the maintainer list
08bf8b9e2 lxc-checkconfig: Fix shellcheck
0f18db543 lxc-checkconfig: Show namespace limits
f71b8e3f8 lxc-ls: list names with whitespaces in `--active`.
816b8973d lxc/tools: set default log_priority to ERROR
989ea3969 tools/lxc_autostart: don't fail when there are no containers
dc4df2335 lxc/lxccontainer: specify file mode in open() call inside mod_rdep
630b46ed2 lxc/confile: do not print excess space before scale suffix for time.offset.boot
796f2ccb7 lxc/confile: do not print newline symbol in getter for lxc.time.offset.*
dcc4fb929 tests/parse_config_file: fix some typos
6fea67429 tests/parse_config_file: add tests for lxc.time.offset.*
ad8f55445 tree-wide: replace multiply_overflow with check_mul_overflow
4464cee19 lxccontainer: rework copy_file()
9d1aa932d lxccontainer: improve mod_rdep()
81c1bbf45 Revert "lxccontainer: fixes"
82fe01821 src/lxc/syscall_numbers.h: drop define -1
590a95d83 rexec: Avoid invalid free in rexec failure path
f9978b179 README: Correct 'armvl7' to 'armv7l'
046b63cd2 unshare: simplify lookup_name
7452ee8ab lxc-unshare: fix an buffer overflow issue in lxc_unshare
e88883445 lxc-net: Enable IPv6 by default
d78ca00bc tests/meson: attempt to fix ossfuzz builds
d18f993b3 github: master -> main
86799f554 meson: link with liblxc dynamically everywhere if possible
b90fecfda network: use IN_LIBLXC
9eee450d2 storage_utils: move get_fssize to utils
6eb0a73e2 storage_utils: unhide and rename is_valid_storage_type to lxc_is_valid_storage_type
42eeffcb0 confile: unhide lxc_config_parse_arch() helper
9bb318881 conf: reorganize/split code to utils.c
863c59dc3 conf: reorganize/split code to idmap_utils.c
b7591ad49 confile: unhide lxc_config_define*() helpers
f14656ebf meson: introduce IN_LIBLXC preprocessor macro
672b2172d confile: move lxc_fill_elevated_privileges() to tools/lxc_attach
8f9733d75 tests: remove old and broken cgroup handling code from tests
d51ea224e config: apparmor: add AppArmor profile for lxc-copy
627bb9460 tests: lxc-test-usernic: use iproute tool instead of brctl
df0665b6d oci: resolve cross-filesystem blob caching failure
ec85e5ca4 lxc-test-usernic: drop cgroup handling
27ec0b0f6 test-usernic: don't use ifconfig
44e845b3c Add x32 to the list of recognized architectures
07e3a516e lxc-download, lxc-local: preserve xattrs on unpack
9ac7c4895 tree-wide: use container_uses_namespace() in less trivial cases
64341ce7b tree-wide: use container_uses_namespace() helper
6b40e66c1 Fix error message.
c8189ee2a Add verbose output in download template.
84cc3155a Align columns in lxc-download.in template
872db5424 build: add more options for customizing install
df17ac417 Add loongarch64 support
112d5615e build(deps): bump actions/upload-artifact from 3 to 4
789457f1a config: try to create workdir if not exist
86f5c1226 lxc-local: Add --no-dev option to exclude /dev from the fstree
f885a3c56 lxc-local: Re-organize code to use more functions
7c025072e lxc-local: Improve usage info
faa38a197 lxc-local: Change LXC_CONFIG to LXC_METADATA to match args and be more clear
d65fe1b27 Disable IPv6 link-local addresses for bridged veth
8cff8fa1a don't try to delete vlan 0 from veth
0e932812a conf: fix ephemeral copies
abffab441 config/init: Drop upstart files
79a4a3cf8 doc: remove the warning mentionning upstart
7bf1695d0 hooks/ubuntu-cloud-prep: remove upstart handling
fb73c18d2 meson: Remove support for upstart
cc6819c69 reset root_nsuid_map and root_nsgid_map when idmaps is cleared
a87d6fcc9 lxc/checkconfig: use multiline `echo`
f3e01fa80 lxc/checkconfig: replace `echo -n` by printf
ba4f810bc lxc/checkconfig: minor cosmetic change
d52c345c8 lxc/checkconfig: avoid subshell (SC2235)
f84f03d1d lxc/checkconfig: remove superfluous (..) around test command (SC2234)
74b9faa64 lxc/checkconfig: check exit code directly (SC2181)
5cc69e440 lxc/checkconfig: replace `! -z` by `-n` (SC2236)
a4684eb11 lxc/checkconfig: add missing quotes to please shellcheck
8a611c0b2 lxc/checkconfig: remove some unneeded `echo -n`
cb2574319 lxc/checkconfig: replace `type` by `command`
003efe6db lxc/checkconfig: replace `cat | grep` with `grep`
adadfa372 lxc/lxccontainer: fix do_lxcapi_set_timeout retval
c02367e59 containers in the FREEZING state also need to be unfreeze
aca53bcf7 build(deps): bump actions/checkout from 3 to 4
84169158f lxccontainer.h: Move new fields to the end
e2696df93 Remove references to LXD
7cec54455 Update console perms to 0600
3f45443fd Fix start api call to split quoted strings in execute or init command.
