1195 Commits

Author	SHA1	Message	Date
Bruce Ashfield	2cf563716f	podman-compose: update to v1.2.0 -tip ... Bumping podman-compose to version v1.2.0-29-g0866492, which comprises the following commits: 8505009 Support python direct call _parse_args or run 9fe3038 tests/integration: Automate 'build_fail' manual test 0f8348b tests/integration: Automate 'build' manual test Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-07-16 14:26:41 +00:00
Bruce Ashfield	ac6a273778	podman: update to v5.2.0-rc1 ... Bumping libpod to version v5.2.0-rc1-2-g72fd507205, which comprises the following commits: 59696341b5 Bump to v5.2.0-dev 973e865422 Bump to v5.2.0-rc1 eb750f61f6 Vendor in latest containers(common, storage,image, buildah) b08b630c84 test: drop unmount for overlay e16e528f39 test: gracefully terminate server fbc4768a00 libpod: shutdown Stop waits for handlers completion 6832a35f65 libpod: cleanup store at shutdown 54fce37968 Add NetworkAlias= support to quadlet 317a88ee4e cmd: call shutdown handler stop function 3280da0500 fix race conditions in start/attach logic 04fb77efe2 swagger: exlude new docker network types f90bd48859 vendor: bump c/storage e24367aa14 update to docker 27 b1e535b911 contrib: use a distinct --pull-option= for each flag 02af4f8bd6 Update warning message when using external compose provider 7c775a3f4c Update module github.com/cyphar/filepath-securejoin to v0.3.0 830e550073 Ignore result of EvalSymlinks on ENOENT 926547f7d3 test/upgrade: fix tests when netavark uses nftables 5856adb9f8 test/system: fix network reload test with nftables c4b2015e3a test/e2e: rework some --expose tests 9945981afb test: remove publish tests from e2e 43f6173cc6 CI: test nftables driver on fedora 07b69943a4 CI: use local registry, part 3 of 3: for developers dd1bcabae9 CI: use local registry, part 2 of 3: fix tests 2e8c074234 CI: use local registry, part 1 of 3: setup d4c0e7ecbd CI: test composefs on rawhide 176630b5db chore(deps): update module google.golang.org/grpc to v1.64.1 [security] 4487f17a47 chore(deps): update dependency setuptools to ~=70.3.0 bd71b75de4 Improve container filenname ambiguity. 4336c5a4f5 containers/attach: Note bug around goroutine leak 1dd8a35b2f Drop minikube CI test 6f6e0e7126 add libkrun test docs 766955fc6d fix(deps): update module tags.cncf.io/container-device-interface to v0.8.0 4b7aaafb2d cirrus: check for header files in source code check 336c45f68e pkg/machine/e2e: run debug command only for macos c819c7a973 create runtime's worker queue before queuing any job 34ba26ec52 test/system: fix pasta host.containers.internal test 81250cc5a9 Visual Studio BuildTools as a MinGW alternative a2c83cb0fd SetupRootless(): only reexec when needed 3350cd3eed pkg/rootless: simplify reexec for container code 049942db04 cirrus: add missing test/tools to danger files 1d9ac9a203 fix(deps): update module golang.org/x/tools to v0.23.0 e2ff5d4e5d Windows Installer: switch to wix5 f90060bff3 fix(deps): update module golang.org/x/net to v0.27.0 5e3d821814 pkg/machine/e2e: print tests timings at the end 527c0f0bfa pkg/machine/e2e: run debug commands after init ada4e1a8c1 pkg/machine/e2e: improve timeout handling 62956ac192 libpod: first delete container then cidfile ea86582f6c fix(deps): update module golang.org/x/term to v0.22.0 a181b7bc61 System test fixes 55ad0d6e0e cirrus.yml: automatic skips based on source 2c2da039de fix(deps): update module github.com/containers/ocicrypt to v1.2.0 d00e68e550 podman events: fix error race b6f151ad1c chore(deps): update dependency setuptools to ~=70.2.0 1c704157c2 fix(deps): update module github.com/gorilla/schema to v1.4.1 [security] 5c41eb6df8 Update CI VM images 3c0176b2d0 pkg/machine/e2e: fix broken cleanup f84f4a9cce pkg/machine/e2e: use tmp file for connections fad1f757cc test/system: fix podman --image-volume to allow tmpfs storage e810b340ef CI: mount tmpfs for container storage 9814ed40c7 docs: --network remove missing leading sentence 83863a6863 specgen: parse devices even with privileged set 5e156c424f vendor: update c/storage 22b57d3230 feat(quadlet): log option handling 786ea01a64 Error when machine memory exceeds system memory 0d0418a5bf machine: Always use --log-file with gvproxy c9e3458c99 CI: Build-Each-Commit test: run only on PRs d2ca2058c6 Small fixes for testing libkrun 069eace84b Podman machine resets all providers e58e715583 Clearly indicate names w/ URLencoded duplicates 926e6dd0aa [skip-ci] Packit: split rhel and centos-stream jobs fdb736d282 apple virtiofs: fix racy mount setup 67df6d60c3 cirrus: fix broken macos artifacts URL 6db8ff7f7b libpod/container_top_linux.c: fix missing header 3703cbf1d7 refactor(build): improve err when file specified by -f does not exist 905e7ae070 Minor: Remove unhelpful comment 541cdaa441 Update module github.com/openshift/imagebuilder to v1.2.11 439fe90208 Minor: Rename the OSX Cross task 02b922ebfc [skip-ci] Remove conditionals from changelog 65ed96585d podman top: join the container userns 6c75a10875 Run linting in parallel with building 7ff4bbae26 Fix missing Makefile target dependency a3d5842746 build API: accept platform comma separated 180cc6f863 [skip-ci] RPM: create podman-machine subpackage de58c5f292 ExitWithError() - more upgrades from Exit() a7415c9316 test/e2e: remove podman system service tests a0b2b0d34c cirrus: reduce int tests timeout 8f2d403cd1 cirrus: remove redundant skip logic 7562f4ccdb pkg/machine/apple: machine stop timeout 1a6a200403 CI: logformatter: link to correct PR base d1bfc6d8d0 Update module github.com/crc-org/crc/v2 to v2.38.0 f50734636c ExitWithError(): continued 31888f23aa test/system: Add test steps for journald log check in quadlet def182d396 restore: fix missing network setup a158eae7ff podman run use pod userns even with --pod-id-file 5815195528 macos-installer: bundle krunkit e404976d1b remote API: fix pod top error reporting 29ecf5984c libpod API: return proper error status code for pod start 945226a844 fix #22233 5d009715f6 added check for `registry.IsRemote()`. and correct error message. e4f64f91fe fix #20686 4dc98e3a5a pkg/machine/e2e: Remove unnecessary copy of machine image. 49eb5af301 libpod: intermediate mount if UID not mapped into the userns 08a8429459 libpod: avoid chowning the rundir to root in the userns c81f075f43 libpod: do not chmod bind mounts 094bc673ef libpod: unlock the thread if possible d53fee511f CI Cleanup: Remove cgroups v1 support d810f4187e ExitWithError() - more upgrades from Exit() 4b3890ccac remote: fix incorrect CONTAINER_CONNECTION parsing 7d22f04f56 container: pass KillSignal and StopTimeout to the systemd scope e48f3137c0 libpod: fix comment 8be9ec7216 e2e: test container restore in pod by name c22ae53d31 docs: Adds all PushImage supported paramters to openapi docs. 3f785e8735 systests: kube: bump up a timeout f134ab77bc cirrus.yml: add CI:ALL mode to force all tests d9183f0587 cirrus.yml: implement skips based on source changes 2f680eb4b5 CI VMs: bump 7dc288dbed restore: fix container restore into pod 6dd9abf9ec sqlite_state: Fix RewriteVolumeConfig 83549ba11f chore(deps): update dependency setuptools to ~=70.1.0 91a5c0de2a Quadlet - use specifier for unescaped values for templated container name 0eaec1a2e9 cirrus: check for system test leaks in nightly 4e0cd49148 test/system: check for leaks in teardown suite 81c90f51c2 test/system: speed up basic_{setup,teardown}() a2352fa3ea test/system: fix up many tests that do not cleanup e9c6cd1559 test/system: fix podman --authfile=nonexistent-path f611ac9304 Update module github.com/containernetworking/plugins to v1.5.1 043ce618bc Update module github.com/checkpoint-restore/checkpointctl to v1.2.1 f4aa71e730 Update module github.com/spf13/cobra to v1.8.1 0627fce798 Update module github.com/gorilla/schema to v1.4.0 5c1e5cd026 pkg/machine/wsl: force terminate wsl instance bd906cb314 pkg/machine/wsl: wrap command errors dca94be028 [CI:DOCS] Quadlet - add note about relative path resolution c20767120f CI: do not install python packages at runtime 54edf3d8ee Release workflow: Include candidate descriptor 19989380b8 Minor: Fix indentation in GHA release workflow 82973c38e4 GHA: Send release notification mail ad56dc7e2b GHA: Validate release version number 64091777fe Remove references to --pull=true and --pull=false 267d838e38 ExitWithError, continued 730a215025 podman: add new hidden flag --pull-option 5a4416be08 [CI:DOCS] Fix typos in podman-build 8fececcdb9 infra: mark storageSet when imagestore is changed 18c7a55ccd [CI:DOCS] Add jnovy as reviewer and approver 5b24d1b48c fix(deps): update module google.golang.org/protobuf to v1.34.2 0c587f0246 refactor(machine,wsl): improve operations of Windows API ad8fc6a74b --squash --layers=false should be allowed 858b3b7def fix(deps): update module github.com/checkpoint-restore/checkpointctl to v1.2.0 fa4f11facc update golangci-lint to v1.59.1 3825e73120 Rename master to main in CONTRIBUTING.md cec6859369 podman 5, pasta and inter-container networking a9de888a15 libpod: do not resuse networking on start 4b29c9dd73 machine/linux: Switch to virtiofs by default bf541c6740 machine/linux: Support virtiofs mounts (retain 9p default) 406f130590 machine/linux: Use memory-backend-memfd by default f317eb29ab ExitWithError() - continued 550cb07fc0 Enable libkrun provider to open a debug console dcec81e694 Add new targets on Windows makefile (winmake.ps1) 5b23a2e1c7 fix(deps): update module github.com/docker/docker to v26.1.4+incompatible 2334a7ea6c fix(deps): update module github.com/crc-org/crc/v2 to v2.37.1 f4b14c11ef fix(deps): update module golang.org/x/tools to v0.22.0 8cc9bb1842 fix(deps): update module golang.org/x/net to v0.26.0 ffc8522646 libpod: fix 'podman kube generate' on FreeBSD df0c2e5d03 fix(deps): update module golang.org/x/sys to v0.21.0 e8ea1e7632 libpod: do not leak systemd hc startup unit timer 15a4e1dffd vendor latest c/common 7c5c60bc39 pkg/rootless: set _CONTAINERS_USERNS_CONFIGURED correctly 80ed85dc17 run bats -T, to profile timing hogs 350dfabf66 test/system: speed up podman ps --external 8fa1ffbbec test/system: speed up podman network connect/disconnect 8640ce998c test/system: speed up podman network reload 609146fb75 test/system: speed up quadlet - pod simple 7f3bb2d238 test/system: speed up podman parallel build should not race 8852614792 test/system: speed up podman cp dir from host to container 8d3f65b026 test/system: speed up podman build - workdir, cmd, env, label 471e001c7f test/system: speed up podman --log-level recognizes log levels 26bdb5d110 test/system: remove obsolete debug in net connect/disconnect test c466377013 test/system: speed up quadlet - basic 6b021dd4ba test/system: speed up user namespace preserved root ownership 2e70d4201f System tests: add `podman system check` tests fec58a4571 Add `podman system check` for checking storage consistency f18298181b fix(deps): update module github.com/crc-org/crc/v2 to v2.37.0 7243c7109c fix(libpod): add newline character to the end of container's hostname file 6e4d7c7159 fix(deps): update module github.com/openshift/imagebuilder to v1.2.10 e8514bde85 fix(deps): update github.com/containers/image/v5 digest to aa93504 af7bd67d4e Fix 5.1 release note re: runlabel 164573dc34 test/e2e: use local skopeo not image b9b60f14b4 fix(deps): update golang.org/x/exp digest to fd00a4e e4123026b5 [CI:DOCS] Add contrib/podmanimage/stable path back in repo b146f9126a chore(deps): update dependency requests to ~=2.32.3 dffac6ecb1 fix(deps): update github.com/containers/image/v5 digest to 2343e81 900e29549a libpod: do not move podman with --cgroups=disabled 12f634edf0 Update release notes on Main to v5.1.0 5dc1738c05 test: look at the file base name 6243f5cebe tests: simplify expected output 7552735fa9 Sigh, new VMs again 4adb5cbbff Fail earlier when no containers exist in stats fb4ddf86cc Add Hyper-V option in windows installer 4ece83bdf9 libpod: cleanup default cache on system reset aa08552bf6 vendor: update c/image ad661b5b31 test/system: speed up kube generate tmpfs on /tmp bff0697de8 test/system: speed up podman kube play tests 67356a71b3 test/system: speed up podman shell completion test 01642c64ea test/system: simplify test signal handling in containers 6fa064f991 test/system: speed up podman container rm ... 37120bbe80 test/system: speed up podman ps - basic tests 4f3c691087 test/system: speed up read-only from containers.conf edf6f1814e test/system: speed up podman logs - multi ... fe05e25edf test/system: speed up podman run --name 1ae05473c1 Debian: switch to crun 1093ebb72b test/system: speed up podman generate systemd - envar 15606148e5 test/system: speed up podman-kube@.service template 42f43fb3a3 test/system: speed up kube play healthcheck initialDelaySeconds 9e321aafda test/system: speed up exit-code propagation test 94ba2cf1a1 test/system: speed up "podman run --timeout" 82bffb9c50 test/system: fix slow kube play --wait with siginterrupt 7ce3c6bf1e undo auto-formatting 9a7ffaa077 test/system: speed up podman events tests 9f823ecb25 Quadlet: Add support for .build files 9de1d4f653 test/system: speed up "podman auto-update using systemd" a09152ab28 test/system: remove podman wait test 7f567a4e51 tests: disable tests affected by a race condition 2b43f62233 update golangci-lint to v1.59.0 6dcde80999 kubernetes_support.md: Mark volumeMounts.subPath as supported b45364254f working name of pod on start and stop c5597cb12c fix(deps): update module github.com/onsi/ginkgo/v2 to v2.19.0 f8cc1b4807 Bump Buildah to v1.36.0 661e9ee804 fix(deps): update module github.com/burntsushi/toml to v1.4.0 9c92bc64a7 fix typo in Tutorials.rst 74e8f98772 Mac PM test: Require pre-installed rosetta db3abd0d28 test/e2e: fix new error message 23c830704d Add configuration for podmansh 4fd425429b Update containers/common to latest main 046c0e5fc2 Only stop chowning volumes once they're not empty d094a9f18e podman: fix --sdnotify=healthy with --rm e166f6bfe0 libpod: wait another interval for healthcheck ad1d3f8fc7 quadlet: Add a network requirement on .image units d418391ce6 test, pasta: Ignore deprecated addresses in tests 18557659e4 [CI:DOCS] performance: update network docs 08507f3ffe fix(deps): update module github.com/onsi/ginkgo/v2 to v2.18.0 93ef340071 CI: disable minikube task 8f8dfb971f [CI:DOCS] Fix windows action trigger 1766a1a24b chore(deps): update dependency setuptools to v70 3ab9e864f6 Check AppleHypervisor before accessing it e590cced06 fix(deps): update module github.com/containernetworking/plugins to v1.5.0 d9d0840a4d [CI:DOCS] Update dependency golangci/golangci-lint to v1.58.2 63df724a40 add podman-clean-transient.service service to rootless 9a8c3433c1 [CI:DOCS] Update podman network docs fb2ab832a7 fix incorrect host.containers.internal entry for rootless bridge mode 54ce5c6af1 vendor latest c/common main fe7cc67ef4 Add Rosetta support for Apple Silicon mac ad297b1823 bump main to 5.2.0-dev 8afa06ee89 Use a defined constant instead of a hard-coded magic value 47f01e85c5 cirrus: use faster VM's for integration tests 943ddfb0fe fix(deps): update github.com/containers/gvisor-tap-vsock digest to 01a1a0c 4b0ae78e00 [CI:DOCS] Fix Mac pkg link 061bcc06ea test: remove test_podman* scripts cb905f59ea test/system: fix documentation 6408a05927 Return StatusNotFound when multiple volumes matching occurs 35375e0af8 container_api: do not wait for healtchecks if stopped b06c58b4a5 libpod: wait for healthy on main thread bcb7edfded remote API: restore v4 payload in container inspect 6c78a72995 Remove duplicate call 164aef814e fix(deps): update module github.com/onsi/ginkgo/v2 to v2.17.3 590fec7a78 Change tmpDir for macOS 120660e239 fix: close resource file Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-07-16 14:07:08 +00:00
Bruce Ashfield	5c7becd086	oci-runtime-spec: update to v1.2.0 ... Bumping runtime-spec to version v1.2.0-17-g7017384, which comprises the following commits: 119ae42 Add CPU affinity to executed processes 2149fb5 config-linux: describe the format of cpus and mems c6af124 ci: remove redundunt actions d4aa6d8 chore: format JSON file `make -C schema fmt` b983fbf CODEOWNERS: remove vbatts bf698d0 MAINTAINERS: move vbatts to EMERITUS 12b653d Update golangci-lint to v1.56.1 in CI 8547911 Add Go v1.21 and v1.22 to GitHub Actions CI matrix 1a729af Update GitHub Actions packages to resolve warnings in CI 65cd1f8 Back to +dev 36852b0 version: release v1.2.0 021ba94 config.md: allow empty mappings for [r]idmap 5e98fec features: add potentiallyUnsafeConfigAnnotations cabeea7 specs-go: mark LinuxMemory.Kernel as deprecated 4005c81 specs-go: add missing deprecation comment for Hooks.Prestart 2f6b090 config: improve bind mount and propagation doc 0ec4e6b fix link to hooks in features 6ffddf6 mount: Allow relative mount destinations on Linux f329913 features-linux: Expose idmap information 7b8eb69 config: add reference to mount_setattr(2) for idmapped mounts 2547bb0 config: add idmap and ridmap mount options 3f552ce version: release v1.1.0+dev 0625254 version: release v1.1.0 d56ba70 ChangeLog: squash v1.1.0-rc.1...v1.1.0 5430e36 ChangeLog: Document changes since v1.1.0-rc.3 2bd22fa features.md: add a note to avoid confusion about annotations 5612d21 Remove outdated meeting.ics 085728a README.md: update chat information 8b4cadd version: v1.1.0-rc.3+dev ae35e39 version: release v1.1.0-rc.3 d8be1e3 ChangeLog: Document changes since v1.1.0-rc.2 1beaf68 CODEOWNER: Add Toru Komatsu(@utam0) to sync with MAINTAINERS fccfb09 config: add support for org.opencontainers.image annotations Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-07-16 14:02:22 +00:00
Bruce Ashfield	9aa6ae98f2	oci-image-spec: update to v1.1.0 latest ... Bumping image-spec to version v1.1.0-25-g39ab2d5, which comprises the following commits: a977bd3 Remove validation warnings to stdout 4bbdd7f Switch jsonschema validation libraries 535d657 Fix a typo in the annotations spec 89fee07 MAINTAINERS: move jonboulle to EMERITUS f17d647 CODEOWNERS: remove vbatts 818209a MAINTAINERS: move vbatts to EMERITUS 652ec7c Add note about `ImageID` to the `config` section of `manifest.md` 2d95dde Reformat "Platform Variants", especially to add amd64, ppc64le, riscv64 e191267 Update Go versions in release scripts 4da0cfc Update GitHub Actions packages to resolve warnings in CI a32e6c3 Pin golangci-lint for Go v1.20 8baa69b media-types: Fix broken links 0a41c19 version: bump back to +dev e7f7c0c version: release v1.1.0 d0f90e6 Clarify that subject references a separate DAG 8b1e951 version: bump back to +dev 6c2b5fa version: release v1.1.0-rc6 53d9855 new section for projects no longer maintained b391bc0 fix: SPDX licenses URL dd66b54 Test older versions of Go with toolchain=local 93f6e65 Makefile: remove stray trailing space (#1126) d881fa8 deps: remove deprecated github.com/pkg/errors (#1125) 072574d add ORAS to implementations.md 9954739 specs-go: group MediaTypes 344b098 fix markdown table formatting c7a064f Update supported Go range to 1.19 - 1.21 f0ef80e version: bump back to +dev 1e54f01 version: release v1.1.0-rc5 061cba3 Fix golangci-lint install on older versions of Go a2a5750 Add step to update website after a release 0c1622e Add `riscv64` arch to `check{Architecture|Platform}` e6a75e6 Provide a decision tree for artifacts 9ac8f92 Quote lint-md wildcard expression a6af2b4 Add a markdown linter and fix linting issues af9c838 OCI has a distribution-spec 37bac87 Create artifacts guidance ddf2dfd chore(descriptor.md): correct canonicalization reference d36ccf1 MediaType is required in the descriptor f6c60b5 Clean up the markdown in considerations da8994a Cleanup broken links and markdown spacing 56877ad Remove deprecated golangci lint checks b29a06c Hacking markdown and Makefile cleanup 73aca56 Cleanup markdown in governance fd95ded Fix label schema link aed07a8 Test subject field in index 8620a49 version: bump HEAD back to +dev 82e8329 version: bump for release of v1.1.0-rc.4 988df0a specs-go: remove artifact prefixed annotations a845c7a image-index: add artifactType to specs and schema 73f386c Add constants for "index.json" and "blobs" 25fc553 Switch from scratch to empty 749ea9a Add artifactType to image index 32036d8 Apply version change from #1050 e13840d Add language from artifacttype field to forbid allowlists of media types 77efc6e spec: clarify descriptor, align with de facto artifact usage c6854a6 image-index: add the `subject` field Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-07-16 14:00:50 +00:00
Bruce Ashfield	4b7ae4b6e9	netavark: update to v1.11.0 ... Bumping netavark to version v1.11.0-34-ge182147, which comprises the following commits: ab4f101 Release v1.11.0 8d63716 Update release notes for 1.11.0 8c28d20 update netlink-packet-route to 0.20.0 46e4559 run cargo update 38d0ab1 fix: remove extra / in make install and uninstall 4fb2bd9 chore(deps): update dependency containers/automation_images to v20240529 3ec4fd7 fix(deps): update rust crate nix to 0.29.0 e87aae4 fix(deps): update rust crate nispor to 1.2.19 ecfae2c fix(deps): update rust crate anyhow to 1.0.86 6f445a5 fix(deps): update rust crate anyhow to 1.0.85 e5514d1 [skip-ci] Packit: do not create dup jobs on podman-next f27cd29 fix(deps): update rust crate anyhow to 1.0.84 abdd8ec [skip-ci] RPM: use default __cargo macro across all envs c29c09c [skip-ci] RPM: switch default firewall to nftables on EL10+ 79bdee1 chore(deps): update dependency containers/automation_images to v20240513 b161e75 Add conditional compilation of default firewall driver 7f69bae fix(deps): update rust crate serde_json to 1.0.117 87fe59f fix new clippy warnings ed7cfd8 Update CI image to fedora 40 e6c6d99 fix ncat sctp tests ad5adfc fix(deps): update rust crate anyhow to 1.0.83 b04b3de build(deps): bump h2 from 0.3.25 to 0.3.26 da57e62 [skip-ci] Packit: distinct `-rhel` packages value 5e1484c [skip-ci] Packit: enable c10s downstream sync 4233d47 fix(deps): update rust crate libc to 0.2.154 42c6735 fix(deps): update rust crate ipnet to 2.9.0 5869654 fix(deps): update rust crate tower to 0.4.13 7c575c5 fix(deps): update rust crate tokio-stream to 0.1.15 93b8c98 fix(deps): update rust crate prost to 0.12.4 8242916 fix(deps): update rust crate iptables to 0.5.1 41c3281 [skip-ci] Packit: remove el8 jobs 16de016 fix(deps): update rust crate anyhow to 1.0.82 8f5cbf3 fix(deps): update rust crate serde to 1.0.199 0e03c7c Add suffix to Aardvark internal network filenames 9a73a52 fix port forward with strict RPF and multi networks 6e19894 renovate: stop rebasing PRs automatically f2f137f chore(deps): update rust crate chrono to 0.4.38 ded8d36 fix(deps): update rust crate serde_json to 1.0.116 0ce4586 fix(deps): update rust crate netlink-sys to 0.8.6 055b37e nftables: only dump netavark table rules 42c634f update nftables to 0.4 b2bcf47 fix aardvark-dns netns check c309491 fix(deps): update rust crate tokio to 1.37 1df8633 fix(deps): update rust crate netlink-packet-route to 0.19.0 4846563 Update to nix-0.28.0 e506776 fix(deps): update rust crate mozim to 0.2.3 a76f3d9 fix(deps): update rust crate nispor to 1.2.18 829b2db Update chrono cae2d5e fix(deps): update rust crate serde_json to 1.0.115 92bd069 build(deps): bump mio from 0.8.9 to 0.8.11 1e10e01 [skip-ci] rpm: aardvark-dns is a hard dep across the board 131c28c Update Rust crate env_logger to 0.11.3 370722f Update Rust crate serde to 1.0.197 6288762 Update Rust crate tempfile to 3.10.1 6d67358 Update Rust crate log to 0.4.21 943cd88 Update Rust crate zbus to 3.15.2 1a5850a Update Rust crate serde_json to 1.0.114 fe40711 Update Rust crate env_logger to 0.11.2 1efb4e5 Update Rust crate chrono to 0.4.34 5601e0a Update Rust crate tonic-build to 0.11 09ccedc Update Rust crate tonic to 0.11 bba73d6 fix netavark update to not start a new aardvark-dns 37d6f55 Update Rust crate tempfile to 3.10.0 8c2c8c6 Update Rust crate zbus to 3.15.0 dd1a057 Update Rust crate tokio to 1.36 b6be4de Update Rust crate chrono to 0.4.33 45f1581 Do not perform network namespace detection on AV update 6c69f60 [CI:BUILD] Packit/rpm: fix aardvark-dns handling 733a785 Update Rust crate serde_json to 1.0.113 6786828 Update Rust crate serde_json to 1.0.112 c5a23fc Update Rust crate env_logger to 0.11.1 d8143a6 update README with nftables support c5acdec Bump to v1.11.0-dev 468f885 perf-netavark: accept fw driver as argument 61a990f perf-netavark: fix missing --config arg Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-07-16 13:59:25 +00:00
Bruce Ashfield	485f225bb7	nerdctl: update to v2.0.0-rc.0 ... Bumping nerdctl to version v2.0.0-rc.0-79-gd273fd20, which comprises the following commits: 6d97c6e9 build(deps): bump github.com/containerd/go-cni from 1.1.9 to 1.1.10 dd52560f CI: update Ubuntu (24.04) ae277688 feat: support for --sig-proxy in run 6c1e9618 build(deps): bump github.com/containernetworking/cni from 1.2.1 to 1.2.2 c493afcd pkg/defaults: add defaults_darwin.go b997648a Fix check for empty $HOME and $XDG_RUNTIME_DIR 8a5137b0 build(deps): bump docker/build-push-action from 6.0.2 to 6.1.0 02d5329a build(deps): bump docker/build-push-action from 6.0.1 to 6.0.2 c2fa1ed9 update soci-snapshotter (0.6.1) 820f7404 update Nydus (2.2.5) 480fc999 update gotestsum (1.12.0) 6cc63162 update Kubo (0.29.0) f16b79c2 CI: cross: do not use Go 1.21 for nerdctl-full deps f35e4251 update golangci-lint (1.59.1) 85a8bf86 update BuildKit (0.14.1) 465365a0 update CNI plugins (1.5.1) bccfdc82 update containerd (2.0.0-rc.3) ead5ce6c Volume QA: remove (fixes and tests) a28dbf29 Dockerfile: use Go 1.22 for runc 97552985 Bump compose-go to v2 e13ff68b Remove duplicate function 515c3ade Add HOSTNAME environment variable 0c300dca fix: close the hosts file 15a8a8dc Aftermath docker migration: fix racyness in tests 5dd36b60 Implement network namespacing 58f7720e build(deps): bump docker/build-push-action from 6.0.0 to 6.0.1 6d0c8f87 Replace SetEnv invocation by base.Env to unlock parallelization c0e4e92c Add mechanism to prevent Cmd from executing multiple times ac4830df MAINTAINERS: move Ye Sijun (junnplus) from a COMMITTER to a EMERITUS 2606265d build(deps): bump github.com/containernetworking/cni from 1.2.0 to 1.2.1 34d7c310 build(deps): bump docker/build-push-action from 5.4.0 to 6.0.0 0b201417 build(deps): bump github.com/containernetworking/plugins 9a76ba10 Disable build and publish on PR for purely md changes eace9da1 Add doc note about --ip and bridge e789f2cd Docker v26 compatibility & test fixes b63f4d6b Add --pull option to build command 091de746 update containerd (1.7.18), runc (1.1.13) a3195b27 MAINTAINERS: promote Kay Yan (yankay) from a REVIEWER to a COMMITTER f4a7e0c8 Restore logger output 37098ac6 build(deps): bump github.com/spf13/cobra from 1.8.0 to 1.8.1 14d8b42a build(deps): bump github.com/klauspost/compress from 1.17.8 to 1.17.9 4f8a70b6 build(deps): bump actions/checkout from 4.1.6 to 4.1.7 f942d2c5 test-integration-docker-compatibility: install Docker v24 972a9b10 build(deps): bump github.com/containerd/platforms from 0.2.0 to 0.2.1 37c0cb67 Safer / faster convert zstd b20070d2 Revamped testregistry and login tests edb8c19d build(deps): bump docker/build-push-action from 5.3.0 to 5.4.0 dc237a35 build(deps): bump github.com/Microsoft/hcsshim from 0.12.3 to 0.12.4 80731ff3 Caching and list optimizations b0c23492 MAINTAINERS: move Hanchin Hsieh (yuchanns) from a REVIEWER to a EMERITUS e021a92a MAINTAINERS: promote Jin Dong (djdongjin) from a REVIEWER to a COMMITTER 4907e59c fix container list with json format b94caffe build(deps): bump github.com/docker/cli 47b45261 build(deps): bump github.com/containerd/containerd from 1.7.17 to 1.7.18 530b0913 build(deps): bump github.com/docker/docker 2240323d build(deps): bump golang.org/x/net from 0.25.0 to 0.26.0 5b8d5a30 build(deps): bump golang.org/x/crypto from 0.23.0 to 0.24.0 7675d267 update imgcrypt (1.1.11) 875a962e Remove spurious debugging leftover 11802cf3 Fix wrong package import 6917840b CI: .md files changes should not trigger tests f491e83f Disabling test on unsupported platforms eb001fad Image inspect rework 4d4fd5fb State how to run a single integration test 099ef7bd Image history enhancements 3d875395 build(deps): bump docker/login-action from 3.1.0 to 3.2.0 838d5a11 build(deps): bump github.com/containerd/imgcrypt from 1.1.10 to 1.1.11 eb5d4426 update slirp4netns (1.3.1) 1ec6764f update containerd (1.7.17) 03bee846 update CNI plugins (1.5.0) 4b0b69d3 go.mod: github.com/containernetworking/plugins v1.5.0 949dc8aa build(deps): bump github.com/awslabs/soci-snapshotter 11fcb6b0 Do not obtain task info when it is not necessary in commit command 713851de add retry on test cf5073b4 support image label 0988c9b8 chore: remove impossible error check 8b34abdf Implement container inspect --size, SizeRootFs and SizeRw 0d470e7e Implementing StartedAt for containers 93b13817 build(deps): bump github.com/containerd/nydus-snapshotter 5f8c0c9d build(deps): bump github.com/docker/cli 80bc6835 build(deps): bump actions/checkout from 4.1.5 to 4.1.6 35a90ef6 build(deps): bump github.com/docker/docker 64af5a6d build(deps): bump github.com/containerd/containerd from 1.7.16 to 1.7.17 480eb6ee Support DHCP IPAM opts and set the hostname 274b8a6e Fix cni plugins sha after spurious 1.4.1 re-release cc60f5d5 build(deps): bump actions/checkout from 4.1.4 to 4.1.5 b24582bc build(deps): bump github.com/fatih/color from 1.16.0 to 1.17.0 6b10870c Re-acquire name in onStartContainer (see #2992) c60adf29 Add missing alias for container rm/remove fac3d35e build(deps): bump github.com/docker/cli c5d1b532 Allow directories for --device and in-container path 762fe91c Fix some /etc/ file permissions (see #2684) 926b88f3 build(deps): bump github.com/containerd/platforms from 0.1.1 to 0.2.0 41bf4414 build(deps): bump github.com/docker/docker 516503a0 Fix markdown link c17badbc build(deps): bump golangci/golangci-lint-action from 5.1.0 to 6.0.1 83382d5b build(deps): bump golang.org/x/net from 0.24.0 to 0.25.0 4b9de97d inspect: show mounts info from CRI/ctr containers d197e5b7 build(deps): bump github.com/docker/cli 227505ce build(deps): bump github.com/docker/docker c6c4a7bd build(deps): bump github.com/pelletier/go-toml/v2 from 2.2.1 to 2.2.2 618639b3 build(deps): bump github.com/cyphar/filepath-securejoin 4e615922 CI: use Go 1.22 49993c5b build(deps): bump golangci/golangci-lint-action from 5.0.0 to 5.1.0 ad607362 build(deps): bump github.com/containerd/nydus-snapshotter 2c1d745b build(deps): bump github.com/rootless-containers/rootlesskit/v2 54b29564 fix: set mountpoint RW and Propagation in internal mount label ff6c1c49 skip Kubo 0.28.0 bb6f9e66 update RootlessKit (2.1.0) f34b02ad update slirp4netns (1.3.0) e9535e52 update BuildKit (0.13.2) 47053926 update containerd (1.7.16) a4f2ed07 build(deps): bump golangci/golangci-lint-action from 4.0.0 to 5.0.0 bd7fdb37 build(deps): bump github.com/containerd/containerd from 1.7.15 to 1.7.16 93f404c7 fix: error check in the ensureFile func a279dfab build(deps): bump actions/checkout from 4.1.3 to 4.1.4 4f46cf94 build(deps): bump github.com/docker/cli 8765df23 build(deps): bump github.com/docker/docker 6b047d24 build(deps): bump github.com/Microsoft/hcsshim from 0.12.2 to 0.12.3 0439917f build(deps): bump actions/checkout from 4.1.2 to 4.1.3 199edf1a build(deps): bump github.com/Microsoft/go-winio from 0.6.1 to 0.6.2 79897c8b build(deps): bump github.com/docker/cli a40d98d2 build(deps): bump github.com/containernetworking/cni from 1.1.2 to 1.2.0 03fd3c76 build(deps): bump github.com/awslabs/soci-snapshotter 47f272d2 build(deps): bump github.com/pelletier/go-toml/v2 from 2.2.0 to 2.2.1 c1c0fc93 build(deps): bump github.com/fahedouch/go-logrotate from 0.2.0 to 0.2.1 6ffb5466 build(deps): bump github.com/docker/cli dc42456f build(deps): bump github.com/docker/docker d4257170 build(deps): bump github.com/containerd/accelerated-container-image 9b8e1dd3 fix follow tail of rotate log a3fdaafa fix: cleanup volume dir if create volume failed 27b8dd84 build(deps): bump github.com/klauspost/compress from 1.17.7 to 1.17.8 46acf060 build(deps): bump github.com/rootless-containers/bypass4netns b5117a23 Rationalise build constraints for Go 1.19 onwards 5fac99b3 Implement autodetection of Windows buildkitd socket 6e6aa4a9 Enable building on Windows hosts 0d75e34f Remove unused defaults.BuildKitHost 62e031c6 bypass4netns: allow ignoring bind f802ba87 update bypass4netns (0.4.1) 2c446522 build(deps): bump github.com/containerd/accelerated-container-image 2cfff270 update containerd (1.7.15) a1fd53b7 build(deps): bump github.com/containerd/containerd from 1.7.14 to 1.7.15 858fa60e build(deps): bump golang.org/x/sync from 0.6.0 to 0.7.0 6b8a1c63 build(deps): bump golang.org/x/net from 0.23.0 to 0.24.0 af4c470d build(deps): bump golang.org/x/crypto from 0.21.0 to 0.22.0 cc495f2a build(deps): bump golang.org/x/net from 0.22.0 to 0.23.0 fc4c8e78 annotations: add `nerdctl/bypass4netns-ignore-subnets` (`[]string`) f42ab2ff Implement `nerdctl run --annotation` (introduced in Docker v24) 9ba9ddca update BuildKit (0.13.1) 6f83a71d build(deps): bump github.com/Microsoft/hcsshim from 0.12.1 to 0.12.2 da2f576f build(deps): bump github.com/docker/docker 3809ec53 CI: FreeBSD: use Go 1.22 c0d7b734 build(deps): bump github.com/containerd/nydus-snapshotter ea7769fc build(deps): bump github.com/Microsoft/hcsshim from 0.12.0 to 0.12.1 e7608c8b deflake TestImageConvertEStargz c1c7e251 not check return of rmi in pushImageToIPFS 70ee810a pkg/api/types: remove dependencies on nerdctl 8ae661e9 build(deps): bump github.com/pelletier/go-toml/v2 from 2.1.1 to 2.2.0 2122a714 update cosign image to latest release 3b12a202 build(deps): bump docker/build-push-action from 5.2.0 to 5.3.0 1c371393 update imgcrypt (1.1.10) 9d60dbb0 build(deps): bump google.golang.org/protobuf from 1.32.0 to 1.33.0 0f9c8de4 feat(compose_up): add --abort-on-container-exit flag d83f9f13 build(deps): bump github.com/containerd/imgcrypt from 1.1.9 to 1.1.10 5e785705 build(deps): bump github.com/containerd/accelerated-container-image 8c75ca70 build(deps): bump docker/login-action from 3.0.0 to 3.1.0 ee2f8d64 update Kubo (0.27.0) 4917c16a update RootlessKit (2.0.2) 4dbac7f8 update CNI plugins (1.4.1) 046bfc06 build(deps): bump github.com/containernetworking/plugins 6958d07c build(deps): bump actions/checkout from 4.1.1 to 4.1.2 0ec5c7e9 refactor: replace os.MkdirTemp with t.TempDir with cleanup 4d9abe27 update containerd (1.7.14),(1.6.30) 533f16b9 CI: update FreeBSD to 14 258362b8 build(deps): bump github.com/containerd/containerd from 1.7.13 to 1.7.14 bc8450e8 feat: add extra contexts to buildctl call #2835 341c60d4 update BuildKit (0.13.0) ca56bc42 build(deps): bump docker/build-push-action from 5.1.0 to 5.2.0 41b669d7 feat: create network cleanup function for kill and stop cmd da007062 build(deps): bump github.com/go-jose/go-jose/v3 from 3.0.1 to 3.0.3 62d013c1 build(deps): bump github.com/rootless-containers/rootlesskit/v2 74e27374 build(deps): bump github.com/Microsoft/hcsshim from 0.11.4 to 0.12.0 26c02362 chore: remove useless error check f853ab85 Enhance default platform comparision for image shareablity #2810 45b86c21 build(deps): bump golang.org/x/net from 0.21.0 to 0.22.0 be006100 build(deps): bump golang.org/x/crypto from 0.20.0 to 0.21.0 f1595262 Use json marshal/unmarshal to copy 3d28dbf6 fix: typos 772d4791 build(deps): bump github.com/containerd/accelerated-container-image d94c8f59 build(deps): bump golang.org/x/crypto from 0.19.0 to 0.20.0 18f29fb0 fix: add onstartcontainer hook d8412eed build(deps): bump github.com/containerd/nydus-snapshotter 261bd97c build(deps): bump github.com/klauspost/compress from 1.17.6 to 1.17.7 41b83493 Rootlesskit Network Design 8d840dae doc: should use master tag for binfmt Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-07-15 20:34:34 +00:00
Bruce Ashfield	bb2f6b880b	lxc: update to v6.0.1 ... Bumping lxc to version v6.0.1, which comprises the following commits: f1be0d814 Release LXC 6.0.1 9fb53cfa1 meson: fix build with -Dtools-multicall=true on NixOS f92aa6066 github: exclude clang & ubuntu-24.04 combination 6a0b1504e lxc/storage/zfs: ignore false-positive use-after-free warning 6ba6c3208 github: properly check apparmor profile changes 8e72b94bd github: start using ubuntu-24.04 f91ce0d8b apparmor: regenerate rules cba7a6746 apparmor: use /{,**} instead of /** e97321ff9 apparmor: regenerate rules 89071ba7b apparmor: fix rule path pattern specification syntax 32c7a157d lxc-local: remove check for template existence before extraction 81a2c8253 lxc-local: fix incorrect path to `templates` file fdeb88655 lxc-local: fix use of `LXC_PATH` before init be7179a08 Update lxc-execute.sgml.in 247f5eed5 Update lxc-{attach,execute}.sgml.in bb23a71af Update lxc-execute.sgml.in f98b7ab53 Update lxc-attach.sgml.in e31ce9753 network: netdev_configure_server_veth: reduce scope of disable_ipv6_fd/path vars bd8d5b747 lxc/network: handle non-existing sysctl <ifname>/disable_ipv6 41aa42e27 github: test the lxc multicall binary builds too 1b3b06d8e meson: fix build on NixOS 3dee5fb88 Release LXC 6.0.0 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-07-15 19:17:46 +00:00
Bruce Ashfield	244d5882c5	kubernetes: update to v1.30.2 ... Bumping kubernetes to version v1.30.2-19-g7e92bb98e30, which comprises the following commits: b5ac4e577a3 Fix pv reclaim failed due to its phase is wrongly updated to the Failed state by kcm 3b5b3a80be1 Mark a test case which sets up a sample-apiserver as serial due to potential conflicts with other test cases which do the same. 95f23fd9637 defaultMaskedPaths must be kept in sync with moby/moby. 50428ed169f gitRepo volume: directory must be max 1 level deep dc7f0cac7df Bump images, dependencies and versions to go 1.22.5 and distroless iptables c1aea3d7bac Fix endpoints status out-of-sync when the pod state changes rapidly a805b38229f fix: skip isPodWorthRequeuing only when SchedulingGates gates the pod 81a15801b68 Clean up the featureGates during the matchSuccessPolicy unit tests 49a2366ddb6 Initialize terminating field in the Job controller unit tests 46f9e4b41f6 Job: Fix a bug that the SuccessCriteriaMet condition is added to the Job with successPolicy even if the JobSuccessPolicy featureGate is disabled 85fad5b874c Update CHANGELOG/CHANGELOG-1.30.md for v1.30.2 39683505b63 Release commit for Kubernetes v1.30.2 47c36d4bbfa Bump images, dependencies and versions to go 1.22.4 and distroless iptables/setcap/debian-base cd73ad187cc update driver installer 654c085cb16 Don't fill in NodeToStatusMap with UnschedulableAndUnresolvable 1ddcf348612 Revert "scheduler: preallocation for NodeToStatusMap" 0df7267723b kubeadm: use the actual configured kubelet healthz address:port 398ab938efc kubectl create cronjobs: Manually set OwnerReferences 42b93b35ba7 add an integration test when nodeAffinity specifies a non-existent node. f73bb17efbf base on allNodes when calculating nextStartNodeIndex a26f2c59e3e Fix printPod panic with spurious container statuses 85fc4758204 Update CHANGELOG/CHANGELOG-1.30.md for v1.30.1 6911225c3f7 Release commit for Kubernetes v1.30.1 3d896724760 Adding the feature gates to fix cost for VAP and webhook matchConditions. b762a187f4a cherry pick #124618 to 1.30 1c8b0f697c5 fix requests tracker concurrency 2956e294c44 fix conflict race in statefulset rest update 7d9b913d106 fix stateful set pod recreation and event spam a58d4f54cf8 fix pods tracking and internal error checking in statefulset tests f20b6672b8e [go] Bump images, dependencies and versions to go 1.22.3 and distroless iptables d8c37e81539 Updated & added visibility to apiserver x509 test certificates expiring this year ad1353499eb Clean up PersistentVolumeLabel admission plugin 42742942f5d scheduler: preallocation for NodeToStatusMap d17cd6ef75c tag service.spec.TrafficDistribution field as alpha d3795353625 tag TrafficDistribution tests to avoid running on clusters without the feature enabled 37e7cbdd3a6 fix(api): make LocalObjectReference.Name and HostAlias.IP required (#124553) 1410806d2af kubeadm: check for available nodes during 'CreateJob' preflight e1594967bbb Idempotent transformers in scheduler & kcm dabc4428f2f kubeadm: fix bug of kubeletconfig not being downloaded on upgrade 7e5e4c3f616 e2e framework: configure Ginkgo logger and klog consistently 6bb6b07b185 e2e node: fix -v support 4d1dd9cd079 Update applyconfig-gen for pacakges where group and dir differ in name 933272d3333 kube_codegen: expose applyconfig-openapi-schema flag for client generation 502d9434a40 Update CHANGELOG/CHANGELOG-1.30.md for v1.30.0 7c48c2bd72b Release commit for Kubernetes v1.30.0 69e332560d0 CHANGELOG: Update directory for v1.27.13 release 128d6cc1462 Add envFrom to serviceaccount admission plugin fb5140f5622 Rename `cluster` to `storage_cluster_id` for apiserver_storage_size_bytes metric d51a005d25a Update CHANGELOG/CHANGELOG-1.30.md for v1.30.0-rc.2 7606cf7b3d7 CHANGELOG: Update directory for v1.30.0-rc.2 release 22140b6a070 Release commit for Kubernetes v1.30.0-rc.2 be4b7176dc1 Fix Abs path validation on Windows (#124084) d19bff9a022 Update publishing-bot rules to Go 1.21.9 1366f1f4470 [go] Bump images, dependencies and versions to go 1.22.2 and distroless iptables 99fac38d286 Update x/net for CVE-2023-45288 f4750e52e66 Update CHANGELOG/CHANGELOG-1.30.md for v1.30.0-rc.1 6673e7a93d8 CHANGELOG: Update directory for v1.30.0-rc.1 release 77aa9c21c29 Release commit for Kubernetes v1.30.0-rc.1 f338ab5f959 svm test: wait after updating CRD to avoid flakes 363fee59e4b fix panic with SIGSEGV in kubeadm certs check-expiration 0add741012c fix test flake caused by not waiting for CRD schema update 02139c91028 Deflake authz config reload test fc428df4914 update setcap/debian-base to bookworm-v1.0.2 06e69e4b099 releng: update publishing bot rules for 1.30 d098af353c6 CHANGELOG: Update directory for v1.30.0-rc.0 release 6a00808f1d7 Release commit for Kubernetes v1.30.0-rc.0 c893c484328 Use the right feature gate when updating uncertain volumes 6f5240b19c6 e2e_node: fix podresources test 9ce994af9fc e2e_node: remove `Dbus` test case 247392271f1 Fix admission error 84750fe52e7 Revert "enhancement(scheduler): share waitingPods among profiles" a67d1dc0102 Revert "Fix flaky test on multi profiles waiting pod" 225749eb68b Undo double run of the TestWatchSemantics test to avoid hitting timeout 4f1c91b24a4 Fix for TestStorageVersionMigrationWithCRD integration test failure f2d4848e49c add stefan as apimachinery tech lead 0130072b053 Serve watch without resourceVersion from cache and introduce a WatchFromStorageWithoutResourceVersion feature gate to allow serving watch from storage. a7f23e46da4 Fix OOMKiller test warnings fc555839d73 Allow installing newer containerd/runc on COS 10b6319e64b fix slow dra unit test 2b56de43e5c register Node/UpdateNodeTaint event to plugins which has Node/Add only, doesn't have Node/UpdateNodeTaint 656cb1028ea CHANGELOG: Update directory for v1.29.3 release e5b497df4fb Add alpha endpoint getStoragemigrationAPIGroup fa97f37fea6 CHANGELOG: Update directory for v1.27.12 release bf38ed0e5b7 CHANGELOG: Update directory for v1.28.8 release 26881132bd0 kubelet: assign Node as an owner for the ResourceSlice 80db011202e remove VolumeAttachment endpoints 55302de991e Promote VolumeAttachment e2e test to Conformance 4048598620d Change the API operation e2e test to conformance test. 045d91d882c Add e2e tests for GA API a0add8d2c75 dra api: NodeResourceModel -> ResourceModel c78812868f5 CHANGELOG: Update directory for v1.26.15 release 0b8e79580eb Fix enabling consistent list from watch cache also works for resourceVersion=0 c44cc9a575f apiserver/storage/cacher: deflake TestGetListNonRecursiveWithConsistentListFromCache f5d945eb43c apiserver/storage/cacher: decrease running time of TestWatchNotHangingOnStartupFailure 8963e73f120 kubelet: fix mixing up runtime classes with runtime handlers 1dc05009fe7 api: NodeStatus: rename RuntimeClasses to RuntimeHandlers 4a776f66ec4 kubelet: silence "unknown runtime class" errors when unsupported 6680700b5dc Add e2e and integration tests for Service.spec.trafficDistribution (#123812) 5a74c8e2202 apiserver/storage/cacher: decrease the running time of tests in the cacher package. 926122c035a apiserver/storage/cacher: decrease of running time of TestEmptyWatchEventCache c9384550cbf CHANGELOG: Update directory for v1.30.0-beta.0 release 4f6212fb0e6 generated: ./hack/update-conformance-yaml.sh 2c2d424b012 make type checking tests non-conformance. 19ae61bab0d innocent-pod should not be evicted due to exceeding requests/limits 7ab1ef644e2 Revert "Implement a field selector for ClusterIP on Services" 3ecbb4dee00 apiserver/storage/cacher: decrease of running time of TestWaitUntilWatchCacheFreshAndForceAllEvents a527cab9fce Fix non-recursive list when consistent list from cache is enabled 727d127e6f6 don´t run openapi spec with ConsistentListFromCache feature gate enabled dc2974c6461 retry policy creation for CRD type checking E2E test 9fcf279e2b9 Fix SetFeatureGateDuringTest handling of Parallel tests 4aed5652ed2 Disable `aws` drivers for `In-tree Volumes` test 21a0dd1d705 dra scheduler: create default claim/class parameters instead of nil fc2134c84cc dra kubelet: fix error log 51c26b7002a fix test flake in TestStructuredAuthenticationConfigReload ea14ccdf13f e2e_node: mount_rro: fix error string comparison 5cc1e562483 e2e_node: mount_rro: add SkipUnlessFeatureGateEnabled(RecursiveReadOnlyMounts) 3ce6c104e21 Support fetching NPD from github releases in standalone mode 56da06b6dd9 Fix the dirname command in macOS does not have a -z option 62ac88b9ea5 Add metrics for authentication config reload b4935d910dc Add dynamic reload support for authentication configuration 13a6dcc21c5 dra kubelet: add StructuredResourceModel to UnprepareResources call d4925ce8f83 e2e: KEP-3857: Recursive Read-only (RRO) mounts c7f52b34f34 kubelet: KEP-3857: Recursive Read-only (RRO) mounts 6f12e1d8e59 kubelet: expose `containerStatuses.volumeMounts` dd0882a83e0 kubelet: expose `node.status.runtimeClasses` 8db07446f19 api: validate RecursiveReadOnlyMounts 8828530fd5b node: dropDisabledFields: recognize RecursiveReadOnlyMounts gate ce1918875f6 pod: dropDisabledFields: recognize RecursiveReadOnlyMounts d940886d0a4 api: KEP-3857: Recursive Read-only (RRO) mounts 0b1a507b002 pkg/features: add RecursiveReadOnlyMounts 76081a10c26 kubelet: RuntimeHandler: add SupportsRecursiveReadOnlyMounts 27f24a62e30 kubelet: change map[string]RuntimeHandler to []RuntimeHandler f2508df279e Job: Use the fake clock in TestTrackJobStatusAndRemoveFinalizers 9161302e7fd feat: implements svm controller 121607e8096 Require email_verified to be used when email is set as username via CEL 79fe37537c3 Adjust the validation to the current state 1163c7ed9c6 Adjust the API comments to the current state ee64b30d05c Check taints as well for control-plane acf6b500eef Follow up fix to the job status update test 91a7708cdce feat: implements Storage Version Migration API in-tree 04ac13b6b76 Keep providing the deprecated AppArmor CRI API for runtimes that haven't migrated 6a361e1f364 dra api: enable new CEL features by faking their version 7f5566ac6f6 dra e2e: enable more tests for usage with structured parameters 251b3859b0b dra scheduler: consider in-flight allocation for resource calculation 2c6246c9066 dra e2e: move ResourceSlice test 0b6a0d686a0 dra api: rename NodeResourceSlice -> ResourceSlice 42ee56f0931 dra api: implement semver attribute value type 234dc1f63d7 dra e2e: run more test scenarios with structured parameters d59676a5453 dra kubelet: publish NodeResourceSlices 5e40afca060 dra testing: add tests for structured parameters 3de376ecf69 dra controller: support structured parameters 6f1ddfcd2e3 kubelet: support structured parameters for preparing resources 4ed2b3eaeb6 scheduler_perf: test DRA with structured parameters d4d5ade7f5b dra: add "named resources" structured parameter model 096e9489050 dra scheduler: support structured parameters 49ee96eed43 pod security test: add user namespaces feature 1f9c271c8c6 PSA: update procmount tests to have hostUsers 23706cb90c8 api validation: validate proc mount against user namespace e216742672a Job: Support for the JobSuccessPolicy (alpha) 7bd78b06e93 Warn on deprecated AppArmor annotation use b1341c87957 Revert portion of the GPU testcase 194009fac9d Add integration test for managedBy and cleanup of finalizers 2867be47b31 followup to allow special characters a92d2a4cea6 noderestriction admission: lock down create of NodeResourceSlice 2e34e187c99 node authorizer: lock down access for NodeResourceSlice 39bbcedbcae dra api: add structured parameters eb1470d60d5 scheduler: fix assume cache with no index 48daa91857a Update publishing-bot rules to Go 1.21.8 30857658e42 Adjust GPU test to work with latest nvidia daemonset ffafb2b9ca9 adds portforward streamtunnel unit tests 758dc535107 Enabled conformance test for VAP which is GAed. df7f5fca27f Don't embed plural exceptions in tools 39e1c9108c0 Support multiple JWT authenticators with structured authn config 2d86cbf2616 Separate feature-gate for AppArmor fields 22068e0cc7b Validate annotation & field match in PodTemplate 06caf32ecd7 Validate localhost profile max length 0eb5f52d06f Rename AppArmor annotation constants with Deprecated 8373f3035ad fix aggregator path filtering to include / 70221e8405e [go] Bump images, dependencies and versions to go 1.22.1 and distroless iptables 6f2842c08c2 Avoid clearing go version in go.work update script c6673d2346c Bump github.com/golang/protobuf v1.5.4, google.golang.org/protobuf v1.33.0 1395c801098 Update Job conformance test to do a legal update 2e465cd6fa0 Remove _tmp from test/images/image-util.sh be7ee821b97 Make verify-vendor use verify::generated 778644154f3 Remove _tmp from verify-openapi-docs-urls 4d6f56d3985 Make vendor-licenses use verify::generated 8a3a299c650 Remove _tmp from pin-dependency 813787489b7 Make verify-openapi-spec use verify::generated e90782bec8e fail LimitedSwap with cgroupv1 5d83282823d Auto updates de506ce7ac9 Promote ValidatingAdmissionPolicy to GA. 6a4e19a4ec9 add no swap as the default option for swap 27df75c577a dra api: fix status updates ec325b328db Match annotations against pod AppArmor field d25b1ded761 PodSecurity check for AppArmor fields 24537a91317 Stop appending AppArmor status to node ready condition 207a965b3ff Update AppArmor e2e tests bf3c8464bae Implement Kubelet AppArmor field handling 289ec02e8b5 Implement version skew strategy b7f620c12b7 Generated code 855bc740239 Adds OWNERS files to client-go streaming dirs 94927afb50c AppArmor API changes 6b03166beda update to inject only the list of excluded resources. 7a57bcea6cd fix e2e test for kubectl interactive delete 646d4642038 e2e_node: use kubelet_exec_t instead of bin_t for kubelet e568a77a931 Support for the Job managedBy field (alpha) (#123273) 5122fe07323 don't watch headless services on kubelet 0595ec79423 implement field selector for clusterIP on services b502aa6f31d Duplicate v1alpha1 AuthenticationConfiguration to v1beta1 290f2a7e1b6 Fix AuthenticationConfiguration docs around nested claims via CEL bc7aa13bf79 Mark StructuredAuthenticationConfiguration feature gate as beta 53d38a31611 node-controller require providerID to initialize a node 3f7d4b787b7 apimachinery/meta/types.go: define InitialEventsAnnotationKey const 221ad9f7c25 storage/cacher: mark the addition of a metric for waitUntilFreshAndBlock as completed 01689d0906e add e2e tests for relaxed validation fa3c1014393 relax validation pod envfrom e56240b2e1b add validation method at the top level 5b072a59a29 Fix flaky test on multi profiles waiting pod 96a16a7bc9f add relaxed env var name function af2dadcb18a Add custom debug profiles on top of static profiles 2bd7f4f8e06 storage e2e: update hostpath and mock images 9ac9fdac8f8 Bump npd from v0.8.13 to v0.8.16 4a5fe2decad Addd negative case for the fix in #123570 ec6fd2befac Add options construct to EndpointSlice NewReconciler for the new trafficDistributionEnabled field b04d1177efb extend deadlines to one minute 3d56ff21fd3 adds comments to tunnelingResponseWriter 33af937b4a5 re-write fallback dialer unit test e8bbb221d36 removes extra upgrade aware proxy logging; returns tunneling connection close error 2443b3fa694 Fix headerInterceptingConn handling 9e154628430 adds return context in RunPortForward() 8b447d8c97e portforward: tunnel spdy through websockets 79b344d85e3 Add authorization webhook duration/count/failopen metrics 1cf4cec449c Test that separation of streams work by using progress notifies 8345ad0bac4 jwt: fail on empty username via CEL expression 606cae9b479 Add new metric servicesCountByTrafficDistribution 05e1eff7933 Prevent conflicts between service account and jwt issuers 57d1b68dc2d Remove deprecated sets.String c4163a9cb84 Add label with access mode to SELinux metrics 31d404b182d Prevent watch cache starvation, by moving its watch to separate RPC and add a SeparateCacheWatchRPC feature flag to disable this behavior eb6abf04623 scheduler_perf: automatically delete created objects 51f86b91249 Change kube-proxy behaviour to consider hints when ServiceTrafficDistribution feature gate is enabled 51a3fa2e6ff Start reconciling on the new field 9513f75089f Add trafficdist package for handling reconciliation of new field 646fd200b85 Run 'make update' 996d11d4e87 Add new field trafficDistribution to Service spec d72448a41c2 cleanup: if triggerValue has a value, fast break 78fb0bae22f wire up discovery url in authenticator 84852ff56f9 Add `DiscoveryURL` to AuthenticationConfiguration c61b2a3975a Check length of instance name before truncating ebcb78df529 promote aggregated discovery conformance tests b33c5a82928 Switch to newer cos-gpu-installer - v2.1.10 968aefd1bf2 Ensure GCP instance names are a max of 63 characters c2ccb921ea0 e2e pod: fail fast on failed pod c134bfe9ebc agnhost/mounttest: add new line to output db115ca929e [kubeadam] do not set authorization-mode in api server when authorization-config is provided 22adf221a14 print nodename 0da5e8137b8 Add `apiserver_authentication_jwt_authenticator_latency_seconds` metric a0215badb8d Change `pushd $d; go ...; popd` to `go -C $d ...` 90e6546c689 Use go.work to auto-find internal modules eb5f31b9e1a Add x-kubernetes-selectable-fields to fields excluded in publish openapi conformance comparisons 6174f199dfb kublet/userns: Add test switching feature gate off/on 4bb508dd303 kubelet/userns: Add unit test 0b69c2bc81d kubelet/userns: Use kubelet maxPods 39c68156766 kubelet/userns: Remove alpha maxPods limitation 4180284dc97 pkg/kubelet/userns: Remove outdated test 4c81e5c9dc6 features: promote UserNamespacesSupport to beta 87a057d4170 KEP-127: kubelet: honor kubelet user mappings 3bada5d4515 test: Bump CUDA images 30256c8909a Promote StructuredAuthorizationConfiguration feature gate to beta 0605a75c5e3 Duplicate v1alpha1 AuthorizationConfiguration to v1beta1 b48b4ebc697 address reviews 1d4be7527f8 increases client-side websocket write deadline to 30 seconds 948d9ca2217 Rely only on `source` cli parameter in conformance/walk 0e9cdf76ad2 Fix discovery v2 conversion registration data race e2b96b25661 Add a header to go.work 467d5d745c2 Get rid of unused API type NodeResources d2051503a3e e2e/service.go: remove same node nodeport test e76fce75666 add authz webhook matchcondition metrics 9633e25579d feat: add csaupgrade option to upgrade subresource 1503997b4f9 Make CBOR roundtrip cases pass through interface{} as well. 3b630ae1af7 test/e2e_node:add more coverage for the kubelet config drop-in dir feature f34782bb927 hack: re-enable protobindings which use k8s.io/api 9a404b590b1 Filter aggregated apiservice gv b40b5f86d8e *: promote KubeletConfigDropInDir feature to beta 8854d360a5d printers: add status to jobs table 462dd326c2e Use v2 types with agg discovery 301e804c3f2 Promote AggregatedDiscovery to GA 0593746f609 Remove test for disabling aggregated discovery dde48918dda promote match conditions e2e tests to conformance 74417b517a0 Tag all feature gates required by a test 99313bea88c kubeadm: remove constants for mirror pod timeout ded6354a8fc kubeadm: add Timeouts struct to v1beta4.UpgradeConfiguration ce8bd8584e0 Configure cpumanager policy options in local-up-cluster ba525460e05 change result size to numAllNodes 45783a630cc increase parallelism on node controller ccm dce0d8a3d3f increase parallelism on service controller 20b28312ea9 Add namespace to NotFound error for kubectl logs command (#120111) 6b08919473a Revert "[cloud-provider] require providerID to initialize node" 1d653e6185a test: use cancelation from ktesting d58ff6c0560 allow for cadvisor to detect split filesystem and add some e2e tests 00e09374b6f Make update-codegen avoid sub-workspaces 21715e6bbd1 Fix up go.mod files after reviews 78f82b972f8 Sort publishing/rules.yaml ac5664086ba Use path instead of filepath for pkg-paths 70d803c1ff3 Make `make` fail better with bad inputs 81ba0f3b44b Make golang::setup-env turn on workspaces 2e2ae029c33 Fix instrumentation tests 706c88863f5 Use go 1.22 for KMS mock 812d5fff401 Remove old gengo detritus 16c26b22cb0 Run latest openapi generation d6cf98f8ac6 Remove errant +required with no validation code 1a4450f6ffd Get rid of code-generator/cmd/openapi-gen 067a328284e Move import-boss: k/code-generator/cmd -> k/k/cmd 7776496309c EOL code-generator/generate-groups scripts 9cf189f4e02 Fix lint found by golangci-lint 14321ef959b Move doc-generation funcs into only caller 8288c06b2b4 Make hack scripts use `go install` and assume PATH ea3696dbcf3 Remove legacy references to './output' 242b4e27c05 No need to check nil iterating gengo Inputs 7a084b33528 Renamed gengo SourcePath -> Dir 96b91f364ac Renamed gengo Builder -> Parser cb86010d206 Gengo utils moved 236ce54aa8a The gengo "args" package is gone b40e4d7e705 Get rid of gengo CustomArgs 86d2ecbf9a8 Move gengo/examples/defaulter -> code_generator cb7f0593aea Move gengo/examples/deepcopy -> code_generator 01a18659347 Fix lint in code-generator/cmd/... b68340e5b6a Get rid of gengo InputDirs flag 299b0453070 codegen: Remove most uses of InputDirs e78dc862885 Move import-boss to k/k, retool to not use gengo 08ce6a0f148 Get rid of gengo WithoutDefaultFlagParsing 5b2d4384c70 codegen: Make import-boss do it's own flags 1fed36b9842 codegen: Minor: fix wrong comments 6420e646621 Move go-header-file flag to each tool 3a77592b2cb Remove gengo verify-only - unused and untested d0dd72b01e0 Move OutputFileBase flag to each tool 26a1a13b805 Rename output-package -> output-pkg 6a375b8f4cd Move the OutputBase flag to each tool 875566f997a Type-assert gengo CustomArgs blindly 0ff7dd19430 Rename gengo DefaultGen -> GolangGenerator 2ac119bea94 Rename gengo Target.SourcePath() -> Dir() fcd6c19c246 Rename gengo generator.Package -> Target d2c74019109 Drop `generator.Packages` type b2832697d50 Rename DefaultPackage to SimplePackage bd31265d23e Make update-vendor log the go env 4627a15ac00 Get rid of vendor baggage in go-to-proto 43206312659 codegen: Don't need to pass --logtostderr 2c0da11c0a0 Make verify-shellcheck take optional args 19b37f046f1 Rename update-generated-* dockerized 94b709c0e22 codegen: Use single-dash for '-v' dd4e456875c codegen:proto: Use revised API to gengo parser 4b55936ab0c Remove defunct trim-path-prefix 2348e949082 Conversion: Better logging 6dbc754ed68 Retool typecheck to be simpler 4d37426a3ab Update Makefile comments 965341390f8 Remove KUBE_GO_PACKAGE 5a96a56c80c Fix make test-integration for workspaces 4b20f81c194 Fix verify-conformance-yaml for workspaces d61f2996140 Call verify_go_version at the END of setup_env e84adf611f4 Remove references to "GO111MODULE" 2a1147a4341 Call setup_env from verify-vendor d2a4a1958fc Tidy update-vendor-licenses for workspaces d772f7719dc Remove defunct references to "vendor" 7f5982e7084 code-generator: Remove now unused helper function 10c32b3e2f4 Get rid of most references to GOPATH 3c2940f2ae2 Kill off PRJ_SRC_PATH 651297220ef Fix pin-dependency for workspaces 1c3e701e0c9 Fix verify-spelling for workspaces 032dd890a57 Fix verify-external-dependencies-version for workspaces bff2e92edd1 Fix update-netparse-cve for workspaces fad5bb1cdd4 Fix lint-dependencies for workspaces b2b9de88eba Fix update-import-aliases for workspaces 530c4352fb4 Rename new::setup_env back to setup_env bece9bc3f4d Remove old::setup_env f9ca58efe9e Remove run-in-gopath.sh b32e2072569 Fix last run-in-gopath user: typecheck 91efe7e5712 Fix import-boss wrt gengo/v2 c8b61bb98b4 Fix register-gen wrt gengo/v2 f772410082b Make code-gen subprojects work on gengo/v2 251b22a7f89 Make update-codegen protobuf work on gengo/v2 b0a70dec4ab Fix go-to-protobuf wrt gengo/v2 7506048d3f2 Make update-codegen client work on gengo/v2 b961b39efa7 Fix client-gen wrt gengo/v2 130a9f8426e Make update-codegen applyconfig work on gengo/v2 5ddd6772a4c Fix applyconfiguration-gen wrt gengo/v2 9c62235266d Make update-codegen informer work on gengo/v2 0aa98ee8e38 Fix informer-gen wrt gengo/v2 46665fa76a9 Make update-codegen lister work on gengo/v2 b82527b6fb5 Fix lister-gen wrt gengo/v2 1965f56f59d Make update-codegen openapi work on gengo/v2 5475797f433 Make update-codegen conversion work on gengo/v2 ed35118664b Fix conversion-gen wrt gengo/v2 1e96f4e50a7 Make update-codegen prerelease work on gengo/v2 fd2ca0a3444 Fix prerelease-lifecycle-gen wrt gengo/v2 b5b8c9d8698 Make update-codegen swagger work on gengo/v2 8420278c7fe Make update-codegen defaulter work on gengo/v2 1fb4e824ba0 Make update-codegen deepcopy work on gengo/v2 d5e8e9c29cf Change update-codegen.sh to use new setup_env db590ecd896 Fix scripts to avoid testdata 514dd0e1f6d Convert all gengo references to gengo/v2 6f2f3735e04 Re-vendor latest kube-openapi and gengo/v2 b3dd7241741 Remove dep on set-gen: gone in gengo/v2 487cd027118 Change verify-generated to new setup_env c79e5abec42 Change test-e2e-node to use new setup_env 7a7dff1eeb4 Change verify-imports to use new setup_env 3be358ecc15 Make verify-conformance-requirements use new setup_env 08622aa6858 Make verify-no-vendor-cycles use new setup_env 854037d5b52 Change update-generated-api-compatibility-data test to new setup_env 25b97dae82d Change ipamperf test to new setup_env 238b33de3be Change test/instrumentation/update-* to new setup_env cbc887a1d6b Change verify-govulncheck to new setup_env 024f4e9c09f Change verify-generated-docs to new setup_env 35aa5b3c698 Change verify-fieldname-docs to new setup_env 0d30f918fae Change verify-description to new setup_env bad67dc973c Fix golangci-lint for workspaces 3163fc4f69a Change update-golangci-lint-config to new setup_env 714f8a0855f Change verify-yamlfmt to new setup_env 3dc447708b8 Change verify-gofmt to new setup_env d785f13c059 Change verify-licenses to new setup_env 974276e4a08 Change update-openapi-spec to new setup_env 2ee339b0236 Simplify verify-cli-conventions; use new setup_env 2924b90d75a Change verify-api-groups.sh to s/vendor/staging/ b725fd20c2a Fix update/verify-mocks.sh 58ab5eea89f Remove some references to GOPATH 5f490b4fe89 Clarify, document KUBE_OUTPUT_* variables e6dd36759f0 [kubernetes/scheduler] use lockless diagnosis collection in findNodesThatPassFilters e9b30a0d29b fix UT failure TestPrintIPAddressList c05e541793b Bump cAdvisor to v0.49.0 6c1a935da2d Keep streams from being set up after closeAllStreamReaders is called a51a5b46223 kep-3716 GA, remove feature gate 26484df2108 Make websocket heartbeat test timing less flaky fc86811cbe8 Avoid logging binary junk for frame write failure e2575228890 add transient types to admission test. b57d7d6ad79 add min valid jwt payload to API docs for structured authn config 8b035cd582b Revert "Update kubedns and nodelocaldns to v1.23.0" e38531e9a23 Add `image_id` to CRI `ContainerStatus` message e6ed0f37c65 Add apiserver_watch_cache_read_wait metric to cache refresh time d6851ec7356 scheduler_perf: fail when input YAML is invalid f47e0cb779a Rename KUBE_OUTPUT_BINPATH -> KUBE_OUTPUT_BIN aaf6fc07d82 Make build scripts use Go import paths f3c8e92def7 Clean up test.sh and get rid of GOPATH 8cb8535d9cd Excise KUBE_GOPATH from coverage build 0af31064421 Dedup binaries when building 9256031a871 Workspaces: excise vendor from golang.sh df42d56947f Remove vendor from ldflags 81d932906aa Make golang::binaries_from_targets smarter 8b579b23473 Change the build_binaries path to use modules 65b841c077e Generate go.work files e54f2296ed3 Require Go 1.22.0 in go.mod e2b529fda73 Fix a test that doesn't build on Windows ffa183a7a41 generated files 01db4ae9e74 Graduate PodSchedulingReadiness to stable 466019b1b27 kubeadm: implementation of API types 3b5a79f6471 cleanup: add zero as a value for token create duration and act as default, added test, updated the help text d303cec1183 Update test 55e9d509e61 Promote KEP-2681 to GA in 1.30 a3dfba8f506 Create e2e test for VolumeAttachment endpoints b115df227ab update tests due to change of NewPluginInitializer. 64ee859aa82 make ValidatingAdmissionPolicy ignore excluded resources. 5b1fffa3e40 add resource filter to admission initializer. a0dc949ce32 Improve error handling for json path results 61d6026d23a Fix field paths 45742d1d9af Add integration tests 31f7efab20f Add cost stability tests for chained and nested CEL comprehensions 7ef3eea8a73 Generate code 291703482d5 Add selectableFields to CRDs d49949b6420 Bump cel-go to v0.17.8 to pick up CEL estimated cost fix fa44b9ca150 Fix panic in getNpdPodStat f46df21cad3 update comments on API 5f7c36a4e97 kubeadm: fix a bug in default apiserver "authorizaion-mode" 2a22b6f6b8d Add information about SELinux test tags ba3562776f1 Update SELinuxMount stage/unstage tests to allow RWO 52558a03104 Add e2e tests for SELinuxMount 92bdc7b3873 Ensure that initial events are sorted for WatchList 58a826a59a7 graduate MinDomainsInPodTopologySpread to stable 20ded275705 apiserver/storage: improve RunWatchSemanticInitialEventsExtended test e663285ccf4 Add `image_id` to CRI `Container` message 3327bb36749 CHANGELOG: Update directory for v1.30.0-alpha.3 release b394aac4ce3 Use the websocket protocol header, verify selected protocol 03812ddb169 streamtranslator counter metric by status code e89dddd4af6 jwt: strictly support compact serialization only dc4c92f5a56 add support for map 4fe78a17ddd Add duplicate key and field case-sensitivity CBOR decode tests. 374e4b56861 Address review nit, use longer variable identifiers. 3852d1c0c15 Make explicit check in CronJob if Job is successful before setting LastSuccessfulTime (#123380) cb39dfc9deb Promote ImageMaximumGCAge to beta f832692d980 uid is also supported in field ref for downward api ecaf2093f51 storage/watch_cache: rework getAllEventsSinceLocked d629d3fa355 storage/cacher: add TestGetWatchCacheResourceVersion, TestGetBookmarkAfterResourceVersionLockedFunc f90bcf649e0 storage/cacher: ensure the cache is at the Most Recent ResourceVersion when streaming was requested 0e2b4472694 kubelet/userns: Test new functionality with feature gate enabled 658b45cd035 kublet/userns: Test new functionality with feature gate disabled 1fb1218f57f kublet/userns: Switch TestGetOrCreateUserNamespaceMappingsDisabled to table format b2a92406efd KEP-127: check for runtime handler userns support 024146f7058 KEP-127: the kubelet stores runtime helpers ea69a5ea987 in the new output API output.kubeadm.k8s.io/v1alpha3 modify the UpgradePlan structure to include a list of multiple available upgrades. c3caddf3e69 e2e_apps:stop using deprecated framework.ExpectError a147693deb2 remote command turn on feature gates 0a1edf8bda8 Re-add KUBE_TIMEOUT explicitly to make test dd1e617ba0b Scheduler first fit (#123384) ca41a9222d5 Fix makefile variable expansion for test-integration target aefaf66d2b4 remove unused service keys from aggregated discovery 0045ef5294a system:kube-scheduler: extend the RBAC with pods/finalizers fd5019a5468 ktesting: ut flake fix for CI a24f2c11923 Validate restartable init container state transition c99996efab1 bump metrics server to v0.7.0 0ab006b8a1e node-controller reconcile node labels on each update 03bd3e25b16 [cloud-provider] require providerID to initialize node 099f26296b2 integration test for cloud provider ef83ec27536 don't use leader elect on ccm integration tests 08f8be99039 fix goroutine leak on legacy-cloud-provider gce 3636971c39c add aojea as reviewer b4b4784c6c4 enable ip aliases on clusters by default 3908a46b222 bump cloud controller manager to v29.0.0 b584b87a94d kube-controller-manager: readjust log verbosity - Increase the global level for broadcaster's logging to 3 so that users can ignore event messages by lowering the logging level. It reduces information noise. - Making sure the context is properly injected into the broadcaster, this will allow the -v flag value to be used also in that broadcaster, rather than the above global value. - test: use cancellation from ktesting - golangci-hints: checked error return value dc7114fa911 fix default IPMode set in UT 9f6b48f1e7f fix node lifecycle controller panic when conditionType ready is nil 0f083966a7a set actual podToMake values 840ef149071 ktesting: doc updates and fixes fb3ab538221 Replace fmt.Print with printer in upgrade plan code and fix configVersions are not printed when output is json or yaml e6d6d8e14c2 feat: print etcd ready status 07e0a80216c graduate HPAContainerMetrics to stable df92ad9bcbf Run autoscaler as non root in kube-up d7735f32d0b Skip autoscaling tests when we hit rate limits 1ecd4053de7 ktesting: skip timing check in unit test 8980b4b846c Revert "fix flaky ut in TestCause contexthelper_test" 18ba3b388ee fix(scheduling queue): ignore events that interest no registered plugin bbef156ef5d update 129 b3216214f95 Fix sample-apiserver rbac for v1.27 and bump e2e e2ff63103df fix for persistent Horizontal pod autoscaling failures 148757903ae release v1.29.2 for sampleapiserver 247233f7b40 bugfix: modifying argument causes wrong fieldpath e2506906d61 kubelet: fix flaky unit test with TestRotateLogs due to improper handling of goroutine in the tests 75238e592d6 kubeadm: remove bridge-nf-call-iptables and bridge-nf-call-ip6tables preflight checks since not all the network implementations require this setting e1ac3e1de76 Fix kubectl proxy e2e test 52dd6030551 initial e2e for aggregated discovery 13dddca6a2c Add "disable-force-detach-on-timeout" flag to kube-controller-manager 4760e0cc44f refactor: use shared CollectParams from VAP 64cd09f7208 refactor: use match from generic pkg in vap 96c418a7b73 add generic policy dispatcher 9f9858b6caa Hit APIServer cache when testing healthiness 2e920365766 Rename "new" reconstruction just to reconstruction e9193b4f336 e2e: remove dead code for providers d816ab7657b Promote LoadBalancerIPMode to Beta 4cb4228522a ktesting: improve unit test coverage 4ffa628ead5 ktesting: add missing methods to error context dc6abc3ff8f ktesting: add Underlier type alias fe10bfb044f ktesting: fix ExpectNoError 2a2542289f9 Remove usage of NewVolumeManagerReconstruction feature gate 513c2a3690f Mark NewVolumeManagerReconstruction GA 78c96102351 hack/tools: update to golangci-lint v1.56.2 + golang v1.21 cc515bd8f13 Job: Fix test case names for the validations 0c4df640920 fix api aaa9b6ebd75 Fix NFS related issues on GCP/Ubuntu f3cb5059a7b kubeadm: fix a bug during kubeadm upgrade, where it is not possible to mount a new device and create a symbolic link for /etc/kubernetes (or a sub-directory) so that kubeadm stores its information on the mounted device 9bc5257c450 [KEP-3962]Add feature gate for MAP (#123425) 11ed3032c09 test: infer gvk of objects acf1d850c61 refactor: handle paramKind directly 83751630081 Add test to validate non empty pod log dir 81e4c3002a7 add nil check to avoid passing fakeCh for all discovery tests ecaf269d3c1 add new test cases to test json output when fetch kubeadm config from server dd890b899fa Make PodResources API include restartable init containers 16794502eeb kube_codegen: expose external-applyconfigurations flag for client generation f6682370b1a fix flaky ut in TestCause contexthelper_test 98437cb4be6 fix json output when fetch kubeadm config from server ce6bacb5acd fix persistent volume docs link 6726e656190 Aggregated Discovery, mark stale before initial health check 5fb002147bd Remove unused Resolver interface in pkg/proxy/util 43ba0bd53b7 kubeadm certs check-expiration support json/yaml output 4172d364865 Codegen: use plain find instead of git ls-files 527d2ea9d0f Codegen: use plain grep instead of git grep 9f4b82bf3b0 Cleanup: s/depreciated/deprecated/g d7028a8ed50 Add SELinuxMount feature gate ba8fcb5ef6c kubelet: don't disable gc if max age is specified 8dddf6d3140 e2e_node: add test for max age after kubelet start a8ea9363648 image gc: don't start until max age has passed since kubelet started 6cd78bc5fc5 node e2e: add image max gc test be7856e3402 e2e_node: factor out waitForKubeletToStart da8ffcd1dc3 Switch 'ContainerCheckpoint' from Alpha to Beta 5a8579a3e40 kubelet/userns: Remove tests that fail as root cb3180950ef dra e2e: fix stack unwinding in helper function c6b483ea05c kube_codegen: expose plural-exceptions flag for client generation fe8e896df87 Improve the doc comment for the Job status.active field 3c9c141d980 exchange the order of comparators 7b108d8ee19 Add testcase covering unknown plugin config 611f8ba8153 bump nfs-provisioner-to-v4.0.8 c74ec3df094 graduate PodLifecycleSleepAction to beta e158a83d9d3 KEP-127: Add UserNamespacesPodSecurityStandards e2e test 65faa9c6800 Consider initContainer images in pod scheduling b3ba6bda2b4 Add missed clusterEvents to UnrollWildCardResource fa6429a31c9 Use new 1.4 NFS image ec394ec53db Fix NFS related CI failures c29450eb009 kubeadm: apply retries to all API calls in idempotency.go 0f49a1e36e0 fix panic in CRI stats of windows dfc598b6feb Bump containerLogMonitorInterval to the minimum allowed 01ce36dd9e3 KEP-127: add RuntimeHandler message to cri-api ae0a813be10 Fix tests after rebase c8b4d8ebedb kubelet: add reason field to image gc metric d3a0e296def Update x/crypto to 0.19. f38852768e3 bump the stability level of apiserver_storage_size_bytes to STABLE 5fcbc9d2fca Fix permission denied error ff4f2907c51 Use non-default directory for pod logs and limit path to ASCII characters 19d9405a1c3 Update comments and error messages d9e2487d0c3 Add PodLogsPath to kubelet config 3e431adb036 Add AdditionalLabels to cloudprovider.InstanceMetadata 7db7222592e kubeadm: introduce the WaitForAllControlPlaneComponents feature gate d5d3eddb95b Add allowed/denied metrics for authorizers 59bf8b02e63 Refactoring to encourage use of switch case 7b2698a5e5c Add handler to run watch serving in separate goroutine c1f2fe7bcb0 golangci-lint: optionally skip it during "make verify", II 7faa8bbac3b Add e2e test for kubectl interactive delete 6d5133f3ecd add functions to policy accessors for getting match information and params def05a20e22 flake: avoid flake by ensuring params appear in the initial list 57fc5d24013 Add decode and roundtrip tests for CBOR marshaling. 871279978fc Add roundtrip tests for all CBOR examples in RFC 8949 Appendix A. 71479b55777 [kube-proxy] add log verbosity to endpoint topology hint loop. f84d643c204 Use the Defer for pod replacement policy 066421f108c Add CBOR Serializer implementation. ab8cdae3b1f Reset metrics in the Job integration test before testing ec7e051bc00 Always test PDB's during service upgrade test 115dc90633f Increase accuracy of the pods_creation_total metric and improve test exec time b5b62d4f0ed Update kubedns and nodelocaldns to v1.23.0 0feb1d5173c Add integration test for multiple audience in structured authn bd27c99262e move OWNERS from validating to all new parent policy folder 5dc92ada068 Implement authz config file reloading 3a98e60a719 Move authz construction to reloader 2b00035b5fc Split construction of authorizer / ruleResolver 1fddc948ed8 Split node/rbac/abac construction 49124293c3c Store constructed node/rbac/abac authorizers 75a30692945 Remove unused lookupIP field in NodeIPAM Controller struct 41435d045db Guard empty status.acceptedNames 18c563546a7 support multiple audiences with jwt authenticator 3cc3b002ba1 CHANGELOG: Update directory for v1.29.2 release b202d053fa7 CHANGELOG: Update directory for v1.26.14 release cf99360c1f3 CHANGELOG: Update directory for v1.27.11 release 14045bf340e CHANGELOG: Update directory for v1.28.7 release aac43dc96f2 Bump github.com/fxamacker/cbor/v2 to v2.6.0. 5f4cb8b09a4 Move kube-apiserver authz validation functions b5e0068325d Support all key algs with structured authn config 630ff96f9d6 Revert "Scheduler first fit" e8b08cd056f e2e_node: replace `registry.k8s.io/stress:v1` with agnhost 5d861b6f12e promote agnhost to v2.47 aa772d77fbc e2e pod: dump pod in unexpected phase 008b075b462 DRA: fix data race in resourceclaim.Lookup 9c726b015c5 agnhost: v2.47 2383fbe53a8 CHANGELOG: Update directory for v1.30.0-alpha.2 release b8a59346fe6 test/oidc: extract key type to allow testing different algs b7e70f0e000 update-vendor after package rename 3094395fa76 bugfix: avoid NPE possibility by making composition environment global 18fbc48b015 refactor: implement VAP off of policy plugin fw a6366573d5c refactor: create generic policy plugin type similar to webhook 2fa02552ebf remove comment 48b1576980d use table test pattern and replace hardcoded values 19da90d6396 Add AudienceMatchPolicy to AuthenticationConfiguration 6ff675310c9 image-util.sh: fix `gcr.io/.../agnhost:2.46-linux-amd64 is a manifest list` 39606af8c3d golangci-lint: optionally skip it during "make verify" 7ee89440c39 agnhost: v2.46 07c701fecb6 agnhost: merge registry.k8s.io/stress:v1 (github.com/vishh/stress) 8876b68a604 golangci-lint: add hints for error wrapping 8e2c1b559ac update images to have the full semver in the tag 1b1b902f81d codegen: don't nuke files if only verifying e53ac426335 e2e labels: add placeholder docs for existing items 445443bd8a5 e2e labels: ensure that the lists remain sorted a834bd84b54 cri-api: KEP-3857: Recursive Read-only (RRO) mounts 77241d31253 Add `apiserver_encryption_config_controller_automatic_reloads_total` metric 4ae2b3f75f7 Revert "kubeadm: increase ut coverage for app/util" 0e6409873a4 remove --v arg from kubetest2-tester-ginkgo test args 7dd624d3443 ci: bump kind to latest for kms jobs 5b899d9303b make use of latest snapshot controller version v6.3.3 in the deployment d697f43d738 refactor: move matching logic into parent policy folder 8b14116509a refactor: move vap into parent `policy` folder 8b26b6eec1b refactor: move celmetrics close to its usage in vap 5ba3883be02 Adding unit test for makeWinContainerStats 5c825d8a226 core/v1: remove comment about non-existing constants a8abed80153 Update publishing-bot rules to Go 1.21.7 da0c9a93aea scheduler_perf: use dynamic client to create arbitrary objects c46ae1b26ae scheduler_perf: use ktesting.TContext + staging StartTestServer 63aa2615834 ktesting: add TContext 75210d0840e Clean up dead code in node controller 593b1c6c63e Do service.spec.LoadBalancerSourceRanges validation inline d9302157944 Update service.Spec.LoadBalancerSourceRanges validation tests 73cc31847fc fix eec508e488f use patch number ddb0b8da9db [go] Bump images, dependencies and versions to go 1.22 ab8c784ee97 kubelet: enable configurable rotation duration and parallel rotate 36904475db4 kubeadm: increase ut coverage for app/util d42d9a9b079 features: promote NodeLogQuery to beta 3e777540fda add test case for error inside variables. 13c848f562c self nominate kevin hannon as a sig-node reviewer 3a813049d3a add aojea as feature-approvers on OWNER_ALIASES 6d6398ef926 chore: adds consistent vanity import to files and provides tooling for verifying and updating them. (#120642) e821e0de15e remove error wrapping from builder de6989041a7 added OWNERS to test/e2e/feature/feature.go 0f5cf6c1cd9 Add image pull duration metric with bucketed image size c8d18da4377 Scheduler: Fix the feature stage of preemptionPolicy in the API comment 1ef469343f0 Job: Use generic sets to avoid unnecessary string casts in valiations 42672ee2ea1 Make comment about reject action more accurate c7e48f1ebf5 kube-proxy: flush nftables base chains on startup 7a56b6e3f7a Add validation.IsValidCIDR 658e3308f34 etcd: Update to version 3.5.12 fc610f0941f kubeadm: use current-context when validating kubelet kubeconfig 105ec3d48fb fix linter failures 852c03a49b9 check key is set before deleting from map 4d8c3530f57 fix regular bound service account token test ac9482d15f4 update distroless-iptables to v0.5.0 debian-base to bookworm-v1.0.1 and setcap to bookworm-v1.0.1 eceaed8c075 Put validation utility packages used by API validation under API review 1ae7553744a Revert "print error message regardless verbosity level" e087acc7917 refuse to allow apiserver to startup if ServiceAccountTokenNodeBinding is enabled without ServiceAccountTokenNodeBindingValidation 1085c0b15a4 Bump sample-device-plugin image version 9e37ccedc7f apiserver: refactor handleError in endpoints/filters 6a98704229a Bump to latest version 63e91ed0232 remove deprecated framework.ExpectNotEqual dfc20d19c8a fix integration tests now JTI feature is enabled by default cae710d9e96 kublet/userns: Test error messages on init failures 1eab8be822b KEP-4193: promote ServiceAccountTokenJTI, ServiceAccountTokenPodNodeInfo and ServiceAccountTokenNodeBindingValidation to beta 5855f5178f4 Fix the syntax error in the comment of the checkQuotas method. (#121428) 4ddf69a8358 Remove checks of the CloudDualStackNodeIPs feature gate eba4fd82eba KEP-3705 CloudDualStackNodeIPs to GA deec79ad8d6 kubeadm: increase ut coverage for apiclient/idempotency 7f12735fffd use authentication.kubernetes.io/issued-credential-id audit annotation in serviceaccount token registry endpoint becb25c01f9 Bump version for the sample-device-plugin image f97dec28407 Add comments about wildcard clusterEvent 31c86e38ac6 Update in-tree azureDisk and azureFile tests 0cd9d40a654 Test_Run_OneVolumeDetachFailNodeWithReadWriteOnce use waitForAttachStateToNode instead of time.Sleep d81023db30c When matching clusterEvent, we should consider the "*" additionally 3a4c35cc89c Comment on QHint for CSILimit when CSINodes are added (#122758) 960d7fbf094 add admission tests a0770386abe fix copy paste b0c9a18673b add TestPIDPressure 195a7747180 eviction_manager: add unit test for PID pressure 774d666d1ce kubeadm: better checks if the node is CP during "upgrade node" f47c2a1ba63 Revert "kubeadm: fix a bug where the uploaded kubelet configuration in kube-system/kubelet-config ConfigMap does not respect user patch" 9027049f2ce local-up-cluster.sh: Use config file instead of flags for kubelet dc832c6e59e add support of variables for Type Checking. b636984004c test: remove unnecessary skip healthz check from test 71bf5630343 Job: Stop unnecessary sting casts in validations 21ba0d59d3a refactor type checking to use CompositedCompiler. 7cab0ad2d2b apiserver: warning should not panic when request times out c82c80099d8 add some comments, redesign style of enums in simple and long view, fix tests to these new changes a56d483df06 kubelet/userns: Use t.TempDir() 0f7b9cc4f53 pkg/kubelet/userns: Simplify error messages fdc20de5004 kubelet/userns: Wrap error message 065066d1aba kubeadm: support digests in DeployedDNSAddon() 1db6e434f3a build etcd image v3.5.12 227c1915db3 enhancement(scheduler): share waitingPods among profiles 8bf03e83d3e Stop claiming --node-labels is alpha 2cab79710d5 kubeadm: enhance encryption algorithm support in v1beta4 2dd81563a96 Update to runc 1.1.12 60483ac1824 CHANGELOG: Update directory for v1.30.0-alpha.1 release d190fa3e7de Fix race condition between external-resizer and kubelet 593654eaa3b Fix cleanup of file subpaths 97640d3e2de fix test test should assign default SC to PVCs that have no SC set failure 9d4997ea69e change the extractEnum function to add limit, intent and add tests for new behaviours 67926c3777c Update in-tree vSphere tests 01dbb85974d fix: correct incorrect comment & function name about SchedulingGated 717a0002b75 [gce_runner] use metadata file when values have special characters b8c19dd1d21 Fix deprecated version for pod_scheduling_duration_seconds 77f03c17449 Don't export single-use types 01155f59c35 Merge pkg/util/config into pkg/kubelet/config 049261aca1b Delete unused config utilities e198938671c Remove deprecated comment about cleanup the target_path of CSI volumes 77fed9d2b7b fix GenerateUnmapVolumeFunc missing globalUnmapPath when kubelet tries to clean up all volumes that failed reconstruction. 0283498ab40 fix gofmt error 0c7281624ea change style of enums f589b911f85 node_controller: improve taint eviction queue add worker time args 71559bd0267 bugfix: dont skip reconcile for unchanged policy if last sync failed c222db1429e fixes kubectl explain to shows enum for field types if they were defined 2216361c59e fixes kubectl explain to shows enum for field types if they were defined d7c1a61e04e kubeadm: increase ut coverage certs/renewal/readwriter 7f2d78656ca Updating FG based tests 8bc63027d9f remove extra space in log 2c829cf29b6 chore: Refactor network load balancer creation in e2e tests 6cc99274872 Add DEPRECATION for CloudAllocator in node-ipam-controller da05076868a Reorganize a bit of winkernel proxier setup 33bd5fb3c44 Remove unused param to winkernel proxier 4716bf8bd45 Fix issues found by linter ee86ca9f13b [go] Bump images, dependencies and versions to go 1.22rc2 c9991e42704 [go] Bump images, dependencies and versions to go 1.22rc1 76ea1420516 Use gcloud for gce_runner a62579a5ebe fix(scheduler/metrics) correct the documentation on plugin_evaluation_total 1baf7d45866 Corrected some spelling and grammatical errors a7cf7fe55a2 Bump shellcheck to 0.9.0 20ec766adfb bugfix: disable ratcheting for typemeta fields 7353f52bc8c test: add CRDValidationRatcheting e2e tests 768c169dd82 feature: promote CRDValidationRatcheting to beta 5f75c35edf1 apiserver: allow zero value for the 'nominalConcurrencyShares' field 85684ec4852 fixing issue with GetCPUUsageNanoCores on Windows d60a25b2db5 Add DeletionHandlingObjectToName a15f4376697 KEP 3458 - promote to stable ceabc4aba84 DRA: always returns Unschedulable in PostFilter 6cf42037512 dra scheduler: reformat code a809a6353b6 scheduler: publish PodSchedulingContext during PreBind 5d1509126fc dra: patch ReservedFor during PreBind 6a60a1ddadd Mark conntrack/fake as linux-only, add non-OS doc.go 5ab9f3d15f0 kubeadm: fix the err check bug in certlist test ebba2d4472d Move some code in the proxiers 536364266c1 Sort messy kube-proxy imports c2c4f4616d4 cleanup structured authn/authz error logic c89dcf52b12 convert the expectedValues to be cel.Val. d6991638029 extra case for affirmative has(map) test. 139c6daf302 Missed a spot! testing verify-licenses.sh 7801173f6ed get the error claim in dra 6e5e1d03177 Remove useless org mutate code 09a1abda998 Update vendoring to take new CBOR library dependency. ef27338bef9 Add skeleton CBOR package and introduce library dependency. 89db64e0534 collect generated files and logs 39afee443f1 enable testing import check for kubeadm binary ec1516b45dc kubeadm: don't fail post upgrade in EnsureAdminClusterRoleBindingImpl if the error is crb already exists 4d6c0ba518d kubectl debug: add sysadmin profile bcf512693a0 kep-3836: promote to beta in 1.30 8bccf4873bd change --nodeport-addresses behavior to default to primary node ip only 9b96ab46eee Fix license verification script 1ad143177c3 Added metric resource name to HPA table (#122804) af35b7ff2e0 Update Changelog with Release Notes 1.30 Team b98e47dd801 tests: Cleanup for Job e2e tests global vars (#121695) e490439262f drop deprecated pointer package 83de1586e08 boilerplate_test:fix pylint warnings 4473dfebbf9 fix boilerplate test 9dc1da1e5bf boilerplate_test: fix bad indentation 65d67101e72 Drop vsphere cloud provider d0c323fb8fb fix convertField and its comments. df9620c9f6f add support for equality check. 9bbdbc510eb mutation library for CEL. eafa9bd24b2 Add validation tests 7972f0309ce Fix service account token projected volume validation 35004e8f77c Fix AtomicWriter may not create user visible files after kubelet was restarted 1d59d6b6c65 Use validation.IsValidIP in a few more places 519dd6887dc Make validation.IsValidIP return a field.ErrorList for consistency f999b24fad9 Expand IsValidIP unit tests 8fc691be940 Drop validation.IsValidSocketAddr 09abfa46be8 Update knftables, with new sigs.k8s.io module name 367bbd01d76 update testcase on podreadytostartcontainercondition 8371e4cf931 quick break when met 740b4c456d7 k8s.io/client-go: add OverridingClientConfig overriding RawConfig db80aa56ed8 k8s.io/client-go: add ClientConfig option to override raw config e92a4debcbd Fix lint warning about unchecked error d2c1a23a8ae Add stub methods for kube-proxy on non-linux/windows 8b22cb46969 Revert "Make verify-typecheck.sh only check valid targets for a platform" b88fefad1f8 Add note about directory structure 62eb7cb4f93 make update: add update-golangci-lint-config 31de75f62cb KEP 3836 - promote to beta 0ef42133a18 Reduce verbose logs in MetaAllocator b8df7e76845 unittests: Fixes unit tests for Windows (part 10) b46455ddfe9 Fix to previous EnsureAdminClusterRoleBindingImpl fix b18caee5dfc Fix EnsureAdminClusterRoleBindingImpl error handling 25a40b1c7c3 pkg/proxy/nftables: handle traffic to node ports with no endpoints 4b40299133e pkg/proxy/nftables: handle traffic to cluster ip 01d7de5464b pkg/proxy/nftables: rename constant names for nftable objects 80ca91c90c5 pkg/proxy/nftables: refactor packet tracer address matching d23483dd7c2 pkg/proxy/config: rename import aliases 212c5dd2162 pkg/proxy/config: use blank identifier instead of ignoring error 43539c855f5 e2e framework: unify logging, support skipping helpers dd0cee48955 e2e node runner: remove dependency on e2e/framework 3bf2bf81913 chore: Cleanup in-tree credential provider azure and cloud provider azure a05db0dd22a Add retry around create ed289f875e3 Remove some dead options in KubeSchedulerConfiguration 1645667297b compatibility fixture 6d65c063caa describer: improve job and pod template output 1a38fb3c354 init.sh fix a2be736c027 vendor update 0bc023bc28c Add aggregated discovery v2 types 6ae264464ca Make local-up-cluster non-verbose by default 41e706600ae client-go/reflector: make UseWatchList a pointer 0ba903fd574 kubeadm: enable parallel pulls of images 510df7eab17 kubeadm: add validation of ImagePullPolicy in the API 754ffa3477c kubeadm: add ImagePullSerial field to v1beta4 NodeRegistationOptions a4afaeda372 print error message regardless verbosity level de014579a18 e2e: enforce usage of WithFlaky instead of [Flaky] e3ee4e35851 e2e: replace klog.Fatal with assertion 427e0fadbac Fix flaking test: CSI Mock workload info CSI PodInfoOnMount Update 2cdd9a71306 kubeadm: use separate context in GetConfigMapWithShortRetry 5691a7899e7 Fixing bug with windows criStatsProvider sometimes not reporting AvailableBytes correctly 1192f313b8b Fix local-up-cluster on darwin e2222f1e304 dependencies: klog v2.120.1 8a89a1f5a5c mark density tests as flaky 18f0af1f000 dependencies: ginkgo v2.15.0, gomega v1.31.0 26a79e4c0ba kubeadm: special case context errors in GetConfigMapWithShortRetry 365cbe1b41f remove formatted newline fd5353eb721 check for error message and type 8668c7f718f kube-controller-manager/options: unit test WatchListClient feature gate for command line options 3a6060745cc Remove unneeded permissions of node-controller role 83ff8a2f49f Negative index regression test for json-patch (#122625) f40ff3d9ffb CHANGELOG: Update directory for v1.26.13 release 14294ce870f CHANGELOG: Update directory for v1.28.6 release 4a9906fd340 CHANGELOG: Update directory for v1.27.10 release 4f8aa21da88 CHANGELOG: Update directory for v1.29.1 release f8e25eff926 client-go events: also support context for NewEventBroadcasterAdapter ee354366f58 sig-instrumentation: add rexagod to other groups 6451fb0fe2c kubeadm: increase ut coverage for certs/renewal/manager 8f4c9c7605a k8s.io/component-base/logs: replace klog text implementation 2ce04fc04bf flag PersistentVolumeLastPhaseTransitionTime field as beta 3aa366a3eb1 e2e: remove dead code 041e97af1f0 fix evaluate resource quota if a resource is updated when the InPlacePodVerticalScaling feature-gate is on 5ff42b23687 fix issue with using feature HonorPVReclaimPolicy in csi-provisioner 98054dd9d3a Clean unused code in kubelet server. d21fc96db35 Fix type assertion error in init and join commands for kubeadm 8a32f346a09 kube/features: improve unit testing known/registered features 995135973d6 Inject feature gate instance into client-go for kube components. 54a6e6a7729 kubeadm: keep a function with short timeout in idempotency.go ec89154276f Handles clean up errors 80fbc4c319b Revert using ginkgo.DeferCleanup as it doesn't run in the correct order 66ea02684b4 e2e: add NodeLogQuery tests for Windows nodes c65d9e4d59f Replaces path.Operation with filepath.Operation fcb51554a19 Plumb the conntrack.Interface up to the proxiers cdf934d5bc9 Remove redundant iptables/nftables conntrack cleanup tests db12cbe2ae5 Add conntrack.Interface, test CleanStaleEntries 51063cb5c41 Clean up conntrack unit tests 46c4249e3ec Remove code to be removed in 1.30 5cfd75a84ea Ignore vendor folder on client code generation f29d6970c96 doc(scheduler_perf): enrich the documentation 7773b0f53fd client-go/features: introduce WatchListClient feature gate 9263a66aec7 kubelet: make log more clearer for not create a mirror pod d652596e429 Remove redundant string conversions in print statements 0d366dd99ae codegen: Use long flag names for clarity 0f849d3b55b update-codegen: rename "base"->"file" for clarity f2b550180c6 codegen: don't use xargs w/ maybe-empty input 582312d9650 Sync json-patch ver to the same as everyone else 7162b930bec code-gen: Use the passed FlagSet, not hardcoded 8b8f0a70cd3 Make verify-fieldname-docs actually error 0c3e49e64c0 Run test/instrumentation/update-* 5f876b9d0a5 kubeadm: switch from ExponentialBackoff() to PollUntilContextTimeout() caf53114132 kubeadm: start using the Timeouts struct values 374e41cf663 kubeadm: replace deprecated wait.Poll() and wait.PollImmediate() 9b5ad7e1191 Add processStartTime in metrics/slis 8af9a177b2a If a pvc has an empty storageclass name, don't try to assign a default StorageClass to it. d2b16b2a21c vac support ResourceDescriber 9860e12d6ee expected and actual field position adjustment 08645984b0a Revert "Save a list of images used by e2e.test" 73565cde13d Use gomega.Consistently instead of sleeping dcdfd714501 Fix kubeadm init regression 9a3f1a3164a Avoid panics when logging a nil pod.deletionTimestamp 46d0e1d5aaa Support overrides for registered feature defaults. d954b25b118 hack/tools: bump logcheck to v0.8.1 6cd25f43a63 fix version typo of namespace indexer 4db86556e5f Update publishing-bot rules to Go 1.20.13 and 1.21.6 04b772c6611 logs benchmark: really write through pipe 7f1a30f8d59 logs benchmark: fix config handling 3fb67901642 Update env version, Add cost for previous func, add tests, etc. 5ca73197b3f Document the nftables kube-proxy packet flow ddbf3ab6629 local-up-cluster: use the newly built library always a5861a12626 [go] Bump images, dependencies and versions to go 1.21.6 and distroless iptables to 0.4.4 3c86d21316c bump klog to v2.120.0 6f021e99cf8 dra: increase timeout in setupFakeDRADriverGRPCServer to prevent tests to flake. 6376dd62961 component-base/featuregate: store atomic.Value fields as value not reference 56321a77799 Revert "Graduate Evented PLEG to Beta" 57ec7d20e89 client-go/features: move the defaultKubernetesFeatureGates variable to the new file 9c39f2b7760 Fix kubelet_server_journal --until parms. b0e929264fb e2e/network/conntrack: rename invalid conntrack state test 6073d1cd3d5 Adds tests for bypassing scheduler processing 9387a66c71f Clean up encryption config reading and hashing logic 4ffa12b9d97 pkg/proxy/nftables: drop ct-state-invalid rule 04bbd3481f7 client-go/features: warn when ordering initialization issue d74c57d4f59 client-go/features: introduce feature gates 71c3593f85b support nodeAnnotationsChanged event to trigger rescheduling 70e20b58dd8 Add missing string formatting directive 8abe5394ac9 Use v1beta1 endpoints when cleaning up ValidatingAdmissionPolicies 4df39d89e0b Correct the link to install Docker Desktop on Mac. ce263d88281 Address comments during Review 1a69fd4cb0d kubeadm: increase ut coverage app/componentconfigs f21f8d99844 kube-proxy: fix LoadBalancerSourceRanges not working for nftables mode 50b3ffc71fd kube-proxy: LoadBalancerSourceRanges as *net.IPNet 9eac24c6563 kube-proxy: store ExternalIPs as net.IP d2294007b0f kube-proxy: store LoadBalancerVIPs as net.IP 564b80b1e11 kube-proxy: don't use invalid cidrs in unit test 41ba76d23e7 kube-proxy: don't use invalid cidrs in unit test 2e999fff026 Fix compiling e2e.test on macOS 6b5e973e5f6 Migrate cmd/kube-proxy to contextual logging (#122197) e46778a246a remove dead code 87816ffb2c0 Support ignore scheduler extender error when binding f8abe71238f Add an post-upgrade condition to ensure the job is running 67cf648ab77 Add a new neverTerminate job behavior just for upgrade b7012da2ad4 Remove providerless tag in controller_test.go 377f521038e kube-proxy: change implementation of LoadBalancerSourceRanges for wider kernel support ca8c27c480f kube-proxy: do not delete previously stale but currently active chains 073cfdfac90 kubeadm: skip unmount on missing /var/lib/kubelet 0fc1b9c9aad Promote LegacyServiceAccountTokenCleanUp to GA 683f7f43af0 e2e/endpointslice: add ready conditions d5664276bf5 refact IsLikelyNotMountPoint e25e1d39bd1 Add KUBE_PROVIDERLESS for CI jobs to run with providerless tag fdf6503e601 Enable more storage tests to work independent of the providerless tag 5704a588101 add test for the registered feature gates 4b296699af8 Add fake GCE provider to make CI jobs happy 549ef5da1bd split ingress tests into multiple files 88bfefad0f5 import providers selectively based on the tag 220a559f45e Add missing doc.go for some providers 7a236bd7e06 Add providerless tags appropriately in test/ c019b51be41 Remove unnecessary providerless tag in azure legacy provider 5c196ddaef5 add patch integration test to disable nodeport for LB type service 4a18b4e9fe6 allow service NodePort to be updated to 0 in case AllocateLoadBalancerNodePorts=false edff1c3b2fd swap originalPod and modifiedPod to match the comments. 801afbf888f refactor TestPriorityQueue_Update 288c00c0c7b Allow framework plugins to be closed 73bec0f6d95 api: remove SecurityContextDeny admission plugin d9e48705ff6 kubeadm: make the active timeouts structure accessible from anywhere ea0fa414457 kubeadm: implement mutators for "config migrate" 492c0619dc8 kubeadm: add a Timeouts struct to v1beta4 2f5121671fc kubeadm: add ResetConfiguration.UnmountFlags afefc6f4ebe Make EndpointSlice API e2e test faster af6e653f175 Use errors.Is() to handle err returned by LookPath() 2431a964af3 Drop hack/verify-govet-levee 9c6b42af46e promote contextual logging to beta, enabled by default d6bfd7daeb8 kubeadm: throw errors on unmount instead of warnings 289bd72631b Add ut for pkg/registry/networking/servicecidr 4aecb151b83 Fix kubectl drain error handling bug. 99979fd98a6 kubelet: cleanup system-reserved and kube-reserved flag usage 1d144f518e2 Fix SELinux e2e tests: add label to observed metrics 246e69fb990 Use http/2 for localhost webhook 55c5db172ed lock GA feature-gate ConsistentHTTPGetHandlers to default 55e1646fa42 removed the deprecated azureFile in-tree storage plugin a3c4a609950 Save a list of images used by e2e.test 10a6885da15 feat(cli-runtime): wrap meta.NoKindMatchErrors 2e8e2989d15 Removing Windows image from e2e test image utils af8da8e01c2 [StructuredAuthnConfig] add comment for extra keys unique requirement 5405dd0f9b8 Update goleak from v1.2.1 to v1.3.0 d3b8eba690f Update konnectivity to 0.29.0 be88a79b6ab Remove unused csi-hostpath-testing.yaml 7503440ba85 bump runc to v1.1.11 09abd6be5a8 address reviews a2f397a4b84 kubeadm: increase ut coverage fo phases/kubeconfig 97db0caf6b6 kubeadm: fix flaky test TestRunRenewCommands c3775de7479 fix logic error 5ab23179473 run all PreFilter when the preemption will happen later in the same scheduling cycle e1e035e3a80 doc: make it clear that newly scheduled Pods are Pod/Add events bf1b3a161b8 add(nodevolumelimits): return UnschedulableAndUnresolvable when PVC is not found 2203cb7dde8 fix: create tls secret cert to crt for --cert flag 5607349e39a remove wrong warning event (FileSystemResizeFailed) during a pod creation when it uses a readonly volume. 8f2aaf63d7b Fix incorrect error checking 20fe2a3539e Add decoding time to the audit log e3686246ea9 Fix update-openapi-spec to not change caller CWD 41a508f5388 kubeadm: print supported shell types in error message for 'kubeadm completion' bd269e06baa feat: support annotation in nodewrapper feb833f1296 fix nil pointer dereference when EventedPLEG is enabled f73bba51c97 flowcontrol: set the serialization version to v1 430fd83454d kubeadm: increase ut coverage for util/etcd 3b67181c93b remove GA featuregate RemoveSelfLink 719844e196a Fix dry-run flag in go-runner and run_e2e.sh scripts d849c625ec2 Remove kube-proxy proxy detection & increase timeout 86873d33352 NodeProblemDetector tags d12416e2f31 remove duplicated check on validateTokenRequests for new object f8f24cf8e7e ValidateVolumeAttributesClassUpdate also validates new vac acbbaddada4 Initialize default attach func regardless of the value of flag 041efcd1d40 scheduler: update an old comment 1c089afcf37 Fix a set type 147114e6485 Update some change tracker doc comments a8a12be3d30 Rename cache's endpointSliceInfo/endpointInfo to endpointSliceData/endpointData 764cb0457f5 Move some code around in servicechangetracker.go/endpointschangetracker.go a73b275031a Split ServicePort/Endpoint from ServiceChangeTracker/EndpointsChangeTracker ede0dc1d079 Make newBaseServiceInfo a function rather than a method 0779042a6f1 Remove a useless "_" assignment to appease the linter 452fcc5fd6e Remove some dead code in service.go 51f3b705c64 hack/tools: bump logtools to v0.8.0 90e68e3a024 Update the help mesage of interactive flag in kubectl delete f89c744b7bb Only run Prioritize() for extenders with prioritizeVerb configured cd3f7a31e81 Add unit tests for no score plugin scenario 7abba242312 Fix existing unit test (add no op scoring plugin) e19be41f584 Don't evaluate extra nodes if there's no score plugin defined 4ede571f8bc dra e2e: unify per-node resource specification bc83cea0eb4 test/e2e: add kubelet test for hostAliases with hostNetwork=true d317b01244a Fixed Inappropriate Logical Expression 47ee56a7f25 core/v1: remove note about hostAliases not working with hostNetwork 4658f769456 CHANGELOG: Update directory for v1.26.12 release c0e9fddfd97 CHANGELOG: Update directory for v1.28.5 release 38f4f9d8c4c CHANGELOG: Update directory for v1.27.9 release c8a2d5684d0 etcd: Update to version 3.5.11 36cceff0a3c e2e: forbid usage of gomega.BeTrue/False a8da4202c0a .*: bump golang.org/x/tools to v0.16.1 b0d4a8cd6df dra scheduler: fix incorrect tracking of claim candidates for reallocation 32fbb23f3b3 kubeadm: remove usage of the TryRunCommand() function 557118897de kubeadm: drop concurrency when waiting for kubelet /healthz 4a7592f8a42 Remove GA feature gate LegacyServiceAccountTokenTracking in 1.30 1f3e668e180 Use semantic comparation for API 725b107f494 Correct typo from 'gingko' to 'ginkgo' 626f349fef5 Drop PendingChanges methods from change trackers, move into UpdateResults 5d0656b1f69 Squash some unnecessarily-chained methods in the change trackers c8f9ebfb72b dependencies: gomega v1.30.0 + ginkgo v2.13.2 538248df0de More understandable error for scheduler configuration validation 64da4345231 kubeadm: hide unwanted global klog flags b6eac505fb4 Add testcase setup scheduler 2edb3349933 kubeadm: hide unwanted global klog flags c1ce1e00ee9 Properly build-tag the Linux kube-proxy backend code b69510b0690 Remove an unnecessary abstraction 75695dae109 move encryption config types to standard API server config location 868114a41de k8s.io/code-generator: include all metav1 applyconfigs b6e34187ca4 Update duplicate env var warning 1d0453127d8 feature(NodeAffinity): return Skip in PreScore when nothing to do in Score 85cc2b38336 cluster/gce: upgrade cos-97-lts -> cos-109-lts 1ee81839036 add extra locations to check for release-tars 09a80df1d13 podtopologyspread: scheduler queueing hints d36a7089cd9 scheduler/NodeUnschedulable: reduce pod scheduling latency b6c1f8ef08c Fix etcd repository path to prevent redirects. 642574e9643 WatchEvents seems useless aee1d54a0dc Drop SubcontainerInfo c865ad532a4 fixing based on feedback in PR 9d1829c33ac Make OpenAPIGetter tolerant of nil d621e09a528 remove unused GetRawContainerInfo 15e0c416019 Fix CSI migration for vSphere volumes b3285fa8df4 Add tests for CIDR type 31f9384646a Add tests for IP type e1f9aa450b7 Add costing estimations for IP and CIDR 4710f085b3d Add IP and CIDR libraries to CEL environment for 1.30 2f585b45123 Add CIDR network CEL extension 13b22b23a1a Add special IP validations to IP CEL type c6aa360d3ef Add IP address CEL extension 85d08833bfa warnning on relaim policy when it is Recycle eb8f3f194fe use build-in max and min func to instead of k8s.io/utils/integer funcs fe29f47372e Remove GA featuregate about ExpandedDNSConfig in 1.30 4d7c5d9257e nodeaffinity: scheduler queueing hints f676c99d6e4 Wire in field dropping for CRDs 88cfff678bb Drop v1.27.0 API testdata 8cf0c79fc85 Add v1.29.0 API testdata 06679402e75 remove PruneWhitelist, use prune-allowlist instead c62155a7705 refactor healthCheck's CreateJob with TTLSecondsAfterFinished be48c93689b Sched framework: expose NodeInfo in all functions of PluginsRunner interface 16b6be1e503 add unit test for the scheduling queue for QueueingHint disabled e2cf9692fc0 Remove unused code in kubelet - take 1 ced99383d55 logcheck: remove redundant entry for pkg/scheduler b450224c129 golangci-lint: inline logcheck configuration 49084fe5771 golangci-lint: logcheck v0.7.0, golangci-lint v1.55.2 e706b6ba14b Use a separate function for checking if device was reconstructed 87d817e62d8 handlers/watch: refactor watch serving to prepare offloading 16f35785f9f Drop publishing-bot rules for the release-1.25 branch 8251e4dfdf5 Update kubedns and nodelocaldns to v1.22.28 1160521a4f6 Revert "Scheduler first fit" 86ab185fa1e Migrate client-go/metadata to contextual logging (#122225) 01916625dab Remove unnecessary error catch in scheduling failure (#121981) 7a82c03daa3 nominate self (carlory) as sig storage reviewer 31710a799d4 fix: Refactor TestFinalizerCleanup unit test by asserting job and pod informer state (#121856) 2e388dd7e91 keep existing PDB conditions when updating status 16aad468b65 Replace test.name with test.namespace a3a4192eb97 Move expensive test setup (apiserver and running controller) to be run once in TestAutodeleteOwnerRefs parameterized tests 8f5efce8e03 Update publishing-bot rules to Go 1.20.12 9573eb54c71 etcd: Build image 3.5.11 221897d7513 CHANGELOG: Update directory for v1.29.0 release 1ae5594fb2a Update cni-plugins to v1.4.0 b0a27ff34e3 cluster: bump cloud-provider-gcp image verison to v28.2.1 7aeecc42a46 Revert "scheduler/NodeUnschedulable: reduce pod scheduling latency" 329b873e4e8 Revert "scheduler/nodeaffinity: reduce pod scheduling latency" 9e1adced5db noderesourcefit: scheduler queueing hints 324816a883b dra: enable adding ReservedFor entries through strategic-merge-patch 983f6a4a84b Update cri-tools to v1.29.0 917027b42e4 fix incorrect function comment 56dd5ab10ff Add tests for checking of uncertain device paths 87c6b0d69fe Smallish update-vendor cleanup 477176a4674 kubeadm: add supported etcd version for v1.30 34bc590418a Add unit test for Job Controller for panic when PodFailurePolicy is used on 1.28 1e54c050936 leaderelection: Instrument for when slowpath is exercised 1d9f7fd516b leaderelection: optimistically update leader lock d5060de93f4 use e2e f.Timeouts.PodDelete instead of 1 minute 7dfe3d866b7 Fix verify-licenses.sh 6fee657d3ac Makefile: enable warn-undefined-variables 2208cb94936 e2e: only select linux nodes for NodeLogQuery tests b9ff6b25f22 Simpler and less noisy make-clean 39417e9d449 kubeadm: update the help msg for `kubeadm upgrade plan` 7897709ed0f Add timezone column in cronjob get command 1d11bc4aca6 e2e framework: provide more guidance to developers 28f8e56d553 Fix prerelease codegen log string 44898f79099 Address comment ed0facacfa4 Fix device uncertain errors on reboot 48671a3a20b explicitly stop/start docker to fix up local-up-cluster.sh 048cb8b2ed3 Keep presence cost to 0 to ensure backward compatibility. 20b67a4d1ac kubeadm: increase ut coverage of util/config 78b4ab11d5b also report scheduling_algorithm_duration_seconds metric when the pods is unschedulable 210ed2ebbd8 add preScore for volumeBinding e92501b8fc6 optimize the comment 56262ca56aa kubeadm: cleanup unused CreateCSR and associated functions 2fd4758359b change func WithTracing parameter naming 51495bb4c59 optimize the unit test ceb7ca93875 Fix etcd storage_events_received_total metric not being registered 4b1408c2e78 Fix typos: update registerCidrsetMetrics to registerCIDRSetMetrics 2d952528cfa belated updates to feature-approvers for SIG Network leads changes 69c40a33965 fix lints 74a6a4581f0 fix by linters 24c4d6f7c9c add unit test for kubelet trace eed6e29a5b8 client-go events: support context.Background() as context 5310abe14ad make scheduler_perf usable from other repositories 08e5e8681dd E2E - Sig-autoscaling: Refactor the Autoscaling utils to use gomega.Consistenly according to e2e test framework guidance a23b26913fc DRA helper: enhance context support d11511b1e81 kubelet: enhance context support 0c33ada8503 update func CreateJoinControlPlaneKubeConfigFiles variable name fa31b4d30da Remove GA featuregate about KubeletPodResources in 1.30 eb60b31e6eb Remove GA featuregate about KubeletPodResourcesGetAllocatable in 1.30 a20093aa07c Remove GA featuregate about IPTablesOwnershipCleanup in 1.30 965b3634ff8 Remove GA featuregate about remove_MinimizeIPTablesRestore in 1.30 84c0ed2642f Add SidecarContainers feature beta version e13dca64cf0 Remove GA featuregate about ProxyTerminatingEndpoints in 1.30 b1ad834dfb1 No need to calculate ResourceEphemeralStorage additionally a80c3d03011 e2e/openapi: fix test panic when OpenAPI CRD doesn't show up within timeout d9070623085 Minor cleanup in watch handlers d8bd150784b support pod namespace indexer 9efff41b8e0 making suggested changes 55e60db88b1 Unify watch handler across http and websockets a82ee6d4168 fix error check 8acf1857917 Use a generic Set for utiliptables.GetChainsFromTable 7cedc3d7417 Simplify creation/tracking of chains 1f5738df848 fix(scheduler): fix incorrect loop logic in MultiPoint to avoid a plugin being loaded multiple times 38c67af789b Use tristate for provideclusterinfo to manage provided flag f035fea63ab remove unnecessary code 3df00d1bdde Only run Prioritize() for extenders with prioritizeVerb configured 56dcde86270 Add unit tests for no score plugin scenario 6d92b330e31 use ctx withoutcancel 5e7c4c245b9 remove the deprecated in-tree vsphere volume's code a6e48ef978e Remove GA featuregate about ExperimentalHostUserNamespaceDefaultingGate in 1.30 90fc108f6da fix kubelet trace broke in 1.28 f7aca72155e unittests: Fixes unit tests for Windows (part 8) feb23ec581b Fix existing unit test (add no op scoring plugin) 199dc03bdd4 Don't evaluate extra nodes if there's no score plugin defined 2d943801ad3 Clean up unused type `HealthcheckType`. 5e5f8b1dd29 move provideclusterinfo assignment into correct place c86189d1de8 clean up unused parameters for volume zone unit test eddf65849df Fix list_type_missing in k8s.io/apiserver 18f3941c24b Fix list_type_missing in k8s.io/metrics 58fb9f6e66b Fix list_type_missing in api/storage e96578fb4d0 Fix list_type_missing in api/rbac b2458e456a1 Fix list_type_missing in api/networking 7fc3ef1fec0 Fix list_type_missing in api/imagepolicy cddfa437698 Fix list_type_missing in api/extensions cfe146615ac Fix list_type_missing in api/core fe902f7384a Fix list_type_missing in api/autoscaling ad397373970 Fix list_type_missing in api/authorization b24cffb1744 Fix list_type_missing in api/authentication a3ea994fa28 Fix list_type_missing in api/apps 460df86f2a6 Fix list_type_missing in api/admissionregistration b8982be2684 Fix list_type_missing in sample-apiserver e9bd9262dc9 Fix list_type_missing in apiextensions-apiserver dd80194d967 Re-run codegen with new kube-openapi 1f55357d993 Re-vendor k8s.io/kube-openapi 44060fb1f36 Fix "list_type_missing" API violations in meta/v1 9f8f55a6ed2 Use DBG=1 for conformance verification 37b7ae6b933 build: use -trimpath in non-DBG mode 2315d3fed54 uncomment ktesting.AnyToString f86249c68e6 kubeadm: remove outdated notes during upgrade e38362501b7 dynamic-resource-allocation Update API comments e5b86c1034c Fix node update event will miss some potential changes a601ebd6b60 Changed the log message 02b0dc98dd9 remove unnecessary fmt.Sprintf call 57a5db8da3d remove feature-gate APISelfSubjectReview eb45a8f2f5b Added comments 76be319571b Optimzed the code 5c99f3a24e3 Logged the return value of ListPlugins 3e1dbccf4d3 Don't sort under lock 91c94d007fa fix falky test pkg/registry/core/persistentvolume/storage TestUpdateStatus f221098d2c9 Fix: modify a flag doc of pod-max-in-unschedulable-pods-duration 468e2dac81d fix: requeue pods rejected by Extenders properly b088e650077 kubectl config set-credentials: Add InteractiveMode and ProvideClusterInfo flags c494e8b18e7 fix incorrect getDeviceNameFromMount comment 03b8241fcef put storage related plugins under SIG-Storage reviewing 4d9df1134f6 fix(doc): elaborate the documentation of SnapshotSharedLister 52ff7f8dc0c fix(framework): elaborate the document on PostFilter 9cb2d1cf6de Removed Comments 1dca49157a5 Utilized ListPlugins method 59c75b001a4 cleanup: remove getStorageAccountName warning messages 1dcb31aebbb kubeadm: fix flaky test TestRetrieveValidatedConfigInfo 7ba546cfeb7 drop alpha comment on ephemeral storage aba817ac1d6 return not-found errors properly from fake listeres f0aab8c984d encoding: avoid setting GVK unnecessarily 1489a992060 Update mount_windows.go a3e27aa1ade ad controller: optimize populateActualStateOfWorld 854347ac818 ad controller populator: check for inUse sync in test a85f5879849 Job: Use built-in min function instead of integer package 140abfc010c Remove `leaky` package and move `PodInfraContainerName` to staging 2076429e434 Enable pod container resources tests on Windows 19da26005b3 kube-proxy: Fix etp:Local for externalIPs 81d040d5381 remove import hack about k8s.io/utils/clock/testing 565ac50bafb Drop testing dependency from shipped binaries 12c9bfc21d6 k8s.io/apiserver: refactor GenericAPIServer healthz code. 5164db066cd Drop testing dependency from shipped binaries 3df90134ca5 add script for restricting import of test only libraries 1dadf576f29 Updated Added Imagefs inodes in default Eviction Hard b8533f79769 kubelet: add metric for the first pod with network latency f9ceab37ca3 e2e: pass context into pod helper functions 4de02f2dec9 kubelet:memorymanager: add metrics e2e tests ddd60de3f3a memorymanager:metrics: add metrics d6b8a660b08 Fix kubelet panic when allocate resource for pod. 33aa56097a3 Set the initial length of set[T] in sets.KeySet 4c06bd5bbb8 fix bad assumptions in gce network tests f040d9012cf verify-no-vendor-cycles: set up Go environment 30dc2f0773c Added Imagefs inodes in default Eviction Hard 60520b6d4a2 look for the cm after the lb is created ae3235aa01b Remove --use-real-proxier support from kubemark 407b9d96104 remove duplicated check in operator_generator.go bd4707ac9a9 fix dns autoscaling test to run with coredns 4a4940694f4 remove stale comments 1c0044594dc cleanup todo after feature.BlockVolume gate was removed 3fb16abfca4 make the decode function respect the timeout context fec63d5ea0e fix: use generic set in pkg/util/iptables ae24846c487 add comments for switch of syncUnboundClaim 29335763feb kubeadm: increase ut coverage app/upgrade/versiongetter 166b71757b9 dependencies: zapr v1.3.0, zap v1.26.0 abaf7a800db increase timeout in fakeDraDriverGrpcServer to fix flake in dra/manger_test ab1eb8ff244 Add comment in noderestriction on Node-bound-tokens ed8d10f6605 Update sig-auth aliases d78a794be22 Remove unnecessary sort in kube-proxy ipvs 1cd1092dd98 Remove NodeAlphaFeature label from sidecar e2e tests b91f07008cc add ut c26bb7eb85a update util/sets to use standard package cmp a00a610d15c move SidecarContainers featureGate checking to PreFilter 6cca6e05246 bump kube-dns to v1.22.27 e48aa093402 Make verify-typecheck.sh only check valid targets for a platform 090b79f65d7 Update version.sh 957e9a7f1a0 adc remove redundant check a96d21b4b0c Add logs for event handler 84da8e6a532 cluster/gce: add match conditions to PersistentVolume labeling webhook 624169c5b50 k8s.io/apiserver/storage/etcd: refactor etcd GetList. 1186e25a452 Remove ability to re-enable serving deprecated storagev1beta1 and storagev1alpha1 APIs 6b3476b79fe node labels and taints do not change, node events are ignored in daemonset controller 7b60e7e2a31 Added plugins enabled at each extension point d96a9858d39 client-go: allow adding indexes after informer starts 58236aa3ebf remove EventRecorder from ControllerParameters of pv base controller fade7463cd4 Add String() to framework status 083818f9e29 fix wrong condition description in PVC e2227a24fbc switch to e2 machine types 4fa3247a61e use context for lazy evaluation. 6b00f3a7976 add StructuredAuthenticationConfiguration feature to kube feature gates file 8e5b959e122 windows-tests: Add retries to Windows `assertConsistentConnectivity` func 32db5774a34 Fixed extra lines 81bf3a59d1c Added mutex locks when accessing file object : addressed review comments 63b3085f2a8 fix ad controller populators test 21cf23b4faf Added extra info about default plugins in component config 0e76e2c2bbf Added mutex locks when accessing file object : lint check fix 9ed4c58a1f1 Added mutex locks when accessing file object e1e6f341999 test-autoscaling stop using deprecated framework.ExpectNotEqual 3c530eea2da automatically setup etcd when running verify/update openapi-spec.sh 4bba73a2bd9 Add comments to cpu accumulator and minor renames ae5bf8e4c64 verify-golangci-lint.sh: clarify intended usage of warnings 95f2c859a39 snapshot controller version bump to latest 48452fef8de kube_codegen: Add a --one-input-api flag 87d158e4571 kube_codegen: genclient can look in any Go file a789a9d44bb kube_codegen: avoid dups in dirs with >1 file 3df3b832265 e2e_api: stop using deprecated framework.ExpectNotEqual e69a960792e skip deploying csi driver if it is already installed e20ecbe1b49 cleanup:e2e-cloud:stop using deprecated framework.ExpectNotEqual f53ff68edd1 Generated files 531324cb1df allow FSGroupPolicy and PodInfoOnMount to be mutable in CSIDriver.Spec d9545976ede using wait.Interrupted instead of deprecated wait.ErrWaitTimeout for utils 47b1002bab4 fallback to origin IsLikelyNotMountPoint to avoid regression 81ef146e2fe feat: support statx STATX_ATTR_MOUNT_ROOT attribute dbb6927ec22 Replace stat syscall with statx b20bc79a602 remove not register event code 6e0ece85c49 cleanup the retrun style for cp execute function aa9b2b16968 use generic Set in api 567fca7baa9 Use copy() instead of a for loop 61023579c11 Fix Windows credential provider cannot find binary Windows credential provider binary path may have ".exe" suffix so it is better to use LookPath() to support it flexibly. 76919e95697 Updated descriptions in kubectl create deployment help , added example for multiple images 56c241783e3 fix ab1f97bd6ed fix c7549fe340d fix(kubectl): delete pod declare no controllor note 286628b0304 Fix error message for invalid resource reservation e40d00cf53a fix: 119921 ad0b671b56d getPersistentVolume remove reduant deep copy 12b370cbbb4 bugfix(namespace-controller): Correctly cascade ctx when making API calls 3579674df2d fix comment of rbac decision for NoOpinion c2049c7961b chore: loop optimization defe307ec22 chore: io/ioutil deprecated e6900f5ead7 Optimize the performance of the Clone method of preFilterState Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-07-15 19:10:35 +00:00
Bruce Ashfield	4fbc98c93c	k3s: update to v1.30.2+k3s2 ... Bumping k3s to version v1.30.2+k3s2-2-g16321f2554, which comprises the following commits: faeaf1b01b Update flannel to v0.25.4 and fixed issue with IPv6 mask a08ac6fcdc update stable channel to v1.29.6+k3s1 (#10417) aa4794b372 Replace 1-weight semaphore on snapshots with simple mutex b4d4ed8f01 Fix agent supervisor port using apiserver port instead 9af17d2997 Update Kubernetes to v1.30.2 (#10349) f10cb29534 fix typo, use rancher/permissions c0450a2cb4 Fix race condition panic in loadbalancer.nextServer cff6f7aa1d Expand GHA go caching to includ newest release branch (#10307) d9b8ba8d71 Add snapshot retention etcd-s3-folder fix 043b1eac5d Add test for `isValidResolvConf` (#10302) df5db28a68 Add ADR for support for etcd s3 config secret (#9364) 1661f1024a Fix bug that caused agents to bypass local loadbalancer 79ba10f5ec fix: Use actual warningPeriod in certmonitor 1268779ea0 Bump Local Path Provisioner version (#10268) f9130d537d Fix embedded mirror blocked by SAR RBAC and re-enable test 7a0ea3c953 Add write-kubeconfig-group flag to server (#9233) 307f07bd61 Fix issue caused by sole server marked as failed under load ed23a2bb48 Fix netpol crash when node remains tained unintialized f2e7c01acf chore: Bump Trivy version 4cb4542c3a Bump ubuntu from 22.04 to 24.04 in /tests/e2e/scripts 84b578ec74 Use busybox tar to avoid issues with fchmodat2 on arm 86875c97bb Bump alpine from 3.18 to 3.20 in /package de4cda57e6 Bump alpine from 3.18 to 3.20 in /conformance 2eca3f1e2c Update golangci-lint to stop using deprecated skip files/dirs f8e0648304 Convert remaining http handlers over to use util.SendError ff679fb3ab Refactor supervisor listener startup and add metrics 3d14092f76 Fix issue with k3s-etcd informers not starting eb192197eb Updating the script binary_size_check to complete the command name by adding .exe extension to the k3s binary name to make it available to run stat command 6683fcdb65 Bump klipper-helm image for tls secret support c2738231ec update channel server for may 2024 (#10137) 3f62ec3207 Add extra log in e2e tests 99f543a2d4 fix: use absolute path 86b2554772 test: copy vpn-auth-file to guest b8f101fd89 test: increment agentCount ab29054887 test: use absolute path to auth file a8f88aa9e5 test: add agent with auth file 6dcd52eb8e Use TrafficManager interface when calling flannel af7bcc3900 Bump flannel version to v0.25.2 aadec85501 Fix go.mod 6fcaad553d allow helm controller set owner reference 6886c0977f Follow directory symlinks in auto deploying manifests (#9288) 3e48386c6e git_workflow filename correction c1cb5d63b9 add missing kernel config check f24ba9d3a9 Validate resolv.conf for presence of nameserver entries 2669d67a9b Bump kine to v0.11.9 to fix pagination afdcc83afe bump minio-go to v7.0.70 423675b955 Create ADR for branching strategy (#10147) aa36341f66 Update kube-router version to v2.1.2 5a0162d8ee Drop check for legacy traefik v1 chart 37f97b33c9 Add support for svclb pod PriorityClassName b453630478 Update local-path-provisioner helper script 095ecdb034 Fix issue with local traffic policy for single-stack services on dual-stack nodes. e8950a0a3b Fix issue installing artifacts from builds with multiple runs 5cf4d75749 Bump spegel version bf8b15e7ae bump etcd to v3.5.13 aaa578785c Bump containerd to v1.7.17 30999f9a07 Switch stargz over to cri registry config_path 7374010c0c Use fixed stream server bind address for cri-dockerd 5f6b813cc8 Add WithSkipMissing to not fail import on missing blobs 811de8b819 Fix bug when using tailscale config by file 80978b5b9a Update to v1.30.1 (#10105) 1d22b6971f windows changes 1cd7986b50 Update channels with 1.30 (#10097) dba30ab21c Replace deprecated ruby function 14549535f1 Fix e2e tests (#10061) 6531fb79b0 Deprecate pod-infra-container-image kubelet flag (#7409) 144f5ad333 Kubernetes V1.30.0-k3s1 (#10063) fe7d114c6a Bump E2E opensuse leap to 15.6, fix btrfs test (#10057) 0981f0069d Add E2E Split Server to Drone, support parrallel testing in Drone (#9940) 5c94ce2cf8 update stable channel to v1.29.4+k3s1 (#10031) 94e29e2ef5 Make /db/info available anonymously from localhost d3b60543e7 Fix 10 second etcd-snapshot request timeout 5b431ca531 Fix on-demand snapshots not honoring folder d973fadbed Update to v1.29.4 (#9960) 06b6444904 Add startup testlet on preloaded images (#9941) 4e26ee1f84 Match setup-go caching key in GitHub Actions (#9890) 81cd630f87 Update kube-router to v2.1.0 c59820a52a Allow LPP to read helper logs (#9834) 3f906bee79 Update packaged manifests b10cd8fe28 Bump latest to v1.29.3+k3s1 4cc73b1fee Actually fix agent certificate rotation 08f1022663 Don't log 'apiserver disabled' error sent by etcd-only nodes 7d9abc9f07 Improve etcd load-balancer startup behavior fe465cc832 Move etcd snapshot management CLI to request/response 0792461885 Bump containerd and cri-dockerd a064ae2f17 Add quotes to avoid useless updatecli updates 60248c42de Add supervisor cert/key to rotate list 9846a72e92 Bump spegel to v0.0.20-k3s1 (#9863) 0e118fe6d3 fix: agent volume in example docker compose (#9838) f2961fb5d2 Add workaround for containerd hosts.toml bug 49414a8def chore: Bump Trivy version (#9840) 52712859c5 Add updatecli policy to update k3s-root 7f659759dd Add certificate expiry check and warnings 6624273a97 Fix embeddedmirror test 93bcaccad1 E2E setup: Only install jq when we need it c98ca14198 Add wasm test to e2e matrix 6a42c6fcfe Remove old pinned dependencies (#9806) 14f54d0b26 Transition from deprecated pointer library to ptr (#9801) 5d69d6e782 Add tls for kine c51d7bfbd1 Add health-check support to loadbalancer edb0440017 Fix etcd snapshot reconcile for agentless nodes 7474a6fa43 Add /etc/passwd and /etc/group to k3s docker image 6c52235848 update channel server (#9808) c47c85e5da Move to ubuntu 23.10 for E2E tests (#9755) b5d0d4ee21 Bump Trivy version (#9780) 41377540fd Use ubuntu latest for better golang caching keys (#9711) 5461c3e1c1 Bump k3s-root 3f649e3bcb Add a new error when kine is with disable apiserver or disable etcd f099bfa508 Fix error when image has already been pulled 65cd606832 Respect cloud-provider fields set by kubelet d7cdbb7d4d Send error response if member list cannot be retrieved 7a2a2d075c Move error response generation code into util 8aecc26b0f Update to v1.29.3-k3s1 and Go 1.21.8 (#9747) bba3e3c66b Fix wildcard entry upstream fallback 364dfd8b89 Fix flaky check in btrfs test 21c170512c Fix e2e vagrant cacheing aea81c0822 Run docker tests in E2E GH Action ec5d34dac0 remove repetitive words (#9671) fe2ca9ecf1 Warn and suppress duplicate registry mirror endpoints 9bd4c8a9fc Bump upload and download actions to v4 (#9666) 2a091a693a Bump metrics-server to v0.7.0 1c8be1d011 Improve E2E Aftersuite cleanup af4c51bfc3 Move to ubuntu 2204 for all E2E tests da7312d082 Convert snapshotter test in e2e test d022a506d5 Migrate E2E tests to GitHub Actions 75ccaf9942 Allow non-sudo vagrant 6f331ea7b5 Include flannel version in flannel cni plugin version d37d7a40da Bump Trivy version (#9528) 88c431aea5 Adjust first node-ip based on configured clusterCIDR 1fe0371e95 Improve tailscale e2e test 82cfacb2f3 Update contrib/util/check-config.sh ce0765c9f8 Rename `RAW_OUTPUT` -> `NO_COLOR` ff7cfa2235 Disable color outputs using RAW_OUTPUT env var 59c724f7a6 Fix wildcard with embbeded registry test f82d438f39 e2e tests: cover WebAssembly integration 64e4f0e6e7 fix: use correct wasm shims names 2c4773a5aa chore(deps): Remediating CVEs found by trivy; CVE-2023-45142 on otelrestful and CVE-2023-48795 on golang.org/x/crypto (#9513) 091a5c8965 Don't register embedded registry address as an upstream registry b5a4846e9d Remove filtering of wildcard mirror entry 84a071a81e Add env var to allow spegel mirroring of `latest` tag 26feb25c40 Bump spegel to v0.0.18-k3s4 88d30f940d Use and version flannel/cni-plugin properly 0b3593205a Move snapshot-retention to EtcdSnapshotFlags in order to support loading from config 3576ed4327 Clean up snapshotDir create/exists logic b164d7a270 Fix additional corner cases in registries handling 29c73e6965 Fix setup-go typos (#9634) 935ad1dbac Move docker tests into tests folder (#9555) 138a107f4c Reenable Install and Snapshotter Testing (#9601) 81a60de256 update stable channel to v1.28.7+k3s1 (#9615) 109e3e454c Bump helm-controller/klipper-helm versions 82432a2df7 Fix issue with etcd node name missing hostname 513c3416e7 Tweak netpol node wait logs be569f65a9 Fix NodeHosts on dual-stack clusters 8c83b5e0f3 Rootless mode also bind service nodePort to host for LoadBalancer type 3e948aa0d5 Correct formatting of GH PR sha256sum artifact (#9472) 8f777d04f8 Better GitHub CI caching strategy for golang (#9495) 736fb2bc8d Add an integration test for flannel-backend=none 3b4f13f28d Update klipper-lb image version fa37d03395 Update install test OS matrix (#9480) 922c5a6bed Unit Testing Matrix and Actions bump (#9479) 57e11c72d1 Testing ADR (#9562) 86f102134e Fix netpol startup when flannel is disabled fae0d99863 Use 3/2/1 cluster for split role test f90fd7b744 Change default number of etcd nodes in E2E splitserver test fae41a8b2a Rename AgentReady to ContainerRuntimeReady for better clarity 91cc2feed2 Restore original order of agent startup functions 1c1746114c remove e2e logs drone step (#9517) 085ccbb0ac Fix drone publish for arm (#9503) 3e13e3619c Update Kubernetes to v1.29.2 (#9493) de825845b2 Bump kine and set NotifyInterval to what the apiserver expects 0ac4c6a056 Expose rootless containerd socket directories for external access 14c6c63b30 Expose rootless state dir under ~/.rancher/k3s/rootless e3b237fc35 Don't verify the node password if the local host is not running an agent 701e7e45ce Fix iptables check when sbin isn't in user PATH fa11850563 Readd `k3s secrets-encrypt rotate-keys` with correct support for KMSv2 GA (#9340) cfc3a124ee [Testing]: Test_UnitApplyContainerdQoSClassConfigFileIfPresent (Created) (#8945) cc04edf05f Update Kube-router to v2.0.1 a36cc736bc allow executors to define containerd and docker behavior b1323935dc Add codcov secret for integration tests on Push (#9422) 753c00f30c Consistently handle component exit on shutdown 9e076db724 Bump cri-dockerd e9cec46a23 Runtimes refactor using exec.LookPath f9ee66f4d8 Changed how lastHeartBeatTime works in the etcd condition 358c4d6aa9 build: Align drone base images (#8959) 950473e35f Bump flannel version 8224a3a7f6 Fix ipv6 endpoint address selection for on-demand snapshots 888f866dae Fix issue with coredns node hosts controller 77ba9904d1 Bump CNI plugins to v1.4.0 6ec1926f88 Add check for etcd-snapshot-dir and fix panic in Walk 82e3c32c9f Retry startup snapshot reconcile 4005600d4e Fix excessive retry on snapshot reconcile 6a57db553f update channel (#9388) 5c92345423 Bump codecov/codecov-action from 3 to 4 (#9353) a324146b76 Bump Trivy version (#9237) fcd1108e73 Add ability to install K3s PR Artifact from GitHub (#9185) f249fcc2f1 Bump Local Path Provisioner version (#8953) 57482a1c1b Bump helm-controller to fix issue with ChartContent c635818956 Bump runc and helm-controller versions 97a22632b9 gofmt config_test.go 29848dea3d Fix issues with certs.d template generation 2d98c44fb3 Delete old stalebot cef7e9e2dc New stale action d8907ce62c Update to v1.29.1 (#9259) 9a70021a9e Error getting node in setEtcdStatusCondition c87e6e5f7e Move proxy dialer out of init() and fix crash 5303aa60e9 Fix nonexistent dependency repositories (#9213) 76fa022045 Enable network policy controller metrics c5a299d0ed Bump quic-go for CVE-2023-49295 6072476432 Add e2e test for embedded registry mirror 37e9b87f62 Add embedded registry implementation ef90da5c6e Add server CLI flag and config fields for embedded registry b8f3967ad1 Add ADR for embedded registry 77846d63c1 Propagate errors up from config.Get 16d29398ad Move registries.yaml load into agent config 5c99bdd9bd Pin images instead of locking layers with lease df5e983fc8 add e2e startup test for rootless k3s (#8383) 64dbbba996 update s3 e2e test (#9025) 4a92ced8ee Handle etcd status condition when cluster reset and disable etcd 8d2c40cdac Use `ipFamilyPolicy: RequireDualStack` for dual-stack kube-dns (#8984) ac8fe8de2b fix: update trivy from 0.46.1 to 0.48.1 (#8812) 6330e26bb3 Wait for taint to be gone in the node before starting the netpol controller 102ff76328 Print error when downloading file error inside install script (#6874) eae221f9e5 Fix OS PRETTY_NAME on tagged releases b297996b92 Add runtime checking of golang version 5fe074b540 Add more paths to crun runtime detection (#9086) c45524e662 Add support for containerd cri registry config_path 319dca3e82 Fix nil map in full snapshot configmap reconcile db7091b3f6 Handle logging flags when parsing kube-proxy args 1e663622d2 Fix the OTHER log message that prints the wrong variable 08ccea5cb6 Fix install script checksum 9d21b8a135 add system-agent-installer-k3s step to ga release (#9153) a7fe1aaaa5 Dockerfile.dapper: set $HOME properly 30449e0128 Add 2>dev/null when checking nm-cloud systemd unit 0ad5d65a1e Added support for env *_PROXY variables for agent loadbalancer (#9118) a27d660a24 Add ServiceLB support for PodHostIPs FeatureGate baaab250a7 Silence SELinux warning on INSTALL_K3S_SKIP_SELINUX_RPM (#8703) aca1c2fd11 Add a retry around updating a secrets-encrypt node annotations (#9039) bbd68f3a50 Rebase & Squash (#9070) c7a8eef977 update stable channel to v1.28.5+k3s1 and add v1.29 channel (#9110) d87851d46e chore: Update Code of Conduct to Redirect to CNCF CoC (#9104) 9d9fbf4ff4 Bump actions/setup-go from 4 to 5 (#9036) 798eecf112 chore: Update sonobuoy image versions (#8910) 3190a5faa2 Remove rotate-keys subcommand (#9079) 9411196406 Update flannel to v0.24.0 and remove multiclustercidr flag (#9075) 7101af36bb Update Kubernetes to v1.29.0+k3s1 (#9052) bf3f29f9e8 Only publish to code_cov on merged E2E builds (#9051) 231cb6ed20 Remove GA feature-gates (#8970) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-07-15 14:02:19 +00:00
Bruce Ashfield	be406f8ae4	docker-distribution: update to v3.0.0-beta.1 ... Bumping docker-distribution to version v3.0.0-beta.1-2-gf22dd618, which comprises the following commits: 9ba73406 vendor: github.com/opencontainers/image-spec v1.1.0 c72db410 Prep for v3-beta1 release d3cc664f Update docs: JWKS credentials and AZ identity 558ace13 feat: implement 'rewrite' storage middleware 6d591190 Update Redis configuration docs with TLS options d9050bb9 remove layer's link file by gc 43a64480 Update dockerhub.md f36b44ff docs: disable base element override 83a071e9 Bump alpine version 5316d3bd Bump Go and golang linter a008d360 Create type alias for redis.UniversalOptions f27799d1 Add custom TLS config to Redis b63cbb33 Replace custom Redis config struct with go-redis UniversalOptions 050e1a3e build(deps): bump github.com/Azure/azure-sdk-for-go/sdk/azidentity 52d68216 feature: Bump go-jose and require signing algorithms in auth 975613d4 New path for distribution config c40c4b28 Enable configuration of index dependency validation 119c608f docs: update location of `filesystem.md` 062309c0 Stop proxy scheduler on system exit 421a359b Add a go.mod toolchain version f1875862 Set readStartAtFile context aware for purge uploads 16a305eb Add registry.Shutdown method for graceful shutdown of embedded registry a2afe23f add concurrency limits for tag lookup and untag a5882d66 vendor: update manifest dependencies 11215632 fix: ignore error of manifest tag path not found in gc 2fe34420 chore: fix some typos in comments e0a1ce14 chore: fix some typos in comments 601b37d9 Handle OCI image index and V2 manifest list during garbage collection 2db0a598 build(deps): bump golang.org/x/net from 0.20.0 to 0.23.0 8654a0ee Allow setting s3 forcepathstyle without regionendpoint 21c718d5 Add Go 1.22 support to CI 2446e110 chore: remove repetitive words in comments 167d7996 chore: bump distriution/reference dependency fdbb3a82 fix: upgrade scorecard version e8820b25 Don't try to parse error responses with no body 127fa7e0 proxy: Do not configure HTTP secret for proxy registry 1cb89e3e Update go versions cb2b51ca build(deps): bump google.golang.org/protobuf from 1.31.0 to 1.33.0 de450c90 update: support redirects in gcs storage with default credentials 1c5fe22d build(deps): bump github.com/go-jose/go-jose/v3 from 3.0.1 to 3.0.3 6465b4cd fix: typo 63eb22d7 Fix: ‘autoRedirect’ hardcode ‘https’ scheme 71a069dc Standardize OTEL error logging format to match application logs f690b3eb Added Open Telemetry Tracing to Filesystem package a4918b67 fix: typo 2763ba1e Do not write manifests on HEAD requests 1c3d44ec Update notifications.md 6ca646ca Initialize proxy prometheus counters values to 0 to prevent gaps after registry restart 1e8ea031 Add support for `Basic Authentication` to `proxyingRegistry` 5bebd152 Add a trademarks and docs license link 04182455 Include headers when serving blob through proxy 939061d1 build(deps): bump codecov/codecov-action from 3 to 4 e5f5ff7a build(deps): bump peter-evans/dockerhub-description from 3 to 4 ee58e343 build(deps): bump actions/upload-artifact from 4.1.0 to 4.3.0 11f50c03 feat: Add HTTP2 for unencrypted HTTP 41161a6e refactor(storage/s3): remove redundant len check c78c1561 Update labeler.yml 65c6a6d3 Update .github/labeler.yml b1d1be8e chore: Migrate PR labeler config to v5 a626871f chore: Sort entries d2c57396 chore: Remove `area/config` duplicate entry in `labeler.yml` 45cea887 chore: Remove duplicate `area/ci` entry in PR labeler ef1db8ac build(deps): bump actions/upload-artifact from 3.0.0 to 4.1.0 5e75227f docs: fix broken links and improve link resolution 6b14735d ci: disable provenance when generating docs f09bf31f ci: handle provenance for built artifacts f4a3149a build(deps): bump docker/bake-action from 2 to 4 50332793 remove deprecated ReadSeekCloser interfaces 5c585db7 build(deps): bump docker/metadata-action from 4 to 5 5c5d8d3d build(deps): bump docker/login-action from 2 to 3 fc992dfe build(deps): bump actions/upload-pages-artifact from 2 to 3 87ae3eb8 build(deps): bump fossa-contrib/fossa-action from 2 to 3 053fd16a build(deps): bump ossf/scorecard-action from 2.0.6 to 2.3.1 f2342966 build(deps): bump docker/setup-buildx-action from 2 to 3 78a6be85 build(deps): bump actions/setup-go from 3 to 5 f0a66954 build(deps): bump actions/configure-pages from 3 to 4 38a2d53c build(deps): bump actions/checkout from 3 to 4 ba702e1d build(deps): bump github/codeql-action from 1.0.26 to 3.22.12 af2fa0ff build(deps): bump actions/deploy-pages from 2 to 4 587f9e28 chore: generate authors befbaa68 chore: update mailmap bdfa8324 vendor: github.com/mitchellh/mapstructure v1.5.0 5bd7f258 fix: load gcs credentials and client inside DriverConstructor 6908e0d5 fix: add missing skip in s3 driver test b2bd724b chore: sort and fix mailmap ea02d9c4 fix: add labeler action 7838a369 chore: dependabot to keep gha up to date 55e91b39 chore: use no-cache-filter for outdated stage 5bd45551 fix: update Dockerfile version output 4f9fe183 vendor: github.com/gorilla/handlers v1.5.2 e96fce17 feat: add PR labeler 5f397b87 update to alpine 3.19 e29a5c8e update: readme cleanup and fxes 0e0d74b0 docs: remove legacy kramdown options from link 59929031 fix: build status badge 535b6586 feat: add GH issue template a74cacff version: export getter functions ab27c9d5 version: use go list -m f23c675d release: prep for the v3 alpha-1 release d59a570c update: set User-Agent header in GCS storage driver dcee8e93 build(deps): bump golang.org/x/crypto from 0.15.0 to 0.17.0 7fb303e9 Update s3.md 2f98b771 fix: don't override storage driver useragent if it's set 290dba5d update: S3 driver docs 7ba91015 fix: remove disabling of multipart combine small parts def497a8 update: add tests for S3 driver client SkipVerify settings 4f84c086 Update the gotcha in the proxy guide 8fa7a81c fix: use http.DefaultTransport in S3 client 3f3e61e2 fix: update incorrect godoc comment for (writer).Writer() 4baddbc6 fix: update S3 storage driver writer 80cbd744 refactor: apply suggestions from code review ed5d4934 refactor: apply suggestions from code review bcbf0431 testing: replace legacy `gopkg.in/check.v1` 68ac02b5 Otel tracing MVP: fixed gofmt fb7cdf89 Otel tracing MVP 0e3018f2 Otel tracing MVP: vendor changes a1b262f0 Update nginx.md 1054d157 update: remove gcs storage driver build tags f3ba0acd update: bump Go runtime to 1.21.5 and the rest to latest 1.20 6f84e878 update: AWS Go SDK bump to the latest release 1f6afab6 vendor: github.com/spf13/cobra v1.8.0 79976446 vendor: github.com/klauspost/compress v1.17.4 db187ae5 vendor: github.com/gorilla/mux v1.8.1 d6dd652f vendor: github.com/sirupsen/logrus v1.9.3 2cf41640 update: missed the CI workflow f08898c2 update: bump Go version b3681c4c feat: add tparallel linter to improve handling parallel tests d8ff41a3 cleanup: move init funcs to the top of the source f2cbfe24 health: improve periodic polling of checks a1b49d3d health: plumb contexts into health checks 8b889c04 health: use request context when logging 35abc922 fix: if reference exceeds the threshold return 400 and detail d0b78f5e dockerfile: keep context mount as read only f33e5a69 fix: invalid conversion when using Content-Range in client b8b390f4 build(deps): bump github.com/go-jose/go-jose/v3 from 3.0.0 to 3.0.1 c90b0b26 docs: fix typo in mirror.md 7ce129d6 feat(linter): enable errcheck linter in golangci-lint e001fad0 refactor: gcs storage driver bb156255 remove uuid package 7686bdc2 fix: fix broken build 186d522d docs: remove unused go.mod 74306515 cleanup: make blob sizes easier to understand bf933f54 Fix proxy statistics b4dc4f34 storage/driver: plumb contexts into middlewares b45b6d18 storage/driver: plumb contexts into factories f7e5eaae internal/dcontext: drop GetRequest() function f089932d storage/driver: replace URLFor method 868faeec registry: unexport auth-related context utilities bd80d759 reg/auth: remove contexts from Authorized method 49e22cbf registry/auth: pass request to AccessController 9157226e Extract request utilities into its own package d0f5aa67 Move context package internal 852de2c2 cleanup: make chunk sizes easier to understand and change writer append e8e46b21 cleanup: a small Azure driver cleanup e5f16bea docs: remove unused images 57a6fa46 docs: fix broken image references 9d12b47b docs: allow unsafe HTML 32316367 Bump google.golang.org/grpc from 1.53.0 to 1.56.3 da92c34a ci: add cloud storage driver integration tests to CI ef8651ec Switch to github.com/google/uuid 3831c8cc feat: push distribution images to GHCR 8a86dc61 Make our UUID package internal 6999f230 Delete reference package cc23fdac Move registry client internal 2ce5c81f Address PR review feedback 9861a46d Add prometheus proxy related metrics fe21f439 feat: replace docker/libtrust with go-jose/go-jose cb0d083d feat: Add context to storagedriver.(Filewriter).Commit() 46d13ff7 update to go1.20.10, test go1.21.3 9cc6e5b2 update to go1.20.9, test go1.21.2 c8c2bc27 reference: fix broken alias for DomainRegexp ea417229 refactor: Storage driver errors eac19987 Remove test for nested file delete on S3 647ec33c Bump minio version and test less storage classes 4dce8b86 Add annotation for descriptor 777ad032 Update docs GHA 4f506663 Update dockerhub-readme GH Action dc07c428 Move dockerhub-readme workflow to the correct path a66f6c37 ci: add github pages workflow for docs c3ae793f And other content... 83dd4ff0 Cleanup of naming in docs 31707d54 docs: add github link in header 1596da68 docs: add tests b911020c docs: fix markup and broken links fee6faef json encode storage driver enclosed error 758c0f9d Bump golang.org/x/net from 0.8.0 to 0.17.0 e2ae76f1 docs: add hugo site 6183f230 docs: remove blank line f2a72d7f Update Docker Hub README and keep it in sync with this repository. 504a3baf Properly indent prometheus docs 3df7e28f registry: add loglevel support for aws s3 storage driver 993af6fe Add few more sentences for the debug endpoint 4fce3c00 Move completedParts type back to the original position 46a9da16 refactor redis cache dca71db9 fix comment typos 6c724a1a use manifestTagsPathSpec for listing all tags b888b14b Optimise push in S3 driver 0b72b0b8 docs: remove README.md that point to Docker's repo a5c04b36 Update Makefile cf956106 Update BUILDING.md 98ffc56a Only set COMPOSE if it doesnt have a value 14361b3a Update Makefile and docker-compose 8e630ae2 Update BUILDING.md readme file. ecf492ab Update tests/docker-compose-storage.yml dfb8514a Update Makefile 6f05474f Update tests/docker-compose-storage.yml 8af25245 Update tests/docker-compose-storage.yml 075d81d7 Update Makefile 6b0c3918 Update Makefile 71c532e6 driver testsuite: Add zero byte file checks 06acf2de remove go build directive for older go version a0d9279e add repositoriesRootPathSpec in pathFor documentation 797b1e39 Add make targets to allow starting local cloud storage environment. f4d5210b Do not close HTTP request body in HTTP handler 34654f6c remove not exist function name in comment ca1b8753 document resource class deprecation a9399e9e Improve socket-activation message 9721db95 Add info message regarding socket-activation 741f9bb5 Add documentation for socket activation 2435def4 Support systemd socket-activation 17952924 avoid redundant blob fetching 23115ff6 update to go1.20.8 c8ba5d70 registry/client: combine SuccessStatus and HandleErrorResponse e4dd28b8 Bump github.com/cyphar/filepath-securejoin from 0.2.3 to 0.2.4 612a30a7 Remove libtrust from handler tests 6baa31a2 Remove duplicate code that instruments Redis OTLP 0104adf4 registry/api/errcode: split Register to internal / exported 292e30bc registry/api: move all errors to "errcode" package 823cd4a3 Add a comment why prealloc linter is disabled when configuring endpoints 10898006 Preallocate created slice in S3 tests a9d31ec7 Avoid unnecessary type assertion in mfs driver 59fd8656 Enable prealloc linter dcdd8bb7 Propagate storage driver context to S3 API calls 06341600 Remove outdated docs 8c7eea76 Add note on custom storage drivers acf804a2 go.mod: remove outdated comment 152af63e deprecate reference package, migrate to github.com/distribution/reference 2513dd1f fix typos in registry/storage/paths.go eda5fe2d remove duplicated code e22f7cbc Pass the last paging flag to storage drivers 0742b566 feat!: remove schema1 manifest a41613ba Don't make a new buffer for catalog listing b889cc2e Add username to create redis client 45b7b9ce Dont parse errors as JSON unless Content-Type is set to JSON c7bdabad add back getKeys + cleanup manifeststore test f9bc9220 feat(storage)!: remove schema1 except manifeststore_test d0c0b7bd Update Makefile 1a3e73cb Handle rand deprecations in go 1.20 0eb8fee8 Update to go 1.20 fcbc25e7 Replace redigo with redis-go 506cb451 Small Makefie update be7f29b4 Fix: use new scorecard badge viewer a9a5b22b Update milosgajdos maintainer email 1284c487 fix typo in comment and log 5b3be398 s3: add interface assertion df2787c6 Update test asserts 3e4c4ead Remove bugsnag 11c341a3 Remove schema1 references from registry client 3dbfbc72 Enable bodyclose linter 10b8a247 fix: upgrade scorecard action to 2.0.6 77239356 chore: enable scorecard action and badge 37a213dc Revert "optimize catalog last param" 8fd504de Revert "Rename catalog funcs and update their godocs." ad111050 Revert "removed redundant check" 8e4a8517 Revert "fix: resolve most comments" 6fea5489 remove contrib folder 77c33cd2 remove NewRelic 279fa01b Small update of API docs c0a15e64 Regroup direct and indirect dependencies 40c56bf1 Keep returning image for default arch to old clients fetching lists f48e0ecd Remove waynr from MAINTAINERS e51cfa66 Add James Hewitt as a reviewer 0f006548 update golang-lru to v2 9d862f09 fix(deps): update module github.com/aws/aws-sdk-go to v1.44.325 f517191d Add small update to api tests 7e39a7c6 Remove references to schema1 pacakge from handlers 3f1859af Remove oss storage driver and alicdn storage driver middleware 46ff5f85 Fix Azure tests 7622d0a4 Don't return the from of a walk f7bdd912 Don't test the OUTPOSTS storage class 6ceb904c Don't check returned storage class if we use NONE 2d316a12 We don't use gocheck in these tests f78d81e7 Remove test as S3 does not support empty directories c6b9944a Remove SWIFT storage driver 24de708d Set Content-Type header in registry client ReadFrom c1147cc1 Add David van der Spek as a new reviewer 02a92efb Drop docker prefix from storage driver API user agent ae0001f5 Remove references to schema1 pacakge from proxy package 565dafa4 Remove references to schema1 pacakge from notifications package 6a5846b3 fix: resolve most comments 0f846853 removed redundant check 230cc72a Rename catalog funcs and update their godocs. 65f4ce4d optimize catalog last param 32a476b8 feat: added support for redis username configuration c19adfdf Cleanup storage cache metrics e7505464 Update Code of Conduct b3ca53df Update OCI conformance workflow check 0cf87b1f Fix the code and update tests that verify the new code works 916b94eb Added support for configuring array values with environment variables #3511 316e1c6b Get rid of unnecessary import alias a3eb9564 use path.Join() for building path a1cfd267 Make redirect middleware can use path e7b1bfb9 Centered logo in README.md dedc8fa7 docs: fix typo 36dd5b79 Update to golang 1.19.10 6b388b1b Enable Go build tags 87081252 registry/handlers/app: log healthcheck error before return 2b72c4d1 registry/storage/driver/azure: fix Move method db1d0cbf Add registry middleware access to storage drivers 4bbe0ba0 Added support for specifying ACME-server by using REGISTRY_HTTP_TLS_LETSENCRYPT_DIRECTORYURL 421a97ff registry/api/v2: fix ContentType in RouteNameBlobUpload 93010cae docs/specs/api: fix Content-Type typo 2338ee4f Add option to enable caller information in logger afe5a2a9 Support ztsd compression as Content-Encoding 9d1a8fc9 Remove duplicated platform field from oci index 9d1f71c8 docs: note restriction on URL format of mirrors 817dd286 vendor: update gcs driver dependencies files 69510289 go.mod: update gcs driver dependencies 0207adaa registry/storage/driver/gcs: fix code to use updated gcs driver d0bc83d8 registry/storage/driver: receive context on Cancel methods 0d20e7ae registry/storage/driver/testsuites: use 4MB for Azure append test 0c33bb10 registry/storage/driver/azure: consider CannotVerifyCopySource as 404 d2e16fc7 registry/storage/driver/azure: fix driver parameters on tests 90ece48d registry/storage/driver: add test call to Stat on "/" 035a8ec5 Fix panic in the s3 backend walk logic 7caf058a bump azure sdk f3eb91cf Update testutil/manifests.go 61e576f3 Remove blobstore from manifest builder 6a429612 `vallye` typo again and `ignore` section table layout is broken 435c7b9a Dockerfile: fix filenames of artifacts 5d301a9b Update configuration.md 322eb4ee update to go1.19.9 dec03ea3 update golangci-lint to v1.52 ebe9d674 ignore SA1019: ac.(*accessController).rootCerts.Subjects has been deprecated 84a85a40 Ignore SA1019: SplitHostname is deprecated. 999527f9 Ignore SA1019: "schema1 is deprecated" linting errors 3c144f22 registry/auth/token: fix the surrounding loop is unconditionally terminate 4052d269 reference, registry: fix loop variable captured by func literal (govet) f03d966e cloudfront: use consistent names for test-tables, t.Parallel() 5301ae14 cloudfront: rename vars that collided with type 85028a80 registry/handlers: use consistent names for test-tables f4acd988 registry/api/v2: checkTestRouter(): use sub-tests, t.Parallel() 2444c328 registry/api/v2: use consistent names for test-tables 9266220c registry/auth/token: TestAudienceList_Unmarshal: t.Parallel() 5e67a40e registry/auth/token: use consistent names for test-tables f884a079 registry/api/errorcode: TestErrorCodes: use sub-tests 57f9f31a notifications: don't use un-keyed structs e9ac1728 notifications: use consistent names for test tables f4be328b context: TestWithTrace(): inline checkContextForValues, use sub-tests 2829f7b7 context: use consistent names for test-tables f238f7dc reference: TestMatch(): use sub-tests 2819bca9 reference: TestNormalizedSplitHostname(): use sub-tests fa1d14c5 reference: TestParseAnyReference(): use sub-tests fcbddfc6 reference: use consistent names for test-tables 8c4d2b9d Dockerfile: update xx to v1.2.1 99a8ad00 fix: rename log to logrus f0fdaff0 Fix the issue that the debug server with port 5001 run twice e2a43ec8 Fuzzing: Move over two fuzzers from cncf-fuzzing 9fb201e2 Remove registry storage testdriver 434cc087 Bump to 2.8.x as the current version d141b657 We already had instructions for this, use them. 7e51e717 Add information about security 49e2de28 reference: add BenchmarkParse b50c049f reference: TestParseRepositoryInfo: use subtests af36dd69 reference: TestParseDockerRef: capture test in loop 3fa6d5a3 remove dot-imports for gopkg.in/check.v1 5f1df021 registry/errors: Parse http forbidden as denied ba4a6bbe Update Azure SDK and support additional authentication schemes 973bfbb6 Fix Go Idioms 8fe4ca40 Option to configure proxy cache TTL c624b9ed Use docker-compose spec v3 in nginx receipt 88646f54 Support annotations in the OCI Image Index 4c1561e9 Fix runaway allocation on /v2/_catalog e72294d0 Split OCI Image Index from Docker Manifest List 5fa926a6 Enable pushing empty blobs 2074688b Fix S3 multipart upload pagination loop condition 9594fbcf build(deps): bump golang.org/x/net from 0.4.0 to 0.7.0 3117e2eb Use default http.Transport for AWS S3 session 2179a5f6 add double newlines in ADOPTERS.md 165fd5f9 Update fossa-contrib/fossa-action action to v2 a811c1bb Log username on successful requests d1c18681 Fix separator regex 345be954 vendor: golang.org/x/net v0.4.0 59f13577 remove script directory and fuzz left-overs 19233195 Align code to match order of fields 86cd830f Descriptor: align field order with OCI image specification 0b4311d5 manifest: improve test output and use const f2db7faa registry/storage: rename variables that collided with imports 030489ca testutil: rename variables that collided with imports 0e3efe74 manifest: rename variables that collided with imports b91c9a22 ci: add concurrency check 2400718d ci: update github actions ff2bce27 manifest/schema1: mark docker manifest v2, schema 1 deprecated 89384541 Fix json formatting in registry api docs 02e88c0f reference: move exported regexes to separate block a4cec8ca reference: introduce const for "localhost" bbd41f40 reference: introduce remoteName variable 71a06663 reference: optional repeated == any number of times 919bd8ab reference: add const for (optional) port, and rename "domain" variable f0c7c97e reference: remove remaining uses of "expression()" 04d6592d reference: remove "literal()" utility c786a2bd reference: inline "group()" 1d4917d4 reference: expression(): use strings.Join() a7e7ff93 reference: align docs and variables with grammar 32a4d8e3 reference: fix docs for NameRegexp 226b21be reference: make some regexp vars a const, remove intermediate vars 10eace9a reference: document consts for normalizing and legacy domain 53757ea3 reference: ParseDockerRef: slight refactor, and update docs 2bf5e187 reference: remove left-over occurrences of "short-identifier" 8163e20c reference: splitDockerDomain: remove incorrect "TODO" b6a040fa reference: run tests with t.Parallel() 5703bcf1 reference: use subtests for regex tests f481f877 reference: use subtests for reference tests 9337b8df Fuzzing: Rewrite existing fuzzers to native go fuzzers 35cae109 Realloc slice exponentially in mfs 1d8cd5e4 registry/client: use struct literals d71ad5b3 transport.NewHTTPReadSeeker: return concrete type, deprecate ReadSeekCloser 019ead86 deprecate ReadSeekCloser in favor of io.ReadSeekCloser 842d4c04 cloudfront: use strings.Equalfold() 3b391d32 replace strings.Split(N) for strings.Cut() or alternatives 2cd52d5c simplify mocks 552b1526 reference: check for prefix instead of splitting, and use consts 7b651a96 digestset: deprecate package in favor of go-digest/digestset 1052518d reference: implement Sort() bf725364 Remove uses of deprecated go-digest.NewDigestFromHex, go-digest.Digest.Hex 30f5f41d Use GitHub https url 3c71f493 referene: fix formatting of "deprecated" comment. 79d19015 replace deprecated function 6d4f62d7 reference: remove support for deprecated "shortid" refs b73c0380 registry: configureLogging() simplify logic a bit f1dff3e4 registry: use consts for some defaults f8b3af78 replace deprecated io/ioutil e0281dc6 format code with gofumpt 6dbb55ad Update doc to reflect that logs go to stderr f9ccd2c6 use http consts for request methods b1285c33 go.mod: github.com/spf13/cobra v1.6.1 ebc4234f Delete S3 keys incrementally in batches bad5dcb6 fit get status issue d6ea77ae refactor: rename WeakStringList to AudienceList 9c04d0b3 Revert "registry/client: set Accept: identity header when getting layers" 8cc5b4f5 Add Go 1.19 to GHA 3472f7a8 feat: accept lists in the token audience claim 97fa1183 feat: add WeakStringList type to support lists in aud claim 10975dea build: harden codeql-analysis.yml permissions e09a9f2d build: harden e2e.yml permissions c26fe145 build: harden conformance.yml permissions 1ca9af01 build: harden fossa.yml permissions feaa75c5 build: harden validate.yml permissions 1667a668 build: harden build.yml permissions e36cb0a5 registry/storage/cache/memory: Use LRU cache to bound cache size f9dee9dc vendor: golang.org/x/net v0.0.0-20220906165146-f3363e06e74c e24be4e8 fix all json syntax error 567158c3 configuration: use "fake" values for tests fbdfd1ac Use http.NewRequestWithContext for outgoing HTTP requests 0e17e540 dockerfiles: formatting b066451b dockerfiles: set ALPINE_VERSION 7e546784 ci: move test step to build workflow and remove ci workflow 1a905ab9 ci: git validation target 8b2c54bf ci: remove dco check (dco bot already does this) 52a88c59 Update to xx 1.1.1 c3074d09 Change GET in example request to POST 57ea90fe Update the BUILDING.md to a world with modules 3801e37d Fix grammar mistake 87d9edf7 Add build tags to BUILDING.md 853e2e92 Do not recreate mux router for each incoming request d5b2f94c Say when a config error is caused by an env var c895369b Review contributing for Docker references 9e74396f Fix API doc parameter placeholder: last bbeffe6a Fix comment for manifest list 53a6f7d7 registry: support ipv6 addresses 8628eab4 fix json syntax error in error api spec ba29eb8a Update maintainers mailing list 3bd75427 go.mod: remove outdated comment 9f2bc25b Fix CVE-2022-28391 by bumping alpine from 3.15 to 3.16 ec47096e vendor: github.com/prometheus/client_golang v1.12.1 6e8dd268 update to go 1.18 (continue testing against 1.17) 18b4da91 Update golang-ci-lint to v1.45.x 7548c315 cleanup old check behavior 26a586cf lint target and workflow job 87f93ede Dockerfile: switch to xx b2b3f860 Remove workaround from 2.1.1 for faulty 2.1.0 manifest links de240721 cleanup old vendor validation behavior c0526595 mod-outdated target to check for outdated dependencies ffa3019c validate and update vendor target 15de9e21 Add forcepathstyle parameter for s3 d64056af Explain important caveat in htpasswd tutorial 48f3d9ad Fix typo 8eab5d1b Update s3 ListObjects to V2 API 18b2b9f4 Added some secure compilation options PIE 80952c9e Rename s3accelerate parameter to accelerate ea27621d Fix review 51c0c814 Add new parameter s3accelerate to S3 storage driver. 966fae54 Add tests for all supported storage classes 69b1e011 Added some secure compilation options, especially PIE and RELRO. fb937dea Support all S3 instant retrieval storage classes 1a75c719 Fix panic in inmemory driver 25bd1f70 Incorrect variable in test output decc64eb go.mod: github.com/aws/aws-sdk-go v1.43.16 fabf9cd4 ci: use proper git ref for versioning 4f1c1e42 go.mod: github.com/Azure/go-autorest/autorest v0.11.24 ebd3f441 Update golangci-lint version and fix reports 676691ce Fix: Avoid a false type assertion in the inmemory driver 79ead619 go.mod: spf13/cobra v1.0.0 f9c1b86f go.mod: add replace rule to prevent unwanted updateds of grpc and jwt-go 4363fb1e disable insecure cipher suites ea65fe2e update build workflow 3b83bce7 docs: update some URLs and remove some of the Docker branding ae248991 Remove code related to building docs with Hugo ff0c463f Remove docs.docker.com "include" directives 706f2170 fix image cache incompletely 342aff71 Revert "Remove old documentation source, add README on migration" 89622d99 Replace references to `re` with `regexp.MustCompile` 1c89ce5f Improve how reference regexps are built 846be378 Update note on Docker official images 936d7eda ci: upload conformance test results 6332e963 ci: fix conformance and e2e workflows 4941d83c ci: build workflow to release artifacts and multi-platform image 117757a5 feat: add option to disable combining the pending part e2caaf9c Add dualstack option to S3 storage driver 81a2d171 Update aws-sdk to 1.42.27 f13d1e02 dockerfile: native cross-compilation 99c408aa Add cncf-distribution-maintainers@cncf.io to maintainers file 6f3cc81b Add CNCF Security email account 90d24a63 Fix email address for milos d0ca0c33 Fuzzing: Add 3 fuzzers 4f173262 patch-1 - adding more info to the error message 579107cf Improve error message in case invalid env var found 6fbba6a9 go.mod: github.com/opencontainers/image-spec v1.0.2 f637481c fix go check issues b59a6f82 manifest: validate document type before unmarshal f2f9b296 Update insecure.md f619db73 Fixed typo in error message 3f4c558d bump up golang v1.17 7736319f fix: paginate through s3 multipart uploads f6a54b0d Update most links to use https by default f5709b28 updatefrequency should not be saved into duration dea56fae (docs) Fix rendering of markdown links in OAuth docs HTML 7b77a24b Revert "Remove info on service accounts" 715959c1 Remove info on service accounts 3e68d47d chore: update azure go-autorest dependencies b07018ff docs: update release-tool link 1660df4b Change should to must in v2 spec cf81f67a storagedriver/s3: Optimized Walk implementation + bugfix 072bad48 Add missing code-hints, and minor markdown edits 9b971331 Desktop: move "docker-for-windows" to "desktop/windows" 31c9a9d7 Desktop: move "docker-for-mac" to "desktop/mac" 576f4fc0 fix broken link for setting up local registry with auth 9e873f31 storagedriver/s3: Adding back missing import. e625bc71 storagedriver/s3: Removed temporary S3 test dc5b7710 storagedriver/s3: Cleaning up tests 6da7217b storagedriver/s3: Optimize s3 Delete test cleanup. 03f9eb3a storagedriver/s3: Fixed a Delete noop edgecase 05a258e7 storagedriver/s3: Added Delete tests to s3_test a07b54eb Update to go 1.16, and run CI on 1.15.x and 1.16.x ee8c75cb registry: use "console" for shell examples 0f50e038 use memory as the cache in test 351b2607 Fix OCI conformance workflow report and README badge 21ffbdbe Change GH workflows job names 9c7967a3 Update PUT and PATCH APIs 3f09e31e Fixing http status for PUT/PATCH APIs 1003ce30 Update deploying.md 4ff7f21b Update pull limits for service accounts d3cd41aa Propose Sargun as a maintainer 7244cd3b typo: a client implementation 6d9a3aba fix the /v2/_catalog n parameter description 8f211541 Update link to logo 9b8feef0 Update distribution logo 56413091 Update API spec 033683d6 apply feedback 3d717101 Updated service account links (#12953) aaca79bf add oci conformance test gitaction 1777a5ba Updating registry help (#12948) 1fa75f31 Indent webhook notifications Authorization header 81f081f9 Group case values 1398d3b5 Remove unrelated spec update 22053f57 Fix listener tests 6ae6df7d Add tag delete API 933ee1fd fix the /v2/_catalog n parameter description 8ef268df Add tests for tags list pagination df39a779 FOSSA scan enabled d7a2b144 add content range handling in patch blob 09334b5e fix typo 8e8d5099 add documentation how to access pull-through proxy stats fefc0e2b Fix html not rendering markdown link properly 835651e5 Release ticker resources 9cf39997 added pagination error to api docs 4da2712b added pagination to `v2/<name>/tags/list` endpoint febc8733 added error codes for pagination 226ad1e6 go.mod: update logrus to v1.8.1 06c8d441 go.mod: gopkg.in/yaml.v2 v2.4.0 a49afdbd Adding in points to clarify usage of official images (#12713) 0a7648ed Fixes docker/distribution-library-image/issues/107 9e618c90 registry: verify digest and check blob presence when put manifest 62fc5c8a Remove autobuild a0aad572 Make workflow name shorter. 334a7e7f close the io.ReadCloser from storage drive 23b57027 Add docker image release workflow 68ce1586 fix CI dependency error b2ac3a28 TASK: Add codeblocks to code examples 1a059fe7 Populate the platform information when calling the References() method of manifest list 32ccbf19 Add configuration option for Redis TLS 43e50259 log: Include configured fields in all logs 8ad73297 Remove duplicate code of conduct 1e625d00 Added flag for user configurable cipher suites c432849e docs/spec/manifest-v2-2.md: fix ARM variant 49f7426d Bump Golang to `1.15` and Alpine to `3.12`. 9c43ba9d fix: disable DisableHTMLEscape on logrus json logging 907e7be5 Bump Logstash hook for logrus to `v1.0.0`. c95293bb Add Codecov badge 1d338749 go.mod: change imports to github.com/distribution/distribution/v3 e7dc768a Self-signed certificate with Kubernetes fix 639de6a0 Fix typo for digest regexp 4d34a317 Correct spelling: decription -> description 084c0bd1 Fix typo in docu of NewURLBuilderFromString() f0c93f65 Fix typo in NewSimpleManager() documentation 5a3f698f Change Build Status badge URL 0517a1c7 Propose two maintainers from Mirantis fa289406 get rid of apache2-utils 6e4e8298 Update README badges bddb8d42 Removing travis edf4afcb Revert "Merge branch 'main' of https://github.com/distribution/distribution into main" 98868008 Add a basic e2e test for CI 402d3c94 Fixing push workflow b659eb06 Update ci.yml da9a88bc Fixing push workflow 64874d17 First draft of actions based ci b431b34f update slack channel to CNCF slack a63bd4d3 Add CodeQL Security Scanning 977c98e0 Fix broken links 239c368f Per distribution call, adding Steve Lasker as a maintainer to help with OCI and Notary collaboration. c30c5b31 Replace Arko with Milos as a maintainer 67c504de Update roadmap, add code of conduct file 78242c79 Update insecure.md for Docker Desktop (#11964) 07b948ea Dummy workflow to enable GitHub Actions 2d16db2a Add Adopters 911eaf03 Update README a bit d11c4f9a Add new maintainers 87cbd09f Ignore self reference object on empty prefix 03aaf6ab Bump Gorilla Handlers to `v1.5.1`. c8d90f90 Remove empty Content-Type header 430bf259 update http://dockr.ly links to use TLS 82f04d03 Remove references to obsolete engine versions c26fa61e Update repo normalize error message to include the name of the repo. 2059160c Remove Docker Toolbox docs e02cd812 Use https:// for links and examples 3ec5e7e0 Add rel="noopener" to external links a19e1847 Fix bug in parsing domain from repository reference 34f13226 Fix hardcoded credential provides. 264e26fd Bump Redigo to `v1.8.2`. 545596ae Bump Gorilla Mux to `v1.8.0`. 1cee02e7 scripts: remove unused md2man from dev-tools 8a8d9152 vendor: opencontainers/go-digest v1.0.0 9466dd4e Update logrus to v1.6.0 e1464fd3 Bump AWS SDK 95f1eea5 manifests: Return UNSUPPORTED when deleting manifests by tag a784441b catalog: List repositories with no unique layers eaeb3160 Add azure config container example (#11152) f361d443 clean up code because err is always nil 32c77af6 Clarify repo name regex intention 2672c0eb Relax filesystem driver folder permissions to 0777 (cont) 7728c5e4 docs: add redirect for old URL dc7801c5 Add note on Docker Hub 989101c8 Remove some references to enterprise products 9690d843 Support ECS TaskRole in S3 storage driver 81ba770e Fix CI failures, upgrade to Go 1.14+ 40f4476d Remove not really implemented s3accelerate option (#10993) a2ed1b5e Added dist: bionic, updated go version to 1.14.x and set GO111MODULE=on b338d2f6 Get Docker: fix broken links and wrap markdown to 80 char (#10691) aee0eeb3 registry: use relative markdown links 55f88c35 Adding s390x support. 267e231d Fix various links that were generating URLs with `.md` (#10548) 78c2ab66 Fix gosimple checks cdb4ba94 Fix err shadowing in gcs driver bf56f348 Update oci library be29c05a Remove deprecated cache metrics code 495a4af7 Fix goimports 74d442a0 Consider redis.ErrNil as distribution.ErrBlobUnknown for Stat HGET 79589266 redis metrics ce101280 fix redis caching issue 4c7c63b5 Add cache unit test 800cb958 Use go-events package 1e25ecef Update governance and maintainers db3c418a Update reporting issues guidelines 98dcc519 vendor: update docker/go-metrics v0.0.1 cb2a09fa Update tables from html to markdown format (#10360) 15f7bd29 Remove {get,head}WithContext() 282351e9 Use http.NewRequestWithContext() 58331abf Honor contexts passed to registry client methods 5e3911c2 update registry s3 storage driver docs to add skipverify flag e65b3f13 Fix CI for test updates efdba4f2 Increase Unit Test Code Coverage 1f77c9a5 Update Golang 1.13.8 9b6a0190 prevent dev-tools from updating go.mod 7e290869 vendor: update golang.org/x/crypto v0.0.0-20200128174031-69ecbb4d6d5d (CVE-2020-7919) 01654953 Dockerfile: use alpine 3.11 974375f6 re-vendor with go 1.13 4ae059c7 Update Golang 1.13.7 (CVE-2020-0601, CVE-2020-7919) 66809646 Migrate to golangci-lint 23f6bdd7 Use same env var in Dockerfile and Makefile fdb1abd3 Added Nginx Recipe Redirect 6ca7b9e9 Fix TestRegistryAsCacheMutationAPIs f5e84a49 Update readme and contributing docs 0f5e2753 Fix typo cloudfront updatefrenquency c9c33243 Add unit tests for BlobEnumerator 5538da49 fixes to make layersPathSpec work fa7d9494 allow Repository.BlobStore to enumerate over blobs cf771137 add pathspec for repo _layers directory b4694b0d Fixing broken table 070cc010 bump golang to 1.13.4 f580993c fix typo cc97b94f use travis, not circle, build badge 07a50201 Adding deprecated schema instructions 1c481d34 registry: Fix typo in RepositoryRemover warning a994bb83 use latest version of alpine when building the Docker container d6167089 removing section for Chinese mirror c486db2d make it possible to wrap the client transport in another one dfcc7bcc [sec] nginx/compose: Drop aforementioned loophole 92d213d2 allow for VERSION and REVISION to be passed in during docker builds dd3bdee2 implement Repository Blobs upload resuming 898b1f2a test httpBlobUpload.Write method c5d5f938 fast-stop ServeBlob if we're doing a HEAD request 3800c47f Implement Repository ServeBlob a45e5cb1 handle create blob if the uuid couldn't be retrieved from headers or URL 8b31a894 deduce blob UUID from location if it wasn't provided in the headers 94097512 extract blob upload resume into its own method b23dd1ef swift: correct segment path generation afe29bb6 update the golang compiler version and the versions of several dependencies 45b2d049 use latest version of alpine when building the Docker container 5223c274 migrate to go modules from vndr 8f9c8094 replace rsc.io/letsencrypt in favour of golang.org/x/crypto 414cebd4 Update link to DTR 0e2d080a append the written bytes to the blob writer's size 5afbf324 fix no error returned in fetchTokenWithOAuth 74f429a5 Fix typo: offest -> offset 51bb5cee import alicdn package fd77cf43 change package name & format document c18c6c33 S3 Driver: added comment for missing KeyCount workaround f8777265 Fix s3 driver for supporting ceph radosgw 3390f32a fix Context issue ae91d1f4 fix ci issue 6e10631d fix default cdn auth duration e1e72e95 Fix cloudfront documentation formatting f9a05061 Bugfix: Make ipfilteredby not required a683c7c2 Fixes #2835 Process Accept header MIME types in case-insensitive way bbc9885a fix func name 92a64367 rename the metrics label 3be1cdec Update help.md d5a615b8 update the event number 09a63caa run go fmt and goimports 228bafca run go fmt 76da6290 add label to the metrics 8b706168 Add notification metrics ec6566c0 Log authorized username 3aa2a282 support alicdn middleware 297ba124 Use consistent formatting for notes 48818fde Remove err nil check da8db466 Fix gometalint errors 43b914b6 Update nginx.md b98fb58a Document registry s3 transfer acceleration option. 560471b5 Update deploying.md 582d8e62 Revert "Fix error (small change, only 1 line)" 06205627 Fix error bda79219 Add code to handle pagination of parts. Fixes max layer size of 10GB bug 15b02047 registry: fix binary JSON content-type cdb62b2b Registry - make minimum TLS version user configurable c7386154 Update insecure.md 7df881dc change default Dockerfile to install ssl utils f9d531c4 404 registry API 0ac367fd Add reference.ParseDockerRef utility function eb1a2cd9 default autoredirect to false f89f0867 Update nginx.md b7839211 Update doc for BYOK support in OSS storage driver 90bed671 Support BYOK for OSS storage driver 01ceef9f Restoring open source registry garbage collection page 1251e51a better name and updated tests 9ebf151a API to retrive tag's digests e92760a3 Spelling revision 2fda032d Delete tag-pruning.md b0bb8437 Delete garbage-collection.md 50dacc55 Initial draft of product manual for tag-pruning 71d02b10 Add online garbage collection feature and known limitation as described on DTR Workshop doc f04f6208 Revert "Revert "Merge branch 'master' of github.com:docker/docs-private into test-branch-2"" 88038ffd Revert "Merge branch 'master' of github.com:docker/docs-private into test-branch-2" b9c4182e Revert "Revert "Merge branch 'master' of github.com:docker/docs-private into test-branch-2"" 2df45044 Revert "Merge branch 'master' of github.com:docker/docs-private into test-branch-2" 7eac5fad Revert absolute path change bfd7156f Grammatical and spelling updates 955f7ef6 fix: configuration reference link 8112d01b nginx.md: Add note about potential security isues ff786644 Update deploying.md f497e79c Update part2.md (#6475) 1b6e19d6 Update link to Docker Trusted Registry (#6479) 9042088f Fix "Run the registry as a service" link (#6289) f0fe5c38 registry/filesystem: mention umask (#6276) e80e5f2e Update swift.md (#6054) 4a9ec817 Update azure.md (#6053) c594eb1f Mention that rootdirectory prefix has to be pre-existcreated 198ebadc Fix links not rendering properly (#6049) 35cca3f0 Update compatibility.md (#6043) db6444ac Update mirror.md 947af10c Update insecure.md 1edd9dcc Update notifications.md a92ed35a Fix port requirement for SSL of docker registry (#5973) 09d8e4bd Favor docker <object> <verb> format of commands (#5914) f1fb0683 Various copyedits to reduce future tense, wordiness, and use of 'please' (#5788) b5bbca9e Improve Cloudfront notes regarding private buckets (#5225) a6edcada Correct parameter names for --publish long syntax (#5457) a8dac1ad Navigation under "Reference" and "Manuals," Registry warning, "Latest" UCP/DTR (#5469) 82530e5a Add alt text to images which are missing it (#5047) 93600752 Update docs for new publish syntax (#5323) 3d5f8b03 Add link to forums in registry docs (#5308) e6983745 Add tests for configuration parser c9eba1a5 Fix the pointer initialization d549a5cc Prefer daemon.json over command-line flag e25f858b Remove deprecated '-d' option to start daemon b5975461 Update deploying.md e95522ec Update notifications.md (#5045) e61eb68b Deploying Registry: Fixed ports on HTTPS (#4965) c8d82bbd Docker service registry not running correctly (Replicas 0/1) (#4641) 1f640d19 contraint instead of label to create Registry on node1 (#4644) 8b93c509 Update b.o. Error while creating Registry Service (#4465) 675ffdbd Fix Typo (#4575) fd9fc031 Use nginx image which supports bcrypt (#4489) f01d83d6 Update mirror.md (#4506) 5096a16d Update garbage-collection.md (#4317) e4f126c1 nginx does not support bcrypt when using auth_basic (#4332) 90a402d9 fix registry template plist location for launchctl (#4333) aa6e6971 Update compatibility.md (#4321) c1950e12 Update index.md (#4323) aa2955a7 Update index.md (#4322) 3ae7d9ca Update insecure.md (#4318) e98a162c Update osx-setup-guide.md (#4316) d18e3a63 Update filesystem.md (#4324) a2500623 Add China registry mirror section (#84) a9549228 Fix borked link (#4097) a1088938 Remove sentence about super old Docker (#4099) 2aa6e2ae Documentation typo fix (#4087) c2bbc7ea fix default secrets path in container (#4011) 3c1aeebc Fix links to subtopics in index.md files by include full path (#4054) 23c116b7 Fix link to requirements (#3970) a59d321e Fix link to requirements in Nginx recipe (#3969) c6f6c44e Remove v2-registry-auth image (#3965) cb3f2ace Update mirror.md cf36ad3c Improve tip on log messages (#3888) 82998e10 Add tip about error message in registry cache (#3874) b19b19cc Fixed spelling of 'exammple' (#3769) 31619aed Reorganize registry deployment guide (#3485) 8ac75794 Point to newer registry topic (#3719) 55aec8a4 htpasswd passwords should use bcrypt hashing (#3401) c60e7107 Add use case for China registry mirror (#3682) 6508f123 Reword sentence bbbafb0e Update notifications.md (#3399) efa76b98 Update oss.md (#3448) 4da4fc02 Update compatibility.md (#3445) 528d2279 Update insecure.md (#3444) 78d25013 Update garbage-collection.md (#3443) a6fc3fa7 Update osx-setup-guide.md (#3442) 2c19d1ca Update apache.md (#3441) 119a48eb docs/spec: provide a valid manifest-v2-s1 example 3244e471 docs/spec: provide a valid manifest-list-v2-s2 example b9220191 Fix typo in markdown (#3371) 864905cf "as mall as possible"=>"as small as possible" (#3372) a5b2b63b Update deploying.md (#3373) aed6cb22 Reverted (#3393) 1b6da36a Add section on China registry mirror (#3379) 7c5b1e60 Remove registry/architecture.md from docs repo (#3365) 9161e93e Update introduction.md (#3353) 4f582ad9 Add instructions to remove also proxy_set_header Host (#3156) (#3342) ed56794d Use daemon.json everywhere possible (#3252) eb2763d8 Update index.md (#3102) f1899170 Self-signed certificates setup on Windows (Part 1) (#2909) b5889701 add warning class and a linebreake to the warning blogquote (#2937) 7cf8dc7c Spelling mistakes (#2970) 547233ee replaced docker/docker with moby/moby (#2879) b2635632 Updated the registry documentation to include an example for the config.yml file 13022287 init 39a8fcd8 Fix table formatting and endpoint template examples (#2726) 5cf92032 Updating table to remove extra closing table row (#2725) fde52284 Fix some links (#2584) 00d1f820 Fix spelling errors (#2409) eb77e2f7 Docker 17.03 release (#2050) 6f785666 Add info about fetching credentials from IAM role d12fce88 Change erroneous push to pull (#1555) ee6aa7d3 Update links to DTR 042cf0f5 Updates broken links for #1068 8edea601 Correct wrong default value 943860f0 Update gcs.md 09fdbf47 Lossless Image optimization (#959) 5a2e1bf6 improve formatting on insecure registry openssl command (#873) 5e614987 Do not add second Api-Version header 81498934 Disable parameters substitution in heredoc cc72cef9 Transform html into markdown c7bc40bc registry/azure.md: fix broken syntax/links ea84d17e Improve section about AWS policy c7dab7f3 fix typo in spec/api.md 82eb4bc3 Pull distribution reference docs from upstream cc71beda fix type of keywords entry in frontmatter (in /registry/) (#517) bc1e1621 Change instances of alias: to redirect_from: 908a1f14 Converges titles to imperative-form, front-matter based, and sentence-case (#438) 8c922b0c Revert "Merge pull request #437 from gdevillele/fix_keywords_format" 3d147416 fix more frontmatter keywords values (#439) 2ecf05a7 absolute links to docs.docker.com are now relative links 81b038a8 removed menu.md files e63f5950 Formatting fixes 8e8290bd Formatting fix bd9f8c7f Update mirror.md 70c7657c Update branding for macOS b206e8b2 Add note about configuring a registry cache with delete enabled 50bd0cce Delete api.md.tmpl 677eaaa3 Change 'draft: true' to 'published: false' for Jekyll 9204a649 Rendering fixes, part 2 856dacad Content rendering fixes b3b099f0 Removing merge detritus 9e3c43c6 Removing empty front-matter 2d32aa43 Fixed typos 0fb207c8 Convert TOML to YAML, tweaks to work with Jekyll dd414106 Moved registry docs to registry subdirectory b2da4f33 Moved imported orca docs into ucp directory a56d36fd Initial commit -f https://github.com/docker/orca be487836 Moved docker-trusted-registry imported docs to apidocs and docker-trusted-registry subdirectories d4f01b81 Initial import of https://github.com/docker/dhe-engine e9de6f2a Moved cs-engine docs to the cs-engine subdirectory 734f334d Initial import of https://github.com/docker/cs-docker f0a62ccf Initial repo commit 1f3cc591 Document TOOMANYREQUESTS error code 8d287d43 Improve flag help consistency, and update docs 93f029e8 Allow v1 search to use v2 auth with identity token c8aba9b4 registry: avoid formatting errors with %#v 9e211edc Changes the client Tags All() method to follow links 1c5cb127 fixed s3 Delete bug due to read-after-delete inconsistency 6eadd3f4 fix typos d2e5d5c2 If resumable digest support is disabled, detct this when closing the blobwriter and allow the close to continue. Also update the name of the function. 7b97265d Expose EndpointType parameter in swift storage driver 9a27ea73 Add support for Let's Encrypt a58c7430 Fix logrus formatting 5de53e34 Update "Accept" header parsing for list values f3ae941c Add option to get content digest from manifest get ec7c5913 Clarify API documentation around catalog fetch behavior 4e09e1b6 registry: use const for status code 429 08426ad1 Add `--limit` option to `docker search` 6d0db0e2 fix typos d265da73 fix typos d3b61b61 Remove signature store from registry. Return a generated signature for manifest pull. f1b815ed Pass in `app` as context to apply{N}Middleware 04476ff5 Add Unit test to daemon.SearchRegistryForImages… dd66aabe Add support for layers from foreign sources 50e6eef0 Add support for blobAccessController middleware bb841197 Add 'us-gov-west-1' to the valid region list. e57fd4fa StorageDriver: GCS: allow Cancel on a closed FileWriter af00617b Blobwriter: call BlobWriter.Size after BlobWriter.Close ddec5464 StorageDriver: Test case for #1698 1e05d81a Don't wrap thead limits when using a negative int db274d3c registry: do not use http.StatusTooManyRequests 8762c800 registry: type too many requests error cbae4dd7 Implement regulator in filesystem driver 28be207b Pass through known errors 2a2577d7 When a blob upload is committed prevent writing out hashstate in the subsequent close. 63d28d3b Add a test with a missing _manifests directory 3a034b47 Move garbage collect code into storage package 898fdb48 Ensure GC continues marking if _manifests is nonexistent 8775da93 Fix wording for dry-run flag in useage message for garbage collector. a88088a5 Regulate filesystem driver to max of 100 calls 54edbdfe separate the go/non-go imports and reorder c4778ea1 Respect ALL_PROXY during registry operations 3336cc13 modify redirect test to include port fba2e3a2 scheme and host mandatory in baseurl cec7248b separate the go/non-go imports and reorder d11a9795 Sorting completed parts by part number for a better accordance with the S3 spec 56480ce8 Add default `serveraddress` value in remote API `/auth` 6615b77a Add blobWrtiter.Close() call into blobWriter.Commit() a691d82a add middleware storage driver for redirect fdb0fb77 add cn-north-1 to valid check ea5abc99 wait for DLO segments to show up when Close()ing the writer 346bfed9 docs + fix test Signed-off-by: Nikita Tarasov <nikita@mygento.ru> 007af250 fix test Signed-off-by: Nikita Tarasov <nikita@mygento.ru> b55719da test 63fe2d14 Update swift.go 84aa48b5 detect outdated container listings during Stat() and getAllSegments() c6552412 Only check validity of S3 region if not using custom endpoint 86ca50df Ensure we log io.Copy errors and bytes copied/total in uploads 53a8806b 1.change validateNoSchema into validateNoScheme 2.change schema into scheme in docs and some annotations. 3d4b652b Update the gc documentation. 31ece3d3 Fix signature handling with GC. 15e3ffb3 Add a --dry-run flag. If enabled this will print the mark and sweep process with removing any files. 59ef6d2d garbagecollect: Clean up errors b015bf06 don't swallow errors in Swift driver's GetContent() 091ad891 Remove the example 0f09bcd1 Add documentation for how to register new StorageDrivers 0f4b8d34 Correct login debug log message d52cbf92 utulize config log format within gc 3dd506d8 Enable URLs returned from the registry to be configured as relative. f93d1660 Propogate tag as a functional argument into the notification system to attach tags to manifest push and pull event notifications. 5f38f0b1 fix manifest revision search, closes #1535 e6b317f9 registry: client: auth: type errors 20bba402 registry: client: repository: close response body 7f7cb821 *: fix response body leaks b4d9ae60 registry: endpoint_v1: fix outdated comment d5160a02 daemon: update: check len inside public function 9638c764 Include status code in UnexpectedHTTPResponseError 98140ca0 Update missing blob error checking with latest Azure API c94c2a47 Don't return empty errcode.Errors slices 789c90ac registry/storage/driver/s3-aws kms support 2f170573 Remove Windows-specific default registry definitions eea043dc Removes ceph rados driver in favor of Swift API gateway support 7caf33d6 Move registry service options to the daemon configuration. 3e2da426 fix some typos. 19cfa36e Added support to specifiy custom endpoint cbd95acb Add support for identity token with token handler 259ef42c Add client ID to token fetch to GET endpoint 490a2f5a Updates Swift driver to support new storagedriver.FileWriter interface 5b48c815 Support FileWriter interface for OSS storage driver 9432b18e Storagedriver: GCS: add chunksize parameter 115a6e58 Storagedriver: GCS: implement resumable uploads 34891eb7 StorageDriver: Testsuite: call Close before getting Size c69c8a32 Adds new storagedriver.FileWriter interface 5ca3b616 Fix two misspellings in source code comments e09891e2 URL parse auth endpoints to normalize hostname to lowercase. 2494c28e [driver/s3aws] Update s3aws driver parameter parsing to match s3goamz c536ae90 Fix oauth cross repository push e0420f40 Add offline token option d6a17782 Add post token implementation 6a6c22e2 Add options struct to initialize handler f49bf187 Fetch token by credentials and refresh token 396a73de StorageDriver: GCS: remove support for directory Moves 065ddf01 Login update and endpoint refactor e123ca92 Remove email address field from login b7d34241 Implements garbage collection subcommand d16f3046 Fix some typos in comments and strings ecc560f4 Commit blob with known size 29e0411f Enable proxying registries to downgrade fetched manifests to Schema 1. 776e01f8 Defined ErrAccessDenied error c58aa8a5 compare error output in tagstore unit test 9a2cef38 Change APIEndpoint to contain the URL in a parsed format 18fd1c07 Extend authChallenger interface to remove type cast. 2e824482 Fix description of StorageDriver.WriteStream 20bc910c Cleanup: remove unused log c6871737 [driver/s3aws] Fix TestStorageClass 7d16fee7 To avoid any network use unless necessary, delay establishing authorization challenges with the upstream until any proxied data is found not to be local. c21f4eb5 Add credential authenticator interface 7ca24a7f fix gofmt ad6a0735 closes #1461, enhance log message of oss driver d5a38e4c Adds new s3 driver using aws-sdk-go instead of goamz 4bb475cd Push/pull errors improvement and cleanup cffb4bbb Export "no basic auth credentials" as an error value f77c82eb Typo fixes in comments 956ece5c Add option to disable signatures ae595179 Fix schema1 manifest etag and docker content digest header 4bb5f808 Improves flexibility of configuration handling for S3 driver c89f5b37 Add information about manifest content types to API spec 9894643c Correct type for repo reference Signed-off-by: Richard Scothern <richard.scothern@gmail.com> 6158eb54 Rename Name method of Repository to Named 95b9c728 read the actual number of bytes according to the initial size. bbf983c0 On redirect, only copy headers when they don't already exist in the redirected request 091c12f8 Print the correct token expiration time Signed-off-by: Richard Scothern <richard.scothern@gmail.com> 95a50c72 Correct ErrAuthenticationFailure message a2ade36e Adds test for S3 storage class configuration option 8e791082 Adds "storageclass" configuration parameter for S3 driver. f41a408e Adds custom registry User-Agent header to s3 HTTP requests badd8c49 Update auth context keys to use constant 8e571dff Add a CheckRedirect function to the HTTP client a58b7625 Support range requests in the client's httpReadSeeker 377f5564 Respond with 401 when there is an unauthorized error from the registry. 3e570e59 Invalidate the blob store descriptor caches when content is removed from from the proxy. Also, switch to reference in the scheduler API. a7740f5d Correct test digest lengths and enable all unit tests f757372d Add manifest put by digest to the registry client Signed-off-by: Richard Scothern <richard.scothern@gmail.com> 1eed0ddd Update token header struct to use json.RawMessage pointer 7dee3d19 Storage: remove bufferedFileWriter (dead code) 586b3d47 Storage: blobwriter.Write/Seek test case 6149a8c6 Change URLBuilder methods to use references for tags and digests e9692b80 Use reference package internally e9bcc96a If the media type for a manifest is unrecognized, default to schema1 59254013 Handle nonstandard token endpoint errors 0e06c1ca Clarify error message when a .cert file is missing a corresponding key 59a96077 StorageDriver: GCS: retry all api calls ffc95277 StorageDriver: Test suite: improve cleanup f9a3f028 Fix content type for schema1 signed manifests 3da0ee00 Do not require "charset=utf-8" for a schema1 with content type application/json 6e85a8d9 Remove the use of dockerversion from the registry package 985c0d60 StorageDriver GCS: try google.DefaultTokenSource first d3d9282a In testsuites.go, enlarge the size of randomBytes to 128M to fix the crash of running TestConcurrentStreamReads 67aef89b Splits up blob create options definitions to be package-specific e0d4a45c Fixes cross-repo blob mounting in the BlobUploadHandler 5d35fa34 Change the parameters to the GCS drivers to allow CircleCI testing. 36023174 Adds functional options arguments to the Blobs Create method 93b65847 Fix manifest API unit tests Signed-off-by: Richard Scothern <richard.scothern@gmail.com> 44d95e58 Allows token authentication handler to request additional scopes 41e30f62 Adds cross-repository blob mounting behavior bbabb55c Move MediaType into manifest.Versioned fce65b72 Recognize clients that don't support manifest lists 7ef71988 Add support for manifest list ("fat manifest") 66a33baa Add API unit testing for schema2 manifest f14c6a48 Recognize clients that don't support schema2, and convert manifests to schema1 on the fly 9c13a829 Factor out schema-specific portions of manifestStore 981a573e Modify import paths to point to the new engine-api package. 5c6fdc71 GCS Storagedriver: fix test failure caused by #1187 bf1e41a9 GCS driver: fix retry function fea0a7ed Remove tags referencing deleted manifests. 72432a70 Show the legacy registry flag only in the daemon arguments 4f4b3d52 Remove usage of pkg sockets and tlsconfig. b89c4e8c Print error for failed HTTP auth request. 5dc714b3 Replace 404 to http.StatusNotFound 165507a6 Relaxes filesystem driver permissions to 0777 (dirs) and 0666 (files) cf4fdc1b Serve blobs when a storage driver supports redirects but are disabled 9c7dc47d use the scheme and host from x-forward-proto and x-forward-host if they exits and correct the scheme for Location header during image upload dc6944d9 In HEAD request for missing resource, only 404 NOT FOUND is returned 693eb14e Allow v1 protocol fallback when pulling all tags from a repository unknown to v2 registry 71ddfd40 When a manifest is not found, allow fallback to v1 8efb9ca3 Implementation of the Manifest Service API refactor. 5717c824 Do not fall back to the V1 protocol when we know we are talking to a V2 registry 46683f61 Update Named reference with validation of conversions 9b8f1a08 Add own reference package wrapper a077202f Remove tarsum support for digest package 14d27ab7 Move the TestEncodeAuth test to the correct package. 0a56a1cb Move registry.SearchResult types to api/types/registry. 58232e50 Simplify digest.FromBytes calling convention 55fad57a Remove timeout shared function. aead731d Move IndexInfo and ServiceConfig types to api/types/registry/registry.go 6fc54d04 Move AuthConfig to api/types 11e8c03c Fix typos found across repository f7bb65ca Refactor ResolveAuthConfig to remove the builder dependency on cli code. 4ebaacfc Remove unnecessary stat from blob Get method cfd2f039 Support large layer for OSS driver 00cca12e Improved push and pull with upload manager and download manager d68acc86 storage/driver/s3: adjust s3 driver to return unmunged path d38e02c5 Print error for failed HTTP auth request. 533c912d Fix the issue for listing root directory 3a5c6446 Fix for stevvooe:check-storage-drivers-list-path-not-found in OSS driver aa08ced9 driver/swift: treat empty object list as a PathNotFoundError c39158d4 driver/rados: treat OMAP EIO as a PathNotFoundError 10f7b7bf storage/driver/s3: correct response on list of missing directory dc5b71af storage/driver/base: use correct error format style c46d32bf driver/filesystem: address filesystem driver on behavior of List 4829e968 registry/storage/driver: checking that non-existent path returns PathNotFoundError 03778bd1 Add missing bounds in ContinueOnError be2985a3 storage/driver: decrease memory allocation done during testsuite ecb84029 Make the catalog more efficient fb214214 Add clearer messaging around missing content-length headers. Signed-off-by: Richard Scothern <richard.scothern@gmail.com> d6cc3296 Fix comment for PathRegexp b596464d Use bulk delete to remove segments in Swift driver 1f5f9bad Validate digest length on parsing bf2cc0a9 Avoid stat round-trips when fetching a blob b7d246ef rename req to resp 6693e966 storage: add further tests for Walk implementation 93f92498 storage: enforce sorted traversal during Walk 7bf8f846 storage: correctly handle error during Walk e1cf7c41 Map error type to error code beeff299 Use well-known error type 82999376 Verify manifest name format 6fb61830 Verify manifest name length a9a1b579 Remove name verification 8257e8c4 Use case of type name 73a20910 Check if CertsDir is not empty 6bb27bcf move defer statement for readability 7efcb749 Update daemon and docker core to use new content addressable storage dde006ba registry/registry.go: simplify logical expression 3eeebe7b Make NormalizeLocalName to not reach the network to normalize names. 18207042 Fix for #17168 misleading pull error accfa46f Fix empty delete requests with Swift fs driver 9516a01c dockerversion placeholder for library import f01a70c8 De-obfuscate error message 78b6d648 Before allowing a schema1 manifest to be stored in the registry, ensure that it contains equal length History and FSLayer arrays. e79324ed Add a generic error type to capture non-typed errors 7840a5bc Fix for issue 664: https://github.com/docker/distribution/issues/664 Errors thrown by storage drivers don't have the name of the driver, causing user confusion about whether the error is coming from Docker or from a storage driver. This change adds the storage driver name to each error message. 34c1d0ed Ensure read after write for segments 11546b53 Add support for temporary URL for Swift driver afd61ce8 Vendor updated version of docker/distribution 854fa0a4 registry/storage: close filereader after allocation 94913b8f Fix go vet warnings 00f02b5f Buffer writing the scheduler entry state to disk by periodically checking for changes to the entries index and saving it to the filesystem. 98ad17f7 Storage driver for: Google Cloud Storage (gcs) 24de26a8 Revert "dockerversion placeholder for library-import" c2d5c294 dockerversion placeholder for library-import b38b98c8 Add `expires_in` and `issued_at` to the auth spec. 9293e3db Fix failing test case 8263cdeb Update "type auth.Challenge" comment example code fc5ee720 Correct two golint comment issues 84595fc6 Simplify proxy scheduler c40b2e23 Redundant digest verification in validateBlob 26762a54 Correct unmarshal order for SignedManifest 582a0661 Update to provide small and clear interfaces b72f1fd2 Add a new reference package abstracting repositories, tags and digests ed69ef01 Update distribution package 36fa22c8 Fix a race condition in pull through cache population by removing the functionality of readers joining current downloads. Concurrent requests for the same blob will not block, but only the first instance will be comitted locally. d5ca577a Allow hostname components in component names. 0b543b47 change flag name to better follow the other flags that start with disable; 82965f6c Fix docker search problem 6573d5c1 Add http.host parameter fa4c33f5 [api spec] Update authN and authZ errors b045aa2a Avoid importing "testing" in externally-facing code ebaa771c Prevent push and pull to v1 registries by filtering the available endpoints. Add a daemon flag to control this behaviour. Add a warning message when pulling an image from a v1 registry. The default order of pull is slightly altered with this changset. cbf83ecd Add an "enabled" parameter under "readonly", and make it as if the mutable handlers don't exist when read-only mode is enabled df9758ba Add a read-only mode as a configuration option 84e7c07c Remove initial access check from S3 driver 9fb5fe4f Don't return a nil array and a nil error if the Tags endpoint cannot be found Signed-off-by: Richard Scothern <richard.scothern@gmail.com> b8a1ec41 Avoid returning nil, nil when fetching a manifest by tag by introducing a new error ErrManifestNotModified which can be checked by clients. 49f080ac Add WithVersion to context and other cleanup cabf1fd2 Allow interface{} keys when using logger 6403bf64 Only use the distribution/context package in registry.go 045db617 Add a cobra command that implements the entire main function for registry 8dd51d64 Move initialization code from main.go to the registry package 2b658054 Make RegistryConfig a typed value in the api. 8ceca304 Skip creating swift container if already exists 8f5f6a4e Add TrustId parameter to swift driver 6e7718df Correctly sanitize location url preserving parameters bb098c72 Move manifest package to schema1 7dd03e12 More consistent return from ErrorCode.Error() 5b804f76 Add headers parameter for HTTP checker ca3d4602 Add a TCP health checker cdc3143b Expose a Registry type in health package, so unit tests can stay isolated from each other bbd46991 Switch tests to import "github.com/docker/distribution/context" 68e8532c Add storagedriver section to health check configuration c48e4609 Add configurable file-existence and HTTP health checks 142b68aa Add a unit test which verifies the ResponseWriter endpoints see implements CloseNotifier 7fb68446 Functional options for NewRegistryWithDriver 11133181 Fix CloseNotifier handling and avoid "the ResponseWriter does not implement CloseNotifier" warnings in logs 2e4c6434 Fix tests after #846 614e8c82 Remove pathMapper object 5878a8f4 Maintain manifest link compatibility 5dd78c82 Use correct path for manifest revision path d9a20377 Add a section to the config file for HTTP headers to add to responses 43fc9a19 Change some incorrect error types in proxy stores from API errors to distribution errors. Fill in missing checks for mutations on a registry pull-through cache. Add unit tests and update documentation. ed3ecfdc Move common error codes to errcode package 288c46e9 Provide simple storage driver health check 9bf231e0 fix(rados): Create OMAP for root directory cf901659 typofix - https://github.com/vlajos/misspell_fixer 777fd4c7 Update Windows TP3 registry endpoints b82b0694 Remove unnecessary func parameter, add mirror endpoint test e7435725 Don't panic when a http.ResponseWriter does not implement CloseNotifier a7eb16ad registry: Do not push to mirrors 66761c02 Better/more specific error messages on connect 86a3ea91 Windows: Fix certificate directory for registry d1cb12fa Add pull through cache functionality to the Registry which can be configured with a new `proxy` section in the configuration file. 54f0c70d Fix vet issue 40563361 Add blob delete entry to api description and regenerate api.md Signed-off-by: Richard Scothern <richard.scothern@gmail.com> b51913f6 Set the response code to 499 when a client disconnects during an upload b0d13304 Factor CloseNotifier use into a new function 8fbc1de0 Use CloseNotifier to supress spurious HTTP 400 errors on early disconnect 83c8617c Spelling corrections Signed-off-by: Richard Scothern <richard.scothern@gmail.com> cfb0b7aa Fix uses of "int" where "int64" should be used instead f01a0694 remove unused code and fix todo format 90595c7e fix goimports 235ccc05 add include_oss build tag 9c27080c Update the comment for the consistency model 5d34d317 Update the comments for consistence model faee4224 fix testcase TestReadStreamWithOffset incompatible with oss a9c3f86c fix oss: got 403 in TestContinueStreamAppendLarge 440664a1 Update the OSS test case for latest code change fc20dd72 check access key and secret before run d28a3fa2 add endpoint support 46148721 Add the secure access with HTTPS bffce572 Fix the warning of golint d7917988 Support OSS driver 048339e3 registry: allow fallback on unknown errors 6a11f5a0 Add image name tests around hostnames 6f83ba2b registry: Change default endpoint on windows to a windows-specific one fd404e78 When a request completes ensure only one log line is printed which includes the http response. e83af616 Automatically generate a HTTP secret if none is provided 9d73bfe5 Fix for api_test.go ba358690 Fix login and search TLS configuration 29a810b6 Allow disabling of starage driver redirects 6b457322 Make the registry client more tolerant about HTTP status codes c219afdb Use notary library for trusted image fetch and signing 345174a3 Etags must be quoted according to http spec 24408263 Manifest PUT should return 201 Created 52136ab0 Improve documentation and golint compliance of registry package 390bb97a Manifest and layer soft deletion. 911c0d9f Do not replace logger when adding hooks e42a8ca5 auth.AccessController interface now uses distribution/context 4a2300aa Simplify auth.Challenge interface to SetHeaders a246ab0a cli: new daemon command and new cli package 0ec762c0 Remove dead code 153ef321 Clean up pagination specification 683dc197 Unify the testcases for the two tests in names_test.go a49594a0 Add Registry to client bindings for Repositories aae59d54 Make Error.Error() return the post-arg-substitution Message bf62b7eb Create Repositories method f3207e76 Catalog for V2 API Implementation 0790a298 Paginate catalog and tag results with Link header 1d68d81b Catalog V2 API specification proposal 726f3e07 better i/o timeout error on pull ceb2c7de Add additional test coverage for the regexp contained in RepositoryNameRegexp 2b7788f2 Remove v1 registry mirror configuration from LookupEndpoints. 00edb3bb Configure TLS for private registry mirrors. b2935158 Remove IPC support from test file 81765f8c Catch either missing containers or objects 52d28ec8 Do not use Swift server side copy for manifests to handle >5G files 000dec3c Inline Swift errors handling 661f197f Retrieve all the objects using pagination 704e0822 Do not create objects for directories f190aa4a Refactor segment path concatenation code 08072828 Use http.StatusRequestedRangeNotSatisfiable instead of error code 7a5aa32a Use file instead of filepath as it may cause troubles on Windows 91d74a3e Protect against deletion of objects with the same prefix 01686e2c Show distribution version in User-Agent 913fe195 Do not use suite style testing for Swift specific tests 1b28eea2 Rename environment variables to run Swift testsuite 2524f300 Check file has been opened before closing it fbc74a64 Rename DriverParameters structure to Parameters 80bfcb68 Change folder mime type to application/vnc.swift.directory 7b0276dc Add code documentation 5cce023a Do not read segment if no padding is necessary d91c4cb6 Improve 404 errors handling 9ab55eae Use only one Swift container for both files and manifests a1ae7f71 Increase default chunk size to 20M 062d6266 Add support for Openstack Identity v3 API 3f9e7ed1 Use 'prefix' parameter instead of 'path' when listing files 1d46bb2b Create full folder hierarchy instead of just the top level folder 4e619bc9 Remove one level of indentation in swift path handling code 75ce67c4 Use mitchellh/mapstructure library to parse Swift parameters ea81e208 Move Dynamic Large Object handling to dedicated methods 8a22c0f4 Simplify code that handles non existing manifests 16a49ade Handle error during copy of original content 9f7f23e3 Update the import path for swift driver test 1f4eb7b7 Use gofmt to format the code of swift driver. cce49561 Add Openstack Swift storage driver 5280103c Remove unused types in registry package 4c255a0d Remove dead code in registry package 138ba392 golint for cliconfig 249ad3b7 Use "Size" field to describe blobs over "Length" 3552960e fix 8926: rmi dangling is unsafe when pulling feebd69d Close reader after the test is finished. 41aadeac Reduces log level of auth error lines from error->warn 81c21411 Export ServeJSON for serving error codes 7fed379d Update graph to use vendored distribution client for the v2 codepath 950cf586 remove pkg/transport and use the one from distribution 45bd073e Fix issue where Search API endpoint would panic due to empty AuthConfig cd31d466 Allow Manifest Service to be configured with function arguments db30d384 Add ability to pass in substitution args into an Error 01c8fb36 Set canonical name correctly caf989a5 Allow conditional fetching of manifests with the registry client. 6f2f8499 Fix build when using build tag 'noresumabledigest' b425c402 Allow one character repository name components a58848a0 Allow single character repository names c82a9a81 Add the X-Docker-Token header to the /v1/search requests. 970efb6b Fix typo in Version doc 8e857d11 Add 500 check for registry api call 376cc5fe Add challenge manager interface 5a3a9c6a Separate version and challenge parsing from ping b66ee14e Refactor client auth 855ecb84 Remove timeout for http.Client in registry/client/repository.go. fa17f925 Pass correct context into tracer Signed-off-by: Richard Scothern <richard.scothern@gmail.com> 6167220c Remove half-baked Storage Driver IPC support 6d46ae5f Prevent the ErrUnsupportedMethod error from being returned up the stack. f432bcc9 Remove RC4 from the list of registry cipher suites ebd56996 Remove dead code 6bedf7d1 Add Etag header for manifests. 79661b8a Unconditionally add AuthTransport. 805b135b Add 'message' back to BlobTest sample json 365de1b2 Add back in the "errors" wrapper in the Errors serialization cff1a5ff Move challenge http status code logic d4c7ea43 Use distribution's ValidateRepositoryName for remote name validation. f9e152d9 Ensure that rados is disabled without build tag 5c372ded storage/driver/azure: Update vendored Azure SDK 13b279f5 Only pulling single repository tag on pull for a specific tag. extending TestGetRemoteTags unit test Splitting out GetRemoteTag from GetRemoteTags. Adding registry.ErrRepoNotFound error 56349665 Round 4 f6ee0f46 Minor formatting fixes related to htpasswd auth 280b9c50 Saner default data location e667be38 Rename the basic access controller to htpasswd 14f3b07d Harden basic auth implementation 427c4578 Refactor Basic Authentication package 35044456 Unexported function to comply with golint fe9ca889 Removed dashes from comments, unexported htpasswd struct 15bbde99 Fixed golint, gofmt warning advice. ff67393b Added support for bcrypt, plaintext; extension points for other htpasswd hash methods. d2b7988b Aligned formatting with gofmt 7733b6c8 Fixed WWW-Authenticate: header, added example config and import into main, fixed golint warnings 60262521 Implementation of a basic authentication scheme using standard .htpasswd files 5b3e2c7d Registry: remove unwanted return variable name 5a8f6904 Do not set auth headers if 302 60967cbd Clarify that manifests can only be deleted by digest 630334b3 Add more repository name validation test cases c01c508e Make the v2 logic fallback on v1 when v2 requests cannot be authorized. b8b16b78 Round 3 - Add Register function 040d7038 doc: coherence between requests and parameters + typo 5418e3be Upon HTTP 302 redirect do not include "Authorization" header on 'untrusted' registries. 6640f60c registry: debugTransport should print with testing.T.Log 767c5283 Fix race condition in registry/session 4bc53818 Fix rados build, remove uuid dependency 9d7c6923 Feature: Web Panic Reporting via hooks 58912344 fixed typos 0ecc7596 Properly verify manifests and layer digests on pull 7d11fc6e Remove PortSpecs from Config 00b1e8fc Round 2 Make Errors a []Error f565d6ab Move ErrorCode logic to new errcode package Make HTTP status codes match the ErrorCode by looking it up in the Descriptors 287cf411 Registry v2 mirror support. 8fc7d769 Fix race in httpsRequestModifier.ModifyRequest when writing tlsConfig f8c0086e Replace uuid dependency with internal library bdaed4c7 Refactor specification of supported digests d4c50637 Better error message when failing to get AWS auth a1ade52b registry: fix auth bug a0d242d9 Remove digest package's dependency on external sha implementation 812c8099 Decouple redis dependency from blob descriptor cache cd543091 client: fix a typo preventing compilation 754a8e80 Remove error message shortening aac3ce46 Only do auth checks for endpoints starting with v2 7e4d5eaf Update transport package to sever distribution dependency 3b5a2bbe Add unauthorized error check 07e5885d Fix wording in comment b4972a6b Break down type dependencies 8db2145b Feedback update 2c1a83f9 Storage Driver: Ceph Object Storage (RADOS) 38f0c6fa Windows: fix registry filepath and location ea39e348 Fix typo: respository->repository 808c87ce Add transport package to support CancelRequest 9e6affc3 requestdecorator: repurpose the package and rename to useragent 89bd4848 registry: Refactor requestfactory to use http.RoundTrippers 3c34b3c8 Increase default connection timeout to 30s eb2ac430 Lint and documentation fixes 131b608a Create client transport package e0e13209 Remove unused and duplicate error types 296a8415 Update to track refactor updates 568df315 Open cache interface 60b314ad Rename layer files to blob 67e2e834 Update to use blob interfaces 6bf4c45e Add missing defer on Tags 89c396e0 Simplify configuration and transport 8b0ea19d Add base transport to interface a9b0f49c Removed unused mirror flags 17cbbf64 Update ReadFrom to wrap reader in NopCloser ecaa643c Create authentication handler 7d630192 Add tags implementation 2eb9b286 Use distribution context instead of google b78727cb Cleanup session and config interface 07cee840 Split layer and upload from repository 03e08731 Add unit tests for auth challenge and endpoint 837a12db Remove deprecated client interface 4c8e4dc3 Add client implementation of distribution interface 08401cfd Refactor Blob Service API 351babbf Fix invalid tag name 2db0327d Set cache headers for layers. b292f31d [Server] Listen and serve on a unix socket 12354621 Modify blob upload API 7f3a57fd Ensure the instrumentedResponseWriter correctly sets the http status in the context. 6fbda8fa Update API spec to reference digest instead of tarsum 80abf9fc Use done channel to avoid goroutine leak 5d9105bd Make Storage Driver API calls context aware. bb93129d trivial: typo cleanup 9a26753d Small if err cleaning 5caa1fe3 Add configuration for upload purging 10f32bfc simplify the embedded method expression of repository 2c7489e6 Updated urlbuilder X-Forwarded-Host logic 0f897aea Attempt to address intermittent s3 RequestTimeout error 0d8cb4dc Correctly check s3 chunksize parameter 8d4b636a Return after error in handler a8b9bec1 Move CLI config processing out from under registry dir ecda1f4e Include driver name in trace messsages b361b481 Require storage drivers to report their name c49f7cd0 Pool buffers used in S3.WriteStream e4794ff7 Allow configuration of chunksize parameter f1ea982e Check error returned from io.Copy 36ffe0c1 Backoff retry on verification to give s3 time to propagate 77b30cfb log canonical digest on verification error d4ce8f5e Attempt to deal with eventual consistency by retrying 43181105 Add logging for generic handler errors. 34d1494c Make .docker dir have 0700 perms not 0600 7b8b61bd Add .docker/config.json and support for HTTP Headers 47784682 Removes redundant else in registry/session.go 742cf000 Refactor else branches bc2b6efa Add path and other info to filesytem trace methods. f3f46307 fix some typos in source comments 0b2feaf6 Automatically purge old upload files. 136f0ed8 Instantiate http context before dispatch 480d864f Use a build flag to disable resumable digests. 16174241 Update final upload chunk api doc 2bd5eb9d What if authConfig or factory is Null? 98985526 Add auth.user.name to logging context ad3d8799 Refactor utils/utils, fixes #11923 12bf470b Trace function calls to Base storage driver 4ac515fd Prevent Close() from being called after Finish() e83e3761 Rename top level registry interface to namespace 36a07699 Disassociate instance id from application 250e61e2 Prevent false sharing in signature fetch 2b4ad94c Defer case-sensitive support to storage backend 8c0859e3 Handle cloudFront bucket prefix issue def60f34 Parallelize signature fetch in signature store e5408bd9 Remove engine.Table from docker search and fix missing field 6b748a74 Move expvar under the registry section 4e1ecad6 Allow control over which storage cache to use 6ab228f7 Integrate layer info cache with registry and storage a7c2dcee Define and implement layer info cache b96de45b Use resumable digest for efficient upload finish 06acde06 Avoid crash on invalid Move arguments 6eb804a1 Stronger validation for uuid field in urls 38ae1cb4 Add redis pool to registry webapp 638ccff5 Remove jobs from registry.Service 67e5c940 Use vendored v2 registry api 5fa2d814 Refactor utils/http.go, fixes #11899 d5045d05 Replace aliased imports of logrus, fixes #11762 b085d555 Changed snake case naming to camelCase eff5278d Fix for issue 9922: private registry search with auth returns 401 9c08a436 Remove engine.Status and replace it with standard go error dffd1bab Updating MSOpenTech/azure-sdk-for-go to latest master 594f733e storage/driver/azure: Allow non-default realms 10128f6e Add struct tags on v2 remote tags struct 0e7650f9 Fix decode tags value error when call get /v2/<name>/tags/list in registry api v2. 9f5184c1 Add check for 404 on get repository data bcccf35b Separate init blob upload 11d08c30 Add verification of image manifest digests 4bf67913 Update auth client configuration to use proper tls config 7d4c1d1e print detailed error info for docker pull 4b813b38 Add ability to refer to image by name + digest 1d6ccc1b Quote registry error strings 9879aefa Use request factory for registry ping dc4e9c6e Docker Tag command: Relax the restriction on namespace (username) length from 30 to 255 characters. 6d140193 Refactor Layer interface to return a Handler fdd63147 Insert request method option storage driver URLFor 4b5af16f Send WWW-Authenticate header for silly auth 83571e57 don't panic during a request when configuring repository middleware. Return a 500 with an appropriate error Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage) 5c3f53b7 Fix Godoc typos 6a72d1ae Final polish to cloudfront and larger middleware refactor Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage) 30bcc17b Middleware! 952f39ed Refactoring cloudfactory layer handler into a more generic storage middleware concept. 3e658d29 digest: Minor refactoring eccae81c minor refactor + tests for app.go just to improve test coverage. Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage) 7a35d98c Remove subdirectories MAINTAINERS files 99401d72 Allow single name component repository names ccfadc93 Remove max repository component length restriction 2a786bfc fixing up tests to work with for non-tarsum future Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage) 98daae17 Switch to SHA256 as canonical digest 4e3bf4ba Update notification event Target fields 19061f34 doc: move storage driver readmes into docs 008236cf Implement immutable manifest reference support f46a1b73 spec: fetch manifests by tag or digest a65662c1 Expose Signatures() on Repository 0b34048f Remove unnecessary close in client b870e3fd wrap buffered writer around filewriter ac7af800 documentation for name validation grammar 3bf768a5 Adding test cases to confirm path traversal attempts are mitigated and bad characters in URI return 404 Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage) 32f5965c Specify and implement Docker-Upload-UUID 871cf9dd Path prefix support for running registry somewhere other than root of server d3ad1c3c Rename package timeout to timeoutconn. ec7ed3ee Move TimeoutConn to seperate pkg dir. 2867d39c Removing -X flag option and autogenerated code to create Dockerversion.go functionality Addresses #9207 606c5c8c A digest missing parameter should result in a bad request b87459b3 Rename auth.token.rootCertBundle yml field 58269e73 Fix S3 driver's list when the root directory is either "" or "/" 02718ee2 Add an empty root directory s3 driver specific test 3e906311 Add error return to Repository method on Registry ed8827c3 Move notifications package to distribution 09bf7522 Remove Name from Layer and LayerUpload interface 553d48d6 Move layer interface definitions to distribution package 8728074d storagedriver/azure: Add README fac0f541 Run goimports/gofmt on previous changes 6e4f9a2e Move storagedriver package to registry/storage/driver 71e7ac33 Move storage package under registry package d6308bc6 Move client package under registry package c3b07952 Move auth package under registry package 3822e685 Move registry api definitions under registry package 54ae545e Move registry package into handler package 287e11e1 Correctly return when repo name is not available 9bde7d98 Integrate context with storage package 3e840699 Integrate contextual logging with regsitry app 904b35a2 Use context for auth access controllers 92de07ce Pretty the help text 1f06e4f8 Manifest PUT should return 202 Accepted status 1089cae2 Separate request data from actor in Event 2aed7c2d Webhook notification support in registry webapp 3790b5d6 Fix some go vet errors b6270d9c Handle empty blob files more appropriately 63af81b8 Fix token basic auth header issue 050337b2 Handle gorilla/mux route url bug 5589ce8b delete duplicated word in registry/session.go 33a1f4ef Address server errors received during layer upload 9dc3529d Add distribution maintainers to maintainers files 0818476c Open up v2 http status code checks for put and head checks d96d4aa9 Better error messaging and logging for v2 registry requests 41703e2b Fix write after close on http response 6a736c20 Split API Version header when checking for v2 1c727112 Resolve ambiguity on registry v2 ping acfcc955 Add Docker Distribution API Version header 4eaf6443 Make .dockercfg with json.MarshallIndent 825da388 Update the registry app to use the new storage interfaces 9c24fc93 Add token cache 5bf94a64 Cleanup v2 session to require endpoint 735a1124 Fix list tags e5744a3b Refactor from feedback 826bde85 Add Tarsum Calculation during v2 Pull operation 6f09abd5 Correctly check and propagate errors in v2 session 22c73285 Get token on each request 6f36ce3a Allow private V2 registry endpoints 751a1a8d Update push and pull to registry 2.1 specification ee1e1abb Remove dependencies on registry packages 2fcad2a1 Registry V2 HTTP route and error code definitions e256a0e0 Update token response handling 24895820 Update push to use mount blob endpoint 06d0ef41 Push flow 6b400cd6 Adds support for v2 registry login 1f983479 Fix format calls as suggested by vet 594263a3 Correctly handle missing layer upload cd92071c Directly manage layerUploadState in webapp fdcfc56f Refactor handling of hmac state packing 9d3436c1 Fixes tests, moves layerhandler in config file 23f9f8c3 registry: fix minor type b11d549f Adds support for content redirects for layer downloads c899a49a Moving NewIndexInfo, NewRepositoryInfo and associated helpers into config.go 64b000c3 Deprecating ResolveRepositoryName c02f1a55 Move registry package out of repo root eb9ddb7b Allow hyphens in namespaces. 4170effd registry: remove accidentally added --insecure-registry feature d1fcbd90 registry: handle unresolvable domain names in isSecure to allow HTTP proxies to work as expected. 807bb5eb registry: add tests for unresolvable domain names in isSecure b11b1e06 Chnage LookupRemoteImage to return error This commit is patch for following comment // TODO: This method should return the errors instead of masking them and returning false cb4f9160 Fix conflicts. fdd4f4f2 validate image ID properly & before load 6ad54e3d Refactor put image function's redirect loop 3911c8b8 Prevent loop with var overshadowing b62a9ac9 validate image ID properly & before load df85a0f7 registry: fix ServerAddress setting 6638cd7b Add the possibility of specifying a subnet for --insecure-registry 8065dad5 registry: parse INDEXSERVERADDRESS into a URL for easier check in isSecure 8b0e8b66 Put mock registry address in insecureRegistries for unit tests 44d97c1f registry: refactor registry.IsSecure calls into registry.NewEndpoint ae0ebb9d Add the possibility of specifying a subnet for --insecure-registry f0920e61 registry: parse INDEXSERVERADDRESS into a URL for easier check in isSecure cca910e8 Put mock registry address in insecureRegistries for unit tests 80255ff2 registry: refactor registry.IsSecure calls into registry.NewEndpoint 524aa8b1 registry: always treat 127.0.0.1 as insecure for all cases anytime anywhere 8582d043 registry: default --insecure-registry to localhost and 127.0.0.1 cd246bef registry: add tests for IsSecure 7dd4199f registry: don't iterate through certs 47a494e0 Fix login command 1b72e023 Do not verify certificate when using --insecure-registry on an HTTPS registry 552c17d6 Don't hard code true for auth job 50e11c9d Refactor IsSecure change 034c1cfb make http usage for registry explicit 0481c669 Fix login command 22f87eb9 Fix error on successful login. 1a8edd0d excluding unused transformation to []byte 0827b711 Mass gofmt 32654af8 Use logrus everywhere for logging bcbb7e0c registry/endpoint: make it testable ef57ab12 Use dual-stack Dialer when talking to registy dff06789 Avoid fallback to SSL protocols < TLS1.0 798fd3c7 Do not verify certificate when using --insecure-registry on an HTTPS registry 27ddc260 Don't hard code true for auth job 2b9798fa Refactor IsSecure change 8b1c4073 make http usage for registry explicit 3a6fe4c5 On Red Hat Registry Servers we return 404 on certification errors. 20867c3b Avoid fallback to SSL protocols < TLS1.0 479ed10e Support tarsum dev version to fix issue with mtime 1538e42d Update manifest format to rename blobsums and use arrays of dictionaries f290f446 Use direct registry url 7bfdb6d4 registry: lint c47aa21c Add comment for permission and fix wrong format variable b7f7b0a2 Add provenance pull flow for official images d629bebc registry: getting Endpoint ironned out 48b43c26 Replace get.docker.io -> get.docker.com and test.docker.io -> test.docker.com b7da79fd Refactor all pre-compiled regexp to package level vars Addresses #8057 898bcf0f TarSum: versioning eaf57e8f Fix SEGFAULT if dns resolv error 2c780195 registry/session: fix panic in GetRemoteImageLayer 307e253d Restrict repository names from matching hexadecimal strings 27e0ec3d Style fixes for registry/registry.go 4d8f45a9 fix return values in registry mock service 283fba48 Expand hostname before passing it to NewRegistry() 744919be Enable `docker search` on private docker registry. The cli interface works similar to other registry related commands: 94ff3f3e move utils.Fataler to pkg/log.Fataler 2a7cf96c Extract log utils into pkg/log 7ef3a5bc registry.Registry -> registry.Session 94c52da6 Expand hostname before passing it to NewRegistry() d768343c Enable `docker search` on private docker registry. The cli interface works similar to other registry related commands: 47261aa8 Remove CheckSum from utils; replace with a TeeReader 7f2dca77 utils/tarsum* -> pkg/tarsum 052128c4 Move parsing functions to pkg/parsers and the specific kernel handling functions to pkg/parsers/kernel, and parsing filters to pkg/parsers/filter. Adjust imports and package references. 775ca3ca move resumablerequestreader to pkg 822f8c1b update go import path and libcontainer 6365d94e Joining registry maintainers 78a499ac get layer: remove HEAD req & pass down response 19b4616b Add Content-Type header in PushImageLayerRegistry 7cd8de13 Fix go vet errors d95235cc Add support for client certificates for registries 46cc7603 registry: remove unneeded time.Duration() 4ec6e68e Disable timeout for push 5cef006c improve trusted location detection 8e8ffacf only forward auth to trusted locations 0ac3b398 Add redirect and env proxy support to docker login 96412d40 resume pulling the layer on disconnect 3a21f339 Use Timeout Conn wrapper to set read deadline for downloading layer a9a754da registry: adding vbatts to the MAINTAINERS f293adf7 import sha512 to make sha512 ssl certs work bbebff75 Move 'search' to the registry subsystem 8934560b Move 'auth' to the registry subsystem 3e064ac7 Use proper scheme with static registry Docker-DCO-1.1-Signed-off-by: Michael Crosby <michael@crosbymichael.com> (github: crosbymichael) 2b89f579 static_registry: update the test for the new struct 52893cae Added support for multiple endpoints in X-Docker-Endpoints header Docker-DCO-1.1-Signed-off-by: Joffrey F <joffrey@docker.com> (github: shin-) 4bc35225 allow dot in repo name dbb92965 Added specific error message when hitting 401 over HTTP on push Docker-DCO-1.1-Signed-off-by: Joffrey F <joffrey@docker.com> (github: shin-) 4f29181d Payload checksum now match the checksum simple d2b2bf03 Inverted layer checksum and tarsum. 50ec0bbd Docker-DCO-1.1-Signed-off-by: Ryan Thomas <rthomas@atlassian.com> (github: rthomas) fffa920a Docker-DCO-1.1-Signed-off-by: Ryan Thomas <rthomas@atlassian.com> (github: rthomas) 9bad706a Harmonize / across all name-related commands/Validate images names 47c4e542 use mock for search c18c4b8d registry: Info collection 471d923b registry: make certain headers optional f6fefb0b Merge auth package within registry 1c101d00 Remove manual http cookie management f29683f7 registry: Fixed unexported field ba8dbe4b registry: Removed checksumPayload from exported fields bae6dc35 registry: Fixed tests 3bf0ee5e registry: Added simple checksums (sha256) for layers bac83c76 Fix registry auth by storing the string passed on the command line, and allowing for credential selection by normalizing on hostname. Also, remove remote ping calls from CmdPush and CmdPull. 9274def6 Fix login prompt on push and pull because of error message Docker-DCO-1.1-Signed-off-by: Michael Crosby <michael@crosbymichael.com> (github: crosbymichael) 4fe7a141 Added missing attributes to api search calls: - Added an argument to the call() method in order to control the auth sharing - Enabled it only for search. Pulls and pushes were enabled already. - Grouped a few variable declarations 275109a6 Make sure new repositories can be pushed with multiple tags 78bc8d73 move legacy stuff outside the job 9bafa726 Fixed registry unit tests 79e0ed25 Check standalone header when pinging a registry server. Standalone has to be true to use basic auth (in addition to previous requirements) 10eeaec7 fix progressbar in docker push d2f7d65d Don't return req as result of setTokenAuth 1ff180d1 missed one call to setTokenAuth 0fca0f12 Factorized auth token setting d4a00ebe gofmt 097f4124 Use basic auth for private registries when over HTTPS. RequestFactory is no longer a singleton (can be different for different instances of Registry) Registry now has an indexEndpoint member Registry methods that needed the indexEndpoint parameter no longer do so Registry methods will only use token auth where applicable if basic auth is not enabled. 52a0a052 go fmt. c86cee21 Closing connection after ping 2c26420b update docker search to reflect future changes of the api 77f6f327 Removes \\n from debugf calls 2f94790d registry: fix content-type for PushImageJSONIndex 8d77082c Fix some error cases where a HTTP body might not be closed cbb906e4 fix the error message so it is the same as the regex issue #1999 9c366e09 Modify repository name regex to match index 49736d5f Prevent panic upon error pulling registry ee38e490 Login against private registry a7b3e7eb registry: removing opaqueRequest ecd70a19 hot fix display in parallel pull and go fmt e55267bc Add GitHub usernames to MAINTAINERS 42b6e56d Fix typo: fmt.Sprint -> fmt.Sprintf 03c1bbbf Adapted tests to latest registry changes 5ea461f3 Cleanup da046e94 Mock access logs don't show up in non-debug mode 7c3b31e5 gofmt 4d9dcc3c New registry unit tests remade from scratch, using the mock registry 93877a85 Mock registry: Fixed a bug where the index validation path would return a 200 status code instead of the expected 204 04cbff8d registry: Fixed a bug where token and cookie info wouldn't be sent when using LookupRemoteImage(). Fixed a bug where no error would be reported when getting a non-200 status code in GetRemoteImageLayer() 28f0f0ff Disabled test server in the tests 34fc4b84 Mocked registry: Added X-Docker-Size when fetching the layer 3ca4529f Fixed mocked registry 14cc9fcf Implemented a Mocked version of the Registry server fec63826 Always consider localhost as a domain name when parsing the FQN repos name 1fe03a4b Reduce connect and read timeout when pinging the registry (fixes issue #1363) 95b4a0c3 Return JSONError for HTTPResponse error 762dfbfc reqFactory in Registry 11cd5760 Return registy status code in error 0b59dcfa Make sure the index also receives the checksums 1c62aded Handle extra-paremeter within checksum calculations 4a818a5e Refactor checksum 64a8dea9 Make sure the cookie is used in all registry queries 262838e0 Rename: VersionChecker->VersionInfo. 5f13f194 documentation. 4b7dbfbc reduce the number of string copy operations. 14155d60 format in the user agent header should follow RFC 2616 e9e0d3c1 Removed an unnecessary nil assignment 6a2aee30 Removed an unnecessary error check. cf8afcf6 added client's kernel version 342460ed inserted setUserAgent in each HTTP request 2e95c379 Added version checker interface 358574ab Hardened repos name validation bf8d59a1 Fixed potential security issue (never try http on official index when polling the endpoint). Also fixed local repos name when pulling index.docker.io/foo/bar 67115ec4 fmt.Errorf instead of errors.New 98060903 Fixed ping URL 16fa043e Allowing namespaces in standalone registry c6068fef Restoring old changeset lost by previous merge ec6d1d60 Adding support for nicer URLs to support standalone registry (+ some registry code cleaning) 7df93a5a Implement several golint suggestions, including: 7e215123 fix two obvious bugs??? 03a77bd8 Fixed issue in registry.GetRemoteTags 259eeb38 Remove https prefix from registry e1d8d024 Rolled back of previous commit (skip cert verification) dc97156c Skip certificate check (don't error out on self-signed certs) 7a664e6a Tentative support for independent registries 0d85570c URL schemes of both Registry and Index are now consistent 3238f3ea Use opaque requests when we need to preserve urlencoding in registry requests 7e786279 hotfix: nil pointer uppon some registry error ff418e9c gofmt and test sub directories in makefile c7e86e5e use go 1.1 cookiejar and revome ResetClient ca71aa4f Send X-Docker-Endpoints header when validating the images upload with the index at the end of a push deddb3c7 Make the progressbar take the image size into consideration ead91d94 linted names 93c7079f fix proxy f085aa4a drop/omit b9e67a88 Disabled HTTP keep-alive in the default HTTP client for Registry calls 6189c3cb Minor changes in registry.go fc340ec9 Fixed missing Body.Close when doing some HTTP requests. It should improve some request issues. e6cc4ff6 move auth to the client WIP 3e3a7c03 Documented who decides what and how. 2312a0e4 Cereate a new registry object for each request (~session) 6bd45ee6 fix docker login when same username 9373c8e4 Update Push to reflect the correct API 40ccd26d Remove hijack from api when not necessary c8c892fe Disable registry unit tests 5e6d1a0d Update tests to reflect new AuthConfig 0933aa44 Move authConfig from runtime to registry 4a0228fd Allow to change login a82a6bfd Upload images only when necessary ffa1e567 Move httpClient within registry object b5d89306 Remove stdout from registry a2e94b28 Refactor registry Push 1b23cb09 Begin to implement push with new project structure 36b58e5a Split registry into subpackage Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-07-11 21:09:29 +00:00
Bruce Ashfield	ccf640f50c	docker-compose: update to v2.28.1 ... Bumping compose to version v2.26.1-80-gf79c28168, which comprises the following commits: f79c28168 Remove `console.Terminal` check and use `IsTerminal` from `streams.Out` 6a000dcff go.mod: github.com/compose-spec/compose-go v2.1.3 2636dcf06 go.mod: docker/docker and docker/cli v27.0.1-rc.1 77377f2df build(deps): bump github.com/spf13/cobra from 1.8.0 to 1.8.1 af1bc285a build(deps): bump github.com/docker/buildx from 0.15.0 to 0.15.1 e1fd7a656 using as flag of the up command, watch was blocking process shutdown This happened when sunsetting the application from docker compose down command de478f84b Add open watch docs in up menu 24a281fa5 bump buildkit to v0.14.0 and buildx to v0.15.0 54a5e7d4a stop watch process when associated up process is stopped 36ef5b388 build(deps): bump github.com/docker/docker 5694a2b0f build(deps): bump github.com/containerd/containerd from 1.7.17 to 1.7.18 695d3419c build(deps): bump golang.org/x/sys from 0.20.0 to 0.21.0 981bcbbe7 build(deps): bump github.com/hashicorp/go-version from 1.6.0 to 1.7.0 5ec37d08a build: replace uses of archive.CanonicalTarNameForPath 1a14fcb1e update gh actions versions, update engine matrix, bump golang to 1.21.11 084a5ca31 enforce keyboard.Close is always executed to restore terminal d633c33a1 config --environment cc09f39f2 Readd event 918b508bd remove unreachable code 10531f630 Fix dot env file to define COMPOSE_* variables bf1bd3fc6 return an error when --detach and --watch are used together in up command 02f40eea6 Correct 'cancellation' typo in comment 250c3112b Fix: change append to use slice index in ps.go 495a087fb COMPOSE_PROFILES can be set by .env file fd1f73a5e prevent concurrent map write relying on project immutability bf1dd0c26 build(deps): bump github.com/containerd/containerd from 1.7.16 to 1.7.17 1cf6dea44 build(deps): bump github.com/docker/buildx from 0.14.0 to 0.14.1 1adc4cb16 drop COMPOSE_EXPERIMENTAL_OTEL as docker/cli has opentelemetry in 2ed40e804 add gui/composeview as part of available commands 7ad73c289 fix opentelemetry 259325698 bump compose-go to version v2.1.1 048fd136d Set endpoint-specific DriverOpts 663866cbe Bump compose-go version to latest main fb25e88a0 Backport OpenBSD patches 363530337 add new navigation menu to open Compose app configuration in Docker Desktop 2cee028e9 build(deps): bump github.com/fsnotify/fsevents from 0.1.1 to 0.2.0 c78f84aeb build(deps): bump golang.org/x/sys from 0.19.0 to 0.20.0 5c6924ec6 fix --resolve-image-digests 9e8c8caa2 allow a local .env file to override compose.yaml sibling .env da8189cf2 Bump docker engine and cli to version 26.1.3 e64b96d0f Bump docker to v26.1.2 b81624185 Add documentation for --menu up option and COMPOSE_MENU environemnt variable 591d9eb3a chore(deps): bump docker to v26.1.1 (#11794) 9c0b92259 fix: overlapping logs and menu navigation (#11765) cfb110653 build(deps): bump github.com/moby/buildkit 36bf0c458 chore(e2e): fix flaky cascade failure test 299fcd57f use v2.26.1 tag for moby and Docker cli b90cb48a1 chore(deps): update to Moby v26.1 & buildx v0.14 f8808d81c bump compose-go version to v2.1.0 9970a84ae fix support for --context=foo 568248072 Fix #11710: Avoid to try to close channel twice after hitting Ctrl-C on compose up (#11719) fd532a37e fix(desktop): remove overly-aggressive feature flag check (#11748) 2aa568ceb chore: fix typo in comment 4ae2e0ec5 bump dependencies 922422a53 fix: do not try to create file shares for non-directories d239f0f31 check container_name is not in use by another service we will create ca734ce56 don't clear line when navigation is disabled c9e070f0f fix: return correct exit code with `--exit-code-from` (#11715) b3792dd25 progress for resource can be restarted after more Working event comes d8ee474e0 Revert "Stop the resource timer after last expected event" 7d3616474 Revert change to allow trying to kill again if a kill fails 6a3501f90 Handle errors and allow to send multiple kills if one failed 5daed33c6 Ignore errors when killing on second Ctrl-C 5c1e5f3fc docker compose up always kills the containers on second Ctrl-C b032999f0 read COMPOSE_REMOVE_ORPHANS from .env 5059a1d7b Set Required false to depends_on containers for compose -p stop/down 54a525bbe Ignore missing containers when compose stop -p 8ceaf4929 Ignore missing containers when compose down -p 1d3259205 Introduce support for build.entitlements 85567ae09 Remove dead url reference. b4280fb56 e2e test for --all-resources 865a64afe introduce --all-resources to _not_ exclude resources not used by services 29692b592 Introduce --abort-on-container-failure 2658c372a bump golang version to 1.21.9 d71d8bce2 don't use ansi espace sequence when disabled ff20b641c Does not start keyboard manager if there is no tty 339b331a8 Change menu information text to dim dd5614ec3 Handle --no-build and --watch args 4b7b6adc7 build(deps): bump github.com/opencontainers/image-spec 466374bdd Unwrap error message. 2e85b3c26 Include error message in pull warning/errors Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-07-11 20:21:52 +00:00
Bruce Ashfield	61f643c386	moby: update to v27.0.3 ... Bumping moby to version v27.0.3-4-g7fa33a539a, which comprises the following commits: 7d99ebe418 rootless: add `Requires=dbus.socket` 540b29c0c6 update to go1.21.12 276a648ec3 Fix incorrect validation of port mapping 23b8b023dd Fix duplicate subnet allocations bf222d635b fix some gofmt issues reported by goreportcard f8231b52d3 daemon/graphdriver/overlay2: set TarOptions.InUserNS for native differ b951474404 pkg/archive: createTarFile: consistently use the same value for userns c5794e23ec pkg/archive: handleTarTypeBlockCharFifo: don't discard EPERM errors 02e24483be pkg/archive: getWhiteoutConverter: don't error with userns enabled 838330bac3 Dockerfile: update docker CLI to v27.0.2 e419e22f29 Dockerfile: update compose to v2.28.1 3557077867 update golangci-lint to v1.59.1 c95b917167 pkg/archive: reformat code to make #nosec comment work again c0ff08acbd builder/remotecontext: reformat code to make #nosec comment work again 4587688258 api/types: deprecate ContainerJSONBase.Node, ContainerNode 6da604aa6a deprecate experimental Graphdriver plugins, and disable by default ce5571f343 api: swagger: fix definition of TmpFsOptions (API v1.46) a9ab04603e cmd/dockerd: initMiddlewares: use containerd/logs e355e10011 vendor: github.com/containerd/ttrpc v1.2.5 f8c088be05 Lookup docker-proxy in libexec paths d22d8a78f1 runconfig: deprecate IsPreDefinedNetwork 0a4277abf4 api/types: move stats-types to api/types/container 91a2a574d7 api/types: rename container.StatsResponse to StatsResponseReader 6fafc8762f api/types: fix typo in GoDoc 42cb29f6ea registry: Search.searchUnfiltered: inline variable 43d4a4c63e registry: v2AuthHTTPClient: inline some vars and slight refactor bf35f3d8c8 update one more entry in mailmap and AUTHORS b4c20da143 volume: use AtomicWriteFile to save volume options 39b4448e12 docs/api: update some example values to be more accurate (API v1.46) 37b57c2ae0 api: swagger: update some example values to be more accurate 2a7bb2a7bd update .mailmap and AUTHORS 68b8e97849 vendor: github.com/spf13/cobra v1.8.1 b5cc61a243 Dockerfile: update buildx to v0.15.1 f741ca857c libnetwork/drivers/macvlan: getDummyName don't use stringid.TruncateID d241862f36 libnetwork/drivers/macvlan: move truncating ID to getDummyName dab918b2b0 libnetwork/drivers/ipvlan: getDummyName don't use stringid.TruncateID b8c80b19de libnetwork/drivers/ipvlan: move truncating ID to getDummyName 8599213b52 vendor: update buildkit to v0.14.1 2df4391473 Fix hairpin between networks with mapped port b06b6b3648 docs: add API documentation for API v1.46 517fb0991e api/types/container: provide alias for github.com/docker/go-units.Ulimit ad716b223b integration/container: use consistent alias for import 25f44885ed daemon/cluster/executor/container: use consistent alias for import 084219a5f9 update AUTHORS f09f756851 daemon/cluster: minor linting issues and cleanup 74d77d8811 Revert "Internal resolver for default bridge network" 6d35673504 Revert "No default nameservers for internal resolver" 01efb9a5ab daemon/cluster/executor/container: fix error-handling b640582436 Add OomScoreAdj options 8e91b64e07 runconfig: deprecate DefaultDaemonNetworkMode, move to daemon/network 437e1ae15e runconfig/opts: deprecate ConvertKVStringsToMap and move internal b3e236d3b5 daemon: rename some inconsistent import aliases 2851ddc44c Add containerd image ref to created containers 812f319a57 Add containerd connection info to info endpoint (API v1.46) 1327342b14 hack: Ignore deprecate-integration-cli validation 7b8f4922a5 daemon: Emit Image Create event when image is built 09eb6ec4f1 builder/exporter: Wrap exporter to hook the image export 0e84482ef5 builder-next: Move exporter wrapper to exporter package 48ff86ec64 pkg/longpath: AddPrefix: use early returns 424c22390e pkg/longpath: deprecate Prefix const 2f45cbf69f api/types/container: NetworkMode align code between Windows and Linux 7b56fa8dc0 api/types/container: NetworkMode.NetworkName: use switch 7b438c5c31 daemon: rename variables that shadowed imports 4c7228663c api/server/router/container.postCommit: add TODO about use of CreateRequest c692af36c3 runconfig: deprecate ContainerConfigWrapper, move to api/types/container afdfe4ff86 runconfig: deprecate SetDefaultNetModeIfBlank 4af9f418a3 runconfig: remove ContainerConfigWrapper.getHostConfig() utility 98bd08c534 runconfig: remove redundant import-alias e42503213d runconfig: ContainerConfigWrapper: unify Linux and Windows implementations 2954b05b03 runconfig: remove conversion code for API < v1.18 37f4616751 integration-cli: fix TestCreateWithTooLowMemoryLimit: using deprecated API fields 964aba696c libnetwork: windows/overlay: remove endpointRequest wrapper c316ed0c22 libnetwork: remove special handling for Windows 14393 (RS1, V1607, LTSC2016) 3108165c94 pkg/archive: TestChangesDirsEmpty, TestChangesDirsMutated: no kernel-version check 17ca8b62bd pkg/archive: remove uses of iota 94caeeb401 pkg/archive: don't call system.Lgetxattr on unsupported platforms c565a3a1fe pkg/archive: collectFileInfo: don't create FileInfo if unused 7ce1edd7c6 pkg/archive: deprecate NewTempArchive, TempArchive 92b8d93f47 pkg/archive: deprecate CanonicalTarNameForPath 0ffc0c95e6 pkg/tarsum: format #nosec comments to standard format cb19b59b65 pkg/archive: format #nosec comments to standard format 805ccd2365 pkg/dmesg: deprecate, and use internal utility instead c7f4abc14a pkg/dmesg: use unix.SYSLOG_ACTION_READ_ALL instead of local variable 528ffa9cae Allow multiple macvlan networks to share a parent 9389f76f6d pkg/chrootarchive: remove dependency on pkg/longpath f657a75bf6 pkg/archive: remove dependency on pkg/longpath 2100a70741 pkg/stringid: deprecate IsShortID e19e6cf7f4 pkg/stringid: deprecate ValidateID 0fb6360fa7 builder/dockerfile: createDestInfo: remove platform arg (LCOW left-over) c5d95fdb04 builder/dockerfile: fix some minor linting issues 6fa6812c51 builder/dockerfile: rename vars that shadowed types and builtins 074932966d builder/dockerfile: remove endsInSlash utility c8e7fcf91a api: adjust health start interval on swarm update dd1ca95ef9 Add exec option to API TmpfsOptions 07053a0991 testutil/daemon: Wait() until the daemon is Kill()'ed 955b923352 daemon: releaseNetwork: clear SandboxID, SandboxKey e3c5665d21 daemon: restore: clear net state for stopped containers 17a59a7506 Don't log an error about route-add for IPv6 bridge 57c6a5e691 libnet: SetKey: propagate traces from API to SetKey reexec b7186bdfc8 libnet: Sandbox: add ctx to SetKey 6c71ebd82c libcontainerd: Start: add ctx 2d8c4265c7 libcontainerd: NewTask: add ctx 19f72d6fc4 libnet: add more OTel spans 224d7291df container: add a span to CheckpointTo 642242a26b builder/mobyexporter: Add missing nil check 44f19518f9 move the cli/debug package to cmd/dockerd/debug e4e40558ba builder/builder-next: gofmt 88e5e4cfb4 Prevent data race during version negotiation 9101392309 update runc binary to v1.1.13 ec24e19d69 vendor: github.com/opencontainers/runc v1.1.13 d20739b6fe vendor: golang.org/x/net v0.24.0 535898dd9a vendor: golang.org/x/crypto v0.22.0 4b2aa9f875 vendor: golang.org/x/sys v0.19.0 cec0d50361 libnet: add ctx to Sandbox.Destroy() af23a024a1 libnet: Endpoint: add ctx to Join and Leave 566026af8f libnet: Controller: add ctx to store methods 9391052700 libnet: Add ctx to NewSandbox 4924f56e7b libnet/driverapi: Add ctx to ProgramExternalConnectivity c5c1d133ef libnet/driverapi: Add ctx to Join 8dcded102e libnet: add OTel spans to CreateEndpoint cf376170ed Add more go:build statements to prevent downgrading Go language version b7d5a42168 Update go:build comments to go1.21 5343c7b451 remove internal/compatcontext and use context instead 13c3384303 hack/vendor.sh: remove redundant -compat 1.18 f20fd3c8a0 golangci-lint: ignore ineffassign & staticcheck on ctx shadowing d0790fd03e Trivial tidying in osl.setIPv6() b7f1036cd9 Remove the option to ignore failure to disable ipv6 44d00e3b9b Dev container: try to load kernel module ip6_tables d0a135772e Dockerfile: update buildx to v0.15.0 215410316f daemon: cleanup getDefaultNetworkSettings 01eecb6cdf Validate port bindings for gateway_mode=routed 2a291c1855 Improve PortBinding.String() a1f8bbeeef Remove unused bridge.driver.portAllocator 043db3be68 Bind the same port for multiple addresses 20c99e4156 Option to disable NAT for IPv4/IPv6 for a bridge network. 18ff5ef537 vendor: update buildkit to v0.14.0 e05848c002 Set up bridge-specific iptables rules in the bridge driver 4f09af6267 Allocate same port for IPv4/IPv6 for 'any interface' mappings. 03577884d9 Retry port mapping for a range if ports are in-use 931eea20ff Add portallocator.RequestPortsInRange() e0b762ed1b daemon/containerd: fix duplicate import 7f2ed139fe remove uses of platforms.Platform alias 896de6d426 seccomp: allow specifying a custom profile with `--privileged` 2ccce36d10 c8d/progress: Allow updating "Unavailable" ids e2326c27b5 c8d/push: Fix wrong Originalindex descriptor in aux error af0cdc36c7 api: deprecate erroneous Config fields in `GET /images/{name}/json` response 58641c7b5c docs: api: use separate definition for Image.Config (api v1.39 - v1.45) 5e0e34fafd api: swagger: use separate definition for Image.Config 8d96d759bb c8d/image_manifest: IsPseudoImage return true for unknown/unknown platform b4d2283c89 api/push: Ignore Platform on older APIs 68a63d0611 c8d/push: Extract missing content note to an Aux progress 0a31437208 c8d/push: Support platform selection 999f1c63db testutils/specialimage: Add MultiPlatform c16d676266 c8d/blobsDirContentStore: Return ErrNotExists 85249a8401 c8d/image_manifest: Add helper functions c514952774 Changed default value of the startInterval to 5s 6c2934f373 api/types: move ImageLoadResponse to api/types/image eb675cce71 api/types: move ImageImportSource to api/types/image f6cc76ceb9 api/types: move ImageSearchOptions to api/types/registry b5f15bc0aa api/types: move EventsOptions to api/types/events ecb24afaaf api/types: move ImagesPruneReport to api/types/image 162ef4f8d1 api/types: move VolumesPruneReport to api/types/volume 17c3269a37 api/types: move ContainerStats to api/types/container fd1d8f323b api/types: move CopyToContainerOptions to api/types/container 47d7c9e31d api/types: move ContainerPathStat to api/types/container db2f1acd5d api/types: move ContainersPruneReport to api/types/container 5b27e71521 api/types: move ContainerExecInspect to api/types/container d91638e295 api/types: move ExecStartCheck to api/types/container 452e134001 api/types: move ExecStartOptions to api/types/backend cd76e3e7f8 api/types: move ExecConfig to api/types/container ac27a5379b docs: api: image inspect: remove Container and ContainerConfig 52580b2673 vendor: github.com/creack/pty v1.1.21 fa95f8a070 client: fix typos in test-names and godoc 08939f21ad integration-cli: remove DockerAPISuite.TestContainerAPICopyNotExistsAnyMore 75843620a6 api/server/router/container: minor nits in exec router 18e1afd1a1 vendor: github.com/distribution/reference v0.6.0 7501b90a22 vendor: go.etcd.io/bbolt v1.3.10 cf796aa56a pkg/reexec: touch-up GoDoc, and remove "import" comments d20a074f33 pkg/reexec: remove gotest.tools from tests defd5a08f4 pkg/reexec: unify non-Linux implementation of Command 004451c812 pkg/reexec: unify implementation of Self() and remove stub 79bff9461c pkg/reexec: don't mix syscall and golang.org/x/sys package a445f7fa8a daemon/graphdriver: fix GoDoc for ProtoDriver.GetMetadata a76b768fea daemon/graphdriver: remove redundant Mounted function 837b3f9576 Allow startup with no kernel support for ip6_tables fd3fa4b28a Add Rob Murray (@robmry) as maintainer 854130eee0 deps: remove `grpc-ecosystem/go-grpc-middleware` 49ca0d0d03 otel: remove deprecated usages of `otelgrpc` 1243f9da6d Revert "libnet/i/defaultipam: Disambiguate PoolID string format" 6af0646236 Revert "libnet/i/defaultipam: Use InternalErrorf instead of InvalidParameterErrof" 4aa85cd159 ci: enable debug for buildkit container builder fc9dd6acb4 api/types/network: make CheckDuplicate optional e5f9484ab6 api/types: move NetworksPruneReport to api/types/network ad6edc139f api/types: move NetworkCreate, NetworkCreateRequest to api/types/network 4f61fa21cb vendor: update buildkit to v0.14.0-rc2 ca0529f984 api/server: ContainerList returns container annotations b3c8216873 vendor: google.golang.org/appengine v1.6.8 0b5f7b9ff8 builder-next: Adjust NewGatewayFrontend invocation fa03db1b82 builder: Update detect usage for new detect API from buildkit 995604236e builder: Adjust usage of shlex.ProcessWord 438371e1fe builder: Pass nil linter to instructions.Parse 3bcbb561ad vendor: update github.com/moby/buildkit to v0.14.0-rc2-dev d365702dbd No default nameservers for internal resolver 18f4f775ed Internal resolver for default bridge network 5318c38eae update containerd binary to v1.7.18 86f7762d48 vendor: github.com/containerd/containerd v1.7.18 91e2c29865 update to go1.21.11 163c6ca9ad api: Make EnableIPv6 optional 83c532c9b7 daemon/cluster: remove Cluster.getRequestContext() 69b2a05d27 api/types: migrate NetworkResource to api/types/network 3306034c64 api/types: remove aliases for deprecated Image types 70bac42113 integration/network: remove used of deprecated NetworkInspectOptions 1ec92ea60b opts: remove alias for ipamutils e6f41e22a7 client: Client.doRequest: fix closing filehandle and reversed errors 9110ef1eec client: ensureReaderClosed: make linters happier 57f597b866 client: Client.NetworkInspectWithRaw: minor cleanup 42f4db26c7 api/server/httpstatus: FromError: remove redundant checks and cleanup f78dac35e5 api/types: migrate NetworkListOptions to api/types/network d18b88fd32 daemon: add ULA prefix by default 68bf0e7625 api/types: migrate EndpointResource to api/types/network 5bea0c38bc api/types: migrate NetworkInspectOptions to api/types/network 245d12175f api/types: migrate NetworkConnect, NetworkDisconnect to api/types/network 89624e09e6 api/types: migrate NetworkCreateResponse to network.CreateResponse 32418e9753 daemon: set the default local addr pool if none configured 0071832226 Add per-endpoint sysctls to DriverOpts 347bb4122a update docker-py to 7.1.0 69f1e2a923 docs/api: add Scope, ConfigOnly, ConfigFrom, Peers (v1.41 - v1.45) 53542fefd5 api: swagger: Network: add Peers 44125530bf api: swagger: POST /networks/create: document Scope, ConfigOnly, ConfigFrom 8b7a54f622 api: swagger: Network: inline examples, and add ConfigOnly, ConfigFrom 6cab6d0302 docs/api: POST /networks/create: inline examples per-field (v1.41 - v1.45) 51885166b9 api: swagger: POST /networks/create: inline examples per-field d64e220afb api/types: NetworkCreate: add GoDoc cd1ed46d73 don't depend on containerd platform.Parse to return a typed error 56086c9952 integration/container: remove redundant type-conversion, and minor cleanup 070e90a94c integration/system: remove redundant type-conversion, and minor cleanup 667094924d testutil/fakestorage: fix minor (linting) issues 4a074c809e integration/internal/swarm: remove unused ContainerPoll fe78d6d9da integration/internal/swarm: rename vars that collided with imports 4619b14403 refactor: rename attach config var 2d134c5abd Fix goroutine/fd leak when client disconnects 8361baf8d9 Dockerfile: update compose to v2.27.1 387be6ec91 Dockerfile: update buildx to v0.14.1 500eff0ae9 libnet/i/defaultipam: improve address pools validation 0c022307e9 libnet/i/defaultipam: Unmap IPv4-mapped IPv6 addrs 9d288b5b43 libnet/i/defaultipam: introduce a linear allocator a9ebb0c267 Replace dead RFC8878 go doc hyperlink 16e5c41591 Fix issue where node promotion could fail 5a2fa59688 libnet/i/defaultipam: Use InternalErrorf instead of InvalidParameterErrof 9369132879 libnet/i/defaultipam: Disambiguate PoolID string format 6d21574535 libnet: Controller: drop getStore() 49888559cc libnet: Controller: drop closeStores 2336363e28 libnet: init datastore in ctrler constructor 3847da374b integration/TestDiskUsage: Make 4096 also a 'empty' value 1e29f9b12f Move EndpointSettings.DriverOpts from op-state to config a35716f5b9 Factor out selection of endpoint for config migration 4f0cb7d964 Dockerfile: update containerd binary to v1.7.17 (static binaries and CI only) e459487feb Update containerd to v1.7.17 707ab48cbb Explicity write http headers on streaming endpoints 50d3028464 Fix fd leak/goroutine when attaching stdin only ad0f263eb5 tarexport: Plumb ctx, add OTEL spans, handle cancellation 33f9a5329a Default to "windows-dns-proxy":true 77a47dba3b Forward DNS requests into --internal networks 6fbae5ff26 libnet/d/bridge: don't parse the MacAddress netlabel 41ddc47bbf Don't explicitly enable ip6tables in tests 07ccaf028d Enable 'ip6tables' by default, don't require 'experimental'. 5705cbf6e3 Make it an error to set up filtering on an unnamed bridge d6b6a5122f Enable filtering on IPv6 bridges with no IPv6 address 4df97f2e1e Gate setting of bridge-nf-call-ip6tables on "--ip6tables=true". 8751562d3f Set up IPv6 n/w isolation rules when --ip6tables=true 23fd15985b Allow "--ip6tables=true" when "--iptables=false" 9a8ffe38fc Disable ip6tables in tests that disable iptables 5952920380 libnet/d/remote: replace errorWithRollback 7216541b17 libnet: don't check if ctrler store is nil 7ea9acc97f cmd/dockerd: deprecate `api-cors-header` 6c97e0e0b5 update to go1.21.10 72eb615490 Makefile: bundles is not PHONY fda708f55d Delete broken/unused test requirement helper "IPv6" 4aff2fbc98 Remove integration-cli TestDaemonSuite/TestDaemonIPv6Enabled 346a7c07a0 Fix TestDockerSwarmSuite/TestSwarmInitIPv6 b11e95f5bc Don't delete IPv6 multicast addresses from a bridge a5f82ba4bf Disallow IPv6 multicast as bridge n/w subnet aa3a86c038 Refactor IPv6 subnet validation f46473b29c Do not remove kernel-ll addresses from bridges 01ea18f1e3 Allow for a read-only "/proc/sys/net". 57ada4b848 Option to avoid deleting the kernel_ll address from bridges. c5376e534c libnet/ipams/null: move driver name to its pkg f2387f3632 libnet/ipams/defaultipam: move driver name to its pkg 0db56de78e libnet/ipamutils: no more global state 3c9718144f libnet/ipams: register all drivers eda47500fc libnet/ipams: Unconditionally call windowsipam.Register ae9e4319b0 libnet/ipams/windowsipam: that driver knows its name 8cec9f0dca libnet/ipams/defaultipam: add a Register fn 218394cada libnet/ipams/builtin: move to libnet/ipams 29f2ca04e0 libnet: move ipam pkg to ipam/defaultipam e8644c3e0e libnet/ipam: default-address-pools as Register arg 1d5a12dfb1 integration-cli: createNetwork: add t.Helper() 115de5ff3d libnet/ipamapi: add in/out structs for RequestPool 82aae0fe50 libnet/netutils: remove dead util NetworkRange 37a81cd04d libnet/ipam: split v4/v6 address spaces 199c72cb5d libnet/ipam: remove dead DumpDatabase() df88857e6c libnet/ipam: put `addrSpace` into a separate file a047d4b1df libnet/ipam: un-embed mutex from `addrSpace` eeec716e33 Update containerd to v1.7.16 efca9303a4 refactor: updated native diff error message ff8de5e156 Add firewalld policy "docker-forwarding". 5ebe2c0d6b apparmor: Allow confined runc to kill containers 87506142d8 Do not forward DNS requests to self. 147f701bd1 chore: fix function names in comment e3c59640d5 vendor: github.com/Microsoft/go-winio v0.6.2 2140e7e0f5 vendor: golang.org/x/tools v0.16.0 85c9900377 vendor: golang.org/x/mod v0.17.0 e314113ad7 Dockerfile: update docker CLI to v26.1.0 df831c943f vendor: github.com/cilium/ebpf v0.12.3 194cbd6e7d Makefile: refactoring .PHONY 57a12a372f Update GoDoc for ioutils on atomic writers 98d51b510d chore: remove repetitive words 8bbba6315f API: bump version to 1.46 80d92fd450 feat: ctx to client API 838047a1f5 archive: fix ConvertRead/ConvertWrite functions for rootless docker & native diff overlay aef6905e01 overlay2: better documentation of user namespace behavior when checking native diff support f6b80253b8 overlay2: get rid of unnecessary kernel version check b2fd67de77 overlay2: support rootless native overlay diff in kernel 5.11 and above d4f61f92fd Move StartedAt time to before starting the container Bumping docker-cli to version v27.0.3-15-gd41cb083c, which comprises the following commits: 0a8bb6e5b chore: regenerate docs c777dd16d docs: update cli-docs-tool (v0.8.0) eea26c50d docs: update links to docker cli reference 1cf2c4efb docs: regenerate base command c2b9c1474 docs: align heading structure for base command 598442d37 docs: remove frontmatter for base command c964b80e5 docs: rename cli.md to docker.md (base command) 0ca7be015 docs: remove empty docker base command reference 27bf78d33 docs: make buildx build the canonical reference doc 5ed8f858c update to go1.21.12 6b99e0370 vendor: github.com/docker/docker v27.0.3 3134d5582 vendor: github.com/docker/docker v27.0.2 c97e8091a vendor: github.com/docker/docker v27.0.2-dev (e953d76450b6) 894584802 vendor: github.com/docker/docker v27.0.2-dev (861fde8cc974) cd560916f gha/e2e: Update latest version to 27.0 50fae2074 cli/config/credentials: ConvertToHostname: handle IP-addresses 217971d48 re-introduced support for port numbers in docker registry URL 6e35a78fd update golangci-lint to v1.59.1 bf1a70182 vendor: github.com/docker/docker v27.0.1 617eb5271 cli: make initializing the global meter- and tracing providers optional 9f8bda1df cli/config: replace pkg/homedir dependency with local copy ad583961b vendor: github.com/docker/docker v27.0-dev (ff1e2c0de72a, master) c8c13bdca docs/deprecated: update status for graphdriver-plugins 1f7561ecb Dockerfile: update compose to v2.28.0 1a0481007 vendor: github.com/docker/docker v27.0.1-rc.1 faf7647dc refactor: remove test d1cb7d41c cli/command: Don't copy fakeClient 1322f585f test: cli force exit signal handler 34d42bdf0 vendor: github.com/docker/docker v27.0-dev (018d93decfb5) 443617c0f update mailmap and AUTHORS 2088c5963 vendor: github.com/docker/docker 1a1f3cff45ec (master, v27.0-dev) 64c20f301 Additional typo corrections a84536eb4 Fix RFC3339 typo in docs e5d26a8d4 build: allow BuildKit to be used on Windows daemons that advertise it 55a1f6eb7 cli-plugins/manager: add GoDoc for getPluginDirs, defaultSystemPluginDirs 4f00eee52 vendor: github.com/spf13/cobra v1.8.1 00b0eb778 update go-md2man to v2.0.4 b0793613a Dockerfile: update buildx to v0.15.1 0bc092496 deprecate experimental graphdriver plugins 1f1b70dfd docs: add deprecation warning to experimental grapdriver plugins a4bfd8c74 feat: add a global sigint/sigterm handler as a fallback to ctx cancellation eae63069e vendor: github.com/moby/swarmkit/v2 v2.0.0-20240611172349-ea1a7cec35cb 3d017f30d vendor: github.com/docker/docker v27.0.0-rc.2 e0972e94b gha: e2e: test against v27.0 release candidates 43210216f bump version to v27.0.1-dev c07cee05e Update go:build comments to go1.21 1fd8e2434 cli/command/image: add go:build tag to prevent downgrading go version c8f5d4cc6 build(deps): bump docker/bake-action from 4 to 5 3b0d297aa vendor: github.com/docker/docker caf502a0bc44 (v27.0.0-dev) 11a3d8728 vendor: github.com/docker/docker ec4bac431c88 (v27.0.0-dev) 1bfec63b9 vendor: github.com/docker/docker ba69bd9c1e48 (v27.0.0-rc.2-dev) 8376b3e42 use local ConvertToHostname() implementation 4ea91a73e vendor: golang.org/x/net v0.24.0 91b63ac45 vendor: golang.org/x/crypto v0.22.0 a2ccd3eb0 vendor: golang.org/x/term v0.19.0 634b19f5e vendor: golang.org/x/sys v0.19.0 872935f1c vendor: github.com/docker/docker v27.0.0-rc.1 1fc73b470 vendor: github.com/docker/docker v27.0.0-dev (bcd280a3ed2d) e9c0fc330 docs: extend deprecation target for non-TLS API 3dcc65353 plugins: cleanup sockets when done f80d7182c cli/command: remove deprecated EventHandler, InitEventHandler ad62b6869 vendor: github.com/containerd/platforms v0.2.1 6e7266a72 cli/command/registry: fix link to credential stores 6b93cf221 cli: Wrap Err stream b79d68465 Deprecate non-standard (config) fields in image inspect output e06ef800f Removed all mentions of "please" from docs and messages 32ac7a08f cli/push: Print aux notes 966fa7c47 cli/push: Add `platform` switch 892784dee vendor: github.com/docker/docker v27.0.0-dev (9d9488468fe2) 3ce317747 gha: switch to Ubuntu 24.04 43b97e888 update golangci-lint to .v1.59.0 df474d517 cli/command/image/build: fix nosec comment 0ba14fde4 linting: fmt.Sprintf can be replaced with string concatenation (perfsprint) 7db922cf9 cli/command: TestGetDefaultAuthConfig: remove unused expectedErr dfec976e8 linting: fmt.Errorf can be replaced with errors.New (perfsprint) e93abde7a cli/command/network: fix linting issue and pass client instead of cli 43b840ed9 vendor: github.com/docker/docker a736d0701c41 (master, v27.0.0-dev) c481c6492 cli/command: remove some import aliases 851277f96 cli/command/container: rename some variables 1a83595c7 cli/command/container: legacyWaitExitOrRemoved rm intermediate var 0d4de2392 cli/command/container: inline some variables to prevent shadowing d11fbda36 vendor: github.com/distribution/reference v0.6.0 d0057db3a cli/command: more go1.19 ("predeclared any") 3f0d90a2a feat: global signal handling with context cancellation 97b7746df vendor: github.com/docker/docker 59996a493cfc (v27.0.0-dev) 94f9de592 Handle networks.driver_opts for a service a73172265 cli/compose: add schema 3.13 (no changes from 3.12 yet) 0502189e2 cli/command/network: add minimal test for --ipv6 option db2672e68 network create: make --ipv6 optional 0ed8a7e31 vendor: github.com/docker/docker 00f18ef7a455 (master / v27.0.0-dev) 9acfbbd74 Correct typos in docs/ and man/ bc2e27478 vendor: migrate to github.com/go-viper/mapstructure/v2 v2.0.0 23148220e vendor: github.com/docker/docker c6aaabc9fc82 (master / v27.0.0-dev) a9ea03481 vendor: github.com/containerd/containerd v1.7.18 630e1d3e9 update to go1.21.11 558a910b8 vendor: github.com/containerd/containerd v1.7.17 be2c284ee vendor: tags.cncf.io/container-device-interface v0.7.2 20d1b661b cli/command: use shallower interface for completions b6a3ce416 vendor: github.com/docker/docker cd3804655a25 (master / v27.0.0-dev) d4491fc09 Correct typos in the cli/ folder b9cd72259 gha: update to actions/upload-artifact@v4 2ef6bc1c1 Update CODEOWNERS e2fc6bd77 vendor: github.com/docker/docker e622cea55698 (master / v27.0.0-dev) 16c8f4942 vendor: github.com/Microsoft/hcsshim v0.11.5 b7548ba7f vendor: github.com/opencontainers/image-spec v1.1.0 12aaeae21 vendor: github.com/Microsoft/go-winio v0.6.2 fed9fa0f7 context list: temporarily add ContextType to JSON output 40a1da8b4 cli/command/context: list: add test for JSON output 2e9eff235 cli/command/context: test inspecting context with custom metadata 54291dd47 cli/command/context: add test-utility to create multiple contexts 9d9bb19f0 docs: deprecate daemon's api-cors-header flag 7dc271a8b migrate to new github.com/containerd/platforms package d5d94e46f Explain how to use "network connect --driver-opt" to set sysctls 7f9dba60e Test quoted fields in --driver-opt b7583a2c2 Explain how to use "--network driver-opt" to set sysctls 068f118f8 Test quoted field in --network 82ed39e31 docs: use --quiet in example to simplify output e70f68595 Dockerfile: update ALPINE_VERSION to 3.20 0b7aff333 Dockerfile: update compose to v2.27.1 f0e7e07b8 Dockerfile: update buildx to v0.14.1 05905bd92 vendor: github.com/docker/docker-credential-helpers v0.8.2 dc75e9ed6 cli/config: do not discard permission errors when loading config-file c80adf4e8 cli/config: TestLoadDefaultConfigFile: check that no warnings are printed de91207b8 cli/config: add test for dangling symlink for config-file 426fb2fd8 cli/config: Load(), LoadDefaultConfigFile(): improve GoDoc 6d21372db run, create: update "--rm" flag description to mention anonymous volumes 296a6f587 plugins/hooks: Don't show empty hooks 1527d625f Plumb context to API callbacks 3fdf377b6 vendor: github.com/docker/docker master (06e3a49d66fa) 6a4d38c7f docs: fix json syntax error ffd57fac1 Updated engine versions in e2e text matrix dbf844366 vendor: github.com/moby/swarmkit/v2 master (c1c857e2dca1) 5f4f4f64d OTel: implement missing MeterProvider `ForceFlush` f07834d18 OTel: add `command.time` metric to plugin commands 02537eac5 Use funcs on DockerCli to return Meter/TracerProviders, not initialize them. Initialize them during DockerCli struct init 4758ed0b0 Document the extended '--network' syntax e8bfedd26 Fix TestNetworkConnectWithFlags eb99994c7 update to go1.21.10 8d6e571c0 Add e2e tests for run w/ bad entrypoint 31644d5ea Fix hang when container fails to start b7e25a4b4 docstring: typo: settings -> setting e3216ca64 go.mod: use SemVer format for go version to assist CodeQL AutoBuild 692c7ee7e gha: CodeQL: move go.mod/go.sum symlink earlier to help caching e1dcc194e OTEL collector/prometheus/aspire-dashboard stack for testing purposes 1d666b410 feat: wire ctx into plugin hooks 5ccb48459 cli-plugins: PluginRunCommand: use cmd.Environ instead of os.Environ 86162f781 feat: use main func ctx for cobra and use ctx in tests e73fde8ca vendor: update github.com/docker/docker to v26.1.0 dccfd6e4d chore: fix function names in comment 116db4fc8 docs: tidy up CDI docs 73959eef7 chore: remove deprecated DualStack field 1433df8fe bake/bin-image-cross: Add darwin 0c2697d77 Dockerfile: Remove xx-sdk-extras 094af6ea0 darwin/build: Disallow CGO_ENABLED=1 when cross-compiling faf096b25 docs: clarify that --data-path-addr doesn't restrict access Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-07-11 14:07:17 +00:00