fbc31691e github: Update for main branch
69e51b919 CONTRIBUTING: add a note on AI generated code
84cfe9772 get_hierarchy: dont WARN about no usable controller
64167f906 Add libarchive tar support for lxc download
213e2f68d github: Add DCO/target tests
cf2b20209 explicitly convert *mainloop_handler to __u64
8575ffeb7 tests: fix parse_config_file seccomp test
ca25f3bf6 src/tests: Fix container creation errors
539c39772 rename functions which clash with libsystemd's
b670f0e75 commands: support timeout in LXC_CMD_GET_STATE
0fed82b26 lxccontainer: extend lxccontainer API with set_timeout
7fd671dbc mainloop: io_uring: disable IORING_POLL_ADD_MULTI
715fb4eff terminal: make a terminal FDs non-blocking
7eff16cc4 file_utils: add fd_make_nonblocking helper
747c4df31 file_utils: rename fd_make_nonblocking to fd_make_blocking
ebea2b5a9 setproctitle(): Handle potential NULL return from strrchr()
f7f15b20a make setproctitle()'s /proc/pid/stat parsing safe
890de0759 lsm: apparmor: allow to change mount propagation
5894cf310 console-log test: make sure container is stopped before restarting
820d2a2b3 switch from libsystemd's dbus to dbus-1
3c1453a38 tree-wide: convert fcntl(FD_CLOEXEC) to SOCK_CLOEXEC
4ea0b361f Allow fuse mounts in apparmor start-container.
1a2da75b6 Add support for squashfs images in oci via atomfs
db3cbfa75 apparmor: don't try to mmap empty files
304bf58fa initutils: use PRIu64 for uint64_t in setproctitle
4de047f51 lxc-net.in: fix nftables syntax for IPv6 NAT
311bb8c53 Fix strlcat's return value checks
588b53b19 Fix typo: bev_type -> bdev_type
7914c259f drop broken lxc-test-fuzzers
849d80877 Fix build error on sparc64 caused by using the gold linker
43ad7816d lxc-default-cgns apparmor profile: allow overlay mounts
4fa83282b lxc_user_nic: fix get_mtu() error handling
1b0469530 Patching an incoming CVE (CVE-2022-47952)
a8e1070c6 build: force linking against liblxc
c27ea96f7 checkconfig: Fix filesystem capability check
3f361da61 checkconfig: Tweak cgroup handling
3ab04999d checkconfig: Tweak layout
e027ca711 checkconfig: Hide version if no lxc-start
914fec51b checkconfig: Fix mixed tabs/spaces
70b176b0d src/lxc/meson.build: fix build without apparmor
42b22da6d cgroups: fix cgroup layout detection in __initialize_cgroups
0072919dd state: additional check in lxc_wait to prevent OOB
62b94d3ec cgroups: check snprintf retval in unpriv_systemd_create_scope
93d545e37 cgroups: fix buffer out-of-bounds access in enable_controllers_delegation
f8aa61f97 network: always initialize struct nl_handler
6ea4a6c06 apparmor: properly check lxc_strmmap ret value
b37cce95b github: fix coverity (add libpam-dev)
a8dcf88d0 github: fix coverity build
7e7393413 conf: ensure mount tunnel is a dependent mount
01ae6d471 apparmor: allow shared mounts in start-container.in
81d94a4ee conf: create separate peer group for container's root
68020412c cgroups: only allocate user namespace if we have to
27f69d45b cgroups: use userns_exec_full() during cgroup removal
1029c2a06 README: remove lgtm
dcf85308c meson.build: strip newline for variable assignments
8aac58866 meson.build: strip newlines from git output
16c6ff226 tests: lxc-test-reboot: Fix build on ia64
64eb31d02 src/lxc/meson.build: fix the static library path
c6c705bfa build: drop build-time systemd dependency
f321cd610 build: use cc.get_define to detect FS_CONFIG_* symbols
5aff4ea37 build: only build init.lxc.static if libcap is statically linkable
c1f87c811 build: fix handling of dependancies to fix build on openSUSE
bc318926d cgroups: fix -Waddress warning
4deaa28c0 Unroll IN_SET since the max usage is 2 elements check
73fd9bf55 tests: lxc-test-checkpoint-restore: use trap to do cleanup
8480c56a4 tools: lxc-destroy: update help message for --force
3cac3fce4 build: add libsystemd to oss fuzz dependencies
f7cadaa34 lxc/attach: Detect EACCES from execvp and convert to 126 exit status
4ebca5a00 lxc-attach: Fix lost return codes of spawned processes that are killed
09233897b Update README.md
4a66dabf8 conf: allow cross-device links
dc4f1220f build(deps): bump actions/checkout from 2 to 3
2b802090f Update cifuzz.yml
20cc78456 fix error message when use tools with -? option
b0abedf60 use sd_bus_call_method_async to replace the asyncv one
589a930f1 tree-wide: split open helpers into open_utils.h
7b1836bce build: prevent the inclusion of linux/mount.h with a hack
da8c29853 mount_utils: remove conf.h include
74c2f58e1 mount: move mount utilities from syscall_wrappers.h into mount_utils.h