Bruce Ashfield	099e911253	crun: update to v1.15-tip ... Bumping crun to version 1.15-51-g6c158dd, which comprises the following commits: e6eab76 wasmedge: access container environment variables for WasmEdge configuration 0475016 restore: update console-socket option description 9861254 tests: bump wasmedge to 0.14 fd6b748 cgroup: use MemoryMax instead of MemoryLimit 3980447 nix: upgrade dependencies 526f959 test: pass volume for /var/lib/containers adb5cb3 linux: improve error message on EACCES 474bc17 remove duplicate initialization cgroup manager in the cgroup args cb947d0 tests: use vault.centos.org 61fdfc6 tests: skip push tests with podman 42b9fd1 [crun run] Avoid setting crun_context.handler redundantly 976029a libcrun: fix error message argument ca42c18 RPM: Remove wasmtime support 6879c4c Packit: enable epel9 on c9s targets to fetch wasmedge 315f732 RPM: no separate krun symlink creation 0b33840 Downstream: Add rpm/gating.yaml to handle downstream gating tests c017ce5 Packit: sync downstream gating test files on every upstream release e452395 TMT: rewrite podman revdep tests to be usable without CI 163037a tests: fix issues reported by shellcheck 4cbab15 RPM: Fix epoch value for copr builds fd745e0 dist: install symlinks as part of make install 9533613 ci: Cancel in progress tests on updates c6c1c7f crun run --help: say --no-subreaper is ignored Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-07-11 14:07:17 +00:00
Bruce Ashfield	20eb3ca57e	cri-tools: update to v1.30.0 ... Bumping cri-tools to version v1.26.0-676-g767879cc, which comprises the following commits: c81525da userns: Fix running tests inside a userns 316d6d3c userns: Call runtime only once 934f1ccb userns: Skip tests if the host doesn't support idmap mounts 6b2eef6d Bump golang.org/x/net from 0.26.0 to 0.27.0 5a43b750 Bump golang.org/x/term from 0.21.0 to 0.22.0 09fce9cf Bump k8s.io/cri-client from 0.31.0-alpha.2 to 0.31.0-alpha.3 4dc80b8e Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc d18ca301 Bump google.golang.org/grpc from 1.64.0 to 1.65.0 8c8981cb Bump k8s.io/client-go from 0.31.0-alpha.2 to 0.31.0-alpha.3 c62b1c28 Bump go.opentelemetry.io/otel/sdk from 1.27.0 to 1.28.0 6e074fd8 Bump github.com/docker/docker 9ab98677 Bump k8s.io/cri-api from 0.31.0-alpha.2 to 0.31.0-alpha.3 19f8f74f Fix invalid context on `Status` RPC d898927a Sort commands by their name 77f866ad Bump go.opentelemetry.io/otel/trace from 1.27.0 to 1.28.0 4fcec096 Switch to macOS 12 cd111361 Add `crictl [create,runp,run,pull] jsonschema` subcommands 35c97282 Add support to reopen container logs 34b940cd Make all RPC's interruptable 31af2ddb Pin `k8s.io/cri-{api,client}` repos d5af0dd4 Bump github.com/docker/docker 6bde37b2 Bump github.com/docker/docker c6918dee Make image RPCs interruptable using Ctrl-C d19c808b Bump k8s.io/klog/v2 from 2.130.0 to 2.130.1 689447c6 Bump k8s.io/klog/v2 from 2.120.1 to 2.130.0 23d9ff4e Bump github.com/opencontainers/runc from 1.1.12 to 1.1.13 33976da3 `crictl run`: Rename `--timeout`/`-t` to `--cancel-timeout`/`-T` 3689ac17 Fix `pull-timeout` flag for `crictl pull` f45fe651 Bump k8s.io/kubelet from 0.30.1 to 0.30.2 991c4b55 Bump k8s.io/kubectl from 0.30.1 to 0.30.2 146cc612 Bump github.com/docker/docker 6d5008c4 Revert "Fixes invalid JSON in crictl info" 780d0449 Add `--pull-timeout` flag to `crictl` `create`, `run` and `pull` commands 88df400d Fixes invalid JSON in crictl info 65f9232a Bump github.com/docker/docker 37e0b57a Update e2e tests 2194b4bd Bump golang.org/x/net from 0.25.0 to 0.26.0 09c81cff Bump golang.org/x/term from 0.20.0 to 0.21.0 bc128afb Revert "Fixes invalid JSON in crictl info" 39a77d4d Fixes invalid JSON in crictl info 3329bbea Make cri-tools independent from k/k 631f1c27 --- updated-dependencies: - dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc dependency-type: direct:production update-type: version-update:semver-minor ... 1eeda666 Bump github.com/onsi/ginkgo/v2 from 2.17.3 to 2.19.0 10ad3a15 Regenerate docs 869863ba Use versioned tools for supply chain provenance aa92e358 --- updated-dependencies: - dependency-name: go.opentelemetry.io/otel/sdk dependency-type: direct:production update-type: version-update:semver-minor ... fd01c401 Bump github.com/docker/docker d4d80f43 Bump golang to v1.22 in CI e1edc9fc Bump github.com/docker/docker 5409233e Bump github.com/onsi/ginkgo/v2 from 2.17.2 to 2.17.3 3f6ce817 Move project under `sigs.k8s.io` namespace 5c9de8f7 Bump golang.org/x/net from 0.24.0 to 0.25.0 ef2f92a0 Bump golang.org/x/term from 0.19.0 to 0.20.0 756d4a82 Bump golang.org/x/sys from 0.19.0 to 0.20.0 4a0ef9a0 Bump golang.org/x/text from 0.14.0 to 0.15.0 9b0d496e Fix latest version in README.md f152cc06 Bump github.com/onsi/gomega from 1.33.0 to 1.33.1 57ba23dd Bump github.com/docker/docker ee2e56ed Enable and fix `perfsprint` linter d14448a6 Bump github.com/onsi/ginkgo/v2 from 2.17.1 to 2.17.2 556eb46e Bump github.com/urfave/cli/v2 from 2.27.1 to 2.27.2 6362c63c LinuxContainerSecurityContext field apparmor_profile has been deprecated in favor of the newer structured apparmor field. 79b255b6 Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc 84c0104b Bump go.opentelemetry.io/otel/sdk from 1.25.0 to 1.26.0 1d447cf4 Bump github.com/docker/docker b243d7e3 Bump github.com/onsi/gomega from 1.32.0 to 1.33.0 1ead2d65 Bump github.com/docker/docker a2247b1b Added changes for fixing a vulnerability - CVE-2023-47108 d87857f9 Update `release-notes` to v0.16.8 ce92f0d3 Vendor Kubernetes v1.30.0 543d65fa Bump github.com/docker/docker ac2b2f6a Add criu binary to CRI-O tests 8ab45a03 Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc 03d73acb Bump go.opentelemetry.io/otel/sdk from 1.24.0 to 1.25.0 3e39574b Bump golang.org/x/net from 0.23.0 to 0.24.0 e49c1cff Bump golang.org/x/term from 0.18.0 to 0.19.0 8370833d Bump golang.org/x/sys from 0.18.0 to 0.19.0 9985ba3a Bump golang.org/x/net from 0.22.0 to 0.23.0 89a95677 Bump github.com/distribution/reference from 0.5.0 to 0.6.0 175bbd58 Add `--transport` option to port-forward 14291ae9 Bump github.com/onsi/ginkgo/v2 from 2.17.0 to 2.17.1 85bcb15c Support websocket transport for exec and attach 3ee504ac Bump github.com/docker/docker 0e0044e1 Bump github.com/docker/docker 316e0e9c Bump github.com/onsi/gomega from 1.31.1 to 1.32.0 bf53cf5a Bump github.com/onsi/ginkgo/v2 from 2.16.0 to 2.17.0 8d7da814 Bump github.com/docker/docker 6d8d5847 Bump github.com/golang/protobuf from 1.5.3 to 1.5.4 97f12268 Bump golang.org/x/net from 0.21.0 to 0.22.0 fe3c6d64 Bump github.com/onsi/ginkgo/v2 from 2.15.0 to 2.16.0 80254e6d Bump golang.org/x/term from 0.17.0 to 0.18.0 94ca2fc9 KEP-3857: Recursive Read-only (RRO) mounts 07b21d85 Do not auto find runtime handler for user namespaces tests 4d1e3040 Add user namespaces tests 70ccffb9 Vendor Kubernetes v1.30.0-alpha.3 949545e1 Readd the logPath to the list 5afb4c73 Matching kubelet's containerLogManager.rotateLog() glob pattern 09b9303e Applying comment 64e373b2 Changing option to keep-logs and inverting default 67679ee3 1197: adding rm --dl (--deletelog) option Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-07-11 14:07:17 +00:00
Bruce Ashfield	ebc4831a3f	cri-o: update to v1.31.0 ... Bumping cri-o to version v1.30.0-230-g04500243e, which comprises the following commits: 6d6149a0b build(deps): bump the actions group with 2 updates 922718c3f Fix typo 199f018fc build(deps): bump crate-ci/typos in the actions group 2389743df build(deps): bump k8s.io/kubelet from 0.31.0-alpha.2 to 0.31.0-alpha.3 58a9d7ed8 Enable `gci`, `godot`, `nolintlint` and `protogetter` linters e2f93c800 Add `kubernetes` group in dependabot c9844d98d Allow setting `CRICTL_BINARY` externally 6d00aaacc build(deps): bump k8s.io/client-go from 0.31.0-alpha.2 to 0.31.0-alpha.3 3789c2181 build(deps): bump the gomod group with 7 updates 49890645a Sort `crio` subcommands by name a7f937588 Fix version output in help 4148aca47 test: ensure correct parsing of supplemental groups policy in JSON ecf2c1770 build(deps): bump the gomod group across 1 directory with 3 updates 7d460145f changed the scorecard badge link to the standard format fd967972a Update nixpkgs 506badaa2 Reload config should remove pinned images when an empty list is provided 2f16f8bae Update go dependencies 11562fd1c Add space to the error message f8b860970 test: add coverage for fine-grained supplemental groups c931b90a3 server/*: add fine-grained SupplementalGroups control for enhanced security 52f3004c5 Mark v1.27 as EOL efd4385b4 server/*: Fix bug to add gid in /etc/group ffd15afda build(deps): bump crate-ci/typos in the actions group 6cb3925d9 OWNERS: adding littlejawa to the list of reviewers 486d768dc Update nixpkgs 1705f891c Update nix to v2.22.1 1494f809a Update shfmt to v3.8.0 7ad9c74e4 Update zeitgeist to v0.5.3 9cd0a9ed0 Update cni-plugins to v1.5.1 d27a9a8e3 Update shellcheck to v0.10.0 ccc030003 build(deps): bump actions/upload-artifact from 3.pre.node20 to 4.3.3 07ac2d0a7 build(deps): bump ossf/scorecard-action in the actions group 02574a396 build(deps): bump peter-evans/create-pull-request in the actions group 6d2ff549e build(deps): bump github.com/go-chi/chi/v5 in the gomod group 293359157 Fix container volume restore cf1875acc Added the scorecard github action and its badge f62cf94cd build(deps): bump the gomod group across 1 directory with 3 updates eccab8ac5 Restore container logs from checkpoint 20eba5edf server: remove container after failed start 8efa17c6a high perf hooks: short circut when writing cpuset values 80fcdafa9 build(deps): bump the gomod group across 1 directory with 14 updates 6af15ae30 Skip `[sig-network] KubeProxy should update metric…` test d85efd773 build(deps): bump the actions group with 2 updates e543c4d8e release-notes: Skip first commit 935579087 build(deps): bump crate-ci/typos in the actions group 8a08f2233 Add `conntrack-tools` to CI system packages 25e2e3566 build(deps): bump crate-ci/typos in the actions group a12fa31f2 .packit.yaml: Fix `%global commit0 <sha>` generation 4572f79b5 build(deps): bump crate-ci/typos in the actions group across 1 directory 3da7b0699 Update scripts/automated-patch-releases.md c84c357d5 Allow pull timeout set by RPC context 0a673b9ac Make unit tests work rootless 00ecf9532 Update cni-plugins to v1.5.0 4d6b85942 build(deps): bump crate-ci/typos in the actions group b9487a0b0 Fix container stats label filter ef7880da4 Don't fail CI on GitHub pages push 07ffbd248 Rebase to correct branch on patch release creation 594295d94 Update nixpkgs 7e778525a Update scripts/automated-patch-releases.md af5358508 Update scripts/automated-patch-releases.md e316beb95 Update scripts/automated-patch-releases.md ab6739e2d Update scripts/automated-patch-releases.md b48aa8ec9 Update scripts/automated-patch-releases.md 1ed84cd13 golangci-lint: bump cyclomatic complexity again 3e862ecbe server: warn about container /etc not being a regular directory 37c76ad52 server: use SecureJoin when setting container /etc directory 1c457dfe1 add mermaid flow diagram for patch releases bcea85b46 build(deps): bump the gomod group across 1 directory with 10 updates af597f05f Readd GOARCH in `Makefile` c491001e9 Switch to `containers/common/pkg/crutils` ef3d4eea6 Update conmon to v2.1.12 a9d80aa26 Update nixpkgs dde54fcad build(deps): bump the actions group with 2 updates 148cacab0 fix memory leakage 7fec7bf61 Keep the monitor exits from stopping when the watcher gets error 1e12bed7d Add small tutorial how to run CRI-O in KIND 82af00dd2 delete deprecated registries config 2da2e6830 Fix tag reconciler permissions 63f443b1f build(deps): bump cachix/install-nix-action in the actions group a5b126c0a Run workflow after tag push 5a306d4c5 Allow workflow dispatch for `integration`, `test` and `verify` actions 0a76ebe5d Create tag on reconciler 8d66907f5 Fix lint 0df965310 server: use max function instead of manually calculating max ca3c711a3 build(deps): bump the actions group with 2 updates 0540a8e90 build(deps): bump the gomod group across 1 directory with 11 updates b1b3c92ae Update a typo in the code comment 55cc11975 test: reenable crun-wasm test 64b991b1f server: support ping_group_range if in a userns 474a2ce87 contrib/test/ci: cleanup archived package for Fedora and ansible code d1db27fb2 Add parser tag for DisallowedAnnotations 8b1ce9235 Update scripts/release/release.go 3914eeb59 fix rebase branch error on patch release 8ac0907f2 Enable `revive` linter e7e37c567 build(deps): bump ossf/scorecard-action in the actions group cbe71afae Show runtime configuration f03faf99a Kill exec PIDs after main container exited 8b867c6ed build(deps): bump the gomod group across 1 directory with 4 updates 137f8a5a9 build(deps): bump golangci/golangci-lint-action in the actions group 794ce67db Remove surplus newline from the log message 0a9110393 pinns: write sysctls in correct process when userns ee49fad01 Check for nil values when importing container definition e07608b4e Fix mocks 8f4b32a53 build(deps): bump the gomod group across 1 directory with 25 updates 64c510043 Set an integration test timeout 62fede365 build(deps): bump the actions group with 2 updates e01608257 Enhance tag reconciler logging 6657190b7 build(deps): bump github.com/containers/podman/v5 from 5.0.0 to 5.0.1 5327c246b build(deps): bump github.com/docker/docker 52f185309 Fix tag-reconciler job by using `GITHUB_TOKEN` ead3cca6e Dependency update for podman 5 5f54ca9c5 build(deps): bump golangci/golangci-lint-action in the actions group e783e930e Update internal/version/version.go 481baea60 Update golangci-lint to v1.58.0 and fix lints 8132c7d15 Remove archived `containerd-cri` repo aefd7ac37 Use `codecov/codecov-action` to fix coverage report 907685a82 add tag-reconciler for patch releases c3bfcd3b4 wait for reload completion for stable e2e 7371d2170 dashboard: switch to non-deprecated metrics f0cd27e15 Replace go env GOARCH to ARCH dea6c628e Drop GOPROXY/GOSUMDB from Makefile and fix unary operator error while building crio 1585cb921 version: bump to 1.31 1beecbe27 Pin crate-ci/typos GitHub action 980db0610 test:add coverage for automatic reloading of mirror registries 01450abb7 server: implement automatic reloading of mirror registries configuration 882ce4afc Fix kubelet image GC by using new `image_id` CRI field d91496190 Fix AppArmour profile Apply() function to correctly handle an "Unconfined" mode. 97384f9a9 test/cri-metrics.bats: skip test for kata VMs 1955ce5d7 internal/criocli: Update criocli with new added metrics flags 820522dcf - internal/stats: Pass the container_server context down to statsserver 33d2f4785 - Better naming for ContainerStats struct 2ba4de466 New slice for each metric collection b4ac9a966 Add metrics integration tests d7fe9a3bb - Add missing fields and functions to unsupported stats 274a509eb - Implement ListPodSandboxMetrics e851caffb Replace libcontainer.Stats with cgmgr.CgroupStats 352afeddd Add file_mapped and failcnt fields to memory stats 40ea8516a Add metrics decscriptors list 38e296b15 - Add cri-metrics implementations 4d93b7ec4 build(deps): bump the actions group across 1 directory with 3 updates e66cd346d drop loop variable, which is no longer needed in go 1.22 8b966a886 Re-add `GITHUB_TOKEN` for GitHub actions jobs 4b4e66c63 Remove `GH_TOKEN` usage from repo e0c06c4b5 golangcilint: potentially fix lint from broken linter 8d3a11eef hack/build-rpms.sh: Update for new builder image c2d743dc6 Add debug log line to track newly started exec PIDs 614eb160e Add debug log to expose details of an exec PID being killed 6470daf8c Vendor Kubernetes v1.30.0 8c78850c1 Install `cri-tools` from `master` b7e687853 fix typo and lints of CVE-2024-3154 fix 976ab1f4c annotations: add OCI runtime specific annotations to the AllowedAnnotations b40648e43 Pin golangci-lint action b20fce0b8 build(deps): bump golangci/golangci-lint-action in the actions group 9af6c1717 Fix verify.yml for GitHub actions 2e81eedc8 contrib/test: skip fips test for kata containers 81a98deb9 test: add coverage for disabling crypto.fips_enabled when FIPS_DISABLE is set 9977160f7 server: allow containers within a cluster to opt out of FIPS mode when necessary 316c23534 Pin GitHub actions commits 0c284bea2 replace patch-release.go with release.go e34ea18ae Updates pinned images list on config reload f326ace51 oci: keep track of exec PIDs and stop them on container stop 04be0b7cc build(deps): bump crate-ci/typos in the actions group 2edec2888 Build s390x binaries using musl libc f98b96534 stop using BytesSize when merging the config 49b4a5fa4 bump ocicrypt to v1.1.10 13efa1ae1 Run patch release and nixpkgs jobs only on cri-o/cri-o 46d815d17 Distinguish conmon version parse from execution error 9e8848281 Remove duplicate comment in crio.conf 87cea5626 Rename `cron` workflow to `release-branch-forward` d5b4ae531 drop hooks from kata integration tests cd8333627 Use release-note block instead of label b01cb1886 Update cri-tools to v1.30.0 3099a8fa7 patch-release: configure the default git user and fix file update ddbd81955 Use default `cri-o` org for patch releases da1999a6a Add missing kernel version check to the RRO mounts integration tests dfc851483 Update `release-notes` to v0.16.8 851c13a05 build(deps): bump crate-ci/typos in the actions group e3873837d sasha comments cf44dd802 drop version 43f7ae0d1 Update golangci-lint to v1.57.2 and config 99aad640c Fix patch release workflow restriction 09a529bdf config,factory: use updated CDI interface. fd9aa7625 go.{mod,sum}: update CDI dependency past 0.7.1. 283ac9cb1 add imagefs integration tests 8cffb6590 Move test volume creation to a local helper function 36d5b2359 Lower verbosity of `Allowed annotations are specified for workload` message c69b09563 Enable and fix errorlint 7a098653b feat: add release versions for manual workflow run 5c4fb9a0e Use debug log level for CRI-O prow tests 25d397f98 Remove device mapper support 55857d8dd hack/govulncheck.sh: nit 0302c4150 Move to use new SELinux test helpers over the opencoded checks 9331b8628 Add test helpers to check for current SELinux status and mode 1234e86f2 Add test helpers to check for kernel and crictl versions 39be41ef9 Add support for Recursive Read-only (RRO) mounts e1b983ac7 Makefile: rm $(PROJECT) use from paths 0e20dcddb Makefile: rm i386 hack 9e2727a9b build(deps): bump crate-ci/typos in the actions group c848ba727 Print runtime version info on CRI-O startup 9bac613f5 Implement configurable container minimum memory limit per OCI runtime. f7c3a7fff server: do not chmod bind mounts bb8d956d5 server: chown secrets to root in the container 57a29faf1 add powertools repo for gpgme-devel 083656490 contrib/test/ci: use force_clone for crun to avoid outdated codebase 4fe7bc348 drop rootless dependency from podman 9231bcfa8 Add docs about the prow CI images 27982a07a update runtime spec to 1.2 0484ce3dd Fix Actuated badge in README.md e480e5b28 Cherry-pick changes from containers/image/pull#2363 4ebe38670 Remove pinned conmon-rs version 74145d0b3 contrib/test/ci: use the main branch for building crun 46feeca20 build(deps): bump crate-ci/typos in the actions group 9d0acb9c1 Disable cron workflow for forks 0490e18b3 skip crun-wasm test in image bats e3e629a5f build(deps): bump crate-ci/typos in the actions group 6718d4708 *: address issues with the latest typos update 31a0e9c12 build(deps): bump the actions group with 2 updates a3496374e contrib/test/ci: fix ansible code for building runc 618a4cf1f Do not abort startup if CRIU binary not found 03839cb0a Don't fail-fast integration test matrix ce21e6ae5 test: fix potential flake in timezone tests. b5319fd54 Allow runc to build with go 1.21 and revert wasmedge changes Signed-off-by: Kevin Hannon <kehannon@redhat.com> 12a281f4c create go1.21.9 directory 33db97543 setup golang to 1.22 0f887e69e build golang 1.29 in runc 4e1bb0ba9 ci at 1.22 f407aa06b use golang 1.21 until runc works with 1.22 aedcfd1ac Run seccomp notifier tests on arm dc44631dc add x to set for traceability 0a4272d03 test: remove references to crioctl 3c6b0e089 use wasmedge and drop crun-wasm a63bc4d7a WIP: patch release workflow and script ecd7c6ab5 Change `progressGoRoutine` to `consumeImagePullProgress` b3b0089f0 fix: validation check should handle zero values 9d1cff8f3 oci: AttachContainer: always read attach socket 6ec4e5f38 refactor: moved cpulimit to crio config 3c1fc985b test: added test to cover parsing annotations 34223ab23 upkeep: small wording changes 2c666e7cc feat: add support for cpu limits for workloads 1a377ccd8 Add dynamic pull timeout 7084db255 packit: Update config and sync to Fedora d6d21a12d In some cases the seccomp_notifier does not have time to stop the workload, in that cases exit code of container is 0. 39b3003e2 Update install.md 9b0e2b9b1 Update bats to v1.11.0 bea30a002 add a more clear pointer to what is supported for packaging ba25bb584 Migrate off deprecated AppArmorProfile CRI API b8e947a08 Add exponential backoff to the container stop loop 8460c2c1b add selinux package to crio Signed-off-by: Kevin Hannon <kehannon@redhat.com> 5bd10e270 Update OCI CNI to v0.4.2 d6ebb48a1 Use CRIU version check go-criu; not from Podman ab7961676 drop specgen from crio a6abdb326 Remove Podman `lookup` dependency bcd879fe8 Change duplicated string values into constants 511572c5a Enable and fix `ginkgolinter` reports 7de6d9882 Remove Podman `annotations` package dependency 65ffd1737 Use upcoming version as release notes `endRev` 5677831ca Update cni-plugins to v1.4.1 8c41a868f Deflake `pod annotations capability for chained cni plugins` test 169c5f0c6 Use contextual logs in `server/container_restore.go` 3b29ce532 Remove Podman `errorhandling` package dependency 7824651ac Update google.golang.org/protobuf package to version v1.33.0 6649d97af Update the CNI plugins instructions 9b9318132 Update golangci-lint to v1.56.2 and fix lints 3372a225d build(deps): bump the actions group with 1 update 3f046d1df build(deps): bump github.com/go-jose/go-jose/v3 from 3.0.1 to 3.0.3 7afcf3f46 build(deps): bump gopkg.in/go-jose/go-jose.v2 from 2.6.1 to 2.6.3 863e51424 Add OCI artifact layer cache c434ea8ad Change CRIU support from default off to default on a9ba094a1 deps: update otelttrpc to @latest and re-vendor. 365eaff17 Update zeitgeist to v0.4.4 5b246ba0a build(deps): bump the actions group with 1 update 624564010 Sync changes of PR#7719 & other defaults 791ce8045 Change process metrics collector log levels 03c4bcacc Remove `--seccomp-use-default-when-empty` option ae00cdf9b fix a minor typo in the comment of pullImageImplementation 115e11d09 Disable Recursive Read-only (RRO) mounts feature 0b7cd2f34 Do not overwrite stored latency/governor on container restart 097fe3bf0 Add s390x architecture support a1b8cb9c9 Add OCI artifact pull unit tests ed7963f03 Keep versions file simple to source only 338ea986f In-memory OCI artifact pull b302bc1a0 server: report the runtime handlers features 66ac43688 config: make error message clearer 0fa57582a vendor: bump kubernetes dependencies 08c393d17 Update release-notes to v0.16.5 b826a7f8c Remove `crun` from `dependencies.yaml` 3193916ac build(deps): bump github.com/opencontainers/image-spec c692bec92 Fix markdown lint 6bd4f6855 Allow plain annotation `seccomp-profile.kubernetes.cri-o.io` for images 7b610e32c build(deps): bump the actions group with 6 updates 474fc7780 test: always override NRI socket location. d3808e4ca Add all update types to dependabot groups 9241d7492 build(deps): bump the gomod group with 8 updates 8cc853085 build(deps): bump the actions group with 1 update 4c682eb0d Group all dependabot updates bf5cc00bc config, docs, completions: enable NRI by default. 031ba9b11 Run checkpoint restore tests on arm f1408edbe Update nixpkgs e4a4024e5 Rename seccomp profile annotation to `seccomp-profile.kubernetes.cri-o.io` fe8ec1940 Run integration tests with JOBS=2 14ef21bd2 Reduce amount of parallel jobs in integration tests 6f28ea99a Remove deprecated metrics edebdd00f Revert "Fix ImageRef field for containers to default to an image ID" 91f888a3d Filter image annotations before used ea8f1054e Don't fail-fast matrix d43d8fd92 Don't use CRLF when generating CRI-O documentation abf38859c CRI: An empty DNSConfig != unspecified 567eed921 Switch to go 1.22 and update deps 162594e9b Update openSUSE's OBS URL in install-distro.md file a38b9b956 .golangci: Bump gocyclo to enforce code complexity checks aff565f82 test: add test for timezone support 66c2aeb83 *: add support for specifying timezone for pod/container 05f4cbb19 release-notes: fix startTag calculation b20d06cc7 Add support for OCI artifact seccomp profiles ff60ac14a When crio restarts, restore the infraContainer d955623e6 go.{mod,sum}: update NRI dependency, re-vendor. 4619ca724 server,nri: enable otel tracing over ttrpc. 9613e6075 Fix ctr log max test on arm64 e84b65477 oci: handle early exited container faster in stop loop d8d3670be Update runc to 1.1.12 aedf47129 build(deps): bump github.com/opencontainers/runc from 1.1.10 to 1.1.12 511877186 report memory Swap-only values 601d85941 clean up the Populate* functions with their helpers 3bd73f662 libcontainer-based stats server for linux 5a2bbb90f Run integration tests on arm64 6fb83141a higeperfhooks: mixedcpus: set only exclusive cpus in child cgroup 63ff1eee8 Add integration tests ea75b9bef Move metrics endpoint listener to use 127.0.0.1 as default fbe8bbbee highperfhooks: add precreate hook for injecting envs 5e83e9697 Update nixpkgs 7e94aa19a server: implement stopPodSandbox for FreeBSD f70aa434c server: implement runPodSandbox for FreeBSD c13044276 internal/sandbox/infra: make this build on FreeBSD bdaa98b66 internal/node/config: implement ValidateConfig for FreeBSD 2eb3db455 internal/config/nsmgr: implement nsmgr for FreeBSD 479e316db internal/oci: Implement getPidStartTime for FreeBSD 19e407c2e server: make configureMaxThreads platform-specific... 887c4421d internal/lib/sandbox: make NeedsInfra plaform-specific 5cb9fa77a internal/factory/containers: allow non-linux containers 5d3d7260d pkg/config: only validate the pinns path on Linux c9975a3c4 build(deps): bump ocicni to latest master 3333f2fa7 build(deps): bump the opentelemetry group with 2 updates 1b9754486 fix missing line ending on crio.8.md 3cbaa5294 fix grep for whitespace 8dea35388 add metrics_host to config 8cffd22e3 fix typo for time out e510f3854 metrics: remove deleted containers from OOM count metrics 56e46815d build(deps): bump github.com/go-git/go-git/v5 from 5.10.0 to 5.11.0 0c67d8b5a version: bump to 1.30.0 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-07-11 14:07:17 +00:00
Bruce Ashfield	e28407eda5	containerd: update to 2.0.0-rc-latest ... Bumping containerd to version v2.0.0-rc.3-82-g1b24e53d0, which comprises the following commits: 63b55e6df build(deps): bump the golang-x group with 2 updates 51f34ff49 CI: update Fedora to 40 56495b404 update go version to 1.22.5 23170e20d Move fsverity package to internal f6e731c80 cri: get pid count from container metrics 96352ad22 update runhcs binary to v0.12.4 10aec359a cri: ensure NRI API never has nil CRI a723c0c6e pkg/reference: remove deprecated SplitObject ef98c7198 Implement fsverity functionality fec33aa73 pkg/reference: deprecate SplitObject a5fce38f3 pkg/reference: Spec.Digest(): inline SplitObject code 42145950b pkg/reference: SplitObject: add proper GoDoc 74a6156ac pkg/reference: SplitObject: zero allocations 799bca97f pkg/reference: Spec.String(): use string-concatenation instead of sprintf c097022a5 build(deps): bump github.com/containernetworking/cni from 1.2.1 to 1.2.2 14b053fb4 build(deps): bump github.com/containerd/go-cni from 1.1.9 to 1.1.10 8f9607eed Use the transactor interface in metadata 2cf8237a1 build(deps): bump k8s.io/klog/v2 in the k8s group a2f9101aa build(deps): bump github.com/containernetworking/plugins 2304cd9d5 build(deps): bump google.golang.org/protobuf from 1.34.1 to 1.34.2 469f95026 build(deps): bump github.com/containernetworking/cni from 1.2.0 to 1.2.1 243b803a1 Add pprof to runc-shim b323e9eec vendor: github.com/containerd/ttrpc v1.2.5 cb38b1e2b api: update github.com/containerd/ttrpc v1.2.5 2f1bf791b Cleanup metadata godoc 907796811 update release runners to ubuntu 24.04 dd0542f7c cmd: don't alias context package, and use cliContext for cli.Context c25183ff1 use older version of OVMF package 1bfdccee0 use vagrant from jammy in noble 769e0c8c1 add debian sources for ubuntu-24 624aa49d4 increase xfs base image size to 300Mb 027414ee5 enable ubuntu 24 runners 9edde8106 build(deps): bump github.com/klauspost/compress from 1.17.8 to 1.17.9 becb2b2d3 build(deps): bump github.com/checkpoint-restore/checkpointctl f6f655ccf build(deps): bump k8s.io/klog/v2 in the k8s group 531da9960 Reduce scope of permissions in stale workflow 15887d7ef sandbox: add update api for controller Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-07-11 14:07:17 +00:00
Bruce Ashfield	e977aba247	conmon: update to 2.1.12 ... Bumping conmon to version v2.1.3-147-ga500cbd, which comprises the following commits: a500cbd logging: remove unuseful fsync 1578849 fix(deps): update module golang.org/x/sys to v0.20.0 c7a88f8 Remove CI VM OS names be3e546 chore(deps): update dependency containers/automation_images to v20240513 e889663 Bump version to 2.1.12 ff8794c Make 'docs' target not depend on 'install.tools' if GOMD2MAN is set 10f7826 Packit: enable downstream sync to CentOS Stream 10 e21e7c8 Build s390x binaries using musl libc 9ce7b1a Add support for s390x Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-07-11 14:07:17 +00:00
Bruce Ashfield	1195b00fe9	buildah: update to 1.36-tip ... Bumping buildah to version v1.36.0-2-g0d08edeed, which comprises the following commits: 34518c5fa Packit: enable c10s downstream sync 6ceba8838 Bump to v1.36.0 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-07-11 14:07:17 +00:00
Bruce Ashfield	e7033d206d	aardvark-dns: update to v1.11.0 ... Bumping aardvark-dns to version v1.11.0-10-g5ad6420, which comprises the following commits: 2873fe5 Be sure to have at least Epoch 2 to preserve upgrade path in c10s. db1afc8 fix(deps): update rust crate log to 0.4.22 43ea35b [CI:BUILD] rpm: Update Rust macro usage 03d1c0a fix(deps): update rust crate tokio to 1.38.0 cbdc655 Bump to 1.12.0-dev 666d7b1 Release v1.11.0 802a5de v1.11.0 release notes 882c7b0 run cargo update ed6c573 chore(deps): update dependency containers/automation_images to v20240529 011f352 Internal networks cannot make external DNS requests 9db7996 fix(deps): update rust crate anyhow to 1.0.86 e30a92e fix(deps): update rust crate nix to 0.29.0 dc946ea [skip-ci] RPM: use default __cargo macro across all envs 9ebb8f2 chore(deps): update dependency containers/automation_images to v20240513 db186b4 fix(deps): update rust crate anyhow to 1.0.83 d591c8a [skip-ci] Packit: separate `packages` key for rhel jobs ae9ff92 fix(deps): update rust crate libc to 0.2.154 abba8d0 [skip-ci] Packit: enable rhel10, c10s tests and c10s downstream sync ed98d62 [skip-ci] Packit: Remove EL8 jobs fb414d9 fix(deps): update rust crate syslog to ^6.1.1 591a636 fix reverse ipv6 lookup test flake 40f76b6 fix(deps): update hickory-dns monorepo to 0.24.1 4646a22 chore(deps): update rust crate chrono to 0.4.38 1f96f76 Don't tear down all server threads on SIGHUP f244f33 fix(deps): update rust crate anyhow to 1.0.82 dfa66f6 fix(deps): update rust crate tokio to 1.37.0 f8a2e2c Update to nix-0.28.0 12a8e25 update chrono package 25dee15 chore(deps): update dependency containers/automation_images to v20240320 f3f615e fix(deps): update rust crate anyhow to 1.0.81 99d3d62 tests: check queried domain name in reverse lookup tests a256241 fix: set name for answers in reverse lookups 13055be chore: fix typo in runner script 593e007 chore: fix log message when doing reverse lookup 33817d2 fix(deps): update rust crate log to 0.4.21 7656598 fix(deps): update rust crate anyhow to 1.0.80 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-07-10 15:59:26 +00:00
Bruce Ashfield	58cddd438e	podman-compose: update to v1.2.0 ... Bumping podman-compose to version v1.2.0-27-gdaab93b, which comprises the following commits: 9fe3038 tests/integration: Automate 'build_fail' manual test 0f8348b tests/integration: Automate 'build' manual test 2091ade Add newsfragment ca58d7c Pass build description labels to podman build 5bf4c0f Add a way to remove dashes in default network names 67c5352 Extract default_network_name_for_project() 5040a37 tests: Add integration tests for up -d with single container at a time 29195be github: Install requirements unconditionally 9a4af0c Discover tests instead of passing a list of files to unittest 24038da Check whether pod exists before trying to create one 2056e70 tests/integration: Reduce base path calculation duplication 4ec57c1 unittests: Added unit tests for podman-compose secrets fa3e0a7 Alt Dockerfile names fix 18472b5 Move all tests to single directory "tests" d38b26b Release 1.2.0 37e2cb2 Add release notes for v1.2.0 6ef759c Use newsfragments pattern for the release notes 67ce900 Commit .env in tests/env-file-tests, bypassing root .gitignore 4e9f767 Load .env from Compose file's directory and cwd 405001b Fix comment 6b1aeff Add unittests for type=env secret f06975b Update tests for type=env secret 546cad5 Add type=env secret support 935029d Fix environment variable precedents 360b85b Allow providing custom in_pod argument as a global compose file variable 82740cc Add ability to input docker-compose.yaml via stdin 0f645e4 Add ability to input docker-compose.yaml via stdin 3b15170 Changed the global parser help message for file input, to reflect changes for reading from stdin 3359380 Add ability to input docker-compose.yaml via stdin e799a0b Fix x-podman.gidmap typo 65d1fde github: Add verbose option to integration tests 2e8ed2f pytests: Add test for object required but path non existent 040b73a pytests: Add tests for several multi-line environment files f3e9a96 Fixes #908: Add support for multi-line environment files 2c5d00d github/workflows: Add codespellignore file to address false positives b513f50 test: add missing unit tests for selinux in verbose mount cac836b Support additional_contexts 09034a0 test: Split test_gpu test 0065082 refine the test_include for multi subcomposes 4f73f2b fix: add include test file, edit the assertion 1d64f2c Update podman_compose.py 4e22fae Fix logging build error message 79865c2 Add support for enabling GPU access c23a8b2 Do not pass --ipam-driver option when value set to default b202a09 Add support for `env_file` as objects 5c4aa40 add await for create_pods call cef1785 Add instructions on install from Homebrew b761050 tests: Merge multiple compose merging tests into single test class e1d0ea7 tests: Move normalize_service tests to a separate test class 1430578 tests: Simplify command and entrypoint normalization tests d31a8b1 Don't create pods/container when registering systemd unit 5df4e78 README: explain that netavark is an alternative to the dnsname plugin 70a0e2d Fix handling of --in-pod argument eea8bac Add images command a6c4263 Add tests for x-podman.uidmaps and x-podman.gidmaps 9599cc0 Migrate x-podman dictionary to x-podman.* fields in container root 2b4ecee Add docs for podman specific compose file extensions 77f2e8e Support podman's external rootfs management 72a94d5 implement --publish in docker-compose run 2681566 Release 1.1.0 c97f003 Add release notes for v1.1.0 131010b Use x- prefix for x-podman.mac_address cdcedeb Use "service.build.ulimits" when present instead of "service.ulimits" 3e1f7d5 add tests for selinux with verbose bind mount d7cf096 add support for selinux in verbose mount 1f35c00 Add unit test for depends_on normalization as a dict 6c09ce7 FIX issue https://github.com/containers/podman-compose/issues/704 - Windows fix sock not working. 953534a Support and document all podman-specific network_modes 6feff24 slirp4netns can be used without options 9fd4cf4 Add unit tests for network_mode 65849c9 add comment about per-network aliases 9baea70 use preferred format of podman command line options bdff78d Ignore files generated by tests 45ca1f9 Support podman-specific per-network mac_address specifiation 91fbea3 Add unit tests for get_net_args() 2743d69 Fix support for multiple networks with explicitly specified ipv4/ipv6 addresses dd34a90 Add testcase for failing network config f0bae1e Don't resolve links to compose file 81d81fb Formats CONTRIBUTING.md b263dc1 Fixes typos and enhances CONTRIBUTING.md 078ee7b Updates Signed-off-by link in CONTRIBUTING.md a6e3ae7 Fixes invalid name of test package in setup.py 1e9cf1d Pass file secrets to "podman build" via parameter "--secret" bbfff78 Bump actions/checkout from 3 to 4 c351f99 Add coverage to Github Action summary 829cde0 Rename test classes to match filenames da63048 Don't spellcheck requirementfiles 5e55df8 fix python < 3.9 compatibility fde7995 Fix python < 3.11 compatibility c592596 Split out the different tests into separate CI steps 688ee9a Fix pylint issues c3a152e Enable pylint, because it catches stuff that ruff misses bd60bc9 Run tests on all supported python versions 9d8b0b8 add editorconfig f2f5483 Extract compose_run args parsing and add unit tests c4fa8f7 Split exec args parsing into new function and add unit tests for it 4c270b9 Allow run/exec -e with equals sign in value c5f7f55 Remove implemented commands from Missing Commands c98cbaa Fix #782: add support for http_proxy 91d316f Added handling `pid` option 969edb8 Add support for enable_ipv6 bba1f33 Factor out arg creation for "network create". Add unit tests. a9c335b Handle sysctls maps e67c52f test_container_to_args: handle async tests 2cdfb3e Fix stop/restart args stacking 8ec5e03 github: Add PR template da520e2 switch to % string lazy formatting * fix black and pylint issues 1e9e2ee Output: use logging, remove garbage output by default 0f693ee Replaces asyncio timeout with bespoke timeout function cf90ab2 Run codespell throughout fixing typos automagically d2fa801 ignore poped (not sure why not to make it popped) 2477748 Add pre-commit definition for codespell 6e65a73 Add rudimentary codespell config f95ca7a Add github action to codespell devel on push and PRs 0c0e77c Bump actions/checkout from 3 to 4 bb2338e Fix unsorted imports 15ae214 Add support for runtime service configuration key ed39523 github: Enable ruff check 4e43606 Shorten too long lines 91052cb Fix ambiguous variable name a6e0092 Remove unused variable 59a1fa3 Use 'not in' for membership test 36139fb Remove unused f-string b0da6f8 Fix import formatting 94df95a README: Fix link to tests badge 3a5a283 README: Remove link to pylint test badge 7c81044 github: Run actions on python:3.11-bookworm 1a24cde tests: Properly tear down containers in extends_w_file_subdir test a90da4d github: Fix test names 27c8ceb tests: Add verbose debug option via env variable 0614687 tests: Print decoded subprocess output in case of failure 6af7a2d tests: Optimize speed by using dumb-init to handle SIGTERM signal f4dc5f3 tests: Print output in case subprocess returns unexpected code b34f699 Add SPDX license identifiers to each source file 2c6c1be github: Run tests on all branches 91737ee Bump actions/setup-python from 4 to 5 b65d4a3 github: Fix ruff job setup 23fe9e7 Migrate tests to unittest 7539257 requirements: Install . for tests a967cab Format codebase with ruff a5c354d Replace flake8, black, pylint with ruff e4e5b7d Make test requirements reproducible e0edd5d Fix package installation 831caa6 remove recursion 9ac3339 Fix issue #831 c5be5ba Fixup tests c6a1c4c Add tests to make sure all async paths are covered 3c9628b Fix a couple issues and update docs 38b13a3 Use asyncio for subprocess calls bce40c2 Change "an key-value" to "a key-value" 78f8cad Fix typos 7942a54 fix styling errors cb9cf60 add stats command 06587c1 rm redundant tests bc9168b add no-normalize flag 57c527c add edits from review d1f5ac9 convert build context path to absolute during final normalisation 0164c1d Simplify the fix using `or`. e5cdce4 default to an empty dict for the from service if the service is None 280f177 Add a test to extend using an empty service (placeholder) f75d12a broken in py 3.7 5454c3a Add 'links' aliases to container aliases 901adf4 Use defined environment variables in the image build process bf07e91 Implement `include` from `compose-spec` c31b4e2 Fixes #723: merge short & long syntax of depends_on dependencies 79bfad1 move logic from rec_merge to normalize_service d150946 allow empty list to be a command/entrypoint 9011e9f add tests, dry up code, use shlex.split instead of str.split 517aeba Allow config to merge strings and lists in command and entrypoint 85d5d5d move logic from rec_merge to normalize_service 1ffd24d Python version support: sync verified and advertised versions 8c66b1c add test case for when build is a complex dictionary a0005db add code implementing build value merge 221cf14 add tests for build value merge a61945b fix format 6b6330c add build subcommand and --build arg to compose_run 5d279c4 Build-fail test example 5a3bdbf Exit code managed at PodmanCompose.run() 1eb1664 Linting fixes 82182b7 Finish execution in compose_build only on command=build calls 3f46188 Update project-1.env 91bc6eb Keep chdir after loading env file 59a59c1 Fixes #636: env-file shall be resolved relative to the CWD 620f5d7 pre-commit black config: run in check only mode 6f902fa Fix linting issues ccdf01e Revert "Use SELinux mount flag for secrets" e6b1eab Revert "Use more lenient SELinux mount flag for secrets" 75de39c Use more lenient SELinux mount flag for secrets 8741925 Use SELinux mount flag for secrets 0b853f2 Ignore access mode when merging volumes short syntax 847f01a Add a docker-compose test file for uidmaps/gidmaps e511e64 FIXES #228: Add support for uidmap and gidmap a9723ec Added a way to start containers with multiple ips and nets 1cb608d allow project name to be fetched from dotenv 252f1d5 updating black formatting for podman-compose.py 13856d2 updating black formatting 8d8df0b Adding basic support for --profile argument bc5f012 add option to start podman in existing network namespace 9a08f85 FIXES #586: preserve exit code for podman-compose build 8625d7a add ipam-driver support 016c97f Fixes #663 - Fixes linting/pylint errors 2df1167 Fixes #661 - Fixes linting/flake8 errors 5eff38e Fixes #659: fix permissions when installing OS packages for linting/black 7f5ce26 start version 1.0.7 and default with pod enabled by default f6dbce3 version 1.0.6 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-07-10 15:59:26 +00:00
Mingli Yu	66961d278a	aardvark-dns: Improve the ptest output ... The previous ptest result show as ✓ or ✗ , improve the result to PASS or FAIL. # ./run-ptest [snip] PASS: 6 basic container - dns itself with long network name PASS: 7 two containers on the same network PASS: 8 two containers on different networks [snip] Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-07-10 15:59:26 +00:00
Mingli Yu	7d0768c428	netavark: Improve the ptest output ... * The previous ptest result show as ✓ or ✗ , improve the result to PASS or FAIL. * Skip some cases related to sit0 device(sit kernel module) and firewalld. * Add nftables to RDEPENDS for netavark-ptest as 250-bridge-nftables.bats needs it. Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-07-10 15:59:26 +00:00
Xiangyu Chen	e15a5484e4	lxc: update ptest cases in black list ... Released lxc-test-shutdowntest and lxc-test-state-server due to those back to normal since lxc upgraded to 6.0.0. lxc-test-no-new-privs and lxc-test-checkpoint-restore are broken test, already reported to upstream[1][2], move them to blacklist until upstream fix them. lxc-test-usernic always fails when use ptest-runner, but normal with run-ptest by manual. Ref: [1] https://github.com/lxc/lxc/issues/4296 [2] https://github.com/lxc/lxc/issues/4435 Signed-off-by: Xiangyu Chen <xiangyu.chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-07-10 15:59:26 +00:00
Bruce Ashfield	93113db99c	moby: update to v26.1.4 ... Bumping moby to version v26.1.4-4-gf5334644ec, which comprises the following commits: c1d4587d76 builder/mobyexporter: Add missing nil check daba2462f5 docs: api: image inspect: remove Container and ContainerConfig 17315a20ee vendor: github.com/containerd/containerd v1.7.18 cbd94183ab update containerd binary to v1.7.18 3115daaa91 update to go1.21.11 12072173df Update containerd to v1.7.17 92f00d41ba vendor: github.com/Microsoft/go-winio v0.6.2 a046857fbf vendor: golang.org/x/tools v0.16.0 476d9314d0 vendor: golang.org/x/mod v0.17.0 4021fa775e update docker-py to 7.1.0 0fd5efe64a docs/api: add Scope, ConfigOnly, ConfigFrom, Peers (v1.41 - v1.45) 1017246d24 api: swagger: Network: add Peers fbfa1bcc96 api: swagger: POST /networks/create: document Scope, ConfigOnly, ConfigFrom e12db89eef api: swagger: Network: inline examples, and add ConfigOnly, ConfigFrom 5838467405 docs/api: POST /networks/create: inline examples per-field (v1.41 - v1.45) 1033f561af api: swagger: POST /networks/create: inline examples per-field 0fa6816991 api/types: NetworkCreate: add GoDoc eaad6f503d don't depend on containerd platform.Parse to return a typed error fda7b48363 Fix issue where node promotion could fail dbec963cee integration/TestDiskUsage: Make 4096 also a 'empty' value e35c6f5625 Dockerfile: update containerd binary to v1.7.17 (static binaries and CI only) 06e19ec444 Explicity write http headers on streaming endpoints c21fe3efa3 Forward DNS requests into --internal networks 9326cda7bf Do not forward DNS requests to self. 76fcf9a8e0 apparmor: Allow confined runc to kill containers 10739af81a update to go1.21.10 2f5bbbe16b Option to avoid deleting the kernel_ll address from bridges. 40618081f1 Allow for a read-only "/proc/sys/net". 2c91196921 Update containerd to v1.7.16 c9689eccf5 vendor: update buildkit to v0.13.2 7d95fe8db5 c8d/list: Ignore unexpected image target 6667e96dad Include more details in errnotManifestOrIndex ab570ab3d6 nil dereference fix on image history Created value 7532420f3b container/SetupWorkingDirectory: Don't mutate config a4d5b6b4d0 builder/normalizeWorkdir: Always return cleaned path 6c68be24a2 Windows DNS resolver forwarding 745e2356ab Update tags.cncf.io/container-device-interface to v0.7.1 0d6a1a212b vendor: github.com/opencontainers/runtime-spec v1.2.0 f5209d23a8 daemon: add nolint-comments for deprecated kernel-memory options, hooks f07644e17e Add netiputil.AddrPortFromNet() d3c051318f daemon/cluster/executor: Add volume `Subpath` 5368c3a04f vendor: github.com/moby/swarmkit/v2 master (f3ffc0881d0e) f51e18f58e Fix typo 57dd56726a Disable IPv6 for endpoints in '--ipv6=false' networks. 9954d7c6bd Run ipvlan tests even if 'modprobe ipvlan' fails cd7240f6d9 Stop macvlan with no parent from using ext-dns 17b8631545 Enable DNS proxying for ipvlan-l3 5ae5969739 vendor: github.com/containerd/containerd v1.7.15 3485cfbb1e update containerd binary to v1.7.15 fb92caf2aa ci/validate-pr: Use `::error::` command to print errors 61269e718f github/ci: Check if backport is opened against the expected branch d8b768149b Move dummy DNS server to integration/internal/network 329d403e20 update to go1.21.9 d66589496e vendor: golang.org/x/net v0.23.0 e1ca74361b vendor: golang.org/x/net v0.22.0, golang.org/x/crypto v0.21.0 cf933115b6 Minor fix for illumos support 9160b9fda6 save: Remove platform from config descriptor 0a48d26fbc Fix cases where we are wrapping a nil error c4689034fd daemon: don't call NetworkMode.IsDefault() 4eed3dcdfe api: normalize the default NetworkMode c187f95fe1 CONTRIBUTING.md: update Slack link aff003139c ci: update workflow artifacts retention 1014f481de Restore the SetKey prestart hook. fde80fe2e7 Restore the SetKey prestart hook. 14a8fac092 chore: fix mismatched function names in godoc 61e2199b78 AUTHORS,.mailmap: update with recent contributors ea72f9f72c Dockerfile: update docker CLI to v26.0.0 22726fb63b api: document changed behavior of the `Aliases` field in v1.45 3312b82515 c8d/list: Add a test case for images sharing a top layer ad8a5a5732 c8d/list: Fix diffIDs being outputted instead of chainIDs 0c2d83b5fb c8d/list: Handle unpacked layers when calculating shared size f696e0d2a7 Dockerfile: avoid hardcoding arch combinations for delve 3d2a56e7cf docs/api: add documentation for API v1.45 731a64069f c8d/list: Generate image summary concurrently dade279565 c8d/list: Add `Images` benchmark e7c60a30e6 vendor: github.com/moby/buildkit v0.13.1 2e4ebf032a c8d/list: Pass ctx to setupLabelFilter 153de36b3f c8d/list: Add empty index test case 4ff655f4b8 resolvconf: add //go:build directives to prevent downgrading to go1.16 language 1c03312378 integration: Remove Parallel from TestDiskUsage f512dba037 c8d/list: Fix premature `Images` return 89dc2860ba c8d/list: Handle missing configs in label filter 6f3892dc99 c8d/list: Don't setup label filter if it's not specified fe8fb9b9a1 Dockerfile: update mvdan/shfmt to v3.8.0 4bd30829d1 Dockerfile: update docker compose to v2.25.0 971562b005 Dockerfile: update docker CLI to v26.0.0-rc2 d742659877 rootless: fix `open /etc/docker/plugins: permission denied` 4f46c44725 Dockerfile: update xx to v1.4.0 25c9e6e8df Makefile: generate-files: fix check for empty TMP_OUT 762ec4b60c plugin: fix mounting /etc/hosts when running in UserNS 7b414f5703 daemon: move getUnprivilegedMountFlags to internal package 790c3039d0 libnet: Don't forward to upstream resolvers on internal nw 10bdc7136c builder-next: Add env-var to override runc used by buildkit 1ca89d7eae vendor: google.golang.org/protobuf v1.33.0, github.com/golang/protobuf v1.5.4 f40bdf5f63 Dockerfile: update compose to v2.24.7 3f73d23ea0 Dockerfile: update buildx to v0.13.1 388ecf65bc c8d: Send push metrics to prom bb3ab1edb7 c8d: Send pull metrics to prom da245cab15 c8d: Send history metrics to prometheus 1cfd763214 c8d: Send image delete metrics to prometheus 0ce714a085 images: Export the image actions prometheus counter bcb4794eea Be more explicit about non-TLS TCP access deprecation 0d5ef431a1 docker-py: Temporarily skip `test_commit` and `test_commit_with_changes` 03cddc62f4 api/image-inspect: Remove Container and ContainerConfig ec19fd6fed vendor: github.com/containerd/containerd v1.7.14 d19f6d4b6d vendor: github.com/containerd/ttrpc v1.2.3 a6a445d86b set-up-git.md: clarify URL in git clone command 294fc9762e volume: Don't decrement refcount below 0 eef352b565 devcontainer: Use a separate devcontainer target 5a009cdd5b inte/networking: add isIPv6 flag 2f1a32e3e5 c8d/list: Skip images with non matching platform 72f1f82f28 c8d/list: Remove outdated TODO 52a80b40e2 c8d/list: Extract imageSummary function 288a14e264 c8d/list: Simplify "best" image selection b37ced2551 c8d/list: Count containers by their manifest a535a65c4b c8d/list: Combine size 582de4bc3c c8d/list: Add TestImageList a6e7e67d3a specialimage: Return optional ocispec.Index 1b108bdfeb daemon/c8d: Cache SnapshotService 74e2f23e1a daemon/c8d: Use i.images and i.content e8496b1ee4 imageService: Extract common code from `MakeImageCache` d66177591e c8d/cache: Use the same cache logic as graphdrivers bf30fee58a image/cache: Refactor backend specific code f5a5e3f203 golangci-lint: enable dupword linter 4adc40ac40 fix duplicate words (dupwords) 8921897e3b Ignore bad ndots in host resolv.conf 37545cc644 builder-next: fix missing lock in ensurelayer ef5295cda4 Don't configure IPv6 addr/gw when IPv6 disabled. 49b77753cb builder-next/export: Use leaseutil for descref lease c4fc6c3371 builder-next/executor: Replace removed network.Sample 0f30791a0d vendor: github.com/moby/buildkit v0.13.0 4e8d9a4522 Add IPv6 nameserver to the internal DNS's upstreams. 06628e383a remove repetitive words 21835a5696 inte/networking: rename linkLocal flag into isLinkLocal b32cfc3b3a dockerd-rootless-setuptool.sh: check RootlessKit functionality 49fd8df9b9 Dockerfile: update RootlessKit to v2.0.2 72ec187dfe go.mod: github.com/rootless-containers/rootlesskit/v2 v2.0.2 83cda67f73 go.mod: golang.org/x/sys v0.18.0 57b7ffa7f6 update to go1.21.8 cadb124ab6 daemon: overlay2: remove world writable permission from the lower file b2921509e5 api/search: Reset `is_automated` field to `false` f04f69e366 Accumulate resolv.conf options 7f69142aa0 resolv.conf comments have '#' or ';' in the first column 91d9307738 Replace uses of slices.Clone() 12dea3fa9e devcontainer: Add Golang extension automatically 9f4e824a6e vendor: github.com/miekg/dns v1.1.57 ef681124ca fix typo in error message 7ebd88d2d9 hack: block imports of vendored testify packages 4f30a930ad libn/cnmallocator: migrate tests to gotest.tools/v3 a580544d82 Don't create endpoint config for MAC addr config migration ebf3f8c7fe distribution/xfer: fix pull progress message 2af2496c8c Dockerfile: Update dev cli to v26.0.0-rc1 fc0e5401f2 ci: Update `teststat` to v0.1.25 7b0ab1011c Vendor dependency cycle-free swarmkit 62b33a2604 disable pulling legacy image formats by default 5fe96e234d integration: Reset `OTEL_EXPORTER_OTLP_ENDPOINT` for sub-daemons 84eecc4a30 Revert "integration/TestDaemonProxy: Remove OTEL span" 261dccc98a builder-next: Add `Info` to `emptyProvider` 2c9c5e1c03 vendor: github.com/moby/buildkit v0.13.0-rc3 b649e272bb Allow to enable host loopback and use 10.0.2.2 to connect to the host (OPTIONALLY) e4de4dea5c ci: Make `find` for test reports more specific 9be820d8ca vendor: go.etcd.io/bbolt v1.3.9 da643c0b8a libcontainerd: change the digest used when restoring 9083c2f10d Test DNS on Windows 'nat' networks 44167988c3 c8d/windows: Temporarily skip two failing tests 2d31532a00 otel: Default metrics protocol to http/protobuf 60358bfcab ci(buildkit): dedicated step to build test image f5722da5e0 mobyexporter: Store temporary config descriptor 951e42cd60 builder-next: Replace ResolveImageConfig with ResolveSourceMetadata e01a1c5d09 builder/mobyexporter: Set `image.name` response key fa467caf4d builder-next/mobyexporter: Use OptKeyName const 59ad1690f7 builder-next: Adjust to source changes b04a2dad6b builder/controller: Adjust NewWorkerOpt call bc6d88c09a cmd/dockerd: Fix overriding OTEL resource a79bb1e832 builder-next/exporter: Sync with new signature e68f71259a integration/build: Use fsutil.NewFS dd6992617e integration/build: Use new buildkit progressui 31545c3b67 vendor: github.com/moby/buildkit v0.13.0-rc2 f90b03ee5d go.mod: bump to go 1.21 and use local toolchain when vendoring 16aa7dd67f c8d/pull: Output truncated id for `Pulling fs layer` 881260148f api: omit missing Created field from ImageInspect response 432390320e api/pre-1.44: Default `ReadOnlyNonRecursive` to true 6aea26b431 client: fix connection-errors being shadowed by API version mismatch errors 913478b428 client: doRequest: make sure we return a connection-error 901b90593d client: NegotiateAPIVersion: do not ignore (connection) errors from Ping 349abc64ed client: fix TestPingWithError 05b883bdc8 mounts/validate: Don't check source exists with CreateMountpoint c516804d6f vendor: OTEL v0.46.1 / v1.21.0 83c02f7a11 libnet/ds: remove extra space in error msg 14df52b709 c8d/pull: Don't emit `Downloading` with 0 progress ff5f780f2b c8d/pull: Emit `Pulling fs layer` 5689dabfb3 pkg/streamformatter: Make `progressOutput` concurrency safe 1d473549e8 ci: Require changelog description b2aaf5c2b0 vendor: github.com/containerd/continuity v0.4.3 cbd45e83cf libnet: Replace DeleteAtomic in retry loops with DeleteIdempotent d9e082ff54 libnetwork: resolve: use structured logs for DNS error 8761bffcaf Makefile: Pass PAGER/GIT_PAGER variable 56aeb548b2 integration/TestDaemonProxy: Remove OTEL span 38827ba290 ci: set codecov token bddd892e91 c8d: Adjust "image list" to return only a single item for each image store entry 2aa13e950d awslogs: Replace depreacted WithEndpointResolver usage 70a4a9c969 vendor: bump github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs to v1.32.0 9faf4855d5 Simplify macvlan/ipvlan integration test structure 4eb95d01bc Run the macvlan/ipvlan integration tests 7c2975d2df update to go1.21.7 903412d0fc api/history: Mention empty `Created` 443f56efb0 Set up DNS names for Windows default network b4fbe226e8 Set `Created` to `0001-01-01T00:00:00Z` on older API versions 5bcd2f6860 builder/dockerfile: ADD with best-effort xattrs 999f90ac1c vendor: bump github.com/aws/aws-sdk-go-v2 to v1.24.1 ef7766304c vendor: github.com/containerd/nydus-snapshotter v0.13.7 6932939326 vendor: google.golang.org/genproto/googleapis/rpc 49dd2c1f3d0b 10a72f2504 vendor: cloud.google.com/go/logging v1.8.1 a60fef0c41 vendor: golang.org/x/exp v0.0.0-20231006140011-7918f672742d 03a17a2887 migrate image spec to github.com/moby/docker-image-spec a26c953b94 Add comment explaining network-create flow for Swarm 571af915d5 Don't enforce new validation rules for existing networks b71c2792d2 image/spec: remove link to docs.docker.com "registry" specification 4ab11a1148 vendor: github.com/containerd/containerd v1.7.13 419f5a6372 Make 'internal' bridge networks accessible from host 475019d70a vendor: github.com/prometheus/procfs v0.12.0 63c354aae2 vendor: github.com/prometheus/client_golang v1.17.0 beb97f7fdf Refactor 'resolv.conf' generation. 14503ccebd api/server/middleware: NewVersionMiddleware: add validation e1897cbde4 api/server/middleware:use API-consts in tests 0fef6e1c99 api/server/middleware: VersionMiddleware: improve docs 6b01719ffb api: add MinSupportedAPIVersion const 19a04efa2f api: remove API < v1.24 8758d08bb4 api: remove handling of HostConfig on POST /containers/{id}/start (api < v1.24) ffd877f948 api: remove plain-text error-responses (api < v1.24) b3a0ff9944 api: remove POST /containers/{id}/copy endpoint (api < v1.23) 83f790cccc api: POST /exec/{id}/start: remove support for API < v1.21 d1974aa492 api: remove code for container stats on api < v1.21 ed93110e11 api: update test to reflect reality on Windows 570d5a9645 api: remove code for ContainerInspect on api v1.20 f0dd554e3c api: remove code for ContainerInspect on api < v1.20 dfdf2adf0c api: POST /containers/{id}/kill: remove handling for api < 1.20 2970b320aa api: remove code for adjusting CPU shares (api < v1.19) ef25f0aa52 api: POST /build: remove version-gate for "pull" (api < v1.16) 7fa116830b api: POST /build: remove version-gate for "rm", "force-rm" (api < v1.16) 1b1147e46b api: POST /commit: remove version-gate for "pause" (api < v1.16) d26bdfe226 runconfig: remove fixtures for api < v1.19 f1e6958295 c8d: Use the same logic to get the present images 2c01d53d96 image/cache: Use Platform from ocispec d69729e053 seccomp: add futex_wake syscall (kernel v6.7, libseccomp v2.5.5) 10d344d176 seccomp: add futex_wait syscall (kernel v6.7, libseccomp v2.5.5) df57a080b6 seccomp: add futex_requeue syscall (kernel v6.7, libseccomp v2.5.5) 8826f402f9 seccomp: add map_shadow_stack syscall (kernel v6.6, libseccomp v2.5.5) 6f242f1a28 seccomp: add fchmodat2 syscall (kernel v6.6, libseccomp v2.5.5) 4d0d5ee10d seccomp: add cachestat syscall (kernel v6.5, libseccomp v2.5.5) 1251982cf7 seccomp: add set_mempolicy_home_node syscall (kernel v5.17, libseccomp v2.5.4) 7f1b700227 Dockerfile: update RootlessKit to v2.0.1 f1730a6512 go.mod: github.com/rootless-containers/rootlesskit/v2 v2.0.1 f7192bb0b4 vendor.mod: github.com/google/uuid v1.6.0 91ea04089b image/cache: Ignore Build and Revision on Windows 2ef0b53e51 integration/save: Add tests checking OCI archive output 74d51e8553 plugins: fix panic installing from repo w/ digest e910a79e2b Remove 'VERSION' from the text 9fcea5b933 Fix broken links in project/README.md 10d6f5213a Dockerfile: update docker compose to v2.24.5 9c92c07acf Dockerfile: update dev-shell version of the cli to v25.0.2 89470a7114 libnet: bridge: ignore EINVAL when configuring bridge MTU e37172c613 api/t/network: ValidateIPAM: ignore v6 subnet when IPv6 is disabled c59e93a67b Revert "daemon: automatically set network EnableIPv6 if needed" 83af50aee3 libnet: boltdb: inline getDBhandle() 4d7c11c208 libnet: boltdb: remove PersistConnection 8070a9aa66 libnet: drop TestMultipleControllersWithSameStore 82dda18898 tests: add plugin install test w/ digest dd20bf4862 libcontainerd/supervisor: fix data race 0c3b8ccda7 api: Document `version` in `/build` 2cc627932a Add internal n/w bridge to firewalld docker zone 8c64b85fb9 No inspect 'Config.MacAddress' unless configured. dae33031e0 Only restore a configured MAC addr on restart. a2026ee442 ci: update to docker/bake-action@v4 5a3c463a37 ci: update to codecov/codecov-action@v4 9babc02283 ci: update to actions/download-artifact@v4 and actions/upload-artifact@v4 a83557d747 ci: update to actions/cache@v3 2200c0137f libnetwork/datastore: don't parse file path d21d0884ae libnetwork: share a single datastore with drivers 835cdcac95 update containerd binary to v1.7.13 f4a93b6993 vendor: github.com/moby/buildkit v0.12.5 b20dccba5e vendor: github.com/opencontainers/runc v1.1.12 44bf407d4d update runc binary to v1.1.12 ecb217cf69 hack/make.ps1: Fix go list pattern 3a8191225a gha: update to crazy-max/ghaction-github-runtime@v3 08251978a8 gha: update to docker/login-action@v3 5d396e0533 gha: update to docker/setup-qemu-action@v3 4a1839ef1d gha: update to docker/bake-action@v4 b7fd571b0a gha: update to docker/setup-buildx-action@v3 00a2626b56 gha: update to docker/metadata-action@v5 e27a785f43 gha: update to actions/setup-go@v5 fb53ee6ba3 gha: update to actions/github-script@v7 0ffddc6bb8 gha: update to actions/checkout@v4 987fe37ed1 d/logger/journald: quit waiting when logger closes d53b7d7e46 d/logger/journald: sync logger on close in tests 39c5c16521 d/logger/loggertest: improve TestConcurrent 5792bf7ab3 d/logger/journald: log journal-remote cmd output 982e777d49 d/logger/journald: fix data race in test harness ca40ac030c vendor: google.golang.org/grpc v1.59.0 0818a476e5 vendor: github.com/go-logr/logr v1.3.0 a0b53f6fd2 vendor: golang.org/x/net v0.18.0 2ddec74d59 Remove unused params from etchosts.Build() 5e13f54f57 c8d/save: Handle digested reference same as ID d131f00fff image/save: Fix untagged images not present in index.json 21136865ac libnet: remove arg `options` from (*Endpoint).Leave() a8e8a4cdad libn/d/overlay: drop miss flags from peerAddOp 6ee58c2d29 libnetwork/d/overlay: drop miss flags from peerAdd 905477c8ae logger/journald: drop errDrainDone sentinel d70fe8803c logger/journald: wait no longer than the deadline e94ec8068d logger/journald: use deadline for drain timeout 71bfffdad1 l/journald: make tests compatible with systemd 255 931568032a daemon/logger/loggertest: expand log-follow tests 388ba9a69c Dockerfile: update docker compose to v2.24.3 3eb1527fdb Dockerfile: update dev-shell version of the cli to v25.0.1 7f94acb6ab docs: remove dead links from api verison history 5c2eda6f71 vendor swarmkit v2.0.0-20240125134710-dcda100a8261 96d461d27e builder/windows: Don't set ArgsEscaped for RUN cache probe 877ebbe038 image/cache: Check image platform 96ac22768a image/cache: Restrict cache candidates to locally built images c6156dc51b daemon/imageStore: Mark images built locally 537348763f image/cache: Compare all config fields bd4ff31775 add more //go:build directives to prevent downgrading to go1.16 language e245fb76de internal/sliceutil: add utilities to map values 3147a013fb libnet/ds: remove unused param `key` from List f7ef0e9fc7 libnet/ds: remove unused param `key` from GetObject 3a617e5463 c8d: Use a specific containerd namespace when userns are remapped f7e2357745 image: remove deprecated IDFromDigest 13f46948dd api/types: remove deprecated container-types 4b09bc2145 api/types: remove deprecated service-types 49637d0206 api/types: remove deprecated image-types eccb1a3eb8 api/types: remove deprecated checkpoint-types 0b1921649f api/types: remove deprecated system info types and functions 6f44138269 libnetwork: fix tiny grammar mistake on design.md 9a41cc58d9 libnetwork: fix typo in iptables.go ac2a028dcc api/types: move image options to api/types/image 80c44b4b2e daemon: rename: don't reload endpoint from datastore 250886741b volume/local: Fix cifs url containing spaces f4beb130b0 volume/local: Add tests for parsing nfs/cifs mounts df43311f3d volume/local: Break early if `addr` was specified 9f37672ca8 daemon: only add short cid to aliases for custom networks c25773ecbf cmd/dockerd: newRouterOptions: pass cluster as argument, and slight cleanup 00c9785e2e fix "host-gateway-ip" label not set for builder workers 0d51cf9db8 volume/local: Make host resolution backwards compatible 05d952b246 Dockerfile: update docker compose to v2.24.2 20bd690844 integration-cli: simplify test-file creation 34668a5945 pkg/archive: fixe some unclosed file-handles in tests 1090aaaedd libnetwork: fix some unclosed file-handles in tests c482383458 fix some leaking mounts in tests 43bf65c174 pkg/system: return even richer xattr errors a3a42c459e api/types/image: move GetImageOpts to api/types/backend cd53b7380c Remove generated MAC addresses on restart. fb19f1fc20 c8d/snapshot: Create any platform if not specified 6100190e5c daemon/cluster/executer: Add missing `StartInterval` 17fd6562bf image/save: Fix layers order in OCI manifest 4979605212 image/save: Change layers type to DiffID fcc651972e daemon: return an InvalidParameter error when ep settings are wrong a0466ca8e1 integration-cli: TestInspectAPIMultipleNetworks: use current version 13a384a6fa integration-cli: TestInspectAPIBridgeNetworkSettings121: use current version 52e3fff828 integration-cli: TestPutContainerArchiveErrSymlinkInVolumeToReadOnlyRootfs: use current API 521123944a docs/api: remove version matrices from swagger files d54be2ee6d docs: remove documentation for deprecated API versions < v1.23 64a6cc3afd integration/build: improve some asserts, and add asserts for unhandled errs a88cd68d3e integration/images: improve some asserts, and add asserts for unhandled errs a404017a86 vendor: golang.org/x/tools v0.14.0 41a2aa2ee2 vendor: golang.org/x/oauth2 v0.11.0 2799417da1 vendor: golang.org/x/mod v0.13.0, golang.org/x/tools v0.13.0 407ad89ff0 vendor: golang.org/x/sync v0.5.0 94b4765363 pkg/platforms: internalize in daemon/containerd 0a9bc3b507 libnetwork: Sandbox.ResolveName: refactor ordering of endpoints 058b30023f libnetwork: loosen container IPAM validation 844ca49743 pkg/containerfs: remove deprecated ResolveScopedPath 2767d9ba05 pkg/homedir: remove deprecated Key() and GetShortcutString() f16a2179a6 pkg/system: remove deprecated ErrNotSupportedOperatingSystem, IsOSSupported e2086b941f remove deprecated pkg/loopback (utility package for devicemapper) f07c45e4f2 daemon: remove --oom-score-adjust flag 307fe9c716 Dockerfile: update docker compose to v2.24.1 dfced4b557 Dockerfile: update dev-shell version of the cli to v25.0.0 c655b7dc78 Assert temp output directory is not an empty string a8f7c5ee48 Detect IPv6 support in containers. 0046b16d87 daemon: set libnetwork sandbox key w/o OCI hook 5bbcc41c20 volumes/subpath: Plumb context cb1af229f2 daemon/populateVolumes: Support volume subpath 349a52b279 container: Change comment into debug log 42afac91d7 internal/safepath: Add windows implementation 5841ed4e5e internal/safepath: Adapt k8s openat2 fallback 56bb143a4d internal/safepath: Import k8s safeopen function 3784316d46 internal/safepath: Handle EINTR in unix syscalls 9a0cde66ba internal/safepath: Add linux implementation bfb810445c volumes: Implement subpath mount f2e1105056 Introduce a helper that collects cleanup functions f07387466a daemon/oci: Extract side effects from withMounts 9c8752505f volume/mounts: Rename errors in defer block 5bcbedb7ee API: bump version to 1.45 35789fce99 daemon.images: ImageService.getImage: use named fields in struct literals 7c1914411f daemon/images: ImageService.manifestMatchesPlatform: optimize logger 5581efe7cd rename "ociimage" var to be proper camelCase 66cf6e3a7a rename "image" vars to prevent conflicts with imports c72e458a72 Fix libnetwork/osl test TestAddRemoveInterface 768146b1b0 Fix isGitURL regular expression 585d74bad1 pkg/ioutils: Make subsequent Close attempts noop fbdc02534a De-flake TestSwarmClusterRotateUnlockKey... again... maybe? Bumping docker-cli to version v26.1.4-2-g6eb67bf57, which comprises the following commits: 5bab750c2 cli/command: more go1.19 ("predeclared any") e8bc27d4c vendor: github.com/docker/docker de5c9cf0b96e (v26.1.4-dev) 2acb9c2e8 vendor: github.com/containerd/containerd v1.7.18 230d4d0ba vendor: github.com/containerd/containerd v1.7.17 6d47c06b0 vendor: tags.cncf.io/container-device-interface v0.7.2 a6d757c0e vendor: github.com/Microsoft/hcsshim v0.11.5 c463d968f vendor: github.com/opencontainers/image-spec v1.1.0 0576b3dad update to go1.21.11 60b13f1f8 Dockerfile: update ALPINE_VERSION to 3.20 b600054c5 migrate to new github.com/containerd/platforms package dafe63b08 gha: update to actions/upload-artifact@v4 079107e1b [26.1] vendor: github.com/docker/docker v26.1.3 14d7485d9 vendor: github.com/Microsoft/go-winio v0.6.2 50bb59277 docs: tidy up CDI docs c4767b314 docs: fix json syntax error 258e27438 context list: temporarily add ContextType to JSON output 29cd8591e cli/command/context: list: add test for JSON output e23a63eb4 cli/command/context: test inspecting context with custom metadata 1e52a86d4 cli/command/context: add test-utility to create multiple contexts e382a5f22 plugins/hooks: Don't show empty hooks 26e9ff49c vendor: github.com/docker/docker v26.1.3-dev (8e96db1c328d) 326c7138b OTel: implement missing MeterProvider `ForceFlush` ee359a394 OTel: add `command.time` metric to plugin commands 669108501 Use funcs on DockerCli to return Meter/TracerProviders, not initialize them. Initialize them during DockerCli struct init 81b482ea5 docs: clarify that --data-path-addr doesn't restrict access e64914c89 vendor: github.com/docker/docker v26.1.2-dev (ef1912d8b6ae) c1d70d1fb update to go1.21.10 4add46d68 Add e2e tests for run w/ bad entrypoint ccea7d8a3 Fix hang when container fails to start 1c6a8ecf2 cli-plugins: PluginRunCommand: use cmd.Environ instead of os.Environ 6d1c387af vendor: github.com/docker/docker ac2de55998d4 (v26.1.1) 840016ea0 waitExitOrRemoved: Handle context cancellation aec1d364b vendor: github.com/docker/docker v26.1.0-dev (c8af8ebe4a89) 43cb06e1a hooks: pass command execution error to plugins 9d8320de9 hooks: include full configured command 6ad512068 vendor: github.com/docker/docker v26.1.0-dev (ee8b788538ea) c3243a8cc ci/validate-pr: Use `::error::` command to print errors f92fcdef1 github/ci: Check if backport is opened against the expected branch 745704d7b ci: Require changelog description 762a85a10 Warn about deprecation of windows-dns-proxy flag 501175905 hooks: set expected environment when executing d6796c002 Fix OTLP env var overriding c449c1a49 plugins/hooks: run hooks when exit code != 0 287f482e3 Feature option 'windows-dns-proxy' 867061b00 plugins/templates: break on newlines when printing hooks 718203d50 cli-bin/windows: Add .exe extension 5515b8651 vendor: github.com/docker/docker v26.0.1-0.20240410103514-f9dfd139ec0d+incompatible (master) c1053bf9d vendor: github.com/moby/swarmkit/v2 v2.0.0-20240227173239-911c97650f2e 8a3a7b945 vendor: github.com/containerd/containerd v1.7.15 458580984 docs: add systempaths=unconfined security-opt 5fcbbde4b vendor: golang.org/x/net v0.23.0 4745b957d vendor: golang.org/x/net v0.22.0, golang.org/x/crypto v0.21.0 c7a50ebb9 vendor: golang.org/x/term v0.18.0 9a2133f2d vendor: golang.org/x/sys v0.18.0 0a5bd6c75 update to go1.21.9 cefcba987 otel: capture exit code as int64 ee1b2836a otel: capture whether process was invoked from a terminal 8f45f1495 command: include default otel error handler for the cli 910d5d024 chore: remove backticks and resolve linting issues 2a3b6c03f cli: add go:build tag to the docker telemetry efd82e1e3 Initial otel impl using our utils b6e2eca4b Enable overriding of the otel exporter otlp endpoint via env var for testing purposes 160f65d9d Added some telemetry utils 9a1b0f8bb CONTRIBUTING.md: update Slack link 7c722c08d feat: standardize error for prompt 7ea10d5ce refactor: prompt tests 89db01ef9 cli: add otel sdk tracing and metric providers to the core cli c5016c6d5 cli-plugins: Introduce support for hooks 509123f93 plugin: drop explicit unlink fdb48a066 vendor: github.com/docker/docker v26.0.0 542e82cae plugin: update/improve process lifecycle documentation d68cc0e8d plugin: closer-based plugin notification socket d2ea5adfe fix: flaky prompt termination on reader close test ccfd0b2cc test/ Improve test coverage in volume.go 69575f617 vendor: github.com/docker/docker 8b79278316b5 (master) b70a26dea vendor: github.com/docker/docker 330d777c53fb (v26.0.0-rc3-dev) f96d8e78c docs/deprecated: update status of short cid alias deprecation b120b96ac ci: set DISABLE_WARN_OUTSIDE_CONTAINER=1 for CodeQL action 24186d800 ci: fix CodeQL 2.16.4 autobuild 48b5efee0 Dockerfile: update mvdan/gofumpt to v0.6.0 38c3ff67a vendor: github.com/docker/docker 70e46f2c7c2d (v26.0.0-rc3-dev) f8fc5b6bc scripts/vendor: remove -compat=1.19 a4a79d75c vendor: google.golang.org/protobuf v1.33.0, github.com/golang/protobuf v1.5.4 115c8d56e vendor: github.com/containerd/containerd v1.7.14 939283181 builder: correct the command path for docker build dc4163fb1 docs/deprecated: Deprecate Container fields in image inspect 3da26a5e7 docs: add description and link for --userns flag 4bb2abaa5 docs: typo fixes and other corrections 90c33dbfd deprecate legacy image formats 800a51d6c Set CGO_ENABLED=1 on riscv64 9349f58b8 docs: clarify what the --privileged flag does adb018084 Dockerfile: update to xx 1.4.0 46afd26c4 cli/command: deprecate EventHandler and InitEventHandler 5c54f75f2 cli/command/container: use ping-result for OS-version 617377c04 Describe an 'internal' network. 860b4f3a7 'docker daemon' flags refer to the default bridge 645b97352 vendor: github.com/docker/docker v26.0.0-rc2 3cf2fe0ff docs: deprecate TCP connection without TLS a8379092a vendor: github.com/docker/docker f4c696eef17d62a42 ab9d56057 bake: Add `windows/arm64` target to bin-image-cross 3b7747794 update to go1.21.8 10bf91a02 fix: cli prompt termination exit code 238d659ff Add support for --detach/-d flag in stack rm b086d7276 Add support for --detach flag in stack deploy 5e8023239 vendor: github.com/docker/docker v26.0.0-rc1 d51ba4179 docs: prefer -it over -ti a5b82e9f8 docs: fix typo in tty example abe78b79d chore: `docker help` should not show plugin vendor and version 5786f2068 plugins: fix encoding for OTEL env var passed to plugin 85dcacd78 plugins: set OTEL_RESOURCE_ATTRIBUTES when invoking a plugin acc675014 vendor: github.com/docker/docker c70d7905fbd9 (v26.0.0-dev) 79541b7e2 vendor: google.golang.org/grpc v1.59.0 096ced089 vendor: OTEL v0.46.1 / v1.21.0 f3c77df31 vendor: github.com/prometheus/client_golang v1.17.0 1b42d04d6 vendor: github.com/go-logr/logr v1.3.0 f5a29ff8e vendor: github.com/containerd/containerd v1.7.13 2663c1057 ci: set codecov token 48a670f26 docs: fix invalid daemon.json examples f2e98f9a9 docs: regenerate markdown caf72655f docs: update url scheme for reference docs e24404494 deps: update cli-docs-tool version (v0.7.0) 20b9d489e update to go1.21.7 c514003e6 Fixed typo in bash completion functions ff5b0d18f man/docker-build.1: typo in parameter variable: CID => IID 3b5e81424 cli-plugins/socket: remove use of deprecated distribution uuid package 69ed6588a Cleanup of dockerfiles, compose files and env vars 6b67b9549 Update gha runners and engines used in e2e tests edc09e603 mount: Add `volume-subpath` option 9831fea4d testenv: Add DaemonAPIVersion helper 8bae66271 cli/connhelper/commandconn: inline variables df6220d43 vendor: github.com/docker/docker 86b86412a1b7 (v26.0-dev) 30dd7c131 Minor test fixes necessary for eventually upgrading ci runners and engine version 2c214241f Avoid keeping @docker_cli_[UUID] files c986d09bc docker stack: allow '=' separator in extra_hosts 324309b08 vendor: github.com/docker/docker 9e075f3808a5 (master, v26.0.0-dev) 93ad9fbdf vendor: github.com/moby/swarmkit/v2 v2.0.0-20240125134710-dcda100a8261 69e0f53a0 Uniform volume prune output msg with other prune commands 809eb8cde images: print hint when invoking "docker images" with ambiguous argument b158181a1 cli/command/images: runImages: use proper camel-case for dockerCLI 1328bb338 cli/command/images: runImages: inline intermediate var b123ce652 build(deps): Bump codecov/codecov-action from 3 to 4 1587b70ee Remove dummy circleci config cfa9fef77 tests: add plugin-socket-compatibility tests dfdff11a2 cli/command: don't use pflags.XXXVarP for flags without shorthand 690f63e6d cli/command/container: minor cleanup in attach 53e2e54c2 Dockerfile: update docker compose to v2.24.3 1c4d6d85d scripts: don't hardcode architecture in e2e script 4fa2fe9b9 Replace deprecated types.Image* usage 68dac842a vendor: github.com/docker/docker 43ffb1ee9d5a (v26.0.0-dev) 4b1ed1f44 vendor: github.com/docker/docker v25.0.1 d9294f06b info: remove printSecurityOptionsWarnings, printServerWarnings ec0a62436 docs: update host-gateway-ip to use daemon.json instead of cli flag 469bfc05e tests: add tests for `cli-plugins/socket` 091af560c Dockerfile: update docker compose to v2.24.2 2402dac81 cli/command/container: remove deprecated NewStartOptions b43377a38 cli/command: remove deprecated DockerCliOption, InitializeOpt a71d39bca info: remove printServerWarningsLegacy 8cd3b0042 socket: return from loop after EOF 337dd82d8 vendor: github.com/docker/docker v25.0.0 d633890f9 docs: move base command to docker.md aff4649cb docs: fix broken links to alias pages 852d198bb docs: add documentation for CDI 1f9573bb0 Add Linode docker volume plugin Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-07-10 15:59:26 +00:00
Bruce Ashfield	59a433c1f2	podman-tui: update to v1.1.0 ... Bumping podman-tui to version v0.9.0-336-g6bcf5993, which comprises the following commits: 6bcf5993 Bump to v1.1.0 d4bee0e9 Bump github.com/containers/podman to v5.1.0 4bd183c1 Bump github.com/BurntSushi/toml from 1.3.2 to 1.4.0 e31f2ee6 Bump github.com/rs/zerolog from 1.32.0 to 1.33.0 b404db37 Bump to v1.1.0-dev 35fb1650 Bump to v1.0.1 834150f0 Bump github.com/containers/podman/v5 from 5.0.2 to 5.0.3 372cedf6 Bump golang.org/x/crypto from 0.22.0 to 0.23.0 f9752fa9 Bump golang.org/x/net from 0.22.0 to 0.23.0 4da6d71f Bump github.com/containers/podman/v5 from 5.0.1 to 5.0.2 a41cf8b3 Bump github.com/containers/common from 0.58.1 to 0.58.2 2aad7a8e Bump golang.org/x/crypto from 0.21.0 to 0.22.0 9fa703c8 Bump github.com/distribution/reference from 0.5.0 to 0.6.0 46ed43e6 Bump github.com/containers/podman/v5 from 5.0.0 to 5.0.1 775d389e Bump github.com/containers/common from 0.58.0 to 0.58.1 ac74c549 Bump github.com/containers/buildah from 1.35.1 to 1.35.2 c3440609 Bump to v1.1.0-dev 47c47d46 Bump to v1.0.0 45253e1e Bump github.com/docker/docker f39102a5 podman v5 b5297884 Bump to v0.19.0-dev 64ea1b82 Bump to v0.18.0 bee2b067 README.md update 445fc4d5 Bump google.golang.org/protobuf from 1.31.0 to 1.33.0 da408b5d Bump github.com/go-jose/go-jose/v3 from 3.0.1 to 3.0.3 b138f049 Bump gopkg.in/go-jose/go-jose.v2 from 2.6.1 to 2.6.3 ff1f99ca install.md update - ArchLinux (AUR) 52a56ac0 install.md update - Alpine Linux, AlmaLinux and Rocky Linux 34bd6420 golangci-lint update 1.56.2 2afefdd3 Bump github.com/gdamore/tcell/v2 from 2.7.1 to 2.7.4 aba7af2c Bump golang.org/x/crypto from 0.19.0 to 0.21.0 7c81b05b Vagrantfile update (fedora 39) feafd1a9 ghaction update 26620476 Bump tim-actions/get-pr-commits from 1.3.0 to 1.3.1 b793ec2c Bump codecov/codecov-action from 3 to 4 61b81c38 unit test 31fa7523 unit tests 0ec32f51 resolves #438 Substitute env variables in config file 8eb6b865 Bump github.com/gdamore/tcell/v2 from 2.7.0 to 2.7.1 b3cfedb2 README update 341f1b2c unit test coverage 75c926a5 podman-tui installation via homebrew for Mac 6d5c1a0a Bump github.com/containers/podman/v4 from 4.9.2 to 4.9.3 6023f58d Bump golang.org/x/crypto from 0.18.0 to 0.19.0 b8b3cc3d Bump pre-commit/action from 3.0.0 to 3.0.1 1b393f33 Bump github.com/rs/zerolog from 1.31.0 to 1.32.0 20985d53 Bump to v0.18.0-dev b4350927 Bump to v0.17.0 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-07-10 15:59:26 +00:00
Bruce Ashfield	c3c9c8a01f	podman: update to 5.1.1 ... Bumping libpod to version v5.1.1-2-gef359624cb, which comprises the following commits: 7a1f39dc4d Bump to v5.1.2-dev bda6eb03dc Bump to v5.1.1 cd0a0d7d6d Update release notes for v5.1.1 aa031ad1ba libpod: do not leak systemd hc startup unit timer d79b94c82b Check AppleHypervisor before accessing it a9377a8ec3 [v5.1] Bump c/common to v0.59.1 4dc75c67f9 [v5.1] pkg/rootless: set _CONTAINERS_USERNS_CONFIGURED ... correctly d5cc37f78a test/e2e: use local skopeo not image 2906582149 [v5.1] Mac PM test: Require pre-installed rosetta 7ad138c3db Fix typo in release notes 515e44be74 Bump to v5.1.1-dev 4e9486dbc6 Bump to v5.1.0 2f343ce778 Release notes for v5.1 8ba3626c94 Add configuration for podmansh 8eff425410 [v5.1] Bump c/* for vendor dance 178600e531 test/e2e: fix new error message 7df3715430 Add Hyper-V option in windows installer 6ad6132987 Only stop chowning volumes once they're not empty 65d26b0cde remote API: restore v4 payload in container inspect 3949bf8af1 Fix windows action trigger acf137b342 Update podman network docs 7207461196 Add Rosetta support for Apple Silicon mac d1a86a4b61 fix incorrect host.containers.internal entry for rootless bridge mode c837ebc44e vendor latest c/common main 97251d0ee6 Bump to v5.1.0-dev 6a8f2e7f29 Bump to v5.1.0-rc1 bd4e4a1d8f Add release notes for v5.1.0 (preliminary) c46884aa93 `podman events`: check for an error after we finish reading events 277312d282 Fix updating connection when SSH port conflict happens 2a609b0f74 rootless: fix reexec to use /proc/self/exe d4e40fedaf ExitWithError() - enforce required exit status & stderr 82f9811a8d ExitWithError() - a few that I missed 44825ab428 [skip-ci] Packit: use only one value for `packages` key for `trigger: commit` copr builds 92338642d1 Revert "Temporarily disable rootless debian e2e testing" 5901bf52b9 CI tests: enforce TMPDIR on tmpfs 6e655c7fd2 use new CI images with tmpfs /tmp e771618531 run e2e test on tmpfs 3122549d6b Update module github.com/crc-org/crc/v2 to v2.36.0 6830d0e3c8 Address CVE-2024-3727 07ed2ddb93 [CI:DOCS] Use checkout@v4 in GH Actions 755fc021f9 ExitWithError() - rmi_test 5e240ab1f5 ExitWithError() - more r files 0c22de7811 ExitWithError() - s files 03f036b515 ExitWithError() - more run_xxx tests 3b1c735b67 Fix podman-remote support for `podman farm build` 71473976ac [CI:DOCS] Trigger windows installer action properly 8433a01aa2 Revert "container stop: kill conmon" 3fa8e98a31 Ensure that containers do not get stuck in stopping 279e2d0cb2 [CI:DOCS] Improvements to make validatepr 9e43e586c9 ExitWithError() - rest of the p files dfbb6ea9ff [CI:DOCS] Update dependency golangci/golangci-lint to v1.58.1 a2cf948f90 Graceful shutdown during podman kube down 521bbab864 test/system: fix broken "podman volume globs" test 6d1098f823 Quadlet/Container: Add GroupAdd option 7bfac4f349 Don't panic if a runtime was configured without paths d4c7ca39fd update c/{buildah,common,image,storage} to latest main 6bdebea8ae update golangci-lint to 1.58 ee5153c545 machine: Add LibKrun provider detection 641cd7c5a2 ExitWithError() - continue tightening b59edad58b fix(deps): update module google.golang.org/protobuf to v1.34.1 303d0b398e test: improve test for powercap presence 9865511d00 fix(deps): update module go.etcd.io/bbolt to v1.3.10 be5cbc443e fix(deps): update module golang.org/x/tools to v0.21.0 36c05b5c6a [skip-ci] RPM: `bats` required only on Fedora 42cc712485 fix(deps): update module golang.org/x/exp to v0.0.0-20240506185415-9bf2ced13842 e3b0e58d2e gpdate and remove parameter settings in `.golangci.yml` 7d12ae0973 ExitWithError() - play_kube_test.go 02b8fd7156 Temporarily disable rootless debian e2e testing 7745854155 fix(deps): update module golang.org/x/crypto to v0.23.0 b520e909e0 CI Docs: Clarify passthrough_envars() comments 87747ca820 Skip machine tests if they don't need to be run e8ef36e26e Update CI VMs to F40, F39, D13 83ee16b9ba ExitWithError() - v files 22eff26916 Update module golang.org/x/term to v0.20.0 431cbffab6 machine: Add provider detection API 419efb9eb5 util: specify a not empty pause dir for root too 1d1dba3843 Add missing option 'healthy' to output of `podman run --help` b09f764ef5 [CI:DOCS] Add info on the quay.io images to the README.md 4fd84190b8 Add a random suffix to healthcheck unit names 7a43c2ed1b test/e2e: remove toolbox image 46f247d880 Also substitute $HOME in runlabel with user's homedir 7f6108233f Update module github.com/cyphar/filepath-securejoin to v0.2.5 275c068df7 ExitWithError() - pod_xxx tests c378f2d03a ExitWithError() -- run_test.go f8115d203c Update module golang.org/x/exp to v0.0.0-20240416160154-fe59bbe5cc7f a96326f608 Update module github.com/shirou/gopsutil/v3 to v3.24.4 61b09333a8 Update module github.com/docker/docker to v26.1.1+incompatible 8942e2dbda GHA: Attempt fix exceeded a secondary rate limit 1bc6f16bd0 vendor ginkgo 2.17.2 into test/tools a140c74ba4 Fix machine volumes with long path and paths with dashes d1f8933a93 Update module google.golang.org/protobuf to v1.34.0 d886d87edf Update module github.com/crc-org/crc/v2 to v2.35.0 c17f7af6b4 Update module github.com/onsi/gomega to v1.33.1 88b80c1df6 test/e2e: podman unshare image mount fix tmpdir leak 0faded53b8 test/e2e: do not leak /tmp/private_file 88a625d319 test/e2e: "persistentVolumeClaim with source" do not leak file eaf60c7fe7 e2e tests: use /var/tmp, not $TMPDIR, as workdirs 60b5488308 Update dependency pytest to v8.1.2 cd6ff71cc3 Remove unncessary lines at the end of specfile summary e412eff33f Clean machine pull cache d2c1de5993 Add krun support to podman machine ca23774b5b Use custom image for make validatepr 9a0ed6929a test/e2e: force systemd cgroup manager d1bfdc7900 e2e and bindings tests: fix $PATH setup 5040c6e390 Makefile: remove useless HACK variable in e2e test 537c21a49a test/e2e: fix volumes and suid/dev/exec options 31034a1b6f test/e2e: volumes and suid/dev/exec options works remote cc6e999f2a test/e2e: fix limits test c2d7b5415f Update module github.com/rootless-containers/rootlesskit/v2 to v2.1.0 3c1c6a44ef Correct option name `ip` -> `ip6` 30e2c923d6 Add the ability to automount images as volumes via play 693ae0ebc6 Add support for image volume subpaths 5f57571d65 Bump Buildah to latest main e8a9c58125 Update Makefile to Go 1.22 for in-container e4c9910aec ExitWithError() - yet more low-hanging fruit 80c3a22440 ExitWithError() - more low-hanging fruit 4da5c5d3aa ExitWithError() - low-hanging fruit c681df35c0 chore: fix function names in comment 3f78c39c50 Remove redundant Prerequisite before build section fa1fd1646e Remove PKG_CONFIG_PATH 3b28cdfb20 Add installation instructions for openSUSE 83dbbc3a51 Replace golang.org/x/exp/slices with slices from std c04d03ef8c Update to go 1.21 c31728ca57 fix(deps): update module github.com/docker/docker to v26.1.0+incompatible c22eefb939 [CI:DOCS] Fix artifact action 333682132a [skip-ci] Packit/rpm: remove el8 jobs and spec conditionals ac04cb4ac5 e2e tests: stop littering 27174ff3fb [CI:DOCS] format podman-pull example as code e7f0c1947e [CI:DOCS] Build & upload release artifacts with GitHub Actions 2681ab23d1 libpod: getHealthCheckLog() remove unessesary check 2ae6d0d4dd add containers.conf healthcheck_events support 33def2eea7 vendor latest c/common b026e1d635 libpod: make healthcheck events more efficient ce9054ff45 libpod: wrap store setup error message e83b2cce82 [skip-ci] Packit: enable CentOS 10 Stream build jobs e58972cd1d pkg/systemd: use fileutils.(Le|E)xists acc78af0c3 pkg/bindings: use fileutils.(Le|E)xists 94c699192f pkg/util: use fileutils.(Le|E)xists 0e8d1ad811 pkg/trust: use fileutils.(Le|E)xists 1991990d5a pkg/specgen: use fileutils.(Le|E)xists aab06ac445 pkg/rootless: use fileutils.(Le|E)xists af24326133 pkg/machine: use fileutils.(Le|E)xists cbffddc72e pkg/domain: use fileutils.(Le|E)xists bd00c6fef9 pkg/api: use fileutils.(Le|E)xists 5656ad40b1 libpod: use fileutils.(Le|E)xists 90304dd507 cmd: use fileutils.(Le|E)xists 598fc516a6 vendor: update containers/{buildah,common,image,storage} a169c4ec5c fix(deps): update module github.com/docker/docker to v26.0.2+incompatible [security] dc68a47d7a fix podman-pod-restart.1.md typo eacc3f07e5 [skip-ci] Packit: switch to EPEL instead of centos-stream+epel-next af78b69208 fix(deps): update module github.com/onsi/gomega to v1.33.0 422eb0e58a Add more annnotation information to podman kupe play man page b1736c472a test/compose: remove compose v1 code 2c61ee9a31 CI: remove compose v1 tests 713c026b4d [CI:DOCS] Fix windows installer action d6b68ecfad fix(deps): update module tags.cncf.io/container-device-interface to v0.7.2 7b3456b5d9 add `list` as an alias to list networks 482ef7bfcf Add support for updating restart policy ddea30e40e Add Compat API for Update be3f075402 Make `podman update` changes persistent 7ef0290a1d Emergency fix (well, skip) for failing bud tests 7c4f2c79ea fix swagger doc for manifest create d4ecae59bd [CI:DOCS] options/network: fix markdown lists 714920512e Makefile: do not hardcode `GOOS` in `podman-remote-static` target 3dc69a01e3 chore(deps): update module golang.org/x/crypto to v0.17.0 [security] 0e291ce760 chore(deps): update dependency setuptools to ~=69.5.0 1600cfffa5 Fix some comments e8055904e1 swagger fix infinitive recursion on some types 5e9725983d install swagger from source f95b9d4e37 Revert "Swap out javascript engine" 5e68fbd132 podman exec CID without command should exit 125 df69b36ee5 (minor) prefetch systemd image before use 49729c82a9 Update go-swagger version 1b6e8d73aa Swap out javascript engine 3418405351 fix(deps): update module github.com/docker/docker to v26.0.1+incompatible 08a49389c8 Add os, arch, and ismanifest to libpod image list e773ed42b3 [CI:DOCS]Initial PR validation 4a07131f83 fix(deps): update github.com/containers/gvisor-tap-vsock digest to d744d71 67c6d7ec80 vendor ginkgo 2.17.1 into test/tools 999d6c0750 fix "concurrent map writes" in network ls compat endpoint 26f866b5df chore(deps): update dependency pytest to v8 2d9159821a e2e: redefine ExitWithError() to require exit code 8de92ec912 docs: fix missleading run/create --expose description 0bedf7f1d2 podman ps: show exposed ports under PORTS as well aee1e1408d rootless: drop function ReadMappingsProc 9d18a48803 fix(deps): update module github.com/vbauerster/mpb/v8 to v8.7.3 0313693d48 New CI VMs, to give us pasta 2024-04-05 394820c4f0 Add big warning to GHA workflow 7f0268a2e7 GHA: Fix intermittent workflow error 266801bf2d fix(deps): update module golang.org/x/tools to v0.20.0 847ca1f9ea e2e tests: remove requirement for fuse-overlayfs 36e4d512b3 docs: update Quadlet volume Options desc b8670a3834 fix(deps): update module golang.org/x/sync to v0.7.0 0b36126e92 Fix relabeling failures with Z/z volumes on Mac f8533c71c4 fix(deps): update module golang.org/x/net to v0.24.0 b9a8a2c61c Makefile: fix annoying errors in docs generation 59ee130048 chore: fix function names in comment a40cf3195a Bump tags.cncf.io/container-device-interface to v0.7.1 3f83164526 fix(deps): update module golang.org/x/crypto to v0.22.0 3560ccd5df Detect unhandled reboots and require user intervention fcf9327773 podman --runroot: remove 50 char length restriction 10995192f8 update github.com/rootless-containers/rootlesskit to v2 156ae500f2 Update module github.com/gorilla/schema to v1.3.0 beb4fd1b4a Update dependency requests-mock to ~=1.12.1 e8f26699df Update module github.com/crc-org/crc/v2 to v2.34.1 f2c365c6f6 rm --force work for more than one arg 71f6f50ee1 [CI:DOCS] Update kube docs 81d2ef889b fix(deps): update module github.com/shirou/gopsutil/v3 to v3.24.3 0f949d884c [CI:DOCS] Add GitHub action to update version on Podman.io ccb71f9ffa [CI:DOCS] Update dependency golangci/golangci-lint to v1.57.2 ff133a544d Windows: clean up temporary perl install 498445871c pkg/util: FindDeviceNodes() ignore ENOENT errors 549dbf8327 [CI:DOCS] build deps: make-validate needs docs a61ae8c0a9 test/system: add rootless-netns test for setup errors ce04fbc16a vendor latest c/common main 519a66c6a9 container: do not chown to dest target with U fbd6df92d4 [CI:DOCS] golangci-lint: update deprecated flags d27313ad10 systests: conditionalize slirp4netns tests e697631af9 CI: systests: instrument flaky tests d2143fac59 s3fs docs 7d68362cf5 test: do not skip tests under rootless d3927f9076 Add note about host networking to Kube PublishPort option 1a99d87746 Inject additional build tags from the environment d81319eb71 libpod: use original IDs if idmap is provided f3434298df Switch back to checking out the same branch the action script runs in f7b9168649 docs/podman-login: Give an example of writing the persistent path aab4674feb CI: Bump VMs to 2024-03-28 4c2a44ef9b [skip-ci] Update dawidd6/action-send-mail action to v3.12.0 fc18dbad70 fix(deps): update module github.com/openshift/imagebuilder to v1.2.7 ffb8b2dc36 Fix reference to deprecated types.Info c0e32e93c0 Use logformatter for podman_machine_windows_task d305e70af8 applehv: Print vfkit logs in --log-level debug 23bf357fc3 [CI:DOCS]Add Mario to reviewers list c8e1e0034a [CI:DOCS] Document CI-maintenance job addition 48b8d7f8be Add golang 1.21 update warning b56331cd2f Add rootless network command to `podman info` 80e2bc6966 libpod: don't warn about cgroupsv1 on FreeBSD c62c74970f hyperv: error if not admin 83671f95d8 Properly parse stderr when updating container status 492f0b7c5f [skip-ci] Packit: specify fedora-latest in propose-downstream 11415b3e74 Use built-in ssh impl for all non-pty operations 83fe867c14 Add support for annotations a6ffb5656f hyperv: fix machine rm -r f632663f26 [skip-ci] Packit: Enable CentOS Stream 10 update job 3c611c47e4 5.0 release note fix typo in cgroupv1 env var 3a9968ef81 fix remote build isolation on client side 17aa152459 chore: remove repetitive words b2d0b92db2 Dont save remote context in temp file but stream and extract 493179be45 fix remote build isolation when server runs as root 4740367330 util: use private propagation with bind 9a13b8f17d util: add some tests for ProcessOptions 50d764b0e6 util: refactor ProcessOptions into an internal function 49ab250cf9 util: rename files to snake case c03256e23c Add LoongArch support for libpod f2073ca397 fix(deps): update github.com/containers/common digest to bc5f97c 5e017a87a0 [CI:DOCS] Update dependency golangci/golangci-lint to v1.57.1 5fe1945e41 fix(deps): update module github.com/docker/docker to v25.0.5+incompatible [security] 77c4cb5721 fix(deps): update module github.com/onsi/gomega to v1.32.0 c66400f624 [CI:DOCS] Update dependency golangci/golangci-lint to v1.57.0 a872003a2a Update module github.com/cpuguy83/go-md2man/v2 to v2.0.4 b1fd03f9f5 Fix type-o 3f2b8bb314 Use correct extension in suite aa5c4879b4 minikube: instrument tests, to allow debugging failures 15b8bb72a8 libpod: restart always reconfigure the netns dc1795b4b2 use new c/common pasta2 setup logic to fix dns 2566ee2f38 utils: drop conversion float->string->float 816c7279e1 utils: do not generate duplicate range f16ab115ed logformatter: handle Windows logs 0e38815387 utils: add test for the new function cda3dc83d8 utils: move rootless code to a new function 079bfb085a CVE-2024-1753 fix for main 1141962e2a xref-helpmsgs-manpages: cross-check Commands.rst 23433ec7bd test/system: Add support for multipath routes in pasta networking tests 73a12b0c07 [skip-ci] rpm: use macro supported vendoring 7fbdd9e6e2 Adjust to the standard location of gvforwarder used in new images 7711833827 Makefile: add target `podman-remote-static` fdad9ab1ff Switch to 5.x WSL machine os stream using new automation 3a9eef4bee Cleanup build scratch dir if remote end disconnects while passing the context ee4b1efb24 bump main to 5.1.0-dev 3f068d1973 Use faster gzip for compression for 3x speedup for sending large contexts to remote e82d196269 pkg/machine: make checkExclusiveActiveVM race free b238303a40 pkg/machine/wsl: remove unused CheckExclusiveActiveVM() c9a5c4b943 pkg/machine: CheckExclusiveActiveVM should also check for starting 1dfd3d3d12 pkg/machine: refresh config after we hold lock d5e0ecc619 Update dependency setuptools to ~=69.2.0 60a3eb8491 [skip-ci] rpm: update containers-common dep on f40+ 2ff5716b7e fix invalid HTTP header values when hijacking a connection c6ae7fd145 Add doc to build podman on windows without MSYS 1901403eda Removing CRI-O related annotations 83e671a2c5 fix(deps): update module github.com/containers/ocicrypt to v1.1.10 d7fa0aa351 Pass the restart policy to the individual containers cb81da9bee kube play: always pull when both imagePullPolicy and tag are missing Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-07-10 15:59:26 +00:00
Bruce Ashfield	ea2a7de432	containerd: update to 2.0.0-rc.3 ... Bumping containerd to version v2.0.0-rc.3-19-g741c4bde5, which comprises the following commits: 531da9960 Reduce scope of permissions in stale workflow ed64e6503 core/mount: remove logrus import ea8265fb1 core/transfer/local: remove logrus import 75fd7a5a7 pkg/shim: remove logrus imports 38e2f0038 Adds a mutex to protect fallback host 587ee80f6 pkg/tracing: LogrusHook.Fire: micro-optimisation ccf793812 pkg/tracing: remove direct use of github.com/sirupsen/logrus 4203e2de8 pkg/tracing/plugin: rename var that collided with import e2e09b384 pkg/tracing: rename func that shadowed builtin, rm makeSpanName e69ad9442 build(deps): bump the k8s group across 1 directory with 4 updates 5b8dfbd11 Allow proxy plugins to have capabilities cc2cedae0 Revert "install-runc: pin Go to 1.21" 3c097352a update runc binary to v1.1.13 8c13ed1b8 Prepare v2.0.0-rc.3 release 86b8a8824 Remove pkg/seed 09d3e20d3 Allow running test in usernamespace 8bcffa944 KEP-3619: Fine grained SupplementalGroups control 87dd4309d vendor: github.com/containerd/platforms v0.2.1 939135ae3 CI: golangci-lint v1.59.1 df7f6ba5b ctr: return explicit errors for flags unsupported by transfer service 686a610ee build(deps): bump github.com/checkpoint-restore/checkpointctl 156458e54 build(deps): bump the golang-x group with 2 updates 08c1e12e9 CI: add back EL 8 149ca6880 Update hcsshim tag to 0.12.4 b1a23c495 Fail integration test early when a plugin load fails d23c4b8b5 Use unix and windows specific connection error checks 02b6c6939 Allow fallback across default ports 80ce8bd61 build(deps): bump github.com/containerd/containerd/api cde2527fc ctr: pull: Do not ignore labels when transfer service is used 1c123efb4 Update Go version to 1.22.4 e1e793e4a Update rockylinux vagrant build 5611fdd4a Transfer: Push: Enable to specify platforms 0e8cc9146 Transfer: Push: fix failure on pushing duplicated blobs 4123170a3 *: export RemoveVolatileOption for CRI image volumes 3e71ccafc Add type alias for event Envelope da1d9672f Enable imgcrypt in cri pull 9857afda4 Add vendor for github.com/containerd/imgcrypt 359d84351 Update api minimum go version to 1.21 2d73340c2 Explicitly set release latest to false ca59fb0b4 Cleanup shim manager configuration 9831a62d7 auth: add span to FetchToken helpers 58be88189 sandbox: do retry for wait to remote sandbox controller Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-07-10 15:59:26 +00:00
Bruce Ashfield	c138943fed	podman-compose: switch to main branch ... The upstream project has made the "interesting" decision to delete the stable branch and move to "main" for recent releases. So rather than being able to simply switch for our updates, we have to switch to main on all releases that had podman-compose recipes using the stable branch. Luckily, the commit hashes haven't changed, so we only have to modify the branch in the SRC_URI. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-07-10 14:43:11 +00:00
Marcus Flyckt	e8214becb9	podman: Use slirp4netns instead of pasta ... podman uses pasta as the default rootless network command since 5.0.0, but only slirp4netns is available when building for Yocto. This commit adds a containers.conf file setting slirp4netns as default rootless command if 'rootless' is set in PACKAGECONFIG Signed-off-by: Marcus Flyckt <mafl@kvaser.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-05-31 16:20:17 +00:00
Bruce Ashfield	f487ea4aa0	lxc: update to v6.0.0 ... Bumping lxc to version v6.0.0, which comprises the following commits: 3dee5fb88 Release LXC 6.0.0 17ac6f691 lxc.spec: Align SPDX license id 5fe2de84c Makefile: Align SPDX license id 97f93be72 meson: Align SPDX license id d4cd3741d COPYING: Clarify licensing of files without SPDX 8e67eb07c doc: Add SPDX headers and remove Author field cb94edf53 src/include: Add SPDX headers 7bc33ef6e src/tests: Add SPDX headers 007642c89 hooks: Add SPDX headers 1e9e66be3 lxc.spec: Clear default changelog 202d649d1 lxc.spec: Use SPDX 85abd4026 template: Use SPDX a074b3d27 config/yum: Use SPDX header 7ed43e5e9 COPYING: Remove whitespace 522721216 MAINTAINERS: Remove Dwight from the maintainer list 08bf8b9e2 lxc-checkconfig: Fix shellcheck 0f18db543 lxc-checkconfig: Show namespace limits f71b8e3f8 lxc-ls: list names with whitespaces in `--active`. 816b8973d lxc/tools: set default log_priority to ERROR 989ea3969 tools/lxc_autostart: don't fail when there are no containers dc4df2335 lxc/lxccontainer: specify file mode in open() call inside mod_rdep 630b46ed2 lxc/confile: do not print excess space before scale suffix for time.offset.boot 796f2ccb7 lxc/confile: do not print newline symbol in getter for lxc.time.offset.* dcc4fb929 tests/parse_config_file: fix some typos 6fea67429 tests/parse_config_file: add tests for lxc.time.offset.* ad8f55445 tree-wide: replace multiply_overflow with check_mul_overflow 4464cee19 lxccontainer: rework copy_file() 9d1aa932d lxccontainer: improve mod_rdep() 81c1bbf45 Revert "lxccontainer: fixes" 82fe01821 src/lxc/syscall_numbers.h: drop define -1 590a95d83 rexec: Avoid invalid free in rexec failure path f9978b179 README: Correct 'armvl7' to 'armv7l' 046b63cd2 unshare: simplify lookup_name 7452ee8ab lxc-unshare: fix an buffer overflow issue in lxc_unshare e88883445 lxc-net: Enable IPv6 by default d78ca00bc tests/meson: attempt to fix ossfuzz builds d18f993b3 github: master -> main 86799f554 meson: link with liblxc dynamically everywhere if possible b90fecfda network: use IN_LIBLXC 9eee450d2 storage_utils: move get_fssize to utils 6eb0a73e2 storage_utils: unhide and rename is_valid_storage_type to lxc_is_valid_storage_type 42eeffcb0 confile: unhide lxc_config_parse_arch() helper 9bb318881 conf: reorganize/split code to utils.c 863c59dc3 conf: reorganize/split code to idmap_utils.c b7591ad49 confile: unhide lxc_config_define*() helpers f14656ebf meson: introduce IN_LIBLXC preprocessor macro 672b2172d confile: move lxc_fill_elevated_privileges() to tools/lxc_attach 8f9733d75 tests: remove old and broken cgroup handling code from tests d51ea224e config: apparmor: add AppArmor profile for lxc-copy 627bb9460 tests: lxc-test-usernic: use iproute tool instead of brctl df0665b6d oci: resolve cross-filesystem blob caching failure ec85e5ca4 lxc-test-usernic: drop cgroup handling 27ec0b0f6 test-usernic: don't use ifconfig 44e845b3c Add x32 to the list of recognized architectures 07e3a516e lxc-download, lxc-local: preserve xattrs on unpack 9ac7c4895 tree-wide: use container_uses_namespace() in less trivial cases 64341ce7b tree-wide: use container_uses_namespace() helper 6b40e66c1 Fix error message. c8189ee2a Add verbose output in download template. 84cc3155a Align columns in lxc-download.in template 872db5424 build: add more options for customizing install df17ac417 Add loongarch64 support 112d5615e build(deps): bump actions/upload-artifact from 3 to 4 789457f1a config: try to create workdir if not exist 86f5c1226 lxc-local: Add --no-dev option to exclude /dev from the fstree f885a3c56 lxc-local: Re-organize code to use more functions 7c025072e lxc-local: Improve usage info faa38a197 lxc-local: Change LXC_CONFIG to LXC_METADATA to match args and be more clear d65fe1b27 Disable IPv6 link-local addresses for bridged veth 8cff8fa1a don't try to delete vlan 0 from veth 0e932812a conf: fix ephemeral copies abffab441 config/init: Drop upstart files 79a4a3cf8 doc: remove the warning mentionning upstart 7bf1695d0 hooks/ubuntu-cloud-prep: remove upstart handling fb73c18d2 meson: Remove support for upstart cc6819c69 reset root_nsuid_map and root_nsgid_map when idmaps is cleared a87d6fcc9 lxc/checkconfig: use multiline `echo` f3e01fa80 lxc/checkconfig: replace `echo -n` by printf ba4f810bc lxc/checkconfig: minor cosmetic change d52c345c8 lxc/checkconfig: avoid subshell (SC2235) f84f03d1d lxc/checkconfig: remove superfluous (..) around test command (SC2234) 74b9faa64 lxc/checkconfig: check exit code directly (SC2181) 5cc69e440 lxc/checkconfig: replace `! -z` by `-n` (SC2236) a4684eb11 lxc/checkconfig: add missing quotes to please shellcheck 8a611c0b2 lxc/checkconfig: remove some unneeded `echo -n` cb2574319 lxc/checkconfig: replace `type` by `command` 003efe6db lxc/checkconfig: replace `cat | grep` with `grep` adadfa372 lxc/lxccontainer: fix do_lxcapi_set_timeout retval c02367e59 containers in the FREEZING state also need to be unfreeze aca53bcf7 build(deps): bump actions/checkout from 3 to 4 84169158f lxccontainer.h: Move new fields to the end e2696df93 Remove references to LXD 7cec54455 Update console perms to 0600 3f45443fd Fix start api call to split quoted strings in execute or init command. fbc31691e github: Update for main branch 69e51b919 CONTRIBUTING: add a note on AI generated code 84cfe9772 get_hierarchy: dont WARN about no usable controller 64167f906 Add libarchive tar support for lxc download 213e2f68d github: Add DCO/target tests cf2b20209 explicitly convert *mainloop_handler to __u64 8575ffeb7 tests: fix parse_config_file seccomp test ca25f3bf6 src/tests: Fix container creation errors 539c39772 rename functions which clash with libsystemd's b670f0e75 commands: support timeout in LXC_CMD_GET_STATE 0fed82b26 lxccontainer: extend lxccontainer API with set_timeout 7fd671dbc mainloop: io_uring: disable IORING_POLL_ADD_MULTI 715fb4eff terminal: make a terminal FDs non-blocking 7eff16cc4 file_utils: add fd_make_nonblocking helper 747c4df31 file_utils: rename fd_make_nonblocking to fd_make_blocking ebea2b5a9 setproctitle(): Handle potential NULL return from strrchr() f7f15b20a make setproctitle()'s /proc/pid/stat parsing safe 890de0759 lsm: apparmor: allow to change mount propagation 5894cf310 console-log test: make sure container is stopped before restarting 820d2a2b3 switch from libsystemd's dbus to dbus-1 3c1453a38 tree-wide: convert fcntl(FD_CLOEXEC) to SOCK_CLOEXEC 4ea0b361f Allow fuse mounts in apparmor start-container. 1a2da75b6 Add support for squashfs images in oci via atomfs db3cbfa75 apparmor: don't try to mmap empty files 304bf58fa initutils: use PRIu64 for uint64_t in setproctitle 4de047f51 lxc-net.in: fix nftables syntax for IPv6 NAT 311bb8c53 Fix strlcat's return value checks 588b53b19 Fix typo: bev_type -> bdev_type 7914c259f drop broken lxc-test-fuzzers 849d80877 Fix build error on sparc64 caused by using the gold linker 43ad7816d lxc-default-cgns apparmor profile: allow overlay mounts 4fa83282b lxc_user_nic: fix get_mtu() error handling 1b0469530 Patching an incoming CVE (CVE-2022-47952) a8e1070c6 build: force linking against liblxc c27ea96f7 checkconfig: Fix filesystem capability check 3f361da61 checkconfig: Tweak cgroup handling 3ab04999d checkconfig: Tweak layout e027ca711 checkconfig: Hide version if no lxc-start 914fec51b checkconfig: Fix mixed tabs/spaces 70b176b0d src/lxc/meson.build: fix build without apparmor 42b22da6d cgroups: fix cgroup layout detection in __initialize_cgroups 0072919dd state: additional check in lxc_wait to prevent OOB 62b94d3ec cgroups: check snprintf retval in unpriv_systemd_create_scope 93d545e37 cgroups: fix buffer out-of-bounds access in enable_controllers_delegation f8aa61f97 network: always initialize struct nl_handler 6ea4a6c06 apparmor: properly check lxc_strmmap ret value b37cce95b github: fix coverity (add libpam-dev) a8dcf88d0 github: fix coverity build 7e7393413 conf: ensure mount tunnel is a dependent mount 01ae6d471 apparmor: allow shared mounts in start-container.in 81d94a4ee conf: create separate peer group for container's root 68020412c cgroups: only allocate user namespace if we have to 27f69d45b cgroups: use userns_exec_full() during cgroup removal 1029c2a06 README: remove lgtm dcf85308c meson.build: strip newline for variable assignments 8aac58866 meson.build: strip newlines from git output 16c6ff226 tests: lxc-test-reboot: Fix build on ia64 64eb31d02 src/lxc/meson.build: fix the static library path c6c705bfa build: drop build-time systemd dependency f321cd610 build: use cc.get_define to detect FS_CONFIG_* symbols 5aff4ea37 build: only build init.lxc.static if libcap is statically linkable c1f87c811 build: fix handling of dependancies to fix build on openSUSE bc318926d cgroups: fix -Waddress warning 4deaa28c0 Unroll IN_SET since the max usage is 2 elements check 73fd9bf55 tests: lxc-test-checkpoint-restore: use trap to do cleanup 8480c56a4 tools: lxc-destroy: update help message for --force 3cac3fce4 build: add libsystemd to oss fuzz dependencies f7cadaa34 lxc/attach: Detect EACCES from execvp and convert to 126 exit status 4ebca5a00 lxc-attach: Fix lost return codes of spawned processes that are killed 09233897b Update README.md 4a66dabf8 conf: allow cross-device links dc4f1220f build(deps): bump actions/checkout from 2 to 3 2b802090f Update cifuzz.yml 20cc78456 fix error message when use tools with -? option b0abedf60 use sd_bus_call_method_async to replace the asyncv one 589a930f1 tree-wide: split open helpers into open_utils.h 7b1836bce build: prevent the inclusion of linux/mount.h with a hack da8c29853 mount_utils: remove conf.h include 74c2f58e1 mount: move mount utilities from syscall_wrappers.h into mount_utils.h 68cf56489 tree-wide: minimize liburing.h inclusion 06f99c259 meson: fix docbook2x detection 133aa416c tree-wide: use struct open_how directly 63468abd3 tree-wide: use struct clone_args directly 4771699fd tree-wide: wipe direct or indirect linux/mount.h inclusion 16ebb29dc meson.build: allow explicit distrosysconfdir cbabe8abf build: check for FS_CONFIG_* header symbol in sys/mount.h ef1e0607b build: detect sys/pidfd.h availability c1115e150 build: detect where struct mount_attr is declared e452c8945 gitignore: Simplify 32a071519 lxc-usernsexec: allow to select which {g,u}id to switch to 7f6643071 README: update security mails 5e704fe38 meson.build: fix build without stack-protector 7d7235489 meson.build: fix build with -Dcapabilities=false 8ee887908 src/lxc/log.h: fix STRERROR_R_CHAR_P 353f0f992 meson: add remaining still-in-use config checks 3d360cf9d Store mount options in correct variable df3301046 Fix off-by-one error constructing mount options 8ee615c27 add check for statvfs 07a00b78f start: fix namespace sharing eae44ce19 conf: fix append_ttyname() 6c50e09f2 start: record inherited namespaces earlier to make it available for idmapped rootfs setup 7317d2a8a start: don't overwrite file descriptors during namespace preservation fc133a9f3 conf: log file descriptors on error during idmapped mount setup 26de6cbc8 fix for issue 4026: set broadcast to 0.0.0.0 for /31 and /32 c55353f84 use systemd dbus StartTransientUnit for unpriv cgroup2 b203e1a14 Fix uninitialized read in parse_cap when libcap is not used e73520adf meson: Set DEVEL flag post release f4d02217e tools: Provide multicall lxc binary 289d6413e meson: Generate compile commands by iterating over an array 132ff8e28 lxccontainer: rework copy_file() f357cb290 lxccontainer: improve mod_rdep() b576a47d5 Read list until process exits We also: - drop two patches that were backported - refresh the context of one Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-05-29 13:23:51 +00:00
Bruce Ashfield	3373478346	containerd: update to v2.0.0-rc.2 ... Bumping containerd to version v2.0.0-rc.2-12-g5d2c988a5, which comprises the following commits: 446e63579 remove uses of platforms.Platform alias 22f2af40c update pause image to 3.10 65024e6fd core/image: fix usage of "unknown" platform 8b3060717 Provide runtime options in plugin info 332caf1a1 Provide ability to set lo up without CNI 288f0592e Prepare release notes for v2.0.0-rc.2 f24a95185 build(deps): bump github.com/prometheus/client_golang 8b2a69c19 build(deps): bump golangci/golangci-lint-action from 5 to 6 96ff18d37 build(deps): bump ossf/scorecard-action from 2.3.1 to 2.3.3 1cae3dc9b update ttrpc to 1.2.4 e2251f948 Update instrumentation fuzzer with new flag ef76a90e9 Update platforms package to v0.2.0 0b113d78d doc: add the description of sandboxer and io_type 7cead8800 cri: restart created container with correct io type 42f778fc1 modify streaming io url form 25c2f690a Update toolchain to Go 1.22.3 681a083fa Update unpacker to always fetch all 2788604e4 Update ctr image pull all platforms 58be88189 sandbox: do retry for wait to remote sandbox controller 059731775 Preserve CL_UNPRIVILEGED locked flags during remount of bind mounts 9a9a8c46a Don't require vagrant tests in merge queues d9dc2811a fix: delete sockets on shim exit 41dc94ee1 CI: bump up golangci-lint to v1.58.0 9ecfac7f6 Integration: Change to grpc.NewClient 8c6183d74 Add lease test for metadata snapshotter c7fb8a925 Update metadata snapshotter to lease on exists b8dfb4d8f cri: support io by streaming api 3b065cddd CI: skip test in arm64 CI 6c3c5376f critools-version: v1.30.0 b488e76db build(deps): bump google.golang.org/protobuf from 1.33.0 to 1.34.1 a6e417dc6 build(deps): bump go.etcd.io/bbolt from 1.3.9 to 1.3.10 4401c3cb7 build(deps): bump github.com/pelletier/go-toml/v2 from 2.2.1 to 2.2.2 42e02c6c0 build(deps): bump golang.org/x/sys in the golang-x group 88b52119c Update api version to v1.8.0-rc.0 1c9c64f31 Update release procedure to mention api replace e69efd56d Add go mod replace when proto changes happen 678137199 sandbox: remove PID() in sandbox client 13f2fa1de remove go1.21.9 from CI matrix f0363a7f6 Chore: Simplify some syscall error checks 99ad11a00 core/metadata: failfast on content.Commit 3fb84403b CI: bump up crun to 1.15 55fcebffc Prepare release notes for api/v1.8.0 b811a8879 Add API release action b8060d641 Update ctr shim subcommand to task v3 f1e265b13 core/runtime: Check shim PluginInfo to enforce idmap support 05a3171bb Update transfer proxy to support ttrpc ec04e4f63 Add streaming proxy fe01cad20 Cleanup local transfer interface 171fc1434 Update release doc to mention API versioning 2ac2b9c90 Make api a Go sub-module e1b94c0e7 Move protobuf package under pkg 3e9cace72 Move runtimeoptions to api directory 4a4550777 Move runc options to api directory 25a288662 Fix v2 migrate for testutil package fb1f15d30 docs: correct the typo in the documentation 2df04b403 build(deps): bump the otel group with 8 updates 950db7eb7 build(deps): bump the k8s group across 1 directory with 4 updates 93690baf4 build(deps): bump github.com/grpc-ecosystem/go-grpc-middleware/providers/prometheus 4c753d124 go.mod: k8s.io/cri-api v0.30.0 de38490ed sandbox: merge address and protocol to one url c3b306240 add task api endpoint in task create options 72fe47b2a add task api endpoint in oci proto b1fefccc7 sandbox: store endpoint in cri sandboxStore f6e0cf189 sandbox: add address info in Start and Status response 15782881e go.mod: go 1.22 2d5689434 CI: use Go 1.22 by default fef78c102 install-runc: pin Go to 1.21 11d8beff8 optimize error logs by providing absolute file paths 81a9df625 build(deps): bump github.com/urfave/cli/v2 from 2.27.1 to 2.27.2 c001a7056 build(deps): bump lycheeverse/lychee-action from 1.9.3 to 1.10.0 6df759e24 build(deps): bump golangci/golangci-lint-action from 4 to 5 b7c977414 container.Checkpoint(), WithRestoreImage(): use ocispec.AnnotationRefName 8a8c3e221 pkg/cri/server/base: log CRI config as embedded JSON f62edda5a pkg/cri/server/base: use structured log for CRI plugin startup e07b63d84 document usage and design of blockfile snapshotter b6bd12f13 Add Syself Autopilot to adopters 7bc476001 ADOPTERS.md: Fix Actuated italics 416741675 Perform file sync outside of lock on Commit c27bcdc56 cri: introspectRuntimeFeatures: fix nil panic dfdfa206f Update for latest updates to release tool 53c9e6f86 Update release process after 1.7 a12acedfa sandbox: make a independent shim plugin 9ee3bfaba images: tests: Fix typos in the tests c51463010 docs: update registry config guide 7bd4d348e add info of exited event 218e2cf7c Return correct error if CRIU binary is missing bb9d923aa content: add a BlobReadSeeker func to allow multipart blob streaming Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-05-29 13:23:51 +00:00
Bruce Ashfield	7179de293c	buildah: update to 1.36 ... Bumping buildah to version v1.36.0, which comprises the following commits: 6ceba8838 Bump to v1.36.0 c09e08b53 build: be more selective about specifying the default OS 3fa5531ca Bump to c/common v0.59.0 4d1690bc3 Fix buildah prune --help showing the same example twice 208b7111e fix(deps): update module github.com/onsi/ginkgo/v2 to v2.18.0 c7937cd1d fix(deps): update module github.com/containers/image/v5 to v5.31.0 183582f03 bud tests: fix breakage when vendoring into podman de8510c9d Integration tests: fake up a replacement for nixery.dev/shell d9191e17c copierWithSubprocess(): try to capture stderr on io.ErrClosedPipe 97382f928 Don't expand RUN heredocs ourselves, let the shell do it 864a40cbd Don't leak temp files on failures 97d44ab9c Add release note template to split dependency chores 4a524737f fix CentOS/RHEL build - no BATS there 420949a5a fix(deps): update module github.com/containers/luksy to v0.0.0-20240506205542-84b50f50f3ee bbab575ff Address CVE-2024-3727 6a48ae700 chore(deps): update module github.com/opencontainers/runtime-spec to v1.2.0 d5b2e3c41 Builder.cdiSetupDevicesInSpecdefConfig(): use configured CDI dirs da4e2d7ad Setting --arch should set the TARGETARCH build arg 6f1f687c3 fix(deps): update module golang.org/x/exp to v0.0.0-20240416160154-fe59bbe5cc7f cd1960725 [CI:DOCS] Add link to Buildah image page to README.md f6d49125a Don't set GOTOOLCHAIN=local a04741d9f fix(deps): update module github.com/cyphar/filepath-securejoin to v0.2.5 53f2dc231 Makefile: set GOTOOLCHAIN=local e0077e8c6 Integration tests: switch some base images fdfd2237d containerImageRef.NewImageSource: merge the tar filters f2825bf7b fix(deps): update module github.com/onsi/ginkgo/v2 to v2.17.2 2c1c73169 fix(deps): update module github.com/containers/luksy to v0.0.0-20240408185936-afd8e7619947 7688d880d Disable packit builds for centos-stream+epel-next-8 7425f6f8f Makefile: add missing files to $(SOURCES) fbd2b7db4 CI VMs: bump to new versions with tmpfs /tmp 89ee4f4b0 chore(deps): update module golang.org/x/net to v0.23.0 [security] c01061e47 integration test: handle new labels in "bud and test --unsetlabel" f86c2748e Switch packit configuration to use epel-9-$arch ... 14d964d92 Give unit tests a bit more time 8bb87aefa Integration tests: remove a couple of duplicated tests 3e756d507 Integration tests: whitespace tweaks 8ee7bebd7 Integration tests: don't remove images at start or end of test c7f088142 Integration tests: use cached images more b213c5e7a Integration tests _prefetch: use registry configs 8bdd6a66d internal: use fileutils.(Le|E)xists 441bdc927 pkg/parse: use fileutils.(Le|E)xists 705338379 buildah: use fileutils.(Le|E)xists 9dcd1cc9a chroot: use fileutils.(Le|E)xists 358814f69 vendor: update containers/(common|storage) be74b733f Fix issue/pr lock workflow a99fe1513 [CI:DOCS] Add golang 1.21 update warning 77400c4fc heredoc: honor inline COPY irrespective of ignorefiles ff13a08c9 Update install.md 5b414ad08 source-push: add support for --digestfile d9129b463 Fix caching when mounting a cached stage with COPY/ADD 58579ba65 fix(deps): update github.com/containers/luksy digest to 3d2cf0e 2cd31a069 Makefile: softcode `strip`, use it from env var f812c8949 Man page updates 5198af7d7 Add support for passing CDI specs to --device 14bf3db27 Update comments on some API objects 2a7ff9905 pkg/parse.DeviceFromPath(): dereference src symlinks c1b43b57b Makefile - instead of calling `as` directly, use it from env var 23b8d9767 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.17.1 c1119f886 CI: bump VMs 2c47fdccd fix(deps): update module github.com/docker/docker to v25.0.5+incompatible f95b7a188 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.17.0 9cf83d8f8 Change RUN to comment in bud.bats 5808b9603 Stop rebasing renovate PRs automatically 37994356f Update renovate validation image 4304d618f CVE-2024-1753 container escape fix 516f9e9a2 correctly configure /etc/hosts and resolv.conf when using network 9db5a16f7 buildah: refactor resolv/hosts setup. 8c1fee7e7 rename the hostFile var to reflect the value better f8a7841cc vendor latest c/common 26da74d54 [skip-ci] rpm: use go-rpm-macros supported vendoring 547d9bf0e Update docs/buildah-add.1.md 80f9f7cb0 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.16.0 5cf05ac08 fix(deps): update module github.com/docker/docker to v25.0.4+incompatible c355679d3 fix(deps): update module github.com/containers/ocicrypt to v1.1.10 550139916 chore(deps): update module gopkg.in/go-jose/go-jose.v2 to v2.6.3 [security] 1a6d3513f chore(deps): update module github.com/go-jose/go-jose/v3 to v3.0.3 [security] bf3263ec1 Bump google.golang.org/protobuf to v1.33.0 e635558d2 fix links to containerignore doc e53e50f7a [skip-ci] Makefile: update rpm target 87ef84d3a pr-should-include-tests: use GitHub label, not commit text d50122aeb tests: enable pasta tests 1bc5dd692 [CI:DOCS] Migrate buildah container image 7c88bb372 Update .gitignore da81d2e2b Bump to v1.36.0-dev fedbd7967 Bump v1.35.0 3164076e2 Bump c/common v0.58.0, c/image v5.30.0, c/storage v1.53.0 b2504c263 conformance tests: don't break on trailing zeroes in layer blobs a2f0ebef6 Add a conformance test for copying to a mounted prior stage e504df188 fix(deps): update module github.com/stretchr/testify to v1.9.0 951dccd3f cgroups: reuse version check from c/common bbea3eb54 Update vendor of containers/(common,image) 6474279ed fix(deps): update github.com/containers/storage digest to eadc620 f9d603608 fix(deps): update github.com/containers/luksy digest to ceb12d4 53f230e2b fix(deps): update github.com/containers/image/v5 digest to cdc6802 8a1bcd51c manifest add: complain if we get artifact flags without --artifact d0ffb9d37 Use retry logic from containers/common e9c3c1666 Vendor in containers/(storage,image,common) 5047a3566 Update module golang.org/x/crypto to v0.20.0 26d5b84b1 Add comment re: Total Success task name 4853c0042 tests: skip_if_no_unshare(): check for --setuid 63975b541 Properly handle build --pull=false 836b9384d [skip-ci] Update tim-actions/get-pr-commits action to v1.3.1 5748595ae Update module go.etcd.io/bbolt to v1.3.9 fee705081 Revert "Reduce official image size" aee02318a Update module github.com/opencontainers/image-spec to v1.1.0 cdb1a4ff8 Reduce official image size eb6269d8c Build with CNI support on FreeBSD 98f870753 build --all-platforms: skip some base "image" platforms d73e21120 Bump main to v1.35.0-dev 90c0d9794 Vendor in latest containers/(storage,image,common) 1def7d6de Split up error messages for missing --sbom related flags aca884a89 `buildah manifest`: add artifact-related options 07057917d cmd/buildah/manifest.go: lock lists before adding/annotating/pushing a0852e994 cmd/buildah/manifest.go: don't make struct declarations aliases 4f0b619dd Use golang.org/x/exp/slices.Contains e202d62cc Disable loong64 again e99960085 Fix a couple of typos in one-line comments 302a798ad egrep is obsolescent; use grep -E e6d179476 Try Cirrus with a newer VM version 04847f57f Set CONTAINERS_CONF in the chroot-mount-flags integration test 56e6ef854 Update to match dependency API update 5d58b88c7 Update github.com/openshift/imagebuilder and containers/common a20d5b2a5 docs: correct default authfile path 9d58d1382 fix(deps): update module github.com/containerd/containerd to v1.7.13 533aac2d4 tests: retrofit test for heredoc summary 1bfd3336f build, heredoc: show heredoc summary in build output 811ee6797 manifest, push: add support for --retry and --retry-delay 1a8cbc185 fix(deps): update github.com/openshift/imagebuilder digest to b767bc3 9d516e22e imagebuildah: fix crash with empty RUN e14f46f2e fix(deps): update github.com/containers/luksy digest to b62d551 a7aec1941 fix(deps): update module github.com/opencontainers/runc to v1.1.12 [security] f1f0d9d4d fix(deps): update module github.com/moby/buildkit to v0.12.5 [security] 79fb3c213 Make buildah match podman for handling of ulimits 13fd5bd2c docs: move footnotes to where they're applicable 011736e12 Allow users to specify no-dereference 34dff20da Run codespell on code 86afc1ffd Fix FreeBSD version parsing 32b8ceeb6 Fix a build break on FreeBSD e3d043ebf Remove a bad FROM line f6f6da8f0 fix(deps): update module github.com/onsi/gomega to v1.31.1 4b5caebd7 fix(deps): update module github.com/opencontainers/image-spec to v1.1.0-rc6 f157be843 docs: use reversed logo for dark theme in README cf69e8a18 build,commit: add --sbom to scan and produce SBOMs when committing b3af07dab commit: force omitHistory if the parent has layers but no history de7c1e1f7 docs: fix a couple of typos 89f50af21 internal/mkcw.Archive(): handle extra image content 4cc811f4f stage_executor,heredoc: honor interpreter in heredoc 339839d4b stage_executor,layers: burst cache if heredoc content is changed dd186ee0f fix(deps): update module golang.org/x/crypto to v0.18.0 a42bfd019 Replace map[K]bool with map[K]struct{} where it makes sense 905551f51 fix(deps): update module golang.org/x/sync to v0.6.0 efe76552b fix(deps): update module golang.org/x/term to v0.16.0 d371fc7b9 Bump CI VMs 53c65dd36 Replace strings.SplitN with strings.Cut b5ee4fb34 fix(deps): update github.com/containers/storage digest to ef81e9b 114bb6f0c fix(deps): update github.com/containers/image/v5 digest to 1b221d4 fd0899f1f fix(deps): update module github.com/fsouza/go-dockerclient to v1.10.1 59ea8af1b Document use of containers-transports values in buildah b2c80f9a3 fix(deps): update module golang.org/x/crypto to v0.17.0 [security] b283c48db chore(deps): update dependency containers/automation_images to v20231208 4a9dba647 manifest: addCompression use default from containers.conf 041388f87 commit: add a --add-file flag 81435aadc mkcw: populate the rootfs using an overlay 5b9141887 chore(deps): update dependency containers/automation_images to v20230517 de0c3cdaf [skip-ci] Update actions/stale action to v9 2ab21c666 fix(deps): update module github.com/containernetworking/plugins to v1.4.0 29d945f38 fix(deps): update github.com/containers/image/v5 digest to 7a40fee 4276a735b Bump to v1.34.1-dev 471460018 Ignore errors if label.Relabel returns ENOSUP Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-05-29 13:23:51 +00:00
Bruce Ashfield	bad7f6f1d8	crun: update to v1.15 ... Bumping crun to version 1.15-13-g700e2ed, which comprises the following commits: c6c1c7f crun run --help: say --no-subreaper is ignored 8801bc4 github: disable CentOS 10 tests 5f0643c github: fix running tests on CentOS 10 d795081 tests: build on CentOS 10 without yajl f00fa22 libocispec: sync from upstream dd9428b blake3: initialize chunks_array 8c80ab9 utils: initialize fd 81b8f45 linux: fix mount of special files with rro e6eacaf NEWS: tag 1.15 08b5e78 Packit: Enable c10s downstream sync, rhel / centos separation in tests 4618d50 status: rmdirfd: try harder to remove mount points c72bf7f linux: cgroups: cleanup unused mount if move failed ff321e1 tests: install slirp4netns a946f04 utils: fix a compiler warning aa72cc4 Packit/TMT: add centos-stream-10, cleanup tests f39bc4a tests, oci-validation: use perl tap driver f5548f2 tests, oci-validation: use tap-18 18e84a1 tests, oci-validation: use git clone 49090f2 Build s390x binaries using musl libc 307d35e Fix clang format test 4b8f7c9 build(deps): bump uraimo/run-on-arch-action from 2.7.1 to 2.7.2 e6a8d51 libocispec: update 1809973 tests: use npm-18 475a3fd features: add support for potentiallyUnsafeConfigAnnotations 4f5479e src/libcrun/handlers: add option to load wasi-nn plugin for wasmedge 631e767 release: use zstd instead of xz 0722689 release.sh: generate .zst release instead of .xz 3ad68ed linux: fixup libcrun_safe_chdir 699564b rpm: remove eln macro f50da23 Packit: reuse non-RHEL failure message notification on RHEL 0b7fc08 packit: podman reverse dependency tests 820471a libocispec: use runtime-spec v1.2.0 9eea9ff cgroup: make error clearer 59ad70a container: validate option flags 7918dca container: split create and run options 8894495 crun: add option --keep to run 35dccc3 libcrun, run: add option to not delete containers a220ca6 NEWS: tag 1.14.4 6cd74cb Add support for s390x 5884fd4 linux: fix mount of file with recursive flags b9e87e7 tests: test bind mounts of files crun/ocispec: update to latest 2236d50 github: test with the embedded yajl library bed19ad configure.ac: --enable-embedded-yajl skips check for yajl b633f89 Makefile.am: distribute the src/yajl symlink 86650dc fix compilation error with clang++17 20d3936 helpers.py: remove __str__() afed951 generate.py: fix some typos daeb197 runtime-spec: use version v1.2.0 66f6f71 optimize writefile e9a99a8 Optimize headers writefile 7a5f2b6 Refresh strings format sources 210f4d3 Refresh strings format headers b085839 runtime-spec: update crun/ispec: update to v1.1.0 535d657 Fix a typo in the annotations spec 89fee07 MAINTAINERS: move jonboulle to EMERITUS f17d647 CODEOWNERS: remove vbatts 818209a MAINTAINERS: move vbatts to EMERITUS 652ec7c Add note about `ImageID` to the `config` section of `manifest.md` 2d95dde Reformat "Platform Variants", especially to add amd64, ppc64le, riscv64 e191267 Update Go versions in release scripts 4da0cfc Update GitHub Actions packages to resolve warnings in CI a32e6c3 Pin golangci-lint for Go v1.20 8baa69b media-types: Fix broken links 0a41c19 version: bump back to +dev e7f7c0c version: release v1.1.0 d0f90e6 Clarify that subject references a separate DAG 8b1e951 version: bump back to +dev 6c2b5fa version: release v1.1.0-rc6 53d9855 new section for projects no longer maintained b391bc0 fix: SPDX licenses URL dd66b54 Test older versions of Go with toolchain=local 93f6e65 Makefile: remove stray trailing space (#1126) d881fa8 deps: remove deprecated github.com/pkg/errors (#1125) 072574d add ORAS to implementations.md 9954739 specs-go: group MediaTypes 344b098 fix markdown table formatting c7a064f Update supported Go range to 1.19 - 1.21 f0ef80e version: bump back to +dev 1e54f01 version: release v1.1.0-rc5 061cba3 Fix golangci-lint install on older versions of Go a2a5750 Add step to update website after a release 0c1622e Add `riscv64` arch to `check{Architecture|Platform}` e6a75e6 Provide a decision tree for artifacts 9ac8f92 Quote lint-md wildcard expression a6af2b4 Add a markdown linter and fix linting issues af9c838 OCI has a distribution-spec 37bac87 Create artifacts guidance ddf2dfd chore(descriptor.md): correct canonicalization reference d36ccf1 MediaType is required in the descriptor f6c60b5 Clean up the markdown in considerations da8994a Cleanup broken links and markdown spacing 56877ad Remove deprecated golangci lint checks b29a06c Hacking markdown and Makefile cleanup 73aca56 Cleanup markdown in governance fd95ded Fix label schema link aed07a8 Test subject field in index 8620a49 version: bump HEAD back to +dev 82e8329 version: bump for release of v1.1.0-rc.4 988df0a specs-go: remove artifact prefixed annotations a845c7a image-index: add artifactType to specs and schema 73f386c Add constants for "index.json" and "blobs" 25fc553 Switch from scratch to empty 749ea9a Add artifactType to image index 32036d8 Apply version change from #1050 e13840d Add language from artifacttype field to forbid allowlists of media types 77efc6e spec: clarify descriptor, align with de facto artifact usage c6854a6 image-index: add the `subject` field crun/rspec: update to v1.2.0 b983fbf CODEOWNERS: remove vbatts bf698d0 MAINTAINERS: move vbatts to EMERITUS 12b653d Update golangci-lint to v1.56.1 in CI 8547911 Add Go v1.21 and v1.22 to GitHub Actions CI matrix 1a729af Update GitHub Actions packages to resolve warnings in CI 65cd1f8 Back to +dev 36852b0 version: release v1.2.0 021ba94 config.md: allow empty mappings for [r]idmap 5e98fec features: add potentiallyUnsafeConfigAnnotations cabeea7 specs-go: mark LinuxMemory.Kernel as deprecated 4005c81 specs-go: add missing deprecation comment for Hooks.Prestart 2f6b090 config: improve bind mount and propagation doc 0ec4e6b fix link to hooks in features 6ffddf6 mount: Allow relative mount destinations on Linux f329913 features-linux: Expose idmap information 7b8eb69 config: add reference to mount_setattr(2) for idmapped mounts 2547bb0 config: add idmap and ridmap mount options 3f552ce version: release v1.1.0+dev 0625254 version: release v1.1.0 d56ba70 ChangeLog: squash v1.1.0-rc.1...v1.1.0 5430e36 ChangeLog: Document changes since v1.1.0-rc.3 2bd22fa features.md: add a note to avoid confusion about annotations 5612d21 Remove outdated meeting.ics 085728a README.md: update chat information 8b4cadd version: v1.1.0-rc.3+dev ae35e39 version: release v1.1.0-rc.3 d8be1e3 ChangeLog: Document changes since v1.1.0-rc.2 1beaf68 CODEOWNER: Add Toru Komatsu(@utam0) to sync with MAINTAINERS fccfb09 config: add support for org.opencontainers.image annotations Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-05-29 13:23:51 +00:00
Mingli Yu	7cdd07a736	netavark: Make ptest run ... Fixes: # ./run-ptest /tmp/bats-run-ELGGaA/bats.18820.src: line 5: To: command not found 1..1 not ok 1 bats-gather-tests # (in test file test/README.md, line 5) # `To run the tests locally in your sandbox, you can use one of these methods:' failed with status 127 Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-05-29 13:23:51 +00:00
Bruce Ashfield	2fdfa68445	podman: convert remaining WORKDIR references to UNPACKDIR ... While the WORKDIR references seem to work, they may not continue to work. We switch to using UNPACKDIR which is where the SRC_URI referenced elements / files will be placed by the fetcher. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-05-29 13:16:56 +00:00
Bruce Ashfield	d79afeac8c	lxc: convert remaining WORKDIR references to UNPACKDIR ... While the WORKDIR references seem to work, they may not continue to work. We switch to using UNPACKDIR which is where the SRC_URI referenced elements / files will be placed by the fetcher. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-05-29 13:16:56 +00:00
Bruce Ashfield	2aa6da625d	kubernetes: convert remaining WORKDIR references to UNPACKDIR ... While the WORKDIR references seem to work, they may not continue to work. We switch to using UNPACKDIR which is where the SRC_URI referenced elements / files will be placed by the fetcher. The remaining WORDIR references are to a secondary git repository with artifacts and should be safe. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-05-29 13:16:56 +00:00
Bruce Ashfield	01a6b4771f	docker-distribution: convert remaining WORKDIR references to UNPACKDIR ... While the WORKDIR references seem to work, they may not continue to work. We switch to using UNPACKDIR which is where the SRC_URI referenced elements / files will be placed by the fetcher. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-05-29 13:16:56 +00:00
Bruce Ashfield	d190fb4a13	container-host-config: convert remaining WORKDIR references to UNPACKDIR ... While the WORKDIR references seem to work, they may not continue to work. We switch to using UNPACKDIR which is where the SRC_URI referenced elements / files will be placed by the fetcher. We also explicitly set S to point to the UNPACKDIR to avoid a build warning. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-05-29 13:16:56 +00:00
Bruce Ashfield	27db959787	cgroup-lite: convert remaining WORKDIR references to UNPACKDIR ... While the WORKDIR references seem to work, they may not continue to work. We switch to using UNPACKDIR which is where the SRC_URI referenced elements / files will be placed by the fetcher. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-05-29 13:16:56 +00:00
Bruce Ashfield	3dc0db19e1	k3s: convert remaining WORKDIR references to UNPACKDIR ... While the WORKDIR references seem to work, they may not continue to work. We switch to using UNPACKDIR which is where the SRC_URI referenced elements / files will be placed by the fetcher. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-05-29 13:16:56 +00:00
Bruce Ashfield	288d9bdfb1	podman-tui: adapt SRC_URI to include destsuffix=${GO_SRCURI_DESTSUFFIX} ... As of commit cc4ec43a2b657fb4c58429ab14f1edc2473c1327 [go: Drop fork of unpack code, mandate GO_SRCURI_DESTSUFFIX] we require this variable in our go recipes. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-05-29 13:16:56 +00:00
Bruce Ashfield	34b281d1a9	k3s: adapt SRC_URI to include destsuffix=${GO_SRCURI_DESTSUFFIX} ... As of commit cc4ec43a2b657fb4c58429ab14f1edc2473c1327 [go: Drop fork of unpack code, mandate GO_SRCURI_DESTSUFFIX] we require this variable in our go recipes. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-05-29 13:16:56 +00:00
Bruce Ashfield	9de2c86118	crio-o: adapt SRC_URI to include destsuffix=${GO_SRCURI_DESTSUFFIX} ... As of commit cc4ec43a2b657fb4c58429ab14f1edc2473c1327 [go: Drop fork of unpack code, mandate GO_SRCURI_DESTSUFFIX] we require this variable in our go recipes. We also adjust our WORKDIR reference to use UNPACKDIR instead Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-05-29 13:16:56 +00:00
Bruce Ashfield	754c3134c2	podman: adapt SRC_URI to include destsuffix=${GO_SRCURI_DESTSUFFIX} ... As of commit cc4ec43a2b657fb4c58429ab14f1edc2473c1327 [go: Drop fork of unpack code, mandate GO_SRCURI_DESTSUFFIX] we require this variable in our go recipes. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-05-29 13:16:56 +00:00
Bruce Ashfield	d4f36f3ff5	docker-compose: adapt SRC_URI to include destsuffix=${GO_SRCURI_DESTSUFFIX} ... As of commit cc4ec43a2b657fb4c58429ab14f1edc2473c1327 [go: Drop fork of unpack code, mandate GO_SRCURI_DESTSUFFIX] we require this variable in our go recipes. We also adjust our WORKDIR reference to UNPACKDIR, and the destination for vendor'd source. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-05-29 13:16:56 +00:00
Bruce Ashfield	caec6371aa	nerdctl: SRC_URI to include destsuffix=${GO_SRCURI_DESTSUFFIX} ... As of commit cc4ec43a2b657fb4c58429ab14f1edc2473c1327 [go: Drop fork of unpack code, mandate GO_SRCURI_DESTSUFFIX] we require this variable in our go recipes. We also adjust our S directory, and references to WORKDIR to fix the build for the new source layout. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-05-29 13:16:56 +00:00
Bruce Ashfield	df90aeb1ae	cri-tools: adapt SRC_URI to include destsuffix=${GO_SRCURI_DESTSUFFIX} ... As of commit cc4ec43a2b657fb4c58429ab14f1edc2473c1327 [go: Drop fork of unpack code, mandate GO_SRCURI_DESTSUFFIX] we require this variable in our go recipes. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-05-29 13:16:56 +00:00
Bruce Ashfield	258742feb5	moby: adapt SRC_URI to include destsuffix=${GO_SRCURI_DESTSUFFIX} ... As of commit cc4ec43a2b657fb4c58429ab14f1edc2473c1327 [go: Drop fork of unpack code, mandate GO_SRCURI_DESTSUFFIX] we require this variable in our go recipes. We also adjust our paths to the new source location and drop references to WORKDIR. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-05-29 13:16:56 +00:00
Bruce Ashfield	f12df6ce27	runc-docker: adapt SRC_URI to include destsuffix=${GO_SRCURI_DESTSUFFIX} ... As of commit cc4ec43a2b657fb4c58429ab14f1edc2473c1327 [go: Drop fork of unpack code, mandate GO_SRCURI_DESTSUFFIX] we require this variable in our go recipes. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-05-29 13:16:56 +00:00
Bruce Ashfield	d04caa21f0	buildah: adapt SRC_URI to include destsuffix=${GO_SRCURI_DESTSUFFIX} ... As of commit cc4ec43a2b657fb4c58429ab14f1edc2473c1327 [go: Drop fork of unpack code, mandate GO_SRCURI_DESTSUFFIX] we require this variable in our go recipes. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-05-29 13:16:56 +00:00
Bruce Ashfield	b78f5ac678	runc: adapt SRC_URI to include destsuffix=${GO_SRCURI_DESTSUFFIX} ... As of commit cc4ec43a2b657fb4c58429ab14f1edc2473c1327 [go: Drop fork of unpack code, mandate GO_SRCURI_DESTSUFFIX] we require this variable in our go recipes. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-05-29 13:16:56 +00:00
Patrick Wicki	380eae7bdd	podman: require catatonit ... Alternatively, we could add it to RRECOMMENDS. But I would say, given its name, managing pods is part of podman's core functionality and that requires catatonit, which is currently only pulled in for the ptest: root@qemux86-64:~# podman pod create Error: building local pause image: finding pause binary: exec: "catatonit": executable file not found in $PATH Signed-off-by: Patrick Wicki <patrick.wicki@siemens.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-05-13 22:32:38 -04:00
Patrick Wicki	992253f871	podman: remove skopeo rdepends ... Podman does not require skopeo to run. They are both independent tools. In distros like Debian, Fedora and Arch they don't depend on it either. Skopeo also seems to be used in some of podman's tests, so it makes sense to keep it around for the ptest. We do require skopeo's libdevmapper dependency, so include that directly. And inherit container-host to make sure the container configs are present on the device. Signed-off-by: Patrick Wicki <patrick.wicki@siemens.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-05-13 22:32:38 -04:00
Bruce Ashfield	4cea448064	runc-opencontainers: update to 1.1.12 ... Bumping runc to version v1.1.12-14-ge8bb71e1, which comprises the following commits: 6379b58d libcontainer: force apps to think fips is enabled/disabled for testing 265e7371 Vagrantfile.fedora: bump Fedora to 39 59056a02 silence security false positives from golang/net 452bf88e build: update libseccomp to v2.5.5 3fada6ec tests/int: fix flaky "runc run with tmpfs perm" aae41a4b Fix integration tests failure when calling "ip" 82a8b979 update go version to 1.21 in cirrus ci 03271050 ci/gha/cross-i386: pin Go to 1.21 29d6d873 VERSION: back to development 51d5e946 VERSION: release 1.1.12 e9665f4d init: don't special-case logrus fds 683ad2ff libcontainer: mark all non-stdio fds O_CLOEXEC before spawning init b6633f48 cgroup: plug leaks of /sys/fs/cgroup handle 284ba305 init: close internal fds before execve fbe3eed1 setns init: do explicit lookup of execve argument early 0994249a init: verify after chdir that cwd is inside the container 506552a8 Fix File to Close Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-05-13 22:32:38 -04:00
Bruce Ashfield	a03ff1cd0a	containerd: update to v2.0.0-rc.1 ... Bumping containerd to version v2.0.0-rc.1-8-g0426e3c2e, which comprises the following commits: c27bcdc56 cri: introspectRuntimeFeatures: fix nil panic c5ba71d11 Makefile: update default PACKAGE to v2 094bafe2a apparmor: Allow confined runc to kill containers e461a59ae fix migrateConfig for io.containerd.cri.v1.images eb5a0c04b apparmor: add `signal (receive) peer=/usr/local/bin/rootlesskit,` 5e470e1ca Update HTTPFallback to handle tls handshake timeout a37b451cd build(deps): bump tags.cncf.io/container-device-interface 888fd315f Update CNI to v1.2.0 13e6b2b68 update to go1.21.9, go1.22.2 42e4de9c5 Prepare release notes for v2.0.0-rc.1 4a31bd606 chore: use errors.New to replace fmt.Errorf with no parameters will much better a6a82c102 Update hcsshim to v0.12.3 7e60d5a07 Account for ipv4 vs ipv6 localhost in windows port forwarding a153b2cd3 mod: bump github.com/containerd/nri@v0.6.1 77512e2d7 build(deps): bump the golang-x group with 3 updates c8d9eba7c build(deps): bump github.com/klauspost/compress from 1.17.7 to 1.17.8 1c0f73aa0 build(deps): bump github.com/pelletier/go-toml/v2 from 2.2.0 to 2.2.1 32caaee48 Snapshotters: Export the root path b82ced57f fix: close profile c7ea06a69 fix default working directory `hostProcess` 1040c7b98 build(deps): bump the otel group with 8 updates b50e9eae4 Refactor spots to make use of sys.IgnoringEintr 3ea69db8e Add helper to ignore eintr 1b6222418 Bump tags.cncf.io/container-device-interface to v0.7.1 ad584ebec Replace direct waitid syscall with unix.Waitid 7c5078459 Remove empty default tls configuration in ctr b6e361694 cri: add pause image name to annotations 0ec14fdf8 core/diff/apply: use unix.Syncfs 739659a4b build(deps): bump google.golang.org/grpc from 1.62.1 to 1.63.2 433279438 Transfer: Registry: Enable plain HTTP 88b4cc659 address review comments f20c49311 Update tracing documentation to add details about manual instrumentation 63d5573a3 remote: Fix HTTPFallback fails when pushing manifest 2474a99c3 Add IsNotFound case to ListPodSandboxStats 3830f8167 fix(cri): fix unexpected order of mounts since go 1.19 cbb644182 build(deps): bump github.com/Microsoft/hcsshim from 0.12.0 to 0.12.2 362fcf2d2 build(deps): bump github.com/distribution/reference from 0.5.0 to 0.6.0 5b6ae0f79 Use different containerd sock address in tests ab2c569fb ctr: fix parsing mount options b97ef91fb Change port forwarding on windows ea681afba docs: fix typo 6d00c3ada runc-shim: only defer init process exits da4ca4949 build(deps): bump github.com/pelletier/go-toml/v2 from 2.1.1 to 2.2.0 dd72fb3b2 build(deps): bump github.com/intel/goresctrl from 0.6.0 to 0.7.0 e41e9e11b transfer: Platform matcher should match multiple platforms d0d35f0d0 core/images/archive: normalizeReference: remove outdated TODO 26158609b pkg/seutil: move to internal/cri 33732bc13 pkg/systemd: move to internal/cri 0d0850af1 Prepare v2.0.0-rc.0 f5abb63c0 Update mailmap 30813f646 build(deps): bump github.com/containernetworking/plugins 0fafc0c50 build(deps): bump github.com/checkpoint-restore/go-criu/v7 7c1fca096 Update migration script based on usage 45e425ccc vendor: github.com/golang/protobuf v1.5.4 4aa6fedd5 CRI: postpone removal of deprecated config properties 34c545824 Automatically decompress archives for transfer service import df26c189a Clean cri options and useless parms 88421068f Fix invalid event filter in podsandbox 357c59b79 Update github actions ci to run on forks 4b719cc4b build(deps): bump google.golang.org/grpc from 1.62.0 to 1.62.1 10c7f03b3 build(deps): bump google.golang.org/protobuf from 1.32.0 to 1.33.0 21d3fedf4 build(deps): bump softprops/action-gh-release from 1 to 2 228aa42a6 build(deps): bump the otel group with 8 updates 47d13767f Clean typos in plugins. 7ac9d6909 Use the Go toolchain in CI matrix to build binaries 6a96e4501 Move shim package to pkg f25770e48 Wire through CRI ContainerCheckpoint RPC 7ecdebff9 update to go 1.21.8, 1.22.1 723306d0e Disable OOM set score unpriv test temporarily 994fdd74e Don't create new scratch VHD per image for CimFS 016b588a9 build(deps): bump github.com/stretchr/testify from 1.8.4 to 1.9.0 d9409c461 Update hcsshim to v0.12.0 00d714e90 build(deps): bump the golang-x group with 2 updates ab4de3e4c build(deps): bump azure/login from 1 to 2 713dd8f8d go.mod: k8s.io/cri-api v0.30.0-alpha.3 d9b9160ae mv internal/testutil pkg/testutil 752917c0f build(deps): bump github.com/prometheus/client_golang 7a3b7fba5 Transfer: Registry: Enable to use registry configuration diretory 1bf781d8e Cleanup introspection interface 5bd204109 Remove grpc from Client connection interface 347346e3c Add ttrpc support to content proxy 9104e6a24 Add events proxy interface 892dc54bd runc-shim: process exec exits before init 9128ee0a9 Move nri packages to plugin and internal d0da3d1ca sandbox: make event monitor in CRI independent 17ea3959b adds mediatype to oci index record c5ef8a2c2 fix(docs): fix duplicate instructions for windows installation 87e8e9c7f Add Go client stability in releases for 2.0. 72f21833b Move events to plugins and core caa9e2075 add k8s 1.29 and 1.30preview to support table 154ed26a7 vendor: go.etcd.io/bbolt v1.3.9 6d1dfe55f cri: ensure the pause image loaded in older versions is pinned 2884b318f build(deps): bump github.com/klauspost/compress from 1.17.6 to 1.17.7 bd44df8a1 refactor code - clean switch and if statements a60e52f58 sandbox: add struct tags for PinnedImages a0b73ae11 sandbox: optimize the lock in PodSandbox 0f1d27412 sandbox: add methods to sandboxService a2768f19d plugins/sandbox: move local plugin into services d651cb743 mediatypes: support zstd compression Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-05-13 22:32:38 -04:00
Bruce Ashfield	e7a13cbbc3	containerd: consolidate to "containerd" ... We no longer need the split between container-docker and containerd-opencontainers and dependent layers have been given over a year to adapt. We do keep the provides and rprovides around for a bit longer, but those will also be removed in the future. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-05-13 22:32:38 -04:00
Changqing Li	e9bb0a338f	kubernetes: Pass -trimpath to build ... Fix following QA WARNING: WARNING: QA Issue: File /usr/bin/kubectl in package kubectl contains reference to TMPDIR [buildpaths] WARNING: QA Issue: File /usr/bin/kubeadm in package kubeadm contains reference to TMPDIR [buildpaths] WARNING: QA Issue: File /usr/bin/kube-proxy in package kube-proxy contains reference to TMPDIR [buildpaths] WARNING: QA Issue: File /usr/bin/kube-apiserver in package kubernetes-misc contains reference to TMPDIR WARNING: QA Issue: File /usr/bin/kubelet in package kubelet contains reference to TMPDIR [buildpaths] Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-05-02 18:22:42 +00:00
Changqing Li	e46214eea8	containerd-opencontainers: fix wrong version display ... * Update containerd to v2 to fix following containerd version: containerd github.com/containerd/containerd/v2 2.0.0-beta.0+unknown it should be like: containerd github.com/containerd/containerd/v2 v2.0.0-beta.2-204-gb1624c362.m b1624c3628954e769dd50783b63823040b2db38c.m * Remove CONTAINERD_PKG, it is not used * Update default PACKAGE in Makefile to v2 Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-05-02 18:22:42 +00:00
Changqing Li	b50d4899fa	kubernetes: skip textrel QA warning ... -buildmode=pie need cgo is enabled, but for kubernetes, some build targets are static, and cgo is disable in build script directly, refer [1]. If we add -buildmode=pie by default, will cause these static target build failed with error "-buildmode=pie requires external (cgo) linking, but cgo is not enabled". This warning is acceptable, so just skip it. [1] https://github.com/kubernetes/kubernetes/blob/master/hack/lib/golang.sh#L811 Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-05-02 17:59:55 +00:00
Theodore A. Roth	74455bb615	podman: Fix missing brace in FILES ... When converting to use {systemd_user_unitdir}, the closing brace was omitted Signed-off-by: Theodore A. Roth <theodore_roth@trimble.com> Signed-off-by: Theodore A. Roth <troth@openavr.org> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-05-02 17:58:45 +00:00
Lukasz Czechowski	0b5cf63796	podman: fix location of user systemd service units ... The value of USERSYSTEMDDIR is currently set to ${systemd_unitdir}/user, which might not be present in user unit search path. Use dedicated bitbake variable ${systemd_user_unitdir} instead. Signed-off-by: Lukasz Czechowski <lukasz.czechowski@thaumatec.com> Cc: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-04-22 15:02:52 +00:00
Xiangyu Chen	8410846c0b	lxc: fix broken test cases ... Upstream dropped cgroup handling in lxc-test-usernic lxc-test-unpriv and lxc-test-apparmor-mount to fix the broken cases. Signed-off-by: Xiangyu Chen <xiangyu.chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-04-09 14:08:26 +00:00
Bruce Ashfield	da840d8845	runc-docker: update to 1.1.12 ... Bumping runc to version v1.1.12-2-ga9833ff3, which comprises the following commits: 29d6d873 VERSION: back to development 51d5e946 VERSION: release 1.1.12 e9665f4d init: don't special-case logrus fds 683ad2ff libcontainer: mark all non-stdio fds O_CLOEXEC before spawning init b6633f48 cgroup: plug leaks of /sys/fs/cgroup handle 284ba305 init: close internal fds before execve fbe3eed1 setns init: do explicit lookup of execve argument early 0994249a init: verify after chdir that cwd is inside the container 506552a8 Fix File to Close d0b1a374 keyring: update AkihiroSuda key expiry d561e5da keyring: update cyphar@cyphar.com key expiry 7887736f VERSION: back to development 4bccb38c VERSION: release 1.1.11 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-04-09 13:10:39 +00:00
Bruce Ashfield	b2777a4389	podman: update to 5.0.1 ... Bumping libpod to version v5.0.1-4-gbb81e85a4, which comprises the following commits: 63f6a78eb Packit: Enable CentOS Stream 10 update job e22c9dd65 Bump to v5.0.2-dev 946d055df Bump to v5.0.1 131f3d089 Add release notes for v5.0.1 2967eb9a2 [v5.0] libpod: restart always reconfigure the netns 92b3cda79 [v5.0] use new c/common pasta2 setup logic to fix dns b1dbd477e [v5.0] Bump Buildah to v1.35.3 ebe3f395b hyperv: error if not admin 4b54d1824 libpod: don't warn about cgroupsv1 on FreeBSD 312313872 Use built-in ssh impl for all non-pty operations 70fe2a1c9 fix remote build isolation on client side bfc63cc32 fix remote build isolation when server runs as root Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-04-04 19:57:46 +00:00
Bruce Ashfield	5853fc67da	docker-compose: update to v2.26.0 ... Bumping compose to version v2.24.7-21-g33712277, which comprises the following commits: 33712277 chore(desktop): revised feature detection for file shares e9dc8201 Add Navigation Menu to compose up 39504607 Add support for volume Subpath option 3b541b07 Bump docker v26.0.0 25671ae6 introduce config --variables to list compose model variables 0191e69d Fix docs on default build image name 897d239f Bump compose-go to v2.0.2 c5a760ce add support for annotations 26f687a1 Revert "Bump compose-go to v2.0.1" ad414613 Bump compose-go to v2.0.1 db4ed895 feat(desktop): synchronized file share integration (#11614) 1b5fa3b9 feat(experiments): add experimental feature state (#11633) 4f97edf3 reduce timeout of the Otel tracing command bc5fc6ba fix `compose config --format json` f937e42a Bump compose-go v2.0.0 f46ca459 services shell completion bugfix b2d4c1b8 fix TestBuildPlatformsWithCorrectBuildxConfig 5a1ba0ef only use ToModel when --no-interpolate is set 17d4229e feat(desktop): add Docker Desktop detection and client skeleton (#11593) 4efb8970 chore(deps): upgrade go to 1.21.8 (#11578) f35449a6 ci(deps): bump moby/moby & docker/cli to v25.0.4 (#11566) 34b11c4f Add test summary for test jobs in ci c525373a make code simpler e99b8ace avoid duplicated "xx exited with code 0" message 8ab8df86 introduce --watch de178267 move code into small functions for better readability 1680f9a8 restore support for `config --no-interpolate` 5c4f3370 remove docker cli step in ci.yml 58ec0e9f get log to manage `attach` 349d9f34 bump compose-go to version v2.0.0-rc.8 697a48af use an dedicated compose file --quiet-pull e2e test 9b0d1ffc Add a fallback check of Watch pid on Windows False positives were detected when checking the previous watch process state d10a179f add support of QuietOption to create command 94246f3c pass QuietOption when starting dependencies from run command 9630cc58 when ran with ANSI disabled, force progress=plain 6c175548 Issue-11374: Modified compose up command to respect COMPOSE_REMOVE_ORPHANS environment variable 9b0e3d53 ci: bump engine version to `25.0.3` de3da829 sort containers to optimize scale down c79aabde discard stdout for laaarge log test 0aad3221 use listeners to collect include metrics b1c06770 docs: update cli reference link e330f590 docs: unify no trailing dots in docstrings and help (#11301) 16c8099c Use listener for file metadata 07bda596 fix deadlock collecting large logs d2034029 chore(watch): remove old `docker cp` implementation 894ab41c ci(deps): bump docker/cli to v25.0.3 (#11481) 3ba66453 pass All option to backend api.Service when length statuses is not equal to zero 2eca9313 Add OTEL specs: build, depends_on, capabilities (gpu/tpu) 1fea7c1b build(deps): bump github.com/opencontainers/image-spec acf2ffb0 feat(tracing): add project hash attr 0d48a93f chore(load): ensure context passed to load aaa7ef6d Include all networks in ContainerCreate call if API >= 1.44 6ef55a53 bump compose-go to v2.0.0-rc.4 a553db33 CI: docker engine version matrix 05bec55d build(deps): bump github.com/docker/cli 8fdd45cd chore(e2e): fix flaky test & standalone behavior (#11382) a0954dc5 ci(deps): replace buildkit to fix fsutil issues on Windows (#11426) 05820018 Fix canonical container name da1a34a8 don't check external network existence when swarm is enabled 8b023ae0 build(deps): bump github.com/docker/cli 8c80297c build(deps): bump github.com/docker/docker 7e991515 Add support for storage_opt d9791156 ci(deps): update DOCKER_CLI_VERSION to v25.0.1 71bebc16 bump compose-go to v2.0.0-rc.3 which fixes multiple compose files merge issues 25d16d1f build(deps): bump actions/upload-artifact from v3 to v4 ab97dcc7 update MAINTAINERS file a8bd3b7a Fix load .env from project directory when project file is set by COMPOSE_FILE 811364b4 use a custom version of fsutils that fixes a bug on Windows causing all Compose builds to fail 1551fcb4 introduce stopAndRemoveContainer to share logic scaling down eb4249ec bump compose-go to v2.0.0-rc.2 1e8241f6 ci(deps): upgrade to Moby v25.0.0 GA (#11381) 053a5604 docs: update link to use canonical URL for command 34ba0bc9 go.mod: github.com/moby/sys/mountinfo v0.7.1 56e38260 go.mod: github.com/google/uuid v1.5.0 c28bf522 bump version of compose-go to v2.0.0-rc.1 51c113b6 build(deps): bump github.com/docker/docker 7cdc7e15 remove watch command from the alpha command fb026543 build(deps): bump github.com/docker/cli d688d3bf fix(tracing): batch span exports to prevent blocking 898e1b60 signals/utils: always handle received signals f414bf78 fix engine version require to use healthcheck.start_interval 3c4593f2 Stop the resource timer after last expected event d2562029 build(deps): bump github.com/containerd/containerd from 1.7.11 to 1.7.12 (#11347) 26ed1051 build(deps): bump github.com/docker/docker from 25.0.0-rc.1+incompatible to 25.0.0-rc.2+incompatible (#11349) 191c10b9 build(deps): bump github.com/docker/cli from 25.0.0-rc.1+incompatible to 25.0.0-rc.2+incompatible (#11348) 5d05df6e update compose-go to version using immutable Project functions b621948c feat(cli): report more useful User-Agent on engine API requests f5c53c2d ci(deps): bump golangci-lint to v1.55.2 1cfeda71 ci(deps): bump golang to version v1.21.6 (#11331) 2bf2b22f Add source policies for build 575f2ed7 watch: remove requirements for tar binary and for sync target to be rw 5f4b22ed make docs dcf6bd77 make mocks 80823b77 go ahead and wire up sig-proxy and no-stdin for consistency with underlying docker container attach 2c16e16d docker compose attach via RunAttach (from docker/cli's docker container attach) d1be9caf build(deps): bump golang.org/x/sys from 0.15.0 to 0.16.0 c3c0cf3d build(deps): bump golang.org/x/sync from 0.5.0 to 0.6.0 (#11317) 27987415 gha: update DOCKER_CLI_VERSION to v24.0.7 566d2207 go.mod: github.com/docker/cli v25.0.0-rc.1 d09c39dc go.mod: github.com/docker/docker v25.0.0-rc.1 a1d36379 go.mod: github.com/klauspost/compress v1.17.4 0c55998b go.mod: github.com/felixge/httpsnoop v1.0.4 2f6ec9b7 go.mod: github.com/docker/go-connections v0.5.0 dcbf005f up: gracefully teardown when command ctx cancelled e105f165 introduce `stats` command ce5a0c65 Fix cancellable context detection in `AdaptCmd` f58f23a6 remove ServiceProxy which was introduced for archived compose-cli 9aa52326 go.mod: docker/docker and docker/cli v25.0.0-beta.3 ccd83b8a go.mod: github.com/gorilla/mux v1.8.1 9e57850c go.mod: github.com/docker/distribution v2.8.3 35d3a7ca go.mod: golang.org/x/crypto v0.17.0 6c998602 go.mod: golang.org/x/crypto v0.16.0 402f3688 go.mod: golang.org/x/text v0.14.0 30dd3e66 go.mod: golang.org/x/term v0.15.0 0c4fa017 Bump compose-go v2-beta.2 b12e23b0 build(deps): bump go.uber.org/mock from 0.3.0 to 0.4.0 17da54da introduce build --with-dependencies 1baa4f44 up: fix write/close race condition in logPrinter 7781b7c9 deps: update docker/cli to fix go version selection issue 785835b1 Add support for endpoint-specific MAC address e4fb5545 build do not require environment to be reslved 74cc0912 github.com/golang/mock is deprecated 5e61c62e collect services to build using WithServices fb3868ff add support for start_interval bdbda790 include disabled services for shell completion ae4fd791 bump golang to version 1.21.5 26aca867 avoid use of service.Name when iterating on project.Services 138facea project.Services is a map cda04f28 adopt compose-go/v2 85a1aec1 regen docs 9c29d223 use custom config type for OCI v1.0 df6fe59f tweak help message on oci version flag 07df9cc4 fix typo 7c8ff36d move around OCI logic, auto fallback/retry 1.1 -> 1.0 111ad3b0 fix(publish): add OCI 1.0 fallback support for AWS ECR 8026d0e2 adopt container.RestartPolicy* df1533a1 [lint] don't use deprecated types 8639fbae go mod tidy 56e2ad9e update to v1.25 for RunAttach ce1ddb6c fix combination of --pull always --no-build c5824702 build(deps): bump golang.org/x/sys from 0.14.0 to 0.15.0 1f148244 send out a cancel event on SIGINT/SIGTERM 9faef4ae Update README.md to use standard compose.yaml file name 59f11ecb Fix configs are mounted under /<id> 750553c8 introduce compose logs --index to select a replica container 8c964f5a Update E2E test 90ca13b7 Fix E2E test to have index in the correct position f9946127 Fix docs ddda59a1 Add index option to compose logs command e981c358 Add failing test 16c4241c log we don't expose service ports when --verbose 9025d63a bump ddev a1de0b96 Restore `Project` is ps json output caa0cbbc Introduce ps --orphans so user can include/exclude services not declared by project 29e9fdba let contributor know we might close unanswered issues c665c53c bump buildx to v0.12.0 and adapt code to changes a39cf75e build(deps): bump github.com/compose-spec/compose-go 46ba9c99 build(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.0 5c5d30c6 build(deps): bump github.com/docker/cli 36fa8d4e build(deps): bump github.com/docker/docker 2384635e build(deps): bump github.com/moby/buildkit from 0.12.2 to 0.12.3 2ba5e4c1 in watch mode force pull policy to build for services with both build and develop attributes This default behaviour will force a rebuild of the service images at watch process startup and be sure containers will be in sync with the local source code b1a26dac Assume /src/pkg/compose/testdata absolute workingdir to make tests reproducible 5e77ae92 avoir use of []types.ServiceConfig f5572201 identify services to build and don't display 'building' if none 8e1b3236 fix --remove-orphans not to consider disabled services as orphaned 7cb1f8ba introduce RuntimeVersion for code to check container runtime supports required features cb01186c push also consider build.tags 9c4efbdd Strip project prefix from docker-compose up output 8ea7c9e0 Make it context aware and add test skipping options c1694360 render quiet after filtering applied 254a94b0 bump golang to version 1.21.4 cf608fa9 bump compose-go to v1.20.1 426377a4 reject compose file using `secrets|configs.driver or template_driver` 493f6c80 skips flaky e2e tests on watch and attach 646a8fc0 fix docker/compose#11170 add newline in cmd/compose/build.go fmt.Fprint 2945532f fix --pull documentation e5cd265a improve watch configuration logging Add action associated to each managed path d646d757 lint 71237ef6 do not resolve cache dir until remote resource is in use 0d905a89 add a copyright notice with original author b847c7f5 implement runtime file selection 5e3d8f67 re-implement cache folder detection 67279088 introduce --resolve-image-digests for publish to seal service images by digest 4cd61957 fix build 0d4cbbdb fix 9631a49d ENGDOCS-1764 328ca3f2 add docs upstream validation workflow e1bbfc63 build(deps): bump go.uber.org/goleak from 1.2.1 to 1.3.0 616bba0a linter errors fixed ee6e3c2a NetworkList to NetworkInspect for ID search c7e31a3c Squashing feature branch commits in order to add signoff message. 704a9fd3 Use project.ServiceNames() if no service specified in hash d9e0e42d Add branch configuration for pull_request trigger c48e3c4a Initial codeql.yml commit dd0803db fix SIGTERM support to stop/kill stack 39008c53 align with OCI artifact best practices 6c345b37 refactor(cmd/compose/run): remove redundant `len` check 1ffa194e fail start if depependency is missing b9298101 check that the pull policy provided is a valid one or is not missing when --pull is used 3d0207eb remove uncessary return value of pullComposeFiles function 16a7c209 enable profile when down is ran with explicit service names 818bc3c3 add sync+restart action to watch attribute 38bc6d5d build(deps): bump github.com/containerd/containerd from 1.7.6 to 1.7.7 0b6ce6ee build(deps): bump github.com/google/go-cmp from 0.5.9 to 0.6.0 ae16bbbf build(deps): bump google.golang.org/grpc from 1.58.2 to 1.59.0 d13ad1f9 build(deps): bump golang.org/x/sync from 0.3.0 to 0.4.0 9b4d577c remove refrecence docs generation 14b43c1a remove cucumber tests as we haven't added new ones for a while 9dd081b9 add support of COMPOSE_ENV_FILES env variable to pass a list of env files 2c0b0232 add dry-run support for publish command 599e4b24 extract method to reduce cyclomatic complexity fe8c2780 warn user remote resource is disabled a345515f Don't delete dependent services 8967df7a Apply platform before hashing 4f694919 deps: remove deprecated github.com/pkg/errors 6ecab957 Include image name in error message 12e0ac89 pkg/compose/publish: use empty config descriptor mediaType a6b7d785 pkg/remote/oci: check artifactType instead of config.mediaType 991901f2 pkg/remote/oci: refer to the manifest as manifest 2d971fc9 update the watch warning message when no services with a develop section 78f33619 ci: enable verbose output for e2e tests (#11045) 44d21280 truncate command by default, introduce --no-trunc flag to get the full command ff2ff18c build(deps): bump google.golang.org/grpc from 1.58.1 to 1.58.2 ab81db5b config --xx don't need `env_file` being parsed 61c8be11 remove --timeout=0 flag to cleanup function of watch e2e test compose down command need the watch process to be killed to succeed 6be5f300 move watch from alpha to main command c34c306c TestWatch to use new `develop` section 5ca35c88 implement publish 805541be watch: use official `develop` section (#11026) 8f489d6d build(deps): bump github.com/opencontainers/image-spec 9ea8fbc6 build(deps): bump github.com/moby/buildkit from 0.12.1 to 0.12.2 76f150e4 build(deps): bump gotest.tools/v3 from 3.5.0 to 3.5.1 f447c809 build(deps): bump google.golang.org/grpc from 1.58.0 to 1.58.1 4587d4ba build(deps): bump github.com/containerd/containerd from 1.7.3 to 1.7.6 a697a069 introduce pull --missing flag to only pull images not present in cache 8af49ff3 resolve service reference into container based on observed state f6e31dbc don't rely on depends_on to resolve volume_from, better use observed state 6d5eb6fd update to go1.21.1 9d7e0ad6 correct scale error messages formatting 1a98a70b add scale command 19bbb12f ci: tweak restricted imports in linter (#10992) 7a134578 deps: upgrade Moby to v24.0.6 and gRPC to v1.58.0 (#10991) 13115468 cli: fix `--build` flag for `create` (#10982) e1aa4f77 otel: add args & flags to cli traces (#10974) d7b0b2bd watch: build & launch the project at start (#10957) e0f39ebb pull OCI remote resource c9d54f09 introduce publish (alpha) command 52e54ef9 doc: updated README.md to remove broken link f4f2e934 migrate to github.com/distribution/reference 32c3d0a3 Enable service explicitly requested to be restarted 1fdbcb62 build: pass BuildOptions around explicitly & fix multi-platform issues 407a0d5b up: fix various race/deadlock conditions on exit (#10934) 8caa6f1f pkg/api: replace uuid for basic random id Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-04-04 19:57:46 +00:00
Bruce Ashfield	fb2d44b8a0	podman: add new kernel module rrecommends ... Testing podman + netavark without kernel-modules installed in the image shows some are missing from the rrecomends. It could be argued that they belong in netavark, but since podman + netavark are almost always used together, we group them here. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-03-23 00:54:44 +00:00
Bruce Ashfield	081ef3c19c	podman: update to 5.0.0 ... Tested with cni: root@qemux86-64:~# podman version Client: Podman Engine Version: 5.0.1-dev API Version: 5.0.1-dev Go Version: go1.22.0 Git Commit: 177ea856f579914e0047655f32eb4f9fbc3ddbc4-dirty Built: Thu Mar 21 17:59:57 2024 OS/Arch: linux/amd64 root@qemux86-64:~# rpm -qa | grep cni cni-v1.2.0+rc0+gitb62753aa2bfa365c1ceaff6f25774a8047c896b50+b62753aa2b_b6a0e0bc96-r0.core2_64 root@qemux86-64:~# rpm -qa | grep neta Tested with netavark: root@qemux86-64:~# podman version Client: Podman Engine Version: 5.0.1-dev API Version: 5.0.1-dev Go Version: go1.22.0 Git Commit: 177ea856f579914e0047655f32eb4f9fbc3ddbc4-dirty Built: Thu Mar 21 17:59:57 2024 OS/Arch: linux/amd64 root@qemux86-64:~# rpm -qa | grep netavark netavark-1.10.3-r0.core2_64 Bumping libpod to version v5.0.0-4-g177ea856f, which comprises the following commits: bfc63cc32 fix remote build isolation when server runs as root f32338dfc bump version to v5.0.1-dev e71ec6f1d New release: v5.0.0 6b93d9e11 Update RELEASE_NOTES.md with CVE-2024-1753 eb2b16d6d [v5.0] Bump Buildah to v1.35.1 43b9ea8b9 Adjust to the standard location of gvforwarder used in new images 4a84f39b3 Switch to 5.x WSL machine os stream using new automation a03de4c14 rpm: use macro supported vendoring 069439820 Bump to v5.0.0-dev f8888a13b Bump to v5.0.0-RC7 2e387df07 Add release notes for v5.0.0-rc7 d36ce9c2b fix invalid HTTP header values when hijacking a connection 8891d592b Use faster gzip for compression for 3x speedup for sending large contexts to remote 59512272b pkg/machine: make checkExclusiveActiveVM race free 51eee609c pkg/machine/wsl: remove unused CheckExclusiveActiveVM() 412648207 pkg/machine: CheckExclusiveActiveVM should also check for starting 1ca93f3fb pkg/machine: refresh config after we hold lock 71320df8e rpm: update containers-common dep on f40+ e58cb97de Change API socket to be machine name isolated dbf38779b Makefile: drop tests-included from validate target 0fdd83173 Add release notes for v5.0.0 d7bc7b7b4 do not require policy.json 82597144b Machine decompress.go refactoring follow-up abaa179aa Add target win-gvproxy in winmake.ps1 4c5d26f6f Add final machine endpoint 068ddfd19 update API doc version to 5.0.0 f2af295e4 Bump to 5.0.0-dev d26113ca8 Bump to 5.0.0-rc6 52ed774c2 docs: generate-systemd: add clarification statement 3d6758a61 docs: quadlet: improve docs on root/rootless dirs 885dd2add [CI:DOCS] performance: fix URL and kernel version requirement e6ac569a1 [CI:DOCS] Remove outdated references 364813da6 Add note for RHEL 8.5 e220d1ce6 Update module gopkg.in/go-jose/go-jose.v2 to v2.6.3 [SECURITY] f91b8e77b Update module github.com/go-jose/go-jose/v3 to v3.0.3 [SECURITY] 9b21a5b79 Bump to v5.0.0-dev bbad09bb0 Bump to v5.0.0-rc5 432f4fbf9 Fix Mac CI d54a37399 Complete policy.json inclusion b234bb55e Bump Buildah to v1.35.0 5d3a19f8d podman compose: enable machine socket connection 6f4ee16d9 [CI:DOCS] Add farm command to commands list 25f3a8ce7 podman machine start/stop do not write config unlocked 75fa38d52 [CI:BUILD] Build universal Podman binary for Mac installer 7a7591492 podman machine init: do not write config unlocked 7bfe5e700 Fail on failures to close the file descriptors, and especially the SparseWriter 5e0b7e54c Avoid reliance on fs.ErrClosed in SparseWriter users 4c6505be5 Fix the logic for detecting an unexpected close error 81906081e vendor libhvee-0.7.0 3c9c5be7d podman machine set: change options only locked a65b546c6 Remove copySparseFile 2ba3a2d56 pkg/machine: fix relative DefaultPolicyJSONPath 724c5a06b Don't read full VM File before decompressing ff81cf7c7 [CI:DOCS] Fix windows installer action 4d2fc293c machine: make more use of strongunits 92b67a69a Fix wrong units size return 79012795a fix(deps): update github.com/containers/libhvee digest to 7cee23c d6d260174 [CI:DOCS] Migrate podman container image a349f8d10 fix(deps): update module google.golang.org/protobuf to v1.33.0 39851a0b9 CI: try to fix more flakes 835cfbc05 [CI:BUILD] rpm: Put the podmansh(1) manual in the podmansh sub-package 945995be1 e2e: fix potential race in file-locks test 02403c2e6 Makefile: podman should have correct selinux label 9ee96a956 properly implement pull-error event status 155cd463d fix(deps): update module golang.org/x/tools to v0.19.0 6272abbbb Resurrect auto-port reassignment, but for all providers ef7727238 Refactor env dir and port functions into new leaf pkgs eabf0acfa fix(deps): update module golang.org/x/net to v0.22.0 3b72f9178 Revert "Expose as-tested Mac/Windows repository state" 24516f3ef fix(deps): update module golang.org/x/term to v0.18.0 e8bf9a323 Update podman-for-windows.md 8c9222848 fix(deps): update github.com/containers/libhvee digest to 0ff33af e09444327 machine init: print output to improve UX 530782e11 logformatter: fixes for Macintosh ebce0e71d test/e2e: check for stderr errors in cleanup() ef6d38752 Bump to FreeBSD 13.3 (13.2 vanished) fc4e16366 Bump to v5.0.0-dev bce14b1e6 fix(deps): update module github.com/stretchr/testify to v1.9.0 cfc5b8e0f Bump to v5.0.0-RC4 185981fa5 Copy past golang/expansion form ks8.io/kubernetes Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-03-22 18:52:13 +00:00
Bruce Ashfield	3fbc1ae7ca	podman: conditionally add cni build tag ... We should ensure that cni is built as part of podman if that's the configured virtual runtime. Although cni is not a primary networking backend for podman, this also allows it to be skipped if netavark is used. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-03-22 18:37:08 +00:00
Bruce Ashfield	4e6a74ff63	Revert "docker-compose: update to v2.24.6" ... One of the vendor components has deleted a commit that docker-compose is using (and has listed as a replacement in go.mod). Until docker-compose comes up with a solution, we temporarily revert to and older compose. We'll update to the latest 2.23.x if this isn't resolved in 2.24+ before release. This reverts commit 29ec8e5cea.	2024-03-20 17:19:21 +00:00
Bruce Ashfield	cabcaf1007	k3s: package check-config.sh ... In a similar way we package check-config.sh for docker, we package the contrib script for k3s. root@qemux86-64:/# ./usr/share/k3s/check-config.sh [48/4924] Verifying binaries in ./usr/share/k3s: - sha256sum: sha256sums unavailable - links: link list unavailable System: - /usr/sbin iptables v1.8.10 (legacy): ok - swap: disabled - routes: ok Limits: - /proc/sys/kernel/keys/root_maxkeys: 1000000 info: reading kernel config from /proc/config.gz ... Generally Necessary: - cgroup hierarchy: cgroups V2 mounted, cpu|cpuset|memory controllers status: good - CONFIG_NAMESPACES: enabled - CONFIG_NET_NS: enabled - CONFIG_PID_NS: enabled - CONFIG_IPC_NS: enabled - CONFIG_UTS_NS: enabled - CONFIG_CGROUPS: enabled - CONFIG_CGROUP_PIDS: enabled - CONFIG_CGROUP_CPUACCT: enabled - CONFIG_CGROUP_DEVICE: enabled - CONFIG_CGROUP_FREEZER: enabled - CONFIG_CGROUP_SCHED: enabled - CONFIG_CPUSETS: enabled - CONFIG_MEMCG: enabled - CONFIG_KEYS: enabled - CONFIG_VETH: enabled - CONFIG_BRIDGE: enabled - CONFIG_BRIDGE_NETFILTER: enabled - CONFIG_IP_NF_FILTER: enabled (as module) - CONFIG_IP_NF_TARGET_MASQUERADE: enabled (as module) - CONFIG_NETFILTER_XT_MATCH_ADDRTYPE: enabled (as module) - CONFIG_NETFILTER_XT_MATCH_CONNTRACK: enabled (as module) - CONFIG_NETFILTER_XT_MATCH_IPVS: enabled (as module) - CONFIG_NETFILTER_XT_MATCH_COMMENT: enabled (as module) - CONFIG_NETFILTER_XT_MATCH_MULTIPORT: enabled (as module) - CONFIG_IP_NF_NAT: enabled (as module) - CONFIG_NF_NAT: enabled (as module) - CONFIG_POSIX_MQUEUE: enabled Optional Features: - CONFIG_USER_NS: enabled - CONFIG_SECCOMP: enabled - CONFIG_BLK_CGROUP: enabled - CONFIG_BLK_DEV_THROTTLING: enabled - CONFIG_CGROUP_PERF: enabled - CONFIG_CGROUP_HUGETLB: enabled - CONFIG_NET_CLS_CGROUP: enabled - CONFIG_CGROUP_NET_PRIO: enabled - CONFIG_CFS_BANDWIDTH: enabled - CONFIG_FAIR_GROUP_SCHED: enabled - CONFIG_RT_GROUP_SCHED: enabled - CONFIG_IP_NF_TARGET_REDIRECT: enabled (as module) - CONFIG_IP_SET: enabled (as module) - CONFIG_IP_VS: enabled - CONFIG_IP_VS_NFCT: enabled - CONFIG_IP_VS_PROTO_TCP: enabled - CONFIG_IP_VS_PROTO_UDP: enabled - CONFIG_IP_VS_RR: enabled (as module) - CONFIG_EXT4_FS: enabled - CONFIG_EXT4_FS_POSIX_ACL: enabled - CONFIG_EXT4_FS_SECURITY: enabled - Network Drivers: - "overlay": - CONFIG_VXLAN: enabled (as module) Optional (for encrypted networks): - CONFIG_CRYPTO: enabled - CONFIG_CRYPTO_AEAD: enabled - CONFIG_CRYPTO_GCM: enabled - CONFIG_CRYPTO_SEQIV: enabled - CONFIG_CRYPTO_GHASH: enabled - CONFIG_XFRM: enabled - CONFIG_XFRM_USER: enabled (as module) - CONFIG_XFRM_ALGO: enabled - CONFIG_INET_ESP: enabled (as module) - CONFIG_INET_XFRM_MODE_TRANSPORT: missing - Storage Drivers: - "overlay": - CONFIG_OVERLAY_FS: enabled STATUS: pass Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-03-19 14:02:23 +00:00
Bruce Ashfield	54f80102b0	k3s: set version.UpstreamGolang in binaries ... k3s will refuse to start if the golang version it was built with doesn't match the VERSION_GOLANG linker variable. As an example: https://gitlab.alpinelinux.org/alpine/aports/-/merge_requests/61668 We query our version of the compiler and set it in the binaries to ensure they match. Note: this may cause issues if you bump the golang compiler, but k3s doesn't rebuild. We'll worry about that when it happens. With this change, k3s starts and the node becomes ready. root@qemux86-64:~# uname -a Linux qemux86-64 6.6.20-yocto-standard #1 SMP PREEMPT_DYNAMIC Sun Mar 3 16:28:22 UTC 2024 x86_64 GNU/Linux root@qemux86-64:~# kubectl get nodes NAME STATUS ROLES AGE VERSION qemux86-64 Ready control-plane,master 10m v1.28.7-k3s1 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-03-15 19:09:05 +00:00
Bruce Ashfield	769cf8be74	criu: patch cleanups ... Adding Upstream-Status and reformatting some of the long logs. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-03-15 17:17:20 +00:00
Tim Orling	8dd5ca2900	criu: pycriu RDEPENDS on python3-fcntl ... Signed-off-by: Tim Orling <tim.orling@konsulko.com>	2024-03-15 17:17:20 +00:00
Tim Orling	c735cd2ec9	criu: pycriu RDEPENDS on python3-ctypes ... Signed-off-by: Tim Orling <tim.orling@konsulko.com>	2024-03-15 17:17:20 +00:00
Tim Orling	6f7a7d62cb	criu: pycriu RDEPENDS on python3-protobuf ... Signed-off-by: Tim Orling <tim.orling@konsulko.com>	2024-03-15 17:17:20 +00:00
Tim Orling	227452ab4b	criu: cleanup; export USRBINPATH PEP517_INSTALL_PYTHON ... Signed-off-by: Tim Orling <tim.orling@konsulko.com>	2024-03-15 17:17:20 +00:00
Tim Orling	cd11ca9de3	criu: fix pycriu build of wheel ... Inherit python_setuptools_build_meta instead of setuptools3, as this is the build-backend declared in the pyproject.toml We seem to need python3-protobuf-native as a DEPENDS, but then the dependency check complains because our version in meta-python is python3-protobuf_4.25.bb Workaround this (for now?) by telling python3 -m build to --skip-dependency-check This allows criu to _build_. Whether it is functional and proper is a different story. Signed-off-by: Tim Orling <tim.orling@konsulko.com>	2024-03-15 17:17:19 +00:00
Tim Orling	9b4acf5185	criu: build and install wheels ... Mimic what we do with python_pep517.bbclass in do_compile (python3 -m build) and do_install (python3 -m install) to build and install wheels and avoid the heavy handed pip install usage. FIXME: even though lib/pycriu/version.py is properly being dynamically generated, setuptools/config/expand.py is failing to detect the __version__ attr. Signed-off-by: Tim Orling <tim.orling@konsulko.com>	2024-03-15 17:17:19 +00:00
Bruce Ashfield	6509f2f6e1	criu: update to v3.19 ... Bumping criu to version v3.19, which comprises the following commits: f8b14286b criu: Version 3.19 (Bronze Peacock) f104b3d6d Makefile: introduce ARCHCFLAGS for arch specific cflags 0b62f4267 lib: use separate packages for pycriu and crit 97b8b659c zdtm: cgroup_ifpriomap: Improve skip check's robustness. e076c11e2 ci: fix codespell errors 41938f14b zdtm/static: test the offset migration of ELF files 29026496d zdtm/lib: add missing signal.h header a77185dae files-reg: don't change the file pos in get_build_id 5d4179ddb criu/proc_parse: refactor the eventpoll parser cfaacfb58 zdtm/thread_different_uid_gid: remove the redundant check 36a84751e zdtm/cow00: fix typo 48d6a59a2 arch/x86: remove the redundant check 45670b655 apparmor: remove the redundant check 5e8d7dc94 tun: don't parse buffers that have not been filled with data 4c9d23d33 util: allow to run criu under strace c9fdd355f pie: Mark __export_*() functions as externally_visible 5d6c8bc58 clang-format: disable column limit constraint 81a30c320 zdtm/memfd04: check execveat on memfd that has memory mappings e86e8dac0 memfd: don't reopen file descriptors for memory mappings 28e854d66 amdgpu: fix clang warnings ba168ab78 ci: enable build with amdgpu plugin aa38a5989 amdgpu: print an error if the dup syscall fails 940a05c0b amdgpu: don't leak fd on an error path in open_img_file a68975c06 plugins: the UPDATE_VMA_MAP callback returns fd with the full control 66f39adf1 criu: change the comment about magic numbers 9b4e8292c vma: Add !VVAR condition to vma_entry_can_be_lazy 28adebefb Return page size as unsigned long 00f8a56b6 zdtm: check userns once ba48ceb57 zdtm: socket_udp_shutdown: Make the test fail instead of timing out. f6e820bed zdtm: Treat ESRCH from kill() as success. c29c5a1df zdtm: cgroup04: Improve skip check's robustness. 131e464a0 zdtm: cgroup04: Improve error messages. 785d97a61 zdtm: If ignoring kernel taint, also ignore taint changes. 5e544dc44 ci: stop testing ubuntu overlayfs 7a2910f89 py/cli: add --version option 61d9cf6f9 crit/setup.py: use __version__ from pycriu 8adefc90d lib/pycriu: generate version.py 59fcfa80d compel: Add support for ppc64le scv syscalls d06c9b5cd criu/plugin: Add environment variable to cap size of buffers. 8caf460b9 zdtm: test MEMBARRIER_CMD_GLOBAL_EXPEDITED migration 2ba872782 dump: use MEMBARRIER_CMD_GET_REGISTRATIONS when available 32241b00d vagrant: run tests with fedora 38 862cb5c1c vagrant: update to version 2.3.7 d2a0d1fa6 lint: don't fail workflow on indent fail 08f286ed9 CONTRIBUTING.md: improve coding-style related sections 38bf7f42e CONTRIBUTING.md: don't mention ctags b7a8bb088 zdtm: test execveat(memfd) c9b2633ca memfd: return original memfd fd for execveat() 480565437 kerndat: check_pagemap: close(fd) on error path d5284313f kerndat: Make errors from clone3() check more precise. badf8060c proc_parse: Log smaps entry while dumping VMA. 1800018bc test/other: add test for action-script ea05b06ac proc_parse: remove trivial goto from vma_get_mapfile_user() f7d7dc9c0 compel/infect: include the relevant pid in "no-breakpoints restore" debug message b56a9cef3 kerndat: Make pagemap check more robust against swapped out pages. 86ad52bc2 ci/loongarch64: compile tests before running zdtm.py 0085f992c memfd: don't set fd attributes not needed for vma mapping 8c17535f3 loongarch64: fix syscall_64.tbl 6ea60d6ef github: auto-remove `changes requested` and `awaiting reply` labels 620e8c0a6 Put a cap on the size of single preadv in restore operation. 2547ac8ac zdtm: membarrier: test migration of membarrier() registration e07155e19 dump+restore: Implement membarrier() registration c/r. 5b790aa18 loongarch64: reformat syscall_64.tbl for 8-wide tabs d1096e3b3 lib/py: add VMA_AREA_MEMFD constant d3b955e57 ci/docker: install all required packages 9477354de scripts/apt: don't hide apt output a4b49c46f amdgpu_plugin: remove duplicated log prefix 69200bec7 irmap: scan user-provided paths in order 2a131167b page-xfer: Pull tcp_cork,nodelay(). 6ed50ea49 apparmor: fix incorrect usage of sizeof on char ptr 3628589b5 zdtm/memfd00: test memfd file mode dfa541095 memfd: dump and restore permissions. ac1219f4e sk-inet: Extend 'TCP repair off' failure log. 25d033080 restore: Skip dropping BSET capability if irrelevant. fe4be19de prctl: test prctl(NO_NEW_PRIVS) setting a605cc9f3 prctl: Migrate prctl(NO_NEW_PRIVS) setting. 7df3f6595 restore: Fix capability migration requirements between different kernels. 7ab02639f restore: Skip setgroups() when already correct. 4998b724e restore: Avoid need for CAP_SETPCAP if not changing uids. 99188cfbe tty: Avoid EPERM for no-op chown(). 113957270 memfd: Avoid EPERM for no-op chown(). 96fa42b79 cgroup: Replace restore_perms() with cr_fchperm(). b074f92f9 files-reg: Avoid EPERM in ghost_apply_metadata() for no-op changes. f985d9f44 sk-unix: Avoid restore_file_perms() EPERM error for no-op changes. 21560270d util: Implement fchown() and fchmod() wrappers. e25a243b2 ci: add workflow for loongarch64 788e1e92e zdtm: add loongarch64 support ae0811475 criu: add loongarch64 support to parasite and restorer ec6dc2d5c images: add loongarch64 core image c9df09eea compel: add loongarch64 support b304106e6 include: add common header files for loongarch64 8a24d4872 ci: add workflow to ensure self-contained commits 23313080a kerndat: don't leak a socket file descriptor b2d74fbfd zdtm: replace NR_fstat with NR_statx 8ee35bebb kerndat: bind ipv6-socket only if ipv6 is enabled 6b8107cd1 irmap: Reduce error log severity to warning. 4eb6cc319 mount: Demote fsnotify logs for ignored failures. 3e428a1de log: Remove error logs for ignored or otherwise logged subprocess exits. 804c0ba82 soccr: Log name of socket queue that failed to restore. 4018b7877 soccr: Log offset when failed to restore socket's queued data. 1cb791652 sk-unix: Log both peer names when failing on an external stream unix socket. 5a723937a compel: Log the status word with "Task is still running" errors. 664598dc7 files-reg: Debug "open file on overmounted mount" error. a5fe99d2c cgroup: Propagate error on cgroup mount failure. 056cac474 zdtm: drop python 2 compatibility 002f2372a lib/py: drop python 2 compatibility d388b91de test/others: drop setup_swrk() py2 compatibility ee9983d4a test/criu-ns: drop python 2 compatibility ede018176 make: remove checks for python 2 binary 642fd99bf remove python-future dependency 376f3d180 crit: add requirements.txt for pip>=20.1 f5d06571c crit: drop python 2 support 7825f4ebf coredump: drop python 2 support 05f0535de ci: clean up CentOS 7 related tweaks 362d8fa5c ci: disable CentOS 7 test in Cirrus CI 94c9e4787 readme: refactor asciinema link for video playback 7bda5e656 zdtm: Update netns purpose comment in zdtm_ct. 9ad59f58f util: Make CRIU run_id machine-level unique. eecc53d05 kerndat: Don't fail on NETLINK/nsid support missing. bf8446ae5 kerndat: unexport kerndat_nsid() f2011e1c7 util: Downgrade ignored errors to warnings. 2aa9cb933 rpc: Support setting images_dir by path. 439b52243 rpc: Support gathering external file list after freezing process tree. 82a0db036 docker/podman: test c/r with action-script 28d005638 action-scripts: allow shell scripts in rpc mode 3e0a8ffd6 build: libnfnetlink: Remove nla_get_s32(). f043cb22a build: Guard against libbsd's version of `__aligned`. c5142104a build: Use make-provided AR for building libzdtmtst. 88f8fdda8 build: Fix LIBS vs LDFLAGS order. cbbe6c683 build: Debug system feature tests. 1a1fa439c build: Remove HAS_MEMFD test 2bf10c8d2 restore: remove unused `secbits` field. e5c9bc4d0 kerndat: Make socket feature probing work on IPv6-only host. eea0d6ede pipes: Plug pipe fd leak in "Unable to set a pipe size" error case. ffa1e47fd sockets: Increase the size of sockets hashmap to 16K. 304a309ae test/thp_disable: fix lint c97cc6a6c Allow skipping iptables/nftables invocation. d0ac547b3 zdtm: sock_opts00: Improve error messages. 6bc00fcb8 zdtm: Implement test sharding. 1fb5c410c zdtm: Allow --keep-going for single test. ed88e3241 zdtm: Add timeouts for test commands. 516fade93 zdtm: Allow overriding /tmp. 4b764a9dc Allow passing --log_to_stderr via RPC. 1e5ebec39 Allow passing --display_stats via RPC. 0e88a91ff Allow passing --leave_stopped by RPC. 4455444ee compel/test: Return 0 in case of error in fdspy 4c1409b8f Fill FPU init state if it's not provided by kernel. 93ad8d40d zdtm: thp_disable: Verify MADV_NOHUGEPAGE before migration 01238d270 zdtm: thp_disable: Verify prctl(THP_DISABLE) migration a0c78a790 zdtm: thp_disable: Output a single failure message 2364c963c Log if prctl(SET_THP_DISABLE) doesn't work as expected. 21ce76263 Restore THP_DISABLE prctl. 9943dcde1 Fix mount(cgroup2) for older kernels. 0218b1e8f Fix dumping hugetlb-based memfd on kernels < 4.16. a638043a7 cgroup/restore: split prepare_task_cgroup code into two separate functions 2ac15e3ad action-scripts: Add pre-stream hook c6ac396aa timers: improve and fix posix timer id sequence checks fc08fa907 criu-ns: Update shebang line to python 9cd09f586 criu-ns: Install Python pathlib module in CentOS 7 9c9e8ea3f criu-ns: Add tests for criu-ns script e4b6fb2d1 criu-ns: Add support for older Python version in CI 733f16551 criu-ns: Add --criu-binary argument to run_criu() 36709536e lib/c: add empty_ns interfaces to libcriu b665dce3c docs: rename amdgpu_plugin.txt to criu-amdgpu-plugin.txt cc607f810 criu-ns: make --pidfile option show pid in caller pidns 50e17a1cf scripts: make newer versions of shellcheck happy df7b897a2 ci: fix new codespell errors 727d79650 compel: support XSAVE on newer Intel CPUs fa6af25e7 dump: increase fcntl call failure judgment 1c0f8787b zdtm: Add tests for ip tos restore 04cdbd610 sk-inet: Add IP TOS socket option 4c1a2ac41 criu: Version 3.18 (Silver Sandpiper) b689bcc35 cr-check: remove excess kerndat_has_nspid from check_ns_pid 9b3496043 log: fix timestamp logging when tv_sec>=100 94ac9ee3c proc_parse: fix while condition in parse_pid_status 45e4a6b27 netlink: fix netlink fd flags dump/restore failed 6c728df1d zdtm: modify rseq01 to include a thread f8da250bb cr-dump: properly apply rseq fixup for all threads 78c4e2c0f cr-dump: move rseq functions before dump_task_thread 85e46c44d dump: extend parasite_thread_ctl lifetime to dump_task_thread 9683097f2 zdtm: don't ignore rseq_cs mismatch in rseq01 test 0c5239932 ci: cancel preceding workflows run 5c8cdceec sk-unix: rework unix_resolve_name de39bd2bd sk-unix: simplify error handling in unix_resolve_name_old d93409cf1 sk-unix: remove bogus xfree from unix_resolve_name_old ccc790d54 zdtm/lib: fix cwd path freeing 8e6fa9c3b net: Add net log prefix 7f0f07599 crit: fix compatibility with Python 3.12 bd0f209c2 pstree: improve id intersection detection in prepare_pstree_for_shell_job 66fd45d51 sk-unix: add some missed error printing a0158e692 zdtm: add MNTNS_ZDTM macro to fix initialization 12423abdb mount: allow bindmounts for external fuse mounts 65407616e ci/archlinux: initialize machine ID 34e2b0221 Optimized shell code with <'s (instead of cat + |) 7cae16e97 mount: do collect_mntinfo of external mount namespace with no for_dump 69befdde1 cgroup-v2: make new field cg_set optional 529f29891 cgroup-v2: make new field is_threaded optional 6e681afb6 net: fail restore if nftables isn't supported but image is present 156c8da33 make: disable '-Wdangling-pointer' warning with gcc 12 4930c9802 x86/xsave: Set only used XFEATURE_* in xstate_bv 3f8e3220b CONTRIBUTING.md: document make lint / indent 42c4be2a9 net: use get_legacy_iptables_bin also on restore 298286718 pie/restorer: Fix fd leaking on error path 1d4777e45 test: add long command-line to coredump test edaec5d76 coredump: report missing files without a backtrace 3ca979f9a coredump: handle long command-lines a0cc95c03 lib/py: reduce code duplication 85b5c1e45 ci/podman-test: drop crun installation script 91ff24b47 ci: disable c/r of cgroups with podman e7ab6fe63 restore: don't miss futex abort in restore_task_with_children 676b4579f zdtm/transition/epoll: don't rely on errno in case of zero return 7b8035344 mailmap: update my email 1ae9bac54 dump: improve error printing and readability of task_comm_info 11c71656b ci: add test for crit info 9b919ab74 crit: fix empty string comparison fa4af0430 dump: Show task comm early fd7e97fcf lint: exclude tags file from codespell 50e42c9dd Add documentation for --ghost-fiemap 4a8c02d63 zdtm: Add tests for IP_PKTINFO and IP_FREEBIND sock options bd9b66c8c sk-inet: support IP_PKTINFO and IPV6_RECVPKTINFO options 7d4d4915a sk-inet: save IP_FREEBIND option for SOCK_RAW sockets also f1c8d386b kerndat: check if setsockopt IPV6_FREEBIND is supported 14e883656 proc_parse: Handle btrfs files when map_files is not accessible d7da4a69a ci: Add maps00 test in unprivileged mode in user namespace d2abc9817 shmem: Close fd when VMA is copied from /proc/$pid/mem 144b467a0 shmem: pr_err -> pr_perror 6d7c0d007 compel/mips: fix parasite with GCC 12 7280e96a7 clang-format: use IndentGotoLabels to get rid of goto label indentation fcdb753ed namespaces: cleanup switch_mnt_ns and restore_mnt_ns 63159c14c mount: simplify code around mount_cr_time_mount 43fa4e76d remap: refactor goto jumping to a while loop 757a2b46c remap: Fix typo 3837d31b5 ci/lint: make push action have at least too commits depth cec43025a criu(8): Add info about unprivileged mode limitations 80528dbf7 proc_parse: Don't bail out on is_memfd() VMAs 95e590b51 shmem: Fall back to /proc/$pid/mem if no map_files 951c56917 proc_parse: Set VMA_AREA_REGULAR where needed a92dfb61f string: define wrapers __setproctitle and __setproctitle_init to hide bsd headers 0a7c5fd1b string: use our own __strlcpy and __strlcat to remove bsd headers 8cfda2748 log: remove all uses of %m specifier in pr_* functions 7459d0204 lint: prohibit to use %m specifier in pr_* functions f73ba7726 ci: switch from lgtm to codeql 0bddecead restorer: add logging on prctl PR_SET_MM_MAP failure fb66727a2 zdtm: add mntns_compare check to mount_complex_sharing ba09fad39 zdtm: add mountinfo topology compare to test lib 2837a13ef zdtm: add mountinfo parsing to test lib 543501d5f zdtm/lib: copy xmalloc.h d800ef658 zdtm/lib: copy list.h be61624f4 clang-format: rework make indent to check specific commits a918093ce scripts/ci: use Fedora 37 for vagrant based tests 1bb84f96f tty: fix codding-style around for_each_bit call abfe0b5d2 clang-format: add for_each_bit macros to ForEachMacros c8b4fb9ba autofs: fix a frankenstein auto-created by clang-format aab709b60 log: Write more details in write_pidfile 7c6eb0b85 asm: fix for_each_bit macro bb3f7bef6 crtools: fix help message alignment for --network-lock a302b3694 zdtm: fix 'zdtm.py list' command 21f5be91a cgroups: ignore EOPNOTSUPP on setting memory.kmem.limit_in_byte 9686693aa test/javaTests: update org.testng:testng (Maven) 5c60d35be sockets: tiny style fix 5a19c3432 non-root: Don't dump socket option SO_MARK if 0 2180e03b9 non-root: Rework socket bufs for unprivileged mode e5ccfbb24 Fix typo in comment bdbccc315 zdtm: add two tests for highly sparse ghost file f3fdce81a files-reg.c: fiemap algorithm for ghost file 14b9ec195 ci: fix make indent d0c64b7b3 ci/alpine: remove symlink for /usr/bin/python 095b3e84b ci/lint: install ShellCheck with dnf c48b5290d Fix warnings from -Wstrict-prototypes in clang 16.0.0 fa2c585c2 amdgpu: define __nmk_dir if missing c7211f52d Remove execute bit from source file f5e0f641a cgroup: Remove redundant code that handles zombie tasks c1ae880eb kerndat: Mark memfd_create(MFD_HUGETLB) unavailable when ENOSYS is returned 153614cb1 ci: move cgroup unmounting to run-ci-tests.sh 516ebc4f5 ci: Do not fail if latest epel repository definition is already installed 2ebce9233 ci: Make cpuset move to cgroup-v2 hierarchy 07d538cef zdtm: Check threads are restored into correct threaded controllers 20ea8a064 cgroup-v2: Restore threads in a process into correct threaded controllers 17d1d8810 cgroup-v2: Dump cgroup controllers of every threads in a process ad3936e81 zdtm: Add test to check global properties of cgroup-v2 are preserved d7e874659 zdtm: Add write_value/read_value helpers into zdtm library 167cfd366 cgroup-v2: Checkpoint and restore some global properties 8a336ab22 Switch aarch64 builds to Cirrus CI 840735aa0 ipc_sysctl: Prioritize restoring IPC variables using non usernsd approach 3db8d1a6c cgroup: add a comment to restore_cgroup_prop about path argument requirements 1cba559da non-root: add non-root test case to cirrus runs 6743d608c non-root: extend zdtm.py to be able to run tests as non-root 251939992 Documentation: add details about --unprivileged 47b07d011 non-root: Introduce unprivileged mode to kerndat 6a30c7d1e non-root: enable non-root checkpoint/restore ce01f70d9 non-root: add functions to work with capabilities 4b4bf0421 non-root: add infrastructure to run as non-root 4c7f91aff ci: enable EPEL for CentOS 7 a39d41656 compel: Fix ppc64le parasite stack layout 17ec53913 compel: Add test to check parasite stack setup 556ab0dea compel: Fix infect test to not override failures 461fa7271 compel: Add APIs to facilitate testing debc9c16c seize: do not overwrite exit code from failpath 16f1c147c test/others/crit/test.sh: use bash array 0a872ccf1 scripts/protobuf-gen.sh: fix (not ignore) shellcheck warnings 75b859f23 scripts/ci: rm shellcheck disable annotations aeb6961f3 scripts/ci/run-ci-tests: use bash arrays b1fb9f2f0 Fix, not ignore, shellcheck SC1091 warnings 9d2948b23 scripts/ci/asan.sh: fix, not ignore, shellcheck warning 968eec0d5 scripts/ci/apt-install: fix (not ignore) shellcheck warning 86ac0f05e ci/gha/lint: install a recent shellcheck 2039d7320 files-reg: skip failed mount lookup for shell-job's tty 9e91e62a7 criu-ns: capture controlling tty 40e1aaf56 mount: add definition for FSOPEN_CLOEXEC 7bc24688d ci: Clean up and improve Java testing 0178f2f99 ci: Add Dockerfile for openj9 on Ubuntu 39b3de60b ci: Rename openj9 Dockerfiles to hotspot f78d3d821 gitignore: Ignore top-evel build dir only aeaff6445 test/unix: check C/R of unix listen queues 83c606e02 zdtm: return 1 from pr_err, pr_perror, fail dca55d281 criu: fail migration if data was sent to an in-flight socket dfe9d006a breakpoint: enable breakpoints by default on amd64 and arm64 bb73e1cf5 breakpoint: implement hw breakpoint for arm64 platform b7953c6c7 compel: switch breakpoint functions to non-inline at arm64 platform 719fea2fc compel: clear a breakpoint right after it's been triggered d7477dac0 compel: set TRACESYSGOOD to distinguish breakpoints from syscalls c089159a4 ci/cirrus: centos 8 job nits a202ec271 ci/cirrus: add CentOS Stream 9 2642b657d docker-test: handle race condition error 49319cd57 Add Alexander Mikhalitsyn to maintainers f7972a3f0 cr-restore: rseq: use glibc-specific way to unregister only as fallback cacddf19d cr-restore: rseq: dynamically handle *libc with rseq 1f9bd82a5 cr-check: optimize check for apparmor stacking a1262f55f cr-check: fix check for apparmor stacking f9bc0a750 docker-test: use containerd installed from package 750acec25 Revert "ci: Switch to non overlaysfs tests" e8a6765d1 criu: fix conflicting headers eb4ecb3cf ci: unset XDG_RUNTIME_DIR when invoking podman da4803bea MAINTAINERS: Add Radostin (myself) to maintainers e62d541bd zdtm: add two tests for large ghost sparse file 2d34b5602 unlink_largefile.desc: remove crfail, since criu now can support unlink_largefile test fbded7978 files-reg.c: modify the check of ghost_limit to support large sparse files 01b8d40ce zdtm/mnt_root_ext: don't allow propagation from test mntns to criu mntns d12e2364c zdtm: make root mount private in criu mntns 70a9cd6fb vdso-compat: Increase the reserved buffer for compat vdso b30f3ee3d zdtm: Remove permission part check for skipping vsyscall vma c502d480f x86/compel/fault-inject: fixup mxcsr for PTRACE_SETFPREGS e30d18f43 rseq: fix headers conflict on Mariner GNU/Linux ad58553d9 Add --skip-file-rwx-check opt test 18fba4125 config/files-reg: Add opt to skip file r/w/x check on restore 6cef6e726 zdtm: add tests for SIGTSTP c7858ba42 infect: add SIGTSTP support 49caf85b2 config: fail on --track-mem option if dirty tracking is not available 91e971c4d hugetlb: don't dump anonymous private hugetlb mapping using memfd approach dd0217976 amdgpu: Add gitignore b117b211a zdtm/scm: add scm09 test with closed sender fd 5cd7092fd sk-unix: make add_fake_unix_queuers earier and rework find_queuer_for 28358db13 Fix the check for mnt namespace in criu-ns 295dc85ca github: use git-clang-format instead of make indent ced4ab4b0 zdtm: skip zdtm/static/shm-hugetlb when hugetlb is not supported c830643d8 Revert "ci: skip new hugetlb maps09/maps10 tests for pre-dump" b26e1fdbf mem: Skip pre-dumping on hugetlb mappings 9066f8741 cr-dump: do not report success to logs if post-dump script failed d46f40f4f criu: Version 3.17.1 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-03-15 17:17:19 +00:00
Bruce Ashfield	417cfa77c5	kubernetes: fix build with go 1.21+ ... go1.21+ checks the GOTOOLCHAIN variable and will attempt to validate/fetch the toolchain version requested. That doesn't work in our environment, so we export the variable as "local" to indicate that the build should trust (and use) the local toolchain. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-03-15 17:17:19 +00:00
Bruce Ashfield	e11497bda2	kubernetes: allow go 1.20 building ... Although k8s checks for, and demands, golang 1.21.x, runtime tests show that golang 1.20.x is properly building and providing enough for core functionality. In an effort to see what else may be lurking, we patch out the check to allow builds with our 1.20.x toolchain. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-03-15 17:17:19 +00:00
Bruce Ashfield	17eeea68a5	kubernetes: update to 1.29.1 ... Bumping kubernetes to version v1.29.1-1-ga02da633101, which comprises the following commits: a02da633101 Update CHANGELOG/CHANGELOG-1.29.md for v1.29.1 bc401b91f27 Release commit for Kubernetes v1.29.1 5350f0829f5 Revert "Graduate Evented PLEG to Beta" 5b1e1446823 [go] Bump images, dependencies and versions to go 1.21.6 and distroless iptables to 0.4.4 0da29848c53 Make OpenAPIGetter tolerant of nil 865f214fe53 use context for lazy evaluation. cde050c4d0b Initialize default attach func regardless of the value of flag b055126537b .*: bump golang.org/x/tools to v0.16.1 05937cba41d add ut 00045c3c9d6 fix b10ad75ab1d fix 4b8554018c1 fix: 119921 a5f64b743e4 Address comment ed501c1f080 Keep presence cost to 0 to ensure backward compatibility. 37717c1bc43 fix(scheduler): fix incorrect loop logic in MultiPoint to avoid a plugin being loaded multiple times 4a597425b8b fix falky test pkg/registry/core/persistentvolume/storage TestUpdateStatus 40d8e405b8e Use a separate function for checking if device was reconstructed d30fda3c68c Add tests for checking of uncertain device paths 910fa603a25 Fix device uncertain errors on reboot 62d0bd7260f Fix CSI migration for vSphere volumes ce513803ca9 Wire in field dropping for CRDs 9abd608b99e Revert "scheduler/nodeaffinity: reduce pod scheduling latency" 95751b4df7f Revert "scheduler/NodeUnschedulable: reduce pod scheduling latency" 85ff8c0b081 kube-proxy: Fix etp:Local for externalIPs ee9a55c25d6 Add unit test for Job Controller for panic when PodFailurePolicy is used on 1.28 e1e60c9b658 Update CHANGELOG/CHANGELOG-1.29.md for v1.29.0 3f7a50f3868 Release commit for Kubernetes v1.29.0 3b8f25dfdd9 fix: disable SchedulerQueueingHints feature flag by default 0c645922edc CHANGELOG: Update directory for v1.29.0-rc.2 release a2115acba28 Update CHANGELOG/CHANGELOG-1.29.md for v1.29.0-rc.2 e4636d05bc3 Release commit for Kubernetes v1.29.0-rc.2 0ca3089bee6 Bump distroless-iptables to v0.4.2 1c1347a3e71 [go] Bump images, dependencies and versions to go 1.21.5 4e5321c92e0 add beta comment for pod replacement policy 233949e05df Add an integration test to verify root path cleanup c769c2db6ed Revert conformance test addition of root paths ec9387da084 Remove scrape_error from resource_metrics_test due to deprecation 022d50fe3a1 CHANGELOG: Update directory for v1.29.0-rc.1 release 71c7e93ba7f Update CHANGELOG/CHANGELOG-1.29.md for v1.29.0-rc.1 96a32568e66 Release commit for Kubernetes v1.29.0-rc.1 f730dc39f9d Fix verify target to not update env var if already set 51daa8cbd5e api: run hack/update-api-spec.sh f042994cb03 releng: update publishing bot rules for 1.29 bacac254799 CHANGELOG: Update directory for v1.29.0-rc.0 release ab6a1ad8e1f Release commit for Kubernetes v1.29.0-rc.0 af34f62170c code-generator: fix invalid replace of klog d203bb54f8a fix flake on conformance e2e test ResourceQuota controller should apply changes to a resourcequota status 005e85c4d3e fix(framework): remove the mention about what happens with nil from EventsToRegister 64f8c6939f8 Replace -E with --setenv for systemd-run parameter dd6e286a1ae TestSlowNodeSync: fix flake by allowing informer cache to get populated c3ff08250eb CHANGELOG: Update directory for v1.25.16 release 59c63185457 CHANGELOG: Update directory for v1.26.11 release bb6c9ecb1a2 CHANGELOG: Update directory for v1.27.8 release 3f81c5cf3ff CHANGELOG: Update directory for v1.28.4 release 34e620d18c0 Support score extension function in preemption. 99f7df3e1c1 improve default_servicecidr_controller startup c99b5a208de Check error from gomega 49e8c196c34 use framework gomega 8c68aa656b1 Update publishing-bot rules for active release branches that uses go120 to Go 1.20.11 6aa3002ad24 add kubeup label instead of a feature label 27dfe93f53d Use value(name) in gcloud compute instance-groups managed list-instances 20853ef1200 Bump distroless-iptables to v0.4.2 4b1b9a198a6 Fix issue with client rate limiter when polling 7c5dfceff8a add false matchCondition benchmark f9ab24bf485 Refine test case 617f2132fed e2e: avoid redundant labels in JUnit file 172f680326a fix: smb file share unavailable issue when it's deleted 2017fb2ec53 Fix "go test -count=2 ./pkg/proxy/iptables" bda722bb684 kubeadm: support updating certificate organization during 'kubeadm certs renew' 2780060a789 kubeadm: change SystemPrivilegedGroup in apiserve-kubelet-client.crt 11cdb8fd011 split compile and eval fe53db0dbdc authz: add benchmark for webhook authorizer 475bfa4a633 set LimitedSwap 819d1903a27 Add support for authorization-config to local-up-cluster b53134f129f Test anonymous and RBAC handling via config file 264cd648246 Run RBAC hook correctly when running from authz config file 1f40e0916ec Only default mode to AlwaysAllow when config file is unspecified 76277f693d0 create a new KubeUp feature label for tests marked for removal 9e5b8402bb9 update go.mod 88e124ecaa4 [go] Bump images, dependencies and versions to go 1.21.4 e4fdc96c188 Pass External Storage label parameters as individual arguments in framework variadic function f3dad977040 self nominate aroradaman as sig- proxy-reviewer 2645b22003d Self nominate Kevin Hannon for reviewer for job controller b12db6d9b55 fix test store delete collection function failed 9d5b2a44762 Fix API comment for the Job ready field 1395e2e02c5 Fix API comment for the FailIndex Job pod failure policy action 6dc11c1f219 kubeadm: ensure the kubelet and kube-apiserver wait checks go first bb315d13392 bump runc to v1.1.10 f77a4543d13 Unregister events in schedulingGates plugin 70c9eefff30 add --sbom=false --provenance=false for windows servercore cache build 42a70cdbd16 codegen bba0c9a81e9 validate defaults across an update from nil to ensure create ratcheting rules work eef15158152 ratcheting-cel: use Optional[T] for oldSelf when optionalOldSelf is true 5edb27aa382 ratcheting-cel: add optionalOldSelf field 6b6be38896b test: Fix NodeLogQuery tests ad7b9b56f5b test/e2e_node: add e2e test for Kubeletconfig drop-in dir ee5578be526 cmd/kubelet: fix overriding default KubeletConfig fields in drop-in configs if not set bd6431323a5 ClusterTrustBundle projection: e2e test 96e610ac188 ClusterTrustBundle: Enforce max size during validation 1ebe5774d08 kubelet: Support ClusterTrustBundlePEM projections e83baddbb1a LRUExpireCache: Allow removing multiple keys under lock 599fdb7adde Regenerate for ClusterTrustBundlePEM projected volume API ecfdc8fda55 Define ClusterTrustBundlePEM projected volume 0fd13627820 ClusterTrustBundles: ClusterTrustBundleProjection feature gate 2a23061f6c2 scheduler: fix performance regression at -v3 + contextual logging e5bba37f20a apiserver: promote flowcontrol tests to conformance 9ae1fc366b8 Store nodes before calling EnsureLoadBalancer 60338c79d77 KCCM: fix slow node sync + service update a8673fa5b4a KCCM: add test validating slow node sync issue b565fbeac06 test/e2e_kubeadm/dns_addon_test.go: drop kube-dns tests 2259ac2444f pause: add --provenance=false during etcd multi-arch build 50f092c1366 Add kubernetes.io/hostname to faked nodes in tests 5bf63036c7f Make EnablePodSchedulingReadiness public 0112d91a056 Add multi-webhook integration test b693f09d544 [StructuredAuthn] Ensure empty fields of user object are accessible by CEL 34b2c4e1ed0 framework: add SSH support for Azure 44d89c8cf8c Include empty string attributes for CEL authz evaluation 2e2f51a4417 Plumb failure policy from config to webhook construction 0674135c1aa CHANGELOG: Update directory for v1.29.0-alpha.3 release a000af25ff3 Require match condition version only if matchConditions are specified baebc376ff8 missed a few summary upper limits for major page faults 3c268b75244 etcd: Update to version 3.5.10 4c532213ae2 test/e2e_kubeadm: add test for the kubeadm:cluster-admins CRB ae73cf9cfb7 Add remaining e2e tests for backoffLimitPerIndex based on KEP 2d9128116b6 Use golang library instead of mklink 85b10c06fab update docs for v1.29 release (note this must be committed after code freeze) cda349cda49 Make service-cidrs-controller role feature-gated 26923b91e8c implementation of split disk kep 003e4886c6f Fix parameter passing error 18adc309337 refactor: rename TransitionRule to UsesOldSelf b2c743154cc Fix the e2e bug related to the Garbage collector in api-machinery. 338fe7ad55c e2e framework: validate test definitions f2cfbf44b1f e2e: use framework labels 248100ce6df golangci-lint: tone down comment checking ecb32a3e29c increase bounded limits for major page faults ceaacc88f0d add --provenance=false during etcd multi-arch build 833156b77e2 e2e: define environment 4a380609a94 serviceaccount: fix incorrect usage of %w in Errorf 878d037d3ba dependencies: klog v2.110.1 bc1df9e7dab bump to newest etcd: v3.5.10 38905462656 Update APIs and adjust tests 77f4178c98a Promote CSINodeExpandSecret to GA 252e1d2dfee Imagepull per runtime class alpha release changes 0993bb78efe Redo service dispatch with maps 9d71513ac1e Redo no-endpoint handling with maps 4128631d0f3 Redo LoadBalancerSourceRanges firewall using sets edaa1d735b8 Redo --nodeport-addresses handling with a set ef1347b06db Port NAT rules to nftables (and backend is now functional) 0c5c620b4f2 Port filter rules to nftables 6cff4153057 Port service/endpoint chain creation/cleanup to nftables 2735ad541e2 Port table setup/cleanup code to nftables bcced184c52 Replace "iptables-restore" sync in nftables/proxier.go with (trivial) "nft -f -" sync 93860a52177 Distinguish iptables-based and nftables-based backends, do startup cleanup abb1a458a95 Create an nftables.Interface in nftables proxier 1a530457f90 Drop unit tests of iptables-specific unit test helpers 958e80ca3b0 Clarify nftables/proxier.go by distinguishing nat/filter table KUBE-SERVICES chains 3abdda9800d Simplify nftables/proxier.go by using string rather than utiliptables.Chain 96e53f64f4d Simplify nftables/proxier.go by removing the "args" reuse 6535ac1e619 Simplify nftables/proxier.go by removing Monitor stuff ecb7752f0b8 Simplify nftables/proxier.go by removing HaveRandomFully checks 5f09106063b Simplify nftables/proxier.go by dropping "-j ACCEPT" rules 1a6b9b811e3 Simplify nftables/proxier.go by removing localhost nodeport support e7c35d27f75 Simplify nftables/proxier.go by removing partial syncing 39a5af1d0aa Simplify nftables/proxier.go by removing large-cluster mode cac26737cd4 apiserver: add conformance tests for flowcontrol API a70653143e9 Add a dummy nftables kube-proxy backend which is just a copy of iptables ce5a22d54c1 hack/update-codegen 3b69bd6a9ba servicecidrs controller clarify condition false reevaluation fee07ad6080 make update with the new API with arrays 9917c727a1e test e2e: use new ServiceCIDR API 5d90d07f2d2 test integration: use new ServiceCIDR API 271900a0f05 integration etcd data: use new ServiceCIDR API 3edcce52e3c service cidr controller manager: use new ServiceCIDR API 016c3c9e363 repairip controller: use new ServiceCIDR API 881cf4d54fd ipallocator/cidrallocator: use new ServiceCIDR API 7e87806fab1 default_servicecidr_controller: use new ServiceCIDR API 513fdb54229 describer: use new ServiceCIDR API 5123a93b342 printers: use new ServiceCIDR API c3d9b77d94e update ServiceCIDR API: replace IPv4,IPv6 fields by an array of strings 599597ca65a fix race on ServiceCIDR deletion e3a0df26a86 remove flag cidr max size validation if gate enable 8182c4d9ec8 make update cb509b01f31 e2e for ServiceCIDRs 46b13d48e20 etcd data ccbcadb0324 add integration test 4ff80864e1c service cidr controller manager 164276175fb plumb the new multicidr clusterip allocator 65e69389463 make repair loop multi service cidr aware 63fe539b4e7 expand IPAllocator to work with multiple ServiceCIDRs d3386e171a2 add iptree radix tree util 3b450378e07 bootstrap controller for default ServiceCIDR 55a35bebee9 API printers 7e77e8b21d1 kubectl describe 2feb1503e29 Add ServiceCIDR to the REST Registry 391b25197b8 add apis to apiserver storage 632081a9078 add ServiceCIDR APIs 16363b6fb4a fix IPAddress.Name validation message df80775693f Include managed field comparison in test cc190e0ace1 add integration tests 26e3a03d12d Implement CEL and wire it with OIDC authenticator e411fd340c5 cluster/gce: add webhook to replace PersistentVolumeLabel admission controller 7e35823690d cacher: when forgeting a watcher, call stopWatcherLocked multiple times bd233a2aa55 typo/api change in cadvisor / updated unwanted-dependencies.json 8b9fc325e28 Update to new cadvisor v0.48.1 e4776e0f85b avoid infinite recursion for type resolvers. fba2d2fadc1 Move invocation to not to cause ginkgo panic eb32969ab8f Lazy load OpenAPIV2 f23ab829bee Add feature toggle for OpenAPI V3 apply in kubectl e7216c66230 use OpenAPIV3 for kubectl diff 4f3b0b15182 Use OpenAPI V3 for client side SMP 6b971153d75 add new fields in v1alpha1 StructuredAuthenticationConfiguration 168e016947c Benchmark job with backoff limit per index 6ac7da1da87 encryptionconfig/controller: run unit tests faster c2a365c6a7d kubeadm: do not poll in TestEnsureAdminClusterRoleBindingImpl c2cb3209138 Revert "cacher: when forgeting a watcher, call stopWatcherLocked multiple times" 98a2f22e740 Revert "Make the decode function respect the timeout context" c7fcef18756 apiserver: set APF featuregate to ga 8e52fc72668 Minor fix to copy the required kubelet, service logs after the execution of the node e2e tests b02aad42fa4 Fix panic when process RunScorePlugins for cap out of range 31c76e9abb2 authz: add cel expression to webhook matchconditions 56ab6c59421 generated changes ae90a696772 volumeattributesclass and core api changes c4aab1036f6 Add sig OWNERS to registry packages 1daf1b0705f test that controller descriptors should not be feature gated fed11c0793f remove unnecessary gating of taint-eviction-controller descriptor 5b268e6daf5 apply: Add test for duplicates in associative lists 9d1847c1963 managedfields: Allow duplicates for built-in updates associative lists dec443b305a Update sigs.k8s.io/structured-merge-diff to v4.4.1 b8cd792b368 rename the roundtrip annotation, forbid it in v1 76463e21d4d KEP-4193: bound service account token improvements a968f51fa2f k8s.io/apiserver/storage/etcd: refactor etcd GetList. 84ec5e2eccb k8s.io/apiserver/storage/etcd: refactor etcd GetList. 8d804078f97 Add set ext library into Kubernetes and pick up the new option cel provides 70c1f2143fc Bump cel-go to v0.17.7 d3de47ceeed chore: updates api doc 2eb06e79ef3 OpenAPIResourcesGetter allows lazy-loading OpenAPI V2 080fe8346da Fix typos in interface comments e95b7c6d8b8 feat: updates encryption config file watch logic to polling 6d59480a70f Try a single gcloud command for scp-ing all files bbca4a4b9ad cacher: when forgeting a watcher, call stopWatcherLocked multiple times f78b367db63 Make the decode function respect the timeout context 79c5b3ca6fd Mirror apiserver feature gates to kube feature gates file for consistent enablement ccda2d6fd41 kube-controller-manager: Decouple TaintManager from NodeLifeCycleController (KEP-3902) 233bc2449d9 apiserver: fix apf enablement with runtime-config acd60896597 apiserver: remove prerelease annotation for flowcontrol v1 25447b95ad2 apiserver: add testdata for flowcontrol v1 730d10a8fb9 apiserver: add generated files for flowcontrol api change 9fd2ab419ad apiserver: allow zero value for the 'nominalConcurrencyShares' field 430c226709b apiserver: fix lint issue, defaulting and validation test for flowcontrol v1 90c091dedad apiserver: add pre-lifecycle replacement for flowcontrol v1beta3 17bda3c3e05 apiserver: apf controller, bootstrap, tests should use flowcontrol v1 API 25aebca8d54 apiserver: add etcd data and storage version hash for apf v1 5972037ffd6 apiserver: generate code for apf flowcontrol v1 API 03a9ad200d7 apiserver: remove copied generated files b24dd44904e apiserver: enable apf v1 API 5cb03064d95 apiserver: update copy, rename v1beta3 to v1 dc723080939 apiserver: copy apf v1beta3 to v1 05076de57fc kubeadm: poll additional CRB create calls for kubeadm:cluster-admins 5a20ff16173 fix wrong controller name for ephemeralController afc6c03ba74 Pass through static overrides in addtion to cgo overrides feb0e2fc2f5 Fix flaky test for services that shouldn't be available when PublishNotReadyAddresses is false 3a308140cd5 Fix e2e 2c2fa2107a6 deprecate the kubeProxyVersion field of v1.Node 070e7a38cb6 generic set 36d6917ae16 valid error for creation and update from valid to invalid only - using an option AllowNamespacedSysctlsForHostNetAndHostIPC 9a8ccdebc5a use sysctl utils to do pod spec validation 11de9543ee7 move sysctl namespace and some funcs to component helpers util 4321652d13f reject pod creation for hostNet pod with net sysctl; hostIPC pod with ipc sysctl 6614a29f470 OpenAPIResourcesGetter allows lazy-loading OpenAPI V2 04b21126e58 Add cel new validator into Kubernetes. 9ae77364e95 pkg/proxy: configure tcp-be-liberal a375aa28ee3 pkg/proxy: move get kernel version out of ipvs proxier c1fd3f5f648 suppress per-expression cost limit for unmutated versions. 4bb7dc224c5 metrics: publish metrics from ratcheting across a request e50cc47a068 Improve execution time for job e2e tests 8c72be3b74e ratcheting: add benchmark 7a91051caa1 cleanup: Refactor BaseEndpointInfo to cache IP and Port values c7842d9c63f narrow down the scope of EnqueueExtensions to subscribe less cluster events 3f8e6d6f77f etcd: Build image 3.5.10 a73725d7999 Promote SidecarContainers feature to beta 1591a0e132c add unit tests for NewControllerDescriptors 44cac266673 move start controller pre- and post- checks/actions out of StartControllers b7689672802 move aliases into each registrable controller a85779b4dfe include ServiceAccountTokenController in the NewControllerDescriptors to make it more generic 27a77e0ef3c Encapsulate KCM controllers with their metadata 77dfd63d1db fix volume conformance e2e test break other test 77e0adeb31d KEP-127: Update PSS based on feature gate b0491d71bd5 Support skipping pulling addons image. 760abc2a821 bump gomega to 1.29.0 5925dc07758 LegacyServiceAccountTokenCleanUp beta 69b9d50f9d0 e2e_node: mark CDI test as NodeSpecialFeature a9b1adbafc7 [KMSv2] promote KMSv2 and KMSv2KDF to GA 9f06eb4ca2a don't run these tests on aws e98c33bfaf2 switch feature flag to beta for pod replacement policy and add e2e test af14f97cba7 sample device plugin: fix incorrect Errorf invocation fcc55280b01 Use k8s.io/utils/ptr in pkg/proxy (#121154) b6afba18fb1 verify-file-sizes.sh: ensure that no large binary files get added fd132665a8a extend VAP status controller for extensions type checking. 3f73cdcf2ad extend SchemaResolver for more types of schemas. 38fecc8319d opportunistically attempt to refresh RESTMapper 05cd3e66ef5 simplified e2e test for CRD typechecking. 60a602f1701 gce: fix test for non-existing instance in cloud 4a640ea384a cloud-node-lifecycle controller: add fallback for empty providerID in shutdown 84faaf4427f Prevent sampledeviceplugin binary commit 7fc42189b19 Add back k8s.io/kms/internal/plugins/_mock/go.* 110ffa13b7d Delete binary file e07d898cfd2 Make StatefulSet restart pods with phase Succeeded 27f6fb2fa7e hack/tools: golangci-lint v1.55.1 6302f011211 e2e node: fix broken assertion d0a5cd16da8 e2e upgrades: fix broken assertion fb872e86384 test: fix storage status update test 53339894a1c enable PersistentVolumeLastPhaseTransitionTime feature gate for status update test 071a67d8c29 export time function 9cfd96dbb5e graduate PersistentVolumeLastPhaseTransitionTime to beta c6b42c8a72f Make e2e node image ID test more flexible 517efd64425 cluster/gce: set KUBE_WATCHLIST_INCONSISTENCY_DETECTOR when requested by a CI job 837090135f8 kubeadm: make super-admin.conf changes to app/cmd 30ed50d32e3 kubeadm: make super-admin.conf changes in app/phases d0328df04e0 add time tracking to CorrelatedObject 1165609036c Add metric for e2e pod startup latency including image pull 702d911e226 working-config-otel e7a9a148489 replace CEL ValidateWithRatcheting with variadic options f71040f620e Remove the usage of feature gate 0ac35fe44f4 Update security contacts for sig-cli 8d3a25c7c98 [KMSv2] Add tracing c2a04fa1cf5 kubeadm: fix export comments to make golangci-lint happy f91228ee719 Unexport BaseEndpointInfo fields, fix getter names e3357d0c5f3 Clean up Endpoint / BaseEndpointInfo a bit 2879ec10d50 Rewrite ipvs/iptables tests that manually construct BaseEndpointInfo 27bb66fd7b7 cleanup: rename failedPlugin to plugin in framework.Status 2a8982b27b8 Remove problematic Dbus restart test 39df946c066 golangci-lint: enable doc comment checking for cmd/kubeadm 3738111337e Add unit tests 08b942028f9 DRA: call plugins for claims even if exist in cache 69ca55f1368 Do not preallocate node for Job e2e tests to fix flakes 98bed52fdd6 kubeadm: make super-admin.conf changes in app/constants e511edf11f7 Fix SELinux unit tests 2f5903b4cf4 Move SELinux warning metric to be counted once per pod d20edf697aa verify-golangci-lint.sh: support arbitrary GOBIN a92c1269e25 test: fixes hot reload flake 71a1565d065 revert: reverts fixes for TestEncryptionConfigHotReload flake 83f5b5c240e Deep disablement for APF based on --enable-priority-and-fairness. 8e0be64b8ff remove data race on the devicemanager client plugin aeceec72bbd add integration tests 97e72d792cc Remove independent tests for metrics 84cd6dbb0aa use the latest semver version for the badge b3525946d5e ratcheting: provide a shared correlated object dfeab6eca8c fetch a shared correlated object off the validation options if it exists 0a19b5ab6e2 fix usage 432e8937cfb add variadic options to ValidateUpdate 9e2821d585e revert changes to TestMetricsOnSuccesses for job pods creation total metric 055e926a924 e2e: Increases the memory limit for downward API tests 88c0a8be1bd feat: add job_pods_creation_total metric b1ce529b2ac Remove unnecessary GetIndexer 1224e0e881d Add PodHostIPs test f8a4e343a10 Fix tracking of terminating Pods when nothing else changes (#121342) 12a972cc1e6 Promote KEP-2681 to beta in 1.29 2cea51221a3 hack/logcheck.conf: enable contextual logging in kube-scheduler bd8ac8c7fac kube-scheduler: checked err for golangci-lint b0a73213d6d kube-scheduler: convert the remaining part to use contextual logging bbb4a88bbbc e2e_node: implement DevicePluginCDIDevices test case bf2f640ea2c Add more test cases ensuring nextScheduleTimeDuration is never < 0 16b3acc27a1 cleanup UnknownCRISocket for unit tests 71bedf5cb28 kubeadm: skip CRI detection for 'kubeadm upgrade diff' 20c8b797a3c Indicate Job Backoff Limit Per Index reason consts are beta b06675724d6 Add e2e test for backoffLimitPerIndex 4b59d2b05c0 kube-proxy: Optionally do privileged configs only 35f4d29d735 Fix unit test b052c7b7cdf Update npd version to 0.8.13 in configure.sh a6f5246565b integration test for empty & unstructured. 168998e87bf StreamTranslator and FallbackExecutor for WebSockets c6b3a2f477c allow empty object to be CEL value. 8ae0d390d77 add container filesystem to CRI api 93951bc00d3 Add stability tests for CEL cost estimation. d9c967113f9 tests: fixes flake in TestEncryptionConfigHotReload 6d580da03fd ratcheting: ratchet CEL expressions for no-op updates 27afb7d75d2 e2e storage: use framework to tag tests 8a42be978bf Add CDI support to the sample device plugin d9131d5b390 [KMSv2] Drop the apimachinery 6d02fbdbe07 Revert "Promote KEP-2681 to beta in 1.29" 55e3662b72d dra: refactoring overall flow of prepare/unprepare resources fa83d5fef17 node: e2e: topology-mgr: Disambiguage cores from cpus e1f5eb3f142 node: e2e: topology-mgr: Determine threads per core e74f2d41aab Allow using upper and lower case true|false when setting kubectl feature flags 074a8b00840 KEP-3638: Promote plugin resolution to beta (#120663) b31e7793d0d client-go/reflector: introduce a data consistency mechanism for the watch-list feature. d5085c9cbe5 Bumped the fsnotify from version v1.6.0 to v1.7.0 fb6b10997a7 cleanup: remove useless test 3f4d3b67682 Cleanup paging parameters in etcd3 store 2dbd4055834 Graduate ReadWriteOncePod to GA 42945ea6dc8 update suspend test to match other test cases 49c947ba15a metrics: add and use ImageGarbageCollectedTotal d8a5cd59c08 kubelet/images: add unit test for MaxAge 914aa746c18 kubelet/images: add and use freeOldImages function 76e623098c8 kubelet config validation: add validation for image max gc age d992ea4b309 kubelet: add and use ImageMaximumGCAge in KubeletConfiguration 9a58f6c4fb4 Forbid creating CronJob with TZ or CRON_TZ, but allow updates 34294cd67f2 locking feature-gate for ready pods job status b386120da23 Remove storageConfig.Paging parameter 106f58686d5 Remove disablePaging param b0d04d933be Introduce the job_finished_indexes_total metric 6ab48d1adc5 e2e storage: remove dot at end of ginkgo.It text a913abe191b e2e test for checking ready of job status fb0ffb07a76 kubeadm coredns use drop ALL instead of all 81b960efefe e2e framework: allow random ordering of tags and text, fix some functions a4efb6fc130 kubeadm: add debug log for kubeProxyConfigFromCluster 4f5bc7e8d76 fix based on reviews 82c0cbf6d84 e2e: stop using deprecated framework.ExpectNotEqual eb3a11ea142 registry/core: wire NotFound getter instead of nil cbe3d897629 Promote CRD validation rule to stable fb9f2f5bc59 DRA: e2e: test non-graceful node shutdown 32fdb551920 Use Patch instead of SSA for Pod Disruption condition a7adde53be4 bump golang.org/grpc to v1.56.3 a1d2df81fb3 e2e: add [Environment:NotInUserNS] tag to sysctl tests 441d2b40dfd Undeprecated kubelet cloud-provider flag 4a87ee26998 use PollUntilContextCancel to replace PollImmediateUntilWithContext in test cf836309dc2 Add validation for --storage-media-type option. 8775d805fa6 use PollUntilContextTimeout to replace PollImmediateWithContext in test 1a41ed394d6 convert pointer to ptr for sig-apps integration tests 27bb40a9d83 Remove GAed feature gates OpenAPIV3 c5e25637c64 fix typo a25b87d84a3 e2e apimachinery: use feature gate ceba3be6b58 e2e: add more feature definitions 9be1b68ad03 Update staging/src/k8s.io/api/batch/v1/types.go 00c21ced3ab Fixing CurrentReplicas and CurrentRevision in completeRollingUpdate cb5dc46edf7 feature(scheduler): simplify QueueingHint by introducing new statuses 6dd0ad5c0f3 Graduate BackoffLimitPerIndex to Beta 8ae32771523 kubeadm: remove unused DNSAddOnType from v1beta4 API 259dd93e719 kubeadm: skip CRI detection for 'kubeadm config validate' 3da7802b7c5 kubeadm: cleanup UnknownCRISocket from staticpods test aee73352853 add new test cases 220d5c2e543 remove dead code in test 79f9bfdc8e5 fix wait.PollUntilContextCancel immediately executes condition once 8dff3fcb0c8 fix: Use upper case `ALL` in drop capabilities 0a6d9531f40 update generated code and openapi 4d21a23be35 pin openapi 31a1c00e49c cleanup: move unstructured check earlier in status update d151f227803 cleanup: remove unused versions of cel validators and structural schemas from CRD strategy cc0264f7fc8 cleanup: check unstructured for Validate(Update) before validating ced56a6adab Restrict supported media types for new apiservers. f5cb2ada944 k8s.io/kms: drop direct dependency on klog db8b3031561 Modify mostRecentScheduleTime to return more detailed information about missed schedules 6c4f71b31ce Fix spelling 02b0b79eda5 CHANGELOG: Update directory for v1.25.15 release 9cf35f40016 CHANGELOG: Update directory for v1.26.10 release b7477c31b03 update versioned types 4780a75d5fb CHANGELOG: Update directory for v1.27.7 release d7556769e7f Job: Replace deprecated wait functions with supported one 1babd6f0e3f CHANGELOG: Update directory for v1.28.3 release 989aadda830 Revert "KEP 3085: check PodReadyToStartContainers condition after volume create" d5d3c26337a feature(scheduler): implement matchLabelKeys in PodAffinity and PodAntiAffinity 2508f468a8f kubelet/userns: Add more unit tests 0dd495e6dc2 Address review comments 7ff866463af Refactor watch event serialization to allow caching 0cda42af7ab Unregister group path from apiserver when the group no longer exists a50d83c669e Add basic authz config integration test 22e5a806a73 Add --authorization-config flag to apiserver 75f20ee64da update pretty param description e312d93a66a kubeadm: increase ut coverage for bootstraptoken/node 7bcc98c46b9 sidecars: terminate sidecars after main containers c8b65422e58 Drop usage of deprecated method NewNamedRateLimitingQueue 201c30fba82 Job: Handle error returned from AddEventHandler function (#119917) 7a1ac18bc84 Fix panic if there are more terminating pods than active pods fad4430f9e6 cleanup: remove redundant logic in PodReplacementPolicy integration tests 007ef653ad0 add feature gates for authorization config 2ccf7e8e49b fix: minor lint issues and redundant check 056b25dfcab fix: improve PodReplacementPolicy integration test case names and update deprecated methods bf32f87d00e skip CEL validations for enum violation. e73edf7764f fix: typo in indexed & non-indexed completion policies for failed pod replacement policy integration tests bcf1c113f4e cleanup: add new test cases for failed pod replacement policy instead of editing existing ones 72e67e0ef0d kubeapiserver/options: fix cloud provider validation 911700e64e3 Fix typos in markdown 2bf2c4f3a41 staging/apiserver: correct KubeConfigFile type in authorization types b500c3d6930 Correct the label selector used in TestSampleAPIServer c281c70bac3 kubeadm: remove reference to UnknownCRISocket from getInitConfigurationFromCluster 7d077f9271e e2e: move AllNodesReady check to DeferCleanup ca6fda05ce5 Restart containers in right order after the podSandboxChanged 75612848195 Remove GA featuregate about CSIMigrationvSphere in 1.29 e3c58378bc3 Revert "kubeadm: FeatureGate MergeCLIArgumentsWithConfig is added for ignorePreflightErrors" 9a354fc9d03 node: sample-dp: Add retry to handle device plugin restart failure d0d133298d9 node: sample-dp: Use fsnotify for kubelet restart detection f46cdf1428c node: sample-dp: set default value for `pluginSocksDir` 211d8cc80a7 node: sample-dp: stubRegisterControlFunc for controlling registration c4c9d61d66f node: sample-dp: Handle re-registration for controlled registrations 6714e678d33 node: sample-dp: register by default and re-register on restarts 465d3bb65b9 DRA: notify ResourceClaim or ResourceClass of wrong params d2b803246af Don't reuse the device allocated to the restartable init container a45a813d5e3 kubeadm: fix "eliptic" typo in API package fced85b27a9 run hack scripts to update cyphar/filepath-securejoin to v0.2.4 correctly 1715fc0ca06 Fix issue in enabling evented pleg feature gate defda81bf8b kubeadm: remove `ClusterConfiguration` parameter from preflight check 5d5958e3389 fix ImageLocality plugin score is inconsistent 76059738a4f update standard protocols to match KEP3726 4ae7150f05d remove pc pvc status endpoints 757597fabfa track unmaintained repo - mailru/easyjson 2e8f66afb39 Promote PV/PVC status e2e test to Conformance 28f335a3397 kubelet/images: refactor image gc unit tests e22ebf13a95 kubelet/images: refactor freeImage and imagesInEvictionOrder d6d2c5775f1 Set gate SkipReadOnlyValidationGCE to Deprecated 56023e00cbc cri-api: compress OWNERS files f2b723a130e fix: improve assertion for Failed PodReplacementPolicy integration test cases e3098225eaf bump kube-openapi b30c6bdff81 Fix v3 spec d1a6c0ae7df Update cri-api change in v1.29.0 2f923e356e0 k8s.io/apiserver/storage: add a new TestCreate case. 5d0f8530f6b fix Huge Pages failing test 7d31b5ffd0a Add test case for sandbox condition if pod fails to mount volume from a missing secret dd9c3358f5e Revert "podresources: e2e: force eager connection" 27abf99148b Remove GA featuregate about ProbeTerminationGracePeriod in 1.29 5c0618b848d codegen 011c65e17e2 configure npd to run as daemonset on cos 39dcad8a19e Populate CRI filesystem info error bfda244e54e pkg/proxy: dual stack health checker 73a8965e2a9 Graduate DevicePluginCDIDevices to Beta f69e1fed82f Remove GAed feature gates TopologyManager 957adfac498 fix invalid log calls 8009530d77d kubeadm: FeatureGate MergeCLIArgumentsWithConfig is added for ignorePreflightErrors fed4f16a7ad Remove GAed feature gates SeccompDefault 33f2d487e2d Promote KEP-2681 to beta in 1.29 18c3b6fce43 Register metrics for apiserver handlers 56836608303 remove deprecated framework.ExpectNotEqual for node b548bbb8cf8 When reading pvc status allow bound to be a valid value 11b0eed9e7f Work around bug in gcloud when downloading logs 1132fd0afdf add tcp_fin_timeout, tcp_keepalive_intvl and tcp_keepalive_probes to safe sysctls 4ea6ec738cf pkg/proxy: add an ipFamily field to the winkernel proxier 6732c4110f3 kubeadm: fix uninvalid namespace field for clusterrole 332779a3b29 add a simple e2e test 3a96afdfefd implementation fa01dfdb0a4 validation 0f46033dca2 fixed miscalled function 9327f3a1734 api changes c2d473f0d43 remove ClusterCIDR 32d2afe42bc kubeadm: fill with the DefaultCRISocket when CRI socket detection is not required c72923b17ae Register UnauthenticatedHTTP2DOSMitigation into kube components fb1fc8b4a72 ratcheting: disable correlation by index d991ed56c29 comments: clear up correlateOldValueForChildAtNewIndex godoc 0ed67c9e41d cleanup: use swtich in CachedDeepEqual and add more comments 60c90fc0854 cleanup: consistently support nil receiver and document abb68591afd cleanup: clarify correlatedOldValueForChildAtNewIndex comment ddcbae734af Add a 0 × 0 case fb2e28b0702 Verify more carefully the results in the TestInt64AmountMul 26a4e06c92c k8s.io/apiserver/storage: add 3 new unit tests for delete. e1fa1df3ae8 cleanup: consistent interface{} and any 0495616230a cleanup: add godoc 4de3e73b8ac Add test cases for mostPositive and mostNegative 685ae024332 Add more unit tests 79325b6178d Multiply by a scalar 4381eb7237e quantity: Add multiplication methods 1ae54296291 add potential fixes for flakiness in eviction tests db8e106e3f6 Code Refactor: using struct option rather than a long list of parameters b0c7956a869 Bump distroless-iptables to v0.4.1 a34d2f3b134 fix limitrange flaky test 10151a5e38f kubelet/sysctl: update log level cd5db9b7f23 Skip TestUnauthenticatedHTTP2ClientConnectionClose http1 tests 4dedabf2a65 test: fix boilerplate 80e378181ea add rundir folder to gitignore 800a8eaba7f Prevent rapid reset http2 DOS on API server 968d6b8a325 Update busybox SHA based image to match tag - 1.36.1-1 78ffa882be2 chore: updates api doc de5dcdc79b7 cleanup: fix missing manual selectors in strategy test 761cb18a688 cleanup: refactor job strategy tests; add test for generating selectors in PrepareForCreate test b9b436a0183 cleanup: extract generateSelector from Validate method in job strategy c94240e2e2e move kubelet constant for podreadytostart to staging 1d30a01186d Update publishing-bot rules for active release branches that uses go1.20 to Go 1.20.10 de01788deaa Switch to newer cos-gpu-installer - v2.1.9 adae1e33eae kubeadm: remove AlphaDisclaimer for certs phases 7b1d87383ec add kubelet policy skew test for kubeadm 5ad5ef1d0f6 Switch to newer cos-gpu-installer - v2.1.7 0149c1f8b31 test: few more correlatedobject test cases ba9347230e6 test: add correlatedobject test cases 15ae6cc1607 pkg/proxy: add flag to configure udp conntrack timeouts c08a9321eed cleanup: add header and fix spelling 27cb869e559 refactor: move correlatedObject to its own file b321e8bf0db refactor: make CachedDeepEqual independent of validation 921c0d01800 cleanup: add defaulting for job manual selector (#120206) c83e73ba571 CHANGELOG: Update directory for v1.29.0-alpha.2 release baac8bb573c k8s.io/apiserver/storage: add some ResourceVersion validation in GetList unit tests ebca5d438d9 k8s.io/apiserver/storage/etcd: refactor getCurrentState. 555c1b8091c bump kube-openapi 83760ae56c8 update openapi with required requestBody 5eb7fea3834 [go] Bump images, dependencies and versions to go 1.21.3 a504aed54d0 Add shortname ambiguity warning in shortcut expander (#117668) 7989400bef5 Fix concurrent write when filling PVC labels 54714686bc6 Modify test PVC to detect concurrent map write bug d7ee6b9d1bd fix possible panic if pod replacement policy is turned on and jobs do not set pod replacement policy 2c1836bc245 remove deprecated framework.ExpectEqual 990a46f9bde Update QueueingHInt's KEP b42b3f740a4 Pod Security admission allows net.ipv4.tcp_keepalive_time in v1.29+ 0167a9f833c mark net.ipv4.tcp_keepalive_time as a safe sysctl babac47c6f1 fix DevicePluginProbe node-e2e: pod and kubelet restarts 4acaf9ebed7 Add service name tests 438c0daab75 add rest of accessors to common.Schema 0f989046d06 kube-apiserver: move cloud provider validation into options 5de835d5d89 Add runtime handler field to ImageSpec Will be used by changes for image pull per runtime class in KEP 4216 80269d5d349 fix missing http.target trace attribute dc334b953d9 dependencies: update otel-go dependencies e76aad1813b refactor: use common.Schema in CorrelatedObject 83a1dbf885d refactor: export correlated fields e73f3c8cdb3 refactor: add methods for Key and Index on CorrelatedObject fc7c951d5a5 .: bump golang.org/x/net to v0.17.0 2032b742546 KCCM: fix GCP ILB by reintroducing readiness predicate for eTP:Local 471e3ab8281 refactor: factor out object correlation 30cf9ed5677 refactor: directly implement ValueValidator 4fb5f1a6119 refactor: remove unnecessary lambda (noop) 19ecf93ec3d e2e: define features and node features f2d34426f86 e2e: enhance SIGDescribe 39b6916cbcc e2e: add wrapper functions to annotate tests 535ab743461 e2e framework: track and report internal bugs 3afdcc03ea5 e2e framework: list specs and labels aa4d2fc5edf e2e storage: remove useless info message 581af9ba6da kube-apiserver: use only one client in apiserver controllers 215c4627ef9 Update SECURITY_CONTACTS e9957d79aae make update 0eacff0baf9 compatibility (adapt testdata) b7ee8e84221 drop UID from the IPAddress.Spec.ParentRef f538be659c7 hack: fix update of golangci-lint verify scripts 6c395eb098d Fix "Endpoint" vs "Endpoints" in proxy type names 00ae26cda8f Create e2e test for PV/PVC status endpoints b190ea0c966 hack: update golangci-lint verify scripts 302d350e88e set maxLength to longest enum. d4a5a085a84 Improve error message in cpu assignment logic 79355caa565 dependencies: ginkgo v2.13.0, gomega v1.28.0 52c58d970e5 fix data race in apf unit test a6b0a6c484d Bump distroless-iptables to v0.3.3 f3c786cbda7 Fix regression in cmd/kube-proxy/app unit test speed e86e756c27e Update publishing-bot rules for active release branches that uses go1.20 to Go 1.20.9 0be5fdb5ced Add volume plugin label to SELinux metrics 137ad9bf2b5 clean up deprecated funcs in e2e framework d5d7fb595ee e2e_node: stop using deprecated framework.ExpectEqual 5f74461bcd7 e2e_apimachinery: stop using deprecated framework.ExpectEqual 122ff5a212a Move grpc rate limitter from podresource folder 9cca527c4b3 Migrated `pkg/scheduler/framework/plugins/examples/` to use contextual logging 62683c8d959 pkg/proxy/ipvs: hardening lb source ranges filtering ccc6458683d e2e_node: add testcase to check status of pod ready to start condition are set to false after terminating c3bf541edee kubeadm: clean up unnecessary references to UnknownCRISocket bb02d0febab fix incorrect Consistently due to missing assignment when create a newAsyncAssertion 7cba35f6519 nodeports: scheduler queueing hints 20db4ef3d64 kubeadm: fix wrong ut for util/etcd 4a8267f26be kubectl: ensure '--duration' must be positive for 'kubectl create token' command 3c4512c6ccc hpa: always update status metrics when updating the replica count 89adbb4b4aa Unit & integration tests for OpenAPIV2 AddUpdateAPIService 83fb504e46c Fix 120878 - Refactor cacheabledownloader so handler can be updated and fix AddUpdateAPIService to update handler 3ee2f27e5bb kubelet: cloud-provider external addresses 619abfec70a [go] Bump images, dependencies and versions to go 1.21.2 8b5f30ef096 Don't reuse CPU set of a restartable init container e8e22f645d0 kubeadm: Optimize the logic to override the arguments 8510057e2da kubeadm: increase ut converage for bootstraptoken/clusterinfo a888fef242f Use timeout function to detect transient errors 1b489963c8d Add nil checks for hpa object target type values 0f632988297 generated: UPDATE_COMPATIBILITY_FIXTURE_DATA 3808812de7e ValidatingAdmissionPolicySpec: Variables omitempty. a213edae2a6 Add package-level godoc to pkg/kubelet/cm b2f0052d27a Make a certain ipv4-vs-ipv6 config error non-fatal, for backward compat b96a074bcdf convert pointer to ptr for job controller 1d519f1b087 cluster-bootstrap: make IsValidBootstrapToken() be in constant-time 914210ee9a6 revert back to IsUnexpectedCloseError check e1ae9060480 Close websocket heartbeat explicitly when unexpected closure received c03579bfa40 typed variables support. 4d157bb1427 add single boolean to composition e2e test. 69a3e3d1089 Add --extra-peer in conversion in kube_codegen 3de0d9afbb3 pkg/kubeapiserver: pass authorizer in top level while building from legacy options 4b391501795 reflector: fallback to the previous mode on any error 11ce6d29157 k8s.io/apiserver: fix levelling of the name field in AuthorizationConfiguration 5f8fc30b2c0 Added locks on request tracker before accessing fields (#120599) 9b32a47ab65 integration/apimachinery: add TestReflectorWatchListFallback integration test c65fe450d8a Generated files 26f113be2fc reflector: close an established watcher when the StopCh was closed f17468ff060 Fixs a validation error in teh admission registration API 6d759aac910 delete addon-manager test e7b2aeee930 Fix API docs for audit APIs 38935b787ea Do not fail volume attach operation at kubelet if staging target path already exists on windows worker node. 243ba5fb6b6 remove an e2e test specific to kubeup clusters 98bad643cde e2e_apps: stop using deprecated framework.ExpectEqual 566fad5eda3 add metrics to the ipallocator repair loop 4eff70dcf9f add metrics to the nodeport allocator repair loop 6c9ddf300cf update generated 9242cb19348 Rearrange kube-proxy config fields / CLI flags to make more sense. 44cb330aa00 Improve kube-proxy config / CLI documentation 0b76e7b69fb Fixing attempt to deploy past allocatable memory limits test on Windows d2a3184c47c remove pkg/encrypt and pkg/value in kms e764e83fe88 remove mock aes, latency and ratelimit wrapper remote services 2f5708833a5 [KMSv2] pkcs11 reference implementation using SoftHSM 74180aaf661 Fix scalability concerns in test runs 5ebde41efb5 Refactoring variable declaration and value setting 0e8a1f18163 e2e: remove redundant spaces in test names 6200eb04aff use generic sets in scheduler e320fadebe6 kubeadm: add unit test for phases/bootstraptoken/node/token.go d9002176649 fix missed branch - targets when building using arm64 61603d36d73 Fix 120739 - Prevent AddUpdateAPIService from blocking on updating spec 7437ad2617a Add/update prechecks to verify-govulncheck.sh 59ad81a6157 controller/clusterauthenticationtrust: complete event filter a0610a97b3d pkg/kubelet/cm: Remove deprecated sets.String and sets.Int 63950491764 controlplane: make option structs uniformly optional a97f4b7a312 endpoints/metrics: define watchListLatencies metric and associated functions 5dc540ff57e k8s.io/client-go/tools/events: pass context into EventSink methods 27a68aee3a4 k8s.io/client-go/tools: support context for event recording 772b1f4cd84 handlers/watch: calculate and record WatchList latency metric. 4d2d9947bf8 Deprecate cloud-provider/cloud-config in apiserver CLI 394bcaf1820 Only configure swap if available on node 2b973806bc7 Remove remaining unnecessary assertIPTablesRulesEqual checks de077f448e9 Rename TestNonLocalExternalIPs to TestExternalTrafficPolicyCluster 19f19e2f4f9 Merge the `ExternalTrafficPolicy: Local` tests together ff5f5bc1613 Merge several NodePort tests into TestNodePorts f38231d5687 Merge all the "reject when no endpoints" tests together 2435da11d5d Rewrite TestClusterIPEndpointsMore as TestClusterIPGeneral ce7ffa81754 Extend iptables packet tracer to support multiple node IPs 2172ea60836 Fix typos: update Enpoint to Endpoint 6297067ff1a apf: request ejected from queue should use reason 'time-out' 11ef9514dad apf: remove RequestWaitLimit from queueset config da8a4722066 apf: remove timeoutOldRequestsAndRejectOrEnqueueLocked function f39213a7e44 apf: use context for queue wait 52f5093d775 Build kubelet with CGO for sig-node e2e tests (not ginkgo) 9b32d2f67d4 Default clientset_pkg and clientset_name variables 36146ad686a e2e dra: enhance test driver 46835f8792d CHANGELOG: Update directory for v1.29.0-alpha.1 release cdcf49ea12e Fix 120758 - prevent cache Load on uninitialized spec 0ba37e70b6e k8s.io/dynamic-resource-allocation: fix potential scheduling deadlock 2ce4f85a465 update verify script to check deprecated fields e5f25ccb620 k8s.io/dynamic-resource-allocation: fix compatibility with Kubernetes 1.27 70ae9c441ce storage/util: introduce HasInitialEventsEndBookmarkAnnotation e1a572fb2ed update filepath-securejoin dependency to 0.2.4 to fix security vulnerability 4a74958b2df deflake TestWebSocketClient_HeartbeatSucceeds ca562fd280a storage/etcd: the watcher supports the API streaming 84d5e7c8fac remove RetroactiveDefaultStorageClass feature gate 1a68195626a kubeadm: fix the bug that kubeadm always do CRI detection when --config is passed even if it is not required by subcommand 1d88bf9789b scheduler/nodeaffinity: reduce pod scheduling latency 72b68b8003c Remove dpasiukevich from cluster/addons/dns OWNERS b71d7f9305c use generic Set in scheduler 7c5219438df Remove an old compatibility check/warning 5c80007eccb cluster-bootstrap: make randBytes() be in constant-time 1b602ffd9a4 Bump Konnectivity to 0.28.0 06deb49d2c9 Fix panic testing intree vSphere dynamic PV. 0910fe4b983 Extend iptables packet tracer to check the protocol a25fb03c00a Add assertIPTablesChainEquals, to streamline a few tests 0ab0e404b83 Drop the now-unused assertIPTablesRulesNotEqual 4438f5e436b Remove assertIPTablesRulesEqual checks from terminating endpoints tests d57a51d0a90 Remove assertIPTablesRulesEqual from InternalTrafficPolicy test 43db55e93de Rename and extend TestOverallIPTablesRulesWithMultipleServices a96b97e40c0 storage/etcd3/metrics: add unit test for apiserver_storage_objects 534a0941e8d kubeadm: change kubelet skew to apiserver to n-3 0e238c4c28f storage/testing/watcher_tests: add new flavour to RunWatchSemantics test and fill the gap 9345da51ac4 fix comment mistake, run "make update" 45a776d5ff4 update rules to switch from deprecated dir field 9fb77db9b93 e2e: set liveness probe timeout seconds for conformance test 5d56f7cf86f Apimeta Set/RemoveStatusCondition: Indicate change b489beb365f Remove an old compatibility check/warning eb109e39480 e2e: bootstrap vsphere tests earlier d3d1827c054 Use local isCgroup2UnifiedMode consistently 8a31bb6786c workqueue unit tests to assert collapsing behaviors dc5cfe3cff2 storage/testing/watcher_tests: refactor RunWatchSemantics tests b5bffb6d97f kubeadm: add v1beta4.ClusterConfiguration.EncryptionAlgorithm d8cf68e75fb kubeadm: Nominate myself (chendave) as kubeadm approver 0786fcc941b kubeadm: Remove the support of configurable component configs 3eb6c4d368e Migrated `pkg/scheduler/framework/plugins/volumebinding` to contextual logging 0105a002bc6 when the hint fn returns error, the scheduling queue logs the error and treats it as QueueAfterBackoff. ed76c371df9 kubelet/lifecycle handlers: refactor port resolver e00551fe5d4 Allow storage migration of CTB without attest authorization c816601d834 reintroduce resourcequota.NewMonitor 7cfdb792d69 Revert "Skip kube-dns tests if coredns is installed" f5d915b5947 topology-mgr: metrics: Deflake Topology Manager metrics e2e tests a7466f44e01 Change the scheduler plugins PluginFactory function to use context parameter to pass logger - Migrated pkg/scheduler/framework/plugins/nodevolumelimits to use contextual logging - Fix golangci-lint validation failed - Check for plugins creation err 41584bde233 fix code style de244b2678f Promote StorageClass e2e test to Conformance b23575d0fcf remove storageclass endpoints a62eb45ae2b Rename job reasons to JobReasons as part of api review 301aa69fec5 cronjob controller: ensure already existing jobs are added to Active list of cronjobs 5ed60a72f62 Revert "Make StatefulSet restart pods with phase Succeeded" 5341890c96f add missing labels to kube-dns deployment 9e060590e6f skip kube-dns tests if kube-dns is missing 2a827767458 change rolling update logic to exclude sunsetting nodes 04668c00432 cache/reflector: check the value of the initial-events-end annotation 83c37acb21f e2e framework: adapt unit test to Go 1.22 5c28fd28478 vsphere: adapt to govmomi bump 4b60c18183f storage/etcd3/watcher_test: refactor TestWatchErrorWhenNoNewFunc to a table test 26a395ecc28 Trigger CI 12c0c08e658 fix data race in test 9533cfe2eed fix: add unit test bad0593a686 fix kubelet image gc 91bb75883c6 storage/testing/watcher_tests: make TestCacherWatchSemantics storage agnostic 272b23cc7ad kubelet: fix log when using --reserved-cpus 42356bfbb3e move common logic of highestSupportedVersion to util package fc6b19a4ba6 .: bump govmomi to v0.30.6 afbb1a6ef98 storage/testing/watcher_tests: move TestCacherWatchSemantics (no-op) 3a96baf3fa8 storage/testing/utils: add helper functions c8b9d64d81f scheduler test: unify util to fake pod. b953708fa93 Update 1.29 Release Notes team a919079ff31 Check --show-events in kubectl describe pvc (#120380) 1a27531d2e1 Fix for Kubeproxy Mock framework where hcn object is holding always new object and not the pointer reference. 108d1955954 use AuthorizationConfiguration in kube-apiserver for storing authorizer config 52c582ca77c Bootstrap API Types for Structured Authorization Configuration bbb905c794c remove gce healthcheck interval e2e lb test b59d4afd14e fix typo exeucting => executing 62275e3cc8c fix typo dervied => derived 79a7833ade0 fix typo Mininum => Minimum 6e3ebdc68e7 fix typo Conext => Context 409b46576ff bump github.com/emicklei/go-restful/v3 to v3.11.0. b4e5b868a8e Don't reuse memory of a restartable init container 10caecb3b22 kubectl prune v2: switch to contains-group-kinds annotation 6c59e8be5e2 hack/update-vendor.sh dad1b2a4306 Fixup kube-openapi/pkg/cached changes e1ffbacb7ae go.mod 7cac1dcf678 dra scheduler: fall back to SSA for PodSchedulingContext updates 39af594f312 storage/testing: a simple refactor 40618b765cc add loging and bump timers to avoid races 3cb0b520d60 Scheduler CSI tests: switch maxVols to int32 79d0dde4a83 replace hardcode string with exists variable 9b50af1f4f8 Use a wider-range of metric buckets for PodStartDuration 62267518b83 Fix systemd unit string matchs c6e9fba79b8 move reasons to api package for job controller e22f8ed553c add CAP_NET_RAW to netadmin profile and remove privileged 0288367db80 test-e2e: Retrigger the RBD image post merge job 28dbe8a34dc scheduler/NodeUnschedulable: reduce pod scheduling latency 2f10dd0a841 CHANGELOG: Update directory for v1.25.14 release 2a7902f7c7b CHANGELOG: Update directory for v1.26.9 release 7c98d3fffd7 CHANGELOG: Update directory for v1.27.6 release 309876b5d78 CHANGELOG: Update directory for v1.28.2 release 710dceded51 Look for pods in ownerReferences of PVC (#120427) 80c8074e3be service controller: limit logging node names to 50. 