68cf56489 tree-wide: minimize liburing.h inclusion
06f99c259 meson: fix docbook2x detection
133aa416c tree-wide: use struct open_how directly
63468abd3 tree-wide: use struct clone_args directly
4771699fd tree-wide: wipe direct or indirect linux/mount.h inclusion
16ebb29dc meson.build: allow explicit distrosysconfdir
cbabe8abf build: check for FS_CONFIG_* header symbol in sys/mount.h
ef1e0607b build: detect sys/pidfd.h availability
c1115e150 build: detect where struct mount_attr is declared
e452c8945 gitignore: Simplify
32a071519 lxc-usernsexec: allow to select which {g,u}id to switch to
7f6643071 README: update security mails
5e704fe38 meson.build: fix build without stack-protector
7d7235489 meson.build: fix build with -Dcapabilities=false
8ee887908 src/lxc/log.h: fix STRERROR_R_CHAR_P
353f0f992 meson: add remaining still-in-use config checks
3d360cf9d Store mount options in correct variable
df3301046 Fix off-by-one error constructing mount options
8ee615c27 add check for statvfs
07a00b78f start: fix namespace sharing
eae44ce19 conf: fix append_ttyname()
6c50e09f2 start: record inherited namespaces earlier to make it available for idmapped rootfs setup
7317d2a8a start: don't overwrite file descriptors during namespace preservation
fc133a9f3 conf: log file descriptors on error during idmapped mount setup
26de6cbc8 fix for issue 4026: set broadcast to 0.0.0.0 for /31 and /32
c55353f84 use systemd dbus StartTransientUnit for unpriv cgroup2
b203e1a14 Fix uninitialized read in parse_cap when libcap is not used
e73520adf meson: Set DEVEL flag post release
f4d02217e tools: Provide multicall lxc binary
289d6413e meson: Generate compile commands by iterating over an array
132ff8e28 lxccontainer: rework copy_file()
f357cb290 lxccontainer: improve mod_rdep()
b576a47d5 Read list until process exits
We also:
- drop two patches that were backported
- refresh the context of one
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
3373478346 |
containerd: update to v2.0.0-rc.2
Bumping containerd to version v2.0.0-rc.2-12-g5d2c988a5, which comprises the following commits:
446e63579 remove uses of platforms.Platform alias
22f2af40c update pause image to 3.10
65024e6fd core/image: fix usage of "unknown" platform
8b3060717 Provide runtime options in plugin info
332caf1a1 Provide ability to set lo up without CNI
288f0592e Prepare release notes for v2.0.0-rc.2
f24a95185 build(deps): bump github.com/prometheus/client_golang
8b2a69c19 build(deps): bump golangci/golangci-lint-action from 5 to 6
96ff18d37 build(deps): bump ossf/scorecard-action from 2.3.1 to 2.3.3
1cae3dc9b update ttrpc to 1.2.4
e2251f948 Update instrumentation fuzzer with new flag
ef76a90e9 Update platforms package to v0.2.0
0b113d78d doc: add the description of sandboxer and io_type
7cead8800 cri: restart created container with correct io type
42f778fc1 modify streaming io url form
25c2f690a Update toolchain to Go 1.22.3
681a083fa Update unpacker to always fetch all
2788604e4 Update ctr image pull all platforms
58be88189 sandbox: do retry for wait to remote sandbox controller
059731775 Preserve CL_UNPRIVILEGED locked flags during remount of bind mounts
9a9a8c46a Don't require vagrant tests in merge queues
d9dc2811a fix: delete sockets on shim exit
41dc94ee1 CI: bump up golangci-lint to v1.58.0
9ecfac7f6 Integration: Change to grpc.NewClient
8c6183d74 Add lease test for metadata snapshotter
c7fb8a925 Update metadata snapshotter to lease on exists
b8dfb4d8f cri: support io by streaming api
3b065cddd CI: skip test in arm64 CI
6c3c5376f critools-version: v1.30.0
b488e76db build(deps): bump google.golang.org/protobuf from 1.33.0 to 1.34.1
a6e417dc6 build(deps): bump go.etcd.io/bbolt from 1.3.9 to 1.3.10
4401c3cb7 build(deps): bump github.com/pelletier/go-toml/v2 from 2.2.1 to 2.2.2
42e02c6c0 build(deps): bump golang.org/x/sys in the golang-x group
88b52119c Update api version to v1.8.0-rc.0
1c9c64f31 Update release procedure to mention api replace
e69efd56d Add go mod replace when proto changes happen
678137199 sandbox: remove PID() in sandbox client
13f2fa1de remove go1.21.9 from CI matrix
f0363a7f6 Chore: Simplify some syscall error checks
99ad11a00 core/metadata: failfast on content.Commit
3fb84403b CI: bump up crun to 1.15
55fcebffc Prepare release notes for api/v1.8.0
b811a8879 Add API release action
b8060d641 Update ctr shim subcommand to task v3
f1e265b13 core/runtime: Check shim PluginInfo to enforce idmap support
05a3171bb Update transfer proxy to support ttrpc
ec04e4f63 Add streaming proxy
fe01cad20 Cleanup local transfer interface
171fc1434 Update release doc to mention API versioning
2ac2b9c90 Make api a Go sub-module
e1b94c0e7 Move protobuf package under pkg
3e9cace72 Move runtimeoptions to api directory
4a4550777 Move runc options to api directory
25a288662 Fix v2 migrate for testutil package
fb1f15d30 docs: correct the typo in the documentation
2df04b403 build(deps): bump the otel group with 8 updates
950db7eb7 build(deps): bump the k8s group across 1 directory with 4 updates
93690baf4 build(deps): bump github.com/grpc-ecosystem/go-grpc-middleware/providers/prometheus
4c753d124 go.mod: k8s.io/cri-api v0.30.0
de38490ed sandbox: merge address and protocol to one url
c3b306240 add task api endpoint in task create options
72fe47b2a add task api endpoint in oci proto
b1fefccc7 sandbox: store endpoint in cri sandboxStore
f6e0cf189 sandbox: add address info in Start and Status response
15782881e go.mod: go 1.22
2d5689434 CI: use Go 1.22 by default
fef78c102 install-runc: pin Go to 1.21
11d8beff8 optimize error logs by providing absolute file paths
81a9df625 build(deps): bump github.com/urfave/cli/v2 from 2.27.1 to 2.27.2
c001a7056 build(deps): bump lycheeverse/lychee-action from 1.9.3 to 1.10.0
6df759e24 build(deps): bump golangci/golangci-lint-action from 4 to 5
b7c977414 container.Checkpoint(), WithRestoreImage(): use ocispec.AnnotationRefName
8a8c3e221 pkg/cri/server/base: log CRI config as embedded JSON
f62edda5a pkg/cri/server/base: use structured log for CRI plugin startup
e07b63d84 document usage and design of blockfile snapshotter
b6bd12f13 Add Syself Autopilot to adopters
7bc476001 ADOPTERS.md: Fix Actuated italics
416741675 Perform file sync outside of lock on Commit
c27bcdc56 cri: introspectRuntimeFeatures: fix nil panic
dfdfa206f Update for latest updates to release tool
53c9e6f86 Update release process after 1.7
a12acedfa sandbox: make a independent shim plugin
9ee3bfaba images: tests: Fix typos in the tests
c51463010 docs: update registry config guide
7bd4d348e add info of exited event
218e2cf7c Return correct error if CRIU binary is missing
bb9d923aa content: add a BlobReadSeeker func to allow multipart blob streaming
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
7179de293c |
buildah: update to 1.36
Bumping buildah to version v1.36.0, which comprises the following commits:
6ceba8838 Bump to v1.36.0
c09e08b53 build: be more selective about specifying the default OS
3fa5531ca Bump to c/common v0.59.0
4d1690bc3 Fix buildah prune --help showing the same example twice
208b7111e fix(deps): update module github.com/onsi/ginkgo/v2 to v2.18.0
c7937cd1d fix(deps): update module github.com/containers/image/v5 to v5.31.0
183582f03 bud tests: fix breakage when vendoring into podman
de8510c9d Integration tests: fake up a replacement for nixery.dev/shell
d9191e17c copierWithSubprocess(): try to capture stderr on io.ErrClosedPipe
97382f928 Don't expand RUN heredocs ourselves, let the shell do it
864a40cbd Don't leak temp files on failures
97d44ab9c Add release note template to split dependency chores
4a524737f fix CentOS/RHEL build - no BATS there
420949a5a fix(deps): update module github.com/containers/luksy to v0.0.0-20240506205542-84b50f50f3ee
bbab575ff Address CVE-2024-3727
6a48ae700 chore(deps): update module github.com/opencontainers/runtime-spec to v1.2.0
d5b2e3c41 Builder.cdiSetupDevicesInSpecdefConfig(): use configured CDI dirs
da4e2d7ad Setting --arch should set the TARGETARCH build arg
6f1f687c3 fix(deps): update module golang.org/x/exp to v0.0.0-20240416160154-fe59bbe5cc7f
cd1960725 [CI:DOCS] Add link to Buildah image page to README.md
f6d49125a Don't set GOTOOLCHAIN=local
a04741d9f fix(deps): update module github.com/cyphar/filepath-securejoin to v0.2.5
53f2dc231 Makefile: set GOTOOLCHAIN=local
e0077e8c6 Integration tests: switch some base images
fdfd2237d containerImageRef.NewImageSource: merge the tar filters
f2825bf7b fix(deps): update module github.com/onsi/ginkgo/v2 to v2.17.2
2c1c73169 fix(deps): update module github.com/containers/luksy to v0.0.0-20240408185936-afd8e7619947
7688d880d Disable packit builds for centos-stream+epel-next-8
7425f6f8f Makefile: add missing files to $(SOURCES)
fbd2b7db4 CI VMs: bump to new versions with tmpfs /tmp
89ee4f4b0 chore(deps): update module golang.org/x/net to v0.23.0 [security]
c01061e47 integration test: handle new labels in "bud and test --unsetlabel"
f86c2748e Switch packit configuration to use epel-9-$arch ...