349e3ebf80b service controller: improve node lifecycle updates - update nodes if providerID has changed 21e26486ac3 sync Service API status rest storage 239ce7c52b1 e2e_network:stop using deprecated framework.ExpectNotEqual 7fc11f47ff4 Mark a volume as uncertain-attached after detach error 99903071469 kube-scheduler: drop deprecated pointer package 9e34aa306cd Update hack/verify-govulncheck.sh 5fcffcf4e48 Add APIGroup ratcheting validation to PVC.DataSource af151eeba2c specifically check that the pod was successful 7710128636a kms: remove livez check 15ce5dd9903 kubeadm: fix flaky-test TestManifestFilesAreEqual 4f20a72ea00 variable name should not conflit with import package, replace the variable name 084deb7a7cf clarify the description of the metric apiserver_storage_objects 9da533ced6f API Chunking conformance metadata 3d91ffc6f9b /cmd/kubeadm,/test/e2e*: update OWNERS for fabriziopandini & RA489 4e0c8a97521 kubeadm: remove reference of k8s.io/kubernetes/pkg/apis/core/v1 4d105eb1ce8 add TestUnmarshalJson for UniversalUnmarshal 819eddaf9a4 scheduler: fix TestIncomingPodsMetrics unit test 6fbb8ec7e44 Move scheduler testing utils to /scheduler/testing 868adeb3bdb Update IPPVS e2e tests for containerd version above 1.6.9 6b4ab616a2c Increase range of job_sync_duration_seconds d765e40a988 pass GOTOOLCHAIN to build containers 7ad0e451aca remove unnecessary kube::golang::verify_go_version calls 43b434f66a8 sig-node: add rphillips to reviewers d1b5a9953a0 handle GOTOOLCHAIN in kube::golang::verify_go_version 4d55c0687db Reuse SupportedMediaTypes for CR content-type negotiation. 09d64ed7d4f promote sli metrics to stable 0df4a69f5c9 Kube-proxy: Get nodeIPs for both families with dual-stack (#119525) 0d3eafdfa39 fix(scheduling_queue): always put Pods with no unschedulable plugins into activeQ/backoffQ (#119105) e6435e98eda promote component SLIs to GA; remove feature gates for component slis e2c1c0d34a6 kubeadm: drop deprecated pointer package 357d7804b8f kube-proxy: drop deprecated pointer package 678b958567e use universal decoder and add a check on default dns Policy of static pod for test 1fb4eee94e0 Use container log instead of termination log 190f9d0d4b9 Add govulncheck script to expose go vulnerabilities fc3ee07b512 e2e pods: fix WaitForPodsResponding retry 6f9140e421c DRA scheduler: stop allocating before deallocation 2dd7db306a6 Update modules.txt 61ecc2ad884 Retry operations if CSI Driver Isn't Found by Treating this Error as Transient d3eb082568c Create a node startup latency tracker 2d86c333f57 add test case for generating etcd manifests 912041ce41b kubeadm: fix diff order and add test for new default value manifest 41b62c4dd71 Promote PV/PVC e2e test to Conformance 0936c8de59f remove persistentvolume endpoints from pending_eligible_endpoints.yaml f4467457776 Improve logging on kube-proxy exit df5c1bb1ea1 added documentation about the format of certificateKey 43ccf6c4e8f kmsv2: add apiserver identity to metrics c1a0aa08e31 Add cni plugin auto Arch and OS selection b443a841e30 kubeadm: add log for static pod manifest diff f135eed37b9 update codegen d7264d0af03 Make StatefulSet restart pods with phase Succeeded 4e73634b531 scheduler: start scheduling attempt with clean UnschedulablePlugins 7e4b5d0d49a Final Fix f499b4f8918 Bump distroless-iptables to v0.3.2 18932d970ef [releng] Update publishing-bot rules for active release branches that use go1.20 to Go 1.20.8 93e3b07e11c [cluster/gce] Add KCM specific args 48f453d6498 cloud-provider: Log additional options aa89e6dc978 Use ptr.To to retrieve intstr addresses 9feaefb5cbc Increase ut for kubeadm phases init addon rename field casename to name do go lint check Update addons_test.go to remove whitespace 5e0931336b5 kubelet: fix metric container_start_time_seconds's timestamp 3e2bad02dcf kubeadm: remove 'system:masters' organization from apiserver-etcd-client certificate a0a8765027a fix: update thirdpartyresources refs 5c7dac2d772 dra scheduler: refactor PodSchedulingContext updates 43c05e98ca4 cleanup: Replace the deprecated NewMemCacheClient with memory.NewMemCacheClient a69f56e1375 fix: check if initsystem service exists 7dea3d6c3bf New mock test framework for windows kubeproxy. 975da2fb239 fix typo in client-go package 3a1a67e33d7 add aojea as controplane reviewer cc77b97c5e9 add aojea as client-go approver 7a13b11af0e update e2e import restrictions 6c973f01d23 reduce CPU requests for fluentd-gcp to fix failing tests 08006c842fd apiserver: rename request body size metric 8451c80b601 pin gengo 93d93258b19 bump: upgrade gorilla/websocket from v1.4.2 to v1.5.0 98af8befe27 [go] Bump images, dependencies and versions to go 1.21.1 dbd3eb54191 remove logcheck.yaml f365cae9ee6 Fix typo in api.proto 2d1877c97b6 fix breaking pv creation when the validation webhook exists f33265cf5d0 HandleRetry has already called in the GetObject fc51a27c036 fix typecast missing 2ea47038b90 podresources: e2e: force eager connection 6cd446a2064 Add cloud library to unwanted deps 9f76d8d45a0 Track vendor status of unwanted deps 87d49a51bed fix(queue_test): make sure the first bind failure via counter 94afd6e3a4d skip the reason check for OOM tests if it will fail f47661e1b72 fix inplace VPA stuck in InProgress when custom resources are specified added unit tests d7b7a85fbc0 feat: make user-defined plugins discoverable with e.g. kubectl help (#116752) b468e4eb1cd e2e_node: Assign enough time to finish the postStart hook c4dd16a1f86 golangci-lint: warn about deprecated APIs only as hints 36d36722499 e2e_auth: stop using deprecated framework.ExpectEqual 9c1df5ff0af move back to bullseye 67858e1ff06 Bump images, dependencies and versions to go 1.21.0 0593cfdd14f Fixed variable used for moving auth-provider-gcp binary c682d2b8c59 scheduler: add ResourceClass events 2ad4304e8f2 Add Windows support for IPPVS 15a402eefb7 e2e_apimachinery: stop using deprecated framework.ExpectEqual 43fc6b5bdb0 Added suggests changes 355ae44a3ca Revert "bump npd to v0.8.14" e7ee3ae3d94 Create e2e test for StorageClass endpoints 418af0f4dcb register API types only once for encryption config 2144852f7c9 Commits merged 657cc2045ee kmsv2: enable KMSv2KDF feature gate by default b97cb6dd007 Revert "Do not attempt to overwrite higher system (sysctl) values" c131c92b9f3 scheduler: unit test case for concurrent event with other pod a0d6a815fcc WebSocket Client and V5 RemoteCommand Subprotocol 0024c7e1668 Changed the generator codes for kubernetes metrics table cd943dd95e3 scheduler: fix tracking of concurrent events 933bcc123b4 only drop invalid cstate packets if non liberal 7c75b018d57 cmd/kube-apiserver: add .import-restrictions 43783aeb18c drop release-1.24 rules from publishing-bot e190e179b3c Document `cluster/gce/gci/mounter` as static binary 059e8353b76 check labels/annotations in the beginning 6ec8dbe5b59 cmd/kube-apiserver: avoid importing the kubeadm pkiutils package a7748872621 cleanup:e2e:stop using deprecated framework.ExpectNotEqual e8564d6c5bc KEP-3895: Promote interactive delete to beta 14e7d97151e Remove GA featuregate for JobTrackingWithFinalizers in 1.28 ef235c4eac8 e2e_framework:stop using deprecated wait.ErrwaitTimeout b35357b6c08 cleanup: omit comparison with bool constants 622eac23477 e2e_storage:stop using deprecated framework.ExpectNotEqual 7c33b78418c remove resource flowschemas and prioritylevelconfigurations for legacyBetaEnabledByDefaultResources in v1.29 9795df456f3 cleanup:e2e:stop using deprecated wait.ErrWaitTimeout fc25af7f548 using wait.Interrupted instead of deprecated wait.ErrWaitTimeout for apps e6dfdb240fd Output the error message for better analylsis ff3cb43c300 remove labeld-deployment.yaml cae090e7fed scheduler: remove unused constant SchedulerPolicyConfigMapKey c74d045c4b7 scheduler_perf: show name of one pending pod in error message 3c2cfd9a4fd resource claim controller: separate generated suffix from base 2c5a11a55bf Match on cri-o socket suffix only 214772c1104 dependencies: update opencontainers/selinux to v1.11.0 95118ec30c1 e2e_network:stop using deprecated framework.ExpectError 3f8f14397e1 Set external credential provider to true by default in kube-up.sh 410ac1456ce Don't run the nodeipam controller on KCM if cloud provider external 45b9b0df41f Add namespace to apiserver tracing c83eb6dcaaa Add subresource to apiserver tracing bcb59a03ebb Add name to apiserver tracing 646053d73db Add api-version to apiserver tracing 8c34208a62f Add group to apiserver tracing 6f55437472e kubeadm: increase ut coverage for addons/dns/dns.go ceaed508ce7 Validate the cloud-provider passed in and the corresponding feature flags 2e5f17166b9 pkg/proxy: fix stale detection logic 95121fe846f kmsv2: add legacy data integration test 42e8cfa28ac fix failing metadata test cdcbfcc0a6a [KEP-2395] Phase 4 - Disabling In-Tree Providers 8255858a7c4 remove SkipFilterSchemaForKubectlOpenAPIV2Validation 0fb1f59a881 Improve service unit test failure report 39e433891bc fix(test): delete cronjobs.v1.example.com pi for clean up 36e33cd88e8 fix(test): Remove 'shortNames' Property from CronJob Fields in e2e-test 3e252857c1c Add unwanted cloud deps to track 875b00137fd storage/etcd: add TestWatchDispatchBookmarkEvents unit test 6058540f3d0 storage: document ProgressNotify from storage.ListOptions f4fc4b16b1d doc: Add example for restarting all deployments in a namespace 936d67f6888 Update distroless-iptables image version to v0.3.1 bb695ac67a2 eviction manager: add test case with localStorageCapacityIsolation open a56745c7066 e2e_cloud:stop using deprecated framework.ExpectError bfc3c2110fc e2e-node: fix TopologyManager test jobs. 3d9b5d05772 e2e_node:stop using deprecated framework.ExpectError f1051f34a79 Remove deprecated framework 062c57ae92f dra controller helper: make allocation error message more readable f96e23e477d dra controller helper: merge log entries for informer events 78f3b76390b scheduler_perf: use different log names for different DRA drivers d781b58100f dra helper: skip allocated claims during UnsuitableNodes calculation fcff9969095 adjust error message a bit 889c8e919bd New repo who dis? distribution/reference 741f1461571 Revert to json-patch 4.12.0 b10697c7880 kmsv2: fix race in simpleCache.set when setting cache size metric 8f6a79b29fa use external cloud provider by default with gce 903156daa2b fix(test): add e2e-test for kubectl events filter by GroupVersion a46bab69308 Fix a job quota related deadlock (#119776) 696f84aeb09 Feature-gate SidecarContainers code in pkg/kubelet/kuberuntime 63177db32c2 Add an e2e test for the pod sandbox changed scenario e167ecbb9ea fix: only invoke AddReference first time when to sync same pod to minimize unnecessary API requests to the API server for the configmap/secret get API 3c5a58c5f89 Refactor checkErr func f22d8540723 unwanted-dependendencies: updating references, and `jq` 0323fe42e23 adding more callbacks in kubedrain helper e01bd641447 Avoid creating local variables that don't change 10553a19668 Flatten switch case 1f4f2a5d601 Refactor common WithRange case ede524e1a6a fix a pidpressure test flake 3bc6ee6fef7 unwanted-dependencies: sort this list eb5695b0c5c unwanted-dependencies: adding archived repos 15c02f2a034 add integration tests 9e1ff1e5120 add loading config and wire feature flag 57b27fd3cd1 Fallback to legacy discovery on a wider range of conditions in aggregator 160589a0edb Refactor transformers for watch to implement Encoder interface 04f0b4a0147 Bump CloudDualStackNodeIPs to beta for 1.29 46cb5386423 OWNERS_ALIASES: add tzneal to sig-node-reviewer bf41b0462cc Fix OpenAPI aggregation cleanup 16a7b536022 Fix typos in comments 2b69daa960c Allow specifying ExternalTrafficPolicy for ClusterIP Services with ExternalIPs be4692864bb Remove duplicated returnRV variable 2e174a029f5 Add timeout to listContainerStats context 2825519da2c apf: remove v1alpha1 API a926f594da9 Bump runc to v1.1.9 7b44d73f73f bump npd to v0.8.14 879dad9c2ff kubeadm: Remove the usage to print the default component configs for `reset` and `join` 53cb35d6d48 e2e_apimachinery:stop using deprecated framework.ExpectError 8a368afa273 e2e_storage: stop using deprecated framework.ExpectEqual 209f23ecd7c e2e_upgrades: stop using deprecated framework.ExpectEqual 41adc93ca3a remove GAed FG DownwardAPIHugePages e187368242b fix(test): fix TestGetPodResourcesV1 comparison logic in tests 7e7b67f2ccd remove GAed FG GRPCContainerProbe af7d76fa059 Promoted feature gate `ServiceNodePortStaticSubrange` to stable and locked it to always active 5dbec5c715b local debugging should utilize the same defaults as prod d5690f12b69 pkg/kubelet: allow sandbox image pinning from CRI 8581703b07d Prune sig-auth-encryption-at-rest-reviewers and drop lavalamp across aliases f5d6c65186d paginate initial list inside the storage watcher 8d9517318a4 Extend npd e2e timeout to fix npd e2e error 618e40c61b7 kubeadm: promote EtcdLearnerMode to beta b2c0d80c37f Test watch converter encoder 03126c54658 add comment 651eb2fa58f revert PR https://github.com/kubernetes/kubernetes/pull/119592 709721e0df1 feat: update google.golang.org/protobuf to v1.31.0 3fcc045bce9 Minor cleanup tranformers interface 172a41192c6 Cleanup setting non-nil Items field 5269e769902 scheduler: properly skip DRA events 1988c31fc81 storage/etcd3: error when progressNotify option set and newFunc was provided for a registry 580f83ab4a5 Avoid duplicated dots in pod condition 855b445d28d Remove deprecated selectorSpread c29234d3e10 Add integration tests for all bind plugins skipped in TestBindPlugin 87165303464 Add unit tests for extract tag functions in prereleaselifecyclegenerators 0ea6522807d apiextensions-apiserver: generate applyconfigurations dbbce2aaba2 sort stability list of metrics in the shell command (#120197) 9a24dd2c27f fix(test): fix error comparison in GetPodResourcesV1 test 94d03ccc83b Squashed commit of the following: 030a114ce94 Add mengjiao-liu as sig-instrumentation reviewer cc784cfe857 Mark Job onPodConditions as optional in pod failure policy 3d583398fe2 Avoid to build the error msg for twice 484510863bf e2e_windows: stop using deprecated framework.ExpectEqual f5681f88179 e2e_autoscaling: stop using deprecated framework.ExpectEqual 05bb01d27a8 e2e_cloud: stop using deprecated framework.ExpectEqual eb0afbc7d01 kubeadm: update swap warning for v1.28 change fa37bebcd4b Add comment about why AttachFunc be overridable d680bc540b5 fix(test): fix error handling condition in test 01df59a73b9 pkg/proxy: remove equal method from endpoint interface 6fc3d0ecefd remove GAed feature gates CronJobTimeZone, JobMutableNodeSchedulingDirectives and LegacyServiceAccountTokenNoAutoGeneration e9be1d7438b Test now has coverage! 628bbb9ef8a kubeadm: add supported etcd version for v1.29 dcbe7755bfb kubeadm: Add testcases for exported method `ValueFromFlagsOrConfig` 78538bd303d update coredns to v1.11.0 update coredns to v1.11.1 update coredns-kubeadm to 1.11.1 bump up corefile-migration to v1.0.21 based on https://github.com/coredns/corefile-migration/releases/tag/v1.0.21 fix dns_test ut failure e410f86825f [StructuredAuthnConfig] use local variables in oidc pkg 1bf90f9484c add StructuredAuthenticationConfiguration feature flag 1bad3cbbf59 wiring existing oidc flags with internal API struct f909eb630ca add AuthenticationConfiguration v1alpha1 api ff56d3b6914 Refactor WatchServer to prepare for using encoders a4ce32769ff fix pod delete log in deployment controller 0bc0256093b Update job_controller_test.go ff10df107a4 remove fake deployment 13a8ad12b82 apiserver: fix data race in etcd metrics dec1c361255 add kubectl rollout e2e test 22f4b1c56ad Static check fix 70e2deb32f9 Fixing lint problem 6ded53ce4dc Added back test changes 5fb049ff473 Added create job & cleanup ff1659cb798 Added syncjob f87cc43cdb0 Review Changes d08fc3a4d01 Another one creeped in ef6a0eb6d85 Final Lint Fix aa9f38c36d8 More Lint Fixes 601679446ae Lint fixes cf32ae9453b Initial Commit 297f04b74ae Added function to remove finalizers as backup 1d52fb2806e CHANGELOG: Update directory for v1.28.1 release 5524f1651a2 using wait.PollUntilContextTimeout instead of deprecated wait.Poll/PollWithContext/PollImmediate/PollImmediateWithContext methods for scheduler c9c83d1af44 cleanup: e2e : stop using deprecated framework.ExpectHaveKey 47d9a47a088 storage/util: introduce AnnotateInitialEventsEndBookmark function ccabc01093a storage/factory: extend the Create method by newList and resourcePrefix params 02e51b27a9a CHANGELOG: Update directory for v1.27.5 release 13b52a18483 fix crd finalizer validation ab018481342 Make sure skip score plugins alwarys returned 6805632abb8 CHANGELOG: Update directory for v1.26.8 release f847565c081 Move mount warnings to info logs for normal expected paths 63df8a5821a CHANGELOG: Update directory for v1.25.13 release 52e85074042 CHANGELOG: Update directory for v1.24.17 release 980fa6a2b9e Add CEL library lifecycle linter 3fb14cf4e7a Bump cel string lib to v2, add tests 640a2ec3327 Update k8s code to handle cel-go changes 1a850a00630 Bump cel-go to v0.17.6 24877f96fbb Incorporating feedback on 119341 2bede058f92 Use environment varaibles for parameters in Powershell c761c165627 Use env varaibles for passing path 1327a57aaf8 storage/cacher: duplicate logging when a watch is closed due to unresponsiveness. 9ee94b0204a Remove duplicate codes in framework RemovePod f752ca2dc84 Make API chunking conformance test deterministic 28621f1eb3f fix(kubectl): kubectl events doesn't filter events by GroupVersion for resource with full name 79466886a17 doc(kubectl): Kubectl restart command without specific deployment will restart all deployments ce9e668a932 golangci-lint: suppress one issue, demote others to "hints" 6a16c076e76 hack: move common "verify generated" shell code into function 9c83c380e0c Add wait for cache sync b1223e0d1ac check for overflow 87cf890632c Fix CEL cost handling of zero length replacement strings b0e249f657a Handle edge cases in seat demand stats 037640af8c8 Apply suggestions from code review bd06c26d580 fix: concurrent map writes in e2e test 826f3a130ae promote to conformance Service multiprotocol tests 98d772ca3c4 Support multiarch/platfrom in find-release-tars c6e54169fc1 e2e_apps: stop using deprecated framework.ExpectConsistOf 93832de6246 stop using deprecated framework.ExpectNotEqual 145dbb6accf stop using deprecated framework.ExpectNotEqual d2dbc583a06 Adding coverage for OOM Kill scenario due to node allocatable memory limits, when pod level memory limits are not set 0039f24d74d apf: refactor promise to use a context 3e9a4c15a85 Restrict what imports get into code within test/e2e_node c1eb18c00ca generated files 039859b9b72 e2e network test for udp services with hostNetwork clients 2472291790e api: introduce separate VolumeResourceRequirements struct a5600b69251 storage/etcd: simplify passing the transformer 6161752ecbe storage/etcd: remove newWatcher function 3546831ceb2 e2e_storage: stoping using deprecated framework.ExpectEmpty a9308927691 Gate: disallow .status.loadBalancer on non-LB svc b8512cfe247 expect the new resource_scape_error metric 905f07f1ac1 Revert "mark the OOM killer as serial to reduce flakes" 5c7529a6fc3 kube-proxy service cache don't treat ipMode proxy address as invalid f93bd699aaf Trim managedFields in pod informer 2f576969eee reducae function calling to once 093093593c6 kubeadm: fix the field path for JoinControlPlane.CertificateKey validation 700b55b3b26 kubeadm: fix the bug that --image-repository flag is missing for some init phase sub-commands 75a80d5aba4 kubeadm: add validation to verify that the CertificateKey is a valid hex encoded AES key c112a34642d add unit test for kube-proxy service cache with ipMode 7f805dc9354 fix test name 30ff937aaf9 add a fake load balancer class to fix e2e test failure 3cbecf218df kmsv2: add metric for DEK cache filled d86e72202c4 kmsv2 test feature enablement unit test bd6f5487463 mark the OOM killer as serial to reduce flakes afe9045e466 Add v1.28.0 API testdata a6a1f070e7f Signed-off-by: liyuerich <yue.li@daocloud.io> 8163d244ede Update ccm flag help to describe disabling webhook serving 8291b847d58 Allow disabling both webhook ports in cloud-provider f407b31d42a kubeadm: Fix typo where API group is not correct 72af21e1a13 kubeadm: Cleanup the unused input parameters 1eb6282016a kubeadm: Move the method used only in the test to `postupgrade_test.go` e290b4cb3bc e2e_network: stop using deprecated framework.ExpectEqual fd3f82531f8 kubeadm: increase ut coverage fo util/kubeconfig 48260b4a77b kubernetes mutual (2-way) x509 comment ae0a0477bf6 add aramase to sig-auth-encryption-at-rest-reviewers 6c2cfac0a97 Revert testgrid url changes from CHANGELOG 577197559ae remove the legacy test dependency af26ebd0fa3 translate beta label to ga in volume_zone 4712025ea84 Graduate kubelet resource metrics to GA 6ef90979720 Update the URL of testgrid af9bf7b41e0 Prefer non-alpha storage versions when available 09fa21ab879 Store validating admission policies and bindings as v1beta1 a422d11c772 prep for go1.21: use -e in go list ef7d4047025 using wait.PollUntilContextTimeout instead of deprecated wait.Poll for pkg/scheduler cc1670ddd2b Limit intstr.Parse() to 32-bit integer parsing 5567f288e74 api: change list type for node lists in PodSchedulingContext 79333684600 Update CNI plugins to v1.3.0 f07a3a3f263 calculate sidecar container resource in pod autoscaler 427b703c37e scheduler: remove deprecated v1beta2 KubeSchedulerConfiguration 5bbc4f76055 Pass Pinned field to kubecontainer.Image a5b3a4b738e cleanup: Update deprecated FromInt to FromInt32 (#119858) b75c5d33e5c bump the busybox test version to resolve test failures bd36be02188 Make gomaxprocs install optional, limit to tests 9a253d896a0 storage/util: move GetCurrentResourceVersionFromStorage f7e659db236 storage/etcd: no-op, refactor watcher.Watch method signature 5752cbd8c76 chore: add pod UID in event log 7a6e056bbdc kubeadm: add TODO for NewMapStringString() and CLI extra-args f3da0d4ed32 kubeadm: update the rest of the code base for structured ExtraArgs a505c7160e2 kubeadm: adapt the validation and utils for structured ExtraArgs bc6fcb72a8a kubeadm: add structured ExtraArgs in v1beta4 8314122382c e2e framework util subtle bug checking endpoints 9742e276b95 update to golangci-lint v1.54.1 + go-ruleguard v0.4.0 1e961af858b scheduler_perf: test case for DRA with multiple claims 0331e98957f scheduler_perf: fix installing DRA test driver multiple times 092897f061f drop v1.26.0 API testdata 4950521ad88 kubeadm: increase ut for certs/certlist 224087abfa0 Add Pod Scheduling SLI Duration metric (#119049) 3edae95e5ae Add unit tests for subdomain match in keyring 8cb979ae55d CHANGELOG: Update directory for v1.28.0 release a0f07f2b4d9 e2e WaitForServiceEndpointsNum take into account the address family a161fa8017b pull Host from kubeconfig when needed 03415ebc1da Integration tests for IP mode field 86b1f095ca7 Proxy changes for IP mode field 47fec59a31a parse node selector in prefilter 4fb0ce28377 Fix broken link to testgrid 34a89f039b8 Update cri-tools to v1.28.0 29a6705dabc Generated code for IP mode field 3ac2899d2b5 Add IP mode field cf3f0bd7780 fix: register the plugin rejects Pods in WaitOnPermit to UnschedulablePlugins b0082237050 fix: when PreFilter returns UnschedulableAndUnresolvable, copy the state in all nodes in statusmap 947c9376f6a change struct methods receiver to pointer e258228e4ac use a buffer equivalent to grace period to eliminate test flakes 717c149a734 fix mirror pod nfs test failure due to differing NFS versions 279a663f948 Update README.md 6f27733af8d Job: Replace deprecated workqueue library with supported one dd7b7073c38 e2e: add test for verification of timestamp for new PVs 8e661498702 e2e: remove extra spaces b9cf6991e63 Use tracing semconv types instead of own defines 765f3916c27 Fix a bug that PostFilter plugin may not function if previous PreFilter plugins return Skip 1863a808b20 fix: add code comments 9646ae5a9ef Fix: null jsonpath serialization 8ab6bee676a Make seccomp status checks in e2e tests more robust 509ffe2938f Fix receiver names in legacyProvider 80710976cfc [releng] Update publishing-bot rules for release-1.24 to Go 1.20.7 f73c253accf fix typos for pod replacement policy 5fb543a4118 kubeadm: remove 'system:masters' organization from etcd/healthcheck-client certificate 62b063b74b5 wsstream: use a single approach to detect connection upgrade 74053e21519 Create e2e test for PV/PVC endpoints 49e00e8bdee Move adding GroupVersion log until after an update is confirmed 77b3bb0f69b fix race on etcd client constructor for healthchecks a6329ac4536 Fix to honor PDB with an empty selector `{}` 0e238409290 dra test: enhance performance of test driver controller 40b604e3741 Update pkg/apis/core/helper/qos/qos.go f355b22f5f7 implement Stringer for podActions e4d16f34c15 Add test coverage of result size of string operations 10fe3da87db Delete PSP API types and generated clients 69a5a528967 Bump cel-go to v0.16.1 6aad00ff73d client-go: chore: implement `Is` interface for `ErrGroupDiscoveryFailed` 4063ca40501 Code review fix: Move GetPodQOS code to ComputePodQOS. If set, return PodStatus.QOSClass from GetPodQOS. 5d4410b9601 Perf optimization: Move away from GetPodQOS, using PodStatus.QOSClass instead ef51dbfa0c7 Drop [Feature: tag to make sure this tests runs on pre-submits a1809ffae37 client-go: log proper 'caches populated' message, with type and source and only once 37730c07dd6 apiserver/httplog: pretty up impersonation output 3e908c5bdee e2e_common: stop using deprecated framework.ExpectEqual d154ca9c00a Statefulset should wait for new replicas when removing .start.ordinal 0944c00778a Fix some typo in kubelet component source code 3a2c4d6f096 kubeadm: fix nil pointer when etcd member is already removed ba9ce3ab08b fix flaky test on dra TestPrepareResources/should_timeout 24f32d9d185 Local PV Stress test: don't fail on deleting missing PV 074d5b53299 Rewrite the tests to be table driven 391c1a3eccd dra: cleanup manager unit tests a5fff9a5d09 Catch direct references to unwanted dependencies in kubernetes modules 85c385d4101 Update the container images used in cloudbuild to their latest version c4f4e3bc43b pkg/proxy: unit test refactoring 4bc9434f99d SSA: prevent usage of Extract calls via forbidigo b6ae858e01f Drop AvailableResources from controller context d5d90b7b228 add support for ExponentialBucketsRange 90b870b710a OWNERS_ALIASES: compress sig-node-{api,cri}-approvers a215b29d7cf remove makefile:generated_files in v1.29. f0b38766a06 use LoadBalancer type service for e2e service test to patch ingress status c23cee1be3c fix OOM killer 4b6abf10c6e Handle errors when preparing lease for update ca338e517ba Fix the flaky legacy_service_account_token_clean_up_test.Fix the flaky legacy_service_account_token_clean_up_test. a44ce346d78 e2e/apimachinery/watchlist: stop panicking when run against unsupported cluster/environment 14251738d21 NCC-E003660-PCK: Non Constant-Time Comparison of Service Account Token Secrets 109cf6820d2 Update base image and add utilities to kubectl image 2a767c9916a update the busybox test image to 1.36.1 133696725ae implement secret empty string value integration test 7f53f7649e1 Use intstr.Parse instead of reimplementing it 1b8fb69d9ea kubeadm: increase ut for cmd/kubeadm/app/phases/addons/proxy 63cf568251d e2e_node: stop using deprecated framework.ExpectEqual 18c46b2487a add validation for static pods to have a name 66aa2af0979 CEL lazy map: add test for boolean short-circuiting 307b0630aa6 cri-api: add CRI implementation maintainers as approvers c4739313b7f Track manually created secret-based tokens df89045b53c dependencies: update github.com/ishidawataru/sctp 2b12df56b0b Fix a race where a call to Shutdown was happening after ShutDownWithDrain() had performed the check q.isProcessing() && q.shouldDrain() and before waitForProcessing() has reached its Wait(). This is because waitForProcessing() is only checking the length part of the condition instead of both the length and whether we still need to drain. It turned out that there were lots of unnecessary accessor functions being called locking and unlocking the cond which are not needed because Wait() automatically unlocks and locks the cond for us and best practice says we should run it in a for checking for the condition (so this is what I have done). 213ed03c000 remove deprecated kube-apiserver identity lease garbage collector 57226fbd27a e2e_dra: stop using deprecated framework.ExpectEqual fb9646fd60d apiserver: add flow control metric current_inqueue_seats 4e10ff91c5b pkg/proxy: move proxier health eventing to cmd/kube-proxy fdea6ad17d7 kubectl debug: Remove legacy server support baed6240468 kubectl debug: Introduce customizable AttachFunc instead static one 41889984304 Improve conditionFuncFor expression parsing for wait --for jsonpath 3964f71fe02 e2e:podresources: verify count for terminal pods 6d244728b9e adjust order and fix typo for kube upgrade 479b2d03a43 kubectl: fix describe node output when sidecars are present 4e2e059c7b2 Graduate RemainingItemCount to GA 6acfa3cb4ac Graduate APIListChunking to GA e9b69d1958d e2e_scheduling: stop using deprecated framework.ExpectEqual 9d8959224cd add explanation for large-cluster-size-threshold arg about multiple zones cluster 2222509cb41 e2e_instrumentation: stop using deprecated framework.ExpectEqual 60a8bca507f dynamic resource allocation: add unit test to check the reuse of the gRPC connection 7ffd3063cef dynamic resource allocation: reuse gRPC connection dbaa9fe6b46 added podgc orphaned pod unit tests 173b5a75b96 Trim managedFields in controller-manager c86f562f29b Run hack/update-codegen.sh informers subprojects 9c4651bd047 Add 'WithTransform' SharedInformerOption d1946392528 Cleanup kubectl legacy server fallback 106a931c299 fix intergration test d2df65ba6c9 update the dependency sigs.k8s.io/structured-merge-diff/v4 to latest tag a35608cc614 Update debian-base for test images and others 43f8ccfcca8 TopologyAwareHints: Take lock in HasPopulatedHints a9d26ac7c78 Optimize the code of NodeUnschedulable to reduce TolerationsTolerateTaint function calls 2ce07981af7 kubeadm: Make dry-run is configurable in joinConfiguration f5a6797e563 kubeadm: Make `dry-run` is configurable in `initConfiguration` 709eb6c0302 eviction for pid trigger PIDPressure condition slowly on CRI-O b8336f399bf KEP-2305: add metric to track unbounded label values 1e17237dbf6 KEP-2305: introduce allow-metric-labels-manifest 654e98e0a2e add endpointslice repo to staging README b7cbebcd034 Added oomkill test for init container and fix typos d8c145d20da fixes the issue in the documentation of kubectl events 12a874d2273 Preserve resourcequota informers for groups with discovery resolution errors only c9a084d59ca Fix duplicate GC event handlers getting added if discovery flutters 733f63c6c42 Add GroupDiscoveryFailedErrorGroups helper method 3bae26ae58b Check dbus error on container runtime start/stop 70f979c8da3 Alert message improved according to standards a6554b9d5d1 Make kubelet label types public f2fa6d5f6b3 Document PVLabeler as deprecated 7ff4572f792 Remove reference to `RUNTIME` variable in `build/root/Makefile` fc36d2fee83 chore: improve error message for unstructured helper method b60a3a58df2 api-machinery: stop using deprecated io/ioutil 0da37d8c544 chore: omit comparison to bool constant 17e6c5cb9f0 Error Typofix 9d4b489107e Renaming restartPolicy to containerRestartPolicy for better calrity 01c2c4f35f3 Error test cases added a609beb6b19 Decline on resizePolicy if the restartPolicy is Never f2879eed00b [UT] add ut for pkg/registry/networking/ipaddress c1cced24aa9 WIP: don't exclude .git from rsync 396c8a67832 test: TestPodDeletionEvent 975b2c6611d scheduler: Fix field apiVersion is missing from events reported from taint manager ba49ccdbc9b Gracefully handle empty config error when local flag is used 96ab232f5f7 Remove reasons from PodConditionType 1d9eed9f950 chore: slice replace loop 9378e580cf4 chore: loop optimization fc1b8a823d4 cli: stop using deprecated io/ioutil b4d1440063d unittests: Fixes hostutil.GetFileType for Windows 01861282b1d controller: fix the help information format of sorting_deletion_age_ratio metric 07a1aea2def remove unused cloudprovider param from the ProbeControllerVolumePlugins func 208cf1afabb Fix: do not assign an empty value to the resource (CPU or memory) if it's not defined in the container 72f89b63757 kubelet: fix comment typo 12f8eeaf9b1 fixed typo in get-kube.sh 3418ceaca64 test: replace intstr.FromInt with intstr.FromInt32 8b363cc7c08 bump dependencies: github.com/godbus/dbus/v5 to v5.1.0 887654160f9 Improve the performance of schedulinggates 0ef4be48777 cloud-provider: replace intstr.FromInt with intstr.FromInt32 847df6d9153 kubelet: output log even file is rotated 05f04f866eb Keep PLEG interruptions in a separate interface b109a585398 Improve the performance of isPodStatusCacheTerminal 84c14c65c6b Remove unnecessary type conversion 55d471601b1 [ut] increase covrage for kubelet/prober/results e0f2ed1b92b [ut] Increase test coverage for kubelet/pleg 18c86efeeaf kubelet: perform the admission checks that preemption will not help first to avoid meaningless pod eviction 08a69d63413 Improve performance of method PodRequests 337f4e524aa Do not error log CRI stats for not cached partitions f2aeb3b0d91 Improve lock performance fb6fd36384e Add endpoint to skip topology aware log when missing zone hint Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-03-15 17:17:19 +00:00
Bruce Ashfield	a5fee65b68	skopeo: update to v1.14.2 ... Bumping skopeo to version v1.14.1-4-g1c2ab995, which comprises the following commits: c3e474e4 [release-1.14] Bump Skopeo to v1.14.3-dev b673eb60 [release-1.14] Bump Skopeo to v1.14.2 18cc81ab [release-1.14] Bump c/image to v5.29.2, c/common to v0.57.3 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-03-15 17:17:19 +00:00
Bruce Ashfield	a906b81ca6	podman-tui: upate to v0.17.0 ... Bumping podman-tui to version v0.9.0-246-gb4350927, which comprises the following commits: b4350927 Bump to v0.17.0 db48222a Bump github.com/containers/podman/v4 from 4.9.1 to 4.9.2 49c31e9e Bump github.com/containers/common from 0.57.3 to 0.57.4 c8c25120 Bump github.com/containers/podman/v4 from 4.9.0 to 4.9.1 00626a40 Bump github.com/containers/common from 0.57.2 to 0.57.3 bbba9ec9 go version update to 1.20 5674249f Bump github.com/containers/podman/v4 from 4.8.3 to 4.9.0 4d0b84f5 Bump to v0.17.0-dev cacf1b90 Bump to v0.16.0 67f735b5 Bump github.com/containers/common from 0.57.1 to 0.57.2 be25c60d Bump golang.org/x/crypto from 0.17.0 to 0.18.0 2ff1bb62 Bump github.com/containerd/containerd from 1.7.9 to 1.7.11 9b492e25 Bump github.com/containers/podman/v4 from 4.8.2 to 4.8.3 519ed36f Bump to v0.16.0-dev f7f47149 Bump to v0.15.0 9ba724c1 gh action update 1cdeadb4 Bump golang.org/x/crypto from 0.16.0 to 0.17.0 fb1886ea github action use golang 1.21.4 for golangci-lint 6521ce91 Bump github.com/gdamore/tcell/v2 from 2.6.0 to 2.7.0 54cd7d7e Bump github.com/containers/podman/v4 from 4.8.1 to 4.8.2 bbb8c9a9 Bump to v0.15.0-dev c545dbd7 Bump to v0.14.0 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-03-15 17:17:19 +00:00
Bruce Ashfield	a9f0f00637	podman: update to 5.0.0-rc ... Bumping libpod to version v5.0.0-rc4-2-g460fc4d65, which comprises the following commits: fc4e16366 Bump to v5.0.0-dev cfc5b8e0f Bump to v5.0.0-RC4 0898b338b Use stop timeout of zero for system reset 542883b9b chore(deps): update dependency python-dateutil to ~=2.9.0 99bb2bfce CI: must-add-tests check: use GH label, not text c5c294a35 fix(deps): update module github.com/shirou/gopsutil/v3 to v3.24.2 3abc488c8 Vendor in containers/(buildah, common) 4a03da22a Run codespell on code 03f6589f3 Fix events by fully adding the new PullError event 52fd284fd Update dependency pytest to v7.4.4 2b86ab5a1 Change image-path to image for tests 527b3793b Use machine image as specified in containers.conf 4c1c4c082 Vendor latest c/common and fix tests c50826cea test: fix manifest e2e test assumption f168b3c11 podman manifest add: support creating artifact manifest on the fly 2bbed8f20 Add man page content for artifacts d8bb63705 pkg/env.Join(): don't modify passed-in maps 66d60384f add --retry --retry-delay to podman run/create c3c0c4ab9 Add support for podman push --retry --retry-delay e5ee0bb5f pullImage does not need to be exported 2c9c7273c Vendor in latest containers/common 99b2f369d test/system: fix mount external container test 35133c842 Move locks to shim layer 6957c7819 CI: run logformatter on mac fd1d95126 Move ignition functions into Containerfiles b58f20bdb machine/ociartifact: Include image name in error 064258b49 Reenable boltdb upgrade tests 77bcf233e fix: split string Entrypoint by space 90e6478cf refacto: unknown signal return signal number without prefix 1de94dceb ci: fix module not found 585af039d feat: allow compatibility with podman v4 machine facad62af tests: fix after make podman inspect cmd return compatible with Docker API v1.44 23d6377ac chore: rename var host hostIP 2cd72c272 tests: add docker api compatibility test de845a5b4 feat: make inspect compatible with docker v1.44 950f612b5 logging: new mode -l passthrough-tty 5952486df podman network inspect: include running containers 8f02822c1 Remove xz unit tests as they are flaky f8abd7ff7 machine config: make write atomic 26ec570c6 Ensure HyperV 9p mounts work when a dir doesn't exist dfae51a4b Clean up gvproxy if machine start fails ee52f9cd7 systests: kube play URL: workaround for ECONNREFUSED 7e374a52a Vendor in latest containers/(image,storage) 698219cf9 Expose as-tested Mac/Windows repository state 9f5c20f9b macos installer: Add vfkit entitlement 15734f8c5 macos-installer: Remove hvf.entitlements 74b87874b macos installer: Default to using ad-hoc signing c2a2113bb new vms, with rc6 rawhide kernel 7b6d9a586 Fixup: avoid overriding io.Copy error 59704665a Avoid overriding io.Copy error 24a33a538 Move code for sparse optimized copy to a dedicated method 50a0c5176 [CI:BUILD] rpm: Add fallback for $SOURCE_DATE_EPOCH not being set e32c9bb5e Makefile: add machine policy.json to podman-remote.zip 1e5b5a889 macos installer: install default policy.json file bed61806c pkg/machine/ocipull: add default policy.json file f5a268319 Makefile: add MACHINE_POLICY_JSON_DIR option a02aa8f6a pkg/machine/ocipull: add custom policy.json location a210a4d7c test/compose: add test for default connection d9aff9b41 podman compose: only trim path suffix when ssh protocol 3cada0409 podman compose: correctly accept --connection/--url 6d3571dcf podman compose: build for all arches 7d5a68c9c CI: e2e: use distinct ports, not just 5000 5e387cd8a [CI:BUILD] rpm: Use $SOURCE_DATE_EPOCH instead of the current date 8d9ff04d1 vendor update gopkg.in/yaml.v2 to v3 cc7b19279 [CI:BUILD] rpm: Make BuildRequires independent of the environment 5b28a2b4a Fix podman stop -t -1 CID 656bf7b76 Change QEMU netdev to Unix domain socket 19b676f85 Enable lint for Darwin and fix identified issues 1b068b79f Fix nightly cron checks 83671ac34 systests: enable ipv6 tests 188404366 Update github.com/containers/libhvee digest to c1bda9d f099250be Better file close and err handling ea4553d59 integrating changes from #21768 fa99b9be9 renamed testfiles as testdata 0b3f3f0ef Use faster gzip reader 2245cf8dc Remove duplication and make consistent usage of the progress bar c42d3a74e Add a comment to explain why we look at file name for zip files 95aa2c4e6 Use github.com/stretchr/testify assert in compression_test.go 88af8852d Refactor machine decompress.go ecda4eab3 Update module go.etcd.io/bbolt to v1.3.9 53b5fc781 Update module golang.org/x/tools to v0.18.0 608976902 Update module github.com/openshift/imagebuilder to v1.2.6 3b127286a Adds example for secret creation from environment variable b68d3c7a0 Fix race conditions in hyperv readiness checking 127a8060a Ignore docker's end point config when the final network mode isn't bridge. 5d303ca26 Reformulate sparseWriter to deal with starting/ending zeroes explicitly c5434bf71 Expand sparseWriter tests a9ee31b92 Bump to v5.0.0-dev 54795efeb Bump to v5.0.0-RC3 3e76e594b Fix assumptions in 'push with --add-compression and --force-compression' 8e99c697f Fix assumptions in 'push test --force-compression"' 7acb49875 Update module golang.org/x/net to v0.21.0 f601a446b Bump VMs. New pasta, gvisor d85a71b4d Update module github.com/klauspost/compress to v1.17.7 d7f7f07c9 Stop using rm'd inspect format templates in tests be9aba7cc Remove image provenance from `machine inspect` d68240b15 Update machine files rm order and add QEMU rm 4078a4405 libpod/events: remove duplicated Details ID field 6f6925cca pkg/machine: ignore gvproxy pidfile not exists error 8f1cebf96 cmd/podman: remove duplicated event ToHumanReadable() a3a1b44c3 libpod/events: Update event time format and add timeNano f218f8430 machine: implement http proxy logic for all providers c4e68bdae Cirrus: Reuse shared clone script on Mac 2af73b83f Vendor vfkit v0.5.1 and gopsutil v3.24.1 f7d1726f9 Rearrange CI tasks for safety + efficiency 89b415ba3 Comply to Kubernetes specifications for annotation size. a31e8d2a2 zstd now default compression for podman machine 1c61f766d CI: fix search-test flakes 0b861350c machine: add sparse file writer 7746e2a3f systests: auto-update: minor cleanup 09095acf2 machine: Add `ConnectionInfo` to `MachineConfig` 5effdcca3 Fix up example description of podman-system commands ec68f07c0 Fix Lint on Windows and enable the job 66fd41ff1 cirrus logcollector: update package list 5327ddfdf Build with CNI support on FreeBSD c5a71c4fd Apply suggestions from code review 67ead5cb5 Apply suggestions from code review 408772d34 Apply suggestions from code review 1612ff69c Fix up example description of podman-inspect.1.md.in 62148bf61 Apply suggestions from code review b8c1a8e79 Apply suggestions from code review 66f39eee5 machine: Remove unnecessary TODOs 5b5343b38 Apply suggestions from code review 9d73dc6ed Apply suggestions from code review f7659b12e Apply suggestions from code review 4f13b836b Codespell code fc7140151 Fix up example description of podman-mount.1.md.in ee078a7e6 Update docs/source/markdown/podman-cp.1.md 606865a47 Fix up example description of podman-container commands 22effe8d4 Fix up example description of podman-stats.1.md.in 3fd09dd18 System tests: enable debugging for parallel-rm test 49400ecce Extract waitForGvProxy into shared utility function a0109caa7 Fix up example description of podman-volume commands 803410f1a Fix up example description of podman-kill.1.md.in bc5a4fbb2 Fix up example description of podman-pod commands 93a0c242c [skip-ci] Packit: Update downstream task targets 8ed6d4fe5 Fix up example description of podman-build.1.md.in 433efc1f5 Fix up example description of podman-commit.1.md fe910ae96 Fix up example description of podman-logout.1.md.in 12af4f36b Fix up example description of podman-images.1.md.in 66ed46987 Apply suggestions from code review de7cb639c Fix up example description of podman-export/export commands f59a5f135 Fix running container from docker client with rootful in rootless podman. 10d748f58 Introduce Podman machine reset d4b3ab521 Fix up example description of podman-create.1.md.in 717c00569 Fix up example description of podman-diff.1.md.in 4e268c667 Fix up example description of podman-events.1.md 537490cb9 Fix up example description of podman-farm commands aad195ca3 Fix up example description of podman-network commands 777b258a7 Fix up example description of podman-image commands 664d4ed28 Fix up example description of podman-port.1.md.in 1116e68dd Fix up example description of podman-push.1.md.in 79a10419c Fix up example description of podman-unshare.1.md 63d9bf128 Fix up example description of podman-pause.1.md.in 4b6ca1687 Fix up example description of podman-start.1.md.in f5c666d07 Fix up example description of podman-rm.1.md.in 6c8123325 Fix up example description of podman-info.1.md 8cbbd631d Fix up example description of podman-history.1.md 1a06ec802 Fix up example description of podman-healthcheck-run.1.md 10af44854 Fix up example description of podman-exec.1.md.in 7e611f60b Fix up example description of podman-cp.1.md 47d0aa1bc Fix up example description of podman-manifest commands 7ba23cd6f Allow podman pull to specify --retry and --retry-delay f036476cf fix usermode test 24b8d1446 fix(deps): update module github.com/opencontainers/image-spec to v1.1.0 2846027dc machine init: validate machine name and username 8be1c0b04 [CI:DOCS] Update dependency golangci/golangci-lint to v1.56.2 30a18fc02 pkg/machine: make only one AddConnection() call 7f2a6c735 Bump to v5.0.0-dev f620aa0fb Bump to v5.0.0-rc2 d60757cca pkg/machine: cleanup MakeSSHURL e0a766854 Improve cross platform support in QEMU machine sources bd0a9e903 Fix remove docker.sock symlink 1f64ae10f Prune FCOS related code 4fffa78ee Manually discover wsl.exe location 889454104 Turn WSL machine tests back on a9401dead Build tag out QEMU for Darwin c7537d193 man-page xref: make nested-structure warnings fatal d221e0b00 Remove log-level from runSystemCommand since wsl does not support it 9ee17d422 machine/qemu: use extra gvproxy socket 3ca221360 Add a helper for stopping pods and containers in E2E bcec7e627 machine: ocipull do not error if downloaddir exists e5f86f862 More test tweaks to avoid "StopSignal ... 10 seconds" warning 144e420bb Add testcase for WSL dist conflicts d23dd35dc Correct VM existance check on WSL db34827bb Test PR, add a inconsequential period to docs 9abc04232 Fix small bug in ocipull 42a78c714 Add volumes-from support using annotation in kube yaml 068d4e81c Allow CI user to cleanup own files 41c3f9d4b chore(deps): update docker.io/library/golang docker tag to v1.22 3de467d9f machine: Re-enable USBs check for wsl machine set 0e9d86755 machine: `machine set` only when machine's stopped 92d6194f0 Fix freebsd indentation + enable release-testing tasks f9bc9a85b Replace panic with no-op 45b701b12 chore(deps): update dependency setuptools to ~=69.1.0 464638cc8 Enable windows and PM windows testing 001824b9f Windows uses USERPROFILE not HOME 4c0d05718 Readme updates for Podman 87947761e [CI:BUILD] Add VFKit into pkginstaller, remove QEMU 7f2d8ae80 [CI:DOCS] Update dependency golangci/golangci-lint to v1.56.1 66e292ebb Fix build on Main c29fde265 libpod: correctly map UID/GID for existing dirs 2430fc71a Allow podman machine to download from oci registry ad55ba6eb Handle DOCKER_HOST environment for podman-docker package 36853c0d0 Consistant handling DESTDIR variable expansion 5eb801a56 Bump CI VMs to ones with netavark 1.10.3 f7f4d1064 Fix the build on main eb8428df5 podman-image-scp: Load images without the use of a temporary file. f8847ea04 Improve comments on waitOnProcess d3328d4f3 Don't panic on podman4 machine configs 00180bd5b Enforce podman-machine mac CI results 667311c7d Use persist dir for oom file 1f8a69bc9 docs: clarify when a URL is treated as a git repo bb7d8fdc4 Workaround connection hangups in start/stop racing 09b86e26d Improve robustness of pipe checks 487219d80 Complete WSL implementation, refactor a few areas d7cb66492 wsl - wip e74d268bf Minor cleanup from podman 4 2a61998f0 Fail if vm exists in hyperv already 477cb90a3 Update .cirrus.yml 325d7f489 Re-enable mac testing 7ecc41467 Vendor crc CopySparse 69163af2a Remove gitleaks scanning 5b6b68976 Remove disused Containerfile and docs d676c1b1a fix(deps): update module github.com/docker/docker to v25.0.3+incompatible 4413e75f0 [CI:BUILD] rpm: bump podman module version 1ca608ea9 fix "podman run port forward range" flake 41cd90a8e image scp: don't require port for ssh URL dbfa201c9 new testimage and systemd-image a2c086c78 [CI:DOCS] fix userns.pod.md mapping table 3495aae42 docs: resole hierarchical issues with userns parameters 7be6cd4b0 machine: USB passthrough 02eb907db machine: change getDefaultDevices signature dc0d07c71 document new connection/farm storage location ef8e63cb2 update c/common to latest main 10265661e Fix Quadlet Options=key=value documentation/example 9f38b2215 pkg/machine: make it build for freebsd bcd48a6a7 Bump to v5.0.0-dev dc218a3c6 Bump to v5.0.0-rc1 7e73bb341 Add v4.8, v4.9 to release notes 30fb5de71 Restore Cirrus DEST_BRANCH to main 72f1617fa Bump Go module to v5 c023b789f Re-enable passing a logfile to gvproxy 69d54c482 Bump gvisor-tap-vsock from 0.7.2 to 0.7.3 e20b70c2e Upgrade tests: reenable, but revamped d47979761 Quadlet - do not look for line continuation in comment lines 90c938737 Add functionality for `podman machine set --rootful` f23b144c6 Podman Machine AppleHV CI fixes d5eb8f3b7 AppleHV - make gz ops sparse 85d828148 create machine dirs at discovery b1ce6ef9a podman machine 5 - hyperv 6b02c4894 Podman 5 machine refactor - applehv e8501ca99 Implement generic providers 9bb191df5 [CI:MACHINE]Podman5 QEMU refactor b9bcfa474 podman5 machine reconfig 1 c89dd4a92 Use tmpfs mounts when creating a memory-backed emptyDir volume 3cf2f8ccf Handle more states during refresh 77847bd67 docs: make --seccomp=profile.json clearer 6ca6184ed gomod: Update containers/psgo to 1.9.0 a8b2256cc Set interface name to the network_interface name for macvlan and ipvlan networks 6e0decbe0 Send container stats over API on a per-interface basis 9983e8744 Remove leftover autoremove containers during refresh 43a01d7dc Temporarily ignore windows-linting failures defbf4237 Lint before windows-cross build d44bafc3c Reimplement lint with improved compatibility c7910e75e Show network name network events with podman -remote events 46fe7ef3b use pkg/strongunits from c/common 5de4bd5d1 vendor: update c/common + libhvee to latest main a997d7d81 test/e2e: unskip netavark macvlan/ipvlan tests 7d15bc2ef fix userns + restart policy with slirp4netns fcae70220 Reuse timezone code from containers/common 85904e01f Vendor in containers/common 01a8539ef Warn if cgroups-v1 d3281cf88 Use tmpfs mounts when creating a memory-backed emptyDir volume 2eee3cd81 Corrected markdown documentation for `--stars` 35d1f1221 make podman pod inspect output a json array 26cd01ee5 Do not test CNI in CI ee923358c Vendor c/common 249474a84 drop support for "pasta" as a network name a09889910 Use semi-colon as the field separator for internal volumes-from inspect annotation d217de642 [skip-ci] Update github/issue-labeler action to v3.4 9e3d61a9d fix(deps): update module github.com/docker/docker to v25.0.2+incompatible 39f22c382 Include machine-tests in cirrus-cron jobs 7de64b47f Vendor c/storage main 9fb57d346 Cease using deprecated runc userlookup 91b8f208a Bump to runc main 6a727fdbe Fix updated runc dep breaking pod devices cgroup 2818abf84 Update to runc main, removing pin to an older version 0da405453 Verify the empty mounts.conf does not generate warnings. 1ab55defb Test new CI VMs c5c079932 Scan-secrets: Fix PR forcepush detection condition 0a4beea6d Scanning-secrets: Support new-branch/renovate link 0e9b07a02 Secret-scanning: Fix newly-opened PR conditional 3f3d1e4de Temporarily ignore mac-linting failures d9ad7cbc9 Run lint for mac builds 90d6e92f2 fix(deps): update module github.com/opencontainers/runc to v1.1.12 [security] a06685a54 Farm build should read server registries.conf 28856b6c1 Make leak-detection readable by humans b028f6aa7 add new libpod/images/$name/resolve endpoint f3ab6268a fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.21 74454bf59 rework system connection and farm storage a1c47f029 Return nil health when inspecting containers without healthchecks 6eca2f651 [skip-ci] Update dawidd6/action-send-mail action to v3.11.0 76791a21c pkginstaller: bump Qemu version to 8.2.1 d202acd86 Bump containers/common to latest main 174631f72 Convert SpecGen values to be nullable where possible f8e1ea414 Fix SSH Host argument in tag command during scp. 3136f0fca Don't require engine connection for farm 0ec84b8ec Revert "Enable win podman-machine test failure" 39e53e6dc chore: extract duplicate codes 8d14d4155 Run codespell on code d5bed05df docs: fix podman-manifest-rm header 3592b56c3 docs: fix unclosed code block 6678260eb man: Minor wording tweak for host/connection cd5982e98 quadlet: Add tests for templates dc94a10d6 quadlet: Add documentation about template use to manpage 01dccba50 quadlet: When loading dropin files for foo@instance, also load those for foo@. bb6dec46f quadlet: Support [Install] for templated units 7e1942ed4 systemd.parser: Add GetTemplateParts() 2df994ba0 quadlet: Don't put @ in container names for templated units b73eec88d [CI:DOCS] Packit: podman5 downstream for f40+ 7dcbc75aa [CI:DOCS] minor man page cleanup 202cab612 Fix inspect test that rely on digest ffd7a8998 Update module github.com/google/uuid to v1.6.0 848078c93 Fix auto-update digest comparison 93510a299 bindings: suggest using -tags remote to reduce file size f18ebad1e bindings: pods uses entities/types 668d517af bindings: volumes uses entities/types df6cc8550 bindings: secrets uses entities/types aee733c58 bindings: network uses entities/types c736a8e20 bindings: manifests uses entities/types 34cc55741 bindings: play uses entities/types 528414970 bindings: generate uses entities/types 5ddc82f7a bindings: images uses entities/types 08cd7ce41 specgen: use storageTypes instead of storage package 7aede410d bindings: containers/update uses entities/types 40cc962a5 bindings: containers/exec uses directly Docker type 88fb291a3 bindings: containers/create uses entities/types 6c5704a09 bindings: containers/containers uses entities/types 2d8231efe bindings: containers/commit uses directly Docker type 9f0ea0dc8 bindings: containers/checkpoint uses entities/types b304ac1ea bindings: containers/archive uses entities/types 923123420 domain: move system structs to types sub-package 48a99c651 domain: move Event to types sub-package ee61b130a [CI:DOCS] Update farm docs 90867d987 Fix image filters parsing 7c8c94549 Vendor in latest c/common 27e76f3ee Update module github.com/mattn/go-sqlite3 to v1.14.20 505ed030e [CI:BUILD] rpm: use go-rpm-macros on RHEL 10 56cf5b6df Update module github.com/docker/docker to v25.0.1+incompatible 3e6bfb6e9 Update module github.com/docker/docker to v25 269149a9f Kube Play - allow creating image based volumes cf0b436b9 Deprecate BoltDB, preventing creation of new databases. d3a49fded Add information about --latest support on man pages d792cc448 Warn about whitespace in /etc/subuid and /etc/subgid files 5cc83da1c Pass the OCI runtime an empty entrypoint when there is no entrypoint f53cb9c27 chore: remove unused file [NO NEW TESTS NEEDED] 2e38b9816 Restrict building the pkg/fileserver implementation to windows 17613cc96 podman farm is no longer hidden. Enable doc checks. 0e64e107b Fix Mount Unit Option 660778b2e [skip-ci] Update dawidd6/action-send-mail action to v3.10.0 8d733b6d0 Update module github.com/onsi/gomega to v1.31.1 a2cc04b15 Update module github.com/opencontainers/image-spec to v1.1.0-rc6 a0c914c6d [CI:DOCS]Remove final references to varlink 70c3accf7 Update module golang.org/x/tools to v0.17.0 75790b42b Label host volume mounted content in machine as nfs_t 7472bdb16 Ensure podman temp directory is created on Start as well. a5612bc54 Quadlet: ensure all keys are documented 0c3b5e433 quadlet.go: clean up keys 77389bd05 Add missing check for errors returned from SpecGenToOCI to MakeContainer. 6226b5669 Update module github.com/onsi/gomega to v1.31.0 4c583e7a1 Update module golang.org/x/net to v0.20.0 e757f7631 Update module github.com/onsi/ginkgo/v2 to v2.14.0 728e842db Update module github.com/docker/go-connections to v0.5.0 f9a05717a Update module github.com/vbauerster/mpb/v8 to v8.7.2 c566551e9 gvproxy: Update to 0.7.2 release 1964dbd40 Set up podman machine remote user correctly 1c88b1220 rm pod with podman run if ctr creation failed 79fad91db Add a net health recovery service to Qemu machines e66413b51 CI: reenable tests that are working again 3fef531d9 applehv: return socket path from setupAPIForwarding 90f69891d applehv: Remove unneeded cmd.ExtraFiles assignment ab1316551 fix mongo-driver dependency 971f2eb45 [NO NEW TESTS NEEDED] [FreeBSD] Fix crash when running podman inspect dbe0e6789 Man pages: tighter documenting of --format fields d95710a89 farm build: push built images to registry 992e83d20 machine: Enable console autologin by default f374e07fb AppleHV: update LastUp time b94be90a1 Remove Libpod special-init conditions 46cfc9858 Make --gpus work with nvidia gpus 0e09527bd systests: kube with policies test: fix race f6107f631 Assign separate ports for each appleHV machine eeff3d2de Fix machine inspect test config 7bd5dd42c Fix `podman machine set --rootful` for applehv 585fbe373 Run mac jobs on labeled hosts a60fe34fd Fix `podman system reset` with external containers 522934d5c Replace strings.SplitN with strings.Cut 3714ae342 quadlet: fix quoting of example option values in container unit file documentation 4e4c3e3db cmd: support --config option to locate authentication file 83fa4843f Fix podman machine ssh command 780733415 System tests: fixes for RHEL8 gating failures 380fa1c83 Remove redundant code in generateSpec() a8c2b84c2 docs: update mariadb example d7760b23c labeler: Use `machine` label bccfda505 [CI:DOCS]Periodic update to OWNERS file 3b881d4ec feat: disable pid max in the podman machine c90e9dad7 e2e: reenable warning checks on Debian e3f167f77 Add API forwarding support for HyperV a0a541351 consolidate ignition ready socket unit 8341ca0e7 Remove --latest from podman CMD --help output 06064150e machine: use GlobalDataDir helper 8bdf77aa2 Refactor: replace StringInSlice with slices.Contains 25602a03a fix(deps): update module golang.org/x/sys to v0.16.0 3bfdd7915 Fix init teardown on bad ignition path b01a330d3 Use single persistent ssh key for all machines 260f814bd test/system: add test for mounting issue in the init container f0319d5b7 Error messages not being reported unless more then one error present 49e2589a5 fix(deps): update module golang.org/x/sync to v0.6.0 450862054 xref-manpages script: more regression tests e63513542 Vendor latest c/image 98f332d48 Use parser.UnitFile c728eeb39 Create `pkg/machine/ignition` package 560455cbd docs: fix typos 2a2d0b0e1 chore: delete obsolete // +build lines 92f3bacc6 machine/qemu: A few debugging prints 876b2207e ci/labeler: Add area/machine label f5a986f4e Set applehv as default darwin provider 689d97a1d Quadlet - add StopTimeout key for .container file ac0353aec chore: remove unused link 8c546cf7e CI: bump VMs f9de9809e docs/build_osx.md: Describe external gvproxy 5827ecb42 fix(deps): update module github.com/shirou/gopsutil/v3 to v3.23.12 70a53cb76 Quadlet - fix trailing whitespaces handling c315c8e74 Makefile - make sure gitvalidation is installed before calling it 55b08d3ba applehv - fix vm lookup ec5422af5 e2e: Skip journalctl if journald is unavailable 4f94c96b9 remote: fix podman-remote kube play --publish-all 4083ddbb0 Kube Generate - check options in bind-mount-options exist before accessing f10a7bfd4 Add mmap cache option to QEMU mount 2fc862d39 chore(deps): update module github.com/containerd/containerd to v1.7.11 [security] 90b09b586 chore(deps): update module golang.org/x/crypto to v0.17.0 [security] f90b4e79a Tests for xref-helpmsgs-manpages 1322f3193 abi: drop check for IsRootless() 9d0da9d0f Strip key/values of external quotes 4dd58f226 Move golang requirement from 1.18 to 1.20 f169fc76a Allow PublishPorts to be used with [Pod] entry 6a96c8b5f quadlet container support multiple Ulimit options ccc3eb774 Improve compose tests e51bab3c9 Remove duplicated content in docs d76bb978b docs: oci-dir does not support compress as suggested f02fe73c3 Update module github.com/vbauerster/mpb/v8 to v8.7.1 5c4c76b8c Update module github.com/mattn/go-sqlite3 to v1.14.19 db68764d8 Fix Docker API compatibility with network alias (#17167) 7c72d8c2f Fix path to example files 5cc5b4347 Error on HyperV VM start when gvproxy has failed to start 58edd06ff [skip-ci] Update actions/upload-artifact action to v4 d026ccf9a Kube Play - pass arguments to build e4ecd7cca doc cleanup 1c59a9ced CI: safer podman-stop tests 8d94fc156 fix(deps): update module github.com/containers/libhvee to v0.6.0 3a842027a CheckExclusiveArch should use local JSON too c290a561b Update gitleaks baseline w/ harmless findings 446df4379 machine e2e : set default disk size to 11 126670d5d Fix push endpoint stream 232c32bd3 CI: systests: safer isolation in registry & tests f51ff7764 Support podman ps --format '{{ .Label label }}' 36e04599a fix(deps): update module golang.org/x/tools to v0.16.1 5ca255c2c fix(deps): update module github.com/google/uuid to v1.5.0 5c7f74546 Remove deprecated field ContainerState.NetworkStatusOld e5c726daf Make hyperv pass e5a4f00b7 Podman 5 machine config file - Step 1 95eb22c71 Support a machine-test only mode 0f02e43ce cli: podman manifest annotate --annotation use StringArray() d8c3e5b3c cli: podman manifest add --annotation use StringArray() 3e10a6832 cli: podman kube play --configmap use StringArray() 2be4b007b cli: podman kube play --log-opt use StringArray() 48ab4aec3 podman kube play: fix broken annotation parsing e916f49f0 cli: podman kube play --annotation use StringArray() 47b65086e cli: podman image trust set --pubkeysfile use StringArray() cdb178e95 cli: podman push --encryption-key use StringArray() 3e1b9146f cli: podman pull --decryption-key use StringArray() 36e29a843 Fix WSL machine test regressions 6415471dc EMERGENCY: fix broken CI 952c70890 added system test 23f6c4851 Add test for relative idmap mount e7eb97b84 fix checking of relative idmapped mount c823d49fd CI: unskip tests 4590b663a add test for podman exec --env-file 06cee546a cli: podman exec --env-file use StringArray() 7866f6c6e cli: podman run/create --blkio-weight-device use StringArray() 432be1330 cli: podman run/create --device-{read,write}-bps use StringArray() 8de13271c cli: podman run/create --device-{read,write}-iops use StringArray() e763cc62b cli: podman run/create --device use StringArray() 833163ff3 add podman create --label-file test 19571f750 cli: podman run/create --label-file use StringArray() 24d08a94d cli: podman run/create --decryption-key use StringArray() f9b2da3eb [CI:BUILD] override crun-wasm in fcos + podman-next image build 6c2a0196a machine: usb: Fix 'passtrough' typo 201920f6a cli: podman run/create --chrootdirs use StringArray() dbbec9936 cli: podman run/create --log-opt use StringArray() b011aa443 cli: podman run/create --env-file use StringArray() ef10073b5 cli: podman run/create --annotation use StringArray() c5258d463 cli: podman --hooks-dir use StringArray() 12c39ffda cli: podman --module use StringArray() c97560841 cli: add docs for StringArray vs StringSlice options 1ebd507fb Fix regression in e2e machine test suite 95145d957 buildah treadmill: cleaner YAML, uglier script 0d1b90d36 CI: systests: fix flaking --since test 9a963221b [CI:DOCS]use nginx in podman tutorial a1cc99dd4 [CI:DOCS] compat api: fix formatting syntax cac4aa3b4 [skip-ci] Update actions/stale action to v9 19457f382 system service: split out cgroups call into linux specific file 03d411abc libpod: split out cgroups call into linux specific file 32c25c602 pkg/specgen/generate: NOP verifyContainerResources() on freebsd a687c3886 use rootless netns from c/common 3d740674b Improve error handling in win-lib.ps1 d78212a00 Update vendor of containers/storage 98df5b397 Fix user-mode net init flag on first time install 10db6442d [skip-ci] Update actions/setup-go action to v5 8d8fb726f fix broken labeler.yml config 4d2125baf systests: cp: add wait_for_ready 7cc6501cf Add e2e tests for quadlet Entrypoint option 01d397a65 podman: new option --preserve-fd a943be7e8 Kube Play - set ReportWriter when building an image 972ffaca4 Add support for Entrypoint in quadlet 94e67cfc7 fix(deps): update module github.com/containernetworking/plugins to v1.4.0 1f42aff93 systests: debug systemd failures 7f4b0f208 apiv2 tests: fix race f1dc126bf Do not aggregate failing mac test status 2d46d0537 Implement bare-metal Mac M1 podman-machine testing b7a81c1ce Fix command failure not resulting in task failure ca66a90b8 [skip-ci] Update actions/labeler action to v5 b1eccedf5 [CI:DOCS] Update health-start-periods docs bb1307970 fix(deps): update github.com/opencontainers/runtime-spec digest to 0625254 07104fb27 fix podman-systemd.unit.5 Mask/Unmask placement 0a72e3dad fix(deps): update github.com/docker/go-connections digest to fa09c95 7e2a8d58a Quadlet .pod - add support for the Volume Key 212b4c9e9 Quadlet .pod - add support for the Network Key 0d260bdc1 Quadlet - fix pod service file name 04519234e Add support for the userns annotation in kube play f384bdf66 Handle symlinks when checking DB vs runtime configs e14aa09bb Update podman-systemd.unit.5.md 6efba48e2 fix(deps): update github.com/containers/image/v5 digest to 671ab94 4e21ce5ba fix(deps): update module github.com/shirou/gopsutil/v3 to v3.23.11 45e53ed7b libpod: Detect whether we have a private UTS namespace on FreeBSD 00d96c2b9 fix(deps): update github.com/openshift/imagebuilder digest to ef2a5fe b1acb43d7 CI: fix system_test_aarch64 dependencies f9e8585c5 Enable win podman-machine test failure 269f8ff06 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.2 c1eea91a0 fix(deps): update common, image, and storage deps 31df9c237 Move the --farm flag to farm build command fa0aa9113 @@option volume.image: be specific that -v only affects RUN 426db6fcc Accept a config blob alongside the "changes" slice when committing e197cf57d container create: use ParseUserNamespace to parse a user namespace setting f95dd21d5 deferred test failures: handle a corner case 42ea21121 Fix locking error in WSL machine rm -f d5cf46e80 support lookup of intermediate IDs in gidmapping/uidmapping options in userns=auto 5b3d82f9b sqlite: set busy timeout to 100s d4ac2f3dd libpod: Allow using just one jail per container on FreeBSD 55373dcce Vendor c/common 3e7041508 Gating test fixes 86296ff8d pkg/bindings: add new APIVersionError error type a5d11f404 Set `BUILDAH_ISOLATION=chroot` within Podman containers f35d1c1c2 Don't update health check status during initialDelaySeconds 8ee262202 quadlet: Support systemd style dropin files 93bcd2a25 fix podman-remote exec regression with v4.8 cf1ad300b utils: close a couple of ReadClosers 4314b1c34 Fix transferring data using tar 7b4d6a295 [CI:DOCS] Fix markdown bugs a2bf8c6d5 refactor(machine): improve machine marker value 572f38c0d Set correct exitcode in remove events and change ContainerExitCode from int to int ptr d7b970a4c sqlite: fix issue in ValidateDBConfig() e26f677b1 sqlite: fix missing Commit() in RemovePodContainers() 248cbc6f6 docs: drop default for tmpfs-mode 6b2f48129 Quadlet - Add support for .pod units c664cfe88 [systests] podman mount no-dereference: complete rewrite 13e548820 [CI:DOCS] performance: document sometimes slow native overlayfs b39f76474 fix(deps): update module github.com/gorilla/schema to v1.2.1 07a7b3ae5 fix(deps): update module golang.org/x/tools to v0.16.0 c8f262fec Use idtools.SafeChown and SafeLchown everywhere 29d18079c [systests] new defer-assertion-failure f07b15105 fix(deps): update module golang.org/x/net to v0.19.0 8e2d5e191 Fix wsl.conf generation when user-mode-networking is disabled d280e481a test/compose: remove debug leftovers ac3d57016 [CI:BUILD] rpm: remove dnsname 386c8d6bf swagger: document play kube annotations param f6b2a1378 Clean up farm-build miscommit c7f6844c0 fix(deps): update module github.com/vbauerster/mpb/v8 to v8.7.0 41a6b992a system: enhance check for re-exec into rootless userns e82465773 Fix Ulimit syntax. fe65f059a libpod: drop dead code cd21973f4 pkg/util: use code from c/storage 98c525cf9 Remove unnencessary pregenerated doc 3ca8b4013 fix(deps): update module github.com/crc-org/vfkit to v0.5.0 da9349ce4 podman machine image from oci updates 75638a72a If API calls for kube play --replace, then replace pod 414642efd [CI:DOCS] Add podman farm build doc ddd6cdfd7 Ignore SELinux relabel on unsupported file systems e85cedf43 Use configured timeout in list_test.go 478afa728 vendor: update containers/{common,storage,image,buildah} 48cf44f23 machine applehv: create better error on start failure 6cb2f9b12 quadlet: Support `healthy` for `Notify` directives 2b95700bc No longer support deprecated legacy QEMU machine structures e40d70cec new 'no-dereference' mount option be2463330 Bump to v5.0.0-dev e75fbe54e Update dependency setuptools to v69 ae9b63fbf Check for imageID, not imageName ff80e40ad Use NewStoreReference instead of ParseStoreReference e9587f5e3 Don't re-assign imageID c85068220 Remove clearly dead code 87cef3654 Update release notes from v4.7 branch 8b2667ef6 More rootless-tutorial fixes 62060f323 Get masked paths and readonly masked patchs from containers/common 4c249a219 Change default QEMU CPU level to `qemu64` on Windows amd64 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-03-15 17:17:19 +00:00
Bruce Ashfield	1a813b0e6f	netavark: update to 1.10.3 ... Updated via: bitbake -c update_crates netavark Bumping netavark to version v1.10.3-1-gbe7bd48, which comprises the following commits: d9f9fdc v1.10.3 a88dc00 fix netavark update to not start a new aardvark-dns 664637b Release v1.10.2 8e53052 Release notes for v1.10.2 c70dc8e [CI:BUILD] Packit/rpm: fix aardvark-dns handling 8a7422e Do not perform network namespace detection on AV update a78cfa8 Release v1.10.1 187e0a6 Updated release notes for v1.10.1 851ac90 update to nftables release 0.3 from crates.io 1f60bce DISTRO_PACKAGE: fix incorrect vendored tar archive URL 3328784 Bump to 1.11.0-dev 799c1ae Release 1.10.0 2965880 Release notes for 1.10.0 f20eeeb RPM: update .cargo/config before building fddc681 Add support for isolation to the nftables driver 04538cd build(deps): bump h2 from 0.3.22 to 0.3.24 020cdd2 chore(deps): update rust crate chrono to 0.4.32 b953314 fix(deps): update rust crate env_logger to 0.11.0 a6f8855 chore(deps): update dependency containers/automation_images to v20240102 687f07e Bump nftables-rs to latest commit db43e53 Netavark: nftables support c31d678 fix(deps): update rust crate serde_json to 1.0.111 f59c28d feat: added the --firewall-driver option 1f75d87 Document how to generate a code coverage report for netavark 40a6ee0 fix(deps): update rust crate clap to ~4.4.12 9b3a3d0 fix(deps): update rust crate serde_json to 1.0.110 04f1517 fix(deps): update rust-futures monorepo to 0.3.30 059c0cb fix(deps): update rust crate nispor to 1.2.16 5fe12c3 chore(deps): update rust crate tempfile to 3.9.0 a6afa03 Use tonic::transport::Uri instead of HTTP 33d8d04 chore(deps): update dependency containers/automation_images to v20231208 3faf33f fix(deps): update rust crate tokio to 1.35 4759152 dhcp-proxy: return actual error instead of generic one f571e31 dhcp-proxy: skip set gateway if missing 87f6691 bump netlink-packet-route to 0.18.1 63c34a5 chore(deps): update rust crate once_cell to 1.19.0 ff45e22 fix(deps): update rust crate nispor to 1.2.15 c85d844 fix(deps): update rust crate serde to 1.0.193 3bbc9fd fix(deps): update rust crate clap to ~4.4.10 4f27552 aardvark: show error if process is in wrong netns a4e082d aardvark: remove unessesary unlock lockfile calls 4c58983 fix(deps): update rust crate url to 2.5.0 f588f1d Bump working version to v1.10.0-dev Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-03-15 17:17:19 +00:00
Bruce Ashfield	8824967159	nerdctl: update to v2.0.0-beta ... Updated via: oe-go-mod-autogen.py --repo https://github.com/containerd/nerdctl.git --rev v2.0.0-beta.1 One patch refresh, no other modifications. Bumping nerdctl to version v2.0.0-beta.1-10-g0a20db63, which comprises the following commits: 4420aa67 update BuildKit (0.13.0-rc1) 4acb599e CI: test compilation with Go 1.22 6f1c767e build(deps): bump github.com/tidwall/gjson from 1.17.0 to 1.17.1 07dc8a58 build(deps): bump github.com/opencontainers/image-spec 72a9737d platform: support loongarch64 1b05ff3e Remove the support for the old CNI isolation plugin 4c29703b rootless: fix `Not Authorized(uid): org.fedoraproject.FirewallD1.config` 1eada1af build(deps): bump github.com/opencontainers/runtime-spec fdf7968b Fix soci image push with multi-platforms flags 09168445 build(deps): bump golangci/golangci-lint-action from 3.7.1 to 4.0.0 6fd3fb73 build(deps): bump golang.org/x/net from 0.20.0 to 0.21.0 cad6b2af build(deps): bump golangci/golangci-lint-action from 3.7.0 to 3.7.1 679adcf8 build(deps): bump golang.org/x/crypto from 0.18.0 to 0.19.0 c6236eea build(deps): bump tonistiigi/xx from 1.3.0 to 1.4.0 cfc063cc update slirp4netns (1.2.3) 2d59841b build(deps): bump github.com/rootless-containers/rootlesskit/v2 5733be85 update RootlessKit (2.0.1) ae224f40 build(deps): bump github.com/containerd/console from 1.0.3 to 1.0.4 c797578e build(deps): bump github.com/klauspost/compress from 1.17.5 to 1.17.6 6a229537 `containerd-rootless-setuptool.sh uninstall` cleanup all relevant services 9ae613b3 support build attest 741d06e5 Add support to run systemd in containers (with --systemd flag) b452c64b Support --ipc=container:<id> option 3b45cc18 build(deps): bump github.com/containerd/nydus-snapshotter 5df53e5f update BuildKit (0.13.0-beta3) 37168690 build(deps): bump docker/metadata-action from 5.5.0 to 5.5.1 a3e8cb46 build(deps): bump github.com/containerd/containerd from 1.7.12 to 1.7.13 dc7bbed8 update Kubo (0.26.0) ad02e192 update bypass4netns (0.4.0) 02dc9b44 update runc (1.1.12) 3ab02f69 update containerd (1.7.13) 4892364c [Carry 2535] rootless: support detach-netns mode 328497a8 update RootlessKit (2.0.0) 58cc30c7 update BuildKit (0.13.0-beta2) 5e38fa10 containerd-rootless-setuptool.sh: avoid creating buildkitd.toml 76199746 build(deps): bump github.com/containerd/nydus-snapshotter bd6a915c build(deps): bump github.com/containerd/nydus-snapshotter 1050dd65 build(deps): bump github.com/klauspost/compress from 1.17.4 to 1.17.5 8df3f8a9 containerd/containerd/platforms -> containerd/platforms 0ac36b66 Retag images when tag is already present in nerdctl build 2863b6c7 CI: use standard GHA runner for Windows too 3149671e build(deps): bump github.com/opencontainers/image-spec 3a7948b3 CI: use standard GHA runners 7f88313c build(deps): bump actions/cache from 3 to 4 77234f5a update gpu image to 12.3 2410e1f6 go.mod: github.com/rootless-containers/rootlesskit/v2 v2.0.0 d307fda9 build(deps): bump github.com/containerd/containerd from 1.7.11 to 1.7.12 4af27bd1 go.mod: module github.com/containerd/nerdctl/v2 5ee55f28 add allow option in build 410d5915 Document that profiles are supported 05059400 build(deps): bump github.com/rootless-containers/bypass4netns 3b5717be containerd-rootless-setuptool.sh nsenter: inherit RootlessKit env 8e09af1e shfmt containerd-rootless-setuptool.sh a71209f8 fix: return error if volume create failed d0179a63 build(deps): bump golang.org/x/net from 0.19.0 to 0.20.0 aa11ded3 build(deps): bump github.com/docker/go-connections from 0.4.0 to 0.5.0 3fa62388 build(deps): bump docker/metadata-action from 5.4.0 to 5.5.0 ce955db1 build(deps): bump golang.org/x/sync from 0.5.0 to 0.6.0 2053c384 build(deps): bump golang.org/x/term from 0.15.0 to 0.16.0 b0458662 logging: respect ctx 9afd9e3e update runc (v1.1.10) 695f11a2 cniNetworkManager: move Windows-specific variable to `_windows.go` c44427fb nerdctl rm: fix printing `error="<nil>"` on warning df43d623 build(deps): bump go.uber.org/mock from 0.3.0 to 0.4.0 f60bbc65 build(deps): bump github.com/containerd/cgroups/v3 from 3.0.2 to 3.0.3 f59c2bed Add docs for trouble shooting nvidia gpu operator 970fed9f Remove "soci image rpull" from testing suite 843d8600 fix typo in filename e4bf8b99 Fix #2199 to allow users to bind a named pipe on Windows. 392daca1 go.mod: clean up c2d71273 fix groupadd in compose ea3a4e02 build(deps): bump github.com/awslabs/soci-snapshotter ffd76b5b build(deps): bump golang.org/x/crypto from 0.16.0 to 0.17.0 ef00a6d6 build(deps): bump docker/metadata-action from 5.3.0 to 5.4.0 255716ea docs: Fix typo in command-reference.md b6436017 fix etchosts in host network 990d7eca implement persistent logging for contaiers running in foreground ae004af5 fix deadlinks in the notation doc e538124a build(deps): bump github.com/pelletier/go-toml/v2 from 2.1.0 to 2.1.1 24aa6e27 update BuildKit (0.12.4) de985457 update containerd (1.7.11) 139022f8 build(deps): bump github.com/containerd/containerd from 1.7.10 to 1.7.11 8567678e Dedup mounts for /etc/hosts /etc/resolv.conf a56dcfac build(deps): bump actions/setup-go from 4 to 5 a4c33929 build(deps): bump github.com/containerd/nydus-snapshotter 06628f63 nerdctl run: reset the default value of limits. f6004169 build(deps): bump docker/metadata-action from 5.2.0 to 5.3.0 f2030d29 update CNI plugins (1.4.0) 722040c4 build(deps): bump github.com/containernetworking/plugins f709735a build(deps): bump github.com/klauspost/compress from 1.17.3 to 1.17.4 198797f2 build(deps): bump docker/metadata-action from 5.0.0 to 5.2.0 0e73e3ed update containerd (1.7.10) 21dc100a fix typo ed633b3b build(deps): bump github.com/containerd/containerd from 1.7.9 to 1.7.10 71bf53b3 update golangci-lint (1.55.2) a8aaac29 build(deps): bump golang.org/x/net from 0.18.0 to 0.19.0 d6c7f0f3 build(deps): bump golang.org/x/crypto from 0.15.0 to 0.16.0 aeeb338b update Nydus (2.2.4) e0808016 update Kubo (0.24.0) ec728349 update containerd (1.7.9) 6e5c7f76 build(deps): bump github.com/containerd/accelerated-container-image 2d508151 Fix nerdctl system info : sort problem. afe990db remove incompatible in TestComposeExecTTY 8e9ca2b1 build(deps): bump github.com/go-jose/go-jose/v3 from 3.0.0 to 3.0.1 30eaca09 build(deps): bump github.com/compose-spec/compose-go 76c57d20 fix: typo 51d09871 build(deps): bump github.com/klauspost/compress from 1.17.2 to 1.17.3 9b62e889 Add SOCI index digest flag d7676628 docs: read-only (RRO) bind-mount have been support by docker 77d1fd64 build(deps): bump github.com/containerd/containerd from 1.7.8 to 1.7.9 ca8c1180 build(deps): bump github.com/compose-spec/compose-go c6a4bfeb build(deps): bump docker/build-push-action from 5.0.0 to 5.1.0 0d934074 Deflake TestContainerListWithFilter 33350146 build(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.0 411f9daf build(deps): bump github.com/fatih/color from 1.15.0 to 1.16.0 a7cdd348 build(deps): bump golang.org/x/sync from 0.4.0 to 0.5.0 651cc8cb build(deps): bump golang.org/x/net from 0.17.0 to 0.18.0 6c560bcf [build][iidfile] Setthe same permissions as docker d08f4c47 build(deps): bump golang.org/x/text from 0.13.0 to 0.14.0 d9d684bf chore(test): remove some incompatible in compose test a78b50ef Add diff command to docs & fix usage message 3d1a5f11 Use prepared Stdout d03a5993 Fix wrong comment of completion 00c0d3b7 Fix missing error handling cc52ea45 Support diff command's autocompletion da85b403 Remove diff test from windows 2fcd3c4c Add comment to diff test d96ad3b4 Add `diff` command 0008cd6c build(deps): bump github.com/Microsoft/hcsshim from 0.11.2 to 0.11.4 a9e5ea43 update containerd-fuse-overlayfs (1.0.8) ae12819e Fix unstable sort of container list in compose 0e643d2b update imgcrypt (1.1.9) 2c57b5ca update BuildKit (0.12.3) 9c1ee066 update runc (1.1.10) 2c3cb4a4 update containerd (1.7.8) 2af4cef9 nerdctl ps: implement `--format {{.Label "foo"}}` 3dd95cd4 Dockerfile: stargz-snapshotter v0.15.1 b5da5ea3 fix add-host overwritten 9143054e build(deps): bump github.com/containerd/stargz-snapshotter/ipfs 147cbbef build(deps): bump github.com/containerd/imgcrypt from 1.1.8 to 1.1.9 e6e24c21 build(deps): bump github.com/containerd/stargz-snapshotter 1138bfbe nerdctl-full: compile ipfs (Kubo) as a static binary ac0ceb5a nerdctl-full: compile containerd as static binaries a6a2d917 Support IPv6 for nerdctl network 55987ae9 Add support to CernVM-FS Snapshotter fff98e35 build(deps): bump github.com/docker/cli 792a0cb1 support running container with network id 63b8df5e build(deps): bump github.com/containerd/containerd from 1.7.7 to 1.7.8 59640025 build(deps): bump github.com/docker/docker 161bf205 compose_config_test: workaround for Docker Compose v2.23.0 0b977127 Vagrantfile.freebsd: pin generic/freebsd13 to version 4.3.2 ae17b486 build(deps): bump google.golang.org/grpc from 1.56.2 to 1.56.3 caea0f91 fix ps format names 35966845 support ip-masq option 5d18f61d build(deps): bump github.com/klauspost/compress from 1.17.1 to 1.17.2 1c41c10f Replace logrus.SetOutput() with log.L.Logger.SetOutput() 10854249 docs: minor soci push fix a97162ed build(deps): bump github.com/containerd/nydus-snapshotter 8a5177c7 build(deps): bump github.com/containerd/continuity from 0.4.2 to 0.4.3 0af5badb build(deps): bump tonistiigi/xx from 1.2.1 to 1.3.0 f51e06d2 build(deps): bump github.com/compose-spec/compose-go 35a7920a build(deps): bump github.com/Microsoft/hcsshim from 0.11.1 to 0.11.2 8c2610a1 build(deps): bump github.com/mattn/go-isatty from 0.0.19 to 0.0.20 6c8ea8bc build(deps): bump actions/checkout from 4.1.0 to 4.1.1 41f2647a build(deps): bump github.com/klauspost/compress from 1.17.0 to 1.17.1 63d446f1 Use https://github.com/containerd/log for logging 04a35f82 build(deps): bump github.com/containerd/accelerated-container-image bc62b220 fix: typo 5d4f0325 nerdctl compose: fix --env-file 5a874813 build(deps): bump github.com/containerd/nydus-snapshotter ff0fa841 chore: unnecessary code a2cfe916 build(deps): bump golang.org/x/net from 0.16.0 to 0.17.0 3b09b4cb fix: call client close 3b6cf701 go.mod: github.com/containerd/containerd v1.7.7 b6d76eae dockerconfigresolver: nullify DefaultTLS when DefaultScheme == "http" e590756c update gotestsum (1.10.0) 98d5724e update Kubo (0.23.0) 02a59fc5 update containerd-fuse-overlayfs (1.0.7) 869dec83 update slirp4netns (1.2.2) ea86ea87 update containerd (1.7.7) abec5ef0 containerd/containerd/log -> containerd/log 93cb4802 chore: Comment should with an optional leading article d5dd50ce build(deps): bump golang.org/x/net from 0.15.0 to 0.16.0 3006f23e release.yml: migrate from `hub` to `gh` 6664661c build(deps): bump golang.org/x/crypto from 0.13.0 to 0.14.0 11a43ac4 build(deps): bump golang.org/x/sync from 0.3.0 to 0.4.0 980019a2 build(deps): bump golang.org/x/term from 0.12.0 to 0.13.0 fdf4b2c0 build(deps): bump golang.org/x/sys from 0.12.0 to 0.13.0 34f73335 build(deps): bump github.com/containerd/nydus-snapshotter c1fd6782 Fix port allocate iptables regex 6b5c43e2 CNI: prioritize `/opt/cni/bin` over `/usr/lib/cni` e230c3cf build(deps): bump github.com/containerd/nydus-snapshotter 88188be6 docs: minor fixes to soci documentation 72665a07 update toml to v2 8ce38135 fix: client close connection 004a05a8 Support zstd (non-chunked) conversion 7291147c build(deps): bump github.com/tidwall/gjson from 1.16.0 to 1.17.0 3b644b19 build(deps): bump actions/checkout from 4.0.0 to 4.1.0 a9fb4c56 chore: Comment should with an optional leading article 4b5129b5 build(deps): bump github.com/Microsoft/hcsshim from 0.11.0 to 0.11.1 1b5a9867 add missing flags for compose ps 20f929d1 add featrue network filter c407ceb5 build(deps): bump github.com/compose-spec/compose-go 357113b4 nerdctl version: skip inspecting rootless daemon if the daemon is not running 42cfd144 docs: add SOCI snapshotter guideline in README.md 65334cc7 build(deps): bump github.com/klauspost/compress from 1.16.7 to 1.17.0 98e87997 build(deps): bump gotest.tools/v3 from 3.5.0 to 3.5.1 6db2c459 update containerd (1.7.6) 4c82cde7 feat: support push with soci dd03ebea nerdctl compose cp: support rootless 69a1833e compose: silence "build.config should be relative path" warning 1605587b Implement `nerdctl compose exec -T` a08e668f docs: fix docs for supported quiet flag of push command 76dd7065 build(deps): bump github.com/opencontainers/image-spec 78c855e0 add feature nerdctl compose cp ce611af1 build(deps): bump github.com/containerd/nydus-snapshotter 9d4e5d68 seccomp: rename "default" to "builtin" to follow Docker 23 be2acea7 update golangci-lint (1.54.2) ba3c6b91 update soci-snapshotter (0.4.0) b5b1f2a1 update Nydus (2.2.3) c5794dd6 update Kubo (0.22.0) ee1ac8f0 update fuse-overlayfs (1.13) bdb2c006 update slirp4netns (1.2.1) 70b1ba31 update RootlessKit (1.1.1) 822f1154 update imgcrypt (1.1.8) bcface07 update BuildKit (0.12.2) e4a2ceb7 update containerd (1.7.6) 1e0b0bbf image: dedup same platform entry 6d77b40b build(deps): bump github.com/containerd/containerd from 1.7.5 to 1.7.6 c373e1bc build(deps): bump docker/login-action from 2.2.0 to 3.0.0 81f4dba5 build(deps): bump docker/setup-qemu-action from 2 to 3 765711c4 build(deps): bump docker/metadata-action from 4.6.0 to 5.0.0 ebede8d0 build(deps): bump docker/setup-buildx-action from 2 to 3 03cb689c build(deps): bump docker/build-push-action from 4.2.1 to 5.0.0 68b58d8a build(deps): bump github.com/compose-spec/compose-go 248b2b3a remove useless option from containerd-rootless-setuptool fe87f8b7 build(deps): bump docker/build-push-action from 4.1.1 to 4.2.1 bc7edb76 MAINTAINERS: add Kay Yan (yankay) as a REVIEWER a976067c fix bash completion of volume rm 2cbb162b build(deps): bump github.com/cyphar/filepath-securejoin e1bad09d adjust writers fmt a80e0eb1 fix container_create_windows_test b598b583 add missing zero-length list check cdc917eb build(deps): bump github.com/docker/cli 84309f24 build(deps): bump github.com/docker/docker 1bb407c0 build(deps): bump golang.org/x/net from 0.14.0 to 0.15.0 cf6ba305 build(deps): bump golang.org/x/term from 0.11.0 to 0.12.0 c565933b build(deps): bump golang.org/x/text from 0.12.0 to 0.13.0 c2b9f877 build(deps): bump golang.org/x/sys from 0.11.0 to 0.12.0 f7752221 build(deps): bump actions/checkout from 3.6.0 to 4.0.0 2739c8fc fix nerdctl run -v when host folder does not exist for bind mounts 1352ac0d build(deps): bump github.com/awslabs/soci-snapshotter 6e542c3a Makefile: install docs da05f926 Makefile: fix overriding GO command fa9e4edb Makefile: add GO_BUILD_FLAGS variable 4dbe249e Makefile: derive BINDIR from PREFIX d30f0788 fix: grammatical errors 79a15782 fix: succeeded typo c6dd2f5f build(deps): bump github.com/containerd/containerd from 1.7.3 to 1.7.5 9a41384b build(deps): bump actions/checkout from 3.5.3 to 3.6.0 a0aac07a Support copying out of volumes in stopped containers 31d5d4ad Fix typo 4dcef6e0 pkg/version: fulfill fields from `debug/buildinfo` 1e5baaaf Fix usage of `errors.Join` 91295033 build(deps): bump github.com/compose-spec/compose-go 6ed3118e build(deps): bump github.com/containerd/imgcrypt from 1.1.7 to 1.1.8 ccd5be5d build(deps): bump golangci/golangci-lint-action from 3.6.0 to 3.7.0 0844a51e support test integration docker 23 compatibility 42c312a8 support volume create anonymous 89bb5bc3 update runc (1.1.9) 5130ccbf Remove dependency on github.com/hashicorp/go-multierror b98ce6a6 build(deps): bump github.com/compose-spec/compose-go 3bc8f05b build(deps): bump github.com/tidwall/gjson from 1.15.0 to 1.16.0 56b0a7cb Update to Go 1.21 in CI ac0146f9 build(deps): bump github.com/fahedouch/go-logrotate from 0.1.3 to 0.2.0 424bf4ed FreeBSD: Linux Container Support and BuildKit Integration 0d631726 build(deps): bump golang.org/x/net from 0.13.0 to 0.14.0 569fe4e3 CI: Windows: enable Hyper-V containers 3df165d0 fix attach help is messed up dd60cfe6 build(deps): bump golang.org/x/crypto from 0.11.0 to 0.12.0 2888c388 CI: move Windows tests to GHA 855da424 CI: move FreeBSD tests to GHA 65934e92 test-integration-docker-compatibility: install Docker 20.10 cf7b7428 build(deps): bump github.com/coreos/go-iptables from 0.6.0 to 0.7.0 b8a8100e .cirrus.yml: fix FreeBSD CI failure be2ba3ef build(deps): bump golang.org/x/net from 0.12.0 to 0.13.0 f0140a5c feat: add 'nerdctl container attach' 35296268 Bump containerd to 1.7.3 7f5bca18 Remove special case for Windows when mounting view f57cb241 Add lease to prevent containerd GC Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-03-15 17:17:19 +00:00
Bruce Ashfield	5dfa9cf125	k3s: update to v1.28.7 ... Generated with: ./scripts/oe-go-mod-autogen.py --repo https://github.com/rancher/k3s.git --rev v1.28.7+k3s1 plus one manual modification to relocation.inc: - sigs.k8s.io/kustomize/kustomize/v5:sigs.k8s.io/kustomize/kustomize/v5:force + sigs.k8s.io/kustomize/kustomize/v5:sigs.k8s.io/kustomize/kustomize/v5/kustomize:force Bumping k3s to version v1.28.7+k3s1, which comprises the following commits: 051b14b248 Fix netpol startup when flannel is disabled 4c1b91e3f9 Use 3/2/1 cluster for split role test 16ad3bc39c Change default number of etcd nodes in E2E splitserver test 9c0e5a5ff8 Rename AgentReady to ContainerRuntimeReady for better clarity 80baec697f Restore original order of agent startup functions f19db855bf remove e2e logs drone step (#9516) 25e12bc10c [Release-1.28] Fix drone publish for arm (#9508) 9f78e474d7 Update Kubernetes to v1.28.7 (#9492) 1ca64a81be [Release-1.28] Support PR testing installs (#9469) 45860105bb [Release-1.28] Test_UnitApplyContainerdQoSClassConfigFileIfPresent (#9440) 78543f4850 [Release-1.28] Enable longer http timeout requests (#9444) 3d0674ad1c Bump kine and set NotifyInterval to what the apiserver expects a3770d21e2 Expose rootless containerd socket directories for external access 0259b8e535 Expose rootless state dir under ~/.rancher/k3s/rootless 865b454a05 Don't verify the node password if the local host is not running an agent 493ebb9517 Fix ipv6 endpoint address selection for on-demand snapshots cd7c557754 Fix issue with coredns node hosts controller 3d46c7da70 Bump CNI plugins to v1.4.0 b620348998 Add check for etcd-snapshot-dir and fix panic in Walk 6b2c1ecb0f Retry startup snapshot reconcile c2c9a265bf Fix excessive retry on snapshot reconcile dda9780f23 Update Kube-router to v2.0.1 a922a0e340 allow executors to define containerd and docker behavior 034ee89344 Update flannel to v0.24.0 and remove multiclustercidr flag (#9075) 6ff57ab749 Bump flannel version 25c7208b7e Changed how lastHeartBeatTime works in the etcd condition f3b4effb32 Runtimes refactor using exec.LookPath 5eb278b838 [Release-1.28] Auto Dependancy Bump (#9419) 190864259e Consistently handle component exit on shutdown 5857584463 Bump cri-dockerd 35ef1cec92 Bump Local Path Provisioner version (#8953) (#9426) c9f49a3b06 Bump helm-controller to fix issue with ChartContent 2f9788ab55 Bump runc and helm-controller versions 14fdacb85b gofmt config_test.go aebdccfae5 Fix issues with certs.d template generation 39a0001575 Use `ipFamilyPolicy: RequireDualStack` for dual-stack kube-dns (#8984) c236c9ff77 Update to v1.28.6 (#9260) 6224ea62af Error getting node in setEtcdStatusCondition 470bcd1bff Move proxy dialer out of init() and fix crash 04ce0ac0a9 Rebase & Squash (#9070) 4724315b8c Pin opa version for missing dependency chain (#9216) 2858f89a5b Bump quic-go for CVE-2023-49295 b04e18c4a0 Enable network policy controller metrics bda4b73493 Add e2e test for embedded registry mirror f3c6250b28 Add embedded registry implementation ef4e7ae143 Add server CLI flag and config fields for embedded registry ece564ec93 Add ADR for embedded registry ea66fe65b4 Propagate errors up from config.Get a62ee4fd0d Move registries.yaml load into agent config ace1714e0c Pin images instead of locking layers with lease 3b863906e0 Fix OS PRETTY_NAME on tagged releases ee85990a83 Add runtime checking of golang version 3be858a878 Add more paths to crun runtime detection (#9086) fa798ba272 Add support for containerd cri registry config_path f95ab7aaf9 Fix nil map in full snapshot configmap reconcile fe19faaf9a Handle logging flags when parsing kube-proxy args fc3136f54f Fix the OTHER log message that prints the wrong variable 9d5950741e Dockerfile.dapper: set $HOME properly 3248fd05c7 Add ServiceLB support for PodHostIPs FeatureGate a503d13591 Remove GA feature-gates (#8970) 53c6e05ef5 Handle etcd status condition when cluster reset and disable etcd 3d08cfd0fe Wait for taint to be gone in the node before starting the netpol controller 90367d80b0 Add a retry around updating a secrets-encrypt node annotations (#9125) 5b2d1271a6 Only publish to code_cov on merged E2E builds (#9083) 19b361f30b Update to v1.28.5-k3s1 (#9081) 71a3c35fb7 Bump containerd to v1.7.11 08509a2a90 Allow setting default-runtime on servers b9c288f702 Bump containerd/runc to v1.7.10-k3s1/v1.1.10 03532f7c0b Added runtime classes for crun/wasm/nvidia 9c6ba42ca0 Nov 2023 stable channel update (#9022) 79438cecaa Modify CONTRIBUTING.md guide d34550fb2f Fix overlapping address range 6ba6c1b65f remove s390x from manifest (#8998) 022cf6d51f remove s390x steps temporarily since runners are disabled 3f23723035 Update to v1.28.4 (#8920) 6d3a92a658 Print key instead of file path in snapshot metadata log message b23e70d519 Don't apply s3 retention if S3 client failed to initialize a92c4a0f17 Don't request metadata when listing objects 96ebb96317 Fix flakey dynamic-cert.json in cert rotation e2e test 611ac0894c Revert e2e pipeline depends_on change 3a6284e2b9 Bump dynamiclistener to fix secret sync race 1e0a7044cf Reorder snapshot configmap reconcile to reduce log spew during initial startup e53c189587 Handle nil pointer when runtime core is not ready in etcd 6c544a4679 Add jitter to client config retry fa4c180637 Update install.sh sha256sum (#8885) da0593bcf9 More improves for K3s patch release docs (#8800) abc2efdd57 Disable helm CRD installation for disable-helm-controller (#8702) 07ee854914 Tweaked order of ingress IPs in ServiceLB (#8711) 7ecd5874d2 Skip initial datastore reconcile during cluster-reset 2088218c5f Fix issue with snapshot metadata configmap fd8db56d5a Fix wrong warning from restorecon in install script (#8871) 78ea593780 General updates to README (#8786) 19fd7e38f6 enh: Force umount for NFS mount (like with longhorn) b47cbbfd42 add agent flag disable-apiserver-lb (#8717) 30c8ad926d QoS-class resource configuration 32a1efa408 Bump kine to fix multiple issues a26441613b add: timezone info in image 0011eb5ead optimize: Simplify and clean up Dockerfile (#8244) 8f7a8b23b7 Improve dualStack log f5920d7864 Add warning for multiclustercidr flag (#8758) ba5fcf13fc Wasm shims and runtimes detection 875a9d19c6 Added ADR for etcd status c5cd7b3d65 Added etcd status condition 022c49242d update channels latest to v1.27.7+k3s2 (#8799) bbafb86e91 Don't use iptables-save/iptables-restore if it will corrupt rules 9e13aad4a8 Update traefik to fix registry value (#8792) 1ae053d944 Upgrade traefik chart to v25.0.0 (#8771) f575a05be2 fix: Access outer scope .SystemdCgroup (#8761) c7c339f0b7 chore: Bump Trivy version (#8739) 1e99a46256 chore: Update sonobuoy image versions (#8710) 9377accd9e update stable to v1.27.7+k3s1 (#8753) 112e1339b7 Restore selinux context systemd unit file (#8593) 49411e7084 Don't try to read token hash and cluster id during cluster-reset 6aef26e94b Update to v1.28.3 (#8682) 5b6b9685e9 Manually requeue configmap reconcile when no nodes have reconciled snapshots 3db1d33282 Re-enable etcd endpoint auto-sync b8dc95539b Fix CloudDualStackNodeIPs feature-gate inconsistency 0c9bf36fe0 [K3s][Windows Port] Build script, multi-call binary, and Flannel (#7259) aaf8409096 Use version.Program not K3s in log (#8653) 9597ea1183 Start etcd client before ensuring self removal 2291d6d079 Add etcd-only/control-plane-only server test 7bb4a826af Update kube-router package in build script 3abc8b82ed Bump traefik, golang.org/x/net, google.golang.org/grpc 1ffb4603cd Use IPv6 in case is the first configured IP with dualstack 3d25e9f66c Switch build target from main.go to a package. (#8342) 7c5b69ca1d Fix etcd snapshot integration tests d885162967 Add server token hash to CR and S3 550ab36ab7 Switch to managing ETCDSnapshotFile resources 5cd4f69bfa Move snapshot delete into local/s3 functions a15b804e00 Sort snapshots by time and key in tabwriter output 7464007037 Store extra metadata and cluster ID for snapshots 80f909d0ca Move s3 snapshot list functionality to s3.go 8d47645312 Consistently set snapshotFile timestamp f1afe153a3 Tidy s3 upload functions 2b0e2e8ada Elide old snapshot data when apiserver rejects configmap with ErrRequestEntityTooLarge 676b00aa0e Move etcd snapshot code into separate file 500744bb94 Add new CRD for etcd snapshots 64107b54e4 Minor updates as per design review discussion 22065affa2 Add ADR for etcd snapshot CRD migration 9bb1ce1253 Bump busybox to v1.36.1 5fe4f6709a Bump containerd to v1.7.7-k3s1 7d38b4a3db E2E Domain Drone Cleanup (#8579) dface01de8 Server Token Rotation (#8265) ced25af5b1 Fixed tailscale node IP dualstack mode in case of IPv4 only node ba750e28b7 [v1.28] System agent push tags fix (#8568) e33359d375 Update install.sh.sha256sum a6acdd0d75 Fix slemicro check for selinux (#8526) e82b37640a Network defaults are duplicated, remove one d4a487d83f Fix spellcheck problem (boostrap ==> bootstrap) f2c7117374 Take IPFamily precedence based on order 0b23a478cf ipFamilyPolicy:PreferDualStack for coredns and metrics-server 021c5b291b Improve release docs - updated (#8414) 0e5c760625 Pass SystemdCgroup setting through to nvidia runtime options 1e38b5d904 Don't ignore assets in home dir if system assets exist fe18b1fce9 Add --image-service-endpoint flag (#8279) 79b44cee29 Create and validate install.sh signatures (#8312) ad206310d1 Update kube-router b6ab24c4fd Added error when cluster reset while using server flag b010c941cf Fix .github regex to skip drone runs on gh action bumps (#8433) d349c9db6c Added cluster reset from non bootstrap nodes on snapshot restore e2e test d0ab4ef26b Added advertise address integration test 172a7f1d1a Fix gofmt error 8705a88bf4 Clear remove annotations on cluster reset; refuse to delete last member from cluster 002e6c43ee Reorganize Driver interface and etcd driver to avoid passing context and config into most calls 890645924f Don't export functions not needed outside the etcd package a3c52d60a5 Skip creating CRDs and setting up event recorder for CLI controller context 391e61bd72 Use admin kubeconfig instead of supervisor for etcd snapshot CLI bd9dad87d5 Typo fix 5c5d957e73 Set server-token adr to accepted 6398c38690 Server token rotation ADR 8c73fd670b Disable HTTP on main etcd client port 12459fca97 Add extraArgs to tailscale 8c197bdce4 Include the interface name in the error message 56abe7055f add link to drone in documentation (#8295) e1706875f4 Update channel latest to v1.27.6+k3s1 (#8397) 66cb1064d1 Add context to flannel errors d3f7632463 Fix error reporting Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-03-15 17:17:19 +00:00
Bruce Ashfield	13c66b0983	cri-tools: update to v1.29.0 ... Bumping cri-tools to version v1.26.0-489-g17b4dd65, which comprises the following commits: 949545e1 Readd the logPath to the list 5afb4c73 Matching kubelet's containerLogManager.rotateLog() glob pattern 09b9303e Applying comment 64e373b2 Changing option to keep-logs and inverting default 67679ee3 1197: adding rm --dl (--deletelog) option edccf499 Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc dee3de0a Bump go.opentelemetry.io/otel/sdk from 1.23.1 to 1.24.0 af4707c2 Don't remove pinned images on image prune fd867e1c A bunch of changes: * handle regexp error * better usage info * better documentation 98843b15 Implemented the `--filter` flag for `images` command. 196f9421 Update Kubernetes to v1.30.0-alpha.2 376d9251 Don't skip windows tests 2529cea9 Don't fail-fast containerd test matrix 58cfa5b3 Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc 3afa43ab Bump golang.org/x/net from 0.20.0 to 0.21.0 f6e57a25 Add support for OTEL tracing 9d1a1a1d Bump golang.org/x/term from 0.16.0 to 0.17.0 e9842e43 Bump golang.org/x/sys from 0.16.0 to 0.17.0 325307a6 Bump github.com/docker/docker 16c59bdc Bump github.com/docker/docker 32452408 Bump github.com/opencontainers/runc from 1.1.11 to 1.1.12 971120b9 Replace dockershim with containerd c4276c46 Bump github.com/google/uuid from 1.5.0 to 1.6.0 44e8b572 Bump github.com/onsi/gomega from 1.30.0 to 1.31.1 4c9f5e69 Bump github.com/docker/docker 0d805e78 Add corresponding man page 8e04084e docs: state that crictl is GA ade93e9f Bump actions/cache from 3 to 4 8badaef0 Bump github.com/onsi/ginkgo/v2 from 2.14.0 to 2.15.0 1f0b5766 Bump golang.org/x/net from 0.19.0 to 0.20.0 4cf8a2d2 Update Snyk configuration file to exclude vendor directory with a prefix 2522d997 Bump github.com/onsi/ginkgo/v2 from 2.13.2 to 2.14.0 f43276b7 Bump github.com/urfave/cli/v2 from 2.26.0 to 2.27.1 7f90228b Bump golang.org/x/term from 0.15.0 to 0.16.0 8010f920 Bump github.com/opencontainers/runc from 1.1.10 to 1.1.11 a7b83b1c Provide precompiled manpage version 43f44445 Bump actions/upload-artifact from 3 to 4 746fa3dc Update vendored Kubernetes to v1.29.0 51e7735f Add a .snyk file to configure the Snyk security scanner ddb95e1f Bump github.com/google/uuid from 1.4.0 to 1.5.0 b0129e72 Vendor Kubernetes v1.29.0-rc.2 87e7961e Bump google-github-actions/setup-gcloud from 1 to 2 ed48a82e more detailed output for split filesystem b12bab01 Drop support for `linux/arm` platform 7e24e264 Bump actions/setup-go from 4 to 5 34721f47 Add darwin/arm64 to release binaries 8643906d add support container runtime use systemd cgroups c5e443ae adding imagefsinfo endpoint for both container and image filesystems 310528b8 Bump github.com/urfave/cli/v2 from 2.25.7 to 2.26.0 83fc34e9 Update golangci-lint to v1.55.2 f409932e Update vendored Kubernetes to v1.29.0-rc.1 58d450ce Bump github.com/onsi/ginkgo/v2 from 2.13.1 to 2.13.2 31cda1d3 Bump golang.org/x/net from 0.18.0 to 0.19.0 6245bad2 Bump golang.org/x/term from 0.14.0 to 0.15.0 950fb1b6 add cases.NoLower to cases.Title function c98c5ba4 add unit tests CI for crictl e992c1d4 add container_test.go 8cf5fc4c ci: Switch to ubuntu 22.04 and go 1.21 01dc72dd Bump github.com/onsi/ginkgo/v2 from 2.13.0 to 2.13.1 16fb7a3f Bump golang.org/x/net from 0.17.0 to 0.18.0 a6344e02 Bump golang.org/x/term from 0.13.0 to 0.14.0 135c8ad0 Bump github.com/onsi/gomega from 1.29.0 to 1.30.0 5933733c Bump golang.org/x/sys from 0.13.0 to 0.14.0 5d34c252 Bump golang.org/x/text from 0.13.0 to 0.14.0 f3aaa5c0 Update to Ubuntu 22.04 445aa46f Bump github.com/opencontainers/runc from 1.1.9 to 1.1.10 b45f7c09 Bump github.com/google/uuid from 1.3.1 to 1.4.0 320ad0eb Bump github.com/docker/docker 9a3c60e9 Bump github.com/onsi/gomega from 1.28.1 to 1.29.0 28556ddd Bump sigs.k8s.io/yaml from 1.3.0 to 1.4.0 935d5c3e Fix CRI-O get script location 63ff0e12 Bump github.com/onsi/gomega from 1.28.0 to 1.28.1 f570bc09 Bump golang.org/x/net from 0.16.0 to 0.17.0 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-03-15 17:17:19 +00:00
Bruce Ashfield	29ec8e5cea	docker-compose: update to v2.24.6 ... Bumping compose to version v2.21.0-154-gce1ddb6c, which comprises the following commits: c665c53c bump buildx to v0.12.0 and adapt code to changes a39cf75e build(deps): bump github.com/compose-spec/compose-go 46ba9c99 build(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.0 5c5d30c6 build(deps): bump github.com/docker/cli 36fa8d4e build(deps): bump github.com/docker/docker 2384635e build(deps): bump github.com/moby/buildkit from 0.12.2 to 0.12.3 2ba5e4c1 in watch mode force pull policy to build for services with both build and develop attributes This default behaviour will force a rebuild of the service images at watch process startup and be sure containers will be in sync with the local source code b1a26dac Assume /src/pkg/compose/testdata absolute workingdir to make tests reproducible 5e77ae92 avoir use of []types.ServiceConfig f5572201 identify services to build and don't display 'building' if none 8e1b3236 fix --remove-orphans not to consider disabled services as orphaned 7cb1f8ba introduce RuntimeVersion for code to check container runtime supports required features cb01186c push also consider build.tags 9c4efbdd Strip project prefix from docker-compose up output 8ea7c9e0 Make it context aware and add test skipping options c1694360 render quiet after filtering applied 254a94b0 bump golang to version 1.21.4 cf608fa9 bump compose-go to v1.20.1 426377a4 reject compose file using `secrets|configs.driver or template_driver` 493f6c80 skips flaky e2e tests on watch and attach 646a8fc0 fix docker/compose#11170 add newline in cmd/compose/build.go fmt.Fprint 2945532f fix --pull documentation e5cd265a improve watch configuration logging Add action associated to each managed path d646d757 lint 71237ef6 do not resolve cache dir until remote resource is in use 0d905a89 add a copyright notice with original author b847c7f5 implement runtime file selection 5e3d8f67 re-implement cache folder detection 67279088 introduce --resolve-image-digests for publish to seal service images by digest 4cd61957 fix build 0d4cbbdb fix 9631a49d ENGDOCS-1764 328ca3f2 add docs upstream validation workflow e1bbfc63 build(deps): bump go.uber.org/goleak from 1.2.1 to 1.3.0 616bba0a linter errors fixed ee6e3c2a NetworkList to NetworkInspect for ID search c7e31a3c Squashing feature branch commits in order to add signoff message. 704a9fd3 Use project.ServiceNames() if no service specified in hash d9e0e42d Add branch configuration for pull_request trigger c48e3c4a Initial codeql.yml commit dd0803db fix SIGTERM support to stop/kill stack 39008c53 align with OCI artifact best practices 6c345b37 refactor(cmd/compose/run): remove redundant `len` check 1ffa194e fail start if depependency is missing b9298101 check that the pull policy provided is a valid one or is not missing when --pull is used 3d0207eb remove uncessary return value of pullComposeFiles function 16a7c209 enable profile when down is ran with explicit service names 818bc3c3 add sync+restart action to watch attribute 38bc6d5d build(deps): bump github.com/containerd/containerd from 1.7.6 to 1.7.7 0b6ce6ee build(deps): bump github.com/google/go-cmp from 0.5.9 to 0.6.0 ae16bbbf build(deps): bump google.golang.org/grpc from 1.58.2 to 1.59.0 d13ad1f9 build(deps): bump golang.org/x/sync from 0.3.0 to 0.4.0 9b4d577c remove refrecence docs generation 14b43c1a remove cucumber tests as we haven't added new ones for a while 9dd081b9 add support of COMPOSE_ENV_FILES env variable to pass a list of env files 2c0b0232 add dry-run support for publish command 599e4b24 extract method to reduce cyclomatic complexity fe8c2780 warn user remote resource is disabled a345515f Don't delete dependent services 8967df7a Apply platform before hashing 4f694919 deps: remove deprecated github.com/pkg/errors 6ecab957 Include image name in error message 12e0ac89 pkg/compose/publish: use empty config descriptor mediaType a6b7d785 pkg/remote/oci: check artifactType instead of config.mediaType 991901f2 pkg/remote/oci: refer to the manifest as manifest 2d971fc9 update the watch warning message when no services with a develop section 78f33619 ci: enable verbose output for e2e tests (#11045) 44d21280 truncate command by default, introduce --no-trunc flag to get the full command ff2ff18c build(deps): bump google.golang.org/grpc from 1.58.1 to 1.58.2 ab81db5b config --xx don't need `env_file` being parsed 61c8be11 remove --timeout=0 flag to cleanup function of watch e2e test compose down command need the watch process to be killed to succeed 6be5f300 move watch from alpha to main command c34c306c TestWatch to use new `develop` section 5ca35c88 implement publish 805541be watch: use official `develop` section (#11026) 8f489d6d build(deps): bump github.com/opencontainers/image-spec 9ea8fbc6 build(deps): bump github.com/moby/buildkit from 0.12.1 to 0.12.2 76f150e4 build(deps): bump gotest.tools/v3 from 3.5.0 to 3.5.1 f447c809 build(deps): bump google.golang.org/grpc from 1.58.0 to 1.58.1 4587d4ba build(deps): bump github.com/containerd/containerd from 1.7.3 to 1.7.6 a697a069 introduce pull --missing flag to only pull images not present in cache 8af49ff3 resolve service reference into container based on observed state f6e31dbc don't rely on depends_on to resolve volume_from, better use observed state 6d5eb6fd update to go1.21.1 9d7e0ad6 correct scale error messages formatting 1a98a70b add scale command 19bbb12f ci: tweak restricted imports in linter (#10992) 7a134578 deps: upgrade Moby to v24.0.6 and gRPC to v1.58.0 (#10991) 13115468 cli: fix `--build` flag for `create` (#10982) e1aa4f77 otel: add args & flags to cli traces (#10974) d7b0b2bd watch: build & launch the project at start (#10957) e0f39ebb pull OCI remote resource c9d54f09 introduce publish (alpha) command 52e54ef9 doc: updated README.md to remove broken link f4f2e934 migrate to github.com/distribution/reference 32c3d0a3 Enable service explicitly requested to be restarted 1fdbcb62 build: pass BuildOptions around explicitly & fix multi-platform issues 407a0d5b up: fix various race/deadlock conditions on exit (#10934) 8caa6f1f pkg/api: replace uuid for basic random id Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-03-15 17:17:19 +00:00
Bruce Ashfield	4ec4055f38	crun: update to v1.14.3 ... Bumping crun to version 1.14.3-8-g89d4446, which comprises the following commits: 5884fd4 linux: fix mount of file with recursive flags b9e87e7 tests: test bind mounts of files e81086b rpm: Use relative, not absolute, symbolic links 9079a6d release: enable parallel builds 1961d21 NEWS: tag 1.14.3 0860c0f crun: really drop version check 32b139f NEWS: tag 1.14.2 4532a38 crun: drop check for OCI version de537a7 NEWS: tag 1.14.1 fdb41c3 linux: initialize options variable 31b08fc container: do not leak capabilities buffer 1716fde container: do not leak version_string e72f3bc container: fix leak of mount_options_list 242bb34 cgroup: do not leak dirfd deffa39 cgroup: fix leak of cpus/mems string buffer 3df8f0c Add force_no_cgroup & no_pivot arguments to make_context() Python function b883e6c Make function arguments valid Python identifiers e0027bc Add no_new_keyring argument to make_context() Python function Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-03-15 17:17:19 +00:00
Bruce Ashfield	7a5bf9f670	conmon: update to 2.1.10 ... Bumping conmon to version v2.1.3-138-gaffab49, which comprises the following commits: 9ce7b1a Add support for s390x 3e103d6 Remove checks for (long)deprecated libsystemd-journal in favor of libsystemd f2be46f update packit config, enable downstream tasks 59c6de4 fix(deps): update module github.com/onsi/gomega to v1.31.1 1e0d24b [skip-ci] Update actions/setup-go action to v5 bc27f79 [skip-ci] Update actions/cache action to v4 386bb80 fix(deps): update github.com/opencontainers/runtime-tools digest to 408c51e 14a34a8 chore(deps): update dependency containers/automation_images to v20240102 8c6e47f drop --tty on exec 3e425d1 chore(deps): update dependency containers/automation_images to v20231208 90432cc docs/Makefile: softcode GOMD2MAN 2dcd736 bump to 2.1.10 5fec3c0 fix(deps): update module github.com/onsi/gomega to v1.30.0 8babb44 chore(deps): update module github.com/docker/docker to v24 [security] 2bc8747 chore(deps): update module golang.org/x/net to v0.17.0 [security] 8557c11 Fix incorrect free in conn_sock 116675e logging: Respect log-size-max immediately after open fad6bac fix some issues flagged by SAST scan 91092aa version: bump to 2.1.9 521f585 README.md: update the correct Nix channel 26053bd Fix podman tests 20ce441 Forward more messages on the sd-notify socket 57eedf0 ci: skip broken cri-o tests 03b64fa logging: -l passthrough accepts TTYs 3605a36 src: fix write after end of buffer f269c2f src: open all files with O_CLOEXEC 633ac6b oom-score: restore oom score before running exit command f0eb924 src/seccomp_notify.c: fix static build a58206d CI: Update Fedora names f5eeb6a chore(deps): update dependency containers/automation_images to v20231004 6d88cb3 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.12.0 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-03-15 17:17:19 +00:00
Bruce Ashfield	e3d1163c54	buildah: update to 1.34 ... Bumping buildah to version v1.34.0-30-gdbeb097c6, which comprises the following commits: 30a9cd1c0 [release-1.34] Bump to v1.34.2-dev a2bab63fd [release-1.34] Bump to v1.34.1 b7a4562ad [release-1.34] Vendor bumps 83a136866 manifest: addCompression use default from containers.conf ae557ac9c Build with CNI support on FreeBSD cd59f7c16 tests: retrofit test for heredoc summary 2a399d67b build, heredoc: show heredoc summary in build output be6b9c3f0 docs: correct default authfile path 6a8e296ea Make buildah match podman for handling of ulimits 70fd07877 imagebuildah: fix crash with empty RUN aa729810a docs: move footnotes to where they're applicable 58820ffd1 Run codespell on code 638a825b1 Fix FreeBSD version parsing 78599048e Allow users to specify no-dereference 029063b9f Fix a build break on FreeBSD bb70cfc50 Remove a bad FROM line 6fe37a59b commit: force omitHistory if the parent has layers but no history b0fb0cacb docs: fix a couple of typos 6cacd1478 stage_executor,heredoc: honor interpreter in heredoc b8c0e21cf stage_executor,layers: burst cache if heredoc content is changed 702dfe84f Replace map[K]bool with map[K]struct{} where it makes sense f818763f3 Replace strings.SplitN with strings.Cut 47ecb727f Document use of containers-transports values in buildah d49e48412 commit: add a --add-file flag 27018aef5 mkcw: populate the rootfs using an overlay 413a35959 Ignore errors if label.Relabel returns ENOSUP 1b00f9e63 manifest: addCompression use default from containers.conf 21ec7aceb Bump to v1.34.0 6977c91e2 fix(deps): update module github.com/containerd/containerd to v1.7.11 b9852af08 fix(deps): update github.com/containers/storage digest to 15c3cb7 ad90fba16 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.2 669f19f6c fix(deps): update github.com/containers/common digest to 630c929 bdbd69e38 fix(deps): update module github.com/moby/buildkit to v0.12.4 ec76cbb60 fix(deps): update github.com/openshift/imagebuilder digest to ef2a5fe 7dfdcf33b [CI:DOCS] man pages: underscores, too-wide lines b7a0f6b13 fix(deps): update module github.com/containerd/containerd to v1.7.10 1f9103562 run.bats: use --quiet --pull=false when using a prefetched image 3b795dd4b internal/mkcw/embed/entrypoint.gz: rename to include the arch 7788160cb internal/mkcw/embed/entrypoint.gz: compress with -n9 76c9307ff fix(deps): update module golang.org/x/crypto to v0.16.0 d10b1e35b Integration tests: make skip_if_no_unshare check --map-users 028a3f9a3 fix(deps): update module golang.org/x/term to v0.15.0 3c23118f6 fix(deps): update module golang.org/x/sys to v0.15.0 d4f577b39 fix(deps): update module github.com/onsi/ginkgo to v2 c174e9162 vendor: update c/{common,image,storage} a23927ab5 run: Allow using just one jail per container on FreeBSD 12b205f69 Remove makefile targets entrypoint{,.gz} for non x86_64 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-03-15 17:17:19 +00:00
Bruce Ashfield	eae2d31c7b	aardvark-dns: update to v1.10.0 ... Bumping aardvark-dns to version v1.10.0-14-g526260a, which comprises the following commits: 875c717 Release 1.10.0 09cf01b Release notes for 1.10.0 be398c4 chore(deps): update rust crate chrono to 0.4.32 9330e9c chore(deps): update dependency containers/automation_images to v20240102 0f509bb fix(deps): update rust crate futures-util to 0.3.30 74b3618 fix(deps): update rust crate anyhow to 1.0.79 c706497 fix(deps): update rust crate tokio to 1.35.1 b70e31b chore(deps): update dependency containers/automation_images to v20231208 d2a7877 fix(deps): update rust crate tokio to 1.35.0 26e2439 fix duplicated IP CI flake 1525a69 server: remove unused kill switch faf66df fix(deps): update rust crate clap to ~4.4.10 ffb59da Bump working version to v1.10.0-dev Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-03-15 17:17:19 +00:00
Bruce Ashfield	2961677b6a	devtools: depreciate the go source-only packages ... We are now using vendoring from the upstream repos, or creating our own vendor directory. We no longer need these source only recipes. Add an inherit to each recipe to warn that it will be removed in the future. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-03-15 17:17:19 +00:00
Chen Qi	799c5a90b7	crun: remove unneeded deps ... These two deps do not affect the build result and are not used, remove them. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-03-15 17:17:19 +00:00
Chen Qi	a4b847830f	oci-image-tools: remove unneeded deps ... These deps no longer have any effect. Remove them. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-03-15 17:17:19 +00:00
Bruce Ashfield	9213f05f55	runc-opencontainers: update to 1.1.12 ... Bumping runc to version v1.1.12-2-ga9833ff3, which comprises the following commits: 29d6d873 VERSION: back to development 51d5e946 VERSION: release 1.1.12 e9665f4d init: don't special-case logrus fds 683ad2ff libcontainer: mark all non-stdio fds O_CLOEXEC before spawning init b6633f48 cgroup: plug leaks of /sys/fs/cgroup handle 284ba305 init: close internal fds before execve fbe3eed1 setns init: do explicit lookup of execve argument early 0994249a init: verify after chdir that cwd is inside the container 506552a8 Fix File to Close d0b1a374 keyring: update AkihiroSuda key expiry d561e5da keyring: update cyphar@cyphar.com key expiry 7887736f VERSION: back to development 4bccb38c VERSION: release 1.1.11 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-03-15 17:17:19 +00:00
Bruce Ashfield	54fdc5149a	containerd: update to v2.0.0-beta-tip ... Bumping containerd to version v2.0.0-beta.2-204-gb1624c362, which comprises the following commits: 5351ad6b4 .github: windows should use fix critool version a2768f19d plugins/sandbox: move local plugin into services 464319b3a Remove pause package from runc shim 2cd08156e cri: Expose runtimeHandler support for userns 358aef4bc go.mod: Update cri-api to include userns changes 105f2d727 build(deps): bump google.golang.org/grpc from 1.61.0 to 1.62.0 02db6beb8 build(deps): bump github.com/prometheus/client_golang 75f58579c build(deps): bump github.com/opencontainers/runtime-spec 522130a66 sandbox: support vsock connection to task api f0e874941 Add ttrpc generated services 65031eade Update protobuild to build ttrpc services 04c37d565 build(deps): bump the k8s group with 5 updates bd4810415 ci: update crun version to 1.14.3 50d0de96a Update 1.7 support timeline 4fbc9842d Changes to configuring otel from env only 753a525b3 Deprecate otel configs 0693b936d replace deprecated Prestart to CreateRuntime hook 6a21c96b5 Replace go-grpc-prometheus with go-grpc-middleware/providers/prometheus 567e56a20 build(deps): bump github.com/opencontainers/image-spec 6a759713a Update golangci-lint to v1.56.1 f44d90be4 Rename variables and snapshotter option to resolve lint warnings 5611db530 cri: Make sure host sandbox files exist before adding them to mounts 9077d1372 KEP-3857: Recursive Read-only (RRO) mounts 83ad4367d script/test/utils.sh: readiness_check: print daemon log f8f1e5f7a Add container monitor plugin type for restart c86c8a16f integration: add case related to ContainerStats in upgrade suite acec60f55 integration: update recover case for upgrade e659cd275 integration: connect to shim by bridge client 51689b661 integration: introduce hook for upgrade test suite a95c8ed59 integration: check data dir after delete container or pod ec759f5be integration/*: extend Runtime.Status response 401d4b491 integration: add some helper function to release upgrade cases 7cf8a00c7 Run failpoints tests only for runc a890c8e53 Add job to report statuses from matrix jobs 132485adb Convert CLI to urfave v2 c8766123d Prevent GC from schedule itself with 0 period. a086125ae Move config version to version package 99721c27e Disable the support for Schema 1 images b9dfba5b8 Add CRIImageService.RemoveImage() 4c775fcfb Pass runtimehandler from CRI pull image request 4dcf089fa Move high volume event logs to Trace level 1b3a96da6 cri: propagate deprecation list to runtime status ac7febc93 moving up for new CRI changes ccec1e6e4 Remove internal LoopConfig struct 3d8da2ebf build(deps): bump the golang-x group with 1 update a274439f2 build(deps): bump golangci/golangci-lint-action from 3 to 4 468bee9a7 ctr: print deprecation warnings on every invocation c2dfae8d0 go.mod: Bump golang.org/x/sys to v0.17.0 41bb8b816 Revert "Fix for k8s nfs related tests" 48c8c5f50 Remove ParseSignal from client 281eb22cc Remove deprecated dialer 1ce7b9951 Remove deprecated filesys funcs 5ca56ddbb Remove deprecated funcs from restart package 653b80899 Remove deprecated docker package 413fbe82c Fix unpacker link in remote snapshotter docs 23ebfd030 Fix for k8s nfs related tests 25ab90219 Update to v0.29.1 cri-api 5e3e12d2a build(deps): bump the otel group with 8 updates c4bb72ae4 Remove CRI plugin path note 87aa9e800 Drop go 1.20 and build against 1.22 276384695 Update codeql-action/upload-sarif dependency in scorecards workflow 634ac2f8f Update migration script for transfer packages f46aea618 Move transfer and unpack packages d9b95ab68 Update gce configure.sh to use registry config_path 360fbf197 Fix windows integration tests 2820343d4 Update workflow files to install Go via composite action 488b56361 Extract a composite action to install Go 5aa05481d Add OSVersion to platform protobuf d9cae66d8 Extend string match in make protos c58b1fb40 Update github.com/containerd/console to v1.0.4 06ed897b2 cri/server: Add userns tests in PodSandboxStatus 6c356a5c7 cri: Expose userns in PodSandboxStatus rpc 1eaf0c1f0 bug fix: make sure cri image is pinned when it is pulled outside cri 9eb9038a9 Avoid publishing data events during transaction 86530c0af Move image event publishing to metadata store 32bd8eff9 Move inline PS scripts into files 4e8e21a7d go.{mod,sum}: update NRI dependency, re-vendor. 5cbe92e88 Clean up repeated package import 72950c00b Treat PRs that require rebase > 90 days as stale db437580b build(deps): bump github.com/opencontainers/image-spec 2c7d69530 build(deps): bump github.com/klauspost/compress from 1.17.5 to 1.17.6 da1673f55 Update vendor 047d42e90 Update ttrpc to v1.2.3 64e96c7d4 Update hcsshim to v0.12.0-rc.3 a9060cda4 Support inject delay running with the old version (4.x) of strace for test case. 9ef94fe52 fix(docs): fix cp and add step to include binaries in the $env:Path fe24b918f pkg/nri, docs: enable NRI by default. e230ed939 sandbox: add sandbox recover ut and e2e test 312496474 sandbox: fix recover status set issue 256637249 Fix config import relative path glob 667069583 Revert "cri: make read-only mounts recursively read-only" a9152ebf8 copy: prevent potential deadlock if close before fully written b48e1141e copy: setError should imply Close e4f91c2df copy: remove max number of ErrResets 651cfa2a2 pushWriter: refactor reset pipe logic into separate function 9d7641ff3 copy: improve error detection from closed pipes 91a50f70b copy: check if writer was closed before setting a pipe 4660f6303 copy: remove wrapping io.NopCloser from push writer pipe 0facc8592 Fix proto formatting 7f2d2c4f4 Move Message proto to types 287524733 Fix formatting after moving CRI bbac058cf Move CRI from pkg/ to internal/ 6e365e925 CRI: An empty DNSConfig != unspecified 9340be717 Remove duplicated TOML duration parsers b2f254fff cri: make read-only mounts recursively read-only f74e5ce7e Move differ default to its own file 82fb589ff Update runc binary to v1.1.12 87a9835f1 docs: fix typo 81409e937 Add a default differ that matches the snapshotter 2369185aa CI: update Rocky Linux to 8.9 d8460a702 CI: bump up crun to 1.14 ebbce7423 rm docs/cri/installation.md 49d5cc7f9 build(deps): bump github.com/klauspost/compress from 1.17.4 to 1.17.5 4d33170ea build(deps): bump github.com/google/uuid from 1.5.0 to 1.6.0 3a5b47d73 build(deps): bump google.golang.org/grpc from 1.60.1 to 1.61.0 9a983caad build(deps): bump github.com/containerd/plugin 495afb0c0 build(deps): bump lycheeverse/lychee-action from 1.9.1 to 1.9.3 5365a1089 build(deps): bump google-github-actions/upload-cloud-storage 64b4778fc Add deprecation warnings to CRI image server configuration 65b3922df Split streaming config from runtime config 58ff9d368 Move cri plugin to plugins subpackage d29a1bc6a Move sandbox info to cri types packages 9795677fe Move cri base plugin to CRI runtime service 966d51801 The `Links` workflow should be disabled in forks. e15f191a2 Fix func (m manager) Info in containerd-shim-runc-v2 4f570db1a refactor: remove containerd/containerd/log 010857d33 Add errdefs and platforms to migration script 7cf54b437 Remove unused pkg/errdefs package fb9b59a84 Switch to new errdefs package 6b906a22d Prepare release notes for v2.0.0-beta.2 b608c6f73 doc: fix package import path in sample code b16e3572a refactor: move plugin/fieldpath to api/types/ 22d586e51 api/services/instrospection: add PluginInfo ad869e905 Use tags.cncf.io CDI url in config.md eb8981f35 mv contrib/seccomp/kernelversion pkg/kernelversion a6e52c74f seccomp: kernel 6.7 ed4710241 Code clean for nri_api. ade80789b Remove walker diff plugin for Windows af6a90bf5 remotes/docker/authorizer.go: invalidate auth tokens when they expire. e79ec7a09 Remove deprecated platforms package 3f620143f Use github.com/containerd/platforms package 9dd29b3cf Update container-device-interface to v0.6.2 7eccde5d0 Clean plugin indent in containerd-config.toml.5.md b16d46740 pod: CreatedAt time will be 269 years ago while creating cri network failed. 378e9f443 build(deps): bump actions/cache from 3 to 4 748fe2035 integration: add test for recovering images 2e8e03389 Add multi-subscriber support to GetContainerEvents CRI API e7eb08eb5 Add support for multiple subscribers to CRI container events cfe8321b4 strip-volatile-option-tmp-mounts d34725f85 CI: use standard GHA runners 9d2c22123 Prepare release notes for v2.0.0-beta.1 e9f2bba1f remotes: FetchByDigest: propagate media type from config to desc d7689ae8b Remove CRI plugin config after migrating f48f61fd8 Add migration integration test eb9925d88 Update config migrations to decode using the plugin type 15713014d Update server config slice merge strategy cf6f439eb Fix transfer plugin unpack configuration eb123db5f ctr: use transfer service by default 94d1b2098 Add migration script to contrib 9ee1f4716 Rebuild protos with updated runtime location dbc74db6a Move runtime to core/runtime df9b0a067 Move metrics to core/metrics 19e763553 Move pkg/truncindex to internal/truncindex 764c90700 Move pkg/tomlext to internal/tomlext 1c4be2d88 Move pkg/testutil to internal/testutil 114df368f Move pkg/registrar to internal/registrar 4ee6419fa Move pkg/randutil to internal/randutil 696cf2565 Move pkg/kmutex to internal/kmutex 5e1d9543b Move pkg/hasher to internal/hasher 23914a01b Move pkg/failpoint to internal/failpoint c79ecfe24 Move pkg/cleanup to internal/cleanup 8f0eb2631 Move tracing to pkg/tracing 6be90158c Move sys to pkg/sys de606680b Move rootfs to pkg/rootfs fdb8a527c Move reference to pkg/reference e59f64792 Move oci to pkg/oci fa8cae99d Move namespaces to pkg/namespaces b76236bb4 Move labels to pkg/labels bb71c2835 Move identifiers to pkg/identifiers 5e00f63ce Move gc to pkg/gc 11114b0a9 Move gc/scheduler to plugins/gc c38f2ab72 Move filters to pkg/filters 44a836c9b Move errdefs to pkg/errdefs 70ed2696f Move events to pkg/events b0c3d00e9 Move cio to pkg/cio 8e14c39e8 Move archive to pkg/archive fcd39ccc5 Move snapshots to core/snapshots e0fe656da Move snapshots/windows to plugins/snapshots/windows 57bdbfba6 Move snapshots/overlay to plugins/snapshots/overlay 9b8c558f9 Move snapshots/native to plugins/snapshots/native 5c07d5d36 Move snapshots/lcow to plugins/snapshots/lcow 8473322f0 Move snapshots/devmapper to plugins/snapshots/devmapper 7dd96fe34 Move snapshots/btrfs to plugins/snapshots/btrfs 2909f07f8 Move snapshots/blockfile to plugins/snapshots/blockfile 92d2a5fc0 Move services to plugins/services ce41d1c90 Move services/server to cmd/containerd/server 228ad5a5c Move sandbox to core/sandbox d133019c9 Move runtime/restart/monitor to plugins/restart 0dabf6f15 Move remotes to core/remotes 6e5408dce Move mount to core/mount 1a1e0e8c8 Move metadata to core/metadata 18b3cbe4f Move metadata/plugin to plugins/metadata f80760f9f Move leases to core/leases cc6a5c9c6 Move leases/plugin to plugins/leases 57ea8aef3 Move images to core/images 913edcd48 Move diff to core/diff d14350376 Move diff/windows to plugins/diff/windows 2d861b6ea Move diff/walking to plugins/diff/walking aaf6ac04c Move diff/lcow to plugins/diff/lcow 9456048f4 Move containers to core/containers 21b4f3f0a Move content to core/content 846f7d4e6 Move content/local to plugins/content/local 725c92e7c include image name in error message 18b0d236c build(deps): bump actions/upload-artifact from 3 to 4 f45b46b67 runtime/v2: reduce shim plugin log 20619a7c9 ci: make artifact name unique in linux integration 2053d9157 build(deps): bump lycheeverse/lychee-action from 1.9.0 to 1.9.1 d4396c96b mount: UnmountRecursive return nil if path doesn't exist 8aa2551ce Move DefaultSnapshotter constants c8e8a093c config: enable CDI by default 5a3d3f613 Update load image test to use local import 6041d4e60 Update fuzz contrib for updated image service 2a476d421 Move ParseImageReferences to cri util 3baf5edb8 Separate the CRI image config from the main plugin config ad4c9f8a9 Update CRI runtime platform and pinned image configuration 11f311fdd Add minimal interface to CRI image store 02a9a456e Split image config from CRI plugin d23ac1122 Split CRI image service from GRPC handler a2472c0b5 transfer: add OCI descriptors to Progress structure f26196950 Move certain debug logs to trace logs a5d958706 update to go1.21.6, go1.20.13 21640c57a Uninstall mingw before attempting upgrade 174efb1e0 update imgcrypt binary to v1.1.9 dfb175380 build(deps): bump the golang-x group with 2 updates 2b415c911 build(deps): bump lycheeverse/lychee-action from 1.8.0 to 1.9.0 7dadd5f1b sandbox: remove sandboxStore from podsandbox a3c62e698 add label flags to ctr import, add integration tests d01056555 Handle failure when stopping a sandbox 8235665e7 content: Add InfoReaderProvider fa83bc8de integration: remove use of golang.org/x/sys/execabs dffeea471 add get cgroupdriver from RuntimeConfig to integration 46b2f1d16 Use latest VM image to get Windows updates regularly a8d39666d Move cimfs OS build compat check to the operation functions instead of init() 0d3c3efe3 integration/import-export: Add WithSkipMissing tests b9af453f0 export: Copy distribution source labels to manifest annotations 61a7c4999 import/export: Support references to missing content 1ab4fac94 update runc binary to v1.1.11 5387747e9 build(deps): bump github.com/containerd/cgroups/v3 from 3.0.2 to 3.0.3 a1e0601e0 fix: Update go.opentelemetry.io/otel/sdk/trace to satisfy traceProvider interface 78421616e deps: Update otelgrpc bd4c281c5 build(deps): bump github.com/fsnotify/fsnotify from 1.6.0 to 1.7.0 62a824a4b build(deps): bump github.com/intel/goresctrl from 0.5.0 to 0.6.0 7fe038e4a build(deps): bump google.golang.org/protobuf from 1.31.0 to 1.32.0 81bb66942 build(deps): bump github.com/google/uuid from 1.3.1 to 1.5.0 9d328410a shim: Create pid-file with 0644 permissions daa1ea522 Add cimfs differ and snapshotter c19193574 fix: return gRPC code "unavailable" if server is not initialized yet 1f9151af6 build(deps): bump google.golang.org/grpc from 1.58.3 to 1.60.1 0b48b5659 build(deps): bump google-github-actions/upload-cloud-storage 97ec26a5e build(deps): bump actions/download-artifact from 3 to 4 22138541a tracing/plugin: newTracer: ignore context.Canceled errors on Close() 7c651e183 docs: fix CI badge in README e10c82e4c build(deps): bump github.com/google/uuid from 1.3.1 to 1.5.0 25dc823bf integration: fix format string for klog.Infof fc4b78c05 build(deps): bump github.com/intel/goresctrl from 0.3.0 to 0.5.0 1c96087ce build(deps): bump github.com/Microsoft/hcsshim 7e3c8af52 build(deps): bump github.com/prometheus/client_golang f9303d04d build(deps): bump github/codeql-action from 2 to 3 4c1ebe33b build(deps): bump docker/setup-buildx-action from 2 to 3 51fd1d47e dependabot: enable groups 4a71a9360 build(deps): bump github.com/moby/sys/mountinfo from 0.6.2 to 0.7.1 344fe957f build(deps): bump golang.org/x/mod from 0.13.0 to 0.14.0 6726a2aeb build(deps): bump k8s.io/component-base from 0.28.2 to 0.28.4 0c98f1063 build(deps): bump github.com/klauspost/compress from 1.17.2 to 1.17.4 39ba0347e build(deps): bump go.etcd.io/bbolt from 1.3.7 to 1.3.8 db43e3d1f build(deps): bump golang.org/x/sync from 0.4.0 to 0.5.0 4660090ba build(deps): bump actions/stale from 8 to 9 ace8ab1bd build(deps): bump docker/login-action from 2 to 3 0b94716e8 build(deps): bump actions/github-script from 6 to 7 9133ad811 build(deps): bump actions/upload-artifact from 1 to 3 c1823a7c6 build(deps): bump ossf/scorecard-action from 2.0.3 to 2.3.1 36b12cbcb build(deps): bump crazy-max/ghaction-github-runtime from 2 to 3 dc5a6cfae build(deps): bump google-github-actions/auth from 0 to 2 f6a9c6966 build(deps): bump actions/setup-go from 3 to 5 e27ea7d1a build(deps): bump google-github-actions/upload-cloud-storage 3ca95282e build(deps): bump actions/checkout from 3 to 4 1398186ca WithAppendAdditionalGroups: better /etc/group handling 5a140dca5 CI: enable dependabot c1197995b go.mod: Bump up github.com/pelletier/go-toml to v2.1.1 23278c81f *: introduce image_pull_with_sync_fs in CRI bd5c602c4 api: introduce sync_fs to diff.ApplyRequest 6bb81ee57 Document `ns` query string added to mirror requests 98526c9d3 Exclude releases directory from links checker f67c1632f Add ignore list for links e740dd3d6 Add links status badge bfa651c69 Fix broken links c9fa5b980 Add nighly job to verify doc links 25b052cbc Move GenerateRuntimeOptions() to pkg/cri/config cb5a48e64 *: enable ARM64 runner 596ada3ac release: add .dockerignore to fix repeated builds cf4b57989 Remove deprecated tracing function 8203bb997 Add HTTP client update function to tracing library ad3b806a4 fix(tracing): use latest version of semconv 22db60b6b upgrade crun version from 1.9 to 1.12 993790969 go.mod: Bump up github.com/containernetworking/plugins to v1.4.0 734219a21 update to go1.21.5, go1.20.12 212200452 update to go1.21.4, go1.20.11 ad96fded4 Don't block snapshot garbage collection on Remove failures 8bbce8d37 pkg/process: Check using idmap mount options too 96aaf5a3b Add core and internal root packages 6c6dfcbce contrib/apparmor: deny /sys/devices/virtual/powercap 106a9b776 oci/spec: deny /sys/devices/virtual/powercap Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-03-15 17:17:19 +00:00