14d964d92 Give unit tests a bit more time
8bb87aefa Integration tests: remove a couple of duplicated tests
3e756d507 Integration tests: whitespace tweaks
8ee7bebd7 Integration tests: don't remove images at start or end of test
c7f088142 Integration tests: use cached images more
b213c5e7a Integration tests _prefetch: use registry configs
8bdd6a66d internal: use fileutils.(Le|E)xists
441bdc927 pkg/parse: use fileutils.(Le|E)xists
705338379 buildah: use fileutils.(Le|E)xists
9dcd1cc9a chroot: use fileutils.(Le|E)xists
358814f69 vendor: update containers/(common|storage)
be74b733f Fix issue/pr lock workflow
a99fe1513 [CI:DOCS] Add golang 1.21 update warning
77400c4fc heredoc: honor inline COPY irrespective of ignorefiles
ff13a08c9 Update install.md
5b414ad08 source-push: add support for --digestfile
d9129b463 Fix caching when mounting a cached stage with COPY/ADD
58579ba65 fix(deps): update github.com/containers/luksy digest to 3d2cf0e
2cd31a069 Makefile: softcode `strip`, use it from env var
f812c8949 Man page updates
5198af7d7 Add support for passing CDI specs to --device
14bf3db27 Update comments on some API objects
2a7ff9905 pkg/parse.DeviceFromPath(): dereference src symlinks
c1b43b57b Makefile - instead of calling `as` directly, use it from env var
23b8d9767 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.17.1
c1119f886 CI: bump VMs
2c47fdccd fix(deps): update module github.com/docker/docker to v25.0.5+incompatible
f95b7a188 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.17.0
9cf83d8f8 Change RUN to comment in bud.bats
5808b9603 Stop rebasing renovate PRs automatically
37994356f Update renovate validation image
4304d618f CVE-2024-1753 container escape fix
516f9e9a2 correctly configure /etc/hosts and resolv.conf when using network
9db5a16f7 buildah: refactor resolv/hosts setup.
8c1fee7e7 rename the hostFile var to reflect the value better
f8a7841cc vendor latest c/common
26da74d54 [skip-ci] rpm: use go-rpm-macros supported vendoring
547d9bf0e Update docs/buildah-add.1.md
80f9f7cb0 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.16.0
5cf05ac08 fix(deps): update module github.com/docker/docker to v25.0.4+incompatible
c355679d3 fix(deps): update module github.com/containers/ocicrypt to v1.1.10
550139916 chore(deps): update module gopkg.in/go-jose/go-jose.v2 to v2.6.3 [security]
1a6d3513f chore(deps): update module github.com/go-jose/go-jose/v3 to v3.0.3 [security]
bf3263ec1 Bump google.golang.org/protobuf to v1.33.0
e635558d2 fix links to containerignore doc
e53e50f7a [skip-ci] Makefile: update rpm target
87ef84d3a pr-should-include-tests: use GitHub label, not commit text
d50122aeb tests: enable pasta tests
1bc5dd692 [CI:DOCS] Migrate buildah container image
7c88bb372 Update .gitignore
da81d2e2b Bump to v1.36.0-dev
fedbd7967 Bump v1.35.0
3164076e2 Bump c/common v0.58.0, c/image v5.30.0, c/storage v1.53.0
b2504c263 conformance tests: don't break on trailing zeroes in layer blobs
a2f0ebef6 Add a conformance test for copying to a mounted prior stage
e504df188 fix(deps): update module github.com/stretchr/testify to v1.9.0
951dccd3f cgroups: reuse version check from c/common
bbea3eb54 Update vendor of containers/(common,image)
6474279ed fix(deps): update github.com/containers/storage digest to eadc620
f9d603608 fix(deps): update github.com/containers/luksy digest to ceb12d4
53f230e2b fix(deps): update github.com/containers/image/v5 digest to cdc6802
8a1bcd51c manifest add: complain if we get artifact flags without --artifact
d0ffb9d37 Use retry logic from containers/common
e9c3c1666 Vendor in containers/(storage,image,common)
5047a3566 Update module golang.org/x/crypto to v0.20.0
26d5b84b1 Add comment re: Total Success task name
4853c0042 tests: skip_if_no_unshare(): check for --setuid
63975b541 Properly handle build --pull=false
836b9384d [skip-ci] Update tim-actions/get-pr-commits action to v1.3.1
5748595ae Update module go.etcd.io/bbolt to v1.3.9
fee705081 Revert "Reduce official image size"
aee02318a Update module github.com/opencontainers/image-spec to v1.1.0
cdb1a4ff8 Reduce official image size
eb6269d8c Build with CNI support on FreeBSD
98f870753 build --all-platforms: skip some base "image" platforms
d73e21120 Bump main to v1.35.0-dev
90c0d9794 Vendor in latest containers/(storage,image,common)
1def7d6de Split up error messages for missing --sbom related flags
aca884a89 `buildah manifest`: add artifact-related options
07057917d cmd/buildah/manifest.go: lock lists before adding/annotating/pushing
a0852e994 cmd/buildah/manifest.go: don't make struct declarations aliases
4f0b619dd Use golang.org/x/exp/slices.Contains
e202d62cc Disable loong64 again
e99960085 Fix a couple of typos in one-line comments
302a798ad egrep is obsolescent; use grep -E
e6d179476 Try Cirrus with a newer VM version
04847f57f Set CONTAINERS_CONF in the chroot-mount-flags integration test
56e6ef854 Update to match dependency API update
5d58b88c7 Update github.com/openshift/imagebuilder and containers/common
a20d5b2a5 docs: correct default authfile path
9d58d1382 fix(deps): update module github.com/containerd/containerd to v1.7.13
533aac2d4 tests: retrofit test for heredoc summary
1bfd3336f build, heredoc: show heredoc summary in build output
811ee6797 manifest, push: add support for --retry and --retry-delay
1a8cbc185 fix(deps): update github.com/openshift/imagebuilder digest to b767bc3
9d516e22e imagebuildah: fix crash with empty RUN
e14f46f2e fix(deps): update github.com/containers/luksy digest to b62d551
a7aec1941 fix(deps): update module github.com/opencontainers/runc to v1.1.12 [security]
f1f0d9d4d fix(deps): update module github.com/moby/buildkit to v0.12.5 [security]
79fb3c213 Make buildah match podman for handling of ulimits
13fd5bd2c docs: move footnotes to where they're applicable
011736e12 Allow users to specify no-dereference
34dff20da Run codespell on code
86afc1ffd Fix FreeBSD version parsing
32b8ceeb6 Fix a build break on FreeBSD
e3d043ebf Remove a bad FROM line
f6f6da8f0 fix(deps): update module github.com/onsi/gomega to v1.31.1
4b5caebd7 fix(deps): update module github.com/opencontainers/image-spec to v1.1.0-rc6
f157be843 docs: use reversed logo for dark theme in README
cf69e8a18 build,commit: add --sbom to scan and produce SBOMs when committing
b3af07dab commit: force omitHistory if the parent has layers but no history
de7c1e1f7 docs: fix a couple of typos
89f50af21 internal/mkcw.Archive(): handle extra image content
4cc811f4f stage_executor,heredoc: honor interpreter in heredoc
339839d4b stage_executor,layers: burst cache if heredoc content is changed
dd186ee0f fix(deps): update module golang.org/x/crypto to v0.18.0
a42bfd019 Replace map[K]bool with map[K]struct{} where it makes sense
905551f51 fix(deps): update module golang.org/x/sync to v0.6.0
efe76552b fix(deps): update module golang.org/x/term to v0.16.0
d371fc7b9 Bump CI VMs
53c65dd36 Replace strings.SplitN with strings.Cut
b5ee4fb34 fix(deps): update github.com/containers/storage digest to ef81e9b
114bb6f0c fix(deps): update github.com/containers/image/v5 digest to 1b221d4
fd0899f1f fix(deps): update module github.com/fsouza/go-dockerclient to v1.10.1
59ea8af1b Document use of containers-transports values in buildah
b2c80f9a3 fix(deps): update module golang.org/x/crypto to v0.17.0 [security]
b283c48db chore(deps): update dependency containers/automation_images to v20231208
4a9dba647 manifest: addCompression use default from containers.conf
041388f87 commit: add a --add-file flag
81435aadc mkcw: populate the rootfs using an overlay
5b9141887 chore(deps): update dependency containers/automation_images to v20230517
de0c3cdaf [skip-ci] Update actions/stale action to v9
2ab21c666 fix(deps): update module github.com/containernetworking/plugins to v1.4.0
29d945f38 fix(deps): update github.com/containers/image/v5 digest to 7a40fee
4276a735b Bump to v1.34.1-dev
471460018 Ignore errors if label.Relabel returns ENOSUP
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
bad7f6f1d8 |
crun: update to v1.15
Bumping crun to version 1.15-13-g700e2ed, which comprises the following commits:
c6c1c7f crun run --help: say --no-subreaper is ignored
8801bc4 github: disable CentOS 10 tests
5f0643c github: fix running tests on CentOS 10
d795081 tests: build on CentOS 10 without yajl
f00fa22 libocispec: sync from upstream
dd9428b blake3: initialize chunks_array
8c80ab9 utils: initialize fd
81b8f45 linux: fix mount of special files with rro
e6eacaf NEWS: tag 1.15
08b5e78 Packit: Enable c10s downstream sync, rhel / centos separation in tests
4618d50 status: rmdirfd: try harder to remove mount points
c72bf7f linux: cgroups: cleanup unused mount if move failed
ff321e1 tests: install slirp4netns
a946f04 utils: fix a compiler warning
aa72cc4 Packit/TMT: add centos-stream-10, cleanup tests
f39bc4a tests, oci-validation: use perl tap driver
f5548f2 tests, oci-validation: use tap-18
18e84a1 tests, oci-validation: use git clone
49090f2 Build s390x binaries using musl libc
307d35e Fix clang format test
4b8f7c9 build(deps): bump uraimo/run-on-arch-action from 2.7.1 to 2.7.2
e6a8d51 libocispec: update
1809973 tests: use npm-18
475a3fd features: add support for potentiallyUnsafeConfigAnnotations
4f5479e src/libcrun/handlers: add option to load wasi-nn plugin for wasmedge
631e767 release: use zstd instead of xz
0722689 release.sh: generate .zst release instead of .xz
3ad68ed linux: fixup libcrun_safe_chdir
699564b rpm: remove eln macro
f50da23 Packit: reuse non-RHEL failure message notification on RHEL
0b7fc08 packit: podman reverse dependency tests
820471a libocispec: use runtime-spec v1.2.0
9eea9ff cgroup: make error clearer
59ad70a container: validate option flags
7918dca container: split create and run options
8894495 crun: add option --keep to run
35dccc3 libcrun, run: add option to not delete containers
a220ca6 NEWS: tag 1.14.4
6cd74cb Add support for s390x
5884fd4 linux: fix mount of file with recursive flags
b9e87e7 tests: test bind mounts of files
crun/ocispec: update to latest
2236d50 github: test with the embedded yajl library
bed19ad configure.ac: --enable-embedded-yajl skips check for yajl
b633f89 Makefile.am: distribute the src/yajl symlink
86650dc fix compilation error with clang++17
20d3936 helpers.py: remove __str__()
afed951 generate.py: fix some typos