Bruce Ashfield	b7911a2a07	moby: update to v25.0.3 ... Bumping moby to version v25.0.3, which comprises the following commits: acd023d42b c8d: Use the same logic to get the present images ed7c26339e seccomp: add futex_wake syscall (kernel v6.7, libseccomp v2.5.5) 74e3b4fb2e seccomp: add futex_wait syscall (kernel v6.7, libseccomp v2.5.5) 4cc0416534 seccomp: add futex_requeue syscall (kernel v6.7, libseccomp v2.5.5) f9f9e7ff9a seccomp: add map_shadow_stack syscall (kernel v6.6, libseccomp v2.5.5) 5fb4eb941d seccomp: add fchmodat2 syscall (kernel v6.6, libseccomp v2.5.5) 67e9aa6d4d seccomp: add cachestat syscall (kernel v6.5, libseccomp v2.5.5) 61b82be580 seccomp: add set_mempolicy_home_node syscall (kernel v5.17, libseccomp v2.5.4) 0227d95f99 image/cache: Use Platform from ocispec fa9c5c55e1 image/cache: Ignore Build and Revision on Windows 1652559be4 Dockerfile: update RootlessKit to v2.0.1 147b5388dd integration/save: Add tests checking OCI archive output ba4a2dab16 plugins: fix panic installing from repo w/ digest 51133117fb tests: add plugin install test w/ digest 269a0d8feb Dockerfile: update docker compose to v2.24.5 876b1d1dcd Dockerfile: update dev-shell version of the cli to v25.0.2 0bcd64689b Dockerfile: update docker compose to v2.24.3 8d454710cd Dockerfile: update dev-shell version of the cli to v25.0.1 c12bbf549b libcontainerd/supervisor: fix data race 9150d0115e d/logger/journald: quit waiting when logger closes 9af7c8ec0a d/logger/journald: sync logger on close in tests 3344c502da d/logger/loggertest: improve TestConcurrent 6c9fafdda7 d/logger/journald: log journal-remote cmd output f8a8cdaf9e d/logger/journald: fix data race in test harness 7a659049b8 libnet: bridge: ignore EINVAL when configuring bridge MTU 0ccf1c2a93 api/t/network: ValidateIPAM: ignore v6 subnet when IPv6 is disabled 28c1a8bc2b Revert "daemon: automatically set network EnableIPv6 if needed" bbe6f09afc No inspect 'Config.MacAddress' unless configured. 5b13a38144 Only restore a configured MAC addr on restart. 990e95dcf0 Add internal n/w bridge to firewalld docker zone c48b67160d api: Document `version` in `/build` 225e043196 c8d/save: Handle digested reference same as ID 78174d2e74 image/save: Fix untagged images not present in index.json 85f4e6151a Assert temp output directory is not an empty string dd4de8f388 docs: remove dead links from api verison history f5ef4e76b3 ci: update to docker/bake-action@v4 6c5e5271c1 ci: update to codecov/codecov-action@v4 693fca6199 ci: update to actions/download-artifact@v4 and actions/upload-artifact@v4 49487e996a ci: update to actions/cache@v3 0358f31dc2 gha: update to crazy-max/ghaction-github-runtime@v3 081cffb3fa gha: update to docker/login-action@v3 9de19554c7 gha: update to docker/setup-qemu-action@v3 2a80b8a7b2 gha: update to docker/bake-action@v4 61ffecfa3b gha: update to docker/setup-buildx-action@v3 02cd8dec03 gha: update to docker/metadata-action@v5 1d7df5ecc0 gha: update to actions/setup-go@v5 4e68a265ed gha: update to actions/github-script@v7 e437f890ba gha: update to actions/checkout@v4 fd6a419ad5 update containerd binary to v1.7.13 13ce91825f vendor: github.com/moby/buildkit v0.12.5 4b63c47c1e vendor: github.com/opencontainers/runc v1.1.12 4edb71bb83 update runc binary to v1.1.12 1b47bfac02 hack/make.ps1: Fix go list pattern f2d0d87c46 logger/journald: drop errDrainDone sentinel 6ac38cdbeb logger/journald: wait no longer than the deadline d7bf237e29 logger/journald: use deadline for drain timeout f41b342cbe l/journald: make tests compatible with systemd 255 f413ba6fdb daemon/logger/loggertest: expand log-follow tests c2ef38f790 vendor swarmkit v2.0.0-20240125134710-dcda100a8261 d5eebf9e19 builder/windows: Don't set ArgsEscaped for RUN cache probe f3f5327b48 image/cache: Check image platform 05a370f52f image/cache: Restrict cache candidates to locally built images be7b60ef05 daemon/imageStore: Mark images built locally 6d05b9b65b image/cache: Compare all config fields c01bbbddeb pkg/ioutils: Make subsequent Close attempts noop 32635850ed add more //go:build directives to prevent downgrading to go1.16 language 2cf1c762f8 De-flake TestSwarmClusterRotateUnlockKey... again... maybe? 5295e88ceb daemon: rename: don't reload endpoint from datastore 3de920a0b1 volume/local: Fix cifs url containing spaces a445aa95e5 volume/local: Add tests for parsing nfs/cifs mounts cb77e48229 volume/local: Break early if `addr` was specified e8801fbe26 daemon: only add short cid to aliases for custom networks b8cc2e8c66 fix "host-gateway-ip" label not set for builder workers fcccfeb811 c8d/snapshot: Create any platform if not specified f8eaa14a18 pkg/platforms: internalize in daemon/containerd ac76925ff2 volume/local: Make host resolution backwards compatible ff15b49b47 Dockerfile: update docker compose to v2.24.2 c0573b133f pkg/system: return even richer xattr errors 7c185a1e40 daemon: return an InvalidParameter error when ep settings are wrong 2b036fb1da Remove generated MAC addresses on restart. 1f24da70d8 docs/api: remove version matrices from swagger files 358fecb566 docs: remove documentation for deprecated API versions < v1.23 f030b25770 Dockerfile: update docker compose to v2.24.1 e07aed0f77 Dockerfile: update dev-shell version of the cli to v25.0.0 cdf3611cff integration-cli: TestInspectAPIMultipleNetworks: use current version 05267e9e8c integration-cli: TestInspectAPIBridgeNetworkSettings121: use current version e5edf62bca integration-cli: TestPutContainerArchiveErrSymlinkInVolumeToReadOnlyRootfs: use current API e0acf1cd70 daemon/cluster/executer: Add missing `StartInterval` 1e335cfa74 image/save: Fix layers order in OCI manifest 4d287e9267 image/save: Change layers type to DiffID 0240f5675b Fix isGitURL regular expression 13964248f1 libnetwork: loosen container IPAM validation 05695c2458 c8d/integation: Adjust error in TestPullLinuxImageFailsOnWindows Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-03-15 17:17:19 +00:00
Bruce Ashfield	2118aace8f	crun: update to v1.14 ... Bumping crun to version 1.14-19-g9d01392, which comprises the following commits: 3df8f0c Add force_no_cgroup & no_pivot arguments to make_context() Python function b883e6c Make function arguments valid Python identifiers e0027bc Add no_new_keyring argument to make_context() Python function cb3ffb5 apparmor: Fix wrong determination whether crun is confined adb912d linux: harden chdir() f157e80 container: attempt to close all the files before execv(2) ed1abf9 container: simplify statement 3aaadf3 ebpf: add fallback when bpf(2) fails with ENOSPC f2ade60 ebpf: add fallback when bpf(2) fails 8b611f2 ebpf: try harder to bump RLIMIT_MEMLOCK d88d77e build(deps): bump uraimo/run-on-arch-action from 2.6.0 to 2.7.1 f70fe0b cgroup, systemd: fix segfault if resources not specified 667e6eb NEWS: tag version 1.14 688f186 build(deps): bump actions/cache from 3 to 4 8d96f08 build: drop gcrypt dependency 5221ca8 seccomp: use blake3 instead of libgcrypt 6d9fa42 cpuset: don't clobber parent cgroup value 3873541 build: embed blake3 hashing function 4f1f3d4 seccomp: include default_errno_ret in cache digest beb9565 utils: remove unneeded if statement 9306457 ebpf: do not require MEMLOCK for eBPF programs 87740ce linux: force umask(0) 5078ce6 apparmor: stack apparmor profiles if nnp and confined c761349 NEWS: tag 1.13 cb53ac2 build(deps): bump actions/upload-artifact from 3 to 4 94a5950 cgroup: use "max" when pids limit < 0 3b819bc Improve error msg on idmap mounts bace3a2 build(deps): bump github/codeql-action from 2 to 3 4ddf5e6 criu: remove unneeded if statement 8c27dea error: reset pointer after vasprintf failure c5643c4 status: fix double free ece4f9e utils: return a valid error if access fails 68a9487 list: initialize variable ea27b13 libcrun: fix compile error without libseccomp and libcap 487ba3a fix checking of relative idmapped mount 49f439d ctx: drop no_subreaper bool Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-03-15 17:17:19 +00:00
Bruce Ashfield	a6cf2e0e7d	cri-o: update to 1.30 ... Bumping cri-o to version v1.29.0-44-g5aff11c7c, which comprises the following commits: 1b9754486 fix missing line ending on crio.8.md 3cbaa5294 fix grep for whitespace 8dea35388 add metrics_host to config Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-03-15 17:17:19 +00:00
Bruce Ashfield	5d211f85b4	skopeo: update to 1.14.1 ... Bumping skopeo to version v1.14.1-4-g695538a3, which comprises the following commits: 4baf4fe9 fix(deps): update module github.com/opencontainers/image-spec to v1.1.0-rc6 e32dfefb Bump to v1.15.0-dev 45b7bf5e Bump to v1.14.1 b7ec87a1 fix(deps): update module github.com/containers/common to v0.57.2 92edbcb7 fix(deps): update module github.com/containers/image/v5 to v5.29.1 5684cd12 chore(deps): update dependency containers/automation_images to v20240102 c7053312 Fix libsubid detection e51dbbd8 fix(deps): update module golang.org/x/term to v0.16.0 852cca63 fix(deps): update golang.org/x/exp digest to 02704c9 d1cb2e2c chore(deps): update dependency containers/automation_images to v20231208 fe83b6fe [skip-ci] Update actions/stale action to v9 f346045d fix(deps): update module github.com/containers/common to v0.57.1 48d11dac fix(deps): update golang.org/x/exp digest to 6522937 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-03-15 17:17:19 +00:00
Bruce Ashfield	82b00eb592	moby: update to v25.0.0 ... Bumping moby to version v25.0.0, which comprises the following commits: 05695c2458 c8d/integation: Adjust error in TestPullLinuxImageFailsOnWindows ae6468b4b9 c8d/mount: Use ref-counted mounter by default bd481592ff ci: Always run snapshotter tests on Linux ed15f1d717 net=host: remove /var/run/docker/netns/default from OCI config 568c064795 docker-py: unskip some tests e8f4bfb374 Root.Path for a process-isolated WCOW container must be the Volume GUID ec041193f9 Windows doesn't have 'host' mode networking, so use 'auto'. 66325f7271 Implement GetLayerFolders for the containerd image store 0dc07ccc3a Unmount RWLayer during Commit a1f6b64e24 Don't call setupInit in a temp mount if setupInit is nil efadb70ef8 The Windows snapshotter and graphdriver have different names 641050c93f Typo fixes 508a2d979a Revert "temporary: Disable deprecate-integration-cli validation" f7065ab207 Add testutil.TempDir function 84d2229ffe dockerd-rootless-setuptool.sh: add `nsenter` subcommand 7d08d84b03 dockerd-rootless.sh: set `rootlesskit --state-dir=DIR` ae9fbcb82c testutil/daemon: shorten XDG_RUNTIME_DIR bdc7d0c2db temporary: Disable deprecate-integration-cli validation 8390bc5683 c8d/cache: Use ContainerConfig from content store f760cb4f97 c8d/builder: Store ContainerConfig a5a15c7782 c8d/cache: Optimize `FROM scratch` case 71ebfc7c63 c8d: make the cache in classic builder work 24da5233dd integration: Fix Parallel before setupTest d22c775e04 cdi: use separate feature-flag fa4deb02af environment: Error when t.Parallel was called before Protect 97d32bb7d7 daemon: stop checkpointing health probes to disk a6d9462cb1 (*Daemon).fillRootlessVersion: fix nil panic e954cdc188 dockerd-rootless.sh: fix inconsistent description about "builtin" driver 9de132dbf6 integration/image: Move Parallel after setupTest f0efb90f21 c8d/integration-cli: Skip tests checking `ContainerConfig` 2a02403a94 c8d/exporter: Use WithSkipMissing 9f50e06993 image/save: Refactor saveLayer b5a5ecf4a3 dockerd-rootless.sh: add comments about pasta f5d05b43d7 Dockerfile: update RootlessKit to v2.0.0 ba86626642 vendor.mod: github.com/rootless-containers/rootlesskit/v2 v2.0.0 312450d079 integration: test container healthcheck is reset c58acf06c2 image/save: Derive Descriptor from actual tar archive c4d2968183 vendor: github.com/moby/sys/mountinfo v0.7.1 075e1141b8 vendor: golang.org/x/sys v0.16.0 a759acd958 vendor: github.com/google/uuid v1.5.0 3bcb01a84f vendor: github.com/google/go-cmp v0.6.0 36dd2f029f doc: Correct typo in doc comments for volume/mounts/mounts/MountPoint 92175dd78c vendor: containerd v1.7.12, and switch to dario.cat/mergo v1.0.0 cd1709b0d4 update containerd binary to v1.7.12 2c45df2ab4 image/save: Fix missing layers in manifest 0790864064 Dockerfile: update buildx to v0.12.1 a9d0128bd7 Dockerfile: update docker compose to v2.24.0 28f48ce1ac c8d/commit-builder: Extract common code 659d7b190f libcontainerd: create unstarted tasks d7141cfd06 update to go1.21.6 0e62dbadcd daemon: reinit health monitor on live-restore 71c9aec834 Add Rob Murray (robmry) to curators e8e20c0897 daemon/config: setPlatformDefaults: use debug for missing userland-proxy 18a0e144c2 c8d/getImageLabelByDigest: Fix misspelled `labels` check e27ffdab0f Dockerfile: update rootlesskit to v1.1.1, and use tags as reference 782fe1fe82 layer: ChecksumForGraphID: remove unused code for for migrating v1 layers 1dd415df1a vendor: github.com/vbatts/tar-split v0.11.5 372cd16b88 vendor: otelhttptrace v0.45.0 to align with other OTEL packages 22597efa06 vendor: github.com/docker/go-connections v0.5.0 1f9098e7d0 builder: remove redundant ExecBackend.ContainerKill() 0aa96c5512 builder/dockerfile: containerManager.RemoveAll() prevent partial cleanup 03a8188a9a builder/dockerfile: remove containerManager.removeContainer() a38b5d7430 daemon: Daemon.ContainerRename: move vars closer to where they're used 00a863b25e daemon: Daemon.connectToNetwork: rename named return to prevent shadowing 0f337e9c14 feat: make errdefs.IsXXX helper functions work with wrapped errors dd41f86339 hack/make: Refactor VERSION normalization 2af17cd3f5 vendor: github.com/containerd/cgroups/v3 v3.0.3 9a5393d500 hack/make: Strip "v" tag prefix name from VERSION 12128189eb vendor: github.com/cilium/ebpf v0.11.0 07d2ad30e5 daemon/cluster: Cluster.imageWithDigestString: include mirrors to resolve digest 8aacbb3ba9 api: fix "GET /distribution" endpoint ignoring mirrors b9e27acabc libnet/d/bridge: dead code: no conflict on stale default nw 0a26cdf344 libnet/d/bridge: remove dead ActiveEndpointsError 6d2c4f87af daemon: work around go1.21 compiler bug 69c23cc0c9 docs/api: add documentation for API v1.44 ce574949f7 api: Deprecate outdated fields in NetworkSettingsBase d5a3fccb06 update golangci-lint to v1.55.2 9b184e1268 daemon: remove dead code relying on SecondaryIPAddress 7b0f8122b2 update AUTHORS fc8fcf85a2 vendor: github.com/opencontainers/runc v1.1.11 5fa4cfcabf update runc binary to v1.1.11 b8f2caa80a pkg/containerfs: deprecate ResolveScopedPath 90f37f48e2 pkg/containerfs: unify CleanScopedPath implementation 6fae583dba pkg/aaparser: remove, and integrate into profiles/apparmor 53d405c37f pkg/aaparser: remove deprecated GetVersion utility f714730c40 libnetwork/portallocator: PortAllocator.ReleasePort: remove unused err-return 4f9db655ed portmapper: move userland-proxy lookup to daemon config 214ab2caef libnetwork/portmapper: PortMapper.MapRange: inline "cleanup" closure 6ae6dcfc53 libnetwork/portmapper: PortMapper.MapRange: fix defer 8712c6df22 libnetwork/portmapper: PortMapper.MapRange: rename err-return 341e7b35a6 Updated manifest v2 URLs in image spec README 882b79b254 Dockerfile: update crun to 1.12 dc23efd3a2 vendor: github.com/klauspost/compress v1.17.4 f74ca4ed36 Update commit id unmap to directly use active mounts 0252a6f475 ci(bin-image): fix merge job run condition 1ea1d561c7 ci: do not run ci workflow on push tag events 141cb65e51 Check, then assume an IPv6 bridge has a subnet. 437bc829bf Don't try to validate incomplete network config. 52d9b0cb56 Remove unused error types. f9135cdeb5 libnet: Improve the debug log written when the extKeyListener is stopped 13915f6521 libnet: document what Network.networkType represents 6a2542dacf libnet: remove Endpoint.anonymous cf5a3bc531 c8d: Fix image commit with userns mapping 5eaf898fcb libnetwork: write ServFail if DNS reply msg is bad 1da85f7bdc libnetwork: assert DNS replies are well-formed f6a160d34e c8d/docker-py: Temporarily skip test_commit_* cf1ea9237c Add dangling image reference on delete when last image has children 9603adb5b4 c8d/docker-py: Temporarily skip test_save_and_load* 7a9b680a9c libnet: remove Endpoint.myAliases 523b907359 daemon: no more IsAnonymousEndpoint 8b7af1d0fc libnet: update dnsNames on ContainerRename 3bb13c7eb4 libnet: Use Endpoint.dnsNames to create DNS records f5cc497eac libnet: populate Endpoint.dnsNames on UnmarshalJSON ab8968437b daemon: build the list of endpoint's DNS names 0c6e9121b2 Add support for removing repo and digest c22fc41ddf vendor: golang.org/x/crypto v0.17.0 87c87bccb5 Update cleanup logic to use resolve all images 529d19bad8 Add resolve all images and unit test eb9ce779f6 Update OTEL in client hijack to use transport c84e889a69 Remove httputil lint exceptions 35a51fd697 Update authz plugin test to not use httputil bb4e9c72d7 Replace use of httputil in client hijack dc1e73cbbf libnet: add a new dnsNames property to Endpoint 1eb0751803 daemon: endpoints on default nw aren't anonymous 27f3abd893 Allow overlapping change in bridge's IPv6 network. 18b1aec0ee c8d/inspect: Fill `Parent` property e48b58e1be vendor: golang.org/x/crypto v0.16.0 44511f9e43 vendor: golang.org/x/text v0.14.0 2cdd4906ac vendor: golang.org/x/sys v0.15.0 d6a656cf7f libnet: Remove unused cmd/readme_test aa5d1a8897 typo fixes 2cf230951f add //go:build directives to prevent downgrading to go1.16 language 9e6d012e9c docker info: expose runtime features ("rro" mount mode, etc.) 1602e2f4f1 api: Deprecate `Container` and `ContainerConfig` for `/images/{id}/json` d91bf690ef ci(bin-image): fix conditional run for skipped job 61d5e5ca9a ci(test): do not run on push tag events f8275cb303 c8d/docker-py: Skip test_build_squash 279e6658ac Add devcontainer configuration d11a772080 c8d/tag: Remove duplicate label copy 3b1d9f1a26 add validation and migration for deprecated logentries driver 3a14b1235c docs/api: remove logentries 30f739db44 api/swagger: remove logentries cd41f655f9 logger: remove logentries driver dbdfc71026 vendor: resenje.org/singleflight v0.4.1 4d2a324fce update to go.opentelemetry.io/otel/semconv/v1.21.0, remove "httpconv" uses 7d991b6e42 vendor: github.com/moby/buildkit v0.12.5-0.20231208203051-3b6880d2a00f fcf03cdfa9 vendor: github.com/containerd/containerd v1.7.11 7028a03ffa vendor: github.com/containerd/containerd v1.7.10 49ad10261e vendor: github.com/containerd/containerd v1.7.9 c14bd4f1ad vendor: vendor: upgrade OpenTelemetry to v1.19.0 / v0.45.0 291eaf0a77 vendor: github.com/cyphar/filepath-securejoin v0.2.4 b524ed2dda testing: update docker-py to 7.0.0 33d2ec08ba update containerd binary to 1.7.11 c51a262e34 update containerd binary to 1.7.10 12c70b4386 vendor: github.com/grpc-ecosystem/grpc-gateway/v2 v2.16.0 a0615f6839 vendor: github.com/felixge/httpsnoop v1.0.4 afe281964d daemon/logger/local: always use UTC for timestamps bea729c030 c8d/prune: Familiarize image names that were untagged 8ba8a59697 c8d/prune: Default `dangling` filter to true eaaf1ea96d integration/prune: Run in a separate daemon 90dfb1c8ad c8d/integration-cli: Adjust TestBuildClearCmd 0f9f9a132e Move 'netip' utils from 'ipam' to 'internal'. 1931a1bdc7 libnetwork/diagnostic: lock mutex in help handler 424ae36046 libnetwork/diagnostic: use standard http.Handler bc94dfc7d2 hack: Load special images on demand 7cb1efebec api/types: move NetworkListConfig to api/types/backend a58b0a3d9c api/types: move Plugin-types to api/types/backend 862caf826c update to go1.21.5 0bf6ffba43 update to go1.21.4 08e4e88482 daemon: raise default minimum API version to v1.24 484e6b784c api/types: move ContainerCreateConfig, ContainerRmConfig to api/types/backend c786c3a974 Dockerfile: update criu stage to Debian 12 (Bookworm) d5eba1bfe5 integration/build: Use setupTest 713c7d49a1 integration(-cli): remove skips for old daemon versions (<20.10) 7f68e3107e integration-cli: TestAPIClientVersionOldNotSupported: use daemon API version 97549d923c integration/container: TestInfoAPIVersioned: adjust API version 410feab962 integration/container: TestKillDifferentUserContainer: adjust API version 757a004a90 libnetwork/diagnostic: drop Init method f270057e0c libnetwork/diagnostic: un-embed sync.Mutex field aa2fa2caa3 un-containerize TestDaemonNoSpaceLeftOnDeviceError 49f3e7d233 Dockerfile: remove APT_MIRROR build-arg baca6cb417 Don't allow port in CIFS URL c8134fa046 vendor: github.com/moby/buildkit v0.12.4 a189832454 add TaskStatus to swagger docs faa843fcef vendor: github.com/gorilla/mux v1.8.1 028ed1bb22 vendor: github.com/spf13/cobra v1.8.0 e18f5a5304 container: internalize InitAttachContext fcb89da9c2 c8d/integration-cli: Skip TestListDanglingImagesWithDigests 61d94850a7 cmd/dockerd: make cobra templates a const 0f163170a7 cmd/dockerd: remove various cobra templating 3bfb6a9420 frozen images: update to debian:bookworm-slim fd40dfaf58 Dockerfile: remove uses of DEBIAN_FRONTEND e72c4818c4 Dockerfile: update to Debian "bookworm" (current stable) 8ae94cafa5 cifs volume resolves hostname correctly. 3a0af5ad30 integration/TestLiveRestore: Wait for process to exit 61d8f57f2a daemon: kill: use log level to "warn" if container doesn't exit in time e262cd38ad c8d/integration-cli: Adjust DockerRegistryAuthTokenSuite 49d088d9ce builder-next: fix timing filter for default policy c3eed9fa3e integration-cli: fix TestDaemonICC tests for newer iptables versions c5ea3d595c liverestore: Don't remove `--rm` containers on restart 9b399814e7 integration-cli/TestCrossRepositoryLayerPush: Change repo name 9709b7e458 quota: increase sparse test-image to 300MB 65cfcc28ab hack/dind: update comments around AppArmor cfb8ca520a hack/dind-systemd: make AppArmor work with systemd enabled 203bac0ec4 daemon/c8d: Unmount container fs after unclean shutdown 964ab7158c Explicitly set MTU on bridge devices. 05523e289b c8d/integration: Adjust TestSaveCheckTimes b1676a289c daemon: ContainerRename: move log args to log fields d2865f1e8a daemon: win: set DNS config on all adapters 0fd0e8255f daemon: build ports-related ep options in a dedicated func 7786f8512b Revert "testing: temporarily pin docker-py tests to use "bullseye"" 4394c61e6c testing: update docker-py to 7.0.0b1 f877360dc1 api/t/swarm: Fix deprecation for ServiceSpec.Networks 681c94ca17 Dockerfile: update buildx to v0.12.0 68e73ceb67 update containerd binary to v1.7.9 2f28582b55 vendor: github.com/Microsoft/hcsshim v0.11.4 f4776ef9df ci(bin-image): skip dco on push tag events 8641d2da3b client: update example in readme 0ab7267ae3 Fix support for pull by digest ba46bda149 update authors and mailmap a3fdad84ad graphdriver/copy: faster copy of hard links fb53da508f vendor: github.com/opencontainers/runc v1.1.10 15bcc707e6 update runc binary to v1.1.10 84036d3e18 daemon/config: change DNSConfig.DNS to a []net.IP 1eadfb0e28 opts: ValidateIPAddress: improve error, godoc, and tests 981a878cf5 vendor: github.com/docker/go-connections fa09c952e3ea (v0.5.0-dev) 677d41aa3b Plumb context through info endpoint f0b89e63b9 Fix missing import for "scope" package 33564a0c03 libnetwork/d/overlay: support IPv6 transport e1d85da306 libnetwork/d/overlay: parse discovery data eagerly d47b3ef4c9 libnet: early return from updateSvcRecord if no addr available f5a611a74c daemon: ContainerRename: use named error-return 8074e7a437 Bump go-connections for TLS 1.3 support d06af368ad c8d: "unremap" the user namespace on commit a7acfffea6 test: Add a test for userns remapped daemon commit 876d4e5484 c8d: cleanup imports in the image builder file 7995e3288f Add until filter to docker image ls Signed-off-by: Rachit Sharma <rachitsharma613@gmail.com> 58785c2932 integration/networking: fix TestBridgeICC 6979503a85 Include port in URL for locally built Swagger docs 755f008c1e Default the auth config domain to the target image domain 7d9d601e6d project: document supported containerd versions 29ac09ee9d Revert "libcontainerd: work around exec start bug in c8d" c1a289e05a docs/api: update redirect metadata for hugo 49e04102c1 Update container-device-interface to v0.6.2 26f63600c1 daemon/snapshotter: Align mounter implementations d5d41c2849 daemon/config: Put params for the default network into a dedicated struct 587ad8845a integration/system: update TestInfoAPI to not use string-matching c1ab6eda4b integration/networking: Test bridge ICC and INC 409ea700c7 integration: Add a new networking integration test suite 02a932d63f Fix case where health start interval is 0 uses default 891241e7e7 seccomp: block io_uring_* syscalls in default profile 3c2b06099d Skip TestPullManifestList when using containerd 6ca1b9e4ce Skip the busybox digest check when containerd is enabled 123ade3763 builder/dockerfile: errmsg: quote build target 7257c77e19 libnetwork/ipam: refactor prefix-overlap checks 4e8ba395f2 integration: TestSaveRepoWithMultipleImages: minor cleanup 0dae0f2b5e integration: TestSaveRepoWithMultipleImages remove redundant remove 30cd8b8fca integration: make TestSaveRepoWithMultipleImages less flaky 1c50526092 daemon: improve daemon start informational log message a99bb24ea8 builder-next: make sure worker platforms normalized for containerd 29977d5058 contrib/check-config: conditionally disable color output. d60de4cafd Move the golangci-lint configuration file to the root dir cd95cd0671 c8d/push: Return error when repository has no tags df34db1158 c8d/pull: Don't wrap `no basic auth` error 5a83bebf76 ci: Setup otel tracing for windows integration tests 29ddf2214d docs(API): Add reason to network connect 403 63a9d72ee8 pkg/tarsum: handle xattrs like archive/tar does 4356962c69 update containerd binary to v1.7.8 38c4ceb00a vendor: github.com/containerd/containerd v1.7.8 34f5793521 vendor: google.golang.org/grpc v1.58.3 bd23c7729e vendor: golang.org/x/tools v0.10.0 205e4de3fd vendor: golang.org/x/mod v0.11.0 153d7e4038 exec/tests: add test for `--group-add` with `--user` 27e064e7e9 c8d/history: Fix nil dereference 808120e5b8 New `host_ipv6` bridge option to SNAT IPv6 connections 9d578a2e6d Cleanup duplicate imports 59c5f6e35b integration-cli: mark dockerCmdWithFail as an helper function 61c78d9438 daemon: Validate MacAddress on container create ee9f0ed895 api: Deprecate ContainerConfig.MacAddress 052562ffd5 api: Add a field MacAddress to EndpointSettings 98323ac114 integration/container: target v1.43 in a soon-to-break test 4f0cab3b74 api: ContainerCreate: re-organize BC conditions 79589354df api: ContainerCreate: remove repetitive nil checks 44a25f31a8 api: ContainerCreate: lowercase ErrEmptyConfig 91eee33f62 api: ContainerCreate: return an error when config is nil 417018659b daemon: remove redundant withResetAdditionalGIDs option 8f756fe679 c8d: show the real image creation date when listing images a73dfe68d3 api: ContainerCreate: init hostConfig and networkingConfig when nil 7e0cb4c46f c8d: Use the labels to get the children of an image f5535d516f c8d: Preserve image labels when tagging 70158284b7 api: fix a nil check on the wrong var d7266afc7e c8d/exec: Add additional groups on exec df3a321164 migrate to github.com/moby/sys/user aeb8972281 daemon: daemon.containerRestart: don't cancel restart on context cancel 52da88201c hack/validate: stop suppressing Xattrs deprecation c44c9dfa79 pkg/tarsum: migrate to (tar.Header).PAXRecords 3cf409aa9e pkg/archive: migrate to (tar.Header).PAXRecords 6a8a792019 pkg/archive: test tar headers are interoperable f2c67ea82f vendor: github.com/klauspost/compress v1.17.2 a7b44ea10f Dockerfile: update github.com/tc-hib/go-winres v0.3.1 0cf113e250 Add unit tests for outgoing NAT rules 619d98ab49 vendor: github.com/moby/buildkit v0.12.3 aad51c0b4e daemon: daemon.shutdownContainer: use context.WithoutCancel dca89c67ef daemon: daemon.containerStop: use context.WithoutCancel 8166818791 c8d: Return the "tag does not exist error" 4af420f978 libnetwork/internal/kvstore: prune unused method 4039b9c9c4 libnetwork/datastore: drop (KVObject).DataScope() 4f4a897dda libnetwork/datastore: drop (*Store).Scope() method 4b40d82233 libnetwork/datastore: un-embed mutex from cache 9536fabaa8 libnetwork/datastore: minor code cleanup 43dccc6c1a libnetwork/datastore: unconditionally use ds.cache 5a72ed3406 integration-cli: remove deprecated dockerCmd and waitRun utilities 06115bf82c integration-cli: DockerCLIPruneSuite: replace dockerCmd 285ab8c861 integration-cli: DockerCLIPluginsSuite: replace dockerCmd e28da7686e integration-cli: DockerCLIPluginLogDriverSuite: replace dockerCmd a837cb444c integration-cli: DockerExternalVolumeSuite: replace dockerCmd 5f884478e5 integration-cli: DockerCLIImportSuite: replace dockerCmd 885eceba1d integration-cli: DockerCLITopSuite: replace dockerCmd 6ce6b63482 integration-cli: DockerCLIHistorySuite: replace dockerCmd 268e72f10f integration-cli: DockerCLIRestartSuite: replace dockerCmd and waitRun c388416aac integration-cli: DockerCLICreateSuite: replace dockerCmd and waitRun 5c297fcc09 integration-cli: DockerCLIStatsSuite: replace dockerCmd and waitRun 7d2a6f2030 integration-cli: DockerCLICommitSuite: replace dockerCmd a4522b6a8f integration-cli: DockerCLIStartSuite: replace dockerCmd f7ddfdbae6 integration-cli: DockerCLIUpdateSuite: replace dockerCmd and waitRun d1108b8a06 integration-cli: DockerDaemonSuite: replace dockerCmd 9c161cc65a integration-cli: DockerCLIVolumeSuite: replace dockerCmd f482857959 integration-cli: DockerCLIImagesSuite: replace dockerCmd f1102e98bb integration-cli: DockerCLIPortSuite: replace dockerCmd and waitRun ba4d491562 integration-cli: DockerCLIRmiSuite: replace dockerCmd 5b3086db1f libnetwork/datastore: prevent accidental recursion 16e4bc9827 integration-cli: DockerCLISearchSuite: replace dockerCmd 89d7b77022 integration-cli: DockerRegistrySuite: replace dockerCmd c867ac4527 integration-cli: DockerCLICpSuite: replace dockerCmd 980a5bc72a integration-cli: DockerCLIBuildSuite: replace dockerCmd 4292f42308 integration-cli: DockerCLISaveLoadSuite: replace dockerCmd 50062b413c integration-cli: DockerCLIRunSuite: replace dockerCmd and waitRun d63cab5193 integration-cli: DockerCLILogsSuite: replace dockerCmd and waitRun 8e2e1f3d28 integration-cli: DockerRegistryAuthHtpasswdSuite: replace dockerCmd d3f4580519 integration-cli: DockerCLILinksSuite: replace dockerCmd and waitRun 58c5986f8b integration-cli: DockerCLIHealthSuite: replace dockerCmd and waitRun 707bb9b9ed integration-cli: DockerBenchmarkSuite: replace dockerCmd and waitRun eafb618594 integration-cli: findContainerIP: replace dockerCmd ba32bebd05 integration-cli: DockerCLIInfoSuite: replace dockerCmd and waitRun 4562f07887 integration-cli: DockerCLIExecSuite: replace dockerCmd and waitRun 8c661b5e9a integration-cli: DockerCLIEventSuite: replace dockerCmd and waitRun cf95278122 integration-cli: DockerCLIAttachSuite: replace dockerCmd and waitRun 1baec48367 integration-cli: DockerAPISuite: replace dockerCmd and waitRun 908821d48a integration-cli: dockerCmdWithFail: remove unused return 02fd8485fa integration-cli: DockerCLINetmodeSuite: replace dockerCmd and waitRun dbb2bd727d integration-cli: DockerNetworkSuite: replace dockerCmd and waitRun 5cc978c6a0 integration-cli: DockerCLIInspectSuite: replace dockerCmd and waitRun 86fb048e59 integration-cli: DockerCLIPsSuite: replace dockerCmd and waitRun b4ff5234bd integration-cli: remove transformCmd utility cdb44010c9 c8d/history: Fill ID for parents without the label d28bd54f2a c8d/history: Fix Tags assigned from parents e97716a95a Fix disk usage test cf9073397c Update check-config.sh 7bb54c3dc5 vendor: gotest.tools/v3 v3.5.1 bcca214e36 libnetwork: open-code updating svc records 33cf73f699 libnetwork: drop (*Controller).nmap 804ef16822 libnetwork: only delete svc db entry on network rm c85398b020 libnetwork: drop vestigial endpoint-rename logic 29da565133 libnetwork: change netWatch map to a set 0456c0db87 libnetwork: refactor isDistributedControl() 749d4abd41 libnetwork: get rid of watchLoop goroutine f05dce8d3a replace some strings with OCI consts e3feb05175 vendor: github.com/opencontainers/image-spec v1.1.0-rc5 0d27579fc7 Ensure that non-JSON-parsing errors are returned to the caller 26730c891a vendor: google.golang.org/grpc v1.56.3 6f625ae65a c8d integration: skip TestImportWithCustomPlatform 9357bcb582 c8d/pull: Return same access denied error as graphdrivers 488559a330 c8d/push: Set distribution source recursively d9b5445f39 c8d/pull: Handle pull all tags 095d2a29a3 distribution: Add Tags 9664f33e0d daemon: release sandbox even when NetworkDisabled 2df698025c HealthCheck: add validation for minimum accepted start-interval 25fb4dd50d switch to go.opentelemetry.io/otel/semconv/v1.17.0 96f85def5b s/HostIP/HostIPv4/ for `com.docker.network.host_ipv4` setting 2a14b6cf60 Use `iptRule` to simplify `setIcc` (code health) d7c6fd2f80 Move `programChainRule` logic to `iptRule` methods (code health) e260808a57 Move duplicate logic to `iptRule.Exists` method (code health) 14d2535f13 Move `iptables.IPVersion` into `iptRule` struct (code health) 4e219ebafb Eliminate unnecessary `iptRule.preArgs` field (code health) 4662e9889c Simplify `setupIPTablesInternal` parameters (code health) 919fe72f60 vendor: github.com/moby/buildkit v0.12.3-dev 40fde69be9 Revert "Return no basic auth creds error when needed" e1bacd18a3 ci: continue-on-error on non-PR with snapshotter enabled 70892220c8 ci: use matrix to test containerd backed image store 03decbc1e6 ci: split tests in a reusable workflow bb7408e851 c8d/changes: Fix concurrents diffs e3d8e979de integration-cli/TestSaveAndLoadWithProgressBar: Skip with c8d f51c5e1a5c c8d/save: Don't save name if exported by digest b5f5987959 c8d/load: Fix `Loaded image` message 42af8795a3 c8d/save: Implement exporting all tags f20abbc96c libnetwork: use conntrack and --ctstate for all rules c279c48a0e Skip TestPullAllTagsFromCentralRegistry 8777592397 Return no basic auth creds error when needed ebef4efb88 api/types: move ContainerLogsOptions to api/types/container 9670d9364d api/types: move ContainerListOptions to api/types/container 7bce33eb0f api/types: move ContainerStartOptions to api/types/container 0f77875220 api/types: move ContainerRemoveOptions to api/types/container 9498d897ab api/types: move ContainerCommitOptions to api/types/container 30f09b4a1a api/types: move ContainerAttachOptions to api/types/container 95b92b1f97 api/types: move ResizeOptions to api/types/container ec69501e94 api/types: move ServiceCreateResponse, and generate from swagger 5b3e6555a3 api/types: move ServiceUpdateResponse 48cacbca24 api/types: move image-types to api/types/image 44dbbeb196 c8d/progress: Remove unused mountable bcbbd9538f c8d/progress: Show Mounted/Exists status bb8bc1ffc8 update to go1.21.3 3bc45d78c9 update to go1.21.2 1800dd0876 vendor: golang.org/x/net v0.17.0 1946aead21 vendor: golang.org/x/crypto v0.14.0 0679ae984b vendor: golang.org/x/text v0.13.0 bc33c27796 vendor: golang.org/x/sys v0.13.0 db806533e6 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230911190601-f082dd7a0cee b81b27c21f vendor: github.com/go-logr/logr v1.2.4 cff4f20c44 migrate to github.com/containerd/log v0.1.0 e1d0aacb6a vendor: github.com/docker/distribution v2.8.3 0cd02ab1b4 integration/c8d: Skip TestBuildSquashParent aca9ea42bd vendor: github.com/moby/buildkit 0.12.3-dev d871a665de daemon/RegistryHosts: Don't lose mirrors a293cd6ab9 vendor: github.com/containerd/containerd v1.7.7 f3aa9e151d c8d: Simplify error handling and distribution source label 5f062032f7 TestPullNonExistingImage: Move to integration 53345fe357 TestPullNonExistingImage: Use subtests 2edb858b18 vendor: golang.org/x/net v0.13.0, golang.org/x/crypto v0.11.0 87de23a6cd vendor: golang.org/x/text v0.11.0 23f2e0fea7 Skip tests that check max concurrency 37ca57e9d5 libnet/d/bridge: inline error checks fcabc48ee4 c8d/load: Handle compressed archives cbc2a71c27 libnet/d/bridge: Don't set container's gateway when network is internal 491758a446 Dockerfile: upgrade Delve c587ba3422 registry: allow mirror path prefix in config 2c4551d86d libnet: resolver: remove direct use of logrus 4de8459265 libnet: add OTEL tracing to the embedded DNS b8ba263099 c8d/rmi: Handle explicit dangling name 25a813e924 c8d/rmi: Don't emit Untagged for dangling images f99c4ec798 c8d/history: Fill ID and Tags for all entries 1f6bacc486 TestDaemonNoSpaceLeftOnDeviceError: Adjust to snapshotters 28d057cb0e c8d/TestPsListContainersSize: Only check if size increased 34400dd4a2 TestPsListContainersSize: Fix size parsing/formatting e0e6ae741e daemon/c8d: Use WithoutCancel instead of context.Background c47cdd5f39 Revert "daemon/logger/etwlogs: rewrite to use go-winio/pkg/etw" 6f27bef9fc daemon/c8d: Use non cancellable context in defers 77f7c83114 c8d/push: Show progress only on blobs e8a7a9435f Dockerfile: update test-registry to v2.8.3 5b16dd6469 Remove duplicated trace logs ad877271f3 Limit OOMScoreAdj when running in UserNS ("Rootful-in-Rootless") 3d70af4ee4 adjust stats sampling order 16063c7456 vendor.mod: bump go line to 1.20 a4822abe37 c8d: Skip TestPullFailsWithAlteredManifest f9f439763a c8d/TestPullFailsWithAlteredManifest: Adjust error message 4001241ccf c8d/TestPullByDigestNoFallback: Adjust error message 9e3ed7b429 pkg/chrootarchive: fix Darwin build e465ebf2f3 update to go1.21.1, and fix download-URL aa282973d4 Dockerfile: use GOTOOLCHAIN=local f66c000229 c8d: Fix getting the platform of a single-platform image 2c89640ab9 distribution: TestPullSchema2Config fix test response a9fcb775e5 integration-cli: fix getTestTokenService not sending header 3197160114 daemon: Daemon.SetNetworkBootstrapKeys: make error-handling idiomatic f91c3cfda6 daemon: Daemon.initNetworkController: remove intermediate var dcc75e1563 libnetwork: Controller: agentInit, agentDriverNotify rm intermediate vars a384102fdf libnetwork/datastore: Store.Map, Store.List: remove intermediate vars bb5402e6fb libnetwork: Controller: getKeys, getPrimaryKeyTag: slight refactor 603f49706e libnetwork: Controller: getKeys, getPrimaryKeyTag: prevent panic f6e44bc0e8 internal: Add compatcontext.WithoutCancel 95aea39348 Make one-shot stats faster 618d9b5d54 libnetwork: nwAgent: un-export mutex 7cda3fb7b5 libnetwork: inline populateSpecial NetworkWalker ca1307c56e libnetwork: Controller: remove mutex for "store" a8ea752a93 libnetwork: Controller.cleanupLocalEndpoints: return errors 2e60051c92 libnetwork: Controller.sandboxCleanup: return errors 642cf261a8 libnetwork: Controller.NetworkByID: remove redundant error-handling 430a5f8581 api: Add method and path to trace operation string 41c186c344 hack: Run integration tests through Delve 42a51cb285 Add support for swarm seccomp and apparmor 0c66111c40 daemon: containers list code refactor 13b775a96e integration-cli/TestSaveAndLoadRepoFlags: Ignore LastTagTime difference 7c202d2fa4 integration-cli/SaveLoad: Don't check `repositories` file 724db8650c integration-cli: Skip TestLoadZeroSizeLayer with c8d 1337a66130 integration-cli: Skip Parent tests with c8d d5b067e04a ci(buildkit): remove regex skipping tests with digest inconsistency 286704bf6f ci(buildkit): expose github runtime for gha tests 34e71b374b builder-next/a/ci/pull: strongly type flightcontrol.Group c8773e10b1 builder-next/wrapper: use new exptypes constants a728bd0ee9 builder-next/pull: use ResolveMode.String() helper 221b73e23d builder-next: apply source policies on config resolve 2246297ae6 builder-next: adopt new wrapped types c217e3c87a vendor: github.com/moby/buildkit v0.12.2 8cd5f04ea3 daemon/c8d: use new containerd LabelDistributionSource constant fd6dd6935b vendor: github.com/containerd/containerd v1.7.6 79a4cbbec9 builder-next: make stub executor generic d7a31cfb2d libnetwork: Sandbox.resolveName: slightly simplify locking f549aaa205 libnetwork: Sandbox.resolveName: add fast-path for alias lookups 9249b34be8 libnetwork: Sandbox.resolveName: rename vars for clarity 4401ccac22 libnetwork: Sandbox: remove some intermediate vars 0e80073e01 daemon: strongly type containerd log.OutputFormat 4ff252456b libnetwork: rewrite Network.isClusterEligible to return agent 6203e3660d libnetwork: Endpoint: return early if no agent was found 6eeef51c6a libnetwork: Controller.agentSetup: use structured logs 8b95ea4a35 libnetwork: Controller.agentSetup: remove redundant condition e852ba55a5 vendor: github.com/Microsoft/hcsshim v0.11.1 06a640084f Fix graphdriver lookup in makefile 093481618d c8d: Skip the test that checks Config.Image e6907243af client: negotiate api version before handling version-specific code 3936c57294 c8d: test a backend dependent error on pull 207c4d537c c8d: Fix `docker diff` 601c9b29e6 c8d/pull: Fix stale Downloading progress 313a090c0e libnetwork/osl: add some TODOs 9d3b1f9419 libnetwork/osl: make constructing Interfaces more atomic 47f9e70385 libnetwork/osl: Namespace.Restore: conditionally fetch IPs ee5a91e663 libnetwork/osl: Namespace.Restore: flatten nested conditions 299bd58c5a libnetwork/osl: Namespace.Restore: rename vars for readability 7b96663082 libnetwork/osl: Namespace: inline setGateway and setGatewayIPv6 bd17d27658 libnetwork/osl: Namespace: make error-handling more idiomatic 0b4a70ca2c libnetwork/osl: Namespace: programRoute, removeRoute rm path arg 542fe0da40 libnetwork/osl: Namespace: make mutex private 338fc49060 libnetwork/osl: implement Namespace.RemoveInterface 3ff75aeb07 c8d/pull: Deprecation notice for schema1 manifests 2cb94ade6c distribution: Extract schema1 deprecation notice 39fe25b69e c8d: Fix getting image with platform 68b67b3230 c8d/pull: Support legacy schema1 prettyjws manifests d5425f28ae Don't run tests twice bddd826d7a profiles/apparmor: deny /sys/devices/virtual/powercap 83cac3c3e3 oci/defaults: deny /sys/devices/virtual/powercap 2394b07bce c8d: Number of containers using an image e19e541e2c libnet: add comment to ipamType acf825def2 api/t/net: test EndpointIPAMConfig.Validate() 3092b261e2 daemon: move most of validateEndpointSettings into api/t/net 554036040b vendor: github.com/AdaLogics/go-fuzz-headers v0.0.0-20230811130428-ced1acdcaa24 6fc3ead321 vendor: google.golang.org/grpc v1.56.2 73041028b6 vendor: google.golang.org/protobuf v1.31.0 54dc8d2968 vendor: github.com/cenkalti/backoff/v4 v4.2.1 d97e4300ee vendor: google.golang.org/api v0.114.0 d50585b05b vendor: golang.org/x/tools v0.8.0 51d8a975ab vendor: golang.org/x/oauth2 v0.7.0 9670db3904 vendor: golang.org/x/crypto v0.9.0 a046616249 vendor: golang.org/x/sys v0.10.0 f29155950f vendor: golang.org/x/sync v0.3.0 0354791147 vendor: github.com/klauspost/compress v1.16.5 87dd1de046 vendor: github.com/tonistiigi/vt100 v0.0.0-20230623042737-f9a4f7ef6531 bd6cadffb0 vendor: github.com/containerd/continuity v0.4.2 6d93db06db vendor: github.com/vbatts/tar-split v0.11.3 171ecf8cf2 vendor: github.com/vishvananda/netns v0.0.4 81ab8db1c3 api/t/net: add missing comment to ValidateIPAM 04a47e88d2 api/t/net: move endpoint structs into endpoint.go 19c07198b6 daemon: Check if endpoint address is in allowed range bfd8c6deb7 daemon: Validate EndpointSettings.IPAMConfig.LinkLocalIPs 4bd0553274 daemon: Return all validation errors for NetworkingConfig and EndpointSettings ff503882f7 daemon: Improve NetworkingConfig & EndpointSettings validation 4c03618fab registry: remove jsonmessage dependency 6c563cda82 c8d: fix TestRemoveContainerAfterLiveRestore 0c4397deaf api/pull: Validate repo name ccb37fa567 imageService/PullImage: Move reference parse to api 28861e0c47 c8d: Skip TestRemoveImageGarbageCollector bf692d47fb deprecate pkg/loopback (utility package for devicemapper) 96faee9762 libcontainer: client.processEventStream: use locally scoped variables 32e2c53467 c8d: Fix pull progress update 5a4962f80d c8d: Refuse images with digest algo when tagging bd523abd44 remove more direct uses of logrus 1ffbbe798a vendor: github.com/containerd/containerd v1.6.24 7f281907dd c8d/push: Add missing message about repository babf907bfd c8d/push: Support pushing all tags 7ec9f304e9 daemon/cluster: create managed ctr with multiple EndpointsConfig 5e15ed314b api: Improve error on ContainerCreate with multiple endpoints cc9c930e29 vendor: github.com/Microsoft/hcsshim v0.9.10 24102aa8ca update containerd binary to v1.7.6 bbcd662532 api: Allow ContainerCreate to take several EndpointsConfig for >= 1.44 35e9d688ba libnetwork: remove netWatch.remoteEps, as it's unused 8ae5dc4aae libnetwork: Network.updateSvcRecord: remove unused localEps arg 37b2ea9a8d libnetwork: Controller.processEndpointCreate, Delete: remove nmap arg 62e55fd58a Add support for registry token in containerd pull logic 14c5f7bf1d contrib: outline purpose of download-frozen-images-v2.sh 0937aef261 libcontainerd/windows: Don't reap on failure b805599ef6 libcontainer/windows: Remove unneeded var declaration 55b664046c libcontainer/windows: Fix process not being killed after stdio attach failure 9c84994830 libnetwork/portmapper: remove unused PortMapper.checkIP f5d6af13d0 libnetwork/portmapper: un-export PortMapper.Allocator 863909a749 libnetwork/portmapper: New(): remove unused argument 5ab8d41d9f Add dmcgowan as curator de2447c2ab daemon: overlay2: Write layer metadata atomically 78479b1915 libnet: Make sure network names are unique 5fa011dc0c vendor: resenje.org/singleflight v0.4.0 fd15ddbc30 daemon: GetImageAndReleasableLayer: simplify "FROM scratch" case 4229032676 daemon/containerd: use "DiffID" type for diff fields 5d5eeac310 daemon: automatically set network EnableIPv6 if needed 0313544f4a c8d: Handle userns properly c63a952dc9 c8d/builder: Don't append empty tar layer to manifest 9127285985 c8d/builder: Lease layer snapshots f22b112005 c8d/commit: Unpack committed image 8832cdf6e1 c8d: Common unpack code for specific manifest c6bded3475 c8d/builder: Don't use diffID as snapshot parent 8c7e19c5ff c8d/builder: Set empty diffID for rolayer 6ebfa57364 c8d/builder: Don't mount the rolayer snapshot c41121cc48 update to go1.20.8 4acbf7d8c3 c8d: disable schema1 registry integration tests 833b514d98 c8d/mount: Create same directory owners as graphdrivers a8975c9042 api: Add consts for predefined networks 12e27dfd8f Fix host_ipv4 bridge option when IPv6 and ip6tables are enabled 7c0f6741eb go mod tidy cd204f1118 libnetwork/osl: Namespace.DeleteNeighbor: remove intermediate vars 4215a1542b libnetwork/osl: Namespace.DeleteNeighbor: remove osDelete argument bc77104fed libnetwork/osl: Namespace.DeleteNeighbor: don't warn on non-existing neighbor 5e7eade1f7 integration: don't poll for containers to be running b7d29c1e23 registry: un-skip some tests that don't require root de27973538 registry: merge validateEndpoint into newV1Endpoint 6cc6682f5f daemon: fix under what conditions container's mac-address is applied 820f37b1a6 hack: compile w/o optimizations & inlining when debugging c44f8958f6 vendor: github.com/cncf-tags/container-device-interface v0.6.1 fa3ddc5116 distribution: newRepository: remove naked return and intermediate vars 43740ab642 registry: remove intermediate vars in mock 550e628f05 registry: newV1Endpoint: make it clear we skip validation for Docker Hub 5728516371 c8d/image: Allow truncated id to have sha256: prefix c2004fb8c4 hack: Add TEST_IGNORE_CGROUP_CHECK 7e506f71f3 registry: v1Endpoint.ping: include URL in debug log 0c6f8f9290 registry: v1Endpoint.ping: don't io.Readall the response e9ad878df6 registry: v1Endpoint.ping: add fast-path for X-Docker-Registry-Standalone 9e797a6db9 c8d: Remove the panic from UpdateConfig 4982c70db4 integration-cli: Skip TestRmiParentImageFail when using c8d snapshotters 0f7a65e59b registry: remove use of v1 Version field and X-Docker-Registry-Version 3d8b8dc09a Use process substitution to redirect to tee c0ece8d4f3 integration-cli: Use different label in TestBuildMultiStageGlobalArg 081b74b97d c8d/builder: Store parent in c8d image label 5f59f7bb49 integration/container: combine TestResize tests into subtests a4ceb0e4ac integration/container: TestResize, TestResizeWithInvalidSize: rm poll.WaitOn ee7ca6822a integration/container: fix flaky TestResizeWhenContainerNotStarted da5ed8b35b CI: Switch to use tracing action a3c97beee0 image: implement CheckOS, deprecate pkg/system IsOSSupported 150b657bad pkg/system: move ErrNotSupportedOperatingSystem to where it's used 9b7784781d Add test for buildkit history trace propagation 3b4ccb2eca CI: Setup otel tracing for integration tests e8dc902781 Wire up tests to support otel tracing 642e9917ff Add otel support 776c376227 c8d: Better pull progress 1cb45e582c c8d/import: Don't close compressed stream twice b5376c7cec pkg/idtools: remove sync.Once, and include lookup error 0be416dfdc distribution: filterManifests split complicated condition 150b1c8c73 daemon: daemon.createSpec: remove uses of logrus dbb4d54e01 c8d: Add image save events 09470db089 c8d: Add image pull events 1847dc4b7f c8d: Add image push events 1148a24e64 migrate to new github.com/distribution/reference module dffccfd0f1 integration-cli/build: Alias `cmp` as `is` 5dbd198b53 integration-cli/build: Parse multiline `images -q` output 96516002cc c8d: Print the tag, digest and size after push 417328e44e libnetwork/osl: remove dead code 237eb3b5f1 docs(api): rephrase description for /images/create 0ffa3dd870 daemon/c8d: Use Docker imagespec 14af90b868 c8d/integration/TestBuildOnBuildCache skip parent check 366a5f1d74 image/spec: Add Go structs 536826d66f image/spec: Add Healthcheck.StartInterval (v1.3) 75097cf09a test: remove platform related timeout values 6dd78a9ac2 image/spec: Fix typo in "superseded" 84a4f37cf7 test: use info from the version endpoint for arch checks 159b168eea test/integration: Remove checks for "not arm" in tests ebb9fade23 makefile: use info -f to get the current storage driver c243efb0cd client: TestImageTagInvalidSourceImageName remove invalid test-case 3a4a04e462 distribution: simplify mocks d864d1eb97 image/spec: add back versioned files b8de6c01b5 image/spec: rename v1.2.md to spec.md c3f2bd1009 image/spec: rename v1.1.md to spec.md 7ff38506ab image/spec: rename v1.0.md to spec.md 32d5e6312d image/spec: use permalink to versioned documents 7b7019a4da image/spec: add missing "Shell" field (v1.2) 5380f3f0c4 image/spec: add missing "ArgsEscaped" field (v1.1, v1.2) f33370219b image/spec: add missing "OnBuild" field e19edd3f25 image/spec: minor fixes and touch-ups in markdown files b9f9e20f01 daemon: Daemon.killWithSignal(): don't discard snapshotting errors af535233cc daemon: Daemon.killWithSignal(): don't discard handleContainerExit error 8c6a46f643 libnetwork: Endpoint.AddStaticRoute don't create StaticRoute if unused 1dcb11f81d libnetwork: Endpoint.InterfaceName: remove redundant nil check a9a0ffaf51 testing: update docker-py 6.1.3 f6959bc597 test-docker-py: skip AttachContainerTest::test_run_container_reading_socket_ws e0f171f342 testing: update docker-py 6.0.1 79a0f82ca1 test-docker-py: remove comment about docker 17.06 limitations be90e5e1d4 libnetwork: Controller.addServiceBinding: fix duplicate word in comment 77c2613d3a libnetwork: fix some missing imports on macOS and FreeBSD 5da2dd98e9 registry: move search-related code to separate files f1a7028900 registry: rename v1-endpoint tests to have a common prefix 19f6f0b3db registry: move v1 endpoint tests to endpoint_test.go 47bf587f84 registry: ResolveAuthConfig: rename var that collided with import a0a8d9d057 libnetwork: notify another driver registerer 2689484402 volume/local: Don't unmount, restore mounted status f1a6e16258 errdefs: remove redundant import comments b6ba2a4f75 errdefs: remove gotest.tools dependency 3f8cbd8ec9 registry: update some godoc e10eca3d1a daemon/containerd: rename some vars that collided with imports aefbd49038 daemon/containerd: newROLayerForImage: remove unused args 28d201feb7 daemon/containerd: log errors when releasing leases d43e61758a registry: deprecate APIEndpoint.Version and APIVersion type aef703fa1b integration/liveRestore: Check volume content 4e4f62b6db distribution: use registry consts for API version in tests aa59b0f5a2 registry: improve error for invalid search endpoints 14b53c6318 registry: simplify `trimV1Address` 062c80199f registry: combine TestEndpointParse and TestEndpointParseInvalid 0f871f8cb7 api/types/events: define "Action" type and consts 10a3a3bc49 daemon: inline some variables when emitting events 9331d6de1e daemon/events; fix TestLoadBufferedEventsOnlyFromPast f6f6c32138 api: ValidateRestartPolicy: improve errors for invalid policies 333e04e84e integration-cli: TestEventsFormat: rewrite test to not use deprecated fields fa79b5d59f integration/container: TestPause: don't depend on deprecated fields 0161aad462 client: TestEvents: don't depend on deprecated fields 5123ae4352 daemon: TestLogContainerEventCopyLabels: inline vars 2928c5ae92 daemon: TestHealthStates: don't depend on deprecated fields 62ec14d9ec daemon/events: verify non-deprecated fields f443006fa2 daemon/events: rewrite test-assertions with gotest.tools 70ad5b818f api/types/events: make events.Type an actual type 5a02ed5e84 integration: use events-consts in tests 9ea50365d6 daemon/events: use events-consts in tests, and fix vars that collided 2f8e957713 Dockerfile: update crun binary to v1.8.7 32e79c464a libnetwork: Network: return early where possible 5512c7e838 libnetwork: Network.Services: remove some intermediate vars d6b8298cfd libnetwork: Network.Services: return early and don't lock in a loop 8b21609654 libnetwork: remove Endpoint.Interface f8181b8875 libnetwork: Endpoint.Iface, Endpoint.Interface remove redundant "if" 6a61bacafe libnetwork/drivers/remote: rollbackEndpoint.Interface: return concrete type dc061d2ed3 libnetwork/drivers/remote: driver.DeleteNetwork: remove var that collided 40b1389917 libnetwork/drivers/remote: remove unused testEndpoint.Interface 15435f7293 libnetwork/drivers/bridge: testEndpoint.Interface: return concrete type 9afb688f5f libnetwork/drivers/bridge: getIPv4Data: remove unused argument 639449f84e libnetwork: nwAgent.bindAddr: change to net.IP b75e831567 libnetwork: resolveAddr: add GoDoc ebe2347ac6 daemon: remove LogPluginEventWithAttributes as it's not used aa764e6009 daemon: logNetworkEvent, logSecretEvent, logConfigEvent rm unused args fa13b0715f integration/internal/swarm: rename max/min as it collides with go1.21 builtin 79495c5b6a pkg/tailfile: rename max/min as it collides with go1.21 builtin df2f25a977 pkg/plugins: rename max/min as it collides with go1.21 builtin 6c036f267f pkg/sysinfo: rename max/min as it collides with go1.21 builtin 55192de9e3 pkg/archive: rename max/min as it collides with go1.21 builtin a3867992b7 daemon: rename max/min as it collides with go1.21 builtin f6b2e34268 Update example in README.md to close cli object 318b3d4fe5 api/types/versions: rename max/min as it collides with go1.21 builtin cb394a62e5 restartmanager: rename max/min as it collides with go1.21 builtin 8f64e2e925 daemon: daemon.logClusterEvent: use events.Type for event-types 3dea2f230a daemon: inline some vars when producing events 385f6429be api/server/router/network: remove empty file 350223201e integration/container: TestCheckpoint: remove intermediate vars b688af2226 api/types: move checkpoint-types to api/types/checkpoint 70baaec6a5 Dockerfile: remove libdevmapper-dev 12d1f4f385 hack: remove devicemapper leftovers and build-tags f6a5318f94 Dockerfile: Windows: update Golang download domains to cut down redirects 2aabd64477 hack: update link to GOPATH documentation b18e170631 CONTRIBUTING.md: update links to golang docs and blog 136e86bb5c api: swagger: update link to Go documentation 4862d39144 docs/api: update links to Go documentation cd49f9affd update golangci-lint to v1.54.2 d52f20048d api/server: format code with gofumpt e9b09b49fd builder/builder-next: format code with gofumpt 73894af9ff contrib/apparmor: format code with gofumpt ce01d779df daemon: format code with gofumpt 211d3a8c32 pkg/stack: format code with gofumpt 95e99e629c pkg/fileutils: format code with gofumpt 6c6e1fb13d pkg/containerfs: format code with gofumpt 1e579a7a2a pkg/sysinfo: format code with gofumpt 263c00f27c testutil: format code with gofumpt b71951c70c container: format code with gofumpt 87cedbe443 image: format code with gofumpt 976da91fb7 pkg/loopback: format code with gofumpt b4d6eca9b8 pkg/chrootarchive: format code with gofumpt 07e6b0ac70 integration: format code with gofumpt 498da44aab remove some remaining pre-go1.17 build-tags 210abfaef6 libnetwork: add godoc to Endpoint 04422f5ec1 daemon: WithNamespaces(): add notes about user-namespaces dd26e6b15e daemon: Daemon.getIpcContainer: make errors less repetitive 3d94eb9bcd daemon: Daemon.getPidContainer: change to accept "id" argument bc7f341f29 daemon: WithNamespaces(): fix incorrect error for PID, IPC namespace bd5d6480e7 daemon: WithNamespaces(): remove redundant "if" 6eaefe5bf5 daemon: WithNamespaces(): use switch instead of if/else if/else 43aa67a982 daemon: WithNamespaces(): use OCI-spec consts for namespaces 759698581e daemon: WithNamespaces(): inline variables 13648a0e21 daemon: remove Daemon.checkContainer and related utils 78828f9b58 test/integration: Download the registry binary bd2c553870 Fix some broken executable flags 143b3b2ef3 test: update registry version to latest 01214bafd2 c8d/builder: Don't drop fields from created image b92cf68add libnetwork/osl: remove Sandbox and Info interfaces c881360e88 libnetwork/osl: remove Interface.Master() as it's unused b9bf407929 libnetwork/osl: remove Interface Interface 8631e69cdf libnetwork/osl: remove Sandbox.InterfaceOptions() etc. f3d29db6a2 libnetwork/osl: remove Sandbox.NeighborOptions() etc. a365fb0e9d libnetwork: move more osl.Sandbox related code to Linux-only files 95abde479a libnetwork: implement Controller.setupOSLSandbox 35456d2eb1 libnetwork/osl: add godoc to networkNamespace aecfa55c4c libnetwork/iptables: (Add|Del)InterfaceFirewalld: check firewalld status 4b0d38de06 TestDiskUsage: don't panic if results don't match c0568a95d8 integration/container: check some error-types in tests 2b583c0923 daemon: cleanupContainer: slightly cleanup error messages 69cf2ad6a5 daemon: cleanupContainer: don't fail if container is already stopped 20b770237c daemon/network: Settings: move sandbox fields together 405f571ae8 daemon: updateSandboxNetworkSettings: remove unused error-return 2eccf0e8d1 libnetwork: Controller.NewSandbox: don't generate ID if not used 6cbe06ff3f test: Skip graph driver tests when using containerd snapshotters 3553b4c684 replace dockerfile/dockerignore with patternmatcher/ignorefile a479b287c7 vendor: github.com/moby/patternmatcher v0.6.0 bedcc94de4 daemon: Handle NotFound when deleting container lease dfaff9598c c8d/run: Allow running container without image eb56493f4e c8d/commit: Don't produce an empty layer 3e8af0817a ipam: Replace ChildSubnet with parent Subnet when its mask is bigger 4f47013feb api: Validate IPAM config before creating a network 2be118379e api/types/container: add RestartPolicyMode type and enum b8ff8ea58e Don't return an error if the lease is not found dff53a02ef libnetwork: remove Controller.Sandboxes as it's no longer used d6f340e784 gha: set 10-minute timeout on "report" actions f44fbab3ec libnetwork: remove Controller.WalkSandboxes and related code 6dba98cf38 libnetwork: implement Controller.GetSandbox(containerID) 6c4153f348 libnetwork: parallelTester: move vars closer to where they're used e690cdb6a3 libnetwork: remove redundant sandboxTable type 3c10db669e libnetwork: remove unused SandboxKeyWalker cc414a2012 libnetwork/osl: remove Sandbox.Info() 3b9f4395cf libnetwork: remove InterfaceInfo interface d146e592d8 api/t/network: Move IPAM types to their own file 219d4d9db9 ci(bin-image): check repo origin d125823d3f hack: use long SHA for DOCKER_GITCOMMIT 2010f4338e ci(bin-image): clean up metadata ad91fc1b00 ci(bin-image): clean up env var handling 5dc44f03f0 classic builder: align "removing intermediate container" output 06e540c271 libnetwork: move all SandboxOptions to a separate file 2afa4eba43 libnetwork: resolver: Resolver.dialExtDNS use joinHostPort and cleanup 3218e26a22 libnetwork: resolver: remove some intermediate variables 986de11464 libnetwork: resolver: remove setCommonFlags, use createRespMsg 7f965d55c7 volume/local: Fix debug log typo 678ce73907 windows: update default base image for dev container 0c522c6bbf libnetwork/datastore: remove deprecated scope consts 73ffb48bfb ci(bin-image): populate DOCKER_GITCOMMIT, take 2 9aed6308d4 ci(bin-image): populate DOCKER_GITCOMMIT c22ec82477 libnet: Fix error capitalization bd0111c1f4 libnet: Replace NoServiceError with UnavailableError 42d34e40f9 libnet: Replace BadRequest with InvalidParameter a64adda4e7 c8d/inspect: Ignore manifest with missing config c85a33d74b libnetwork/iptables: un-export ZoneSettings, and slight refactor d979d2af45 libnetwork/iptables: fix TestFirewalldInit 513063bcf9 libnetwork/iptables: ProgramChain: don't fail if interface not found 64de635626 Add a temporary drop-in replacement for errors.Join cff341e5e6 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230815220644-3f2e40b3ed51 56b62640a2 libnetwork: Controller.NewSandbox: use named error-return cbe692ffd1 libnetwork: Controller.NewNetwork: use named error-return e2f9d6c4c3 libnetwork: rename vars that collided with builtins e8f0f5a4ce libnetwork: rename agent type to reduce collisions 0503cf2510 libnetwork/drivers/bridge: setupIPChains(): name output variables b9d9504df5 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230808164555-1983e41a9fff 7b66ae1531 vendor: golang.org/x/crypto v0.3.0 59aa3dce8a remove s390x and ppc64ls pipelines ea2d686468 libnetwork/iptables: DeleteConntrackEntries: remove "totals" returns f1240393d9 libnetwork/iptables: reduce DeleteConntrackEntriesXX debug logs 18a0ff2b2b daemon: Daemon.handleContainerExit(): rename err-var for clarity 178125ae39 libcontainerd/supervisor: explicitly ignore process kill errors f8363690ca daemon: Daemon.handleContainerExit(): reduce ambiguity in error handling 72648f0ba6 oci: DefaultLinuxSpec: use OCI-spec consts for namespaces 17571ff199 integration/internal/container: add WithPIDMode option 917dae58e1 integration/internal/container: remove import aliases e0f5bb4820 daemon: withLibnetwork(): return early if networking is disabled 225691e258 daemon: withLibnetwork(): use OCI-spec consts for namespaces 8376595621 libnetwork: un-export SetExternalKey 91a3a95385 libnetwork/options: OptionExecRoot: skip osl.SetBasePath on non-Linux 48ea7ec970 libnetwork/osl: use filepath.Join() only when changing basedir 8bf62010a4 libnetwork: merge linux-only test-files c0562d4eed libnetwork: rename unix-only testfiles 8070f15966 libnetwork/drivers/bridge: rename some linux-only files 014fefee1d libnetwork/drivers/bridge: minor formatting fixes 80d158e0de daemon: remove containerNotModifiedError dffe634c19 daemon: Daemon.ContainerStart(): make validateState a regular function 6da42ca830 c8d/diff: Reuse mount, mount parent as read-only 051d51b222 c8d/export: Use ref counted mounter 303e2b124e integration: Add test for not breaking overlayfs 05deecaa45 internal/testutils/netnsutils: move utils that were not used on Windows d4e1c072e2 libnetwork: move resolverIPSandbox closer to where it's used f661bd8ee5 libnetwork: Resolved.SetupFunc() minor cleanup de4ba13400 libnetwork: move resolver tests that were skipped on Windows 1e4e9161c5 libnetwork: move TestDNSOptions to a non-windows file bf1fb97575 daemon: Daemon.containerStart(): add comment to clarify error-type b039bbc678 update runc binary to v1.1.9 79b467808e vendor.mod: github.com/opencontainers/runc v1.1.9 74feadacf8 integration/internal/container: refactor CreateExpectingErr 0899ba4a3f integration/internal/container: add NewTestConfig utility 3cb52a6359 integration/internal/container: use consistent name for api-client 26be2bc6b9 integration/container: use consistent name for api-client 38e26c4717 daemon/create.go: Fix error capitalization 435ecfe6e0 test/volume: Replace Check with NilError where suitable 3d3ce9812f integration/tag: Move to client unit test 742475bc8d daemon/create.go: Supersede github.com/pkg/errors 4cc796ab93 client: Client.buildRequest: use http.NewRequestWithContext 58dc0fcd1e client: Client.Ping: re-use request when falling back to GET 87fff769f4 client: Client.checkResponseErr: change errorMessage to an error 71da8c13e1 integration/tag: Use subtests and make parallel 11a0c2779b pkg/plugins: Rewrite with assert.Check 43956e1b71 hack/test: Don't exit early when all tests are filtered out ae008570ff hack/test: Split -test.run for integration and integration-cli 510cac5f5b hack/test: Fix checking if integration-cli are filtered out 8a1ca49657 libnetwork/osl: nwIface: add godoc 16785b9b7b libnetwork/osl: move all networkNamespace methods together 5b0fa7aaca libnetwork/osl: some minor nits 972d80b596 libnetwork/osl: clean up newInfo() a bit 0da721ec38 libnetwork/osl: make newKey and newInfo a t.Helper() d9442aab88 libnetwork/osl: nwIface: remove mutex altogether 2afe18d2ce libnetwork/osl: nwIface: unexport sync.Mutex 8b989ac665 libnetwork/osl: let's not do this, etc. 3d0a7d819c libnetwork: remove Network.Info() and remove NetworkInfo interface 74354043ff remove uses of libnetwork/Network.Info() 36a0946aa9 libnet/ipamapi: Remove unused errors fd4ec26313 daemon/network.go: Fix error capitalization 64e01c627f daemon/network.go: Remove github.com/pkg/errors pkg 94dc10378d libnetwork: network.requestPoolHelper: slightly optimize order of checks 67e2c1d482 libnetwork: network.requestPoolHelper: remove dead code ad68883c5a libnetwork: network.requestPoolHelper: don't defer in a loop 32fcde6d9e libnetwork: network.IpamConfig, network.IpamInfo: name output vars df03357d19 libnetwork/ipam: move PoolID.FromString() to a PoolIDFromString() func 808fed550d libnetwork/ipam: PoolID.String(): don't use fmt.Sprintf 87fc8c772b libnetwork/ipam: Allocator.RequestPool: name args, output vars 6dbc9c1c53 libnetwork/ipam: Allocator.RequestPool: mark options arg as unused 7047964bd6 libnetwork/ipam: Allocator.RequestPool: make parseErr only handle errors 821ef5cbaf libnetwork/ipams/null: use consts for fixed values 05ef5559c3 pkg/plugins: override timeouts during tests 6841a53d17 hack/test: Don't fail-fast before integration-cli 2aa24519da ibnetwork/drivers/bridge: newLink: validate before creating 5d722b35d9 libnetwork/drivers/bridge: bridgeNetwork.getEndpoint(): move lock eba15fe905 libnetwork/drivers/bridge: driver.link: don't defer in a loop 76b736c242 libnetwork/drivers/bridge: driver.link: name return var for defer handling ea5f21ceac libnetwork/drivers/bridge: don't convert IP to string and back again 8b6203b613 libnetwork/drivers/bridge: link.Enable: don't register reload on error 0f4ba145ee libnetwork/drivers/bridge: link.Enable, link.Disable use iptables.Action 40adb4317b api: Remove duplicated check on CheckDuplicate 3e52785aae volume/drivers: use plugin Content-Type headers v1.2 481dde8b70 libnetwork: use plugin Content-Type headers v1.2 93b5c31541 integration-cli: use plugin Content-Type headers v1.2 b663c7c5c3 pkg/plugins: add convenience alias for VersionMimeType c8930105bc fix: Normalize `RLIMIT_NOFILE` to sensible defaults 4f9540f19f daemon: remove some intermediate vars and some cleanup 8153a7760e daemon: Daemon.tryDetachContainerFromClusterNetwork: cleanup a018bb1da7 daemon: Daemon.initializeNetworking: remove var declaration 12d8029d56 daemon: Daemon.getNetworkedContainer: remove intermediate var d1aa1979b4 daemon: buildEndpointInfo: minor refactor 7a59913b1a Add CDISpecDirs to Info output 0034a98eb1 pkg/plugins: Guard storage and unparallel racy tests bbb9255562 Skip CDI driver registration if CDISpecDirs is empty 3b71197fb8 Set default CDI spec dirs after parsing args f3e62199ea daemon: Remove unneeded error wrapping in verifyNetworkingConfig d7a9f15775 bakefile: Remove default value of DOCKER_GITCOMMIT 2b028dc55b daemon: Daemon.buildSandboxOptions: use range when looping 33b4285eb1 daemon: Daemon.buildSandboxOptions: don't use PortBinding.GetCopy() ddb3d46533 daemon: Daemon.buildSandboxOptions: remove intermediate vars 27a27db73f daemon: Daemon.buildSandboxOptions: move vars to where they're used 91cab53a3e libnetwork: make OptionDNS, OptionDNSOptions, OptionDNSSearch take a slice 2cbed9d2a8 daemon: inline Daemon.getDNSSearchSettings 603547fa19 daemon: change Daemon.setupPathsAndSandboxOptions to a regular func 07f2df69c7 daemon: buildCreateEndpointOptions: minor nits 5158a33f15 daemon: buildCreateEndpointOptions: use range when looping 1c6dae1291 daemon: buildCreateEndpointOptions: don't use PortBinding.GetCopy() cc79024761 daemon: buildCreateEndpointOptions: remove intermediate vars 45de99aa06 daemon: buildCreateEndpointOptions: don't parse empty vip 7d429125d2 daemon: buildCreateEndpointOptions: move vars to where they're used 6ce92aa523 daemon: buildCreateEndpointOptions: skip getPortMapInfo() if not needed 9e9a17950a daemon: FindNetwork: minor cleanups 8c4af5dacb distribution: show image schema deprecation on all registries 982bc0e228 distribution: update warning for deprecated image formats 5bd8aa5246 integration: Add RunAttach helper d7fb4dd170 integration: Extract stream demultiplexing from container.Exec 584f016e99 docs/api: remove stray underscore in version-history.md d5cb7cdeae update to go1.20.7 fced566714 client: move resolveTLSConfig to a Client.tlsConfig() 47af265234 client: Dialer: inline fallbackDial 74d9850bb9 client/buildkit: ClientOpts: update docs to use doc-links, and inline 971083d419 api: search: deprecate is_automated field, and is-automated filter 5e2a1195d7 swap logrus types for their containerd/logs aliases 1a51898d2e TestDaemonProxy: use new scanners to check logs 476e788090 Fix daemon proxy test for "reload sanitized" e2d400bea9 libnet/d/bridge: Inline InvalidLinkIPAddrError 6df4a00bb9 libnet/d/bridge: Remove pointless BadRequestError impl 7c13985fa1 libnet/d/bridge: Inline InvalidIPTablesCfgError d8f42ee21a libnet/d/bridge: Inline IPTableCfgError a40d00c421 libnetwork: remove ErrDataStoreNotInitialized 66b379785e libnetwork: remove unused InvalidContainerIDError d8cd4f6421 libnetwork: remove unused UnknownEndpointError fc5c16f491 libnetwork: remove unused NetworkTypeError e9f1888560 libnetwork: remove unused ErrInvalidConfigFile eadaaa7f79 libnetwork: remove unused ErrNoContainer 99ab11bb90 libnetwork: remove unused ErrInvalidJoin 9174eb00e2 libnetwork: remove unused ErrInvalidNetworkDriver 7c2665298a libnetwork/types: move GetMinimalIP to overlay-driver and un-export d9b7a5f01a libnetwork/types: remove ErrInvalidProtocolBinding 4445169cb5 libnetwork/types: remove PortBinding.Equal 4269712d06 libnetwork/types: remove unused UUID type c203171ef6 libnetwork/types: remove unused RetryError and TimeoutError 6d37ab0a83 libnet/d/bridge: Change interface implemented by error types 03db2f8c3d libnet/d/bridge: Remove unused error types 8197752d68 TestDaemonProxy: check proxy settings early 4d674897f3 vendor: github.com/containerd/containerd v1.6.22 5438356348 libnetwork: rename vars that collided with builtin and type ce053a14aa vendor: gotest.tools/v3 v3.5.0 be0f4a4737 libnetwork/driver: remove discoverAPI from Windows and Windows overlay 6ec03d6745 libnetwork: move datastore Scope consts to libnetwork/scope 86299bbd35 vendor: github.com/opencontainers/image-spec v1.1.0-rc4 fca38bcd0a libnetwork/driverapi: make discoverAPI an optional part of the interface 490fee7d45 api/types/filters: fix errors not being matched by errors.Is() bf48d3ec29 update containerd binary to v1.7.3 a78381c399 update containerd binary to v1.7.2 0d76fc431a libnetwork/remote: newDriver(): return concrete type 3e8fda0a70 windows: fix --register-service when executed from within binary directory d69b1fdb72 volume/mounts: cleanup tests da9e44a620 libnet/d/bridge: Allow IPv6 ICC from any IP address 31d09f6ee9 testutils: move Logger interface to testutils 492c09276d tests: Move libnetwork/testutils to internal/testutils/netnsutils 13180c1c49 daemon/list: Drop unused arg from containerReducer 68991ae240 daemon/list: Refactor refreshImage e5cffc07b3 c8d: Fix TestImagesFilterMultiReference 1d8108b009 c8d: images/json, add image labels to the response a0bba26919 c8d: Populate RepoTags instead of adding a new image to the list ad2760ec80 integration: Move image filter tests to integration 4d8e3f54cc c8d/container: Follow snapshot parents for size calculation 5a39bee635 daemon/list: Replace ErrImageDoesNotExist check 7379d18018 c8d/readConfig: Translate c8d NotFound to errdefs f3b76bc1da daemon: refactor buildNetworkResource to use a struct-literal a8c0b05052 daemon: split buildDetailedNetworkResources into two functions 8caf974dcd daemon: refactor buildEndpointResource 437ced91ec daemon: refactor buildIpamResources ca5ac19ea4 daemon: refactor buildPeerInfoResources 02dc5ea720 libnetwork/datastore: remove Store.KVStore() 0f7bf67f83 pkg/plugins: TestGet(): use sub-tests e1ad4aa002 pkg/plugins: make package-level socketsPath var a LocalRegistry field 5bd44cf3c4 pkg/plugins: remove "load()" function 77c03221c9 pkg/plugins/transport: remove RequestFactory interface d12ec5f796 pkg/plugins/transport: remove unused Transport interface dfd331b2c8 pkg/plugins/transport: export httpTransport, and return concrete type 77103c7c03 pkg/plugins/transport: inline newHTTPRequest 4af4adc7ba pkg/plugins: remove LocalRegistry.SpecsPaths() a44c25c2f1 pkg/plugins: split exported from implementation 954d50b88a plg/plugins: rename vars that collided, or poorly cased 20889dbac6 pkg/plugins: move Plugin.ScopedPath to platform-agnostic file a5ee0d6af8 libnetwork: don't access KVStore directly in tests b378669836 libnetwork/datastore: don't access KVStore directly in tests 65978e6982 libnetwork/datastore: cleanup tests 478f4aed63 libnetwork/datastore: ScopeCfg.IsValid(): un-wrap conditions 37cbdeb1f2 libnetwork: remove most of kvstore d713b7ed45 api/server/router/network: remove unused Backend.FindNetwork 1bc7a2aacd daemon/containerd: ImageService. LoadImage fix stray slash in comment 126a089382 vendor: github.com/opencontainers/runtime-spec v1.1.0 42fa7a1951 Integration test for capabilities 5ef9e2632f libnetwork/datastore: prevent data races in Key() 48cc28e4ef hack/integration: Add TEST_INTEGRATION_FAIL_FAST f70e1b315f libnetwork/datastore: remove unused ParseKey() utility 704a19b25d libnetwork/datastore: remove DataStore interface d5b1e43b8f libnetwork/datastore: move MockData to a _test file 0ec73a7892 vendor: github.com/moby/buildkit v0.11.7-dev 64c6f72988 libnetwork: remove Network interface edafcb2c39 libnetwork/iptables: un-export ErrConntrackNotConfigurable, IsConntrackProgrammable e57b807a42 libnetwork: Controller.NewNetwork: inline arrangeUserFilterRule() be8ff186d6 libnetwork: refactor TestErrorInterfaces into a test 9484520327 libnetwork: arrangeUserFilterRule: don't return early a5f45b47a3 libnetwork: Controller: combine iptablesEnabled and ip6tablesEnabled 483a1933a2 volume: remove the short RRO forms in favor of the long forms 5da84141c4 vendor: github.com/prometheus/common v0.42.0 44ab4d44e0 vendor: github.com/prometheus/procfs v0.9.0 6791b8051a vendor: github.com/felixge/httpsnoop v1.0.3 9d3590f375 vendor: github.com/Microsoft/go-winio v0.6.1 35d180126a vendor: google.golang.org/protobuf v1.30.0 b835c28383 vendor: golang.org/x/oauth2 v0.6.0 3cfc1ffb0a pkg/ioutils: some cleanups in tests df86d855f5 Dockerfile: update runc binary to v1.1.8 f5e64a9eaa vendor: github.com/containerd/stargz-snapshotter/estargz v0.14.3 d431345bf3 vendor: google.golang.org/protobuf v1.29.1 30916df3d3 vendor: github.com/containerd/ttrpc v1.2.2 4f4dd2d995 vendor: github.com/containerd/go-cni v1.1.9 287130a254 vendor: github.com/cenkalti/backoff/v4 v4.2.0 7145129f27 vendor: k8s.io/klog/v2 v2.90.1 410a52b763 vendor: github.com/fsnotify/fsnotify v1.6.0 741c28ae9f vendor: github.com/containerd/cgroups v1.1.0 e84b72710b vendor: github.com/aws/aws-sdk-go-v2/config v1.18.16 e235763a38 vendor: github.com/aws/aws-sdk-go-v2/credentials v1.13.16 4c30bf1667 vendor: github.com/aws/aws-sdk-go-v2 v1.17.6 cb53ce9f89 vendor: github.com/aws/smithy-go v1.13.5 f463e50719 vendor: github.com/AdaLogics/go-fuzz-headers v0.0.0-20230106234847-43070de90fa1 359ab384fd vendor: google.golang.org/genproto v0.0.0-20230306155012-7f2fa6fef1f4 b11bdb9212 vendor: cloud.google.com/go/logging v1.7.0 64609120d8 vendor: github.com/googleapis/gax-go/v2 v2.7.0 2990defea7 vendor: go.opencensus.io v0.24.0 d7aa47ddb8 vendor: github.com/googleapis/enterprise-certificate-proxy v0.2.3 296040b1f4 vendor: github.com/cespare/xxhash/v2 v2.2.0 033f882314 vendor: golang.org/x/oauth2 v0.5.0 b615d195b2 vendor: github.com/golang/protobuf v1.5.3 c5c8f433e6 vendor: github.com/containerd/typeurl/v2 v2.1.1 2659f7f740 c8d/inspect: Include platform Variant a8fd1e3135 Dockerfile: update compose to v2.20.1 d78893921a Dockerfile: update buildx to v0.11.2 f3a6b0fd08 c8d: Make sure the content isn't removed while we export 6cba44277f AUTHORS,.mailmap: update with recent contributors 8b843732b3 pkg/chrootarchive: fix FreeBSD build eaf141c86a c8d/resolveImage: Fix Digested and Named reference 028eab9ebb c8d/inspect: Don't duplicate digested ref 7310a7cd0c ci(buildkit): remove early-return from buildkit-ref 4ecc01f3ad ci(buildkit): remove misleading code from buildkit-ref 48ff8a95cc hack/with-go-mod.sh: warn on stderr 750c441dfd daemon: remove intermediate var 468d6616bf daemon: configureLocalContentStore: return concrete types 375c4eb31c daemon: rename vars that shadowed package-level types 034e7e153f daemon: rename containerdCli to containerdClient 1aa17222e7 quota: remove gotest.tools from testhelpers a972dbd682 hack/make/.binary: use with-go-mod.sh 5563b09ac2 hack: use Git-free ROOTDIR convention 780e8b2332 hack/d/cli.sh: properly handle errors in curl 12a19dcd84 Dockerfile: improve CLI/rootlesskit caching 235cd6c6b2 Dockerfile(.simple): align APT_MIRROR support bcea83ab9b Makefile: pass through APT_MIRROR f8c0d92a22 ci: extract buildkit version correctly with replace-d modules 010c3718e3 vendor: github.com/tonistiigi/fsutil v0.0.0-20230629203738-36ef4d8c0dbb 531dbd7af5 vendor: github.com/containerd/continuity v0.4.1 eb68c5e747 daemon: support using CIDR notation for getting registry hosts e0b065cc33 daemon: use the registry service config for getting registry hosts 2da589d454 client: return explicit "nil" for no errors, and remove nil check 738b16d873 libnetwork/config: add Config.DriverConfig() and un-export DriverCfg 82bb3d8d2b libnetwork: TestUserChain: use assert.Check and is.ErrorContains 4e709e75da libnetwork: TestUserChain: re-use IPTables instances c471255153 libnetwork: TestUserChain: don't manually manipulate Controller.cfg.DriverCfg ddd33c6bbd libnetwork/iptables: move IPTable.LoopbackByVersion() to a utility aad2dbb93d libnetwork/iptables: GetIptable: validate provided IPversion 47063ca3ae libnetwork/iptables: un-export IPTable.Version 9c2cd65c0d libnetwork/iptables: make some vars local, and move bestEffortLock lock 93d050f504 libnetwork/iptables: NewChain, RemoveExistingChain: validate chain, table ad0c928ab5 libnetwork/iptables: resetIptables(): don't pass empty table name 1198fe8f6b libnetwork/iptables: un-export FirewalldInit 20900b76f9 libnetwork/iptables: make xLockWaitMsg a const 995da1e51d libnetwork/iptables: group "enum" consts per type c74a083672 libnetwork/iptables: IPTable.ExistChain(): remove redundant if/else 9f9d57590b libnetwork: getTestEnv(): use literals for options 534858aaed libnetwork/drivers: rewrite some strings to reduce quote-escaping 7c360778bb libnetwork/drivers/bridge: driver.configure: remove redundant err-check e21ff6c0c9 libnetwork/config: remove IsValidName utility 948f55d0b7 libnetwork/options: remove unused NewGeneric, and use map[string]any fa5c13542c libnetwork/drivers/bridge: setupBridgeNetFiltering: improve error handling 077049d0b9 client: WithTLSClientConfig: return early if no transport is set 6846c63252 client: WithTLSClientConfig, WithTLSClientConfigFromEnv: inline vars 9d1e690751 client: TestGetAPIPath: don't use un-keyed structs 6552441b46 client: TestClientRedirect: cleanup 8d514f4e2e client: touch-up docs, and user doc-links c219b09d4a client: Client.postHijacked: use Client.buildRequest e11555218b client: Client.setupHijackConn: explicitly ignore errors 41f235a2f8 gha: add note about buildkit using older go version 1ead2dd35d update go to go1.20.6 e1db9e9848 testutil: use dummyhost for non-tcp connections 6b7705d5b2 pkg/plugins: use a dummy hostname for local connections 92975f0c11 client: define a "dummy" hostname to use for local connections 2a59188760 client: TestSetHostHeader: don't use un-keyed literals f93cfb2e31 Support for health start interval to swarm mode 16e6d8af55 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230713153928-bc71908479e5 79c72390b9 integration/container: use subtests for TestAttach f9e2eed55d integration: Don't env cleanup before parallel subtests cdac084fb4 Add t.Helper() to the cli test helper functions c395496e06 testutil: rename variable that collided with import 1370b3c679 client: minor test improvements for requests f7f0a17ea2 client: TestSetHostHeader: use sub-tests 2cb982b506 pkg/plugins: run tests with t.Parallel() b39362295a pkg/plugins: don't share plugin server between tests ee9fe2c838 ci(buildkit): match moby go version for buildkit tests 3379414c76 vendor: github.com/moby/buildkit@v0.11 (0a15675) 5e4878ed2b Dockerfile/shell: install compose cli plugin ecfa4f5866 ci(bin-image): add SHA-based tags ce2e6b5cda Bump container-device-interface dependency to v0.6.0 0a126a85a4 ci(bin-image): fix meta step 749d7449f9 ci(bin-image): fix typo 1686540594 ci(bin-image): don't set tags when pushing by digest 83477ce8d0 client: remove custom "headers" type, and use "http.Header" instead e4ce676d3d client: ServiceCreate, ServiceUpdate: omit "version" header on API >= 1.30 d29240d9eb libnet: Return a 403 when overlay network isn't allowed 21dcbada2d libnet: Return proper error when overlay network can't be created 93853eca94 pkg/fileutils: GetTotalUsedFds(): slight optimization for macOS c5c977855d registry: session.searchRepositories(): return typed error, and small cleanup 68ebfa2f18 registry: session.searchRepositories(): log actual search URL 27698f1d13 registry: ParseSearchIndexInfo: remove redundant error-handling a0e1155b28 daemon/containerd: fix assignment to entry in nil map during commit 6b1b71ced4 Disable tls when launching dockerd through hack/make.sh 079a9d4562 Sort unconsumed build arguments before usage 41261ea4ec ci: push bin image to Docker Hub 5b3acc15d1 libnetwork: drop legacy driver cruft f9a83daebb libnetwork: delete package bitseq 8b167535db libnetwork: delete package idm 7366e44019 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230707182847-6f78b8199b05 a490248f4d daemon: daemon.prepareMountPoints(): fix panic if mount is not a volume c90229ed9a api/types: move system info types to api/types/system 3aef732e61 Do not drop effective&permitted set d519bde5da libnet/drivers: stop passing config to drivers... 1980deffae libn: refactor platform driver registration c87c4b5bbf Add Albin Kerouanton (@akerouanton) as maintainer 0066138379 Add Kevin Alvarez (@crazy-max) as maintainer d8056ddecd Add Laura Brehm (@laurazard) as maintainer 2216d3ca8d Add health start interval 2ab2503b6c Put integration daemon socket in /run 914888cf8b Improve test daemon logging 51bcf5954f libnet/d/overlay: parse VNI list w/o allocating 96ca669fa4 libnet/d/overlay: extract VNI option parsing... a940462fc7 libnetwork/drivers/bridge: minor cleanups for iptables funcs 6817b3697b libnetwork/iptables: signalHandler(): use s switch 51bbcdb3c5 libnetwork/iptables: merge Conn.initConnection into newConnection 0921360133 libnetwork/iptables: checkRunning(): use early return 98592608d4 libnetwork/iptables: remove unused Ebtables const 126525c03e libnetwork/iptables: TestReloaded(): minor cleanup b216669a02 libnetwork/iptables: TestPassthrough(): skip without firewalld 753c190ef9 libnetwork/drivers/bridge: rename vars that collided with type d1ebe6689f libnetwork/iptables: errors should not be capitalized afe8d3076f libnetwork/iptables: remove ErrIptablesNotFound 16f80f649b libnetwork/iptables: ChainInfo: don't pass whole IPTable as value 42653787ea libnetwork/iptables: ChainInfo.Output(): explicitly suppress errors ea4baa24b1 libnetwork/iptables: IPTable.RemoveExistingChain() slight refactor 04e54c6bb0 libnetwork/iptables: IPTable.exists(): return early on error 829374337f libnetwork/iptables: don't use err.Error() if not needed 9717734d1c libnetwork/iptables: IPTable.NewChain() minor cleanups 9bb0e7a5ee libnetwork/iptables: inline some args 564a13285f libnetwork/bitmap: improve documentation 0fc6bf9a6e libn/d/o/ovmanager: assign vxlans using bitmap pkg f0127f1617 libn/d/o/ovmanager: inline obtainVxlanID method e97492e579 libn/d/o/ovmanager: drop mutex from network type 6fb6635ceb libn/d/o/ovmanager: make mutexes private fields cdcb7c28c5 integration: disable iptables in parallel tests 9cee34bc94 pkg/plugins: make unit test less time sensitive 3721a525ce daemon: initBridgeDriver(): pass BridgeConfig, instead of daemon config b8220f5d0d daemon/config: move MTU to BridgeConfig 11abd0742e dockerd: "--mtu": update description, hide on Windows and warn if set 6944d2dddb libnetwork: TestBoltdbBackend(): use t.TempDir() 2fd88c7ca4 libnetwork: inline store config options cda187222e libnetwork/config: remove options that were only used in tests bc80c5d067 libnetwork: rename vars that shadowed with pkg vars and imports 332ffe8d74 libnetwork/networkdb: NetworkDB.Watch(): remove unused "key" argument 4c4149a09c libnetwork/internal/kvstore: remove unused Delete() 4d09e60f5b libnetwork/internal/kvstore: remove unused Watch() method c14a9f5b3d libnetwork/datastore: un-export Mutex e21e802fc6 libnetwork/datastore: remove unused DeleteTree() method 58d2f21dae libnetwork/datastore: remove unused PutObject(), DeleteObject() a3b0181503 libnetwork/datastore: remove Watch(), Watchable(), RestartWatch() 2409a36e29 libnetwork/datastore: cache.get(): remove unused "key" argument 824abbf8d9 libnetwork/datastore: remove redundant datastore.sequential e9b6965079 libnetwork/datastore: remove unused datastore.Active() b32e41f016 libnetwork/internal/kvstore/boltdb: un-export Mutex 7e7c7bbc17 libnetwork/internal/kvstore/boltdb: BoltDB.List(): minor cleanup 95b96eebdd libnetwork/internal/kvstore/boltdb: BoltDB.Get(): don't shadow error fb61b07bcf libnetwork/internal/kvstore/boltdb: BoltDB.Exists(): fix error handling c94ccd4207 libnetwork/internal/kvstore/boltdb: minor cleanup/refactor acfd3934a7 libnetwork/internal/kvstore: AtomicDelete(): remove unused "deleted" return b576682bdc libnetwork/internal/kvstore: AtomicPut(): remove unused "created" return c37b58bbc3 libnetwork/internal/kvstore: remove unused WriteOptions e515bef423 libnetwork/internal/kvstore: remove unused WatchTree and NewLock methods a373983a86 libnetwork/internal/kvstore: fix some linting issues 05988f88b7 libnetwork/internal/kvstore: remove unused Config options ec11aea880 pkg/jsonmessage: use string-literals for easier grep'ing fded42c3bd pkg/ioutils: use string-literals for easier grep'ing 1da079f211 pkg/idtools: use string-literals for easier grep'ing 84000190d3 opts: use string-literals for easier grep'ing ddec605aef integration: use string-literals for easier grep'ing 96a1c444cc libnetwork: use string-literals for easier grep'ing 0db4a32b9c daemon/cluster: use string-literals for easier grep'ing 4e69e16fde client: use string-literals for easier grep'ing c3d533f37f cli/debug: use string-literals for easier grep'ing 02815416bb daemon: use string-literals for easier grep'ing 6331a3a346 integration-cli: use string-literals for easier grep'ing 2f61620339 builder/builder-next: use string-literals for easier grep'ing 202907b14c builder/dockerfile: use string-literals for easier grep'ing a1c9a686b0 api: use singleflight for /info endpoint 8846c7e0ae daemon/cluster/executor/container: fix mixed pointer/value receiver 8ea78b34ab rename some variables that shadowed imports or package types 9f4acceb6a remove redundant alias for libnetwork/datastore imports cffe563d4d pkg/system: remove windows stubs for MkDev/MkNod 6b6fed06b1 integration: don't use pkg/system MkNod/mkDev 94c975e25a api: info: don't use ad-hoc type for compatibility with old api versions 9ffca1fedd libnetwork/drivers/remote: rename vars that collided f6258f70cb docs: api v1.28 - v1.40: add missing "force" query arg on plugin disable 892e9f2c23 docs: api v1.41: add missing "force" query arg on plugin disable a4bdfb963f docs: api v1.42: add missing "force" query arg on plugin disable 85ccb25eb8 docs: api v1.43: add missing "force" query arg on plugin disable aba8e04ab1 docs: api: amend changelog for API 1.28 for "force" option 7055244547 docs: api v1.32 - v1.40: remove outdated information from ServerVersion ed0dbb8518 docs: api v1.41: remove outdated information from ServerVersion b770a50dee docs: api v1.42: remove outdated information from ServerVersion 18d77ff455 docs: api v1.43: remove outdated information from ServerVersion 92f1ddaf0a api: remove outdated information from ServerVersion e8f206972a docs: api v1.42: remove "ClusterStore" and "ClusterAdvertise" fields e58a60902c docs: api v1.43: remove "ClusterStore" and "ClusterAdvertise" fields 3c905d0db9 api: remove "ClusterStore" and "ClusterAdvertise" fields e4d809b2b0 vendor: github.com/tinylib/msgp v1.1.8 f379af6d17 vendor: github.com/containerd/cgroups/v3 v3.0.2 e638351ef9 c8d/prune: Handle containers started from image id a93298d4db c8d/prune: Exclude dangling tag of the images used by containers a6d5db3f9b c8d/softDelete: Deep copy Labels 2b0655a71a c8d/softDelete: Extract ensureDanglingImage a96e6044cc testutil/environment: Add GetTestDanglingImageId 13472c6cf1 daemon/config: remove unused CommonConfig.Context 40908c5fcd libnetwork/drivers: inline capabilities options 97285711f3 libnetwork/drivers/overlay: Register does not require DriverCallback a718ccd0c5 libnetwork/drivers: remove unused "config" parameters and fields 264dbad43a gha: don't fail if no daemon.json is present ec79d0fc05 pkg/fileutils: GetTotalUsedFds(): use fast-path for Kernel 6.2 and up eaa9494b71 pkg/fileutils: GetTotalUsedFds: reduce allocations 03390be5fa pkg/fileutils: add BenchmarkGetTotalUsedFds 252e94f499 pkg/fileutils: GetTotalUsedFds(): don't pretend to support FreeBSD 7747327561 AUTHORS,.mailmap: update with recent contributors 60d2eeaa5b MAINTAINERS: update my email a764cd5a40 pkg/chrootarchive: format code with gofumpt 210932b3bf daemon: format code with gofumpt e236994b76 daemon/snapshotter: format code with gofumpt 9213e35011 daemon/containerd: format code with gofumpt 4b3900a257 daemon/logger: format code with gofumpt 050de1e4f6 daemon/logger/journald: format code with gofumpt a083677af2 daemon/logger/local: format code with gofumpt 74db0e9339 daemon/logger/loggertest: format code with gofumpt 48124bac18 daemon/logger/loggerutils: format code with gofumpt 011a32a4ad daemon/logger/gelf: format code with gofumpt 7ed5a30b5c daemon/logger/splunk: format code with gofumpt bb5a1eb99d daemon/logger/jsonfilelog: format code with gofumpt 1437037ed2 daemon/logger/awslogs: format code with gofumpt f930559076 pkg/stdcopy: format code with gofumpt 1216328c2d pkg/plugins: format code with gofumpt 651086d1d9 pkg/jsonmessage: format code with gofumpt 1291bbfa50 pkg/capabilities: format code with gofumpt 79af23e1ea pkg/ioutils: format code with gofumpt ac1514abf4 reference: format code with gofumpt 99968eec3f restartmanager: format code with gofumpt f18ac2d0bc quota: format code with gofumpt b2663a0f73 layer: format code with gofumpt 83b2daca6a plugin: format code with gofumpt 169fab5146 profiles/seccomp: format code with gofumpt 4175a550fd libcontainerd: format code with gofumpt 091991606a opts: format code with gofumpt 784ba59a08 registry: format code with gofumpt dd5ea7e996 libnetwork: format code with gofumpt bba21735bf libnetwork/ipamutils: format code with gofumpt 0b75c02276 libnetwork/resolvconf: format code with gofumpt 801cd50744 libnetwork/portallocator: format code with gofumpt 6187ada21f libnetwork/options: format code with gofumpt 882f7bbf1f libnetwork/osl: format code with gofumpt 32e716e848 libnetwork/networkdb: format code with gofumpt 65e2149b3e libnetwork/netutils: format code with gofumpt 1cd937a867 libnetwork/etchosts: format code with gofumpt 540e150e4e libnetwork/cmd: format code with gofumpt fffcbdae4c libnetwork/iptables: format code with gofumpt 6f3fcbcfe1 libnetwork/ipam(s): format code with gofumpt eb6437b4db libnetwork/datastore: format code with gofumpt defa8ba7b4 ibnetwork/bitmap: format code with gofumpt f349754b55 libnetwork/bitseq: format code with gofumpt 3af2963c74 libnetwork/drvregistry: format code with gofumpt dc17f5e613 libnetwork/drivers/remote: format code with gofumpt 485977de57 libnetwork/drivers/windows: format code with gofumpt 2cc5c2d2e6 libnetwork/drivers/overlay: format code with gofumpt e74028554e libnetwork/drivers/macvlan: format code with gofumpt 7b02ccda86 libnetwork/drivers/ipvlan: format code with gofumpt 17a35bc645 libnetwork/drivers/bridge: format code with gofumpt d2a6956afb daemon/graphdriver: format code with gofumpt 8d923c60b9 daemon/config: format code with gofumpt 425ccb1241 runconfig: format code with gofumpt c0edf0861b integration/system: format code with gofumpt 5cc1c6eca0 integration/service: format code with gofumpt bb5ace2efb integration/plugin: format code with gofumpt 9bd3e011e1 integration/internal: format code with gofumpt 89a4e6b889 integration/container: format code with gofumpt 846bcd7dd1 distribution: format code with gofumpt b7f5db432f daemon/images: format code with gofumpt 2d12dc3a58 daemon/cluster: format code with gofumpt 316c7331eb pkg/parsers: format code with gofumpt fb017754e1 pkg/system: format code with gofumpt ee2ac6c205 cmd/dockerd: format code with gofumpt 47276bdb28 cmd/docker-proxy: format code with gofumpt 0af6d9e291 client: format code with gofumpt 3146ecbae6 api/types: format code with gofumpt b9833a2059 builder: format code with gofumpt 540d6539be builder/remotecontext: format code with gofumpt 3e0565e17c builder/dockerfile: format code with gofumpt 9d4abbbc30 builder/builder-next: format code with gofumpt 6592646632 api/server: format code with gofumpt 5e9a354ff1 pkg/tarsum: format code with gofumpt 2aac054f52 pkg/authorization: format code with gofumpt f7552f1de4 pkg/archive: format code with gofumpt 7c697f58f2 Makefile: remove unused BUILD_APT_MIRROR a1d2132bf6 Dockerfile: use default apt mirrors 225e2562c9 integration-cli: format code with gofumpt a31411c679 testutil: format code with gofumpt 4c281fb29a volume: format code with gofumpt a08abec9f8 Update dockerd to support JSON logging format b335e3d305 seccomp: add name_to_handle_at to allowlist 6d3bcd8017 c8d/images: handle images without manifests for default platform 8caf63896c docs: document more buildx targets 647c2a6cdd Restore active mount counts on live-restore d8bc5828cd gha: Setup Runner: add missing sudo fdc9b7cceb remove name_to_handle_at(2) from filtered syscalls 9f6dbbc7ea Dockerfile: make cli stages more resilient against unclean termination 19bd0730ef vendor: github.com/moby/swarmkit/v2 v2.0.0-20230627115642-ad0f3ae162fa e2dad6c3ff Revert "Temporarily skip DCO check" 1741771b67 Skip cache lookup for "FROM scratch" in containerd 7d7225fae6 Temporarily skip DCO check e60cda7051 libnetwork/internal/kvstore/boltdb: fix linting issues d18b89ced6 libnetwork/internal/kvstore: remove some unused code b873d70369 replace libkv with local fork 5d25143ef3 libnetwork/kvstore: rewrite code for new location dd1c95edcd integration/windows: Unskip some kill tests 3c1de2e667 pkg/homedir: deprecate Key() utility ddd9665289 pkg/homedir: deprecate GetShortcutString() utility 6876e45f9e pkg/homedir: unify implementations 0aca7f2a0d pkg/homedir: use os.UserHomeDir() 0215a62d5b integration-cli: don't use pkg/homedir in test 76d8bfdff4 testutil/environment: remove Execution.OSType field 325786430b testutil/environment: remove unused TEST_OSTYPE env-var 0fe2ac0437 testutil/environment: rename var that collided with import 74da6a6363 Switch all logging to use containerd log pkg cdb1293eea Fix missing Topology in NodeCSIInfo 165dfd6c3e daemon: fix restoring container with missing task 786c9adaa2 daemon: fix double-unlock in health check probe 3b28a24e97 daemon: fix panic on failed exec start e010223186 contrib/busybox: Update to FRP-5007-g82accfc19 21e50b89c9 builder: pass host-gateway IP as worker label 21c0a54a6b c8d: mark stargz as requiring reference-counted mounts 4d831949a7 Dockerfile: update buildx to v0.11.0 fc94ed0a86 don't cancel container stop when cancelling context 19d860fa9d testing: temporarily pin docker-py tests to use "bullseye" cfa08f8366 builder-next: enable OTLP tracing for history records 98a44bb18e update go to go1.20.5 3ba67ee214 daemon: registerName(): don't reserve name twice 2a6ff3c24f Use OCI "History" type instead of inventing our own copy 59b5c6075f pkg/rootless: remove GetRootlessKitClient, and move to daemon 3cc5d62f8a run `getent` with a noop stdin 71589848a0 daemon: test runtimeoptions runtime options a6048fc792 client: add WithUserAgent() option 197b0b16e3 vendor: github.com/sirupsen/logrus v1.9.3 038a361a91 daemon/cluster: convert new BindOptions d41d2c3751 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230607145746-36334ed1876 32d58144fd c8d: Use reference counting while mounting a snapshot 8a094fe609 daemon: ensure OCI options play nicely together dea870f4ea daemon: stop setting container resources to zero 8c4dfc9e6a vendor: github.com/rootless-containers/rootlesskit v1.1.1 0b1c1877c5 update RootlessKit to v1.1.1 9ff169ccf4 daemon: modernize oci_linux_test.go 0f9c8e684a Dockerfile: Move dockercli to base-dev 5433b88e2d hack/cli.sh: Quiet origin cleanup 800ea039ec contrib/check-config: move xt_bpf check to overlay section 49f76a34b5 Dockerfile/shell: Install buildx cli plugin 17c99f7164 Dockerfile: Use separate cli for shell and integration-cli 1910fdde81 contrib/check-config: check for xt_bpf d63569c73d builder-next: Set moby exporter as default 4295806736 c8d/handlers: Handle error in walkPresentChildren ff2342154b Dockerfile: use COPY --link for source code as well 0f6eeecac0 daemon: consolidate runtimes config validation d222bf097c daemon: reload runtimes w/o breaking containers 0b592467d9 daemon: read-copy-update the daemon config 742ac6e275 daemon: make config reloading more transactional 038449467e Update BuildKit registry config on daemon reload 982e4fb448 api/server: get features from a callback fn d099e47e00 containerd: add c8d version and storage-driver to User-Agent a6da1480b5 dockerversion: DockerUserAgent(): allow custom versions to be passed 9a1f2e6d7c dockerversion: remove insertUpstreamUserAgent() ff40d2d787 dockerversion: simplify escapeStr() eb9a5392bc dockerversion: add a basic unit-test 66137ae429 containerd: set user-agent when pushing/pulling images 06aaf87aab vendor: github.com/moby/swarmkit/v2 v2.0.0-20230531205928-01bb7a41396b 637ca59375 Dockerfile: use COPY --link to copy artifacts from build-stages 4d3238dc0b c8d/load: Don't unpack pseudo images b08bff8ba3 c8d/load: Use walkImageManifests 5210f48bfc c8d/list: Use walkImageManifests fabc1d5bef c8d: Add walkImageManifests and ImageManifest wrapper 1178319313 libn: fix resolver restore w/ chatty 'iptables -C' 50eb2d2782 libnetwork: fix sandbox restore 18bf3aa442 libnetwork: log why osl sandbox restore failed ed32f5e241 Make sure the image is unpacked for the current snapshotter d58df1fc6c Update blogpost URL 44124ab6b0 builder/remotecontext: remove CachableSource, NewCachableSource 5efe72415d remove Dockerfile.e2e fd72b134d5 update generated files 735537d6b1 replace gogofast with gogofaster extension 1eaea43581 fix protos and "go generate" commands 7daaa00120 hack: generated files update and validation f1ca793980 use tools build constraint for proto dependencies 1e55ace875 Add oci index and layout files to exported tars 487ea81316 Fix npe in exec resize when exec errored 9a692a3802 libn/d/overlay: support encryption on any port e410e27547 builder/remotecontext: remove mimeTypes struct, use consts b42e367045 vendor: github.com/opencontainers/image-spec v1.1.0-rc3 37d4b0bee9 builder/remotecontext: deprecate CachableSource, NewCachableSource fb7ec1555c libcontainerd: work around exec start bug in c8d 79ca6630d4 vendor: github.com/moby/buildkit v0.11.7-0.20230525183624-798ad6b0ce9f 5045a2de24 Support recursively read-only (RRO) mounts 3512b04093 vendor: github.com/containerd/go-runc v1.1.0 b9b8b6597a c8d/inspect: Fill `Created` time if available f17c9e4aeb c8d: ImageService.softImageDelete: rename var that collided with import df5deab20b c8d: ImageService.softImageDelete: use OCI and containerd constants 9b9c5242eb daemon: lock in snapshotter setting at daemon init 53d1b12bc0 hack/make/.binary: don't use "netgo" when building Windows binaries a7bc65fbd8 c8d/pull: Use same progress action as distribution 6506579e18 integration: Add TestImageInspectEmptyTagsAndDigests a93aadc2e6 hack: Rename .ensure-emptyfs to .build-empty-images 3a31f81838 hack/ensure-emptyfs: Create dangling image 4373547857 Add testenv.UsingSnapshotter utility d3d2823edf Dockerfile: temporarily skip CRIU stage 86108812b8 vendor: github.com/mistifyio/go-zfs/v3 v3.0.1 ddd67b2535 Make image save more like the OCI layout for blobs 871cf72363 libnetwork: check for netns leaks from prior tests 6d79864135 libnetwork/osl: restore the right thread's netns d4f3858a40 libnetwork: leave global logger alone in tests 0cc6e445d7 libnetwork: make resolver tests less confusing 411a9e1b86 daemon: remove devicemapper driver-warnings 424a1c5d21 daemon: remove warning for overlay/overlay2 without d_type ab35df454d remove pre-go1.17 build-tags 34964c2454 c8d/list: Show layerless images 61757032da d/graphdriver/vfs: fix unit test 6e4bd3bbc2 vendor: github.com/spf13/cobra v1.7.0 6690d2969c pkg/archive: bail if setting xattrs is unsupported 0cdfd5f275 pkg/system: return rich errors from L(g|s)etxattr 41356227f2 libnetwork: just forward the external DNS response 6d139e5e95 build: use daemon id as worker id for the graph driver controller 668af4be82 ci(bin-image): distribute build across runners 1be26e9f0c api/inspect: Fix nil RepoTags and RepoDigests f450ea64e6 fix: `docker pull` with platform checks wrong image tag f3645a2aa3 reorder load funcs to match newServiceConfig()'s order 3b15156e4d add mirror to daemon reload test for insecure registries 0d8087fbbc Remove Upstart scripts 967c7bc5d3 api/server: allow empty body for POST /commit again 3ceb3810d7 client: don't marshal typed nils in request body ae737656f9 Remove Upstart and cgroups bits from Debian sysvinit script c2630c93f2 Update vendoring dedf5747cc Remove need to set Capabilities for cdi driver 7ec9561a77 Add support for CDI devices to docker daemon under linux 5a200ade7c Rename daemon/devices_liunx.go to daemom/devices.go 484785456c update containerd binary to v1.7.1 348a79958d c8d: The authorizer needs to be set even if AuthConfig is empty 2f0ba0a7e5 more robust dockerd-rootless-setuptools.sh 135d8f04f9 ci: bin-image workflow ae1ca67178 bin-image bake target 3309e45ca1 c8d: Don't create authorizer for empty AuthConfig 2ad499f93e c8d/authorizer: Default to docker.io bd6868557d c8d/builder: implement cache 7821d2d788 vendor: github.com/docker/distribution v2.8.2 e46674b6a7 c8d: implement classic builder 8d76acfe6c testutil: replace uses of client.IsErrNotFound 56fb56ccf0 integration: update error-assertions in tests 0538cdd226 integration-cli: update error-assertions in tests 66ff1e063e client: update error-assertions in tests 685b3d820a client: make IsErrNotFound an alias for errdefs.IsNotFound 9e817251a8 libnetwork/docs: fix broken link 17882ed614 libnetwork: update example in README.md 4603b6d6b6 c8d: fix image history for dangling images 4e0319c878 [chore] clean up reexec.Init() calls 9e43c11480 AUTHORS: regenerate 5fee4439a0 .mailmap: update with my new email e8be792130 c8d: fix missing image history e3e715666f pkg/aaparser: deprecate GetVersion, as it's no longer used 71d7908656 added alias validation ecaab085db profiles/apparmor: remove use of aaparser.GetVersion() f445ee1e6c contrib/apparmor: remove remaining version-conditionals (< 2.9) from template 307b09e7eb fixing consistent aliases for OCI spec imports 2ad37e1832 daemon: handleContainerExit(): add execDuration in attributes cad97135b3 c8d: implement missing image delete logic de363f1404 daemon: handleContainerExit(): use logrus.WithFields fb96b94ed0 daemon: remove handling for deprecated "oom-score-adjust", and produce error 316781be48 api/types/container: remove deprecated ContainerChangeResponseItem 9c14f98583 api/types: remove deprecated AuthConfig 55608d8381 pkg/system: remove deprecated IsProcessAlive, IsProcessZombie, KillProcess a3b12ec420 pkg/system: remove deprecated DefaultPathEnv() dc76b90705 pkg/system: remove deprecated MemInfo, ReadMemInfo() 7d0488b11e pkg/ioutils: remove deprecated TempDir() alias 152c482fee pkg/platform: remove deprecated OSType const 913b0f51ca API: omit deprecated VirtualSize field for API v1.44 and up fdc7a78652 docs/api: version-history: also mention /system/df for VirtualSize fd0b109bf7 API: bump version to 1.44 43b1afb2cf make chownComment easy to read 7665feeb52 hack: enable Go modules when building dockerd and docker-proxy 5400366b90 Set BuildKit version using buildinfo c33b31116c daemon/graphdriver: remove isDeprecated() utility dc11d2a2d8 remove deprecated devicemapper storage-driver 1e195acee4 libn/d/overlay: stop programming INPUT ACCEPT rule eb0edeafdd api: swagger: add missing "force" query arg on plugin disable ea4dd1bbf6 boltdb/bolt is not maintained. Used bbolt 6c0e0d6250 Allow client to set boltdb timeout a0f6d0798a Do not return boltdb bucket not found error deb21faad0 Add support for etcd authentication cc0ed694ee fix typo fbdb24ec6a Fix typo in error text dcf8828165 Return store.ErrKeyExists on AtomicPut 002f9c37ca Synchronize boltbd libkv apis 15e5d4067a Change unsupported call error in boltdb backend to use general store error 3b5fb3ec87 Remove docs in libkv.go 2603af65e5 Migration to the new Etcd client f06f78e638 boltDB AtomicDelete fails for non-existent key 0b81042dc3 Add transient connection option to bolt db 7225aba3af add TTL to consul lock using store.LockOptions and add tests for the Lock ttl behavior 1f9cf17713 Fix AtomicPut panic if previous KVPair is not nil and key not exists in boltdb 599deba8c7 nits and refactor for etcd tls config cc9e627f8e Add etcd TLS client code and update README.md. Signed-off-by: Adam Thornton <adam.thornton@gonkulator.io> 64eb25dff9 Honoring ConnectionTimeout in boltdb 3ec6dfa346 Refactor libkv to not directly import storage backends f817826408 Create dir first before opening data file of boltdb 29af4e0f27 BoltDB backend support for libkv 06f01227c5 change heartbeat/ephemeral combination to use a single ttl field f26e4f4c52 Minor fix of store comment 6b43181cfa Notify user of supported backend storage a961b70b2b Remove unused type WatchCallback 06151b8a4d add top-level godoc: sample some parts of the README a2d4e1c246 API Change: AtomicPut with previous = nil is create. fcb98254b1 Use Backend type for stores 79c320c1cf remove testify dependency through mock package 48f5dca2ce Remove logging in library dbc1a6fa9a refactor and move store backends in sub-packages Bumping docker-cli to version v25.0.0-7-g01f933261, which comprises the following commits: 21c12847b docs: move base command to docker.md 22e1f2cbf docs: fix broken links to alias pages 68abf14c1 vendor: github.com/docker/docker v25.0.0 9e1e07657 docs: add documentation for CDI cdb1c105f vendor: github.com/docker/docker v25.0.0-rc.3 3df149545 docs(plugins): fix typos and formatting 22bbdc798 docs: add "builder" key to full daemon.json example d2efc5b09 deprecate old API versions (1.23 and lower) 508346ef6 plugins: fix plugin socket being closed before use f722e07c6 gha: update to use macos-12 runners 5f6c55a72 plugins: don't handle signal/notify if TTY 26560ff93 Revert "plugins: run plugin with new process group ID" 37f551566 docs: fix broken link to tmpfs (missing anchor) b35361e8d docs: regenerate stubs for non-canonical commands dfa2930af ci: Add bin-image workflow 21c253605 vendor: golang.org/x/sys v0.16.0 a6774de68 docs: rename cli reference aliases to canonical cf9d3692a docs: remove empty cli reference stubs d868dca00 vendor: github.com/docker/docker v25.0.0-rc.2 1609916f2 Revert "Dockerfile/binary: Output the binary directly" ff25c4334 Revert "ci: Add bin-image workflow" ef5e5fa03 plugins: run plugin with new process group ID 6d0b329b0 cli-plugins: use non-abstract socket on darwin dbf992f91 cli-plugins: move socket code into common package 8b6ffbdf7 vendor: github.com/containerd/containerd v1.7.12 ccc7ad2f2 Dockerfile: update buildx to v0.12.1 fdcb78a0f Dockerfile: update docker compose to v2.24.0 15d4c99f3 ci: Add bin-image workflow ecf338f43 scripts/build: Handle VERSION containing git ref 6ad07f2a4 Dockerfile/binary: Output the binary directly 0e37dd49f cmd/docker: registerCompletionFuncForGlobalFlags: take store.Store as argument c0a0b05dc cli-plugins: helloworld: rename var that collided with import 11b2e871b cmd/docker: move main() to the top 4dc2c895b cli-plugins/manager: getPluginDirs: take ConfigFile as argument 79992184e docs: dockerd: rephrase environment-variables intro 4d2b4e7fb docs: dockerd: fix stray column-separateor in env-var table a5e5563f1 vendor: github.com/docker/docker-credential-helpers v0.8.1 4f4950886 update to go1.21.6 26f59b2f6 cli/compose/loader: use golden.Assert() for readability 9db56ea2f vendor: golang.org/x/tools v0.16.0, golang.org/x/mod v0.14.0 efae960e5 vendor: golang.org/x/net v0.19.0 996cce909 vendor: golang.org/x/sync v0.6.0 4b10e5525 vendor: github.com/google/go-cmp v0.6.0 1ebc233b4 vendor: github.com/creack/pty v1.1.21 b4fe77a12 vendor: github.com/docker/go-connections v0.5.0 909111b3a docs: fix incorrect heading levels in docker run reference b43ea528b vendor: github.com/docker/docker v25.0.0-rc.1 6d0aa0a52 cli/command/container: parseSecurityOpts: fix --security-opt seccomp=builtin 9be600a97 Docker build command docs refresh 878b1c55b docs: add links to volume ls, network ls, stack ps formatting examples f0edc7953 change back nolint -> nosec c1016c05c vendor: github.com/mitchellh/mapstructure v1.5.0 58524685d vendor: github.com/mattn/go-runewidth v0.0.15 1e38fc3b9 vendor: github.com/klauspost/compress v1.17.4 0fa3a365f vendor: github.com/docker/docker v25.0.0-beta.3 d1a51582e update authors and mailmap 60af715d6 id and name filter in service ls is the prefix not a part 90a1887d3 Fix wrong docker run command 64e9cadd1 Add networking reference link 924ec7f4c docs/deprecated: update "oom-score-adjust" status for daemon 800a728e1 deprecated: fix anchor and add missing version c1c6198ae docs: deprecate short cid in Aliases field 336787c50 vendor: github.com/docker/docker 7bc56c53657d (v25.0.0-dev) 53a129e3d docs(plugins): remove Weave engine network plugin 3ecd6b6c7 docs(plugins): remove inline CSS markup a4d805f9c docs(plugins): add Kathará engine network plugin 1dcd5487f docs(plugins): update Docker Store to Docker Hub 46355a194 export RunStat, StatsOptions, and add Filters option e9a5590ad cli/command/container: statsOptions: add GoDoc b642078c8 prevent "docker stats" from hanging if the initial API call fails 633ba88c2 cli/command/container: runStats(): move code to where it's used 5ed6c128e cli/command/container: runStats(): don't register unused event handlers 2389768fb cli/command/container: runStats(): minor cleanup and fixes 4d434dc69 vendor: github.com/docker/docker 388216fc45ab (v25.0.0-dev) 5eac07b10 update typos and style in docs 6fd4cff1f docs: minor editorial improvements, typo fixes 0de84f019 vendor: golang.org/x/crypto v0.17.0 3cf0bf84a vendor: golang.org/x/crypto v0.16.0 36d4db27d vendor: golang.org/x/text v0.14.0 3d70100d5 vendor: golang.org/x/sys v0.15.0 70216b662 add //go:build directives to prevent downgrading to go1.16 language 88e647435 build(deps): bump github/codeql-action from 2 to 3 ca9ff8daf docs: run-reference: use table for health options 77e67a0f9 docs/deprecated: mark logentries logging-driver as "removed" 8f13b0416 cli/command: remove "logentries" driver from tests and fixtures d79dd7c53 docs, man: remove logentries logging-driver b14094df5 contrib/completion: remove logentries logging-driver f63065a58 vendor: github.com/docker/docker f3cc93630ed8 (v25.0.0-dev) fa1914426 vendor: github.com/docker/docker v25.0.0-beta.2 e81a66661 docs/deprecated: mark logentries log-driver for removal f8dd8f074 docs: refresh --publish, add --publish-all 5400a48aa Plumb contexts through commands aec7ec7f6 vendor: github.com/docker/docker 92884c25b394 (v25.0.0-dev) 0a3a16d2b vendor: github.com/containerd/containerd v1.7.11 54c103aff vendor: upgrade OpenTelemetry to v1.19.0 / v0.45.0 d49970590 vendor: github.com/felixge/httpsnoop v1.0.4 7af509c7f cli/command: merge DockerCliOption and InitializeOpt types 1554ac3b5 cli-plugins: terminate plugin when CLI exits 2e394eb5f docs: rewrite section on working directory 4a8451455 docs: rewrite section on setting user id 259aa9005 docs: rewrite section on filesystem mounts 52716c813 docs: move --tmpfs to docker run reference 5ede4c82a docs: minor improvements to the healthcheck section 7585d66a0 docs: rewrite section on overriding environment variables 3eeac2059 docs: rewrite section on exposing ports 0a94d85cd docs: fix typo in "network create" docs b01e28752 docs: rewrite section on default entrypoint c695ad9d7 docs: rewrite section on overriding image defaults 4a6cde885 docs: move --log-driver to docker run reference 72df1960e docs: move --cgroup-parent to docker run reference 9e75a4cf6 docs: move --init to docker run reference 92c664b0d docs: move info about --security-opt to docker run reference f98444490 docs: move --rm to docker run reference 32189ca27 docs: improve description about container exit codes dbffa0d12 docs: move --restart to docker run reference 73620975d docs: simplify container networking intro 5dd6e9a4d docs: move --ipc to docker run reference ff62bf47b docs: move --uts to docker run reference d66fe7881 docs: move --pid to docker run reference 03dc8832e docs: improve docs on container identification fad227d3f docs: move info about fg/bg flags to run reference 2f48f41fc docs: improve introduction to docker run 3f519b824 docs/deprecated.md: add version for "-g" / "--graph" removal 6dc92b667 docs/deprecate.md: add version for devicemapper removal to table a682b8e65 Permit '=' separator and '[ipv6]' in --add-host 626e64ccf build(deps): bump actions/setup-go from 4 to 5 0cf7bff0b vendor: github.com/docker/docker 4046ae5e2fd4 (v25.0.0-dev) bdb45a9c2 update to go1.21.5 afc62d8d1 update to go1.21.4 8bbc97c86 prune: fix build cache prune warning e93ec2f6a Fix typo in dockerd reference documentation 5a0470888 vendor: github.com/docker/docker 029519a1498b (v25.0.0-dev) aa9fdb4dd vendor: github.com/gorilla/mux v1.8.1 a431b1dda exec.md: remove misleading part b62b5d48f Readme: remove reference to "Docker EE" 354f62f0c docs: reference/commandlin/cli: remove redundant italic e2626200a docs: remove "{% raw %}" / "{% endraw %}" Jekyl (liquid) leftovers 174cbb588 docs/man: fix -name flag with single hyphen 539537ddf vendor: github.com/docker/docker cfdca8dc1d4c (v25.0.0-dev) 6a74a63ee Dockerfile: update ALPINE_VERSION to 3.18 35c6e915d Dockerfile: update buildx to v0.12.0 6468c63c8 docs: update debian examples to use bookworm 0d95231cc Dockerfile: use "debian" in stages instead of distro name c5194a9e5 Dockerfile: update to debian bookworm 7be05a6f4 mount: bind-recursive: remove boolean convenience values dad4a1962 vendor: github.com/docker/docker v25.0.0-beta.1 30d36e977 templates: linting: fix "error return value is not checked (errchkjson) 4e2477f85 golangci-lint: enable more linters 0e73168b7 golangci-lint: revive: enable use-any 9c0c49a5f golangci-lint: revive: enable empty-lines 8e9aec690 golangci-lint: revive: enable import-shadowing f387558b5 Add zstd as supported in load command doc f4962c65b vendor: github.com/Microsoft/hcsshim v0.11.4 391668f57 golangci-lint: enable perfsprint linter 8bbdb93cf golangci-lint: enable nilerr linter 7e9d2c78c golangci-lint: enable dupword linter 2d61f70f0 golangci-lint: govet: enable shadow check 606cbd60a golangci-lint: enable predeclared linter 8661552e7 golangci-lint: enable thelper linter 8e98c765f cli/command/system: fix deprecated comments (gocritic) 9d7e21be2 cli/command/manifest: rename vars that collided with import 3f0c189e4 linting: address slice-append issues found by gocritic a2c9f3c6c linting: address else/if/elseif statements found by gocritic 888df0987 linting: address assorted issues found by gocritic d0dee3ceb linting: Consider pre-allocating sliceVar (prealloc) efbcdce9b linting: cli/command/trust: unusedwrite: unused write to field Hashes (govet) 580ebf41a dockerfiles: update golangci-lint to v1.55.2 8642b3c35 update authors and mailmap 685d1baa0 vendor: github.com/docker/docker 34e923e3e31b (v25.0-dev) f0816bf67 opts: remove unused IPOpt option b0ee27d65 opts: ValidateIPAddress: improve error, godoc, and tests b24e7f85a Fix setting ServerAddress property in NativeStore f65d4a479 vendor: github.com/docker/go-connections fa09c952e3ea (v0.5.0-dev) b7c31c36f not actually a maintainer f9622b659 vendor: update go-connections for TLS 1.3 support 4cf1c50ad Revert "update to go1.21.4" due to regressions / breaking changes. 6472dabe4 update to go1.21.4 3cd77c9d5 cli/command/container: ForwardAllSignals: rewrite to use ContainerAPIClient a2ec50a46 make `container` an explicit, required parameter a4abe42cb make runAttach public and allow passing context 2b1f5a2e3 TestParseWithMacAddress: check endpoint-specific MacAddress field 8f59f841a cli/command/container: mustParse: return network.NetworkingConfig d46de7087 vendor: github.com/docker/docker c14694a424ab (v25.0.0-dev) efc923679 --env-file about comments doc updated Signed-off-by: Saurabh Kumar <saurabhkumar0184@gmail.com> 07338fe96 docs: update redirect metadata for hugo 0239b8fd9 vendor: github.com/spf13/cobra v1.8.0 848fe622c docs: add default-network-opt daemon option 54eee599b Update container-device-interface to v0.6.2 e08866098 vendor: github.com/docker/docker ed1a61dcb789 (v25.0.0-dev) 13d34b21e vendor: github.com/containerd/containerd v1.7.8 aa24d611b vendor: google.golang.org/grpc v1.58.3 784149382 vendor: golang.org/x/tools v0.10.0 1a0ae8c6b vendor: golang.org/x/mod v0.11.0 39b1d37b3 Update CodeQL workflow 663a89b7a vendor: github.com/docker/docker fc4d035e7a4e (v25.0.0-dev) 6891974ee vendor: github.com/opencontainers/image-spec v1.1.0-rc5 827c404ca vendor: github.com/moby/swarmkit/v2 v2.0.0-20230911190601-f082dd7a0cee 137c495f7 vendor: github.com/go-logr/logr v1.2.4 6372c6aae vendor: github.com/klauspost/compress v1.17.2 8073525c0 vendor: google.golang.org/grpc v1.56.3 b7b5b31a7 update to golangci-lint v1.55.0 9e1f8d646 image/build: use "nolint" comment to work around gosec regression 2294b17e7 cli/command/network: runCreate: inline types.NetworkCreate 594aeb390 cli/command: remove dot-imports and unhandled errors b08e34b9f swarm: TestSwarmUpdate: remove non-existing "--quiet" flag defa52b8c stacks: Add support for start interval 9df7be5d5 cli/compose: add schema 3.12 (no changes with 3.11 yet) 7a2ea5c53 vendor: gotest.tools/v3 v3.5.1 f2fced487 cli/compose/loader: remove platform-specific path handling 74990623e cli/compose/loader: use gotest.tools/v3/golden 8bf121c3b Add docker ps status descriptions a252a106c - What I did Removed broken link in #937 - How I did it Removed first section of CONTRIBUTING.md - How to verify it Check CONTRIBUTING.md - Description for the changelog Removed broken link in contributing to Docker documentation. A picture of a cute animal (not mandatory but encouraged) Closes #937 74bace156 docs: add `bind-recursive` mount option 46d0ba20f vendor: github.com/docker/docker cdb3f9fb8dca (v25.0.0-dev) 3441151e0 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230823155524-12f0c246fed0 412ebb677 vendor: github.com/containerd/containerd v1.7.7 78eaac75c vendor: update OTEL dependencies a27466fb6 vendor: golang.org/x/net v0.17.0 612a17155 vendor: golang.org/x/crypto v0.14.0 392db31e2 vendor: golang.org/x/term v0.13.0 ac307788a vendor: golang.org/x/text v0.13.0 48655f794 vendor: golang.org/x/sys v0.13.0 6de525416 vendor: github.com/docker/distribution v2.8.3 ceab9b5e8 update to go1.21.3 d249ce279 update to go1.21.2 3f1195e4e update go-md2man to v2.0.3 fc6976db4 mount: add `bind-recursive=<bool|string>` and deprecate `bind-nonrecursive=<bool>` 0f59f04f5 Update minimum Go version to 1.19 d254cc3bb update golang to go1.21.1 4c75107a6 vendor: github.com/distribution/reference v0.5.0 112d79a41 appcontext: remove unused parts febb37a38 remove buildkit as dependency e9759cee6 Dockerfile: use GOTOOLCHAIN=local f07e7e1ee Dockerfile: build gotestsum and goversioninfo without cgo 9e424af5d e2e: update to use compose v2, and don't depend on distro-packages 3e2187b4c vendor: github.com/docker/docker d3afa80b96bf (v25.0.0-dev) f90890fb4 vendor: github.com/Microsoft/hcsshim v0.11.1 23f50a066 vendor: github.com/containerd/containerd v1.6.24 497b13c66 vendor: github.com/klauspost/compress v1.16.5 e0ad0127b vendor: google.golang.org/grpc v1.56.2 c2308ad6f vendor: google.golang.org/protobuf v1.31.0 56396ba35 vendor: golang.org/x/tools v0.8.0 c9d56b850 vendor: golang.org/x/crypto v0.9.0 ffea6940e vendor: golang.org/x/sys v0.10.0 1554b4932 vendor: golang.org/x/sync v0.3.0 78012b00a vendor: container-device-interface v0.6.1 3a16c3bb0 docs: fix duplicate words in "docker tag" reference 7e9467506 build(deps): bump docker/bake-action from 3 to 4 315ff202c build(deps): bump docker/setup-buildx-action from 2 to 3 4b00be585 update to go1.20.8 9e1b42e64 Add missing opts to --network advanced syntax 58f426087 Rename expectedCfg into expectedHostCfg f1048e1a3 Create default EndpointSettings if no --network provided 2c193b59d Fix extremely minor typo in docker-run man page 40dc66b26 vendor: github.com/docker/docker 06499c52e2b1 (v25.0.0-dev) f13b78672 vendor: github.com/docker/docker 032797ea4bcb (v25.0.0-dev) fb2ba5d63 migrate reference github.com/distribution/reference 04af12821 vendor: github.com/docker/docker 7abd7fa73965 (v25.0.0-dev) dee40053f build(deps): bump actions/checkout from 3 to 4 6dfdd1eae cli/command/system: fix "docker events" not supporting --format=json db6209abd update golangci-lint to v1.54.2 9ad079244 cli/registry/client: remove some redundant conditions 22b4bab90 cli/registry: client.iterateEndpoints: remove check for APIVersion1 5250f1bab cli/registry: fix client.pullManifestList not de-referencing manifest d40fc1a0f vendor: github.com/docker/docker a65c948e7edf (v25.0.0-dev) 261c18f9e ParseRestartPolicy: validate for missing policy-names 3d2aac6a0 docs/reference: run.md: remove stray whitespace 4cce7bb2f rewrite TestParseRestartPolicy to use sub-tests 42ac5d4bf force TestNewHistoryCommandSuccess to use UTC timezone 17f4c8259 update cli-docs-tool to v0.6.0 be219b317 adding -c option for docker run/build in manpages 273f2cd95 cli/command/manifest: update link to Go documentation 722e3aae4 man: update links to Go documentation dc4feccb8 docs/reference: update links to Go documentation 1d3af726e CONTRIBUTING.md: update links af05a6882 Dockerfile: use COPY --link where possible 1da67be9c Stop slowing bash init by caching plugins path slowly 5bff12354 replace dockerfile/dockerignore with patternmatcher/ignorefile 55ff9e609 vendor: github.com/moby/patternmatcher v0.6.0 e050312e6 update flag-description for --cgroup-parent d2047b954 cli/registry/client: set actions when authn with token 1c2cc4bbe info: add CDI spec directories to output bb57783ab cmd/docker: areFlagsSupported: don't Ping if not needed 6e2e92d77 Update docs/command output for volume pruning 4fc3f0e6f search: deprecate "is-automated" filter and "IsAutomated" field 299925f4c docs: document special host-gateway value for add-host 211220cbb cli/command: ResolveAuthConfig, GetDefaultAuthConfig: take ConfigFile as arg 57f0e46de cli/command/registry: cleanup login tests 84c956a17 cli/command/registry: cleanup search tests 3d0b14c3e vendor: github.com/docker/docker 4b19b2f4babd (25.0-dev) f38870e68 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230713153928-bc71908479e5 a53b03520 vendor: github.com/opencontainers/image-spec v1.1.0-rc4 8d51f36ca login: Add message about using PATs 6517db939 update to go1.20.7 373fa57ed vendor: github.com/containerd/containerd v1.6.22 0b535c791 vendor: gotest.tools/v3 v3.5.0 7a89e897e cli/command/container: waitExitOrRemoved: take APIClient as argument ce038e77b vendor: github.com/prometheus/common v0.42.0 bffe277c9 vendor: github.com/prometheus/procfs v0.9.0 92906a993 vendor: github.com/Microsoft/go-winio v0.6.1 aacdca0fe vendor: google.golang.org/protobuf v1.30.0 3cf34c6d9 vendor: google.golang.org/grpc v1.53.0 5b138189b vendor: github.com/cespare/xxhash/v2 v2.2.0 c1d065702 vendor: github.com/golang/protobuf v1.5.3 0b7c72c3b cli/command/container: RunStart: inline variable ad43df5e8 configfile: Initialize nil AuthConfigs b52fd79f1 docs: add missing docs for "DOCKER_TLS" env-var 298bddcc2 cli/command/container: deprecate NewStartOptions 00870d68f Dockerfile: update buildx to v0.11.2 78e463392 vendor: github.com/docker/docker-credential-helpers v0.8.0 ff9f1be19 Dockerfile: update buildx to v0.11.1 680fafdc9 update go to go1.20.6 223bf80d4 cli/context/docker: Endpoint.ClientOpts, withHTTPClient: inline variables 3469beb80 replace uses of deprecated api/types that moved to api/types/system 1f87420b5 vendor: github.com/docker/docker dab9ffb252186f4c47416addb136d579f9314c6a (25.0-dev) 4d03b935c vendor: github.com/moby/swarmkit/v2 v2.0.0-20230707182847-6f78b8199b05 fe7afb700 cli/container: Don't ignore error when parsing volume spec 323ca1d56 Bump container-device-interface dependency to v0.6.0 fca67dd81 Dockerfile: update to xx 1.2.1 de9f1f5b9 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230627115642-ad0f3ae162fa 125eeb7ab Add docs for health-start-interval 986879c07 Add flags to container/service for health start interval 9bfaa6ff7 revendor docker/docker from master dbd9d5d74 Update vendoring for CDI parser dad225d1e Support CDI devices in --device flag d5f564ada commandconn: return original error while closing 92d7a234d docker info: fix condition for printing debug information 88f44ec15 cli: SetupRootCommand: remove redundant flags return 3cad05fbf cli: move "config" flag to cli/flags/ClientOptions.InstallFlags() 1c1329fc7 cli/flags: add EnvEnableTLS const for "DOCKER_TLS" 0b3cadb05 cli/config: add EnvOverrideConfigDir const 13e842a11 cli/config: add synchronisation for configDir (Dir, SetDir) 9f4af6cb7 vendor: docker/docker 7f8b1cd7f928dee54174d51dc9da17f443c31480 (v25.0-dev) b32264a1a rename and update mergo module 5936fd2a8 docs: fix static ip example, network needs a subnet b85d6a8f9 docs: fix broken link 79ff64f06 cli/command/context: don't use pkg/homedir in test 6c7d17fa0 docs: update the runtime configuration section bf5d1ce97 Dockerfile: update buildx to v0.11.0 2133d0446 cli/command/context: remove deprecated k8s / orchestrator option-stubs 2d06cfcde cli/command: newAPIClientFromEndpoint: use WithUserAgent 8181aa887 cli/command/context: don't pass CLI if we only need context-store 3b8d5da66 update go to go1.20.5 acb248f8d Dockerfile: update ALPINE_VERSION to 3.17 9c2694d2b Dockerfile: update gotestsum to v1.10.0 c2535aa46 build: error if Dockerfile name is passed with Dockerfile from stdin 77dd05caa cli/command/image: remove errStdinConflict d68b36153 cli/compose/convert: convertEnvironment: sort results f4bde6869 replace some basic uses of fmt.Sprintf() 6a50c4f70 cli-plugins: remove deprecated Metadata.Experimental 58ec4161b vendor: github.com/moby/swarmkit/v2 v2.0.0-20230607145746-36334ed18760 bf492bffd vendor: docker/docker ed798d651a50cbd0af4dca127c4bfa243dda9cf7 (v25.0.0-dev) 54c80d49d vendor: github.com/opencontainers/image-spec v1.1.0-rc3 9ad605acc vendor: github.com/sirupsen/logrus v1.9.3 e15ae9e2e vendor: golang.org/x/net v0.10.0 3b62102ea vendor: golang.org/x/term v0.8.0 db7886eef vendor: golang.org/x/text v0.9.0 45fd37aaa vendor: golang.org/x/sys v0.8.0 a5ebe2282 commandconn: don't return error if command closed successfully 2331e4d52 cli/command/container: don't mutate ConfigFile.DetachKeys 23e26f40f cli/command/container: createContainer(): return container-ID c2c6fbe23 cli/command/container: TestCreateContainerImagePullPolicy: use sub-tests 0c5adb2e9 cli/command/container: attach: rename var that collided with import 47951ff44 docs: add "--detach-keys" example to docker run reference c17b0df2a docs: move "--detach-keys" example to examples section e4ceed468 docs: added example for specifying socket path with -H 5251d3748 cli/command: add EnvOverrideContext const for "DOCKER_CONTEXT" 6458dcbe5 Dockerfile.vendor: update GOPROXY to use default with fallback 0692d762a cli/command: fix GoDoc referencing wrong const 982857531 docs: rephrase section on credential stores for docker login 5d6612798 docs: remove devicemapper 4cf04988a remove uses of golang.org/x/sys/execabs db5e1fa54 vendor: update docker/docker to latest v25.0.0-dev 2713d0bcd docs: fix example for proxies in daemon.json b22290052 docs: remove AuFS from glossary e4211c91e docs: remove Docker Toolbox from glossary c246ea851 docs: remove boot2docker and docker-machine from glossary 4c11f73dc man: remove devicemapper from examples c61b56518 docs/deprecated: remove "disabled by default" for AuFS, overlay 9f537a756 docs: remove aufs and legacy overlay 73fbcdea0 contrib/completion: remove aufs, legacy overlay 1ec68fabe cli/command/system: remove aufs from fixtures 6460eea54 docs/deprecated: remove .patch release from deprecation status 035e26fb0 docs: update link location for the overlay driver 988e37956 Correct "ps --no-trunc" example output 2fc30fd45 replace uses of client.IsErrNotFound for errdefs.IsNotFound 537b88dab cli/command: don't use legacy "notfound" error-type in tests 353e0a942 vendor: github.com/docker/distribution v2.8.2 379122b03 cli/config: remove warning for deprecated ~/.dockercfg file 9b791b4fe cli/config: Load: remove outdated FIXME ff7111ae2 cli/command: remove deprecated EncodeAuthToBase64 d3ac80127 cli/command/stack: remove deprecated RunDeploy, RunPS, RunRemove, GetServices 72e3813ab cli-plugins/manager: fix deprecation comment of Metadata.Experimental 4119d268e Update tag docs to clarify name 28bc90f3b vendor: update docker/docker to v25.0.0-dev, API v1.44 60b4cdf04 Update version to v25.0.0-dev 759fa585c docs: update description for docker -H flag 1d8e2b652 vendor: github.com/docker/docker v24.0.0-rc.2 ce11b28d8 cli/config/credentials: skip unneeded exec.LookPath() 2ae223038 remove pre-go1.17 build-tags 1073b0269 cli/context/docker: rename receiver for Endpoint 2b7bfb399 cli/command/image/build: GetContextFromReader: rename var that collided ab17029c6 cli/command/container: hijackedIOStreamer: explicitly ignore err f5e224e94 un-skip history test and fix golden mismatches Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-03-15 17:17:19 +00:00
Bruce Ashfield	22877e9bd0	runc-docker: update to 1.1.11 ... Bumping runc to version v1.1.11-2-g452f520c, which comprises the following commits: 7887736f VERSION: back to development 4bccb38c VERSION: release 1.1.11 617db785 configs: make id mappings int64 to better handle 32-bit e65d4cac specconv: temporarily allow userns path and mapping if they match 2dd8368e integration: add mega-test for joining namespaces 8f8cb455 configs: disallow ambiguous userns and timens configurations 0c8e2cc6 *: actually support joining a userns with a new container 87792ce0 libct/cg: add swapOnlyUsage in MemoryStats 32a26a71 build(deps): bump github.com/cyphar/filepath-securejoin be887840 VERSION: back to development 18a0cb0f VERSION: release 1.1.10 b426e9b7 libct/cgroups.OpenFile: clean "file" argument 8214e634 libct/cg: support hugetlb rsvd f8be7009 [1.1] tests/int/helpers: add get_cgroup_path 1f66027a ci/gha: fix downloading Release.key 5a5b2cc3 Fix directory perms vs umask for tmpcopyup b365458f fix a typo in cloned_binary.c: re-use -> reuse 8f66c9fb fix two typos 016b2b42 Handle kmem.limit_in_bytes removal 11737f55 VERSION: back to development ccaecfcb VERSION: release 1.1.9 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-03-15 17:17:19 +00:00
Bruce Ashfield	e4b6616a90	runc-opencontainers: update to 1.1.11 ... Bumping runc to version v1.1.11-2-g452f520c, which comprises the following commits: 7887736f VERSION: back to development 4bccb38c VERSION: release 1.1.11 617db785 configs: make id mappings int64 to better handle 32-bit e65d4cac specconv: temporarily allow userns path and mapping if they match 2dd8368e integration: add mega-test for joining namespaces 8f8cb455 configs: disallow ambiguous userns and timens configurations 0c8e2cc6 *: actually support joining a userns with a new container 87792ce0 libct/cg: add swapOnlyUsage in MemoryStats 32a26a71 build(deps): bump github.com/cyphar/filepath-securejoin be887840 VERSION: back to development 18a0cb0f VERSION: release 1.1.10 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-03-15 17:17:19 +00:00
Bruce Ashfield	f27566f573	layer-wide: drop PYTHON_PN ... Similar to OE core commit b566b1e32c7993d1ab7795562f648e52ce186a70, we no longer need PYTHON_PN for any abstraction of python2 vs python3. Our similar / dup recipes are now causing signature differences, so we go ahead and make the substitution, even if it isn't stricly required. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-02-21 22:48:29 +00:00
Ming Liu	eccd6f11b8	container-host-config:storage.conf: sync with libpod v4.8.2 ... The current storage.conf is based on v1.33.0 of: https://github.com/containers/storage.git while in podman v4.8.2, it has been upgraded to v1.50.3-0.20231005112617-44418abb2d89 of: https://github.com/containers/storage.git let's sync it with podman v4.8.2. which comprises the following commits in storage.conf: ``` 42d1d9637 Run codespell on code 91da0c2be add documentation on imagestore and add a warning if set 01fccaa58 options: enable Remap-User/Group setting e125790e9 Fix typo in storage.conf 57582350c Document transient_store in man page 522b67c94 Add new storage.conf option "transient_store" 5e9e2ba6b Revert incorrect "heeded" -> "needed" typo fix cffa19709 fix typos and spelling 268af0001 chunked: drop host dedup feature b64cfb4f4 Document the pull_options 17fccdc2d Clearup inheritance rules for storage.conf 3c76f174d Tell users who change graphroot location to fix the SELinux labels ``` Signed-off-by: Ming Liu <liu.ming50@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-02-01 14:15:13 +00:00
Peter Kjellerstedt	a0ad18ea28	containerd-opencontainers: Use RDEPENDS:${PN} instead of RDEPENDS:${BPN} ... The original purpose of using BPN vs PN in the RDEPENDS was due to 32bit multilib issues. Those problems are no longer present, so we can adjust this recipe to use the standard PN in rdepends. This change avoids the following warning: WARNING: .../containerd-opencontainers_git.bb: Variable key RDEPENDS:${PN} (...) replaces original key RDEPENDS:containerd-opencontainers ( ${VIRTUAL-RUNTIME_container_runtime}). if, e.g., RDEPENDS:${PN}:append = " ..." is used in a bbappend or bbclass. Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-01-19 14:43:37 +00:00
Bruce Ashfield	5bd48ee74f	buildah: update to 1.33.3 ... Bumping buildah to version v1.33.3-1-g5ca83472c, which comprises the following commits: 21e754fd3 [release-1.33.2] Bump Buildah to v1.33.3 b44d6bd56 [release-1.33.2] Bump c/common to 0.57.2 and c/image to 5.29.1 7fffb3366 [release-1.33.2] Bump to v1.33.2 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-01-19 14:38:36 +00:00
Chen Qi	b3e5c517bf	buildah: fix branch name ... The branch 1.33.2 is not there any more. The correct branch for now is 1.33. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-01-19 14:38:30 +00:00
Xiangyu Chen	cb84780339	criu: add cgroup-lite to RDEPENDS ... criu needs cgroup-lite to init the cgroup configurations during system start. Signed-off-by: Xiangyu Chen <xiangyu.chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-01-19 14:29:24 +00:00
Xiangyu Chen	664e3573d4	lxc: adjust the lxc-test-unpriv running order ... Some of lxc test cases can not full clean the system environment, that cause lxc-test-unpriv cannot execute successfully. Since those code in lxc are using for tests, so just adjust the cases order. Signed-off-by: Xiangyu Chen <xiangyu.chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-01-19 14:29:24 +00:00
Ming Liu	f33765288d	podman: add test instructions for podman system service ... Signed-off-by: Ming Liu <liu.ming50@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-01-19 14:29:24 +00:00
Ming Liu	8891c1e02c	docker-compose: introduce pkgconfig docker-plugin ... This allows docker-compose choose to be built as a docker plugin or a standalone binary, in the later case, docker-compose does not have to rdepends on docker, so nother container tools like podman can also use it. Signed-off-by: Ming Liu <liu.ming50@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-01-04 02:52:53 +00:00
Bruce Ashfield	a3da99e3ff	podman-tui: update to v0.14.0 ... Bumping podman-tui to version v0.9.0-207-gc545dbd7, which comprises the following commits: c545dbd7 Bump to v0.14.0 ac61433c container create dialog - user/groups category options c3274937 Bump github.com/containers/common from 0.57.0 to 0.57.1 7227ec91 Bump actions/stale from 8 to 9 808dc504 Bump actions/setup-python from 4 to 5 d4121000 Bump actions/setup-go from 4 to 5 1df86623 Bump github.com/containers/podman/v4 from 4.8.0 to 4.8.1 9822b029 container create dialog - environment category options 7f698267 container create options (privileged, timeout) b985d1fa Bump to v0.14.0-dev c0bf2daa Bump to v0.13.0 74103352 running golangci-lint on ui/containers package 6fad611b Bump github.com/containers/podman/v4 from 4.7.2 to 4.8.0 717e859a running golangci-lint on ui/images package e9207835 Bump golang.org/x/crypto from 0.15.0 to 0.16.0 0ab99d84 running golangci-lint on ui/dialogs package f19ddfc2 running golangci-lint on ui/networks package f99918f6 running golangci-lint on ui/pods package 068b7c00 running golangci-lint on ui/system package e27eaf42 running golangci-lint on ui/utils package c5f1711c running golangci-lint on app package b94bfa90 running golangci-lint on config package ce5905bd running golangci-lint on cmd package 56190b2a github action update 05f7e7ab adding container create mount inputfield option 8cfb6130 use inputfield for container create volume option 76e6d03a Bump github.com/navidys/tvxwidgets from 0.4.0 to 0.4.1 7a7897c6 Bump github.com/go-jose/go-jose/v3 from 3.0.0 to 3.0.1 ef812d9c Bump github.com/containers/storage from 1.50.2 to 1.51.0 ae72e400 EPEL rpm package e62199b1 docs update - add Gentoo in packaged versions 35468621 Bump to v0.13.0-dev 15759448 Bump to v0.12.0 28e8a2d5 Bump github.com/containers/buildah from 1.31.2 to 1.32.2 5ce10afe Bump github.com/containers/podman/v4 from 4.6.2 to 4.7.2 1e56294d gh action update 226be72d using github.com/distribution/reference 38ed7d29 Bump github.com/docker/distribution 00759199 Bump github.com/docker/docker d61975c8 Bump google.golang.org/grpc from 1.57.0 to 1.57.1 8231c9ca Bump golang.org/x/net from 0.13.0 to 0.17.0 c42e4015 Bump golang.org/x/crypto from 0.13.0 to 0.15.0 4cca7cae update ginkgo cli version to 2.11.0 03ad465a Bump github.com/spf13/cobra from 1.7.0 to 1.8.0 0b5ff67e running codespell 8cfaf08d Bump github.com/rs/zerolog from 1.30.0 to 1.31.0 f5e6f7ed Bump github.com/containers/storage from 1.48.0 to 1.50.2 fa255fdc Bump github.com/navidys/tvxwidgets from 0.3.0 to 0.4.0 2d854793 Bump github.com/containers/podman/v4 from 4.6.1 to 4.6.2 c132c0e6 Bump github.com/cyphar/filepath-securejoin from 0.2.3 to 0.2.4 e4643785 Bump github.com/docker/docker f05f381b Bump golang.org/x/crypto from 0.12.0 to 0.13.0 78ce8c9d Bump actions/checkout from 3 to 4 de8383d9 Bump tim-actions/commit-message-checker-with-regex from 0.3.1 to 0.3.2 11f9b244 Bump to v0.12.0-dev 33d9be57 Bump to v0.11.0 74360a37 fix missing volume list created time column c532db41 Bump github.com/containers/podman/v4 to 4.6.1 65b96aa3 Vagrantfile update (fedora-38 image) 78e96572 Bump github.com/containers/buildah from 1.31.1 to 1.31.2 af0700f2 Bump github.com/containers/common from 0.55.2 to 0.55.3 a6c67e96 Bump golang.org/x/crypto from 0.11.0 to 0.12.0 83f9b0f0 Bump github.com/docker/docker bd51d4bd Bump github.com/rs/zerolog from 1.29.1 to 1.30.0 f1e9e1fb Bump github.com/containers/buildah from 1.30.0 to 1.31.1 24ff42f2 Bump github.com/containers/common from 0.53.0 to 0.55.2 6e9ce1bc Bump golang.org/x/crypto from 0.10.0 to 0.11.0 efdfbe48 Bump github.com/containers/storage from 1.46.1 to 1.48.0 e99a7b0e Bump golang.org/x/crypto from 0.9.0 to 0.10.0 98c6660a Bump github.com/BurntSushi/toml from 1.2.1 to 1.3.2 cc2eedf9 Bump github.com/docker/docker dbe94d6c Bump github.com/sirupsen/logrus from 1.9.2 to 1.9.3 4479d607 Bump github.com/containers/podman/v4 from 4.5.0 to 4.5.1 22e1da63 Bump github.com/sirupsen/logrus from 1.9.0 to 1.9.2 661d46e4 Bump github.com/docker/distribution 3f90e76b Bump github.com/sigstore/rekor from 1.1.0 to 1.2.0 9ab5f1fa Bump tim-actions/get-pr-commits from 1.2.0 to 1.3.0 ee3cfd11 Bump github.com/containers/common from 0.52.0 to 0.53.0 9596156d Bump to v1.5.0-dev 53e2d8af Bump to v1.4.0 ef699e43 Bump github.com/rs/zerolog from 1.29.0 to 1.29.1 3213a478 Bump github.com/containers/podman/v4 from 4.4.0-rc1 to 4.5.0 55bdd266 Bump github.com/containers/common 24231629 Bump github.com/docker/docker 84ae09ed podman update to v4.4.4 d7314c7a Bump github.com/spf13/cobra from 1.6.1 to 1.7.0 d8d12e1a Bump github.com/containers/storage from 1.45.4 to 1.46.0 c8141ba5 packit update - remove centos stream build 449d8f48 golangci-lint system package b0d20b2a Bump actions/stale from 7 to 8 613d18f4 ui/styles - applying golint 78395235 ui/infobar - applying golint 745a331d ui/help - applying golint 4c27c3de ui/volumes code improvement and golint 02740c14 adding container attach command to container page/view 6b5beb41 fix container create error without health options 705bc347 Bump actions/setup-go from 3 to 4 cf4509ed Add container health options to the container create dialog d79883ea Add packit configurtion to build RPM as part of PR tests ba02fb57 Update unit tests and github workflow for running the tests 4e3889f0 fix container create error when volume is selected 0af3e47b update github workflow golang version to 1.18.8 f572f481 Golangci-lint update to v1.51.1 c2932fc2 fix vendor + codepsell 1e35d9af Bump golang.org/x/crypto from 0.6.0 to 0.7.0 bb17bbc5 unit tests fix 13286688 Bump to v0.10.0-dev 28f800cd Bump github.com/onsi/ginkgo/v2 from 2.8.4 to 2.9.0 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-01-04 02:52:53 +00:00
Bruce Ashfield	01a60446c5	podman: update to v4.8.2 ... Bumping libpod to version v4.8.2-2-g0ec4c8b1d, which comprises the following commits: 4aab4e3fe bump release to v4.8.3-dev aa546902f v4.8.2 a9b20a4a2 [CI:DOCS] Update RELEASE_NOTES.md for v4.8.2 775054343 Kube Play - set ReportWriter when building an image 1864ea94f Fix user-mode net init flag on first time install 3c0d66d83 bump c/common to v0.57.1 b0e2ffc51 bump version to v4.8.2-dev ef6e5ac40 v4.8.1 0b72d1bf2 Update RELEASE_NOTES.md for v4.8.1 2d20d2e5c Handle symlinks when checking DB vs runtime configs 6bbbfaa05 libpod: Detect whether we have a private UTS namespace on FreeBSD a8b8dc570 pkg/bindings: add new APIVersionError error type 86bb91001 fix podman-remote exec regression with v4.8 9c9d2fcaf sqlite: fix issue in ValidateDBConfig() 1e5a1336f sqlite: fix missing Commit() in RemovePodContainers() 429080f02 sqlite: set busy timeout to 100s a72c39a53 Fix locking error in WSL machine rm -f a7c522dfe Gating test fixes a62b81d90 If API calls for kube play --replace, then replace pod 70ba64f4c Fix wsl.conf generation when user-mode-networking is disabled e627de1b4 Bump to v4.8.1-dev c4dfcf148 Bump to v4.8.0 0efc6ea30 Update release notes for 4.8.0 4b95c6c30 Add notes on upcoming deprecations to release notes 1c1477ddf [v4.8] Bump to Buildah v1.33.2 f02155142 [CI:DOCS] Update release notes 697e66c78 machine applehv: create better error on start failure 53f176732 Bump to v4.8.0-dev ac1d54e68 Bump to v4.8.0-rc1 66cba2794 Create release notes for v4.8.0 ac290f446 Update release notes from v4.7 branch 883ce7704 Cirrus: Update operating branch 9ea390191 rootless_tutorial: modernize ee1654622 Bump Buildah to v1.33.1 3d86a9658 Bump Buildah to v1.33.0 60d9f9b80 Update to libhvee 0.5.0 d32f61d91 vmtypes names cannot be used as machine names d0b32255e Add support for --compat-auth-file in login/logout a3d5814e0 Update tests for a c/common error message change ced07a55f Update c/image and c/common to latest, c/buildah to main a10b88cb2 CI: test overlay and vfs da899b92d [CI:DOCS] Add link to podman py docs d2a4ec867 Test fixes for debian 23ead49de pasta tests: remove some skips d711c3f46 VM images: bump to 2023-11-16 5f3f8a3ca fix(deps): update module k8s.io/kubernetes to v1.28.4 [security] 3d88f614f [CI:DOCS] Machine test timeout env var e35fc92c0 Quadlet - add support for UID and GID Mapping dc709e4d7 Quadlet - Allow using symlink on the base search paths 7b826b230 [skip-ci] Update dessant/lock-threads action to v5 ea89eaa1c Avoid empty SSH keys on applehv 33ddd79e2 qemu,parseUSB: minor refactor 669829447 fix(deps): update module github.com/gorilla/handlers to v1.5.2 49b152f49 docs: fix relabeling command 5dc807487 Pass secrets from the host down to internal podman containers 047da19b5 (Temporary) Emergency CI fix: quay search is broken e1f3ae0d8 Update podman-stats.1.md.in 6fa4a975c [CI:BUILD] packit: handle builds for RC releases bd375058c Quadlet test - add case for multi = sign in mount 5e0471ba7 set RLIMIT_NOFILE soft limit to match the hard limit on mac d636ce8d7 rootless: use functionalities from c/storage 6b5b39912 CI: e2e: fix a smattering of test bugs that slipped in d07263f34 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.1 fbd1ba68f vendor: update c/storage 956c0d6ec Improve the documentation of quadlet 39d647a2f Fix socket mapping socket mapping nits 5388836c1 fix(deps): update module golang.org/x/tools to v0.15.0 60f67eec7 fix(deps): update github.com/containers/libhvee digest to 9651e31 9cd975d59 [skip-ci] Update github/issue-labeler action to v3.3 b8d59030c Document --userns=auto behaviour for rootless users c23963d7a machine: qemu: add usb host passthrough 4a75a2b3c fix(deps): update module golang.org/x/net to v0.18.0 1c5bc7e09 fix(deps): update module github.com/onsi/gomega to v1.30.0 b2c56365b Refactor Ignition configuration for virt providers 81dc3f183 [CI:BUILD] rpm: disable GOPROXY 78798cab0 Automatic code cleanups - JetBrains a45ba06d0 Refactor key machine objects 1c969219d systests: add [NNN] prefix in logs, NNN = filename 92cd7b25f systests: add a last-minute check for db backend d44f71c13 applehv: allow virtiofs to mount to / c2de6d34c Run codespell on podman 8f5c46c9e update completion scripts for cobra v1.8.0 28f3e9fe3 Fix man page display of podman-kube-generate 8effb7825 Try to fix the broken formatting of man podman‐kube‐apply(1). 3eb2d5ceb fix(deps): update module golang.org/x/text to v0.14.0 108d2bc43 docs: make CNI removal explicit c1fe1f9d3 fix(deps): update module github.com/gorilla/mux to v1.8.1 e78288344 fix(deps): update module github.com/spf13/cobra to v1.8.0 0824e45c8 fix(deps): update module golang.org/x/sync to v0.5.0 da897bd04 fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.18 420316ef6 Podman push --help should reveal default compression 942bcf34b Update container-device-interface (CDI) to v0.6.2 375b0cc13 fix: adjust helper string in machine_common 9e05fb14a fix: adjust helper string in machine_common 607aff55f remote,test: remove .dockerignore which is a symlink 6b7d7f6fb [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.2 b5f854458 fix: adjust helper string in machine_common ce334ed9d vendor: update github.com/coreos/go-systemd/v22 to latest main 2a17baa29 CI: default to sqlite 33753db47 vendor: update c/common 613f50c7a check system connections before machine init ea4775ec9 Consume OCI images for machine image d2a37222b freebsd: drop dead code 06a07c98e libpod: make removePodCgroup linux specific e4f1c87ea containers: drop special handling for ErrCgroupV1Rootless 0b6abfe1e compose: fix compose provider debug message aefa9abf4 image: replace GetStoreImage with ResolveReference 03419d6da vendor: bump c/image to 373c52a9466f ce9c1b9b8 Refactor machine socket mapping f6ec210f3 AppleHV: Fix machine rm error message af0ef47f0 Add status messages to podman --remote commit 3241b3259 End-of-Life policy for github issues 390e9ddc9 fix(deps): update module github.com/shirou/gopsutil/v3 to v3.23.10 18d6bb40d Support passing of Ulimits as -1 to mean max 78765b14d fix(deps): update github.com/docker/go-connections digest to 0b8c1f4 ffb96ad8b fix(deps): update github.com/crc-org/vfkit digest to f3c783d 7153124f9 Log gvproxy and server9 to file on log-level=debug d9c388e2f Change to using gopsutil for cross-OS process ops 642fa9897 Initial addition of 9p code to Podman b332ca7a0 libpod: fix /etc/hostname with --uts=host 89d7b2735 systests: stty test: retry once on flake 6b94c8fd3 systests: pasta: avoid hangs 4c67a6aed Fix secrets scanning GHA Workflow 2193bb8fc [skip-ci] Update dawidd6/action-send-mail action to v3.9.0 e9dd41183 docs: clarify systemd cgroup mount a1577ec7b podman build --remote URI Dockerfile shoud not be treated as file 95a5ad258 Small fixes for wacko CI environments c6d410cc3 Do not add powercap mask if no paths are masked 3743955d6 compose: try all possible providers before throwing an error 91df369ae podman kube play --replace should force removal of pods and containers 3ce62d3cc Sort kube options alphabetically e966c86d9 container.conf: support attributed string slices 91ccd7cd2 CI: podman farm tests cleanup be7dd128e Mask /sys/devices/virtual/powercap 05a607f14 Update module github.com/google/uuid to v1.4.0 6a0b2c680 fix(deps): update module github.com/docker/docker to v24.0.7+incompatible 6badb659c fix(deps): update module go.etcd.io/bbolt to v1.3.8 9e3363c5e CI: systest: safer random_rfc1918_subnet c841fa9e9 CI: e2e: safer GetPort() fd5140d87 Fix broken code block markup in Introduction.rst d0ce60c63 chore(deps): update module google.golang.org/grpc to v1.57.1 [security] 15969a60b chore: remove npipe const and use vmtype const for checking 2158e1540 Update module github.com/onsi/gomega to v1.29.0 c0fb8fe59 CI: try to fix more networking flakes c21f28813 fix: check wsl npipe when executing podman compose 9ea1ed6d4 [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.1 76cca08f8 Quadlet - explicit support for read-only-tmpfs c13b8e3c9 compat API: fix image-prune --all 0e15861c5 Makefile - allow more control over Ginkgo parameters ebe01ca29 Add e2e tests for farm build 989afd910 vendor c/{buildah,common}: appendable containers.conf strings, Part 1 dd8f57a3b Add podman farm build command 2e88d580a Add emulation package 06b726497 Use buildah default isolation when working with podman play kube 0a2aae119 docs(API): Fix compat network (dis-)connect 1b466ccbd test/e2e: do not import buildah 8a0968baa pkg/specgen: remove config_unsupported.go cb9dfeb8e pkg/parallel/ctr: add !remote tag d4a67cf45 pkg/domain/filters: add !remote tag 9cecae8c2 pkg/ps: add !remote tag 1d1630990 pkg/systemd/generate: add !remote tag bad25da92 libpod: add !remote tag abb5c86b6 pkg/autoupdate: add !remote tag 01a750699 vendor latest c/common 3615af903 libpod: remove build support non linux/freebsd 1850670f1 Fix typo 2e57746ff test/apiv2: adapt apiv2 test on cgroups v1 environment c3ba0221e ginkgo setup: retry cache pulls ee6070888 Support size option when creating tmpfs volumes 8876380af not mounted layers should be reported as info not error 85cc4092f CI: stop using registry.k8s.io a8e1a5ed1 fix(deps): update module github.com/vbatts/git-validation to v1.2.1 6d99cb5cd test fixes for c/common tag chnages dfdd93323 vendor latest c/common d6f44d956 hyperV: Update lastUp time 1ac110835 [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.0 9e648a1f5 lint: disable testifylint 29273cda1 lint: fix warnings found by perfsprint 64f43fed4 lint: fix warnings found by inamedparam c21f42a4e lint: fix warnings found by protogetter 03947ab03 libpod: skip DBUS_SESSION_BUS_ADDRESS in conmon 936e30f68 Use node hostname in kube play when hostNetwork=true bd953fdc7 cirrus setup: special-case perl unicode ca9efb0cd network: document ports and macvlan interaction f2bc63894 quadlet: document cgroupv2 requirement e8183e836 [skip-ci] Update actions/checkout digest to b4ffde6 1d2589c3f Revert "Emergency workaround for CI breakage" f48a706ab remote: exec: do not leak session IDs on errors ad1ab71b8 fix(deps): update github.com/containers/storage digest to 79aa304 d1086281b fix(deps): update module k8s.io/kubernetes to v1.28.3 657029da7 System tests: fix broken silence127 b72bb1162 Add TERM iff TERM not defined in container when podman exec -t 44ed415b2 Emergency workaround for CI breakage d4d76479c Kill gvproxy when machine rm -f cad4d0ee9 Fix path for omvf vars on Darwin/arm64 285718915 Allow systemd specifiers in User and Group Quadlet keys caef657c5 libpod: rename confusing import name efe5e98d0 use FindInitBinary() for init binary 1d3ec78e0 vendor latest c/common fa19e1baa exec: do not leak session IDs on errors 1efcd1ecf systests: cp test: lots of cleanup 2d65e57ae Define better error message for container name conflicts with external storage. 9b8e01efd Quadlet - support ImageName for .image files 64171043a test/system: ignore 127 if it is the expected rc c65d1c02b test/apiv2/20-containers.at: fix NanoCPUs tests on cgroups v1 831844b59 image history: fix walking layers ad5319025 fix(api): Ensure compatibality for network connect e0561301c [CI:DOCS] Add cross-build target info. dc705d370 machine set: document --rootful better bbd6281ec libpod: restart+userns cleanup netns correctly 3b6a4ac37 Minor log and doc fixes f875ae317 Quadlet man page - discuss volume removal explicitly 5d5facbd7 Quadlet - add support for KubeDownForce 6ba67ba96 System Test - Quadlet kube oneshot 9637fed2f Fix output of podman --remote top dcb421bc5 buildah-bud: test relative TMPDIR c8604081e Fix handling of --read-only-tmpfs flag 1b0be2f34 Vendor common and buildah main 5db3b753a remote,build: wire unsetlabels 331e47acb test: build with TMPDIR as relative 6cf3dd493 docs: add unsetlabel 64ff14932 vendor: bump buildah to v1.32.1-0.20231012130144-244170240d85 74ed1d6e7 fix(deps): update module github.com/vbauerster/mpb/v8 to v8.6.2 b9f2c4d17 fix: pull error response docker rest api compatibility 29f5c563e Show client info even if remote connection fails 52112fc5c fix(deps): update github.com/containers/libhvee digest to e51be96 cb53bcf23 Run codespell 987dc2b8b SetLock for all virt providers 61e0b64b9 Machine: Teardown on init failure 99a14332e healthcheck: make sure to always show health_status events 7b84b55da Apply suggestions from code review ca518888e [CI:DOCS]rtd: implement v2 build file 702f15528 Quadlet - support oneshot .kube files 3cc9db862 libpod: fix deadlock while parallel container create 2301320f6 fix(deps): update module golang.org/x/net to v0.17.0 8b46e852e api: add `compatMode` paramenter to libpod's pull endpoint 76fec1227 api: break out compat image pull 40f897653 fix(deps): update module github.com/cpuguy83/go-md2man/v2 to v2.0.3 29ae51600 use sqlite as default database 8a52e638e vendor latest c/common acd0a93c3 fix(deps): update module github.com/nxadm/tail to v1.4.11 d18369ee8 Check for image with /libpod/containers/create 8ac2aa793 container: always check if mountpoint is mounted 787b1b25c fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.0 9beb3a972 vendor: update c/storage 36bf90518 api: drop debug statement d321d427d Quadlet - add support for global arguments 732cec794 Add system test 10aa39068 fix(deps): update module golang.org/x/tools to v0.14.0 3fdb6ee2d Don't ignore containerfiles outside of build context b3209dc5d fix(deps): update github.com/containers/libhvee digest to fcf1cc2 eda275820 fix(deps): update module golang.org/x/term to v0.13.0 da6c86dfc Update module golang.org/x/sys to v0.13.0 1c0780097 [CI:DOCS] Add updating version on podman.io to release process 362eca669 containers.conf: add `privileged` field to containers table 6cb10425d Implement secrets/credential scanning 106abd13b Cirrus: Execute Windows podman-machine e2e tests 338e4f590 vendor: bump c/storage 8807243cc Update module golang.org/x/sync to v0.4.0 2168f0745 [CI:DOCS] update swagger version on docs.podman.io 0414f88b3 Create Qemu command wrapper df6a00026 Adjust to path name change for resolved unit 2a38f30b6 Revert "Fix WSL systemd detection" f622a2a54 [CI:BUILD] rpm/copr: gvforwarder recommends for RHEL 27f58803d [CI:DOCS] update kube play delete endpoint docs 3fc7c42e1 [CI:DOCS] Remove dead link from README 1b3cedbf3 test/system: --env-file test fixes 617af9bea Revert "feat(env): support multiline in env-file" 5f340487e Revert "docs(env-file): improve document description" 9599589f1 Revert "fix(env): parsing --env incorrect in cli" 7e6e26732 Filter health_check and exec events for logging in console 0443c5166 inspect: ignore ENOENT during device lookup b576b7932 test, manifest: test push retry cbca39529 Fix locale issues with WSL version detection b988eadaf vendor: update module github.com/docker/distribution to v2.8.3+incompatible 1ebd22303 vendor: bump c/common to v0.56.1-0.20231002091908-745eaa498509 8b647cdb5 Update github.com/containers/libhvee digest to e9b1811 cc946daff windows: Use prebuilt gvproxy/win-sshproxy binaries 979c77f10 Volume create - fast exit when ignore is set and volume exists 874e4466a Update golang.org/x/exp digest to 9212866 22a1d015c Update github.com/opencontainers/runtime-spec digest to c0e9043 229734c10 remove selinux tag as not needed anymore 049a5fb92 [skip-ci] Improve podmansh(1) 85ed9edde Build applehv for Intel Macs 7ef8519f4 Revert "GHA Workflow: Faster discussion-locking" 59e0919bc update vfkit vendored code 17cebb3ff Add DefaultMode to kube play ba788c1bb Fix broken podman images filters 9b3964111 Remove `c.ExtraFiles` line in machine f21c1d238 podman: run --replace prints only the new container id bcfd9f340 New machines should show Never as LastUp 94818f594 podman machine: disable zincati update service b284128d7 Revert "cirrus setup: install en_US.UTF-8 locale" b28188de2 Cirrus: CI VM images w/ newer automation-library 2b9c0555f CI VMs: bump to f39 + f38 ecd7b3802 [CI:DOCS] Update podman load doc 58b5ae22e Update mac installer to latest gvproxy release 5b990c383 Fix WSL systemd detection be823b388 Add documentation for the vrf option on netavark fda028ca0 fix(deps): update github.com/containers/common digest to 9342cdd 6306e8985 fix: typos in links, path and code example ccb7da52c e2e: ExitCleanly(): manual special cases 611db19b3 e2e: ExitCleanly(): the final fron^Wcommit 149d3f7ad [CI:DOCS] Add win-sshproxy target to winmake 0d4526e61 wsl: enable machine init tests 455d16549 Update docs/source/markdown/options/rdt-class.md bfbd0c896 move IntelRdtClosID to HostConfig 4853320ce use default when user does not provide rdt-class 77336de8f Add documentation for Intel RDT support 24b2f829b Add test for Intel RDT support 40d3c3b9b Add Intel RDT support 295439265 [CI:DOCS] Fix podman form update --help examples f0eb45667 Quadlet container mount - support non key=val options 0b5ea1e6e test/e2e: default to netavark 4ed9dc1ad [skip-ci] Update dawidd6/action-send-mail action to v3.9.0 48ea4b9ec fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.7.1 90eb73629 fix(deps): update github.com/containers/common digest to 4619314 172494423 applehv: enable machine tests for start 2ff43429f applehv: machine tests for stop and rm 127ebe2b2 Update machine tests README 995a6a8ac Add podman socket info to machine inspect 80952db0b Fix podman machine info test for hyperV 7ade97210 libpod: pass entire environment to conmon e4b7455b7 e2e: ExitCleanly(): manual fixes to get tests working dbd946a93 e2e: ExitCleanly(): a few more 59ffea80d FCOS+podman-next: correct GHA conditional syntax 8bad842a4 pkg/machine/e2e: wsl stop 217c4d546 wsl: machine tests for inspect e4bfcfc25 wsl: machine tests for ssh 5636d0219 fix(deps): update github.com/containers/common digest to e18cda8 a112ee895 wsl: machine start test d3d5011dc wsl machine tests: set cc4917d81 wsl: machine tests ec68a7489 Skip proxy test for hyperV 33a92aa00 Enable machine e2e test for applehv 65ce03486 hyperV: Respect rootful option on machine init 52ba1bfff [CI:BUILD] FCOS image: enable nightly build ffd67cf75 e2e: use safe fedora-minimal image 41e51f473 hyperv: machine e2e tests for set command 59e295f2a podman build: correct default pull policy 6293ec2e2 fix handling of static/volume dir 26b5b1dd3 unbreak CI: useradd not found 08936db35 hyperv: set more realistic starting state 2bef573f3 hyperv: use StopWithForce with remove f52b02f40 Fix all ports exposed by kube play cd4f61181 Fix setting timezone on HyperV 172369b54 fix(deps): update github.com/containers/gvisor-tap-vsock digest to 97028a6 e0b44bcf3 Fix farm update to check for connections d8e305716 Adjust machine CPU tests 8188a6fcf Bump version on main e65874903 [CI:BUILD] Packit: show SHORT_SHA in `podman --version` for COPR builds 96142c2f7 Vendor c/common af2665c28 pod rm: do not log error if anonymous volume is still used 4916f7d77 e2e: ExitCleanly(): manual fixes to get tests passing 8e743fa1d e2e: ExitCleanly(): a few more c66aa3b7b fixes for pkg/machine/e2e on hyperv 83b6975d1 test: fix rootless propagation test 6c2493f78 [CI:BUILD] packit: tag @containers/packit-build team on copr build failures 92f4dcb09 Enable disk resizing for applehv 5b3801776 Various updates for hyperv and machine e2e tests 682ca6b2e test: update fedoraMinimal version 8d3010d06 specgen, rootless: fix mount of cgroup without a netns 39ba5ff24 Automatically remove anonymous volumes when removing a container 24d3347ed Use ActiveServiceDestination in ssh remoteConnectionUsername b6ea49f5a fix(deps): update github.com/containers/gvisor-tap-vsock digest to 9298405 c69873d67 e2e: ExitCleanly(): generate_kube_test.go 841cfa802 e2e: generate kube -> kube generate d1f86d524 e2e: ExitCleanly(): generate_kube_test.go f3e9a6369 windows cannot "do" extra files 62e13bec7 e2e: ExitCleanly(): Fixes for breaking tests 09c3ac48f play kube -> kube play e83ced8a0 e2e: ExitCleanly(): play_kube_test.go eb9283c6f introduce pkg/strongunits 6d8b3047d Makefile equiv Powershell script 4652a2623 pass --syslog to the cleanup process 73dc72f80 vendor of containers/common 1cbe692de fix --authfile auto-update test 8e5adde0b compat API: speed up network list 8c95aa402 Change priority for cli-flags for remotely operating Podman befdb4199 libpod: remove unused ContainerState() fucntion 0ec63abca [CI:BUILD] Packit: Enable failure notifications for cockpit tests 0ac98176b e2e: ExitCleanly(): more low-hanging fruit a50fb7e06 e2e: ExitCleanly(): more low-hanging fruit 1908663f1 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.12.1 38f5ead33 Enable machine e2e tests for WSL ff07abea4 systests: tighter checks for unwanted warnings 618f846ed GHA Workflow: Faster discussion-locking 289be0c01 [CI:BUILD] FCOS + podman-next image: pull in wasm 649539519 [CI:BUILD] rpm: remove gvproxy subpackage b0f7072ac [CI:DOCS] Tweak podman to Podman in a few farm man pages 8afffa1aa Docs on sig-proxy are wrong, we support TTY 4fca726f7 e2e: ExitCleanly(): low-hanging fruit, part 2 64c46c429 e2e: ExitCleanly(): low-hanging fruit, part 1 113b41b6f Buildtag out unix commands for common OS files aec58f515 systests: clean up after tests; fix missing path in logs fa7150451 [CI:BUILD] followup PR for fcos with podman-next 289e59ee1 Implement gvproxy networking using cmdline wrapper e68e37136 fix, test: rmi should work with images w/o layers e9b98510d vendor: bump c/common to v0.56.1-0.20230919073449-d1d9d38d8282 50a685bd1 Quadlet Image test - rearrange test function e6cf09b68 e2e: continuing ExitCleanly() work: manual tweaks d78221545 e2e: continuing ExitCleanly() work 47160da7a [CI:DOCS] Improve podman-tag man page ef553fb0d [CI:DOCS] Improve podman-build man page 93dc30e1e [CI:DOCS] Include precheck to release process a80a908df [CI:DOCS] consistentize filter options in man pages 55ca571e5 Quadlet - add support for .image units 41beb5374 --env-host: use default from containers.conf 0b7142f4a error when --module is specified on the command level deba3b80a man page crossrefs: add --filter autocompletes 03dd5f256 Fix specification of unix:///run 98e6dda69 Add label! filter and tests to containers and pods 6f4f94137 Add test for legacy address without two slashes 336055fe3 Use url with scheme and path for the unix address Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-01-04 02:52:53 +00:00
Bruce Ashfield	695a4ca0a4	netavark: update to v1.9.0 ... Bumping netavark to version v1.9.0-20-g167e2e4, which comprises the following commits: 3faf33f fix(deps): update rust crate tokio to 1.35 4759152 dhcp-proxy: return actual error instead of generic one f571e31 dhcp-proxy: skip set gateway if missing 63c34a5 chore(deps): update rust crate once_cell to 1.19.0 ff45e22 fix(deps): update rust crate nispor to 1.2.15 c85d844 fix(deps): update rust crate serde to 1.0.193 3bbc9fd fix(deps): update rust crate clap to ~4.4.10 4f27552 aardvark: show error if process is in wrong netns a4e082d aardvark: remove unessesary unlock lockfile calls 4c58983 fix(deps): update rust crate url to 2.5.0 f588f1d Bump working version to v1.10.0-dev 1ac6900 v1.9.0 Release d688bdc v1.9.0 Release notes 2f31a95 test: fix syntax problem in helpers.bash 530c911 run cargo update d49f979 use OsString/Path over String for file paths c6f48d6 chore(deps): update dependency containers/automation_images to v20231116 8e943b5 firewalld-reload: fix CI tests 2172205 firewalld-reload: prevent race which could leak fw rules 6aee10f fix(deps): update rust crate clap to ~4.4.8 74ed450 CI: skip broken firewalld test e281e9b fix(deps): update rust crate http to 0.2.11 708bd43 rpm: add netavark-firewalld-reload.service to spec b5d7510 firewalld-reload: add integration tests 268a927 firewall/state: make sure to ignore enoent on read 0449ba5 firewall-reload: integrate actual logic to reload rules 13b2133 firewall/state: improve error messages d2eeaab firewall: add state functions to serialize configs cd1114c firewalld: fix lint errors with rust v1.73 28c48ce firewall: do not use full Network in NetworkStruct aebb5da firewall: add dns_port to SetupNetwork cb5aa2e add firewalld-reload subcommand 3df3c88 fix(deps): update rust crate http to 0.2.10 9a3266b fix(deps): update rust crate env_logger to 0.10.1 a063151 fix(deps): update rust crate tokio to 1.34 dce15ba Update rust container build files 730e1bf bridge: force static mac on bridge interface fca4999 fix(deps): update rust crate futures-core to 0.3.29 6291f27 fix(deps): update rust crate serde to 1.0.190 e7a4435 fix(deps): update rust crate serde_json to 1.0.108 b4ca3e0 fix(deps): update rust crate sysctl to 0.5.5 9d9f600 fix(deps): update rust-futures monorepo to 0.3.29 78b4fea CI: Drop CI VM distro name 116d565 chore(deps): update dependency containers/automation_images to v20231004 f42b296 fix(deps): update rust crate tokio to 1.33 881828f build-sys: Filter to tier 2 Linux declaratively f29b03f fix(deps): update rust crate sha2 to 0.10.8 a54db5d fix podman.io community link 33a4c86 Bump to v1.9.0-dev 837f1f3 Release v1.8.0 046b4cf update release notes for v1.8.0 11db130 run cargo update 4b6d5ab Add vrf support for bridges d211c7a Packit: switch to @containers/packit-build team for copr failure notification comments 6989cda fix(deps): update rust crate nispor to 1.2.14 40df9d9 [CI:BUILD] Packit: tag @lsm5 on copr build failures b8671a6 chore(deps): update rust crate chrono to 0.4.31 2904dc1 fix(deps): update rust crate serde_json to 1.0.107 bc383f2 rust io safety: convert RawFd to BorrowedFd<> 61b8e62 bump nix to 0.27.1 156073b chore(deps): update rust crate chrono to 0.4.30 521e490 fix(deps): update rust crate serde_json to 1.0.106 b9441cf chore(deps): update rust crate chrono to 0.4.29 8c6c7fd fix(deps): update rust crate netlink-packet-route to 0.17.1 f5d0a95 Bump tonic and prost 70cc3e9 Update container image to F38 3806d9a Add ACCEPT rules in firewall for bridge network with internal dns. d9961dc chore(deps): update rust crate tonic-build to 0.10 7d581d2 fix(deps): update rust crate nispor to 1.2.13 ddbfc60 fix(deps): update rust crate serde to 1.0.188 96368f4 Fix clippy warnings about formatting 4b0b499 update chrono crate be29339 fix(deps): update rust crate url to 2.4.1 bcd1ebc Add protoc dependency to README 9c840e9 [CI:BUILD] rpm: spdx compatible license field a19bf24 fix(deps): update rust crate tokio to 1.32 4636b22 chore(deps): update dependency containers/automation_images to v20230816 735ea2f fix(deps): update rust crate serde_json to 1.0.105 719ded6 fix(deps): update rust crate tokio to 1.31 3b5ce46 fix(deps): update rust crate log to 0.4.20 60d6185 run cargo update ab90b2b update tonic-build to 0.9.2 fcdacab bump rust edition to 2021 845fbdf iptables: drop invalid packages 080a814 fix(deps): update rust crate tokio to 1.30 6caef06 docs: Convert markdown with go-md2man instead of mandown bb22c34 fix(deps): update rust crate clap to 4.3.21 00c05a6 packit: Build PRs into default packit COPRs 2f44e50 chore(deps): update dependency containers/automation_images to v20230807 c5df890 fix(deps): update rust crate serde to 1.0.183 be2a8ea fix(deps): update rust crate serde to 1.0.181 067bbde fix(deps): update rust crate serde to 1.0.180 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-01-04 02:52:53 +00:00
Bruce Ashfield	f6f61282bf	aardvark-dns: update to v1.9.0 ... Bumping aardvark-dns to version v1.9.0-10-gf1c946c, which comprises the following commits: e4785bd Release v1.9.0 e406f83 v1.9.0 Update release notes 8880d68 run cargo update 864fa96 chore(deps): update dependency containers/automation_images to v20231116 a8642b3 fix(deps): update rust crate tokio to 1.34.0 b154c3b fix(deps): update rust crate async-broadcast to 0.6.0 5ee6646 update trust-dns to hickory f516597 fix(deps): update rust crate futures-util to 0.3.29 20ab8f5 fix(deps): update rust crate trust-dns-server to 0.23.2 d9f023a fix(deps): update rust crate trust-dns-proto to 0.23.2 645fb12 tmt: initial enablement 3633db0 aardvark main: change error reporting 7820735 chore(deps): update dependency containers/automation_images to v20231004 dc1ef13 fix(deps): update rust crate trust-dns-proto to 0.23.1 085608c fix(deps): update rust crate trust-dns-client to 0.23.1 ceca55b clippy: some format fixes 9c90865 fix(deps): update rust crate tokio to 1.33.0 3391c8d Bump to v1.9.0-dev 1ed9402 Release v1.8.0 a9e95ca update release notes for v1.8.0 1730fef run cargo update 2a3415e Packit: switch to @containers/packit-build team for copr failure notification comments 82752dd [CI:BUILD] Packit: tag @lsm5 on copr build failures 0356081 chore(deps): update rust crate chrono to 0.4.31 0d831cf cargo: bump chrono to 0.4.30 ea06d05 test: IPv6 format is changed in v1.72.0 d2a7527 bump nix to 0.27.1 20e5b56 vendor: bump trust_dns_proto and trust_dns_client to 0.23.0 cce63be fix(deps): update rust crate trust-dns-server to 0.23.0 c81a038 [CI:BUILD] rpm: spdx compatible license field cae27d7 fix(deps): update rust crate anyhow to 1.0.75 b46553e fix(deps): update rust crate tokio to 1.32.0 1d8d421 chore(deps): update dependency containers/automation_images to v20230816 f8bdbf1 fix(deps): update rust crate tokio to 1.31.0 88e847d fix(deps): update rust crate anyhow to 1.0.74 3f74fdc fix(deps): update rust crate anyhow to 1.0.73 17ca8a1 fix(deps): update rust crate log to 0.4.20 70ad545 chore(deps): update dependency containers/automation_images to v20230809 cb2b0e6 fix(deps): update rust crate tokio to 1.30.0 def4232 fix(deps): update rust crate clap to 4.3.21 cd85a71 packit: Build PRs into default packit COPRs 4df6054 chore(deps): update dependency containers/automation_images to v20230807 a713fa6 fix(deps): update rust crate anyhow to 1.0.72 dc36e6b fix(deps): update rust crate signal-hook to 0.3.17 62cd6e2 fix(deps): update rust crate clap to 4.3.19 7f3c50d fix(deps): update rust crate clap to 4.3.15 8821976 fix(deps): update rust crate signal-hook to 0.3.16 75a7b92 [CI:BUILD] Packit: remove pre-sync action 1e54ac4 fix(deps): update rust crate clap to 4.3.11 389a189 fix(deps): update rust crate tokio to 1.29.1 836a441 fix(deps): update rust crate clap to 4.3.10 c81743a [CI:BUILD] RPM: cleanup spec and fix eln builds 2703165 bump to v1.8.0-devel Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-01-04 02:52:53 +00:00
Bruce Ashfield	ba9cbc0914	skopeo: update to 1.14.0 ... Bumping skopeo to version v1.14.0-10-ga85eaac9, which comprises the following commits: 48d11dac fix(deps): update golang.org/x/exp digest to 6522937 87eef310 DOCS: add Gentoo in install.md f50dc204 DOCS: Update to add Arch Linux in install.md 9f52e728 fix(deps): update module golang.org/x/term to v0.15.0 efd76e74 Bump to v1.14.1-dev 6abf96bb Bump to v1.14.0 14496ba4 fix(deps): update module github.com/containers/common to v0.57.0 fa85e47b chore(deps): update dependency containers/automation_images to v20231116 e4b67e78 fix(deps): update module github.com/containers/image/v5 to v5.29.0 edefdb66 Add documentation and smoke tests for the new --compat-auth-file options 518181e5 Update c/image and c/common to latest 56b96a4d fix(deps): update module github.com/containers/storage to v1.51.0 a8e7d94e fix(deps): update module golang.org/x/term to v0.14.0 50cffa38 fix(deps): update module github.com/spf13/cobra to v1.8.0 0c2cca96 [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.2 6b2a26f1 [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.1 6ef8acff fix(deps): update github.com/containers/common digest to 3e5caa0 5d4e89cc chore(deps): update module google.golang.org/grpc to v1.57.1 [security] 5307dd66 fix(deps): update module github.com/containers/ocicrypt to v1.1.9 03c94252 Update github.com/klauspost/compress to v1.17.2 91611a3a chore(deps): update module github.com/docker/docker to v24.0.7+incompatible [security] a9c7c505 Fix ENTRYPOINT documentation, drop others. 70551db8 Remove unused environment variables in Cirrus a2eb508b [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.0 1fa360a6 chore(deps): update dependency containers/automation_images to v20231004 fa3e62f2 chore(deps): update module golang.org/x/net to v0.17.0 [security] dc4fa672 copy: Note support for `zstd:chunked` 538dd6f3 fix(deps): update module golang.org/x/term to v0.13.0 611db7c3 fix(deps): update module github.com/docker/distribution to v2.8.3+incompatible 43e1a96e fix(deps): update github.com/containers/common digest to 745eaa4 5fad766c Packit: switch to @containers/packit-build team for copr failure notification comments d8b3a17f Packit: tag @lsm5 on copr build failures 57034826 vendor of containers/common 7db8fbde fix(deps): update module github.com/opencontainers/image-spec to v1.1.0-rc5 4d921585 fix(deps): update module github.com/containers/common to v0.56.0 9e89e18f Cirrus: Remove multi-arch skopeo image builds 32c8a05a fix(deps): update module github.com/containers/image/v5 to v5.28.0 679615f5 Increase the golangci-lint timeout c1e7c974 fix(deps): update module github.com/containers/storage to v1.50.2 9563e3b8 fix(deps): update module github.com/containers/storage to v1.50.1 427e58f5 fix(deps): update golang.org/x/exp digest to 9212866 7c39f363 Fix a man page link 897619f6 fix(deps): update github.com/containers/image/v5 digest to 58d5eb6 2976f4f8 GHA: Closed issue/PR comment-lock test 46979914 fix(deps): update module github.com/containers/common to v0.55.4 3249973d fix(deps): update module github.com/containers/storage to v1.49.0 b87a1b3e rpm: spdx compatible license field b0d587a9 chore(deps): update dependency golangci/golangci-lint to v1.54.2 7ced0fb0 chore(deps): update dependency containers/automation_images to v20230816 4b952d61 Packit: set eln target correctly 6b827fa7 packit: Build PRs into default packit COPRs fec950c2 DOCS: Update Go version requirement info 449ac9bb DOCS: Add information about the cross-build 78187ca8 fix(deps): update module github.com/containers/ocicrypt to v1.1.8 df117e28 fix(deps): update module github.com/containers/common to v0.55.3 4ee2946b Update c/image after https://github.com/containers/image/pull/2070 0e3efc64 chore(deps): update dependency golangci/golangci-lint to v1.54.1 46fcbd3a chore(deps): update dependency containers/automation_images to v20230809 e98561e2 fix(deps): update golang.org/x/exp digest to 352e893 4f5ba65a chore(deps): update dependency containers/automation_images to v20230807 5abce03c Update to Go 1.19 276b8095 fix(deps): update module golang.org/x/term to v0.11.0 60ee543f Update c/image for golang.org/x/exp ab892075 RPM: define gobuild macro for rhel/centos stream f236b5ef Fix handling the unexpected return value combination from IsRunningImageAllowed c40f1485 Close the PolicyContext, as required by the API e90ad861 Use globalOptions.getPolicyContext instead of an image-targeted SystemContext a4aa15f4 Packit: remove pre-sync action a0a340a1 fix(deps): update module github.com/containers/common to v0.55.2 f7dc0847 proxy: Change the imgid to uint64 a39972ca [CI:BUILD] Packit: install golist before updating downstream spec 2945e9e0 Update module golang.org/x/term to v0.10.0 5f87f6ab Bump to v1.14.0-dev cb1e9012 Bump to v1.13.0 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-01-04 02:52:53 +00:00
Bruce Ashfield	8c6303bb83	crun: update to v1.12 ... Bumping crun to version 1.12-19-g90b21dd, which comprises the following commits: 49f439d ctx: drop no_subreaper bool b5ad30f krun: fix use of uninitialized integer 7c5a32a criu: do not set CLOEXEC on fds to inherit c9e23a8 criu: fix error return value 501aa98 handlers: Fix -Werror=unused-parameter build error for spin c9014f8 src: use O_CLOEXEC with pipes 3ad89be src: use O_CLOEXEC for all open/openat calls 0f0d5be src: close std streams on exec 08b7d33 build(deps): bump uraimo/run-on-arch-action from 2.5.1 to 2.6.0 2ad31d4 linux: fix error string ce429cb NEWS: tag 1.12 08d9fea preconfigure cpuset with required resources a18356e README.md: update the correct Nix channel da991db utils: try attr/<lsm>/* before attr/* 616aea7 feat: add spin handler 172bbd0 container: move dereference after check 2cc04ea systemd: fallback to system bus Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-01-04 02:52:53 +00:00
Bruce Ashfield	bf3b7371a3	moby: update to v24.0.7-tip ... Bumping moby to version v24.0.7-9-gafcd2cde95, which comprises the following commits: d0b5a5a8a5 integration/TestLiveRestore: Wait for process to exit f0b5ca47fb liverestore: Don't remove `--rm` containers on restart bfbb1dd890 update containerd binary to v1.7.9 8a9a6702d0 update containerd binary to v1.7.8 56d9d85c99 Dockerfile: update github.com/tc-hib/go-winres v0.3.1 6d5c35c0ce update runc binary to v1.1.10 05d7386665 daemon: daemon.containerRestart: don't cancel restart on context cancel Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-01-04 02:52:53 +00:00
Bruce Ashfield	08ec5a182d	buildah: update to 1.33.2 ... Bumping buildah to version v1.33.2-1-g8be6786d5, which comprises the following commits: 7fffb3366 [release-1.33.2] Bump to v1.33.2 7add02a3b Update minimum to golang 1.20 b92ad028b fix(deps): update module github.com/fsouza/go-dockerclient to v1.10.0 20565e530 fix(deps): update module github.com/moby/buildkit to v0.12.3 bd0ae2aff Bump to v1.33.2-dev 38d6d5f11 Bump to v1.33.1 6d66008b6 Bump to v1.31.2-dev f18868d06 Bump to v1.31.1 f6cb3e474 fix(deps): update module github.com/moby/buildkit to v0.11.4 [security] 7aa395489 test,heredoc: use fedora instead of docker.io/library/python:latest 8fb826177 Bump to v1.33.1-dev 98da6c8d6 Bump to v1.33.0 2087848c3 Never omit layers for emptyLayer instructions when squashing/cwing 3a61cc099 Add OverrideChanges and OverrideConfig to CommitOptions bbb55b8b8 buildah: add heredoc support for RUN, COPY and ADD 69f52f805 vendor: bump imagebuilder to v1.2.6-0.20231110114814-35a50d57f722 fadc0ba08 conformance tests: archive the context directory as 0:0 (#5171) 3c61dfd4f blobcacheinfo,test: blobs must be resued when pushing across registry 19d9a6bc0 Bump c/storage v1.51.0, c/image v5.29.0, c/common v0.57.0 b2b761573 pkg/util.MirrorToTempFileIfPathIsDescriptor(): don't leak an fd 1fab39559 StageExecutor.Execute: force a commit for --unsetenv, too 4cf16730b Increase a copier+chroot test timeout 57d863dfd Add support for --compat-auth-file in login/logout dcfbe69a3 Update existing tests for error message change 5fc64afe1 Update c/image and c/common to latest eebecc94d fix(deps): update module github.com/containerd/containerd to v1.7.9 fe9bdce86 build: downgrade to go 1.20 4f3876d8e Add godoc for pkg/parse.GetTempDir 00e73de71 conformance tests: use go-dockerclient for BuildKit builds 0a85c0629 Make TEE types case-insensitive bc59f69c0 fix(deps): update module golang.org/x/crypto to v0.15.0 10c0222d4 Tweak some help descriptions 8df9b760b Stop using DefaultNetworkSysctl and use containers.conf only 99cad6ee1 Implement ADD checksum flag #5135 1d30520e8 vendor of openshift/imagebuilder #5135 7e0d66483 Pass secrets from the host down to internal podman containers 8f86c5784 Update cirrus and version of golang 61de02b0f image: replace GetStoreImage with ResolveReference 1306a64cd vendor: bump c/image to 373c52a9466f af394a83d pkg/parse.Platform(): minor simplification d1bfccf22 createConfigsAndManifests: clear history before cw-specific logic 9f1c9a8ee Use a constant definition instead of "scratch" 6552b619c conformance: use require.NoErrorf() more acf60abbe fix(deps): update module golang.org/x/term to v0.14.0 4a470feec fix(deps): update module golang.org/x/sync to v0.5.0 e8ae12013 fix(deps): update module github.com/spf13/cobra to v1.8.0 fc74d5071 fix(deps): update module golang.org/x/sys to v0.14.0 892014df1 fix(deps): update github.com/containers/common digest to 8354404 2f118fe61 fix(deps): update module github.com/opencontainers/runc to v1.1.10 ef439b8ad fix(deps): update github.com/containers/luksy digest to b5a7f79 934c40e73 Log the platform for build errors during multi-platform builds 3b96b1caf Use mask definitions from containers/common 34ac2cc4f Vendor in latest containers/common 2779e7062 fix(deps): update module github.com/containerd/containerd to v1.7.8 52d48d720 fix(deps): update module go.etcd.io/bbolt to v1.3.8 02f781b35 container.conf: support attributed string slices 2b2a4bed8 fix(deps): update module sigs.k8s.io/yaml to v1.4.0 03b004224 Use cutil.StringInSlice rather then contains 48a9c4371 Add --no-hostname option to buildah containers c536048ca vendor c/common: appendable containers.conf strings, Part 1 a9e06a64d fix(deps): update module github.com/onsi/gomega to v1.28.1 2a3a956cb chroot.setupChrootBindMounts: pay more attention to flags a4f0d7dec chore(deps): update dependency containers/automation_images to v20231004 7c8b51068 Vendor containers/common 0f0ca0cfc chore(deps): update module golang.org/x/net to v0.17.0 [security] 9c99d7ca8 run: use internal.GetTempDir with os.MkdirTemp 7704ca6d3 fix(deps): update module github.com/containerd/containerd to v1.7.7 07d955f27 imagebuildah,multi-stage: do not remove base images 6fd4f0373 gitignore: add mkcw binary 9c57af8d1 mkcw: remove entrypoint binaries b97f887ca fix(deps): update module golang.org/x/crypto to v0.14.0 4e6c2b2cd fix(deps): update module golang.org/x/sys to v0.13.0 f99de537e fix(deps): update module golang.org/x/sync to v0.4.0 5bfc7d9a4 Update some comments related to confidential workload c48a459ea Use the parent's image ID in the config that we pass to imagebuilder 2d4896f6e fix(deps): update github.com/containers/common digest to 8892536 065c8d43e fix(deps): update github.com/containers/luksy digest to 6df88cb 249e30c98 bug: Ensure the mount type is always BindMount by default ad3211c26 Protocol can be specified with --port. Ex. --port 514/udp a3d2c3125 fix(deps): update module github.com/onsi/gomega to v1.28.0 8b63fa37b build,config: add support for --unsetlabel 91f54ed54 tests/bud: add tests 351012792 [CI:BUILD] Packit: tag @containers/packit-build on copr build failures ae5f11e45 stage_executor: allow images without layers 4c6255679 vendor of containers/common b3084b5f4 Removing selinux_tag.sh as no longer needed after 580356f [NO NEW TESTS NEEDED] 9dd66e4cb add/copy: make sure we handle relative path names correctly 68ffd1e97 fix(deps): update module github.com/opencontainers/image-spec to v1.1.0-rc5 abc57f8df Bump to v1.33.0-dev b574b806e imagebuildah: consider ignorefile with --build-context Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-01-04 02:52:53 +00:00
Bruce Ashfield	a6ed7b60ff	containerd: update to 2.0-beta ... We refresh our GO_FLAGS patch for new context, and drop the install of v1 or unversioned shims as the runtime-v1 has been dropped Bumping containerd to version v2.0.0-beta.0-88-g87bf39a7f, which comprises the following commits: 96aaf5a3b Add core and internal root packages c0363754f sandbox: get runtime info from sandbox or container 95d2a3b7c upgrade: add cri upgrade test case 0bc963341 runtime/v2: net.Dial gRPC shim sockets before trying grpc e1b495866 sandbox: keep rootDir and stateDir compatible b0fef6738 sandbox: migrate sandbox_mode to sandboxer c8012b6d7 sandbox: make a clear dependency of cri plugins 2ead89509 Support gzip and zstd HTTP transport compression to fetch remote resources 8e567aa58 mv pkg/process cmd/containerd-shim-runc-v2/process a813097dc Bump up github.com/fsnotify/fsnotify to v1.7.0 c384e3717 containerd-stress: use config address for CRI test d4c828c2c integration: add new binary upgrade case 8e91edb71 fix(pkg/dialer): minor fix on dialer function for windows ad3f8c563 tomlext.Duration add MarshalText method 6da015284 go.mod: github.com/containerd/continuity v0.4.3 cd348e6ef .golangci.yml: remove directories that don't exist 4b556a6e0 Bump up golangci-lint to v1.55.2 c51d4f9b6 push: always inherit distribution sources from parent e15c24655 Move CRI image service into a separate plugin 80dd779de remotes/docker: close connection if no more data 7f410ae05 integration: reproduce #9347 2e9686c05 fix: deflake TestCRIImagePullTimeout/HoldingContentOpenWriter 4aa932337 CI: update Fedora to 39 f6c4de6b5 fix: podsandbox depends on Lease plugin 1b65fe264 fix ticker leak 1af0cba1a Update documentation for containerd v2.0 packages 4f42da416 adopters.md: remove Eliot project 01c442147 Enhance container image unpack client logs e7390d4ed vendor: upgrade OpenTelemetry to v1.19.0 / v0.45.0 1a1bd6d0a runtime/v2/shim: use structured log for plugin ID 71fd85f5e runtime/v2/shim: run(): remove unused "name" argument 0a59c33be runtime/v2/shim: rename var that shadowed package var be22e12d5 services/server: use structured log for plugin ID 09de4f1fc services/server: rename var that collided with import 14e621cf9 services/server: gofumpt 32bf805e5 sandbox: add a sandboxService interface to criService 25a4c3d23 sandbox: remove SandboxersServicePlugin 0cf48bab2 sandbox: podsandbox init its own client 7d65a4563 Move runc shim implementation to cmd e682da76c fix labels in pod sandbox 64c41162c update tests to use labels from cri/labels 7e79225ce refactor labels used in cri server 274a16282 update runc binary to v1.1.10 2e014fa2a cri: fix update of pinned label for images cb555fa16 golangci-lint: enable depguard to prevent re-introducing libcontainer dac056fe7 integration: deflake TestIssue9103 7b9fcfd7c add default enable unprivileged icmp/ports a7cd49c68 expected and actual field position adjustment e099717f9 validate kernel version for unprivileged icmp/port 76049170b document runtime and shim configuration and selection 2fab240f2 integration: init release upgrade test 2af6db672 switch back from golang.org/x/sys/execabs to os/exec (go1.19) a596d09ec cri: add deprecation warning for configs 35924bccc cri: add deprecation warning for auths d7cb25d77 cri: add deprecation warning for mirrors 58cc275eb cri: add ability to emit deprecation warnings 68cac3f62 client: remove obsolete ErrCheckpointRWUnsupported df19888f8 add warning use inheritable Capabilities 411e2bce4 Remove plugins package 9db21401c Switch to github.com/containerd/plugin a48ddf4a2 Don't allow io_uring related syscalls in the RuntimeDefault seccomp profile. 2dfae4c4b Prepare release notes for v2.0.0-beta.0 6ca4b5260 Update mailmap a67efe88d Add tests cases f1d659dc5 Update package name in Makefile 0ffc3e987 Handle ArgsEscaped for new Sb Server b85df264e Rename opt to avoid stutter 261e01c2a Move client to subpackage b6adf43d4 test: use 'Autoclear: ture' in TestRwLoop and add Autoclear test 124d3a20a Sync ops.md, update CLI --help output to be consistent in descriptions 5fdf55e49 Update go module to github.com/containerd/containerd/v2 abfc8be53 Fix lint in integration/client ddd73ad30 Move protofiles generated into v2 directory 638b474c8 Temporarily remove imgcrypt in CRI to fix circular dependency 192168038 Temporarily remove integration/client submodule 4e3fbd36e vendor: github.com/klauspost/compress v1.17.2 856d1053f vendor: google.golang.org/grpc v1.58.3 466ee870d Check scheme and host of request on push redirect 3fff8b4f6 ctr: new deprecations command 079383dbe dynamic: record deprecation for dynamic plugins 260e71abc server: add ability to record config deprecations bc861b66f pull: record deprecation warning for schema 1 9aab44673 introspection: add support for deprecations 57c897f10 api/introspection: deprecation warnings in server 240733ce2 warning: new service for deprecations aff5b809c deprecation: new package for deprecations d48ceb606 Avoid TLS fallback when protocol is not ambiguous ed759bae3 Update go fuzz to directly instantiate server 09e40511a fix bug that using invalid token to retry fetching layer 2fea521d0 Disable windows-2019 integration test temporarily 9fc407d8c ci: bump up golangci-lint to v1.55.0 8b4f9656d sandbox: remove ValidateMode as it is not used 337cc2171 pkg/cri: should ignore no sandbox bucket f515cd5c5 Reorder fields when writing bootstrap params 3d53fbe85 Fix CRI integration tests f76eaf5a6 Fix 'not a directory' error when restoring bootstrap.json cf75cfa32 Add more logs around shim restore 8061cb023 Save bootstrap.json instead of address file e03bf32b8 Switch runc to v3 7a2d801d6 Expose shim instance version f66c46806 Bridge task service v2 daaf67662 Switch runc shim to task v3 bb64e6a8e Initialize sandbox controller list on CRI server creation 03d81f595 Use cri streaming pkg from k8s staging b006f1c15 integration/client: replace hardcoded strings for OCI-spec consts d3f5e0c90 images/archive: replace hardcoded strings for OCI-spec consts 8e7c10c6d CRI: enhance ImageFsInfo() to support multiple snapshotters e4639ad18 Add exports to proxy plugin config 3986f80c3 go.mod: bump up github.com/opencontainers/image-spec to v1.1.0-rc5 f7c9e9942 vendor: golang.org/x/net v0.17.0 c3652540c vendor: golang.org/x/text v0.13.0 ff602c213 vendor: golang.org/x/sys v0.13.0 39b168cdb vendor: google.golang.org/grpc v1.57.1 930ee552e Fix typos 3ef300ca7 sandbox: remove global variable of podsandbox controller 7bca70c0c sandbox: do not call Connect when loadShim d2d434b7d sandbox: add all sandbox information to Create method 0707f6869 sandbox: ignore not found error when remove sandbox 2951fb6dc sandbox: support more sandbox controllers 8b3597685 sandbox: add Sandboxer field to sandbox metadata 69e501e7c sandbox: change SandboxMode to Sandboxer f372b3501 sandbox: add sandboxer field of sandbox requests a782fd6da Use LOOP_CONFIGURE when creating loop devices 771237563 Add a new image label if it is docker schema 1 5ad6f3432 CRI: use (snapshotter_id, snapshot_key) to uniquely identify snapshots 41b2b2a7b go.mod: bump up github.com/klauspost/compress from v1.17.0 to v1.17.1 4febb0852 deprecated: go-plugin library as runtime plugin 51c9ffe46 remotes: add handling for missing basic auth credentials 4f339b5b5 RELEASES.md: mark legacy CRI as removed status 0a4f79211 Remove use of v1 runtime plugin type for Unix 71f8b4357 Move dynamic plugins to a subpackage 7b2a91821 Generalize the plugin package a80606bc2 Move plugin type definitions to containerd plugins package cb969085f Temporarily remove zfs as built in plugin 2486c1298 Exit shim when shutdown manager is done 1b3199324 Rename sbserver to server 4edc6c2d9 Add note about configuration versions in releases c5c94dc86 Fix CRI tests panic on CI a3c2c1e4d Clean shell scripts fa1d3a9cc Fix dependencies after remove 3742f7f0d idmapped: use pidfd to avoid pid reuse issue 2332b9ba1 Remove legacy CRI from CI 536abf1b3 Remove legacy CRI 33b1a833c Move CRI testing package out 016114ff6 Move bandwidth package out of CRI server 3c1e7ffb8 Integration: Alter TestContainerPids for Windows 8f013bb71 Add migration for older configuration versions 313f514fd update to go1.21.3. gp1.20.10 6b752b536 update to go1.21.2, go1.20.9 8f3d1c9d9 add cpu-burst param to ctr command 3ddcd6120 add Duration type to compatible toml v1 version 535916d1d Skip exec.LookPath if a specific gzip implementation is disabled 4b59d67dd add a new flag "skip-reference-check" to skip reference name check 34378ec9b Use Intel ISA-L's igzip if available 7d6369087 Fix windows default path overwrite issue 13dcf558e Fix windows default path overwrite issue 39478eeec go.mod: Bump up github.com/klauspost/compress v1.16.7 to v1.17.0 859c2651e remotes/docker: Fix MountedFrom prefixed with target repository c85b1d1e4 Bump up golangci-lint to v1.54.2 6169433b6 Fix linter issues for golangci-lint 1.54.2 e3cb7471a CRI: Snapshotter per runtime handler adjustments 42dc8faba Bump x/net to 0.13 79772a0dd remotes: always try to establish tls connection when tls configured 11a7751af *: add runc-fp as runc wrapper to inject failpoint 68dd47ef7 containerd-shim-runc-v2: avoid potential deadlock in create handler 6604ff6c5 containerd-shim-runc-v2: remove unnecessary `s.getContainer()` 0d76fe5c1 Fix some assertions for integ tests 1dced31c3 ci-fix: pin the mingw version 12.2.0.3042023 aae71aa8e update gitignore to indicate that where contributors can use global gitignore 8ffb03d68 cri: stop recommending disable_cgroup 5365f4b29 cri: call RegisterReadiness after NewCRIService 46645b393 Call migrations per version 5518a5026 remotes: simplify mediatype logic 8b105984b pkg/transfer/local: simplify mediatype logic 79acce462 integration: use mediatype helpers 0ba5b4b62 oci: use mediatype helpers cdba61603 remotes: use mediatype helpers 69034f755 pkg/display: use mediatype helpers 5ab04ac5a pkg/unpack: use mediatype helpers da1196979 pkg/snapshotters: use mediatype helpers f1cbc5f90 containerd: use mediatype helpers 4b1bb1293 remove github.com/opencontainers/runc dependency 62f621a34 images: simplify mediatype logic 377c5ca9c images/archive: use mediatype helpers bb8a472f2 images: use mediatype helpers e7254406c Require plugins to succeed after registering readiness 62f273d50 Add migrate subcommand to config command 0320ad184 Add config migration to plugin package f58158e2d Add config migration and bump config version bf4fbe4e8 docs: Update `transfer` service docs to reflect completed implementations for 1.7 b40e95e0e images: Config: explicitly return nil-error 36c2222d3 Add usage calculation test 3b60e9366 Create new imagetest package 4c344f2fa Add warning for plugin configs with unknown fields a9ba33f8f Allow for images with artifacts to pull 650148313 Add warning log for unknown config fields b5615caf1 Update go-toml to v2 8b413daff Remove log package except for exported const used by hcsshim 2f1b92710 Update zfs library to use new log repository 508aa3a1e Move to use github.com/containerd/log f1070c4e1 docs/userns: Clarify requirements for k8s 1.25/1.26 42eee8bf0 fix: Add `containerd` to the message type reference 9e819fb4a Update CRI image store to not use containerd client dcb2e7447 Improve doc of func NewNetNS 2ce971d89 Add delete target to image remove f8fb2dad3 api: update image service to support target in delete request 8e3722c7d CI: Set slow_chown for overlayfs snapshotter 46d3094aa docs/userns: Fix small typo d008d64a8 docs/userns: Clarify containerd 1.7 limitations e37908200 docs/userns: Document the need to opt-in for a slow chown 8bf8e2b97 snapshotter: Use capa prefix consistently for capabilities ec9e0dca9 overlay: Require opt-in if idmap mounts are not supported. 03b9ce56b deprecate logs package, but disable linter (for transitioning) d69ae811d alias log package to github.com/containerd/log v0.1.0 729c97cf3 Handle unexpected shim kill events ed5f7e7c8 Update image in client to use new usage package 96a23ccc1 Create new usage package 79f781d00 Refactor: Removing inherently flaky and unused SourceDateEpochOrNow function. 8cbb4ea5d vendor: github.com/containerd/nri v0.5.0 3ca39ef01 fix: Remove `LimitNOFILE` from `containerd.service` 83240a4f7 Bump crun to 1.9 967313049 doc: Add documentation about CRI user namespaces 2e13d3954 pkg/process: Only use idmap mounts if runc supports it fce1b9507 go.mod: Update runtime spec to include features.MountExtensions a81f80884 Revert "cri: Throw an error if idmap mounts is requested" e832605a8 integration: Simplify WithVolumeMount() 24aa808fe integration: Add userns test with volumes ab5b43fe8 cri/sbserver: Pass down UID/GID mappings to OCI runtime e916d77c8 platforms: move ToProto, FromProto to api/types 381442945 platforms: remove errdefs dependency e0b2b17de cri/server: Add tests for the linux-specific parts of VolumeMounts() 10cb112e4 cri/server: Add tests for ContainerMounts() 97dfa7f55 cri/server: Pass down uidMappings to OCI runtime b42bdd125 release: remove `cri-containerd-*.tar.gz` release bundles 9656b8c0d nri: update mock plugin handlers 6f9de91ef vendor: update github.com/containerd/nri@v0.4.0 f7089ba22 leases: add WithLabel 1480e3bd4 leases: cleanup TestWithLabels d94a789d1 Fix usages of `mountinfo.PrefixFilter` 45e303eea task: expose criu work path opt f77185f9e Fix "even if IPv4 comes first" test to have IPv4 first 88a849626 Don't use `To16() != nil` to detect IPv6 addresses eaf607101 update to go1.21.1, go1.20.8 1a7490c5a Add link to CONTRIBUTING from README 0413f1272 Add contributors guide 05093d7c0 vendor: github.com/cncf-tags/container-device-interface v0.6.1 ac1d556b9 Add image verifier transfer service plugin system based on a binary directory 55b2df560 go.mod: github.com/grpc-ecosystem/grpc-gateway/v2 v2.16.2 a00888db8 fix reference to canonical fieldmask type 0041996ca CI: bump up crun to 1.8.7 4bc0b2660 Revert the removal of the parameter Container 6ec0d4a3a prevent ctr from creating tags with forbidden characters a4bdbf784 content: reduce the contention between ref lock and boltdb lock abfabb6d8 contrib/fuzz: fix redeclared issue 295bcec07 snapshotter: implement unit tests for idmapped mounts for overlay 9d01ed1c3 integration: add test for idmapped mounts e49e6d6fd snapshotter: implement slow path for idmapped mounts check for overlay 1555a31bf mount: support idmapped mount points 723c88ce3 snapshotter: add "--remap-labels" support to overlayfs e8ddf669f snapshotter: support "remap-ids" capability for overlayfs ef6b91947 fix(docs): fix on the windows installation script 5d31e9378 pkg/systemd: use sync.Once for systemd detection 7d0ab4fc2 remove uses of github.com/runc/libcontainer/cgroups 9bc6441c2 vendor: github.com/google/uuid v1.3.1 13ff185ba Blockfile: Enlighten blockfile copy on Darwin a3e8503ed .github: enable fuzz build cd705af89 metadata: add image delete events during garbage collection 3f9756c18 gc: add support for image expiration b32638e21 ctr: pull or fetch image metadata by default 20f79300c push: inherit distribution sources from parent 24aca53fa Update use of content.Infoprovider f8c789f31 content: add InfoProvider interface 02d519ad6 Update hcsshim tag in runhcs-version script a2817ca16 CRI: Include sandbox ID in failed to load error 492347090 replace reference/docker for github.com/distribution/reference v0.5.0 26dcae2f6 fix ossfuzz building error 19d6c37a3 Revert "log: define G() as a function instead of a variable" fd5d92a7f Update hcsshim tag versioning to v0.12.0-rc.0 779875a05 Add missing unpacker.Wait for image import 4f5db2bc0 metadata: format unit test output 15b13fb3e Windows: Supply windows shim version via file 7a0ad09a0 make repositories of install dependencies configurable 34def8b33 Remove redundant nil check fc45365fa Remove most logrus f9c35feb3 Makefile: allow overriding GO_BUILD_FLAGS via environment 490905be6 go.mod: github.com/containerd/continuity v0.4.2 03abceac5 Update LTS description 34f32043b Blockfile: Expose RecreateScratch option b4f487ce9 Apply suggestions from code review 1e3540e11 Add stale bot 4e236962f Update critools to 1.28.0 c92f4a160 Update RELEASES c3f3cad28 Use sandboxed CRI by default b76cd4d9f replace some fmt.Sprintfs with strconv bbdbf7ab6 Add inspect image commands 78308b4a4 Add manifest printer library 11a5dd826 snapshots: replace some fmt.Sprintfs with strconv 06765c9ef oci: replace some fmt.Sprintfs with strconv 710d22366 removes/docker: replace some fmt.Sprintfs with strconv d7bc8694b pkg/cri: replace some fmt.Sprintfs with strconv 73e9cfd1c append k8s 1.28 to releases 6d8329d7f Remove unnecessary joinError unwrap 8399a4ee7 Remove temporary replace 7ad0a6ccf Update to latest releases in RELEASES.md cd8c8ae4b Remove hashicorp/go-multierror 1571a5aa0 ctr: metrics: drop unused retval from printWindowsStats() 7063ae1f6 Makefile: add rule for installing documentation de4c338ab Docs: Document proxy plugin diff support d09f7cbe0 cri: Fix sandbox_mode "shim" 60b2cb143 cmd: containerd: allow building w/o systemd notify 23c95359a Add WithMetaStore to overlay snapshotter to allow bringing your own 0c1ad52ea cri: spec_linux: drop unused retvals eacd74c2b Go 1.21.0 5756cb00e CI: increase timeout for Binaries c883410c9 CI: Explicitly upgrade MinGW on Windows 2019 GitHub runners. 0f043ae43 seccomp, apparmor: add go:noinline 5d9bf7d13 CI: temporarily disable ci_fuzz due to incompatibility with recent Go e2ce4f58f Populate commit memory for windows memory usage stats 823e0420e Fix transfer service dependencies: cfb30a31a Invoke Stable ABI compatibility function in windows platform matcher 0cea317a5 FreeBSD: set default runtime def5ff3c4 Sandbox: Add annotations to controller CreateOptions 939ccbed4 Sandbox: Add annotations to CreateSandbox surface 1fd3a4652 archive/tarheader: fix FreeBSD hdr for regular files f8edd5555 update runc binary to v1.1.9 f35d1f08e go.mod: github.com/opencontainers/runc v1.1.9 00ef8ba99 Vagrantfile: add strace tool 601699a18 integration: add ShouldRetryShutdown case based on #7496 8dcb2a6e6 pkg/cri/sbserver: fix leaked shim issue for podsandbox mode 72bc63d83 pkg/cri/server: fix leaked shim issue 5bdd9ca93 integration: add case to reproduce #7496 b451fa96a bump client-go v0.26.4 a645ff2e6 Update dependencies after protobuf update in hcsshim e7e5619fe Update hcsshim tag to v0.10.0 54baf766e add metrics for discarding events 189a1599c archive/compression: update out of date RFC draft link cac8b6f4b Makefile: allow overriding the binary executable target dir 90443f038 CI: update Rocky Linux to 8.8 0a57dc2a0 CI: update Fedora to 38 30dd0a17f CI: install Vagrant from Hashicorp 965641dbc Makefile: allow REVISION be overwritten by environment fc32197d4 Makefile: fix overriding go command 2d3360ec7 CI: move Vagrant tests to GitHub Actions (larger runners) 4f3c8c468 replace mcr.microsoft.com registry to ghcr.io/containerd registry d41c62a55 .github/workflows: add dmesg step for integration-linux fd8778fba delete checkout branch in doc c62abcb14 docs: document CRI cgroup driver auto detection c80a3ecaf cri/sbserver: Use platform instead of GOOS for userns detection 157dff281 update to go1.20.7, go1.19.12 687a5f51a fix: allow attaching to any combination of stdin/stdout/stderr aa8b094ab platforms: clarify docs for amd64/arm64 variant normalization 710d987d2 Fix default platform matcher when ctr import 2d64ab8d7 cri: Don't use rel path for image volumes 85a2c9a01 log: swap logrus functions with their equivalent on default logger 6baff1694 log: add package documentation and summary of package's purpose 238da2c52 log: make Fields type a generic map[string]any 634a4a1bb log: add log.Entry type dd67240f1 log: define OutputFormat type 778ac302b log: define G() as a function instead of a variable 81ac648d9 log: add all log-levels that are accepted 0b6333a41 log: group "enum" consts and touch-up docs 4a36022e2 log: WithLogger: remove redundant intermediate var 40ee5fb11 log: SetFormat: include returns in switch 6fe7e03b8 log: remove testify dependency e2ad5a985 removes/docker: remove unnecessary conversion (unconvert) ed47d6ba7 cri: implement RuntimeConfig rpc a1cdf60cb docker: add test to ensure not found error is returned by resolve b4814a29d docker: return most relevant error from docker resolution 7f7ba31b6 cri: fix using the pinned label to pin image 480757135 pkg/epoch: fix Y2038 on 32-bit hosts 98974117b migrate to community owned bucket a3404ac42 docker: add missing info log for 4XX/5XX responses 850b2e1bf go.mod: update cri-api to v1.28.0-beta.0 480bc8a2b .github/workflows/ci.yml: upgrade Ubuntu from 20.04 to 22.04 bc96b9039 go.mod: github.com/AdamKorcz/go-118-fuzz-build v0.0.0-20230306123547-8075edf89bb0 da2740885 go.mod: google.golang.org/genproto v0.0.0-20230720185612-659f7aaaa771 73dc13ad6 go.mod: github.com/urfave/cli/compare v1.22.14 1c4fc568b go.mod: github.com/prometheus/client_golang/compare v1.16.0 68abb525a go.mod: github.com/minio/sha256-simd v1.0.1 1f2216cc7 go.mod: github.com/klauspost/compress v1.16.7 3c6ab0420 go.mod: dario.cat/mergo v1.0.0 4bda0a69e go.mod: github.com/grpc-ecosystem/go-grpc-middleware v1.4.0 0f033b612 go.mod: github.com/emicklei/go-restful/v3 v3.10.2 90e050298 go.mod: github.com/containernetworking/plugin v1.3.0 0498acefb go.mod: github.com/.../container-device-interface v0.6.0 74b8cb850 go.mod: github.com/opencontainers/runc v1.1.8 895dd2e93 go.mod: github.com/opencontainers/image-spec v1.1.0-rc4 235a4452d go.mod: github.com/opencontainers/runtime-spec v1.1.0 06f18c69d cri: memory.memsw.limit_in_bytes: no such file or directory f3daf32c7 Fix ro mount option being passed b2967a8d6 update runc binary to v1.1.8 90ecb8104 fix: `ctr images check` outputs not unpacked images in quite mode 98f27e1d9 Revert "Add support for mounts on Darwin" e939d1319 Revert "Revert 416899fc8e81a80a4b09b59c801f98d36ddc0e74" 6c9c71112 Revert 416899fc8e81a80a4b09b59c801f98d36ddc0e74 2799b28e6 Add support for mounts on Darwin 56d80f81a Update hcsshim tag to v0.10.0-rc.9 9c673f967 pkg/cri/server: TestImageGetLabels: use registry.k8s.io f914edf4f [cri] Handle Windows pod transitions gracefully 52ef3468b Update Go to 1.20.6,1.19.11 48cdf1fe2 integration: Enable userns tests for sbserver 9160386ec cri/sbserver: Test net.ipv4.ping_group_range works with userns 1c6e26844 cri/sbserver: Fix net.ipv4.ping_group_range with userns 36a96d7f3 cri/sbserver: Remap snapshots for sbserver too 508e6f6e0 cri/sbserver: Add userns tests to TestLinuxSandboxContainerSpec() fb9ce5d48 cri/sbserver: Support pods with user namespaces c99cb95f0 cri/sbserver: Let OCI runtime create netns when userns is used 73c75e2c7 cri/sbserver: Copy userns helpers to podsandbox 0b6a0fe77 cri/sbserver: Move runtimeStart to match position with cri/server 90087ac44 WithRemapperLabels: Update doc to mention overlay supports it 9d9903565 cri: Fix comment typos 9e34b8b44 Uncopypaste parsing of OCI Bundle spec file 232538b76 bugfix(port-forward): Correctly handle known errors 5c480d9c8 Modify loopback size 7ef133ad4 Fix mount pkg typo 83ff030e4 Change http.Header copy to builtin Clone cdb153ec9 Resolve docker.NewResolver race condition 01a6e1c73 Dedup WithNewSnapshotView 6a913ac82 Cirrus CI: configure apt-get to wait for locks 38f9bc3e0 fix ci Linux Integration test fail c17d3bdb5 pkg/cri/server: Test net.ipv4.ping_group_range works with userns 9bf5aeca7 pkg/cri/server: Fix net.ipv4.ping_group_range with userns 05fef52b6 vendor: github.com/containerd/zfs v1.1.0 073de9308 Fix the auto restart fail when using LogURI and TTY together 00e5ae211 shim: change ttrpcService and ttrpcServerOptioner to exported interfaces e9f63f64f update go to go1.20.5, go1.19.10 22a7c63c0 Sandbox: Change to mount.Mount for CreateOptions 51a1e7f0b Fix example shim to actually use its task service a9cb6090e ci: remove libseccomp-dev installation for nightly 0607e7326 Move GetTopic function out of runc shim 5dedb6d0d archive: use 1970-01-01 as the whiteout timestamp d6dbc4040 go.mod: Update cgroups to 3.0.2 f3b7436b6 Platforms: Add From/ToProto helpers for types b3ab1f26c Snapshots: Add From/ToProto helpers for types 0a6b8f0ee OCI: Add From/ToProto helpers for Descriptor 4df27fd77 Update ginkgo to match cri-tools' version 9a202e342 seccomp: always allow name_to_handle_at 55a8102ec mount: Add From/ToProto helpers e85352183 integration/client: Rework withBytesBuffers 54a93c6c5 Make ptypes.Empty a var in contentserver cdc90c838 Remove duplicated code in content Copy 50376ec9f remotes: allow FetchByDigest client to pass mediatype as header 0a92661e6 Add a platform.ParseAll helper e89d7204e MergeStringSlices use sets 8760b8717 pkg/epoch: extract parsing SOURCE_DATE_EPOCH to a function 9924e56f4 pkg/epoch: fix tests on macOS dfd7ad8b3 Reword Windows file related TODO 44e2b26a8 pkg/epoch: replace some fmt.Sprintfs with strconv f82d9b799 Integration: Align empty IO func on Windows f3124d569 Makefile: Remove hcsshim related TODO 2aeac9a8f Remove duplicated writeIndex func 7601dd9a9 Dedup manifest config platform helper f3df7f739 log when a lease expires a01118bbe Minor changes to sandbox metadata f60a4a271 cri: drop unused arg from generateRuntimeOptions 1fb835f04 Remove unnecessary label bucket loop a207b430e snapshots/blockfile: fix lint issue 59b0b39af vendor: update github.com/containerd/continuity d358f1680 fix unbound variable f4ad68d5f fix-push-image-rate 7de95cbc4 snapshots/blockfile: deflaky the testsuite 6dfb16f99 snapshots|pkg: umount without DETACH and nosync after umount 72b7d1650 mount: support direct-io for loopback device 437f13410 Don't run CI on push e26c97cb8 Save marshalled empty response in streaming service 9e09bfb59 Use RWMutex in NSMap and reduce lock area 38b0f970f No more nondistributable layers in MS registry d278d37ca Sandbox: Add Metrics rpc for controller d115129d1 Add configurable mount options to overlay d56722ef2 Sandbox: Add SandboxMetrics rpc 4bb709c01 avoid "any" as variable name 577696f60 replace some basic uses of fmt.Sprintf() 5cd6210ad runtime/v2/runc: handle early exits w/o big locks df280942a integration/client: add timeout to `TestShimOOMScore` 6dd529e40 Pass in imagespec.Platform to WithVolumes() d18026592 release ticker correctly 28a5199ff Add a check to skip stats for containers that are not running 34a93a0c2 task: don't `close()` io before `cancel()` 007c5b6e3 Setup otlp from env 104b9ef9e Update x/sys to 0.8.0 69b451af5 RELEASES.md: de-deprecation of CNI conf_template will be v1.7.3 ab5365222 ctr: update WritePidFile to use atomicfile c409c631c shim: WritePidFile & WriteAddress use atomicfile 3c4a1ab1c cri: write generated CNI config atomically on Unix f3ba7c8a3 atomicfile: new package for atomic file writes 28d8c79de Replace atomicBool with the standard library atomic.Bool fe4f8bd88 Pinned image support a85b12d4d docs: cherry-pick individual commits instead of merge commit 738c4c6fa Fix issue for HPC pod metrics 52997ea98 remotes/docker: ResolverOptions: fix deprecation comments a35ead5b9 bugfix: add nil pointer check for cgroup v1 mem usage 2a60fe5a6 Remove events from init context d3887b2e6 Support CDI devices in ctr --device flag 3ca5b4437 Remove cni conf_template deprecation 94f0af3ec Image.IsUnpacked(): make error-handling more iodiomatic 54658a115 Image: rename variable that shadowed import d2b7a1e29 cleanup DEPRECATED TLS config f857626d6 Move PLEG event back to CRI fc50334ca Generate sandbox exit events from CRI d2605de73 add handling of a '.' commondir and bounds checking to mount_linux cf5605459 Move pod sandbox recovery to podsandbox/ package 45dbb4e54 Publish sandbox events 65906335b Add sandbox events protos 21b3318eb Fix several conversions of "ocispec.Image" to "ocispec.Platform" f2bc73782 Add cpuset-mems flag to 'ctr run' command f642c0a5f ctr: add cpuset-cpus flag to 'ctr run' command 314d758fa update auths code comment 9702d4aee snapshots/blockfile: use passed in dst in scratchGenerator bb82f3683 snapshots/blockfile: use loop if options is empty 9287711b7 upgrade registry.k8s.io/pause version fbb38ab6b Fix the spelling of repository within the NRI plugin documentation. 752e13d9a fix(docs): minor fix on the windows installation steps c1b926800 Windows Integration: Switch Azure-based CI to vanilla 2019 image. b9dfd29b7 Update tests to use volume-copy-up:2.2 4bfcac85f notify readiness when registered plugins are ready 7819da843 Document Protocol Buffer Setup 579b5596c Update volume-ownership image with latest hashes 88a3e25b3 Add targetOS to WithVolumes() c7ec95caf Reword comment and make slight change to code ec2bec648 Fix non C volumes on Windows 3d7522b7f ctr: allow run to override mounts 7beaa5e85 Add mount options to blockfile snapshotter 261d45efe docs/remote-snapshotter.md: update links and description 7274e33e3 CRI: Make stats respect sandbox's platform 82deabf9d Optimize metadata Schema notes to correctly match metadata structures a6cd5e3f4 bugfix: resolve symlink when looking up mountpoint b9f2e48e3 feat: make overlay sync removal configurable becf04a59 Update to docker/login-action V2 79709a205 disable provenance 1be571b14 Add sync before unmount on snapshotter layer test b729962e3 Add blockfile snapshotter to snapshotters doc 798dba9fa Add blockfile as a builtin 0c386e2eb Add blockfile snapshotter d280cb83b chore: update comment for NetworkPluginSetupSerially f8907ab87 Update volume-copy-up 811456b31 go.mod: github.com/containerd/continuity v0.4.0 6f715ab10 go.mod: github.com/containerd/go-runc v1.1.0 85cf9a09e Bump seccomp version to be the same as one in runc repo cdaa4025e Fix some typos 3d9dd2022 ctr: fix the cleanup of task 66307d0b4 CRI: Support Linux usernames for !linux platforms 5dbae3819 snapshots/testsuite: Rename: fix fuse-overlayfs incompatibility df65e321e Simplify closing bundle dir fd 718250b6b Update ttrpc to v1.2.2 7e42dc34d improve container Task comment 4347fc8bc go.mod: github.com/opencontainers/image-spec v1.1.0-rc3 5e054ee63 go.mod: github.com/opencontainers/runtime-spec v1.1.0-rc.2 bb61a6d4b cache diffIDs 6e2c915a4 Bump up golangci-lint to v1.52.2 ecb693ec7 bump typeurl to v2.1.1 f5211ee3f Change to Readdirnames for some cases e60a17925 .github: disable cache for actions/setup-go@v4 52afa34f5 cri: update WithoutDefaultSecuritySettings comment 6f34da5f8 Cleanup logrus imports 717169bb8 plugin: remove go < 1.8 stub, enable on windows and arm64 28d749c9e move to CRI-TOOLS v1.27.0 27f56e607 Fix umarshal metrics for CRI server b947a6f52 update go to go1.20.4, go1.19.9 c54b706c0 Add faasd and actuated into the ADOPTERS file d56466cf3 [transfer] avoid setting limiters when max is 0 2e53c0ec8 Windows integration: fix critest binary path in Azure-based workflow. 9e7f8fe30 Update CRI registry configuration docs 0d975230e Fix panic when remote differ returns empty result c58a229e5 Run CI when adding to the merge queue 0ba066474 vendor: github.com/opencontainers/runc v1.1.7 cbd10e41a vendor: github.com/opencontainers/runc v1.1.6 27c0fe3eb update runc binary to v1.1.7 4891bba83 Update tar tests to run on Darwin d9f3e387c Remove entry for container from container store on error 8ba285f6b fix unable to checkpoint the container more than once 370be0c18 Move logrus setup code to log package 92b93e376 cri: Vendor v0.27.1 8c80ccc7f Update external repo links that changed default branch to main 519457e3e ctr: Add sandbox flag to ctr run c786994ea Update transfer configuration 4e5693938 Add platform config to proxy plugins 4192ca8f8 pkg/cri/server: sub-test uses array and capture range var 8bcfdda39 pkg/cri/sbserver: sub-test uses array and capture range var 745ec84e5 Add diffservice to contrib 3784c1c91 Add proxy differ cb2c3ec8f oci: partially restore comment on read-only mounts for uid/gid uses f23816740 go.mod: add comment explaining go-fuzz-headers replace rule ec9e74ed9 go.mod: remove replace for github.com/opencontainers/runtime-tools 6c40cf305 go.mod: integration: use non-pre-release of containerd 92d1e9bee go.mod: integration: move indirect dependencies to the right group 18d7e84f9 runtime/shim: fix the nil checkpoint options cd16b31cd Get CDI devices from CRI Config.CDIDevices field da4de96e2 containerd support k8s 1.27 4b35c3829 update shim example 71ababe30 runtime/shim: remove runc/v2/services b71f4b751 runtime/shim: rename RunManager to Run 49111b115 update runc binary to v1.1.6 85df1cc6b doc: update CI signal info in README 7e6ab8488 cri: Throw an error if idmap mounts is requested 85afda6f5 cri: Vendor v0.27.0-beta.0 for mounts uid/gid mappings f7b8b1181 update the version of the runc shim in the readme and examples dc2fc987c capture desc variable in range variable just in case that it run in parallel mode 05bb52b27 Use t.TempDir instead of os.MkdirTemp 7a7519a78 CRI Sbserver: Make PodSandboxStatus friendlier to shim crashes 79cb4b000 [sbserver] handle missing cpu stats 464a4977a [sbserver] Refactor usageNanoCores be to used for all OSes e0b817ec1 Fix argsEscaped tests aee358765 Update to setup-go@v4 action 811be6085 Update Azure-based Windows workflow image SKUs. dfc7590d5 remotes/docker: Add MountedFrom and Exists push status db223271e Register imagePullThroughput and count with MiB 6f0714efc Use RunWithPrivileges b41ca1159 Fix access denied on mounted vhdx root a7fddb40b Use wait instead of a sleep to check for startup delay d0527e228 Support for dropping inheritable capabilities 0fb2d9132 update go to go1.20.3, go1.19.8 cab056226 oci: Use WithReadonlyTempMount when adding users/groups c9e5c33a1 UnmountAll is a no-op for missing mount points 8538e7a2a Improve error messages and remove check ba74cdf15 Make ReadOnly() available on all platforms 7bb2756bc Increase integration test tmieout to 20m 1279ad880 Remove bind code path in mount() 6a5b4c9c2 Remove "bind" code path from diff 76690706f CI: bump up crun to 1.8.3 d373ebc4d Properly mount base layers ca5605b4a Skip parent layer options on bind mounts 7f82dd91f Add ReadOnly() function 157fe6a13 docs: fix typo in comment of ExitStatus.Exit(Code|Time) 4012c1b85 Remove escalated privileges 54f8abe55 Use DefaultSnapshotter 47dd3dcff use t.Fatal if we cannot enable process privileges e31bef15f Update continuity 95687a932 Fix go.mod, simplify boolean logic, add logging 7a36efd75 Ignore ERROR_NOT_FOUND error when removing mount db3279859 Update continuity, go-winio and hcsshim 00efd3e6d Remove unused function dc980b14a Grant needed privileges for snapshotter tests feb637f92 Fix layer comparison and enable read-only checks 36dc2782c Use bind filer for mounts d591bb042 Enable TestSnapshotterClient on Windows 7b36becd2 Run Windows snapshotter through the test suite ac30eabbd Fix misspelling of 'Native' as 'Naive' 639c5799a Add paired 'mount' log for 'unmount' 8395e3a89 Don't use all-upper-case filenames in snapshot tests 909730dec Skip tests that do not apply to WCOW on Windows 469c13997 Ensure mounts are unmounted before leaving the test 84cc3e496 Unify testutil.Unmount on Windows and Unix 474a257b1 Implement Windows mounting for bind and windows-layer mounts 34b07d3e2 Implement WCOW parentless active snapshots and view snapshots 82ec62b86 fix: cio.Cancel() should close the pipes ac84bf7c8 Update sbserver to add noexec nodev and nosuid to /etc/resolv.conf mount bind. 126ab72fe Keep linux mounts for linux sandboxes on Windows/Darwin 990199a02 Test to ensure nosuid,nodev,noexec are set on /etc/reolv.conf mount. 96490734b update runc binary to v1.1.5 b55dad06a go.mod: github.com/opencontainers/runc v1.1.5 c89438e83 integration: add container start test using abs runtime path 3557ac884 Extract image service from CRI 97064b077 WithRuntimePath uses the TaskInfo.RuntimePath field c56f54aa1 devmapper plugin: skip plugin when not configured a11e47b48 Use built in atomic.Bool 87346df54 Defer uid lookups on Darwin ae4dbb60d Add noexec nodev and nosuid to sandbox /etc/resolv.conf mount bind. 1be08b10f ctr/tasks: fix unmarshal the task metrics for cgroups v1 8322bcb88 Adds a file header 50b576a94 Adds a dev container and Codespaces docs 0bbca7f1b Cleanup protobuild config daa3a7665 Add `WithReadonlyTempMount` to create readonly temporary mounts f48ae2227 fix: Update error message format based on feedback 3193650f1 fix: 'failed to resolve symlink' error messaging 14714b94d Fold the output of `crictl info` 5fdca538d adding cni metadata to the container in the `ctr run --config` 32d431a7c Update crictl doc 690ae58ca Update cri-tools version on windows 5956cdea8 Remove third-party package cri-api c011502bd Remove cri v1alpha1 services 23d288a80 Remove the CriuPath field from runc's options 62f98a1c1 CRI: Don't always close netConfMonitor channel a4d33a784 Remove support for config.toml `version = 1` 3e87f05b6 Fix image pulling with Transfer service c5f1086ad Update docs fda5c84bc Update gce contrib to use v2 by default 8bd82e355 Remove no_pivot when creating container from CRI 07c2ae12e Remove v1 runctypes c50a3ef04 Update Makefile and CI ef516a150 Remove runtime v1 76778aee6 integration: add restart monitor test for paused task 35a103d32 Remove "containerd.io/restart.logpath" label (deprecated since v1.5) 08337f356 Pre-splice strings and determine whether it is a file and check criCleanup err. e0d9b9663 Fix restarting the paused containers 86fc1ccab Remove `aufs` snapshotter (deprecated since v1.5) 50740a1a0 use strings.Cut instead of strings.Split for parsing imageConfig.User b39ac5d09 docs: fix typo in comment of plugin.Plugin.Err() d835fd2a3 Sandbox: Correct/add some fields to Status() d3e856da7 export: add test for WithSkipDockerManifest 70da5c783 Sandbox: Cleanup shim on Start failure 406583165 archive: consistently respect value of WithSkipDockerManifest 727b25403 fix userstr for dditionalGids on Linux Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-01-04 02:52:53 +00:00
Xiangyu Chen	6e69a270b3	lxc: add distrosysconfdir option to make sure the lxc configuration in correct folder ... After the commit[1] "meson.build: allow explicit distrosysconfdir", the config of lxc would install to distrosysconfdir[2], if this value not set, it might set to /etc/sysconfig, that cause lxc-net configuration cannot be found[3] due to our bb file install the lxc-net to /etc/default folder. Ref: [1] 16ebb29dcc [2] https://github.com/lxc/lxc/blob/main/config/sysconfig/meson.build#L9 [3] https://github.com/lxc/lxc/blob/main/config/sysconfig/lxc.in#L28 Signed-off-by: Xiangyu Chen <xiangyu.chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2023-12-04 21:05:40 +00:00
Jose Quaresma	1db447e785	docker-compose: v2.20.3 -> v2.21.0 ... - d6f842b0 test: e2e test reliability improvements (#10950) - 4fbbf201 build(deps): upgrade to compose-go v1.18.3 (#10947) - 935d72f4 added the dot at the end of the sentence - 41682acc add support for attributes exposed by `docker ps` - 1054792b align docker compose ps with docker CLI to support --format - 19f66918 watch: only allow a single instance per-project - 186744e0 ci: bump golangci-lint to v1.54.2 - bc9d696f Merge pull request #10922 from thaJeztah/replace_dockerignore - 6204fb1c logs: fix for missing output on container exit (#10925) - 5d732010 replace dockerfile/dockerignore with patternmatcher/ignorefile - 2006f3fe go.mod: github.com/moby/patternmatcher v0.6.0 - 192718c0 go.mod: remove some outdated comments - c79f67fe otel: add `include` to project up span - 3b294bfd build(deps): bump github.com/compose-spec/compose-go from 1.18.1 to 1.18.2 (#10915) - dd34f7a2 include: add experimental support for Git resources (#10811) - caad7271 up: handle various attach use cases better - 792afb8d build: use correct values for proxy variables (#10908) - 150449bb warn user secret uid/gid/mode is not supported Signed-off-by: Jose Quaresma <jose.quaresma@foundries.io> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2023-12-04 21:02:28 +00:00
Jose Quaresma	9a1f4d91d9	docker-compose: drop patches from the removed python version ... Drop unused patches from the python version removed in 7bd56074. https://git.yoctoproject.org/meta-virtualization/commit/recipes-containers/docker-compose?id=7bd56074fece944ef9279d87106eb16452ec6338 Signed-off-by: Jose Quaresma <jose.quaresma@foundries.io> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2023-12-04 21:02:21 +00:00
Chen Qi	0eef35edee	docker: remove unnecessary dependencies ... The build is not using the codes from these source packages. Remove the dependencies. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2023-12-04 20:37:15 +00:00
Bruce Ashfield	62ac94c50d	runc-opencontainers: update to 1.1.10 ... Bumping runc to version v1.1.10-2-gf3446b1e, which comprises the following commits: be887840 VERSION: back to development 18a0cb0f VERSION: release 1.1.10 b426e9b7 libct/cgroups.OpenFile: clean "file" argument 8214e634 libct/cg: support hugetlb rsvd f8be7009 [1.1] tests/int/helpers: add get_cgroup_path 1f66027a ci/gha: fix downloading Release.key 5a5b2cc3 Fix directory perms vs umask for tmpcopyup b365458f fix a typo in cloned_binary.c: re-use -> reuse 8f66c9fb fix two typos 016b2b42 Handle kmem.limit_in_bytes removal 11737f55 VERSION: back to development ccaecfcb VERSION: release 1.1.9 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2023-11-24 21:04:15 +00:00
Bruce Ashfield	2e11f93ab4	crun: update to v1.11.2 ... Bumping crun to version 1.11.2-7-gff2b74f, which comprises the following commits: 2cc04ea systemd: fallback to system bus 767ba88 Fix build without libcap 98d9cc9 systemd, cgroup: configure cgroups before joining them ab0edee NEWS: tag 1.11.2 c965462 src: fix codespell error 267f2c5 make: fix clang-format 6e65f5e cgroup: fix crash on cgroup v1 without cpu resources 57e6f9c terminal: adopt ptsname_r POSIX specified return value 6674353 fix: remove the redundant header file 1084f95 NEWS: tag 1.11.1 4cbc9ad linux: force remount with mounts from parent 11f8d3d NEWS: tag 1.11 f8e4f4e cgroup: honor cpu burst 8b44699 systemd: set CPUQuota and CPUPeriod on the scope 5a0ede2 systemd, cgroupv1: set the cpuset data also on the scope 20bb4aa systemd, cgroupv2: set the cpuset data also on the scope 970d20e tests: fix ioprio test 3b874c2 linux: append tmpfs mode if missing for mounts 863008d init: add new function to check file mode 7c3393c cgroup: always use the user session for rootless c60c9f2 Update nixpkgs c053c83 NEWS: tag 1.10 2cc7390 linux: new mount option "copy-symlink" 33cabe6 tests: fix test name 9ee3460 linux: fix error propagation 53c28d9 utils: export safe_readlinkat a549ce0 tests: skip ioprio tests as rootless 1466b7b linux: Fix -Wunused-result compiler warnings when run './configure' only bdb95d6 features: export intelRDT status e2f9853 update: support update of Intel RDT 05bc600 libcrun: support update of Intel RDT 41ae2a2 libcrun: plug Intel RDT support 52d5faa libcrun: add Intel RDT support functions a7a1af9 container: fix early return Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2023-11-24 21:04:15 +00:00
Bruce Ashfield	c43ce48045	moby: update to v24.0.7 ... Bumping moby to version v24.0.7, which comprises the following commits: 05d7386665 daemon: daemon.containerRestart: don't cancel restart on context cancel dd37b0b960 vendor: github.com/klauspost/compress v1.17.2 7058c0d24d vendor: github.com/klauspost/compress v1.16.5 57bd388582 daemon: overlay2: Write layer metadata atomically 05d95fd503 daemon: release sandbox even when NetworkDisabled 2783345d3a daemon/c8d: Use non cancellable context in defers a9e20aeaed daemon/containerd: rename some vars that collided with imports a8d0a58b24 daemon/containerd: newROLayerForImage: remove unused args c981f8aff7 daemon/containerd: log errors when releasing leases 73814c48df internal: Add compatcontext.WithoutCancel 535b70e90c Update check-config.sh dde5995051 vendor: golang.org/x/net v0.17.0 8864727bae vendor: golang.org/x/crypto v0.14.0 81d73e17f7 vendor: golang.org/x/text v0.13.0 d8c62df0b6 vendor: golang.org/x/sys v0.13.0 d7a1fcef8f vendor: golang.org/x/net v0.13.0, golang.org/x/crypto v0.11.0 a22da0d5c4 vendor: golang.org/x/text v0.11.0 85234039a6 vendor: golang.org/x/crypto v0.9.0 9702281ba0 vendor: golang.org/x/sys v0.10.0 01860dc813 vendor: golang.org/x/crypto v0.3.0 daf599ea0a replace dockerfile/dockerignore with patternmatcher/ignorefile 1dffa3a814 vendor: github.com/moby/patternmatcher v0.6.0 58c1c7b8dc Limit OOMScoreAdj when running in UserNS ("Rootful-in-Rootless") 19039eae0b profiles/apparmor: deny /sys/devices/virtual/powercap 164a1a0f14 oci/defaults: deny /sys/devices/virtual/powercap Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2023-11-24 21:04:15 +00:00
Bruce Ashfield	a215d8320e	buildah: drop statically linked x86 entrypoint ... commit e89fac6c9bf8d0b [Add `buildah mkcw`, add `--cw` to `buildah commit` and `buildah build`] added a statically linked x86 entrypoint binary This entrypoint is not currently used in the tested / supported worflows. To avoid packaging QA warnings on non-x86 architectures, we remove the binary during the compilation phase. If it does need to be rebuilt in the future, buildah's Makefiles will have to be changed to not test the host for architecture support, and use the OE defined target arch and cross compilers instead. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2023-11-09 06:25:16 +00:00
Bruce Ashfield	5587dd1535	podman: fix documentation build issues ... podman commit dfec510b41b5 [go-md2man: use vendored-in version, not system] removes the shell test for go-md2man, which means our native executable is not found. While we could export GOMD2MAN and point it to our sysroot version (${RECIPE_SYSROOT_NATIVE}/usr/bin/go-md2man), we could run into the issues with formatting that the podman commit is trying to avoid. If we pass our build host architecture to the build, it will be used and the executable created as part of the compilation. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2023-11-09 05:35:44 +00:00
Kai Kang	710f858012	umoci & buildah & podman-tui: mark incompatible with mips ... Since the runtime dependency skopeo has been marked incompatible with mips, mark for umoci accordingly. buildah and podman-tui rdepends on podman which has been marked incompatible with mips, so mark for them too. Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2023-11-06 16:21:12 +00:00
Leonard Anderweit	28e044b98e	podman-compose: Actually update to v1.0.6 ... Commit 1fc1b193 (podman-compse: update to v1.0.6) states an update to v1.0.6 but does not change the SRCREV. Fix this by using the correct SRCREV of v1.0.6. Fixes: 1fc1b193 (podman-compse: update to v1.0.6) Signed-off-by: Leonard Anderweit <l.anderweit@phytec.de> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2023-11-06 16:21:12 +00:00
Bruce Ashfield	d9af8d1514	podman: update to 4.7.1 ... Bumping libpod to version v4.7.1-6-g85b5f5723, which comprises the following commits: d1cb93d79 rtd: implement v2 build file 8d045d4c9 Adjust to path name change for resolved unit eb5b5dbc8 Switch version to 4.7.2-dev ef83eeb9c New version: v4.7.1 cc5acabf0 Update RELEASE_NOTES.md for v4.7.1 456450438 compat API: speed up network list a2efda96d inspect: ignore ENOENT during device lookup f931f08a7 test/system: --env-file test fixes 297a66c30 Revert "feat(env): support multiline in env-file" 46a85e054 Revert "docs(env-file): improve document description" 6afddf430 Revert "fix(env): parsing --env incorrect in cli" c5ca7e5fc [CI:DOCS] update swagger version on docs.podman.io 51ee25d3f Fix locale issues with WSL version detection 4d15c88a9 switch version to 4.7.1-dev 073183fe1 Bump to v4.7.0 44f727fb0 [CI:DOCS] v4.7.0 RELEASE_NOTES update 2d32314d2 rpm: remove gvproxy subpackage a2697c028 packit: tag @containers/packit-build team on copr build failures 54ce0ca7c specgen, rootless: fix mount of cgroup without a netns d2f9af717 pass --syslog to the cleanup process 133e3a4f2 fix --authfile auto-update test 2c62815e1 version: switch back from -rc1 to -dev 7845dd175 New pre-release: v4.7.0-rc1 49f76e95e [CI:DOCS] Update release notes for v4.7.0-rc1 fa6f94001 Cirrus: Update operating branch 0728a10c6 Move podman build opts to common file 8a9f778e2 Add ability for machine rm -f for WSL 919dce131 Plumbing to run machine tests with hyperv ade0c4932 CI: trace setup and runner scripts c37443e8b Bump to Buildah v1.32.0 9b36f334d [CI:DOCS] bump release notes on main with the latest release cae110f8b fix(deps): update module github.com/opencontainers/image-spec to v1.1.0-rc5 4a2a423df Add --filter pod= autocompletion 075cf2254 e2e: ExitCleanly(): manual test fixes db5adca73 e2e: continuing ExitCleanly(): just the replacements c689fb4a5 Fix some spelling and formatting 522e0f43f Add support for Ulimit in quadlet b1e3e8d97 Run codespell on code 6b7f718b4 wire in new buildah build options f9aba28ca make golangci-lint happy c1b6effac add !remote tag to pkg/specgen/generate 3acee29cf pkg/specgen: do not depend on libimage for remote 2c2299ad8 bump buildah to latest bf86ed72c [CI:DOCS] restart.md: migrate to container unit 304b22729 fix(deps): update module k8s.io/kubernetes to v1.28.2 4ed3273f6 Add support for PidsLimit in quadlet 70560f916 Add DNS fields to Container and Network unit groups 777b5efa4 [CI:DOCS] update API docs version list 7b9114023 Try to fix broken CI (gvisor-something) df011f437 e2e: more ExitCleanly(): manual test fixes cb1cb338c e2e: more ExitCleanly(): dumb string replacements 62ac96e12 e2e: create_test: use ExitCleanly() b0f77acd1 e2e: diff_test: use ExitCleanly() 5920bfa2e The `podman init` command cannot modify containers. 639a1a029 bump c/common to latest main 806c5de12 Podmansh: use podmansh_timeout eefaa512a e2e: more ExitCleanly(): low-hanging fruit 9b17d6cb0 vendor: update checkpointctl to v1.1.0 cdcf18b86 kube: add DaemonSet support for generate 75b4679a7 vendor of containers/(common, storage, image) 19bd9b33d libpod: move oom_score_adj clamp to init 4f017236e e2e: commit_test: use ExitCleanly() 3a4be5e90 e2e: container_clone_test.go: use ExitCleanly() 8cb14e54a e2e: use ExitCleanly() in cleanup_test.go 925794c6a Ensure HC events fire after logs are written 65a64da27 [CI:DOCS] podman-systemd.unit: fix equivalents d9a85466a Add support for kube TerminationGracePeriodSeconds 5eb0a53a0 Update podman-kube-play.1.md.in c2cd93cdc Split up alt binaries to speed up build 7bf9f302a Switch installer task to EC2 fbbad0439 pod: fix duplicate volumes from containers.conf 0c75eac63 tests: add test for pod cgroups b8f6a12d0 libpod: create the cgroup pod before containers 331b3c216 cmd, specgen: allow cgroup resources without --infra 83334fb4e specgen: allow --share-parent with --infra=false 5de8f4aba libpod: allow cgroup path without infra container 5121c9eb0 libpod: check if cgroup exists before creating it 38209ef49 libpod: refactor platformMakePod signature 627ac1c96 libpod: destroy pod cgroup on pod stop 9a347619d utils: export MoveUnderCgroup 556db46a6 libpod: refactor code to new function 65bddfcd2 e2e: use ExitCleanly() in checkpoint tests 479680232 [CI:DOCS]Remove use of --latest|-l from tutorial afeab39d1 CI test runner: upgrade tests rely on system tests 59bd6a74a run --rmi: "cannot remove" is a warning, not an error 70cf9740f StopContainer: display signal num when name unknown 6f913f5f3 URGENT: fix broken CI b83485022 Add support for kube securityContext\.procMount 589867d71 podman: don't restart after kill 2d7d8d1d1 Tmpfs should not be mounted noexec c2575f726 sys tests: run_podman: check for unwanted warnings/errors 1211518e8 chore(deps): update dependency setuptools to ~=68.2.0 465150f10 e2e: use ExitCleanly() in attach & build tests 27495981c Some distros do not default to docker.io for shortname searches 30abd7f1a security: accept empty capabilities list c32cfb1d0 systests: random_free_port: fix EADDRINUSE flake a5798e9f5 fix(deps): update module github.com/cyphar/filepath-securejoin to v0.2.4 dbfc3e7e0 Restrict fcos_test to amd64, arm64 7b2fc5f8d fix(deps): update github.com/containers/libhvee digest to 56fb235 0a913d578 fix(deps): update module github.com/docker/docker to v24.0.6+incompatible f9fd40221 fix(deps): update module golang.org/x/tools to v0.13.0 71549c642 Ignore spurious container-removal errors e5bf0f96d fix(deps): update module golang.org/x/net to v0.15.0 fdf694fcf systests: manifest zstd test: lots of tiny cleanups 9730c0373 vendor: update github.com/opencontainers/runc to main e825bd5d5 [skip-ci] Update actions/checkout action to v4 8b4a79a74 linux, rootless: clamp oom_score_adj if it is too low 681b6db3f machine: increase max number of inotify instances 302d15334 fix(deps): update module golang.org/x/term to v0.12.0 f094884c1 Remove redundant nil checks in system connection remove 17037af48 fix(deps): update module golang.org/x/text to v0.13.0 1d51cd14a fix(deps): update module golang.org/x/sys to v0.12.0 f542d21a7 fix(deps): update github.com/containers/libhvee digest to 2bf7930 d4fedb288 docs(readme): fix a broken link 50cd072bf [CI:BUILD] Podman FCOS image from main 58a0b7ac8 Update golang.org/x/exp digest to d852ddb fe7bafb83 Add port forwarding and gvproxy machine test 702709a91 libpod: do not parse --hostuser in base 8 13342e503 fix: default typo 3a6fc8d2b Add Japanese locale and translation of index 39c5b7fac remove rh.container.bot@gmail.com a62abfe3d Tweaks and cleanups to prepare hyperv for CI a0738e7e6 system tests: housekeeping: various small fixes 4082b67f6 CI: e2e: first use of new ExitCleanly() matcher 6cbd17c0f CI: e2e: new ginkgo matcher, ExitCleanly() da1246d58 CI: e2e: fetch the standard system-test image d20b5869f kube play: fix pull policy 18d35b612 Fix gidmap command in example e66c04c1f vendor containers/common@12405381ff b95ae3b4a manifest,push: support add_compression from containers.conf 1085177fe hyperv ignition: use gvforwarder instead of vm 2a8e6acec Set remote username earlier for hyperv 26cefcbf9 Added an additional troubleshooting problem and solution a3c2d6ad2 Remove a dependency on libimage from pkg/bindings f1c24df4f Rename parameter in pkg/bindings 259ab8594 Remove a dependency on libimage from pkg/api/handlers 4cac1d3bc Don't re-inspect an image 99834947d Cirrus: Remove multi-arch podman image builds 91b8bc7f1 uid/gid mapping flags 18c2a2be8 [DOC] Clarify default behaviour on uidmap 60e3b5ef1 Update containers/common to latest fe3c4562f update libhvee 1b45fd723 /_ping handler: return OSType http header 2dbb0b096 e2e: fix race condition (kube play + logs) fe11db1e8 Update module github.com/vbauerster/mpb/v8 to v8.6.0 7ef97fa49 Kube - support List documents 346e5e52e kube down/play --replace: handle absent objects 0938ee189 push, manifest-push: --force-compression must be true with --compression-format 4b347609d oci: print stderr only after checking state 461230c49 Updated docs to reflect pod spec sysctls support added in v4.6 b8146a8a2 [CI:BUILD] Packit: Disable unexpected journal message check for cockpit-podman a6f2f5854 [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras b6b300c79 Update machine init/set tests da81bc13a Add rootful status to machine inspect d3618719b Dedup and refactor image acquisition adf34cbd7 Share podman sock bindings with other WSL distros db95e678a Fix user-mode validation check d898ae7f9 system tests: try to fix sdnotify flakes ecf9f9fd8 Cirrus: Disable only hello multiarch build f32e954b8 Set StopTimeout for service-container started under podman kube play d2ec127c1 Set StopTimeout for compat API if not set by client 6f284dbd4 podman exec should set umask to match container 2c5c2d213 [CI:BUILD] Packit: run cockpit-podman tests in PRs 52ed7fce2 Add infra-name annotations to kube gen/play a5f6a4a3b kube: notifyproxy: close once 7a94f8c12 system service: unset NOTIFY_SOCKET 638f994c2 Update module k8s.io/kubernetes to v1.28.1 7c9c96981 API attach: return vnd.docker.multiplexed-stream header 60e58f059 test/apiv2/60-auth.at: use `doesnotexists.podman.io` 61dd7f80c e2e tests: use registry:2.8.2 (was 2.8) 243f365aa create apiutils package c5b4eb943 api docs: document stream format 70f77efef Revert "Remove `hello` multi-arch image build" 82bd56be7 manifest-push: add support for --force-compression 469ace091 push: add support for --force-compression 202cc433a Update module github.com/onsi/ginkgo/v2 to v2.12.0 7e0130f75 Remove `hello` multi-arch image build 1b0e64a10 hack/perf/system-df.sh: add `df` benchmarks 148d95d8d Expand env variables for cmds/entrypoint with format $(ENV) e092f887f vendor c/storage@6902c2d c416e4576 Ignore the resource limits on cgroups V1 rootless systems 9e680cbc6 Fixups for stopping gvproxy 21c9517b5 Revert "GHA: Closed issue/PR comment-lock test" f0e8e79c9 GHA: Closed issue/PR comment-lock test 5477fd38a GHA: Add workflow to lock closed issues/PRs 75ce47347 [CI:DOCS] update auto-update docs 85d0df330 chore(deps): update dependency containers/automation_images to v20230816 bc35e28c0 fix(deps): update module github.com/google/uuid to v1.3.1 3d00744d2 libpod: sum per-interface network stats for FreeBSD 5eee8825e Set default Umask for `podman kube play` ef8f4db81 [CI:BUILD] rpm: spdx compatible license field e9539768c chore(deps): update dependency golangci/golangci-lint to v1.54.2 63a8926e9 Implement automatic port reassignment on Windows 45ce4834a Add support for ramfs as well as tmpfs in volume mounts bdc304058 Validate current generation of WSL2 with user-mode-networking 67756ac60 use container restart policy if user specifies one 0772d8ddb Stop gvproxy on hyperv machine stop 50136ea86 [CI:BUILD] rpm: depend on man-db 36e09f18b Update machine list test 8b2990131 Update machine start tests c3dbfa9a1 Update machine rm tests c726cf810 libpod: improve conmon error handling ed1f514d5 cirrus setup: install en_US.UTF-8 locale 8f85aaf07 fixup "podman logs with non ASCII log tag" tests 27b41f087 libpod: use /var/run instead of /run on FreeBSD 9b4f1cdb9 cirrus/lib.sh: extend env to passthrough at start for locale work ff66f31dd libpod: correctly pass env so alternative locales work 29c298856 cgroups_linux: use SessionBusPrivateNoAutoStartup 362747cfa podmansh man page UID=$(id -u lockedu) is not allowed e38cf33a6 CI: systests: remove pasta ICMP tests 7103fdb3f podman.1.md: Fix formatting of exit code 127, clarify wording of `exit code` example. 896cab612 document available secret drivers 53dd37cc4 pkg/specgen: add support for read-only root on FreeBSD d5841ed52 add --module flag 6a3f09e8a Update dependency setuptools to ~=68.1.0 1d5890bcd Add riscv64 architecture to the cross build target 252f51de8 GetFcosArch add `riscv64` arch 98e7d7af0 Update WSL backend to be compat with FCOS defaults 9e14e3ebe enabled hyperv image downloads 3e2e360b9 fix(deps): update module github.com/containers/ocicrypt to v1.1.8 abd35d4d3 [CI:DOCS] Fix git build example in build page 0c52d1004 CI: e2e manifest_test: use image from quay 31dc42224 Cirrus: Remove EC2 experimental flag 4c7546cb3 sphinx: skip options include dir 345b9b029 Update rootfs.md: Fix formatting and wording of idmap option f33b01b73 fix: Docker API compatible bool deserialization 4cb2d48ca Revert "compat,build: pull must accept string" 68bd81470 Add missing verb in machinectl example 78d6cd4c9 [CI:DOCS] Update Release Notes and Release Process b6349017a chore(deps): update dependency golangci/golangci-lint to v1.54.1 4b80492bd fix podman top missing output flake 5908999e6 New partial-line test is flaking 555b4f930 [CI:BUILD] Packit: add back fedora-eln targets f0dac3677 Cirrus: Prune defunct job + fix noop alias 1947f035c Bump bundled gvproxy to 0.7.0 df28df1ae systests: tests for --env and --env-file bcebcad1f Update system connection add & remove 310f971fc Add tests for podman farm dce3ef3c4 Add podman farm update command 44a704dfc Add podman farm remove command 59a8140f1 Add podman farm list command 6fcdf1a19 Add podman farm create command 1d5ef29f0 Add podman farm subcommand 23d5b5008 CI: e2e: add delay before podman logs or journalctl 2951316b2 Add completion for Farms b672ddc79 Vendor c/common changes 3963c5639 chore(deps): update dependency golangci/golangci-lint to v1.54.0 a55c2636d file logger: fix podman logs --tail with partial lines 7ce654fea fix(env): parsing --env incorrect in cli 4c4bc0922 Update docker.io/library/golang Docker tag to v1.21 f55c48ad3 podman stop --cidfile missing --ignore 7ef03517f Skip podman exec cannot be invoked on Debian 95ceacefb Re-enable checkpoint test on Debian SID c193dbd94 Require a non-generic reason for non-Fedora skip d79e3a23d CI FIXME removal/update. 5ec856652 Update dependency containers/automation_images to v20230807 7988dd82c [skip-ci] Update dawidd6/action-send-mail action to v3.8.0 8a410784b [CI:DOCS] fixed couple typos in build docs 282594e58 Stop timer in function waitPidStop 7c0bccaf7 packit: Build PRs into default packit COPRs afaeedef7 Add support for host-gateway 2de22ebf0 Ensure volumes-from mounts override image volumes 03d7a5120 Minor: Include shasums in GHA workflow artifacts d63ac0652 Minor: Add important comment to windows GHA workflow 9d7fe4e90 Minor: Update/fix dry-run input descriptions 518daef72 [CI:DOCS] Quadlet - provide more information about network files 819129b0d man-page xref: check for duplicate entries 39641482c cp: close temporary file on error path 018fdb48e Makefile: work around the lack of 'man -l' on FreeBSD 0b7769fda Update module golang.org/x/net to v0.14.0 ec5a9b9cc libpod: fix a crash in 'kube generate' on FreeBSD 23c5890f2 remove temporary files when copy [NO NEW TESTS NEEDED] fab62f816 Update module golang.org/x/sys to v0.11.0 b46d72fec [ci] Remove the podman socket in remove_packaged_podman_files() 706c51b52 [ci] Correct the podman systemd file names dd4f47dd9 Always show RemoteSocket.Exists in json fc7c6efd3 Fail if ssh key exists 69e883493 Fix regression for hyperv 803a49da4 [CI:BUILD] Makefile: rpm target generates correct version 1a63c1b23 Fix nits in #19480 1e5453943 Add support for passing container stop timeout as -1 (infinite) d50054f1e pkg/specgen: Add device support for FreeBSD f5058f148 [CI:DOCS] man: remove duplicate entry .LastUp a8974d4a3 CI: e2e: remove useless test 53d44a65e Check tty flag to set default terminal in Env 62a22c5d6 Run codespell on code 44f159ed3 Deprecate podman generate systemd 346f9cb4e manifest/push: add support for --add-compression 8ccda1ee8 [CI:DOCS]Update Release Notes b91599742 CI: sys: quadlet %T test: do not rely on journal 4d69f0146 GHA: Support testing build/sign workflows 15f35d354 Remove unnecessary backslashes 18e75daa5 [docs] Use code blocks for commands in podman-completion f3ebd798c Make podman run --rmi automatically set --rm 8b7701f52 machine: QEMU: recover from failed start 49b8b971a vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a bfd2a8cad secret: add support for `--ignore` with rm 21ebe0e90 Move `writeConfig` logic to shared function 597ccff0b Move some logic of `setRootful` to a common file 98cf8462a move `removeFilesAndConnections` to a common file 75a8f13c4 Move `waitAPIAndPrintInfo` to common file 55c7b5cec Move `addSSHConnectionsToPodmanSocket` code to shared file 0489d3aa6 Update module golang.org/x/net to v0.13.0 d74c225f4 chore(deps): update dependency containers/automation_images to v20230726 27d79e1fc Skip pasta local forwarder test on debian SID b69cd8d84 Skip broken/flaky blkio-weight test 822f2f495 Skip tarball re-inport test in rawhide for CI 851cd9cca Cleanup CIDFile on podman-remote run --rm command a237c3f46 CI: e2e: remove workaround for missing login file 42ad0c6e7 vendor: bump c/image and c/common 5b7dce8a3 Add support for confined users 78b850c48 Cirrus: Temp. disable rawhide validation task def70012b Limit git-validation to 'short-subject' 33b8c451e Fix up man page and add test on globs 850482b31 Move alternate image acquisition to separate function 906af5bbc Move `getDevNullFiles` into a common file 89f1fdc7f Update github.com/digitalocean/go-qemu digest to 2e3d018 d6847b19c Convert QEMU functions to methods with documentation 6930f39a6 Update docs/source/markdown/podman-build.1.md.in e1114f03c do not redefine gobuild for eln 39341f283 Set default userns from containers.conf file 4f1f88d7c Mention TimeoutStartSec in quadlet man page ada71889c inspect with network=none show SandboxKey netns path 93f4cc1b5 [CI:DOCS] GHA: Use stable go for Mac/Win builds ff7d287fc Breakup AppleHV machine funcs 64873e322 Codespell fixups acbe7703f Update docs/source/markdown/podman-stats.1.md.in 0b7157e3b CI: e2e: reenable containerized checkpoint tests c67ef7c1a docs(env-file): improve document description 4ee31dc37 Don't log EOF error when using podman --remote build with an empty context directory. f2794f9a8 API: kill: return 409 on invalid state 170a78631 feat(env): support multiline in env-file 19deb6a34 Adds documentation to new functions that were added 481143e58 `startHostNetworking`: get DevNull files 13da82466 `Remove`: remove network and ready sockets from registry d896431b2 `Remove`: remove files and connections 32265e1f6 `Remove`: collect files to destroy 381b103dd `Init`: read and split ign file aa6827a67 `Init`: write ign config cc30639d7 `Init`: add network and registry socks to registry 78d3b549c `Init`: add SSH conns to podman sock 630e7ba39 Improve the description of fields in podman-stats man page 22a8b6886 make /dev & /dev/shm read/only when --read-only --read-only-tmpfs=false 663fe9446 Mention no comment lines in Containerfile.in podman-build man page e973d15c3 [CI:BUILD] RPM: define gobuild macro for rhel/centos stream 837bc2568 Fix HyperV loadMachineFromJSON function name 416a471ee machine: QEMU: lock VM on stop/rm/set bb57c1631 libpod: add 'pod top' support on FreeBSD f592c33fb [CI:DOCS] Build and Sign Mac Pkginstaller f540bbffa Make sure users changes --authfile before checking 8757fe88a github: add issue type as link to podman github discussions 3523b9b05 Break QEMU `config.go` code into its own functions c341a0ffe machine: QEMU: lock VM on start afe8d5d84 libpod: fix 'podman kube generate' on FreeBSD 0fefcf8a4 Add glob support to podman run/create --mount d6815da8c kube: add DaemonSet support 239a5b64a Fix artifacts script after removal of msitools msi build e335a66a9 System tests: quadlet: fix race in %T test d6a32a3da If quadlets have same name, only use first db0ba9b25 Add support for mounts listed in containers.conf 6dda21984 Update vendor of containers/common 33891e8e9 System tests: add test tags 5ba055937 [CI:DOCS] socket_activation.md: increase socat timeout dfec510b4 go-md2man: use vendored-in version, not system a92bb3219 CI: use different TMPDIR on prior-fedora 6894e2031 system tests: authfile-exists: minor cleanup d70f15cc0 start(): don't defer event de122bb44 Fix: use --all in podman stats to get all containers stats 349d775de Verify authfile exists if user specifies it e0ef23955 libpod: don't generate errors for createTimer etc. 0cfd12786 add "healthy" sdnotify policy cbc96a7b4 Remove LICENSE and general doc files that are installed by the main package 37f0e9620 Add missing ` 2f21df7b3 Remove legacy msitools based msi installer ac212605c Remove any quotes around distribution id e596b17fb add a podman-compose command eee2817de pkg/specgen: Don't crash for device spec with... d2796c6c1 fix(deps): update module github.com/docker/docker to v24.0.5+incompatible f4fbd6fd0 Update vendor of containers/(storage,image) d4fc66af9 Clean up /var/tmp/ when using oci-archives when creating containers 49257a3c5 [CI:BUILD] RPM: separate out gvproxy for copr and rawhide b57091ac9 Reduce qemu machine function sizes baf30e612 [CI:DOCS] migrate socket_activation.md to quadlet 7314569cb [CI:DOCS] Update kube play volume support b5ce0ab2d Fix language, typos and markdown layout cb5450af7 [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet debug 0bb73bf55 Add note on debugging quadlet unit files d4cfc498d Remove unnecessary use of the word "please". a6a207673 libpod: fix FreeBSD 'podman-remote top' default behaviour 709beb6c0 fix(deps): update module github.com/onsi/gomega to v1.27.9 3e534eff9 Add support for ShmSize to quadlet 4b9f670ca Quadlet system test - force journald log driver for short lived containers 731bd7d94 fix(deps): update module github.com/containers/libhvee to v0.4.0 413552e10 quadlet recursively scan for unit files ce736413b Ensure that we appropriately warn that TCP is insecure 558a70262 systests: quadlet: fixes for RHEL8 8d190704a Quadlet - Allow setting Service WorkingDirectory for Kube units 24bf6fc24 Quadlet system test - do not rely on journalctl in kube file tests 3d6bc2f86 Fix markdown in docs for podman-network-create 11ffea313 Man pages: check for corrupt tables 1d14bb7a8 quadlet systest: fix broken tmpdir references e55e128fc Add `since` as valid filter option for `volume` subcommands 6df17332b Podmansh: Better error, increase timeout to 30s 96241159a Fix multiple filter options logic for `podman volume ls ` 00a5b0709 Add bash-completion for podman inspect 3b6343202 Fix windows installer d7e25e14a Add missing reserved annotation support to `play` d2862c7dd Avoid progress hang with empty files 5c0912b07 Revert the usage of `home.GetConfigHome()` 5aa52659b Fix bug report issue template README link 47997857f Replace error check for non-existent file 8febb6aa1 Emergency gating-test fixes for RHEL8 d8d600b1d Add progress bar for decompress image 46058cfed refactor: move progressbar to a function ca9874ab7 Use pkg/homedir to get the home config directory 7fb17ae78 fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2 a224ff731 Should be checking tmpfs versus type not source 9e60f3ec5 fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1 b4ffbcdfd Enabled arm64 arch for podman applehv provider 4e4078dbb [CI:BUILD] Packit: remove pre-sync action d0602e8f7 Add `--podman-only` flag to `podman generate kube` 13a950016 Update vendor containers/(common, buildah, image, storage) f256f4f95 Use constants for mount types 310a8f103 libpod: use define.TypeBind when resolving container paths 1e9410094 Tests: remove/update obsolete skips a3bbc3a2c Fix trust not using local policy file 0997cf012 Fix `podman container prune` docs for `--filter` a8d8c9497 Add more tests for liveness probes with default hostname & named ports 383d683f8 docs: podman-build --network add slirp and pasta 5e64cbf35 docs: podman run --network mention comma separted names 1443e2918 Podman machine AppleHV pass number 3 315a7887a Makefile: `package` -> `rpm` 85d936133 network create: document --internal better e43127e0b pkg/specgen: fix support for --rootfs on FreeBSD 8c16322a8 machine start: qemu: wait for SSH readiness 12dc546fc [CI:BUILD] Packit: downstream task action fix 2b2c4453f Fix container errors not being sent via pod removal API 6ec261e7a Add missing return after utils.InternalServerError() d1950869a Update cmd/podman/login.go cce8501a5 [CI:DOCS] Reformat and reorder table with --userns options d497eb369 Add secret support to podman login 2a9b9bb53 netavark: macvlan networks keep custom nameservers c6b5b9a02 remote: fix podman-remote play kube --userns 441af003a fix(deps): update container-device-interface to v0.6.0 656ad760f go mod: no longer use 1.18 aeef403cd fix(deps): update module github.com/containers/libhvee to v0.3.0 6fd4ae6d2 chore(deps): update module github.com/gin-gonic/gin to v1.9.1 [security] 0dcfe6e06 Run codespell on code 3ad55f48b system service: unset listen fds on tcp f1c68b79e add hostname to network alias b6ec2127b libpod: set cid network alias in setupContainer() 4e96686e9 AppleHV enablement pass #2 72a1857e4 e2e: Fetch the correct user name 7b54fd84e Add `--no-trunc` flag to maintain original annotation length 600de05e3 Fix TCP probes when the optional host field is not given ac3a115c3 Add support for using port names in Kubernetes health probes 4494cefbc Fix: cgroup is not set: internal libpod error after os reboot 932fae402 Allow setting volume and network names in Quadlet 427b959a1 pasta tests: automatically determine test parameters 97fd03ccd test/e2e: wait for socket a69194b02 manifest inspect: support authentication 70428baef api: fix slow version endpoint f8213a6d5 libpod: don't make a broken symlink for /etc/mtab on FreeBSD 499b8d13c CI: remove build without cgo task 42ea0bf9c libpod: use io.Writer vs io.WriteCloser for attach streams 597ebeb60 top: do not depend on ps(1) in container 3f8ee70d0 make --syslog errors non fatal dbec2b5aa api: fix doc for default ps_args 1b7eb44d3 Fixes typo in the path where quadlet looks for files efefd8cf5 Add --replace flag to podman secret create eec438222 [CI:DOCS] uidmap man pages: fix corrupt italics 8d24e2838 [skip-ci] Update github/issue-labeler action to v3.2 f9077689e [CI:DOCS] podman-system-service.1.md: document systemd usage dd16661b1 fix(deps): update module github.com/docker/docker to v24.0.4+incompatible 65136521e fix(deps): update module github.com/docker/docker to v24.0.3+incompatible fa654e985 Use bytes size consistently instead of human size dee94ea69 bugfix: do not try to parse empty ranges 9e4045768 [CI:BUILD] Packit: fix pre-sync action for downstream tasks 531fb21d0 fix(deps): update module golang.org/x/tools to v0.11.0 ab2fa45ad fix(deps): update module golang.org/x/net to v0.12.0 459b1578c fix(deps): update module golang.org/x/term to v0.10.0 99f93d55c e2e: fix two toolbox flakes fc5aa9c9c test/e2e: use GinkgoT().TempDir() over MkdirTemp() ea8992cb4 test/e2e: use random ImageCacheDir 17a06d343 test/e2e: remove RHEL7 workaround bc22aefce test/e2e: remove unnecessary code in SynchronizedAfterSuite ff7790038 test/e2e: do not use /tmp for podman commands db7cb1dbf test/tools: vendor ginkgo v2.11 c20612bab test/e2e: write timings directly to file a0b765552 machine start: qemu: adjust backoffs d874790bc auto update: fix usage of --authfile ba1355b23 system tests: refactor registry code 94b321337 fix(deps): update module golang.org/x/text to v0.11.0 644f7cd9b pkg/specgen: properly identify image OS on FreeBSD a3a62275c libpod: use new libcontainer BlockIO constructors 2d68c3add [CI:BUILD] Minor: Don't confuse osx-debugging 5aabc5088 [CI:DOCS] Better document the default value of --userns e4644c3cb Cirrus: build FreeBSD binaries in a VM 92fc0f481 Makefile: add support for building freebsd release tarballs 4a5396b46 [CI:DOCS] uidmap man pages: fix corrupt tables 5a8e092a2 fix(deps): update github.com/crc-org/vfkit digest to c9a4b08 d0359fcca fix(deps): update module github.com/containers/buildah to v1.31.0 300eb36b4 fix(deps): update module github.com/opencontainers/image-spec to v1.1.0-rc4 94e59bd2f Use /proc/self/gid_map as intended, not uid_map a16488f89 fix(command): ignore `--format` in `podman search --list-tags` 9fb2f8e10 podman machine start: fix ready service 8408ad498 Makefile: don't rely on the non-standard -r flag for ln 39624473b pasta: Create /etc/hosts entries for pods using pasta networking fe0de8b9f fix(deps): update module github.com/containers/libhvee to v0.2.0 2393fe453 pasta tests: add sanity check for test name vs function 4da3e47b6 pasta tests: cleanup + 1 new test 43b9426fc cmd/podman, pkg/domain/infra: sockets should live in /var/run on FreeBSD e3f2a97d1 cmd/podman/system: add API server support on FreeBSD 0d7da5c0b [CI:DOCS] Document support of pod security context IDs f64a1a1cc rootless: use default_rootless_network_cmd config e4efd709d Revert^3 "pasta: Use two connections instead of three in TCP range forward tests" 17cd5aecb pasta: Workaround occasional socat failures in CI 13c7d05cc pasta: Remove some leftover code from pasta bats tests bc58dae36 Bump c/image to v5.26.0, c/common 0.54.0 2cb549339 fix(deps): update module github.com/coreos/stream-metadata-go to v0.4.3 bf60bb073 Display secret to user in inpspect 448e01566 [CI:BUILD] RPM: Fix koji and ELN issues 8fb719a9e e2e: systemd test: major fixes 865d77e94 pkg/specgen: add support for 'podman run --init' on FreeBSD 74b4615aa Bump version after v4.6 branch cut b6e636cbe Remove 'inspecting object' from inspect errors fe8355be7 pasta: Fix pasta tests to work on hosts with multiple interfaces d15cca024 [CI:DOCS] fix command incorrect in windows bcb89fc8b Fix readonly=false failure 609c47ae6 pkg/specgen: Add support for Linux emulation on FreeBSD cf9ebcddf Fix up podmansh man page 05eb3e6f1 Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs f5cc0487e Fixes for vendoring Buildah 0f4c86e26 vendor in latest buildah 6eaf8a271 tests: fix "Storing signatures" check b80fd54a5 update c/image and c/storage to latest eeb7aeb49 Kube quadlets can support autoupdate as well as containers 2160a114c debug tail 800 lines flake dd81f7ac6 Pass in correct cwd value for hooks exe 227c07aeb specgen: honor --device-cgroup-rule with a new user namespace 0220f3338 specgen, rootless: raise error with --device-cgroup-rule db37d66cd make image listing more resilient 17a18b16c Update module google.golang.org/protobuf to v1.31.0 bc5269f18 Trim whitespace from unit files while parsing 516034215 Re-organize hypervisor implementations ba3da15e0 play.go: remove volumes on down -f Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2023-11-06 16:21:12 +00:00
Bruce Ashfield	58a5300e7a	kubernetes: update to 1.28.2 ... Bumping kubernetes to version v1.28.2-44-ge3b5e621f07, which comprises the following commits: b5e28b1cdd6 [go] Bump images, dependencies and versions to go 1.20.10 1cd2ac99542 .: bump golang.org/x/net to v0.17.0 cecc0e93916 Mark a volume as uncertain-attached after detach error 15101d92e18 Unit & integration tests for OpenAPIV2 AddUpdateAPIService 9f4011446a2 Fix 120878 - Refactor cacheabledownloader so handler can be updated and fix AddUpdateAPIService to update handler 489c08ddf47 Fix 120739 - Prevent AddUpdateAPIService from blocking on updating spec d35a00e218c Fix 120758 - prevent cache Load on uninitialized spec 985ef265511 Add nil checks for hpa object target type values 88669d0a23b Make a certain ipv4-vs-ipv6 config error non-fatal, for backward compat 84a3ad3573b [go] Bump images, versions and deps to use Go 1.20.9 63fcac91c42 Only configure swap if available on node 07a74666cb2 Use local isCgroup2UnifiedMode consistently 57bbc335fd7 cronjob controller: ensure already existing jobs are added to Active list of cronjobs 8ea9b219c69 reintroduce resourcequota.NewMonitor 794d56966e8 change rolling update logic to exclude sunsetting nodes a08ec1215fe vsphere: adapt to govmomi bump ef63f36ff82 .: bump govmomi to v0.30.6 aba7c443072 Increase range of job_sync_duration_seconds bcaa53c9c10 sync Service API status rest storage a68748c7cd0 Update CHANGELOG/CHANGELOG-1.28.md for v1.28.2 89a4ea3e1e4 Release commit for Kubernetes v1.28.2 0c6a0c3f69b kubeadm: remove reference of k8s.io/kubernetes/pkg/apis/core/v1 47507f9f022 fix race on etcd client constructor for healthchecks 7d33fba21a8 e2e pods: fix WaitForPodsResponding retry 2480fce67f5 kmsv2: reload metrics bug fix backport 110a6fe8a9f scheduler: start scheduling attempt with clean UnschedulablePlugins 0aebbad4731 fix(queue_test): make sure the first bind failure via counter 798a0abe368 [go] Bump images, versions and deps to use Go 1.20.8 62321a9201c scheduler: unit test case for concurrent event with other pod e5b981ebcd7 scheduler: fix tracking of concurrent events 16298b54483 fix verify errors 38904e5f2d1 remove used vars ce017591468 sort stability list of metrics in the shell command b5fd7e9f23c Feature-gate SidecarContainers code in pkg/kubelet/kuberuntime 958c30349fa Add an e2e test for the pod sandbox changed scenario ac67de196ff fix: concurrent map writes in e2e test 19c4cf0f1a0 Automated cherry pick of #119776: Fix a job quota related deadlock (#120319) dda909d6c51 TopologyAwareHints: Take lock in HasPopulatedHints 8656da75f2a Fallback to legacy discovery on a wider range of conditions in aggregator 526e25b685a Fix OpenAPI aggregation cleanup 0bca3b0e4de apiextensions-apiserver: generate applyconfigurations 8c7c4f3fc4d Revert to json-patch 4.12.0 a4fdac21a98 update build cross image to the correct release branch image fc184558921 Mark Job onPodConditions as optional in pod failure policy 955843efcf3 Incorporating feedback on 119341 4c8b24d8618 Update CHANGELOG/CHANGELOG-1.28.md for v1.28.1 8dc49c4b984 Release commit for Kubernetes v1.28.1 ad60b95eb63 Add wait for cache sync 175bbaa8894 check for overflow f3f88b8e7b5 Fix CEL cost handling of zero length replacement strings 90715527543 Use env varaibles for passing path 53902ce5ede Use environment varaibles for parameters in Powershell e8abf3c441c e2e framework util subtle bug checking endpoints a1fdd1152d9 Pass Pinned field to kubecontainer.Image 27e6c94259f prep for go1.21: use -e in go list 04de4683cb1 kubeadm: fix nil pointer when etcd member is already removed 8fd45c6bd0f update to golangci-lint v1.54.1 + go-ruleguard v0.4.0 cce3f6ffa79 Make gomaxprocs install optional, limit to tests 20b69aea685 Drop [Feature: tag to make sure this tests runs on pre-submits 58ac6e12ccc Statefulset should wait for new replicas when removing .start.ordinal e7cfe85b9c1 e2e WaitForServiceEndpointsNum take into account the address family 96696c15f89 fix: when PreFilter returns UnschedulableAndUnresolvable, copy the state in all nodes in statusmap d20fe4d8487 Update CHANGELOG/CHANGELOG-1.28.md for v1.28.0 855e7c48de7 Release commit for Kubernetes v1.28.0 b4053c3b293 Fix a bug that PostFilter plugin may not function if previous PreFilter plugins return Skip b4fac632cd1 Remove release-notes for the PR#118895 5f7b27f4ade Remove release-notes for the PR#118895 87caf500e1f Update CHANGELOG/CHANGELOG-1.28.md for v1.28.0-rc.1 c5048f41fe3 CHANGELOG: Update directory for v1.28.0-rc.1 release add7e14df11 Release commit for Kubernetes v1.28.0-rc.1 c6efaf16c1e apiserver/etcd3: fix segv during metric collection 6ddcdef29ae kube-proxy: fix combination of --config and logging command line flags 0d90d1ffa5e Revert "Merge pull request #118895 from RyanAoh/kep-1860" 1876ddf7149 Avoid returning nil responseKind in v1beta1 aggregated discovery 55ca1a6ee15 Remove leases test case from AdmissionWebhookMatchConditions suit 050c0437e60 fix: broadcast when pod is pushed back to activeQ directly in AddUnschedulableIfNotPresent 9bc857d6d90 [releng] Update publishing-bot rules for release branches to Go 1.20.7 38a81ca04f3 Bump distroless-iptables to 0.2.7 ae86051ec5a Bump protoc ab26637eae4 Add test coverage of result size of string operations 8e72718249e Bump cel-go to v0.16.1 72c8cf9fce7 [go] Bump images, versions and deps to use Go 1.20.7 2ceca1c78db e2e WaitForServiceEndpointsNum should watch EndpointSlices 2f30fae0e8b scheduler: fix data race after binding failure 1b90dff5276 .*: bump golang.org/x/net to v0.13.0 73107c1b755 Update OWNERS 53c8872cc18 Update OWNERS 2a82aac5248 Update CHANGELOG-1.28.md for KMSv2KDF 294c7df3285 Avoid pulling node-problem-detector through CDN b4ef4015a29 Avoid pulling mounter.tar through the CDN cfcbce31a39 apiextensions: fix validation error for status.storedVersions 936819c21bc docs: update release note for KMSv1 deprecation 6689fd97469 DefaultHostNetworkHostPortsInWorkloads -> DefaultHostNetworkHostPortsInPodTemplates a65d2075072 calculate the correct machine-type 182a4f858a3 API warn non-ExternalName services w/ externalName 7bd0a857e30 API warn ExternalName services with externalIPs dd8a64d7e15 publishing-bot rules for release-1.28 branch a005617111c CHANGELOG: Update directory for v1.28.0-rc.0 release 7d13c9b096b set map to nil if an empty string is passed eb4063f0ced Add cases to tests `AdmissionWebhook` MatchConditions size limit (#119404) ef4907eddd7 Add e2e tests for admission webhooks MatchCondition fields (#118319) a248c4de521 test: fix NodeLogQuery tests to query the correct node for logs 45710678b30 Release commit for Kubernetes v1.28.0-rc.0 67769438e1d kmsv2 test feature enablement disablement and restart 18a7025383c update documentation with descriptions 7e0a9a7f4e7 Use statusReason for reason under x-kubernetes-validations (#119544) 3b9af471185 add admission policy integration test all resources 22bf29ad22f Treat empty string as nil in fuzzer for CEL Reason field a164005cc09 Fix non-test code relying on test-code e1b0bc3d0a7 bugfix: use matched resource for AdmissionRequest.resource, not the resource it was converted from 5e2e8c80647 bump validatingadmissionpolicy alpha->beta 1c99f9591b0 add node-env and instance-type flags to node-e2e tests d6479587445 update codegen ef8670c946d refactor: replace usage of v1alpha1 with v1beta1 294f5c9a42f make update ae185e91186 e2e: test LastPhaseTransitionTime field when binding PV a9c3444a47b test: add coverage for pv status update and create strategy bf49c727ba1 kmsv2: KDF based nonce extension aa65bab4269 implement pv last phase transition time c97eb2b5cb0 Fix XValidations deepcopy to copy contents of nested pointers 76eefd3a012 CHANGELOG: Update directory for v1.28.0-beta.0 release 1b4de065df4 add LastPhaseTransitionTime field to PersistentVolume 5310dd7ff53 add PersistentVolumeLastPhaseTransitionTime feature gate a31fee98f09 rename function for dropping disabled fields dbea2791129 Fix the flaky TestJobApiBackoffReset test 8f35fceae37 update vendor to use containerd cgroups c4bf42199a0 do not touch swap for cgroup v1 if swap not enabled 74fcf3e7668 implementation of PodReplacementPolicy kep in the job controller cb6d7fbe66c update documented metrics f50e74206e1 Address comment c46ffc2b422 Refactor jsonpath parser and add tests. b3b775baa51 test: adjust tests for v1beta1 validatingadmissionpolicy 88becfc0ba5 api: add v1beta1 ValidatingAdmissionPolicy/Binding types and storage b5e9e0168cf feature: add multiple params capability to VAP controller 3f63a2d17d4 refactor: make scope of ParamKind available to vap controller 6323c106e9b refactor: use the provided sharedInformerFactory for params 9a595209bd2 update-codegen c8dbf4712cf add namespaceParamRef to v1alpha1 and internal 03aad1f823c Fix the semantic meaning of etcd server within component statuses and metrics. e0a6eb93a1f node_e2e: Fix createStaticSystemNodeCriticalPod's invalid spec 2863b3d1ab7 Revert "refactor: simplify RunScorePlugins for readability + performance" 3685e5e5a9c CHANGELOG: Update directory for v1.24.16 release 51bfe417b81 CHANGELOG: Update directory for v1.25.12 release c575a1e31aa CHANGELOG: Update directory for v1.26.7 release ba01bfcdc6c CHANGELOG: Update directory for v1.27.4 release ce929520376 add podReplacementPolicy and terminating field to job api 35d0af9243c Include ignored pods when computing backoff delay for Job pod failures ee82654e398 Add pod_swap_usage_bytes as an expected metric in e2e test 81abfca4078 Add a haveKeys() helper function to match multiple keys 1000ed64e09 Use debian-base instead of distroless for conformance image d6e525877b5 [KEP-2876]Add reason and fieldPath into CRD validation rules (#118041) b1d685a05fe apiextensions: validate status updates with status schema 06a81d13959 cmd/kubelet: implement drop-in configuration directory for kubelet c1aef65640b Add integration test cd5f3d9f9d5 Add impl for uvip 2c8288ac873 feat: improves metric and logging 0449cef8fd5 Increase timeout for DRA kubelet plugin client a15c27661e6 Job controller implementation of backoff limit per index (#118009) b5012ba1e2d Mark existing NodeLogQuery e2e tests as [LinuxOnly] since they do not run on Windows bfb2c6a22a2 update go.mod 668497e7550 use ratcheting schema validator when feature is enabled e0f9db42ace add ratcheting schema validator using new openapi hooks 6f238334ab4 add CRDValidationRatcheting feature gate 635875ad521 refactor: convert slices to []interface before inserion into VendorExtensible 9ee6d97fc05 refactor: add ValidateCustomResourceUpdate to support future validators for CRD Updates a8a2fb317c8 Add tracking and reporting of executing requests 1351845133b Update cri-api change in v1.28.0 59b4951c649 Expose commit memory used in WindowsMemoryUsage struct 0ec99fb0b24 Kubelet DRA: fix failing test cases f6431c61386 DRA: don't query claims from API server cf0b74774f6 Extend the API for the Job job-index-failure-count annotation d281daee335 Prefer pods without a deletion timestamp over pods with a deletion timestamp when getting an ordered list of active pods. 0372e4b6620 add unit test for dra/manager.go. fcbfdc17106 Extend the Job API for BackoffLimitPerIndex 3fd40ffb0ef addons/metrics-server: fix nanny rbac permissions 056c19e8b39 Add slash ended urls for service-account-issuer-discovery to match API in swagger (#117511) 89ab733760a Improve docs on framework.CycleState 4da418aba7f refactor: cleanup to NewSchemaValidator takes JSONSchemaProps ba581300213 refactor: rename apiservervalidation -> apiextensionsvalidation 735be024cf9 Make CRDs built and aggregated lazily for oasv2 ea23e13463f Update OpenAPI Aggregator 850dc6123af Remove ability to re-enable serving deprecated policyv1beta1 APIs e7be841957d cli-runtime: make VerifiableQueryParam shared-parameter aware a4a607198a1 hack/update-openapi-spec.sh 961c1503b5b Bump kube-openapi 4cb5547f934 Adjust summary API e2e test e429793db1e Unit tests: node swap usage resource metric 1d368420b28 Add a node swap usage resource metric (/metrics/resource) 7d187f967ba Unit tests: CRI swap stats 59e3e3897e3 Add SwapStats to summary API through CRI 87ff9c45256 Add swap statistics to CRI-API 053d7ac61f5 Unit tests: cadvisor swap stats c74ee8045de Add SwapStats to summary API through cadvisor a05d200ac89 Add SwapStats to NodeStats, PodStats and ContainerStats d029f0ef060 Add restartable init container lifecycle hook e2e tests f17e9117776 Add restartable init container probe e2e tests 9d6c1030db0 Generate containers ready condition including restartable init containers 3bf282652f0 Allow restartable init containers to have lifecycle 7ef2d674e24 Allow restartable init containers to have livenessProbe 2c8b37498e5 Allow restartable init containers to have readinessProbe 8b20dbd0d16 Add validateStartupProbe c7e7eee554a feature(scheduling_queue): track events per Pods (#118438) 91ea8043355 Replace lavalamp with jpbetz as feature-approver for api-machinery 94c8ad289bb Enable admissionWebhookMatchCondition by default 4321d8c60f3 Graduate NodeSwap to Beta1 f1e7386fbc4 Deprecate now-unused kubelet iptables flags d486736dd38 Remove IPTablesOwnershipCleanup checks and dead code 77cbd86b0b1 Add metrics for cloud-provider node sync, update. d3c506133f1 Skip apiserver_admission_webhook_request_total during context-canceled 7698fe76397 Add StatefulSet pod index as pod label (#119232) 2e217e8cea1 Reduce duplication between helpers for checking featuregate 7edd72f7805 Update generated documentation 137474e2839 Fix validation options for old pvc d765fa6b747 Update generated stuff after changing comments f01a1faa8cb Update comments about allocatedResourceStatus c072e5b3a7e Update test generated data for 1.26 branch db8998265e9 Update 1.27 generated data 6a780f57ce5 Update generated data e0111871149 Update code to use new generic allocatedResourceStatus field d3ef2d4fe95 priority & fairness: support dynamically configuring work estimator max seats 9189c3d5599 fix tests aa788219f46 fix metric names d32aa62d844 promote beta metrics 65ce7222ced All sig node approvers should be able to merge changes to CRI API 9cb2c103107 Adding node feature owners 00de051729a Make matchConditionsFeatureGateInitiallyEnabled a boolean instead 48eee4eed86 Fix e2e tests for overriding timoutGracePeriodSeconds of probes 0074b24ca42 Graduate AdmissionWebhookMatchCondition to beta bfa62e0009a kubelet: retry RuntimeConfig call and prep for nil values from GetLinux 6aeff13def3 Never drop the `terminationGracePeriodSeconds` of a probe d0952686f68 CRI: add cavieats about cgroup driver field d7797fbc616 kubelet: get cgroup driver config from CRI fd434003f3f kubelet: initialization of runtime service earlier in the startup 37330a13924 Add KubeletCgroupDriverFromCRI feature gate d2d5e2e27dc Add CRI fake runtimes for RuntimeConfig rpc 0f05a92ce68 cri-api: add rpc for querying runtime configuration 660be4484b4 Update publishing-bot rules for release branches to Go 1.20.6 be01f4a0838 KEP-3178 IPTablesOwnershipCleanup to GA ff62cca47b8 Bump distroless-iptables to 0.2.6 229eb93a834 DRA: report NodePrepareResource errors b57c7e2fe4b Add CDI devices to device plugin API b1850497b4b Integration tests for IP mode field 7eab0d7a0de Proxy changes for IP mode field 7c6e399b228 Generated code for IP mode field e6863757f4f Add IP mode field e38ab6d3671 Add PodGC changes for PodReplacementPolicy 169abcc0398 openapi: reference shared parameters 6c0ea702d43 Conditionally serialize flushFrequency as int 19f61caabee aggregate kube-proxy metrics bd9b78d6861 kubeadm: remove the limitation that the 'ignorePreflightErrors' field can not be set to 'all' in kubeadm config file, and keep CLI / config consistent 6b3ce3004db Add integration tests for match conditions feature gate enablement b883f305011 kubeadm: Support `kubeadm config validate` for ResetConfiguration 171b19d9fe1 fix histogram vec compare using ignore fields 9b6af80a631 upgrade prometheus common to v0.44.0 8f9e2cb8a80 kubeadm: Support `kubeadm config migrate` for ResetConfiguration 22f0f2e210f kubeadm: add 'kubeadm config print reset-defaults' command for ResetConfiguration 13172cba5c0 ValidatingAdmissionPolicy: support namespace access (#118267) df0d51d3b35 add some detailed message for dup container ports(steal from thockin) 1732b23a343 Ignore context canceled from validate and mutate webhook failopen metric 90ab7580aae add list of served versions to storage version 9564bdc39de Ensure final diff is used for setting expectations for Job pod creation 8a4a29d5917 remove todo/spelling bef43788fc0 update histogram 01b9f4b6eb8 matchCondition metrics 5f37c102cb5 revert changes in staging d9bd413f991 Proactively bump golang.org/x/net to v0.12.0 883d0c3b717 Add a dummy implementation of proxyutil.LineBuffer 34640772ed4 implement SchedulerQueueingHints feature gate 619be9c1537 Add a swap e2e test 4b6314f815b Unit test: Swap - Limited/Unlimited Swap, cgroups v1/v2, etc a30410d9ceb LimitedSwap: Automatically configure swap limit for Burstable QoS Pods e4da568f331 Make kuberuntime unit tests environment independent + support cgroup v2 f37aec6c57f Add LIMITED_SWAP env var to enable limited swap 0ed7bdb057e Update vendor 69c4bc29f55 [go] Bump images, versions and deps to use Go 1.20.6 2a907e60043 kubeadm: fix fuzzing for ResetConfiguration 2e6715bc77b kubeadm: implementation of `ResetConfiguration` API types 037847066ce replace strings.Index with strings.Contains instead 3e2a1a7b9ce Regenerate b2613dd381b Add e2e to check that hostIPs and Downward API works 14b09c414ac Add DownwardAPI validation for status.hostIPs 335d905ce95 Downward API support for status.hostIPs bf030fd68ab Add validate HostIPs 267e76a66e2 Add status.hostIPs in validEnvDownwardAPIFieldPathExpressions c287943bdd5 Add status.hostIPs in ConvertDownwardAPIFieldLabel 7a81ef6406c Add fuzzer for PodStatus e6bdd224c17 Add HostIPs for kubelet dacb6890027 Add dropDisabledStatusFields e061143de7f Add HostIPs field and update PodIPs field c2c001a243a Add FeatureGate PodHostIPs ce90eb2cc2f Fix validation to use field.Forbidden instead of Required 7305c967101 QueueSet and controller part of borrowing by exempt PLs 2069835094d Tolerate only the two allowed field changes 3754d2da20f apf: allow admin to change the Exempt field only of the exempt pl f8e4e8abac8 apf: add validation to exempt for borrowing f78d6062eb8 Update generated code for APF borrowing by exempt a9d8cace1f5 Fix AutoUpdateAnnotationKey, NominalConcurrencyShares 3d3240c8b43 apf: add API changes for borrowing by exempt pl b635f2a401f ValidatingAdmissionPolicy: Variable Composition (#118642) 49d03468021 Pre-allocate webhook accessors arrays for mutating and validating webhooks 037091284e2 fix unit test bug 423f4dfc798 Add quantity library to CEL (#118803) a1a5f49bb9c remove statefulset label added to wrong branch 1ae60c0ed16 use job completion index annotation as label 131216fa8f2 chore: hashes keyID 049614f884e ValidatingAdmissionPolicy controller for Type Checking (#117377) d25075f3424 update generated list of stable metrics c291e6355c4 feat: implements metrics for encryption config hot reload be2e5417ea2 allow api-approvers to approve directories touched by generation 80ab8f0542f dra: handle scheduled pods in kube-controller-manager cffbb1f1b29 dra controller: enhance testing 5cec6d798c3 dra: revamp event handlers in kube-controller-manager 0bb419b1498 promote the following APF metrics to beta: 39207dada25 Add integration test for node authorizer claim references 4121c1fc79a auth: don't allow kubelet to from modify ResourceClaimStatuses c688478a28b Fix lifecycle generator to check the version correctly (#119268) ddc0d947900 dra API: ensure that pod status contains no duplicate resource claims 052b06bdad3 Remove test Pods sharing a single local PV 22d8ae1ba6e Enable NewVolumeManagerReconstruction 9914909f5aa Define tcpProtocol in one place in the unit tests rather than many 967ef293786 Remove/clarify two FIXME comments in the proxier unit test 14375947869 Remove some stray references to the ProxyTerminatingEndpoints feature gate 7e3b53042b1 Pass Job context down to firstPendingIndexes 4835d9e1371 Belatedly clean up some "Endpoints" vs "EndpointSlice" distinctions in the unit tests 4d8f569b037 Remove KUBECTL_EXPLAIN_OPENAPIV3 environment variable c5147c91b88 controlplane: kubernetes.default controller stop polling 9f5b6db8be8 test: azure: check error for cloud detection. 1db11c07ff2 node authorizer: limit kubelet access to ResourceClaim objects 71ef0dafa72 add flag 'logging-format' to kube-proxy c550c17f7f0 accept int or string flush frequency 148acc8632c enable arm64 support for GCE node configuration 75186b1c32a Fix, deprecate apiserver_flowcontrol_request_concurrency_limit c52911e59ad docs: add comment describing `LoadConfigFromFile` 5c18810f357 chore: update license date for configfile tests 72aeb961322 test: add tests for `LoadConfigFromFile` b3373ae2738 refactor: make only `LoadConfigFromFile` public - `loadConfig` can be made public again when needed (not required now) 8e284389a5d feat: make `loadConfig` and `loadConfigFile` public functions - so that users who import kube-scheduler libraries can use these functions to read kube scheduler config 0599b3caa0f change the QueueingHintFn to pass a logger 39bb8f4bb1d Implement ConsistentListFromCache feature gate 0695853a306 Improve naming and code comments 08d40f53a7a dra: test with and without immediate ReservedFor 98ba89d31d5 resourceclaim controller: avoid caching deleted pod unnecessarily 28b6c906966 Move DeleteFunc logging to level 2 761016482da Properly setup mutatingWebhookConfigurationManager{} 747dbd9b6b7 run `./hack/verify-gofmt.sh` 1eb60939fe5 Add smart reload for `MutatingWebhooks` aeefb762ece Properly handle parameter in `shareInformer.DeleteFunc` a01a8cb07e7 Fix webhook accessors caching pattern 7d3d44af776 Add webhookAccessors smart reloads unit tests c6f36e8702a Fix deadlock issue 99875b3fb73 Webhook Accessors Smart Recompilation 7d064812bb4 kube-controller-manager: finish conversion to contextual logging d743c50bb9e kubelet: support batched prepare/unprepare in v1alpha3 DRA plugin API 7a63997c8a1 Improve apiserver storage size metric to allow it's graduation 610509fedd9 Update standard app protocols f1f2fa9da8a kube-apiserver/corerest: split apart generic code 01c3a51a780 node: podresources: getallocatable: move to GA c1decb6763d Fix TestConditionalProgressRequester and TestWaitUntilFreshAndListTimeout flakes 1b8ddf6b79a podgc controller: convert to contextual logging f924bf95df9 dynamic resource allocation: Improve code coverage of state checkpoint c635a7e7d83 node: devicemgr: topomgr: add logs d78671447f2 e2e: node: add test to check device-requiring pods are cleaned up 5cf50105a2b e2e: node: devices: improve the node reboot test b926aba2689 e2e: node: devicemanager: update tests 3bcf4220ece kubelet: devices: skip allocation for running pods ab3a0b78ea3 Match both old and new kubectl version for a while in e2e c143a875edb dra e2e: fix "reallocation works" flake 6f1a29520fe scheduler/dra: reduce pod scheduling latency e01db325735 scheduler util: handle cache.DeletedFinalStateUnknown in As ef48efc736c scheduler dynamicresources: minor logging improvements 363874e9b56 setcap: update to debian bookworm v1.0.0 19869478c11 Migrate /pkg/controller/disruption to structured and contextual logging b81f07ac9a6 Add enj to apiserver options approver 6d6595d0f6e Add jpbetz as approver of apiserver integration tests 43b509de420 staging: Add endpointslice to publishing data. 7c873327b67 Convert controller name to reconciler variable. 29fad383dab move endpointslice reconciler to staging endpointslice repo c0030a4d27e Add support for watchlist to APF 9759fc3c230 Fix the converts an empty string to nil. 22c66784e03 staging: add endpointslice repo a34e06e74c7 kube-apiserver/corerest: structure Config 75e3576523f kube-apiserver: rewire service controllers: kubernetesservice + IP repair f22aa42aa81 bump go.mod cadvisor to v0.47.3 f855a23b455 topologymanager: promote TopologyManagerPolicyOptions feature to beta 3267dd9d529 kubectl delete: Introduce new interactive flag for interactive deletion (#114530) 23833b9c81c topologymanager: Increase TopologyManager test coverage by adding negative test cases around NUMA topology discovery 998654e0443 topologymanager: fix TopologyManagerPolicyBetaOptions not being enabled by default fec25785ee6 dra: store generated ResourceClaims in cache ba810871ada dra e2e: check that not generating a ResourceClaim works 0fc62d5ded0 dra: generated files 444d23bd2f1 dra: generated name for ResourceClaim from template 98461be8ffa Implement conditionalProgressRequester that allows requesting watch progress notification if watch cache is not fresh cd14e97ea80 Add a builder for ContainerAllocateResponse objects db2a1edbdd6 Generate empty cdi annotations f0e3c32fe56 Move CDI annotation code to utils package 354b6c409f5 Rename updateReconstructedFromAPIServer 1903f5aa2ad Rename volumesNeedDevicePath 7cd60df4aa1 Update volumesInUse after attachability is confirmed 0a2272dc68d Add uncertain state of volume attach-ability bf48165232f Remarks to syncJobCtx 990339d4c3e Introduce syncJobContext to limit the number of function parameters 94b782680c0 Update publishing-bot rules for release branches to Go 1.20.5 f443c458afe move non-graceful node shutdown to GA 645cb907320 migrated pkg/controller/endpointslicemirroring to contextual logging 98c6e25c371 update name of pod index label 09849b09cf4 migrated pkg/controller/endpointslice to contextual logging de076430957 Document address family of listening INET sockets 08dd657a71c Implement metrics agreed on the KEP 9b1c4c7b57f Implement KEP-3836 cca66011067 Add reason to force detach metric e655931274f expended type checking. 8fb5b6eb4c1 node-e2e: Add container lifecycle e2e tests for preStop hook 47ef977ddd5 Direct reference to the packages 7286d122fb7 Mark pods with restartable init containers as `UnschedulableAndUnresolvable` 0a987079128 Sidecar: Update printPod to show restartable init container information ea1eb7f8f79 implement sidecar resource calculation 03c22176877 Sidecar: Add e2e tests b94fa250c27 Sidecar: Implement lifecycle of the restartable init container c187b381173 Sidecar: Generated code 5d26bcd468b Sidecar: API changes 10dc1ca0846 Skip GracefulNodeShutdown on older systemd versions f7a1fb76f4f Only declare job as finished after removing all finalizers 3f07fc3acc9 Remove long/golang version information making short the default 3a5268502f3 Remove deprecated scheduler CLI flags 68ed020b2a3 Split IptablesRulesTotal metric into two different metrics bc059817dc5 fix: Add "metav1.CauseType" to "field.ErrorType" map c0eb0caf4ac Support fine-gained rescheduling in ReservePlugin d7708e79d32 Use cmp diff 278a8376e17 Fix: fiterror in permit plugin not handled perfectly 14bd9bc127e CHANGELOG: Update directory for v1.28.0-alpha.4 release 2fe38f93e53 feat: Append job creation timestamp to cronjob annotations (#118137) 1acdb4ae86e [KMSv2] Mark KMS v1beta1 as deprecated with no further fixes (#119007) 02c59710eaa Test the IptablesRulesTotal metric in TestSyncProxyRulesRepeated ecf0cee91ce update comment on feature flag 3a02ecb3418 check test case param instead of feature flag in unit test code b10cc642b56 DRA controller: batch resource claims for Allocate be0db3f93d7 clean up the implementation around QueueingHintFn 5175752df74 Issue 4230: remove readiness check for cache exclusion 132d477cb7a use stopCh to avoid goroutine leak in tests 20a25cbfcfb Add user specified image to CRI `ContainerConfig` 65e818d4ecf Introduce apiserver_flowcontrol_current_executing_seats metric 1bf2f6c9c05 feat(NodePorts): return Skip status in PreFilter dfc1838379f Migrated pkg/controller/volume|util|replicaset|nodeipam to contextual logging 6c0387d0047 Migrated pkg/controller/endpoint to contextual logging 3cf2822bc58 Migrated pkg/controller/garbagecollector to contextual logging 921b7e6e8f7 remove equalReady and replace with k8 util function a647f9febbf default enabled pod index for test cases, add test case disabling it 322da7c1aae fix gc metrics 02efe09abe3 component-base/logs: improve handling of re-applying a configuration 1240a29af9c Hide numberOfMissedSchedules as an algorithm internal number c733c57962f pkg/controlplane: wire core storage as RESTStorageProvider 65b34221ebb kube-apiserver: remove IP repair plumbing from kubernetes service controller 9dcc57ede62 Stop using deprecated API 5e1777be529 Update debian-base to bookworm a514f40131c dra resourceclaim controller: delete generated claims when pod is done e8a0c42212d dra resourceclaim controller: remove reservation for completed pods 7f5a02fc7e4 dra resourceclaim controller: enhance logging d1ba893ad8e dra resourceclaim controller: refactor isPodDone e2900da46aa Remove unnecessary utiliptables.Interface arg from local detectors 7690c6e8121 Simplify getDualStackLocalDetectorTuple cefd50a753e Improve the single-stack LocalDetector behavior bfccfa7016b Add names to the getLocalDetector unit tests, use t.Run 16e9cc42c1a e2e node: remove unused test/e2e_node/gcp 932d0337b82 e2e: detect unexpected command line arguments 68aee61d4f7 SPLIT: kube-apiserver/corerest: split out service IP setup logic 443bf3b01b0 scheduler test: Use cmp.Diff instead of reflect.DeepEqual for pkg/scheduler/internal/cache dad3e4d2112 SPLIT: kube-apiserver/corerest: split constructor 31943cc3f44 kubeadm: check the GV after the config migration b4f479d1f29 bump npd to v0.8.13 a556feb7cbe run hack/update-vendor.sh to fix verify master 4149933ed2e kube-apiserver: move "public IP matches IP family" check to option validation 616c9599880 FIXUP: pkg/controlplane: move bootstrap controller to controllers/kubernetesservice c26e1ba10c3 [UT] increase coverage kubeadm/app/phases/dns b36fdd68b72 Test consistent List 01b1174c114 kubeadm: fix "migrate config --allow-experimental-api" to print v1beta4 kubeadm configurations instead of v1beta3 18f2e9055fc Add OIDC integration tests c68a6b07456 kubeadm: fix fuzzing for ExtraEnvs defined in the control plane component 80b035a116a kubeadm: Support custom env in control plane component 6b01ece5806 scheduler-perf: fix perfdash display problem 29e5771aa4d scheduler-perf: shorten "Name" label in metrics e08bd3bc263 Simplify DeleteCollection 7b62d000a4d MOVE: pkg/controlplane: move bootstrap controller to controllers/kubernetesservice 2b03f04ce58 Initialize the AuditEvent with the AuditContext (#113611) c903c29c3b1 e2e: support admissionapi.LevelRestricted in test/e2e/framwork/pod 19cb6d036ae kube-apiserver/corerest: remove redundant interface ede17eace45 test-e2e: Retrigger the RBD image post merge job a966d186083 Double-check the proxy configuration vs the available IP families 36e458612a9 cmd/kube-apiserver: move back master count variable from generic controlplane 1cfb932111e kubectl: Allow parallelizing diffing bcbc12cd79c Fix `should be able to create and delete a critical pod` test 4517d3004ad bump kube-dns to v1.22.23 985cf718a43 [Dual-stack] Fix generateAPIPodStatus() of kubelet handling Secondary IP hostIPs order may not be be consistent. If secondary IP is before primary one, current logic adds primary IP twice into PodIPs, which leads to error: "may specify no more than one IP for each IP family". In this case, the second IP shouldn't be added. f6a86bb2030 fix indent error c143710ecf1 upgrade npd image version to v0.8.13 for kubemark 96694514a75 Remove csiDriver Conformance test bb0c3a08189 Remove proxyutil.IsProxyableIP / IsProxyableHostname 59592ba4639 Add OIDC test server 1f2bf32e95f Figure out single-stack/dual-stack support before creating the proxier 8abfa89e82b Move proxy platformSetup call, and do LocalDetector setup from there ebb0fdd4f6f Don't explicitly filter config.NodePortAddresses by IP family a74b9fde3aa Don't pass around full node in proxy constructor, just pass PodCIDRs 0537c1da563 kubeadm: move migrate / validate tests out of config_tests.go b01a4145b2c Install ecr-credential-provider during node e2e tests 4e6aa5fb861 kube-proxy service health: add new return header with number of local endpoints a5df442be78 flowcontrol: copy object before passing it to client-go Create to avoid data race ea34d039256 integration testing: configure gRPC logging during init 1c48b7ec144 Add servedVersions info in StorageVersion API d548983dbb2 Use table-driven table for TestPerPodSchedulingMetrics e0af0a5a455 add test case param for feature flag d68f5f0d921 fix tests 44f1c4dd94d fix duplicate metrics issue 84b3d9b7b7e remove legacy NetworkPolicy tests 0eeca0987a6 fix tests 04ea1d506b4 promote sli metrics to beta f96d83af668 Copy container logs for easier debugging dfc150ca182 e2e: node: podresources: cooldown the rate limit f7cf9effa33 fix kubelet podWorkers.SyncKnownPods() typo 52ef833b6c2 Bump cadvisor version in tests to v0.47.2 8266c4d934d Generalize watch storage tests d53762ec3a5 remove unnecessary comment in pkg/scheduler/framework.QueueingHintFn 1b47e6433b8 dra delayed allocation: deallocate when a pod is done dbdd861ea36 chore: address review feedback 72294e4eff0 scheduler test: Use cmp.Diff instead of reflect.DeepEqual for pkg/scheduler/internal/queue/ f269acd12b2 Make QueueSet support exempt behavior; use it 931456a1427 Simplify the node name for metrics - just use localhost 3e5fafd57ab Drop docker.log and add cloud-init-output.log 1c7e87cff27 client-go: add DNS resolver latency metrics (#115357) 150f732c7ee [StructuredAuthenticationConfig] wire request context to claim resolver 4a5a242a68d dra e2e: using logging for background activity f1700e4b95b Cache authz decisions within validating policy admission. 60fb8f2fbc5 Exclude terminal pods from Daemonset e2e tests 24f4785e3eb kubeadm: remove unused Kind and Resource functions from output API 16fdd3e5eef apiserver: introduce larger buckets for flowcontrol request_wait_duration_seconds bucket 90f82d05ce2 kubeadm: remove unused Kind and Resource functions from kubeadm internal API fd15c6791a4 kubeadm: restore and generalize the TestMigrateOldConfig test d616cf72a3b Add unit tests for parallel StatefulSet create & delete c6079843792 apiserver: introduce larger buckets for request_filter_duration_seconds metric ef265101648 Return Skip in PodTopologySpread#PreScore under specific conditions 732775ee7d1 Paginate within DeleteCollection call. 0d41d509d2d scheduler_perf: replace gomega.Eventually with wait.PollUntilContextTimeout cecebe8ea2f scheduler_perf: add TestScheduling integration test dfd646e0a89 scheduler_perf: fix namespace deletion d9c16a1cedd scheduler_perf: fix goroutine leak in runWorkload 2e7f37353cb test/integration: avoid errors in fake PC controller during shutdown 812556365b6 kubeadm: backdate generated CAs by 5 minutes 44692a486f9 client-go: allow to set NotBefore in NewSelfSignedCACert() cfa2fa6d774 put feature gate in alphabetical order 860aab842db fix a reference to the wrong variable name a75b00ea39d Better URL for scraping metrics from kubelet 685b0c5efa1 Bump to latest node-problem-detector version with arm64 cad338890df add test for apiservices.apiregistration.k8s.io discoverability in openapi/v3 9e3b5b65838 update openapi ad2b4368e21 expose apiregistration.k8s.io into OpenAPIV3 bb8766daaf6 feature flags should be ordered alphabetically 7f4c187ab26 kubectl explain should work for both cluster and namespace resources and without a GET method a9afaa1eee9 add feature gate dfce076c6cf Update the template.pot file with latest message IDs. a4519665fe0 Skip terminal Pods with a deletion timestamp from the Daemonset sync (#118716) 9c7166ff639 wait for eventhandlers to sync before run scheduler bde66bfb55c kubelet dra: restore skipping of unused resource claims 874daa8b52c kubelet dra: fix checking of second pod which uses a claim 6c587b43e92 Cleanup pods at the end in Pod conditions e2e node test 56c5c8f7eef Revert "Make CA valid 1 hour in the past" ecd727e4c75 Fix PodGC test when PodDisruptionConditions disabled (#118805) bdbf07525fa test: remove exception comments in discovery tests 6fd830a075f hack/tools: bump golangci-lint and consequently staticcheck 1af54256969 hack: disable gomega.Consistently/Eventually check due to false positives f618e613322 e2e: replace gomega.HaveLen(0) with gomega.BeEmpty() e7df337ebad e2e: replace gomega.Equal(true/false) with gomega.BeTrue/BeFalse() 8b33e8bdd1b e2e: fix gomega.Expect calls without assertions 0ef1f2f2d89 Set AWS specific credential provider when running there b0f694f50ac CHANGELOG-1.27: Add note for AWS in-tree provider removal af1c9e49c49 Update schedule logic to properly calculate missed schedules 0033f658085 increase the log level for the GetTargetNodeName error message 08198fe22b5 Extend Large Create Timeout to 60 min 9354e78289f no-op: split transformer interface 21760534157 add completion index as pod label 8083d0d22e2 pkg/controlplane/apiserver: remove temporary import restriction of cmd/kube-apiserver 764da8a01dc FIXUP: cmd/kube-apiserver/app/options: split apart controlplane part 1b3779baa0d MOVE: cmd/kube-apiserver/app/options: split apart controlplane part 3df92362abd fix openapi/v3 non local apiservices aggregation 4298953c26c kubeadm: remove unused Kind and Resource functions from v1beta4 API 6e079545c48 cmd/kube-apiserver: move options completion into options package f04484fe775 kubeadm: add the --allow-experimental-api flag to "config" commands 0774f779d5c kubeadm: add v1beta4 to the kubeadm API scheme 38222014c61 kubelet pod-resources: add e2e for KubeletPodResourcesGet feature f7239e40959 Better back off delays and connection timeout to talk to containerd e4f93d8a82d ipallocator bug if ips has leading zeros 89a9e480f9b fix: update deployment e2e tests 41d961758ee update cri-api change in v1.27 22258a263f4 Fix stable metric finder for NewDesc with custom import name 13842746227 Update metric documentation 45aa59946af Refactor FindAttachablePluginBySpec out of CSI code path 07f38a3ec18 add test 6f8d38406a7 feature(scheduler): implement ClusterEventWithHint to filter out useless events 531d38e323c features: rename UserNamespacesStatelessPodsSupport 556d713a4ad apis: drop check for volumes with user namespaces 8ed23558b44 Do not set jm.syncJobBatchPeriod=0 if not needed 17013d39604 Review remarks to improve HandlePodCleanups in kubelet e3ee9b9adc1 Fix the deletion of rejected pods c91c578795c scheduler_perf: skip expensive cleanup during benchmarks 92a35f5bca9 Usse generics to simplify pkg/registry/flowcontrol/ensurer 902c711fb49 Unset gated pod info timestamp in addToActiveQ 56cb4c93918 [bug] Update DefaultObjectDescriber to handle interface params (#118190) 1053d1bbcf5 CEL lib: Expose errors on authz decisions instead of raising them from check(). 406899360b5 Refactor shouldDelegateList/shouldListFromStorage to better explain decisions e4cf103c9b9 Test all cases for LIST request cache bypass 7f532891c9c e2e tests: set all PSa labels instead of just enforcing a9af2de8fdd Refactor WithRequireLeader to make it part of the etcd store 1bd3f072fa7 stop ignoring storage class selection errors e5cbc51d29d e2e framework: allow setting all PSa labels at once edb59e9bc75 kubeadm: move token defaulting and related constants to token package ec70b2ec801 e2e dra: add "kubelet must skip NodePrepareResource if not used by any container" fdd992da865 upgrade image addon-manager/kube-addon-manager:v9.1.6 to v9.1.7 420fbd11e44 ignore Histogram for prometheus client v1.16.0 c98e72841b1 Add a connection backoff to talk to CRI impls 409bc8ccc05 deps: Bump to cAdvisor v0.47.2 f72c2c2b7d2 add process start to prometheus handler opts bbc7ca94a42 CHANGELOG: Update directory for v1.28.0-alpha.3 release ab75e48494c storage: stop using deprecated io/ioutil 687ca0e0bb2 fix(script): handle wait_for_success failed condition eecac058718 kubeadm: add v1beta4 API boilerplate 63e5b6bdb24 Parallel StatefulSet pod create & delete 2fb472c83cd Refactor StatefulSet controller update logic 784a309b917 Do not error in Job controller sync when there are pod failures f2e3157df0a Remove AdvancedAuditing feature gate. bbae445d172 fix metrics test with 1.16.0 prometheus client 180c2332bf8 [UT] increase coverage ut for kubeadm/app/features 564c236ce28 Do NOT prepull images for e2e-node jobs c84b5b0a99f Cleanup unnecessary renames of variable t c9b01dd9778 Fix race in logging expectations 3dd1bac4dce Set small DefaultJobPodFailureBackOff in Job integration tests 85d9339ef8f add KCM names into CCM cmd allowed import-restrictions 3b55f20bd34 update vendor 4e6a3fb9c10 deduplicate cloud provider controller names e5f5a9bfdbe use controller names for CLI FlagSets to show the names in help cd56748ec57 reference controllers correctly from CLI help 9fd8f568fe0 introduce CCM controller aliases and unify controller names 94792d85dea simplify TestValidateControllersOptions test 97309511366 introduce KCM controller aliases and unify controller names ba1755132e1 support controller name aliases in GenericControllerManagerConfigurationOptions 2596245f5a7 Replace deprecated sets.Int with sets.Set[int] in Job integration tests e5116a39c96 fix: kubectl expose fails for apps with same-port, different-protocol 958c8fb6950 Make use of `k8s.io/utils/pointer.Duration` ede2ec22b68 kubeadm: drop older etcd versions from kubeadm support 8cd65e9cee6 reorder hack/unwanted-dependencies.json map keys and arrays f44029705f9 exit 1 if status are not as expected(order) a1e0aa0e504 DRA Node E2E: add NodeAlphaFeature to fix CI 74c5ff97f18 Lower the constants for the rate limiter in Job controller f54c15d4e80 Change the fieldpath in the deprecated plugin response 471fd1ae8a1 deprecate RBD plugin from available in-tree drivers c51a422d787 Cleanup job controller handling of backoff fff5b35023b Adding review changs to update 889ecf865b7 always execute condition for wait.PollUntilContextTimeout with immediate=true 5aa5f1abc9c update prometheus/client_golang v1.14.0 to v1.16.0 5bde9404a09 Remove unused error return value from internal function 8636f9353a8 CHANGELOG: Update directory for v1.27.3 release 763555814b5 CHANGELOG: Update directory for v1.26.6 release 3bf93156d80 Update pending_eligible_endpoints.yaml to match APISnoop ff2a1f0167f CHANGELOG: Update directory for v1.25.11 release a29be0cfb00 update container runtime flags to use containerd instead of docker 89adbc6e5b5 check for AWS environment before running sudo 7f650acb3c1 CHANGELOG: Update directory for v1.24.15 release a83edd35c4a DRA Node E2E: relabel test suite to fix CI c27f9fdeb79 Add warnings for big number of completions and parallelism a86380c7813 Update CLI help text for grammar and consistency 96e7d5f1f25 Bump iscsi test server image e0f273ffdaf use ingress-gce-glbc v1.23.1 image for CI e213448db12 Updated kubectl explain help output 7bc449d7e0c add contextual logging to job-controller cfbc5dc54f8 mount-utils: fix linter warnings in tests 8ced101db53 mount-utils: stop using ioutil in tests 699d118d85f mount-utils: stop using ioutil b690450e846 mount-utils: don't reread mountinfo on newer kernels 8c79a911331 mount-utils: isMountPointMatch: simplify and speedup 404e844468b mount-utils: add isMountPointMatch test and benchmark 4bb02392793 mount-utils: IsMountPoint: fix 167252fb5e0 mount-utils: format with gofumpt 55b690ee018 kmsv2: no-op refactor priming logic into its own function 15003c609d0 kmsv2: refine probing logic to avoid slow starts d8150b81601 kmsv2: add a sanity check to confirm that new state is always valid 8c06ca68d7d Details added in kubectl explain help 4960207b317 DRA Node E2E: test NodePrepareResource timeout 5c5f6e8fe2f DRA Node E2E: add NodePrepareResourceCalled API 673d0aaa60c DRA Node E2E: add call blocking to the Kubelet plugin APIs a60314c47ef Make etcd component status consistent with health probes e1735b98637 Make CA valid 1 hour in the past 5e048041e40 remove helper function for unused storage feature in pkg/proxy/util e1aef2ac917 Bump publishing bot rules for Go 1.19 branches 9cb52a6872c Fix the flaky legacy_service_account_token_clean_up_test. 4e20a8f52bc kill all processes in a container in the event of OOM 0222e6d4ae3 Update kind details for DRA e2e 75cf25c0e7f iscsi: use dbus from the host f7a5817bc65 e2e storage: terminate worker quietly on test completion 22de2c27d1b scheduler: improve cache_test.go - Add test name to enhance test readability - Remove redundant test tables 325205efb72 Migrated pkg/controller/endpoint to contextual logging be14b026e33 fix the integration test a7eb7ed5c6a refactor: simplify RunScorePlugins for readability + performance 587f992a7b2 e2e: deflake a HPA CPU test by stabilizing cpu consumption 672614b57e8 apf: refactor bootstrap ensure strategy 910630fbea2 kubelet: mark '--azure-container-registry-config' flag as deprecated 5e6ae25a33b Updates chairs, tech leads for sig cloud provider 34368884783 move luxas as an emeritus approver of test/e2e/lifecycle e97d9803f2f add SataQiu as a test/e2e/lifecycle approver 4977189c1b0 Fix ginkgo noColor deprecation warning e6bc945a61b Add startup probe in integration test ea1de7517ee CHANGELOG: Update directory for v1.28.0-alpha.2 release 7ccc2317839 add test for authorizer type checking. 54cae706786 Pass the mandatory parameters to support testing on ARM64 fdc49f5257c Return deprecation warning for storageOS,PhotonPD,ScaleIO..etc 151509fb74d Remove unreachable warning on volume name dup d73923c8ebf fix 'pod' in kubelet prober metrics 0ddaa7f7c9f Fix warnings on "duplicate" env vars 4820cc852a0 Minor fix on variable a6f5abfb81e Updating names from webhookconversion to conversionwebhook 0fe84ff7cb1 Re-add the legacy wsstream package and deprecate it 8f3109da791 Refactor wsstream library from apiserver to apimachinery 6d4abd7e7b6 bump distroless-iptables to v0.2.5 04fa4184ed3 add support for authorizer to type checking. e5a15c87e9d Ensure timeout test handlers don't complete before timing out. f2a64cb91d7 fix Cronjob status.lastSuccessfulTime not populated by a manually triggered job 2f6b1d3c0fb Ensure Job sync invocations are batched by 1s periods ed429c4388a replace node-role.kubernetes.io/master taint with node-role.kubernetes.io/control-plane for gce kubelet flags b1da721bdd7 Update vendor with hack/update-vendor.sh 88b69cdd0e6 Fix flaky persistent volumes e2e test d9e12db547e Bump images, versions and deps to use Go 1.20.5 ea6495e8284 Remove StartupProbe on debug with pod copy ac15d697578 remove RetroactiveDefaultStorageClass feature gate checks 6afb363ca17 test: remove RetroactiveDefaultStorageClass feature gate 97a81a59f62 test: correct validation test error message 42722ffef02 graduate RetroactiveDefaultStorageClass feature to GA in 1.28 7f87ec9406a storage: Add MadhavJivrajani as reviewer 7ac36bd0720 test/integration: use t.Log in TestAPIServiceWaitOnStart 77cf37ee543 STRUCTURE: cmd/kube-apiserver: move admission construction back from controlplane 7961812bed8 STRUCTURE: cmd/kube-apiserver: move OpenAPI construction back from controlplane 43be9c3a0ac MOVE: cmd/kube-apiserver: move genericapiserver construction into controlplane package 9be6e7bb339 STRUCTURE: cmd/kube-apiserver/app: stratify construction with options/config/server e6ed4c7934d CLEANUP: cmd/kube-apiserver/app: remove trivial funcs f7d4e90b5c4 MOVE: cmd/kube-apiserver/app.createAPIExtensionsConfig -> pkg/controlplane 087fbc9304f Remove invalid merge key 4962e6eacb9 Squash detectNodeIP and nodeIPTuple together b5db644422d Add merge map key validation to StorageVersions 58162ffd63b DRA: add node tests b69b34bec64 Move a kube-proxy unit test to the correct file 4bee9b2b352 structured logging in proxy/ipvs/ipset 26801d6541a kube-proxy avoid race condition using LocalModeNodeCIDR 4dbece1e203 e2e-framework: remove node-role.kubernetes.io/master taint from non-blocking-taints dddbecb47e2 prune's xml files to display only top level tests and failed sub-tests 8b0a6ed6999 re-send the shutdown signal in case the dbus restart is not done 4d0e25151db Fix SELinux contexts used in e2e tests 010343562c6 dependencies: update github.com/dustin/go-humanize v1.0.1 743e5525edb fix eviction failing test for nil feature gates assignment 6d66fbc6b67 storage: Move cacher tests to reside with the cacher code 70978e4af61 cacher: Move common testing utils to a single file bdfb96c57d3 chore: os.SEEK_END os.SEEK_SET and use b.Logf(...) instead of b.Log(fmt.Sprintf(...)) 7a80d7c839c add warning for duplicate containers[*].ports with the same port, protocol, hostPort, and hostIP 923db7bd8e0 chore: use strings.Contains instead e9e4acb1dde k8s.io/apiserver: remove skewed completion from EtcdOptions 4d85a1f00cb storage: Implement TestWatchFromZero for cacher 2e76ac31fd8 Replace os.Setenv with testing.T.Setenv in tests ac5ce5cbce7 Replace os.Setenv with testing.T.Setenv in tests b274a9bf7c4 remove csidriver endpoints from pending_eligible_endpoints.yaml 5d4bf0b6f90 Promote CSIDriver e2e test to Conformance 3085b57869a Do not copy bytes for cached serializations c009667c6c6 deprecate CephFS plugin from available in-tree drivers. 1fcfd1d5090 pkg/util/iptables: use buf.String() instead of string(buf.Bytes()) 9eaa50cc829 Rename scheduler queue variables for consistency 6195f96e56e minor fix comments in netpol so its easy to understand the tests for newcomers, remove one misleading comment (#118264) 410b6023d6f scheduler: fix code style issues for pkg/scheduler 71ab7dc791f Remarks 70d3bb43e56 Adjust the algorithm for computing the pod finish time b994e639a6b Add mininumKubelet tag into ReadWriteOncePod test db9fcfeed29 Move cri/streaming to k8s.io/kubelet staging repository da4a8d831b9 kubectl: use bytes.Buffer.String 8e4228a8c1f remove CSI-migration gate a5c4fbe9791 chore(fix): test jsonpath condition parsing errors 9d3e55ec431 Support JSONPath condition without value f520f6fd06c Add Pod Termination e2e tests to test termination grace period seconds b4dfae25dee fix terminationGracePeriod blocked by preStop fd92acba5a8 chore: should use buf.String() instead of string(buf.Bytes()) 20866b3f85a dryrun: Don't reuse current object for conversion f351c6d1ecc k8s.io/apiserver: apply storage object count tracker implicitly 45c9e066164 Fix errant debugging code in codegen a51be9786ba remove enabled by default beta resources that have been removed f4d326a1fcc verify: produce JUnit file also for pull-kubernetes-verify-strict-lint a4ea058cc75 feature(scheduler_perf): distinguish result in scheduler_scheduling_attempt_duration_seconds metric result 322968e9b38 Update unwanted dependencies per CI instructions 2111e79f56a Update gnostic references 1993a4cb379 vendor 0b4efddae01 verify: nicer failure message rendering in Prow dbbb21469f4 verify: pick relevant lines from verify-golangci-lint.sh as failure message d6168bb6587 Add ephemeralcontainer to imagepolicy securityaccount admission plugin 70ff750c755 chore: io/ioutil deprecated 1ce285ad3df Revert "removed the deprecated `azureFile` in-tree storage plugin" daa71159077 kubeadm: add deprecation message for UpgradeAddonsBeforeControlPlane feature gate a6c7f63b188 Set the node-ips annotation correctly with CloudDualStackNodeIPs d49c43abde5 kubeadm: add integration test to ensure that the supported etcd version is always available for the stable Kubernetes version 6d23da045fc Migrated pkg/scheduler/framework/plugins/interpodaffinity to use contextual logging db2389ba9c8 kube-proxy: remove log warning about not using config file 15aa00fc836 Remove unused `getSeccompProfilePath` helper function d0a64739e2c e2e dra: collect and check GRPC calls 68901de8981 Enable optionals and add tests 5c0b59891d6 Bump cel-go to v0.16.0 5b3510c0b67 Fixing gmsa-webhook install steps for Windows GMSA full tests c539c739161 Changes to buckets and comments 35d2431b3a8 informer: fix race against Run and SetTransform/SetWatchErrorHandler 64269620597 Changes to histogram buckets c48c4c679ad Fix ginkgo deprecation warning 5a14573258b clean: use info instead of error to log queue closed message when scheduler exit f2a5e247ebf add pacoxu to kubeadm approvers list 705c6ff315b Review comments, added metric namespace, moved utility functions, and etc a8ef109aca0 CHANGELOG: Update directory for v1.28.0-alpha.1 release 369e3faa4ff Moving Kubelet Credential Provider test to common so that it can be run both as Node and Cluster test 2d8c820741d move pkg/util/ipset inside pkg/proxy/ipvs 85e0d8c8b14 Revert "kubeadm: add --feature-gates flag for kubeadm upgrade node" f3ba9353363 Consistently use proxyutil as the name for pkg/proxy/util b3111170f8e remove Ephemeral Containers form list 64c9070f8d0 add pod containers[*].port duplicate warning f9ae3e774d0 testutil: use contextual logging 534f5edb53c Cleanup boilerpate.py d9e2583af16 test/e2e: replace deprecated ioutil 4b4b3b71b78 clean up dead code 4523a301c87 kubeadm: enable --feature-gates flag for kubeadm upgrade node 074900e81bd scheduler: update the scheduler interface and cache methods to use contextual logging 0951204298a kubeadm: Supports() return true for all alpha/beta/ga/deprecated c6aaa1eab04 kubeadm: lower the log level of EtcdSupportedVersion warning message as it is a kubeadm internal warning 4e6d929580a deprecate csi migration for ceph rdb 11a40406a1f Promote Ephemeral containers e2e test to Conformance bf116e85943 Optimize reflect checks further, save item type information 12e3d9fcc4c Implement WithAlloc variants for EachListItem and ExtractList efc601302ad Extract List reflect optimization b8a3bd673dc Add WithAlloc interface and stub implementations with base benchmarks 4aa5441de2e Move pkg/util/ipvs inside pkg/proxy/ipvs 0535e742241 feature(schedule_one): use heap to find the highest score node 532fe3c9653 Add kerthcet and sanposhiho as SIG scheduling approvers 8df1a5e6dcb Webhook conversion metrics a045fedd025 Update google.golang.org/genproto 455169bd66a e2e storage: add missing error checking for WaitForVolumeAttachmentTerminated d76043958fb Follow up from dynamic retryAfter 510287d3444 Fix the git-repo test error caused by the correct use of loop variables 926bc9bf8e5 Update podFailurePolicy comment from alpha-level to beta 7d2e1888f8a Chore: fix the example about how to use PollUntilContextTimeout 4d2ff08bfa1 e2e-framework: code cleanup for mismatched comments 15678e4a67e Optimize usage message of commands which have subcommands. 6a867eacd85 kubeadm: warning only for deprecated FG 4dfc684b342 Set kube-proxy memory request to 50Mi 5d18f471494 Improve clarity and guidance in provisioner waiting message 7a6b4a9215e dra scheduler plugin test: fix loopvar bug and "reserve" expected data e31b2080f5a e2e framework retry on Service unavailable errors a50549cc906 e2e rc: if the pods are running but not ready the test will fail 133eff3df49 implement LegacyServiceAccountTokenCleanUp alpha a6003ae1e11 fix unknown field error in rs e2e 27057def059 Signature fix for registeropenapi 4373ae05f34 Update vendor 72e4c9a82ac kubeadm: add the "config validate" subcommand f4891842194 Delete CRDs created during field validation tests. 2ea6896f90c Add warning log callback in client-go loading rules (#117233) 485d1631cd3 Remove Azure file in-tree storage plugin 2eed9b4143a Should get ENABLE_CLIENT_GO_WATCH_LIST_ALPHA when new reflector e2ed8f8c3ca style: correct the sentence 08139044040 Fix: Restricted profile comply with PSS (#117543) c68f8586580 proxy/ipvs: github user name change: daman1807 -> aroradaman 05b3beb7f02 Create e2e test for CSIDriver endpoints d459b4429f4 integration: remove special verbosity for garbagecollector and graph_builder 931cc96b8d4 remote windows condition when #116693 is merged 0bff705acd8 Preserve code blocks in templates.Normalizer (#118029) 7470a94f5a9 add some log for debuging 6232ac734a0 Merge duplicated Linux/Windows kube-proxy setup code 08ce5805769 Add ProxyServer.platformSetup e0b7f31ce6e use standard base image in dra dev 149f4878a70 Simplify DeferCleanup. dbb6d25f13b e2e: apply timeout for CSI Storage Capacity test only to node 1c05cf1d516 kube-scheduler: NewFramework function to pass the context parameter 1b206399f6a fix using stale binaries in local-up-cluster ece68cf8337 Fix update-vendor.sh logging cba8c1f5e2e Fixing windows memory allocation e2e tests after a refactor 96d48de9b97 add OWNERS for cmd/prune-junit-xml 86a258b13a2 kmsv2: ignore cache key expiration on reads 89439b570fc test/e2e: use agnhost latest version in the manifest b30720fc9f0 Add test for starting kubelet with a CSI volume mounted ad9e264c3cc test/e2e: Use json.NewSerializerWithOptions in place of json/yaml newSerializers. 048938f1d85 hpa: cleanup `currentReplicas` code 0f5535ea259 registry/core/service: remove incorrect comments 2db577a560c scheduler-perf: inject "benchmark" as name into JSON result filename 0789bbe9f7a Update k8s.po b6364dddfe6 update webhook test to go 1.21 d8db9640fab kubeadm: remove function pointer comparison in phase test 2658a2b627f Make connection lost retryable in webhook ed26fcf5b87 cleanup useless null pointer check about nodeInfo.Node() from snapshot for in-tree plugins e21cf9a54e9 Setup e2e_node to support testing on ARM64 ec8d94f2057 Grab logs from all the containers when DNS related tests fail 182cd425d3b graduate LegacyServiceAccountTokenTracking to GA 337728b0255 Improve backoff policy in reflector. 0fe27a06f99 Cleanup the Job controller handling of terminating pods c74790e266a remove redundunt type conversion, unused variable...etc 07c94553608 fix apiserver InstallAPIGroups slices out of range aa11cc69696 Mark grpc-gateway v1 as an unwanted dependency 19ae2de19cb kubeadm: speedup init by 0s or 20s e4102d5e300 Test APIService safe handling at startup 3be3997193a Fix waiting for CRD sync at server start 71ec9df5b61 update image tags in manifests to reflect the version listed in the source a10ff53d8e6 Reword the event message to read better for a single secret b2eae2f92e9 Support podman for building release images 6b4251c0fdf Remove statefulset from logcheck.conf 3f1d8e7aeb4 Apply to use contextual logging for all loggers in statefulSet d9b941b7827 Remove undesired verbose fields from log bea71a3e4ee remove unused pv informer from expand_controller 4c9887e3ebd Updating the nodeAffinity of gated pods having nil affinity should be allowed a0f14c1c5ea CHANGELOG: Update directory for v1.25.10 release bab8002fb38 CHANGELOG: Update directory for v1.24.14 release 80b9c853613 belated cleanup of some kube-proxy stuff for old versions e553fe1fff0 CHANGELOG: Update directory for v1.27.2 release c9e4de90dbe CHANGELOG: Update directory for v1.26.5 release 526d45416fb update err status code check in transformation metrics 5a75a03a774 Improve warning message b76ef2e095f fix: move to `dl.k8s.io` from `kubernetes-release` bucket fc4fb004cf6 add reviewers and labels to yamlfmt 93462377120 Update docker/containerd/runc versions and capture more logs 885f3d7a7df Sort and limit to the describers the return (string, error) 9e9a6cde4b8 test/integration/scheduler: fix data races b035c373db8 build latest sample-api-server for test/e2e bafae5c0764 rename err to lookupErr 8b9cbe62025 fix false positive kubectl plugin unit tests b9950b5192d Drop zeitgeist from tools go.mod 36f0caf7ecd remove GlusterFS references from test/e2e/* comments/descriptions d83c3ce7ca8 make rbd and iscsi test images in parity with the test code 9de2846c72c remove glusterdynamic provisioner images reference from tests 763e7923fb9 e2e: replace ubuntu-slim with agnhost in hpa cm noExporterDeployment 261de704c25 kubeadm: fix a bug where the static pod changes detection logic is inconsistent with kubelet 666be79d670 legacy names of volume plugins have been gone a LONG time 8b4840aa374 clean up unsupport etcd version e0ebac6c9ca drop redundant NArg check when looping Args 82c40e3697e drop redundant NArg check when looping Args 829bcea7634 remove vestigial BUILD file 0616d15712b Fix perf-test by increasing the error margin 46ed70ecac5 Bump runc to v1.1.7 51d79c4d6b0 e2e: use gomega.Expect instead of deprecated framework.Expect* 1daf74d25c4 Initialize data if nil b81cfb9cb8c Update vendor 15c5713015e managedfields: Remove gvk from SkipNonApplied b52e57c589a managedfields: Improve/strengthen version checking for Apply 559d12fcce0 managedfields: Create NewFakeFieldManager 45853e20ae5 openapi: Create client -> TypeConverter function 45603efecb7 Create e2e test for PodEphemeralcontainers endpoints ebaf49dbd70 Export DefaultServerUrlFor utility function 5519b89a28e Validate lock identity e3eb4bd0c56 updating dependencies.yaml for etcd v3.5.9 version c99cf53a108 e2e: deflake hpa e2e custom metrics tests 247ea7fc780 use upstream etcd github path instead of redirecting one 6616e1f2385 update etcd version in install.sh to 3.5.9 0e456dcf866 Clarify localhost nodeport comments/errors a744a186b67 Rename GetNodeAddresses to GetNodeIPs, return net.IP 2ca215fd994 Add NodePortAddresses.MatchAll() d6e488b998e Changing annotate PrintFlags from annotate to annotated d8e82b1417c e2e: use gomega.Expect instead of framework.ExpectEqual in windows/* 8c6c1e53194 plugin_evaluation_total metric support preScore/score 3680a5230c3 Bump docker/distribution to 2.8.2 3ac74973610 Chore: cleanup in interpodaffinity 073b4cf66ad test/e2e/dra: fix kind cluster creation 3b69fa2fa54 dependencies: update github.com/mitchellh/go-wordwrap v1.0.1 19ae103e829 emit warning on deprecated annotation volume.beta.kubernetes.io/storage-class 517c5b75c5d Update unwanted deps d6d1dbdd82a Update kube-openapi, drop mapstructure a52dcd0d9f3 Add DelayCacheUntilActive option to start informers after leader election 7c554ea1d91 Regenerate discovery fixtures 2ab6fd3590b Capture discovery API output in test fixtures 3867569ae27 codegen 0819d342040 using parsers in applyDefaultImageTag 7da7468a3fc cleanup: duplicate request_test TestRequestAbsPathPreservesTrailingSlash f0f92853ad8 Add api-machinery TL owners permissions for jpbetz e4dd6f68dc8 remove CSIStorageCapacity featuregate 9ac657bb94e Make NodePortAddresses explicitly IP-family-specific f7bb9a9a0a7 Remove a mostly-unused variable in the ipvs proxy 1ca8f84eede Scheduler: Pass the supported nodeSelectorOperators to the field.NotSupported d85b91f343b scheduler-perf: measure workload runtime and relabel workloads aa405c8aac6 Allow runtimes to provide additional context on CRI pull errors 83fb5a50bc9 dependencies: bump k8s.io/utils daebf1c735d Simplify plugin resolution check function f562375c8a6 add changelog for kube-addon-manager v9.1.7 be4c4a51ea2 Update pending_eligible_endpoints.yaml d34d4755ae2 Promote APIResources e2e test to Conformance 6e2ea32fc89 feature(DynamicResources): return Skip in PreFilter a0133b7cc47 proxy/ipvs: added daman1807 as reviewer dcefc42b35a update vendor dependencies for the change ae749238786 etcd depdencies are updated to v3.5.9 13cef6a7549 cleanup unused variables for v1beta2 component config 815578295ae Revert "support short name for flowschema and prioritylevelconfiguration" 72202f9a007 Revert "add shortnames for mutatingwebhookconfigurations and validatingwebhookconfigurations" 45836971f27 cli: replace intstr.FromInt with intstr.FromInt32 8580c116d5c fix: use dl.k8s.io, not kubernetes-release bucket ef9f8d7c0c8 kubeadm: Remove leading zeros from etcd member ID in log messages ff4c6916ec7 kubeadm: Fix log message when etcd member is added as learner 196e2f041b1 Update the cgroups v2 toleration in local-up-cluster 7248b9263f0 Fix comments on InformerFor 6ac1bae2815 test: Improve debug output of init container tests 1f16d711857 kubelet: Rename PodManager DeletePod to RemovePod 166256f73e8 kubelet: Reduce the interface pod.Manager consumers accept 8bd94dfa762 kubelet: Organize and document kubelet pod-related members bb568844b67 kubelet: Separate the MirrorClient from the PodManager 80b1aca580b kubelet: Remove dispatchWork and inline calls to UpdatePod e7207c85467 kubelet: Merge orphaned mirror pod names into GetPodsAndMirrorPods f8086f2dac1 kubelet: Convert IsMirrorOf to a function 02960a8253e kubelet: Remove unused mirrorPodFunc in eviction 1168b118750 Stabilize local-up-cluster in our CI 3dc4eea8896 proxy/service_health: release read lock early 655f2f74010 replace build to build.sh cc1251123ba use wait to avoid blocking the SIGTERM handler 808098c4c69 proxy/ipvs: healthzServer for instantiating the proxier 4b50c4bb016 Update --image-gc-low-threshold option's description 3da79e2850d OpenAPI V3 invalid document checks cbe825b2b6c ginkgo update to v2.9.4 and gomega to 1.27.6 feb63fb0285 e2e_kubeadm: stop using deprecated framework.ExpectEqual 7681135f1b1 etcd: Build image 3.5.9-0 7a4787ade10 openconsensus update to v0.24.0 82d1e356de4 deps: go-gcfg update to the v1.2.3 f03b5cdc083 update containerd/ttrpc to v1.2.2 dd49af86b7b [UT] add ut for pkg/client/conditions f7948c6e2e4 use kubectl v1.27.1 in cluster addon manager eb1483fe64d user --prune-allowlist in kube-addons.sh 20602c819be e2e framework: remove dependency on k8s.io/kubernetes/pkg/api/v1/pod 2e2afc7fd27 Job: Use generic Set in validation 1ffe3f467e8 lavalamp is taking a long break 1ea17254bf0 hack/tools: bump logcheck to v0.5.0 3fa55d469c7 fix a bug where the AttachedVolume is not printed correctly in the log 8c82855467b When expecting pods count only active ones de882f5193b Job: Replace deprecated pointer utils with supported ones 8f11f5bb2b5 DRA: use containerd 1.7 in kind image 123845da886 Log a warning if a ImagePullSecrets does not exist 3f3e1d507d0 add new metrics for the internal client-go transport generator e7c679c362c cidrset, multicidrset: directly use getIndexForIP method fe728996ca8 scheduler test: call frameworkruntime.WithLogger function for contextual logging b4563925678 Migrated `pkg/scheduler/framework/runtime` to use contextual logging bfb4f8b7071 etcd version monitor build go version update to 1.19.9 0ae902fca4c update golang version of etcd build to 1.19.9 3b634de6ffc test/e2e/dra: update README 5fdeaa8e42c update for feedback 6f23c774085 QueryParamVerifier falls back on invalid v3 document d5f4b9634c6 DRA: fix image build on Mac 569695b0226 e2e/network: setting --max-time for curl 5fd5768ef32 kubeadm: Make etcd member removal idempotent 164113bc1c3 fix a bug where the KubeletConfiguration is not printed correctly in the log a5575425b03 add no resources found message to rollout-status command (#117884) c0611b6bb33 Return Skip in InterPodAffinity#PreScore under specific conditions 11f1d241654 unit tests: Fixes kubelet util unit tests for Windows 3a394bbeada fix:translations zh_CN LC_MESSAGES k8s.po error 4634073d0b9 Use getter function for plugin subcommand resolution 2c03afac4c8 apimachinery/util: stop using deprecated io/ioutil e3d5feb76c4 fix HPA plain metric calculate 6607834207a Use the same report files as before 9150e6b55a1 s/of referencedFrom/from referenceFrom/ 4bbf611773d Retool validation for pod HostNetwork ports ec3379a717e Do hostNet Pod-ports -> hostPorts in Pod defaults ef796dca9bb Simpler openapi gen - subprojects do themselves 93b2845bec7 Codegen: subprojects openapi 4909dbd0d7f Deprecate generate*groups.sh -> kube_codegen.sh c3971002c9d MinimizeIPTablesRestore to GA 8f229057484 [refactor] refactoring flags and options in Expose cmd 82e3fa0930e fix fd leaks and failed file removing for main pkg and cmd 5289a7b029f fix fd leaks and failed file removing for test directory b94c6daa0b7 fix fd leaks and failed file removing for pkg kubectl and pod-security-admission 982d2966cd3 fix fd leaks and failed file removing for pkg controller-manager and apiserver 73aeed8766c fix fd leaks and failed file removing for pkg client-go f49cc5eb113 add remove_file in client-go util directory c8737346db4 Export GOMAXPROCS environment variable e865b30abd0 update serial number to a valid non-zero number in ca certificate (#117791) 308ab380d7c Add unit testcases of refMap. 23ac0fdaa52 APF: Dynamically compute retry-after based on history 99ebc8d9f82 Tweak annotating kubemark nodes on startup aab02d52f4d Fix make etcd image failed 91570a36614 promote ServiceNodePortStaticSubrange to beta e79daae6823 Chore: clearify need update test cases fb4d0150b96 Convert apiextensions-apiserver to new codegen 29913a89735 Convert code-generator/examples to new codegen 643bf1b0362 Convert kube-aggregator to new codegen 1e0b7aab756 Convert metrics to new codegen e368f1b25bf Convert sample-controller to new codegen d0e5adb58bc Add a new way for subprojects to do codegen 05b3449346e kubeadm: Add etcd client unit tests fc1b2287798 kubeadm: Use internal etcd client through an interface e740f8340ee Introduce CEL EnvSets for managing safe rollout of new CEL features, libraries and expression variables 235c261196e Job: Fix a misspelling b4560f9e573 kubeadm: fix a bug where file copy(backup) could not be executed correctly on Windows platform during upgrade f2de1a00b8f storage/etcd: skip SendInitialEvents if the request is backward compatible bbf5c03dd80 Add NodeLogQuery e2e tests ddb8c8a38b4 remove ServiceInternalTrafficPolicy e2e feature tag 16fecf3e761 Refactor APF handler in preparation for dynamic retryAfter d3237b72587 unittests: Fixes unit tests for Windows (part 7) ccb4ca89549 record podUID in refMap in watchBasedManager e4340f0d9bd Job: Use generic Set in controller 22d0aa1d04a remove DevicePlugins featuregate 27cdddeaf16 update Feature:KubeletCredentialProviders] e2e test name 2ebc0cc0257 remove unwantedReferences 57969c1b52c Fix etcd3 config changed 4e24237f3bc e2e services: retry if healthcheck nodeport is not avaioable e560df770e3 respect local GOPROXY setting in build/common.sh c56839c0a1e etcd: Update version to 3.5.8 64f2fe2357d kubeadm: fix crictl pull using wrong flag, use -i and -r 936265e8707 Add podUID in AddReference and DeleteReference cd51c1803e2 Add new partial/full sync time metrics for iptables kube-proxy a862a5f2d24 Use the right executable ss/netstat in log message ae08fe1e199 ProbeTerminationGracePeriod promote to GA 2cb215e1091 Add all describers to the exported DefaultObjectDescriber 5ea40d14fd9 Added e2e_node test for sigkilled pods exit code and exit reason check 3e57a0bd138 Add go.work and go.work.sum to .gitignore 008576da073 Improve and simplify maintenance of APF bootstrap objects 194ac957ad3 make resize of hollow objects more verbose in start-kubemark c3e77bf21cd Update podFailurePolicy comments from alpha-level to beta 4fa7e444805 Remove gcp cloud-provider checks for kubelet version >= 1.7.2 1c45bacfb0e mount-utils: fix flaky test 'TestFormat' 6a5cf99aad1 pkg/proxy: human-readable messages c2c8b8d1783 pkg/proxy: using generic sets 359bcec0e09 benchmark test to evaluate the overhead of podMatchesScopeFunc edd032e22b7 Fix incorrect calculation for ResourceQuota with PriorityClass as its scope e807a6aec57 Disable NewVolumeManagerReconstruction feature gate 0c9f55588c5 Simplify creation of default KubeProxyConfiguration ec2cc36404e e2e: disable jig.ExternalIPs b849ff57b85 e2e reasonable grace termination period timeout 791573ddb60 promote ProxyTerminatingEndpoints to GA b249b4ca9bb Promote ExpandedDNSConfig feature to the GA stage 5aca41af50f [local-up-cluster] Use the kubectl we built 8524d21bf48 Bump Ginkgo Poll Progress parameters to a sane level 034528a9f04 scheduler perf: add DynamicResourceAllocation test cases 1c52fb38759 Update publishing-bot rules for release branches to Go 1.19.9 19f7cb23c8c e2e agnhost functionality to RST TCP connections 63b69dd50ce Add support for CRI `ErrSignatureValidationFailed` 859359ad6ae Fix strict linting a7035f54595 Pass Context to StartTestServer 2d866ec2fc8 Teardown only scheduler in integration tests 8969fdd2f51 QueryParamVerifierV3 resilient to minimal OpenAPI V3 documents cede96336a8 Depend on k8s.io/utils cpuset 9f46cbc6fa4 Update k8s.io/utils version to v0.0.0-20230313181309-38a27ef9d749 10a869fc752 Remove duplicated config fields from ProxyServer 1f7c07f3553 scheduler: remove deprecated v1beta2 KubeSchedulerConfiguration a3848714f55 dependencies: update gh/Azure/go-autorest to latest version 17c17da97b6 e2e_node: move getSampleDevicePluginPod to device_plugin_test.go c53cc4fe0db Update distroless-iptables to v0.2.4 c4575c34382 Fix up detect-local-mode validation 3734fe7ab1d Remove some useless error checks 19885264f3d [go] Bump images, dependencies and versions to go 1.20.4 d82684e691d Add check to skip PodTopologySpread PreFilter if no constraints are specified d22b9310e6e Allow override of prerelease/buildID portions of version at runtime 36b760a9317 upgrade etcd deps to v3.5.8 7c5573d326d Fix cmd, integration, and conformance tests 69eccd41b89 endpointslice: reduce visibility of vars/funcs 933b665c18c Upgrades spf13/cobra to 1.7.0 3653b21e6ba Move glusterfs 1.25 deprecation notice to the deprecation section. 9d19c207d22 fix: fixes flake in TestKMSv2Healthz 561548e86c4 unit tests: Fixes kuberuntime unittests for Windows 5f489a33277 feat: rename PodHasNetwork to PodReadyToStartContainers a40810a2d9d Add comment about removing the feature gate e51e5962d5a Use early return pattern to avoid nested conditions e1e38148bb2 Add DisruptionTarget condition when preempting for critical pod 7be3f8e43f7 Remove old metric scheduler_goroutines e7396e35513 remove ability to re-enable serving deprecated versions of the runtimeclasses kind d96f83f02f9 windows-tests: Update connectivity check util function e496085bd34 Kube-proxy/ipvs: accept access to healthCheckNodePort on LbIP d257d5dfdc4 Trigger re-sync on any change to providerID 40de26dcff8 KEP-3325: Promote SelfSubjectReview to GA d9524379210 Fix flaky HPA e2e tests by not failing on context cancelled (#117669) 5fff8cae749 dependencies: klog v2.100.1 d55b67b3490 Clean up brace whitespace in **/validation_test.go 2ad2c15c9ca Update copyright year to 2023 b464d084278 Remove custom fake svc lister in favor of regular indexer b899ae48477 remove genericfeatures.DryRun in 1.28 c6bdde8051c Create e2e test for APIResources endpoints ab9c8eb1e8d Removing WindowsHostProcessContainers feature-gate 077cc20f8af fixup patcher test to include field manager ad5cda4d219 remove checks for fieldmanager from handlers 4721ec7519c include apiextensions types in apiextensions generated openapi 08e756342c2 fix scale not being given gvk in CRD openapi schemas ffb9c076d77 add OpenAPIV3 config to tests and server options c2177dca5f6 add error for attempting to initialize field manager with nil typeconverter 94909af68ae supply deduced typeconverter to apiserver tests 302daa889c5 Throw error if OpenAPIV3 config is not provided 1b766839677 filter out directives before taking patch value as-is 6de6cd0a658 add integration test for nested $patch in SMP e00a9c3a0b1 add subtests ffeec1f4d44 Update compatibility data test ec997d5433a Generated files for NetworkPolicyStatus removal bff8a6cd9f3 Remove withdrawn feature NetworkPolicyStatus 0fcf42f3211 Move test double queue to test file and unexport 208af2d1d83 Localize SpyWorkQueue to cloud-provider for now a15013ec8b1 Document RetryError properly 73bc9861d25 Improve error logging in processNextServiceItem 18e978a89df Improve RetryError GoDocs de34540248a Update kube-openapi to fix race d0677f528c0 Add json tag 69bc6855568 node: podresources: graduate to GA 04ad946e8fb kubelet dra: lock before getting claimInfo CDIDevices and annotations fields aaa30439bdd reduce util pkg for testing in tempdir. 4c83aae2cc7 kubeadm: replace intstr.FromInt with intstr.FromInt32 026e7c7cb37 registry: replace intstr.FromInt with intstr.FromInt32 0ee9f1b7a75 kubelet: replace intstr.FromInt with intstr.FromInt32 1c4b97ea272 network: replace intstr.FromInt with intstr.FromInt32 5bfe738af2e apps: replace intstr.FromInt with intstr.FromInt32 94410ee8078 api-machinery: replace intstr.FromInt with intstr.FromInt32 4911e9de4a7 api: replace intstr.FromInt with intstr.FromInt32 79266560383 kubelet: Implement support for Windows podAndContainerStatsFromCRI 14952cef5b7 kubelet: Move Linux stats to a Linux specific file fc8b4657c18 Add tests ea4ce5dc28e Alias api/errors instead of stdlib errors a179203bdba Support specifying custom LB retry period from cloud provider da922f0af67 Remove ability to re-enable serving deprecated discoveryv1beta1 APIs e28f3de6568 Revert "proxy startup-time config handling cleanup" d94c733ee2b Use absolute path instead requestURI in openapiv3 discovery (#117495) 34d3c7520be update Deps gopkg.in/warnings.v0 v0.1.1 to v0.1.2 944a4cd3114 Remove ability to re-enable serving deprecated autoscalingapiv2beta APIs 671a3f43fdf Correct the changelog for GlusterFS removal in 1.26. 859690d72a4 Added support for image credential provider for windows and arm64 on gce 28c573358b0 test for init container restarts d727df1741e node: device-plugin: e2e: Additional test cases 3dbb741c976 node: device-plugin: add node reboot test scenario a26f4d855d5 node: device-plugin: e2e: Capture pod admission failure 96975737033 node: device-mgr: e2e: adapt to sample device plugin refactoring 282a6a80b92 node: device-mgr: e2e: Update the e2e test to reproduce issue:109595 d509e79837d node: device-mgr: e2e: Implement End to end test dc1a5926321 node: device-mgr: Handle recovery by checking if healthy devices exist 53c9103a1de Set ENABLE_AUTH_PROVIDER_GCP to true in gce tests 2572a430344 kubeadm: fix unit test failure on node with multiple cri endpoints f81b49d8739 Remove ability to re-enable serving deprecated eventv1beta1 APIs 48d01d6d9b0 Remove ability to re-enable serving deprecated batchapiv1beta1 APIs c6f4bee98dd kubeadm: add deprecated FG UpgradeAddonsBeforeControlPlane 4d9261c7567 Fix LocationOfOrigin shows up unexpectedly 76fe41a996e chore: update cgroups and ttrpc versions 0dbeff4b6e6 remove GA feature gates in 1.28 about network 4e7b6e8ba49 remove DelegateFSGroupToCSIDriver featuregate fc0d2cd32f5 added init containers tests to simplify the sidecar KEP large PR 258c4c4251e Remove duplicated config fields from ProxyServer 9d4f10f5d28 Fix up detect-local-mode validation 5ece6541b80 proxy/ipvs: don't bind nodeips to the dummy device 5310305098a proxy/ipvs: add a GetAllLocalAddressesExcept() function f24d1d2c950 use go 1.19.x for etcd version monitor compilation 91ee58050f8 wait: fix PollUntilContextTimeout godoc comment b3e0bc88640 scheduler_perf: let the test decide which informers are needed 969d28b12b7 scheduler_perf: refactor common code 91df71be549 correct etcd base image reference in the doc 6b40cd8cd37 update test/conformance/image version to v1.4.2 6c8be35fa86 update the etcd base image to v1.4.2 1eca720dcc7 Refactor some watchcache tests 7f370d651dd Migrated `pkg/scheduler/framework/plugins/podtopologyspread` to contextual logging 54e6f609ceb Migrated `pkg/scheduler/framework/plugins/noderesources` to contextual logging 152c1a02723 Chore: Replace re-initialized variables with create new ones 37a9260d5c5 Migrate pkg/scheduler/framework/plugins/defaultpreemption/default_preemption.go to use contextual logging eeb13993832 Migrated `pkg/scheduler/framework/preemption` to use contextual logging 550d4c00746 scheduler_perf: support test case selection via labels 79de8879cbe OWNERS_ALIASES: add self to sig-node-reviewers 217196c59fa Add ROX storage tests (#114628) 6a4cf352b8b remove tracking annotation from validation and webhooks 2af662b05fe Refactors discovery content-type and helper functions 170d5ef9fa0 code cleanup for kubeadm 902c4ecc90f Add jpbetz to approvers of apiextensions-apiserver 0a582431593 node: device-plugin: e2e: Add test case for kubelet restart 09100804722 node: device-plugin: e2e: Provide sleep intervals via constants 4a0f7c791fe node: device-plugin: e2e: Update test description to make it explicit fd459beeff6 node: device-plugin: e2e: Isolate test to pod restart scenario 5ab4ba62052 node: device-plugin: e2e: Annotate device check with error message 5c4f397361f node: device-plugins: e2e: s/devLen/expectedSampleDevsAmount 0aa6a5726a6 node: device-plugins: e2e: Refactor parse log to return string and error 8ed861889aa feat(NodeVolumeLimits): return Skip in PreFilter 28519e240ed Fix scheduler performance regression after adding plugin metrics c96188a38b5 remove seccomp profile path 96eaed9980d cluster/gce: update cloud-controller-manager to use go-runner 0d27d3cfffc cluster/gce: update cloud-provider-gcp image to latest tagged version 4cdfe600e04 Fix image pull error type `ErrRegistryUnavailable` 6da128bdb3e dependencies: go.uber.org/atomic v1.10.0 87230578802 dependencies: update go.uber.org/multierr v1.11.0 f7ce6f834a1 Chore: add ipfamilies tweak functions 78b8af9fed3 scheduler_perf: update throughputCollector a325fdbbe5d update Deps gopkg.in/natefinch/lumberjack.v2 v2.0.0 to v2.2.1 da3e7e37816 stop watcher when error occurs 018564b8cfc change the seccompProfile field description to match the imlpementation 6d8a0100f70 Fix typo in kubectl api-resources help text for --categories flag 3c45b61b643 [KCCM]: have providerID trigger re-sync, but not be required for nodes a4f98e4c1e8 Update staging/src/k8s.io/apiserver/pkg/cel/common/values.go e115d5234c2 Fix bug where CEL listOfString.join() results in unexpected error 3229deda37b register missing metrics 24e68b3c6ac use client-go metrics not only rest_client 2bd42061b6e Remove support for EndpointsLeases and ConfigMapsLeases lock from leader election 3f247e59edf Refactor cacher.ListerWatcher code structure 892ebf2d253 Ensure version "*" is passed instead of "" for all authz checks (#116937) 73d9a9cfa06 kubelet/kuberuntime: Fix flaky test 'TestGeneratePodSandboxConfig' e3d84aa93cd kubeadm: add the experimental (alpha) feature gate UpgradeAddonsAfterControlPlane that supports upgrade coredns and kube-proxy addons after all the control plane instances have been upgraded 78e6cb1cccb intstr: add FromInt32, deprecate FromInt 88e2c344390 Enable a bunch of generic storage tests for watchcache. 860329c04b5 drop v1.25.0 API testdata 440d5910f7d Chore: add app protocol tweak function 06993afdd6a Chore: cleanup whitespaces 3d8f7233da9 Chore: remove impossible and redunant cases 4a6bc66e40f updating microsft/go-winio package to latest version 60d25c3ed77 improve remotecommand testing fuzzing the data stream d76f5dae67c Add a comment to roleRef to document that it is immutable 959c90c1d9a Chore: add deletion timestamp tweak function 4169d7d0283 golangci-lint: allow exceptions for Go naming convention 4f8eba2a0be Chore: add finalizers tweak function 28db34a231f Chore: add load balancer tweak function 1c465c51e80 Chore: add service port tweak function 0cc7369196b Chore: add LBIngress tweak function 23c242770fe Chore: add etp tweak function 2f6bc661dc3 Chore: rewrite newService function f9bab9a60b0 add --concurrent-cron-job-syncs flag bc00f5c071f Update cri-tools to v1.27.0 c3384191ea6 remove validation GCE-ism 28ac914bc54 Remove repeated info e0d5c4aa93e Move info where its most relevant 0a508ad8067 Update `kubectl edit` documentation d0412928961 Add v1.27.0 API testdata 7514d8b3339 add shortnames for mutatingwebhookconfigurations and validatingwebhookconfigurations 95fea2f2bff add test case for merging a patch against empty list 3469bb05db7 kubeadm: fix unit test panic for TestNewResetData ed37e6986b6 uncomment exit trap to cleanup tmpdir 63d44fdde58 retain KUBE_GOPATH on recursive kube::golang 4d736a0435e cleanup update-mocks.sh 726992f9db9 call kube::golang::setup_env before setting up worktree 17db22d0558 Fix potential mutex usage bug 39e52449f9f remove nodes resource from CoreDNS RBAC manifest 7a14c5ad6dd ensure we can remove _output 11f3ef1ed7d drop linux/arm build warning, now that 1.27 is released, this is covered by the release notes 104c208d0fb add Authentication tracking request/error counts and latency metrics 65f3454c1d9 fix undefined convertion 8efeb5afcfd Dependencies Update google.golang.org/protobuf v1.28.1 to v1.30.0 6f90c536330 Dependencies Update golang.org/x/tools v0.7.0 to v0.8.0 5c584269a79 avoid volume copy in checkAttachableInlineVolume 2bbd07c0192 remove defunct interactive tutorial 1d15354ccb5 update gofuzz dependency 2cd23c8b17c Update go-logr dependencies 062f146d325 Replace the deprecated ioutil method in the pkg/credentialprovider directory be6709044ad etcd: Build image 3.5.8-0 6db4cbfde7b cacher: do not popExpiredWatchers when the cacher hasn't dispatched any event eab66a687b2 cacher avoid double locking (#117410) a02e94ae2b4 e2e: fix flaky test 'should contain OpenAPI V3 for Aggregated APIServer' 0c54d9af6f2 Fix stomping os env in kubectl e2e tests 766f6c3ad41 Include stderr in cred provider plugin errors eaba1703b1b enhancemanet: reduce calculation calls a8b808ee6ca Replace the deprecated ioutil methods in the test directory a959785f964 dependencies: udpate coredns/caddy to v1.1.1 0297329795e Refactor watch bookmark tests to allow sharing between etcd3 and watchcache 45e836a968a Generalize few watch tests from cacher f3b9e0ddc9b Replace os.Setenv with testing.T.Setenv in tests 7cbbf47f5ea Cleanup environment in tests that call os.Unsetenv d38ac7e7c6b Replace os.Setenv with testing.T.Setenv in tests e8d3a4a105c Cleanup environment in tests that call os.Unsetenv 2181eea4843 Replace os.Setenv with testing.T.Setenv in tests cf125a35611 Replace os.Setenv with testing.T.Setenv in tests b9ef1603223 Cleanup environment in tests that call os.Unsetenv 240fccd7668 Replace os.Setenv with testing.T.Setenv in tests 89467ad3e9b Replace os.Setenv with testing.T.Setenv in tests fc643d2e40c Replace os.Setenv with testing.T.Setenv in tests 29b6c54d158 dependencies: update github.com/cenkalti/backoff/v4 to v4.2.1 0a8343352b4 Document gomega.Equal() instead of gomega.BeEqual() d231d6022b0 Remove endpoints (old leader election) related RBAC from kube-controller-manager ClusterRole e340325024d Fix nil pointer in test AfterEach for volumeperf.go 453f81d1cae kubelet: pass context to VolumeManager.WaitFor* 4de0d2c6f8f use generic set in storage/validation 3ac77335303 Add `saschagrunert` to `sig-node-reviewers` 7fb88eec73c support fieldSelector spec.hostNetwork 4d73864026c Dependencies Update golang.org/x/timet 90d013bbcef8 to v0.3.0 ff9ebfa90de e2e framework: control k/k/pkg imports ee99ca25ee6 Remove unnecessary if judgments 1359ebcc5b0 fix doc mismatch a6339e2702f proxy/conntrack: using common conntrack cleaning function in proxiers 399f09dde05 proxy/conntrack: common function for cleaning stale conntrack entries efb05630946 proxy/conntrack: moved pkg/util/conntrack -> pkg/proxy/conntrack 37ea51fd567 Improve the performance of map usage 9c0153aef9e KCCM: add providerID predicate to service controller d3c103edce7 Re-work logic in shouldSyncUpdatedNode dc4f6f9da6a e2e framework: remove last dependency to k/k/pkg/util 40521fe3601 e2e framework: remove last dependency to k/k/pkg/kubelet 030debc1990 changelog: fix formatting issue with v1.27 change log 4e8c5364bc6 CHANGELOG: Update directory for v1.27.1 release 1b93abb9bac Move kubelet config API to e2e_node 4e928c96b5e skip checks when topologyPolicyName is PolicyNone 71a989e5e9c Fix CHANGELOG-1.27 correct 06dc3d00fcc e2e/apimachinery: Add an e2e test for the API Streaming feature 8d19c0002bb Add node check to vSphere cloud provider 3b7c14e8cfb Remove unnecessary int type conversion 36e6e759182 dependencies: udpate seccomp/libseccomp-golang to v0.10.0 5bce18c98ec dependencies: update go-semver to v0.3.1 d7270f4ba72 dependencies: update go-oidc to v2.2.1 b0d89a7807e dependencies: update github.com/gofrs/uuid v4.4.0 1595d7f52d7 dependencies: update go-systemd to v22.5.0 9cfdf989eda dependencies: update gh/fvbommel/v1.1.0 6b70710b0d1 dependencies: xlab/treeprint v1.2.0 6320b6843a2 dependencies: update netns to v0.0.4 9e2bb40e158 fix typo annotation key notes. becf73a82b1 add invaild scope test case c4e1b01416e replace spew methods with dump methods a96358ac0fa Remove some useless error checks 867be8fc3e2 get rid of e2e/framework -> k/k/pkg/kubelet dependency 2bb35e08f4b Clarify kubelet/kube-proxy iptables rule skew constraints 6d13cad2cf5 dependencies: update gh/Azure/auto-test/{adal,validation} 432a3016a49 Revert "Merge pull request #113151 from ncdc/refactor-crd-conversion" 9c5a66e2080 Revert "CR conversion: protect from converter input edits" ed0124855aa add log includes pod preemption details 0979d554435 unit tests: Skip flaky tests on Windows (part 2) 2d06fad5163 dependencies: azure-sdk-for-go to v55->v68 625c3025057 change pv recycler scrub cmd to find -delete c042837a761 truncate the precision at a millisecond for image pull event message 804d9f47c9f kube-aggregator: correctly use client-go TLS cache with custom dialer db5d74935ee optimize evict sandbox logic ccf7ddacfce replace ioutil with os, update doc 5668399a87c Codegen: use openapi-gen via k8s.io/code-generator b23ab389b4f Add SIG ownership to controller/nodelifecycle 375e3cf869b CHANGELOG: Update directory for v1.24.13 release f7295ac5e08 CHANGELOG: Update directory for v1.25.9 release d567d61aa56 Fix a data race in TopologyCache a62563f1305 Fix TopologyAwareHint not working when zone label is added after Node creation 83a1774df2b CHANGELOG: Update directory for v1.26.4 release a7a8cd6e5de Codegen: subprojects: nuke existing files bc302fa4144 Replace uses of ObjectReflectDiff with cmp.Diff 9627c50ef37 Replace uses of ObjectGoPrintDiff with cmp.Diff 29c0b73d640 Replace uses of diff.ObjectDiff with cmp.Diff dd7af241c11 Replace diff.ObjectDiff with cmp.Equal 97bab44cae3 Replace apimachinery diff.StringDiff with cmp 4f6714ef42d apiserver/etcd: add request and request_error metrics (#117222) d09842e0adf node-lifecycle-controller: improve monitorNodeHealth test-coverage (#116687) be101a748dd Remove some unused winkernel arguments/fields/functions 8a790ac2e1b Remove unused ProxyServer.EventClient field 9754386c764 Remove write-only ProxyServer fields b4c384ebfb2 vendor: bump runc to 1.1.6 c69689659a6 Add `--concurrent-job-syncs` flag to kube-controller-manager 4438208511e api: encode NamespacedName with lower case in JSON 476e407ffd2 cacher: prevent a potential deadlock 7cdffe37c1d update container storage interface spec to v1.8.0 10a8ec5b2cc use case-insensitive header keys for http probes a6173fad88a Delete duplicate code in schedule.go 5588e8a4cd0 hack/logcheck.conf: remove certificate controller exception 277c03fc799 remove these unrelated openapi files (#117051) 9a468563070 remove reuse buf todo (#117033) 5da386745af Kubectl convert - warn users with NotRegisteredError and Fail on all other errors (#117002) 0eec63fd687 fix the mistake in the release note 02d8fc28faa fix: add the bug as a known issue o on the v1.26 release note 75f17eb38fc optimize watch-cache getlist (#116327) 9c15d75f234 Migrated `pod-security-admission` to contextual logging (#114471) 2bed67d0f1c Revert "Optimization on running prePreEnqueuePlugins before adding pods into activeQ" 73eb7c09309 Codegen: easier to read logs for subproject output bbbb695060a Codegen: subproject: chdir to the project dir 893ec0ca453 Codegen: simpler k8s.io/code-generator/examples af29cca6ced Codegen: new tools will not become part of 'all' 5f7345deaac Codegen subprojects: consolidate generate-*groups 95e614b3717 Codegen subprojects: deprecate "all" in scripts a94ed5b8ac8 Codegen metrics: include v1beta2 8b68e063e14 Codegen subprojects: regen defaulters when needed 5200f4b0d36 Codegen subprojects: reify 'all' into explicit 201653aa870 Trivial change to reduce diffs 901dea73073 Fix azure disk e2e after migration d212041d513 hack/local-up-cluster.sh: Remove old dynamic certs ed5dd38dcdc CHANGELOG: Update directory for v1.27.0 release 464edfe6f6e test/integration: create nodes directly with kubernetes.io/hostname label 9204e6b286e remove unused constant `expansionFailed` in expansion test. 4491ba89171 rename variable delete to avoid collision to builtin variable d04d7ffa6ec kubelet: Mark new terminal pods as non-finished in pod worker 0020631985e test: Add node e2e to restart kubelet while pod is terminating aa73f06e569 scheduler perf: allow creating 0 items 49bbf7c2681 scheduler_perf: fix race condition a869a898257 scheduler perf: remove cleanup func b039a2ff2c7 Add new contribex leads to sig-contribex-approvers 9363afc6502 Fixing broken tests d102a6fea51 HPA Controller - Update Owners 8d18ae6fc24 Use the generic Set in scheduler b04ca79445e Add unit tests showing the effect of unlimited containers when calculating pod limits. 1dec97436c8 Fix typo at job_test.go 046bb892566 supported version of etcd 3.5.7-0 for Kubernetes v1.27.0-rc.0 f138d29bf2d watchcache: currentCapacity acquires read lock c77ad3116f4 kubelet: fix setup of emptyDir with sizeLimit (fsquota) ea74a2d877d cpumanager: fix typo in godoc 1cce3b3e2f5 wait: fix incorrect suggested method d3ae6c2df3c Specify KUBE_ROOT for test-e2e-node/AWS to work d9bd22115ff Alias deprecated genericclioptions.IOStreams with new one 26b35ce36ae Remove endpoint related RBAC from scheduler cluster role 7fa3d54ea5b unittests: Fixes server journal unit test on Windows 08a324bf512 cluster/addons: set metrics-resolution to 15s eba18d503cc cluster/addons: bump metrics-server to v0.6.3 88e055059cd component-base: avoid data race in log format registry a2fb32870f3 test/integration/auth: fix data race 1dde8ef026e test/integration/framework: avoid race around grpclog.SetLoggerV2 f91518b81a5 Add genericiooptions in allowed list of genericclioptions b4e4db336f6 More migrations from genericclioptions to genericiooptions 5e1c6cd0d4f pkg/registry/flowcontrol: avoid race condition during Create 934516791c6 Swap assert.Equal parameters oders to follow convention 2d06601b81c RBD: e2e containers base image has been udpated to F38 0518dffd259 iscsi: e2e containers base image has been udpated to F38 8d9386fc402 Remove genericclioptions.IOStreams struct c3497b30aca More migrations from genericclioptions to genericiooptions 00c30941260 Migrate genericclioptions.IOStreams usage to genericiooptions 51a7751a496 Move genericclioptions.IOStreams into genericiooptions.IOStreams e450ed98122 CVE-2023-27561: Bump runc go module v1.1.4 -> v1.1.5 3d3686b9cf0 Return error for localhost seccomp type with no localhost profile defined e1bcfd47da9 Sort unmounted volumes message in volume manager 79b3126f00a skip clear quota if FSQuotaMonitoring is disabled 0a37f09c32b Fix directory mismatch for `volume.SetVolumeOwnership()` 731068288e1 correct storage class selection message cc8cd88a94d remove duplicate validation for csi 978da1e8f13 remove GA feature-gates bda73bd1129 Refactor remote runners e389d140ae6 fix as suggested 457bb58ebbf kubectl events: Support fully qualified names for --for flag 1893f639d03 test: Fix flake in node e2e mirror pod tests ffcf3ee6f87 feature(pkg/api): warning for Pod with null labelSelector in PodAffinity and TopologySpread 70369bfe299 remove GAed KubeletCredentialProviders 5662566e03a Set GOMAXPROCS explicitly 56755b8ffdb fix doc mismatch 8e36e948ce6 verifyVolumeNoStatusUpdateNeeded may cause flake and so only keep the last ones dac85fe2d3f [KMSv2] cleanup comments in v2 proto api feba08a6947 Create local copy to avoid potential race condition 29503fd8d45 openapi: Make file client more easy to re-use ed48dcd2d71 kubelet: Ensure pods that have not started track a pendingUpdate db92cc13880 ftr(etcd): add benchmarks 05f4e497f1d Deflake TestGetListNonRecursive 906f0607efc Clean up kms test d3f6cb717f7 update conformance yaml 7bfcfc4d5de docs: fix storage e2e test README f7765eb0d42 Add damemi to emeritus SIG scheduling approvers bbbd366cf39 Move damemi to sig-scheduling reviewers 397cc73dc9b delete unused functions in pkg/controller directory 47f8d42a6ba Add CecileRobertMichon to sig-cluster-lifecycle-leads 449f847630e [KMSv2] update ci script and add readme 86e1f4b9d10 e2e node: bump all nodes ready timeout beb329f4bfa Do not look at VPC-related resources outside the cluster's network 8d92cfb1316 Added conversions to/from NamespacedName df0a2538205 generate ReportingInstance and ReportingController in Event e9b384f5a75 fix typo f638e2849fb replaced spew.Sprintf with a util pretty print function 838ed7feb53 Improve the performance of map usage f6fa250e304 Add API approvers 03be789851d Fix sample-controller docs after moving to context-based cancellation 99ad88a2611 Remove unnecessary int type conversion f2fe1fff655 [KMSv2] add tests for generate transformer 479fcf0b13f kmsv2: validate encrypt response at DEK generation time 8d644fbc725 return skip in volumerestrictions ade63dd7647 cronjob: add ut for namespace terminating cause no extra log 9a776cbf212 kubelet pod-resources: e2e node test add failure description ExpectNoError 1031977b7d8 kubelet PodResources API: follow-up review comments ec9515a828e Add structured alternatives to strings in client-go/tools/cache 2b01f63b115 move check for noop managed field timestamp updates 07ebb22db92 added known issue for 1.27 release 80480f8e215 combine conditional checks 7a6d58001b7 handle event errors caused due to terminating namespaces af95a76bb21 cri-api: fix comment lines about PROPAGATION_PRIVATE daa1d287e4d fix GetPodVolumeClaims in comments c14068c2023 deflake: Add retry with timeout to wait for final conditions fbf33e32e61 Fix memory leak in kubelet volume_manager populator processedPods 27f84b755e1 Migrated the volumezone scheduler plugin to use contextual logging ddc13e983b5 Chore: add selector labels tweak function 4cab11f26f0 Chore: add persistent volume claim retention policy tweak function ba9dfe686fd Chore: add persistent volume claim template tweak function f97d3cf7486 Chore: add rolling update max unavailable type tweak function 1b17b4fa799 Chore: add rolling update partition type tweak function f3ffeae426f Chore: add update strategy type tweak function 5e0161b3de8 Chore: add labels tweak function ec34891782c Chore: add annotation tweak function b907d5af49f Chore: add finalizers tweak function 18ba7c0e433 Chore: add ordinal start tweak function 3eb34d8b6ce Chore: add min ready seconds tweak function 2161d095fa1 Chore: add template restart policy tweak function 4418a9f5906 Chore: add replicas tweak function 7fc08e0ce70 Chore: add pod management policy tweak function 77c7d6efcf6 Chore: add basic make function for stateful set 4a667a1026c fix: remove case sensitive checking of probe headers 81a0ea3da3c return name when error occurred in csi-translation a2cf4e73459 use describe node to print node events as well e5674903178 fix: remove last ip when apiserver was shut down f59ac6e6524 [WinProxy] Adding additional validations to queried endpoint list iteration. db5590a194b Remove sig-network-driver-approvers alias fc8892d26d7 Add more labels (esp. area/kube-proxy) to sig-network OWNERS 2f3800e1007 Make pkg/util/iptables and pkg/util/ipvs owned by sig-network 10b36075df6 Cleanup: use Set instead of map in endpointSlice utils eb60dce33b0 deprecate ExperimentalHostUserNamespaceDefaulting 94f2d351644 Wire bootstrap token authn secret lister only when it is enabled d71aea434e5 docs(readme): add go report and latest release badges a780544f58c add log for kubemark start d25572c3892 kubelet: HandlePodCleanups takes an extra sync to restart pods 41ed0e12341 Add an image for kubectl 1c7155e7ff6 Move hollow_proxy.go from pkg/kubemark to pkg/proxy/kubemark 8d3a498c879 don't ignore UID impersonation in webhook clients 364b66ddd65 admission ApplyTo: take in clients 630af564be3 Update cri-tools to v1.26.1 1aeec10efb7 DRA: get rid of unneeded loops over pod containers 017bb93887f certificate controller: use contextual logging c94a9a14d8d update gofmt 8cbe9fe543e trigger update event when service ipFamilies changes. b430464df06 gce: podresources: don't disable on windows 6b4ffdb9f75 node: re-implement Localendpoint on windows 195fc2f5162 kubelet: podresources: rename variable d6d19a290de Simplify statefulset fuzzer 376bda41c74 undeprecate kubelet --provider-id flag 8bb328680c0 upgrade cluster-autoscaler v1.26.1 to fix ci warnings c94bcabd7e2 [fix][typing] startResourceClaimController errrorf message has typos 31e1df9ae6c Bump Konnectivity to 0.1.2 aadb87bdcdb kubelet: Do not mutate pods in the pod manager 13192176002 Remove vestigal err check from CEL admission controller. a6ffbb41f8e Squashed commit of the following: bbf2b968c89 skip pod resource check when request is zero 64ecb161d47 Codegen: git grep returns non-zero if no match 241d46d1dd5 Codegen: deepcopy needs to run before swagger 3405853e6d0 Codegen: clean up stray ls-files use 3dd0c416639 support short name for flowschema and prioritylevelconfiguration e2b10505162 add some buff for pod initial restart count that is not zero efee9b4866d cleanup: promote ProbeTerminationGracePeriod to conformance tests b0eeeacfc0c fix: the volume is not detached after the pod and PVC objects are deleted 4d3f92d5f75 Update toplogy keyset initialization a890724f9ef cronjob: return immediately when failed to create job for the namespace is terminating 37aff025ff8 cleanup: remove Clear for fake job controller b7cdbca2374 Add more tests that should exist but don't for some reason 67d7f09eb82 hack/OWNERS: add pohly as reviewer and approver 5dca1be0160 Add tests bab2c18c246 Add jsonpath support for explain 77692f1b1c5 fix linting fabf1cba947 Add warning about TLS 1.3 cipher suites 6ad156d80ee Cleanup: modify some sentences about statefulset 13354d3da4d Add note about TLS 1.3 cipher suites c50c19d13af remove unused not api functions in the pkg/apis directory b1e3326eaee Fix gorestful typos in the APIServerHandler.Director docstring a3b44b574fb cluster/gce: Fetch image from image family 26f0325734c fix typo in volume util 0311a4e8e6d Fixed typo 9b9f22f06b5 Fix unknown field error in deployment lifecycle e2e 6f19e8656f5 Apply suggestions from code review 1134134e727 kubelet/cm/containermap: Improving test coverage 87f094c5e88 Replaces path.Operation with filepath.Operation (part 2) 5111bced373 fix test cases that may be incorrect 9a3c4aa2dc9 initial e2e tests for ValidatingAdmissionPolicy bd778449f4d versioning of CRI API 34d980e7709 i18n: Fix bug where package-level variables are not translated. ad2d23eb9ff Add test for cmd/kubeadm/app/phases/upgrade/compute.go fd4adba9acd add sig/storage label for pkg/controller/volume package PR 2557b35202f controller: add non-exist node test case 95fe0a158c2 Fix strategic merge patch $deleteFromPrimitiveList bug 76c8765bda5 ensure etc-host file permission is 644 whatever umask is 73883c71574 Remove default annotations from copied storage class f16f9100e57 cleanup: delete unused AuditDynamicOptions in apiserver 583ea17efd6 Add parameter to set SecurityContext for containers in tests Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2023-11-06 16:21:12 +00:00
Bruce Ashfield	2c49b125b5	docker-distribution: update to 2.8.3 ... Bumping distribution to version v2.8.3-2-gd607c6cc, which comprises the following commits: 6b9f48f3 docs: remove blank line a4fa6992 Add v2.8.3 release notes 5e6b1b5c Do not close HTTP request body in HTTP handler 29b00e8b digestset: deprecate package in favor of go-digest/digestset d1ab2430 [release/2.8] vendor: github.com/opencontainers/go-digest v1.0.0 3dda0677 deprecate reference package, migrate to github.com/distribution/reference 3c6f7788 update to go1.20.8 31f5cd48 Handle rand deprecations in go 1.20 29b8ba0b Update to go 1.20 3316b198 Update to golang 1.19.10 444d053e update golangci-lint to v1.52 b800af44 ignore SA1019: ac.(*accessController).rootCerts.Subjects has been deprecated 0a98a00d Ignore SA1019: SplitHostname is deprecated. 2ec0471b Dont parse errors as JSON unless Content-Type is set to JSON cb121c3f Set Content-Type header in registry client ReadFrom b57133cc referene: fix formatting of "deprecated" comment. 2c4bf1a6 replace deprecated function 110cb753 Enable build tags in 2.8 2d62a402 s3: add interface assertion 2548973b Enable Go build tags ab7178cc Pass BUILDTAGS argument to go build Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2023-11-06 16:21:12 +00:00
Bruce Ashfield	9e8a6af947	moby: update to v24.0.6-tip ... Bumping moby to version v24.0.6-36-gf9b8a35ac4, which comprises the following commits: 58c1c7b8dc Limit OOMScoreAdj when running in UserNS ("Rootful-in-Rootless") f87492689e update to go1.20.10 3715eaf078 update to go1.20.9 31f49bd685 Make one-shot stats faster 37796c7029 Revert "daemon/logger/etwlogs: rewrite to use go-winio/pkg/etw" 51dc5fb58f integration/internal/swarm: rename max/min as it collides with go1.21 builtin 4e11c149d1 pkg/tailfile: rename max/min as it collides with go1.21 builtin 0b97ecddb0 pkg/plugins: rename max/min as it collides with go1.21 builtin 710c748801 pkg/sysinfo: rename max/min as it collides with go1.21 builtin b340a777c0 pkg/archive: rename max/min as it collides with go1.21 builtin e996dffe56 daemon: rename max/min as it collides with go1.21 builtin 334719141c api/types/versions: rename max/min as it collides with go1.21 builtin 0702941de6 restartmanager: rename max/min as it collides with go1.21 builtin bed0c789dd daemon/cluster: format code with gofumpt 30fe6540a5 libcontainerd/windows: Don't reap on failure 1320e79bd8 libcontainer/windows: Remove unneeded var declaration a1ba69a82b libcontainer/windows: Fix process not being killed after stdio attach failure 1f3ea9841e update containerd binary to v1.7.6 58224457c3 ipam: Replace ChildSubnet with parent Subnet when its mask is bigger df983b7990 daemon: fix under what conditions container's mac-address is applied f014c349a0 update to go1.20.8 e2ab5f72eb 24.0: Update buildkit to fix source policy order 8216da20af more robust dockerd-rootless-setuptools.sh c35376c455 volume/local: Don't unmount, restore mounted status 5d4cc0b5b5 integration/liveRestore: Check volume content Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2023-11-06 16:21:12 +00:00
Bruce Ashfield	c431b46959	crun: update to v1.9.2 ... Bumping crun to version 1.9.2-12-g8af8ee2, which comprises the following commits: bdb95d6 features: export intelRDT status e2f9853 update: support update of Intel RDT 05bc600 libcrun: support update of Intel RDT 41ae2a2 libcrun: plug Intel RDT support 52d5faa libcrun: add Intel RDT support functions a7a1af9 container: fix early return 122f8ae linux: open mounts before setgroups if in a userns 64105d9 Use overlay and single nix derivation 35274d3 NEWS: tag 1.9.2 8f6b76f tests, podman: enable more tests 255268d Reset the inherited cpu affinity after moving to cgroup 745b6d9 tests, podman: run tests on overlay f42e279 tests, podman: get more information on the environment 379b17c tests, podman: avoid deprecated options bd251c9 rpm: do not special case krun man fe4e15d build: install krun.1 only if krun is enabled 0cabf0c rpm: fix manpage installation 67ee730 Packit: notify @containers/packit-build team on failed tasks 1f2769e linux: fix fallback mechanism in a userns a0b7e18 NEWS: tag 1.9.1 bb4e975 utils: partially rewrite improve error message patch 14afa8a utils: fix ignore ENOTSUP when chmod a symlink 0acb237 oci-validation,test: lock tap to @16.3.8 bbb1c87 tests: install device-mapper-devel 75dd83c podman, test: disable more tests failing in the CI 98db1d2 utils: improve error message for ensure_dir 57262a2 utils: ignore ENOTSUP when chmod a symlink 523eed3 linux: add new fallback when mount fails with EBUSY 2239c50 linux: teach MS_MOVE to do_mount c9a1a12 Add man page for krun 8645d1a Fix CentOS 7 Build by Checking if FSOPEN_CLOEXEC exists a538ac4 NEWS: tag 1.9 1e2f0c4 fix: correctly handle unknow signal string 41fa779 crun delete: call systemd's reset-failed 76b80ae fix random errors Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2023-11-06 16:21:12 +00:00
Bruce Ashfield	8933a2cf4c	cri-tools: update to v1.28.0-tip ... Bumping cri-tools to version v1.26.0-353-gf8733ddf, which comprises the following commits: f570bc09 Bump golang.org/x/net from 0.16.0 to 0.17.0 75c136c8 Validate sandbox and container metadata 4f3475f5 Bump github.com/onsi/ginkgo/v2 from 2.12.1 to 2.13.0 93bc1bf2 Bump golang.org/x/net from 0.15.0 to 0.16.0 57d7848c Switch to `github.com/distribution/reference` f61309ae Bump github.com/docker/distribution 6a1c7883 Bump github.com/onsi/gomega from 1.27.10 to 1.28.0 024268e7 Bump github.com/onsi/ginkgo/v2 from 2.12.0 to 2.12.1 04fb3af1 Verify required checkpoint parameters are set 544d4792 Remove duplicated import "k8s.io/cri-api/pkg/apis" dbd6c086 Enable staticcheck linter with SA1019 to find deprecated methods 06bb4c99 Use executor.StreamWithContext instead of deprecated executor.Stream 092eddc1 Address deprecation of Strings.Title 9059543c Remove unnecessary rand.Seed 52fcfd43 Address deprecated io/ioutils 833ab93c Address deprecated call cli.NewExitError of urfave/cli package 3e036cfa Bump github.com/onsi/ginkgo/v2 from 2.11.0 to 2.12.0 b84b1817 Bump actions/checkout from 3 to 4 4b5c3fe1 Update version compatibility between Kubernetes and cri-tools 7458ab35 Bump golang.org/x/net from 0.14.0 to 0.15.0 aa049113 Bump github.com/docker/docker 71beb1da Fix containerd tests Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2023-11-06 16:21:12 +00:00
Bruce Ashfield	82d2ac74cb	cri-o: update to 1.29.0 ... Bumping cri-o to version v1.27.0-662-gf8ccf314a, which comprises the following commits: 3b7ab35ff build(deps): bump crate-ci/typos from 1.16.17 to 1.16.18 f7d3228a7 Avoid an unnecessary c/storage lookup in ListImages 96e6aa9b5 Inline getImageCacheItem into ListImages e4f2b888d Split imageIsBeingPulled from ListImages c7188518d Simplify ListImages more 1cfe3c8bb Simplify appendCachedResult ae597ba16 Remove the "filter" parameter to ListImages e0750462f Turn ListImages(filter) into ImageStatus 50ce23e89 Simplify storageImageStatus a bit 2cb166512 Simplify ImageStatus a bit 1b0e82a22 Split storageImageStatus from ImageStatus ad8be44cc Simplify error handling in ImageStatus 203612b23 Move the ImageResult -> ImageStatusResponse conversion out of the loop 97329e4fa build(deps): bump ossf/scorecard-action from 2.2.0 to 2.3.0 013a0998c Update release-notes to v0.16.1 dc44bac35 Fix quoting issue in usage help text f22040da2 crio: add support for --imagestore 1d0e5d074 build(deps): bump crate-ci/typos from 1.16.15 to 1.16.17 bb4ab8110 Run GitHub actions in `update-nixpkgs-*` branches 45a6e70e7 Update nixpkgs 8ec74c5fa contrib/test: pin the latest release of runc 2505851e0 Update crun to 1.9.2 f3e53a058 test: Add test for image pinning behavior 12cabc651 internal/storage: compute Pinned field from recently loaded image 0fd641c6d build(deps): bump crate-ci/typos from 1.16.14 to 1.16.15 347194d3f build(deps): bump crate-ci/typos from 1.16.13 to 1.16.14 f532cbd89 Add nixpkgs update cron 8fa9260fc build(deps): bump crate-ci/typos from 1.16.12 to 1.16.13 72280f09c Update install.md removed spaces (markdown lint error) fe9ed4e3a storage: add support to split filesystem using imagestore 544db3209 RFC: Use RuntimeContainerMetadata for passing container data c9309ebb6 Add a layer name in one step 4f5a2e95c Microoptimize reference creation 3a77cc956 Eliminate the now unused imageAuthFile and isPauseImage parameters 61d86923c Simplify createContainerOrPodSandbox again a936e6861 Simplify CreatePodSandbox 39095cbb4 CHANGE: Simplify CreateContainer image lookup a09320639 Eliminate the clearly dead part of the just copy&pasted code a7f841955 Blindly copy the image handling code from createContainerOrPodSandbox into callers 6cabaaee1 Remove an imageID parameter to CreatePodSandbox 2b4652c52 Fix/Add error handling 8e1e1e672 update containers storage to 1.50.2 5d8538318 build(deps): bump DavidAnson/markdownlint-cli2-action from 12 to 13 6c1574efc Fix nix `dirty` build d951faa32 Make the release branch fast forward a cronjob 5dee42bcf build(deps): bump crate-ci/typos from 1.16.11 to 1.16.12 91b83b10c Fix release notes job 096f803a3 Bump golang dependencies 7d86c2e25 docs: fix CI failure f182fb411 Bump version to 1.29.0 51bae7a96 Remove the IsFullIdentifier check from Server.pullImage again 7eb248b1a Don't silently modify the caller's SystemContext 2d72e13e6 Fix a VERY misleading comment. 472d2c5f9 Remove an unnecessary check 23d7c35d5 Remove an unnecessary parse call 6f9a7173f Remove an unnecessary check 8c3e301da Optimize handling of full image IDs 5f45d232a Remove the ErrCannotParseImageID special case 335d4b0f3 Fix a VERY misleading comment b489507c9 Remove a completely unused ErrImageMultiplyTagged 98f171147 Make Server.pullImage responsible for rejecting image IDs e292f17c0 docs: Update the containers/image branch name 6005b03f2 contrib/test/ci: remove the redundant golang setup file 059a7b5f8 Add conmon-rs binary to bundle 4ac3aeef2 internal/storage: address unpredictable behavior of image names 61a0b7c79 config/server: add functions to check IDMap support in runtime 9ce778351 Remove golang-go from debian installation 3d450274e Pause container during checkpointing e069cc827 contrib/test: fix golang version extraction for CI 0774b644d build(deps): bump actions/checkout from 3 to 4 d6f4c7100 Adopters.md: fix linting issue d805d28fd Add new adopter 940de5009 build(deps): bump crate-ci/typos from 1.16.10 to 1.16.11 ac9c6fbfe Don't vendor main Kubernetes repo any more 4a1e406b0 Mention Roadmap GitHub Project in README.md bacc5e638 build(deps): bump crate-ci/typos from 1.16.9 to 1.16.10 9cbd8d555 build(deps): bump cachix/install-nix-action from 22 to 23 798a8d701 build(deps): bump actions/checkout from 3 to 4 758e3d8c3 cgmgr: reorder setting of sched_load_balance for pod cgroup 0e6b13e08 build(deps): bump crate-ci/typos from 1.16.8 to 1.16.9 ff434ba27 build(deps): bump github.com/containers/podman/v4 from 4.6.1 to 4.6.2 0002792fa build(deps): bump DavidAnson/markdownlint-cli2-action from 11 to 12 3aa18aff3 Switch to go 1.21 5b9f7f96d Add dependabot group for OTEL deps d7ad3fcbf build(deps): bump github.com/containers/buildah from 1.31.2 to 1.31.3 85c3d9db1 Bump conmon and crun dependencies 5ab387fe5 build(deps): bump github.com/containers/common from 0.55.3 to 0.55.4 a4f2d8071 server: remove deprecated functionality 28ae1f81a Fix bundle e2e tests a9afa0442 Add ppc64le binaries to release notes c8f8ca498 Add Kubernetes package test for static binary bundle 734e1538c build(deps): bump github.com/google/uuid from 1.3.0 to 1.3.1 873c0f420 Policy: Allow backport of independent features bebd421b5 Configure systemd install path based on OS ec4bbac12 feat(cmdrunner): add support for context 59f9b823d move shmSetup in server/sandbox to internal/factory/sandbox d1946b30a blockio: add blockio_reload option ce1cdfa54 main: create parent crio dir before creating clean.shutdown.supported Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2023-11-06 16:21:12 +00:00
Bruce Ashfield	022ec69e9b	containerd: update to 1.7.7 ... Bumping containerd to version v1.7.7-5-g5e21abb18, which comprises the following commits: d0a1fedb5 *: add runc-fp as runc wrapper to inject failpoint 04491240a containerd-shim-runc-v2: avoid potential deadlock in create handler 6982a0df5 containerd-shim-runc-v2: remove unnecessary `s.getContainer()` 0e2320398 Uncopypaste parsing of OCI Bundle spec file a34fa5681 Prepare release notes for v1.7.7 6ca0aebf0 Allow for images with artifacts to pull 7df492a95 remotes/docker: Fix MountedFrom prefixed with target repository 7779ce64e remotes: always try to establish tls connection when tls configured b3db314a5 Bump x/net to 0.13 a83c66813 Require plugins to succeed after registering readiness 171d76849 cri: call RegisterReadiness after NewCRIService 6013b5e03 cri: stop recommending disable_cgroup 3d27bc738 Handle unexpected shim kill events 4ffa3ed29 Build binaries with 1.21.1 5756f6064 [release/1.7] vendor: github.com/Microsoft/hcsshim v0.11.1 09633b539 deprecate logs package, but disable linter (for transitioning) cb201519f alias log package to github.com/containerd/log v0.1.0 a5024e6dd vendor: github.com/stretchr/testify v1.8.4 7bd976af3 vendor: github.com/sirupsen/logrus v1.9.3 3ca015e55 nri: update mock plugin handlers 4cd208c1f vendor: update github.com/containerd/nri@v0.4.0 8cd2d33c2 [release/1.7] remotes/docker: Add MountedFrom and Exists push status 3e09c65b2 Prepare release notes for v1.7.6 5ebf05d97 push: inherit distribution sources from parent d206896dd content: add InfoProvider interface 423693d7b [release/1.7] update to go1.20.8 c7a35ccdc Fix transfer service dependencies: 38d4e506d Invoke Stable ABI compatibility function in windows platform matcher ddffc7c9a Update hcsshim tag to v0.11.0 b449440a4 CRI: Support Linux usernames for !linux platforms Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2023-11-06 16:21:12 +00:00
Mingli Yu	5cec30aae4	umoci: Remove the buildpath issue ... Pass -trimpath to the build to fix the below build path issue: WARNING: umoci-v0.4.7+git-r0 do_package_qa: QA Issue: File /usr/sbin/umoci in package umoci contains reference to TMPDIR [buildpaths] Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2023-11-06 16:21:12 +00:00
Bruce Ashfield	01da1f2a29	buildah: update to 1.32.0 ... The new version has an internally stripped binary, so we inhibit the QA warning. Bumping buildah to version v1.31.0-159-g4f3d7b0b6, which comprises the following commits: 5151ccff5 .cirrus.yml: run tests relative to the release-1.32 branch 2326d4929 Tag v1.32.0 e90b3502b GetTmpDir is not using ImageCopyTmpdir correctly ccac7ca0b Run codespell on code 6be719454 Bump vendor containers/(common, storage, image) 9545744e8 Cirrus: Remove multi-arch buildah image builds 206cda149 fix(deps): update module github.com/containerd/containerd to v1.7.6 0191bc671 Split GetTempDir from internal/util 6e6827b27 Move most of internal/parse to internal/volumes 292b429f6 copier: remove libimage dependency via util package 4f3abf936 Add some docs for `build --cw`, `commit --cw`, and `mkcw` e89fac6c9 Add `buildah mkcw`, add `--cw` to `buildah commit` and `buildah build` cc619c28d Make sure that pathnames picked up from the environment are absolute 4ee5f020a fix(deps): update module github.com/cyphar/filepath-securejoin to v0.2.4 fd72bbee2 fix(deps): update module github.com/docker/docker to v24.0.6+incompatible 754568580 Don't try to look up names when committing images d5b02e551 fix(deps): update module golang.org/x/crypto to v0.13.0 3fc5274d3 docs: use valid github repo f94689199 fix(deps): update module golang.org/x/sys to v0.12.0 6ec6f046f vendor containers/common@12405381ff df1bc3834 push: --force-compression should be true with --compression-format 9c5cde533 Update module github.com/containerd/containerd to v1.7.5 3ebeaa2dd [skip-ci] Update tim-actions/commit-message-checker-with-regex action to v0.3.2 cc9f15f09 docs: add reference to oci-hooks 3454d5b29 Support passing of ULimits as -1 to mean max f330c77be GHA: Attempt to fix discussion_lock workflow 4942cc908 Fixing the owner of the storage.conf. f4e43f0e8 pkg/chrootuser: Ignore comments when parsing /etc/group on FreeBSD 2b57cef2b Use buildah repo rather then podman repo a8bbc9f5f GHA: Closed issue/PR comment-lock test 82069390f fix(deps): update module github.com/containers/storage to v1.49.0 4c4ff3128 chore(deps): update dependency containers/automation_images to v20230816 af3891258 Replace troff code with markdown in buildah-{copy,add}.1.md e997a966f [CI:BUILD] rpm: spdx compatible license field a3f2aa3c7 executor: build-arg warnings must honor global args f6fb75d9d fix(deps): update module github.com/containers/ocicrypt to v1.1.8 5643a7fa8 chroot: `setSeccomp` add support for `ArchPARISC(64)` and `ArchRISCV64` 8428dee36 make,cross: restore loong64 e3cd4d790 Clear CommonBuildOpts when loading Builder status d68d9a237 buildah/push/manifest-push: add support for --force-compression 3445a775a vendor: bump c/common to v0.55.1-0.20230811093040-524b4d5c12f9 2d6e43071 chore(deps): update dependency containers/automation_images to v20230809 065b95599 [CI:BUILD] RPM: fix buildtags 3964ca9d6 fix(deps): update module github.com/opencontainers/runc to v1.1.9 591b5390d chore(deps): update dependency ubuntu to v22 204c5a1ce chore(deps): update dependency containers/automation_images to v20230807 9ab3b526d [CI:BUILD] Packit: add fedora-eln targets ed2a501c9 [CI:BUILD] RPM: build docs with vendored go-md2man 5bdb8c70d packit: Build PRs into default packit COPRs fc7329d7c Update install.md f6c4ead1b Update install.md changes current Debian stable version name 2254ca208 fix(deps): update module golang.org/x/term to v0.11.0 248f5a2b3 fix(deps): update module golang.org/x/crypto to v0.12.0 ae36f6542 tests: fix layer-label tests f888b3d84 buildah: add --layer-label for setting labels on layers 239b2a877 Cirrus: container/rootless env. var. passthrough 65c1c9327 Cirrus: Remove duplicate env. var. definitions 978be7796 fix(deps): update github.com/containers/storage digest to c3da76f 62d405771 Add a missing .Close() call on an ImageSource e588986fa Create only a reference when that's all we need fe947ed9c Add a missing .Close() call on an ImageDestination 597d30880 CI:BUILD] RPM: define gobuild macro for rhel/centos stream b9ac8d5e0 manifest/push: add support for --add-compression d27a82356 manifest/inspect: add support for tls-verify and authfile 071f851da vendor: bump c/common to v0.55.1-0.20230727095721-647ed1d4d79a 512273587 vendor: bump c/image to v5.26.1-0.20230726142307-8c387a14f4ac 3d8616537 fix(deps): update module github.com/containerd/containerd to v1.7.3 c20d0164f fix(deps): update module github.com/onsi/gomega to v1.27.10 2e7dcc143 fix(deps): update module github.com/docker/docker to v24.0.5+incompatible 6a236937a fix(deps): update module github.com/containers/image/v5 to v5.26.1 d78f6c2a2 fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0 dbc71b7cc Update vendor of containers/(storage,image,common) 331fac670 fix(deps): update module github.com/opencontainers/runc to v1.1.8 9cc5d5e8c [CI:BUILD] Packit: remove pre-sync action 09a1cd698 fix(deps): update module github.com/containers/common to v0.55.2 11cec8523 [CI:BUILD] Packit: downstream task script needs GOPATH 70cb4c7e0 Vendor in containers/(common, image, storage) 173ac7dc9 fix(deps): update module golang.org/x/term to v0.10.0 8b84d9b8a [CI:BUILD] Packit: fix pre-sync action for downstream tasks 97b84029a contrib/buildahimage: set config correctly for rootless build user cba7b9fae fix(deps): update module github.com/opencontainers/image-spec to v1.1.0-rc4 e00845797 Bump to v1.32.0-dev f704a67a1 Update debian install instructions 4c72c25a2 pkg/overlay: add limited support for FreeBSD Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2023-11-06 16:21:12 +00:00
Patrick Wicki	7e17ee02a3	catatonit: update to version 0.2.0 ... Main change is the relicense from GPL-3 to GPL-2, which will allow catatonit (and hence podman) to be used in deployments where the license previously posed an issue. Contains the following commits: 7f0c9bb version: release catatonit 0.2.0 fe191ef license: switch to GPLv2-or-later Signed-off-by: Patrick Wicki <patrick.wicki@siemens.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2023-11-06 16:21:12 +00:00
Bruce Ashfield	51a017123d	k3s: update to v1.28.2 ... Bumping k3s to v1.28.2, which comprises the following commits: 6330a5b49c Update to v1.28.2 and go v1.20.8 (#8364) 550dd0578f Bump kine to v0.10.3 b3bb7e5a11 update channel for version v1.28 (#8305) 0d23cfe038 Add RWMutex to address controller cba9f0d142 Add new CLI flag to disable TLS SAN CN filtering 2cb7023660 Use already imported semver, bump kine f2d0c5409a Add check for support on cp nodes 51f1a5a0ab Review comments and fixes 42c2ac95e2 CLI + Backend for Secrets Encryption v3 e45a674457 Add new encryption test b967f92785 Replace os.Write with AtomicWrite function ced330c66a [v1.28] CLI Removal for v1.28.0 (#8203) 62db5fa27c Update to v1.28.1 (#8239) af50e1b096 Update to v1.28.0-k3s1 (#8199) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2023-11-06 16:21:12 +00:00
Chen Qi	827092c2ec	docker-compose: fix textrel QA issue ... Fix textrel QA issue like below: ERROR: QA Issue: docker-compose: ELF binary /usr/lib/docker/cli-plugins/ docker-compose has relocations in .text [textrel] The problem could be fixed by adding -buildmode=pie, as this option has already been in GOBUILDFLAGS except for mips and riscv32, let's make use of GOBUILDFLAGS. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2023-10-02 16:15:20 +00:00
Bruce Ashfield	77fc0a2613	podman: mark incompatible with mips ... Some of the (current) rdepends for skopeo are not compatible with mips. To make this restriction more obvious, we also mark skopeo itself incompatible with mips. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2023-09-28 01:25:29 +00:00