daeb197 runtime-spec: use version v1.2.0
66f6f71 optimize writefile
e9a99a8 Optimize headers writefile
7a5f2b6 Refresh strings format sources
210f4d3 Refresh strings format headers
b085839 runtime-spec: update
crun/ispec: update to v1.1.0
535d657 Fix a typo in the annotations spec
89fee07 MAINTAINERS: move jonboulle to EMERITUS
f17d647 CODEOWNERS: remove vbatts
818209a MAINTAINERS: move vbatts to EMERITUS
652ec7c Add note about `ImageID` to the `config` section of `manifest.md`
2d95dde Reformat "Platform Variants", especially to add amd64, ppc64le, riscv64
e191267 Update Go versions in release scripts
4da0cfc Update GitHub Actions packages to resolve warnings in CI
a32e6c3 Pin golangci-lint for Go v1.20
8baa69b media-types: Fix broken links
0a41c19 version: bump back to +dev
e7f7c0c version: release v1.1.0
d0f90e6 Clarify that subject references a separate DAG
8b1e951 version: bump back to +dev
6c2b5fa version: release v1.1.0-rc6
53d9855 new section for projects no longer maintained
b391bc0 fix: SPDX licenses URL
dd66b54 Test older versions of Go with toolchain=local
93f6e65 Makefile: remove stray trailing space (#1126)
d881fa8 deps: remove deprecated github.com/pkg/errors (#1125)
072574d add ORAS to implementations.md
9954739 specs-go: group MediaTypes
344b098 fix markdown table formatting
c7a064f Update supported Go range to 1.19 - 1.21
f0ef80e version: bump back to +dev
1e54f01 version: release v1.1.0-rc5
061cba3 Fix golangci-lint install on older versions of Go
a2a5750 Add step to update website after a release
0c1622e Add `riscv64` arch to `check{Architecture|Platform}`
e6a75e6 Provide a decision tree for artifacts
9ac8f92 Quote lint-md wildcard expression
a6af2b4 Add a markdown linter and fix linting issues
af9c838 OCI has a distribution-spec
37bac87 Create artifacts guidance
ddf2dfd chore(descriptor.md): correct canonicalization reference
d36ccf1 MediaType is required in the descriptor
f6c60b5 Clean up the markdown in considerations
da8994a Cleanup broken links and markdown spacing
56877ad Remove deprecated golangci lint checks
b29a06c Hacking markdown and Makefile cleanup
73aca56 Cleanup markdown in governance
fd95ded Fix label schema link
aed07a8 Test subject field in index
8620a49 version: bump HEAD back to +dev
82e8329 version: bump for release of v1.1.0-rc.4
988df0a specs-go: remove artifact prefixed annotations
a845c7a image-index: add artifactType to specs and schema
73f386c Add constants for "index.json" and "blobs"
25fc553 Switch from scratch to empty
749ea9a Add artifactType to image index
32036d8 Apply version change from #1050
e13840d Add language from artifacttype field to forbid allowlists of media types
77efc6e spec: clarify descriptor, align with de facto artifact usage
c6854a6 image-index: add the `subject` field
crun/rspec: update to v1.2.0
b983fbf CODEOWNERS: remove vbatts
bf698d0 MAINTAINERS: move vbatts to EMERITUS
12b653d Update golangci-lint to v1.56.1 in CI
8547911 Add Go v1.21 and v1.22 to GitHub Actions CI matrix
1a729af Update GitHub Actions packages to resolve warnings in CI
65cd1f8 Back to +dev
36852b0 version: release v1.2.0
021ba94 config.md: allow empty mappings for [r]idmap
5e98fec features: add potentiallyUnsafeConfigAnnotations
cabeea7 specs-go: mark LinuxMemory.Kernel as deprecated
4005c81 specs-go: add missing deprecation comment for Hooks.Prestart
2f6b090 config: improve bind mount and propagation doc
0ec4e6b fix link to hooks in features
6ffddf6 mount: Allow relative mount destinations on Linux
f329913 features-linux: Expose idmap information
7b8eb69 config: add reference to mount_setattr(2) for idmapped mounts
2547bb0 config: add idmap and ridmap mount options
3f552ce version: release v1.1.0+dev
0625254 version: release v1.1.0
d56ba70 ChangeLog: squash v1.1.0-rc.1...v1.1.0
5430e36 ChangeLog: Document changes since v1.1.0-rc.3
2bd22fa features.md: add a note to avoid confusion about annotations
5612d21 Remove outdated meeting.ics
085728a README.md: update chat information
8b4cadd version: v1.1.0-rc.3+dev
ae35e39 version: release v1.1.0-rc.3
d8be1e3 ChangeLog: Document changes since v1.1.0-rc.2
1beaf68 CODEOWNER: Add Toru Komatsu(@utam0) to sync with MAINTAINERS
fccfb09 config: add support for org.opencontainers.image annotations
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Mingli Yu
|
7cdd07a736 |
netavark: Make ptest run
Fixes: # ./run-ptest /tmp/bats-run-ELGGaA/bats.18820.src: line 5: To: command not found 1..1 not ok 1 bats-gather-tests # (in test file test/README.md, line 5) # `To run the tests locally in your sandbox, you can use one of these methods:' failed with status 127 Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Bruce Ashfield
|
2fdfa68445 |
podman: convert remaining WORKDIR references to UNPACKDIR
While the WORKDIR references seem to work, they may not continue to work. We switch to using UNPACKDIR which is where the SRC_URI referenced elements / files will be placed by the fetcher. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Bruce Ashfield
|
d79afeac8c |
lxc: convert remaining WORKDIR references to UNPACKDIR
While the WORKDIR references seem to work, they may not continue to work. We switch to using UNPACKDIR which is where the SRC_URI referenced elements / files will be placed by the fetcher. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Bruce Ashfield
|
2aa6da625d |
kubernetes: convert remaining WORKDIR references to UNPACKDIR
While the WORKDIR references seem to work, they may not continue to work. We switch to using UNPACKDIR which is where the SRC_URI referenced elements / files will be placed by the fetcher. The remaining WORDIR references are to a secondary git repository with artifacts and should be safe. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Bruce Ashfield
|
01a6b4771f |
docker-distribution: convert remaining WORKDIR references to UNPACKDIR
While the WORKDIR references seem to work, they may not continue to work. We switch to using UNPACKDIR which is where the SRC_URI referenced elements / files will be placed by the fetcher. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Bruce Ashfield
|
d190fb4a13 |
container-host-config: convert remaining WORKDIR references to UNPACKDIR
While the WORKDIR references seem to work, they may not continue to work. We switch to using UNPACKDIR which is where the SRC_URI referenced elements / files will be placed by the fetcher. We also explicitly set S to point to the UNPACKDIR to avoid a build warning. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Bruce Ashfield
|
27db959787 |
cgroup-lite: convert remaining WORKDIR references to UNPACKDIR
While the WORKDIR references seem to work, they may not continue to work. We switch to using UNPACKDIR which is where the SRC_URI referenced elements / files will be placed by the fetcher. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Bruce Ashfield
|
3dc0db19e1 |
k3s: convert remaining WORKDIR references to UNPACKDIR
While the WORKDIR references seem to work, they may not continue to work. We switch to using UNPACKDIR which is where the SRC_URI referenced elements / files will be placed by the fetcher. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Bruce Ashfield
|
288d9bdfb1 |
podman-tui: adapt SRC_URI to include destsuffix=${GO_SRCURI_DESTSUFFIX}
As of commit cc4ec43a2b657fb4c58429ab14f1edc2473c1327 [go: Drop fork of unpack code, mandate GO_SRCURI_DESTSUFFIX] we require this variable in our go recipes. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Bruce Ashfield
|
34b281d1a9 |
k3s: adapt SRC_URI to include destsuffix=${GO_SRCURI_DESTSUFFIX}
As of commit cc4ec43a2b657fb4c58429ab14f1edc2473c1327 [go: Drop fork of unpack code, mandate GO_SRCURI_DESTSUFFIX] we require this variable in our go recipes. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Bruce Ashfield
|
9de2c86118 |
crio-o: adapt SRC_URI to include destsuffix=${GO_SRCURI_DESTSUFFIX}
As of commit cc4ec43a2b657fb4c58429ab14f1edc2473c1327 [go: Drop fork of unpack code, mandate GO_SRCURI_DESTSUFFIX] we require this variable in our go recipes. We also adjust our WORKDIR reference to use UNPACKDIR instead Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Bruce Ashfield
|
754c3134c2 |
podman: adapt SRC_URI to include destsuffix=${GO_SRCURI_DESTSUFFIX}
As of commit cc4ec43a2b657fb4c58429ab14f1edc2473c1327 [go: Drop fork of unpack code, mandate GO_SRCURI_DESTSUFFIX] we require this variable in our go recipes. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Bruce Ashfield
|
d4f36f3ff5 |
docker-compose: adapt SRC_URI to include destsuffix=${GO_SRCURI_DESTSUFFIX}
As of commit cc4ec43a2b657fb4c58429ab14f1edc2473c1327 [go: Drop fork of unpack code, mandate GO_SRCURI_DESTSUFFIX] we require this variable in our go recipes. We also adjust our WORKDIR reference to UNPACKDIR, and the destination for vendor'd source. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Bruce Ashfield
|
caec6371aa |
nerdctl: SRC_URI to include destsuffix=${GO_SRCURI_DESTSUFFIX}
As of commit cc4ec43a2b657fb4c58429ab14f1edc2473c1327 [go: Drop fork of unpack code, mandate GO_SRCURI_DESTSUFFIX] we require this variable in our go recipes. We also adjust our S directory, and references to WORKDIR to fix the build for the new source layout. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Bruce Ashfield
|
df90aeb1ae |
cri-tools: adapt SRC_URI to include destsuffix=${GO_SRCURI_DESTSUFFIX}
As of commit cc4ec43a2b657fb4c58429ab14f1edc2473c1327 [go: Drop fork of unpack code, mandate GO_SRCURI_DESTSUFFIX] we require this variable in our go recipes. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Bruce Ashfield
|
258742feb5 |
moby: adapt SRC_URI to include destsuffix=${GO_SRCURI_DESTSUFFIX}
As of commit cc4ec43a2b657fb4c58429ab14f1edc2473c1327 [go: Drop fork of unpack code, mandate GO_SRCURI_DESTSUFFIX] we require this variable in our go recipes. We also adjust our paths to the new source location and drop references to WORKDIR. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Bruce Ashfield
|
f12df6ce27 |
runc-docker: adapt SRC_URI to include destsuffix=${GO_SRCURI_DESTSUFFIX}
As of commit cc4ec43a2b657fb4c58429ab14f1edc2473c1327 [go: Drop fork of unpack code, mandate GO_SRCURI_DESTSUFFIX] we require this variable in our go recipes. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |