mirror of
git://git.yoctoproject.org/meta-virtualization.git
synced 2025-07-05 05:15:25 +02:00
master
1195 Commits
| Author | SHA1 | Message | Date | |
|---|---|---|---|---|
Bruce Ashfield
|
d04caa21f0 |
buildah: adapt SRC_URI to include destsuffix=${GO_SRCURI_DESTSUFFIX}
As of commit cc4ec43a2b657fb4c58429ab14f1edc2473c1327 [go: Drop fork of unpack code, mandate GO_SRCURI_DESTSUFFIX] we require this variable in our go recipes. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Bruce Ashfield
|
b78f5ac678 |
runc: adapt SRC_URI to include destsuffix=${GO_SRCURI_DESTSUFFIX}
As of commit cc4ec43a2b657fb4c58429ab14f1edc2473c1327 [go: Drop fork of unpack code, mandate GO_SRCURI_DESTSUFFIX] we require this variable in our go recipes. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Patrick Wicki
|
380eae7bdd |
podman: require catatonit
Alternatively, we could add it to RRECOMMENDS. But I would say, given its name, managing pods is part of podman's core functionality and that requires catatonit, which is currently only pulled in for the ptest: root@qemux86-64:~# podman pod create Error: building local pause image: finding pause binary: exec: "catatonit": executable file not found in $PATH Signed-off-by: Patrick Wicki <patrick.wicki@siemens.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Patrick Wicki
|
992253f871 |
podman: remove skopeo rdepends
Podman does not require skopeo to run. They are both independent tools. In distros like Debian, Fedora and Arch they don't depend on it either. Skopeo also seems to be used in some of podman's tests, so it makes sense to keep it around for the ptest. We do require skopeo's libdevmapper dependency, so include that directly. And inherit container-host to make sure the container configs are present on the device. Signed-off-by: Patrick Wicki <patrick.wicki@siemens.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Bruce Ashfield
|
4cea448064 |
runc-opencontainers: update to 1.1.12
Bumping runc to version v1.1.12-14-ge8bb71e1, which comprises the following commits:
6379b58d libcontainer: force apps to think fips is enabled/disabled for testing
265e7371 Vagrantfile.fedora: bump Fedora to 39
59056a02 silence security false positives from golang/net
452bf88e build: update libseccomp to v2.5.5
3fada6ec tests/int: fix flaky "runc run with tmpfs perm"
aae41a4b Fix integration tests failure when calling "ip"
82a8b979 update go version to 1.21 in cirrus ci
03271050 ci/gha/cross-i386: pin Go to 1.21
29d6d873 VERSION: back to development
51d5e946 VERSION: release 1.1.12
e9665f4d init: don't special-case logrus fds
683ad2ff libcontainer: mark all non-stdio fds O_CLOEXEC before spawning init
b6633f48 cgroup: plug leaks of /sys/fs/cgroup handle
284ba305 init: close internal fds before execve
fbe3eed1 setns init: do explicit lookup of execve argument early
0994249a init: verify after chdir that cwd is inside the container
506552a8 Fix File to Close
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
a03ff1cd0a |
containerd: update to v2.0.0-rc.1
Bumping containerd to version v2.0.0-rc.1-8-g0426e3c2e, which comprises the following commits:
c27bcdc56 cri: introspectRuntimeFeatures: fix nil panic
c5ba71d11 Makefile: update default PACKAGE to v2
094bafe2a apparmor: Allow confined runc to kill containers
e461a59ae fix migrateConfig for io.containerd.cri.v1.images
eb5a0c04b apparmor: add `signal (receive) peer=/usr/local/bin/rootlesskit,`
5e470e1ca Update HTTPFallback to handle tls handshake timeout
a37b451cd build(deps): bump tags.cncf.io/container-device-interface
888fd315f Update CNI to v1.2.0
13e6b2b68 update to go1.21.9, go1.22.2
42e4de9c5 Prepare release notes for v2.0.0-rc.1
4a31bd606 chore: use errors.New to replace fmt.Errorf with no parameters will much better
a6a82c102 Update hcsshim to v0.12.3
7e60d5a07 Account for ipv4 vs ipv6 localhost in windows port forwarding
a153b2cd3 mod: bump github.com/containerd/nri@v0.6.1
77512e2d7 build(deps): bump the golang-x group with 3 updates
c8d9eba7c build(deps): bump github.com/klauspost/compress from 1.17.7 to 1.17.8
1c0f73aa0 build(deps): bump github.com/pelletier/go-toml/v2 from 2.2.0 to 2.2.1
32caaee48 Snapshotters: Export the root path
b82ced57f fix: close profile
c7ea06a69 fix default working directory `hostProcess`
1040c7b98 build(deps): bump the otel group with 8 updates
b50e9eae4 Refactor spots to make use of sys.IgnoringEintr
3ea69db8e Add helper to ignore eintr
1b6222418 Bump tags.cncf.io/container-device-interface to v0.7.1
ad584ebec Replace direct waitid syscall with unix.Waitid
7c5078459 Remove empty default tls configuration in ctr
b6e361694 cri: add pause image name to annotations
0ec14fdf8 core/diff/apply: use unix.Syncfs
739659a4b build(deps): bump google.golang.org/grpc from 1.62.1 to 1.63.2
433279438 Transfer: Registry: Enable plain HTTP
88b4cc659 address review comments
f20c49311 Update tracing documentation to add details about manual instrumentation
63d5573a3 remote: Fix HTTPFallback fails when pushing manifest
2474a99c3 Add IsNotFound case to ListPodSandboxStats
3830f8167 fix(cri): fix unexpected order of mounts since go 1.19
cbb644182 build(deps): bump github.com/Microsoft/hcsshim from 0.12.0 to 0.12.2
362fcf2d2 build(deps): bump github.com/distribution/reference from 0.5.0 to 0.6.0
5b6ae0f79 Use different containerd sock address in tests
ab2c569fb ctr: fix parsing mount options
b97ef91fb Change port forwarding on windows
ea681afba docs: fix typo
6d00c3ada runc-shim: only defer init process exits
da4ca4949 build(deps): bump github.com/pelletier/go-toml/v2 from 2.1.1 to 2.2.0
dd72fb3b2 build(deps): bump github.com/intel/goresctrl from 0.6.0 to 0.7.0
e41e9e11b transfer: Platform matcher should match multiple platforms
d0d35f0d0 core/images/archive: normalizeReference: remove outdated TODO
26158609b pkg/seutil: move to internal/cri
33732bc13 pkg/systemd: move to internal/cri
0d0850af1 Prepare v2.0.0-rc.0
f5abb63c0 Update mailmap
30813f646 build(deps): bump github.com/containernetworking/plugins
0fafc0c50 build(deps): bump github.com/checkpoint-restore/go-criu/v7
7c1fca096 Update migration script based on usage
45e425ccc vendor: github.com/golang/protobuf v1.5.4
4aa6fedd5 CRI: postpone removal of deprecated config properties
34c545824 Automatically decompress archives for transfer service import
df26c189a Clean cri options and useless parms
88421068f Fix invalid event filter in podsandbox
357c59b79 Update github actions ci to run on forks
4b719cc4b build(deps): bump google.golang.org/grpc from 1.62.0 to 1.62.1
10c7f03b3 build(deps): bump google.golang.org/protobuf from 1.32.0 to 1.33.0
21d3fedf4 build(deps): bump softprops/action-gh-release from 1 to 2
228aa42a6 build(deps): bump the otel group with 8 updates
47d13767f Clean typos in plugins.
7ac9d6909 Use the Go toolchain in CI matrix to build binaries
6a96e4501 Move shim package to pkg
f25770e48 Wire through CRI ContainerCheckpoint RPC
7ecdebff9 update to go 1.21.8, 1.22.1
723306d0e Disable OOM set score unpriv test temporarily
994fdd74e Don't create new scratch VHD per image for CimFS
016b588a9 build(deps): bump github.com/stretchr/testify from 1.8.4 to 1.9.0
d9409c461 Update hcsshim to v0.12.0
00d714e90 build(deps): bump the golang-x group with 2 updates
ab4de3e4c build(deps): bump azure/login from 1 to 2
713dd8f8d go.mod: k8s.io/cri-api v0.30.0-alpha.3
d9b9160ae mv internal/testutil pkg/testutil
752917c0f build(deps): bump github.com/prometheus/client_golang
7a3b7fba5 Transfer: Registry: Enable to use registry configuration diretory
1bf781d8e Cleanup introspection interface
5bd204109 Remove grpc from Client connection interface
347346e3c Add ttrpc support to content proxy
9104e6a24 Add events proxy interface
892dc54bd runc-shim: process exec exits before init
9128ee0a9 Move nri packages to plugin and internal
d0da3d1ca sandbox: make event monitor in CRI independent
17ea3959b adds mediatype to oci index record
c5ef8a2c2 fix(docs): fix duplicate instructions for windows installation
87e8e9c7f Add Go client stability in releases for 2.0.
72f21833b Move events to plugins and core
caa9e2075 add k8s 1.29 and 1.30preview to support table
154ed26a7 vendor: go.etcd.io/bbolt v1.3.9
6d1dfe55f cri: ensure the pause image loaded in older versions is pinned
2884b318f build(deps): bump github.com/klauspost/compress from 1.17.6 to 1.17.7
bd44df8a1 refactor code - clean switch and if statements
a60e52f58 sandbox: add struct tags for PinnedImages
a0b73ae11 sandbox: optimize the lock in PodSandbox
0f1d27412 sandbox: add methods to sandboxService
a2768f19d plugins/sandbox: move local plugin into services
d651cb743 mediatypes: support zstd compression
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
e7a13cbbc3 |
containerd: consolidate to "containerd"
We no longer need the split between container-docker and containerd-opencontainers and dependent layers have been given over a year to adapt. We do keep the provides and rprovides around for a bit longer, but those will also be removed in the future. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Changqing Li
|
e9bb0a338f |
kubernetes: Pass -trimpath to build
Fix following QA WARNING: WARNING: QA Issue: File /usr/bin/kubectl in package kubectl contains reference to TMPDIR [buildpaths] WARNING: QA Issue: File /usr/bin/kubeadm in package kubeadm contains reference to TMPDIR [buildpaths] WARNING: QA Issue: File /usr/bin/kube-proxy in package kube-proxy contains reference to TMPDIR [buildpaths] WARNING: QA Issue: File /usr/bin/kube-apiserver in package kubernetes-misc contains reference to TMPDIR WARNING: QA Issue: File /usr/bin/kubelet in package kubelet contains reference to TMPDIR [buildpaths] Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Changqing Li
|
e46214eea8 |
containerd-opencontainers: fix wrong version display
* Update containerd to v2 to fix following containerd version: containerd github.com/containerd/containerd/v2 2.0.0-beta.0+unknown it should be like: containerd github.com/containerd/containerd/v2 v2.0.0-beta.2-204-gb1624c362.m b1624c3628954e769dd50783b63823040b2db38c.m * Remove CONTAINERD_PKG, it is not used * Update default PACKAGE in Makefile to v2 Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Changqing Li
|
b50d4899fa |
kubernetes: skip textrel QA warning
-buildmode=pie need cgo is enabled, but for kubernetes, some build targets are static, and cgo is disable in build script directly, refer [1]. If we add -buildmode=pie by default, will cause these static target build failed with error "-buildmode=pie requires external (cgo) linking, but cgo is not enabled". This warning is acceptable, so just skip it. [1] https://github.com/kubernetes/kubernetes/blob/master/hack/lib/golang.sh#L811 Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Theodore A. Roth
|
74455bb615 |
podman: Fix missing brace in FILES
When converting to use {systemd_user_unitdir}, the closing brace was
omitted
Signed-off-by: Theodore A. Roth <theodore_roth@trimble.com>
Signed-off-by: Theodore A. Roth <troth@openavr.org>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Lukasz Czechowski
|
0b5cf63796 |
podman: fix location of user systemd service units
The value of USERSYSTEMDDIR is currently set to
${systemd_unitdir}/user, which might not be present in user unit
search path.
Use dedicated bitbake variable ${systemd_user_unitdir} instead.
Signed-off-by: Lukasz Czechowski <lukasz.czechowski@thaumatec.com>
Cc: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Xiangyu Chen
|
8410846c0b |
lxc: fix broken test cases
Upstream dropped cgroup handling in lxc-test-usernic lxc-test-unpriv and lxc-test-apparmor-mount to fix the broken cases. Signed-off-by: Xiangyu Chen <xiangyu.chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Bruce Ashfield
|
da840d8845 |
runc-docker: update to 1.1.12
Bumping runc to version v1.1.12-2-ga9833ff3, which comprises the following commits:
29d6d873 VERSION: back to development
51d5e946 VERSION: release 1.1.12
e9665f4d init: don't special-case logrus fds
683ad2ff libcontainer: mark all non-stdio fds O_CLOEXEC before spawning init
b6633f48 cgroup: plug leaks of /sys/fs/cgroup handle
284ba305 init: close internal fds before execve
fbe3eed1 setns init: do explicit lookup of execve argument early
0994249a init: verify after chdir that cwd is inside the container
506552a8 Fix File to Close
d0b1a374 keyring: update AkihiroSuda key expiry
d561e5da keyring: update cyphar@cyphar.com key expiry
7887736f VERSION: back to development
4bccb38c VERSION: release 1.1.11
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
b2777a4389 |
podman: update to 5.0.1
Bumping libpod to version v5.0.1-4-gbb81e85a4, which comprises the following commits:
63f6a78eb Packit: Enable CentOS Stream 10 update job
e22c9dd65 Bump to v5.0.2-dev
946d055df Bump to v5.0.1
131f3d089 Add release notes for v5.0.1
2967eb9a2 [v5.0] libpod: restart always reconfigure the netns
92b3cda79 [v5.0] use new c/common pasta2 setup logic to fix dns
b1dbd477e [v5.0] Bump Buildah to v1.35.3
ebe3f395b hyperv: error if not admin
4b54d1824 libpod: don't warn about cgroupsv1 on FreeBSD
312313872 Use built-in ssh impl for all non-pty operations
70fe2a1c9 fix remote build isolation on client side
bfc63cc32 fix remote build isolation when server runs as root
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
5853fc67da |
docker-compose: update to v2.26.0
Bumping compose to version v2.24.7-21-g33712277, which comprises the following commits:
33712277 chore(desktop): revised feature detection for file shares
e9dc8201 Add Navigation Menu to compose up
39504607 Add support for volume Subpath option
3b541b07 Bump docker v26.0.0
25671ae6 introduce config --variables to list compose model variables
0191e69d Fix docs on default build image name
897d239f Bump compose-go to v2.0.2
c5a760ce add support for annotations
26f687a1 Revert "Bump compose-go to v2.0.1"
ad414613 Bump compose-go to v2.0.1
db4ed895 feat(desktop): synchronized file share integration (#11614)
1b5fa3b9 feat(experiments): add experimental feature state (#11633)
4f97edf3 reduce timeout of the Otel tracing command
bc5fc6ba fix `compose config --format json`
f937e42a Bump compose-go v2.0.0
f46ca459 services shell completion bugfix
b2d4c1b8 fix TestBuildPlatformsWithCorrectBuildxConfig
5a1ba0ef only use ToModel when --no-interpolate is set
17d4229e feat(desktop): add Docker Desktop detection and client skeleton (#11593)
4efb8970 chore(deps): upgrade go to 1.21.8 (#11578)
f35449a6 ci(deps): bump moby/moby & docker/cli to v25.0.4 (#11566)
34b11c4f Add test summary for test jobs in ci
c525373a make code simpler
e99b8ace avoid duplicated "xx exited with code 0" message
8ab8df86 introduce --watch
de178267 move code into small functions for better readability
1680f9a8 restore support for `config --no-interpolate`
5c4f3370 remove docker cli step in ci.yml
58ec0e9f get log to manage `attach`
349d9f34 bump compose-go to version v2.0.0-rc.8
697a48af use an dedicated compose file --quiet-pull e2e test
9b0d1ffc Add a fallback check of Watch pid on Windows False positives were detected when checking the previous watch process state
d10a179f add support of QuietOption to create command
94246f3c pass QuietOption when starting dependencies from run command
9630cc58 when ran with ANSI disabled, force progress=plain
6c175548 Issue-11374: Modified compose up command to respect COMPOSE_REMOVE_ORPHANS environment variable
9b0e3d53 ci: bump engine version to `25.0.3`
de3da829 sort containers to optimize scale down
c79aabde discard stdout for laaarge log test
0aad3221 use listeners to collect include metrics
b1c06770 docs: update cli reference link
e330f590 docs: unify no trailing dots in docstrings and help (#11301)
16c8099c Use listener for file metadata
07bda596 fix deadlock collecting large logs
d2034029 chore(watch): remove old `docker cp` implementation
894ab41c ci(deps): bump docker/cli to v25.0.3 (#11481)
3ba66453 pass All option to backend api.Service when length statuses is not equal to zero
2eca9313 Add OTEL specs: build, depends_on, capabilities (gpu/tpu)
1fea7c1b build(deps): bump github.com/opencontainers/image-spec
acf2ffb0 feat(tracing): add project hash attr
0d48a93f chore(load): ensure context passed to load
aaa7ef6d Include all networks in ContainerCreate call if API >= 1.44
6ef55a53 bump compose-go to v2.0.0-rc.4
a553db33 CI: docker engine version matrix
05bec55d build(deps): bump github.com/docker/cli
8fdd45cd chore(e2e): fix flaky test & standalone behavior (#11382)
a0954dc5 ci(deps): replace buildkit to fix fsutil issues on Windows (#11426)
05820018 Fix canonical container name
da1a34a8 don't check external network existence when swarm is enabled
8b023ae0 build(deps): bump github.com/docker/cli
8c80297c build(deps): bump github.com/docker/docker
7e991515 Add support for storage_opt
d9791156 ci(deps): update DOCKER_CLI_VERSION to v25.0.1
71bebc16 bump compose-go to v2.0.0-rc.3 which fixes multiple compose files merge issues
25d16d1f build(deps): bump actions/upload-artifact from v3 to v4
ab97dcc7 update MAINTAINERS file
a8bd3b7a Fix load .env from project directory when project file is set by COMPOSE_FILE
811364b4 use a custom version of fsutils that fixes a bug on Windows causing all Compose builds to fail
1551fcb4 introduce stopAndRemoveContainer to share logic scaling down
eb4249ec bump compose-go to v2.0.0-rc.2
1e8241f6 ci(deps): upgrade to Moby v25.0.0 GA (#11381)
053a5604 docs: update link to use canonical URL for command
34ba0bc9 go.mod: github.com/moby/sys/mountinfo v0.7.1
56e38260 go.mod: github.com/google/uuid v1.5.0
c28bf522 bump version of compose-go to v2.0.0-rc.1
51c113b6 build(deps): bump github.com/docker/docker
7cdc7e15 remove watch command from the alpha command
fb026543 build(deps): bump github.com/docker/cli
d688d3bf fix(tracing): batch span exports to prevent blocking
898e1b60 signals/utils: always handle received signals
f414bf78 fix engine version require to use healthcheck.start_interval
3c4593f2 Stop the resource timer after last expected event
d2562029 build(deps): bump github.com/containerd/containerd from 1.7.11 to 1.7.12 (#11347)
26ed1051 build(deps): bump github.com/docker/docker from 25.0.0-rc.1+incompatible to 25.0.0-rc.2+incompatible (#11349)
191c10b9 build(deps): bump github.com/docker/cli from 25.0.0-rc.1+incompatible to 25.0.0-rc.2+incompatible (#11348)
5d05df6e update compose-go to version using immutable Project functions
b621948c feat(cli): report more useful User-Agent on engine API requests
f5c53c2d ci(deps): bump golangci-lint to v1.55.2
1cfeda71 ci(deps): bump golang to version v1.21.6 (#11331)
2bf2b22f Add source policies for build
575f2ed7 watch: remove requirements for tar binary and for sync target to be rw
5f4b22ed make docs
dcf6bd77 make mocks
80823b77 go ahead and wire up sig-proxy and no-stdin for consistency with underlying docker container attach
2c16e16d docker compose attach via RunAttach (from docker/cli's docker container attach)
d1be9caf build(deps): bump golang.org/x/sys from 0.15.0 to 0.16.0
c3c0cf3d build(deps): bump golang.org/x/sync from 0.5.0 to 0.6.0 (#11317)
27987415 gha: update DOCKER_CLI_VERSION to v24.0.7
566d2207 go.mod: github.com/docker/cli v25.0.0-rc.1
d09c39dc go.mod: github.com/docker/docker v25.0.0-rc.1
a1d36379 go.mod: github.com/klauspost/compress v1.17.4
0c55998b go.mod: github.com/felixge/httpsnoop v1.0.4
2f6ec9b7 go.mod: github.com/docker/go-connections v0.5.0
dcbf005f up: gracefully teardown when command ctx cancelled
e105f165 introduce `stats` command
ce5a0c65 Fix cancellable context detection in `AdaptCmd`
f58f23a6 remove ServiceProxy which was introduced for archived compose-cli
9aa52326 go.mod: docker/docker and docker/cli v25.0.0-beta.3
ccd83b8a go.mod: github.com/gorilla/mux v1.8.1
9e57850c go.mod: github.com/docker/distribution v2.8.3
35d3a7ca go.mod: golang.org/x/crypto v0.17.0
6c998602 go.mod: golang.org/x/crypto v0.16.0
402f3688 go.mod: golang.org/x/text v0.14.0
30dd3e66 go.mod: golang.org/x/term v0.15.0
0c4fa017 Bump compose-go v2-beta.2
b12e23b0 build(deps): bump go.uber.org/mock from 0.3.0 to 0.4.0
17da54da introduce build --with-dependencies
1baa4f44 up: fix write/close race condition in logPrinter
7781b7c9 deps: update docker/cli to fix go version selection issue
785835b1 Add support for endpoint-specific MAC address
e4fb5545 build do not require environment to be reslved
74cc0912 github.com/golang/mock is deprecated
5e61c62e collect services to build using WithServices
fb3868ff add support for start_interval
bdbda790 include disabled services for shell completion
ae4fd791 bump golang to version 1.21.5
26aca867 avoid use of service.Name when iterating on project.Services
138facea project.Services is a map
cda04f28 adopt compose-go/v2
85a1aec1 regen docs
9c29d223 use custom config type for OCI v1.0
df6fe59f tweak help message on oci version flag
07df9cc4 fix typo
7c8ff36d move around OCI logic, auto fallback/retry 1.1 -> 1.0
111ad3b0 fix(publish): add OCI 1.0 fallback support for AWS ECR
8026d0e2 adopt container.RestartPolicy*
df1533a1 [lint] don't use deprecated types
8639fbae go mod tidy
56e2ad9e update to v1.25 for RunAttach
ce1ddb6c fix combination of --pull always --no-build
c5824702 build(deps): bump golang.org/x/sys from 0.14.0 to 0.15.0
1f148244 send out a cancel event on SIGINT/SIGTERM
9faef4ae Update README.md to use standard compose.yaml file name
59f11ecb Fix configs are mounted under /<id>
750553c8 introduce compose logs --index to select a replica container
8c964f5a Update E2E test
90ca13b7 Fix E2E test to have index in the correct position
f9946127 Fix docs
ddda59a1 Add index option to compose logs command
e981c358 Add failing test
16c4241c log we don't expose service ports when --verbose
9025d63a bump ddev
a1de0b96 Restore `Project` is ps json output
caa0cbbc Introduce ps --orphans so user can include/exclude services not declared by project
29e9fdba let contributor know we might close unanswered issues
c665c53c bump buildx to v0.12.0 and adapt code to changes
a39cf75e build(deps): bump github.com/compose-spec/compose-go
46ba9c99 build(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.0
5c5d30c6 build(deps): bump github.com/docker/cli
36fa8d4e build(deps): bump github.com/docker/docker
2384635e build(deps): bump github.com/moby/buildkit from 0.12.2 to 0.12.3
2ba5e4c1 in watch mode force pull policy to build for services with both build and develop attributes This default behaviour will force a rebuild of the service images at watch process startup and be sure containers will be in sync with the local source code
b1a26dac Assume /src/pkg/compose/testdata absolute workingdir to make tests reproducible
5e77ae92 avoir use of []types.ServiceConfig
f5572201 identify services to build and don't display 'building' if none
8e1b3236 fix --remove-orphans not to consider disabled services as orphaned
7cb1f8ba introduce RuntimeVersion for code to check container runtime supports required features
cb01186c push also consider build.tags
9c4efbdd Strip project prefix from docker-compose up output
8ea7c9e0 Make it context aware and add test skipping options
c1694360 render quiet after filtering applied
254a94b0 bump golang to version 1.21.4
cf608fa9 bump compose-go to v1.20.1
426377a4 reject compose file using `secrets|configs.driver or template_driver`
493f6c80 skips flaky e2e tests on watch and attach
646a8fc0 fix docker/compose#11170 add newline in cmd/compose/build.go fmt.Fprint
2945532f fix --pull documentation
e5cd265a improve watch configuration logging Add action associated to each managed path
d646d757 lint
71237ef6 do not resolve cache dir until remote resource is in use
0d905a89 add a copyright notice with original author
b847c7f5 implement runtime file selection
5e3d8f67 re-implement cache folder detection
67279088 introduce --resolve-image-digests for publish to seal service images by digest
4cd61957 fix build
0d4cbbdb fix
9631a49d ENGDOCS-1764
328ca3f2 add docs upstream validation workflow
e1bbfc63 build(deps): bump go.uber.org/goleak from 1.2.1 to 1.3.0
616bba0a linter errors fixed
ee6e3c2a NetworkList to NetworkInspect for ID search
c7e31a3c Squashing feature branch commits in order to add signoff message.
704a9fd3 Use project.ServiceNames() if no service specified in hash
d9e0e42d Add branch configuration for pull_request trigger
c48e3c4a Initial codeql.yml commit
dd0803db fix SIGTERM support to stop/kill stack
39008c53 align with OCI artifact best practices
6c345b37 refactor(cmd/compose/run): remove redundant `len` check
1ffa194e fail start if depependency is missing
b9298101 check that the pull policy provided is a valid one or is not missing when --pull is used
3d0207eb remove uncessary return value of pullComposeFiles function
16a7c209 enable profile when down is ran with explicit service names
818bc3c3 add sync+restart action to watch attribute
38bc6d5d build(deps): bump github.com/containerd/containerd from 1.7.6 to 1.7.7
0b6ce6ee build(deps): bump github.com/google/go-cmp from 0.5.9 to 0.6.0
ae16bbbf build(deps): bump google.golang.org/grpc from 1.58.2 to 1.59.0
d13ad1f9 build(deps): bump golang.org/x/sync from 0.3.0 to 0.4.0
9b4d577c remove refrecence docs generation
14b43c1a remove cucumber tests as we haven't added new ones for a while
9dd081b9 add support of COMPOSE_ENV_FILES env variable to pass a list of env files
2c0b0232 add dry-run support for publish command
599e4b24 extract method to reduce cyclomatic complexity
fe8c2780 warn user remote resource is disabled
a345515f Don't delete dependent services
8967df7a Apply platform before hashing
4f694919 deps: remove deprecated github.com/pkg/errors
6ecab957 Include image name in error message
12e0ac89 pkg/compose/publish: use empty config descriptor mediaType
a6b7d785 pkg/remote/oci: check artifactType instead of config.mediaType
991901f2 pkg/remote/oci: refer to the manifest as manifest
2d971fc9 update the watch warning message when no services with a develop section
78f33619 ci: enable verbose output for e2e tests (#11045)
44d21280 truncate command by default, introduce --no-trunc flag to get the full command
ff2ff18c build(deps): bump google.golang.org/grpc from 1.58.1 to 1.58.2
ab81db5b config --xx don't need `env_file` being parsed
61c8be11 remove --timeout=0 flag to cleanup function of watch e2e test compose down command need the watch process to be killed to succeed
6be5f300 move watch from alpha to main command
c34c306c TestWatch to use new `develop` section
5ca35c88 implement publish
805541be watch: use official `develop` section (#11026)
8f489d6d build(deps): bump github.com/opencontainers/image-spec
9ea8fbc6 build(deps): bump github.com/moby/buildkit from 0.12.1 to 0.12.2
76f150e4 build(deps): bump gotest.tools/v3 from 3.5.0 to 3.5.1
f447c809 build(deps): bump google.golang.org/grpc from 1.58.0 to 1.58.1
4587d4ba build(deps): bump github.com/containerd/containerd from 1.7.3 to 1.7.6
a697a069 introduce pull --missing flag to only pull images not present in cache
8af49ff3 resolve service reference into container based on observed state
f6e31dbc don't rely on depends_on to resolve volume_from, better use observed state
6d5eb6fd update to go1.21.1
9d7e0ad6 correct scale error messages formatting
1a98a70b add scale command
19bbb12f ci: tweak restricted imports in linter (#10992)
7a134578 deps: upgrade Moby to v24.0.6 and gRPC to v1.58.0 (#10991)
13115468 cli: fix `--build` flag for `create` (#10982)
e1aa4f77 otel: add args & flags to cli traces (#10974)
d7b0b2bd watch: build & launch the project at start (#10957)
e0f39ebb pull OCI remote resource
c9d54f09 introduce publish (alpha) command
52e54ef9 doc: updated README.md to remove broken link
f4f2e934 migrate to github.com/distribution/reference
32c3d0a3 Enable service explicitly requested to be restarted
1fdbcb62 build: pass BuildOptions around explicitly & fix multi-platform issues
407a0d5b up: fix various race/deadlock conditions on exit (#10934)
8caa6f1f pkg/api: replace uuid for basic random id
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
fb2d44b8a0 |
podman: add new kernel module rrecommends
Testing podman + netavark without kernel-modules installed in the image shows some are missing from the rrecomends. It could be argued that they belong in netavark, but since podman + netavark are almost always used together, we group them here. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Bruce Ashfield
|
081ef3c19c |
podman: update to 5.0.0
Tested with cni:
root@qemux86-64:~# podman version
Client: Podman Engine
Version: 5.0.1-dev
API Version: 5.0.1-dev
Go Version: go1.22.0
Git Commit: 177ea856f579914e0047655f32eb4f9fbc3ddbc4-dirty
Built: Thu Mar 21 17:59:57 2024
OS/Arch: linux/amd64
root@qemux86-64:~# rpm -qa | grep cni
cni-v1.2.0+rc0+gitb62753aa2bfa365c1ceaff6f25774a8047c896b50+b62753aa2b_b6a0e0bc96-r0.core2_64
root@qemux86-64:~# rpm -qa | grep neta
Tested with netavark:
root@qemux86-64:~# podman version
Client: Podman Engine
Version: 5.0.1-dev
API Version: 5.0.1-dev
Go Version: go1.22.0
Git Commit: 177ea856f579914e0047655f32eb4f9fbc3ddbc4-dirty
Built: Thu Mar 21 17:59:57 2024
OS/Arch: linux/amd64
root@qemux86-64:~# rpm -qa | grep netavark
netavark-1.10.3-r0.core2_64
Bumping libpod to version v5.0.0-4-g177ea856f, which comprises the following commits:
bfc63cc32 fix remote build isolation when server runs as root
f32338dfc bump version to v5.0.1-dev
e71ec6f1d New release: v5.0.0
6b93d9e11 Update RELEASE_NOTES.md with CVE-2024-1753
eb2b16d6d [v5.0] Bump Buildah to v1.35.1
43b9ea8b9 Adjust to the standard location of gvforwarder used in new images
4a84f39b3 Switch to 5.x WSL machine os stream using new automation
a03de4c14 rpm: use macro supported vendoring
069439820 Bump to v5.0.0-dev
f8888a13b Bump to v5.0.0-RC7
2e387df07 Add release notes for v5.0.0-rc7
d36ce9c2b fix invalid HTTP header values when hijacking a connection
8891d592b Use faster gzip for compression for 3x speedup for sending large contexts to remote
59512272b pkg/machine: make checkExclusiveActiveVM race free
51eee609c pkg/machine/wsl: remove unused CheckExclusiveActiveVM()
412648207 pkg/machine: CheckExclusiveActiveVM should also check for starting
1ca93f3fb pkg/machine: refresh config after we hold lock
71320df8e rpm: update containers-common dep on f40+
e58cb97de Change API socket to be machine name isolated
dbf38779b Makefile: drop tests-included from validate target
0fdd83173 Add release notes for v5.0.0
d7bc7b7b4 do not require policy.json
82597144b Machine decompress.go refactoring follow-up
abaa179aa Add target win-gvproxy in winmake.ps1
4c5d26f6f Add final machine endpoint
068ddfd19 update API doc version to 5.0.0
f2af295e4 Bump to 5.0.0-dev
d26113ca8 Bump to 5.0.0-rc6
52ed774c2 docs: generate-systemd: add clarification statement
3d6758a61 docs: quadlet: improve docs on root/rootless dirs
885dd2add [CI:DOCS] performance: fix URL and kernel version requirement
e6ac569a1 [CI:DOCS] Remove outdated references
364813da6 Add note for RHEL 8.5
e220d1ce6 Update module gopkg.in/go-jose/go-jose.v2 to v2.6.3 [SECURITY]
f91b8e77b Update module github.com/go-jose/go-jose/v3 to v3.0.3 [SECURITY]
9b21a5b79 Bump to v5.0.0-dev
bbad09bb0 Bump to v5.0.0-rc5
432f4fbf9 Fix Mac CI
d54a37399 Complete policy.json inclusion
b234bb55e Bump Buildah to v1.35.0
5d3a19f8d podman compose: enable machine socket connection
6f4ee16d9 [CI:DOCS] Add farm command to commands list
25f3a8ce7 podman machine start/stop do not write config unlocked
75fa38d52 [CI:BUILD] Build universal Podman binary for Mac installer
7a7591492 podman machine init: do not write config unlocked
7bfe5e700 Fail on failures to close the file descriptors, and especially the SparseWriter
5e0b7e54c Avoid reliance on fs.ErrClosed in SparseWriter users
4c6505be5 Fix the logic for detecting an unexpected close error
81906081e vendor libhvee-0.7.0
3c9c5be7d podman machine set: change options only locked
a65b546c6 Remove copySparseFile
2ba3a2d56 pkg/machine: fix relative DefaultPolicyJSONPath
724c5a06b Don't read full VM File before decompressing
ff81cf7c7 [CI:DOCS] Fix windows installer action
4d2fc293c machine: make more use of strongunits
92b67a69a Fix wrong units size return
79012795a fix(deps): update github.com/containers/libhvee digest to 7cee23c
d6d260174 [CI:DOCS] Migrate podman container image
a349f8d10 fix(deps): update module google.golang.org/protobuf to v1.33.0
39851a0b9 CI: try to fix more flakes
835cfbc05 [CI:BUILD] rpm: Put the podmansh(1) manual in the podmansh sub-package
945995be1 e2e: fix potential race in file-locks test
02403c2e6 Makefile: podman should have correct selinux label
9ee96a956 properly implement pull-error event status
155cd463d fix(deps): update module golang.org/x/tools to v0.19.0
6272abbbb Resurrect auto-port reassignment, but for all providers
ef7727238 Refactor env dir and port functions into new leaf pkgs
eabf0acfa fix(deps): update module golang.org/x/net to v0.22.0
3b72f9178 Revert "Expose as-tested Mac/Windows repository state"
24516f3ef fix(deps): update module golang.org/x/term to v0.18.0
e8bf9a323 Update podman-for-windows.md
8c9222848 fix(deps): update github.com/containers/libhvee digest to 0ff33af
e09444327 machine init: print output to improve UX
530782e11 logformatter: fixes for Macintosh
ebce0e71d test/e2e: check for stderr errors in cleanup()
ef6d38752 Bump to FreeBSD 13.3 (13.2 vanished)
fc4e16366 Bump to v5.0.0-dev
bce14b1e6 fix(deps): update module github.com/stretchr/testify to v1.9.0
cfc5b8e0f Bump to v5.0.0-RC4
185981fa5 Copy past golang/expansion form ks8.io/kubernetes
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
3fbc1ae7ca |
podman: conditionally add cni build tag
We should ensure that cni is built as part of podman if that's the configured virtual runtime. Although cni is not a primary networking backend for podman, this also allows it to be skipped if netavark is used. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Bruce Ashfield
|
4e6a74ff63 |
Revert "docker-compose: update to v2.24.6"
One of the vendor components has deleted a commit that docker-compose
is using (and has listed as a replacement in go.mod). Until
docker-compose comes up with a solution, we temporarily revert to
and older compose.
We'll update to the latest 2.23.x if this isn't resolved in 2.24+
before release.
This reverts commit
|
||
|
Bruce Ashfield
|
cabcaf1007 |
k3s: package check-config.sh
In a similar way we package check-config.sh for docker, we package
the contrib script for k3s.
root@qemux86-64:/# ./usr/share/k3s/check-config.sh [48/4924]
Verifying binaries in ./usr/share/k3s:
- sha256sum: sha256sums unavailable
- links: link list unavailable
System:
- /usr/sbin iptables v1.8.10 (legacy): ok
- swap: disabled
- routes: ok
Limits:
- /proc/sys/kernel/keys/root_maxkeys: 1000000
info: reading kernel config from /proc/config.gz ...
Generally Necessary:
- cgroup hierarchy: cgroups V2 mounted, cpu|cpuset|memory controllers status: good
- CONFIG_NAMESPACES: enabled
- CONFIG_NET_NS: enabled
- CONFIG_PID_NS: enabled
- CONFIG_IPC_NS: enabled
- CONFIG_UTS_NS: enabled
- CONFIG_CGROUPS: enabled
- CONFIG_CGROUP_PIDS: enabled
- CONFIG_CGROUP_CPUACCT: enabled
- CONFIG_CGROUP_DEVICE: enabled
- CONFIG_CGROUP_FREEZER: enabled
- CONFIG_CGROUP_SCHED: enabled
- CONFIG_CPUSETS: enabled
- CONFIG_MEMCG: enabled
- CONFIG_KEYS: enabled
- CONFIG_VETH: enabled
- CONFIG_BRIDGE: enabled
- CONFIG_BRIDGE_NETFILTER: enabled
- CONFIG_IP_NF_FILTER: enabled (as module)
- CONFIG_IP_NF_TARGET_MASQUERADE: enabled (as module)
- CONFIG_NETFILTER_XT_MATCH_ADDRTYPE: enabled (as module)
- CONFIG_NETFILTER_XT_MATCH_CONNTRACK: enabled (as module)
- CONFIG_NETFILTER_XT_MATCH_IPVS: enabled (as module)
- CONFIG_NETFILTER_XT_MATCH_COMMENT: enabled (as module)
- CONFIG_NETFILTER_XT_MATCH_MULTIPORT: enabled (as module)
- CONFIG_IP_NF_NAT: enabled (as module)
- CONFIG_NF_NAT: enabled (as module)
- CONFIG_POSIX_MQUEUE: enabled
Optional Features:
- CONFIG_USER_NS: enabled
- CONFIG_SECCOMP: enabled
- CONFIG_BLK_CGROUP: enabled
- CONFIG_BLK_DEV_THROTTLING: enabled
- CONFIG_CGROUP_PERF: enabled
- CONFIG_CGROUP_HUGETLB: enabled
- CONFIG_NET_CLS_CGROUP: enabled
- CONFIG_CGROUP_NET_PRIO: enabled
- CONFIG_CFS_BANDWIDTH: enabled
- CONFIG_FAIR_GROUP_SCHED: enabled
- CONFIG_RT_GROUP_SCHED: enabled
- CONFIG_IP_NF_TARGET_REDIRECT: enabled (as module)
- CONFIG_IP_SET: enabled (as module)
- CONFIG_IP_VS: enabled
- CONFIG_IP_VS_NFCT: enabled
- CONFIG_IP_VS_PROTO_TCP: enabled
- CONFIG_IP_VS_PROTO_UDP: enabled
- CONFIG_IP_VS_RR: enabled (as module)
- CONFIG_EXT4_FS: enabled
- CONFIG_EXT4_FS_POSIX_ACL: enabled
- CONFIG_EXT4_FS_SECURITY: enabled
- Network Drivers:
- "overlay":
- CONFIG_VXLAN: enabled (as module)
Optional (for encrypted networks):
- CONFIG_CRYPTO: enabled
- CONFIG_CRYPTO_AEAD: enabled
- CONFIG_CRYPTO_GCM: enabled
- CONFIG_CRYPTO_SEQIV: enabled
- CONFIG_CRYPTO_GHASH: enabled
- CONFIG_XFRM: enabled
- CONFIG_XFRM_USER: enabled (as module)
- CONFIG_XFRM_ALGO: enabled
- CONFIG_INET_ESP: enabled (as module)
- CONFIG_INET_XFRM_MODE_TRANSPORT: missing
- Storage Drivers:
- "overlay":
- CONFIG_OVERLAY_FS: enabled
STATUS: pass
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
54f80102b0 |
k3s: set version.UpstreamGolang in binaries
k3s will refuse to start if the golang version it was built with doesn't match the VERSION_GOLANG linker variable. As an example: https://gitlab.alpinelinux.org/alpine/aports/-/merge_requests/61668 We query our version of the compiler and set it in the binaries to ensure they match. Note: this may cause issues if you bump the golang compiler, but k3s doesn't rebuild. We'll worry about that when it happens. With this change, k3s starts and the node becomes ready. root@qemux86-64:~# uname -a Linux qemux86-64 6.6.20-yocto-standard #1 SMP PREEMPT_DYNAMIC Sun Mar 3 16:28:22 UTC 2024 x86_64 GNU/Linux root@qemux86-64:~# kubectl get nodes NAME STATUS ROLES AGE VERSION qemux86-64 Ready control-plane,master 10m v1.28.7-k3s1 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Bruce Ashfield
|
769cf8be74 |
criu: patch cleanups
Adding Upstream-Status and reformatting some of the long logs. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Tim Orling
|
8dd5ca2900 |
criu: pycriu RDEPENDS on python3-fcntl
Signed-off-by: Tim Orling <tim.orling@konsulko.com> |
||
|
Tim Orling
|
c735cd2ec9 |
criu: pycriu RDEPENDS on python3-ctypes
Signed-off-by: Tim Orling <tim.orling@konsulko.com> |
||
|
Tim Orling
|
6f7a7d62cb |
criu: pycriu RDEPENDS on python3-protobuf
Signed-off-by: Tim Orling <tim.orling@konsulko.com> |
||
|
Tim Orling
|
227452ab4b |
criu: cleanup; export USRBINPATH PEP517_INSTALL_PYTHON
Signed-off-by: Tim Orling <tim.orling@konsulko.com> |
||
|
Tim Orling
|
cd11ca9de3 |
criu: fix pycriu build of wheel
Inherit python_setuptools_build_meta instead of setuptools3, as this is the build-backend declared in the pyproject.toml We seem to need python3-protobuf-native as a DEPENDS, but then the dependency check complains because our version in meta-python is python3-protobuf_4.25.bb Workaround this (for now?) by telling python3 -m build to --skip-dependency-check This allows criu to _build_. Whether it is functional and proper is a different story. Signed-off-by: Tim Orling <tim.orling@konsulko.com> |
||
|
Tim Orling
|
9b4acf5185 |
criu: build and install wheels
Mimic what we do with python_pep517.bbclass in do_compile (python3 -m build) and
do_install (python3 -m install) to build and install wheels and avoid the heavy
handed pip install usage.
FIXME: even though lib/pycriu/version.py is properly being dynamically generated,
setuptools/config/expand.py is failing to detect the __version__ attr.
Signed-off-by: Tim Orling <tim.orling@konsulko.com>
|
||
|
Bruce Ashfield
|
6509f2f6e1 |
criu: update to v3.19
Bumping criu to version v3.19, which comprises the following commits:
f8b14286b criu: Version 3.19 (Bronze Peacock)
f104b3d6d Makefile: introduce ARCHCFLAGS for arch specific cflags
0b62f4267 lib: use separate packages for pycriu and crit
97b8b659c zdtm: cgroup_ifpriomap: Improve skip check's robustness.
e076c11e2 ci: fix codespell errors
41938f14b zdtm/static: test the offset migration of ELF files
29026496d zdtm/lib: add missing signal.h header
a77185dae files-reg: don't change the file pos in get_build_id
5d4179ddb criu/proc_parse: refactor the eventpoll parser
cfaacfb58 zdtm/thread_different_uid_gid: remove the redundant check
36a84751e zdtm/cow00: fix typo
48d6a59a2 arch/x86: remove the redundant check
45670b655 apparmor: remove the redundant check
5e8d7dc94 tun: don't parse buffers that have not been filled with data
4c9d23d33 util: allow to run criu under strace
c9fdd355f pie: Mark __export_*() functions as externally_visible
5d6c8bc58 clang-format: disable column limit constraint
81a30c320 zdtm/memfd04: check execveat on memfd that has memory mappings
e86e8dac0 memfd: don't reopen file descriptors for memory mappings
28e854d66 amdgpu: fix clang warnings
ba168ab78 ci: enable build with amdgpu plugin
aa38a5989 amdgpu: print an error if the dup syscall fails
940a05c0b amdgpu: don't leak fd on an error path in open_img_file
a68975c06 plugins: the UPDATE_VMA_MAP callback returns fd with the full control
66f39adf1 criu: change the comment about magic numbers
9b4e8292c vma: Add !VVAR condition to vma_entry_can_be_lazy
28adebefb Return page size as unsigned long
00f8a56b6 zdtm: check userns once
ba48ceb57 zdtm: socket_udp_shutdown: Make the test fail instead of timing out.
f6e820bed zdtm: Treat ESRCH from kill() as success.
c29c5a1df zdtm: cgroup04: Improve skip check's robustness.
131e464a0 zdtm: cgroup04: Improve error messages.
785d97a61 zdtm: If ignoring kernel taint, also ignore taint changes.
5e544dc44 ci: stop testing ubuntu overlayfs
7a2910f89 py/cli: add --version option
61d9cf6f9 crit/setup.py: use __version__ from pycriu
8adefc90d lib/pycriu: generate version.py
59fcfa80d compel: Add support for ppc64le scv syscalls
d06c9b5cd criu/plugin: Add environment variable to cap size of buffers.
8caf460b9 zdtm: test MEMBARRIER_CMD_GLOBAL_EXPEDITED migration
2ba872782 dump: use MEMBARRIER_CMD_GET_REGISTRATIONS when available
32241b00d vagrant: run tests with fedora 38
862cb5c1c vagrant: update to version 2.3.7
d2a0d1fa6 lint: don't fail workflow on indent fail
08f286ed9 CONTRIBUTING.md: improve coding-style related sections
38bf7f42e CONTRIBUTING.md: don't mention ctags
b7a8bb088 zdtm: test execveat(memfd)
c9b2633ca memfd: return original memfd fd for execveat()
480565437 kerndat: check_pagemap: close(fd) on error path
d5284313f kerndat: Make errors from clone3() check more precise.
badf8060c proc_parse: Log smaps entry while dumping VMA.
1800018bc test/other: add test for action-script
ea05b06ac proc_parse: remove trivial goto from vma_get_mapfile_user()
f7d7dc9c0 compel/infect: include the relevant pid in "no-breakpoints restore" debug message
b56a9cef3 kerndat: Make pagemap check more robust against swapped out pages.
86ad52bc2 ci/loongarch64: compile tests before running zdtm.py
0085f992c memfd: don't set fd attributes not needed for vma mapping
8c17535f3 loongarch64: fix syscall_64.tbl
6ea60d6ef github: auto-remove `changes requested` and `awaiting reply` labels
620e8c0a6 Put a cap on the size of single preadv in restore operation.
2547ac8ac zdtm: membarrier: test migration of membarrier() registration
e07155e19 dump+restore: Implement membarrier() registration c/r.
5b790aa18 loongarch64: reformat syscall_64.tbl for 8-wide tabs
d1096e3b3 lib/py: add VMA_AREA_MEMFD constant
d3b955e57 ci/docker: install all required packages
9477354de scripts/apt: don't hide apt output
a4b49c46f amdgpu_plugin: remove duplicated log prefix
69200bec7 irmap: scan user-provided paths in order
2a131167b page-xfer: Pull tcp_cork,nodelay().
6ed50ea49 apparmor: fix incorrect usage of sizeof on char ptr
3628589b5 zdtm/memfd00: test memfd file mode
dfa541095 memfd: dump and restore permissions.
ac1219f4e sk-inet: Extend 'TCP repair off' failure log.
25d033080 restore: Skip dropping BSET capability if irrelevant.
fe4be19de prctl: test prctl(NO_NEW_PRIVS) setting
a605cc9f3 prctl: Migrate prctl(NO_NEW_PRIVS) setting.
7df3f6595 restore: Fix capability migration requirements between different kernels.
7ab02639f restore: Skip setgroups() when already correct.
4998b724e restore: Avoid need for CAP_SETPCAP if not changing uids.
99188cfbe tty: Avoid EPERM for no-op chown().
113957270 memfd: Avoid EPERM for no-op chown().
96fa42b79 cgroup: Replace restore_perms() with cr_fchperm().
b074f92f9 files-reg: Avoid EPERM in ghost_apply_metadata() for no-op changes.
f985d9f44 sk-unix: Avoid restore_file_perms() EPERM error for no-op changes.
21560270d util: Implement fchown() and fchmod() wrappers.
e25a243b2 ci: add workflow for loongarch64
788e1e92e zdtm: add loongarch64 support
ae0811475 criu: add loongarch64 support to parasite and restorer
ec6dc2d5c images: add loongarch64 core image
c9df09eea compel: add loongarch64 support
b304106e6 include: add common header files for loongarch64
8a24d4872 ci: add workflow to ensure self-contained commits
23313080a kerndat: don't leak a socket file descriptor
b2d74fbfd zdtm: replace NR_fstat with NR_statx
8ee35bebb kerndat: bind ipv6-socket only if ipv6 is enabled
6b8107cd1 irmap: Reduce error log severity to warning.
4eb6cc319 mount: Demote fsnotify logs for ignored failures.
3e428a1de log: Remove error logs for ignored or otherwise logged subprocess exits.
804c0ba82 soccr: Log name of socket queue that failed to restore.
4018b7877 soccr: Log offset when failed to restore socket's queued data.
1cb791652 sk-unix: Log both peer names when failing on an external stream unix socket.
5a723937a compel: Log the status word with "Task is still running" errors.
664598dc7 files-reg: Debug "open file on overmounted mount" error.
a5fe99d2c cgroup: Propagate error on cgroup mount failure.
056cac474 zdtm: drop python 2 compatibility
002f2372a lib/py: drop python 2 compatibility
d388b91de test/others: drop setup_swrk() py2 compatibility
ee9983d4a test/criu-ns: drop python 2 compatibility
ede018176 make: remove checks for python 2 binary
642fd99bf remove python-future dependency
376f3d180 crit: add requirements.txt for pip>=20.1
f5d06571c crit: drop python 2 support
7825f4ebf coredump: drop python 2 support
05f0535de ci: clean up CentOS 7 related tweaks
362d8fa5c ci: disable CentOS 7 test in Cirrus CI
94c9e4787 readme: refactor asciinema link for video playback
7bda5e656 zdtm: Update netns purpose comment in zdtm_ct.
9ad59f58f util: Make CRIU run_id machine-level unique.
eecc53d05 kerndat: Don't fail on NETLINK/nsid support missing.
bf8446ae5 kerndat: unexport kerndat_nsid()
f2011e1c7 util: Downgrade ignored errors to warnings.
2aa9cb933 rpc: Support setting images_dir by path.
439b52243 rpc: Support gathering external file list after freezing process tree.
82a0db036 docker/podman: test c/r with action-script
28d005638 action-scripts: allow shell scripts in rpc mode
3e0a8ffd6 build: libnfnetlink: Remove nla_get_s32().
f043cb22a build: Guard against libbsd's version of `__aligned`.
c5142104a build: Use make-provided AR for building libzdtmtst.
88f8fdda8 build: Fix LIBS vs LDFLAGS order.
cbbe6c683 build: Debug system feature tests.
1a1fa439c build: Remove HAS_MEMFD test
2bf10c8d2 restore: remove unused `secbits` field.
e5c9bc4d0 kerndat: Make socket feature probing work on IPv6-only host.
eea0d6ede pipes: Plug pipe fd leak in "Unable to set a pipe size" error case.
ffa1e47fd sockets: Increase the size of sockets hashmap to 16K.
304a309ae test/thp_disable: fix lint
c97cc6a6c Allow skipping iptables/nftables invocation.
d0ac547b3 zdtm: sock_opts00: Improve error messages.
6bc00fcb8 zdtm: Implement test sharding.
1fb5c410c zdtm: Allow --keep-going for single test.
ed88e3241 zdtm: Add timeouts for test commands.
516fade93 zdtm: Allow overriding /tmp.
4b764a9dc Allow passing --log_to_stderr via RPC.
1e5ebec39 Allow passing --display_stats via RPC.
0e88a91ff Allow passing --leave_stopped by RPC.
4455444ee compel/test: Return 0 in case of error in fdspy
4c1409b8f Fill FPU init state if it's not provided by kernel.
93ad8d40d zdtm: thp_disable: Verify MADV_NOHUGEPAGE before migration
01238d270 zdtm: thp_disable: Verify prctl(THP_DISABLE) migration
a0c78a790 zdtm: thp_disable: Output a single failure message
2364c963c Log if prctl(SET_THP_DISABLE) doesn't work as expected.
21ce76263 Restore THP_DISABLE prctl.
9943dcde1 Fix mount(cgroup2) for older kernels.
0218b1e8f Fix dumping hugetlb-based memfd on kernels < 4.16.
a638043a7 cgroup/restore: split prepare_task_cgroup code into two separate functions
2ac15e3ad action-scripts: Add pre-stream hook
c6ac396aa timers: improve and fix posix timer id sequence checks
fc08fa907 criu-ns: Update shebang line to python
9cd09f586 criu-ns: Install Python pathlib module in CentOS 7
9c9e8ea3f criu-ns: Add tests for criu-ns script
e4b6fb2d1 criu-ns: Add support for older Python version in CI
733f16551 criu-ns: Add --criu-binary argument to run_criu()
36709536e lib/c: add empty_ns interfaces to libcriu
b665dce3c docs: rename amdgpu_plugin.txt to criu-amdgpu-plugin.txt
cc607f810 criu-ns: make --pidfile option show pid in caller pidns
50e17a1cf scripts: make newer versions of shellcheck happy
df7b897a2 ci: fix new codespell errors
727d79650 compel: support XSAVE on newer Intel CPUs
fa6af25e7 dump: increase fcntl call failure judgment
1c0f8787b zdtm: Add tests for ip tos restore
04cdbd610 sk-inet: Add IP TOS socket option
4c1a2ac41 criu: Version 3.18 (Silver Sandpiper)
b689bcc35 cr-check: remove excess kerndat_has_nspid from check_ns_pid
9b3496043 log: fix timestamp logging when tv_sec>=100
94ac9ee3c proc_parse: fix while condition in parse_pid_status
45e4a6b27 netlink: fix netlink fd flags dump/restore failed
6c728df1d zdtm: modify rseq01 to include a thread
f8da250bb cr-dump: properly apply rseq fixup for all threads
78c4e2c0f cr-dump: move rseq functions before dump_task_thread
85e46c44d dump: extend parasite_thread_ctl lifetime to dump_task_thread
9683097f2 zdtm: don't ignore rseq_cs mismatch in rseq01 test
0c5239932 ci: cancel preceding workflows run
5c8cdceec sk-unix: rework unix_resolve_name
de39bd2bd sk-unix: simplify error handling in unix_resolve_name_old
d93409cf1 sk-unix: remove bogus xfree from unix_resolve_name_old
ccc790d54 zdtm/lib: fix cwd path freeing
8e6fa9c3b net: Add net log prefix
7f0f07599 crit: fix compatibility with Python 3.12
bd0f209c2 pstree: improve id intersection detection in prepare_pstree_for_shell_job
66fd45d51 sk-unix: add some missed error printing
a0158e692 zdtm: add MNTNS_ZDTM macro to fix initialization
12423abdb mount: allow bindmounts for external fuse mounts
65407616e ci/archlinux: initialize machine ID
34e2b0221 Optimized shell code with <'s (instead of cat + |)
7cae16e97 mount: do collect_mntinfo of external mount namespace with no for_dump
69befdde1 cgroup-v2: make new field cg_set optional
529f29891 cgroup-v2: make new field is_threaded optional
6e681afb6 net: fail restore if nftables isn't supported but image is present
156c8da33 make: disable '-Wdangling-pointer' warning with gcc 12
4930c9802 x86/xsave: Set only used XFEATURE_* in xstate_bv
3f8e3220b CONTRIBUTING.md: document make lint / indent
42c4be2a9 net: use get_legacy_iptables_bin also on restore
298286718 pie/restorer: Fix fd leaking on error path
1d4777e45 test: add long command-line to coredump test
edaec5d76 coredump: report missing files without a backtrace
3ca979f9a coredump: handle long command-lines
a0cc95c03 lib/py: reduce code duplication
85b5c1e45 ci/podman-test: drop crun installation script
91ff24b47 ci: disable c/r of cgroups with podman
e7ab6fe63 restore: don't miss futex abort in restore_task_with_children
676b4579f zdtm/transition/epoll: don't rely on errno in case of zero return
7b8035344 mailmap: update my email
1ae9bac54 dump: improve error printing and readability of task_comm_info
11c71656b ci: add test for crit info
9b919ab74 crit: fix empty string comparison
fa4af0430 dump: Show task comm early
fd7e97fcf lint: exclude tags file from codespell
50e42c9dd Add documentation for --ghost-fiemap
4a8c02d63 zdtm: Add tests for IP_PKTINFO and IP_FREEBIND sock options
bd9b66c8c sk-inet: support IP_PKTINFO and IPV6_RECVPKTINFO options
7d4d4915a sk-inet: save IP_FREEBIND option for SOCK_RAW sockets also
f1c8d386b kerndat: check if setsockopt IPV6_FREEBIND is supported
14e883656 proc_parse: Handle btrfs files when map_files is not accessible
d7da4a69a ci: Add maps00 test in unprivileged mode in user namespace
d2abc9817 shmem: Close fd when VMA is copied from /proc/$pid/mem
144b467a0 shmem: pr_err -> pr_perror
6d7c0d007 compel/mips: fix parasite with GCC 12
7280e96a7 clang-format: use IndentGotoLabels to get rid of goto label indentation
fcdb753ed namespaces: cleanup switch_mnt_ns and restore_mnt_ns
63159c14c mount: simplify code around mount_cr_time_mount
43fa4e76d remap: refactor goto jumping to a while loop
757a2b46c remap: Fix typo
3837d31b5 ci/lint: make push action have at least too commits depth
cec43025a criu(8): Add info about unprivileged mode limitations
80528dbf7 proc_parse: Don't bail out on is_memfd() VMAs
95e590b51 shmem: Fall back to /proc/$pid/mem if no map_files
951c56917 proc_parse: Set VMA_AREA_REGULAR where needed
a92dfb61f string: define wrapers __setproctitle and __setproctitle_init to hide bsd headers
0a7c5fd1b string: use our own __strlcpy and __strlcat to remove bsd headers
8cfda2748 log: remove all uses of %m specifier in pr_* functions
7459d0204 lint: prohibit to use %m specifier in pr_* functions
f73ba7726 ci: switch from lgtm to codeql
0bddecead restorer: add logging on prctl PR_SET_MM_MAP failure
fb66727a2 zdtm: add mntns_compare check to mount_complex_sharing
ba09fad39 zdtm: add mountinfo topology compare to test lib
2837a13ef zdtm: add mountinfo parsing to test lib
543501d5f zdtm/lib: copy xmalloc.h
d800ef658 zdtm/lib: copy list.h
be61624f4 clang-format: rework make indent to check specific commits
a918093ce scripts/ci: use Fedora 37 for vagrant based tests
1bb84f96f tty: fix codding-style around for_each_bit call
abfe0b5d2 clang-format: add for_each_bit macros to ForEachMacros
c8b4fb9ba autofs: fix a frankenstein auto-created by clang-format
aab709b60 log: Write more details in write_pidfile
7c6eb0b85 asm: fix for_each_bit macro
bb3f7bef6 crtools: fix help message alignment for --network-lock
a302b3694 zdtm: fix 'zdtm.py list' command
21f5be91a cgroups: ignore EOPNOTSUPP on setting memory.kmem.limit_in_byte
9686693aa test/javaTests: update org.testng:testng (Maven)
5c60d35be sockets: tiny style fix
5a19c3432 non-root: Don't dump socket option SO_MARK if 0
2180e03b9 non-root: Rework socket bufs for unprivileged mode
e5ccfbb24 Fix typo in comment
bdbccc315 zdtm: add two tests for highly sparse ghost file
f3fdce81a files-reg.c: fiemap algorithm for ghost file
14b9ec195 ci: fix make indent
d0c64b7b3 ci/alpine: remove symlink for /usr/bin/python
095b3e84b ci/lint: install ShellCheck with dnf
c48b5290d Fix warnings from -Wstrict-prototypes in clang 16.0.0
fa2c585c2 amdgpu: define __nmk_dir if missing
c7211f52d Remove execute bit from source file
f5e0f641a cgroup: Remove redundant code that handles zombie tasks
c1ae880eb kerndat: Mark memfd_create(MFD_HUGETLB) unavailable when ENOSYS is returned
153614cb1 ci: move cgroup unmounting to run-ci-tests.sh
516ebc4f5 ci: Do not fail if latest epel repository definition is already installed
2ebce9233 ci: Make cpuset move to cgroup-v2 hierarchy
07d538cef zdtm: Check threads are restored into correct threaded controllers
20ea8a064 cgroup-v2: Restore threads in a process into correct threaded controllers
17d1d8810 cgroup-v2: Dump cgroup controllers of every threads in a process
ad3936e81 zdtm: Add test to check global properties of cgroup-v2 are preserved
d7e874659 zdtm: Add write_value/read_value helpers into zdtm library
167cfd366 cgroup-v2: Checkpoint and restore some global properties
8a336ab22 Switch aarch64 builds to Cirrus CI
840735aa0 ipc_sysctl: Prioritize restoring IPC variables using non usernsd approach
3db8d1a6c cgroup: add a comment to restore_cgroup_prop about path argument requirements
1cba559da non-root: add non-root test case to cirrus runs
6743d608c non-root: extend zdtm.py to be able to run tests as non-root
251939992 Documentation: add details about --unprivileged
47b07d011 non-root: Introduce unprivileged mode to kerndat
6a30c7d1e non-root: enable non-root checkpoint/restore
ce01f70d9 non-root: add functions to work with capabilities
4b4bf0421 non-root: add infrastructure to run as non-root
4c7f91aff ci: enable EPEL for CentOS 7
a39d41656 compel: Fix ppc64le parasite stack layout
17ec53913 compel: Add test to check parasite stack setup
556ab0dea compel: Fix infect test to not override failures
461fa7271 compel: Add APIs to facilitate testing
debc9c16c seize: do not overwrite exit code from failpath
16f1c147c test/others/crit/test.sh: use bash array
0a872ccf1 scripts/protobuf-gen.sh: fix (not ignore) shellcheck warnings
75b859f23 scripts/ci: rm shellcheck disable annotations
aeb6961f3 scripts/ci/run-ci-tests: use bash arrays
b1fb9f2f0 Fix, not ignore, shellcheck SC1091 warnings
9d2948b23 scripts/ci/asan.sh: fix, not ignore, shellcheck warning
968eec0d5 scripts/ci/apt-install: fix (not ignore) shellcheck warning
86ac0f05e ci/gha/lint: install a recent shellcheck
2039d7320 files-reg: skip failed mount lookup for shell-job's tty
9e91e62a7 criu-ns: capture controlling tty
40e1aaf56 mount: add definition for FSOPEN_CLOEXEC
7bc24688d ci: Clean up and improve Java testing
0178f2f99 ci: Add Dockerfile for openj9 on Ubuntu
39b3de60b ci: Rename openj9 Dockerfiles to hotspot
f78d3d821 gitignore: Ignore top-evel build dir only
aeaff6445 test/unix: check C/R of unix listen queues
83c606e02 zdtm: return 1 from pr_err, pr_perror, fail
dca55d281 criu: fail migration if data was sent to an in-flight socket
dfe9d006a breakpoint: enable breakpoints by default on amd64 and arm64
bb73e1cf5 breakpoint: implement hw breakpoint for arm64 platform
b7953c6c7 compel: switch breakpoint functions to non-inline at arm64 platform
719fea2fc compel: clear a breakpoint right after it's been triggered
d7477dac0 compel: set TRACESYSGOOD to distinguish breakpoints from syscalls
c089159a4 ci/cirrus: centos 8 job nits
a202ec271 ci/cirrus: add CentOS Stream 9
2642b657d docker-test: handle race condition error
49319cd57 Add Alexander Mikhalitsyn to maintainers
f7972a3f0 cr-restore: rseq: use glibc-specific way to unregister only as fallback
cacddf19d cr-restore: rseq: dynamically handle *libc with rseq
1f9bd82a5 cr-check: optimize check for apparmor stacking
a1262f55f cr-check: fix check for apparmor stacking
f9bc0a750 docker-test: use containerd installed from package
750acec25 Revert "ci: Switch to non overlaysfs tests"
e8a6765d1 criu: fix conflicting headers
eb4ecb3cf ci: unset XDG_RUNTIME_DIR when invoking podman
da4803bea MAINTAINERS: Add Radostin (myself) to maintainers
e62d541bd zdtm: add two tests for large ghost sparse file
2d34b5602 unlink_largefile.desc: remove crfail, since criu now can support unlink_largefile test
fbded7978 files-reg.c: modify the check of ghost_limit to support large sparse files
01b8d40ce zdtm/mnt_root_ext: don't allow propagation from test mntns to criu mntns
d12e2364c zdtm: make root mount private in criu mntns
70a9cd6fb vdso-compat: Increase the reserved buffer for compat vdso
b30f3ee3d zdtm: Remove permission part check for skipping vsyscall vma
c502d480f x86/compel/fault-inject: fixup mxcsr for PTRACE_SETFPREGS
e30d18f43 rseq: fix headers conflict on Mariner GNU/Linux
ad58553d9 Add --skip-file-rwx-check opt test
18fba4125 config/files-reg: Add opt to skip file r/w/x check on restore
6cef6e726 zdtm: add tests for SIGTSTP
c7858ba42 infect: add SIGTSTP support
49caf85b2 config: fail on --track-mem option if dirty tracking is not available
91e971c4d hugetlb: don't dump anonymous private hugetlb mapping using memfd approach
dd0217976 amdgpu: Add gitignore
b117b211a zdtm/scm: add scm09 test with closed sender fd
5cd7092fd sk-unix: make add_fake_unix_queuers earier and rework find_queuer_for
28358db13 Fix the check for mnt namespace in criu-ns
295dc85ca github: use git-clang-format instead of make indent
ced4ab4b0 zdtm: skip zdtm/static/shm-hugetlb when hugetlb is not supported
c830643d8 Revert "ci: skip new hugetlb maps09/maps10 tests for pre-dump"
b26e1fdbf mem: Skip pre-dumping on hugetlb mappings
9066f8741 cr-dump: do not report success to logs if post-dump script failed
d46f40f4f criu: Version 3.17.1
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
417cfa77c5 |
kubernetes: fix build with go 1.21+
go1.21+ checks the GOTOOLCHAIN variable and will attempt to validate/fetch the toolchain version requested. That doesn't work in our environment, so we export the variable as "local" to indicate that the build should trust (and use) the local toolchain. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Bruce Ashfield
|
e11497bda2 |
kubernetes: allow go 1.20 building
Although k8s checks for, and demands, golang 1.21.x, runtime tests show that golang 1.20.x is properly building and providing enough for core functionality. In an effort to see what else may be lurking, we patch out the check to allow builds with our 1.20.x toolchain. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Bruce Ashfield
|
17eeea68a5 |
kubernetes: update to 1.29.1
Bumping kubernetes to version v1.29.1-1-ga02da633101, which comprises the following commits:
a02da633101 Update CHANGELOG/CHANGELOG-1.29.md for v1.29.1
bc401b91f27 Release commit for Kubernetes v1.29.1
5350f0829f5 Revert "Graduate Evented PLEG to Beta"
5b1e1446823 [go] Bump images, dependencies and versions to go 1.21.6 and distroless iptables to 0.4.4
0da29848c53 Make OpenAPIGetter tolerant of nil
865f214fe53 use context for lazy evaluation.
cde050c4d0b Initialize default attach func regardless of the value of flag
b055126537b .*: bump golang.org/x/tools to v0.16.1
05937cba41d add ut
00045c3c9d6 fix
b10ad75ab1d fix
4b8554018c1 fix: 119921
a5f64b743e4 Address comment
ed501c1f080 Keep presence cost to 0 to ensure backward compatibility.
37717c1bc43 fix(scheduler): fix incorrect loop logic in MultiPoint to avoid a plugin being loaded multiple times
4a597425b8b fix falky test pkg/registry/core/persistentvolume/storage TestUpdateStatus
40d8e405b8e Use a separate function for checking if device was reconstructed
d30fda3c68c Add tests for checking of uncertain device paths
910fa603a25 Fix device uncertain errors on reboot
62d0bd7260f Fix CSI migration for vSphere volumes
ce513803ca9 Wire in field dropping for CRDs
9abd608b99e Revert "scheduler/nodeaffinity: reduce pod scheduling latency"
95751b4df7f Revert "scheduler/NodeUnschedulable: reduce pod scheduling latency"
85ff8c0b081 kube-proxy: Fix etp:Local for externalIPs
ee9a55c25d6 Add unit test for Job Controller for panic when PodFailurePolicy is used on 1.28
e1e60c9b658 Update CHANGELOG/CHANGELOG-1.29.md for v1.29.0
3f7a50f3868 Release commit for Kubernetes v1.29.0
3b8f25dfdd9 fix: disable SchedulerQueueingHints feature flag by default
0c645922edc CHANGELOG: Update directory for v1.29.0-rc.2 release
a2115acba28 Update CHANGELOG/CHANGELOG-1.29.md for v1.29.0-rc.2
e4636d05bc3 Release commit for Kubernetes v1.29.0-rc.2
0ca3089bee6 Bump distroless-iptables to v0.4.2
1c1347a3e71 [go] Bump images, dependencies and versions to go 1.21.5
4e5321c92e0 add beta comment for pod replacement policy
233949e05df Add an integration test to verify root path cleanup
c769c2db6ed Revert conformance test addition of root paths
ec9387da084 Remove scrape_error from resource_metrics_test due to deprecation
022d50fe3a1 CHANGELOG: Update directory for v1.29.0-rc.1 release
71c7e93ba7f Update CHANGELOG/CHANGELOG-1.29.md for v1.29.0-rc.1
96a32568e66 Release commit for Kubernetes v1.29.0-rc.1
f730dc39f9d Fix verify target to not update env var if already set
51daa8cbd5e api: run hack/update-api-spec.sh
f042994cb03 releng: update publishing bot rules for 1.29
bacac254799 CHANGELOG: Update directory for v1.29.0-rc.0 release
ab6a1ad8e1f Release commit for Kubernetes v1.29.0-rc.0
af34f62170c code-generator: fix invalid replace of klog
d203bb54f8a fix flake on conformance e2e test ResourceQuota controller should apply changes to a resourcequota status
005e85c4d3e fix(framework): remove the mention about what happens with nil from EventsToRegister
64f8c6939f8 Replace -E with --setenv for systemd-run parameter
dd6e286a1ae TestSlowNodeSync: fix flake by allowing informer cache to get populated
c3ff08250eb CHANGELOG: Update directory for v1.25.16 release
59c63185457 CHANGELOG: Update directory for v1.26.11 release
bb6c9ecb1a2 CHANGELOG: Update directory for v1.27.8 release
3f81c5cf3ff CHANGELOG: Update directory for v1.28.4 release
34e620d18c0 Support score extension function in preemption.
99f7df3e1c1 improve default_servicecidr_controller startup
c99b5a208de Check error from gomega
49e8c196c34 use framework gomega
8c68aa656b1 Update publishing-bot rules for active release branches that uses go120 to Go 1.20.11
6aa3002ad24 add kubeup label instead of a feature label
27dfe93f53d Use value(name) in gcloud compute instance-groups managed list-instances
20853ef1200 Bump distroless-iptables to v0.4.2
4b1b9a198a6 Fix issue with client rate limiter when polling
7c5dfceff8a add false matchCondition benchmark
f9ab24bf485 Refine test case
617f2132fed e2e: avoid redundant labels in JUnit file
172f680326a fix: smb file share unavailable issue when it's deleted
2017fb2ec53 Fix "go test -count=2 ./pkg/proxy/iptables"
bda722bb684 kubeadm: support updating certificate organization during 'kubeadm certs renew'
2780060a789 kubeadm: change SystemPrivilegedGroup in apiserve-kubelet-client.crt
11cdb8fd011 split compile and eval
fe53db0dbdc authz: add benchmark for webhook authorizer
475bfa4a633 set LimitedSwap
819d1903a27 Add support for authorization-config to local-up-cluster
b53134f129f Test anonymous and RBAC handling via config file
264cd648246 Run RBAC hook correctly when running from authz config file
1f40e0916ec Only default mode to AlwaysAllow when config file is unspecified
76277f693d0 create a new KubeUp feature label for tests marked for removal
9e5b8402bb9 update go.mod
88e124ecaa4 [go] Bump images, dependencies and versions to go 1.21.4
e4fdc96c188 Pass External Storage label parameters as individual arguments in framework variadic function
f3dad977040 self nominate aroradaman as sig- proxy-reviewer
2645b22003d Self nominate Kevin Hannon for reviewer for job controller
b12db6d9b55 fix test store delete collection function failed
9d5b2a44762 Fix API comment for the Job ready field
1395e2e02c5 Fix API comment for the FailIndex Job pod failure policy action
6dc11c1f219 kubeadm: ensure the kubelet and kube-apiserver wait checks go first
bb315d13392 bump runc to v1.1.10
f77a4543d13 Unregister events in schedulingGates plugin
70c9eefff30 add --sbom=false --provenance=false for windows servercore cache build
42a70cdbd16 codegen
bba0c9a81e9 validate defaults across an update from nil to ensure create ratcheting rules work
eef15158152 ratcheting-cel: use Optional[T] for oldSelf when optionalOldSelf is true
5edb27aa382 ratcheting-cel: add optionalOldSelf field
6b6be38896b test: Fix NodeLogQuery tests
ad7b9b56f5b test/e2e_node: add e2e test for Kubeletconfig drop-in dir
ee5578be526 cmd/kubelet: fix overriding default KubeletConfig fields in drop-in configs if not set
bd6431323a5 ClusterTrustBundle projection: e2e test
96e610ac188 ClusterTrustBundle: Enforce max size during validation
1ebe5774d08 kubelet: Support ClusterTrustBundlePEM projections
e83baddbb1a LRUExpireCache: Allow removing multiple keys under lock
599fdb7adde Regenerate for ClusterTrustBundlePEM projected volume API
ecfdc8fda55 Define ClusterTrustBundlePEM projected volume
0fd13627820 ClusterTrustBundles: ClusterTrustBundleProjection feature gate
2a23061f6c2 scheduler: fix performance regression at -v3 + contextual logging
e5bba37f20a apiserver: promote flowcontrol tests to conformance
9ae1fc366b8 Store nodes before calling EnsureLoadBalancer
60338c79d77 KCCM: fix slow node sync + service update
a8673fa5b4a KCCM: add test validating slow node sync issue
b565fbeac06 test/e2e_kubeadm/dns_addon_test.go: drop kube-dns tests
2259ac2444f pause: add --provenance=false during etcd multi-arch build
50f092c1366 Add kubernetes.io/hostname to faked nodes in tests
5bf63036c7f Make EnablePodSchedulingReadiness public
0112d91a056 Add multi-webhook integration test
b693f09d544 [StructuredAuthn] Ensure empty fields of user object are accessible by CEL
34b2c4e1ed0 framework: add SSH support for Azure
44d89c8cf8c Include empty string attributes for CEL authz evaluation
2e2f51a4417 Plumb failure policy from config to webhook construction
0674135c1aa CHANGELOG: Update directory for v1.29.0-alpha.3 release
a000af25ff3 Require match condition version only if matchConditions are specified
baebc376ff8 missed a few summary upper limits for major page faults
3c268b75244 etcd: Update to version 3.5.10
4c532213ae2 test/e2e_kubeadm: add test for the kubeadm:cluster-admins CRB
ae73cf9cfb7 Add remaining e2e tests for backoffLimitPerIndex based on KEP
2d9128116b6 Use golang library instead of mklink
85b10c06fab update docs for v1.29 release (note this must be committed after code freeze)
cda349cda49 Make service-cidrs-controller role feature-gated
26923b91e8c implementation of split disk kep
003e4886c6f Fix parameter passing error
18adc309337 refactor: rename TransitionRule to UsesOldSelf
b2c743154cc Fix the e2e bug related to the Garbage collector in api-machinery.
338fe7ad55c e2e framework: validate test definitions
f2cfbf44b1f e2e: use framework labels
248100ce6df golangci-lint: tone down comment checking
ecb32a3e29c increase bounded limits for major page faults
ceaacc88f0d add --provenance=false during etcd multi-arch build
833156b77e2 e2e: define environment
4a380609a94 serviceaccount: fix incorrect usage of %w in Errorf
878d037d3ba dependencies: klog v2.110.1
bc1df9e7dab bump to newest etcd: v3.5.10
38905462656 Update APIs and adjust tests
77f4178c98a Promote CSINodeExpandSecret to GA
252e1d2dfee Imagepull per runtime class alpha release changes
0993bb78efe Redo service dispatch with maps
9d71513ac1e Redo no-endpoint handling with maps
4128631d0f3 Redo LoadBalancerSourceRanges firewall using sets
edaa1d735b8 Redo --nodeport-addresses handling with a set
ef1347b06db Port NAT rules to nftables (and backend is now functional)
0c5c620b4f2 Port filter rules to nftables
6cff4153057 Port service/endpoint chain creation/cleanup to nftables
2735ad541e2 Port table setup/cleanup code to nftables
bcced184c52 Replace "iptables-restore" sync in nftables/proxier.go with (trivial) "nft -f -" sync
93860a52177 Distinguish iptables-based and nftables-based backends, do startup cleanup
abb1a458a95 Create an nftables.Interface in nftables proxier
1a530457f90 Drop unit tests of iptables-specific unit test helpers
958e80ca3b0 Clarify nftables/proxier.go by distinguishing nat/filter table KUBE-SERVICES chains
3abdda9800d Simplify nftables/proxier.go by using string rather than utiliptables.Chain
96e53f64f4d Simplify nftables/proxier.go by removing the "args" reuse
6535ac1e619 Simplify nftables/proxier.go by removing Monitor stuff
ecb7752f0b8 Simplify nftables/proxier.go by removing HaveRandomFully checks
5f09106063b Simplify nftables/proxier.go by dropping "-j ACCEPT" rules
1a6b9b811e3 Simplify nftables/proxier.go by removing localhost nodeport support
e7c35d27f75 Simplify nftables/proxier.go by removing partial syncing
39a5af1d0aa Simplify nftables/proxier.go by removing large-cluster mode
cac26737cd4 apiserver: add conformance tests for flowcontrol API
a70653143e9 Add a dummy nftables kube-proxy backend which is just a copy of iptables
ce5a22d54c1 hack/update-codegen
3b69bd6a9ba servicecidrs controller clarify condition false reevaluation
fee07ad6080 make update with the new API with arrays
9917c727a1e test e2e: use new ServiceCIDR API
5d90d07f2d2 test integration: use new ServiceCIDR API
271900a0f05 integration etcd data: use new ServiceCIDR API
3edcce52e3c service cidr controller manager: use new ServiceCIDR API
016c3c9e363 repairip controller: use new ServiceCIDR API
881cf4d54fd ipallocator/cidrallocator: use new ServiceCIDR API
7e87806fab1 default_servicecidr_controller: use new ServiceCIDR API
513fdb54229 describer: use new ServiceCIDR API
5123a93b342 printers: use new ServiceCIDR API
c3d9b77d94e update ServiceCIDR API: replace IPv4,IPv6 fields by an array of strings
599597ca65a fix race on ServiceCIDR deletion
e3a0df26a86 remove flag cidr max size validation if gate enable
8182c4d9ec8 make update
cb509b01f31 e2e for ServiceCIDRs
46b13d48e20 etcd data
ccbcadb0324 add integration test
4ff80864e1c service cidr controller manager
164276175fb plumb the new multicidr clusterip allocator
65e69389463 make repair loop multi service cidr aware
63fe539b4e7 expand IPAllocator to work with multiple ServiceCIDRs
d3386e171a2 add iptree radix tree util
3b450378e07 bootstrap controller for default ServiceCIDR
55a35bebee9 API printers
7e77e8b21d1 kubectl describe
2feb1503e29 Add ServiceCIDR to the REST Registry
391b25197b8 add apis to apiserver storage
632081a9078 add ServiceCIDR APIs
16363b6fb4a fix IPAddress.Name validation message
df80775693f Include managed field comparison in test
cc190e0ace1 add integration tests
26e3a03d12d Implement CEL and wire it with OIDC authenticator
e411fd340c5 cluster/gce: add webhook to replace PersistentVolumeLabel admission controller
7e35823690d cacher: when forgeting a watcher, call stopWatcherLocked multiple times
bd233a2aa55 typo/api change in cadvisor / updated unwanted-dependencies.json
8b9fc325e28 Update to new cadvisor v0.48.1
e4776e0f85b avoid infinite recursion for type resolvers.
fba2d2fadc1 Move invocation to not to cause ginkgo panic
eb32969ab8f Lazy load OpenAPIV2
f23ab829bee Add feature toggle for OpenAPI V3 apply in kubectl
e7216c66230 use OpenAPIV3 for kubectl diff
4f3b0b15182 Use OpenAPI V3 for client side SMP
6b971153d75 add new fields in v1alpha1 StructuredAuthenticationConfiguration
168e016947c Benchmark job with backoff limit per index
6ac7da1da87 encryptionconfig/controller: run unit tests faster
c2a365c6a7d kubeadm: do not poll in TestEnsureAdminClusterRoleBindingImpl
c2cb3209138 Revert "cacher: when forgeting a watcher, call stopWatcherLocked multiple times"
98a2f22e740 Revert "Make the decode function respect the timeout context"
c7fcef18756 apiserver: set APF featuregate to ga
8e52fc72668 Minor fix to copy the required kubelet, service logs after the execution of the node e2e tests
b02aad42fa4 Fix panic when process RunScorePlugins for cap out of range
31c76e9abb2 authz: add cel expression to webhook matchconditions
56ab6c59421 generated changes
ae90a696772 volumeattributesclass and core api changes
c4aab1036f6 Add sig OWNERS to registry packages
1daf1b0705f test that controller descriptors should not be feature gated
fed11c0793f remove unnecessary gating of taint-eviction-controller descriptor
5b268e6daf5 apply: Add test for duplicates in associative lists
9d1847c1963 managedfields: Allow duplicates for built-in updates associative lists
dec443b305a Update sigs.k8s.io/structured-merge-diff to v4.4.1
b8cd792b368 rename the roundtrip annotation, forbid it in v1
76463e21d4d KEP-4193: bound service account token improvements
a968f51fa2f k8s.io/apiserver/storage/etcd: refactor etcd GetList.
84ec5e2eccb k8s.io/apiserver/storage/etcd: refactor etcd GetList.
8d804078f97 Add set ext library into Kubernetes and pick up the new option cel provides
70c1f2143fc Bump cel-go to v0.17.7
d3de47ceeed chore: updates api doc
2eb06e79ef3 OpenAPIResourcesGetter allows lazy-loading OpenAPI V2
080fe8346da Fix typos in interface comments
e95b7c6d8b8 feat: updates encryption config file watch logic to polling
6d59480a70f Try a single gcloud command for scp-ing all files
bbca4a4b9ad cacher: when forgeting a watcher, call stopWatcherLocked multiple times
f78b367db63 Make the decode function respect the timeout context
79c5b3ca6fd Mirror apiserver feature gates to kube feature gates file for consistent enablement
ccda2d6fd41 kube-controller-manager: Decouple TaintManager from NodeLifeCycleController (KEP-3902)
233bc2449d9 apiserver: fix apf enablement with runtime-config
acd60896597 apiserver: remove prerelease annotation for flowcontrol v1
25447b95ad2 apiserver: add testdata for flowcontrol v1
730d10a8fb9 apiserver: add generated files for flowcontrol api change
9fd2ab419ad apiserver: allow zero value for the 'nominalConcurrencyShares' field
430c226709b apiserver: fix lint issue, defaulting and validation test for flowcontrol v1
90c091dedad apiserver: add pre-lifecycle replacement for flowcontrol v1beta3
17bda3c3e05 apiserver: apf controller, bootstrap, tests should use flowcontrol v1 API
25aebca8d54 apiserver: add etcd data and storage version hash for apf v1
5972037ffd6 apiserver: generate code for apf flowcontrol v1 API
03a9ad200d7 apiserver: remove copied generated files
b24dd44904e apiserver: enable apf v1 API
5cb03064d95 apiserver: update copy, rename v1beta3 to v1
dc723080939 apiserver: copy apf v1beta3 to v1
05076de57fc kubeadm: poll additional CRB create calls for kubeadm:cluster-admins
5a20ff16173 fix wrong controller name for ephemeralController
afc6c03ba74 Pass through static overrides in addtion to cgo overrides
feb0e2fc2f5 Fix flaky test for services that shouldn't be available when PublishNotReadyAddresses is false
3a308140cd5 Fix e2e
2c2fa2107a6 deprecate the kubeProxyVersion field of v1.Node
070e7a38cb6 generic set
36d6917ae16 valid error for creation and update from valid to invalid only - using an option AllowNamespacedSysctlsForHostNetAndHostIPC
9a8ccdebc5a use sysctl utils to do pod spec validation
11de9543ee7 move sysctl namespace and some funcs to component helpers util
4321652d13f reject pod creation for hostNet pod with net sysctl; hostIPC pod with ipc sysctl
6614a29f470 OpenAPIResourcesGetter allows lazy-loading OpenAPI V2
04b21126e58 Add cel new validator into Kubernetes.
9ae77364e95 pkg/proxy: configure tcp-be-liberal
a375aa28ee3 pkg/proxy: move get kernel version out of ipvs proxier
c1fd3f5f648 suppress per-expression cost limit for unmutated versions.
4bb7dc224c5 metrics: publish metrics from ratcheting across a request
e50cc47a068 Improve execution time for job e2e tests
8c72be3b74e ratcheting: add benchmark
7a91051caa1 cleanup: Refactor BaseEndpointInfo to cache IP and Port values
c7842d9c63f narrow down the scope of EnqueueExtensions to subscribe less cluster events
3f8e6d6f77f etcd: Build image 3.5.10
a73725d7999 Promote SidecarContainers feature to beta
1591a0e132c add unit tests for NewControllerDescriptors
44cac266673 move start controller pre- and post- checks/actions out of StartControllers
b7689672802 move aliases into each registrable controller
a85779b4dfe include ServiceAccountTokenController in the NewControllerDescriptors to make it more generic
27a77e0ef3c Encapsulate KCM controllers with their metadata
77dfd63d1db fix volume conformance e2e test break other test
77e0adeb31d KEP-127: Update PSS based on feature gate
b0491d71bd5 Support skipping pulling addons image.
760abc2a821 bump gomega to 1.29.0
5925dc07758 LegacyServiceAccountTokenCleanUp beta
69b9d50f9d0 e2e_node: mark CDI test as NodeSpecialFeature
a9b1adbafc7 [KMSv2] promote KMSv2 and KMSv2KDF to GA
9f06eb4ca2a don't run these tests on aws
e98c33bfaf2 switch feature flag to beta for pod replacement policy and add e2e test
af14f97cba7 sample device plugin: fix incorrect Errorf invocation
fcc55280b01 Use k8s.io/utils/ptr in pkg/proxy (#121154)
b6afba18fb1 verify-file-sizes.sh: ensure that no large binary files get added
fd132665a8a extend VAP status controller for extensions type checking.
3f73cdcf2ad extend SchemaResolver for more types of schemas.
38fecc8319d opportunistically attempt to refresh RESTMapper
05cd3e66ef5 simplified e2e test for CRD typechecking.
60a602f1701 gce: fix test for non-existing instance in cloud
4a640ea384a cloud-node-lifecycle controller: add fallback for empty providerID in shutdown
84faaf4427f Prevent sampledeviceplugin binary commit
7fc42189b19 Add back k8s.io/kms/internal/plugins/_mock/go.*
110ffa13b7d Delete binary file
e07d898cfd2 Make StatefulSet restart pods with phase Succeeded
27f6fb2fa7e hack/tools: golangci-lint v1.55.1
6302f011211 e2e node: fix broken assertion
d0a5cd16da8 e2e upgrades: fix broken assertion
fb872e86384 test: fix storage status update test
53339894a1c enable PersistentVolumeLastPhaseTransitionTime feature gate for status update test
071a67d8c29 export time function
9cfd96dbb5e graduate PersistentVolumeLastPhaseTransitionTime to beta
c6b42c8a72f Make e2e node image ID test more flexible
517efd64425 cluster/gce: set KUBE_WATCHLIST_INCONSISTENCY_DETECTOR when requested by a CI job
837090135f8 kubeadm: make super-admin.conf changes to app/cmd
30ed50d32e3 kubeadm: make super-admin.conf changes in app/phases
d0328df04e0 add time tracking to CorrelatedObject
1165609036c Add metric for e2e pod startup latency including image pull
702d911e226 working-config-otel
e7a9a148489 replace CEL ValidateWithRatcheting with variadic options
f71040f620e Remove the usage of feature gate
0ac35fe44f4 Update security contacts for sig-cli
8d3a25c7c98 [KMSv2] Add tracing
c2a04fa1cf5 kubeadm: fix export comments to make golangci-lint happy
f91228ee719 Unexport BaseEndpointInfo fields, fix getter names
e3357d0c5f3 Clean up Endpoint / BaseEndpointInfo a bit
2879ec10d50 Rewrite ipvs/iptables tests that manually construct BaseEndpointInfo
27bb66fd7b7 cleanup: rename failedPlugin to plugin in framework.Status
2a8982b27b8 Remove problematic Dbus restart test
39df946c066 golangci-lint: enable doc comment checking for cmd/kubeadm
3738111337e Add unit tests
08b942028f9 DRA: call plugins for claims even if exist in cache
69ca55f1368 Do not preallocate node for Job e2e tests to fix flakes
98bed52fdd6 kubeadm: make super-admin.conf changes in app/constants
e511edf11f7 Fix SELinux unit tests
2f5903b4cf4 Move SELinux warning metric to be counted once per pod
d20edf697aa verify-golangci-lint.sh: support arbitrary GOBIN
a92c1269e25 test: fixes hot reload flake
71a1565d065 revert: reverts fixes for TestEncryptionConfigHotReload flake
83f5b5c240e Deep disablement for APF based on --enable-priority-and-fairness.
8e0be64b8ff remove data race on the devicemanager client plugin
aeceec72bbd add integration tests
97e72d792cc Remove independent tests for metrics
84cd6dbb0aa use the latest semver version for the badge
b3525946d5e ratcheting: provide a shared correlated object
dfeab6eca8c fetch a shared correlated object off the validation options if it exists
0a19b5ab6e2 fix usage
432e8937cfb add variadic options to ValidateUpdate
9e2821d585e revert changes to TestMetricsOnSuccesses for job pods creation total metric
055e926a924 e2e: Increases the memory limit for downward API tests
88c0a8be1bd feat: add job_pods_creation_total metric
b1ce529b2ac Remove unnecessary GetIndexer
1224e0e881d Add PodHostIPs test
f8a4e343a10 Fix tracking of terminating Pods when nothing else changes (#121342)
12a972cc1e6 Promote KEP-2681 to beta in 1.29
2cea51221a3 hack/logcheck.conf: enable contextual logging in kube-scheduler
bd8ac8c7fac kube-scheduler: checked err for golangci-lint
b0a73213d6d kube-scheduler: convert the remaining part to use contextual logging
bbb4a88bbbc e2e_node: implement DevicePluginCDIDevices test case
bf2f640ea2c Add more test cases ensuring nextScheduleTimeDuration is never < 0
16b3acc27a1 cleanup UnknownCRISocket for unit tests
71bedf5cb28 kubeadm: skip CRI detection for 'kubeadm upgrade diff'
20c8b797a3c Indicate Job Backoff Limit Per Index reason consts are beta
b06675724d6 Add e2e test for backoffLimitPerIndex
4b59d2b05c0 kube-proxy: Optionally do privileged configs only
35f4d29d735 Fix unit test
b052c7b7cdf Update npd version to 0.8.13 in configure.sh
a6f5246565b integration test for empty & unstructured.
168998e87bf StreamTranslator and FallbackExecutor for WebSockets
c6b3a2f477c allow empty object to be CEL value.
8ae0d390d77 add container filesystem to CRI api
93951bc00d3 Add stability tests for CEL cost estimation.
d9c967113f9 tests: fixes flake in TestEncryptionConfigHotReload
6d580da03fd ratcheting: ratchet CEL expressions for no-op updates
27afb7d75d2 e2e storage: use framework to tag tests
8a42be978bf Add CDI support to the sample device plugin
d9131d5b390 [KMSv2] Drop the apimachinery
6d02fbdbe07 Revert "Promote KEP-2681 to beta in 1.29"
55e3662b72d dra: refactoring overall flow of prepare/unprepare resources
fa83d5fef17 node: e2e: topology-mgr: Disambiguage cores from cpus
e1f5eb3f142 node: e2e: topology-mgr: Determine threads per core
e74f2d41aab Allow using upper and lower case true|false when setting kubectl feature flags
074a8b00840 KEP-3638: Promote plugin resolution to beta (#120663)
b31e7793d0d client-go/reflector: introduce a data consistency mechanism for the watch-list feature.
d5085c9cbe5 Bumped the fsnotify from version v1.6.0 to v1.7.0
fb6b10997a7 cleanup: remove useless test
3f4d3b67682 Cleanup paging parameters in etcd3 store
2dbd4055834 Graduate ReadWriteOncePod to GA
42945ea6dc8 update suspend test to match other test cases
49c947ba15a metrics: add and use ImageGarbageCollectedTotal
d8a5cd59c08 kubelet/images: add unit test for MaxAge
914aa746c18 kubelet/images: add and use freeOldImages function
76e623098c8 kubelet config validation: add validation for image max gc age
d992ea4b309 kubelet: add and use ImageMaximumGCAge in KubeletConfiguration
9a58f6c4fb4 Forbid creating CronJob with TZ or CRON_TZ, but allow updates
34294cd67f2 locking feature-gate for ready pods job status
b386120da23 Remove storageConfig.Paging parameter
106f58686d5 Remove disablePaging param
b0d04d933be Introduce the job_finished_indexes_total metric
6ab48d1adc5 e2e storage: remove dot at end of ginkgo.It text
a913abe191b e2e test for checking ready of job status
fb0ffb07a76 kubeadm coredns use drop ALL instead of all
81b960efefe e2e framework: allow random ordering of tags and text, fix some functions
a4efb6fc130 kubeadm: add debug log for kubeProxyConfigFromCluster
4f5bc7e8d76 fix based on reviews
82c0cbf6d84 e2e: stop using deprecated framework.ExpectNotEqual
eb3a11ea142 registry/core: wire NotFound getter instead of nil
cbe3d897629 Promote CRD validation rule to stable
fb9f2f5bc59 DRA: e2e: test non-graceful node shutdown
32fdb551920 Use Patch instead of SSA for Pod Disruption condition
a7adde53be4 bump golang.org/grpc to v1.56.3
a1d2df81fb3 e2e: add [Environment:NotInUserNS] tag to sysctl tests
441d2b40dfd Undeprecated kubelet cloud-provider flag
4a87ee26998 use PollUntilContextCancel to replace PollImmediateUntilWithContext in test
cf836309dc2 Add validation for --storage-media-type option.
8775d805fa6 use PollUntilContextTimeout to replace PollImmediateWithContext in test
1a41ed394d6 convert pointer to ptr for sig-apps integration tests
27bb40a9d83 Remove GAed feature gates OpenAPIV3
c5e25637c64 fix typo
a25b87d84a3 e2e apimachinery: use feature gate
ceba3be6b58 e2e: add more feature definitions
9be1b68ad03 Update staging/src/k8s.io/api/batch/v1/types.go
00c21ced3ab Fixing CurrentReplicas and CurrentRevision in completeRollingUpdate
cb5dc46edf7 feature(scheduler): simplify QueueingHint by introducing new statuses
6dd0ad5c0f3 Graduate BackoffLimitPerIndex to Beta
8ae32771523 kubeadm: remove unused DNSAddOnType from v1beta4 API
259dd93e719 kubeadm: skip CRI detection for 'kubeadm config validate'
3da7802b7c5 kubeadm: cleanup UnknownCRISocket from staticpods test
aee73352853 add new test cases
220d5c2e543 remove dead code in test
79f9bfdc8e5 fix wait.PollUntilContextCancel immediately executes condition once
8dff3fcb0c8 fix: Use upper case `ALL` in drop capabilities
0a6d9531f40 update generated code and openapi
4d21a23be35 pin openapi
31a1c00e49c cleanup: move unstructured check earlier in status update
d151f227803 cleanup: remove unused versions of cel validators and structural schemas from CRD strategy
cc0264f7fc8 cleanup: check unstructured for Validate(Update) before validating
ced56a6adab Restrict supported media types for new apiservers.
f5cb2ada944 k8s.io/kms: drop direct dependency on klog
db8b3031561 Modify mostRecentScheduleTime to return more detailed information about missed schedules
6c4f71b31ce Fix spelling
02b0b79eda5 CHANGELOG: Update directory for v1.25.15 release
9cf35f40016 CHANGELOG: Update directory for v1.26.10 release
b7477c31b03 update versioned types
4780a75d5fb CHANGELOG: Update directory for v1.27.7 release
d7556769e7f Job: Replace deprecated wait functions with supported one
1babd6f0e3f CHANGELOG: Update directory for v1.28.3 release
989aadda830 Revert "KEP 3085: check PodReadyToStartContainers condition after volume create"
d5d3c26337a feature(scheduler): implement matchLabelKeys in PodAffinity and PodAntiAffinity
2508f468a8f kubelet/userns: Add more unit tests
0dd495e6dc2 Address review comments
7ff866463af Refactor watch event serialization to allow caching
0cda42af7ab Unregister group path from apiserver when the group no longer exists
a50d83c669e Add basic authz config integration test
22e5a806a73 Add --authorization-config flag to apiserver
75f20ee64da update pretty param description
e312d93a66a kubeadm: increase ut coverage for bootstraptoken/node
7bcc98c46b9 sidecars: terminate sidecars after main containers
c8b65422e58 Drop usage of deprecated method NewNamedRateLimitingQueue
201c30fba82 Job: Handle error returned from AddEventHandler function (#119917)
7a1ac18bc84 Fix panic if there are more terminating pods than active pods
fad4430f9e6 cleanup: remove redundant logic in PodReplacementPolicy integration tests
007ef653ad0 add feature gates for authorization config
2ccf7e8e49b fix: minor lint issues and redundant check
056b25dfcab fix: improve PodReplacementPolicy integration test case names and update deprecated methods
bf32f87d00e skip CEL validations for enum violation.
e73edf7764f fix: typo in indexed & non-indexed completion policies for failed pod replacement policy integration tests
bcf1c113f4e cleanup: add new test cases for failed pod replacement policy instead of editing existing ones
72e67e0ef0d kubeapiserver/options: fix cloud provider validation
911700e64e3 Fix typos in markdown
2bf2c4f3a41 staging/apiserver: correct KubeConfigFile type in authorization types
b500c3d6930 Correct the label selector used in TestSampleAPIServer
c281c70bac3 kubeadm: remove reference to UnknownCRISocket from getInitConfigurationFromCluster
7d077f9271e e2e: move AllNodesReady check to DeferCleanup
ca6fda05ce5 Restart containers in right order after the podSandboxChanged
75612848195 Remove GA featuregate about CSIMigrationvSphere in 1.29
e3c58378bc3 Revert "kubeadm: FeatureGate MergeCLIArgumentsWithConfig is added for ignorePreflightErrors"
9a354fc9d03 node: sample-dp: Add retry to handle device plugin restart failure
d0d133298d9 node: sample-dp: Use fsnotify for kubelet restart detection
f46cdf1428c node: sample-dp: set default value for `pluginSocksDir`
211d8cc80a7 node: sample-dp: stubRegisterControlFunc for controlling registration
c4c9d61d66f node: sample-dp: Handle re-registration for controlled registrations
6714e678d33 node: sample-dp: register by default and re-register on restarts
465d3bb65b9 DRA: notify ResourceClaim or ResourceClass of wrong params
d2b803246af Don't reuse the device allocated to the restartable init container
a45a813d5e3 kubeadm: fix "eliptic" typo in API package
fced85b27a9 run hack scripts to update cyphar/filepath-securejoin to v0.2.4 correctly
1715fc0ca06 Fix issue in enabling evented pleg feature gate
defda81bf8b kubeadm: remove `ClusterConfiguration` parameter from preflight check
5d5958e3389 fix ImageLocality plugin score is inconsistent
76059738a4f update standard protocols to match KEP3726
4ae7150f05d remove pc pvc status endpoints
757597fabfa track unmaintained repo - mailru/easyjson
2e8f66afb39 Promote PV/PVC status e2e test to Conformance
28f335a3397 kubelet/images: refactor image gc unit tests
e22ebf13a95 kubelet/images: refactor freeImage and imagesInEvictionOrder
d6d2c5775f1 Set gate SkipReadOnlyValidationGCE to Deprecated
56023e00cbc cri-api: compress OWNERS files
f2b723a130e fix: improve assertion for Failed PodReplacementPolicy integration test cases
e3098225eaf bump kube-openapi
b30c6bdff81 Fix v3 spec
d1a6c0ae7df Update cri-api change in v1.29.0
2f923e356e0 k8s.io/apiserver/storage: add a new TestCreate case.
5d0f8530f6b fix Huge Pages failing test
7d31b5ffd0a Add test case for sandbox condition if pod fails to mount volume from a missing secret
dd9c3358f5e Revert "podresources: e2e: force eager connection"
27abf99148b Remove GA featuregate about ProbeTerminationGracePeriod in 1.29
5c0618b848d codegen
011c65e17e2 configure npd to run as daemonset on cos
39dcad8a19e Populate CRI filesystem info error
bfda244e54e pkg/proxy: dual stack health checker
73a8965e2a9 Graduate DevicePluginCDIDevices to Beta
f69e1fed82f Remove GAed feature gates TopologyManager
957adfac498 fix invalid log calls
8009530d77d kubeadm: FeatureGate MergeCLIArgumentsWithConfig is added for ignorePreflightErrors
fed4f16a7ad Remove GAed feature gates SeccompDefault
33f2d487e2d Promote KEP-2681 to beta in 1.29
18c3b6fce43 Register metrics for apiserver handlers
56836608303 remove deprecated framework.ExpectNotEqual for node
b548bbb8cf8 When reading pvc status allow bound to be a valid value
11b0eed9e7f Work around bug in gcloud when downloading logs
1132fd0afdf add tcp_fin_timeout, tcp_keepalive_intvl and tcp_keepalive_probes to safe sysctls
4ea6ec738cf pkg/proxy: add an ipFamily field to the winkernel proxier
6732c4110f3 kubeadm: fix uninvalid namespace field for clusterrole
332779a3b29 add a simple e2e test
3a96afdfefd implementation
fa01dfdb0a4 validation
0f46033dca2 fixed miscalled function
9327f3a1734 api changes
c2d473f0d43 remove ClusterCIDR
32d2afe42bc kubeadm: fill with the DefaultCRISocket when CRI socket detection is not required
c72923b17ae Register UnauthenticatedHTTP2DOSMitigation into kube components
fb1fc8b4a72 ratcheting: disable correlation by index
d991ed56c29 comments: clear up correlateOldValueForChildAtNewIndex godoc
0ed67c9e41d cleanup: use swtich in CachedDeepEqual and add more comments
60c90fc0854 cleanup: consistently support nil receiver and document
abb68591afd cleanup: clarify correlatedOldValueForChildAtNewIndex comment
ddcbae734af Add a 0 × 0 case
fb2e28b0702 Verify more carefully the results in the TestInt64AmountMul
26a4e06c92c k8s.io/apiserver/storage: add 3 new unit tests for delete.
e1fa1df3ae8 cleanup: consistent interface{} and any
0495616230a cleanup: add godoc
4de3e73b8ac Add test cases for mostPositive and mostNegative
685ae024332 Add more unit tests
79325b6178d Multiply by a scalar
4381eb7237e quantity: Add multiplication methods
1ae54296291 add potential fixes for flakiness in eviction tests
db8e106e3f6 Code Refactor: using struct option rather than a long list of parameters
b0c7956a869 Bump distroless-iptables to v0.4.1
a34d2f3b134 fix limitrange flaky test
10151a5e38f kubelet/sysctl: update log level
cd5db9b7f23 Skip TestUnauthenticatedHTTP2ClientConnectionClose http1 tests
4dedabf2a65 test: fix boilerplate
80e378181ea add rundir folder to gitignore
800a8eaba7f Prevent rapid reset http2 DOS on API server
968d6b8a325 Update busybox SHA based image to match tag - 1.36.1-1
78ffa882be2 chore: updates api doc
de5dcdc79b7 cleanup: fix missing manual selectors in strategy test
761cb18a688 cleanup: refactor job strategy tests; add test for generating selectors in PrepareForCreate test
b9b436a0183 cleanup: extract generateSelector from Validate method in job strategy
c94240e2e2e move kubelet constant for podreadytostart to staging
1d30a01186d Update publishing-bot rules for active release branches that uses go1.20 to Go 1.20.10
de01788deaa Switch to newer cos-gpu-installer - v2.1.9
adae1e33eae kubeadm: remove AlphaDisclaimer for certs phases
7b1d87383ec add kubelet policy skew test for kubeadm
5ad5ef1d0f6 Switch to newer cos-gpu-installer - v2.1.7
0149c1f8b31 test: few more correlatedobject test cases
ba9347230e6 test: add correlatedobject test cases
15ae6cc1607 pkg/proxy: add flag to configure udp conntrack timeouts
c08a9321eed cleanup: add header and fix spelling
27cb869e559 refactor: move correlatedObject to its own file
b321e8bf0db refactor: make CachedDeepEqual independent of validation
921c0d01800 cleanup: add defaulting for job manual selector (#120206)
c83e73ba571 CHANGELOG: Update directory for v1.29.0-alpha.2 release
baac8bb573c k8s.io/apiserver/storage: add some ResourceVersion validation in GetList unit tests
ebca5d438d9 k8s.io/apiserver/storage/etcd: refactor getCurrentState.
555c1b8091c bump kube-openapi
83760ae56c8 update openapi with required requestBody
5eb7fea3834 [go] Bump images, dependencies and versions to go 1.21.3
a504aed54d0 Add shortname ambiguity warning in shortcut expander (#117668)
7989400bef5 Fix concurrent write when filling PVC labels
54714686bc6 Modify test PVC to detect concurrent map write bug
d7ee6b9d1bd fix possible panic if pod replacement policy is turned on and jobs do not set pod replacement policy
2c1836bc245 remove deprecated framework.ExpectEqual
990a46f9bde Update QueueingHInt's KEP
b42b3f740a4 Pod Security admission allows net.ipv4.tcp_keepalive_time in v1.29+
0167a9f833c mark net.ipv4.tcp_keepalive_time as a safe sysctl
babac47c6f1 fix DevicePluginProbe node-e2e: pod and kubelet restarts
4acaf9ebed7 Add service name tests
438c0daab75 add rest of accessors to common.Schema
0f989046d06 kube-apiserver: move cloud provider validation into options
5de835d5d89 Add runtime handler field to ImageSpec Will be used by changes for image pull per runtime class in KEP 4216
80269d5d349 fix missing http.target trace attribute
dc334b953d9 dependencies: update otel-go dependencies
e76aad1813b refactor: use common.Schema in CorrelatedObject
83a1dbf885d refactor: export correlated fields
e73f3c8cdb3 refactor: add methods for Key and Index on CorrelatedObject
fc7c951d5a5 .: bump golang.org/x/net to v0.17.0
2032b742546 KCCM: fix GCP ILB by reintroducing readiness predicate for eTP:Local
471e3ab8281 refactor: factor out object correlation
30cf9ed5677 refactor: directly implement ValueValidator
4fb5f1a6119 refactor: remove unnecessary lambda (noop)
19ecf93ec3d e2e: define features and node features
f2d34426f86 e2e: enhance SIGDescribe
39b6916cbcc e2e: add wrapper functions to annotate tests
535ab743461 e2e framework: track and report internal bugs
3afdcc03ea5 e2e framework: list specs and labels
aa4d2fc5edf e2e storage: remove useless info message
581af9ba6da kube-apiserver: use only one client in apiserver controllers
215c4627ef9 Update SECURITY_CONTACTS
e9957d79aae make update
0eacff0baf9 compatibility (adapt testdata)
b7ee8e84221 drop UID from the IPAddress.Spec.ParentRef
f538be659c7 hack: fix update of golangci-lint verify scripts
6c395eb098d Fix "Endpoint" vs "Endpoints" in proxy type names
00ae26cda8f Create e2e test for PV/PVC status endpoints
b190ea0c966 hack: update golangci-lint verify scripts
302d350e88e set maxLength to longest enum.
d4a5a085a84 Improve error message in cpu assignment logic
79355caa565 dependencies: ginkgo v2.13.0, gomega v1.28.0
52c58d970e5 fix data race in apf unit test
a6b0a6c484d Bump distroless-iptables to v0.3.3
f3c786cbda7 Fix regression in cmd/kube-proxy/app unit test speed
e86e756c27e Update publishing-bot rules for active release branches that uses go1.20 to Go 1.20.9
0be5fdb5ced Add volume plugin label to SELinux metrics
137ad9bf2b5 clean up deprecated funcs in e2e framework
d5d7fb595ee e2e_node: stop using deprecated framework.ExpectEqual
5f74461bcd7 e2e_apimachinery: stop using deprecated framework.ExpectEqual
122ff5a212a Move grpc rate limitter from podresource folder
9cca527c4b3 Migrated `pkg/scheduler/framework/plugins/examples/` to use contextual logging
62683c8d959 pkg/proxy/ipvs: hardening lb source ranges filtering
ccc6458683d e2e_node: add testcase to check status of pod ready to start condition are set to false after terminating
c3bf541edee kubeadm: clean up unnecessary references to UnknownCRISocket
bb02d0febab fix incorrect Consistently due to missing assignment when create a newAsyncAssertion
7cba35f6519 nodeports: scheduler queueing hints
20db4ef3d64 kubeadm: fix wrong ut for util/etcd
4a8267f26be kubectl: ensure '--duration' must be positive for 'kubectl create token' command
3c4512c6ccc hpa: always update status metrics when updating the replica count
89adbb4b4aa Unit & integration tests for OpenAPIV2 AddUpdateAPIService
83fb504e46c Fix 120878 - Refactor cacheabledownloader so handler can be updated and fix AddUpdateAPIService to update handler
3ee2f27e5bb kubelet: cloud-provider external addresses
619abfec70a [go] Bump images, dependencies and versions to go 1.21.2
8b5f30ef096 Don't reuse CPU set of a restartable init container
e8e22f645d0 kubeadm: Optimize the logic to override the arguments
8510057e2da kubeadm: increase ut converage for bootstraptoken/clusterinfo
a888fef242f Use timeout function to detect transient errors
1b489963c8d Add nil checks for hpa object target type values
0f632988297 generated: UPDATE_COMPATIBILITY_FIXTURE_DATA
3808812de7e ValidatingAdmissionPolicySpec: Variables omitempty.
a213edae2a6 Add package-level godoc to pkg/kubelet/cm
b2f0052d27a Make a certain ipv4-vs-ipv6 config error non-fatal, for backward compat
b96a074bcdf convert pointer to ptr for job controller
1d519f1b087 cluster-bootstrap: make IsValidBootstrapToken() be in constant-time
914210ee9a6 revert back to IsUnexpectedCloseError check
e1ae9060480 Close websocket heartbeat explicitly when unexpected closure received
c03579bfa40 typed variables support.
4d157bb1427 add single boolean to composition e2e test.
69a3e3d1089 Add --extra-peer in conversion in kube_codegen
3de0d9afbb3 pkg/kubeapiserver: pass authorizer in top level while building from legacy options
4b391501795 reflector: fallback to the previous mode on any error
11ce6d29157 k8s.io/apiserver: fix levelling of the name field in AuthorizationConfiguration
5f8fc30b2c0 Added locks on request tracker before accessing fields (#120599)
9b32a47ab65 integration/apimachinery: add TestReflectorWatchListFallback integration test
c65fe450d8a Generated files
26f113be2fc reflector: close an established watcher when the StopCh was closed
f17468ff060 Fixs a validation error in teh admission registration API
6d759aac910 delete addon-manager test
e7b2aeee930 Fix API docs for audit APIs
38935b787ea Do not fail volume attach operation at kubelet if staging target path already exists on windows worker node.
243ba5fb6b6 remove an e2e test specific to kubeup clusters
98bad643cde e2e_apps: stop using deprecated framework.ExpectEqual
566fad5eda3 add metrics to the ipallocator repair loop
4eff70dcf9f add metrics to the nodeport allocator repair loop
6c9ddf300cf update generated
9242cb19348 Rearrange kube-proxy config fields / CLI flags to make more sense.
44cb330aa00 Improve kube-proxy config / CLI documentation
0b76e7b69fb Fixing attempt to deploy past allocatable memory limits test on Windows
d2a3184c47c remove pkg/encrypt and pkg/value in kms
e764e83fe88 remove mock aes, latency and ratelimit wrapper remote services
2f5708833a5 [KMSv2] pkcs11 reference implementation using SoftHSM
74180aaf661 Fix scalability concerns in test runs
5ebde41efb5 Refactoring variable declaration and value setting
0e8a1f18163 e2e: remove redundant spaces in test names
6200eb04aff use generic sets in scheduler
e320fadebe6 kubeadm: add unit test for phases/bootstraptoken/node/token.go
d9002176649 fix missed branch - targets when building using arm64
61603d36d73 Fix 120739 - Prevent AddUpdateAPIService from blocking on updating spec
7437ad2617a Add/update prechecks to verify-govulncheck.sh
59ad81a6157 controller/clusterauthenticationtrust: complete event filter
a0610a97b3d pkg/kubelet/cm: Remove deprecated sets.String and sets.Int
63950491764 controlplane: make option structs uniformly optional
a97f4b7a312 endpoints/metrics: define watchListLatencies metric and associated functions
5dc540ff57e k8s.io/client-go/tools/events: pass context into EventSink methods
27a68aee3a4 k8s.io/client-go/tools: support context for event recording
772b1f4cd84 handlers/watch: calculate and record WatchList latency metric.
4d2d9947bf8 Deprecate cloud-provider/cloud-config in apiserver CLI
394bcaf1820 Only configure swap if available on node
2b973806bc7 Remove remaining unnecessary assertIPTablesRulesEqual checks
de077f448e9 Rename TestNonLocalExternalIPs to TestExternalTrafficPolicyCluster
19f19e2f4f9 Merge the `ExternalTrafficPolicy: Local` tests together
ff5f5bc1613 Merge several NodePort tests into TestNodePorts
f38231d5687 Merge all the "reject when no endpoints" tests together
2435da11d5d Rewrite TestClusterIPEndpointsMore as TestClusterIPGeneral
ce7ffa81754 Extend iptables packet tracer to support multiple node IPs
2172ea60836 Fix typos: update Enpoint to Endpoint
6297067ff1a apf: request ejected from queue should use reason 'time-out'
11ef9514dad apf: remove RequestWaitLimit from queueset config
da8a4722066 apf: remove timeoutOldRequestsAndRejectOrEnqueueLocked function
f39213a7e44 apf: use context for queue wait
52f5093d775 Build kubelet with CGO for sig-node e2e tests (not ginkgo)
9b32d2f67d4 Default clientset_pkg and clientset_name variables
36146ad686a e2e dra: enhance test driver
46835f8792d CHANGELOG: Update directory for v1.29.0-alpha.1 release
cdcf49ea12e Fix 120758 - prevent cache Load on uninitialized spec
0ba37e70b6e k8s.io/dynamic-resource-allocation: fix potential scheduling deadlock
2ce4f85a465 update verify script to check deprecated fields
e5f25ccb620 k8s.io/dynamic-resource-allocation: fix compatibility with Kubernetes 1.27
70ae9c441ce storage/util: introduce HasInitialEventsEndBookmarkAnnotation
e1a572fb2ed update filepath-securejoin dependency to 0.2.4 to fix security vulnerability
4a74958b2df deflake TestWebSocketClient_HeartbeatSucceeds
ca562fd280a storage/etcd: the watcher supports the API streaming
84d5e7c8fac remove RetroactiveDefaultStorageClass feature gate
1a68195626a kubeadm: fix the bug that kubeadm always do CRI detection when --config is passed even if it is not required by subcommand
1d88bf9789b scheduler/nodeaffinity: reduce pod scheduling latency
72b68b8003c Remove dpasiukevich from cluster/addons/dns OWNERS
b71d7f9305c use generic Set in scheduler
7c5219438df Remove an old compatibility check/warning
5c80007eccb cluster-bootstrap: make randBytes() be in constant-time
1b602ffd9a4 Bump Konnectivity to 0.28.0
06deb49d2c9 Fix panic testing intree vSphere dynamic PV.
0910fe4b983 Extend iptables packet tracer to check the protocol
a25fb03c00a Add assertIPTablesChainEquals, to streamline a few tests
0ab0e404b83 Drop the now-unused assertIPTablesRulesNotEqual
4438f5e436b Remove assertIPTablesRulesEqual checks from terminating endpoints tests
d57a51d0a90 Remove assertIPTablesRulesEqual from InternalTrafficPolicy test
43db55e93de Rename and extend TestOverallIPTablesRulesWithMultipleServices
a96b97e40c0 storage/etcd3/metrics: add unit test for apiserver_storage_objects
534a0941e8d kubeadm: change kubelet skew to apiserver to n-3
0e238c4c28f storage/testing/watcher_tests: add new flavour to RunWatchSemantics test and fill the gap
9345da51ac4 fix comment mistake, run "make update"
45a776d5ff4 update rules to switch from deprecated dir field
9fb77db9b93 e2e: set liveness probe timeout seconds for conformance test
5d56f7cf86f Apimeta Set/RemoveStatusCondition: Indicate change
b489beb365f Remove an old compatibility check/warning
eb109e39480 e2e: bootstrap vsphere tests earlier
d3d1827c054 Use local isCgroup2UnifiedMode consistently
8a31bb6786c workqueue unit tests to assert collapsing behaviors
dc5cfe3cff2 storage/testing/watcher_tests: refactor RunWatchSemantics tests
b5bffb6d97f kubeadm: add v1beta4.ClusterConfiguration.EncryptionAlgorithm
d8cf68e75fb kubeadm: Nominate myself (chendave) as kubeadm approver
0786fcc941b kubeadm: Remove the support of configurable component configs
3eb6c4d368e Migrated `pkg/scheduler/framework/plugins/volumebinding` to contextual logging
0105a002bc6 when the hint fn returns error, the scheduling queue logs the error and treats it as QueueAfterBackoff.
ed76c371df9 kubelet/lifecycle handlers: refactor port resolver
e00551fe5d4 Allow storage migration of CTB without attest authorization
c816601d834 reintroduce resourcequota.NewMonitor
7cfdb792d69 Revert "Skip kube-dns tests if coredns is installed"
f5d915b5947 topology-mgr: metrics: Deflake Topology Manager metrics e2e tests
a7466f44e01 Change the scheduler plugins PluginFactory function to use context parameter to pass logger - Migrated pkg/scheduler/framework/plugins/nodevolumelimits to use contextual logging - Fix golangci-lint validation failed - Check for plugins creation err
41584bde233 fix code style
de244b2678f Promote StorageClass e2e test to Conformance
b23575d0fcf remove storageclass endpoints
a62eb45ae2b Rename job reasons to JobReasons as part of api review
301aa69fec5 cronjob controller: ensure already existing jobs are added to Active list of cronjobs
5ed60a72f62 Revert "Make StatefulSet restart pods with phase Succeeded"
5341890c96f add missing labels to kube-dns deployment
9e060590e6f skip kube-dns tests if kube-dns is missing
2a827767458 change rolling update logic to exclude sunsetting nodes
04668c00432 cache/reflector: check the value of the initial-events-end annotation
83c37acb21f e2e framework: adapt unit test to Go 1.22
5c28fd28478 vsphere: adapt to govmomi bump
4b60c18183f storage/etcd3/watcher_test: refactor TestWatchErrorWhenNoNewFunc to a table test
26a395ecc28 Trigger CI
12c0c08e658 fix data race in test
9533cfe2eed fix: add unit test
bad0593a686 fix kubelet image gc
91bb75883c6 storage/testing/watcher_tests: make TestCacherWatchSemantics storage agnostic
272b23cc7ad kubelet: fix log when using --reserved-cpus
42356bfbb3e move common logic of highestSupportedVersion to util package
fc6b19a4ba6 .: bump govmomi to v0.30.6
afbb1a6ef98 storage/testing/watcher_tests: move TestCacherWatchSemantics (no-op)
3a96baf3fa8 storage/testing/utils: add helper functions
c8b9d64d81f scheduler test: unify util to fake pod.
b953708fa93 Update 1.29 Release Notes team
a919079ff31 Check --show-events in kubectl describe pvc (#120380)
1a27531d2e1 Fix for Kubeproxy Mock framework where hcn object is holding always new object and not the pointer reference.
108d1955954 use AuthorizationConfiguration in kube-apiserver for storing authorizer config
52c582ca77c Bootstrap API Types for Structured Authorization Configuration
bbb905c794c remove gce healthcheck interval e2e lb test
b59d4afd14e fix typo exeucting => executing
62275e3cc8c fix typo dervied => derived
79a7833ade0 fix typo Mininum => Minimum
6e3ebdc68e7 fix typo Conext => Context
409b46576ff bump github.com/emicklei/go-restful/v3 to v3.11.0.
b4e5b868a8e Don't reuse memory of a restartable init container
10caecb3b22 kubectl prune v2: switch to contains-group-kinds annotation
6c59e8be5e2 hack/update-vendor.sh
dad1b2a4306 Fixup kube-openapi/pkg/cached changes
e1ffbacb7ae go.mod
7cac1dcf678 dra scheduler: fall back to SSA for PodSchedulingContext updates
39af594f312 storage/testing: a simple refactor
40618b765cc add loging and bump timers to avoid races
3cb0b520d60 Scheduler CSI tests: switch maxVols to int32
79d0dde4a83 replace hardcode string with exists variable
9b50af1f4f8 Use a wider-range of metric buckets for PodStartDuration
62267518b83 Fix systemd unit string matchs
c6e9fba79b8 move reasons to api package for job controller
e22f8ed553c add CAP_NET_RAW to netadmin profile and remove privileged
0288367db80 test-e2e: Retrigger the RBD image post merge job
28dbe8a34dc scheduler/NodeUnschedulable: reduce pod scheduling latency
2f10dd0a841 CHANGELOG: Update directory for v1.25.14 release
2a7902f7c7b CHANGELOG: Update directory for v1.26.9 release
7c98d3fffd7 CHANGELOG: Update directory for v1.27.6 release
309876b5d78 CHANGELOG: Update directory for v1.28.2 release
710dceded51 Look for pods in ownerReferences of PVC (#120427)
80c8074e3be service controller: limit logging node names to 50.
349e3ebf80b service controller: improve node lifecycle updates - update nodes if providerID has changed
21e26486ac3 sync Service API status rest storage
239ce7c52b1 e2e_network:stop using deprecated framework.ExpectNotEqual
7fc11f47ff4 Mark a volume as uncertain-attached after detach error
99903071469 kube-scheduler: drop deprecated pointer package
9e34aa306cd Update hack/verify-govulncheck.sh
5fcffcf4e48 Add APIGroup ratcheting validation to PVC.DataSource
af151eeba2c specifically check that the pod was successful
7710128636a kms: remove livez check
15ce5dd9903 kubeadm: fix flaky-test TestManifestFilesAreEqual
4f20a72ea00 variable name should not conflit with import package, replace the variable name
084deb7a7cf clarify the description of the metric apiserver_storage_objects
9da533ced6f API Chunking conformance metadata
3d91ffc6f9b /cmd/kubeadm,/test/e2e*: update OWNERS for fabriziopandini & RA489
4e0c8a97521 kubeadm: remove reference of k8s.io/kubernetes/pkg/apis/core/v1
4d105eb1ce8 add TestUnmarshalJson for UniversalUnmarshal
819eddaf9a4 scheduler: fix TestIncomingPodsMetrics unit test
6fbb8ec7e44 Move scheduler testing utils to /scheduler/testing
868adeb3bdb Update IPPVS e2e tests for containerd version above 1.6.9
6b4ab616a2c Increase range of job_sync_duration_seconds
d765e40a988 pass GOTOOLCHAIN to build containers
7ad0e451aca remove unnecessary kube::golang::verify_go_version calls
43b434f66a8 sig-node: add rphillips to reviewers
d1b5a9953a0 handle GOTOOLCHAIN in kube::golang::verify_go_version
4d55c0687db Reuse SupportedMediaTypes for CR content-type negotiation.
09d64ed7d4f promote sli metrics to stable
0df4a69f5c9 Kube-proxy: Get nodeIPs for both families with dual-stack (#119525)
0d3eafdfa39 fix(scheduling_queue): always put Pods with no unschedulable plugins into activeQ/backoffQ (#119105)
e6435e98eda promote component SLIs to GA; remove feature gates for component slis
e2c1c0d34a6 kubeadm: drop deprecated pointer package
357d7804b8f kube-proxy: drop deprecated pointer package
678b958567e use universal decoder and add a check on default dns Policy of static pod for test
1fb4eee94e0 Use container log instead of termination log
190f9d0d4b9 Add govulncheck script to expose go vulnerabilities
fc3ee07b512 e2e pods: fix WaitForPodsResponding retry
6f9140e421c DRA scheduler: stop allocating before deallocation
2dd7db306a6 Update modules.txt
61ecc2ad884 Retry operations if CSI Driver Isn't Found by Treating this Error as Transient
d3eb082568c Create a node startup latency tracker
2d86c333f57 add test case for generating etcd manifests
912041ce41b kubeadm: fix diff order and add test for new default value manifest
41b62c4dd71 Promote PV/PVC e2e test to Conformance
0936c8de59f remove persistentvolume endpoints from pending_eligible_endpoints.yaml
f4467457776 Improve logging on kube-proxy exit
df5c1bb1ea1 added documentation about the format of certificateKey
43ccf6c4e8f kmsv2: add apiserver identity to metrics
c1a0aa08e31 Add cni plugin auto Arch and OS selection
b443a841e30 kubeadm: add log for static pod manifest diff
f135eed37b9 update codegen
d7264d0af03 Make StatefulSet restart pods with phase Succeeded
4e73634b531 scheduler: start scheduling attempt with clean UnschedulablePlugins
7e4b5d0d49a Final Fix
f499b4f8918 Bump distroless-iptables to v0.3.2
18932d970ef [releng] Update publishing-bot rules for active release branches that use go1.20 to Go 1.20.8
93e3b07e11c [cluster/gce] Add KCM specific args
48f453d6498 cloud-provider: Log additional options
aa89e6dc978 Use ptr.To to retrieve intstr addresses
9feaefb5cbc Increase ut for kubeadm phases init addon rename field casename to name do go lint check Update addons_test.go to remove whitespace
5e0931336b5 kubelet: fix metric container_start_time_seconds's timestamp
3e2bad02dcf kubeadm: remove 'system:masters' organization from apiserver-etcd-client certificate
a0a8765027a fix: update thirdpartyresources refs
5c7dac2d772 dra scheduler: refactor PodSchedulingContext updates
43c05e98ca4 cleanup: Replace the deprecated NewMemCacheClient with memory.NewMemCacheClient
a69f56e1375 fix: check if initsystem service exists
7dea3d6c3bf New mock test framework for windows kubeproxy.
975da2fb239 fix typo in client-go package
3a1a67e33d7 add aojea as controplane reviewer
cc77b97c5e9 add aojea as client-go approver
7a13b11af0e update e2e import restrictions
6c973f01d23 reduce CPU requests for fluentd-gcp to fix failing tests
08006c842fd apiserver: rename request body size metric
8451c80b601 pin gengo
93d93258b19 bump: upgrade gorilla/websocket from v1.4.2 to v1.5.0
98af8befe27 [go] Bump images, dependencies and versions to go 1.21.1
dbd3eb54191 remove logcheck.yaml
f365cae9ee6 Fix typo in api.proto
2d1877c97b6 fix breaking pv creation when the validation webhook exists
f33265cf5d0 HandleRetry has already called in the GetObject
fc51a27c036 fix typecast missing
2ea47038b90 podresources: e2e: force eager connection
6cd446a2064 Add cloud library to unwanted deps
9f76d8d45a0 Track vendor status of unwanted deps
87d49a51bed fix(queue_test): make sure the first bind failure via counter
94afd6e3a4d skip the reason check for OOM tests if it will fail
f47661e1b72 fix inplace VPA stuck in InProgress when custom resources are specified added unit tests
d7b7a85fbc0 feat: make user-defined plugins discoverable with e.g. kubectl help (#116752)
b468e4eb1cd e2e_node: Assign enough time to finish the postStart hook
c4dd16a1f86 golangci-lint: warn about deprecated APIs only as hints
36d36722499 e2e_auth: stop using deprecated framework.ExpectEqual
9c1df5ff0af move back to bullseye
67858e1ff06 Bump images, dependencies and versions to go 1.21.0
0593cfdd14f Fixed variable used for moving auth-provider-gcp binary
c682d2b8c59 scheduler: add ResourceClass events
2ad4304e8f2 Add Windows support for IPPVS
15a402eefb7 e2e_apimachinery: stop using deprecated framework.ExpectEqual
43fc6b5bdb0 Added suggests changes
355ae44a3ca Revert "bump npd to v0.8.14"
e7ee3ae3d94 Create e2e test for StorageClass endpoints
418af0f4dcb register API types only once for encryption config
2144852f7c9 Commits merged
657cc2045ee kmsv2: enable KMSv2KDF feature gate by default
b97cb6dd007 Revert "Do not attempt to overwrite higher system (sysctl) values"
c131c92b9f3 scheduler: unit test case for concurrent event with other pod
a0d6a815fcc WebSocket Client and V5 RemoteCommand Subprotocol
0024c7e1668 Changed the generator codes for kubernetes metrics table
cd943dd95e3 scheduler: fix tracking of concurrent events
933bcc123b4 only drop invalid cstate packets if non liberal
7c75b018d57 cmd/kube-apiserver: add .import-restrictions
43783aeb18c drop release-1.24 rules from publishing-bot
e190e179b3c Document `cluster/gce/gci/mounter` as static binary
059e8353b76 check labels/annotations in the beginning
6ec8dbe5b59 cmd/kube-apiserver: avoid importing the kubeadm pkiutils package
a7748872621 cleanup:e2e:stop using deprecated framework.ExpectNotEqual
e8564d6c5bc KEP-3895: Promote interactive delete to beta
14e7d97151e Remove GA featuregate for JobTrackingWithFinalizers in 1.28
ef235c4eac8 e2e_framework:stop using deprecated wait.ErrwaitTimeout
b35357b6c08 cleanup: omit comparison with bool constants
622eac23477 e2e_storage:stop using deprecated framework.ExpectNotEqual
7c33b78418c remove resource flowschemas and prioritylevelconfigurations for legacyBetaEnabledByDefaultResources in v1.29
9795df456f3 cleanup:e2e:stop using deprecated wait.ErrWaitTimeout
fc25af7f548 using wait.Interrupted instead of deprecated wait.ErrWaitTimeout for apps
e6dfdb240fd Output the error message for better analylsis
ff3cb43c300 remove labeld-deployment.yaml
cae090e7fed scheduler: remove unused constant SchedulerPolicyConfigMapKey
c74d045c4b7 scheduler_perf: show name of one pending pod in error message
3c2cfd9a4fd resource claim controller: separate generated suffix from base
2c5a11a55bf Match on cri-o socket suffix only
214772c1104 dependencies: update opencontainers/selinux to v1.11.0
95118ec30c1 e2e_network:stop using deprecated framework.ExpectError
3f8f14397e1 Set external credential provider to true by default in kube-up.sh
410ac1456ce Don't run the nodeipam controller on KCM if cloud provider external
45b9b0df41f Add namespace to apiserver tracing
c83eb6dcaaa Add subresource to apiserver tracing
bcb59a03ebb Add name to apiserver tracing
646053d73db Add api-version to apiserver tracing
8c34208a62f Add group to apiserver tracing
6f55437472e kubeadm: increase ut coverage for addons/dns/dns.go
ceaed508ce7 Validate the cloud-provider passed in and the corresponding feature flags
2e5f17166b9 pkg/proxy: fix stale detection logic
95121fe846f kmsv2: add legacy data integration test
42e8cfa28ac fix failing metadata test
cdcbfcc0a6a [KEP-2395] Phase 4 - Disabling In-Tree Providers
8255858a7c4 remove SkipFilterSchemaForKubectlOpenAPIV2Validation
0fb1f59a881 Improve service unit test failure report
39e433891bc fix(test): delete cronjobs.v1.example.com pi for clean up
36e33cd88e8 fix(test): Remove 'shortNames' Property from CronJob Fields in e2e-test
3e252857c1c Add unwanted cloud deps to track
875b00137fd storage/etcd: add TestWatchDispatchBookmarkEvents unit test
6058540f3d0 storage: document ProgressNotify from storage.ListOptions
f4fc4b16b1d doc: Add example for restarting all deployments in a namespace
936d67f6888 Update distroless-iptables image version to v0.3.1
bb695ac67a2 eviction manager: add test case with localStorageCapacityIsolation open
a56745c7066 e2e_cloud:stop using deprecated framework.ExpectError
bfc3c2110fc e2e-node: fix TopologyManager test jobs.
3d9b5d05772 e2e_node:stop using deprecated framework.ExpectError
f1051f34a79 Remove deprecated framework
062c57ae92f dra controller helper: make allocation error message more readable
f96e23e477d dra controller helper: merge log entries for informer events
78f3b76390b scheduler_perf: use different log names for different DRA drivers
d781b58100f dra helper: skip allocated claims during UnsuitableNodes calculation
fcff9969095 adjust error message a bit
889c8e919bd New repo who dis? distribution/reference
741f1461571 Revert to json-patch 4.12.0
b10697c7880 kmsv2: fix race in simpleCache.set when setting cache size metric
8f6a79b29fa use external cloud provider by default with gce
903156daa2b fix(test): add e2e-test for kubectl events filter by GroupVersion
a46bab69308 Fix a job quota related deadlock (#119776)
696f84aeb09 Feature-gate SidecarContainers code in pkg/kubelet/kuberuntime
63177db32c2 Add an e2e test for the pod sandbox changed scenario
e167ecbb9ea fix: only invoke AddReference first time when to sync same pod to minimize unnecessary API requests to the API server for the configmap/secret get API
3c5a58c5f89 Refactor checkErr func
f22d8540723 unwanted-dependendencies: updating references, and `jq`
0323fe42e23 adding more callbacks in kubedrain helper
e01bd641447 Avoid creating local variables that don't change
10553a19668 Flatten switch case
1f4f2a5d601 Refactor common WithRange case
ede524e1a6a fix a pidpressure test flake
3bc6ee6fef7 unwanted-dependencies: sort this list
eb5695b0c5c unwanted-dependencies: adding archived repos
15c02f2a034 add integration tests
9e1ff1e5120 add loading config and wire feature flag
57b27fd3cd1 Fallback to legacy discovery on a wider range of conditions in aggregator
160589a0edb Refactor transformers for watch to implement Encoder interface
04f0b4a0147 Bump CloudDualStackNodeIPs to beta for 1.29
46cb5386423 OWNERS_ALIASES: add tzneal to sig-node-reviewer
bf41b0462cc Fix OpenAPI aggregation cleanup
16a7b536022 Fix typos in comments
2b69daa960c Allow specifying ExternalTrafficPolicy for ClusterIP Services with ExternalIPs
be4692864bb Remove duplicated returnRV variable
2e174a029f5 Add timeout to listContainerStats context
2825519da2c apf: remove v1alpha1 API
a926f594da9 Bump runc to v1.1.9
7b44d73f73f bump npd to v0.8.14
879dad9c2ff kubeadm: Remove the usage to print the default component configs for `reset` and `join`
53cb35d6d48 e2e_apimachinery:stop using deprecated framework.ExpectError
8a368afa273 e2e_storage: stop using deprecated framework.ExpectEqual
209f23ecd7c e2e_upgrades: stop using deprecated framework.ExpectEqual
41adc93ca3a remove GAed FG DownwardAPIHugePages
e187368242b fix(test): fix TestGetPodResourcesV1 comparison logic in tests
7e7b67f2ccd remove GAed FG GRPCContainerProbe
af7d76fa059 Promoted feature gate `ServiceNodePortStaticSubrange` to stable and locked it to always active
5dbec5c715b local debugging should utilize the same defaults as prod
d5690f12b69 pkg/kubelet: allow sandbox image pinning from CRI
8581703b07d Prune sig-auth-encryption-at-rest-reviewers and drop lavalamp across aliases
f5d6c65186d paginate initial list inside the storage watcher
8d9517318a4 Extend npd e2e timeout to fix npd e2e error
618e40c61b7 kubeadm: promote EtcdLearnerMode to beta
b2c0d80c37f Test watch converter encoder
03126c54658 add comment
651eb2fa58f revert PR https://github.com/kubernetes/kubernetes/pull/119592
709721e0df1 feat: update google.golang.org/protobuf to v1.31.0
3fcc045bce9 Minor cleanup tranformers interface
172a41192c6 Cleanup setting non-nil Items field
5269e769902 scheduler: properly skip DRA events
1988c31fc81 storage/etcd3: error when progressNotify option set and newFunc was provided for a registry
580f83ab4a5 Avoid duplicated dots in pod condition
855b445d28d Remove deprecated selectorSpread
c29234d3e10 Add integration tests for all bind plugins skipped in TestBindPlugin
87165303464 Add unit tests for extract tag functions in prereleaselifecyclegenerators
0ea6522807d apiextensions-apiserver: generate applyconfigurations
dbbce2aaba2 sort stability list of metrics in the shell command (#120197)
9a24dd2c27f fix(test): fix error comparison in GetPodResourcesV1 test
94d03ccc83b Squashed commit of the following:
030a114ce94 Add mengjiao-liu as sig-instrumentation reviewer
cc784cfe857 Mark Job onPodConditions as optional in pod failure policy
3d583398fe2 Avoid to build the error msg for twice
484510863bf e2e_windows: stop using deprecated framework.ExpectEqual
f5681f88179 e2e_autoscaling: stop using deprecated framework.ExpectEqual
05bb01d27a8 e2e_cloud: stop using deprecated framework.ExpectEqual
eb0afbc7d01 kubeadm: update swap warning for v1.28 change
fa37bebcd4b Add comment about why AttachFunc be overridable
d680bc540b5 fix(test): fix error handling condition in test
01df59a73b9 pkg/proxy: remove equal method from endpoint interface
6fc3d0ecefd remove GAed feature gates CronJobTimeZone, JobMutableNodeSchedulingDirectives and LegacyServiceAccountTokenNoAutoGeneration
e9be1d7438b Test now has coverage!
628bbb9ef8a kubeadm: add supported etcd version for v1.29
dcbe7755bfb kubeadm: Add testcases for exported method `ValueFromFlagsOrConfig`
78538bd303d update coredns to v1.11.0 update coredns to v1.11.1 update coredns-kubeadm to 1.11.1 bump up corefile-migration to v1.0.21 based on https://github.com/coredns/corefile-migration/releases/tag/v1.0.21 fix dns_test ut failure
e410f86825f [StructuredAuthnConfig] use local variables in oidc pkg
1bf90f9484c add StructuredAuthenticationConfiguration feature flag
1bad3cbbf59 wiring existing oidc flags with internal API struct
f909eb630ca add AuthenticationConfiguration v1alpha1 api
ff56d3b6914 Refactor WatchServer to prepare for using encoders
a4ce32769ff fix pod delete log in deployment controller
0bc0256093b Update job_controller_test.go
ff10df107a4 remove fake deployment
13a8ad12b82 apiserver: fix data race in etcd metrics
dec1c361255 add kubectl rollout e2e test
22f4b1c56ad Static check fix
70e2deb32f9 Fixing lint problem
6ded53ce4dc Added back test changes
5fb049ff473 Added create job & cleanup
ff1659cb798 Added syncjob
f87cc43cdb0 Review Changes
d08fc3a4d01 Another one creeped in
ef6a0eb6d85 Final Lint Fix
aa9f38c36d8 More Lint Fixes
601679446ae Lint fixes
cf32ae9453b Initial Commit
297f04b74ae Added function to remove finalizers as backup
1d52fb2806e CHANGELOG: Update directory for v1.28.1 release
5524f1651a2 using wait.PollUntilContextTimeout instead of deprecated wait.Poll/PollWithContext/PollImmediate/PollImmediateWithContext methods for scheduler
c9c83d1af44 cleanup: e2e : stop using deprecated framework.ExpectHaveKey
47d9a47a088 storage/util: introduce AnnotateInitialEventsEndBookmark function
ccabc01093a storage/factory: extend the Create method by newList and resourcePrefix params
02e51b27a9a CHANGELOG: Update directory for v1.27.5 release
13b52a18483 fix crd finalizer validation
ab018481342 Make sure skip score plugins alwarys returned
6805632abb8 CHANGELOG: Update directory for v1.26.8 release
f847565c081 Move mount warnings to info logs for normal expected paths
63df8a5821a CHANGELOG: Update directory for v1.25.13 release
52e85074042 CHANGELOG: Update directory for v1.24.17 release
980fa6a2b9e Add CEL library lifecycle linter
3fb14cf4e7a Bump cel string lib to v2, add tests
640a2ec3327 Update k8s code to handle cel-go changes
1a850a00630 Bump cel-go to v0.17.6
24877f96fbb Incorporating feedback on 119341
2bede058f92 Use environment varaibles for parameters in Powershell
c761c165627 Use env varaibles for passing path
1327a57aaf8 storage/cacher: duplicate logging when a watch is closed due to unresponsiveness.
9ee94b0204a Remove duplicate codes in framework RemovePod
f752ca2dc84 Make API chunking conformance test deterministic
28621f1eb3f fix(kubectl): kubectl events doesn't filter events by GroupVersion for resource with full name
79466886a17 doc(kubectl): Kubectl restart command without specific deployment will restart all deployments
ce9e668a932 golangci-lint: suppress one issue, demote others to "hints"
6a16c076e76 hack: move common "verify generated" shell code into function
9c83c380e0c Add wait for cache sync
b1223e0d1ac check for overflow
87cf890632c Fix CEL cost handling of zero length replacement strings
b0e249f657a Handle edge cases in seat demand stats
037640af8c8 Apply suggestions from code review
bd06c26d580 fix: concurrent map writes in e2e test
826f3a130ae promote to conformance Service multiprotocol tests
98d772ca3c4 Support multiarch/platfrom in find-release-tars
c6e54169fc1 e2e_apps: stop using deprecated framework.ExpectConsistOf
93832de6246 stop using deprecated framework.ExpectNotEqual
145dbb6accf stop using deprecated framework.ExpectNotEqual
d2dbc583a06 Adding coverage for OOM Kill scenario due to node allocatable memory limits, when pod level memory limits are not set
0039f24d74d apf: refactor promise to use a context
3e9a4c15a85 Restrict what imports get into code within test/e2e_node
c1eb18c00ca generated files
039859b9b72 e2e network test for udp services with hostNetwork clients
2472291790e api: introduce separate VolumeResourceRequirements struct
a5600b69251 storage/etcd: simplify passing the transformer
6161752ecbe storage/etcd: remove newWatcher function
3546831ceb2 e2e_storage: stoping using deprecated framework.ExpectEmpty
a9308927691 Gate: disallow .status.loadBalancer on non-LB svc
b8512cfe247 expect the new resource_scape_error metric
905f07f1ac1 Revert "mark the OOM killer as serial to reduce flakes"
5c7529a6fc3 kube-proxy service cache don't treat ipMode proxy address as invalid
f93bd699aaf Trim managedFields in pod informer
2f576969eee reducae function calling to once
093093593c6 kubeadm: fix the field path for JoinControlPlane.CertificateKey validation
700b55b3b26 kubeadm: fix the bug that --image-repository flag is missing for some init phase sub-commands
75a80d5aba4 kubeadm: add validation to verify that the CertificateKey is a valid hex encoded AES key
c112a34642d add unit test for kube-proxy service cache with ipMode
7f805dc9354 fix test name
30ff937aaf9 add a fake load balancer class to fix e2e test failure
3cbecf218df kmsv2: add metric for DEK cache filled
d86e72202c4 kmsv2 test feature enablement unit test
bd6f5487463 mark the OOM killer as serial to reduce flakes
afe9045e466 Add v1.28.0 API testdata
a6a1f070e7f Signed-off-by: liyuerich <yue.li@daocloud.io>
8163d244ede Update ccm flag help to describe disabling webhook serving
8291b847d58 Allow disabling both webhook ports in cloud-provider
f407b31d42a kubeadm: Fix typo where API group is not correct
72af21e1a13 kubeadm: Cleanup the unused input parameters
1eb6282016a kubeadm: Move the method used only in the test to `postupgrade_test.go`
e290b4cb3bc e2e_network: stop using deprecated framework.ExpectEqual
fd3f82531f8 kubeadm: increase ut coverage fo util/kubeconfig
48260b4a77b kubernetes mutual (2-way) x509 comment
ae0a0477bf6 add aramase to sig-auth-encryption-at-rest-reviewers
6c2cfac0a97 Revert testgrid url changes from CHANGELOG
577197559ae remove the legacy test dependency
af26ebd0fa3 translate beta label to ga in volume_zone
4712025ea84 Graduate kubelet resource metrics to GA
6ef90979720 Update the URL of testgrid
af9bf7b41e0 Prefer non-alpha storage versions when available
09fa21ab879 Store validating admission policies and bindings as v1beta1
a422d11c772 prep for go1.21: use -e in go list
ef7d4047025 using wait.PollUntilContextTimeout instead of deprecated wait.Poll for pkg/scheduler
cc1670ddd2b Limit intstr.Parse() to 32-bit integer parsing
5567f288e74 api: change list type for node lists in PodSchedulingContext
79333684600 Update CNI plugins to v1.3.0
f07a3a3f263 calculate sidecar container resource in pod autoscaler
427b703c37e scheduler: remove deprecated v1beta2 KubeSchedulerConfiguration
5bbc4f76055 Pass Pinned field to kubecontainer.Image
a5b3a4b738e cleanup: Update deprecated FromInt to FromInt32 (#119858)
b75c5d33e5c bump the busybox test version to resolve test failures
bd36be02188 Make gomaxprocs install optional, limit to tests
9a253d896a0 storage/util: move GetCurrentResourceVersionFromStorage
f7e659db236 storage/etcd: no-op, refactor watcher.Watch method signature
5752cbd8c76 chore: add pod UID in event log
7a6e056bbdc kubeadm: add TODO for NewMapStringString() and CLI extra-args
f3da0d4ed32 kubeadm: update the rest of the code base for structured ExtraArgs
a505c7160e2 kubeadm: adapt the validation and utils for structured ExtraArgs
bc6fcb72a8a kubeadm: add structured ExtraArgs in v1beta4
8314122382c e2e framework util subtle bug checking endpoints
9742e276b95 update to golangci-lint v1.54.1 + go-ruleguard v0.4.0
1e961af858b scheduler_perf: test case for DRA with multiple claims
0331e98957f scheduler_perf: fix installing DRA test driver multiple times
092897f061f drop v1.26.0 API testdata
4950521ad88 kubeadm: increase ut for certs/certlist
224087abfa0 Add Pod Scheduling SLI Duration metric (#119049)
3edae95e5ae Add unit tests for subdomain match in keyring
8cb979ae55d CHANGELOG: Update directory for v1.28.0 release
a0f07f2b4d9 e2e WaitForServiceEndpointsNum take into account the address family
a161fa8017b pull Host from kubeconfig when needed
03415ebc1da Integration tests for IP mode field
86b1f095ca7 Proxy changes for IP mode field
47fec59a31a parse node selector in prefilter
4fb0ce28377 Fix broken link to testgrid
34a89f039b8 Update cri-tools to v1.28.0
29a6705dabc Generated code for IP mode field
3ac2899d2b5 Add IP mode field
cf3f0bd7780 fix: register the plugin rejects Pods in WaitOnPermit to UnschedulablePlugins
b0082237050 fix: when PreFilter returns UnschedulableAndUnresolvable, copy the state in all nodes in statusmap
947c9376f6a change struct methods receiver to pointer
e258228e4ac use a buffer equivalent to grace period to eliminate test flakes
717c149a734 fix mirror pod nfs test failure due to differing NFS versions
279a663f948 Update README.md
6f27733af8d Job: Replace deprecated workqueue library with supported one
dd7b7073c38 e2e: add test for verification of timestamp for new PVs
8e661498702 e2e: remove extra spaces
b9cf6991e63 Use tracing semconv types instead of own defines
765f3916c27 Fix a bug that PostFilter plugin may not function if previous PreFilter plugins return Skip
1863a808b20 fix: add code comments
9646ae5a9ef Fix: null jsonpath serialization
8ab6bee676a Make seccomp status checks in e2e tests more robust
509ffe2938f Fix receiver names in legacyProvider
80710976cfc [releng] Update publishing-bot rules for release-1.24 to Go 1.20.7
f73c253accf fix typos for pod replacement policy
5fb543a4118 kubeadm: remove 'system:masters' organization from etcd/healthcheck-client certificate
62b063b74b5 wsstream: use a single approach to detect connection upgrade
74053e21519 Create e2e test for PV/PVC endpoints
49e00e8bdee Move adding GroupVersion log until after an update is confirmed
77b3bb0f69b fix race on etcd client constructor for healthchecks
a6329ac4536 Fix to honor PDB with an empty selector `{}`
0e238409290 dra test: enhance performance of test driver controller
40b604e3741 Update pkg/apis/core/helper/qos/qos.go
f355b22f5f7 implement Stringer for podActions
e4d16f34c15 Add test coverage of result size of string operations
10fe3da87db Delete PSP API types and generated clients
69a5a528967 Bump cel-go to v0.16.1
6aad00ff73d client-go: chore: implement `Is` interface for `ErrGroupDiscoveryFailed`
4063ca40501 Code review fix: Move GetPodQOS code to ComputePodQOS. If set, return PodStatus.QOSClass from GetPodQOS.
5d4410b9601 Perf optimization: Move away from GetPodQOS, using PodStatus.QOSClass instead
ef51dbfa0c7 Drop [Feature: tag to make sure this tests runs on pre-submits
a1809ffae37 client-go: log proper 'caches populated' message, with type and source and only once
37730c07dd6 apiserver/httplog: pretty up impersonation output
3e908c5bdee e2e_common: stop using deprecated framework.ExpectEqual
d154ca9c00a Statefulset should wait for new replicas when removing .start.ordinal
0944c00778a Fix some typo in kubelet component source code
3a2c4d6f096 kubeadm: fix nil pointer when etcd member is already removed
ba9ce3ab08b fix flaky test on dra TestPrepareResources/should_timeout
24f32d9d185 Local PV Stress test: don't fail on deleting missing PV
074d5b53299 Rewrite the tests to be table driven
391c1a3eccd dra: cleanup manager unit tests
a5fff9a5d09 Catch direct references to unwanted dependencies in kubernetes modules
85c385d4101 Update the container images used in cloudbuild to their latest version
c4f4e3bc43b pkg/proxy: unit test refactoring
4bc9434f99d SSA: prevent usage of Extract calls via forbidigo
b6ae858e01f Drop AvailableResources from controller context
d5d90b7b228 add support for ExponentialBucketsRange
90b870b710a OWNERS_ALIASES: compress sig-node-{api,cri}-approvers
a215b29d7cf remove makefile:generated_files in v1.29.
f0b38766a06 use LoadBalancer type service for e2e service test to patch ingress status
c23cee1be3c fix OOM killer
4b6abf10c6e Handle errors when preparing lease for update
ca338e517ba Fix the flaky legacy_service_account_token_clean_up_test.Fix the flaky legacy_service_account_token_clean_up_test.
a44ce346d78 e2e/apimachinery/watchlist: stop panicking when run against unsupported cluster/environment
14251738d21 NCC-E003660-PCK: Non Constant-Time Comparison of Service Account Token Secrets
109cf6820d2 Update base image and add utilities to kubectl image
2a767c9916a update the busybox test image to 1.36.1
133696725ae implement secret empty string value integration test
7f53f7649e1 Use intstr.Parse instead of reimplementing it
1b8fb69d9ea kubeadm: increase ut for cmd/kubeadm/app/phases/addons/proxy
63cf568251d e2e_node: stop using deprecated framework.ExpectEqual
18c46b2487a add validation for static pods to have a name
66aa2af0979 CEL lazy map: add test for boolean short-circuiting
307b0630aa6 cri-api: add CRI implementation maintainers as approvers
c4739313b7f Track manually created secret-based tokens
df89045b53c dependencies: update github.com/ishidawataru/sctp
2b12df56b0b Fix a race where a call to Shutdown was happening after ShutDownWithDrain() had performed the check q.isProcessing() && q.shouldDrain() and before waitForProcessing() has reached its Wait(). This is because waitForProcessing() is only checking the length part of the condition instead of both the length and whether we still need to drain. It turned out that there were lots of unnecessary accessor functions being called locking and unlocking the cond which are not needed because Wait() automatically unlocks and locks the cond for us and best practice says we should run it in a for checking for the condition (so this is what I have done).
213ed03c000 remove deprecated kube-apiserver identity lease garbage collector
57226fbd27a e2e_dra: stop using deprecated framework.ExpectEqual
fb9646fd60d apiserver: add flow control metric current_inqueue_seats
4e10ff91c5b pkg/proxy: move proxier health eventing to cmd/kube-proxy
fdea6ad17d7 kubectl debug: Remove legacy server support
baed6240468 kubectl debug: Introduce customizable AttachFunc instead static one
41889984304 Improve conditionFuncFor expression parsing for wait --for jsonpath
3964f71fe02 e2e:podresources: verify count for terminal pods
6d244728b9e adjust order and fix typo for kube upgrade
479b2d03a43 kubectl: fix describe node output when sidecars are present
4e2e059c7b2 Graduate RemainingItemCount to GA
6acfa3cb4ac Graduate APIListChunking to GA
e9b69d1958d e2e_scheduling: stop using deprecated framework.ExpectEqual
9d8959224cd add explanation for large-cluster-size-threshold arg about multiple zones cluster
2222509cb41 e2e_instrumentation: stop using deprecated framework.ExpectEqual
60a8bca507f dynamic resource allocation: add unit test to check the reuse of the gRPC connection
7ffd3063cef dynamic resource allocation: reuse gRPC connection
dbaa9fe6b46 added podgc orphaned pod unit tests
173b5a75b96 Trim managedFields in controller-manager
c86f562f29b Run hack/update-codegen.sh informers subprojects
9c4651bd047 Add 'WithTransform' SharedInformerOption
d1946392528 Cleanup kubectl legacy server fallback
106a931c299 fix intergration test
d2df65ba6c9 update the dependency sigs.k8s.io/structured-merge-diff/v4 to latest tag
a35608cc614 Update debian-base for test images and others
43f8ccfcca8 TopologyAwareHints: Take lock in HasPopulatedHints
a9d26ac7c78 Optimize the code of NodeUnschedulable to reduce TolerationsTolerateTaint function calls
2ce07981af7 kubeadm: Make dry-run is configurable in joinConfiguration
f5a6797e563 kubeadm: Make `dry-run` is configurable in `initConfiguration`
709eb6c0302 eviction for pid trigger PIDPressure condition slowly on CRI-O
b8336f399bf KEP-2305: add metric to track unbounded label values
1e17237dbf6 KEP-2305: introduce allow-metric-labels-manifest
654e98e0a2e add endpointslice repo to staging README
b7cbebcd034 Added oomkill test for init container and fix typos
d8c145d20da fixes the issue in the documentation of kubectl events
12a874d2273 Preserve resourcequota informers for groups with discovery resolution errors only
c9a084d59ca Fix duplicate GC event handlers getting added if discovery flutters
733f63c6c42 Add GroupDiscoveryFailedErrorGroups helper method
3bae26ae58b Check dbus error on container runtime start/stop
70f979c8da3 Alert message improved according to standards
a6554b9d5d1 Make kubelet label types public
f2fa6d5f6b3 Document PVLabeler as deprecated
7ff4572f792 Remove reference to `RUNTIME` variable in `build/root/Makefile`
fc36d2fee83 chore: improve error message for unstructured helper method
b60a3a58df2 api-machinery: stop using deprecated io/ioutil
0da37d8c544 chore: omit comparison to bool constant
17e6c5cb9f0 Error Typofix
9d4b489107e Renaming restartPolicy to containerRestartPolicy for better calrity
01c2c4f35f3 Error test cases added
a609beb6b19 Decline on resizePolicy if the restartPolicy is Never
f2879eed00b [UT] add ut for pkg/registry/networking/ipaddress
c1cced24aa9 WIP: don't exclude .git from rsync
396c8a67832 test: TestPodDeletionEvent
975b2c6611d scheduler: Fix field apiVersion is missing from events reported from taint manager
ba49ccdbc9b Gracefully handle empty config error when local flag is used
96ab232f5f7 Remove reasons from PodConditionType
1d9eed9f950 chore: slice replace loop
9378e580cf4 chore: loop optimization
fc1b8a823d4 cli: stop using deprecated io/ioutil
b4d1440063d unittests: Fixes hostutil.GetFileType for Windows
01861282b1d controller: fix the help information format of sorting_deletion_age_ratio metric
07a1aea2def remove unused cloudprovider param from the ProbeControllerVolumePlugins func
208cf1afabb Fix: do not assign an empty value to the resource (CPU or memory) if it's not defined in the container
72f89b63757 kubelet: fix comment typo
12f8eeaf9b1 fixed typo in get-kube.sh
3418ceaca64 test: replace intstr.FromInt with intstr.FromInt32
8b363cc7c08 bump dependencies: github.com/godbus/dbus/v5 to v5.1.0
887654160f9 Improve the performance of schedulinggates
0ef4be48777 cloud-provider: replace intstr.FromInt with intstr.FromInt32
847df6d9153 kubelet: output log even file is rotated
05f04f866eb Keep PLEG interruptions in a separate interface
b109a585398 Improve the performance of isPodStatusCacheTerminal
84c14c65c6b Remove unnecessary type conversion
55d471601b1 [ut] increase covrage for kubelet/prober/results
e0f2ed1b92b [ut] Increase test coverage for kubelet/pleg
18c86efeeaf kubelet: perform the admission checks that preemption will not help first to avoid meaningless pod eviction
08a69d63413 Improve performance of method PodRequests
337f4e524aa Do not error log CRI stats for not cached partitions
f2aeb3b0d91 Improve lock performance
fb6fd36384e Add endpoint to skip topology aware log when missing zone hint
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
a5fee65b68 |
skopeo: update to v1.14.2
Bumping skopeo to version v1.14.1-4-g1c2ab995, which comprises the following commits:
c3e474e4 [release-1.14] Bump Skopeo to v1.14.3-dev
b673eb60 [release-1.14] Bump Skopeo to v1.14.2
18cc81ab [release-1.14] Bump c/image to v5.29.2, c/common to v0.57.3
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
a906b81ca6 |
podman-tui: upate to v0.17.0
Bumping podman-tui to version v0.9.0-246-gb4350927, which comprises the following commits:
b4350927 Bump to v0.17.0
db48222a Bump github.com/containers/podman/v4 from 4.9.1 to 4.9.2
49c31e9e Bump github.com/containers/common from 0.57.3 to 0.57.4
c8c25120 Bump github.com/containers/podman/v4 from 4.9.0 to 4.9.1
00626a40 Bump github.com/containers/common from 0.57.2 to 0.57.3
bbba9ec9 go version update to 1.20
5674249f Bump github.com/containers/podman/v4 from 4.8.3 to 4.9.0
4d0b84f5 Bump to v0.17.0-dev
cacf1b90 Bump to v0.16.0
67f735b5 Bump github.com/containers/common from 0.57.1 to 0.57.2
be25c60d Bump golang.org/x/crypto from 0.17.0 to 0.18.0
2ff1bb62 Bump github.com/containerd/containerd from 1.7.9 to 1.7.11
9b492e25 Bump github.com/containers/podman/v4 from 4.8.2 to 4.8.3
519ed36f Bump to v0.16.0-dev
f7f47149 Bump to v0.15.0
9ba724c1 gh action update
1cdeadb4 Bump golang.org/x/crypto from 0.16.0 to 0.17.0
fb1886ea github action use golang 1.21.4 for golangci-lint
6521ce91 Bump github.com/gdamore/tcell/v2 from 2.6.0 to 2.7.0
54cd7d7e Bump github.com/containers/podman/v4 from 4.8.1 to 4.8.2
bbb8c9a9 Bump to v0.15.0-dev
c545dbd7 Bump to v0.14.0
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
a9f0f00637 |
podman: update to 5.0.0-rc
Bumping libpod to version v5.0.0-rc4-2-g460fc4d65, which comprises the following commits:
fc4e16366 Bump to v5.0.0-dev
cfc5b8e0f Bump to v5.0.0-RC4
0898b338b Use stop timeout of zero for system reset
542883b9b chore(deps): update dependency python-dateutil to ~=2.9.0
99bb2bfce CI: must-add-tests check: use GH label, not text
c5c294a35 fix(deps): update module github.com/shirou/gopsutil/v3 to v3.24.2
3abc488c8 Vendor in containers/(buildah, common)
4a03da22a Run codespell on code
03f6589f3 Fix events by fully adding the new PullError event
52fd284fd Update dependency pytest to v7.4.4
2b86ab5a1 Change image-path to image for tests
527b3793b Use machine image as specified in containers.conf
4c1c4c082 Vendor latest c/common and fix tests
c50826cea test: fix manifest e2e test assumption
f168b3c11 podman manifest add: support creating artifact manifest on the fly
2bbed8f20 Add man page content for artifacts
d8bb63705 pkg/env.Join(): don't modify passed-in maps
66d60384f add --retry --retry-delay to podman run/create
c3c0c4ab9 Add support for podman push --retry --retry-delay
e5ee0bb5f pullImage does not need to be exported
2c9c7273c Vendor in latest containers/common
99b2f369d test/system: fix mount external container test
35133c842 Move locks to shim layer
6957c7819 CI: run logformatter on mac
fd1d95126 Move ignition functions into Containerfiles
b58f20bdb machine/ociartifact: Include image name in error
064258b49 Reenable boltdb upgrade tests
77bcf233e fix: split string Entrypoint by space
90e6478cf refacto: unknown signal return signal number without prefix
1de94dceb ci: fix module not found
585af039d feat: allow compatibility with podman v4 machine
facad62af tests: fix after make podman inspect cmd return compatible with Docker API v1.44
23d6377ac chore: rename var host hostIP
2cd72c272 tests: add docker api compatibility test
de845a5b4 feat: make inspect compatible with docker v1.44
950f612b5 logging: new mode -l passthrough-tty
5952486df podman network inspect: include running containers
8f02822c1 Remove xz unit tests as they are flaky
f8abd7ff7 machine config: make write atomic
26ec570c6 Ensure HyperV 9p mounts work when a dir doesn't exist
dfae51a4b Clean up gvproxy if machine start fails
ee52f9cd7 systests: kube play URL: workaround for ECONNREFUSED
7e374a52a Vendor in latest containers/(image,storage)
698219cf9 Expose as-tested Mac/Windows repository state
9f5c20f9b macos installer: Add vfkit entitlement
15734f8c5 macos-installer: Remove hvf.entitlements
74b87874b macos installer: Default to using ad-hoc signing
c2a2113bb new vms, with rc6 rawhide kernel
7b6d9a586 Fixup: avoid overriding io.Copy error
59704665a Avoid overriding io.Copy error
24a33a538 Move code for sparse optimized copy to a dedicated method
50a0c5176 [CI:BUILD] rpm: Add fallback for $SOURCE_DATE_EPOCH not being set
e32c9bb5e Makefile: add machine policy.json to podman-remote.zip
1e5b5a889 macos installer: install default policy.json file
bed61806c pkg/machine/ocipull: add default policy.json file
f5a268319 Makefile: add MACHINE_POLICY_JSON_DIR option
a02aa8f6a pkg/machine/ocipull: add custom policy.json location
a210a4d7c test/compose: add test for default connection
d9aff9b41 podman compose: only trim path suffix when ssh protocol
3cada0409 podman compose: correctly accept --connection/--url
6d3571dcf podman compose: build for all arches
7d5a68c9c CI: e2e: use distinct ports, not just 5000
5e387cd8a [CI:BUILD] rpm: Use $SOURCE_DATE_EPOCH instead of the current date
8d9ff04d1 vendor update gopkg.in/yaml.v2 to v3
cc7b19279 [CI:BUILD] rpm: Make BuildRequires independent of the environment
5b28a2b4a Fix podman stop -t -1 CID
656bf7b76 Change QEMU netdev to Unix domain socket
19b676f85 Enable lint for Darwin and fix identified issues
1b068b79f Fix nightly cron checks
83671ac34 systests: enable ipv6 tests
188404366 Update github.com/containers/libhvee digest to c1bda9d
f099250be Better file close and err handling
ea4553d59 integrating changes from #21768
fa99b9be9 renamed testfiles as testdata
0b3f3f0ef Use faster gzip reader
2245cf8dc Remove duplication and make consistent usage of the progress bar
c42d3a74e Add a comment to explain why we look at file name for zip files
95aa2c4e6 Use github.com/stretchr/testify assert in compression_test.go
88af8852d Refactor machine decompress.go
ecda4eab3 Update module go.etcd.io/bbolt to v1.3.9
53b5fc781 Update module golang.org/x/tools to v0.18.0
608976902 Update module github.com/openshift/imagebuilder to v1.2.6
3b127286a Adds example for secret creation from environment variable
b68d3c7a0 Fix race conditions in hyperv readiness checking
127a8060a Ignore docker's end point config when the final network mode isn't bridge.
5d303ca26 Reformulate sparseWriter to deal with starting/ending zeroes explicitly
c5434bf71 Expand sparseWriter tests
a9ee31b92 Bump to v5.0.0-dev
54795efeb Bump to v5.0.0-RC3
3e76e594b Fix assumptions in 'push with --add-compression and --force-compression'
8e99c697f Fix assumptions in 'push test --force-compression"'
7acb49875 Update module golang.org/x/net to v0.21.0
f601a446b Bump VMs. New pasta, gvisor
d85a71b4d Update module github.com/klauspost/compress to v1.17.7
d7f7f07c9 Stop using rm'd inspect format templates in tests
be9aba7cc Remove image provenance from `machine inspect`
d68240b15 Update machine files rm order and add QEMU rm
4078a4405 libpod/events: remove duplicated Details ID field
6f6925cca pkg/machine: ignore gvproxy pidfile not exists error
8f1cebf96 cmd/podman: remove duplicated event ToHumanReadable()
a3a1b44c3 libpod/events: Update event time format and add timeNano
f218f8430 machine: implement http proxy logic for all providers
c4e68bdae Cirrus: Reuse shared clone script on Mac
2af73b83f Vendor vfkit v0.5.1 and gopsutil v3.24.1
f7d1726f9 Rearrange CI tasks for safety + efficiency
89b415ba3 Comply to Kubernetes specifications for annotation size.
a31e8d2a2 zstd now default compression for podman machine
1c61f766d CI: fix search-test flakes
0b861350c machine: add sparse file writer
7746e2a3f systests: auto-update: minor cleanup
09095acf2 machine: Add `ConnectionInfo` to `MachineConfig`
5effdcca3 Fix up example description of podman-system commands
ec68f07c0 Fix Lint on Windows and enable the job
66fd41ff1 cirrus logcollector: update package list
5327ddfdf Build with CNI support on FreeBSD
c5a71c4fd Apply suggestions from code review
67ead5cb5 Apply suggestions from code review
408772d34 Apply suggestions from code review
1612ff69c Fix up example description of podman-inspect.1.md.in
62148bf61 Apply suggestions from code review
b8c1a8e79 Apply suggestions from code review
66f39eee5 machine: Remove unnecessary TODOs
5b5343b38 Apply suggestions from code review
9d73dc6ed Apply suggestions from code review
f7659b12e Apply suggestions from code review
4f13b836b Codespell code
fc7140151 Fix up example description of podman-mount.1.md.in
ee078a7e6 Update docs/source/markdown/podman-cp.1.md
606865a47 Fix up example description of podman-container commands
22effe8d4 Fix up example description of podman-stats.1.md.in
3fd09dd18 System tests: enable debugging for parallel-rm test
49400ecce Extract waitForGvProxy into shared utility function
a0109caa7 Fix up example description of podman-volume commands
803410f1a Fix up example description of podman-kill.1.md.in
bc5a4fbb2 Fix up example description of podman-pod commands
93a0c242c [skip-ci] Packit: Update downstream task targets
8ed6d4fe5 Fix up example description of podman-build.1.md.in
433efc1f5 Fix up example description of podman-commit.1.md
fe910ae96 Fix up example description of podman-logout.1.md.in
12af4f36b Fix up example description of podman-images.1.md.in
66ed46987 Apply suggestions from code review
de7cb639c Fix up example description of podman-export/export commands
f59a5f135 Fix running container from docker client with rootful in rootless podman.
10d748f58 Introduce Podman machine reset
d4b3ab521 Fix up example description of podman-create.1.md.in
717c00569 Fix up example description of podman-diff.1.md.in
4e268c667 Fix up example description of podman-events.1.md
537490cb9 Fix up example description of podman-farm commands
aad195ca3 Fix up example description of podman-network commands
777b258a7 Fix up example description of podman-image commands
664d4ed28 Fix up example description of podman-port.1.md.in
1116e68dd Fix up example description of podman-push.1.md.in
79a10419c Fix up example description of podman-unshare.1.md
63d9bf128 Fix up example description of podman-pause.1.md.in
4b6ca1687 Fix up example description of podman-start.1.md.in
f5c666d07 Fix up example description of podman-rm.1.md.in
6c8123325 Fix up example description of podman-info.1.md
8cbbd631d Fix up example description of podman-history.1.md
1a06ec802 Fix up example description of podman-healthcheck-run.1.md
10af44854 Fix up example description of podman-exec.1.md.in
7e611f60b Fix up example description of podman-cp.1.md
47d0aa1bc Fix up example description of podman-manifest commands
7ba23cd6f Allow podman pull to specify --retry and --retry-delay
f036476cf fix usermode test
24b8d1446 fix(deps): update module github.com/opencontainers/image-spec to v1.1.0
2846027dc machine init: validate machine name and username
8be1c0b04 [CI:DOCS] Update dependency golangci/golangci-lint to v1.56.2
30a18fc02 pkg/machine: make only one AddConnection() call
7f2a6c735 Bump to v5.0.0-dev
f620aa0fb Bump to v5.0.0-rc2
d60757cca pkg/machine: cleanup MakeSSHURL
e0a766854 Improve cross platform support in QEMU machine sources
bd0a9e903 Fix remove docker.sock symlink
1f64ae10f Prune FCOS related code
4fffa78ee Manually discover wsl.exe location
889454104 Turn WSL machine tests back on
a9401dead Build tag out QEMU for Darwin
c7537d193 man-page xref: make nested-structure warnings fatal
d221e0b00 Remove log-level from runSystemCommand since wsl does not support it
9ee17d422 machine/qemu: use extra gvproxy socket
3ca221360 Add a helper for stopping pods and containers in E2E
bcec7e627 machine: ocipull do not error if downloaddir exists
e5f86f862 More test tweaks to avoid "StopSignal ... 10 seconds" warning
144e420bb Add testcase for WSL dist conflicts
d23dd35dc Correct VM existance check on WSL
db34827bb Test PR, add a inconsequential period to docs
9abc04232 Fix small bug in ocipull
42a78c714 Add volumes-from support using annotation in kube yaml
068d4e81c Allow CI user to cleanup own files
41c3f9d4b chore(deps): update docker.io/library/golang docker tag to v1.22
3de467d9f machine: Re-enable USBs check for wsl machine set
0e9d86755 machine: `machine set` only when machine's stopped
92d6194f0 Fix freebsd indentation + enable release-testing tasks
f9bc9a85b Replace panic with no-op
45b701b12 chore(deps): update dependency setuptools to ~=69.1.0
464638cc8 Enable windows and PM windows testing
001824b9f Windows uses USERPROFILE not HOME
4c0d05718 Readme updates for Podman
87947761e [CI:BUILD] Add VFKit into pkginstaller, remove QEMU
7f2d8ae80 [CI:DOCS] Update dependency golangci/golangci-lint to v1.56.1
66e292ebb Fix build on Main
c29fde265 libpod: correctly map UID/GID for existing dirs
2430fc71a Allow podman machine to download from oci registry
ad55ba6eb Handle DOCKER_HOST environment for podman-docker package
36853c0d0 Consistant handling DESTDIR variable expansion
5eb801a56 Bump CI VMs to ones with netavark 1.10.3
f7f4d1064 Fix the build on main
eb8428df5 podman-image-scp: Load images without the use of a temporary file.
f8847ea04 Improve comments on waitOnProcess
d3328d4f3 Don't panic on podman4 machine configs
00180bd5b Enforce podman-machine mac CI results
667311c7d Use persist dir for oom file
1f8a69bc9 docs: clarify when a URL is treated as a git repo
bb7d8fdc4 Workaround connection hangups in start/stop racing
09b86e26d Improve robustness of pipe checks
487219d80 Complete WSL implementation, refactor a few areas
d7cb66492 wsl - wip
e74d268bf Minor cleanup from podman 4
2a61998f0 Fail if vm exists in hyperv already
477cb90a3 Update .cirrus.yml
325d7f489 Re-enable mac testing
7ecc41467 Vendor crc CopySparse
69163af2a Remove gitleaks scanning
5b6b68976 Remove disused Containerfile and docs
d676c1b1a fix(deps): update module github.com/docker/docker to v25.0.3+incompatible
4413e75f0 [CI:BUILD] rpm: bump podman module version
1ca608ea9 fix "podman run port forward range" flake
41cd90a8e image scp: don't require port for ssh URL
dbfa201c9 new testimage and systemd-image
a2c086c78 [CI:DOCS] fix userns.pod.md mapping table
3495aae42 docs: resole hierarchical issues with userns parameters
7be6cd4b0 machine: USB passthrough
02eb907db machine: change getDefaultDevices signature
dc0d07c71 document new connection/farm storage location
ef8e63cb2 update c/common to latest main
10265661e Fix Quadlet Options=key=value documentation/example
9f38b2215 pkg/machine: make it build for freebsd
bcd48a6a7 Bump to v5.0.0-dev
dc218a3c6 Bump to v5.0.0-rc1
7e73bb341 Add v4.8, v4.9 to release notes
30fb5de71 Restore Cirrus DEST_BRANCH to main
72f1617fa Bump Go module to v5
c023b789f Re-enable passing a logfile to gvproxy
69d54c482 Bump gvisor-tap-vsock from 0.7.2 to 0.7.3
e20b70c2e Upgrade tests: reenable, but revamped
d47979761 Quadlet - do not look for line continuation in comment lines
90c938737 Add functionality for `podman machine set --rootful`
f23b144c6 Podman Machine AppleHV CI fixes
d5eb8f3b7 AppleHV - make gz ops sparse
85d828148 create machine dirs at discovery
b1ce6ef9a podman machine 5 - hyperv
6b02c4894 Podman 5 machine refactor - applehv
e8501ca99 Implement generic providers
9bb191df5 [CI:MACHINE]Podman5 QEMU refactor
b9bcfa474 podman5 machine reconfig 1
c89dd4a92 Use tmpfs mounts when creating a memory-backed emptyDir volume
3cf2f8ccf Handle more states during refresh
77847bd67 docs: make --seccomp=profile.json clearer
6ca6184ed gomod: Update containers/psgo to 1.9.0
a8b2256cc Set interface name to the network_interface name for macvlan and ipvlan networks
6e0decbe0 Send container stats over API on a per-interface basis
9983e8744 Remove leftover autoremove containers during refresh
43a01d7dc Temporarily ignore windows-linting failures
defbf4237 Lint before windows-cross build
d44bafc3c Reimplement lint with improved compatibility
c7910e75e Show network name network events with podman -remote events
46fe7ef3b use pkg/strongunits from c/common
5de4bd5d1 vendor: update c/common + libhvee to latest main
a997d7d81 test/e2e: unskip netavark macvlan/ipvlan tests
7d15bc2ef fix userns + restart policy with slirp4netns
fcae70220 Reuse timezone code from containers/common
85904e01f Vendor in containers/common
01a8539ef Warn if cgroups-v1
d3281cf88 Use tmpfs mounts when creating a memory-backed emptyDir volume
2eee3cd81 Corrected markdown documentation for `--stars`
35d1f1221 make podman pod inspect output a json array
26cd01ee5 Do not test CNI in CI
ee923358c Vendor c/common
249474a84 drop support for "pasta" as a network name
a09889910 Use semi-colon as the field separator for internal volumes-from inspect annotation
d217de642 [skip-ci] Update github/issue-labeler action to v3.4
9e3d61a9d fix(deps): update module github.com/docker/docker to v25.0.2+incompatible
39f22c382 Include machine-tests in cirrus-cron jobs
7de64b47f Vendor c/storage main
9fb57d346 Cease using deprecated runc userlookup
91b8f208a Bump to runc main
6a727fdbe Fix updated runc dep breaking pod devices cgroup
2818abf84 Update to runc main, removing pin to an older version
0da405453 Verify the empty mounts.conf does not generate warnings.
1ab55defb Test new CI VMs
c5c079932 Scan-secrets: Fix PR forcepush detection condition
0a4beea6d Scanning-secrets: Support new-branch/renovate link
0e9b07a02 Secret-scanning: Fix newly-opened PR conditional
3f3d1e4de Temporarily ignore mac-linting failures
d9ad7cbc9 Run lint for mac builds
90d6e92f2 fix(deps): update module github.com/opencontainers/runc to v1.1.12 [security]
a06685a54 Farm build should read server registries.conf
28856b6c1 Make leak-detection readable by humans
b028f6aa7 add new libpod/images/$name/resolve endpoint
f3ab6268a fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.21
74454bf59 rework system connection and farm storage
a1c47f029 Return nil health when inspecting containers without healthchecks
6eca2f651 [skip-ci] Update dawidd6/action-send-mail action to v3.11.0
76791a21c pkginstaller: bump Qemu version to 8.2.1
d202acd86 Bump containers/common to latest main
174631f72 Convert SpecGen values to be nullable where possible
f8e1ea414 Fix SSH Host argument in tag command during scp.
3136f0fca Don't require engine connection for farm
0ec84b8ec Revert "Enable win podman-machine test failure"
39e53e6dc chore: extract duplicate codes
8d14d4155 Run codespell on code
d5bed05df docs: fix podman-manifest-rm header
3592b56c3 docs: fix unclosed code block
6678260eb man: Minor wording tweak for host/connection
cd5982e98 quadlet: Add tests for templates
dc94a10d6 quadlet: Add documentation about template use to manpage
01dccba50 quadlet: When loading dropin files for foo@instance, also load those for foo@.
bb6dec46f quadlet: Support [Install] for templated units
7e1942ed4 systemd.parser: Add GetTemplateParts()
2df994ba0 quadlet: Don't put @ in container names for templated units
b73eec88d [CI:DOCS] Packit: podman5 downstream for f40+
7dcbc75aa [CI:DOCS] minor man page cleanup
202cab612 Fix inspect test that rely on digest
ffd7a8998 Update module github.com/google/uuid to v1.6.0
848078c93 Fix auto-update digest comparison
93510a299 bindings: suggest using -tags remote to reduce file size
f18ebad1e bindings: pods uses entities/types
668d517af bindings: volumes uses entities/types
df6cc8550 bindings: secrets uses entities/types
aee733c58 bindings: network uses entities/types
c736a8e20 bindings: manifests uses entities/types
34cc55741 bindings: play uses entities/types
528414970 bindings: generate uses entities/types
5ddc82f7a bindings: images uses entities/types
08cd7ce41 specgen: use storageTypes instead of storage package
7aede410d bindings: containers/update uses entities/types
40cc962a5 bindings: containers/exec uses directly Docker type
88fb291a3 bindings: containers/create uses entities/types
6c5704a09 bindings: containers/containers uses entities/types
2d8231efe bindings: containers/commit uses directly Docker type
9f0ea0dc8 bindings: containers/checkpoint uses entities/types
b304ac1ea bindings: containers/archive uses entities/types
923123420 domain: move system structs to types sub-package
48a99c651 domain: move Event to types sub-package
ee61b130a [CI:DOCS] Update farm docs
90867d987 Fix image filters parsing
7c8c94549 Vendor in latest c/common
27e76f3ee Update module github.com/mattn/go-sqlite3 to v1.14.20
505ed030e [CI:BUILD] rpm: use go-rpm-macros on RHEL 10
56cf5b6df Update module github.com/docker/docker to v25.0.1+incompatible
3e6bfb6e9 Update module github.com/docker/docker to v25
269149a9f Kube Play - allow creating image based volumes
cf0b436b9 Deprecate BoltDB, preventing creation of new databases.
d3a49fded Add information about --latest support on man pages
d792cc448 Warn about whitespace in /etc/subuid and /etc/subgid files
5cc83da1c Pass the OCI runtime an empty entrypoint when there is no entrypoint
f53cb9c27 chore: remove unused file [NO NEW TESTS NEEDED]
2e38b9816 Restrict building the pkg/fileserver implementation to windows
17613cc96 podman farm is no longer hidden. Enable doc checks.
0e64e107b Fix Mount Unit Option
660778b2e [skip-ci] Update dawidd6/action-send-mail action to v3.10.0
8d733b6d0 Update module github.com/onsi/gomega to v1.31.1
a2cc04b15 Update module github.com/opencontainers/image-spec to v1.1.0-rc6
a0c914c6d [CI:DOCS]Remove final references to varlink
70c3accf7 Update module golang.org/x/tools to v0.17.0
75790b42b Label host volume mounted content in machine as nfs_t
7472bdb16 Ensure podman temp directory is created on Start as well.
a5612bc54 Quadlet: ensure all keys are documented
0c3b5e433 quadlet.go: clean up keys
77389bd05 Add missing check for errors returned from SpecGenToOCI to MakeContainer.
6226b5669 Update module github.com/onsi/gomega to v1.31.0
4c583e7a1 Update module golang.org/x/net to v0.20.0
e757f7631 Update module github.com/onsi/ginkgo/v2 to v2.14.0
728e842db Update module github.com/docker/go-connections to v0.5.0
f9a05717a Update module github.com/vbauerster/mpb/v8 to v8.7.2
c566551e9 gvproxy: Update to 0.7.2 release
1964dbd40 Set up podman machine remote user correctly
1c88b1220 rm pod with podman run if ctr creation failed
79fad91db Add a net health recovery service to Qemu machines
e66413b51 CI: reenable tests that are working again
3fef531d9 applehv: return socket path from setupAPIForwarding
90f69891d applehv: Remove unneeded cmd.ExtraFiles assignment
ab1316551 fix mongo-driver dependency
971f2eb45 [NO NEW TESTS NEEDED] [FreeBSD] Fix crash when running podman inspect
dbe0e6789 Man pages: tighter documenting of --format fields
d95710a89 farm build: push built images to registry
992e83d20 machine: Enable console autologin by default
f374e07fb AppleHV: update LastUp time
b94be90a1 Remove Libpod special-init conditions
46cfc9858 Make --gpus work with nvidia gpus
0e09527bd systests: kube with policies test: fix race
f6107f631 Assign separate ports for each appleHV machine
eeff3d2de Fix machine inspect test config
7bd5dd42c Fix `podman machine set --rootful` for applehv
585fbe373 Run mac jobs on labeled hosts
a60fe34fd Fix `podman system reset` with external containers
522934d5c Replace strings.SplitN with strings.Cut
3714ae342 quadlet: fix quoting of example option values in container unit file documentation
4e4c3e3db cmd: support --config option to locate authentication file
83fa4843f Fix podman machine ssh command
780733415 System tests: fixes for RHEL8 gating failures
380fa1c83 Remove redundant code in generateSpec()
a8c2b84c2 docs: update mariadb example
d7760b23c labeler: Use `machine` label
bccfda505 [CI:DOCS]Periodic update to OWNERS file
3b881d4ec feat: disable pid max in the podman machine
c90e9dad7 e2e: reenable warning checks on Debian
e3f167f77 Add API forwarding support for HyperV
a0a541351 consolidate ignition ready socket unit
8341ca0e7 Remove --latest from podman CMD --help output
06064150e machine: use GlobalDataDir helper
8bdf77aa2 Refactor: replace StringInSlice with slices.Contains
25602a03a fix(deps): update module golang.org/x/sys to v0.16.0
3bfdd7915 Fix init teardown on bad ignition path
b01a330d3 Use single persistent ssh key for all machines
260f814bd test/system: add test for mounting issue in the init container
f0319d5b7 Error messages not being reported unless more then one error present
49e2589a5 fix(deps): update module golang.org/x/sync to v0.6.0
450862054 xref-manpages script: more regression tests
e63513542 Vendor latest c/image
98f332d48 Use parser.UnitFile
c728eeb39 Create `pkg/machine/ignition` package
560455cbd docs: fix typos
2a2d0b0e1 chore: delete obsolete // +build lines
92f3bacc6 machine/qemu: A few debugging prints
876b2207e ci/labeler: Add area/machine label
f5a986f4e Set applehv as default darwin provider
689d97a1d Quadlet - add StopTimeout key for .container file
ac0353aec chore: remove unused link
8c546cf7e CI: bump VMs
f9de9809e docs/build_osx.md: Describe external gvproxy
5827ecb42 fix(deps): update module github.com/shirou/gopsutil/v3 to v3.23.12
70a53cb76 Quadlet - fix trailing whitespaces handling
c315c8e74 Makefile - make sure gitvalidation is installed before calling it
55b08d3ba applehv - fix vm lookup
ec5422af5 e2e: Skip journalctl if journald is unavailable
4f94c96b9 remote: fix podman-remote kube play --publish-all
4083ddbb0 Kube Generate - check options in bind-mount-options exist before accessing
f10a7bfd4 Add mmap cache option to QEMU mount
2fc862d39 chore(deps): update module github.com/containerd/containerd to v1.7.11 [security]
90b09b586 chore(deps): update module golang.org/x/crypto to v0.17.0 [security]
f90b4e79a Tests for xref-helpmsgs-manpages
1322f3193 abi: drop check for IsRootless()
9d0da9d0f Strip key/values of external quotes
4dd58f226 Move golang requirement from 1.18 to 1.20
f169fc76a Allow PublishPorts to be used with [Pod] entry
6a96c8b5f quadlet container support multiple Ulimit options
ccc3eb774 Improve compose tests
e51bab3c9 Remove duplicated content in docs
d76bb978b docs: oci-dir does not support compress as suggested
f02fe73c3 Update module github.com/vbauerster/mpb/v8 to v8.7.1
5c4c76b8c Update module github.com/mattn/go-sqlite3 to v1.14.19
db68764d8 Fix Docker API compatibility with network alias (#17167)
7c72d8c2f Fix path to example files
5cc5b4347 Error on HyperV VM start when gvproxy has failed to start
58edd06ff [skip-ci] Update actions/upload-artifact action to v4
d026ccf9a Kube Play - pass arguments to build
e4ecd7cca doc cleanup
1c59a9ced CI: safer podman-stop tests
8d94fc156 fix(deps): update module github.com/containers/libhvee to v0.6.0
3a842027a CheckExclusiveArch should use local JSON too
c290a561b Update gitleaks baseline w/ harmless findings
446df4379 machine e2e : set default disk size to 11
126670d5d Fix push endpoint stream
232c32bd3 CI: systests: safer isolation in registry & tests
f51ff7764 Support podman ps --format '{{ .Label label }}'
36e04599a fix(deps): update module golang.org/x/tools to v0.16.1
5ca255c2c fix(deps): update module github.com/google/uuid to v1.5.0
5c7f74546 Remove deprecated field ContainerState.NetworkStatusOld
e5c726daf Make hyperv pass
e5a4f00b7 Podman 5 machine config file - Step 1
95eb22c71 Support a machine-test only mode
0f02e43ce cli: podman manifest annotate --annotation use StringArray()
d8c3e5b3c cli: podman manifest add --annotation use StringArray()
3e10a6832 cli: podman kube play --configmap use StringArray()
2be4b007b cli: podman kube play --log-opt use StringArray()
48ab4aec3 podman kube play: fix broken annotation parsing
e916f49f0 cli: podman kube play --annotation use StringArray()
47b65086e cli: podman image trust set --pubkeysfile use StringArray()
cdb178e95 cli: podman push --encryption-key use StringArray()
3e1b9146f cli: podman pull --decryption-key use StringArray()
36e29a843 Fix WSL machine test regressions
6415471dc EMERGENCY: fix broken CI
952c70890 added system test
23f6c4851 Add test for relative idmap mount
e7eb97b84 fix checking of relative idmapped mount
c823d49fd CI: unskip tests
4590b663a add test for podman exec --env-file
06cee546a cli: podman exec --env-file use StringArray()
7866f6c6e cli: podman run/create --blkio-weight-device use StringArray()
432be1330 cli: podman run/create --device-{read,write}-bps use StringArray()
8de13271c cli: podman run/create --device-{read,write}-iops use StringArray()
e763cc62b cli: podman run/create --device use StringArray()
833163ff3 add podman create --label-file test
19571f750 cli: podman run/create --label-file use StringArray()
24d08a94d cli: podman run/create --decryption-key use StringArray()
f9b2da3eb [CI:BUILD] override crun-wasm in fcos + podman-next image build
6c2a0196a machine: usb: Fix 'passtrough' typo
201920f6a cli: podman run/create --chrootdirs use StringArray()
dbbec9936 cli: podman run/create --log-opt use StringArray()
b011aa443 cli: podman run/create --env-file use StringArray()
ef10073b5 cli: podman run/create --annotation use StringArray()
c5258d463 cli: podman --hooks-dir use StringArray()
12c39ffda cli: podman --module use StringArray()
c97560841 cli: add docs for StringArray vs StringSlice options
1ebd507fb Fix regression in e2e machine test suite
95145d957 buildah treadmill: cleaner YAML, uglier script
0d1b90d36 CI: systests: fix flaking --since test
9a963221b [CI:DOCS]use nginx in podman tutorial
a1cc99dd4 [CI:DOCS] compat api: fix formatting syntax
cac4aa3b4 [skip-ci] Update actions/stale action to v9
19457f382 system service: split out cgroups call into linux specific file
03d411abc libpod: split out cgroups call into linux specific file
32c25c602 pkg/specgen/generate: NOP verifyContainerResources() on freebsd
a687c3886 use rootless netns from c/common
3d740674b Improve error handling in win-lib.ps1
d78212a00 Update vendor of containers/storage
98df5b397 Fix user-mode net init flag on first time install
10db6442d [skip-ci] Update actions/setup-go action to v5
8d8fb726f fix broken labeler.yml config
4d2125baf systests: cp: add wait_for_ready
7cc6501cf Add e2e tests for quadlet Entrypoint option
01d397a65 podman: new option --preserve-fd
a943be7e8 Kube Play - set ReportWriter when building an image
972ffaca4 Add support for Entrypoint in quadlet
94e67cfc7 fix(deps): update module github.com/containernetworking/plugins to v1.4.0
1f42aff93 systests: debug systemd failures
7f4b0f208 apiv2 tests: fix race
f1dc126bf Do not aggregate failing mac test status
2d46d0537 Implement bare-metal Mac M1 podman-machine testing
b7a81c1ce Fix command failure not resulting in task failure
ca66a90b8 [skip-ci] Update actions/labeler action to v5
b1eccedf5 [CI:DOCS] Update health-start-periods docs
bb1307970 fix(deps): update github.com/opencontainers/runtime-spec digest to 0625254
07104fb27 fix podman-systemd.unit.5 Mask/Unmask placement
0a72e3dad fix(deps): update github.com/docker/go-connections digest to fa09c95
7e2a8d58a Quadlet .pod - add support for the Volume Key
212b4c9e9 Quadlet .pod - add support for the Network Key
0d260bdc1 Quadlet - fix pod service file name
04519234e Add support for the userns annotation in kube play
f384bdf66 Handle symlinks when checking DB vs runtime configs
e14aa09bb Update podman-systemd.unit.5.md
6efba48e2 fix(deps): update github.com/containers/image/v5 digest to 671ab94
4e21ce5ba fix(deps): update module github.com/shirou/gopsutil/v3 to v3.23.11
45e53ed7b libpod: Detect whether we have a private UTS namespace on FreeBSD
00d96c2b9 fix(deps): update github.com/openshift/imagebuilder digest to ef2a5fe
b1acb43d7 CI: fix system_test_aarch64 dependencies
f9e8585c5 Enable win podman-machine test failure
269f8ff06 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.2
c1eea91a0 fix(deps): update common, image, and storage deps
31df9c237 Move the --farm flag to farm build command
fa0aa9113 @@option volume.image: be specific that -v only affects RUN
426db6fcc Accept a config blob alongside the "changes" slice when committing
e197cf57d container create: use ParseUserNamespace to parse a user namespace setting
f95dd21d5 deferred test failures: handle a corner case
42ea21121 Fix locking error in WSL machine rm -f
d5cf46e80 support lookup of intermediate IDs in gidmapping/uidmapping options in userns=auto
5b3d82f9b sqlite: set busy timeout to 100s
d4ac2f3dd libpod: Allow using just one jail per container on FreeBSD
55373dcce Vendor c/common
3e7041508 Gating test fixes
86296ff8d pkg/bindings: add new APIVersionError error type
a5d11f404 Set `BUILDAH_ISOLATION=chroot` within Podman containers
f35d1c1c2 Don't update health check status during initialDelaySeconds
8ee262202 quadlet: Support systemd style dropin files
93bcd2a25 fix podman-remote exec regression with v4.8
cf1ad300b utils: close a couple of ReadClosers
4314b1c34 Fix transferring data using tar
7b4d6a295 [CI:DOCS] Fix markdown bugs
a2bf8c6d5 refactor(machine): improve machine marker value
572f38c0d Set correct exitcode in remove events and change ContainerExitCode from int to int ptr
d7b970a4c sqlite: fix issue in ValidateDBConfig()
e26f677b1 sqlite: fix missing Commit() in RemovePodContainers()
248cbc6f6 docs: drop default for tmpfs-mode
6b2f48129 Quadlet - Add support for .pod units
c664cfe88 [systests] podman mount no-dereference: complete rewrite
13e548820 [CI:DOCS] performance: document sometimes slow native overlayfs
b39f76474 fix(deps): update module github.com/gorilla/schema to v1.2.1
07a7b3ae5 fix(deps): update module golang.org/x/tools to v0.16.0
c8f262fec Use idtools.SafeChown and SafeLchown everywhere
29d18079c [systests] new defer-assertion-failure
f07b15105 fix(deps): update module golang.org/x/net to v0.19.0
8e2d5e191 Fix wsl.conf generation when user-mode-networking is disabled
d280e481a test/compose: remove debug leftovers
ac3d57016 [CI:BUILD] rpm: remove dnsname
386c8d6bf swagger: document play kube annotations param
f6b2a1378 Clean up farm-build miscommit
c7f6844c0 fix(deps): update module github.com/vbauerster/mpb/v8 to v8.7.0
41a6b992a system: enhance check for re-exec into rootless userns
e82465773 Fix Ulimit syntax.
fe65f059a libpod: drop dead code
cd21973f4 pkg/util: use code from c/storage
98c525cf9 Remove unnencessary pregenerated doc
3ca8b4013 fix(deps): update module github.com/crc-org/vfkit to v0.5.0
da9349ce4 podman machine image from oci updates
75638a72a If API calls for kube play --replace, then replace pod
414642efd [CI:DOCS] Add podman farm build doc
ddd6cdfd7 Ignore SELinux relabel on unsupported file systems
e85cedf43 Use configured timeout in list_test.go
478afa728 vendor: update containers/{common,storage,image,buildah}
48cf44f23 machine applehv: create better error on start failure
6cb2f9b12 quadlet: Support `healthy` for `Notify` directives
2b95700bc No longer support deprecated legacy QEMU machine structures
e40d70cec new 'no-dereference' mount option
be2463330 Bump to v5.0.0-dev
e75fbe54e Update dependency setuptools to v69
ae9b63fbf Check for imageID, not imageName
ff80e40ad Use NewStoreReference instead of ParseStoreReference
e9587f5e3 Don't re-assign imageID
c85068220 Remove clearly dead code
87cef3654 Update release notes from v4.7 branch
8b2667ef6 More rootless-tutorial fixes
62060f323 Get masked paths and readonly masked patchs from containers/common
4c249a219 Change default QEMU CPU level to `qemu64` on Windows amd64
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
1a813b0e6f |
netavark: update to 1.10.3
Updated via:
bitbake -c update_crates netavark
Bumping netavark to version v1.10.3-1-gbe7bd48, which comprises the following commits:
d9f9fdc v1.10.3
a88dc00 fix netavark update to not start a new aardvark-dns
664637b Release v1.10.2
8e53052 Release notes for v1.10.2
c70dc8e [CI:BUILD] Packit/rpm: fix aardvark-dns handling
8a7422e Do not perform network namespace detection on AV update
a78cfa8 Release v1.10.1
187e0a6 Updated release notes for v1.10.1
851ac90 update to nftables release 0.3 from crates.io
1f60bce DISTRO_PACKAGE: fix incorrect vendored tar archive URL
3328784 Bump to 1.11.0-dev
799c1ae Release 1.10.0
2965880 Release notes for 1.10.0
f20eeeb RPM: update .cargo/config before building
fddc681 Add support for isolation to the nftables driver
04538cd build(deps): bump h2 from 0.3.22 to 0.3.24
020cdd2 chore(deps): update rust crate chrono to 0.4.32
b953314 fix(deps): update rust crate env_logger to 0.11.0
|
||
|
Bruce Ashfield
|
8824967159 |
nerdctl: update to v2.0.0-beta
Updated via:
oe-go-mod-autogen.py --repo https://github.com/containerd/nerdctl.git --rev v2.0.0-beta.1
One patch refresh, no other modifications.
Bumping nerdctl to version v2.0.0-beta.1-10-g0a20db63, which comprises the following commits:
4420aa67 update BuildKit (0.13.0-rc1)
4acb599e CI: test compilation with Go 1.22
6f1c767e build(deps): bump github.com/tidwall/gjson from 1.17.0 to 1.17.1
07dc8a58 build(deps): bump github.com/opencontainers/image-spec
72a9737d platform: support loongarch64
1b05ff3e Remove the support for the old CNI isolation plugin
4c29703b rootless: fix `Not Authorized(uid): org.fedoraproject.FirewallD1.config`
1eada1af build(deps): bump github.com/opencontainers/runtime-spec
fdf7968b Fix soci image push with multi-platforms flags
09168445 build(deps): bump golangci/golangci-lint-action from 3.7.1 to 4.0.0
6fd3fb73 build(deps): bump golang.org/x/net from 0.20.0 to 0.21.0
cad6b2af build(deps): bump golangci/golangci-lint-action from 3.7.0 to 3.7.1
679adcf8 build(deps): bump golang.org/x/crypto from 0.18.0 to 0.19.0
c6236eea build(deps): bump tonistiigi/xx from 1.3.0 to 1.4.0
cfc063cc update slirp4netns (1.2.3)
2d59841b build(deps): bump github.com/rootless-containers/rootlesskit/v2
5733be85 update RootlessKit (2.0.1)
ae224f40 build(deps): bump github.com/containerd/console from 1.0.3 to 1.0.4
c797578e build(deps): bump github.com/klauspost/compress from 1.17.5 to 1.17.6
6a229537 `containerd-rootless-setuptool.sh uninstall` cleanup all relevant services
9ae613b3 support build attest
741d06e5 Add support to run systemd in containers (with --systemd flag)
b452c64b Support --ipc=container:<id> option
3b45cc18 build(deps): bump github.com/containerd/nydus-snapshotter
5df53e5f update BuildKit (0.13.0-beta3)
37168690 build(deps): bump docker/metadata-action from 5.5.0 to 5.5.1
a3e8cb46 build(deps): bump github.com/containerd/containerd from 1.7.12 to 1.7.13
dc7bbed8 update Kubo (0.26.0)
ad02e192 update bypass4netns (0.4.0)
02dc9b44 update runc (1.1.12)
3ab02f69 update containerd (1.7.13)
4892364c [Carry 2535] rootless: support detach-netns mode
328497a8 update RootlessKit (2.0.0)
58cc30c7 update BuildKit (0.13.0-beta2)
5e38fa10 containerd-rootless-setuptool.sh: avoid creating buildkitd.toml
76199746 build(deps): bump github.com/containerd/nydus-snapshotter
bd6a915c build(deps): bump github.com/containerd/nydus-snapshotter
1050dd65 build(deps): bump github.com/klauspost/compress from 1.17.4 to 1.17.5
8df3f8a9 containerd/containerd/platforms -> containerd/platforms
0ac36b66 Retag images when tag is already present in nerdctl build
2863b6c7 CI: use standard GHA runner for Windows too
3149671e build(deps): bump github.com/opencontainers/image-spec
3a7948b3 CI: use standard GHA runners
7f88313c build(deps): bump actions/cache from 3 to 4
77234f5a update gpu image to 12.3
2410e1f6 go.mod: github.com/rootless-containers/rootlesskit/v2 v2.0.0
d307fda9 build(deps): bump github.com/containerd/containerd from 1.7.11 to 1.7.12
4af27bd1 go.mod: module github.com/containerd/nerdctl/v2
5ee55f28 add allow option in build
410d5915 Document that profiles are supported
05059400 build(deps): bump github.com/rootless-containers/bypass4netns
3b5717be containerd-rootless-setuptool.sh nsenter: inherit RootlessKit env
8e09af1e shfmt containerd-rootless-setuptool.sh
a71209f8 fix: return error if volume create failed
d0179a63 build(deps): bump golang.org/x/net from 0.19.0 to 0.20.0
aa11ded3 build(deps): bump github.com/docker/go-connections from 0.4.0 to 0.5.0
3fa62388 build(deps): bump docker/metadata-action from 5.4.0 to 5.5.0
ce955db1 build(deps): bump golang.org/x/sync from 0.5.0 to 0.6.0
2053c384 build(deps): bump golang.org/x/term from 0.15.0 to 0.16.0
b0458662 logging: respect ctx
9afd9e3e update runc (v1.1.10)
695f11a2 cniNetworkManager: move Windows-specific variable to `_windows.go`
c44427fb nerdctl rm: fix printing `error="<nil>"` on warning
df43d623 build(deps): bump go.uber.org/mock from 0.3.0 to 0.4.0
f60bbc65 build(deps): bump github.com/containerd/cgroups/v3 from 3.0.2 to 3.0.3
f59c2bed Add docs for trouble shooting nvidia gpu operator
970fed9f Remove "soci image rpull" from testing suite
843d8600 fix typo in filename
e4bf8b99 Fix #2199 to allow users to bind a named pipe on Windows.
392daca1 go.mod: clean up
c2d71273 fix groupadd in compose
ea3a4e02 build(deps): bump github.com/awslabs/soci-snapshotter
ffd76b5b build(deps): bump golang.org/x/crypto from 0.16.0 to 0.17.0
ef00a6d6 build(deps): bump docker/metadata-action from 5.3.0 to 5.4.0
255716ea docs: Fix typo in command-reference.md
b6436017 fix etchosts in host network
990d7eca implement persistent logging for contaiers running in foreground
ae004af5 fix deadlinks in the notation doc
e538124a build(deps): bump github.com/pelletier/go-toml/v2 from 2.1.0 to 2.1.1
24aa6e27 update BuildKit (0.12.4)
de985457 update containerd (1.7.11)
139022f8 build(deps): bump github.com/containerd/containerd from 1.7.10 to 1.7.11
8567678e Dedup mounts for /etc/hosts /etc/resolv.conf
a56dcfac build(deps): bump actions/setup-go from 4 to 5
a4c33929 build(deps): bump github.com/containerd/nydus-snapshotter
06628f63 nerdctl run: reset the default value of limits.
f6004169 build(deps): bump docker/metadata-action from 5.2.0 to 5.3.0
f2030d29 update CNI plugins (1.4.0)
722040c4 build(deps): bump github.com/containernetworking/plugins
f709735a build(deps): bump github.com/klauspost/compress from 1.17.3 to 1.17.4
198797f2 build(deps): bump docker/metadata-action from 5.0.0 to 5.2.0
0e73e3ed update containerd (1.7.10)
21dc100a fix typo
ed633b3b build(deps): bump github.com/containerd/containerd from 1.7.9 to 1.7.10
71bf53b3 update golangci-lint (1.55.2)
a8aaac29 build(deps): bump golang.org/x/net from 0.18.0 to 0.19.0
d6c7f0f3 build(deps): bump golang.org/x/crypto from 0.15.0 to 0.16.0
aeeb338b update Nydus (2.2.4)
e0808016 update Kubo (0.24.0)
ec728349 update containerd (1.7.9)
6e5c7f76 build(deps): bump github.com/containerd/accelerated-container-image
2d508151 Fix nerdctl system info : sort problem.
afe990db remove incompatible in TestComposeExecTTY
8e9ca2b1 build(deps): bump github.com/go-jose/go-jose/v3 from 3.0.0 to 3.0.1
30eaca09 build(deps): bump github.com/compose-spec/compose-go
76c57d20 fix: typo
51d09871 build(deps): bump github.com/klauspost/compress from 1.17.2 to 1.17.3
9b62e889 Add SOCI index digest flag
d7676628 docs: read-only (RRO) bind-mount have been support by docker
77d1fd64 build(deps): bump github.com/containerd/containerd from 1.7.8 to 1.7.9
ca8c1180 build(deps): bump github.com/compose-spec/compose-go
c6a4bfeb build(deps): bump docker/build-push-action from 5.0.0 to 5.1.0
0d934074 Deflake TestContainerListWithFilter
33350146 build(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.0
411f9daf build(deps): bump github.com/fatih/color from 1.15.0 to 1.16.0
a7cdd348 build(deps): bump golang.org/x/sync from 0.4.0 to 0.5.0
651cc8cb build(deps): bump golang.org/x/net from 0.17.0 to 0.18.0
6c560bcf [build][iidfile] Setthe same permissions as docker
d08f4c47 build(deps): bump golang.org/x/text from 0.13.0 to 0.14.0
d9d684bf chore(test): remove some incompatible in compose test
a78b50ef Add diff command to docs & fix usage message
3d1a5f11 Use prepared Stdout
d03a5993 Fix wrong comment of completion
00c0d3b7 Fix missing error handling
cc52ea45 Support diff command's autocompletion
da85b403 Remove diff test from windows
2fcd3c4c Add comment to diff test
d96ad3b4 Add `diff` command
0008cd6c build(deps): bump github.com/Microsoft/hcsshim from 0.11.2 to 0.11.4
a9e5ea43 update containerd-fuse-overlayfs (1.0.8)
ae12819e Fix unstable sort of container list in compose
0e643d2b update imgcrypt (1.1.9)
2c57b5ca update BuildKit (0.12.3)
9c1ee066 update runc (1.1.10)
2c3cb4a4 update containerd (1.7.8)
2af4cef9 nerdctl ps: implement `--format {{.Label "foo"}}`
3dd95cd4 Dockerfile: stargz-snapshotter v0.15.1
b5da5ea3 fix add-host overwritten
9143054e build(deps): bump github.com/containerd/stargz-snapshotter/ipfs
147cbbef build(deps): bump github.com/containerd/imgcrypt from 1.1.8 to 1.1.9
e6e24c21 build(deps): bump github.com/containerd/stargz-snapshotter
1138bfbe nerdctl-full: compile ipfs (Kubo) as a static binary
ac0ceb5a nerdctl-full: compile containerd as static binaries
a6a2d917 Support IPv6 for nerdctl network
55987ae9 Add support to CernVM-FS Snapshotter
fff98e35 build(deps): bump github.com/docker/cli
792a0cb1 support running container with network id
63b8df5e build(deps): bump github.com/containerd/containerd from 1.7.7 to 1.7.8
59640025 build(deps): bump github.com/docker/docker
161bf205 compose_config_test: workaround for Docker Compose v2.23.0
0b977127 Vagrantfile.freebsd: pin generic/freebsd13 to version 4.3.2
ae17b486 build(deps): bump google.golang.org/grpc from 1.56.2 to 1.56.3
caea0f91 fix ps format names
35966845 support ip-masq option
5d18f61d build(deps): bump github.com/klauspost/compress from 1.17.1 to 1.17.2
1c41c10f Replace logrus.SetOutput() with log.L.Logger.SetOutput()
10854249 docs: minor soci push fix
a97162ed build(deps): bump github.com/containerd/nydus-snapshotter
8a5177c7 build(deps): bump github.com/containerd/continuity from 0.4.2 to 0.4.3
0af5badb build(deps): bump tonistiigi/xx from 1.2.1 to 1.3.0
f51e06d2 build(deps): bump github.com/compose-spec/compose-go
35a7920a build(deps): bump github.com/Microsoft/hcsshim from 0.11.1 to 0.11.2
8c2610a1 build(deps): bump github.com/mattn/go-isatty from 0.0.19 to 0.0.20
6c8ea8bc build(deps): bump actions/checkout from 4.1.0 to 4.1.1
41f2647a build(deps): bump github.com/klauspost/compress from 1.17.0 to 1.17.1
63d446f1 Use https://github.com/containerd/log for logging
04a35f82 build(deps): bump github.com/containerd/accelerated-container-image
bc62b220 fix: typo
5d4f0325 nerdctl compose: fix --env-file
5a874813 build(deps): bump github.com/containerd/nydus-snapshotter
ff0fa841 chore: unnecessary code
a2cfe916 build(deps): bump golang.org/x/net from 0.16.0 to 0.17.0
3b09b4cb fix: call client close
3b6cf701 go.mod: github.com/containerd/containerd v1.7.7
b6d76eae dockerconfigresolver: nullify DefaultTLS when DefaultScheme == "http"
e590756c update gotestsum (1.10.0)
98d5724e update Kubo (0.23.0)
02a59fc5 update containerd-fuse-overlayfs (1.0.7)
869dec83 update slirp4netns (1.2.2)
ea86ea87 update containerd (1.7.7)
abec5ef0 containerd/containerd/log -> containerd/log
93cb4802 chore: Comment should with an optional leading article
d5dd50ce build(deps): bump golang.org/x/net from 0.15.0 to 0.16.0
3006f23e release.yml: migrate from `hub` to `gh`
6664661c build(deps): bump golang.org/x/crypto from 0.13.0 to 0.14.0
11a43ac4 build(deps): bump golang.org/x/sync from 0.3.0 to 0.4.0
980019a2 build(deps): bump golang.org/x/term from 0.12.0 to 0.13.0
fdf4b2c0 build(deps): bump golang.org/x/sys from 0.12.0 to 0.13.0
34f73335 build(deps): bump github.com/containerd/nydus-snapshotter
c1fd6782 Fix port allocate iptables regex
6b5c43e2 CNI: prioritize `/opt/cni/bin` over `/usr/lib/cni`
e230c3cf build(deps): bump github.com/containerd/nydus-snapshotter
88188be6 docs: minor fixes to soci documentation
72665a07 update toml to v2
8ce38135 fix: client close connection
004a05a8 Support zstd (non-chunked) conversion
7291147c build(deps): bump github.com/tidwall/gjson from 1.16.0 to 1.17.0
3b644b19 build(deps): bump actions/checkout from 4.0.0 to 4.1.0
a9fb4c56 chore: Comment should with an optional leading article
4b5129b5 build(deps): bump github.com/Microsoft/hcsshim from 0.11.0 to 0.11.1
1b5a9867 add missing flags for compose ps
20f929d1 add featrue network filter
c407ceb5 build(deps): bump github.com/compose-spec/compose-go
357113b4 nerdctl version: skip inspecting rootless daemon if the daemon is not running
42cfd144 docs: add SOCI snapshotter guideline in README.md
65334cc7 build(deps): bump github.com/klauspost/compress from 1.16.7 to 1.17.0
98e87997 build(deps): bump gotest.tools/v3 from 3.5.0 to 3.5.1
6db2c459 update containerd (1.7.6)
4c82cde7 feat: support push with soci
dd03ebea nerdctl compose cp: support rootless
69a1833e compose: silence "build.config should be relative path" warning
1605587b Implement `nerdctl compose exec -T`
a08e668f docs: fix docs for supported quiet flag of push command
76dd7065 build(deps): bump github.com/opencontainers/image-spec
78c855e0 add feature nerdctl compose cp
ce611af1 build(deps): bump github.com/containerd/nydus-snapshotter
9d4e5d68 seccomp: rename "default" to "builtin" to follow Docker 23
be2acea7 update golangci-lint (1.54.2)
ba3c6b91 update soci-snapshotter (0.4.0)
b5b1f2a1 update Nydus (2.2.3)
c5794dd6 update Kubo (0.22.0)
ee1ac8f0 update fuse-overlayfs (1.13)
bdb2c006 update slirp4netns (1.2.1)
70b1ba31 update RootlessKit (1.1.1)
822f1154 update imgcrypt (1.1.8)
bcface07 update BuildKit (0.12.2)
e4a2ceb7 update containerd (1.7.6)
1e0b0bbf image: dedup same platform entry
6d77b40b build(deps): bump github.com/containerd/containerd from 1.7.5 to 1.7.6
c373e1bc build(deps): bump docker/login-action from 2.2.0 to 3.0.0
81f4dba5 build(deps): bump docker/setup-qemu-action from 2 to 3
765711c4 build(deps): bump docker/metadata-action from 4.6.0 to 5.0.0
ebede8d0 build(deps): bump docker/setup-buildx-action from 2 to 3
03cb689c build(deps): bump docker/build-push-action from 4.2.1 to 5.0.0
68b58d8a build(deps): bump github.com/compose-spec/compose-go
248b2b3a remove useless option from containerd-rootless-setuptool
fe87f8b7 build(deps): bump docker/build-push-action from 4.1.1 to 4.2.1
bc7edb76 MAINTAINERS: add Kay Yan (yankay) as a REVIEWER
a976067c fix bash completion of volume rm
2cbb162b build(deps): bump github.com/cyphar/filepath-securejoin
e1bad09d adjust writers fmt
a80e0eb1 fix container_create_windows_test
b598b583 add missing zero-length list check
cdc917eb build(deps): bump github.com/docker/cli
84309f24 build(deps): bump github.com/docker/docker
1bb407c0 build(deps): bump golang.org/x/net from 0.14.0 to 0.15.0
cf6ba305 build(deps): bump golang.org/x/term from 0.11.0 to 0.12.0
c565933b build(deps): bump golang.org/x/text from 0.12.0 to 0.13.0
c2b9f877 build(deps): bump golang.org/x/sys from 0.11.0 to 0.12.0
f7752221 build(deps): bump actions/checkout from 3.6.0 to 4.0.0
2739c8fc fix nerdctl run -v when host folder does not exist for bind mounts
1352ac0d build(deps): bump github.com/awslabs/soci-snapshotter
6e542c3a Makefile: install docs
da05f926 Makefile: fix overriding GO command
fa9e4edb Makefile: add GO_BUILD_FLAGS variable
4dbe249e Makefile: derive BINDIR from PREFIX
d30f0788 fix: grammatical errors
79a15782 fix: succeeded typo
c6dd2f5f build(deps): bump github.com/containerd/containerd from 1.7.3 to 1.7.5
9a41384b build(deps): bump actions/checkout from 3.5.3 to 3.6.0
a0aac07a Support copying out of volumes in stopped containers
31d5d4ad Fix typo
4dcef6e0 pkg/version: fulfill fields from `debug/buildinfo`
1e5baaaf Fix usage of `errors.Join`
91295033 build(deps): bump github.com/compose-spec/compose-go
6ed3118e build(deps): bump github.com/containerd/imgcrypt from 1.1.7 to 1.1.8
ccd5be5d build(deps): bump golangci/golangci-lint-action from 3.6.0 to 3.7.0
0844a51e support test integration docker 23 compatibility
42c312a8 support volume create anonymous
89bb5bc3 update runc (1.1.9)
5130ccbf Remove dependency on github.com/hashicorp/go-multierror
b98ce6a6 build(deps): bump github.com/compose-spec/compose-go
3bc8f05b build(deps): bump github.com/tidwall/gjson from 1.15.0 to 1.16.0
56b0a7cb Update to Go 1.21 in CI
ac0146f9 build(deps): bump github.com/fahedouch/go-logrotate from 0.1.3 to 0.2.0
424bf4ed FreeBSD: Linux Container Support and BuildKit Integration
0d631726 build(deps): bump golang.org/x/net from 0.13.0 to 0.14.0
569fe4e3 CI: Windows: enable Hyper-V containers
3df165d0 fix attach help is messed up
dd60cfe6 build(deps): bump golang.org/x/crypto from 0.11.0 to 0.12.0
2888c388 CI: move Windows tests to GHA
855da424 CI: move FreeBSD tests to GHA
65934e92 test-integration-docker-compatibility: install Docker 20.10
cf7b7428 build(deps): bump github.com/coreos/go-iptables from 0.6.0 to 0.7.0
b8a8100e .cirrus.yml: fix FreeBSD CI failure
be2ba3ef build(deps): bump golang.org/x/net from 0.12.0 to 0.13.0
f0140a5c feat: add 'nerdctl container attach'
35296268 Bump containerd to 1.7.3
7f5bca18 Remove special case for Windows when mounting view
f57cb241 Add lease to prevent containerd GC
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
5dfa9cf125 |
k3s: update to v1.28.7
Generated with:
./scripts/oe-go-mod-autogen.py --repo https://github.com/rancher/k3s.git --rev v1.28.7+k3s1
plus one manual modification to relocation.inc:
- sigs.k8s.io/kustomize/kustomize/v5:sigs.k8s.io/kustomize/kustomize/v5:force
+ sigs.k8s.io/kustomize/kustomize/v5:sigs.k8s.io/kustomize/kustomize/v5/kustomize:force
Bumping k3s to version v1.28.7+k3s1, which comprises the following commits:
051b14b248 Fix netpol startup when flannel is disabled
4c1b91e3f9 Use 3/2/1 cluster for split role test
16ad3bc39c Change default number of etcd nodes in E2E splitserver test
9c0e5a5ff8 Rename AgentReady to ContainerRuntimeReady for better clarity
80baec697f Restore original order of agent startup functions
f19db855bf remove e2e logs drone step (#9516)
25e12bc10c [Release-1.28] Fix drone publish for arm (#9508)
9f78e474d7 Update Kubernetes to v1.28.7 (#9492)
1ca64a81be [Release-1.28] Support PR testing installs (#9469)
45860105bb [Release-1.28] Test_UnitApplyContainerdQoSClassConfigFileIfPresent (#9440)
78543f4850 [Release-1.28] Enable longer http timeout requests (#9444)
3d0674ad1c Bump kine and set NotifyInterval to what the apiserver expects
a3770d21e2 Expose rootless containerd socket directories for external access
0259b8e535 Expose rootless state dir under ~/.rancher/k3s/rootless
865b454a05 Don't verify the node password if the local host is not running an agent
493ebb9517 Fix ipv6 endpoint address selection for on-demand snapshots
cd7c557754 Fix issue with coredns node hosts controller
3d46c7da70 Bump CNI plugins to v1.4.0
b620348998 Add check for etcd-snapshot-dir and fix panic in Walk
6b2c1ecb0f Retry startup snapshot reconcile
c2c9a265bf Fix excessive retry on snapshot reconcile
dda9780f23 Update Kube-router to v2.0.1
a922a0e340 allow executors to define containerd and docker behavior
034ee89344 Update flannel to v0.24.0 and remove multiclustercidr flag (#9075)
6ff57ab749 Bump flannel version
25c7208b7e Changed how lastHeartBeatTime works in the etcd condition
f3b4effb32 Runtimes refactor using exec.LookPath
5eb278b838 [Release-1.28] Auto Dependancy Bump (#9419)
190864259e Consistently handle component exit on shutdown
5857584463 Bump cri-dockerd
35ef1cec92 Bump Local Path Provisioner version (#8953) (#9426)
c9f49a3b06 Bump helm-controller to fix issue with ChartContent
2f9788ab55 Bump runc and helm-controller versions
14fdacb85b gofmt config_test.go
aebdccfae5 Fix issues with certs.d template generation
39a0001575 Use `ipFamilyPolicy: RequireDualStack` for dual-stack kube-dns (#8984)
c236c9ff77 Update to v1.28.6 (#9260)
6224ea62af Error getting node in setEtcdStatusCondition
470bcd1bff Move proxy dialer out of init() and fix crash
04ce0ac0a9 Rebase & Squash (#9070)
4724315b8c Pin opa version for missing dependency chain (#9216)
2858f89a5b Bump quic-go for CVE-2023-49295
b04e18c4a0 Enable network policy controller metrics
bda4b73493 Add e2e test for embedded registry mirror
f3c6250b28 Add embedded registry implementation
ef4e7ae143 Add server CLI flag and config fields for embedded registry
ece564ec93 Add ADR for embedded registry
ea66fe65b4 Propagate errors up from config.Get
a62ee4fd0d Move registries.yaml load into agent config
ace1714e0c Pin images instead of locking layers with lease
3b863906e0 Fix OS PRETTY_NAME on tagged releases
ee85990a83 Add runtime checking of golang version
3be858a878 Add more paths to crun runtime detection (#9086)
fa798ba272 Add support for containerd cri registry config_path
f95ab7aaf9 Fix nil map in full snapshot configmap reconcile
fe19faaf9a Handle logging flags when parsing kube-proxy args
fc3136f54f Fix the OTHER log message that prints the wrong variable
9d5950741e Dockerfile.dapper: set $HOME properly
3248fd05c7 Add ServiceLB support for PodHostIPs FeatureGate
a503d13591 Remove GA feature-gates (#8970)
53c6e05ef5 Handle etcd status condition when cluster reset and disable etcd
3d08cfd0fe Wait for taint to be gone in the node before starting the netpol controller
90367d80b0 Add a retry around updating a secrets-encrypt node annotations (#9125)
5b2d1271a6 Only publish to code_cov on merged E2E builds (#9083)
19b361f30b Update to v1.28.5-k3s1 (#9081)
71a3c35fb7 Bump containerd to v1.7.11
08509a2a90 Allow setting default-runtime on servers
b9c288f702 Bump containerd/runc to v1.7.10-k3s1/v1.1.10
03532f7c0b Added runtime classes for crun/wasm/nvidia
9c6ba42ca0 Nov 2023 stable channel update (#9022)
79438cecaa Modify CONTRIBUTING.md guide
d34550fb2f Fix overlapping address range
6ba6c1b65f remove s390x from manifest (#8998)
022cf6d51f remove s390x steps temporarily since runners are disabled
3f23723035 Update to v1.28.4 (#8920)
6d3a92a658 Print key instead of file path in snapshot metadata log message
b23e70d519 Don't apply s3 retention if S3 client failed to initialize
a92c4a0f17 Don't request metadata when listing objects
96ebb96317 Fix flakey dynamic-cert.json in cert rotation e2e test
611ac0894c Revert e2e pipeline depends_on change
3a6284e2b9 Bump dynamiclistener to fix secret sync race
1e0a7044cf Reorder snapshot configmap reconcile to reduce log spew during initial startup
e53c189587 Handle nil pointer when runtime core is not ready in etcd
6c544a4679 Add jitter to client config retry
fa4c180637 Update install.sh sha256sum (#8885)
da0593bcf9 More improves for K3s patch release docs (#8800)
abc2efdd57 Disable helm CRD installation for disable-helm-controller (#8702)
07ee854914 Tweaked order of ingress IPs in ServiceLB (#8711)
7ecd5874d2 Skip initial datastore reconcile during cluster-reset
2088218c5f Fix issue with snapshot metadata configmap
fd8db56d5a Fix wrong warning from restorecon in install script (#8871)
78ea593780 General updates to README (#8786)
19fd7e38f6 enh: Force umount for NFS mount (like with longhorn)
b47cbbfd42 add agent flag disable-apiserver-lb (#8717)
30c8ad926d QoS-class resource configuration
32a1efa408 Bump kine to fix multiple issues
a26441613b add: timezone info in image
0011eb5ead optimize: Simplify and clean up Dockerfile (#8244)
8f7a8b23b7 Improve dualStack log
f5920d7864 Add warning for multiclustercidr flag (#8758)
ba5fcf13fc Wasm shims and runtimes detection
875a9d19c6 Added ADR for etcd status
c5cd7b3d65 Added etcd status condition
022c49242d update channels latest to v1.27.7+k3s2 (#8799)
bbafb86e91 Don't use iptables-save/iptables-restore if it will corrupt rules
9e13aad4a8 Update traefik to fix registry value (#8792)
1ae053d944 Upgrade traefik chart to v25.0.0 (#8771)
f575a05be2 fix: Access outer scope .SystemdCgroup (#8761)
c7c339f0b7 chore: Bump Trivy version (#8739)
1e99a46256 chore: Update sonobuoy image versions (#8710)
9377accd9e update stable to v1.27.7+k3s1 (#8753)
112e1339b7 Restore selinux context systemd unit file (#8593)
49411e7084 Don't try to read token hash and cluster id during cluster-reset
6aef26e94b Update to v1.28.3 (#8682)
5b6b9685e9 Manually requeue configmap reconcile when no nodes have reconciled snapshots
3db1d33282 Re-enable etcd endpoint auto-sync
b8dc95539b Fix CloudDualStackNodeIPs feature-gate inconsistency
0c9bf36fe0 [K3s][Windows Port] Build script, multi-call binary, and Flannel (#7259)
aaf8409096 Use version.Program not K3s in log (#8653)
9597ea1183 Start etcd client before ensuring self removal
2291d6d079 Add etcd-only/control-plane-only server test
7bb4a826af Update kube-router package in build script
3abc8b82ed Bump traefik, golang.org/x/net, google.golang.org/grpc
1ffb4603cd Use IPv6 in case is the first configured IP with dualstack
3d25e9f66c Switch build target from main.go to a package. (#8342)
7c5b69ca1d Fix etcd snapshot integration tests
d885162967 Add server token hash to CR and S3
550ab36ab7 Switch to managing ETCDSnapshotFile resources
5cd4f69bfa Move snapshot delete into local/s3 functions
a15b804e00 Sort snapshots by time and key in tabwriter output
7464007037 Store extra metadata and cluster ID for snapshots
80f909d0ca Move s3 snapshot list functionality to s3.go
8d47645312 Consistently set snapshotFile timestamp
f1afe153a3 Tidy s3 upload functions
2b0e2e8ada Elide old snapshot data when apiserver rejects configmap with ErrRequestEntityTooLarge
676b00aa0e Move etcd snapshot code into separate file
500744bb94 Add new CRD for etcd snapshots
64107b54e4 Minor updates as per design review discussion
22065affa2 Add ADR for etcd snapshot CRD migration
9bb1ce1253 Bump busybox to v1.36.1
5fe4f6709a Bump containerd to v1.7.7-k3s1
7d38b4a3db E2E Domain Drone Cleanup (#8579)
dface01de8 Server Token Rotation (#8265)
ced25af5b1 Fixed tailscale node IP dualstack mode in case of IPv4 only node
ba750e28b7 [v1.28] System agent push tags fix (#8568)
e33359d375 Update install.sh.sha256sum
a6acdd0d75 Fix slemicro check for selinux (#8526)
e82b37640a Network defaults are duplicated, remove one
d4a487d83f Fix spellcheck problem (boostrap ==> bootstrap)
f2c7117374 Take IPFamily precedence based on order
0b23a478cf ipFamilyPolicy:PreferDualStack for coredns and metrics-server
021c5b291b Improve release docs - updated (#8414)
0e5c760625 Pass SystemdCgroup setting through to nvidia runtime options
1e38b5d904 Don't ignore assets in home dir if system assets exist
fe18b1fce9 Add --image-service-endpoint flag (#8279)
79b44cee29 Create and validate install.sh signatures (#8312)
ad206310d1 Update kube-router
b6ab24c4fd Added error when cluster reset while using server flag
b010c941cf Fix .github regex to skip drone runs on gh action bumps (#8433)
d349c9db6c Added cluster reset from non bootstrap nodes on snapshot restore e2e test
d0ab4ef26b Added advertise address integration test
172a7f1d1a Fix gofmt error
8705a88bf4 Clear remove annotations on cluster reset; refuse to delete last member from cluster
002e6c43ee Reorganize Driver interface and etcd driver to avoid passing context and config into most calls
890645924f Don't export functions not needed outside the etcd package
a3c52d60a5 Skip creating CRDs and setting up event recorder for CLI controller context
391e61bd72 Use admin kubeconfig instead of supervisor for etcd snapshot CLI
bd9dad87d5 Typo fix
5c5d957e73 Set server-token adr to accepted
6398c38690 Server token rotation ADR
8c73fd670b Disable HTTP on main etcd client port
12459fca97 Add extraArgs to tailscale
8c197bdce4 Include the interface name in the error message
56abe7055f add link to drone in documentation (#8295)
e1706875f4 Update channel latest to v1.27.6+k3s1 (#8397)
66cb1064d1 Add context to flannel errors
d3f7632463 Fix error reporting
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
13c66b0983 |
cri-tools: update to v1.29.0
Bumping cri-tools to version v1.26.0-489-g17b4dd65, which comprises the following commits:
949545e1 Readd the logPath to the list
5afb4c73 Matching kubelet's containerLogManager.rotateLog() glob pattern
09b9303e Applying comment
64e373b2 Changing option to keep-logs and inverting default
67679ee3 1197: adding rm --dl (--deletelog) option
edccf499 Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc
dee3de0a Bump go.opentelemetry.io/otel/sdk from 1.23.1 to 1.24.0
af4707c2 Don't remove pinned images on image prune
fd867e1c A bunch of changes: * handle regexp error * better usage info * better documentation
98843b15 Implemented the `--filter` flag for `images` command.
196f9421 Update Kubernetes to v1.30.0-alpha.2
376d9251 Don't skip windows tests
2529cea9 Don't fail-fast containerd test matrix
58cfa5b3 Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc
3afa43ab Bump golang.org/x/net from 0.20.0 to 0.21.0
f6e57a25 Add support for OTEL tracing
9d1a1a1d Bump golang.org/x/term from 0.16.0 to 0.17.0
e9842e43 Bump golang.org/x/sys from 0.16.0 to 0.17.0
325307a6 Bump github.com/docker/docker
16c59bdc Bump github.com/docker/docker
32452408 Bump github.com/opencontainers/runc from 1.1.11 to 1.1.12
971120b9 Replace dockershim with containerd
c4276c46 Bump github.com/google/uuid from 1.5.0 to 1.6.0
44e8b572 Bump github.com/onsi/gomega from 1.30.0 to 1.31.1
4c9f5e69 Bump github.com/docker/docker
0d805e78 Add corresponding man page
8e04084e docs: state that crictl is GA
ade93e9f Bump actions/cache from 3 to 4
8badaef0 Bump github.com/onsi/ginkgo/v2 from 2.14.0 to 2.15.0
1f0b5766 Bump golang.org/x/net from 0.19.0 to 0.20.0
4cf8a2d2 Update Snyk configuration file to exclude vendor directory with a prefix
2522d997 Bump github.com/onsi/ginkgo/v2 from 2.13.2 to 2.14.0
f43276b7 Bump github.com/urfave/cli/v2 from 2.26.0 to 2.27.1
7f90228b Bump golang.org/x/term from 0.15.0 to 0.16.0
8010f920 Bump github.com/opencontainers/runc from 1.1.10 to 1.1.11
a7b83b1c Provide precompiled manpage version
43f44445 Bump actions/upload-artifact from 3 to 4
746fa3dc Update vendored Kubernetes to v1.29.0
51e7735f Add a .snyk file to configure the Snyk security scanner
ddb95e1f Bump github.com/google/uuid from 1.4.0 to 1.5.0
b0129e72 Vendor Kubernetes v1.29.0-rc.2
87e7961e Bump google-github-actions/setup-gcloud from 1 to 2
ed48a82e more detailed output for split filesystem
b12bab01 Drop support for `linux/arm` platform
7e24e264 Bump actions/setup-go from 4 to 5
34721f47 Add darwin/arm64 to release binaries
8643906d add support container runtime use systemd cgroups
c5e443ae adding imagefsinfo endpoint for both container and image filesystems
310528b8 Bump github.com/urfave/cli/v2 from 2.25.7 to 2.26.0
83fc34e9 Update golangci-lint to v1.55.2
f409932e Update vendored Kubernetes to v1.29.0-rc.1
58d450ce Bump github.com/onsi/ginkgo/v2 from 2.13.1 to 2.13.2
31cda1d3 Bump golang.org/x/net from 0.18.0 to 0.19.0
6245bad2 Bump golang.org/x/term from 0.14.0 to 0.15.0
950fb1b6 add cases.NoLower to cases.Title function
c98c5ba4 add unit tests CI for crictl
e992c1d4 add container_test.go
8cf5fc4c ci: Switch to ubuntu 22.04 and go 1.21
01dc72dd Bump github.com/onsi/ginkgo/v2 from 2.13.0 to 2.13.1
16fb7a3f Bump golang.org/x/net from 0.17.0 to 0.18.0
a6344e02 Bump golang.org/x/term from 0.13.0 to 0.14.0
135c8ad0 Bump github.com/onsi/gomega from 1.29.0 to 1.30.0
5933733c Bump golang.org/x/sys from 0.13.0 to 0.14.0
5d34c252 Bump golang.org/x/text from 0.13.0 to 0.14.0
f3aaa5c0 Update to Ubuntu 22.04
445aa46f Bump github.com/opencontainers/runc from 1.1.9 to 1.1.10
b45f7c09 Bump github.com/google/uuid from 1.3.1 to 1.4.0
320ad0eb Bump github.com/docker/docker
9a3c60e9 Bump github.com/onsi/gomega from 1.28.1 to 1.29.0
28556ddd Bump sigs.k8s.io/yaml from 1.3.0 to 1.4.0
935d5c3e Fix CRI-O get script location
63ff0e12 Bump github.com/onsi/gomega from 1.28.0 to 1.28.1
f570bc09 Bump golang.org/x/net from 0.16.0 to 0.17.0
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
29ec8e5cea |
docker-compose: update to v2.24.6
Bumping compose to version v2.21.0-154-gce1ddb6c, which comprises the following commits:
c665c53c bump buildx to v0.12.0 and adapt code to changes
a39cf75e build(deps): bump github.com/compose-spec/compose-go
46ba9c99 build(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.0
5c5d30c6 build(deps): bump github.com/docker/cli
36fa8d4e build(deps): bump github.com/docker/docker
2384635e build(deps): bump github.com/moby/buildkit from 0.12.2 to 0.12.3
2ba5e4c1 in watch mode force pull policy to build for services with both build and develop attributes This default behaviour will force a rebuild of the service images at watch process startup and be sure containers will be in sync with the local source code
b1a26dac Assume /src/pkg/compose/testdata absolute workingdir to make tests reproducible
5e77ae92 avoir use of []types.ServiceConfig
f5572201 identify services to build and don't display 'building' if none
8e1b3236 fix --remove-orphans not to consider disabled services as orphaned
7cb1f8ba introduce RuntimeVersion for code to check container runtime supports required features
cb01186c push also consider build.tags
9c4efbdd Strip project prefix from docker-compose up output
8ea7c9e0 Make it context aware and add test skipping options
c1694360 render quiet after filtering applied
254a94b0 bump golang to version 1.21.4
cf608fa9 bump compose-go to v1.20.1
426377a4 reject compose file using `secrets|configs.driver or template_driver`
493f6c80 skips flaky e2e tests on watch and attach
646a8fc0 fix docker/compose#11170 add newline in cmd/compose/build.go fmt.Fprint
2945532f fix --pull documentation
e5cd265a improve watch configuration logging Add action associated to each managed path
d646d757 lint
71237ef6 do not resolve cache dir until remote resource is in use
0d905a89 add a copyright notice with original author
b847c7f5 implement runtime file selection
5e3d8f67 re-implement cache folder detection
67279088 introduce --resolve-image-digests for publish to seal service images by digest
4cd61957 fix build
0d4cbbdb fix
9631a49d ENGDOCS-1764
328ca3f2 add docs upstream validation workflow
e1bbfc63 build(deps): bump go.uber.org/goleak from 1.2.1 to 1.3.0
616bba0a linter errors fixed
ee6e3c2a NetworkList to NetworkInspect for ID search
c7e31a3c Squashing feature branch commits in order to add signoff message.
704a9fd3 Use project.ServiceNames() if no service specified in hash
d9e0e42d Add branch configuration for pull_request trigger
c48e3c4a Initial codeql.yml commit
dd0803db fix SIGTERM support to stop/kill stack
39008c53 align with OCI artifact best practices
6c345b37 refactor(cmd/compose/run): remove redundant `len` check
1ffa194e fail start if depependency is missing
b9298101 check that the pull policy provided is a valid one or is not missing when --pull is used
3d0207eb remove uncessary return value of pullComposeFiles function
16a7c209 enable profile when down is ran with explicit service names
818bc3c3 add sync+restart action to watch attribute
38bc6d5d build(deps): bump github.com/containerd/containerd from 1.7.6 to 1.7.7
0b6ce6ee build(deps): bump github.com/google/go-cmp from 0.5.9 to 0.6.0
ae16bbbf build(deps): bump google.golang.org/grpc from 1.58.2 to 1.59.0
d13ad1f9 build(deps): bump golang.org/x/sync from 0.3.0 to 0.4.0
9b4d577c remove refrecence docs generation
14b43c1a remove cucumber tests as we haven't added new ones for a while
9dd081b9 add support of COMPOSE_ENV_FILES env variable to pass a list of env files
2c0b0232 add dry-run support for publish command
599e4b24 extract method to reduce cyclomatic complexity
fe8c2780 warn user remote resource is disabled
a345515f Don't delete dependent services
8967df7a Apply platform before hashing
4f694919 deps: remove deprecated github.com/pkg/errors
6ecab957 Include image name in error message
12e0ac89 pkg/compose/publish: use empty config descriptor mediaType
a6b7d785 pkg/remote/oci: check artifactType instead of config.mediaType
991901f2 pkg/remote/oci: refer to the manifest as manifest
2d971fc9 update the watch warning message when no services with a develop section
78f33619 ci: enable verbose output for e2e tests (#11045)
44d21280 truncate command by default, introduce --no-trunc flag to get the full command
ff2ff18c build(deps): bump google.golang.org/grpc from 1.58.1 to 1.58.2
ab81db5b config --xx don't need `env_file` being parsed
61c8be11 remove --timeout=0 flag to cleanup function of watch e2e test compose down command need the watch process to be killed to succeed
6be5f300 move watch from alpha to main command
c34c306c TestWatch to use new `develop` section
5ca35c88 implement publish
805541be watch: use official `develop` section (#11026)
8f489d6d build(deps): bump github.com/opencontainers/image-spec
9ea8fbc6 build(deps): bump github.com/moby/buildkit from 0.12.1 to 0.12.2
76f150e4 build(deps): bump gotest.tools/v3 from 3.5.0 to 3.5.1
f447c809 build(deps): bump google.golang.org/grpc from 1.58.0 to 1.58.1
4587d4ba build(deps): bump github.com/containerd/containerd from 1.7.3 to 1.7.6
a697a069 introduce pull --missing flag to only pull images not present in cache
8af49ff3 resolve service reference into container based on observed state
f6e31dbc don't rely on depends_on to resolve volume_from, better use observed state
6d5eb6fd update to go1.21.1
9d7e0ad6 correct scale error messages formatting
1a98a70b add scale command
19bbb12f ci: tweak restricted imports in linter (#10992)
7a134578 deps: upgrade Moby to v24.0.6 and gRPC to v1.58.0 (#10991)
13115468 cli: fix `--build` flag for `create` (#10982)
e1aa4f77 otel: add args & flags to cli traces (#10974)
d7b0b2bd watch: build & launch the project at start (#10957)
e0f39ebb pull OCI remote resource
c9d54f09 introduce publish (alpha) command
52e54ef9 doc: updated README.md to remove broken link
f4f2e934 migrate to github.com/distribution/reference
32c3d0a3 Enable service explicitly requested to be restarted
1fdbcb62 build: pass BuildOptions around explicitly & fix multi-platform issues
407a0d5b up: fix various race/deadlock conditions on exit (#10934)
8caa6f1f pkg/api: replace uuid for basic random id
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
4ec4055f38 |
crun: update to v1.14.3
Bumping crun to version 1.14.3-8-g89d4446, which comprises the following commits:
5884fd4 linux: fix mount of file with recursive flags
b9e87e7 tests: test bind mounts of files
e81086b rpm: Use relative, not absolute, symbolic links
9079a6d release: enable parallel builds
1961d21 NEWS: tag 1.14.3
0860c0f crun: really drop version check
32b139f NEWS: tag 1.14.2
4532a38 crun: drop check for OCI version
de537a7 NEWS: tag 1.14.1
fdb41c3 linux: initialize options variable
31b08fc container: do not leak capabilities buffer
1716fde container: do not leak version_string
e72f3bc container: fix leak of mount_options_list
242bb34 cgroup: do not leak dirfd
deffa39 cgroup: fix leak of cpus/mems string buffer
3df8f0c Add force_no_cgroup & no_pivot arguments to make_context() Python function
b883e6c Make function arguments valid Python identifiers
e0027bc Add no_new_keyring argument to make_context() Python function
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
7a5bf9f670 |
conmon: update to 2.1.10
Bumping conmon to version v2.1.3-138-gaffab49, which comprises the following commits:
9ce7b1a Add support for s390x
3e103d6 Remove checks for (long)deprecated libsystemd-journal in favor of libsystemd
f2be46f update packit config, enable downstream tasks
59c6de4 fix(deps): update module github.com/onsi/gomega to v1.31.1
1e0d24b [skip-ci] Update actions/setup-go action to v5
bc27f79 [skip-ci] Update actions/cache action to v4
386bb80 fix(deps): update github.com/opencontainers/runtime-tools digest to 408c51e
14a34a8 chore(deps): update dependency containers/automation_images to v20240102
8c6e47f drop --tty on exec
3e425d1 chore(deps): update dependency containers/automation_images to v20231208
90432cc docs/Makefile: softcode GOMD2MAN
2dcd736 bump to 2.1.10
5fec3c0 fix(deps): update module github.com/onsi/gomega to v1.30.0
8babb44 chore(deps): update module github.com/docker/docker to v24 [security]
2bc8747 chore(deps): update module golang.org/x/net to v0.17.0 [security]
8557c11 Fix incorrect free in conn_sock
116675e logging: Respect log-size-max immediately after open
fad6bac fix some issues flagged by SAST scan
91092aa version: bump to 2.1.9
521f585 README.md: update the correct Nix channel
26053bd Fix podman tests
20ce441 Forward more messages on the sd-notify socket
57eedf0 ci: skip broken cri-o tests
03b64fa logging: -l passthrough accepts TTYs
3605a36 src: fix write after end of buffer
f269c2f src: open all files with O_CLOEXEC
633ac6b oom-score: restore oom score before running exit command
f0eb924 src/seccomp_notify.c: fix static build
a58206d CI: Update Fedora names
f5eeb6a chore(deps): update dependency containers/automation_images to v20231004
6d88cb3 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.12.0
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
e3d1163c54 |
buildah: update to 1.34
Bumping buildah to version v1.34.0-30-gdbeb097c6, which comprises the following commits:
30a9cd1c0 [release-1.34] Bump to v1.34.2-dev
a2bab63fd [release-1.34] Bump to v1.34.1
b7a4562ad [release-1.34] Vendor bumps
83a136866 manifest: addCompression use default from containers.conf
ae557ac9c Build with CNI support on FreeBSD
cd59f7c16 tests: retrofit test for heredoc summary
2a399d67b build, heredoc: show heredoc summary in build output
be6b9c3f0 docs: correct default authfile path
6a8e296ea Make buildah match podman for handling of ulimits
70fd07877 imagebuildah: fix crash with empty RUN
aa729810a docs: move footnotes to where they're applicable
58820ffd1 Run codespell on code
638a825b1 Fix FreeBSD version parsing
78599048e Allow users to specify no-dereference
029063b9f Fix a build break on FreeBSD
bb70cfc50 Remove a bad FROM line
6fe37a59b commit: force omitHistory if the parent has layers but no history
b0fb0cacb docs: fix a couple of typos
6cacd1478 stage_executor,heredoc: honor interpreter in heredoc
b8c0e21cf stage_executor,layers: burst cache if heredoc content is changed
702dfe84f Replace map[K]bool with map[K]struct{} where it makes sense
f818763f3 Replace strings.SplitN with strings.Cut
47ecb727f Document use of containers-transports values in buildah
d49e48412 commit: add a --add-file flag
27018aef5 mkcw: populate the rootfs using an overlay
413a35959 Ignore errors if label.Relabel returns ENOSUP
1b00f9e63 manifest: addCompression use default from containers.conf
21ec7aceb Bump to v1.34.0
6977c91e2 fix(deps): update module github.com/containerd/containerd to v1.7.11
b9852af08 fix(deps): update github.com/containers/storage digest to 15c3cb7
ad90fba16 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.2
669f19f6c fix(deps): update github.com/containers/common digest to 630c929
bdbd69e38 fix(deps): update module github.com/moby/buildkit to v0.12.4
ec76cbb60 fix(deps): update github.com/openshift/imagebuilder digest to ef2a5fe
7dfdcf33b [CI:DOCS] man pages: underscores, too-wide lines
b7a0f6b13 fix(deps): update module github.com/containerd/containerd to v1.7.10
1f9103562 run.bats: use --quiet --pull=false when using a prefetched image
3b795dd4b internal/mkcw/embed/entrypoint.gz: rename to include the arch
7788160cb internal/mkcw/embed/entrypoint.gz: compress with -n9
76c9307ff fix(deps): update module golang.org/x/crypto to v0.16.0
d10b1e35b Integration tests: make skip_if_no_unshare check --map-users
028a3f9a3 fix(deps): update module golang.org/x/term to v0.15.0
3c23118f6 fix(deps): update module golang.org/x/sys to v0.15.0
d4f577b39 fix(deps): update module github.com/onsi/ginkgo to v2
c174e9162 vendor: update c/{common,image,storage}
a23927ab5 run: Allow using just one jail per container on FreeBSD
12b205f69 Remove makefile targets entrypoint{,.gz} for non x86_64
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
eae2d31c7b |
aardvark-dns: update to v1.10.0
Bumping aardvark-dns to version v1.10.0-14-g526260a, which comprises the following commits:
875c717 Release 1.10.0
09cf01b Release notes for 1.10.0
be398c4 chore(deps): update rust crate chrono to 0.4.32
9330e9c chore(deps): update dependency containers/automation_images to v20240102
0f509bb fix(deps): update rust crate futures-util to 0.3.30
74b3618 fix(deps): update rust crate anyhow to 1.0.79
c706497 fix(deps): update rust crate tokio to 1.35.1
b70e31b chore(deps): update dependency containers/automation_images to v20231208
d2a7877 fix(deps): update rust crate tokio to 1.35.0
26e2439 fix duplicated IP CI flake
1525a69 server: remove unused kill switch
faf66df fix(deps): update rust crate clap to ~4.4.10
ffb59da Bump working version to v1.10.0-dev
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
2961677b6a |
devtools: depreciate the go source-only packages
We are now using vendoring from the upstream repos, or creating our own vendor directory. We no longer need these source only recipes. Add an inherit to each recipe to warn that it will be removed in the future. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Chen Qi
|
799c5a90b7 |
crun: remove unneeded deps
These two deps do not affect the build result and are not used, remove them. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Chen Qi
|
a4b847830f |
oci-image-tools: remove unneeded deps
These deps no longer have any effect. Remove them. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Bruce Ashfield
|
9213f05f55 |
runc-opencontainers: update to 1.1.12
Bumping runc to version v1.1.12-2-ga9833ff3, which comprises the following commits:
29d6d873 VERSION: back to development
51d5e946 VERSION: release 1.1.12
e9665f4d init: don't special-case logrus fds
683ad2ff libcontainer: mark all non-stdio fds O_CLOEXEC before spawning init
b6633f48 cgroup: plug leaks of /sys/fs/cgroup handle
284ba305 init: close internal fds before execve
fbe3eed1 setns init: do explicit lookup of execve argument early
0994249a init: verify after chdir that cwd is inside the container
506552a8 Fix File to Close
d0b1a374 keyring: update AkihiroSuda key expiry
d561e5da keyring: update cyphar@cyphar.com key expiry
7887736f VERSION: back to development
4bccb38c VERSION: release 1.1.11
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
54fdc5149a |
containerd: update to v2.0.0-beta-tip
Bumping containerd to version v2.0.0-beta.2-204-gb1624c362, which comprises the following commits:
5351ad6b4 .github: windows should use fix critool version
a2768f19d plugins/sandbox: move local plugin into services
464319b3a Remove pause package from runc shim
2cd08156e cri: Expose runtimeHandler support for userns
358aef4bc go.mod: Update cri-api to include userns changes
105f2d727 build(deps): bump google.golang.org/grpc from 1.61.0 to 1.62.0
02db6beb8 build(deps): bump github.com/prometheus/client_golang
75f58579c build(deps): bump github.com/opencontainers/runtime-spec
522130a66 sandbox: support vsock connection to task api
f0e874941 Add ttrpc generated services
65031eade Update protobuild to build ttrpc services
04c37d565 build(deps): bump the k8s group with 5 updates
bd4810415 ci: update crun version to 1.14.3
50d0de96a Update 1.7 support timeline
4fbc9842d Changes to configuring otel from env only
753a525b3 Deprecate otel configs
0693b936d replace deprecated Prestart to CreateRuntime hook
6a21c96b5 Replace go-grpc-prometheus with go-grpc-middleware/providers/prometheus
567e56a20 build(deps): bump github.com/opencontainers/image-spec
6a759713a Update golangci-lint to v1.56.1
f44d90be4 Rename variables and snapshotter option to resolve lint warnings
5611db530 cri: Make sure host sandbox files exist before adding them to mounts
9077d1372 KEP-3857: Recursive Read-only (RRO) mounts
83ad4367d script/test/utils.sh: readiness_check: print daemon log
f8f1e5f7a Add container monitor plugin type for restart
c86c8a16f integration: add case related to ContainerStats in upgrade suite
acec60f55 integration: update recover case for upgrade
e659cd275 integration: connect to shim by bridge client
51689b661 integration: introduce hook for upgrade test suite
a95c8ed59 integration: check data dir after delete container or pod
ec759f5be integration/*: extend Runtime.Status response
401d4b491 integration: add some helper function to release upgrade cases
7cf8a00c7 Run failpoints tests only for runc
a890c8e53 Add job to report statuses from matrix jobs
132485adb Convert CLI to urfave v2
c8766123d Prevent GC from schedule itself with 0 period.
a086125ae Move config version to version package
99721c27e Disable the support for Schema 1 images
b9dfba5b8 Add CRIImageService.RemoveImage()
4c775fcfb Pass runtimehandler from CRI pull image request
4dcf089fa Move high volume event logs to Trace level
1b3a96da6 cri: propagate deprecation list to runtime status
ac7febc93 moving up for new CRI changes
ccec1e6e4 Remove internal LoopConfig struct
3d8da2ebf build(deps): bump the golang-x group with 1 update
a274439f2 build(deps): bump golangci/golangci-lint-action from 3 to 4
468bee9a7 ctr: print deprecation warnings on every invocation
c2dfae8d0 go.mod: Bump golang.org/x/sys to v0.17.0
41bb8b816 Revert "Fix for k8s nfs related tests"
48c8c5f50 Remove ParseSignal from client
281eb22cc Remove deprecated dialer
1ce7b9951 Remove deprecated filesys funcs
5ca56ddbb Remove deprecated funcs from restart package
653b80899 Remove deprecated docker package
413fbe82c Fix unpacker link in remote snapshotter docs
23ebfd030 Fix for k8s nfs related tests
25ab90219 Update to v0.29.1 cri-api
5e3e12d2a build(deps): bump the otel group with 8 updates
c4bb72ae4 Remove CRI plugin path note
87aa9e800 Drop go 1.20 and build against 1.22
276384695 Update codeql-action/upload-sarif dependency in scorecards workflow
634ac2f8f Update migration script for transfer packages
f46aea618 Move transfer and unpack packages
d9b95ab68 Update gce configure.sh to use registry config_path
360fbf197 Fix windows integration tests
2820343d4 Update workflow files to install Go via composite action
488b56361 Extract a composite action to install Go
5aa05481d Add OSVersion to platform protobuf
d9cae66d8 Extend string match in make protos
c58b1fb40 Update github.com/containerd/console to v1.0.4
06ed897b2 cri/server: Add userns tests in PodSandboxStatus
6c356a5c7 cri: Expose userns in PodSandboxStatus rpc
1eaf0c1f0 bug fix: make sure cri image is pinned when it is pulled outside cri
9eb9038a9 Avoid publishing data events during transaction
86530c0af Move image event publishing to metadata store
32bd8eff9 Move inline PS scripts into files
4e8e21a7d go.{mod,sum}: update NRI dependency, re-vendor.
5cbe92e88 Clean up repeated package import
72950c00b Treat PRs that require rebase > 90 days as stale
db437580b build(deps): bump github.com/opencontainers/image-spec
2c7d69530 build(deps): bump github.com/klauspost/compress from 1.17.5 to 1.17.6
da1673f55 Update vendor
047d42e90 Update ttrpc to v1.2.3
64e96c7d4 Update hcsshim to v0.12.0-rc.3
a9060cda4 Support inject delay running with the old version (4.x) of strace for test case.
9ef94fe52 fix(docs): fix cp and add step to include binaries in the $env:Path
fe24b918f pkg/nri, docs: enable NRI by default.
e230ed939 sandbox: add sandbox recover ut and e2e test
312496474 sandbox: fix recover status set issue
256637249 Fix config import relative path glob
667069583 Revert "cri: make read-only mounts recursively read-only"
a9152ebf8 copy: prevent potential deadlock if close before fully written
b48e1141e copy: setError should imply Close
e4f91c2df copy: remove max number of ErrResets
651cfa2a2 pushWriter: refactor reset pipe logic into separate function
9d7641ff3 copy: improve error detection from closed pipes
91a50f70b copy: check if writer was closed before setting a pipe
4660f6303 copy: remove wrapping io.NopCloser from push writer pipe
0facc8592 Fix proto formatting
7f2d2c4f4 Move Message proto to types
287524733 Fix formatting after moving CRI
bbac058cf Move CRI from pkg/ to internal/
6e365e925 CRI: An empty DNSConfig != unspecified
9340be717 Remove duplicated TOML duration parsers
b2f254fff cri: make read-only mounts recursively read-only
f74e5ce7e Move differ default to its own file
82fb589ff Update runc binary to v1.1.12
87a9835f1 docs: fix typo
81409e937 Add a default differ that matches the snapshotter
2369185aa CI: update Rocky Linux to 8.9
d8460a702 CI: bump up crun to 1.14
ebbce7423 rm docs/cri/installation.md
49d5cc7f9 build(deps): bump github.com/klauspost/compress from 1.17.4 to 1.17.5
4d33170ea build(deps): bump github.com/google/uuid from 1.5.0 to 1.6.0
3a5b47d73 build(deps): bump google.golang.org/grpc from 1.60.1 to 1.61.0
9a983caad build(deps): bump github.com/containerd/plugin
495afb0c0 build(deps): bump lycheeverse/lychee-action from 1.9.1 to 1.9.3
5365a1089 build(deps): bump google-github-actions/upload-cloud-storage
64b4778fc Add deprecation warnings to CRI image server configuration
65b3922df Split streaming config from runtime config
58ff9d368 Move cri plugin to plugins subpackage
d29a1bc6a Move sandbox info to cri types packages
9795677fe Move cri base plugin to CRI runtime service
966d51801 The `Links` workflow should be disabled in forks.
e15f191a2 Fix func (m manager) Info in containerd-shim-runc-v2
4f570db1a refactor: remove containerd/containerd/log
010857d33 Add errdefs and platforms to migration script
7cf54b437 Remove unused pkg/errdefs package
fb9b59a84 Switch to new errdefs package
6b906a22d Prepare release notes for v2.0.0-beta.2
b608c6f73 doc: fix package import path in sample code
b16e3572a refactor: move plugin/fieldpath to api/types/
22d586e51 api/services/instrospection: add PluginInfo
ad869e905 Use tags.cncf.io CDI url in config.md
eb8981f35 mv contrib/seccomp/kernelversion pkg/kernelversion
a6e52c74f seccomp: kernel 6.7
ed4710241 Code clean for nri_api.
ade80789b Remove walker diff plugin for Windows
af6a90bf5 remotes/docker/authorizer.go: invalidate auth tokens when they expire.
e79ec7a09 Remove deprecated platforms package
3f620143f Use github.com/containerd/platforms package
9dd29b3cf Update container-device-interface to v0.6.2
7eccde5d0 Clean plugin indent in containerd-config.toml.5.md
b16d46740 pod: CreatedAt time will be 269 years ago while creating cri network failed.
378e9f443 build(deps): bump actions/cache from 3 to 4
748fe2035 integration: add test for recovering images
2e8e03389 Add multi-subscriber support to GetContainerEvents CRI API
e7eb08eb5 Add support for multiple subscribers to CRI container events
cfe8321b4 strip-volatile-option-tmp-mounts
d34725f85 CI: use standard GHA runners
9d2c22123 Prepare release notes for v2.0.0-beta.1
e9f2bba1f remotes: FetchByDigest: propagate media type from config to desc
d7689ae8b Remove CRI plugin config after migrating
f48f61fd8 Add migration integration test
eb9925d88 Update config migrations to decode using the plugin type
15713014d Update server config slice merge strategy
cf6f439eb Fix transfer plugin unpack configuration
eb123db5f ctr: use transfer service by default
94d1b2098 Add migration script to contrib
9ee1f4716 Rebuild protos with updated runtime location
dbc74db6a Move runtime to core/runtime
df9b0a067 Move metrics to core/metrics
19e763553 Move pkg/truncindex to internal/truncindex
764c90700 Move pkg/tomlext to internal/tomlext
1c4be2d88 Move pkg/testutil to internal/testutil
114df368f Move pkg/registrar to internal/registrar
4ee6419fa Move pkg/randutil to internal/randutil
696cf2565 Move pkg/kmutex to internal/kmutex
5e1d9543b Move pkg/hasher to internal/hasher
23914a01b Move pkg/failpoint to internal/failpoint
c79ecfe24 Move pkg/cleanup to internal/cleanup
8f0eb2631 Move tracing to pkg/tracing
6be90158c Move sys to pkg/sys
de606680b Move rootfs to pkg/rootfs
fdb8a527c Move reference to pkg/reference
e59f64792 Move oci to pkg/oci
fa8cae99d Move namespaces to pkg/namespaces
b76236bb4 Move labels to pkg/labels
bb71c2835 Move identifiers to pkg/identifiers
5e00f63ce Move gc to pkg/gc
11114b0a9 Move gc/scheduler to plugins/gc
c38f2ab72 Move filters to pkg/filters
44a836c9b Move errdefs to pkg/errdefs
70ed2696f Move events to pkg/events
b0c3d00e9 Move cio to pkg/cio
8e14c39e8 Move archive to pkg/archive
fcd39ccc5 Move snapshots to core/snapshots
e0fe656da Move snapshots/windows to plugins/snapshots/windows
57bdbfba6 Move snapshots/overlay to plugins/snapshots/overlay
9b8c558f9 Move snapshots/native to plugins/snapshots/native
5c07d5d36 Move snapshots/lcow to plugins/snapshots/lcow
8473322f0 Move snapshots/devmapper to plugins/snapshots/devmapper
7dd96fe34 Move snapshots/btrfs to plugins/snapshots/btrfs
2909f07f8 Move snapshots/blockfile to plugins/snapshots/blockfile
92d2a5fc0 Move services to plugins/services
ce41d1c90 Move services/server to cmd/containerd/server
228ad5a5c Move sandbox to core/sandbox
d133019c9 Move runtime/restart/monitor to plugins/restart
0dabf6f15 Move remotes to core/remotes
6e5408dce Move mount to core/mount
1a1e0e8c8 Move metadata to core/metadata
18b3cbe4f Move metadata/plugin to plugins/metadata
f80760f9f Move leases to core/leases
cc6a5c9c6 Move leases/plugin to plugins/leases
57ea8aef3 Move images to core/images
913edcd48 Move diff to core/diff
d14350376 Move diff/windows to plugins/diff/windows
2d861b6ea Move diff/walking to plugins/diff/walking
aaf6ac04c Move diff/lcow to plugins/diff/lcow
9456048f4 Move containers to core/containers
21b4f3f0a Move content to core/content
846f7d4e6 Move content/local to plugins/content/local
725c92e7c include image name in error message
18b0d236c build(deps): bump actions/upload-artifact from 3 to 4
f45b46b67 runtime/v2: reduce shim plugin log
20619a7c9 ci: make artifact name unique in linux integration
2053d9157 build(deps): bump lycheeverse/lychee-action from 1.9.0 to 1.9.1
d4396c96b mount: UnmountRecursive return nil if path doesn't exist
8aa2551ce Move DefaultSnapshotter constants
c8e8a093c config: enable CDI by default
5a3d3f613 Update load image test to use local import
6041d4e60 Update fuzz contrib for updated image service
2a476d421 Move ParseImageReferences to cri util
3baf5edb8 Separate the CRI image config from the main plugin config
ad4c9f8a9 Update CRI runtime platform and pinned image configuration
11f311fdd Add minimal interface to CRI image store
02a9a456e Split image config from CRI plugin
d23ac1122 Split CRI image service from GRPC handler
a2472c0b5 transfer: add OCI descriptors to Progress structure
f26196950 Move certain debug logs to trace logs
a5d958706 update to go1.21.6, go1.20.13
21640c57a Uninstall mingw before attempting upgrade
174efb1e0 update imgcrypt binary to v1.1.9
dfb175380 build(deps): bump the golang-x group with 2 updates
2b415c911 build(deps): bump lycheeverse/lychee-action from 1.8.0 to 1.9.0
7dadd5f1b sandbox: remove sandboxStore from podsandbox
a3c62e698 add label flags to ctr import, add integration tests
d01056555 Handle failure when stopping a sandbox
8235665e7 content: Add InfoReaderProvider
fa83bc8de integration: remove use of golang.org/x/sys/execabs
dffeea471 add get cgroupdriver from RuntimeConfig to integration
46b2f1d16 Use latest VM image to get Windows updates regularly
a8d39666d Move cimfs OS build compat check to the operation functions instead of init()
0d3c3efe3 integration/import-export: Add WithSkipMissing tests
b9af453f0 export: Copy distribution source labels to manifest annotations
61a7c4999 import/export: Support references to missing content
1ab4fac94 update runc binary to v1.1.11
5387747e9 build(deps): bump github.com/containerd/cgroups/v3 from 3.0.2 to 3.0.3
a1e0601e0 fix: Update go.opentelemetry.io/otel/sdk/trace to satisfy traceProvider interface
78421616e deps: Update otelgrpc
bd4c281c5 build(deps): bump github.com/fsnotify/fsnotify from 1.6.0 to 1.7.0
62a824a4b build(deps): bump github.com/intel/goresctrl from 0.5.0 to 0.6.0
7fe038e4a build(deps): bump google.golang.org/protobuf from 1.31.0 to 1.32.0
81bb66942 build(deps): bump github.com/google/uuid from 1.3.1 to 1.5.0
9d328410a shim: Create pid-file with 0644 permissions
daa1ea522 Add cimfs differ and snapshotter
c19193574 fix: return gRPC code "unavailable" if server is not initialized yet
1f9151af6 build(deps): bump google.golang.org/grpc from 1.58.3 to 1.60.1
0b48b5659 build(deps): bump google-github-actions/upload-cloud-storage
97ec26a5e build(deps): bump actions/download-artifact from 3 to 4
22138541a tracing/plugin: newTracer: ignore context.Canceled errors on Close()
7c651e183 docs: fix CI badge in README
e10c82e4c build(deps): bump github.com/google/uuid from 1.3.1 to 1.5.0
25dc823bf integration: fix format string for klog.Infof
fc4b78c05 build(deps): bump github.com/intel/goresctrl from 0.3.0 to 0.5.0
1c96087ce build(deps): bump github.com/Microsoft/hcsshim
7e3c8af52 build(deps): bump github.com/prometheus/client_golang
f9303d04d build(deps): bump github/codeql-action from 2 to 3
4c1ebe33b build(deps): bump docker/setup-buildx-action from 2 to 3
51fd1d47e dependabot: enable groups
4a71a9360 build(deps): bump github.com/moby/sys/mountinfo from 0.6.2 to 0.7.1
344fe957f build(deps): bump golang.org/x/mod from 0.13.0 to 0.14.0
6726a2aeb build(deps): bump k8s.io/component-base from 0.28.2 to 0.28.4
0c98f1063 build(deps): bump github.com/klauspost/compress from 1.17.2 to 1.17.4
39ba0347e build(deps): bump go.etcd.io/bbolt from 1.3.7 to 1.3.8
db43e3d1f build(deps): bump golang.org/x/sync from 0.4.0 to 0.5.0
4660090ba build(deps): bump actions/stale from 8 to 9
ace8ab1bd build(deps): bump docker/login-action from 2 to 3
0b94716e8 build(deps): bump actions/github-script from 6 to 7
9133ad811 build(deps): bump actions/upload-artifact from 1 to 3
c1823a7c6 build(deps): bump ossf/scorecard-action from 2.0.3 to 2.3.1
36b12cbcb build(deps): bump crazy-max/ghaction-github-runtime from 2 to 3
dc5a6cfae build(deps): bump google-github-actions/auth from 0 to 2
f6a9c6966 build(deps): bump actions/setup-go from 3 to 5
e27ea7d1a build(deps): bump google-github-actions/upload-cloud-storage
3ca95282e build(deps): bump actions/checkout from 3 to 4
1398186ca WithAppendAdditionalGroups: better /etc/group handling
5a140dca5 CI: enable dependabot
c1197995b go.mod: Bump up github.com/pelletier/go-toml to v2.1.1
23278c81f *: introduce image_pull_with_sync_fs in CRI
bd5c602c4 api: introduce sync_fs to diff.ApplyRequest
6bb81ee57 Document `ns` query string added to mirror requests
98526c9d3 Exclude releases directory from links checker
f67c1632f Add ignore list for links
e740dd3d6 Add links status badge
bfa651c69 Fix broken links
c9fa5b980 Add nighly job to verify doc links
25b052cbc Move GenerateRuntimeOptions() to pkg/cri/config
cb5a48e64 *: enable ARM64 runner
596ada3ac release: add .dockerignore to fix repeated builds
cf4b57989 Remove deprecated tracing function
8203bb997 Add HTTP client update function to tracing library
ad3b806a4 fix(tracing): use latest version of semconv
22db60b6b upgrade crun version from 1.9 to 1.12
993790969 go.mod: Bump up github.com/containernetworking/plugins to v1.4.0
734219a21 update to go1.21.5, go1.20.12
212200452 update to go1.21.4, go1.20.11
ad96fded4 Don't block snapshot garbage collection on Remove failures
8bbce8d37 pkg/process: Check using idmap mount options too
96aaf5a3b Add core and internal root packages
6c6dfcbce contrib/apparmor: deny /sys/devices/virtual/powercap
106a9b776 oci/spec: deny /sys/devices/virtual/powercap
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
b7911a2a07 |
moby: update to v25.0.3
Bumping moby to version v25.0.3, which comprises the following commits:
acd023d42b c8d: Use the same logic to get the present images
ed7c26339e seccomp: add futex_wake syscall (kernel v6.7, libseccomp v2.5.5)
74e3b4fb2e seccomp: add futex_wait syscall (kernel v6.7, libseccomp v2.5.5)
4cc0416534 seccomp: add futex_requeue syscall (kernel v6.7, libseccomp v2.5.5)
f9f9e7ff9a seccomp: add map_shadow_stack syscall (kernel v6.6, libseccomp v2.5.5)
5fb4eb941d seccomp: add fchmodat2 syscall (kernel v6.6, libseccomp v2.5.5)
67e9aa6d4d seccomp: add cachestat syscall (kernel v6.5, libseccomp v2.5.5)
61b82be580 seccomp: add set_mempolicy_home_node syscall (kernel v5.17, libseccomp v2.5.4)
0227d95f99 image/cache: Use Platform from ocispec
fa9c5c55e1 image/cache: Ignore Build and Revision on Windows
1652559be4 Dockerfile: update RootlessKit to v2.0.1
147b5388dd integration/save: Add tests checking OCI archive output
ba4a2dab16 plugins: fix panic installing from repo w/ digest
51133117fb tests: add plugin install test w/ digest
269a0d8feb Dockerfile: update docker compose to v2.24.5
876b1d1dcd Dockerfile: update dev-shell version of the cli to v25.0.2
0bcd64689b Dockerfile: update docker compose to v2.24.3
8d454710cd Dockerfile: update dev-shell version of the cli to v25.0.1
c12bbf549b libcontainerd/supervisor: fix data race
9150d0115e d/logger/journald: quit waiting when logger closes
9af7c8ec0a d/logger/journald: sync logger on close in tests
3344c502da d/logger/loggertest: improve TestConcurrent
6c9fafdda7 d/logger/journald: log journal-remote cmd output
f8a8cdaf9e d/logger/journald: fix data race in test harness
7a659049b8 libnet: bridge: ignore EINVAL when configuring bridge MTU
0ccf1c2a93 api/t/network: ValidateIPAM: ignore v6 subnet when IPv6 is disabled
28c1a8bc2b Revert "daemon: automatically set network EnableIPv6 if needed"
bbe6f09afc No inspect 'Config.MacAddress' unless configured.
5b13a38144 Only restore a configured MAC addr on restart.
990e95dcf0 Add internal n/w bridge to firewalld docker zone
c48b67160d api: Document `version` in `/build`
225e043196 c8d/save: Handle digested reference same as ID
78174d2e74 image/save: Fix untagged images not present in index.json
85f4e6151a Assert temp output directory is not an empty string
dd4de8f388 docs: remove dead links from api verison history
f5ef4e76b3 ci: update to docker/bake-action@v4
6c5e5271c1 ci: update to codecov/codecov-action@v4
693fca6199 ci: update to actions/download-artifact@v4 and actions/upload-artifact@v4
49487e996a ci: update to actions/cache@v3
0358f31dc2 gha: update to crazy-max/ghaction-github-runtime@v3
081cffb3fa gha: update to docker/login-action@v3
9de19554c7 gha: update to docker/setup-qemu-action@v3
2a80b8a7b2 gha: update to docker/bake-action@v4
61ffecfa3b gha: update to docker/setup-buildx-action@v3
02cd8dec03 gha: update to docker/metadata-action@v5
1d7df5ecc0 gha: update to actions/setup-go@v5
4e68a265ed gha: update to actions/github-script@v7
e437f890ba gha: update to actions/checkout@v4
fd6a419ad5 update containerd binary to v1.7.13
13ce91825f vendor: github.com/moby/buildkit v0.12.5
4b63c47c1e vendor: github.com/opencontainers/runc v1.1.12
4edb71bb83 update runc binary to v1.1.12
1b47bfac02 hack/make.ps1: Fix go list pattern
f2d0d87c46 logger/journald: drop errDrainDone sentinel
6ac38cdbeb logger/journald: wait no longer than the deadline
d7bf237e29 logger/journald: use deadline for drain timeout
f41b342cbe l/journald: make tests compatible with systemd 255
f413ba6fdb daemon/logger/loggertest: expand log-follow tests
c2ef38f790 vendor swarmkit v2.0.0-20240125134710-dcda100a8261
d5eebf9e19 builder/windows: Don't set ArgsEscaped for RUN cache probe
f3f5327b48 image/cache: Check image platform
05a370f52f image/cache: Restrict cache candidates to locally built images
be7b60ef05 daemon/imageStore: Mark images built locally
6d05b9b65b image/cache: Compare all config fields
c01bbbddeb pkg/ioutils: Make subsequent Close attempts noop
32635850ed add more //go:build directives to prevent downgrading to go1.16 language
2cf1c762f8 De-flake TestSwarmClusterRotateUnlockKey... again... maybe?
5295e88ceb daemon: rename: don't reload endpoint from datastore
3de920a0b1 volume/local: Fix cifs url containing spaces
a445aa95e5 volume/local: Add tests for parsing nfs/cifs mounts
cb77e48229 volume/local: Break early if `addr` was specified
e8801fbe26 daemon: only add short cid to aliases for custom networks
b8cc2e8c66 fix "host-gateway-ip" label not set for builder workers
fcccfeb811 c8d/snapshot: Create any platform if not specified
f8eaa14a18 pkg/platforms: internalize in daemon/containerd
ac76925ff2 volume/local: Make host resolution backwards compatible
ff15b49b47 Dockerfile: update docker compose to v2.24.2
c0573b133f pkg/system: return even richer xattr errors
7c185a1e40 daemon: return an InvalidParameter error when ep settings are wrong
2b036fb1da Remove generated MAC addresses on restart.
1f24da70d8 docs/api: remove version matrices from swagger files
358fecb566 docs: remove documentation for deprecated API versions < v1.23
f030b25770 Dockerfile: update docker compose to v2.24.1
e07aed0f77 Dockerfile: update dev-shell version of the cli to v25.0.0
cdf3611cff integration-cli: TestInspectAPIMultipleNetworks: use current version
05267e9e8c integration-cli: TestInspectAPIBridgeNetworkSettings121: use current version
e5edf62bca integration-cli: TestPutContainerArchiveErrSymlinkInVolumeToReadOnlyRootfs: use current API
e0acf1cd70 daemon/cluster/executer: Add missing `StartInterval`
1e335cfa74 image/save: Fix layers order in OCI manifest
4d287e9267 image/save: Change layers type to DiffID
0240f5675b Fix isGitURL regular expression
13964248f1 libnetwork: loosen container IPAM validation
05695c2458 c8d/integation: Adjust error in TestPullLinuxImageFailsOnWindows
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
2118aace8f |
crun: update to v1.14
Bumping crun to version 1.14-19-g9d01392, which comprises the following commits:
3df8f0c Add force_no_cgroup & no_pivot arguments to make_context() Python function
b883e6c Make function arguments valid Python identifiers
e0027bc Add no_new_keyring argument to make_context() Python function
cb3ffb5 apparmor: Fix wrong determination whether crun is confined
adb912d linux: harden chdir()
f157e80 container: attempt to close all the files before execv(2)
ed1abf9 container: simplify statement
3aaadf3 ebpf: add fallback when bpf(2) fails with ENOSPC
f2ade60 ebpf: add fallback when bpf(2) fails
8b611f2 ebpf: try harder to bump RLIMIT_MEMLOCK
d88d77e build(deps): bump uraimo/run-on-arch-action from 2.6.0 to 2.7.1
f70fe0b cgroup, systemd: fix segfault if resources not specified
667e6eb NEWS: tag version 1.14
688f186 build(deps): bump actions/cache from 3 to 4
8d96f08 build: drop gcrypt dependency
5221ca8 seccomp: use blake3 instead of libgcrypt
6d9fa42 cpuset: don't clobber parent cgroup value
3873541 build: embed blake3 hashing function
4f1f3d4 seccomp: include default_errno_ret in cache digest
beb9565 utils: remove unneeded if statement
9306457 ebpf: do not require MEMLOCK for eBPF programs
87740ce linux: force umask(0)
5078ce6 apparmor: stack apparmor profiles if nnp and confined
c761349 NEWS: tag 1.13
cb53ac2 build(deps): bump actions/upload-artifact from 3 to 4
94a5950 cgroup: use "max" when pids limit < 0
3b819bc Improve error msg on idmap mounts
bace3a2 build(deps): bump github/codeql-action from 2 to 3
4ddf5e6 criu: remove unneeded if statement
8c27dea error: reset pointer after vasprintf failure
c5643c4 status: fix double free
ece4f9e utils: return a valid error if access fails
68a9487 list: initialize variable
ea27b13 libcrun: fix compile error without libseccomp and libcap
487ba3a fix checking of relative idmapped mount
49f439d ctx: drop no_subreaper bool
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
a6cf2e0e7d |
cri-o: update to 1.30
Bumping cri-o to version v1.29.0-44-g5aff11c7c, which comprises the following commits:
1b9754486 fix missing line ending on crio.8.md
3cbaa5294 fix grep for whitespace
8dea35388 add metrics_host to config
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
5d211f85b4 |
skopeo: update to 1.14.1
Bumping skopeo to version v1.14.1-4-g695538a3, which comprises the following commits:
4baf4fe9 fix(deps): update module github.com/opencontainers/image-spec to v1.1.0-rc6
e32dfefb Bump to v1.15.0-dev
45b7bf5e Bump to v1.14.1
b7ec87a1 fix(deps): update module github.com/containers/common to v0.57.2
92edbcb7 fix(deps): update module github.com/containers/image/v5 to v5.29.1
5684cd12 chore(deps): update dependency containers/automation_images to v20240102
c7053312 Fix libsubid detection
e51dbbd8 fix(deps): update module golang.org/x/term to v0.16.0
852cca63 fix(deps): update golang.org/x/exp digest to 02704c9
d1cb2e2c chore(deps): update dependency containers/automation_images to v20231208
fe83b6fe [skip-ci] Update actions/stale action to v9
f346045d fix(deps): update module github.com/containers/common to v0.57.1
48d11dac fix(deps): update golang.org/x/exp digest to 6522937
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
82b00eb592 |
moby: update to v25.0.0
Bumping moby to version v25.0.0, which comprises the following commits:
05695c2458 c8d/integation: Adjust error in TestPullLinuxImageFailsOnWindows
ae6468b4b9 c8d/mount: Use ref-counted mounter by default
bd481592ff ci: Always run snapshotter tests on Linux
ed15f1d717 net=host: remove /var/run/docker/netns/default from OCI config
568c064795 docker-py: unskip some tests
e8f4bfb374 Root.Path for a process-isolated WCOW container must be the Volume GUID
ec041193f9 Windows doesn't have 'host' mode networking, so use 'auto'.
66325f7271 Implement GetLayerFolders for the containerd image store
0dc07ccc3a Unmount RWLayer during Commit
a1f6b64e24 Don't call setupInit in a temp mount if setupInit is nil
efadb70ef8 The Windows snapshotter and graphdriver have different names
641050c93f Typo fixes
508a2d979a Revert "temporary: Disable deprecate-integration-cli validation"
f7065ab207 Add testutil.TempDir function
84d2229ffe dockerd-rootless-setuptool.sh: add `nsenter` subcommand
7d08d84b03 dockerd-rootless.sh: set `rootlesskit --state-dir=DIR`
ae9fbcb82c testutil/daemon: shorten XDG_RUNTIME_DIR
bdc7d0c2db temporary: Disable deprecate-integration-cli validation
8390bc5683 c8d/cache: Use ContainerConfig from content store
f760cb4f97 c8d/builder: Store ContainerConfig
a5a15c7782 c8d/cache: Optimize `FROM scratch` case
71ebfc7c63 c8d: make the cache in classic builder work
24da5233dd integration: Fix Parallel before setupTest
d22c775e04 cdi: use separate feature-flag
fa4deb02af environment: Error when t.Parallel was called before Protect
97d32bb7d7 daemon: stop checkpointing health probes to disk
a6d9462cb1 (*Daemon).fillRootlessVersion: fix nil panic
e954cdc188 dockerd-rootless.sh: fix inconsistent description about "builtin" driver
9de132dbf6 integration/image: Move Parallel after setupTest
f0efb90f21 c8d/integration-cli: Skip tests checking `ContainerConfig`
2a02403a94 c8d/exporter: Use WithSkipMissing
9f50e06993 image/save: Refactor saveLayer
b5a5ecf4a3 dockerd-rootless.sh: add comments about pasta
f5d05b43d7 Dockerfile: update RootlessKit to v2.0.0
ba86626642 vendor.mod: github.com/rootless-containers/rootlesskit/v2 v2.0.0
312450d079 integration: test container healthcheck is reset
c58acf06c2 image/save: Derive Descriptor from actual tar archive
c4d2968183 vendor: github.com/moby/sys/mountinfo v0.7.1
075e1141b8 vendor: golang.org/x/sys v0.16.0
a759acd958 vendor: github.com/google/uuid v1.5.0
3bcb01a84f vendor: github.com/google/go-cmp v0.6.0
36dd2f029f doc: Correct typo in doc comments for volume/mounts/mounts/MountPoint
92175dd78c vendor: containerd v1.7.12, and switch to dario.cat/mergo v1.0.0
cd1709b0d4 update containerd binary to v1.7.12
2c45df2ab4 image/save: Fix missing layers in manifest
0790864064 Dockerfile: update buildx to v0.12.1
a9d0128bd7 Dockerfile: update docker compose to v2.24.0
28f48ce1ac c8d/commit-builder: Extract common code
659d7b190f libcontainerd: create unstarted tasks
d7141cfd06 update to go1.21.6
0e62dbadcd daemon: reinit health monitor on live-restore
71c9aec834 Add Rob Murray (robmry) to curators
e8e20c0897 daemon/config: setPlatformDefaults: use debug for missing userland-proxy
18a0e144c2 c8d/getImageLabelByDigest: Fix misspelled `labels` check
e27ffdab0f Dockerfile: update rootlesskit to v1.1.1, and use tags as reference
782fe1fe82 layer: ChecksumForGraphID: remove unused code for for migrating v1 layers
1dd415df1a vendor: github.com/vbatts/tar-split v0.11.5
372cd16b88 vendor: otelhttptrace v0.45.0 to align with other OTEL packages
22597efa06 vendor: github.com/docker/go-connections v0.5.0
1f9098e7d0 builder: remove redundant ExecBackend.ContainerKill()
0aa96c5512 builder/dockerfile: containerManager.RemoveAll() prevent partial cleanup
03a8188a9a builder/dockerfile: remove containerManager.removeContainer()
a38b5d7430 daemon: Daemon.ContainerRename: move vars closer to where they're used
00a863b25e daemon: Daemon.connectToNetwork: rename named return to prevent shadowing
0f337e9c14 feat: make errdefs.IsXXX helper functions work with wrapped errors
dd41f86339 hack/make: Refactor VERSION normalization
2af17cd3f5 vendor: github.com/containerd/cgroups/v3 v3.0.3
9a5393d500 hack/make: Strip "v" tag prefix name from VERSION
12128189eb vendor: github.com/cilium/ebpf v0.11.0
07d2ad30e5 daemon/cluster: Cluster.imageWithDigestString: include mirrors to resolve digest
8aacbb3ba9 api: fix "GET /distribution" endpoint ignoring mirrors
b9e27acabc libnet/d/bridge: dead code: no conflict on stale default nw
0a26cdf344 libnet/d/bridge: remove dead ActiveEndpointsError
6d2c4f87af daemon: work around go1.21 compiler bug
69c23cc0c9 docs/api: add documentation for API v1.44
ce574949f7 api: Deprecate outdated fields in NetworkSettingsBase
d5a3fccb06 update golangci-lint to v1.55.2
9b184e1268 daemon: remove dead code relying on SecondaryIPAddress
7b0f8122b2 update AUTHORS
fc8fcf85a2 vendor: github.com/opencontainers/runc v1.1.11
5fa4cfcabf update runc binary to v1.1.11
b8f2caa80a pkg/containerfs: deprecate ResolveScopedPath
90f37f48e2 pkg/containerfs: unify CleanScopedPath implementation
6fae583dba pkg/aaparser: remove, and integrate into profiles/apparmor
53d405c37f pkg/aaparser: remove deprecated GetVersion utility
f714730c40 libnetwork/portallocator: PortAllocator.ReleasePort: remove unused err-return
4f9db655ed portmapper: move userland-proxy lookup to daemon config
214ab2caef libnetwork/portmapper: PortMapper.MapRange: inline "cleanup" closure
6ae6dcfc53 libnetwork/portmapper: PortMapper.MapRange: fix defer
8712c6df22 libnetwork/portmapper: PortMapper.MapRange: rename err-return
341e7b35a6 Updated manifest v2 URLs in image spec README
882b79b254 Dockerfile: update crun to 1.12
dc23efd3a2 vendor: github.com/klauspost/compress v1.17.4
f74ca4ed36 Update commit id unmap to directly use active mounts
0252a6f475 ci(bin-image): fix merge job run condition
1ea1d561c7 ci: do not run ci workflow on push tag events
141cb65e51 Check, then assume an IPv6 bridge has a subnet.
437bc829bf Don't try to validate incomplete network config.
52d9b0cb56 Remove unused error types.
f9135cdeb5 libnet: Improve the debug log written when the extKeyListener is stopped
13915f6521 libnet: document what Network.networkType represents
6a2542dacf libnet: remove Endpoint.anonymous
cf5a3bc531 c8d: Fix image commit with userns mapping
5eaf898fcb libnetwork: write ServFail if DNS reply msg is bad
1da85f7bdc libnetwork: assert DNS replies are well-formed
f6a160d34e c8d/docker-py: Temporarily skip test_commit_*
cf1ea9237c Add dangling image reference on delete when last image has children
9603adb5b4 c8d/docker-py: Temporarily skip test_save_and_load*
7a9b680a9c libnet: remove Endpoint.myAliases
523b907359 daemon: no more IsAnonymousEndpoint
8b7af1d0fc libnet: update dnsNames on ContainerRename
3bb13c7eb4 libnet: Use Endpoint.dnsNames to create DNS records
f5cc497eac libnet: populate Endpoint.dnsNames on UnmarshalJSON
ab8968437b daemon: build the list of endpoint's DNS names
0c6e9121b2 Add support for removing repo and digest
c22fc41ddf vendor: golang.org/x/crypto v0.17.0
87c87bccb5 Update cleanup logic to use resolve all images
529d19bad8 Add resolve all images and unit test
eb9ce779f6 Update OTEL in client hijack to use transport
c84e889a69 Remove httputil lint exceptions
35a51fd697 Update authz plugin test to not use httputil
bb4e9c72d7 Replace use of httputil in client hijack
dc1e73cbbf libnet: add a new dnsNames property to Endpoint
1eb0751803 daemon: endpoints on default nw aren't anonymous
27f3abd893 Allow overlapping change in bridge's IPv6 network.
18b1aec0ee c8d/inspect: Fill `Parent` property
e48b58e1be vendor: golang.org/x/crypto v0.16.0
44511f9e43 vendor: golang.org/x/text v0.14.0
2cdd4906ac vendor: golang.org/x/sys v0.15.0
d6a656cf7f libnet: Remove unused cmd/readme_test
aa5d1a8897 typo fixes
2cf230951f add //go:build directives to prevent downgrading to go1.16 language
9e6d012e9c docker info: expose runtime features ("rro" mount mode, etc.)
1602e2f4f1 api: Deprecate `Container` and `ContainerConfig` for `/images/{id}/json`
d91bf690ef ci(bin-image): fix conditional run for skipped job
61d5e5ca9a ci(test): do not run on push tag events
f8275cb303 c8d/docker-py: Skip test_build_squash
279e6658ac Add devcontainer configuration
d11a772080 c8d/tag: Remove duplicate label copy
3b1d9f1a26 add validation and migration for deprecated logentries driver
3a14b1235c docs/api: remove logentries
30f739db44 api/swagger: remove logentries
cd41f655f9 logger: remove logentries driver
dbdfc71026 vendor: resenje.org/singleflight v0.4.1
4d2a324fce update to go.opentelemetry.io/otel/semconv/v1.21.0, remove "httpconv" uses
7d991b6e42 vendor: github.com/moby/buildkit v0.12.5-0.20231208203051-3b6880d2a00f
fcf03cdfa9 vendor: github.com/containerd/containerd v1.7.11
7028a03ffa vendor: github.com/containerd/containerd v1.7.10
49ad10261e vendor: github.com/containerd/containerd v1.7.9
c14bd4f1ad vendor: vendor: upgrade OpenTelemetry to v1.19.0 / v0.45.0
291eaf0a77 vendor: github.com/cyphar/filepath-securejoin v0.2.4
b524ed2dda testing: update docker-py to 7.0.0
33d2ec08ba update containerd binary to 1.7.11
c51a262e34 update containerd binary to 1.7.10
12c70b4386 vendor: github.com/grpc-ecosystem/grpc-gateway/v2 v2.16.0
a0615f6839 vendor: github.com/felixge/httpsnoop v1.0.4
afe281964d daemon/logger/local: always use UTC for timestamps
bea729c030 c8d/prune: Familiarize image names that were untagged
8ba8a59697 c8d/prune: Default `dangling` filter to true
eaaf1ea96d integration/prune: Run in a separate daemon
90dfb1c8ad c8d/integration-cli: Adjust TestBuildClearCmd
0f9f9a132e Move 'netip' utils from 'ipam' to 'internal'.
1931a1bdc7 libnetwork/diagnostic: lock mutex in help handler
424ae36046 libnetwork/diagnostic: use standard http.Handler
bc94dfc7d2 hack: Load special images on demand
7cb1efebec api/types: move NetworkListConfig to api/types/backend
a58b0a3d9c api/types: move Plugin-types to api/types/backend
862caf826c update to go1.21.5
0bf6ffba43 update to go1.21.4
08e4e88482 daemon: raise default minimum API version to v1.24
484e6b784c api/types: move ContainerCreateConfig, ContainerRmConfig to api/types/backend
c786c3a974 Dockerfile: update criu stage to Debian 12 (Bookworm)
d5eba1bfe5 integration/build: Use setupTest
713c7d49a1 integration(-cli): remove skips for old daemon versions (<20.10)
7f68e3107e integration-cli: TestAPIClientVersionOldNotSupported: use daemon API version
97549d923c integration/container: TestInfoAPIVersioned: adjust API version
410feab962 integration/container: TestKillDifferentUserContainer: adjust API version
757a004a90 libnetwork/diagnostic: drop Init method
f270057e0c libnetwork/diagnostic: un-embed sync.Mutex field
aa2fa2caa3 un-containerize TestDaemonNoSpaceLeftOnDeviceError
49f3e7d233 Dockerfile: remove APT_MIRROR build-arg
baca6cb417 Don't allow port in CIFS URL
c8134fa046 vendor: github.com/moby/buildkit v0.12.4
a189832454 add TaskStatus to swagger docs
faa843fcef vendor: github.com/gorilla/mux v1.8.1
028ed1bb22 vendor: github.com/spf13/cobra v1.8.0
e18f5a5304 container: internalize InitAttachContext
fcb89da9c2 c8d/integration-cli: Skip TestListDanglingImagesWithDigests
61d94850a7 cmd/dockerd: make cobra templates a const
0f163170a7 cmd/dockerd: remove various cobra templating
3bfb6a9420 frozen images: update to debian:bookworm-slim
fd40dfaf58 Dockerfile: remove uses of DEBIAN_FRONTEND
e72c4818c4 Dockerfile: update to Debian "bookworm" (current stable)
8ae94cafa5 cifs volume resolves hostname correctly.
3a0af5ad30 integration/TestLiveRestore: Wait for process to exit
61d8f57f2a daemon: kill: use log level to "warn" if container doesn't exit in time
e262cd38ad c8d/integration-cli: Adjust DockerRegistryAuthTokenSuite
49d088d9ce builder-next: fix timing filter for default policy
c3eed9fa3e integration-cli: fix TestDaemonICC tests for newer iptables versions
c5ea3d595c liverestore: Don't remove `--rm` containers on restart
9b399814e7 integration-cli/TestCrossRepositoryLayerPush: Change repo name
9709b7e458 quota: increase sparse test-image to 300MB
65cfcc28ab hack/dind: update comments around AppArmor
cfb8ca520a hack/dind-systemd: make AppArmor work with systemd enabled
203bac0ec4 daemon/c8d: Unmount container fs after unclean shutdown
964ab7158c Explicitly set MTU on bridge devices.
05523e289b c8d/integration: Adjust TestSaveCheckTimes
b1676a289c daemon: ContainerRename: move log args to log fields
d2865f1e8a daemon: win: set DNS config on all adapters
0fd0e8255f daemon: build ports-related ep options in a dedicated func
7786f8512b Revert "testing: temporarily pin docker-py tests to use "bullseye""
4394c61e6c testing: update docker-py to 7.0.0b1
f877360dc1 api/t/swarm: Fix deprecation for ServiceSpec.Networks
681c94ca17 Dockerfile: update buildx to v0.12.0
68e73ceb67 update containerd binary to v1.7.9
2f28582b55 vendor: github.com/Microsoft/hcsshim v0.11.4
f4776ef9df ci(bin-image): skip dco on push tag events
8641d2da3b client: update example in readme
0ab7267ae3 Fix support for pull by digest
ba46bda149 update authors and mailmap
a3fdad84ad graphdriver/copy: faster copy of hard links
fb53da508f vendor: github.com/opencontainers/runc v1.1.10
15bcc707e6 update runc binary to v1.1.10
84036d3e18 daemon/config: change DNSConfig.DNS to a []net.IP
1eadfb0e28 opts: ValidateIPAddress: improve error, godoc, and tests
981a878cf5 vendor: github.com/docker/go-connections fa09c952e3ea (v0.5.0-dev)
677d41aa3b Plumb context through info endpoint
f0b89e63b9 Fix missing import for "scope" package
33564a0c03 libnetwork/d/overlay: support IPv6 transport
e1d85da306 libnetwork/d/overlay: parse discovery data eagerly
d47b3ef4c9 libnet: early return from updateSvcRecord if no addr available
f5a611a74c daemon: ContainerRename: use named error-return
8074e7a437 Bump go-connections for TLS 1.3 support
d06af368ad c8d: "unremap" the user namespace on commit
a7acfffea6 test: Add a test for userns remapped daemon commit
876d4e5484 c8d: cleanup imports in the image builder file
7995e3288f Add until filter to docker image ls Signed-off-by: Rachit Sharma <rachitsharma613@gmail.com>
58785c2932 integration/networking: fix TestBridgeICC
6979503a85 Include port in URL for locally built Swagger docs
755f008c1e Default the auth config domain to the target image domain
7d9d601e6d project: document supported containerd versions
29ac09ee9d Revert "libcontainerd: work around exec start bug in c8d"
c1a289e05a docs/api: update redirect metadata for hugo
49e04102c1 Update container-device-interface to v0.6.2
26f63600c1 daemon/snapshotter: Align mounter implementations
d5d41c2849 daemon/config: Put params for the default network into a dedicated struct
587ad8845a integration/system: update TestInfoAPI to not use string-matching
c1ab6eda4b integration/networking: Test bridge ICC and INC
409ea700c7 integration: Add a new networking integration test suite
02a932d63f Fix case where health start interval is 0 uses default
891241e7e7 seccomp: block io_uring_* syscalls in default profile
3c2b06099d Skip TestPullManifestList when using containerd
6ca1b9e4ce Skip the busybox digest check when containerd is enabled
123ade3763 builder/dockerfile: errmsg: quote build target
7257c77e19 libnetwork/ipam: refactor prefix-overlap checks
4e8ba395f2 integration: TestSaveRepoWithMultipleImages: minor cleanup
0dae0f2b5e integration: TestSaveRepoWithMultipleImages remove redundant remove
30cd8b8fca integration: make TestSaveRepoWithMultipleImages less flaky
1c50526092 daemon: improve daemon start informational log message
a99bb24ea8 builder-next: make sure worker platforms normalized for containerd
29977d5058 contrib/check-config: conditionally disable color output.
d60de4cafd Move the golangci-lint configuration file to the root dir
cd95cd0671 c8d/push: Return error when repository has no tags
df34db1158 c8d/pull: Don't wrap `no basic auth` error
5a83bebf76 ci: Setup otel tracing for windows integration tests
29ddf2214d docs(API): Add reason to network connect 403
63a9d72ee8 pkg/tarsum: handle xattrs like archive/tar does
4356962c69 update containerd binary to v1.7.8
38c4ceb00a vendor: github.com/containerd/containerd v1.7.8
34f5793521 vendor: google.golang.org/grpc v1.58.3
bd23c7729e vendor: golang.org/x/tools v0.10.0
205e4de3fd vendor: golang.org/x/mod v0.11.0
153d7e4038 exec/tests: add test for `--group-add` with `--user`
27e064e7e9 c8d/history: Fix nil dereference
808120e5b8 New `host_ipv6` bridge option to SNAT IPv6 connections
9d578a2e6d Cleanup duplicate imports
59c5f6e35b integration-cli: mark dockerCmdWithFail as an helper function
61c78d9438 daemon: Validate MacAddress on container create
ee9f0ed895 api: Deprecate ContainerConfig.MacAddress
052562ffd5 api: Add a field MacAddress to EndpointSettings
98323ac114 integration/container: target v1.43 in a soon-to-break test
4f0cab3b74 api: ContainerCreate: re-organize BC conditions
79589354df api: ContainerCreate: remove repetitive nil checks
44a25f31a8 api: ContainerCreate: lowercase ErrEmptyConfig
91eee33f62 api: ContainerCreate: return an error when config is nil
417018659b daemon: remove redundant withResetAdditionalGIDs option
8f756fe679 c8d: show the real image creation date when listing images
a73dfe68d3 api: ContainerCreate: init hostConfig and networkingConfig when nil
7e0cb4c46f c8d: Use the labels to get the children of an image
f5535d516f c8d: Preserve image labels when tagging
70158284b7 api: fix a nil check on the wrong var
d7266afc7e c8d/exec: Add additional groups on exec
df3a321164 migrate to github.com/moby/sys/user
aeb8972281 daemon: daemon.containerRestart: don't cancel restart on context cancel
52da88201c hack/validate: stop suppressing Xattrs deprecation
c44c9dfa79 pkg/tarsum: migrate to (tar.Header).PAXRecords
3cf409aa9e pkg/archive: migrate to (tar.Header).PAXRecords
6a8a792019 pkg/archive: test tar headers are interoperable
f2c67ea82f vendor: github.com/klauspost/compress v1.17.2
a7b44ea10f Dockerfile: update github.com/tc-hib/go-winres v0.3.1
0cf113e250 Add unit tests for outgoing NAT rules
619d98ab49 vendor: github.com/moby/buildkit v0.12.3
aad51c0b4e daemon: daemon.shutdownContainer: use context.WithoutCancel
dca89c67ef daemon: daemon.containerStop: use context.WithoutCancel
8166818791 c8d: Return the "tag does not exist error"
4af420f978 libnetwork/internal/kvstore: prune unused method
4039b9c9c4 libnetwork/datastore: drop (KVObject).DataScope()
4f4a897dda libnetwork/datastore: drop (*Store).Scope() method
4b40d82233 libnetwork/datastore: un-embed mutex from cache
9536fabaa8 libnetwork/datastore: minor code cleanup
43dccc6c1a libnetwork/datastore: unconditionally use ds.cache
5a72ed3406 integration-cli: remove deprecated dockerCmd and waitRun utilities
06115bf82c integration-cli: DockerCLIPruneSuite: replace dockerCmd
285ab8c861 integration-cli: DockerCLIPluginsSuite: replace dockerCmd
e28da7686e integration-cli: DockerCLIPluginLogDriverSuite: replace dockerCmd
a837cb444c integration-cli: DockerExternalVolumeSuite: replace dockerCmd
5f884478e5 integration-cli: DockerCLIImportSuite: replace dockerCmd
885eceba1d integration-cli: DockerCLITopSuite: replace dockerCmd
6ce6b63482 integration-cli: DockerCLIHistorySuite: replace dockerCmd
268e72f10f integration-cli: DockerCLIRestartSuite: replace dockerCmd and waitRun
c388416aac integration-cli: DockerCLICreateSuite: replace dockerCmd and waitRun
5c297fcc09 integration-cli: DockerCLIStatsSuite: replace dockerCmd and waitRun
7d2a6f2030 integration-cli: DockerCLICommitSuite: replace dockerCmd
a4522b6a8f integration-cli: DockerCLIStartSuite: replace dockerCmd
f7ddfdbae6 integration-cli: DockerCLIUpdateSuite: replace dockerCmd and waitRun
d1108b8a06 integration-cli: DockerDaemonSuite: replace dockerCmd
9c161cc65a integration-cli: DockerCLIVolumeSuite: replace dockerCmd
f482857959 integration-cli: DockerCLIImagesSuite: replace dockerCmd
f1102e98bb integration-cli: DockerCLIPortSuite: replace dockerCmd and waitRun
ba4d491562 integration-cli: DockerCLIRmiSuite: replace dockerCmd
5b3086db1f libnetwork/datastore: prevent accidental recursion
16e4bc9827 integration-cli: DockerCLISearchSuite: replace dockerCmd
89d7b77022 integration-cli: DockerRegistrySuite: replace dockerCmd
c867ac4527 integration-cli: DockerCLICpSuite: replace dockerCmd
980a5bc72a integration-cli: DockerCLIBuildSuite: replace dockerCmd
4292f42308 integration-cli: DockerCLISaveLoadSuite: replace dockerCmd
50062b413c integration-cli: DockerCLIRunSuite: replace dockerCmd and waitRun
d63cab5193 integration-cli: DockerCLILogsSuite: replace dockerCmd and waitRun
8e2e1f3d28 integration-cli: DockerRegistryAuthHtpasswdSuite: replace dockerCmd
d3f4580519 integration-cli: DockerCLILinksSuite: replace dockerCmd and waitRun
58c5986f8b integration-cli: DockerCLIHealthSuite: replace dockerCmd and waitRun
707bb9b9ed integration-cli: DockerBenchmarkSuite: replace dockerCmd and waitRun
eafb618594 integration-cli: findContainerIP: replace dockerCmd
ba32bebd05 integration-cli: DockerCLIInfoSuite: replace dockerCmd and waitRun
4562f07887 integration-cli: DockerCLIExecSuite: replace dockerCmd and waitRun
8c661b5e9a integration-cli: DockerCLIEventSuite: replace dockerCmd and waitRun
cf95278122 integration-cli: DockerCLIAttachSuite: replace dockerCmd and waitRun
1baec48367 integration-cli: DockerAPISuite: replace dockerCmd and waitRun
908821d48a integration-cli: dockerCmdWithFail: remove unused return
02fd8485fa integration-cli: DockerCLINetmodeSuite: replace dockerCmd and waitRun
dbb2bd727d integration-cli: DockerNetworkSuite: replace dockerCmd and waitRun
5cc978c6a0 integration-cli: DockerCLIInspectSuite: replace dockerCmd and waitRun
86fb048e59 integration-cli: DockerCLIPsSuite: replace dockerCmd and waitRun
b4ff5234bd integration-cli: remove transformCmd utility
cdb44010c9 c8d/history: Fill ID for parents without the label
d28bd54f2a c8d/history: Fix Tags assigned from parents
e97716a95a Fix disk usage test
cf9073397c Update check-config.sh
7bb54c3dc5 vendor: gotest.tools/v3 v3.5.1
bcca214e36 libnetwork: open-code updating svc records
33cf73f699 libnetwork: drop (*Controller).nmap
804ef16822 libnetwork: only delete svc db entry on network rm
c85398b020 libnetwork: drop vestigial endpoint-rename logic
29da565133 libnetwork: change netWatch map to a set
0456c0db87 libnetwork: refactor isDistributedControl()
749d4abd41 libnetwork: get rid of watchLoop goroutine
f05dce8d3a replace some strings with OCI consts
e3feb05175 vendor: github.com/opencontainers/image-spec v1.1.0-rc5
0d27579fc7 Ensure that non-JSON-parsing errors are returned to the caller
26730c891a vendor: google.golang.org/grpc v1.56.3
6f625ae65a c8d integration: skip TestImportWithCustomPlatform
9357bcb582 c8d/pull: Return same access denied error as graphdrivers
488559a330 c8d/push: Set distribution source recursively
d9b5445f39 c8d/pull: Handle pull all tags
095d2a29a3 distribution: Add Tags
9664f33e0d daemon: release sandbox even when NetworkDisabled
2df698025c HealthCheck: add validation for minimum accepted start-interval
25fb4dd50d switch to go.opentelemetry.io/otel/semconv/v1.17.0
96f85def5b s/HostIP/HostIPv4/ for `com.docker.network.host_ipv4` setting
2a14b6cf60 Use `iptRule` to simplify `setIcc` (code health)
d7c6fd2f80 Move `programChainRule` logic to `iptRule` methods (code health)
e260808a57 Move duplicate logic to `iptRule.Exists` method (code health)
14d2535f13 Move `iptables.IPVersion` into `iptRule` struct (code health)
4e219ebafb Eliminate unnecessary `iptRule.preArgs` field (code health)
4662e9889c Simplify `setupIPTablesInternal` parameters (code health)
919fe72f60 vendor: github.com/moby/buildkit v0.12.3-dev
40fde69be9 Revert "Return no basic auth creds error when needed"
e1bacd18a3 ci: continue-on-error on non-PR with snapshotter enabled
70892220c8 ci: use matrix to test containerd backed image store
03decbc1e6 ci: split tests in a reusable workflow
bb7408e851 c8d/changes: Fix concurrents diffs
e3d8e979de integration-cli/TestSaveAndLoadWithProgressBar: Skip with c8d
f51c5e1a5c c8d/save: Don't save name if exported by digest
b5f5987959 c8d/load: Fix `Loaded image` message
42af8795a3 c8d/save: Implement exporting all tags
f20abbc96c libnetwork: use conntrack and --ctstate for all rules
c279c48a0e Skip TestPullAllTagsFromCentralRegistry
8777592397 Return no basic auth creds error when needed
ebef4efb88 api/types: move ContainerLogsOptions to api/types/container
9670d9364d api/types: move ContainerListOptions to api/types/container
7bce33eb0f api/types: move ContainerStartOptions to api/types/container
0f77875220 api/types: move ContainerRemoveOptions to api/types/container
9498d897ab api/types: move ContainerCommitOptions to api/types/container
30f09b4a1a api/types: move ContainerAttachOptions to api/types/container
95b92b1f97 api/types: move ResizeOptions to api/types/container
ec69501e94 api/types: move ServiceCreateResponse, and generate from swagger
5b3e6555a3 api/types: move ServiceUpdateResponse
48cacbca24 api/types: move image-types to api/types/image
44dbbeb196 c8d/progress: Remove unused mountable
bcbbd9538f c8d/progress: Show Mounted/Exists status
bb8bc1ffc8 update to go1.21.3
3bc45d78c9 update to go1.21.2
1800dd0876 vendor: golang.org/x/net v0.17.0
1946aead21 vendor: golang.org/x/crypto v0.14.0
0679ae984b vendor: golang.org/x/text v0.13.0
bc33c27796 vendor: golang.org/x/sys v0.13.0
db806533e6 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230911190601-f082dd7a0cee
b81b27c21f vendor: github.com/go-logr/logr v1.2.4
cff4f20c44 migrate to github.com/containerd/log v0.1.0
e1d0aacb6a vendor: github.com/docker/distribution v2.8.3
0cd02ab1b4 integration/c8d: Skip TestBuildSquashParent
aca9ea42bd vendor: github.com/moby/buildkit 0.12.3-dev
d871a665de daemon/RegistryHosts: Don't lose mirrors
a293cd6ab9 vendor: github.com/containerd/containerd v1.7.7
f3aa9e151d c8d: Simplify error handling and distribution source label
5f062032f7 TestPullNonExistingImage: Move to integration
53345fe357 TestPullNonExistingImage: Use subtests
2edb858b18 vendor: golang.org/x/net v0.13.0, golang.org/x/crypto v0.11.0
87de23a6cd vendor: golang.org/x/text v0.11.0
23f2e0fea7 Skip tests that check max concurrency
37ca57e9d5 libnet/d/bridge: inline error checks
fcabc48ee4 c8d/load: Handle compressed archives
cbc2a71c27 libnet/d/bridge: Don't set container's gateway when network is internal
491758a446 Dockerfile: upgrade Delve
c587ba3422 registry: allow mirror path prefix in config
2c4551d86d libnet: resolver: remove direct use of logrus
4de8459265 libnet: add OTEL tracing to the embedded DNS
b8ba263099 c8d/rmi: Handle explicit dangling name
25a813e924 c8d/rmi: Don't emit Untagged for dangling images
f99c4ec798 c8d/history: Fill ID and Tags for all entries
1f6bacc486 TestDaemonNoSpaceLeftOnDeviceError: Adjust to snapshotters
28d057cb0e c8d/TestPsListContainersSize: Only check if size increased
34400dd4a2 TestPsListContainersSize: Fix size parsing/formatting
e0e6ae741e daemon/c8d: Use WithoutCancel instead of context.Background
c47cdd5f39 Revert "daemon/logger/etwlogs: rewrite to use go-winio/pkg/etw"
6f27bef9fc daemon/c8d: Use non cancellable context in defers
77f7c83114 c8d/push: Show progress only on blobs
e8a7a9435f Dockerfile: update test-registry to v2.8.3
5b16dd6469 Remove duplicated trace logs
ad877271f3 Limit OOMScoreAdj when running in UserNS ("Rootful-in-Rootless")
3d70af4ee4 adjust stats sampling order
16063c7456 vendor.mod: bump go line to 1.20
a4822abe37 c8d: Skip TestPullFailsWithAlteredManifest
f9f439763a c8d/TestPullFailsWithAlteredManifest: Adjust error message
4001241ccf c8d/TestPullByDigestNoFallback: Adjust error message
9e3ed7b429 pkg/chrootarchive: fix Darwin build
e465ebf2f3 update to go1.21.1, and fix download-URL
aa282973d4 Dockerfile: use GOTOOLCHAIN=local
f66c000229 c8d: Fix getting the platform of a single-platform image
2c89640ab9 distribution: TestPullSchema2Config fix test response
a9fcb775e5 integration-cli: fix getTestTokenService not sending header
3197160114 daemon: Daemon.SetNetworkBootstrapKeys: make error-handling idiomatic
f91c3cfda6 daemon: Daemon.initNetworkController: remove intermediate var
dcc75e1563 libnetwork: Controller: agentInit, agentDriverNotify rm intermediate vars
a384102fdf libnetwork/datastore: Store.Map, Store.List: remove intermediate vars
bb5402e6fb libnetwork: Controller: getKeys, getPrimaryKeyTag: slight refactor
603f49706e libnetwork: Controller: getKeys, getPrimaryKeyTag: prevent panic
f6e44bc0e8 internal: Add compatcontext.WithoutCancel
95aea39348 Make one-shot stats faster
618d9b5d54 libnetwork: nwAgent: un-export mutex
7cda3fb7b5 libnetwork: inline populateSpecial NetworkWalker
ca1307c56e libnetwork: Controller: remove mutex for "store"
a8ea752a93 libnetwork: Controller.cleanupLocalEndpoints: return errors
2e60051c92 libnetwork: Controller.sandboxCleanup: return errors
642cf261a8 libnetwork: Controller.NetworkByID: remove redundant error-handling
430a5f8581 api: Add method and path to trace operation string
41c186c344 hack: Run integration tests through Delve
42a51cb285 Add support for swarm seccomp and apparmor
0c66111c40 daemon: containers list code refactor
13b775a96e integration-cli/TestSaveAndLoadRepoFlags: Ignore LastTagTime difference
7c202d2fa4 integration-cli/SaveLoad: Don't check `repositories` file
724db8650c integration-cli: Skip TestLoadZeroSizeLayer with c8d
1337a66130 integration-cli: Skip Parent tests with c8d
d5b067e04a ci(buildkit): remove regex skipping tests with digest inconsistency
286704bf6f ci(buildkit): expose github runtime for gha tests
34e71b374b builder-next/a/ci/pull: strongly type flightcontrol.Group
c8773e10b1 builder-next/wrapper: use new exptypes constants
a728bd0ee9 builder-next/pull: use ResolveMode.String() helper
221b73e23d builder-next: apply source policies on config resolve
2246297ae6 builder-next: adopt new wrapped types
c217e3c87a vendor: github.com/moby/buildkit v0.12.2
8cd5f04ea3 daemon/c8d: use new containerd LabelDistributionSource constant
fd6dd6935b vendor: github.com/containerd/containerd v1.7.6
79a4cbbec9 builder-next: make stub executor generic
d7a31cfb2d libnetwork: Sandbox.resolveName: slightly simplify locking
f549aaa205 libnetwork: Sandbox.resolveName: add fast-path for alias lookups
9249b34be8 libnetwork: Sandbox.resolveName: rename vars for clarity
4401ccac22 libnetwork: Sandbox: remove some intermediate vars
0e80073e01 daemon: strongly type containerd log.OutputFormat
4ff252456b libnetwork: rewrite Network.isClusterEligible to return agent
6203e3660d libnetwork: Endpoint: return early if no agent was found
6eeef51c6a libnetwork: Controller.agentSetup: use structured logs
8b95ea4a35 libnetwork: Controller.agentSetup: remove redundant condition
e852ba55a5 vendor: github.com/Microsoft/hcsshim v0.11.1
06a640084f Fix graphdriver lookup in makefile
093481618d c8d: Skip the test that checks Config.Image
e6907243af client: negotiate api version before handling version-specific code
3936c57294 c8d: test a backend dependent error on pull
207c4d537c c8d: Fix `docker diff`
601c9b29e6 c8d/pull: Fix stale Downloading progress
313a090c0e libnetwork/osl: add some TODOs
9d3b1f9419 libnetwork/osl: make constructing Interfaces more atomic
47f9e70385 libnetwork/osl: Namespace.Restore: conditionally fetch IPs
ee5a91e663 libnetwork/osl: Namespace.Restore: flatten nested conditions
299bd58c5a libnetwork/osl: Namespace.Restore: rename vars for readability
7b96663082 libnetwork/osl: Namespace: inline setGateway and setGatewayIPv6
bd17d27658 libnetwork/osl: Namespace: make error-handling more idiomatic
0b4a70ca2c libnetwork/osl: Namespace: programRoute, removeRoute rm path arg
542fe0da40 libnetwork/osl: Namespace: make mutex private
338fc49060 libnetwork/osl: implement Namespace.RemoveInterface
3ff75aeb07 c8d/pull: Deprecation notice for schema1 manifests
2cb94ade6c distribution: Extract schema1 deprecation notice
39fe25b69e c8d: Fix getting image with platform
68b67b3230 c8d/pull: Support legacy schema1 prettyjws manifests
d5425f28ae Don't run tests twice
bddd826d7a profiles/apparmor: deny /sys/devices/virtual/powercap
83cac3c3e3 oci/defaults: deny /sys/devices/virtual/powercap
2394b07bce c8d: Number of containers using an image
e19e541e2c libnet: add comment to ipamType
acf825def2 api/t/net: test EndpointIPAMConfig.Validate()
3092b261e2 daemon: move most of validateEndpointSettings into api/t/net
554036040b vendor: github.com/AdaLogics/go-fuzz-headers v0.0.0-20230811130428-ced1acdcaa24
6fc3ead321 vendor: google.golang.org/grpc v1.56.2
73041028b6 vendor: google.golang.org/protobuf v1.31.0
54dc8d2968 vendor: github.com/cenkalti/backoff/v4 v4.2.1
d97e4300ee vendor: google.golang.org/api v0.114.0
d50585b05b vendor: golang.org/x/tools v0.8.0
51d8a975ab vendor: golang.org/x/oauth2 v0.7.0
9670db3904 vendor: golang.org/x/crypto v0.9.0
a046616249 vendor: golang.org/x/sys v0.10.0
f29155950f vendor: golang.org/x/sync v0.3.0
0354791147 vendor: github.com/klauspost/compress v1.16.5
87dd1de046 vendor: github.com/tonistiigi/vt100 v0.0.0-20230623042737-f9a4f7ef6531
bd6cadffb0 vendor: github.com/containerd/continuity v0.4.2
6d93db06db vendor: github.com/vbatts/tar-split v0.11.3
171ecf8cf2 vendor: github.com/vishvananda/netns v0.0.4
81ab8db1c3 api/t/net: add missing comment to ValidateIPAM
04a47e88d2 api/t/net: move endpoint structs into endpoint.go
19c07198b6 daemon: Check if endpoint address is in allowed range
bfd8c6deb7 daemon: Validate EndpointSettings.IPAMConfig.LinkLocalIPs
4bd0553274 daemon: Return all validation errors for NetworkingConfig and EndpointSettings
ff503882f7 daemon: Improve NetworkingConfig & EndpointSettings validation
4c03618fab registry: remove jsonmessage dependency
6c563cda82 c8d: fix TestRemoveContainerAfterLiveRestore
0c4397deaf api/pull: Validate repo name
ccb37fa567 imageService/PullImage: Move reference parse to api
28861e0c47 c8d: Skip TestRemoveImageGarbageCollector
bf692d47fb deprecate pkg/loopback (utility package for devicemapper)
96faee9762 libcontainer: client.processEventStream: use locally scoped variables
32e2c53467 c8d: Fix pull progress update
5a4962f80d c8d: Refuse images with digest algo when tagging
bd523abd44 remove more direct uses of logrus
1ffbbe798a vendor: github.com/containerd/containerd v1.6.24
7f281907dd c8d/push: Add missing message about repository
babf907bfd c8d/push: Support pushing all tags
7ec9f304e9 daemon/cluster: create managed ctr with multiple EndpointsConfig
5e15ed314b api: Improve error on ContainerCreate with multiple endpoints
cc9c930e29 vendor: github.com/Microsoft/hcsshim v0.9.10
24102aa8ca update containerd binary to v1.7.6
bbcd662532 api: Allow ContainerCreate to take several EndpointsConfig for >= 1.44
35e9d688ba libnetwork: remove netWatch.remoteEps, as it's unused
8ae5dc4aae libnetwork: Network.updateSvcRecord: remove unused localEps arg
37b2ea9a8d libnetwork: Controller.processEndpointCreate, Delete: remove nmap arg
62e55fd58a Add support for registry token in containerd pull logic
14c5f7bf1d contrib: outline purpose of download-frozen-images-v2.sh
0937aef261 libcontainerd/windows: Don't reap on failure
b805599ef6 libcontainer/windows: Remove unneeded var declaration
55b664046c libcontainer/windows: Fix process not being killed after stdio attach failure
9c84994830 libnetwork/portmapper: remove unused PortMapper.checkIP
f5d6af13d0 libnetwork/portmapper: un-export PortMapper.Allocator
863909a749 libnetwork/portmapper: New(): remove unused argument
5ab8d41d9f Add dmcgowan as curator
de2447c2ab daemon: overlay2: Write layer metadata atomically
78479b1915 libnet: Make sure network names are unique
5fa011dc0c vendor: resenje.org/singleflight v0.4.0
fd15ddbc30 daemon: GetImageAndReleasableLayer: simplify "FROM scratch" case
4229032676 daemon/containerd: use "DiffID" type for diff fields
5d5eeac310 daemon: automatically set network EnableIPv6 if needed
0313544f4a c8d: Handle userns properly
c63a952dc9 c8d/builder: Don't append empty tar layer to manifest
9127285985 c8d/builder: Lease layer snapshots
f22b112005 c8d/commit: Unpack committed image
8832cdf6e1 c8d: Common unpack code for specific manifest
c6bded3475 c8d/builder: Don't use diffID as snapshot parent
8c7e19c5ff c8d/builder: Set empty diffID for rolayer
6ebfa57364 c8d/builder: Don't mount the rolayer snapshot
c41121cc48 update to go1.20.8
4acbf7d8c3 c8d: disable schema1 registry integration tests
833b514d98 c8d/mount: Create same directory owners as graphdrivers
a8975c9042 api: Add consts for predefined networks
12e27dfd8f Fix host_ipv4 bridge option when IPv6 and ip6tables are enabled
7c0f6741eb go mod tidy
cd204f1118 libnetwork/osl: Namespace.DeleteNeighbor: remove intermediate vars
4215a1542b libnetwork/osl: Namespace.DeleteNeighbor: remove osDelete argument
bc77104fed libnetwork/osl: Namespace.DeleteNeighbor: don't warn on non-existing neighbor
5e7eade1f7 integration: don't poll for containers to be running
b7d29c1e23 registry: un-skip some tests that don't require root
de27973538 registry: merge validateEndpoint into newV1Endpoint
6cc6682f5f daemon: fix under what conditions container's mac-address is applied
820f37b1a6 hack: compile w/o optimizations & inlining when debugging
c44f8958f6 vendor: github.com/cncf-tags/container-device-interface v0.6.1
fa3ddc5116 distribution: newRepository: remove naked return and intermediate vars
43740ab642 registry: remove intermediate vars in mock
550e628f05 registry: newV1Endpoint: make it clear we skip validation for Docker Hub
5728516371 c8d/image: Allow truncated id to have sha256: prefix
c2004fb8c4 hack: Add TEST_IGNORE_CGROUP_CHECK
7e506f71f3 registry: v1Endpoint.ping: include URL in debug log
0c6f8f9290 registry: v1Endpoint.ping: don't io.Readall the response
e9ad878df6 registry: v1Endpoint.ping: add fast-path for X-Docker-Registry-Standalone
9e797a6db9 c8d: Remove the panic from UpdateConfig
4982c70db4 integration-cli: Skip TestRmiParentImageFail when using c8d snapshotters
0f7a65e59b registry: remove use of v1 Version field and X-Docker-Registry-Version
3d8b8dc09a Use process substitution to redirect to tee
c0ece8d4f3 integration-cli: Use different label in TestBuildMultiStageGlobalArg
081b74b97d c8d/builder: Store parent in c8d image label
5f59f7bb49 integration/container: combine TestResize tests into subtests
a4ceb0e4ac integration/container: TestResize, TestResizeWithInvalidSize: rm poll.WaitOn
ee7ca6822a integration/container: fix flaky TestResizeWhenContainerNotStarted
da5ed8b35b CI: Switch to use tracing action
a3c97beee0 image: implement CheckOS, deprecate pkg/system IsOSSupported
150b657bad pkg/system: move ErrNotSupportedOperatingSystem to where it's used
9b7784781d Add test for buildkit history trace propagation
3b4ccb2eca CI: Setup otel tracing for integration tests
e8dc902781 Wire up tests to support otel tracing
642e9917ff Add otel support
776c376227 c8d: Better pull progress
1cb45e582c c8d/import: Don't close compressed stream twice
b5376c7cec pkg/idtools: remove sync.Once, and include lookup error
0be416dfdc distribution: filterManifests split complicated condition
150b1c8c73 daemon: daemon.createSpec: remove uses of logrus
dbb4d54e01 c8d: Add image save events
09470db089 c8d: Add image pull events
1847dc4b7f c8d: Add image push events
1148a24e64 migrate to new github.com/distribution/reference module
dffccfd0f1 integration-cli/build: Alias `cmp` as `is`
5dbd198b53 integration-cli/build: Parse multiline `images -q` output
96516002cc c8d: Print the tag, digest and size after push
417328e44e libnetwork/osl: remove dead code
237eb3b5f1 docs(api): rephrase description for /images/create
0ffa3dd870 daemon/c8d: Use Docker imagespec
14af90b868 c8d/integration/TestBuildOnBuildCache skip parent check
366a5f1d74 image/spec: Add Go structs
536826d66f image/spec: Add Healthcheck.StartInterval (v1.3)
75097cf09a test: remove platform related timeout values
6dd78a9ac2 image/spec: Fix typo in "superseded"
84a4f37cf7 test: use info from the version endpoint for arch checks
159b168eea test/integration: Remove checks for "not arm" in tests
ebb9fade23 makefile: use info -f to get the current storage driver
c243efb0cd client: TestImageTagInvalidSourceImageName remove invalid test-case
3a4a04e462 distribution: simplify mocks
d864d1eb97 image/spec: add back versioned files
b8de6c01b5 image/spec: rename v1.2.md to spec.md
c3f2bd1009 image/spec: rename v1.1.md to spec.md
7ff38506ab image/spec: rename v1.0.md to spec.md
32d5e6312d image/spec: use permalink to versioned documents
7b7019a4da image/spec: add missing "Shell" field (v1.2)
5380f3f0c4 image/spec: add missing "ArgsEscaped" field (v1.1, v1.2)
f33370219b image/spec: add missing "OnBuild" field
e19edd3f25 image/spec: minor fixes and touch-ups in markdown files
b9f9e20f01 daemon: Daemon.killWithSignal(): don't discard snapshotting errors
af535233cc daemon: Daemon.killWithSignal(): don't discard handleContainerExit error
8c6a46f643 libnetwork: Endpoint.AddStaticRoute don't create StaticRoute if unused
1dcb11f81d libnetwork: Endpoint.InterfaceName: remove redundant nil check
a9a0ffaf51 testing: update docker-py 6.1.3
f6959bc597 test-docker-py: skip AttachContainerTest::test_run_container_reading_socket_ws
e0f171f342 testing: update docker-py 6.0.1
79a0f82ca1 test-docker-py: remove comment about docker 17.06 limitations
be90e5e1d4 libnetwork: Controller.addServiceBinding: fix duplicate word in comment
77c2613d3a libnetwork: fix some missing imports on macOS and FreeBSD
5da2dd98e9 registry: move search-related code to separate files
f1a7028900 registry: rename v1-endpoint tests to have a common prefix
19f6f0b3db registry: move v1 endpoint tests to endpoint_test.go
47bf587f84 registry: ResolveAuthConfig: rename var that collided with import
a0a8d9d057 libnetwork: notify another driver registerer
2689484402 volume/local: Don't unmount, restore mounted status
f1a6e16258 errdefs: remove redundant import comments
b6ba2a4f75 errdefs: remove gotest.tools dependency
3f8cbd8ec9 registry: update some godoc
e10eca3d1a daemon/containerd: rename some vars that collided with imports
aefbd49038 daemon/containerd: newROLayerForImage: remove unused args
28d201feb7 daemon/containerd: log errors when releasing leases
d43e61758a registry: deprecate APIEndpoint.Version and APIVersion type
aef703fa1b integration/liveRestore: Check volume content
4e4f62b6db distribution: use registry consts for API version in tests
aa59b0f5a2 registry: improve error for invalid search endpoints
14b53c6318 registry: simplify `trimV1Address`
062c80199f registry: combine TestEndpointParse and TestEndpointParseInvalid
0f871f8cb7 api/types/events: define "Action" type and consts
10a3a3bc49 daemon: inline some variables when emitting events
9331d6de1e daemon/events; fix TestLoadBufferedEventsOnlyFromPast
f6f6c32138 api: ValidateRestartPolicy: improve errors for invalid policies
333e04e84e integration-cli: TestEventsFormat: rewrite test to not use deprecated fields
fa79b5d59f integration/container: TestPause: don't depend on deprecated fields
0161aad462 client: TestEvents: don't depend on deprecated fields
5123ae4352 daemon: TestLogContainerEventCopyLabels: inline vars
2928c5ae92 daemon: TestHealthStates: don't depend on deprecated fields
62ec14d9ec daemon/events: verify non-deprecated fields
f443006fa2 daemon/events: rewrite test-assertions with gotest.tools
70ad5b818f api/types/events: make events.Type an actual type
5a02ed5e84 integration: use events-consts in tests
9ea50365d6 daemon/events: use events-consts in tests, and fix vars that collided
2f8e957713 Dockerfile: update crun binary to v1.8.7
32e79c464a libnetwork: Network: return early where possible
5512c7e838 libnetwork: Network.Services: remove some intermediate vars
d6b8298cfd libnetwork: Network.Services: return early and don't lock in a loop
8b21609654 libnetwork: remove Endpoint.Interface
f8181b8875 libnetwork: Endpoint.Iface, Endpoint.Interface remove redundant "if"
6a61bacafe libnetwork/drivers/remote: rollbackEndpoint.Interface: return concrete type
dc061d2ed3 libnetwork/drivers/remote: driver.DeleteNetwork: remove var that collided
40b1389917 libnetwork/drivers/remote: remove unused testEndpoint.Interface
15435f7293 libnetwork/drivers/bridge: testEndpoint.Interface: return concrete type
9afb688f5f libnetwork/drivers/bridge: getIPv4Data: remove unused argument
639449f84e libnetwork: nwAgent.bindAddr: change to net.IP
b75e831567 libnetwork: resolveAddr: add GoDoc
ebe2347ac6 daemon: remove LogPluginEventWithAttributes as it's not used
aa764e6009 daemon: logNetworkEvent, logSecretEvent, logConfigEvent rm unused args
fa13b0715f integration/internal/swarm: rename max/min as it collides with go1.21 builtin
79495c5b6a pkg/tailfile: rename max/min as it collides with go1.21 builtin
df2f25a977 pkg/plugins: rename max/min as it collides with go1.21 builtin
6c036f267f pkg/sysinfo: rename max/min as it collides with go1.21 builtin
55192de9e3 pkg/archive: rename max/min as it collides with go1.21 builtin
a3867992b7 daemon: rename max/min as it collides with go1.21 builtin
f6b2e34268 Update example in README.md to close cli object
318b3d4fe5 api/types/versions: rename max/min as it collides with go1.21 builtin
cb394a62e5 restartmanager: rename max/min as it collides with go1.21 builtin
8f64e2e925 daemon: daemon.logClusterEvent: use events.Type for event-types
3dea2f230a daemon: inline some vars when producing events
385f6429be api/server/router/network: remove empty file
350223201e integration/container: TestCheckpoint: remove intermediate vars
b688af2226 api/types: move checkpoint-types to api/types/checkpoint
70baaec6a5 Dockerfile: remove libdevmapper-dev
12d1f4f385 hack: remove devicemapper leftovers and build-tags
f6a5318f94 Dockerfile: Windows: update Golang download domains to cut down redirects
2aabd64477 hack: update link to GOPATH documentation
b18e170631 CONTRIBUTING.md: update links to golang docs and blog
136e86bb5c api: swagger: update link to Go documentation
4862d39144 docs/api: update links to Go documentation
cd49f9affd update golangci-lint to v1.54.2
d52f20048d api/server: format code with gofumpt
e9b09b49fd builder/builder-next: format code with gofumpt
73894af9ff contrib/apparmor: format code with gofumpt
ce01d779df daemon: format code with gofumpt
211d3a8c32 pkg/stack: format code with gofumpt
95e99e629c pkg/fileutils: format code with gofumpt
6c6e1fb13d pkg/containerfs: format code with gofumpt
1e579a7a2a pkg/sysinfo: format code with gofumpt
263c00f27c testutil: format code with gofumpt
b71951c70c container: format code with gofumpt
87cedbe443 image: format code with gofumpt
976da91fb7 pkg/loopback: format code with gofumpt
b4d6eca9b8 pkg/chrootarchive: format code with gofumpt
07e6b0ac70 integration: format code with gofumpt
498da44aab remove some remaining pre-go1.17 build-tags
210abfaef6 libnetwork: add godoc to Endpoint
04422f5ec1 daemon: WithNamespaces(): add notes about user-namespaces
dd26e6b15e daemon: Daemon.getIpcContainer: make errors less repetitive
3d94eb9bcd daemon: Daemon.getPidContainer: change to accept "id" argument
bc7f341f29 daemon: WithNamespaces(): fix incorrect error for PID, IPC namespace
bd5d6480e7 daemon: WithNamespaces(): remove redundant "if"
6eaefe5bf5 daemon: WithNamespaces(): use switch instead of if/else if/else
43aa67a982 daemon: WithNamespaces(): use OCI-spec consts for namespaces
759698581e daemon: WithNamespaces(): inline variables
13648a0e21 daemon: remove Daemon.checkContainer and related utils
78828f9b58 test/integration: Download the registry binary
bd2c553870 Fix some broken executable flags
143b3b2ef3 test: update registry version to latest
01214bafd2 c8d/builder: Don't drop fields from created image
b92cf68add libnetwork/osl: remove Sandbox and Info interfaces
c881360e88 libnetwork/osl: remove Interface.Master() as it's unused
b9bf407929 libnetwork/osl: remove Interface Interface
8631e69cdf libnetwork/osl: remove Sandbox.InterfaceOptions() etc.
f3d29db6a2 libnetwork/osl: remove Sandbox.NeighborOptions() etc.
a365fb0e9d libnetwork: move more osl.Sandbox related code to Linux-only files
95abde479a libnetwork: implement Controller.setupOSLSandbox
35456d2eb1 libnetwork/osl: add godoc to networkNamespace
aecfa55c4c libnetwork/iptables: (Add|Del)InterfaceFirewalld: check firewalld status
4b0d38de06 TestDiskUsage: don't panic if results don't match
c0568a95d8 integration/container: check some error-types in tests
2b583c0923 daemon: cleanupContainer: slightly cleanup error messages
69cf2ad6a5 daemon: cleanupContainer: don't fail if container is already stopped
20b770237c daemon/network: Settings: move sandbox fields together
405f571ae8 daemon: updateSandboxNetworkSettings: remove unused error-return
2eccf0e8d1 libnetwork: Controller.NewSandbox: don't generate ID if not used
6cbe06ff3f test: Skip graph driver tests when using containerd snapshotters
3553b4c684 replace dockerfile/dockerignore with patternmatcher/ignorefile
a479b287c7 vendor: github.com/moby/patternmatcher v0.6.0
bedcc94de4 daemon: Handle NotFound when deleting container lease
dfaff9598c c8d/run: Allow running container without image
eb56493f4e c8d/commit: Don't produce an empty layer
3e8af0817a ipam: Replace ChildSubnet with parent Subnet when its mask is bigger
4f47013feb api: Validate IPAM config before creating a network
2be118379e api/types/container: add RestartPolicyMode type and enum
b8ff8ea58e Don't return an error if the lease is not found
dff53a02ef libnetwork: remove Controller.Sandboxes as it's no longer used
d6f340e784 gha: set 10-minute timeout on "report" actions
f44fbab3ec libnetwork: remove Controller.WalkSandboxes and related code
6dba98cf38 libnetwork: implement Controller.GetSandbox(containerID)
6c4153f348 libnetwork: parallelTester: move vars closer to where they're used
e690cdb6a3 libnetwork: remove redundant sandboxTable type
3c10db669e libnetwork: remove unused SandboxKeyWalker
cc414a2012 libnetwork/osl: remove Sandbox.Info()
3b9f4395cf libnetwork: remove InterfaceInfo interface
d146e592d8 api/t/network: Move IPAM types to their own file
219d4d9db9 ci(bin-image): check repo origin
d125823d3f hack: use long SHA for DOCKER_GITCOMMIT
2010f4338e ci(bin-image): clean up metadata
ad91fc1b00 ci(bin-image): clean up env var handling
5dc44f03f0 classic builder: align "removing intermediate container" output
06e540c271 libnetwork: move all SandboxOptions to a separate file
2afa4eba43 libnetwork: resolver: Resolver.dialExtDNS use joinHostPort and cleanup
3218e26a22 libnetwork: resolver: remove some intermediate variables
986de11464 libnetwork: resolver: remove setCommonFlags, use createRespMsg
7f965d55c7 volume/local: Fix debug log typo
678ce73907 windows: update default base image for dev container
0c522c6bbf libnetwork/datastore: remove deprecated scope consts
73ffb48bfb ci(bin-image): populate DOCKER_GITCOMMIT, take 2
9aed6308d4 ci(bin-image): populate DOCKER_GITCOMMIT
c22ec82477 libnet: Fix error capitalization
bd0111c1f4 libnet: Replace NoServiceError with UnavailableError
42d34e40f9 libnet: Replace BadRequest with InvalidParameter
a64adda4e7 c8d/inspect: Ignore manifest with missing config
c85a33d74b libnetwork/iptables: un-export ZoneSettings, and slight refactor
d979d2af45 libnetwork/iptables: fix TestFirewalldInit
513063bcf9 libnetwork/iptables: ProgramChain: don't fail if interface not found
64de635626 Add a temporary drop-in replacement for errors.Join
cff341e5e6 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230815220644-3f2e40b3ed51
56b62640a2 libnetwork: Controller.NewSandbox: use named error-return
cbe692ffd1 libnetwork: Controller.NewNetwork: use named error-return
e2f9d6c4c3 libnetwork: rename vars that collided with builtins
e8f0f5a4ce libnetwork: rename agent type to reduce collisions
0503cf2510 libnetwork/drivers/bridge: setupIPChains(): name output variables
b9d9504df5 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230808164555-1983e41a9fff
7b66ae1531 vendor: golang.org/x/crypto v0.3.0
59aa3dce8a remove s390x and ppc64ls pipelines
ea2d686468 libnetwork/iptables: DeleteConntrackEntries: remove "totals" returns
f1240393d9 libnetwork/iptables: reduce DeleteConntrackEntriesXX debug logs
18a0ff2b2b daemon: Daemon.handleContainerExit(): rename err-var for clarity
178125ae39 libcontainerd/supervisor: explicitly ignore process kill errors
f8363690ca daemon: Daemon.handleContainerExit(): reduce ambiguity in error handling
72648f0ba6 oci: DefaultLinuxSpec: use OCI-spec consts for namespaces
17571ff199 integration/internal/container: add WithPIDMode option
917dae58e1 integration/internal/container: remove import aliases
e0f5bb4820 daemon: withLibnetwork(): return early if networking is disabled
225691e258 daemon: withLibnetwork(): use OCI-spec consts for namespaces
8376595621 libnetwork: un-export SetExternalKey
91a3a95385 libnetwork/options: OptionExecRoot: skip osl.SetBasePath on non-Linux
48ea7ec970 libnetwork/osl: use filepath.Join() only when changing basedir
8bf62010a4 libnetwork: merge linux-only test-files
c0562d4eed libnetwork: rename unix-only testfiles
8070f15966 libnetwork/drivers/bridge: rename some linux-only files
014fefee1d libnetwork/drivers/bridge: minor formatting fixes
80d158e0de daemon: remove containerNotModifiedError
dffe634c19 daemon: Daemon.ContainerStart(): make validateState a regular function
6da42ca830 c8d/diff: Reuse mount, mount parent as read-only
051d51b222 c8d/export: Use ref counted mounter
303e2b124e integration: Add test for not breaking overlayfs
05deecaa45 internal/testutils/netnsutils: move utils that were not used on Windows
d4e1c072e2 libnetwork: move resolverIPSandbox closer to where it's used
f661bd8ee5 libnetwork: Resolved.SetupFunc() minor cleanup
de4ba13400 libnetwork: move resolver tests that were skipped on Windows
1e4e9161c5 libnetwork: move TestDNSOptions to a non-windows file
bf1fb97575 daemon: Daemon.containerStart(): add comment to clarify error-type
b039bbc678 update runc binary to v1.1.9
79b467808e vendor.mod: github.com/opencontainers/runc v1.1.9
74feadacf8 integration/internal/container: refactor CreateExpectingErr
0899ba4a3f integration/internal/container: add NewTestConfig utility
3cb52a6359 integration/internal/container: use consistent name for api-client
26be2bc6b9 integration/container: use consistent name for api-client
38e26c4717 daemon/create.go: Fix error capitalization
435ecfe6e0 test/volume: Replace Check with NilError where suitable
3d3ce9812f integration/tag: Move to client unit test
742475bc8d daemon/create.go: Supersede github.com/pkg/errors
4cc796ab93 client: Client.buildRequest: use http.NewRequestWithContext
58dc0fcd1e client: Client.Ping: re-use request when falling back to GET
87fff769f4 client: Client.checkResponseErr: change errorMessage to an error
71da8c13e1 integration/tag: Use subtests and make parallel
11a0c2779b pkg/plugins: Rewrite with assert.Check
43956e1b71 hack/test: Don't exit early when all tests are filtered out
ae008570ff hack/test: Split -test.run for integration and integration-cli
510cac5f5b hack/test: Fix checking if integration-cli are filtered out
8a1ca49657 libnetwork/osl: nwIface: add godoc
16785b9b7b libnetwork/osl: move all networkNamespace methods together
5b0fa7aaca libnetwork/osl: some minor nits
972d80b596 libnetwork/osl: clean up newInfo() a bit
0da721ec38 libnetwork/osl: make newKey and newInfo a t.Helper()
d9442aab88 libnetwork/osl: nwIface: remove mutex altogether
2afe18d2ce libnetwork/osl: nwIface: unexport sync.Mutex
8b989ac665 libnetwork/osl: let's not do this, etc.
3d0a7d819c libnetwork: remove Network.Info() and remove NetworkInfo interface
74354043ff remove uses of libnetwork/Network.Info()
36a0946aa9 libnet/ipamapi: Remove unused errors
fd4ec26313 daemon/network.go: Fix error capitalization
64e01c627f daemon/network.go: Remove github.com/pkg/errors pkg
94dc10378d libnetwork: network.requestPoolHelper: slightly optimize order of checks
67e2c1d482 libnetwork: network.requestPoolHelper: remove dead code
ad68883c5a libnetwork: network.requestPoolHelper: don't defer in a loop
32fcde6d9e libnetwork: network.IpamConfig, network.IpamInfo: name output vars
df03357d19 libnetwork/ipam: move PoolID.FromString() to a PoolIDFromString() func
808fed550d libnetwork/ipam: PoolID.String(): don't use fmt.Sprintf
87fc8c772b libnetwork/ipam: Allocator.RequestPool: name args, output vars
6dbc9c1c53 libnetwork/ipam: Allocator.RequestPool: mark options arg as unused
7047964bd6 libnetwork/ipam: Allocator.RequestPool: make parseErr only handle errors
821ef5cbaf libnetwork/ipams/null: use consts for fixed values
05ef5559c3 pkg/plugins: override timeouts during tests
6841a53d17 hack/test: Don't fail-fast before integration-cli
2aa24519da ibnetwork/drivers/bridge: newLink: validate before creating
5d722b35d9 libnetwork/drivers/bridge: bridgeNetwork.getEndpoint(): move lock
eba15fe905 libnetwork/drivers/bridge: driver.link: don't defer in a loop
76b736c242 libnetwork/drivers/bridge: driver.link: name return var for defer handling
ea5f21ceac libnetwork/drivers/bridge: don't convert IP to string and back again
8b6203b613 libnetwork/drivers/bridge: link.Enable: don't register reload on error
0f4ba145ee libnetwork/drivers/bridge: link.Enable, link.Disable use iptables.Action
40adb4317b api: Remove duplicated check on CheckDuplicate
3e52785aae volume/drivers: use plugin Content-Type headers v1.2
481dde8b70 libnetwork: use plugin Content-Type headers v1.2
93b5c31541 integration-cli: use plugin Content-Type headers v1.2
b663c7c5c3 pkg/plugins: add convenience alias for VersionMimeType
c8930105bc fix: Normalize `RLIMIT_NOFILE` to sensible defaults
4f9540f19f daemon: remove some intermediate vars and some cleanup
8153a7760e daemon: Daemon.tryDetachContainerFromClusterNetwork: cleanup
a018bb1da7 daemon: Daemon.initializeNetworking: remove var declaration
12d8029d56 daemon: Daemon.getNetworkedContainer: remove intermediate var
d1aa1979b4 daemon: buildEndpointInfo: minor refactor
7a59913b1a Add CDISpecDirs to Info output
0034a98eb1 pkg/plugins: Guard storage and unparallel racy tests
bbb9255562 Skip CDI driver registration if CDISpecDirs is empty
3b71197fb8 Set default CDI spec dirs after parsing args
f3e62199ea daemon: Remove unneeded error wrapping in verifyNetworkingConfig
d7a9f15775 bakefile: Remove default value of DOCKER_GITCOMMIT
2b028dc55b daemon: Daemon.buildSandboxOptions: use range when looping
33b4285eb1 daemon: Daemon.buildSandboxOptions: don't use PortBinding.GetCopy()
ddb3d46533 daemon: Daemon.buildSandboxOptions: remove intermediate vars
27a27db73f daemon: Daemon.buildSandboxOptions: move vars to where they're used
91cab53a3e libnetwork: make OptionDNS, OptionDNSOptions, OptionDNSSearch take a slice
2cbed9d2a8 daemon: inline Daemon.getDNSSearchSettings
603547fa19 daemon: change Daemon.setupPathsAndSandboxOptions to a regular func
07f2df69c7 daemon: buildCreateEndpointOptions: minor nits
5158a33f15 daemon: buildCreateEndpointOptions: use range when looping
1c6dae1291 daemon: buildCreateEndpointOptions: don't use PortBinding.GetCopy()
cc79024761 daemon: buildCreateEndpointOptions: remove intermediate vars
45de99aa06 daemon: buildCreateEndpointOptions: don't parse empty vip
7d429125d2 daemon: buildCreateEndpointOptions: move vars to where they're used
6ce92aa523 daemon: buildCreateEndpointOptions: skip getPortMapInfo() if not needed
9e9a17950a daemon: FindNetwork: minor cleanups
8c4af5dacb distribution: show image schema deprecation on all registries
982bc0e228 distribution: update warning for deprecated image formats
5bd8aa5246 integration: Add RunAttach helper
d7fb4dd170 integration: Extract stream demultiplexing from container.Exec
584f016e99 docs/api: remove stray underscore in version-history.md
d5cb7cdeae update to go1.20.7
fced566714 client: move resolveTLSConfig to a Client.tlsConfig()
47af265234 client: Dialer: inline fallbackDial
74d9850bb9 client/buildkit: ClientOpts: update docs to use doc-links, and inline
971083d419 api: search: deprecate is_automated field, and is-automated filter
5e2a1195d7 swap logrus types for their containerd/logs aliases
1a51898d2e TestDaemonProxy: use new scanners to check logs
476e788090 Fix daemon proxy test for "reload sanitized"
e2d400bea9 libnet/d/bridge: Inline InvalidLinkIPAddrError
6df4a00bb9 libnet/d/bridge: Remove pointless BadRequestError impl
7c13985fa1 libnet/d/bridge: Inline InvalidIPTablesCfgError
d8f42ee21a libnet/d/bridge: Inline IPTableCfgError
a40d00c421 libnetwork: remove ErrDataStoreNotInitialized
66b379785e libnetwork: remove unused InvalidContainerIDError
d8cd4f6421 libnetwork: remove unused UnknownEndpointError
fc5c16f491 libnetwork: remove unused NetworkTypeError
e9f1888560 libnetwork: remove unused ErrInvalidConfigFile
eadaaa7f79 libnetwork: remove unused ErrNoContainer
99ab11bb90 libnetwork: remove unused ErrInvalidJoin
9174eb00e2 libnetwork: remove unused ErrInvalidNetworkDriver
7c2665298a libnetwork/types: move GetMinimalIP to overlay-driver and un-export
d9b7a5f01a libnetwork/types: remove ErrInvalidProtocolBinding
4445169cb5 libnetwork/types: remove PortBinding.Equal
4269712d06 libnetwork/types: remove unused UUID type
c203171ef6 libnetwork/types: remove unused RetryError and TimeoutError
6d37ab0a83 libnet/d/bridge: Change interface implemented by error types
03db2f8c3d libnet/d/bridge: Remove unused error types
8197752d68 TestDaemonProxy: check proxy settings early
4d674897f3 vendor: github.com/containerd/containerd v1.6.22
5438356348 libnetwork: rename vars that collided with builtin and type
ce053a14aa vendor: gotest.tools/v3 v3.5.0
be0f4a4737 libnetwork/driver: remove discoverAPI from Windows and Windows overlay
6ec03d6745 libnetwork: move datastore Scope consts to libnetwork/scope
86299bbd35 vendor: github.com/opencontainers/image-spec v1.1.0-rc4
fca38bcd0a libnetwork/driverapi: make discoverAPI an optional part of the interface
490fee7d45 api/types/filters: fix errors not being matched by errors.Is()
bf48d3ec29 update containerd binary to v1.7.3
a78381c399 update containerd binary to v1.7.2
0d76fc431a libnetwork/remote: newDriver(): return concrete type
3e8fda0a70 windows: fix --register-service when executed from within binary directory
d69b1fdb72 volume/mounts: cleanup tests
da9e44a620 libnet/d/bridge: Allow IPv6 ICC from any IP address
31d09f6ee9 testutils: move Logger interface to testutils
492c09276d tests: Move libnetwork/testutils to internal/testutils/netnsutils
13180c1c49 daemon/list: Drop unused arg from containerReducer
68991ae240 daemon/list: Refactor refreshImage
e5cffc07b3 c8d: Fix TestImagesFilterMultiReference
1d8108b009 c8d: images/json, add image labels to the response
a0bba26919 c8d: Populate RepoTags instead of adding a new image to the list
ad2760ec80 integration: Move image filter tests to integration
4d8e3f54cc c8d/container: Follow snapshot parents for size calculation
5a39bee635 daemon/list: Replace ErrImageDoesNotExist check
7379d18018 c8d/readConfig: Translate c8d NotFound to errdefs
f3b76bc1da daemon: refactor buildNetworkResource to use a struct-literal
a8c0b05052 daemon: split buildDetailedNetworkResources into two functions
8caf974dcd daemon: refactor buildEndpointResource
437ced91ec daemon: refactor buildIpamResources
ca5ac19ea4 daemon: refactor buildPeerInfoResources
02dc5ea720 libnetwork/datastore: remove Store.KVStore()
0f7bf67f83 pkg/plugins: TestGet(): use sub-tests
e1ad4aa002 pkg/plugins: make package-level socketsPath var a LocalRegistry field
5bd44cf3c4 pkg/plugins: remove "load()" function
77c03221c9 pkg/plugins/transport: remove RequestFactory interface
d12ec5f796 pkg/plugins/transport: remove unused Transport interface
dfd331b2c8 pkg/plugins/transport: export httpTransport, and return concrete type
77103c7c03 pkg/plugins/transport: inline newHTTPRequest
4af4adc7ba pkg/plugins: remove LocalRegistry.SpecsPaths()
a44c25c2f1 pkg/plugins: split exported from implementation
954d50b88a plg/plugins: rename vars that collided, or poorly cased
20889dbac6 pkg/plugins: move Plugin.ScopedPath to platform-agnostic file
a5ee0d6af8 libnetwork: don't access KVStore directly in tests
b378669836 libnetwork/datastore: don't access KVStore directly in tests
65978e6982 libnetwork/datastore: cleanup tests
478f4aed63 libnetwork/datastore: ScopeCfg.IsValid(): un-wrap conditions
37cbdeb1f2 libnetwork: remove most of kvstore
d713b7ed45 api/server/router/network: remove unused Backend.FindNetwork
1bc7a2aacd daemon/containerd: ImageService. LoadImage fix stray slash in comment
126a089382 vendor: github.com/opencontainers/runtime-spec v1.1.0
42fa7a1951 Integration test for capabilities
5ef9e2632f libnetwork/datastore: prevent data races in Key()
48cc28e4ef hack/integration: Add TEST_INTEGRATION_FAIL_FAST
f70e1b315f libnetwork/datastore: remove unused ParseKey() utility
704a19b25d libnetwork/datastore: remove DataStore interface
d5b1e43b8f libnetwork/datastore: move MockData to a _test file
0ec73a7892 vendor: github.com/moby/buildkit v0.11.7-dev
64c6f72988 libnetwork: remove Network interface
edafcb2c39 libnetwork/iptables: un-export ErrConntrackNotConfigurable, IsConntrackProgrammable
e57b807a42 libnetwork: Controller.NewNetwork: inline arrangeUserFilterRule()
be8ff186d6 libnetwork: refactor TestErrorInterfaces into a test
9484520327 libnetwork: arrangeUserFilterRule: don't return early
a5f45b47a3 libnetwork: Controller: combine iptablesEnabled and ip6tablesEnabled
483a1933a2 volume: remove the short RRO forms in favor of the long forms
5da84141c4 vendor: github.com/prometheus/common v0.42.0
44ab4d44e0 vendor: github.com/prometheus/procfs v0.9.0
6791b8051a vendor: github.com/felixge/httpsnoop v1.0.3
9d3590f375 vendor: github.com/Microsoft/go-winio v0.6.1
35d180126a vendor: google.golang.org/protobuf v1.30.0
b835c28383 vendor: golang.org/x/oauth2 v0.6.0
3cfc1ffb0a pkg/ioutils: some cleanups in tests
df86d855f5 Dockerfile: update runc binary to v1.1.8
f5e64a9eaa vendor: github.com/containerd/stargz-snapshotter/estargz v0.14.3
d431345bf3 vendor: google.golang.org/protobuf v1.29.1
30916df3d3 vendor: github.com/containerd/ttrpc v1.2.2
4f4dd2d995 vendor: github.com/containerd/go-cni v1.1.9
287130a254 vendor: github.com/cenkalti/backoff/v4 v4.2.0
7145129f27 vendor: k8s.io/klog/v2 v2.90.1
410a52b763 vendor: github.com/fsnotify/fsnotify v1.6.0
741c28ae9f vendor: github.com/containerd/cgroups v1.1.0
e84b72710b vendor: github.com/aws/aws-sdk-go-v2/config v1.18.16
e235763a38 vendor: github.com/aws/aws-sdk-go-v2/credentials v1.13.16
4c30bf1667 vendor: github.com/aws/aws-sdk-go-v2 v1.17.6
cb53ce9f89 vendor: github.com/aws/smithy-go v1.13.5
f463e50719 vendor: github.com/AdaLogics/go-fuzz-headers v0.0.0-20230106234847-43070de90fa1
359ab384fd vendor: google.golang.org/genproto v0.0.0-20230306155012-7f2fa6fef1f4
b11bdb9212 vendor: cloud.google.com/go/logging v1.7.0
64609120d8 vendor: github.com/googleapis/gax-go/v2 v2.7.0
2990defea7 vendor: go.opencensus.io v0.24.0
d7aa47ddb8 vendor: github.com/googleapis/enterprise-certificate-proxy v0.2.3
296040b1f4 vendor: github.com/cespare/xxhash/v2 v2.2.0
033f882314 vendor: golang.org/x/oauth2 v0.5.0
b615d195b2 vendor: github.com/golang/protobuf v1.5.3
c5c8f433e6 vendor: github.com/containerd/typeurl/v2 v2.1.1
2659f7f740 c8d/inspect: Include platform Variant
a8fd1e3135 Dockerfile: update compose to v2.20.1
d78893921a Dockerfile: update buildx to v0.11.2
f3a6b0fd08 c8d: Make sure the content isn't removed while we export
6cba44277f AUTHORS,.mailmap: update with recent contributors
8b843732b3 pkg/chrootarchive: fix FreeBSD build
eaf141c86a c8d/resolveImage: Fix Digested and Named reference
028eab9ebb c8d/inspect: Don't duplicate digested ref
7310a7cd0c ci(buildkit): remove early-return from buildkit-ref
4ecc01f3ad ci(buildkit): remove misleading code from buildkit-ref
48ff8a95cc hack/with-go-mod.sh: warn on stderr
750c441dfd daemon: remove intermediate var
468d6616bf daemon: configureLocalContentStore: return concrete types
375c4eb31c daemon: rename vars that shadowed package-level types
034e7e153f daemon: rename containerdCli to containerdClient
1aa17222e7 quota: remove gotest.tools from testhelpers
a972dbd682 hack/make/.binary: use with-go-mod.sh
5563b09ac2 hack: use Git-free ROOTDIR convention
780e8b2332 hack/d/cli.sh: properly handle errors in curl
12a19dcd84 Dockerfile: improve CLI/rootlesskit caching
235cd6c6b2 Dockerfile(.simple): align APT_MIRROR support
bcea83ab9b Makefile: pass through APT_MIRROR
f8c0d92a22 ci: extract buildkit version correctly with replace-d modules
010c3718e3 vendor: github.com/tonistiigi/fsutil v0.0.0-20230629203738-36ef4d8c0dbb
531dbd7af5 vendor: github.com/containerd/continuity v0.4.1
eb68c5e747 daemon: support using CIDR notation for getting registry hosts
e0b065cc33 daemon: use the registry service config for getting registry hosts
2da589d454 client: return explicit "nil" for no errors, and remove nil check
738b16d873 libnetwork/config: add Config.DriverConfig() and un-export DriverCfg
82bb3d8d2b libnetwork: TestUserChain: use assert.Check and is.ErrorContains
4e709e75da libnetwork: TestUserChain: re-use IPTables instances
c471255153 libnetwork: TestUserChain: don't manually manipulate Controller.cfg.DriverCfg
ddd33c6bbd libnetwork/iptables: move IPTable.LoopbackByVersion() to a utility
aad2dbb93d libnetwork/iptables: GetIptable: validate provided IPversion
47063ca3ae libnetwork/iptables: un-export IPTable.Version
9c2cd65c0d libnetwork/iptables: make some vars local, and move bestEffortLock lock
93d050f504 libnetwork/iptables: NewChain, RemoveExistingChain: validate chain, table
ad0c928ab5 libnetwork/iptables: resetIptables(): don't pass empty table name
1198fe8f6b libnetwork/iptables: un-export FirewalldInit
20900b76f9 libnetwork/iptables: make xLockWaitMsg a const
995da1e51d libnetwork/iptables: group "enum" consts per type
c74a083672 libnetwork/iptables: IPTable.ExistChain(): remove redundant if/else
9f9d57590b libnetwork: getTestEnv(): use literals for options
534858aaed libnetwork/drivers: rewrite some strings to reduce quote-escaping
7c360778bb libnetwork/drivers/bridge: driver.configure: remove redundant err-check
e21ff6c0c9 libnetwork/config: remove IsValidName utility
948f55d0b7 libnetwork/options: remove unused NewGeneric, and use map[string]any
fa5c13542c libnetwork/drivers/bridge: setupBridgeNetFiltering: improve error handling
077049d0b9 client: WithTLSClientConfig: return early if no transport is set
6846c63252 client: WithTLSClientConfig, WithTLSClientConfigFromEnv: inline vars
9d1e690751 client: TestGetAPIPath: don't use un-keyed structs
6552441b46 client: TestClientRedirect: cleanup
8d514f4e2e client: touch-up docs, and user doc-links
c219b09d4a client: Client.postHijacked: use Client.buildRequest
e11555218b client: Client.setupHijackConn: explicitly ignore errors
41f235a2f8 gha: add note about buildkit using older go version
1ead2dd35d update go to go1.20.6
e1db9e9848 testutil: use dummyhost for non-tcp connections
6b7705d5b2 pkg/plugins: use a dummy hostname for local connections
92975f0c11 client: define a "dummy" hostname to use for local connections
2a59188760 client: TestSetHostHeader: don't use un-keyed literals
f93cfb2e31 Support for health start interval to swarm mode
16e6d8af55 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230713153928-bc71908479e5
79c72390b9 integration/container: use subtests for TestAttach
f9e2eed55d integration: Don't env cleanup before parallel subtests
cdac084fb4 Add t.Helper() to the cli test helper functions
c395496e06 testutil: rename variable that collided with import
1370b3c679 client: minor test improvements for requests
f7f0a17ea2 client: TestSetHostHeader: use sub-tests
2cb982b506 pkg/plugins: run tests with t.Parallel()
b39362295a pkg/plugins: don't share plugin server between tests
ee9fe2c838 ci(buildkit): match moby go version for buildkit tests
3379414c76 vendor: github.com/moby/buildkit@v0.11 (0a15675)
5e4878ed2b Dockerfile/shell: install compose cli plugin
ecfa4f5866 ci(bin-image): add SHA-based tags
ce2e6b5cda Bump container-device-interface dependency to v0.6.0
0a126a85a4 ci(bin-image): fix meta step
749d7449f9 ci(bin-image): fix typo
1686540594 ci(bin-image): don't set tags when pushing by digest
83477ce8d0 client: remove custom "headers" type, and use "http.Header" instead
e4ce676d3d client: ServiceCreate, ServiceUpdate: omit "version" header on API >= 1.30
d29240d9eb libnet: Return a 403 when overlay network isn't allowed
21dcbada2d libnet: Return proper error when overlay network can't be created
93853eca94 pkg/fileutils: GetTotalUsedFds(): slight optimization for macOS
c5c977855d registry: session.searchRepositories(): return typed error, and small cleanup
68ebfa2f18 registry: session.searchRepositories(): log actual search URL
27698f1d13 registry: ParseSearchIndexInfo: remove redundant error-handling
a0e1155b28 daemon/containerd: fix assignment to entry in nil map during commit
6b1b71ced4 Disable tls when launching dockerd through hack/make.sh
079a9d4562 Sort unconsumed build arguments before usage
41261ea4ec ci: push bin image to Docker Hub
5b3acc15d1 libnetwork: drop legacy driver cruft
f9a83daebb libnetwork: delete package bitseq
8b167535db libnetwork: delete package idm
7366e44019 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230707182847-6f78b8199b05
a490248f4d daemon: daemon.prepareMountPoints(): fix panic if mount is not a volume
c90229ed9a api/types: move system info types to api/types/system
3aef732e61 Do not drop effective&permitted set
d519bde5da libnet/drivers: stop passing config to drivers...
1980deffae libn: refactor platform driver registration
c87c4b5bbf Add Albin Kerouanton (@akerouanton) as maintainer
0066138379 Add Kevin Alvarez (@crazy-max) as maintainer
d8056ddecd Add Laura Brehm (@laurazard) as maintainer
2216d3ca8d Add health start interval
2ab2503b6c Put integration daemon socket in /run
914888cf8b Improve test daemon logging
51bcf5954f libnet/d/overlay: parse VNI list w/o allocating
96ca669fa4 libnet/d/overlay: extract VNI option parsing...
a940462fc7 libnetwork/drivers/bridge: minor cleanups for iptables funcs
6817b3697b libnetwork/iptables: signalHandler(): use s switch
51bbcdb3c5 libnetwork/iptables: merge Conn.initConnection into newConnection
0921360133 libnetwork/iptables: checkRunning(): use early return
98592608d4 libnetwork/iptables: remove unused Ebtables const
126525c03e libnetwork/iptables: TestReloaded(): minor cleanup
b216669a02 libnetwork/iptables: TestPassthrough(): skip without firewalld
753c190ef9 libnetwork/drivers/bridge: rename vars that collided with type
d1ebe6689f libnetwork/iptables: errors should not be capitalized
afe8d3076f libnetwork/iptables: remove ErrIptablesNotFound
16f80f649b libnetwork/iptables: ChainInfo: don't pass whole IPTable as value
42653787ea libnetwork/iptables: ChainInfo.Output(): explicitly suppress errors
ea4baa24b1 libnetwork/iptables: IPTable.RemoveExistingChain() slight refactor
04e54c6bb0 libnetwork/iptables: IPTable.exists(): return early on error
829374337f libnetwork/iptables: don't use err.Error() if not needed
9717734d1c libnetwork/iptables: IPTable.NewChain() minor cleanups
9bb0e7a5ee libnetwork/iptables: inline some args
564a13285f libnetwork/bitmap: improve documentation
0fc6bf9a6e libn/d/o/ovmanager: assign vxlans using bitmap pkg
f0127f1617 libn/d/o/ovmanager: inline obtainVxlanID method
e97492e579 libn/d/o/ovmanager: drop mutex from network type
6fb6635ceb libn/d/o/ovmanager: make mutexes private fields
cdcb7c28c5 integration: disable iptables in parallel tests
9cee34bc94 pkg/plugins: make unit test less time sensitive
3721a525ce daemon: initBridgeDriver(): pass BridgeConfig, instead of daemon config
b8220f5d0d daemon/config: move MTU to BridgeConfig
11abd0742e dockerd: "--mtu": update description, hide on Windows and warn if set
6944d2dddb libnetwork: TestBoltdbBackend(): use t.TempDir()
2fd88c7ca4 libnetwork: inline store config options
cda187222e libnetwork/config: remove options that were only used in tests
bc80c5d067 libnetwork: rename vars that shadowed with pkg vars and imports
332ffe8d74 libnetwork/networkdb: NetworkDB.Watch(): remove unused "key" argument
4c4149a09c libnetwork/internal/kvstore: remove unused Delete()
4d09e60f5b libnetwork/internal/kvstore: remove unused Watch() method
c14a9f5b3d libnetwork/datastore: un-export Mutex
e21e802fc6 libnetwork/datastore: remove unused DeleteTree() method
58d2f21dae libnetwork/datastore: remove unused PutObject(), DeleteObject()
a3b0181503 libnetwork/datastore: remove Watch(), Watchable(), RestartWatch()
2409a36e29 libnetwork/datastore: cache.get(): remove unused "key" argument
824abbf8d9 libnetwork/datastore: remove redundant datastore.sequential
e9b6965079 libnetwork/datastore: remove unused datastore.Active()
b32e41f016 libnetwork/internal/kvstore/boltdb: un-export Mutex
7e7c7bbc17 libnetwork/internal/kvstore/boltdb: BoltDB.List(): minor cleanup
95b96eebdd libnetwork/internal/kvstore/boltdb: BoltDB.Get(): don't shadow error
fb61b07bcf libnetwork/internal/kvstore/boltdb: BoltDB.Exists(): fix error handling
c94ccd4207 libnetwork/internal/kvstore/boltdb: minor cleanup/refactor
acfd3934a7 libnetwork/internal/kvstore: AtomicDelete(): remove unused "deleted" return
b576682bdc libnetwork/internal/kvstore: AtomicPut(): remove unused "created" return
c37b58bbc3 libnetwork/internal/kvstore: remove unused WriteOptions
e515bef423 libnetwork/internal/kvstore: remove unused WatchTree and NewLock methods
a373983a86 libnetwork/internal/kvstore: fix some linting issues
05988f88b7 libnetwork/internal/kvstore: remove unused Config options
ec11aea880 pkg/jsonmessage: use string-literals for easier grep'ing
fded42c3bd pkg/ioutils: use string-literals for easier grep'ing
1da079f211 pkg/idtools: use string-literals for easier grep'ing
84000190d3 opts: use string-literals for easier grep'ing
ddec605aef integration: use string-literals for easier grep'ing
96a1c444cc libnetwork: use string-literals for easier grep'ing
0db4a32b9c daemon/cluster: use string-literals for easier grep'ing
4e69e16fde client: use string-literals for easier grep'ing
c3d533f37f cli/debug: use string-literals for easier grep'ing
02815416bb daemon: use string-literals for easier grep'ing
6331a3a346 integration-cli: use string-literals for easier grep'ing
2f61620339 builder/builder-next: use string-literals for easier grep'ing
202907b14c builder/dockerfile: use string-literals for easier grep'ing
a1c9a686b0 api: use singleflight for /info endpoint
8846c7e0ae daemon/cluster/executor/container: fix mixed pointer/value receiver
8ea78b34ab rename some variables that shadowed imports or package types
9f4acceb6a remove redundant alias for libnetwork/datastore imports
cffe563d4d pkg/system: remove windows stubs for MkDev/MkNod
6b6fed06b1 integration: don't use pkg/system MkNod/mkDev
94c975e25a api: info: don't use ad-hoc type for compatibility with old api versions
9ffca1fedd libnetwork/drivers/remote: rename vars that collided
f6258f70cb docs: api v1.28 - v1.40: add missing "force" query arg on plugin disable
892e9f2c23 docs: api v1.41: add missing "force" query arg on plugin disable
a4bdfb963f docs: api v1.42: add missing "force" query arg on plugin disable
85ccb25eb8 docs: api v1.43: add missing "force" query arg on plugin disable
aba8e04ab1 docs: api: amend changelog for API 1.28 for "force" option
7055244547 docs: api v1.32 - v1.40: remove outdated information from ServerVersion
ed0dbb8518 docs: api v1.41: remove outdated information from ServerVersion
b770a50dee docs: api v1.42: remove outdated information from ServerVersion
18d77ff455 docs: api v1.43: remove outdated information from ServerVersion
92f1ddaf0a api: remove outdated information from ServerVersion
e8f206972a docs: api v1.42: remove "ClusterStore" and "ClusterAdvertise" fields
e58a60902c docs: api v1.43: remove "ClusterStore" and "ClusterAdvertise" fields
3c905d0db9 api: remove "ClusterStore" and "ClusterAdvertise" fields
e4d809b2b0 vendor: github.com/tinylib/msgp v1.1.8
f379af6d17 vendor: github.com/containerd/cgroups/v3 v3.0.2
e638351ef9 c8d/prune: Handle containers started from image id
a93298d4db c8d/prune: Exclude dangling tag of the images used by containers
a6d5db3f9b c8d/softDelete: Deep copy Labels
2b0655a71a c8d/softDelete: Extract ensureDanglingImage
a96e6044cc testutil/environment: Add GetTestDanglingImageId
13472c6cf1 daemon/config: remove unused CommonConfig.Context
40908c5fcd libnetwork/drivers: inline capabilities options
97285711f3 libnetwork/drivers/overlay: Register does not require DriverCallback
a718ccd0c5 libnetwork/drivers: remove unused "config" parameters and fields
264dbad43a gha: don't fail if no daemon.json is present
ec79d0fc05 pkg/fileutils: GetTotalUsedFds(): use fast-path for Kernel 6.2 and up
eaa9494b71 pkg/fileutils: GetTotalUsedFds: reduce allocations
03390be5fa pkg/fileutils: add BenchmarkGetTotalUsedFds
252e94f499 pkg/fileutils: GetTotalUsedFds(): don't pretend to support FreeBSD
7747327561 AUTHORS,.mailmap: update with recent contributors
60d2eeaa5b MAINTAINERS: update my email
a764cd5a40 pkg/chrootarchive: format code with gofumpt
210932b3bf daemon: format code with gofumpt
e236994b76 daemon/snapshotter: format code with gofumpt
9213e35011 daemon/containerd: format code with gofumpt
4b3900a257 daemon/logger: format code with gofumpt
050de1e4f6 daemon/logger/journald: format code with gofumpt
a083677af2 daemon/logger/local: format code with gofumpt
74db0e9339 daemon/logger/loggertest: format code with gofumpt
48124bac18 daemon/logger/loggerutils: format code with gofumpt
011a32a4ad daemon/logger/gelf: format code with gofumpt
7ed5a30b5c daemon/logger/splunk: format code with gofumpt
bb5a1eb99d daemon/logger/jsonfilelog: format code with gofumpt
1437037ed2 daemon/logger/awslogs: format code with gofumpt
f930559076 pkg/stdcopy: format code with gofumpt
1216328c2d pkg/plugins: format code with gofumpt
651086d1d9 pkg/jsonmessage: format code with gofumpt
1291bbfa50 pkg/capabilities: format code with gofumpt
79af23e1ea pkg/ioutils: format code with gofumpt
ac1514abf4 reference: format code with gofumpt
99968eec3f restartmanager: format code with gofumpt
f18ac2d0bc quota: format code with gofumpt
b2663a0f73 layer: format code with gofumpt
83b2daca6a plugin: format code with gofumpt
169fab5146 profiles/seccomp: format code with gofumpt
4175a550fd libcontainerd: format code with gofumpt
091991606a opts: format code with gofumpt
784ba59a08 registry: format code with gofumpt
dd5ea7e996 libnetwork: format code with gofumpt
bba21735bf libnetwork/ipamutils: format code with gofumpt
0b75c02276 libnetwork/resolvconf: format code with gofumpt
801cd50744 libnetwork/portallocator: format code with gofumpt
6187ada21f libnetwork/options: format code with gofumpt
882f7bbf1f libnetwork/osl: format code with gofumpt
32e716e848 libnetwork/networkdb: format code with gofumpt
65e2149b3e libnetwork/netutils: format code with gofumpt
1cd937a867 libnetwork/etchosts: format code with gofumpt
540e150e4e libnetwork/cmd: format code with gofumpt
fffcbdae4c libnetwork/iptables: format code with gofumpt
6f3fcbcfe1 libnetwork/ipam(s): format code with gofumpt
eb6437b4db libnetwork/datastore: format code with gofumpt
defa8ba7b4 ibnetwork/bitmap: format code with gofumpt
f349754b55 libnetwork/bitseq: format code with gofumpt
3af2963c74 libnetwork/drvregistry: format code with gofumpt
dc17f5e613 libnetwork/drivers/remote: format code with gofumpt
485977de57 libnetwork/drivers/windows: format code with gofumpt
2cc5c2d2e6 libnetwork/drivers/overlay: format code with gofumpt
e74028554e libnetwork/drivers/macvlan: format code with gofumpt
7b02ccda86 libnetwork/drivers/ipvlan: format code with gofumpt
17a35bc645 libnetwork/drivers/bridge: format code with gofumpt
d2a6956afb daemon/graphdriver: format code with gofumpt
8d923c60b9 daemon/config: format code with gofumpt
425ccb1241 runconfig: format code with gofumpt
c0edf0861b integration/system: format code with gofumpt
5cc1c6eca0 integration/service: format code with gofumpt
bb5ace2efb integration/plugin: format code with gofumpt
9bd3e011e1 integration/internal: format code with gofumpt
89a4e6b889 integration/container: format code with gofumpt
846bcd7dd1 distribution: format code with gofumpt
b7f5db432f daemon/images: format code with gofumpt
2d12dc3a58 daemon/cluster: format code with gofumpt
316c7331eb pkg/parsers: format code with gofumpt
fb017754e1 pkg/system: format code with gofumpt
ee2ac6c205 cmd/dockerd: format code with gofumpt
47276bdb28 cmd/docker-proxy: format code with gofumpt
0af6d9e291 client: format code with gofumpt
3146ecbae6 api/types: format code with gofumpt
b9833a2059 builder: format code with gofumpt
540d6539be builder/remotecontext: format code with gofumpt
3e0565e17c builder/dockerfile: format code with gofumpt
9d4abbbc30 builder/builder-next: format code with gofumpt
6592646632 api/server: format code with gofumpt
5e9a354ff1 pkg/tarsum: format code with gofumpt
2aac054f52 pkg/authorization: format code with gofumpt
f7552f1de4 pkg/archive: format code with gofumpt
7c697f58f2 Makefile: remove unused BUILD_APT_MIRROR
a1d2132bf6 Dockerfile: use default apt mirrors
225e2562c9 integration-cli: format code with gofumpt
a31411c679 testutil: format code with gofumpt
4c281fb29a volume: format code with gofumpt
a08abec9f8 Update dockerd to support JSON logging format
b335e3d305 seccomp: add name_to_handle_at to allowlist
6d3bcd8017 c8d/images: handle images without manifests for default platform
8caf63896c docs: document more buildx targets
647c2a6cdd Restore active mount counts on live-restore
d8bc5828cd gha: Setup Runner: add missing sudo
fdc9b7cceb remove name_to_handle_at(2) from filtered syscalls
9f6dbbc7ea Dockerfile: make cli stages more resilient against unclean termination
19bd0730ef vendor: github.com/moby/swarmkit/v2 v2.0.0-20230627115642-ad0f3ae162fa
e2dad6c3ff Revert "Temporarily skip DCO check"
1741771b67 Skip cache lookup for "FROM scratch" in containerd
7d7225fae6 Temporarily skip DCO check
e60cda7051 libnetwork/internal/kvstore/boltdb: fix linting issues
d18b89ced6 libnetwork/internal/kvstore: remove some unused code
b873d70369 replace libkv with local fork
5d25143ef3 libnetwork/kvstore: rewrite code for new location
dd1c95edcd integration/windows: Unskip some kill tests
3c1de2e667 pkg/homedir: deprecate Key() utility
ddd9665289 pkg/homedir: deprecate GetShortcutString() utility
6876e45f9e pkg/homedir: unify implementations
0aca7f2a0d pkg/homedir: use os.UserHomeDir()
0215a62d5b integration-cli: don't use pkg/homedir in test
76d8bfdff4 testutil/environment: remove Execution.OSType field
325786430b testutil/environment: remove unused TEST_OSTYPE env-var
0fe2ac0437 testutil/environment: rename var that collided with import
74da6a6363 Switch all logging to use containerd log pkg
cdb1293eea Fix missing Topology in NodeCSIInfo
165dfd6c3e daemon: fix restoring container with missing task
786c9adaa2 daemon: fix double-unlock in health check probe
3b28a24e97 daemon: fix panic on failed exec start
e010223186 contrib/busybox: Update to FRP-5007-g82accfc19
21e50b89c9 builder: pass host-gateway IP as worker label
21c0a54a6b c8d: mark stargz as requiring reference-counted mounts
4d831949a7 Dockerfile: update buildx to v0.11.0
fc94ed0a86 don't cancel container stop when cancelling context
19d860fa9d testing: temporarily pin docker-py tests to use "bullseye"
cfa08f8366 builder-next: enable OTLP tracing for history records
98a44bb18e update go to go1.20.5
3ba67ee214 daemon: registerName(): don't reserve name twice
2a6ff3c24f Use OCI "History" type instead of inventing our own copy
59b5c6075f pkg/rootless: remove GetRootlessKitClient, and move to daemon
3cc5d62f8a run `getent` with a noop stdin
71589848a0 daemon: test runtimeoptions runtime options
a6048fc792 client: add WithUserAgent() option
197b0b16e3 vendor: github.com/sirupsen/logrus v1.9.3
038a361a91 daemon/cluster: convert new BindOptions
d41d2c3751 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230607145746-36334ed1876
32d58144fd c8d: Use reference counting while mounting a snapshot
8a094fe609 daemon: ensure OCI options play nicely together
dea870f4ea daemon: stop setting container resources to zero
8c4dfc9e6a vendor: github.com/rootless-containers/rootlesskit v1.1.1
0b1c1877c5 update RootlessKit to v1.1.1
9ff169ccf4 daemon: modernize oci_linux_test.go
0f9c8e684a Dockerfile: Move dockercli to base-dev
5433b88e2d hack/cli.sh: Quiet origin cleanup
800ea039ec contrib/check-config: move xt_bpf check to overlay section
49f76a34b5 Dockerfile/shell: Install buildx cli plugin
17c99f7164 Dockerfile: Use separate cli for shell and integration-cli
1910fdde81 contrib/check-config: check for xt_bpf
d63569c73d builder-next: Set moby exporter as default
4295806736 c8d/handlers: Handle error in walkPresentChildren
ff2342154b Dockerfile: use COPY --link for source code as well
0f6eeecac0 daemon: consolidate runtimes config validation
d222bf097c daemon: reload runtimes w/o breaking containers
0b592467d9 daemon: read-copy-update the daemon config
742ac6e275 daemon: make config reloading more transactional
038449467e Update BuildKit registry config on daemon reload
982e4fb448 api/server: get features from a callback fn
d099e47e00 containerd: add c8d version and storage-driver to User-Agent
a6da1480b5 dockerversion: DockerUserAgent(): allow custom versions to be passed
9a1f2e6d7c dockerversion: remove insertUpstreamUserAgent()
ff40d2d787 dockerversion: simplify escapeStr()
eb9a5392bc dockerversion: add a basic unit-test
66137ae429 containerd: set user-agent when pushing/pulling images
06aaf87aab vendor: github.com/moby/swarmkit/v2 v2.0.0-20230531205928-01bb7a41396b
637ca59375 Dockerfile: use COPY --link to copy artifacts from build-stages
4d3238dc0b c8d/load: Don't unpack pseudo images
b08bff8ba3 c8d/load: Use walkImageManifests
5210f48bfc c8d/list: Use walkImageManifests
fabc1d5bef c8d: Add walkImageManifests and ImageManifest wrapper
1178319313 libn: fix resolver restore w/ chatty 'iptables -C'
50eb2d2782 libnetwork: fix sandbox restore
18bf3aa442 libnetwork: log why osl sandbox restore failed
ed32f5e241 Make sure the image is unpacked for the current snapshotter
d58df1fc6c Update blogpost URL
44124ab6b0 builder/remotecontext: remove CachableSource, NewCachableSource
5efe72415d remove Dockerfile.e2e
fd72b134d5 update generated files
735537d6b1 replace gogofast with gogofaster extension
1eaea43581 fix protos and "go generate" commands
7daaa00120 hack: generated files update and validation
f1ca793980 use tools build constraint for proto dependencies
1e55ace875 Add oci index and layout files to exported tars
487ea81316 Fix npe in exec resize when exec errored
9a692a3802 libn/d/overlay: support encryption on any port
e410e27547 builder/remotecontext: remove mimeTypes struct, use consts
b42e367045 vendor: github.com/opencontainers/image-spec v1.1.0-rc3
37d4b0bee9 builder/remotecontext: deprecate CachableSource, NewCachableSource
fb7ec1555c libcontainerd: work around exec start bug in c8d
79ca6630d4 vendor: github.com/moby/buildkit v0.11.7-0.20230525183624-798ad6b0ce9f
5045a2de24 Support recursively read-only (RRO) mounts
3512b04093 vendor: github.com/containerd/go-runc v1.1.0
b9b8b6597a c8d/inspect: Fill `Created` time if available
f17c9e4aeb c8d: ImageService.softImageDelete: rename var that collided with import
df5deab20b c8d: ImageService.softImageDelete: use OCI and containerd constants
9b9c5242eb daemon: lock in snapshotter setting at daemon init
53d1b12bc0 hack/make/.binary: don't use "netgo" when building Windows binaries
a7bc65fbd8 c8d/pull: Use same progress action as distribution
6506579e18 integration: Add TestImageInspectEmptyTagsAndDigests
a93aadc2e6 hack: Rename .ensure-emptyfs to .build-empty-images
3a31f81838 hack/ensure-emptyfs: Create dangling image
4373547857 Add testenv.UsingSnapshotter utility
d3d2823edf Dockerfile: temporarily skip CRIU stage
86108812b8 vendor: github.com/mistifyio/go-zfs/v3 v3.0.1
ddd67b2535 Make image save more like the OCI layout for blobs
871cf72363 libnetwork: check for netns leaks from prior tests
6d79864135 libnetwork/osl: restore the right thread's netns
d4f3858a40 libnetwork: leave global logger alone in tests
0cc6e445d7 libnetwork: make resolver tests less confusing
411a9e1b86 daemon: remove devicemapper driver-warnings
424a1c5d21 daemon: remove warning for overlay/overlay2 without d_type
ab35df454d remove pre-go1.17 build-tags
34964c2454 c8d/list: Show layerless images
61757032da d/graphdriver/vfs: fix unit test
6e4bd3bbc2 vendor: github.com/spf13/cobra v1.7.0
6690d2969c pkg/archive: bail if setting xattrs is unsupported
0cdfd5f275 pkg/system: return rich errors from L(g|s)etxattr
41356227f2 libnetwork: just forward the external DNS response
6d139e5e95 build: use daemon id as worker id for the graph driver controller
668af4be82 ci(bin-image): distribute build across runners
1be26e9f0c api/inspect: Fix nil RepoTags and RepoDigests
f450ea64e6 fix: `docker pull` with platform checks wrong image tag
f3645a2aa3 reorder load funcs to match newServiceConfig()'s order
3b15156e4d add mirror to daemon reload test for insecure registries
0d8087fbbc Remove Upstart scripts
967c7bc5d3 api/server: allow empty body for POST /commit again
3ceb3810d7 client: don't marshal typed nils in request body
ae737656f9 Remove Upstart and cgroups bits from Debian sysvinit script
c2630c93f2 Update vendoring
dedf5747cc Remove need to set Capabilities for cdi driver
7ec9561a77 Add support for CDI devices to docker daemon under linux
5a200ade7c Rename daemon/devices_liunx.go to daemom/devices.go
484785456c update containerd binary to v1.7.1
348a79958d c8d: The authorizer needs to be set even if AuthConfig is empty
2f0ba0a7e5 more robust dockerd-rootless-setuptools.sh
135d8f04f9 ci: bin-image workflow
ae1ca67178 bin-image bake target
3309e45ca1 c8d: Don't create authorizer for empty AuthConfig
2ad499f93e c8d/authorizer: Default to docker.io
bd6868557d c8d/builder: implement cache
7821d2d788 vendor: github.com/docker/distribution v2.8.2
e46674b6a7 c8d: implement classic builder
8d76acfe6c testutil: replace uses of client.IsErrNotFound
56fb56ccf0 integration: update error-assertions in tests
0538cdd226 integration-cli: update error-assertions in tests
66ff1e063e client: update error-assertions in tests
685b3d820a client: make IsErrNotFound an alias for errdefs.IsNotFound
9e817251a8 libnetwork/docs: fix broken link
17882ed614 libnetwork: update example in README.md
4603b6d6b6 c8d: fix image history for dangling images
4e0319c878 [chore] clean up reexec.Init() calls
9e43c11480 AUTHORS: regenerate
5fee4439a0 .mailmap: update with my new email
e8be792130 c8d: fix missing image history
e3e715666f pkg/aaparser: deprecate GetVersion, as it's no longer used
71d7908656 added alias validation
ecaab085db profiles/apparmor: remove use of aaparser.GetVersion()
f445ee1e6c contrib/apparmor: remove remaining version-conditionals (< 2.9) from template
307b09e7eb fixing consistent aliases for OCI spec imports
2ad37e1832 daemon: handleContainerExit(): add execDuration in attributes
cad97135b3 c8d: implement missing image delete logic
de363f1404 daemon: handleContainerExit(): use logrus.WithFields
fb96b94ed0 daemon: remove handling for deprecated "oom-score-adjust", and produce error
316781be48 api/types/container: remove deprecated ContainerChangeResponseItem
9c14f98583 api/types: remove deprecated AuthConfig
55608d8381 pkg/system: remove deprecated IsProcessAlive, IsProcessZombie, KillProcess
a3b12ec420 pkg/system: remove deprecated DefaultPathEnv()
dc76b90705 pkg/system: remove deprecated MemInfo, ReadMemInfo()
7d0488b11e pkg/ioutils: remove deprecated TempDir() alias
152c482fee pkg/platform: remove deprecated OSType const
913b0f51ca API: omit deprecated VirtualSize field for API v1.44 and up
fdc7a78652 docs/api: version-history: also mention /system/df for VirtualSize
fd0b109bf7 API: bump version to 1.44
43b1afb2cf make chownComment easy to read
7665feeb52 hack: enable Go modules when building dockerd and docker-proxy
5400366b90 Set BuildKit version using buildinfo
c33b31116c daemon/graphdriver: remove isDeprecated() utility
dc11d2a2d8 remove deprecated devicemapper storage-driver
1e195acee4 libn/d/overlay: stop programming INPUT ACCEPT rule
eb0edeafdd api: swagger: add missing "force" query arg on plugin disable
ea4dd1bbf6 boltdb/bolt is not maintained. Used bbolt
6c0e0d6250 Allow client to set boltdb timeout
a0f6d0798a Do not return boltdb bucket not found error
deb21faad0 Add support for etcd authentication
cc0ed694ee fix typo
fbdb24ec6a Fix typo in error text
dcf8828165 Return store.ErrKeyExists on AtomicPut
002f9c37ca Synchronize boltbd libkv apis
15e5d4067a Change unsupported call error in boltdb backend to use general store error
3b5fb3ec87 Remove docs in libkv.go
2603af65e5 Migration to the new Etcd client
f06f78e638 boltDB AtomicDelete fails for non-existent key
0b81042dc3 Add transient connection option to bolt db
7225aba3af add TTL to consul lock using store.LockOptions and add tests for the Lock ttl behavior
1f9cf17713 Fix AtomicPut panic if previous KVPair is not nil and key not exists in boltdb
599deba8c7 nits and refactor for etcd tls config
cc9e627f8e Add etcd TLS client code and update README.md. Signed-off-by: Adam Thornton <adam.thornton@gonkulator.io>
64eb25dff9 Honoring ConnectionTimeout in boltdb
3ec6dfa346 Refactor libkv to not directly import storage backends
f817826408 Create dir first before opening data file of boltdb
29af4e0f27 BoltDB backend support for libkv
06f01227c5 change heartbeat/ephemeral combination to use a single ttl field
f26e4f4c52 Minor fix of store comment
6b43181cfa Notify user of supported backend storage
a961b70b2b Remove unused type WatchCallback
06151b8a4d add top-level godoc: sample some parts of the README
a2d4e1c246 API Change: AtomicPut with previous = nil is create.
fcb98254b1 Use Backend type for stores
79c320c1cf remove testify dependency through mock package
48f5dca2ce Remove logging in library
dbc1a6fa9a refactor and move store backends in sub-packages
Bumping docker-cli to version v25.0.0-7-g01f933261, which comprises the following commits:
21c12847b docs: move base command to docker.md
22e1f2cbf docs: fix broken links to alias pages
68abf14c1 vendor: github.com/docker/docker v25.0.0
9e1e07657 docs: add documentation for CDI
cdb1c105f vendor: github.com/docker/docker v25.0.0-rc.3
3df149545 docs(plugins): fix typos and formatting
22bbdc798 docs: add "builder" key to full daemon.json example
d2efc5b09 deprecate old API versions (1.23 and lower)
508346ef6 plugins: fix plugin socket being closed before use
f722e07c6 gha: update to use macos-12 runners
5f6c55a72 plugins: don't handle signal/notify if TTY
26560ff93 Revert "plugins: run plugin with new process group ID"
37f551566 docs: fix broken link to tmpfs (missing anchor)
b35361e8d docs: regenerate stubs for non-canonical commands
dfa2930af ci: Add bin-image workflow
21c253605 vendor: golang.org/x/sys v0.16.0
a6774de68 docs: rename cli reference aliases to canonical
cf9d3692a docs: remove empty cli reference stubs
d868dca00 vendor: github.com/docker/docker v25.0.0-rc.2
1609916f2 Revert "Dockerfile/binary: Output the binary directly"
ff25c4334 Revert "ci: Add bin-image workflow"
ef5e5fa03 plugins: run plugin with new process group ID
6d0b329b0 cli-plugins: use non-abstract socket on darwin
dbf992f91 cli-plugins: move socket code into common package
8b6ffbdf7 vendor: github.com/containerd/containerd v1.7.12
ccc7ad2f2 Dockerfile: update buildx to v0.12.1
fdcb78a0f Dockerfile: update docker compose to v2.24.0
15d4c99f3 ci: Add bin-image workflow
ecf338f43 scripts/build: Handle VERSION containing git ref
6ad07f2a4 Dockerfile/binary: Output the binary directly
0e37dd49f cmd/docker: registerCompletionFuncForGlobalFlags: take store.Store as argument
c0a0b05dc cli-plugins: helloworld: rename var that collided with import
11b2e871b cmd/docker: move main() to the top
4dc2c895b cli-plugins/manager: getPluginDirs: take ConfigFile as argument
79992184e docs: dockerd: rephrase environment-variables intro
4d2b4e7fb docs: dockerd: fix stray column-separateor in env-var table
a5e5563f1 vendor: github.com/docker/docker-credential-helpers v0.8.1
4f4950886 update to go1.21.6
26f59b2f6 cli/compose/loader: use golden.Assert() for readability
9db56ea2f vendor: golang.org/x/tools v0.16.0, golang.org/x/mod v0.14.0
efae960e5 vendor: golang.org/x/net v0.19.0
996cce909 vendor: golang.org/x/sync v0.6.0
4b10e5525 vendor: github.com/google/go-cmp v0.6.0
1ebc233b4 vendor: github.com/creack/pty v1.1.21
b4fe77a12 vendor: github.com/docker/go-connections v0.5.0
909111b3a docs: fix incorrect heading levels in docker run reference
b43ea528b vendor: github.com/docker/docker v25.0.0-rc.1
6d0aa0a52 cli/command/container: parseSecurityOpts: fix --security-opt seccomp=builtin
9be600a97 Docker build command docs refresh
878b1c55b docs: add links to volume ls, network ls, stack ps formatting examples
f0edc7953 change back nolint -> nosec
c1016c05c vendor: github.com/mitchellh/mapstructure v1.5.0
58524685d vendor: github.com/mattn/go-runewidth v0.0.15
1e38fc3b9 vendor: github.com/klauspost/compress v1.17.4
0fa3a365f vendor: github.com/docker/docker v25.0.0-beta.3
d1a51582e update authors and mailmap
60af715d6 id and name filter in service ls is the prefix not a part
90a1887d3 Fix wrong docker run command
64e9cadd1 Add networking reference link
924ec7f4c docs/deprecated: update "oom-score-adjust" status for daemon
800a728e1 deprecated: fix anchor and add missing version
c1c6198ae docs: deprecate short cid in Aliases field
336787c50 vendor: github.com/docker/docker 7bc56c53657d (v25.0.0-dev)
53a129e3d docs(plugins): remove Weave engine network plugin
3ecd6b6c7 docs(plugins): remove inline CSS markup
a4d805f9c docs(plugins): add Kathará engine network plugin
1dcd5487f docs(plugins): update Docker Store to Docker Hub
46355a194 export RunStat, StatsOptions, and add Filters option
e9a5590ad cli/command/container: statsOptions: add GoDoc
b642078c8 prevent "docker stats" from hanging if the initial API call fails
633ba88c2 cli/command/container: runStats(): move code to where it's used
5ed6c128e cli/command/container: runStats(): don't register unused event handlers
2389768fb cli/command/container: runStats(): minor cleanup and fixes
4d434dc69 vendor: github.com/docker/docker 388216fc45ab (v25.0.0-dev)
5eac07b10 update typos and style in docs
6fd4cff1f docs: minor editorial improvements, typo fixes
0de84f019 vendor: golang.org/x/crypto v0.17.0
3cf0bf84a vendor: golang.org/x/crypto v0.16.0
36d4db27d vendor: golang.org/x/text v0.14.0
3d70100d5 vendor: golang.org/x/sys v0.15.0
70216b662 add //go:build directives to prevent downgrading to go1.16 language
88e647435 build(deps): bump github/codeql-action from 2 to 3
ca9ff8daf docs: run-reference: use table for health options
77e67a0f9 docs/deprecated: mark logentries logging-driver as "removed"
8f13b0416 cli/command: remove "logentries" driver from tests and fixtures
d79dd7c53 docs, man: remove logentries logging-driver
b14094df5 contrib/completion: remove logentries logging-driver
f63065a58 vendor: github.com/docker/docker f3cc93630ed8 (v25.0.0-dev)
fa1914426 vendor: github.com/docker/docker v25.0.0-beta.2
e81a66661 docs/deprecated: mark logentries log-driver for removal
f8dd8f074 docs: refresh --publish, add --publish-all
5400a48aa Plumb contexts through commands
aec7ec7f6 vendor: github.com/docker/docker 92884c25b394 (v25.0.0-dev)
0a3a16d2b vendor: github.com/containerd/containerd v1.7.11
54c103aff vendor: upgrade OpenTelemetry to v1.19.0 / v0.45.0
d49970590 vendor: github.com/felixge/httpsnoop v1.0.4
7af509c7f cli/command: merge DockerCliOption and InitializeOpt types
1554ac3b5 cli-plugins: terminate plugin when CLI exits
2e394eb5f docs: rewrite section on working directory
4a8451455 docs: rewrite section on setting user id
259aa9005 docs: rewrite section on filesystem mounts
52716c813 docs: move --tmpfs to docker run reference
5ede4c82a docs: minor improvements to the healthcheck section
7585d66a0 docs: rewrite section on overriding environment variables
3eeac2059 docs: rewrite section on exposing ports
0a94d85cd docs: fix typo in "network create" docs
b01e28752 docs: rewrite section on default entrypoint
c695ad9d7 docs: rewrite section on overriding image defaults
4a6cde885 docs: move --log-driver to docker run reference
72df1960e docs: move --cgroup-parent to docker run reference
9e75a4cf6 docs: move --init to docker run reference
92c664b0d docs: move info about --security-opt to docker run reference
f98444490 docs: move --rm to docker run reference
32189ca27 docs: improve description about container exit codes
dbffa0d12 docs: move --restart to docker run reference
73620975d docs: simplify container networking intro
5dd6e9a4d docs: move --ipc to docker run reference
ff62bf47b docs: move --uts to docker run reference
d66fe7881 docs: move --pid to docker run reference
03dc8832e docs: improve docs on container identification
fad227d3f docs: move info about fg/bg flags to run reference
2f48f41fc docs: improve introduction to docker run
3f519b824 docs/deprecated.md: add version for "-g" / "--graph" removal
6dc92b667 docs/deprecate.md: add version for devicemapper removal to table
a682b8e65 Permit '=' separator and '[ipv6]' in --add-host
626e64ccf build(deps): bump actions/setup-go from 4 to 5
0cf7bff0b vendor: github.com/docker/docker 4046ae5e2fd4 (v25.0.0-dev)
bdb45a9c2 update to go1.21.5
afc62d8d1 update to go1.21.4
8bbc97c86 prune: fix build cache prune warning
e93ec2f6a Fix typo in dockerd reference documentation
5a0470888 vendor: github.com/docker/docker 029519a1498b (v25.0.0-dev)
aa9fdb4dd vendor: github.com/gorilla/mux v1.8.1
a431b1dda exec.md: remove misleading part
b62b5d48f Readme: remove reference to "Docker EE"
354f62f0c docs: reference/commandlin/cli: remove redundant italic
e2626200a docs: remove "{% raw %}" / "{% endraw %}" Jekyl (liquid) leftovers
174cbb588 docs/man: fix -name flag with single hyphen
539537ddf vendor: github.com/docker/docker cfdca8dc1d4c (v25.0.0-dev)
6a74a63ee Dockerfile: update ALPINE_VERSION to 3.18
35c6e915d Dockerfile: update buildx to v0.12.0
6468c63c8 docs: update debian examples to use bookworm
0d95231cc Dockerfile: use "debian" in stages instead of distro name
c5194a9e5 Dockerfile: update to debian bookworm
7be05a6f4 mount: bind-recursive: remove boolean convenience values
dad4a1962 vendor: github.com/docker/docker v25.0.0-beta.1
30d36e977 templates: linting: fix "error return value is not checked (errchkjson)
4e2477f85 golangci-lint: enable more linters
0e73168b7 golangci-lint: revive: enable use-any
9c0c49a5f golangci-lint: revive: enable empty-lines
8e9aec690 golangci-lint: revive: enable import-shadowing
f387558b5 Add zstd as supported in load command doc
f4962c65b vendor: github.com/Microsoft/hcsshim v0.11.4
391668f57 golangci-lint: enable perfsprint linter
8bbdb93cf golangci-lint: enable nilerr linter
7e9d2c78c golangci-lint: enable dupword linter
2d61f70f0 golangci-lint: govet: enable shadow check
606cbd60a golangci-lint: enable predeclared linter
8661552e7 golangci-lint: enable thelper linter
8e98c765f cli/command/system: fix deprecated comments (gocritic)
9d7e21be2 cli/command/manifest: rename vars that collided with import
3f0c189e4 linting: address slice-append issues found by gocritic
a2c9f3c6c linting: address else/if/elseif statements found by gocritic
888df0987 linting: address assorted issues found by gocritic
d0dee3ceb linting: Consider pre-allocating sliceVar (prealloc)
efbcdce9b linting: cli/command/trust: unusedwrite: unused write to field Hashes (govet)
580ebf41a dockerfiles: update golangci-lint to v1.55.2
8642b3c35 update authors and mailmap
685d1baa0 vendor: github.com/docker/docker 34e923e3e31b (v25.0-dev)
f0816bf67 opts: remove unused IPOpt option
b0ee27d65 opts: ValidateIPAddress: improve error, godoc, and tests
b24e7f85a Fix setting ServerAddress property in NativeStore
f65d4a479 vendor: github.com/docker/go-connections fa09c952e3ea (v0.5.0-dev)
b7c31c36f not actually a maintainer
f9622b659 vendor: update go-connections for TLS 1.3 support
4cf1c50ad Revert "update to go1.21.4" due to regressions / breaking changes.
6472dabe4 update to go1.21.4
3cd77c9d5 cli/command/container: ForwardAllSignals: rewrite to use ContainerAPIClient
a2ec50a46 make `container` an explicit, required parameter
a4abe42cb make runAttach public and allow passing context
2b1f5a2e3 TestParseWithMacAddress: check endpoint-specific MacAddress field
8f59f841a cli/command/container: mustParse: return network.NetworkingConfig
d46de7087 vendor: github.com/docker/docker c14694a424ab (v25.0.0-dev)
efc923679 --env-file about comments doc updated Signed-off-by: Saurabh Kumar <saurabhkumar0184@gmail.com>
07338fe96 docs: update redirect metadata for hugo
0239b8fd9 vendor: github.com/spf13/cobra v1.8.0
848fe622c docs: add default-network-opt daemon option
54eee599b Update container-device-interface to v0.6.2
e08866098 vendor: github.com/docker/docker ed1a61dcb789 (v25.0.0-dev)
13d34b21e vendor: github.com/containerd/containerd v1.7.8
aa24d611b vendor: google.golang.org/grpc v1.58.3
784149382 vendor: golang.org/x/tools v0.10.0
1a0ae8c6b vendor: golang.org/x/mod v0.11.0
39b1d37b3 Update CodeQL workflow
663a89b7a vendor: github.com/docker/docker fc4d035e7a4e (v25.0.0-dev)
6891974ee vendor: github.com/opencontainers/image-spec v1.1.0-rc5
827c404ca vendor: github.com/moby/swarmkit/v2 v2.0.0-20230911190601-f082dd7a0cee
137c495f7 vendor: github.com/go-logr/logr v1.2.4
6372c6aae vendor: github.com/klauspost/compress v1.17.2
8073525c0 vendor: google.golang.org/grpc v1.56.3
b7b5b31a7 update to golangci-lint v1.55.0
9e1f8d646 image/build: use "nolint" comment to work around gosec regression
2294b17e7 cli/command/network: runCreate: inline types.NetworkCreate
594aeb390 cli/command: remove dot-imports and unhandled errors
b08e34b9f swarm: TestSwarmUpdate: remove non-existing "--quiet" flag
defa52b8c stacks: Add support for start interval
9df7be5d5 cli/compose: add schema 3.12 (no changes with 3.11 yet)
7a2ea5c53 vendor: gotest.tools/v3 v3.5.1
f2fced487 cli/compose/loader: remove platform-specific path handling
74990623e cli/compose/loader: use gotest.tools/v3/golden
8bf121c3b Add docker ps status descriptions
a252a106c - What I did Removed broken link in #937 - How I did it Removed first section of CONTRIBUTING.md - How to verify it Check CONTRIBUTING.md - Description for the changelog Removed broken link in contributing to Docker documentation. A picture of a cute animal (not mandatory but encouraged) Closes #937
74bace156 docs: add `bind-recursive` mount option
46d0ba20f vendor: github.com/docker/docker cdb3f9fb8dca (v25.0.0-dev)
3441151e0 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230823155524-12f0c246fed0
412ebb677 vendor: github.com/containerd/containerd v1.7.7
78eaac75c vendor: update OTEL dependencies
a27466fb6 vendor: golang.org/x/net v0.17.0
612a17155 vendor: golang.org/x/crypto v0.14.0
392db31e2 vendor: golang.org/x/term v0.13.0
ac307788a vendor: golang.org/x/text v0.13.0
48655f794 vendor: golang.org/x/sys v0.13.0
6de525416 vendor: github.com/docker/distribution v2.8.3
ceab9b5e8 update to go1.21.3
d249ce279 update to go1.21.2
3f1195e4e update go-md2man to v2.0.3
fc6976db4 mount: add `bind-recursive=<bool|string>` and deprecate `bind-nonrecursive=<bool>`
0f59f04f5 Update minimum Go version to 1.19
d254cc3bb update golang to go1.21.1
4c75107a6 vendor: github.com/distribution/reference v0.5.0
112d79a41 appcontext: remove unused parts
febb37a38 remove buildkit as dependency
e9759cee6 Dockerfile: use GOTOOLCHAIN=local
f07e7e1ee Dockerfile: build gotestsum and goversioninfo without cgo
9e424af5d e2e: update to use compose v2, and don't depend on distro-packages
3e2187b4c vendor: github.com/docker/docker d3afa80b96bf (v25.0.0-dev)
f90890fb4 vendor: github.com/Microsoft/hcsshim v0.11.1
23f50a066 vendor: github.com/containerd/containerd v1.6.24
497b13c66 vendor: github.com/klauspost/compress v1.16.5
e0ad0127b vendor: google.golang.org/grpc v1.56.2
c2308ad6f vendor: google.golang.org/protobuf v1.31.0
56396ba35 vendor: golang.org/x/tools v0.8.0
c9d56b850 vendor: golang.org/x/crypto v0.9.0
ffea6940e vendor: golang.org/x/sys v0.10.0
1554b4932 vendor: golang.org/x/sync v0.3.0
78012b00a vendor: container-device-interface v0.6.1
3a16c3bb0 docs: fix duplicate words in "docker tag" reference
7e9467506 build(deps): bump docker/bake-action from 3 to 4
315ff202c build(deps): bump docker/setup-buildx-action from 2 to 3
4b00be585 update to go1.20.8
9e1b42e64 Add missing opts to --network advanced syntax
58f426087 Rename expectedCfg into expectedHostCfg
f1048e1a3 Create default EndpointSettings if no --network provided
2c193b59d Fix extremely minor typo in docker-run man page
40dc66b26 vendor: github.com/docker/docker 06499c52e2b1 (v25.0.0-dev)
f13b78672 vendor: github.com/docker/docker 032797ea4bcb (v25.0.0-dev)
fb2ba5d63 migrate reference github.com/distribution/reference
04af12821 vendor: github.com/docker/docker 7abd7fa73965 (v25.0.0-dev)
dee40053f build(deps): bump actions/checkout from 3 to 4
6dfdd1eae cli/command/system: fix "docker events" not supporting --format=json
db6209abd update golangci-lint to v1.54.2
9ad079244 cli/registry/client: remove some redundant conditions
22b4bab90 cli/registry: client.iterateEndpoints: remove check for APIVersion1
5250f1bab cli/registry: fix client.pullManifestList not de-referencing manifest
d40fc1a0f vendor: github.com/docker/docker a65c948e7edf (v25.0.0-dev)
261c18f9e ParseRestartPolicy: validate for missing policy-names
3d2aac6a0 docs/reference: run.md: remove stray whitespace
4cce7bb2f rewrite TestParseRestartPolicy to use sub-tests
42ac5d4bf force TestNewHistoryCommandSuccess to use UTC timezone
17f4c8259 update cli-docs-tool to v0.6.0
be219b317 adding -c option for docker run/build in manpages
273f2cd95 cli/command/manifest: update link to Go documentation
722e3aae4 man: update links to Go documentation
dc4feccb8 docs/reference: update links to Go documentation
1d3af726e CONTRIBUTING.md: update links
af05a6882 Dockerfile: use COPY --link where possible
1da67be9c Stop slowing bash init by caching plugins path slowly
5bff12354 replace dockerfile/dockerignore with patternmatcher/ignorefile
55ff9e609 vendor: github.com/moby/patternmatcher v0.6.0
e050312e6 update flag-description for --cgroup-parent
d2047b954 cli/registry/client: set actions when authn with token
1c2cc4bbe info: add CDI spec directories to output
bb57783ab cmd/docker: areFlagsSupported: don't Ping if not needed
6e2e92d77 Update docs/command output for volume pruning
4fc3f0e6f search: deprecate "is-automated" filter and "IsAutomated" field
299925f4c docs: document special host-gateway value for add-host
211220cbb cli/command: ResolveAuthConfig, GetDefaultAuthConfig: take ConfigFile as arg
57f0e46de cli/command/registry: cleanup login tests
84c956a17 cli/command/registry: cleanup search tests
3d0b14c3e vendor: github.com/docker/docker 4b19b2f4babd (25.0-dev)
f38870e68 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230713153928-bc71908479e5
a53b03520 vendor: github.com/opencontainers/image-spec v1.1.0-rc4
8d51f36ca login: Add message about using PATs
6517db939 update to go1.20.7
373fa57ed vendor: github.com/containerd/containerd v1.6.22
0b535c791 vendor: gotest.tools/v3 v3.5.0
7a89e897e cli/command/container: waitExitOrRemoved: take APIClient as argument
ce038e77b vendor: github.com/prometheus/common v0.42.0
bffe277c9 vendor: github.com/prometheus/procfs v0.9.0
92906a993 vendor: github.com/Microsoft/go-winio v0.6.1
aacdca0fe vendor: google.golang.org/protobuf v1.30.0
3cf34c6d9 vendor: google.golang.org/grpc v1.53.0
5b138189b vendor: github.com/cespare/xxhash/v2 v2.2.0
c1d065702 vendor: github.com/golang/protobuf v1.5.3
0b7c72c3b cli/command/container: RunStart: inline variable
ad43df5e8 configfile: Initialize nil AuthConfigs
b52fd79f1 docs: add missing docs for "DOCKER_TLS" env-var
298bddcc2 cli/command/container: deprecate NewStartOptions
00870d68f Dockerfile: update buildx to v0.11.2
78e463392 vendor: github.com/docker/docker-credential-helpers v0.8.0
ff9f1be19 Dockerfile: update buildx to v0.11.1
680fafdc9 update go to go1.20.6
223bf80d4 cli/context/docker: Endpoint.ClientOpts, withHTTPClient: inline variables
3469beb80 replace uses of deprecated api/types that moved to api/types/system
1f87420b5 vendor: github.com/docker/docker dab9ffb252186f4c47416addb136d579f9314c6a (25.0-dev)
4d03b935c vendor: github.com/moby/swarmkit/v2 v2.0.0-20230707182847-6f78b8199b05
fe7afb700 cli/container: Don't ignore error when parsing volume spec
323ca1d56 Bump container-device-interface dependency to v0.6.0
fca67dd81 Dockerfile: update to xx 1.2.1
de9f1f5b9 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230627115642-ad0f3ae162fa
125eeb7ab Add docs for health-start-interval
986879c07 Add flags to container/service for health start interval
9bfaa6ff7 revendor docker/docker from master
dbd9d5d74 Update vendoring for CDI parser
dad225d1e Support CDI devices in --device flag
d5f564ada commandconn: return original error while closing
92d7a234d docker info: fix condition for printing debug information
88f44ec15 cli: SetupRootCommand: remove redundant flags return
3cad05fbf cli: move "config" flag to cli/flags/ClientOptions.InstallFlags()
1c1329fc7 cli/flags: add EnvEnableTLS const for "DOCKER_TLS"
0b3cadb05 cli/config: add EnvOverrideConfigDir const
13e842a11 cli/config: add synchronisation for configDir (Dir, SetDir)
9f4af6cb7 vendor: docker/docker 7f8b1cd7f928dee54174d51dc9da17f443c31480 (v25.0-dev)
b32264a1a rename and update mergo module
5936fd2a8 docs: fix static ip example, network needs a subnet
b85d6a8f9 docs: fix broken link
79ff64f06 cli/command/context: don't use pkg/homedir in test
6c7d17fa0 docs: update the runtime configuration section
bf5d1ce97 Dockerfile: update buildx to v0.11.0
2133d0446 cli/command/context: remove deprecated k8s / orchestrator option-stubs
2d06cfcde cli/command: newAPIClientFromEndpoint: use WithUserAgent
8181aa887 cli/command/context: don't pass CLI if we only need context-store
3b8d5da66 update go to go1.20.5
acb248f8d Dockerfile: update ALPINE_VERSION to 3.17
9c2694d2b Dockerfile: update gotestsum to v1.10.0
c2535aa46 build: error if Dockerfile name is passed with Dockerfile from stdin
77dd05caa cli/command/image: remove errStdinConflict
d68b36153 cli/compose/convert: convertEnvironment: sort results
f4bde6869 replace some basic uses of fmt.Sprintf()
6a50c4f70 cli-plugins: remove deprecated Metadata.Experimental
58ec4161b vendor: github.com/moby/swarmkit/v2 v2.0.0-20230607145746-36334ed18760
bf492bffd vendor: docker/docker ed798d651a50cbd0af4dca127c4bfa243dda9cf7 (v25.0.0-dev)
54c80d49d vendor: github.com/opencontainers/image-spec v1.1.0-rc3
9ad605acc vendor: github.com/sirupsen/logrus v1.9.3
e15ae9e2e vendor: golang.org/x/net v0.10.0
3b62102ea vendor: golang.org/x/term v0.8.0
db7886eef vendor: golang.org/x/text v0.9.0
45fd37aaa vendor: golang.org/x/sys v0.8.0
a5ebe2282 commandconn: don't return error if command closed successfully
2331e4d52 cli/command/container: don't mutate ConfigFile.DetachKeys
23e26f40f cli/command/container: createContainer(): return container-ID
c2c6fbe23 cli/command/container: TestCreateContainerImagePullPolicy: use sub-tests
0c5adb2e9 cli/command/container: attach: rename var that collided with import
47951ff44 docs: add "--detach-keys" example to docker run reference
c17b0df2a docs: move "--detach-keys" example to examples section
e4ceed468 docs: added example for specifying socket path with -H
5251d3748 cli/command: add EnvOverrideContext const for "DOCKER_CONTEXT"
6458dcbe5 Dockerfile.vendor: update GOPROXY to use default with fallback
0692d762a cli/command: fix GoDoc referencing wrong const
982857531 docs: rephrase section on credential stores for docker login
5d6612798 docs: remove devicemapper
4cf04988a remove uses of golang.org/x/sys/execabs
db5e1fa54 vendor: update docker/docker to latest v25.0.0-dev
2713d0bcd docs: fix example for proxies in daemon.json
b22290052 docs: remove AuFS from glossary
e4211c91e docs: remove Docker Toolbox from glossary
c246ea851 docs: remove boot2docker and docker-machine from glossary
4c11f73dc man: remove devicemapper from examples
c61b56518 docs/deprecated: remove "disabled by default" for AuFS, overlay
9f537a756 docs: remove aufs and legacy overlay
73fbcdea0 contrib/completion: remove aufs, legacy overlay
1ec68fabe cli/command/system: remove aufs from fixtures
6460eea54 docs/deprecated: remove .patch release from deprecation status
035e26fb0 docs: update link location for the overlay driver
988e37956 Correct "ps --no-trunc" example output
2fc30fd45 replace uses of client.IsErrNotFound for errdefs.IsNotFound
537b88dab cli/command: don't use legacy "notfound" error-type in tests
353e0a942 vendor: github.com/docker/distribution v2.8.2
379122b03 cli/config: remove warning for deprecated ~/.dockercfg file
9b791b4fe cli/config: Load: remove outdated FIXME
ff7111ae2 cli/command: remove deprecated EncodeAuthToBase64
d3ac80127 cli/command/stack: remove deprecated RunDeploy, RunPS, RunRemove, GetServices
72e3813ab cli-plugins/manager: fix deprecation comment of Metadata.Experimental
4119d268e Update tag docs to clarify name
28bc90f3b vendor: update docker/docker to v25.0.0-dev, API v1.44
60b4cdf04 Update version to v25.0.0-dev
759fa585c docs: update description for docker -H flag
1d8e2b652 vendor: github.com/docker/docker v24.0.0-rc.2
ce11b28d8 cli/config/credentials: skip unneeded exec.LookPath()
2ae223038 remove pre-go1.17 build-tags
1073b0269 cli/context/docker: rename receiver for Endpoint
2b7bfb399 cli/command/image/build: GetContextFromReader: rename var that collided
ab17029c6 cli/command/container: hijackedIOStreamer: explicitly ignore err
f5e224e94 un-skip history test and fix golden mismatches
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
22877e9bd0 |
runc-docker: update to 1.1.11
Bumping runc to version v1.1.11-2-g452f520c, which comprises the following commits:
7887736f VERSION: back to development
4bccb38c VERSION: release 1.1.11
617db785 configs: make id mappings int64 to better handle 32-bit
e65d4cac specconv: temporarily allow userns path and mapping if they match
2dd8368e integration: add mega-test for joining namespaces
8f8cb455 configs: disallow ambiguous userns and timens configurations
0c8e2cc6 *: actually support joining a userns with a new container
87792ce0 libct/cg: add swapOnlyUsage in MemoryStats
32a26a71 build(deps): bump github.com/cyphar/filepath-securejoin
be887840 VERSION: back to development
18a0cb0f VERSION: release 1.1.10
b426e9b7 libct/cgroups.OpenFile: clean "file" argument
8214e634 libct/cg: support hugetlb rsvd
f8be7009 [1.1] tests/int/helpers: add get_cgroup_path
1f66027a ci/gha: fix downloading Release.key
5a5b2cc3 Fix directory perms vs umask for tmpcopyup
b365458f fix a typo in cloned_binary.c: re-use -> reuse
8f66c9fb fix two typos
016b2b42 Handle kmem.limit_in_bytes removal
11737f55 VERSION: back to development
ccaecfcb VERSION: release 1.1.9
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
e4b6616a90 |
runc-opencontainers: update to 1.1.11
Bumping runc to version v1.1.11-2-g452f520c, which comprises the following commits:
7887736f VERSION: back to development
4bccb38c VERSION: release 1.1.11
617db785 configs: make id mappings int64 to better handle 32-bit
e65d4cac specconv: temporarily allow userns path and mapping if they match
2dd8368e integration: add mega-test for joining namespaces
8f8cb455 configs: disallow ambiguous userns and timens configurations
0c8e2cc6 *: actually support joining a userns with a new container
87792ce0 libct/cg: add swapOnlyUsage in MemoryStats
32a26a71 build(deps): bump github.com/cyphar/filepath-securejoin
be887840 VERSION: back to development
18a0cb0f VERSION: release 1.1.10
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
f27566f573 |
layer-wide: drop PYTHON_PN
Similar to OE core commit b566b1e32c7993d1ab7795562f648e52ce186a70, we no longer need PYTHON_PN for any abstraction of python2 vs python3. Our similar / dup recipes are now causing signature differences, so we go ahead and make the substitution, even if it isn't stricly required. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Ming Liu
|
eccd6f11b8 |
container-host-config:storage.conf: sync with libpod v4.8.2
The current storage.conf is based on v1.33.0 of: https://github.com/containers/storage.git while in podman v4.8.2, it has been upgraded to v1.50.3-0.20231005112617-44418abb2d89 of: https://github.com/containers/storage.git let's sync it with podman v4.8.2. which comprises the following commits in storage.conf: ``` 42d1d9637 Run codespell on code 91da0c2be add documentation on imagestore and add a warning if set 01fccaa58 options: enable Remap-User/Group setting e125790e9 Fix typo in storage.conf 57582350c Document transient_store in man page 522b67c94 Add new storage.conf option "transient_store" 5e9e2ba6b Revert incorrect "heeded" -> "needed" typo fix cffa19709 fix typos and spelling 268af0001 chunked: drop host dedup feature b64cfb4f4 Document the pull_options 17fccdc2d Clearup inheritance rules for storage.conf 3c76f174d Tell users who change graphroot location to fix the SELinux labels ``` Signed-off-by: Ming Liu <liu.ming50@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Peter Kjellerstedt
|
a0ad18ea28 |
containerd-opencontainers: Use RDEPENDS:${PN} instead of RDEPENDS:${BPN}
The original purpose of using BPN vs PN in the RDEPENDS was due to
32bit multilib issues. Those problems are no longer present, so we
can adjust this recipe to use the standard PN in rdepends.
This change avoids the following warning:
WARNING: .../containerd-opencontainers_git.bb: Variable key
RDEPENDS:${PN} (...) replaces original key
RDEPENDS:containerd-opencontainers
( ${VIRTUAL-RUNTIME_container_runtime}).
if, e.g., RDEPENDS:${PN}:append = " ..." is used in a bbappend or
bbclass.
Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
5bd48ee74f |
buildah: update to 1.33.3
Bumping buildah to version v1.33.3-1-g5ca83472c, which comprises the following commits:
21e754fd3 [release-1.33.2] Bump Buildah to v1.33.3
b44d6bd56 [release-1.33.2] Bump c/common to 0.57.2 and c/image to 5.29.1
7fffb3366 [release-1.33.2] Bump to v1.33.2
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Chen Qi
|
b3e5c517bf |
buildah: fix branch name
The branch 1.33.2 is not there any more. The correct branch for now is 1.33. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Xiangyu Chen
|
cb84780339 |
criu: add cgroup-lite to RDEPENDS
criu needs cgroup-lite to init the cgroup configurations during system start. Signed-off-by: Xiangyu Chen <xiangyu.chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Xiangyu Chen
|
664e3573d4 |
lxc: adjust the lxc-test-unpriv running order
Some of lxc test cases can not full clean the system environment, that cause lxc-test-unpriv cannot execute successfully. Since those code in lxc are using for tests, so just adjust the cases order. Signed-off-by: Xiangyu Chen <xiangyu.chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Ming Liu
|
f33765288d |
podman: add test instructions for podman system service
Signed-off-by: Ming Liu <liu.ming50@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Ming Liu
|
8891c1e02c |
docker-compose: introduce pkgconfig docker-plugin
This allows docker-compose choose to be built as a docker plugin or a standalone binary, in the later case, docker-compose does not have to rdepends on docker, so nother container tools like podman can also use it. Signed-off-by: Ming Liu <liu.ming50@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Bruce Ashfield
|
a3da99e3ff |
podman-tui: update to v0.14.0
Bumping podman-tui to version v0.9.0-207-gc545dbd7, which comprises the following commits:
c545dbd7 Bump to v0.14.0
ac61433c container create dialog - user/groups category options
c3274937 Bump github.com/containers/common from 0.57.0 to 0.57.1
7227ec91 Bump actions/stale from 8 to 9
808dc504 Bump actions/setup-python from 4 to 5
d4121000 Bump actions/setup-go from 4 to 5
1df86623 Bump github.com/containers/podman/v4 from 4.8.0 to 4.8.1
9822b029 container create dialog - environment category options
7f698267 container create options (privileged, timeout)
b985d1fa Bump to v0.14.0-dev
c0bf2daa Bump to v0.13.0
74103352 running golangci-lint on ui/containers package
6fad611b Bump github.com/containers/podman/v4 from 4.7.2 to 4.8.0
717e859a running golangci-lint on ui/images package
e9207835 Bump golang.org/x/crypto from 0.15.0 to 0.16.0
0ab99d84 running golangci-lint on ui/dialogs package
f19ddfc2 running golangci-lint on ui/networks package
f99918f6 running golangci-lint on ui/pods package
068b7c00 running golangci-lint on ui/system package
e27eaf42 running golangci-lint on ui/utils package
c5f1711c running golangci-lint on app package
b94bfa90 running golangci-lint on config package
ce5905bd running golangci-lint on cmd package
56190b2a github action update
05f7e7ab adding container create mount inputfield option
8cfb6130 use inputfield for container create volume option
76e6d03a Bump github.com/navidys/tvxwidgets from 0.4.0 to 0.4.1
7a7897c6 Bump github.com/go-jose/go-jose/v3 from 3.0.0 to 3.0.1
ef812d9c Bump github.com/containers/storage from 1.50.2 to 1.51.0
ae72e400 EPEL rpm package
e62199b1 docs update - add Gentoo in packaged versions
35468621 Bump to v0.13.0-dev
15759448 Bump to v0.12.0
28e8a2d5 Bump github.com/containers/buildah from 1.31.2 to 1.32.2
5ce10afe Bump github.com/containers/podman/v4 from 4.6.2 to 4.7.2
1e56294d gh action update
226be72d using github.com/distribution/reference
38ed7d29 Bump github.com/docker/distribution
00759199 Bump github.com/docker/docker
d61975c8 Bump google.golang.org/grpc from 1.57.0 to 1.57.1
8231c9ca Bump golang.org/x/net from 0.13.0 to 0.17.0
c42e4015 Bump golang.org/x/crypto from 0.13.0 to 0.15.0
4cca7cae update ginkgo cli version to 2.11.0
03ad465a Bump github.com/spf13/cobra from 1.7.0 to 1.8.0
0b5ff67e running codespell
8cfaf08d Bump github.com/rs/zerolog from 1.30.0 to 1.31.0
f5e6f7ed Bump github.com/containers/storage from 1.48.0 to 1.50.2
fa255fdc Bump github.com/navidys/tvxwidgets from 0.3.0 to 0.4.0
2d854793 Bump github.com/containers/podman/v4 from 4.6.1 to 4.6.2
c132c0e6 Bump github.com/cyphar/filepath-securejoin from 0.2.3 to 0.2.4
e4643785 Bump github.com/docker/docker
f05f381b Bump golang.org/x/crypto from 0.12.0 to 0.13.0
78ce8c9d Bump actions/checkout from 3 to 4
de8383d9 Bump tim-actions/commit-message-checker-with-regex from 0.3.1 to 0.3.2
11f9b244 Bump to v0.12.0-dev
33d9be57 Bump to v0.11.0
74360a37 fix missing volume list created time column
c532db41 Bump github.com/containers/podman/v4 to 4.6.1
65b96aa3 Vagrantfile update (fedora-38 image)
78e96572 Bump github.com/containers/buildah from 1.31.1 to 1.31.2
af0700f2 Bump github.com/containers/common from 0.55.2 to 0.55.3
a6c67e96 Bump golang.org/x/crypto from 0.11.0 to 0.12.0
83f9b0f0 Bump github.com/docker/docker
bd51d4bd Bump github.com/rs/zerolog from 1.29.1 to 1.30.0
f1e9e1fb Bump github.com/containers/buildah from 1.30.0 to 1.31.1
24ff42f2 Bump github.com/containers/common from 0.53.0 to 0.55.2
6e9ce1bc Bump golang.org/x/crypto from 0.10.0 to 0.11.0
efdfbe48 Bump github.com/containers/storage from 1.46.1 to 1.48.0
e99a7b0e Bump golang.org/x/crypto from 0.9.0 to 0.10.0
98c6660a Bump github.com/BurntSushi/toml from 1.2.1 to 1.3.2
cc2eedf9 Bump github.com/docker/docker
dbe94d6c Bump github.com/sirupsen/logrus from 1.9.2 to 1.9.3
4479d607 Bump github.com/containers/podman/v4 from 4.5.0 to 4.5.1
22e1da63 Bump github.com/sirupsen/logrus from 1.9.0 to 1.9.2
661d46e4 Bump github.com/docker/distribution
3f90e76b Bump github.com/sigstore/rekor from 1.1.0 to 1.2.0
9ab5f1fa Bump tim-actions/get-pr-commits from 1.2.0 to 1.3.0
ee3cfd11 Bump github.com/containers/common from 0.52.0 to 0.53.0
9596156d Bump to v1.5.0-dev
53e2d8af Bump to v1.4.0
ef699e43 Bump github.com/rs/zerolog from 1.29.0 to 1.29.1
3213a478 Bump github.com/containers/podman/v4 from 4.4.0-rc1 to 4.5.0
55bdd266 Bump github.com/containers/common
24231629 Bump github.com/docker/docker
84ae09ed podman update to v4.4.4
d7314c7a Bump github.com/spf13/cobra from 1.6.1 to 1.7.0
d8d12e1a Bump github.com/containers/storage from 1.45.4 to 1.46.0
c8141ba5 packit update - remove centos stream build
449d8f48 golangci-lint system package
b0d20b2a Bump actions/stale from 7 to 8
613d18f4 ui/styles - applying golint
78395235 ui/infobar - applying golint
745a331d ui/help - applying golint
4c27c3de ui/volumes code improvement and golint
02740c14 adding container attach command to container page/view
6b5beb41 fix container create error without health options
705bc347 Bump actions/setup-go from 3 to 4
cf4509ed Add container health options to the container create dialog
d79883ea Add packit configurtion to build RPM as part of PR tests
ba02fb57 Update unit tests and github workflow for running the tests
4e3889f0 fix container create error when volume is selected
0af3e47b update github workflow golang version to 1.18.8
f572f481 Golangci-lint update to v1.51.1
c2932fc2 fix vendor + codepsell
1e35d9af Bump golang.org/x/crypto from 0.6.0 to 0.7.0
bb17bbc5 unit tests fix
13286688 Bump to v0.10.0-dev
28f800cd Bump github.com/onsi/ginkgo/v2 from 2.8.4 to 2.9.0
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
01a60446c5 |
podman: update to v4.8.2
Bumping libpod to version v4.8.2-2-g0ec4c8b1d, which comprises the following commits:
4aab4e3fe bump release to v4.8.3-dev
aa546902f v4.8.2
a9b20a4a2 [CI:DOCS] Update RELEASE_NOTES.md for v4.8.2
775054343 Kube Play - set ReportWriter when building an image
1864ea94f Fix user-mode net init flag on first time install
3c0d66d83 bump c/common to v0.57.1
b0e2ffc51 bump version to v4.8.2-dev
ef6e5ac40 v4.8.1
0b72d1bf2 Update RELEASE_NOTES.md for v4.8.1
2d20d2e5c Handle symlinks when checking DB vs runtime configs
6bbbfaa05 libpod: Detect whether we have a private UTS namespace on FreeBSD
a8b8dc570 pkg/bindings: add new APIVersionError error type
86bb91001 fix podman-remote exec regression with v4.8
9c9d2fcaf sqlite: fix issue in ValidateDBConfig()
1e5a1336f sqlite: fix missing Commit() in RemovePodContainers()
429080f02 sqlite: set busy timeout to 100s
a72c39a53 Fix locking error in WSL machine rm -f
a7c522dfe Gating test fixes
a62b81d90 If API calls for kube play --replace, then replace pod
70ba64f4c Fix wsl.conf generation when user-mode-networking is disabled
e627de1b4 Bump to v4.8.1-dev
c4dfcf148 Bump to v4.8.0
0efc6ea30 Update release notes for 4.8.0
4b95c6c30 Add notes on upcoming deprecations to release notes
1c1477ddf [v4.8] Bump to Buildah v1.33.2
f02155142 [CI:DOCS] Update release notes
697e66c78 machine applehv: create better error on start failure
53f176732 Bump to v4.8.0-dev
ac1d54e68 Bump to v4.8.0-rc1
66cba2794 Create release notes for v4.8.0
ac290f446 Update release notes from v4.7 branch
883ce7704 Cirrus: Update operating branch
9ea390191 rootless_tutorial: modernize
ee1654622 Bump Buildah to v1.33.1
3d86a9658 Bump Buildah to v1.33.0
60d9f9b80 Update to libhvee 0.5.0
d32f61d91 vmtypes names cannot be used as machine names
d0b32255e Add support for --compat-auth-file in login/logout
a3d5814e0 Update tests for a c/common error message change
ced07a55f Update c/image and c/common to latest, c/buildah to main
a10b88cb2 CI: test overlay and vfs
da899b92d [CI:DOCS] Add link to podman py docs
d2a4ec867 Test fixes for debian
23ead49de pasta tests: remove some skips
d711c3f46 VM images: bump to 2023-11-16
5f3f8a3ca fix(deps): update module k8s.io/kubernetes to v1.28.4 [security]
3d88f614f [CI:DOCS] Machine test timeout env var
e35fc92c0 Quadlet - add support for UID and GID Mapping
dc709e4d7 Quadlet - Allow using symlink on the base search paths
7b826b230 [skip-ci] Update dessant/lock-threads action to v5
ea89eaa1c Avoid empty SSH keys on applehv
33ddd79e2 qemu,parseUSB: minor refactor
669829447 fix(deps): update module github.com/gorilla/handlers to v1.5.2
49b152f49 docs: fix relabeling command
5dc807487 Pass secrets from the host down to internal podman containers
047da19b5 (Temporary) Emergency CI fix: quay search is broken
e1f3ae0d8 Update podman-stats.1.md.in
6fa4a975c [CI:BUILD] packit: handle builds for RC releases
bd375058c Quadlet test - add case for multi = sign in mount
5e0471ba7 set RLIMIT_NOFILE soft limit to match the hard limit on mac
d636ce8d7 rootless: use functionalities from c/storage
6b5b39912 CI: e2e: fix a smattering of test bugs that slipped in
d07263f34 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.1
fbd1ba68f vendor: update c/storage
956c0d6ec Improve the documentation of quadlet
39d647a2f Fix socket mapping socket mapping nits
5388836c1 fix(deps): update module golang.org/x/tools to v0.15.0
60f67eec7 fix(deps): update github.com/containers/libhvee digest to 9651e31
9cd975d59 [skip-ci] Update github/issue-labeler action to v3.3
b8d59030c Document --userns=auto behaviour for rootless users
c23963d7a machine: qemu: add usb host passthrough
4a75a2b3c fix(deps): update module golang.org/x/net to v0.18.0
1c5bc7e09 fix(deps): update module github.com/onsi/gomega to v1.30.0
b2c56365b Refactor Ignition configuration for virt providers
81dc3f183 [CI:BUILD] rpm: disable GOPROXY
78798cab0 Automatic code cleanups - JetBrains
a45ba06d0 Refactor key machine objects
1c969219d systests: add [NNN] prefix in logs, NNN = filename
92cd7b25f systests: add a last-minute check for db backend
d44f71c13 applehv: allow virtiofs to mount to /
c2de6d34c Run codespell on podman
8f5c46c9e update completion scripts for cobra v1.8.0
28f3e9fe3 Fix man page display of podman-kube-generate
8effb7825 Try to fix the broken formatting of man podman‐kube‐apply(1).
3eb2d5ceb fix(deps): update module golang.org/x/text to v0.14.0
108d2bc43 docs: make CNI removal explicit
c1fe1f9d3 fix(deps): update module github.com/gorilla/mux to v1.8.1
e78288344 fix(deps): update module github.com/spf13/cobra to v1.8.0
0824e45c8 fix(deps): update module golang.org/x/sync to v0.5.0
da897bd04 fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.18
420316ef6 Podman push --help should reveal default compression
942bcf34b Update container-device-interface (CDI) to v0.6.2
375b0cc13 fix: adjust helper string in machine_common
9e05fb14a fix: adjust helper string in machine_common
607aff55f remote,test: remove .dockerignore which is a symlink
6b7d7f6fb [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.2
b5f854458 fix: adjust helper string in machine_common
ce334ed9d vendor: update github.com/coreos/go-systemd/v22 to latest main
2a17baa29 CI: default to sqlite
33753db47 vendor: update c/common
613f50c7a check system connections before machine init
ea4775ec9 Consume OCI images for machine image
d2a37222b freebsd: drop dead code
06a07c98e libpod: make removePodCgroup linux specific
e4f1c87ea containers: drop special handling for ErrCgroupV1Rootless
0b6abfe1e compose: fix compose provider debug message
aefa9abf4 image: replace GetStoreImage with ResolveReference
03419d6da vendor: bump c/image to 373c52a9466f
ce9c1b9b8 Refactor machine socket mapping
f6ec210f3 AppleHV: Fix machine rm error message
af0ef47f0 Add status messages to podman --remote commit
3241b3259 End-of-Life policy for github issues
390e9ddc9 fix(deps): update module github.com/shirou/gopsutil/v3 to v3.23.10
18d6bb40d Support passing of Ulimits as -1 to mean max
78765b14d fix(deps): update github.com/docker/go-connections digest to 0b8c1f4
ffb96ad8b fix(deps): update github.com/crc-org/vfkit digest to f3c783d
7153124f9 Log gvproxy and server9 to file on log-level=debug
d9c388e2f Change to using gopsutil for cross-OS process ops
642fa9897 Initial addition of 9p code to Podman
b332ca7a0 libpod: fix /etc/hostname with --uts=host
89d7b2735 systests: stty test: retry once on flake
6b94c8fd3 systests: pasta: avoid hangs
4c67a6aed Fix secrets scanning GHA Workflow
2193bb8fc [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
e9dd41183 docs: clarify systemd cgroup mount
a1577ec7b podman build --remote URI Dockerfile shoud not be treated as file
95a5ad258 Small fixes for wacko CI environments
c6d410cc3 Do not add powercap mask if no paths are masked
3743955d6 compose: try all possible providers before throwing an error
91df369ae podman kube play --replace should force removal of pods and containers
3ce62d3cc Sort kube options alphabetically
e966c86d9 container.conf: support attributed string slices
91ccd7cd2 CI: podman farm tests cleanup
be7dd128e Mask /sys/devices/virtual/powercap
05a607f14 Update module github.com/google/uuid to v1.4.0
6a0b2c680 fix(deps): update module github.com/docker/docker to v24.0.7+incompatible
6badb659c fix(deps): update module go.etcd.io/bbolt to v1.3.8
9e3363c5e CI: systest: safer random_rfc1918_subnet
c841fa9e9 CI: e2e: safer GetPort()
fd5140d87 Fix broken code block markup in Introduction.rst
d0ce60c63 chore(deps): update module google.golang.org/grpc to v1.57.1 [security]
15969a60b chore: remove npipe const and use vmtype const for checking
2158e1540 Update module github.com/onsi/gomega to v1.29.0
c0fb8fe59 CI: try to fix more networking flakes
c21f28813 fix: check wsl npipe when executing podman compose
9ea1ed6d4 [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.1
76cca08f8 Quadlet - explicit support for read-only-tmpfs
c13b8e3c9 compat API: fix image-prune --all
0e15861c5 Makefile - allow more control over Ginkgo parameters
ebe01ca29 Add e2e tests for farm build
989afd910 vendor c/{buildah,common}: appendable containers.conf strings, Part 1
dd8f57a3b Add podman farm build command
2e88d580a Add emulation package
06b726497 Use buildah default isolation when working with podman play kube
0a2aae119 docs(API): Fix compat network (dis-)connect
1b466ccbd test/e2e: do not import buildah
8a0968baa pkg/specgen: remove config_unsupported.go
cb9dfeb8e pkg/parallel/ctr: add !remote tag
d4a67cf45 pkg/domain/filters: add !remote tag
9cecae8c2 pkg/ps: add !remote tag
1d1630990 pkg/systemd/generate: add !remote tag
bad25da92 libpod: add !remote tag
abb5c86b6 pkg/autoupdate: add !remote tag
01a750699 vendor latest c/common
3615af903 libpod: remove build support non linux/freebsd
1850670f1 Fix typo
2e57746ff test/apiv2: adapt apiv2 test on cgroups v1 environment
c3ba0221e ginkgo setup: retry cache pulls
ee6070888 Support size option when creating tmpfs volumes
8876380af not mounted layers should be reported as info not error
85cc4092f CI: stop using registry.k8s.io
a8e1a5ed1 fix(deps): update module github.com/vbatts/git-validation to v1.2.1
6d99cb5cd test fixes for c/common tag chnages
dfdd93323 vendor latest c/common
d6f44d956 hyperV: Update lastUp time
1ac110835 [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.0
9e648a1f5 lint: disable testifylint
29273cda1 lint: fix warnings found by perfsprint
64f43fed4 lint: fix warnings found by inamedparam
c21f42a4e lint: fix warnings found by protogetter
03947ab03 libpod: skip DBUS_SESSION_BUS_ADDRESS in conmon
936e30f68 Use node hostname in kube play when hostNetwork=true
bd953fdc7 cirrus setup: special-case perl unicode
ca9efb0cd network: document ports and macvlan interaction
f2bc63894 quadlet: document cgroupv2 requirement
e8183e836 [skip-ci] Update actions/checkout digest to b4ffde6
1d2589c3f Revert "Emergency workaround for CI breakage"
f48a706ab remote: exec: do not leak session IDs on errors
ad1ab71b8 fix(deps): update github.com/containers/storage digest to 79aa304
d1086281b fix(deps): update module k8s.io/kubernetes to v1.28.3
657029da7 System tests: fix broken silence127
b72bb1162 Add TERM iff TERM not defined in container when podman exec -t
44ed415b2 Emergency workaround for CI breakage
d4d76479c Kill gvproxy when machine rm -f
cad4d0ee9 Fix path for omvf vars on Darwin/arm64
285718915 Allow systemd specifiers in User and Group Quadlet keys
caef657c5 libpod: rename confusing import name
efe5e98d0 use FindInitBinary() for init binary
1d3ec78e0 vendor latest c/common
fa19e1baa exec: do not leak session IDs on errors
1efcd1ecf systests: cp test: lots of cleanup
2d65e57ae Define better error message for container name conflicts with external storage.
9b8e01efd Quadlet - support ImageName for .image files
64171043a test/system: ignore 127 if it is the expected rc
c65d1c02b test/apiv2/20-containers.at: fix NanoCPUs tests on cgroups v1
831844b59 image history: fix walking layers
ad5319025 fix(api): Ensure compatibality for network connect
e0561301c [CI:DOCS] Add cross-build target info.
dc705d370 machine set: document --rootful better
bbd6281ec libpod: restart+userns cleanup netns correctly
3b6a4ac37 Minor log and doc fixes
f875ae317 Quadlet man page - discuss volume removal explicitly
5d5facbd7 Quadlet - add support for KubeDownForce
6ba67ba96 System Test - Quadlet kube oneshot
9637fed2f Fix output of podman --remote top
dcb421bc5 buildah-bud: test relative TMPDIR
c8604081e Fix handling of --read-only-tmpfs flag
1b0be2f34 Vendor common and buildah main
5db3b753a remote,build: wire unsetlabels
331e47acb test: build with TMPDIR as relative
6cf3dd493 docs: add unsetlabel
64ff14932 vendor: bump buildah to v1.32.1-0.20231012130144-244170240d85
74ed1d6e7 fix(deps): update module github.com/vbauerster/mpb/v8 to v8.6.2
b9f2c4d17 fix: pull error response docker rest api compatibility
29f5c563e Show client info even if remote connection fails
52112fc5c fix(deps): update github.com/containers/libhvee digest to e51be96
cb53bcf23 Run codespell
987dc2b8b SetLock for all virt providers
61e0b64b9 Machine: Teardown on init failure
99a14332e healthcheck: make sure to always show health_status events
7b84b55da Apply suggestions from code review
ca518888e [CI:DOCS]rtd: implement v2 build file
702f15528 Quadlet - support oneshot .kube files
3cc9db862 libpod: fix deadlock while parallel container create
2301320f6 fix(deps): update module golang.org/x/net to v0.17.0
8b46e852e api: add `compatMode` paramenter to libpod's pull endpoint
76fec1227 api: break out compat image pull
40f897653 fix(deps): update module github.com/cpuguy83/go-md2man/v2 to v2.0.3
29ae51600 use sqlite as default database
8a52e638e vendor latest c/common
acd0a93c3 fix(deps): update module github.com/nxadm/tail to v1.4.11
d18369ee8 Check for image with /libpod/containers/create
8ac2aa793 container: always check if mountpoint is mounted
787b1b25c fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.0
9beb3a972 vendor: update c/storage
36bf90518 api: drop debug statement
d321d427d Quadlet - add support for global arguments
732cec794 Add system test
10aa39068 fix(deps): update module golang.org/x/tools to v0.14.0
3fdb6ee2d Don't ignore containerfiles outside of build context
b3209dc5d fix(deps): update github.com/containers/libhvee digest to fcf1cc2
eda275820 fix(deps): update module golang.org/x/term to v0.13.0
da6c86dfc Update module golang.org/x/sys to v0.13.0
1c0780097 [CI:DOCS] Add updating version on podman.io to release process
362eca669 containers.conf: add `privileged` field to containers table
6cb10425d Implement secrets/credential scanning
106abd13b Cirrus: Execute Windows podman-machine e2e tests
338e4f590 vendor: bump c/storage
8807243cc Update module golang.org/x/sync to v0.4.0
2168f0745 [CI:DOCS] update swagger version on docs.podman.io
0414f88b3 Create Qemu command wrapper
df6a00026 Adjust to path name change for resolved unit
2a38f30b6 Revert "Fix WSL systemd detection"
f622a2a54 [CI:BUILD] rpm/copr: gvforwarder recommends for RHEL
27f58803d [CI:DOCS] update kube play delete endpoint docs
3fc7c42e1 [CI:DOCS] Remove dead link from README
1b3cedbf3 test/system: --env-file test fixes
617af9bea Revert "feat(env): support multiline in env-file"
5f340487e Revert "docs(env-file): improve document description"
9599589f1 Revert "fix(env): parsing --env incorrect in cli"
7e6e26732 Filter health_check and exec events for logging in console
0443c5166 inspect: ignore ENOENT during device lookup
b576b7932 test, manifest: test push retry
cbca39529 Fix locale issues with WSL version detection
b988eadaf vendor: update module github.com/docker/distribution to v2.8.3+incompatible
1ebd22303 vendor: bump c/common to v0.56.1-0.20231002091908-745eaa498509
8b647cdb5 Update github.com/containers/libhvee digest to e9b1811
cc946daff windows: Use prebuilt gvproxy/win-sshproxy binaries
979c77f10 Volume create - fast exit when ignore is set and volume exists
874e4466a Update golang.org/x/exp digest to 9212866
22a1d015c Update github.com/opencontainers/runtime-spec digest to c0e9043
229734c10 remove selinux tag as not needed anymore
049a5fb92 [skip-ci] Improve podmansh(1)
85ed9edde Build applehv for Intel Macs
7ef8519f4 Revert "GHA Workflow: Faster discussion-locking"
59e0919bc update vfkit vendored code
17cebb3ff Add DefaultMode to kube play
ba788c1bb Fix broken podman images filters
9b3964111 Remove `c.ExtraFiles` line in machine
f21c1d238 podman: run --replace prints only the new container id
bcfd9f340 New machines should show Never as LastUp
94818f594 podman machine: disable zincati update service
b284128d7 Revert "cirrus setup: install en_US.UTF-8 locale"
b28188de2 Cirrus: CI VM images w/ newer automation-library
2b9c0555f CI VMs: bump to f39 + f38
ecd7b3802 [CI:DOCS] Update podman load doc
58b5ae22e Update mac installer to latest gvproxy release
5b990c383 Fix WSL systemd detection
be823b388 Add documentation for the vrf option on netavark
fda028ca0 fix(deps): update github.com/containers/common digest to 9342cdd
6306e8985 fix: typos in links, path and code example
ccb7da52c e2e: ExitCleanly(): manual special cases
611db19b3 e2e: ExitCleanly(): the final fron^Wcommit
149d3f7ad [CI:DOCS] Add win-sshproxy target to winmake
0d4526e61 wsl: enable machine init tests
455d16549 Update docs/source/markdown/options/rdt-class.md
bfbd0c896 move IntelRdtClosID to HostConfig
4853320ce use default when user does not provide rdt-class
77336de8f Add documentation for Intel RDT support
24b2f829b Add test for Intel RDT support
40d3c3b9b Add Intel RDT support
295439265 [CI:DOCS] Fix podman form update --help examples
f0eb45667 Quadlet container mount - support non key=val options
0b5ea1e6e test/e2e: default to netavark
4ed9dc1ad [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
48ea4b9ec fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.7.1
90eb73629 fix(deps): update github.com/containers/common digest to 4619314
172494423 applehv: enable machine tests for start
2ff43429f applehv: machine tests for stop and rm
127ebe2b2 Update machine tests README
995a6a8ac Add podman socket info to machine inspect
80952db0b Fix podman machine info test for hyperV
7ade97210 libpod: pass entire environment to conmon
e4b7455b7 e2e: ExitCleanly(): manual fixes to get tests working
dbd946a93 e2e: ExitCleanly(): a few more
59ffea80d FCOS+podman-next: correct GHA conditional syntax
8bad842a4 pkg/machine/e2e: wsl stop
217c4d546 wsl: machine tests for inspect
e4bfcfc25 wsl: machine tests for ssh
5636d0219 fix(deps): update github.com/containers/common digest to e18cda8
a112ee895 wsl: machine start test
d3d5011dc wsl machine tests: set
cc4917d81 wsl: machine tests
ec68a7489 Skip proxy test for hyperV
33a92aa00 Enable machine e2e test for applehv
65ce03486 hyperV: Respect rootful option on machine init
52ba1bfff [CI:BUILD] FCOS image: enable nightly build
ffd67cf75 e2e: use safe fedora-minimal image
41e51f473 hyperv: machine e2e tests for set command
59e295f2a podman build: correct default pull policy
6293ec2e2 fix handling of static/volume dir
26b5b1dd3 unbreak CI: useradd not found
08936db35 hyperv: set more realistic starting state
2bef573f3 hyperv: use StopWithForce with remove
f52b02f40 Fix all ports exposed by kube play
cd4f61181 Fix setting timezone on HyperV
172369b54 fix(deps): update github.com/containers/gvisor-tap-vsock digest to 97028a6
e0b44bcf3 Fix farm update to check for connections
d8e305716 Adjust machine CPU tests
8188a6fcf Bump version on main
e65874903 [CI:BUILD] Packit: show SHORT_SHA in `podman --version` for COPR builds
96142c2f7 Vendor c/common
af2665c28 pod rm: do not log error if anonymous volume is still used
4916f7d77 e2e: ExitCleanly(): manual fixes to get tests passing
8e743fa1d e2e: ExitCleanly(): a few more
c66aa3b7b fixes for pkg/machine/e2e on hyperv
83b6975d1 test: fix rootless propagation test
6c2493f78 [CI:BUILD] packit: tag @containers/packit-build team on copr build failures
92f4dcb09 Enable disk resizing for applehv
5b3801776 Various updates for hyperv and machine e2e tests
682ca6b2e test: update fedoraMinimal version
8d3010d06 specgen, rootless: fix mount of cgroup without a netns
39ba5ff24 Automatically remove anonymous volumes when removing a container
24d3347ed Use ActiveServiceDestination in ssh remoteConnectionUsername
b6ea49f5a fix(deps): update github.com/containers/gvisor-tap-vsock digest to 9298405
c69873d67 e2e: ExitCleanly(): generate_kube_test.go
841cfa802 e2e: generate kube -> kube generate
d1f86d524 e2e: ExitCleanly(): generate_kube_test.go
f3e9a6369 windows cannot "do" extra files
62e13bec7 e2e: ExitCleanly(): Fixes for breaking tests
09c3ac48f play kube -> kube play
e83ced8a0 e2e: ExitCleanly(): play_kube_test.go
eb9283c6f introduce pkg/strongunits
6d8b3047d Makefile equiv Powershell script
4652a2623 pass --syslog to the cleanup process
73dc72f80 vendor of containers/common
1cbe692de fix --authfile auto-update test
8e5adde0b compat API: speed up network list
8c95aa402 Change priority for cli-flags for remotely operating Podman
befdb4199 libpod: remove unused ContainerState() fucntion
0ec63abca [CI:BUILD] Packit: Enable failure notifications for cockpit tests
0ac98176b e2e: ExitCleanly(): more low-hanging fruit
a50fb7e06 e2e: ExitCleanly(): more low-hanging fruit
1908663f1 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.12.1
38f5ead33 Enable machine e2e tests for WSL
ff07abea4 systests: tighter checks for unwanted warnings
618f846ed GHA Workflow: Faster discussion-locking
289be0c01 [CI:BUILD] FCOS + podman-next image: pull in wasm
649539519 [CI:BUILD] rpm: remove gvproxy subpackage
b0f7072ac [CI:DOCS] Tweak podman to Podman in a few farm man pages
8afffa1aa Docs on sig-proxy are wrong, we support TTY
4fca726f7 e2e: ExitCleanly(): low-hanging fruit, part 2
64c46c429 e2e: ExitCleanly(): low-hanging fruit, part 1
113b41b6f Buildtag out unix commands for common OS files
aec58f515 systests: clean up after tests; fix missing path in logs
fa7150451 [CI:BUILD] followup PR for fcos with podman-next
289e59ee1 Implement gvproxy networking using cmdline wrapper
e68e37136 fix, test: rmi should work with images w/o layers
e9b98510d vendor: bump c/common to v0.56.1-0.20230919073449-d1d9d38d8282
50a685bd1 Quadlet Image test - rearrange test function
e6cf09b68 e2e: continuing ExitCleanly() work: manual tweaks
d78221545 e2e: continuing ExitCleanly() work
47160da7a [CI:DOCS] Improve podman-tag man page
ef553fb0d [CI:DOCS] Improve podman-build man page
93dc30e1e [CI:DOCS] Include precheck to release process
a80a908df [CI:DOCS] consistentize filter options in man pages
55ca571e5 Quadlet - add support for .image units
41beb5374 --env-host: use default from containers.conf
0b7142f4a error when --module is specified on the command level
deba3b80a man page crossrefs: add --filter autocompletes
03dd5f256 Fix specification of unix:///run
98e6dda69 Add label! filter and tests to containers and pods
6f4f94137 Add test for legacy address without two slashes
336055fe3 Use url with scheme and path for the unix address
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
695a4ca0a4 |
netavark: update to v1.9.0
Bumping netavark to version v1.9.0-20-g167e2e4, which comprises the following commits:
3faf33f fix(deps): update rust crate tokio to 1.35
4759152 dhcp-proxy: return actual error instead of generic one
f571e31 dhcp-proxy: skip set gateway if missing
63c34a5 chore(deps): update rust crate once_cell to 1.19.0
ff45e22 fix(deps): update rust crate nispor to 1.2.15
c85d844 fix(deps): update rust crate serde to 1.0.193
3bbc9fd fix(deps): update rust crate clap to ~4.4.10
4f27552 aardvark: show error if process is in wrong netns
a4e082d aardvark: remove unessesary unlock lockfile calls
4c58983 fix(deps): update rust crate url to 2.5.0
f588f1d Bump working version to v1.10.0-dev
1ac6900 v1.9.0 Release
d688bdc v1.9.0 Release notes
2f31a95 test: fix syntax problem in helpers.bash
530c911 run cargo update
d49f979 use OsString/Path over String for file paths
c6f48d6 chore(deps): update dependency containers/automation_images to v20231116
8e943b5 firewalld-reload: fix CI tests
2172205 firewalld-reload: prevent race which could leak fw rules
6aee10f fix(deps): update rust crate clap to ~4.4.8
74ed450 CI: skip broken firewalld test
e281e9b fix(deps): update rust crate http to 0.2.11
708bd43 rpm: add netavark-firewalld-reload.service to spec
b5d7510 firewalld-reload: add integration tests
268a927 firewall/state: make sure to ignore enoent on read
0449ba5 firewall-reload: integrate actual logic to reload rules
13b2133 firewall/state: improve error messages
d2eeaab firewall: add state functions to serialize configs
cd1114c firewalld: fix lint errors with rust v1.73
28c48ce firewall: do not use full Network in NetworkStruct
aebb5da firewall: add dns_port to SetupNetwork
cb5aa2e add firewalld-reload subcommand
3df3c88 fix(deps): update rust crate http to 0.2.10
9a3266b fix(deps): update rust crate env_logger to 0.10.1
a063151 fix(deps): update rust crate tokio to 1.34
dce15ba Update rust container build files
730e1bf bridge: force static mac on bridge interface
fca4999 fix(deps): update rust crate futures-core to 0.3.29
6291f27 fix(deps): update rust crate serde to 1.0.190
e7a4435 fix(deps): update rust crate serde_json to 1.0.108
b4ca3e0 fix(deps): update rust crate sysctl to 0.5.5
9d9f600 fix(deps): update rust-futures monorepo to 0.3.29
78b4fea CI: Drop CI VM distro name
116d565 chore(deps): update dependency containers/automation_images to v20231004
f42b296 fix(deps): update rust crate tokio to 1.33
881828f build-sys: Filter to tier 2 Linux declaratively
f29b03f fix(deps): update rust crate sha2 to 0.10.8
a54db5d fix podman.io community link
33a4c86 Bump to v1.9.0-dev
837f1f3 Release v1.8.0
046b4cf update release notes for v1.8.0
11db130 run cargo update
4b6d5ab Add vrf support for bridges
d211c7a Packit: switch to @containers/packit-build team for copr failure notification comments
6989cda fix(deps): update rust crate nispor to 1.2.14
40df9d9 [CI:BUILD] Packit: tag @lsm5 on copr build failures
b8671a6 chore(deps): update rust crate chrono to 0.4.31
2904dc1 fix(deps): update rust crate serde_json to 1.0.107
bc383f2 rust io safety: convert RawFd to BorrowedFd<>
61b8e62 bump nix to 0.27.1
156073b chore(deps): update rust crate chrono to 0.4.30
521e490 fix(deps): update rust crate serde_json to 1.0.106
b9441cf chore(deps): update rust crate chrono to 0.4.29
8c6c7fd fix(deps): update rust crate netlink-packet-route to 0.17.1
f5d0a95 Bump tonic and prost
70cc3e9 Update container image to F38
3806d9a Add ACCEPT rules in firewall for bridge network with internal dns.
d9961dc chore(deps): update rust crate tonic-build to 0.10
7d581d2 fix(deps): update rust crate nispor to 1.2.13
ddbfc60 fix(deps): update rust crate serde to 1.0.188
96368f4 Fix clippy warnings about formatting
4b0b499 update chrono crate
be29339 fix(deps): update rust crate url to 2.4.1
bcd1ebc Add protoc dependency to README
9c840e9 [CI:BUILD] rpm: spdx compatible license field
a19bf24 fix(deps): update rust crate tokio to 1.32
4636b22 chore(deps): update dependency containers/automation_images to v20230816
735ea2f fix(deps): update rust crate serde_json to 1.0.105
719ded6 fix(deps): update rust crate tokio to 1.31
3b5ce46 fix(deps): update rust crate log to 0.4.20
60d6185 run cargo update
ab90b2b update tonic-build to 0.9.2
fcdacab bump rust edition to 2021
845fbdf iptables: drop invalid packages
080a814 fix(deps): update rust crate tokio to 1.30
6caef06 docs: Convert markdown with go-md2man instead of mandown
bb22c34 fix(deps): update rust crate clap to 4.3.21
00c05a6 packit: Build PRs into default packit COPRs
2f44e50 chore(deps): update dependency containers/automation_images to v20230807
c5df890 fix(deps): update rust crate serde to 1.0.183
be2a8ea fix(deps): update rust crate serde to 1.0.181
067bbde fix(deps): update rust crate serde to 1.0.180
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
f6f61282bf |
aardvark-dns: update to v1.9.0
Bumping aardvark-dns to version v1.9.0-10-gf1c946c, which comprises the following commits:
e4785bd Release v1.9.0
e406f83 v1.9.0 Update release notes
8880d68 run cargo update
864fa96 chore(deps): update dependency containers/automation_images to v20231116
a8642b3 fix(deps): update rust crate tokio to 1.34.0
b154c3b fix(deps): update rust crate async-broadcast to 0.6.0
5ee6646 update trust-dns to hickory
f516597 fix(deps): update rust crate futures-util to 0.3.29
20ab8f5 fix(deps): update rust crate trust-dns-server to 0.23.2
d9f023a fix(deps): update rust crate trust-dns-proto to 0.23.2
645fb12 tmt: initial enablement
3633db0 aardvark main: change error reporting
7820735 chore(deps): update dependency containers/automation_images to v20231004
dc1ef13 fix(deps): update rust crate trust-dns-proto to 0.23.1
085608c fix(deps): update rust crate trust-dns-client to 0.23.1
ceca55b clippy: some format fixes
9c90865 fix(deps): update rust crate tokio to 1.33.0
3391c8d Bump to v1.9.0-dev
1ed9402 Release v1.8.0
a9e95ca update release notes for v1.8.0
1730fef run cargo update
2a3415e Packit: switch to @containers/packit-build team for copr failure notification comments
82752dd [CI:BUILD] Packit: tag @lsm5 on copr build failures
0356081 chore(deps): update rust crate chrono to 0.4.31
0d831cf cargo: bump chrono to 0.4.30
ea06d05 test: IPv6 format is changed in v1.72.0
d2a7527 bump nix to 0.27.1
20e5b56 vendor: bump trust_dns_proto and trust_dns_client to 0.23.0
cce63be fix(deps): update rust crate trust-dns-server to 0.23.0
c81a038 [CI:BUILD] rpm: spdx compatible license field
cae27d7 fix(deps): update rust crate anyhow to 1.0.75
b46553e fix(deps): update rust crate tokio to 1.32.0
1d8d421 chore(deps): update dependency containers/automation_images to v20230816
f8bdbf1 fix(deps): update rust crate tokio to 1.31.0
88e847d fix(deps): update rust crate anyhow to 1.0.74
3f74fdc fix(deps): update rust crate anyhow to 1.0.73
17ca8a1 fix(deps): update rust crate log to 0.4.20
70ad545 chore(deps): update dependency containers/automation_images to v20230809
cb2b0e6 fix(deps): update rust crate tokio to 1.30.0
def4232 fix(deps): update rust crate clap to 4.3.21
cd85a71 packit: Build PRs into default packit COPRs
4df6054 chore(deps): update dependency containers/automation_images to v20230807
a713fa6 fix(deps): update rust crate anyhow to 1.0.72
dc36e6b fix(deps): update rust crate signal-hook to 0.3.17
62cd6e2 fix(deps): update rust crate clap to 4.3.19
7f3c50d fix(deps): update rust crate clap to 4.3.15
8821976 fix(deps): update rust crate signal-hook to 0.3.16
75a7b92 [CI:BUILD] Packit: remove pre-sync action
1e54ac4 fix(deps): update rust crate clap to 4.3.11
389a189 fix(deps): update rust crate tokio to 1.29.1
836a441 fix(deps): update rust crate clap to 4.3.10
c81743a [CI:BUILD] RPM: cleanup spec and fix eln builds
2703165 bump to v1.8.0-devel
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
ba9cbc0914 |
skopeo: update to 1.14.0
Bumping skopeo to version v1.14.0-10-ga85eaac9, which comprises the following commits:
48d11dac fix(deps): update golang.org/x/exp digest to 6522937
87eef310 DOCS: add Gentoo in install.md
f50dc204 DOCS: Update to add Arch Linux in install.md
9f52e728 fix(deps): update module golang.org/x/term to v0.15.0
efd76e74 Bump to v1.14.1-dev
6abf96bb Bump to v1.14.0
14496ba4 fix(deps): update module github.com/containers/common to v0.57.0
fa85e47b chore(deps): update dependency containers/automation_images to v20231116
e4b67e78 fix(deps): update module github.com/containers/image/v5 to v5.29.0
edefdb66 Add documentation and smoke tests for the new --compat-auth-file options
518181e5 Update c/image and c/common to latest
56b96a4d fix(deps): update module github.com/containers/storage to v1.51.0
a8e7d94e fix(deps): update module golang.org/x/term to v0.14.0
50cffa38 fix(deps): update module github.com/spf13/cobra to v1.8.0
0c2cca96 [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.2
6b2a26f1 [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.1
6ef8acff fix(deps): update github.com/containers/common digest to 3e5caa0
5d4e89cc chore(deps): update module google.golang.org/grpc to v1.57.1 [security]
5307dd66 fix(deps): update module github.com/containers/ocicrypt to v1.1.9
03c94252 Update github.com/klauspost/compress to v1.17.2
91611a3a chore(deps): update module github.com/docker/docker to v24.0.7+incompatible [security]
a9c7c505 Fix ENTRYPOINT documentation, drop others.
70551db8 Remove unused environment variables in Cirrus
a2eb508b [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.0
1fa360a6 chore(deps): update dependency containers/automation_images to v20231004
fa3e62f2 chore(deps): update module golang.org/x/net to v0.17.0 [security]
dc4fa672 copy: Note support for `zstd:chunked`
538dd6f3 fix(deps): update module golang.org/x/term to v0.13.0
611db7c3 fix(deps): update module github.com/docker/distribution to v2.8.3+incompatible
43e1a96e fix(deps): update github.com/containers/common digest to 745eaa4
5fad766c Packit: switch to @containers/packit-build team for copr failure notification comments
d8b3a17f Packit: tag @lsm5 on copr build failures
57034826 vendor of containers/common
7db8fbde fix(deps): update module github.com/opencontainers/image-spec to v1.1.0-rc5
4d921585 fix(deps): update module github.com/containers/common to v0.56.0
9e89e18f Cirrus: Remove multi-arch skopeo image builds
32c8a05a fix(deps): update module github.com/containers/image/v5 to v5.28.0
679615f5 Increase the golangci-lint timeout
c1e7c974 fix(deps): update module github.com/containers/storage to v1.50.2
9563e3b8 fix(deps): update module github.com/containers/storage to v1.50.1
427e58f5 fix(deps): update golang.org/x/exp digest to 9212866
7c39f363 Fix a man page link
897619f6 fix(deps): update github.com/containers/image/v5 digest to 58d5eb6
2976f4f8 GHA: Closed issue/PR comment-lock test
46979914 fix(deps): update module github.com/containers/common to v0.55.4
3249973d fix(deps): update module github.com/containers/storage to v1.49.0
b87a1b3e rpm: spdx compatible license field
b0d587a9 chore(deps): update dependency golangci/golangci-lint to v1.54.2
7ced0fb0 chore(deps): update dependency containers/automation_images to v20230816
4b952d61 Packit: set eln target correctly
6b827fa7 packit: Build PRs into default packit COPRs
fec950c2 DOCS: Update Go version requirement info
449ac9bb DOCS: Add information about the cross-build
78187ca8 fix(deps): update module github.com/containers/ocicrypt to v1.1.8
df117e28 fix(deps): update module github.com/containers/common to v0.55.3
4ee2946b Update c/image after https://github.com/containers/image/pull/2070
0e3efc64 chore(deps): update dependency golangci/golangci-lint to v1.54.1
46fcbd3a chore(deps): update dependency containers/automation_images to v20230809
e98561e2 fix(deps): update golang.org/x/exp digest to 352e893
4f5ba65a chore(deps): update dependency containers/automation_images to v20230807
5abce03c Update to Go 1.19
276b8095 fix(deps): update module golang.org/x/term to v0.11.0
60ee543f Update c/image for golang.org/x/exp
ab892075 RPM: define gobuild macro for rhel/centos stream
f236b5ef Fix handling the unexpected return value combination from IsRunningImageAllowed
c40f1485 Close the PolicyContext, as required by the API
e90ad861 Use globalOptions.getPolicyContext instead of an image-targeted SystemContext
a4aa15f4 Packit: remove pre-sync action
a0a340a1 fix(deps): update module github.com/containers/common to v0.55.2
f7dc0847 proxy: Change the imgid to uint64
a39972ca [CI:BUILD] Packit: install golist before updating downstream spec
2945e9e0 Update module golang.org/x/term to v0.10.0
5f87f6ab Bump to v1.14.0-dev
cb1e9012 Bump to v1.13.0
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
8c6303bb83 |
crun: update to v1.12
Bumping crun to version 1.12-19-g90b21dd, which comprises the following commits:
49f439d ctx: drop no_subreaper bool
b5ad30f krun: fix use of uninitialized integer
7c5a32a criu: do not set CLOEXEC on fds to inherit
c9e23a8 criu: fix error return value
501aa98 handlers: Fix -Werror=unused-parameter build error for spin
c9014f8 src: use O_CLOEXEC with pipes
3ad89be src: use O_CLOEXEC for all open/openat calls
0f0d5be src: close std streams on exec
08b7d33 build(deps): bump uraimo/run-on-arch-action from 2.5.1 to 2.6.0
2ad31d4 linux: fix error string
ce429cb NEWS: tag 1.12
08d9fea preconfigure cpuset with required resources
a18356e README.md: update the correct Nix channel
da991db utils: try attr/<lsm>/* before attr/*
616aea7 feat: add spin handler
172bbd0 container: move dereference after check
2cc04ea systemd: fallback to system bus
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
bf3b7371a3 |
moby: update to v24.0.7-tip
Bumping moby to version v24.0.7-9-gafcd2cde95, which comprises the following commits:
d0b5a5a8a5 integration/TestLiveRestore: Wait for process to exit
f0b5ca47fb liverestore: Don't remove `--rm` containers on restart
bfbb1dd890 update containerd binary to v1.7.9
8a9a6702d0 update containerd binary to v1.7.8
56d9d85c99 Dockerfile: update github.com/tc-hib/go-winres v0.3.1
6d5c35c0ce update runc binary to v1.1.10
05d7386665 daemon: daemon.containerRestart: don't cancel restart on context cancel
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
08ec5a182d |
buildah: update to 1.33.2
Bumping buildah to version v1.33.2-1-g8be6786d5, which comprises the following commits:
7fffb3366 [release-1.33.2] Bump to v1.33.2
7add02a3b Update minimum to golang 1.20
b92ad028b fix(deps): update module github.com/fsouza/go-dockerclient to v1.10.0
20565e530 fix(deps): update module github.com/moby/buildkit to v0.12.3
bd0ae2aff Bump to v1.33.2-dev
38d6d5f11 Bump to v1.33.1
6d66008b6 Bump to v1.31.2-dev
f18868d06 Bump to v1.31.1
f6cb3e474 fix(deps): update module github.com/moby/buildkit to v0.11.4 [security]
7aa395489 test,heredoc: use fedora instead of docker.io/library/python:latest
8fb826177 Bump to v1.33.1-dev
98da6c8d6 Bump to v1.33.0
2087848c3 Never omit layers for emptyLayer instructions when squashing/cwing
3a61cc099 Add OverrideChanges and OverrideConfig to CommitOptions
bbb55b8b8 buildah: add heredoc support for RUN, COPY and ADD
69f52f805 vendor: bump imagebuilder to v1.2.6-0.20231110114814-35a50d57f722
fadc0ba08 conformance tests: archive the context directory as 0:0 (#5171)
3c61dfd4f blobcacheinfo,test: blobs must be resued when pushing across registry
19d9a6bc0 Bump c/storage v1.51.0, c/image v5.29.0, c/common v0.57.0
b2b761573 pkg/util.MirrorToTempFileIfPathIsDescriptor(): don't leak an fd
1fab39559 StageExecutor.Execute: force a commit for --unsetenv, too
4cf16730b Increase a copier+chroot test timeout
57d863dfd Add support for --compat-auth-file in login/logout
dcfbe69a3 Update existing tests for error message change
5fc64afe1 Update c/image and c/common to latest
eebecc94d fix(deps): update module github.com/containerd/containerd to v1.7.9
fe9bdce86 build: downgrade to go 1.20
4f3876d8e Add godoc for pkg/parse.GetTempDir
00e73de71 conformance tests: use go-dockerclient for BuildKit builds
0a85c0629 Make TEE types case-insensitive
bc59f69c0 fix(deps): update module golang.org/x/crypto to v0.15.0
10c0222d4 Tweak some help descriptions
8df9b760b Stop using DefaultNetworkSysctl and use containers.conf only
99cad6ee1 Implement ADD checksum flag #5135
1d30520e8 vendor of openshift/imagebuilder #5135
7e0d66483 Pass secrets from the host down to internal podman containers
8f86c5784 Update cirrus and version of golang
61de02b0f image: replace GetStoreImage with ResolveReference
1306a64cd vendor: bump c/image to 373c52a9466f
af394a83d pkg/parse.Platform(): minor simplification
d1bfccf22 createConfigsAndManifests: clear history before cw-specific logic
9f1c9a8ee Use a constant definition instead of "scratch"
6552b619c conformance: use require.NoErrorf() more
acf60abbe fix(deps): update module golang.org/x/term to v0.14.0
4a470feec fix(deps): update module golang.org/x/sync to v0.5.0
e8ae12013 fix(deps): update module github.com/spf13/cobra to v1.8.0
fc74d5071 fix(deps): update module golang.org/x/sys to v0.14.0
892014df1 fix(deps): update github.com/containers/common digest to 8354404
2f118fe61 fix(deps): update module github.com/opencontainers/runc to v1.1.10
ef439b8ad fix(deps): update github.com/containers/luksy digest to b5a7f79
934c40e73 Log the platform for build errors during multi-platform builds
3b96b1caf Use mask definitions from containers/common
34ac2cc4f Vendor in latest containers/common
2779e7062 fix(deps): update module github.com/containerd/containerd to v1.7.8
52d48d720 fix(deps): update module go.etcd.io/bbolt to v1.3.8
02f781b35 container.conf: support attributed string slices
2b2a4bed8 fix(deps): update module sigs.k8s.io/yaml to v1.4.0
03b004224 Use cutil.StringInSlice rather then contains
48a9c4371 Add --no-hostname option to buildah containers
c536048ca vendor c/common: appendable containers.conf strings, Part 1
a9e06a64d fix(deps): update module github.com/onsi/gomega to v1.28.1
2a3a956cb chroot.setupChrootBindMounts: pay more attention to flags
a4f0d7dec chore(deps): update dependency containers/automation_images to v20231004
7c8b51068 Vendor containers/common
0f0ca0cfc chore(deps): update module golang.org/x/net to v0.17.0 [security]
9c99d7ca8 run: use internal.GetTempDir with os.MkdirTemp
7704ca6d3 fix(deps): update module github.com/containerd/containerd to v1.7.7
07d955f27 imagebuildah,multi-stage: do not remove base images
6fd4f0373 gitignore: add mkcw binary
9c57af8d1 mkcw: remove entrypoint binaries
b97f887ca fix(deps): update module golang.org/x/crypto to v0.14.0
4e6c2b2cd fix(deps): update module golang.org/x/sys to v0.13.0
f99de537e fix(deps): update module golang.org/x/sync to v0.4.0
5bfc7d9a4 Update some comments related to confidential workload
c48a459ea Use the parent's image ID in the config that we pass to imagebuilder
2d4896f6e fix(deps): update github.com/containers/common digest to 8892536
065c8d43e fix(deps): update github.com/containers/luksy digest to 6df88cb
249e30c98 bug: Ensure the mount type is always BindMount by default
ad3211c26 Protocol can be specified with --port. Ex. --port 514/udp
a3d2c3125 fix(deps): update module github.com/onsi/gomega to v1.28.0
8b63fa37b build,config: add support for --unsetlabel
91f54ed54 tests/bud: add tests
351012792 [CI:BUILD] Packit: tag @containers/packit-build on copr build failures
ae5f11e45 stage_executor: allow images without layers
4c6255679 vendor of containers/common
b3084b5f4 Removing selinux_tag.sh as no longer needed after 580356f [NO NEW TESTS NEEDED]
9dd66e4cb add/copy: make sure we handle relative path names correctly
68ffd1e97 fix(deps): update module github.com/opencontainers/image-spec to v1.1.0-rc5
abc57f8df Bump to v1.33.0-dev
b574b806e imagebuildah: consider ignorefile with --build-context
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
a6ed7b60ff |
containerd: update to 2.0-beta
We refresh our GO_FLAGS patch for new context, and drop the install
of v1 or unversioned shims as the runtime-v1 has been dropped
Bumping containerd to version v2.0.0-beta.0-88-g87bf39a7f, which comprises the following commits:
96aaf5a3b Add core and internal root packages
c0363754f sandbox: get runtime info from sandbox or container
95d2a3b7c upgrade: add cri upgrade test case
0bc963341 runtime/v2: net.Dial gRPC shim sockets before trying grpc
e1b495866 sandbox: keep rootDir and stateDir compatible
b0fef6738 sandbox: migrate sandbox_mode to sandboxer
c8012b6d7 sandbox: make a clear dependency of cri plugins
2ead89509 Support gzip and zstd HTTP transport compression to fetch remote resources
8e567aa58 mv pkg/process cmd/containerd-shim-runc-v2/process
a813097dc Bump up github.com/fsnotify/fsnotify to v1.7.0
c384e3717 containerd-stress: use config address for CRI test
d4c828c2c integration: add new binary upgrade case
8e91edb71 fix(pkg/dialer): minor fix on dialer function for windows
ad3f8c563 tomlext.Duration add MarshalText method
6da015284 go.mod: github.com/containerd/continuity v0.4.3
cd348e6ef .golangci.yml: remove directories that don't exist
4b556a6e0 Bump up golangci-lint to v1.55.2
c51d4f9b6 push: always inherit distribution sources from parent
e15c24655 Move CRI image service into a separate plugin
80dd779de remotes/docker: close connection if no more data
7f410ae05 integration: reproduce #9347
2e9686c05 fix: deflake TestCRIImagePullTimeout/HoldingContentOpenWriter
4aa932337 CI: update Fedora to 39
f6c4de6b5 fix: podsandbox depends on Lease plugin
1b65fe264 fix ticker leak
1af0cba1a Update documentation for containerd v2.0 packages
4f42da416 adopters.md: remove Eliot project
01c442147 Enhance container image unpack client logs
e7390d4ed vendor: upgrade OpenTelemetry to v1.19.0 / v0.45.0
1a1bd6d0a runtime/v2/shim: use structured log for plugin ID
71fd85f5e runtime/v2/shim: run(): remove unused "name" argument
0a59c33be runtime/v2/shim: rename var that shadowed package var
be22e12d5 services/server: use structured log for plugin ID
09de4f1fc services/server: rename var that collided with import
14e621cf9 services/server: gofumpt
32bf805e5 sandbox: add a sandboxService interface to criService
25a4c3d23 sandbox: remove SandboxersServicePlugin
0cf48bab2 sandbox: podsandbox init its own client
7d65a4563 Move runc shim implementation to cmd
e682da76c fix labels in pod sandbox
64c41162c update tests to use labels from cri/labels
7e79225ce refactor labels used in cri server
274a16282 update runc binary to v1.1.10
2e014fa2a cri: fix update of pinned label for images
cb555fa16 golangci-lint: enable depguard to prevent re-introducing libcontainer
dac056fe7 integration: deflake TestIssue9103
7b9fcfd7c add default enable unprivileged icmp/ports
a7cd49c68 expected and actual field position adjustment
e099717f9 validate kernel version for unprivileged icmp/port
76049170b document runtime and shim configuration and selection
2fab240f2 integration: init release upgrade test
2af6db672 switch back from golang.org/x/sys/execabs to os/exec (go1.19)
a596d09ec cri: add deprecation warning for configs
35924bccc cri: add deprecation warning for auths
d7cb25d77 cri: add deprecation warning for mirrors
58cc275eb cri: add ability to emit deprecation warnings
68cac3f62 client: remove obsolete ErrCheckpointRWUnsupported
df19888f8 add warning use inheritable Capabilities
411e2bce4 Remove plugins package
9db21401c Switch to github.com/containerd/plugin
a48ddf4a2 Don't allow io_uring related syscalls in the RuntimeDefault seccomp profile.
2dfae4c4b Prepare release notes for v2.0.0-beta.0
6ca4b5260 Update mailmap
a67efe88d Add tests cases
f1d659dc5 Update package name in Makefile
0ffc3e987 Handle ArgsEscaped for new Sb Server
b85df264e Rename opt to avoid stutter
261e01c2a Move client to subpackage
b6adf43d4 test: use 'Autoclear: ture' in TestRwLoop and add Autoclear test
124d3a20a Sync ops.md, update CLI --help output to be consistent in descriptions
5fdf55e49 Update go module to github.com/containerd/containerd/v2
abfc8be53 Fix lint in integration/client
ddd73ad30 Move protofiles generated into v2 directory
638b474c8 Temporarily remove imgcrypt in CRI to fix circular dependency
192168038 Temporarily remove integration/client submodule
4e3fbd36e vendor: github.com/klauspost/compress v1.17.2
856d1053f vendor: google.golang.org/grpc v1.58.3
466ee870d Check scheme and host of request on push redirect
3fff8b4f6 ctr: new deprecations command
079383dbe dynamic: record deprecation for dynamic plugins
260e71abc server: add ability to record config deprecations
bc861b66f pull: record deprecation warning for schema 1
9aab44673 introspection: add support for deprecations
57c897f10 api/introspection: deprecation warnings in server
240733ce2 warning: new service for deprecations
aff5b809c deprecation: new package for deprecations
d48ceb606 Avoid TLS fallback when protocol is not ambiguous
ed759bae3 Update go fuzz to directly instantiate server
09e40511a fix bug that using invalid token to retry fetching layer
2fea521d0 Disable windows-2019 integration test temporarily
9fc407d8c ci: bump up golangci-lint to v1.55.0
8b4f9656d sandbox: remove ValidateMode as it is not used
337cc2171 pkg/cri: should ignore no sandbox bucket
f515cd5c5 Reorder fields when writing bootstrap params
3d53fbe85 Fix CRI integration tests
f76eaf5a6 Fix 'not a directory' error when restoring bootstrap.json
cf75cfa32 Add more logs around shim restore
8061cb023 Save bootstrap.json instead of address file
e03bf32b8 Switch runc to v3
7a2d801d6 Expose shim instance version
f66c46806 Bridge task service v2
daaf67662 Switch runc shim to task v3
bb64e6a8e Initialize sandbox controller list on CRI server creation
03d81f595 Use cri streaming pkg from k8s staging
b006f1c15 integration/client: replace hardcoded strings for OCI-spec consts
d3f5e0c90 images/archive: replace hardcoded strings for OCI-spec consts
8e7c10c6d CRI: enhance ImageFsInfo() to support multiple snapshotters
e4639ad18 Add exports to proxy plugin config
3986f80c3 go.mod: bump up github.com/opencontainers/image-spec to v1.1.0-rc5
f7c9e9942 vendor: golang.org/x/net v0.17.0
c3652540c vendor: golang.org/x/text v0.13.0
ff602c213 vendor: golang.org/x/sys v0.13.0
39b168cdb vendor: google.golang.org/grpc v1.57.1
930ee552e Fix typos
3ef300ca7 sandbox: remove global variable of podsandbox controller
7bca70c0c sandbox: do not call Connect when loadShim
d2d434b7d sandbox: add all sandbox information to Create method
0707f6869 sandbox: ignore not found error when remove sandbox
2951fb6dc sandbox: support more sandbox controllers
8b3597685 sandbox: add Sandboxer field to sandbox metadata
69e501e7c sandbox: change SandboxMode to Sandboxer
f372b3501 sandbox: add sandboxer field of sandbox requests
a782fd6da Use LOOP_CONFIGURE when creating loop devices
771237563 Add a new image label if it is docker schema 1
5ad6f3432 CRI: use (snapshotter_id, snapshot_key) to uniquely identify snapshots
41b2b2a7b go.mod: bump up github.com/klauspost/compress from v1.17.0 to v1.17.1
4febb0852 deprecated: go-plugin library as runtime plugin
51c9ffe46 remotes: add handling for missing basic auth credentials
4f339b5b5 RELEASES.md: mark legacy CRI as removed status
0a4f79211 Remove use of v1 runtime plugin type for Unix
71f8b4357 Move dynamic plugins to a subpackage
7b2a91821 Generalize the plugin package
a80606bc2 Move plugin type definitions to containerd plugins package
cb969085f Temporarily remove zfs as built in plugin
2486c1298 Exit shim when shutdown manager is done
1b3199324 Rename sbserver to server
4edc6c2d9 Add note about configuration versions in releases
c5c94dc86 Fix CRI tests panic on CI
a3c2c1e4d Clean shell scripts
fa1d3a9cc Fix dependencies after remove
3742f7f0d idmapped: use pidfd to avoid pid reuse issue
2332b9ba1 Remove legacy CRI from CI
536abf1b3 Remove legacy CRI
33b1a833c Move CRI testing package out
016114ff6 Move bandwidth package out of CRI server
3c1e7ffb8 Integration: Alter TestContainerPids for Windows
8f013bb71 Add migration for older configuration versions
313f514fd update to go1.21.3. gp1.20.10
6b752b536 update to go1.21.2, go1.20.9
8f3d1c9d9 add cpu-burst param to ctr command
3ddcd6120 add Duration type to compatible toml v1 version
535916d1d Skip exec.LookPath if a specific gzip implementation is disabled
4b59d67dd add a new flag "skip-reference-check" to skip reference name check
34378ec9b Use Intel ISA-L's igzip if available
7d6369087 Fix windows default path overwrite issue
13dcf558e Fix windows default path overwrite issue
39478eeec go.mod: Bump up github.com/klauspost/compress v1.16.7 to v1.17.0
859c2651e remotes/docker: Fix MountedFrom prefixed with target repository
c85b1d1e4 Bump up golangci-lint to v1.54.2
6169433b6 Fix linter issues for golangci-lint 1.54.2
e3cb7471a CRI: Snapshotter per runtime handler adjustments
42dc8faba Bump x/net to 0.13
79772a0dd remotes: always try to establish tls connection when tls configured
11a7751af *: add runc-fp as runc wrapper to inject failpoint
68dd47ef7 containerd-shim-runc-v2: avoid potential deadlock in create handler
6604ff6c5 containerd-shim-runc-v2: remove unnecessary `s.getContainer()`
0d76fe5c1 Fix some assertions for integ tests
1dced31c3 ci-fix: pin the mingw version 12.2.0.3042023
aae71aa8e update gitignore to indicate that where contributors can use global gitignore
8ffb03d68 cri: stop recommending disable_cgroup
5365f4b29 cri: call RegisterReadiness after NewCRIService
46645b393 Call migrations per version
5518a5026 remotes: simplify mediatype logic
8b105984b pkg/transfer/local: simplify mediatype logic
79acce462 integration: use mediatype helpers
0ba5b4b62 oci: use mediatype helpers
cdba61603 remotes: use mediatype helpers
69034f755 pkg/display: use mediatype helpers
5ab04ac5a pkg/unpack: use mediatype helpers
da1196979 pkg/snapshotters: use mediatype helpers
f1cbc5f90 containerd: use mediatype helpers
4b1bb1293 remove github.com/opencontainers/runc dependency
62f621a34 images: simplify mediatype logic
377c5ca9c images/archive: use mediatype helpers
bb8a472f2 images: use mediatype helpers
e7254406c Require plugins to succeed after registering readiness
62f273d50 Add migrate subcommand to config command
0320ad184 Add config migration to plugin package
f58158e2d Add config migration and bump config version
bf4fbe4e8 docs: Update `transfer` service docs to reflect completed implementations for 1.7
b40e95e0e images: Config: explicitly return nil-error
36c2222d3 Add usage calculation test
3b60e9366 Create new imagetest package
4c344f2fa Add warning for plugin configs with unknown fields
a9ba33f8f Allow for images with artifacts to pull
650148313 Add warning log for unknown config fields
b5615caf1 Update go-toml to v2
8b413daff Remove log package except for exported const used by hcsshim
2f1b92710 Update zfs library to use new log repository
508aa3a1e Move to use github.com/containerd/log
f1070c4e1 docs/userns: Clarify requirements for k8s 1.25/1.26
42eee8bf0 fix: Add `containerd` to the message type reference
9e819fb4a Update CRI image store to not use containerd client
dcb2e7447 Improve doc of func NewNetNS
2ce971d89 Add delete target to image remove
f8fb2dad3 api: update image service to support target in delete request
8e3722c7d CI: Set slow_chown for overlayfs snapshotter
46d3094aa docs/userns: Fix small typo
d008d64a8 docs/userns: Clarify containerd 1.7 limitations
e37908200 docs/userns: Document the need to opt-in for a slow chown
8bf8e2b97 snapshotter: Use capa prefix consistently for capabilities
ec9e0dca9 overlay: Require opt-in if idmap mounts are not supported.
03b9ce56b deprecate logs package, but disable linter (for transitioning)
d69ae811d alias log package to github.com/containerd/log v0.1.0
729c97cf3 Handle unexpected shim kill events
ed5f7e7c8 Update image in client to use new usage package
96a23ccc1 Create new usage package
79f781d00 Refactor: Removing inherently flaky and unused SourceDateEpochOrNow function.
8cbb4ea5d vendor: github.com/containerd/nri v0.5.0
3ca39ef01 fix: Remove `LimitNOFILE` from `containerd.service`
83240a4f7 Bump crun to 1.9
967313049 doc: Add documentation about CRI user namespaces
2e13d3954 pkg/process: Only use idmap mounts if runc supports it
fce1b9507 go.mod: Update runtime spec to include features.MountExtensions
a81f80884 Revert "cri: Throw an error if idmap mounts is requested"
e832605a8 integration: Simplify WithVolumeMount()
24aa808fe integration: Add userns test with volumes
ab5b43fe8 cri/sbserver: Pass down UID/GID mappings to OCI runtime
e916d77c8 platforms: move ToProto, FromProto to api/types
381442945 platforms: remove errdefs dependency
e0b2b17de cri/server: Add tests for the linux-specific parts of VolumeMounts()
10cb112e4 cri/server: Add tests for ContainerMounts()
97dfa7f55 cri/server: Pass down uidMappings to OCI runtime
b42bdd125 release: remove `cri-containerd-*.tar.gz` release bundles
9656b8c0d nri: update mock plugin handlers
6f9de91ef vendor: update github.com/containerd/nri@v0.4.0
f7089ba22 leases: add WithLabel
1480e3bd4 leases: cleanup TestWithLabels
d94a789d1 Fix usages of `mountinfo.PrefixFilter`
45e303eea task: expose criu work path opt
f77185f9e Fix "even if IPv4 comes first" test to have IPv4 first
88a849626 Don't use `To16() != nil` to detect IPv6 addresses
eaf607101 update to go1.21.1, go1.20.8
1a7490c5a Add link to CONTRIBUTING from README
0413f1272 Add contributors guide
05093d7c0 vendor: github.com/cncf-tags/container-device-interface v0.6.1
ac1d556b9 Add image verifier transfer service plugin system based on a binary directory
55b2df560 go.mod: github.com/grpc-ecosystem/grpc-gateway/v2 v2.16.2
a00888db8 fix reference to canonical fieldmask type
0041996ca CI: bump up crun to 1.8.7
4bc0b2660 Revert the removal of the parameter Container
6ec0d4a3a prevent ctr from creating tags with forbidden characters
a4bdbf784 content: reduce the contention between ref lock and boltdb lock
abfabb6d8 contrib/fuzz: fix redeclared issue
295bcec07 snapshotter: implement unit tests for idmapped mounts for overlay
9d01ed1c3 integration: add test for idmapped mounts
e49e6d6fd snapshotter: implement slow path for idmapped mounts check for overlay
1555a31bf mount: support idmapped mount points
723c88ce3 snapshotter: add "--remap-labels" support to overlayfs
e8ddf669f snapshotter: support "remap-ids" capability for overlayfs
ef6b91947 fix(docs): fix on the windows installation script
5d31e9378 pkg/systemd: use sync.Once for systemd detection
7d0ab4fc2 remove uses of github.com/runc/libcontainer/cgroups
9bc6441c2 vendor: github.com/google/uuid v1.3.1
13ff185ba Blockfile: Enlighten blockfile copy on Darwin
a3e8503ed .github: enable fuzz build
cd705af89 metadata: add image delete events during garbage collection
3f9756c18 gc: add support for image expiration
b32638e21 ctr: pull or fetch image metadata by default
20f79300c push: inherit distribution sources from parent
24aca53fa Update use of content.Infoprovider
f8c789f31 content: add InfoProvider interface
02d519ad6 Update hcsshim tag in runhcs-version script
a2817ca16 CRI: Include sandbox ID in failed to load error
492347090 replace reference/docker for github.com/distribution/reference v0.5.0
26dcae2f6 fix ossfuzz building error
19d6c37a3 Revert "log: define G() as a function instead of a variable"
fd5d92a7f Update hcsshim tag versioning to v0.12.0-rc.0
779875a05 Add missing unpacker.Wait for image import
4f5db2bc0 metadata: format unit test output
15b13fb3e Windows: Supply windows shim version via file
7a0ad09a0 make repositories of install dependencies configurable
34def8b33 Remove redundant nil check
fc45365fa Remove most logrus
f9c35feb3 Makefile: allow overriding GO_BUILD_FLAGS via environment
490905be6 go.mod: github.com/containerd/continuity v0.4.2
03abceac5 Update LTS description
34f32043b Blockfile: Expose RecreateScratch option
b4f487ce9 Apply suggestions from code review
1e3540e11 Add stale bot
4e236962f Update critools to 1.28.0
c92f4a160 Update RELEASES
c3f3cad28 Use sandboxed CRI by default
b76cd4d9f replace some fmt.Sprintfs with strconv
bbdbf7ab6 Add inspect image commands
78308b4a4 Add manifest printer library
11a5dd826 snapshots: replace some fmt.Sprintfs with strconv
06765c9ef oci: replace some fmt.Sprintfs with strconv
710d22366 removes/docker: replace some fmt.Sprintfs with strconv
d7bc8694b pkg/cri: replace some fmt.Sprintfs with strconv
73e9cfd1c append k8s 1.28 to releases
6d8329d7f Remove unnecessary joinError unwrap
8399a4ee7 Remove temporary replace
7ad0a6ccf Update to latest releases in RELEASES.md
cd8c8ae4b Remove hashicorp/go-multierror
1571a5aa0 ctr: metrics: drop unused retval from printWindowsStats()
7063ae1f6 Makefile: add rule for installing documentation
de4c338ab Docs: Document proxy plugin diff support
d09f7cbe0 cri: Fix sandbox_mode "shim"
60b2cb143 cmd: containerd: allow building w/o systemd notify
23c95359a Add WithMetaStore to overlay snapshotter to allow bringing your own
0c1ad52ea cri: spec_linux: drop unused retvals
eacd74c2b Go 1.21.0
5756cb00e CI: increase timeout for Binaries
c883410c9 CI: Explicitly upgrade MinGW on Windows 2019 GitHub runners.
0f043ae43 seccomp, apparmor: add go:noinline
5d9bf7d13 CI: temporarily disable ci_fuzz due to incompatibility with recent Go
e2ce4f58f Populate commit memory for windows memory usage stats
823e0420e Fix transfer service dependencies:
cfb30a31a Invoke Stable ABI compatibility function in windows platform matcher
0cea317a5 FreeBSD: set default runtime
def5ff3c4 Sandbox: Add annotations to controller CreateOptions
939ccbed4 Sandbox: Add annotations to CreateSandbox surface
1fd3a4652 archive/tarheader: fix FreeBSD hdr for regular files
f8edd5555 update runc binary to v1.1.9
f35d1f08e go.mod: github.com/opencontainers/runc v1.1.9
00ef8ba99 Vagrantfile: add strace tool
601699a18 integration: add ShouldRetryShutdown case based on #7496
8dcb2a6e6 pkg/cri/sbserver: fix leaked shim issue for podsandbox mode
72bc63d83 pkg/cri/server: fix leaked shim issue
5bdd9ca93 integration: add case to reproduce #7496
b451fa96a bump client-go v0.26.4
a645ff2e6 Update dependencies after protobuf update in hcsshim
e7e5619fe Update hcsshim tag to v0.10.0
54baf766e add metrics for discarding events
189a1599c archive/compression: update out of date RFC draft link
cac8b6f4b Makefile: allow overriding the binary executable target dir
90443f038 CI: update Rocky Linux to 8.8
0a57dc2a0 CI: update Fedora to 38
30dd0a17f CI: install Vagrant from Hashicorp
965641dbc Makefile: allow REVISION be overwritten by environment
fc32197d4 Makefile: fix overriding go command
2d3360ec7 CI: move Vagrant tests to GitHub Actions (larger runners)
4f3c8c468 replace mcr.microsoft.com registry to ghcr.io/containerd registry
d41c62a55 .github/workflows: add dmesg step for integration-linux
fd8778fba delete checkout branch in doc
c62abcb14 docs: document CRI cgroup driver auto detection
c80a3ecaf cri/sbserver: Use platform instead of GOOS for userns detection
157dff281 update to go1.20.7, go1.19.12
687a5f51a fix: allow attaching to any combination of stdin/stdout/stderr
aa8b094ab platforms: clarify docs for amd64/arm64 variant normalization
710d987d2 Fix default platform matcher when ctr import
2d64ab8d7 cri: Don't use rel path for image volumes
85a2c9a01 log: swap logrus functions with their equivalent on default logger
6baff1694 log: add package documentation and summary of package's purpose
238da2c52 log: make Fields type a generic map[string]any
634a4a1bb log: add log.Entry type
dd67240f1 log: define OutputFormat type
778ac302b log: define G() as a function instead of a variable
81ac648d9 log: add all log-levels that are accepted
0b6333a41 log: group "enum" consts and touch-up docs
4a36022e2 log: WithLogger: remove redundant intermediate var
40ee5fb11 log: SetFormat: include returns in switch
6fe7e03b8 log: remove testify dependency
e2ad5a985 removes/docker: remove unnecessary conversion (unconvert)
ed47d6ba7 cri: implement RuntimeConfig rpc
a1cdf60cb docker: add test to ensure not found error is returned by resolve
b4814a29d docker: return most relevant error from docker resolution
7f7ba31b6 cri: fix using the pinned label to pin image
480757135 pkg/epoch: fix Y2038 on 32-bit hosts
98974117b migrate to community owned bucket
a3404ac42 docker: add missing info log for 4XX/5XX responses
850b2e1bf go.mod: update cri-api to v1.28.0-beta.0
480bc8a2b .github/workflows/ci.yml: upgrade Ubuntu from 20.04 to 22.04
bc96b9039 go.mod: github.com/AdamKorcz/go-118-fuzz-build v0.0.0-20230306123547-8075edf89bb0
da2740885 go.mod: google.golang.org/genproto v0.0.0-20230720185612-659f7aaaa771
73dc13ad6 go.mod: github.com/urfave/cli/compare v1.22.14
1c4fc568b go.mod: github.com/prometheus/client_golang/compare v1.16.0
68abb525a go.mod: github.com/minio/sha256-simd v1.0.1
1f2216cc7 go.mod: github.com/klauspost/compress v1.16.7
3c6ab0420 go.mod: dario.cat/mergo v1.0.0
4bda0a69e go.mod: github.com/grpc-ecosystem/go-grpc-middleware v1.4.0
0f033b612 go.mod: github.com/emicklei/go-restful/v3 v3.10.2
90e050298 go.mod: github.com/containernetworking/plugin v1.3.0
0498acefb go.mod: github.com/.../container-device-interface v0.6.0
74b8cb850 go.mod: github.com/opencontainers/runc v1.1.8
895dd2e93 go.mod: github.com/opencontainers/image-spec v1.1.0-rc4
235a4452d go.mod: github.com/opencontainers/runtime-spec v1.1.0
06f18c69d cri: memory.memsw.limit_in_bytes: no such file or directory
f3daf32c7 Fix ro mount option being passed
b2967a8d6 update runc binary to v1.1.8
90ecb8104 fix: `ctr images check` outputs not unpacked images in quite mode
98f27e1d9 Revert "Add support for mounts on Darwin"
e939d1319 Revert "Revert 416899fc8e81a80a4b09b59c801f98d36ddc0e74"
6c9c71112 Revert 416899fc8e81a80a4b09b59c801f98d36ddc0e74
2799b28e6 Add support for mounts on Darwin
56d80f81a Update hcsshim tag to v0.10.0-rc.9
9c673f967 pkg/cri/server: TestImageGetLabels: use registry.k8s.io
f914edf4f [cri] Handle Windows pod transitions gracefully
52ef3468b Update Go to 1.20.6,1.19.11
48cdf1fe2 integration: Enable userns tests for sbserver
9160386ec cri/sbserver: Test net.ipv4.ping_group_range works with userns
1c6e26844 cri/sbserver: Fix net.ipv4.ping_group_range with userns
36a96d7f3 cri/sbserver: Remap snapshots for sbserver too
508e6f6e0 cri/sbserver: Add userns tests to TestLinuxSandboxContainerSpec()
fb9ce5d48 cri/sbserver: Support pods with user namespaces
c99cb95f0 cri/sbserver: Let OCI runtime create netns when userns is used
73c75e2c7 cri/sbserver: Copy userns helpers to podsandbox
0b6a0fe77 cri/sbserver: Move runtimeStart to match position with cri/server
90087ac44 WithRemapperLabels: Update doc to mention overlay supports it
9d9903565 cri: Fix comment typos
9e34b8b44 Uncopypaste parsing of OCI Bundle spec file
232538b76 bugfix(port-forward): Correctly handle known errors
5c480d9c8 Modify loopback size
7ef133ad4 Fix mount pkg typo
83ff030e4 Change http.Header copy to builtin Clone
cdb153ec9 Resolve docker.NewResolver race condition
01a6e1c73 Dedup WithNewSnapshotView
6a913ac82 Cirrus CI: configure apt-get to wait for locks
38f9bc3e0 fix ci Linux Integration test fail
c17d3bdb5 pkg/cri/server: Test net.ipv4.ping_group_range works with userns
9bf5aeca7 pkg/cri/server: Fix net.ipv4.ping_group_range with userns
05fef52b6 vendor: github.com/containerd/zfs v1.1.0
073de9308 Fix the auto restart fail when using LogURI and TTY together
00e5ae211 shim: change ttrpcService and ttrpcServerOptioner to exported interfaces
e9f63f64f update go to go1.20.5, go1.19.10
22a7c63c0 Sandbox: Change to mount.Mount for CreateOptions
51a1e7f0b Fix example shim to actually use its task service
a9cb6090e ci: remove libseccomp-dev installation for nightly
0607e7326 Move GetTopic function out of runc shim
5dedb6d0d archive: use 1970-01-01 as the whiteout timestamp
d6dbc4040 go.mod: Update cgroups to 3.0.2
f3b7436b6 Platforms: Add From/ToProto helpers for types
b3ab1f26c Snapshots: Add From/ToProto helpers for types
0a6b8f0ee OCI: Add From/ToProto helpers for Descriptor
4df27fd77 Update ginkgo to match cri-tools' version
9a202e342 seccomp: always allow name_to_handle_at
55a8102ec mount: Add From/ToProto helpers
e85352183 integration/client: Rework withBytesBuffers
54a93c6c5 Make ptypes.Empty a var in contentserver
cdc90c838 Remove duplicated code in content Copy
50376ec9f remotes: allow FetchByDigest client to pass mediatype as header
0a92661e6 Add a platform.ParseAll helper
e89d7204e MergeStringSlices use sets
8760b8717 pkg/epoch: extract parsing SOURCE_DATE_EPOCH to a function
9924e56f4 pkg/epoch: fix tests on macOS
dfd7ad8b3 Reword Windows file related TODO
44e2b26a8 pkg/epoch: replace some fmt.Sprintfs with strconv
f82d9b799 Integration: Align empty IO func on Windows
f3124d569 Makefile: Remove hcsshim related TODO
2aeac9a8f Remove duplicated writeIndex func
7601dd9a9 Dedup manifest config platform helper
f3df7f739 log when a lease expires
a01118bbe Minor changes to sandbox metadata
f60a4a271 cri: drop unused arg from generateRuntimeOptions
1fb835f04 Remove unnecessary label bucket loop
a207b430e snapshots/blockfile: fix lint issue
59b0b39af vendor: update github.com/containerd/continuity
d358f1680 fix unbound variable
f4ad68d5f fix-push-image-rate
7de95cbc4 snapshots/blockfile: deflaky the testsuite
6dfb16f99 snapshots|pkg: umount without DETACH and nosync after umount
72b7d1650 mount: support direct-io for loopback device
437f13410 Don't run CI on push
e26c97cb8 Save marshalled empty response in streaming service
9e09bfb59 Use RWMutex in NSMap and reduce lock area
38b0f970f No more nondistributable layers in MS registry
d278d37ca Sandbox: Add Metrics rpc for controller
d115129d1 Add configurable mount options to overlay
d56722ef2 Sandbox: Add SandboxMetrics rpc
4bb709c01 avoid "any" as variable name
577696f60 replace some basic uses of fmt.Sprintf()
5cd6210ad runtime/v2/runc: handle early exits w/o big locks
df280942a integration/client: add timeout to `TestShimOOMScore`
6dd529e40 Pass in imagespec.Platform to WithVolumes()
d18026592 release ticker correctly
28a5199ff Add a check to skip stats for containers that are not running
34a93a0c2 task: don't `close()` io before `cancel()`
007c5b6e3 Setup otlp from env
104b9ef9e Update x/sys to 0.8.0
69b451af5 RELEASES.md: de-deprecation of CNI conf_template will be v1.7.3
ab5365222 ctr: update WritePidFile to use atomicfile
c409c631c shim: WritePidFile & WriteAddress use atomicfile
3c4a1ab1c cri: write generated CNI config atomically on Unix
f3ba7c8a3 atomicfile: new package for atomic file writes
28d8c79de Replace atomicBool with the standard library atomic.Bool
fe4f8bd88 Pinned image support
a85b12d4d docs: cherry-pick individual commits instead of merge commit
738c4c6fa Fix issue for HPC pod metrics
52997ea98 remotes/docker: ResolverOptions: fix deprecation comments
a35ead5b9 bugfix: add nil pointer check for cgroup v1 mem usage
2a60fe5a6 Remove events from init context
d3887b2e6 Support CDI devices in ctr --device flag
3ca5b4437 Remove cni conf_template deprecation
94f0af3ec Image.IsUnpacked(): make error-handling more iodiomatic
54658a115 Image: rename variable that shadowed import
d2b7a1e29 cleanup DEPRECATED TLS config
f857626d6 Move PLEG event back to CRI
fc50334ca Generate sandbox exit events from CRI
d2605de73 add handling of a '.' commondir and bounds checking to mount_linux
cf5605459 Move pod sandbox recovery to podsandbox/ package
45dbb4e54 Publish sandbox events
65906335b Add sandbox events protos
21b3318eb Fix several conversions of "ocispec.Image" to "ocispec.Platform"
f2bc73782 Add cpuset-mems flag to 'ctr run' command
f642c0a5f ctr: add cpuset-cpus flag to 'ctr run' command
314d758fa update auths code comment
9702d4aee snapshots/blockfile: use passed in dst in scratchGenerator
bb82f3683 snapshots/blockfile: use loop if options is empty
9287711b7 upgrade registry.k8s.io/pause version
fbb38ab6b Fix the spelling of repository within the NRI plugin documentation.
752e13d9a fix(docs): minor fix on the windows installation steps
c1b926800 Windows Integration: Switch Azure-based CI to vanilla 2019 image.
b9dfd29b7 Update tests to use volume-copy-up:2.2
4bfcac85f notify readiness when registered plugins are ready
7819da843 Document Protocol Buffer Setup
579b5596c Update volume-ownership image with latest hashes
88a3e25b3 Add targetOS to WithVolumes()
c7ec95caf Reword comment and make slight change to code
ec2bec648 Fix non C volumes on Windows
3d7522b7f ctr: allow run to override mounts
7beaa5e85 Add mount options to blockfile snapshotter
261d45efe docs/remote-snapshotter.md: update links and description
7274e33e3 CRI: Make stats respect sandbox's platform
82deabf9d Optimize metadata Schema notes to correctly match metadata structures
a6cd5e3f4 bugfix: resolve symlink when looking up mountpoint
b9f2e48e3 feat: make overlay sync removal configurable
becf04a59 Update to docker/login-action V2
79709a205 disable provenance
1be571b14 Add sync before unmount on snapshotter layer test
b729962e3 Add blockfile snapshotter to snapshotters doc
798dba9fa Add blockfile as a builtin
0c386e2eb Add blockfile snapshotter
d280cb83b chore: update comment for NetworkPluginSetupSerially
f8907ab87 Update volume-copy-up
811456b31 go.mod: github.com/containerd/continuity v0.4.0
6f715ab10 go.mod: github.com/containerd/go-runc v1.1.0
85cf9a09e Bump seccomp version to be the same as one in runc repo
cdaa4025e Fix some typos
3d9dd2022 ctr: fix the cleanup of task
66307d0b4 CRI: Support Linux usernames for !linux platforms
5dbae3819 snapshots/testsuite: Rename: fix fuse-overlayfs incompatibility
df65e321e Simplify closing bundle dir fd
718250b6b Update ttrpc to v1.2.2
7e42dc34d improve container Task comment
4347fc8bc go.mod: github.com/opencontainers/image-spec v1.1.0-rc3
5e054ee63 go.mod: github.com/opencontainers/runtime-spec v1.1.0-rc.2
bb61a6d4b cache diffIDs
6e2c915a4 Bump up golangci-lint to v1.52.2
ecb693ec7 bump typeurl to v2.1.1
f5211ee3f Change to Readdirnames for some cases
e60a17925 .github: disable cache for actions/setup-go@v4
52afa34f5 cri: update WithoutDefaultSecuritySettings comment
6f34da5f8 Cleanup logrus imports
717169bb8 plugin: remove go < 1.8 stub, enable on windows and arm64
28d749c9e move to CRI-TOOLS v1.27.0
27f56e607 Fix umarshal metrics for CRI server
b947a6f52 update go to go1.20.4, go1.19.9
c54b706c0 Add faasd and actuated into the ADOPTERS file
d56466cf3 [transfer] avoid setting limiters when max is 0
2e53c0ec8 Windows integration: fix critest binary path in Azure-based workflow.
9e7f8fe30 Update CRI registry configuration docs
0d975230e Fix panic when remote differ returns empty result
c58a229e5 Run CI when adding to the merge queue
0ba066474 vendor: github.com/opencontainers/runc v1.1.7
cbd10e41a vendor: github.com/opencontainers/runc v1.1.6
27c0fe3eb update runc binary to v1.1.7
4891bba83 Update tar tests to run on Darwin
d9f3e387c Remove entry for container from container store on error
8ba285f6b fix unable to checkpoint the container more than once
370be0c18 Move logrus setup code to log package
92b93e376 cri: Vendor v0.27.1
8c80ccc7f Update external repo links that changed default branch to main
519457e3e ctr: Add sandbox flag to ctr run
c786994ea Update transfer configuration
4e5693938 Add platform config to proxy plugins
4192ca8f8 pkg/cri/server: sub-test uses array and capture range var
8bcfdda39 pkg/cri/sbserver: sub-test uses array and capture range var
745ec84e5 Add diffservice to contrib
3784c1c91 Add proxy differ
cb2c3ec8f oci: partially restore comment on read-only mounts for uid/gid uses
f23816740 go.mod: add comment explaining go-fuzz-headers replace rule
ec9e74ed9 go.mod: remove replace for github.com/opencontainers/runtime-tools
6c40cf305 go.mod: integration: use non-pre-release of containerd
92d1e9bee go.mod: integration: move indirect dependencies to the right group
18d7e84f9 runtime/shim: fix the nil checkpoint options
cd16b31cd Get CDI devices from CRI Config.CDIDevices field
da4de96e2 containerd support k8s 1.27
4b35c3829 update shim example
71ababe30 runtime/shim: remove runc/v2/services
b71f4b751 runtime/shim: rename RunManager to Run
49111b115 update runc binary to v1.1.6
85df1cc6b doc: update CI signal info in README
7e6ab8488 cri: Throw an error if idmap mounts is requested
85afda6f5 cri: Vendor v0.27.0-beta.0 for mounts uid/gid mappings
f7b8b1181 update the version of the runc shim in the readme and examples
dc2fc987c capture desc variable in range variable just in case that it run in parallel mode
05bb52b27 Use t.TempDir instead of os.MkdirTemp
7a7519a78 CRI Sbserver: Make PodSandboxStatus friendlier to shim crashes
79cb4b000 [sbserver] handle missing cpu stats
464a4977a [sbserver] Refactor usageNanoCores be to used for all OSes
e0b817ec1 Fix argsEscaped tests
aee358765 Update to setup-go@v4 action
811be6085 Update Azure-based Windows workflow image SKUs.
dfc7590d5 remotes/docker: Add MountedFrom and Exists push status
db223271e Register imagePullThroughput and count with MiB
6f0714efc Use RunWithPrivileges
b41ca1159 Fix access denied on mounted vhdx root
a7fddb40b Use wait instead of a sleep to check for startup delay
d0527e228 Support for dropping inheritable capabilities
0fb2d9132 update go to go1.20.3, go1.19.8
cab056226 oci: Use WithReadonlyTempMount when adding users/groups
c9e5c33a1 UnmountAll is a no-op for missing mount points
8538e7a2a Improve error messages and remove check
ba74cdf15 Make ReadOnly() available on all platforms
7bb2756bc Increase integration test tmieout to 20m
1279ad880 Remove bind code path in mount()
6a5b4c9c2 Remove "bind" code path from diff
76690706f CI: bump up crun to 1.8.3
d373ebc4d Properly mount base layers
ca5605b4a Skip parent layer options on bind mounts
7f82dd91f Add ReadOnly() function
157fe6a13 docs: fix typo in comment of ExitStatus.Exit(Code|Time)
4012c1b85 Remove escalated privileges
54f8abe55 Use DefaultSnapshotter
47dd3dcff use t.Fatal if we cannot enable process privileges
e31bef15f Update continuity
95687a932 Fix go.mod, simplify boolean logic, add logging
7a36efd75 Ignore ERROR_NOT_FOUND error when removing mount
db3279859 Update continuity, go-winio and hcsshim
00efd3e6d Remove unused function
dc980b14a Grant needed privileges for snapshotter tests
feb637f92 Fix layer comparison and enable read-only checks
36dc2782c Use bind filer for mounts
d591bb042 Enable TestSnapshotterClient on Windows
7b36becd2 Run Windows snapshotter through the test suite
ac30eabbd Fix misspelling of 'Native' as 'Naive'
639c5799a Add paired 'mount' log for 'unmount'
8395e3a89 Don't use all-upper-case filenames in snapshot tests
909730dec Skip tests that do not apply to WCOW on Windows
469c13997 Ensure mounts are unmounted before leaving the test
84cc3e496 Unify testutil.Unmount on Windows and Unix
474a257b1 Implement Windows mounting for bind and windows-layer mounts
34b07d3e2 Implement WCOW parentless active snapshots and view snapshots
82ec62b86 fix: cio.Cancel() should close the pipes
ac84bf7c8 Update sbserver to add noexec nodev and nosuid to /etc/resolv.conf mount bind.
126ab72fe Keep linux mounts for linux sandboxes on Windows/Darwin
990199a02 Test to ensure nosuid,nodev,noexec are set on /etc/reolv.conf mount.
96490734b update runc binary to v1.1.5
b55dad06a go.mod: github.com/opencontainers/runc v1.1.5
c89438e83 integration: add container start test using abs runtime path
3557ac884 Extract image service from CRI
97064b077 WithRuntimePath uses the TaskInfo.RuntimePath field
c56f54aa1 devmapper plugin: skip plugin when not configured
a11e47b48 Use built in atomic.Bool
87346df54 Defer uid lookups on Darwin
ae4dbb60d Add noexec nodev and nosuid to sandbox /etc/resolv.conf mount bind.
1be08b10f ctr/tasks: fix unmarshal the task metrics for cgroups v1
8322bcb88 Adds a file header
50b576a94 Adds a dev container and Codespaces docs
0bbca7f1b Cleanup protobuild config
daa3a7665 Add `WithReadonlyTempMount` to create readonly temporary mounts
f48ae2227 fix: Update error message format based on feedback
3193650f1 fix: 'failed to resolve symlink' error messaging
14714b94d Fold the output of `crictl info`
5fdca538d adding cni metadata to the container in the `ctr run --config`
32d431a7c Update crictl doc
690ae58ca Update cri-tools version on windows
5956cdea8 Remove third-party package cri-api
c011502bd Remove cri v1alpha1 services
23d288a80 Remove the CriuPath field from runc's options
62f98a1c1 CRI: Don't always close netConfMonitor channel
a4d33a784 Remove support for config.toml `version = 1`
3e87f05b6 Fix image pulling with Transfer service
c5f1086ad Update docs
fda5c84bc Update gce contrib to use v2 by default
8bd82e355 Remove no_pivot when creating container from CRI
07c2ae12e Remove v1 runctypes
c50a3ef04 Update Makefile and CI
ef516a150 Remove runtime v1
76778aee6 integration: add restart monitor test for paused task
35a103d32 Remove "containerd.io/restart.logpath" label (deprecated since v1.5)
08337f356 Pre-splice strings and determine whether it is a file and check criCleanup err.
e0d9b9663 Fix restarting the paused containers
86fc1ccab Remove `aufs` snapshotter (deprecated since v1.5)
50740a1a0 use strings.Cut instead of strings.Split for parsing imageConfig.User
b39ac5d09 docs: fix typo in comment of plugin.Plugin.Err()
d835fd2a3 Sandbox: Correct/add some fields to Status()
d3e856da7 export: add test for WithSkipDockerManifest
70da5c783 Sandbox: Cleanup shim on Start failure
406583165 archive: consistently respect value of WithSkipDockerManifest
727b25403 fix userstr for dditionalGids on Linux
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Xiangyu Chen
|
6e69a270b3 |
lxc: add distrosysconfdir option to make sure the lxc configuration in correct folder
After the commit[1] "meson.build: allow explicit distrosysconfdir", the config of lxc would install
to distrosysconfdir[2], if this value not set, it might set to /etc/sysconfig, that cause lxc-net
configuration cannot be found[3] due to our bb file install the lxc-net to /etc/default folder.
Ref:
[1]
|
||
|
Jose Quaresma
|
1db447e785 |
docker-compose: v2.20.3 -> v2.21.0
- d6f842b0 test: e2e test reliability improvements (#10950) - 4fbbf201 build(deps): upgrade to compose-go v1.18.3 (#10947) - 935d72f4 added the dot at the end of the sentence - 41682acc add support for attributes exposed by `docker ps` - 1054792b align docker compose ps with docker CLI to support --format - 19f66918 watch: only allow a single instance per-project - 186744e0 ci: bump golangci-lint to v1.54.2 - bc9d696f Merge pull request #10922 from thaJeztah/replace_dockerignore - 6204fb1c logs: fix for missing output on container exit (#10925) - 5d732010 replace dockerfile/dockerignore with patternmatcher/ignorefile - 2006f3fe go.mod: github.com/moby/patternmatcher v0.6.0 - 192718c0 go.mod: remove some outdated comments - c79f67fe otel: add `include` to project up span - 3b294bfd build(deps): bump github.com/compose-spec/compose-go from 1.18.1 to 1.18.2 (#10915) - dd34f7a2 include: add experimental support for Git resources (#10811) - caad7271 up: handle various attach use cases better - 792afb8d build: use correct values for proxy variables (#10908) - 150449bb warn user secret uid/gid/mode is not supported Signed-off-by: Jose Quaresma <jose.quaresma@foundries.io> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Jose Quaresma
|
9a1f4d91d9 |
docker-compose: drop patches from the removed python version
Drop unused patches from the python version removed in
|
||
|
Chen Qi
|
0eef35edee |
docker: remove unnecessary dependencies
The build is not using the codes from these source packages. Remove the dependencies. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Bruce Ashfield
|
62ac94c50d |
runc-opencontainers: update to 1.1.10
Bumping runc to version v1.1.10-2-gf3446b1e, which comprises the following commits:
be887840 VERSION: back to development
18a0cb0f VERSION: release 1.1.10
b426e9b7 libct/cgroups.OpenFile: clean "file" argument
8214e634 libct/cg: support hugetlb rsvd
f8be7009 [1.1] tests/int/helpers: add get_cgroup_path
1f66027a ci/gha: fix downloading Release.key
5a5b2cc3 Fix directory perms vs umask for tmpcopyup
b365458f fix a typo in cloned_binary.c: re-use -> reuse
8f66c9fb fix two typos
016b2b42 Handle kmem.limit_in_bytes removal
11737f55 VERSION: back to development
ccaecfcb VERSION: release 1.1.9
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
2e11f93ab4 |
crun: update to v1.11.2
Bumping crun to version 1.11.2-7-gff2b74f, which comprises the following commits:
2cc04ea systemd: fallback to system bus
767ba88 Fix build without libcap
98d9cc9 systemd, cgroup: configure cgroups before joining them
ab0edee NEWS: tag 1.11.2
c965462 src: fix codespell error
267f2c5 make: fix clang-format
6e65f5e cgroup: fix crash on cgroup v1 without cpu resources
57e6f9c terminal: adopt ptsname_r POSIX specified return value
6674353 fix: remove the redundant header file
1084f95 NEWS: tag 1.11.1
4cbc9ad linux: force remount with mounts from parent
11f8d3d NEWS: tag 1.11
f8e4f4e cgroup: honor cpu burst
8b44699 systemd: set CPUQuota and CPUPeriod on the scope
5a0ede2 systemd, cgroupv1: set the cpuset data also on the scope
20bb4aa systemd, cgroupv2: set the cpuset data also on the scope
970d20e tests: fix ioprio test
3b874c2 linux: append tmpfs mode if missing for mounts
863008d init: add new function to check file mode
7c3393c cgroup: always use the user session for rootless
c60c9f2 Update nixpkgs
c053c83 NEWS: tag 1.10
2cc7390 linux: new mount option "copy-symlink"
33cabe6 tests: fix test name
9ee3460 linux: fix error propagation
53c28d9 utils: export safe_readlinkat
a549ce0 tests: skip ioprio tests as rootless
1466b7b linux: Fix -Wunused-result compiler warnings when run './configure' only
bdb95d6 features: export intelRDT status
e2f9853 update: support update of Intel RDT
05bc600 libcrun: support update of Intel RDT
41ae2a2 libcrun: plug Intel RDT support
52d5faa libcrun: add Intel RDT support functions
a7a1af9 container: fix early return
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
c43ce48045 |
moby: update to v24.0.7
Bumping moby to version v24.0.7, which comprises the following commits:
05d7386665 daemon: daemon.containerRestart: don't cancel restart on context cancel
dd37b0b960 vendor: github.com/klauspost/compress v1.17.2
7058c0d24d vendor: github.com/klauspost/compress v1.16.5
57bd388582 daemon: overlay2: Write layer metadata atomically
05d95fd503 daemon: release sandbox even when NetworkDisabled
2783345d3a daemon/c8d: Use non cancellable context in defers
a9e20aeaed daemon/containerd: rename some vars that collided with imports
a8d0a58b24 daemon/containerd: newROLayerForImage: remove unused args
c981f8aff7 daemon/containerd: log errors when releasing leases
73814c48df internal: Add compatcontext.WithoutCancel
535b70e90c Update check-config.sh
dde5995051 vendor: golang.org/x/net v0.17.0
8864727bae vendor: golang.org/x/crypto v0.14.0
81d73e17f7 vendor: golang.org/x/text v0.13.0
d8c62df0b6 vendor: golang.org/x/sys v0.13.0
d7a1fcef8f vendor: golang.org/x/net v0.13.0, golang.org/x/crypto v0.11.0
a22da0d5c4 vendor: golang.org/x/text v0.11.0
85234039a6 vendor: golang.org/x/crypto v0.9.0
9702281ba0 vendor: golang.org/x/sys v0.10.0
01860dc813 vendor: golang.org/x/crypto v0.3.0
daf599ea0a replace dockerfile/dockerignore with patternmatcher/ignorefile
1dffa3a814 vendor: github.com/moby/patternmatcher v0.6.0
58c1c7b8dc Limit OOMScoreAdj when running in UserNS ("Rootful-in-Rootless")
19039eae0b profiles/apparmor: deny /sys/devices/virtual/powercap
164a1a0f14 oci/defaults: deny /sys/devices/virtual/powercap
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
a215d8320e |
buildah: drop statically linked x86 entrypoint
commit e89fac6c9bf8d0b [Add `buildah mkcw`, add `--cw` to `buildah commit` and `buildah build`] added a statically linked x86 entrypoint binary This entrypoint is not currently used in the tested / supported worflows. To avoid packaging QA warnings on non-x86 architectures, we remove the binary during the compilation phase. If it does need to be rebuilt in the future, buildah's Makefiles will have to be changed to not test the host for architecture support, and use the OE defined target arch and cross compilers instead. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Bruce Ashfield
|
5587dd1535 |
podman: fix documentation build issues
podman commit dfec510b41b5 [go-md2man: use vendored-in version, not
system] removes the shell test for go-md2man, which means our native
executable is not found.
While we could export GOMD2MAN and point it to our sysroot version
(${RECIPE_SYSROOT_NATIVE}/usr/bin/go-md2man), we could run into the
issues with formatting that the podman commit is trying to avoid.
If we pass our build host architecture to the build, it will be
used and the executable created as part of the compilation.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Kai Kang
|
710f858012 |
umoci & buildah & podman-tui: mark incompatible with mips
Since the runtime dependency skopeo has been marked incompatible with mips, mark for umoci accordingly. buildah and podman-tui rdepends on podman which has been marked incompatible with mips, so mark for them too. Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Leonard Anderweit
|
28e044b98e |
podman-compose: Actually update to v1.0.6
Commit |
||
|
Bruce Ashfield
|
d9af8d1514 |
podman: update to 4.7.1
Bumping libpod to version v4.7.1-6-g85b5f5723, which comprises the following commits:
d1cb93d79 rtd: implement v2 build file
8d045d4c9 Adjust to path name change for resolved unit
eb5b5dbc8 Switch version to 4.7.2-dev
ef83eeb9c New version: v4.7.1
cc5acabf0 Update RELEASE_NOTES.md for v4.7.1
456450438 compat API: speed up network list
a2efda96d inspect: ignore ENOENT during device lookup
f931f08a7 test/system: --env-file test fixes
297a66c30 Revert "feat(env): support multiline in env-file"
46a85e054 Revert "docs(env-file): improve document description"
6afddf430 Revert "fix(env): parsing --env incorrect in cli"
c5ca7e5fc [CI:DOCS] update swagger version on docs.podman.io
51ee25d3f Fix locale issues with WSL version detection
4d15c88a9 switch version to 4.7.1-dev
073183fe1 Bump to v4.7.0
44f727fb0 [CI:DOCS] v4.7.0 RELEASE_NOTES update
2d32314d2 rpm: remove gvproxy subpackage
a2697c028 packit: tag @containers/packit-build team on copr build failures
54ce0ca7c specgen, rootless: fix mount of cgroup without a netns
d2f9af717 pass --syslog to the cleanup process
133e3a4f2 fix --authfile auto-update test
2c62815e1 version: switch back from -rc1 to -dev
7845dd175 New pre-release: v4.7.0-rc1
49f76e95e [CI:DOCS] Update release notes for v4.7.0-rc1
fa6f94001 Cirrus: Update operating branch
0728a10c6 Move podman build opts to common file
8a9f778e2 Add ability for machine rm -f for WSL
919dce131 Plumbing to run machine tests with hyperv
ade0c4932 CI: trace setup and runner scripts
c37443e8b Bump to Buildah v1.32.0
9b36f334d [CI:DOCS] bump release notes on main with the latest release
cae110f8b fix(deps): update module github.com/opencontainers/image-spec to v1.1.0-rc5
4a2a423df Add --filter pod= autocompletion
075cf2254 e2e: ExitCleanly(): manual test fixes
db5adca73 e2e: continuing ExitCleanly(): just the replacements
c689fb4a5 Fix some spelling and formatting
522e0f43f Add support for Ulimit in quadlet
b1e3e8d97 Run codespell on code
6b7f718b4 wire in new buildah build options
f9aba28ca make golangci-lint happy
c1b6effac add !remote tag to pkg/specgen/generate
3acee29cf pkg/specgen: do not depend on libimage for remote
2c2299ad8 bump buildah to latest
bf86ed72c [CI:DOCS] restart.md: migrate to container unit
304b22729 fix(deps): update module k8s.io/kubernetes to v1.28.2
4ed3273f6 Add support for PidsLimit in quadlet
70560f916 Add DNS fields to Container and Network unit groups
777b5efa4 [CI:DOCS] update API docs version list
7b9114023 Try to fix broken CI (gvisor-something)
df011f437 e2e: more ExitCleanly(): manual test fixes
cb1cb338c e2e: more ExitCleanly(): dumb string replacements
62ac96e12 e2e: create_test: use ExitCleanly()
b0f77acd1 e2e: diff_test: use ExitCleanly()
5920bfa2e The `podman init` command cannot modify containers.
639a1a029 bump c/common to latest main
806c5de12 Podmansh: use podmansh_timeout
eefaa512a e2e: more ExitCleanly(): low-hanging fruit
9b17d6cb0 vendor: update checkpointctl to v1.1.0
cdcf18b86 kube: add DaemonSet support for generate
75b4679a7 vendor of containers/(common, storage, image)
19bd9b33d libpod: move oom_score_adj clamp to init
4f017236e e2e: commit_test: use ExitCleanly()
3a4be5e90 e2e: container_clone_test.go: use ExitCleanly()
8cb14e54a e2e: use ExitCleanly() in cleanup_test.go
925794c6a Ensure HC events fire after logs are written
65a64da27 [CI:DOCS] podman-systemd.unit: fix equivalents
d9a85466a Add support for kube TerminationGracePeriodSeconds
5eb0a53a0 Update podman-kube-play.1.md.in
c2cd93cdc Split up alt binaries to speed up build
7bf9f302a Switch installer task to EC2
fbbad0439 pod: fix duplicate volumes from containers.conf
0c75eac63 tests: add test for pod cgroups
b8f6a12d0 libpod: create the cgroup pod before containers
331b3c216 cmd, specgen: allow cgroup resources without --infra
83334fb4e specgen: allow --share-parent with --infra=false
5de8f4aba libpod: allow cgroup path without infra container
5121c9eb0 libpod: check if cgroup exists before creating it
38209ef49 libpod: refactor platformMakePod signature
627ac1c96 libpod: destroy pod cgroup on pod stop
9a347619d utils: export MoveUnderCgroup
556db46a6 libpod: refactor code to new function
65bddfcd2 e2e: use ExitCleanly() in checkpoint tests
479680232 [CI:DOCS]Remove use of --latest|-l from tutorial
afeab39d1 CI test runner: upgrade tests rely on system tests
59bd6a74a run --rmi: "cannot remove" is a warning, not an error
70cf9740f StopContainer: display signal num when name unknown
6f913f5f3 URGENT: fix broken CI
b83485022 Add support for kube securityContext\.procMount
589867d71 podman: don't restart after kill
2d7d8d1d1 Tmpfs should not be mounted noexec
c2575f726 sys tests: run_podman: check for unwanted warnings/errors
1211518e8 chore(deps): update dependency setuptools to ~=68.2.0
465150f10 e2e: use ExitCleanly() in attach & build tests
27495981c Some distros do not default to docker.io for shortname searches
30abd7f1a security: accept empty capabilities list
c32cfb1d0 systests: random_free_port: fix EADDRINUSE flake
a5798e9f5 fix(deps): update module github.com/cyphar/filepath-securejoin to v0.2.4
dbfc3e7e0 Restrict fcos_test to amd64, arm64
7b2fc5f8d fix(deps): update github.com/containers/libhvee digest to 56fb235
0a913d578 fix(deps): update module github.com/docker/docker to v24.0.6+incompatible
f9fd40221 fix(deps): update module golang.org/x/tools to v0.13.0
71549c642 Ignore spurious container-removal errors
e5bf0f96d fix(deps): update module golang.org/x/net to v0.15.0
fdf694fcf systests: manifest zstd test: lots of tiny cleanups
9730c0373 vendor: update github.com/opencontainers/runc to main
e825bd5d5 [skip-ci] Update actions/checkout action to v4
8b4a79a74 linux, rootless: clamp oom_score_adj if it is too low
681b6db3f machine: increase max number of inotify instances
302d15334 fix(deps): update module golang.org/x/term to v0.12.0
f094884c1 Remove redundant nil checks in system connection remove
17037af48 fix(deps): update module golang.org/x/text to v0.13.0
1d51cd14a fix(deps): update module golang.org/x/sys to v0.12.0
f542d21a7 fix(deps): update github.com/containers/libhvee digest to 2bf7930
d4fedb288 docs(readme): fix a broken link
50cd072bf [CI:BUILD] Podman FCOS image from main
58a0b7ac8 Update golang.org/x/exp digest to d852ddb
fe7bafb83 Add port forwarding and gvproxy machine test
702709a91 libpod: do not parse --hostuser in base 8
13342e503 fix: default typo
3a6fc8d2b Add Japanese locale and translation of index
39c5b7fac remove rh.container.bot@gmail.com
a62abfe3d Tweaks and cleanups to prepare hyperv for CI
a0738e7e6 system tests: housekeeping: various small fixes
4082b67f6 CI: e2e: first use of new ExitCleanly() matcher
6cbd17c0f CI: e2e: new ginkgo matcher, ExitCleanly()
da1246d58 CI: e2e: fetch the standard system-test image
d20b5869f kube play: fix pull policy
18d35b612 Fix gidmap command in example
e66c04c1f vendor containers/common@12405381ff
b95ae3b4a manifest,push: support add_compression from containers.conf
1085177fe hyperv ignition: use gvforwarder instead of vm
2a8e6acec Set remote username earlier for hyperv
26cefcbf9 Added an additional troubleshooting problem and solution
a3c2d6ad2 Remove a dependency on libimage from pkg/bindings
f1c24df4f Rename parameter in pkg/bindings
259ab8594 Remove a dependency on libimage from pkg/api/handlers
4cac1d3bc Don't re-inspect an image
99834947d Cirrus: Remove multi-arch podman image builds
91b8bc7f1 uid/gid mapping flags
18c2a2be8 [DOC] Clarify default behaviour on uidmap
60e3b5ef1 Update containers/common to latest
fe3c4562f update libhvee
1b45fd723 /_ping handler: return OSType http header
2dbb0b096 e2e: fix race condition (kube play + logs)
fe11db1e8 Update module github.com/vbauerster/mpb/v8 to v8.6.0
7ef97fa49 Kube - support List documents
346e5e52e kube down/play --replace: handle absent objects
0938ee189 push, manifest-push: --force-compression must be true with --compression-format
4b347609d oci: print stderr only after checking state
461230c49 Updated docs to reflect pod spec sysctls support added in v4.6
b8146a8a2 [CI:BUILD] Packit: Disable unexpected journal message check for cockpit-podman
a6f2f5854 [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras
b6b300c79 Update machine init/set tests
da81bc13a Add rootful status to machine inspect
d3618719b Dedup and refactor image acquisition
adf34cbd7 Share podman sock bindings with other WSL distros
db95e678a Fix user-mode validation check
d898ae7f9 system tests: try to fix sdnotify flakes
ecf9f9fd8 Cirrus: Disable only hello multiarch build
f32e954b8 Set StopTimeout for service-container started under podman kube play
d2ec127c1 Set StopTimeout for compat API if not set by client
6f284dbd4 podman exec should set umask to match container
2c5c2d213 [CI:BUILD] Packit: run cockpit-podman tests in PRs
52ed7fce2 Add infra-name annotations to kube gen/play
a5f6a4a3b kube: notifyproxy: close once
7a94f8c12 system service: unset NOTIFY_SOCKET
638f994c2 Update module k8s.io/kubernetes to v1.28.1
7c9c96981 API attach: return vnd.docker.multiplexed-stream header
60e58f059 test/apiv2/60-auth.at: use `doesnotexists.podman.io`
61dd7f80c e2e tests: use registry:2.8.2 (was 2.8)
243f365aa create apiutils package
c5b4eb943 api docs: document stream format
70f77efef Revert "Remove `hello` multi-arch image build"
82bd56be7 manifest-push: add support for --force-compression
469ace091 push: add support for --force-compression
202cc433a Update module github.com/onsi/ginkgo/v2 to v2.12.0
7e0130f75 Remove `hello` multi-arch image build
1b0e64a10 hack/perf/system-df.sh: add `df` benchmarks
148d95d8d Expand env variables for cmds/entrypoint with format $(ENV)
e092f887f vendor c/storage@6902c2d
c416e4576 Ignore the resource limits on cgroups V1 rootless systems
9e680cbc6 Fixups for stopping gvproxy
21c9517b5 Revert "GHA: Closed issue/PR comment-lock test"
f0e8e79c9 GHA: Closed issue/PR comment-lock test
5477fd38a GHA: Add workflow to lock closed issues/PRs
75ce47347 [CI:DOCS] update auto-update docs
85d0df330 chore(deps): update dependency containers/automation_images to v20230816
bc35e28c0 fix(deps): update module github.com/google/uuid to v1.3.1
3d00744d2 libpod: sum per-interface network stats for FreeBSD
5eee8825e Set default Umask for `podman kube play`
ef8f4db81 [CI:BUILD] rpm: spdx compatible license field
e9539768c chore(deps): update dependency golangci/golangci-lint to v1.54.2
63a8926e9 Implement automatic port reassignment on Windows
45ce4834a Add support for ramfs as well as tmpfs in volume mounts
bdc304058 Validate current generation of WSL2 with user-mode-networking
67756ac60 use container restart policy if user specifies one
0772d8ddb Stop gvproxy on hyperv machine stop
50136ea86 [CI:BUILD] rpm: depend on man-db
36e09f18b Update machine list test
8b2990131 Update machine start tests
c3dbfa9a1 Update machine rm tests
c726cf810 libpod: improve conmon error handling
ed1f514d5 cirrus setup: install en_US.UTF-8 locale
8f85aaf07 fixup "podman logs with non ASCII log tag" tests
27b41f087 libpod: use /var/run instead of /run on FreeBSD
9b4f1cdb9 cirrus/lib.sh: extend env to passthrough at start for locale work
ff66f31dd libpod: correctly pass env so alternative locales work
29c298856 cgroups_linux: use SessionBusPrivateNoAutoStartup
362747cfa podmansh man page UID=$(id -u lockedu) is not allowed
e38cf33a6 CI: systests: remove pasta ICMP tests
7103fdb3f podman.1.md: Fix formatting of exit code 127, clarify wording of `exit code` example.
896cab612 document available secret drivers
53dd37cc4 pkg/specgen: add support for read-only root on FreeBSD
d5841ed52 add --module flag
6a3f09e8a Update dependency setuptools to ~=68.1.0
1d5890bcd Add riscv64 architecture to the cross build target
252f51de8 GetFcosArch add `riscv64` arch
98e7d7af0 Update WSL backend to be compat with FCOS defaults
9e14e3ebe enabled hyperv image downloads
3e2e360b9 fix(deps): update module github.com/containers/ocicrypt to v1.1.8
abd35d4d3 [CI:DOCS] Fix git build example in build page
0c52d1004 CI: e2e manifest_test: use image from quay
31dc42224 Cirrus: Remove EC2 experimental flag
4c7546cb3 sphinx: skip options include dir
345b9b029 Update rootfs.md: Fix formatting and wording of idmap option
f33b01b73 fix: Docker API compatible bool deserialization
4cb2d48ca Revert "compat,build: pull must accept string"
68bd81470 Add missing verb in machinectl example
78d6cd4c9 [CI:DOCS] Update Release Notes and Release Process
b6349017a chore(deps): update dependency golangci/golangci-lint to v1.54.1
4b80492bd fix podman top missing output flake
5908999e6 New partial-line test is flaking
555b4f930 [CI:BUILD] Packit: add back fedora-eln targets
f0dac3677 Cirrus: Prune defunct job + fix noop alias
1947f035c Bump bundled gvproxy to 0.7.0
df28df1ae systests: tests for --env and --env-file
bcebcad1f Update system connection add & remove
310f971fc Add tests for podman farm
dce3ef3c4 Add podman farm update command
44a704dfc Add podman farm remove command
59a8140f1 Add podman farm list command
6fcdf1a19 Add podman farm create command
1d5ef29f0 Add podman farm subcommand
23d5b5008 CI: e2e: add delay before podman logs or journalctl
2951316b2 Add completion for Farms
b672ddc79 Vendor c/common changes
3963c5639 chore(deps): update dependency golangci/golangci-lint to v1.54.0
a55c2636d file logger: fix podman logs --tail with partial lines
7ce654fea fix(env): parsing --env incorrect in cli
4c4bc0922 Update docker.io/library/golang Docker tag to v1.21
f55c48ad3 podman stop --cidfile missing --ignore
7ef03517f Skip podman exec cannot be invoked on Debian
95ceacefb Re-enable checkpoint test on Debian SID
c193dbd94 Require a non-generic reason for non-Fedora skip
d79e3a23d CI FIXME removal/update.
5ec856652 Update dependency containers/automation_images to v20230807
7988dd82c [skip-ci] Update dawidd6/action-send-mail action to v3.8.0
8a410784b [CI:DOCS] fixed couple typos in build docs
282594e58 Stop timer in function waitPidStop
7c0bccaf7 packit: Build PRs into default packit COPRs
afaeedef7 Add support for host-gateway
2de22ebf0 Ensure volumes-from mounts override image volumes
03d7a5120 Minor: Include shasums in GHA workflow artifacts
d63ac0652 Minor: Add important comment to windows GHA workflow
9d7fe4e90 Minor: Update/fix dry-run input descriptions
518daef72 [CI:DOCS] Quadlet - provide more information about network files
819129b0d man-page xref: check for duplicate entries
39641482c cp: close temporary file on error path
018fdb48e Makefile: work around the lack of 'man -l' on FreeBSD
0b7769fda Update module golang.org/x/net to v0.14.0
ec5a9b9cc libpod: fix a crash in 'kube generate' on FreeBSD
23c5890f2 remove temporary files when copy [NO NEW TESTS NEEDED]
fab62f816 Update module golang.org/x/sys to v0.11.0
b46d72fec [ci] Remove the podman socket in remove_packaged_podman_files()
706c51b52 [ci] Correct the podman systemd file names
dd4f47dd9 Always show RemoteSocket.Exists in json
fc7c6efd3 Fail if ssh key exists
69e883493 Fix regression for hyperv
803a49da4 [CI:BUILD] Makefile: rpm target generates correct version
1a63c1b23 Fix nits in #19480
1e5453943 Add support for passing container stop timeout as -1 (infinite)
d50054f1e pkg/specgen: Add device support for FreeBSD
f5058f148 [CI:DOCS] man: remove duplicate entry .LastUp
a8974d4a3 CI: e2e: remove useless test
53d44a65e Check tty flag to set default terminal in Env
62a22c5d6 Run codespell on code
44f159ed3 Deprecate podman generate systemd
346f9cb4e manifest/push: add support for --add-compression
8ccda1ee8 [CI:DOCS]Update Release Notes
b91599742 CI: sys: quadlet %T test: do not rely on journal
4d69f0146 GHA: Support testing build/sign workflows
15f35d354 Remove unnecessary backslashes
18e75daa5 [docs] Use code blocks for commands in podman-completion
f3ebd798c Make podman run --rmi automatically set --rm
8b7701f52 machine: QEMU: recover from failed start
49b8b971a vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a
bfd2a8cad secret: add support for `--ignore` with rm
21ebe0e90 Move `writeConfig` logic to shared function
597ccff0b Move some logic of `setRootful` to a common file
98cf8462a move `removeFilesAndConnections` to a common file
75a8f13c4 Move `waitAPIAndPrintInfo` to common file
55c7b5cec Move `addSSHConnectionsToPodmanSocket` code to shared file
0489d3aa6 Update module golang.org/x/net to v0.13.0
d74c225f4 chore(deps): update dependency containers/automation_images to v20230726
27d79e1fc Skip pasta local forwarder test on debian SID
b69cd8d84 Skip broken/flaky blkio-weight test
822f2f495 Skip tarball re-inport test in rawhide for CI
851cd9cca Cleanup CIDFile on podman-remote run --rm command
a237c3f46 CI: e2e: remove workaround for missing login file
42ad0c6e7 vendor: bump c/image and c/common
5b7dce8a3 Add support for confined users
78b850c48 Cirrus: Temp. disable rawhide validation task
def70012b Limit git-validation to 'short-subject'
33b8c451e Fix up man page and add test on globs
850482b31 Move alternate image acquisition to separate function
906af5bbc Move `getDevNullFiles` into a common file
89f1fdc7f Update github.com/digitalocean/go-qemu digest to 2e3d018
d6847b19c Convert QEMU functions to methods with documentation
6930f39a6 Update docs/source/markdown/podman-build.1.md.in
e1114f03c do not redefine gobuild for eln
39341f283 Set default userns from containers.conf file
4f1f88d7c Mention TimeoutStartSec in quadlet man page
ada71889c inspect with network=none show SandboxKey netns path
93f4cc1b5 [CI:DOCS] GHA: Use stable go for Mac/Win builds
ff7d287fc Breakup AppleHV machine funcs
64873e322 Codespell fixups
acbe7703f Update docs/source/markdown/podman-stats.1.md.in
0b7157e3b CI: e2e: reenable containerized checkpoint tests
c67ef7c1a docs(env-file): improve document description
4ee31dc37 Don't log EOF error when using podman --remote build with an empty context directory.
f2794f9a8 API: kill: return 409 on invalid state
170a78631 feat(env): support multiline in env-file
19deb6a34 Adds documentation to new functions that were added
481143e58 `startHostNetworking`: get DevNull files
13da82466 `Remove`: remove network and ready sockets from registry
d896431b2 `Remove`: remove files and connections
32265e1f6 `Remove`: collect files to destroy
381b103dd `Init`: read and split ign file
aa6827a67 `Init`: write ign config
cc30639d7 `Init`: add network and registry socks to registry
78d3b549c `Init`: add SSH conns to podman sock
630e7ba39 Improve the description of fields in podman-stats man page
22a8b6886 make /dev & /dev/shm read/only when --read-only --read-only-tmpfs=false
663fe9446 Mention no comment lines in Containerfile.in podman-build man page
e973d15c3 [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
837bc2568 Fix HyperV loadMachineFromJSON function name
416a471ee machine: QEMU: lock VM on stop/rm/set
bb57c1631 libpod: add 'pod top' support on FreeBSD
f592c33fb [CI:DOCS] Build and Sign Mac Pkginstaller
f540bbffa Make sure users changes --authfile before checking
8757fe88a github: add issue type as link to podman github discussions
3523b9b05 Break QEMU `config.go` code into its own functions
c341a0ffe machine: QEMU: lock VM on start
afe8d5d84 libpod: fix 'podman kube generate' on FreeBSD
0fefcf8a4 Add glob support to podman run/create --mount
d6815da8c kube: add DaemonSet support
239a5b64a Fix artifacts script after removal of msitools msi build
e335a66a9 System tests: quadlet: fix race in %T test
d6a32a3da If quadlets have same name, only use first
db0ba9b25 Add support for mounts listed in containers.conf
6dda21984 Update vendor of containers/common
33891e8e9 System tests: add test tags
5ba055937 [CI:DOCS] socket_activation.md: increase socat timeout
dfec510b4 go-md2man: use vendored-in version, not system
a92bb3219 CI: use different TMPDIR on prior-fedora
6894e2031 system tests: authfile-exists: minor cleanup
d70f15cc0 start(): don't defer event
de122bb44 Fix: use --all in podman stats to get all containers stats
349d775de Verify authfile exists if user specifies it
e0ef23955 libpod: don't generate errors for createTimer etc.
0cfd12786 add "healthy" sdnotify policy
cbc96a7b4 Remove LICENSE and general doc files that are installed by the main package
37f0e9620 Add missing `
2f21df7b3 Remove legacy msitools based msi installer
ac212605c Remove any quotes around distribution id
e596b17fb add a podman-compose command
eee2817de pkg/specgen: Don't crash for device spec with...
d2796c6c1 fix(deps): update module github.com/docker/docker to v24.0.5+incompatible
f4fbd6fd0 Update vendor of containers/(storage,image)
d4fc66af9 Clean up /var/tmp/ when using oci-archives when creating containers
49257a3c5 [CI:BUILD] RPM: separate out gvproxy for copr and rawhide
b57091ac9 Reduce qemu machine function sizes
baf30e612 [CI:DOCS] migrate socket_activation.md to quadlet
7314569cb [CI:DOCS] Update kube play volume support
b5ce0ab2d Fix language, typos and markdown layout
cb5450af7 [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet debug
0bb73bf55 Add note on debugging quadlet unit files
d4cfc498d Remove unnecessary use of the word "please".
a6a207673 libpod: fix FreeBSD 'podman-remote top' default behaviour
709beb6c0 fix(deps): update module github.com/onsi/gomega to v1.27.9
3e534eff9 Add support for ShmSize to quadlet
4b9f670ca Quadlet system test - force journald log driver for short lived containers
731bd7d94 fix(deps): update module github.com/containers/libhvee to v0.4.0
413552e10 quadlet recursively scan for unit files
ce736413b Ensure that we appropriately warn that TCP is insecure
558a70262 systests: quadlet: fixes for RHEL8
8d190704a Quadlet - Allow setting Service WorkingDirectory for Kube units
24bf6fc24 Quadlet system test - do not rely on journalctl in kube file tests
3d6bc2f86 Fix markdown in docs for podman-network-create
11ffea313 Man pages: check for corrupt tables
1d14bb7a8 quadlet systest: fix broken tmpdir references
e55e128fc Add `since` as valid filter option for `volume` subcommands
6df17332b Podmansh: Better error, increase timeout to 30s
96241159a Fix multiple filter options logic for `podman volume ls `
00a5b0709 Add bash-completion for podman inspect
3b6343202 Fix windows installer
d7e25e14a Add missing reserved annotation support to `play`
d2862c7dd Avoid progress hang with empty files
5c0912b07 Revert the usage of `home.GetConfigHome()`
5aa52659b Fix bug report issue template README link
47997857f Replace error check for non-existent file
8febb6aa1 Emergency gating-test fixes for RHEL8
d8d600b1d Add progress bar for decompress image
46058cfed refactor: move progressbar to a function
ca9874ab7 Use pkg/homedir to get the home config directory
7fb17ae78 fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
a224ff731 Should be checking tmpfs versus type not source
9e60f3ec5 fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
b4ffbcdfd Enabled arm64 arch for podman applehv provider
4e4078dbb [CI:BUILD] Packit: remove pre-sync action
d0602e8f7 Add `--podman-only` flag to `podman generate kube`
13a950016 Update vendor containers/(common, buildah, image, storage)
f256f4f95 Use constants for mount types
310a8f103 libpod: use define.TypeBind when resolving container paths
1e9410094 Tests: remove/update obsolete skips
a3bbc3a2c Fix trust not using local policy file
0997cf012 Fix `podman container prune` docs for `--filter`
a8d8c9497 Add more tests for liveness probes with default hostname & named ports
383d683f8 docs: podman-build --network add slirp and pasta
5e64cbf35 docs: podman run --network mention comma separted names
1443e2918 Podman machine AppleHV pass number 3
315a7887a Makefile: `package` -> `rpm`
85d936133 network create: document --internal better
e43127e0b pkg/specgen: fix support for --rootfs on FreeBSD
8c16322a8 machine start: qemu: wait for SSH readiness
12dc546fc [CI:BUILD] Packit: downstream task action fix
2b2c4453f Fix container errors not being sent via pod removal API
6ec261e7a Add missing return after utils.InternalServerError()
d1950869a Update cmd/podman/login.go
cce8501a5 [CI:DOCS] Reformat and reorder table with --userns options
d497eb369 Add secret support to podman login
2a9b9bb53 netavark: macvlan networks keep custom nameservers
c6b5b9a02 remote: fix podman-remote play kube --userns
441af003a fix(deps): update container-device-interface to v0.6.0
656ad760f go mod: no longer use 1.18
aeef403cd fix(deps): update module github.com/containers/libhvee to v0.3.0
6fd4ae6d2 chore(deps): update module github.com/gin-gonic/gin to v1.9.1 [security]
0dcfe6e06 Run codespell on code
3ad55f48b system service: unset listen fds on tcp
f1c68b79e add hostname to network alias
b6ec2127b libpod: set cid network alias in setupContainer()
4e96686e9 AppleHV enablement pass #2
72a1857e4 e2e: Fetch the correct user name
7b54fd84e Add `--no-trunc` flag to maintain original annotation length
600de05e3 Fix TCP probes when the optional host field is not given
ac3a115c3 Add support for using port names in Kubernetes health probes
4494cefbc Fix: cgroup is not set: internal libpod error after os reboot
932fae402 Allow setting volume and network names in Quadlet
427b959a1 pasta tests: automatically determine test parameters
97fd03ccd test/e2e: wait for socket
a69194b02 manifest inspect: support authentication
70428baef api: fix slow version endpoint
f8213a6d5 libpod: don't make a broken symlink for /etc/mtab on FreeBSD
499b8d13c CI: remove build without cgo task
42ea0bf9c libpod: use io.Writer vs io.WriteCloser for attach streams
597ebeb60 top: do not depend on ps(1) in container
3f8ee70d0 make --syslog errors non fatal
dbec2b5aa api: fix doc for default ps_args
1b7eb44d3 Fixes typo in the path where quadlet looks for files
efefd8cf5 Add --replace flag to podman secret create
eec438222 [CI:DOCS] uidmap man pages: fix corrupt italics
8d24e2838 [skip-ci] Update github/issue-labeler action to v3.2
f9077689e [CI:DOCS] podman-system-service.1.md: document systemd usage
dd16661b1 fix(deps): update module github.com/docker/docker to v24.0.4+incompatible
65136521e fix(deps): update module github.com/docker/docker to v24.0.3+incompatible
fa654e985 Use bytes size consistently instead of human size
dee94ea69 bugfix: do not try to parse empty ranges
9e4045768 [CI:BUILD] Packit: fix pre-sync action for downstream tasks
531fb21d0 fix(deps): update module golang.org/x/tools to v0.11.0
ab2fa45ad fix(deps): update module golang.org/x/net to v0.12.0
459b1578c fix(deps): update module golang.org/x/term to v0.10.0
99f93d55c e2e: fix two toolbox flakes
fc5aa9c9c test/e2e: use GinkgoT().TempDir() over MkdirTemp()
ea8992cb4 test/e2e: use random ImageCacheDir
17a06d343 test/e2e: remove RHEL7 workaround
bc22aefce test/e2e: remove unnecessary code in SynchronizedAfterSuite
ff7790038 test/e2e: do not use /tmp for podman commands
db7cb1dbf test/tools: vendor ginkgo v2.11
c20612bab test/e2e: write timings directly to file
a0b765552 machine start: qemu: adjust backoffs
d874790bc auto update: fix usage of --authfile
ba1355b23 system tests: refactor registry code
94b321337 fix(deps): update module golang.org/x/text to v0.11.0
644f7cd9b pkg/specgen: properly identify image OS on FreeBSD
a3a62275c libpod: use new libcontainer BlockIO constructors
2d68c3add [CI:BUILD] Minor: Don't confuse osx-debugging
5aabc5088 [CI:DOCS] Better document the default value of --userns
e4644c3cb Cirrus: build FreeBSD binaries in a VM
92fc0f481 Makefile: add support for building freebsd release tarballs
4a5396b46 [CI:DOCS] uidmap man pages: fix corrupt tables
5a8e092a2 fix(deps): update github.com/crc-org/vfkit digest to c9a4b08
d0359fcca fix(deps): update module github.com/containers/buildah to v1.31.0
300eb36b4 fix(deps): update module github.com/opencontainers/image-spec to v1.1.0-rc4
94e59bd2f Use /proc/self/gid_map as intended, not uid_map
a16488f89 fix(command): ignore `--format` in `podman search --list-tags`
9fb2f8e10 podman machine start: fix ready service
8408ad498 Makefile: don't rely on the non-standard -r flag for ln
39624473b pasta: Create /etc/hosts entries for pods using pasta networking
fe0de8b9f fix(deps): update module github.com/containers/libhvee to v0.2.0
2393fe453 pasta tests: add sanity check for test name vs function
4da3e47b6 pasta tests: cleanup + 1 new test
43b9426fc cmd/podman, pkg/domain/infra: sockets should live in /var/run on FreeBSD
e3f2a97d1 cmd/podman/system: add API server support on FreeBSD
0d7da5c0b [CI:DOCS] Document support of pod security context IDs
f64a1a1cc rootless: use default_rootless_network_cmd config
e4efd709d Revert^3 "pasta: Use two connections instead of three in TCP range forward tests"
17cd5aecb pasta: Workaround occasional socat failures in CI
13c7d05cc pasta: Remove some leftover code from pasta bats tests
bc58dae36 Bump c/image to v5.26.0, c/common 0.54.0
2cb549339 fix(deps): update module github.com/coreos/stream-metadata-go to v0.4.3
bf60bb073 Display secret to user in inpspect
448e01566 [CI:BUILD] RPM: Fix koji and ELN issues
8fb719a9e e2e: systemd test: major fixes
865d77e94 pkg/specgen: add support for 'podman run --init' on FreeBSD
74b4615aa Bump version after v4.6 branch cut
b6e636cbe Remove 'inspecting object' from inspect errors
fe8355be7 pasta: Fix pasta tests to work on hosts with multiple interfaces
d15cca024 [CI:DOCS] fix command incorrect in windows
bcb89fc8b Fix readonly=false failure
609c47ae6 pkg/specgen: Add support for Linux emulation on FreeBSD
cf9ebcddf Fix up podmansh man page
05eb3e6f1 Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
f5cc0487e Fixes for vendoring Buildah
0f4c86e26 vendor in latest buildah
6eaf8a271 tests: fix "Storing signatures" check
b80fd54a5 update c/image and c/storage to latest
eeb7aeb49 Kube quadlets can support autoupdate as well as containers
2160a114c debug tail 800 lines flake
dd81f7ac6 Pass in correct cwd value for hooks exe
227c07aeb specgen: honor --device-cgroup-rule with a new user namespace
0220f3338 specgen, rootless: raise error with --device-cgroup-rule
db37d66cd make image listing more resilient
17a18b16c Update module google.golang.org/protobuf to v1.31.0
bc5269f18 Trim whitespace from unit files while parsing
516034215 Re-organize hypervisor implementations
ba3da15e0 play.go: remove volumes on down -f
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
58a5300e7a |
kubernetes: update to 1.28.2
Bumping kubernetes to version v1.28.2-44-ge3b5e621f07, which comprises the following commits:
b5e28b1cdd6 [go] Bump images, dependencies and versions to go 1.20.10
1cd2ac99542 .: bump golang.org/x/net to v0.17.0
cecc0e93916 Mark a volume as uncertain-attached after detach error
15101d92e18 Unit & integration tests for OpenAPIV2 AddUpdateAPIService
9f4011446a2 Fix 120878 - Refactor cacheabledownloader so handler can be updated and fix AddUpdateAPIService to update handler
489c08ddf47 Fix 120739 - Prevent AddUpdateAPIService from blocking on updating spec
d35a00e218c Fix 120758 - prevent cache Load on uninitialized spec
985ef265511 Add nil checks for hpa object target type values
88669d0a23b Make a certain ipv4-vs-ipv6 config error non-fatal, for backward compat
84a3ad3573b [go] Bump images, versions and deps to use Go 1.20.9
63fcac91c42 Only configure swap if available on node
07a74666cb2 Use local isCgroup2UnifiedMode consistently
57bbc335fd7 cronjob controller: ensure already existing jobs are added to Active list of cronjobs
8ea9b219c69 reintroduce resourcequota.NewMonitor
794d56966e8 change rolling update logic to exclude sunsetting nodes
a08ec1215fe vsphere: adapt to govmomi bump
ef63f36ff82 .: bump govmomi to v0.30.6
aba7c443072 Increase range of job_sync_duration_seconds
bcaa53c9c10 sync Service API status rest storage
a68748c7cd0 Update CHANGELOG/CHANGELOG-1.28.md for v1.28.2
89a4ea3e1e4 Release commit for Kubernetes v1.28.2
0c6a0c3f69b kubeadm: remove reference of k8s.io/kubernetes/pkg/apis/core/v1
47507f9f022 fix race on etcd client constructor for healthchecks
7d33fba21a8 e2e pods: fix WaitForPodsResponding retry
2480fce67f5 kmsv2: reload metrics bug fix backport
110a6fe8a9f scheduler: start scheduling attempt with clean UnschedulablePlugins
0aebbad4731 fix(queue_test): make sure the first bind failure via counter
798a0abe368 [go] Bump images, versions and deps to use Go 1.20.8
62321a9201c scheduler: unit test case for concurrent event with other pod
e5b981ebcd7 scheduler: fix tracking of concurrent events
16298b54483 fix verify errors
38904e5f2d1 remove used vars
ce017591468 sort stability list of metrics in the shell command
b5fd7e9f23c Feature-gate SidecarContainers code in pkg/kubelet/kuberuntime
958c30349fa Add an e2e test for the pod sandbox changed scenario
ac67de196ff fix: concurrent map writes in e2e test
19c4cf0f1a0 Automated cherry pick of #119776: Fix a job quota related deadlock (#120319)
dda909d6c51 TopologyAwareHints: Take lock in HasPopulatedHints
8656da75f2a Fallback to legacy discovery on a wider range of conditions in aggregator
526e25b685a Fix OpenAPI aggregation cleanup
0bca3b0e4de apiextensions-apiserver: generate applyconfigurations
8c7c4f3fc4d Revert to json-patch 4.12.0
a4fdac21a98 update build cross image to the correct release branch image
fc184558921 Mark Job onPodConditions as optional in pod failure policy
955843efcf3 Incorporating feedback on 119341
4c8b24d8618 Update CHANGELOG/CHANGELOG-1.28.md for v1.28.1
8dc49c4b984 Release commit for Kubernetes v1.28.1
ad60b95eb63 Add wait for cache sync
175bbaa8894 check for overflow
f3f88b8e7b5 Fix CEL cost handling of zero length replacement strings
90715527543 Use env varaibles for passing path
53902ce5ede Use environment varaibles for parameters in Powershell
e8abf3c441c e2e framework util subtle bug checking endpoints
a1fdd1152d9 Pass Pinned field to kubecontainer.Image
27e6c94259f prep for go1.21: use -e in go list
04de4683cb1 kubeadm: fix nil pointer when etcd member is already removed
8fd45c6bd0f update to golangci-lint v1.54.1 + go-ruleguard v0.4.0
cce3f6ffa79 Make gomaxprocs install optional, limit to tests
20b69aea685 Drop [Feature: tag to make sure this tests runs on pre-submits
58ac6e12ccc Statefulset should wait for new replicas when removing .start.ordinal
e7cfe85b9c1 e2e WaitForServiceEndpointsNum take into account the address family
96696c15f89 fix: when PreFilter returns UnschedulableAndUnresolvable, copy the state in all nodes in statusmap
d20fe4d8487 Update CHANGELOG/CHANGELOG-1.28.md for v1.28.0
855e7c48de7 Release commit for Kubernetes v1.28.0
b4053c3b293 Fix a bug that PostFilter plugin may not function if previous PreFilter plugins return Skip
b4fac632cd1 Remove release-notes for the PR#118895
5f7b27f4ade Remove release-notes for the PR#118895
87caf500e1f Update CHANGELOG/CHANGELOG-1.28.md for v1.28.0-rc.1
c5048f41fe3 CHANGELOG: Update directory for v1.28.0-rc.1 release
add7e14df11 Release commit for Kubernetes v1.28.0-rc.1
c6efaf16c1e apiserver/etcd3: fix segv during metric collection
6ddcdef29ae kube-proxy: fix combination of --config and logging command line flags
0d90d1ffa5e Revert "Merge pull request #118895 from RyanAoh/kep-1860"
1876ddf7149 Avoid returning nil responseKind in v1beta1 aggregated discovery
55ca1a6ee15 Remove leases test case from AdmissionWebhookMatchConditions suit
050c0437e60 fix: broadcast when pod is pushed back to activeQ directly in AddUnschedulableIfNotPresent
9bc857d6d90 [releng] Update publishing-bot rules for release branches to Go 1.20.7
38a81ca04f3 Bump distroless-iptables to 0.2.7
ae86051ec5a Bump protoc
ab26637eae4 Add test coverage of result size of string operations
8e72718249e Bump cel-go to v0.16.1
72c8cf9fce7 [go] Bump images, versions and deps to use Go 1.20.7
2ceca1c78db e2e WaitForServiceEndpointsNum should watch EndpointSlices
2f30fae0e8b scheduler: fix data race after binding failure
1b90dff5276 .*: bump golang.org/x/net to v0.13.0
73107c1b755 Update OWNERS
53c8872cc18 Update OWNERS
2a82aac5248 Update CHANGELOG-1.28.md for KMSv2KDF
294c7df3285 Avoid pulling node-problem-detector through CDN
b4ef4015a29 Avoid pulling mounter.tar through the CDN
cfcbce31a39 apiextensions: fix validation error for status.storedVersions
936819c21bc docs: update release note for KMSv1 deprecation
6689fd97469 DefaultHostNetworkHostPortsInWorkloads -> DefaultHostNetworkHostPortsInPodTemplates
a65d2075072 calculate the correct machine-type
182a4f858a3 API warn non-ExternalName services w/ externalName
7bd0a857e30 API warn ExternalName services with externalIPs
dd8a64d7e15 publishing-bot rules for release-1.28 branch
a005617111c CHANGELOG: Update directory for v1.28.0-rc.0 release
7d13c9b096b set map to nil if an empty string is passed
eb4063f0ced Add cases to tests `AdmissionWebhook` MatchConditions size limit (#119404)
ef4907eddd7 Add e2e tests for admission webhooks MatchCondition fields (#118319)
a248c4de521 test: fix NodeLogQuery tests to query the correct node for logs
45710678b30 Release commit for Kubernetes v1.28.0-rc.0
67769438e1d kmsv2 test feature enablement disablement and restart
18a7025383c update documentation with descriptions
7e0a9a7f4e7 Use statusReason for reason under x-kubernetes-validations (#119544)
3b9af471185 add admission policy integration test all resources
22bf29ad22f Treat empty string as nil in fuzzer for CEL Reason field
a164005cc09 Fix non-test code relying on test-code
e1b0bc3d0a7 bugfix: use matched resource for AdmissionRequest.resource, not the resource it was converted from
5e2e8c80647 bump validatingadmissionpolicy alpha->beta
1c99f9591b0 add node-env and instance-type flags to node-e2e tests
d6479587445 update codegen
ef8670c946d refactor: replace usage of v1alpha1 with v1beta1
294f5c9a42f make update
ae185e91186 e2e: test LastPhaseTransitionTime field when binding PV
a9c3444a47b test: add coverage for pv status update and create strategy
bf49c727ba1 kmsv2: KDF based nonce extension
aa65bab4269 implement pv last phase transition time
c97eb2b5cb0 Fix XValidations deepcopy to copy contents of nested pointers
76eefd3a012 CHANGELOG: Update directory for v1.28.0-beta.0 release
1b4de065df4 add LastPhaseTransitionTime field to PersistentVolume
5310dd7ff53 add PersistentVolumeLastPhaseTransitionTime feature gate
a31fee98f09 rename function for dropping disabled fields
dbea2791129 Fix the flaky TestJobApiBackoffReset test
8f35fceae37 update vendor to use containerd cgroups
c4bf42199a0 do not touch swap for cgroup v1 if swap not enabled
74fcf3e7668 implementation of PodReplacementPolicy kep in the job controller
cb6d7fbe66c update documented metrics
f50e74206e1 Address comment
c46ffc2b422 Refactor jsonpath parser and add tests.
b3b775baa51 test: adjust tests for v1beta1 validatingadmissionpolicy
88becfc0ba5 api: add v1beta1 ValidatingAdmissionPolicy/Binding types and storage
b5e9e0168cf feature: add multiple params capability to VAP controller
3f63a2d17d4 refactor: make scope of ParamKind available to vap controller
6323c106e9b refactor: use the provided sharedInformerFactory for params
9a595209bd2 update-codegen
c8dbf4712cf add namespaceParamRef to v1alpha1 and internal
03aad1f823c Fix the semantic meaning of etcd server within component statuses and metrics.
e0a6eb93a1f node_e2e: Fix createStaticSystemNodeCriticalPod's invalid spec
2863b3d1ab7 Revert "refactor: simplify RunScorePlugins for readability + performance"
3685e5e5a9c CHANGELOG: Update directory for v1.24.16 release
51bfe417b81 CHANGELOG: Update directory for v1.25.12 release
c575a1e31aa CHANGELOG: Update directory for v1.26.7 release
ba01bfcdc6c CHANGELOG: Update directory for v1.27.4 release
ce929520376 add podReplacementPolicy and terminating field to job api
35d0af9243c Include ignored pods when computing backoff delay for Job pod failures
ee82654e398 Add pod_swap_usage_bytes as an expected metric in e2e test
81abfca4078 Add a haveKeys() helper function to match multiple keys
1000ed64e09 Use debian-base instead of distroless for conformance image
d6e525877b5 [KEP-2876]Add reason and fieldPath into CRD validation rules (#118041)
b1d685a05fe apiextensions: validate status updates with status schema
06a81d13959 cmd/kubelet: implement drop-in configuration directory for kubelet
c1aef65640b Add integration test
cd5f3d9f9d5 Add impl for uvip
2c8288ac873 feat: improves metric and logging
0449cef8fd5 Increase timeout for DRA kubelet plugin client
a15c27661e6 Job controller implementation of backoff limit per index (#118009)
b5012ba1e2d Mark existing NodeLogQuery e2e tests as [LinuxOnly] since they do not run on Windows
bfb2c6a22a2 update go.mod
668497e7550 use ratcheting schema validator when feature is enabled
e0f9db42ace add ratcheting schema validator using new openapi hooks
6f238334ab4 add CRDValidationRatcheting feature gate
635875ad521 refactor: convert slices to []interface before inserion into VendorExtensible
9ee6d97fc05 refactor: add ValidateCustomResourceUpdate to support future validators for CRD Updates
a8a2fb317c8 Add tracking and reporting of executing requests
1351845133b Update cri-api change in v1.28.0
59b4951c649 Expose commit memory used in WindowsMemoryUsage struct
0ec99fb0b24 Kubelet DRA: fix failing test cases
f6431c61386 DRA: don't query claims from API server
cf0b74774f6 Extend the API for the Job job-index-failure-count annotation
d281daee335 Prefer pods without a deletion timestamp over pods with a deletion timestamp when getting an ordered list of active pods.
0372e4b6620 add unit test for dra/manager.go.
fcbfdc17106 Extend the Job API for BackoffLimitPerIndex
3fd40ffb0ef addons/metrics-server: fix nanny rbac permissions
056c19e8b39 Add slash ended urls for service-account-issuer-discovery to match API in swagger (#117511)
89ab733760a Improve docs on framework.CycleState
4da418aba7f refactor: cleanup to NewSchemaValidator takes JSONSchemaProps
ba581300213 refactor: rename apiservervalidation -> apiextensionsvalidation
735be024cf9 Make CRDs built and aggregated lazily for oasv2
ea23e13463f Update OpenAPI Aggregator
850dc6123af Remove ability to re-enable serving deprecated policyv1beta1 APIs
e7be841957d cli-runtime: make VerifiableQueryParam shared-parameter aware
a4a607198a1 hack/update-openapi-spec.sh
961c1503b5b Bump kube-openapi
4cb5547f934 Adjust summary API e2e test
e429793db1e Unit tests: node swap usage resource metric
1d368420b28 Add a node swap usage resource metric (/metrics/resource)
7d187f967ba Unit tests: CRI swap stats
59e3e3897e3 Add SwapStats to summary API through CRI
87ff9c45256 Add swap statistics to CRI-API
053d7ac61f5 Unit tests: cadvisor swap stats
c74ee8045de Add SwapStats to summary API through cadvisor
a05d200ac89 Add SwapStats to NodeStats, PodStats and ContainerStats
d029f0ef060 Add restartable init container lifecycle hook e2e tests
f17e9117776 Add restartable init container probe e2e tests
9d6c1030db0 Generate containers ready condition including restartable init containers
3bf282652f0 Allow restartable init containers to have lifecycle
7ef2d674e24 Allow restartable init containers to have livenessProbe
2c8b37498e5 Allow restartable init containers to have readinessProbe
8b20dbd0d16 Add validateStartupProbe
c7e7eee554a feature(scheduling_queue): track events per Pods (#118438)
91ea8043355 Replace lavalamp with jpbetz as feature-approver for api-machinery
94c8ad289bb Enable admissionWebhookMatchCondition by default
4321d8c60f3 Graduate NodeSwap to Beta1
f1e7386fbc4 Deprecate now-unused kubelet iptables flags
d486736dd38 Remove IPTablesOwnershipCleanup checks and dead code
77cbd86b0b1 Add metrics for cloud-provider node sync, update.
d3c506133f1 Skip apiserver_admission_webhook_request_total during context-canceled
7698fe76397 Add StatefulSet pod index as pod label (#119232)
2e217e8cea1 Reduce duplication between helpers for checking featuregate
7edd72f7805 Update generated documentation
137474e2839 Fix validation options for old pvc
d765fa6b747 Update generated stuff after changing comments
f01a1faa8cb Update comments about allocatedResourceStatus
c072e5b3a7e Update test generated data for 1.26 branch
db8998265e9 Update 1.27 generated data
6a780f57ce5 Update generated data
e0111871149 Update code to use new generic allocatedResourceStatus field
d3ef2d4fe95 priority & fairness: support dynamically configuring work estimator max seats
9189c3d5599 fix tests
aa788219f46 fix metric names
d32aa62d844 promote beta metrics
65ce7222ced All sig node approvers should be able to merge changes to CRI API
9cb2c103107 Adding node feature owners
00de051729a Make matchConditionsFeatureGateInitiallyEnabled a boolean instead
48eee4eed86 Fix e2e tests for overriding timoutGracePeriodSeconds of probes
0074b24ca42 Graduate AdmissionWebhookMatchCondition to beta
bfa62e0009a kubelet: retry RuntimeConfig call and prep for nil values from GetLinux
6aeff13def3 Never drop the `terminationGracePeriodSeconds` of a probe
d0952686f68 CRI: add cavieats about cgroup driver field
d7797fbc616 kubelet: get cgroup driver config from CRI
fd434003f3f kubelet: initialization of runtime service earlier in the startup
37330a13924 Add KubeletCgroupDriverFromCRI feature gate
d2d5e2e27dc Add CRI fake runtimes for RuntimeConfig rpc
0f05a92ce68 cri-api: add rpc for querying runtime configuration
660be4484b4 Update publishing-bot rules for release branches to Go 1.20.6
be01f4a0838 KEP-3178 IPTablesOwnershipCleanup to GA
ff62cca47b8 Bump distroless-iptables to 0.2.6
229eb93a834 DRA: report NodePrepareResource errors
b57c7e2fe4b Add CDI devices to device plugin API
b1850497b4b Integration tests for IP mode field
7eab0d7a0de Proxy changes for IP mode field
7c6e399b228 Generated code for IP mode field
e6863757f4f Add IP mode field
e38ab6d3671 Add PodGC changes for PodReplacementPolicy
169abcc0398 openapi: reference shared parameters
6c0ea702d43 Conditionally serialize flushFrequency as int
19f61caabee aggregate kube-proxy metrics
bd9b78d6861 kubeadm: remove the limitation that the 'ignorePreflightErrors' field can not be set to 'all' in kubeadm config file, and keep CLI / config consistent
6b3ce3004db Add integration tests for match conditions feature gate enablement
b883f305011 kubeadm: Support `kubeadm config validate` for ResetConfiguration
171b19d9fe1 fix histogram vec compare using ignore fields
9b6af80a631 upgrade prometheus common to v0.44.0
8f9e2cb8a80 kubeadm: Support `kubeadm config migrate` for ResetConfiguration
22f0f2e210f kubeadm: add 'kubeadm config print reset-defaults' command for ResetConfiguration
13172cba5c0 ValidatingAdmissionPolicy: support namespace access (#118267)
df0d51d3b35 add some detailed message for dup container ports(steal from thockin)
1732b23a343 Ignore context canceled from validate and mutate webhook failopen metric
90ab7580aae add list of served versions to storage version
9564bdc39de Ensure final diff is used for setting expectations for Job pod creation
8a4a29d5917 remove todo/spelling
bef43788fc0 update histogram
01b9f4b6eb8 matchCondition metrics
5f37c102cb5 revert changes in staging
d9bd413f991 Proactively bump golang.org/x/net to v0.12.0
883d0c3b717 Add a dummy implementation of proxyutil.LineBuffer
34640772ed4 implement SchedulerQueueingHints feature gate
619be9c1537 Add a swap e2e test
4b6314f815b Unit test: Swap - Limited/Unlimited Swap, cgroups v1/v2, etc
a30410d9ceb LimitedSwap: Automatically configure swap limit for Burstable QoS Pods
e4da568f331 Make kuberuntime unit tests environment independent + support cgroup v2
f37aec6c57f Add LIMITED_SWAP env var to enable limited swap
0ed7bdb057e Update vendor
69c4bc29f55 [go] Bump images, versions and deps to use Go 1.20.6
2a907e60043 kubeadm: fix fuzzing for ResetConfiguration
2e6715bc77b kubeadm: implementation of `ResetConfiguration` API types
037847066ce replace strings.Index with strings.Contains instead
3e2a1a7b9ce Regenerate
b2613dd381b Add e2e to check that hostIPs and Downward API works
14b09c414ac Add DownwardAPI validation for status.hostIPs
335d905ce95 Downward API support for status.hostIPs
bf030fd68ab Add validate HostIPs
267e76a66e2 Add status.hostIPs in validEnvDownwardAPIFieldPathExpressions
c287943bdd5 Add status.hostIPs in ConvertDownwardAPIFieldLabel
7a81ef6406c Add fuzzer for PodStatus
e6bdd224c17 Add HostIPs for kubelet
dacb6890027 Add dropDisabledStatusFields
e061143de7f Add HostIPs field and update PodIPs field
c2c001a243a Add FeatureGate PodHostIPs
ce90eb2cc2f Fix validation to use field.Forbidden instead of Required
7305c967101 QueueSet and controller part of borrowing by exempt PLs
2069835094d Tolerate only the two allowed field changes
3754d2da20f apf: allow admin to change the Exempt field only of the exempt pl
f8e4e8abac8 apf: add validation to exempt for borrowing
f78d6062eb8 Update generated code for APF borrowing by exempt
a9d8cace1f5 Fix AutoUpdateAnnotationKey, NominalConcurrencyShares
3d3240c8b43 apf: add API changes for borrowing by exempt pl
b635f2a401f ValidatingAdmissionPolicy: Variable Composition (#118642)
49d03468021 Pre-allocate webhook accessors arrays for mutating and validating webhooks
037091284e2 fix unit test bug
423f4dfc798 Add quantity library to CEL (#118803)
a1a5f49bb9c remove statefulset label added to wrong branch
1ae60c0ed16 use job completion index annotation as label
131216fa8f2 chore: hashes keyID
049614f884e ValidatingAdmissionPolicy controller for Type Checking (#117377)
d25075f3424 update generated list of stable metrics
c291e6355c4 feat: implements metrics for encryption config hot reload
be2e5417ea2 allow api-approvers to approve directories touched by generation
80ab8f0542f dra: handle scheduled pods in kube-controller-manager
cffbb1f1b29 dra controller: enhance testing
5cec6d798c3 dra: revamp event handlers in kube-controller-manager
0bb419b1498 promote the following APF metrics to beta:
39207dada25 Add integration test for node authorizer claim references
4121c1fc79a auth: don't allow kubelet to from modify ResourceClaimStatuses
c688478a28b Fix lifecycle generator to check the version correctly (#119268)
ddc0d947900 dra API: ensure that pod status contains no duplicate resource claims
052b06bdad3 Remove test Pods sharing a single local PV
22d8ae1ba6e Enable NewVolumeManagerReconstruction
9914909f5aa Define tcpProtocol in one place in the unit tests rather than many
967ef293786 Remove/clarify two FIXME comments in the proxier unit test
14375947869 Remove some stray references to the ProxyTerminatingEndpoints feature gate
7e3b53042b1 Pass Job context down to firstPendingIndexes
4835d9e1371 Belatedly clean up some "Endpoints" vs "EndpointSlice" distinctions in the unit tests
4d8f569b037 Remove KUBECTL_EXPLAIN_OPENAPIV3 environment variable
c5147c91b88 controlplane: kubernetes.default controller stop polling
9f5b6db8be8 test: azure: check error for cloud detection.
1db11c07ff2 node authorizer: limit kubelet access to ResourceClaim objects
71ef0dafa72 add flag 'logging-format' to kube-proxy
c550c17f7f0 accept int or string flush frequency
148acc8632c enable arm64 support for GCE node configuration
75186b1c32a Fix, deprecate apiserver_flowcontrol_request_concurrency_limit
c52911e59ad docs: add comment describing `LoadConfigFromFile`
5c18810f357 chore: update license date for configfile tests
72aeb961322 test: add tests for `LoadConfigFromFile`
b3373ae2738 refactor: make only `LoadConfigFromFile` public - `loadConfig` can be made public again when needed (not required now)
8e284389a5d feat: make `loadConfig` and `loadConfigFile` public functions - so that users who import kube-scheduler libraries can use these functions to read kube scheduler config
0599b3caa0f change the QueueingHintFn to pass a logger
39bb8f4bb1d Implement ConsistentListFromCache feature gate
0695853a306 Improve naming and code comments
08d40f53a7a dra: test with and without immediate ReservedFor
98ba89d31d5 resourceclaim controller: avoid caching deleted pod unnecessarily
28b6c906966 Move DeleteFunc logging to level 2
761016482da Properly setup mutatingWebhookConfigurationManager{}
747dbd9b6b7 run `./hack/verify-gofmt.sh`
1eb60939fe5 Add smart reload for `MutatingWebhooks`
aeefb762ece Properly handle parameter in `shareInformer.DeleteFunc`
a01a8cb07e7 Fix webhook accessors caching pattern
7d3d44af776 Add webhookAccessors smart reloads unit tests
c6f36e8702a Fix deadlock issue
99875b3fb73 Webhook Accessors Smart Recompilation
7d064812bb4 kube-controller-manager: finish conversion to contextual logging
d743c50bb9e kubelet: support batched prepare/unprepare in v1alpha3 DRA plugin API
7a63997c8a1 Improve apiserver storage size metric to allow it's graduation
610509fedd9 Update standard app protocols
f1f2fa9da8a kube-apiserver/corerest: split apart generic code
01c3a51a780 node: podresources: getallocatable: move to GA
c1decb6763d Fix TestConditionalProgressRequester and TestWaitUntilFreshAndListTimeout flakes
1b8ddf6b79a podgc controller: convert to contextual logging
f924bf95df9 dynamic resource allocation: Improve code coverage of state checkpoint
c635a7e7d83 node: devicemgr: topomgr: add logs
d78671447f2 e2e: node: add test to check device-requiring pods are cleaned up
5cf50105a2b e2e: node: devices: improve the node reboot test
b926aba2689 e2e: node: devicemanager: update tests
3bcf4220ece kubelet: devices: skip allocation for running pods
ab3a0b78ea3 Match both old and new kubectl version for a while in e2e
c143a875edb dra e2e: fix "reallocation works" flake
6f1a29520fe scheduler/dra: reduce pod scheduling latency
e01db325735 scheduler util: handle cache.DeletedFinalStateUnknown in As
ef48efc736c scheduler dynamicresources: minor logging improvements
363874e9b56 setcap: update to debian bookworm v1.0.0
19869478c11 Migrate /pkg/controller/disruption to structured and contextual logging
b81f07ac9a6 Add enj to apiserver options approver
6d6595d0f6e Add jpbetz as approver of apiserver integration tests
43b509de420 staging: Add endpointslice to publishing data.
7c873327b67 Convert controller name to reconciler variable.
29fad383dab move endpointslice reconciler to staging endpointslice repo
c0030a4d27e Add support for watchlist to APF
9759fc3c230 Fix the converts an empty string to nil.
22c66784e03 staging: add endpointslice repo
a34e06e74c7 kube-apiserver/corerest: structure Config
75e3576523f kube-apiserver: rewire service controllers: kubernetesservice + IP repair
f22aa42aa81 bump go.mod cadvisor to v0.47.3
f855a23b455 topologymanager: promote TopologyManagerPolicyOptions feature to beta
3267dd9d529 kubectl delete: Introduce new interactive flag for interactive deletion (#114530)
23833b9c81c topologymanager: Increase TopologyManager test coverage by adding negative test cases around NUMA topology discovery
998654e0443 topologymanager: fix TopologyManagerPolicyBetaOptions not being enabled by default
fec25785ee6 dra: store generated ResourceClaims in cache
ba810871ada dra e2e: check that not generating a ResourceClaim works
0fc62d5ded0 dra: generated files
444d23bd2f1 dra: generated name for ResourceClaim from template
98461be8ffa Implement conditionalProgressRequester that allows requesting watch progress notification if watch cache is not fresh
cd14e97ea80 Add a builder for ContainerAllocateResponse objects
db2a1edbdd6 Generate empty cdi annotations
f0e3c32fe56 Move CDI annotation code to utils package
354b6c409f5 Rename updateReconstructedFromAPIServer
1903f5aa2ad Rename volumesNeedDevicePath
7cd60df4aa1 Update volumesInUse after attachability is confirmed
0a2272dc68d Add uncertain state of volume attach-ability
bf48165232f Remarks to syncJobCtx
990339d4c3e Introduce syncJobContext to limit the number of function parameters
94b782680c0 Update publishing-bot rules for release branches to Go 1.20.5
f443c458afe move non-graceful node shutdown to GA
645cb907320 migrated pkg/controller/endpointslicemirroring to contextual logging
98c6e25c371 update name of pod index label
09849b09cf4 migrated pkg/controller/endpointslice to contextual logging
de076430957 Document address family of listening INET sockets
08dd657a71c Implement metrics agreed on the KEP
9b1c4c7b57f Implement KEP-3836
cca66011067 Add reason to force detach metric
e655931274f expended type checking.
8fb5b6eb4c1 node-e2e: Add container lifecycle e2e tests for preStop hook
47ef977ddd5 Direct reference to the packages
7286d122fb7 Mark pods with restartable init containers as `UnschedulableAndUnresolvable`
0a987079128 Sidecar: Update printPod to show restartable init container information
ea1eb7f8f79 implement sidecar resource calculation
03c22176877 Sidecar: Add e2e tests
b94fa250c27 Sidecar: Implement lifecycle of the restartable init container
c187b381173 Sidecar: Generated code
5d26bcd468b Sidecar: API changes
10dc1ca0846 Skip GracefulNodeShutdown on older systemd versions
f7a1fb76f4f Only declare job as finished after removing all finalizers
3f07fc3acc9 Remove long/golang version information making short the default
3a5268502f3 Remove deprecated scheduler CLI flags
68ed020b2a3 Split IptablesRulesTotal metric into two different metrics
bc059817dc5 fix: Add "metav1.CauseType" to "field.ErrorType" map
c0eb0caf4ac Support fine-gained rescheduling in ReservePlugin
d7708e79d32 Use cmp diff
278a8376e17 Fix: fiterror in permit plugin not handled perfectly
14bd9bc127e CHANGELOG: Update directory for v1.28.0-alpha.4 release
2fe38f93e53 feat: Append job creation timestamp to cronjob annotations (#118137)
1acdb4ae86e [KMSv2] Mark KMS v1beta1 as deprecated with no further fixes (#119007)
02c59710eaa Test the IptablesRulesTotal metric in TestSyncProxyRulesRepeated
ecf0cee91ce update comment on feature flag
3a02ecb3418 check test case param instead of feature flag in unit test code
b10cc642b56 DRA controller: batch resource claims for Allocate
be0db3f93d7 clean up the implementation around QueueingHintFn
5175752df74 Issue 4230: remove readiness check for cache exclusion
132d477cb7a use stopCh to avoid goroutine leak in tests
20a25cbfcfb Add user specified image to CRI `ContainerConfig`
65e818d4ecf Introduce apiserver_flowcontrol_current_executing_seats metric
1bf2f6c9c05 feat(NodePorts): return Skip status in PreFilter
dfc1838379f Migrated pkg/controller/volume|util|replicaset|nodeipam to contextual logging
6c0387d0047 Migrated pkg/controller/endpoint to contextual logging
3cf2822bc58 Migrated pkg/controller/garbagecollector to contextual logging
921b7e6e8f7 remove equalReady and replace with k8 util function
a647f9febbf default enabled pod index for test cases, add test case disabling it
322da7c1aae fix gc metrics
02efe09abe3 component-base/logs: improve handling of re-applying a configuration
1240a29af9c Hide numberOfMissedSchedules as an algorithm internal number
c733c57962f pkg/controlplane: wire core storage as RESTStorageProvider
65b34221ebb kube-apiserver: remove IP repair plumbing from kubernetes service controller
9dcc57ede62 Stop using deprecated API
5e1777be529 Update debian-base to bookworm
a514f40131c dra resourceclaim controller: delete generated claims when pod is done
e8a0c42212d dra resourceclaim controller: remove reservation for completed pods
7f5a02fc7e4 dra resourceclaim controller: enhance logging
d1ba893ad8e dra resourceclaim controller: refactor isPodDone
e2900da46aa Remove unnecessary utiliptables.Interface arg from local detectors
7690c6e8121 Simplify getDualStackLocalDetectorTuple
cefd50a753e Improve the single-stack LocalDetector behavior
bfccfa7016b Add names to the getLocalDetector unit tests, use t.Run
16e9cc42c1a e2e node: remove unused test/e2e_node/gcp
932d0337b82 e2e: detect unexpected command line arguments
68aee61d4f7 SPLIT: kube-apiserver/corerest: split out service IP setup logic
443bf3b01b0 scheduler test: Use cmp.Diff instead of reflect.DeepEqual for pkg/scheduler/internal/cache
dad3e4d2112 SPLIT: kube-apiserver/corerest: split constructor
31943cc3f44 kubeadm: check the GV after the config migration
b4f479d1f29 bump npd to v0.8.13
a556feb7cbe run hack/update-vendor.sh to fix verify master
4149933ed2e kube-apiserver: move "public IP matches IP family" check to option validation
616c9599880 FIXUP: pkg/controlplane: move bootstrap controller to controllers/kubernetesservice
c26e1ba10c3 [UT] increase coverage kubeadm/app/phases/dns
b36fdd68b72 Test consistent List
01b1174c114 kubeadm: fix "migrate config --allow-experimental-api" to print v1beta4 kubeadm configurations instead of v1beta3
18f2e9055fc Add OIDC integration tests
c68a6b07456 kubeadm: fix fuzzing for ExtraEnvs defined in the control plane component
80b035a116a kubeadm: Support custom env in control plane component
6b01ece5806 scheduler-perf: fix perfdash display problem
29e5771aa4d scheduler-perf: shorten "Name" label in metrics
e08bd3bc263 Simplify DeleteCollection
7b62d000a4d MOVE: pkg/controlplane: move bootstrap controller to controllers/kubernetesservice
2b03f04ce58 Initialize the AuditEvent with the AuditContext (#113611)
c903c29c3b1 e2e: support admissionapi.LevelRestricted in test/e2e/framwork/pod
19cb6d036ae kube-apiserver/corerest: remove redundant interface
ede17eace45 test-e2e: Retrigger the RBD image post merge job
a966d186083 Double-check the proxy configuration vs the available IP families
36e458612a9 cmd/kube-apiserver: move back master count variable from generic controlplane
1cfb932111e kubectl: Allow parallelizing diffing
bcbc12cd79c Fix `should be able to create and delete a critical pod` test
4517d3004ad bump kube-dns to v1.22.23
985cf718a43 [Dual-stack] Fix generateAPIPodStatus() of kubelet handling Secondary IP hostIPs order may not be be consistent. If secondary IP is before primary one, current logic adds primary IP twice into PodIPs, which leads to error: "may specify no more than one IP for each IP family". In this case, the second IP shouldn't be added.
f6a86bb2030 fix indent error
c143710ecf1 upgrade npd image version to v0.8.13 for kubemark
96694514a75 Remove csiDriver Conformance test
bb0c3a08189 Remove proxyutil.IsProxyableIP / IsProxyableHostname
59592ba4639 Add OIDC test server
1f2bf32e95f Figure out single-stack/dual-stack support before creating the proxier
8abfa89e82b Move proxy platformSetup call, and do LocalDetector setup from there
ebb0fdd4f6f Don't explicitly filter config.NodePortAddresses by IP family
a74b9fde3aa Don't pass around full node in proxy constructor, just pass PodCIDRs
0537c1da563 kubeadm: move migrate / validate tests out of config_tests.go
b01a4145b2c Install ecr-credential-provider during node e2e tests
4e6aa5fb861 kube-proxy service health: add new return header with number of local endpoints
a5df442be78 flowcontrol: copy object before passing it to client-go Create to avoid data race
ea34d039256 integration testing: configure gRPC logging during init
1c48b7ec144 Add servedVersions info in StorageVersion API
d548983dbb2 Use table-driven table for TestPerPodSchedulingMetrics
e0af0a5a455 add test case param for feature flag
d68f5f0d921 fix tests
44f1c4dd94d fix duplicate metrics issue
84b3d9b7b7e remove legacy NetworkPolicy tests
0eeca0987a6 fix tests
04ea1d506b4 promote sli metrics to beta
f96d83af668 Copy container logs for easier debugging
dfc150ca182 e2e: node: podresources: cooldown the rate limit
f7cf9effa33 fix kubelet podWorkers.SyncKnownPods() typo
52ef833b6c2 Bump cadvisor version in tests to v0.47.2
8266c4d934d Generalize watch storage tests
d53762ec3a5 remove unnecessary comment in pkg/scheduler/framework.QueueingHintFn
1b47e6433b8 dra delayed allocation: deallocate when a pod is done
dbdd861ea36 chore: address review feedback
72294e4eff0 scheduler test: Use cmp.Diff instead of reflect.DeepEqual for pkg/scheduler/internal/queue/
f269acd12b2 Make QueueSet support exempt behavior; use it
931456a1427 Simplify the node name for metrics - just use localhost
3e5fafd57ab Drop docker.log and add cloud-init-output.log
1c7e87cff27 client-go: add DNS resolver latency metrics (#115357)
150f732c7ee [StructuredAuthenticationConfig] wire request context to claim resolver
4a5a242a68d dra e2e: using logging for background activity
f1700e4b95b Cache authz decisions within validating policy admission.
60fb8f2fbc5 Exclude terminal pods from Daemonset e2e tests
24f4785e3eb kubeadm: remove unused Kind and Resource functions from output API
16fdd3e5eef apiserver: introduce larger buckets for flowcontrol request_wait_duration_seconds bucket
90f82d05ce2 kubeadm: remove unused Kind and Resource functions from kubeadm internal API
fd15c6791a4 kubeadm: restore and generalize the TestMigrateOldConfig test
d616cf72a3b Add unit tests for parallel StatefulSet create & delete
c6079843792 apiserver: introduce larger buckets for request_filter_duration_seconds metric
ef265101648 Return Skip in PodTopologySpread#PreScore under specific conditions
732775ee7d1 Paginate within DeleteCollection call.
0d41d509d2d scheduler_perf: replace gomega.Eventually with wait.PollUntilContextTimeout
cecebe8ea2f scheduler_perf: add TestScheduling integration test
dfd646e0a89 scheduler_perf: fix namespace deletion
d9c16a1cedd scheduler_perf: fix goroutine leak in runWorkload
2e7f37353cb test/integration: avoid errors in fake PC controller during shutdown
812556365b6 kubeadm: backdate generated CAs by 5 minutes
44692a486f9 client-go: allow to set NotBefore in NewSelfSignedCACert()
cfa2fa6d774 put feature gate in alphabetical order
860aab842db fix a reference to the wrong variable name
a75b00ea39d Better URL for scraping metrics from kubelet
685b0c5efa1 Bump to latest node-problem-detector version with arm64
cad338890df add test for apiservices.apiregistration.k8s.io discoverability in openapi/v3
9e3b5b65838 update openapi
ad2b4368e21 expose apiregistration.k8s.io into OpenAPIV3
bb8766daaf6 feature flags should be ordered alphabetically
7f4c187ab26 kubectl explain should work for both cluster and namespace resources and without a GET method
a9afaa1eee9 add feature gate
dfce076c6cf Update the template.pot file with latest message IDs.
a4519665fe0 Skip terminal Pods with a deletion timestamp from the Daemonset sync (#118716)
9c7166ff639 wait for eventhandlers to sync before run scheduler
bde66bfb55c kubelet dra: restore skipping of unused resource claims
874daa8b52c kubelet dra: fix checking of second pod which uses a claim
6c587b43e92 Cleanup pods at the end in Pod conditions e2e node test
56c5c8f7eef Revert "Make CA valid 1 hour in the past"
ecd727e4c75 Fix PodGC test when PodDisruptionConditions disabled (#118805)
bdbf07525fa test: remove exception comments in discovery tests
6fd830a075f hack/tools: bump golangci-lint and consequently staticcheck
1af54256969 hack: disable gomega.Consistently/Eventually check due to false positives
f618e613322 e2e: replace gomega.HaveLen(0) with gomega.BeEmpty()
e7df337ebad e2e: replace gomega.Equal(true/false) with gomega.BeTrue/BeFalse()
8b33e8bdd1b e2e: fix gomega.Expect calls without assertions
0ef1f2f2d89 Set AWS specific credential provider when running there
b0f694f50ac CHANGELOG-1.27: Add note for AWS in-tree provider removal
af1c9e49c49 Update schedule logic to properly calculate missed schedules
0033f658085 increase the log level for the GetTargetNodeName error message
08198fe22b5 Extend Large Create Timeout to 60 min
9354e78289f no-op: split transformer interface
21760534157 add completion index as pod label
8083d0d22e2 pkg/controlplane/apiserver: remove temporary import restriction of cmd/kube-apiserver
764da8a01dc FIXUP: cmd/kube-apiserver/app/options: split apart controlplane part
1b3779baa0d MOVE: cmd/kube-apiserver/app/options: split apart controlplane part
3df92362abd fix openapi/v3 non local apiservices aggregation
4298953c26c kubeadm: remove unused Kind and Resource functions from v1beta4 API
6e079545c48 cmd/kube-apiserver: move options completion into options package
f04484fe775 kubeadm: add the --allow-experimental-api flag to "config" commands
0774f779d5c kubeadm: add v1beta4 to the kubeadm API scheme
38222014c61 kubelet pod-resources: add e2e for KubeletPodResourcesGet feature
f7239e40959 Better back off delays and connection timeout to talk to containerd
e4f93d8a82d ipallocator bug if ips has leading zeros
89a9e480f9b fix: update deployment e2e tests
41d961758ee update cri-api change in v1.27
22258a263f4 Fix stable metric finder for NewDesc with custom import name
13842746227 Update metric documentation
45aa59946af Refactor FindAttachablePluginBySpec out of CSI code path
07f38a3ec18 add test
6f8d38406a7 feature(scheduler): implement ClusterEventWithHint to filter out useless events
531d38e323c features: rename UserNamespacesStatelessPodsSupport
556d713a4ad apis: drop check for volumes with user namespaces
8ed23558b44 Do not set jm.syncJobBatchPeriod=0 if not needed
17013d39604 Review remarks to improve HandlePodCleanups in kubelet
e3ee9b9adc1 Fix the deletion of rejected pods
c91c578795c scheduler_perf: skip expensive cleanup during benchmarks
92a35f5bca9 Usse generics to simplify pkg/registry/flowcontrol/ensurer
902c711fb49 Unset gated pod info timestamp in addToActiveQ
56cb4c93918 [bug] Update DefaultObjectDescriber to handle interface params (#118190)
1053d1bbcf5 CEL lib: Expose errors on authz decisions instead of raising them from check().
406899360b5 Refactor shouldDelegateList/shouldListFromStorage to better explain decisions
e4cf103c9b9 Test all cases for LIST request cache bypass
7f532891c9c e2e tests: set all PSa labels instead of just enforcing
a9af2de8fdd Refactor WithRequireLeader to make it part of the etcd store
1bd3f072fa7 stop ignoring storage class selection errors
e5cbc51d29d e2e framework: allow setting all PSa labels at once
edb59e9bc75 kubeadm: move token defaulting and related constants to token package
ec70b2ec801 e2e dra: add "kubelet must skip NodePrepareResource if not used by any container"
fdd992da865 upgrade image addon-manager/kube-addon-manager:v9.1.6 to v9.1.7
420fbd11e44 ignore Histogram for prometheus client v1.16.0
c98e72841b1 Add a connection backoff to talk to CRI impls
409bc8ccc05 deps: Bump to cAdvisor v0.47.2
f72c2c2b7d2 add process start to prometheus handler opts
bbc7ca94a42 CHANGELOG: Update directory for v1.28.0-alpha.3 release
ab75e48494c storage: stop using deprecated io/ioutil
687ca0e0bb2 fix(script): handle wait_for_success failed condition
eecac058718 kubeadm: add v1beta4 API boilerplate
63e5b6bdb24 Parallel StatefulSet pod create & delete
2fb472c83cd Refactor StatefulSet controller update logic
784a309b917 Do not error in Job controller sync when there are pod failures
f2e3157df0a Remove AdvancedAuditing feature gate.
bbae445d172 fix metrics test with 1.16.0 prometheus client
180c2332bf8 [UT] increase coverage ut for kubeadm/app/features
564c236ce28 Do NOT prepull images for e2e-node jobs
c84b5b0a99f Cleanup unnecessary renames of variable t
c9b01dd9778 Fix race in logging expectations
3dd1bac4dce Set small DefaultJobPodFailureBackOff in Job integration tests
85d9339ef8f add KCM names into CCM cmd allowed import-restrictions
3b55f20bd34 update vendor
4e6a3fb9c10 deduplicate cloud provider controller names
e5f5a9bfdbe use controller names for CLI FlagSets to show the names in help
cd56748ec57 reference controllers correctly from CLI help
9fd8f568fe0 introduce CCM controller aliases and unify controller names
94792d85dea simplify TestValidateControllersOptions test
97309511366 introduce KCM controller aliases and unify controller names
ba1755132e1 support controller name aliases in GenericControllerManagerConfigurationOptions
2596245f5a7 Replace deprecated sets.Int with sets.Set[int] in Job integration tests
e5116a39c96 fix: kubectl expose fails for apps with same-port, different-protocol
958c8fb6950 Make use of `k8s.io/utils/pointer.Duration`
ede2ec22b68 kubeadm: drop older etcd versions from kubeadm support
8cd65e9cee6 reorder hack/unwanted-dependencies.json map keys and arrays
f44029705f9 exit 1 if status are not as expected(order)
a1e0aa0e504 DRA Node E2E: add NodeAlphaFeature to fix CI
74c5ff97f18 Lower the constants for the rate limiter in Job controller
f54c15d4e80 Change the fieldpath in the deprecated plugin response
471fd1ae8a1 deprecate RBD plugin from available in-tree drivers
c51a422d787 Cleanup job controller handling of backoff
fff5b35023b Adding review changs to update
889ecf865b7 always execute condition for wait.PollUntilContextTimeout with immediate=true
5aa5f1abc9c update prometheus/client_golang v1.14.0 to v1.16.0
5bde9404a09 Remove unused error return value from internal function
8636f9353a8 CHANGELOG: Update directory for v1.27.3 release
763555814b5 CHANGELOG: Update directory for v1.26.6 release
3bf93156d80 Update pending_eligible_endpoints.yaml to match APISnoop
ff2a1f0167f CHANGELOG: Update directory for v1.25.11 release
a29be0cfb00 update container runtime flags to use containerd instead of docker
89adbc6e5b5 check for AWS environment before running sudo
7f650acb3c1 CHANGELOG: Update directory for v1.24.15 release
a83edd35c4a DRA Node E2E: relabel test suite to fix CI
c27f9fdeb79 Add warnings for big number of completions and parallelism
a86380c7813 Update CLI help text for grammar and consistency
96e7d5f1f25 Bump iscsi test server image
e0f273ffdaf use ingress-gce-glbc v1.23.1 image for CI
e213448db12 Updated kubectl explain help output
7bc449d7e0c add contextual logging to job-controller
cfbc5dc54f8 mount-utils: fix linter warnings in tests
8ced101db53 mount-utils: stop using ioutil in tests
699d118d85f mount-utils: stop using ioutil
b690450e846 mount-utils: don't reread mountinfo on newer kernels
8c79a911331 mount-utils: isMountPointMatch: simplify and speedup
404e844468b mount-utils: add isMountPointMatch test and benchmark
4bb02392793 mount-utils: IsMountPoint: fix
167252fb5e0 mount-utils: format with gofumpt
55b690ee018 kmsv2: no-op refactor priming logic into its own function
15003c609d0 kmsv2: refine probing logic to avoid slow starts
d8150b81601 kmsv2: add a sanity check to confirm that new state is always valid
8c06ca68d7d Details added in kubectl explain help
4960207b317 DRA Node E2E: test NodePrepareResource timeout
5c5f6e8fe2f DRA Node E2E: add NodePrepareResourceCalled API
673d0aaa60c DRA Node E2E: add call blocking to the Kubelet plugin APIs
a60314c47ef Make etcd component status consistent with health probes
e1735b98637 Make CA valid 1 hour in the past
5e048041e40 remove helper function for unused storage feature in pkg/proxy/util
e1aef2ac917 Bump publishing bot rules for Go 1.19 branches
9cb52a6872c Fix the flaky legacy_service_account_token_clean_up_test.
4e20a8f52bc kill all processes in a container in the event of OOM
0222e6d4ae3 Update kind details for DRA e2e
75cf25c0e7f iscsi: use dbus from the host
f7a5817bc65 e2e storage: terminate worker quietly on test completion
22de2c27d1b scheduler: improve cache_test.go - Add test name to enhance test readability - Remove redundant test tables
325205efb72 Migrated pkg/controller/endpoint to contextual logging
be14b026e33 fix the integration test
a7eb7ed5c6a refactor: simplify RunScorePlugins for readability + performance
587f992a7b2 e2e: deflake a HPA CPU test by stabilizing cpu consumption
672614b57e8 apf: refactor bootstrap ensure strategy
910630fbea2 kubelet: mark '--azure-container-registry-config' flag as deprecated
5e6ae25a33b Updates chairs, tech leads for sig cloud provider
34368884783 move luxas as an emeritus approver of test/e2e/lifecycle
e97d9803f2f add SataQiu as a test/e2e/lifecycle approver
4977189c1b0 Fix ginkgo noColor deprecation warning
e6bc945a61b Add startup probe in integration test
ea1de7517ee CHANGELOG: Update directory for v1.28.0-alpha.2 release
7ccc2317839 add test for authorizer type checking.
54cae706786 Pass the mandatory parameters to support testing on ARM64
fdc49f5257c Return deprecation warning for storageOS,PhotonPD,ScaleIO..etc
151509fb74d Remove unreachable warning on volume name dup
d73923c8ebf fix 'pod' in kubelet prober metrics
0ddaa7f7c9f Fix warnings on "duplicate" env vars
4820cc852a0 Minor fix on variable
a6f5abfb81e Updating names from webhookconversion to conversionwebhook
0fe84ff7cb1 Re-add the legacy wsstream package and deprecate it
8f3109da791 Refactor wsstream library from apiserver to apimachinery
6d4abd7e7b6 bump distroless-iptables to v0.2.5
04fa4184ed3 add support for authorizer to type checking.
e5a15c87e9d Ensure timeout test handlers don't complete before timing out.
f2a64cb91d7 fix Cronjob status.lastSuccessfulTime not populated by a manually triggered job
2f6b1d3c0fb Ensure Job sync invocations are batched by 1s periods
ed429c4388a replace node-role.kubernetes.io/master taint with node-role.kubernetes.io/control-plane for gce kubelet flags
b1da721bdd7 Update vendor with hack/update-vendor.sh
88b69cdd0e6 Fix flaky persistent volumes e2e test
d9e12db547e Bump images, versions and deps to use Go 1.20.5
ea6495e8284 Remove StartupProbe on debug with pod copy
ac15d697578 remove RetroactiveDefaultStorageClass feature gate checks
6afb363ca17 test: remove RetroactiveDefaultStorageClass feature gate
97a81a59f62 test: correct validation test error message
42722ffef02 graduate RetroactiveDefaultStorageClass feature to GA in 1.28
7f87ec9406a storage: Add MadhavJivrajani as reviewer
7ac36bd0720 test/integration: use t.Log in TestAPIServiceWaitOnStart
77cf37ee543 STRUCTURE: cmd/kube-apiserver: move admission construction back from controlplane
7961812bed8 STRUCTURE: cmd/kube-apiserver: move OpenAPI construction back from controlplane
43be9c3a0ac MOVE: cmd/kube-apiserver: move genericapiserver construction into controlplane package
9be6e7bb339 STRUCTURE: cmd/kube-apiserver/app: stratify construction with options/config/server
e6ed4c7934d CLEANUP: cmd/kube-apiserver/app: remove trivial funcs
f7d4e90b5c4 MOVE: cmd/kube-apiserver/app.createAPIExtensionsConfig -> pkg/controlplane
087fbc9304f Remove invalid merge key
4962e6eacb9 Squash detectNodeIP and nodeIPTuple together
b5db644422d Add merge map key validation to StorageVersions
58162ffd63b DRA: add node tests
b69b34bec64 Move a kube-proxy unit test to the correct file
4bee9b2b352 structured logging in proxy/ipvs/ipset
26801d6541a kube-proxy avoid race condition using LocalModeNodeCIDR
4dbece1e203 e2e-framework: remove node-role.kubernetes.io/master taint from non-blocking-taints
dddbecb47e2 prune's xml files to display only top level tests and failed sub-tests
8b0a6ed6999 re-send the shutdown signal in case the dbus restart is not done
4d0e25151db Fix SELinux contexts used in e2e tests
010343562c6 dependencies: update github.com/dustin/go-humanize v1.0.1
743e5525edb fix eviction failing test for nil feature gates assignment
6d66fbc6b67 storage: Move cacher tests to reside with the cacher code
70978e4af61 cacher: Move common testing utils to a single file
bdfb96c57d3 chore: os.SEEK_END os.SEEK_SET and use b.Logf(...) instead of b.Log(fmt.Sprintf(...))
7a80d7c839c add warning for duplicate containers[*].ports with the same port, protocol, hostPort, and hostIP
923db7bd8e0 chore: use strings.Contains instead
e9e4acb1dde k8s.io/apiserver: remove skewed completion from EtcdOptions
4d85a1f00cb storage: Implement TestWatchFromZero for cacher
2e76ac31fd8 Replace os.Setenv with testing.T.Setenv in tests
ac5ce5cbce7 Replace os.Setenv with testing.T.Setenv in tests
b274a9bf7c4 remove csidriver endpoints from pending_eligible_endpoints.yaml
5d4bf0b6f90 Promote CSIDriver e2e test to Conformance
3085b57869a Do not copy bytes for cached serializations
c009667c6c6 deprecate CephFS plugin from available in-tree drivers.
1fcfd1d5090 pkg/util/iptables: use buf.String() instead of string(buf.Bytes())
9eaa50cc829 Rename scheduler queue variables for consistency
6195f96e56e minor fix comments in netpol so its easy to understand the tests for newcomers, remove one misleading comment (#118264)
410b6023d6f scheduler: fix code style issues for pkg/scheduler
71ab7dc791f Remarks
70d3bb43e56 Adjust the algorithm for computing the pod finish time
b994e639a6b Add mininumKubelet tag into ReadWriteOncePod test
db9fcfeed29 Move cri/streaming to k8s.io/kubelet staging repository
da4a8d831b9 kubectl: use bytes.Buffer.String
8e4228a8c1f remove CSI-migration gate
a5c4fbe9791 chore(fix): test jsonpath condition parsing errors
9d3e55ec431 Support JSONPath condition without value
f520f6fd06c Add Pod Termination e2e tests to test termination grace period seconds
b4dfae25dee fix terminationGracePeriod blocked by preStop
fd92acba5a8 chore: should use buf.String() instead of string(buf.Bytes())
20866b3f85a dryrun: Don't reuse current object for conversion
f351c6d1ecc k8s.io/apiserver: apply storage object count tracker implicitly
45c9e066164 Fix errant debugging code in codegen
a51be9786ba remove enabled by default beta resources that have been removed
f4d326a1fcc verify: produce JUnit file also for pull-kubernetes-verify-strict-lint
a4ea058cc75 feature(scheduler_perf): distinguish result in scheduler_scheduling_attempt_duration_seconds metric result
322968e9b38 Update unwanted dependencies per CI instructions
2111e79f56a Update gnostic references
1993a4cb379 vendor
0b4efddae01 verify: nicer failure message rendering in Prow
dbbb21469f4 verify: pick relevant lines from verify-golangci-lint.sh as failure message
d6168bb6587 Add ephemeralcontainer to imagepolicy securityaccount admission plugin
70ff750c755 chore: io/ioutil deprecated
1ce285ad3df Revert "removed the deprecated `azureFile` in-tree storage plugin"
daa71159077 kubeadm: add deprecation message for UpgradeAddonsBeforeControlPlane feature gate
a6c7f63b188 Set the node-ips annotation correctly with CloudDualStackNodeIPs
d49c43abde5 kubeadm: add integration test to ensure that the supported etcd version is always available for the stable Kubernetes version
6d23da045fc Migrated pkg/scheduler/framework/plugins/interpodaffinity to use contextual logging
db2389ba9c8 kube-proxy: remove log warning about not using config file
15aa00fc836 Remove unused `getSeccompProfilePath` helper function
d0a64739e2c e2e dra: collect and check GRPC calls
68901de8981 Enable optionals and add tests
5c0b59891d6 Bump cel-go to v0.16.0
5b3510c0b67 Fixing gmsa-webhook install steps for Windows GMSA full tests
c539c739161 Changes to buckets and comments
35d2431b3a8 informer: fix race against Run and SetTransform/SetWatchErrorHandler
64269620597 Changes to histogram buckets
c48c4c679ad Fix ginkgo deprecation warning
5a14573258b clean: use info instead of error to log queue closed message when scheduler exit
f2a5e247ebf add pacoxu to kubeadm approvers list
705c6ff315b Review comments, added metric namespace, moved utility functions, and etc
a8ef109aca0 CHANGELOG: Update directory for v1.28.0-alpha.1 release
369e3faa4ff Moving Kubelet Credential Provider test to common so that it can be run both as Node and Cluster test
2d8c820741d move pkg/util/ipset inside pkg/proxy/ipvs
85e0d8c8b14 Revert "kubeadm: add --feature-gates flag for kubeadm upgrade node"
f3ba9353363 Consistently use proxyutil as the name for pkg/proxy/util
b3111170f8e remove Ephemeral Containers form list
64c9070f8d0 add pod containers[*].port duplicate warning
f9ae3e774d0 testutil: use contextual logging
534f5edb53c Cleanup boilerpate.py
d9e2583af16 test/e2e: replace deprecated ioutil
4b4b3b71b78 clean up dead code
4523a301c87 kubeadm: enable --feature-gates flag for kubeadm upgrade node
074900e81bd scheduler: update the scheduler interface and cache methods to use contextual logging
0951204298a kubeadm: Supports() return true for all alpha/beta/ga/deprecated
c6aaa1eab04 kubeadm: lower the log level of EtcdSupportedVersion warning message as it is a kubeadm internal warning
4e6d929580a deprecate csi migration for ceph rdb
11a40406a1f Promote Ephemeral containers e2e test to Conformance
bf116e85943 Optimize reflect checks further, save item type information
12e3d9fcc4c Implement WithAlloc variants for EachListItem and ExtractList
efc601302ad Extract List reflect optimization
b8a3bd673dc Add WithAlloc interface and stub implementations with base benchmarks
4aa5441de2e Move pkg/util/ipvs inside pkg/proxy/ipvs
0535e742241 feature(schedule_one): use heap to find the highest score node
532fe3c9653 Add kerthcet and sanposhiho as SIG scheduling approvers
8df1a5e6dcb Webhook conversion metrics
a045fedd025 Update google.golang.org/genproto
455169bd66a e2e storage: add missing error checking for WaitForVolumeAttachmentTerminated
d76043958fb Follow up from dynamic retryAfter
510287d3444 Fix the git-repo test error caused by the correct use of loop variables
926bc9bf8e5 Update podFailurePolicy comment from alpha-level to beta
7d2e1888f8a Chore: fix the example about how to use PollUntilContextTimeout
4d2ff08bfa1 e2e-framework: code cleanup for mismatched comments
15678e4a67e Optimize usage message of commands which have subcommands.
6a867eacd85 kubeadm: warning only for deprecated FG
4dfc684b342 Set kube-proxy memory request to 50Mi
5d18f471494 Improve clarity and guidance in provisioner waiting message
7a6b4a9215e dra scheduler plugin test: fix loopvar bug and "reserve" expected data
e31b2080f5a e2e framework retry on Service unavailable errors
a50549cc906 e2e rc: if the pods are running but not ready the test will fail
133eff3df49 implement LegacyServiceAccountTokenCleanUp alpha
a6003ae1e11 fix unknown field error in rs e2e
27057def059 Signature fix for registeropenapi
4373ae05f34 Update vendor
72e4c9a82ac kubeadm: add the "config validate" subcommand
f4891842194 Delete CRDs created during field validation tests.
2ea6896f90c Add warning log callback in client-go loading rules (#117233)
485d1631cd3 Remove Azure file in-tree storage plugin
2eed9b4143a Should get ENABLE_CLIENT_GO_WATCH_LIST_ALPHA when new reflector
e2ed8f8c3ca style: correct the sentence
08139044040 Fix: Restricted profile comply with PSS (#117543)
c68f8586580 proxy/ipvs: github user name change: daman1807 -> aroradaman
05b3beb7f02 Create e2e test for CSIDriver endpoints
d459b4429f4 integration: remove special verbosity for garbagecollector and graph_builder
931cc96b8d4 remote windows condition when #116693 is merged
0bff705acd8 Preserve code blocks in templates.Normalizer (#118029)
7470a94f5a9 add some log for debuging
6232ac734a0 Merge duplicated Linux/Windows kube-proxy setup code
08ce5805769 Add ProxyServer.platformSetup
e0b7f31ce6e use standard base image in dra dev
149f4878a70 Simplify DeferCleanup.
dbb6d25f13b e2e: apply timeout for CSI Storage Capacity test only to node
1c05cf1d516 kube-scheduler: NewFramework function to pass the context parameter
1b206399f6a fix using stale binaries in local-up-cluster
ece68cf8337 Fix update-vendor.sh logging
cba8c1f5e2e Fixing windows memory allocation e2e tests after a refactor
96d48de9b97 add OWNERS for cmd/prune-junit-xml
86a258b13a2 kmsv2: ignore cache key expiration on reads
89439b570fc test/e2e: use agnhost latest version in the manifest
b30720fc9f0 Add test for starting kubelet with a CSI volume mounted
ad9e264c3cc test/e2e: Use json.NewSerializerWithOptions in place of json/yaml newSerializers.
048938f1d85 hpa: cleanup `currentReplicas` code
0f5535ea259 registry/core/service: remove incorrect comments
2db577a560c scheduler-perf: inject "benchmark" as name into JSON result filename
0789bbe9f7a Update k8s.po
b6364dddfe6 update webhook test to go 1.21
d8db9640fab kubeadm: remove function pointer comparison in phase test
2658a2b627f Make connection lost retryable in webhook
ed26fcf5b87 cleanup useless null pointer check about nodeInfo.Node() from snapshot for in-tree plugins
e21cf9a54e9 Setup e2e_node to support testing on ARM64
ec8d94f2057 Grab logs from all the containers when DNS related tests fail
182cd425d3b graduate LegacyServiceAccountTokenTracking to GA
337728b0255 Improve backoff policy in reflector.
0fe27a06f99 Cleanup the Job controller handling of terminating pods
c74790e266a remove redundunt type conversion, unused variable...etc
07c94553608 fix apiserver InstallAPIGroups slices out of range
aa11cc69696 Mark grpc-gateway v1 as an unwanted dependency
19ae2de19cb kubeadm: speedup init by 0s or 20s
e4102d5e300 Test APIService safe handling at startup
3be3997193a Fix waiting for CRD sync at server start
71ec9df5b61 update image tags in manifests to reflect the version listed in the source
a10ff53d8e6 Reword the event message to read better for a single secret
b2eae2f92e9 Support podman for building release images
6b4251c0fdf Remove statefulset from logcheck.conf
3f1d8e7aeb4 Apply to use contextual logging for all loggers in statefulSet
d9b941b7827 Remove undesired verbose fields from log
bea71a3e4ee remove unused pv informer from expand_controller
4c9887e3ebd Updating the nodeAffinity of gated pods having nil affinity should be allowed
a0f14c1c5ea CHANGELOG: Update directory for v1.25.10 release
bab8002fb38 CHANGELOG: Update directory for v1.24.14 release
80b9c853613 belated cleanup of some kube-proxy stuff for old versions
e553fe1fff0 CHANGELOG: Update directory for v1.27.2 release
c9e4de90dbe CHANGELOG: Update directory for v1.26.5 release
526d45416fb update err status code check in transformation metrics
5a75a03a774 Improve warning message
b76ef2e095f fix: move to `dl.k8s.io` from `kubernetes-release` bucket
fc4fb004cf6 add reviewers and labels to yamlfmt
93462377120 Update docker/containerd/runc versions and capture more logs
885f3d7a7df Sort and limit to the describers the return (string, error)
9e9a6cde4b8 test/integration/scheduler: fix data races
b035c373db8 build latest sample-api-server for test/e2e
bafae5c0764 rename err to lookupErr
8b9cbe62025 fix false positive kubectl plugin unit tests
b9950b5192d Drop zeitgeist from tools go.mod
36f0caf7ecd remove GlusterFS references from test/e2e/* comments/descriptions
d83c3ce7ca8 make rbd and iscsi test images in parity with the test code
9de2846c72c remove glusterdynamic provisioner images reference from tests
763e7923fb9 e2e: replace ubuntu-slim with agnhost in hpa cm noExporterDeployment
261de704c25 kubeadm: fix a bug where the static pod changes detection logic is inconsistent with kubelet
666be79d670 legacy names of volume plugins have been gone a LONG time
8b4840aa374 clean up unsupport etcd version
e0ebac6c9ca drop redundant NArg check when looping Args
82c40e3697e drop redundant NArg check when looping Args
829bcea7634 remove vestigial BUILD file
0616d15712b Fix perf-test by increasing the error margin
46ed70ecac5 Bump runc to v1.1.7
51d79c4d6b0 e2e: use gomega.Expect instead of deprecated framework.Expect*
1daf74d25c4 Initialize data if nil
b81cfb9cb8c Update vendor
15c5713015e managedfields: Remove gvk from SkipNonApplied
b52e57c589a managedfields: Improve/strengthen version checking for Apply
559d12fcce0 managedfields: Create NewFakeFieldManager
45853e20ae5 openapi: Create client -> TypeConverter function
45603efecb7 Create e2e test for PodEphemeralcontainers endpoints
ebaf49dbd70 Export DefaultServerUrlFor utility function
5519b89a28e Validate lock identity
e3eb4bd0c56 updating dependencies.yaml for etcd v3.5.9 version
c99cf53a108 e2e: deflake hpa e2e custom metrics tests
247ea7fc780 use upstream etcd github path instead of redirecting one
6616e1f2385 update etcd version in install.sh to 3.5.9
0e456dcf866 Clarify localhost nodeport comments/errors
a744a186b67 Rename GetNodeAddresses to GetNodeIPs, return net.IP
2ca215fd994 Add NodePortAddresses.MatchAll()
d6e488b998e Changing annotate PrintFlags from annotate to annotated
d8e82b1417c e2e: use gomega.Expect instead of framework.ExpectEqual in windows/*
8c6c1e53194 plugin_evaluation_total metric support preScore/score
3680a5230c3 Bump docker/distribution to 2.8.2
3ac74973610 Chore: cleanup in interpodaffinity
073b4cf66ad test/e2e/dra: fix kind cluster creation
3b69fa2fa54 dependencies: update github.com/mitchellh/go-wordwrap v1.0.1
19ae103e829 emit warning on deprecated annotation volume.beta.kubernetes.io/storage-class
517c5b75c5d Update unwanted deps
d6d1dbdd82a Update kube-openapi, drop mapstructure
a52dcd0d9f3 Add DelayCacheUntilActive option to start informers after leader election
7c554ea1d91 Regenerate discovery fixtures
2ab6fd3590b Capture discovery API output in test fixtures
3867569ae27 codegen
0819d342040 using parsers in applyDefaultImageTag
7da7468a3fc cleanup: duplicate request_test TestRequestAbsPathPreservesTrailingSlash
f0f92853ad8 Add api-machinery TL owners permissions for jpbetz
e4dd6f68dc8 remove CSIStorageCapacity featuregate
9ac657bb94e Make NodePortAddresses explicitly IP-family-specific
f7bb9a9a0a7 Remove a mostly-unused variable in the ipvs proxy
1ca8f84eede Scheduler: Pass the supported nodeSelectorOperators to the field.NotSupported
d85b91f343b scheduler-perf: measure workload runtime and relabel workloads
aa405c8aac6 Allow runtimes to provide additional context on CRI pull errors
83fb5a50bc9 dependencies: bump k8s.io/utils
daebf1c735d Simplify plugin resolution check function
f562375c8a6 add changelog for kube-addon-manager v9.1.7
be4c4a51ea2 Update pending_eligible_endpoints.yaml
d34d4755ae2 Promote APIResources e2e test to Conformance
6e2ea32fc89 feature(DynamicResources): return Skip in PreFilter
a0133b7cc47 proxy/ipvs: added daman1807 as reviewer
dcefc42b35a update vendor dependencies for the change
ae749238786 etcd depdencies are updated to v3.5.9
13cef6a7549 cleanup unused variables for v1beta2 component config
815578295ae Revert "support short name for flowschema and prioritylevelconfiguration"
72202f9a007 Revert "add shortnames for mutatingwebhookconfigurations and validatingwebhookconfigurations"
45836971f27 cli: replace intstr.FromInt with intstr.FromInt32
8580c116d5c fix: use dl.k8s.io, not kubernetes-release bucket
ef9f8d7c0c8 kubeadm: Remove leading zeros from etcd member ID in log messages
ff4c6916ec7 kubeadm: Fix log message when etcd member is added as learner
196e2f041b1 Update the cgroups v2 toleration in local-up-cluster
7248b9263f0 Fix comments on InformerFor
6ac1bae2815 test: Improve debug output of init container tests
1f16d711857 kubelet: Rename PodManager DeletePod to RemovePod
166256f73e8 kubelet: Reduce the interface pod.Manager consumers accept
8bd94dfa762 kubelet: Organize and document kubelet pod-related members
bb568844b67 kubelet: Separate the MirrorClient from the PodManager
80b1aca580b kubelet: Remove dispatchWork and inline calls to UpdatePod
e7207c85467 kubelet: Merge orphaned mirror pod names into GetPodsAndMirrorPods
f8086f2dac1 kubelet: Convert IsMirrorOf to a function
02960a8253e kubelet: Remove unused mirrorPodFunc in eviction
1168b118750 Stabilize local-up-cluster in our CI
3dc4eea8896 proxy/service_health: release read lock early
655f2f74010 replace build to build.sh
cc1251123ba use wait to avoid blocking the SIGTERM handler
808098c4c69 proxy/ipvs: healthzServer for instantiating the proxier
4b50c4bb016 Update --image-gc-low-threshold option's description
3da79e2850d OpenAPI V3 invalid document checks
cbe825b2b6c ginkgo update to v2.9.4 and gomega to 1.27.6
feb63fb0285 e2e_kubeadm: stop using deprecated framework.ExpectEqual
7681135f1b1 etcd: Build image 3.5.9-0
7a4787ade10 openconsensus update to v0.24.0
82d1e356de4 deps: go-gcfg update to the v1.2.3
f03b5cdc083 update containerd/ttrpc to v1.2.2
dd49af86b7b [UT] add ut for pkg/client/conditions
f7948c6e2e4 use kubectl v1.27.1 in cluster addon manager
eb1483fe64d user --prune-allowlist in kube-addons.sh
20602c819be e2e framework: remove dependency on k8s.io/kubernetes/pkg/api/v1/pod
2e2afc7fd27 Job: Use generic Set in validation
1ffe3f467e8 lavalamp is taking a long break
1ea17254bf0 hack/tools: bump logcheck to v0.5.0
3fa55d469c7 fix a bug where the AttachedVolume is not printed correctly in the log
8c82855467b When expecting pods count only active ones
de882f5193b Job: Replace deprecated pointer utils with supported ones
8f11f5bb2b5 DRA: use containerd 1.7 in kind image
123845da886 Log a warning if a ImagePullSecrets does not exist
3f3e1d507d0 add new metrics for the internal client-go transport generator
e7c679c362c cidrset, multicidrset: directly use getIndexForIP method
fe728996ca8 scheduler test: call frameworkruntime.WithLogger function for contextual logging
b4563925678 Migrated `pkg/scheduler/framework/runtime` to use contextual logging
bfb4f8b7071 etcd version monitor build go version update to 1.19.9
0ae902fca4c update golang version of etcd build to 1.19.9
3b634de6ffc test/e2e/dra: update README
5fdeaa8e42c update for feedback
6f23c774085 QueryParamVerifier falls back on invalid v3 document
d5f4b9634c6 DRA: fix image build on Mac
569695b0226 e2e/network: setting --max-time for curl
5fd5768ef32 kubeadm: Make etcd member removal idempotent
164113bc1c3 fix a bug where the KubeletConfiguration is not printed correctly in the log
a5575425b03 add no resources found message to rollout-status command (#117884)
c0611b6bb33 Return Skip in InterPodAffinity#PreScore under specific conditions
11f1d241654 unit tests: Fixes kubelet util unit tests for Windows
3a394bbeada fix:translations zh_CN LC_MESSAGES k8s.po error
4634073d0b9 Use getter function for plugin subcommand resolution
2c03afac4c8 apimachinery/util: stop using deprecated io/ioutil
e3d5feb76c4 fix HPA plain metric calculate
6607834207a Use the same report files as before
9150e6b55a1 s/of referencedFrom/from referenceFrom/
4bbf611773d Retool validation for pod HostNetwork ports
ec3379a717e Do hostNet Pod-ports -> hostPorts in Pod defaults
ef796dca9bb Simpler openapi gen - subprojects do themselves
93b2845bec7 Codegen: subprojects openapi
4909dbd0d7f Deprecate generate*groups.sh -> kube_codegen.sh
c3971002c9d MinimizeIPTablesRestore to GA
8f229057484 [refactor] refactoring flags and options in Expose cmd
82e3fa0930e fix fd leaks and failed file removing for main pkg and cmd
5289a7b029f fix fd leaks and failed file removing for test directory
b94c6daa0b7 fix fd leaks and failed file removing for pkg kubectl and pod-security-admission
982d2966cd3 fix fd leaks and failed file removing for pkg controller-manager and apiserver
73aeed8766c fix fd leaks and failed file removing for pkg client-go
f49cc5eb113 add remove_file in client-go util directory
c8737346db4 Export GOMAXPROCS environment variable
e865b30abd0 update serial number to a valid non-zero number in ca certificate (#117791)
308ab380d7c Add unit testcases of refMap.
23ac0fdaa52 APF: Dynamically compute retry-after based on history
99ebc8d9f82 Tweak annotating kubemark nodes on startup
aab02d52f4d Fix make etcd image failed
91570a36614 promote ServiceNodePortStaticSubrange to beta
e79daae6823 Chore: clearify need update test cases
fb4d0150b96 Convert apiextensions-apiserver to new codegen
29913a89735 Convert code-generator/examples to new codegen
643bf1b0362 Convert kube-aggregator to new codegen
1e0b7aab756 Convert metrics to new codegen
e368f1b25bf Convert sample-controller to new codegen
d0e5adb58bc Add a new way for subprojects to do codegen
05b3449346e kubeadm: Add etcd client unit tests
fc1b2287798 kubeadm: Use internal etcd client through an interface
e740f8340ee Introduce CEL EnvSets for managing safe rollout of new CEL features, libraries and expression variables
235c261196e Job: Fix a misspelling
b4560f9e573 kubeadm: fix a bug where file copy(backup) could not be executed correctly on Windows platform during upgrade
f2de1a00b8f storage/etcd: skip SendInitialEvents if the request is backward compatible
bbf5c03dd80 Add NodeLogQuery e2e tests
ddb8c8a38b4 remove ServiceInternalTrafficPolicy e2e feature tag
16fecf3e761 Refactor APF handler in preparation for dynamic retryAfter
d3237b72587 unittests: Fixes unit tests for Windows (part 7)
ccb4ca89549 record podUID in refMap in watchBasedManager
e4340f0d9bd Job: Use generic Set in controller
22d0aa1d04a remove DevicePlugins featuregate
27cdddeaf16 update Feature:KubeletCredentialProviders] e2e test name
2ebc0cc0257 remove unwantedReferences
57969c1b52c Fix etcd3 config changed
4e24237f3bc e2e services: retry if healthcheck nodeport is not avaioable
e560df770e3 respect local GOPROXY setting in build/common.sh
c56839c0a1e etcd: Update version to 3.5.8
64f2fe2357d kubeadm: fix crictl pull using wrong flag, use -i and -r
936265e8707 Add podUID in AddReference and DeleteReference
cd51c1803e2 Add new partial/full sync time metrics for iptables kube-proxy
a862a5f2d24 Use the right executable ss/netstat in log message
ae08fe1e199 ProbeTerminationGracePeriod promote to GA
2cb215e1091 Add all describers to the exported DefaultObjectDescriber
5ea40d14fd9 Added e2e_node test for sigkilled pods exit code and exit reason check
3e57a0bd138 Add go.work and go.work.sum to .gitignore
008576da073 Improve and simplify maintenance of APF bootstrap objects
194ac957ad3 make resize of hollow objects more verbose in start-kubemark
c3e77bf21cd Update podFailurePolicy comments from alpha-level to beta
4fa7e444805 Remove gcp cloud-provider checks for kubelet version >= 1.7.2
1c45bacfb0e mount-utils: fix flaky test 'TestFormat'
6a5cf99aad1 pkg/proxy: human-readable messages
c2c8b8d1783 pkg/proxy: using generic sets
359bcec0e09 benchmark test to evaluate the overhead of podMatchesScopeFunc
edd032e22b7 Fix incorrect calculation for ResourceQuota with PriorityClass as its scope
e807a6aec57 Disable NewVolumeManagerReconstruction feature gate
0c9f55588c5 Simplify creation of default KubeProxyConfiguration
ec2cc36404e e2e: disable jig.ExternalIPs
b849ff57b85 e2e reasonable grace termination period timeout
791573ddb60 promote ProxyTerminatingEndpoints to GA
b249b4ca9bb Promote ExpandedDNSConfig feature to the GA stage
5aca41af50f [local-up-cluster] Use the kubectl we built
8524d21bf48 Bump Ginkgo Poll Progress parameters to a sane level
034528a9f04 scheduler perf: add DynamicResourceAllocation test cases
1c52fb38759 Update publishing-bot rules for release branches to Go 1.19.9
19f7cb23c8c e2e agnhost functionality to RST TCP connections
63b69dd50ce Add support for CRI `ErrSignatureValidationFailed`
859359ad6ae Fix strict linting
a7035f54595 Pass Context to StartTestServer
2d866ec2fc8 Teardown only scheduler in integration tests
8969fdd2f51 QueryParamVerifierV3 resilient to minimal OpenAPI V3 documents
cede96336a8 Depend on k8s.io/utils cpuset
9f46cbc6fa4 Update k8s.io/utils version to v0.0.0-20230313181309-38a27ef9d749
10a869fc752 Remove duplicated config fields from ProxyServer
1f7c07f3553 scheduler: remove deprecated v1beta2 KubeSchedulerConfiguration
a3848714f55 dependencies: update gh/Azure/go-autorest to latest version
17c17da97b6 e2e_node: move getSampleDevicePluginPod to device_plugin_test.go
c53cc4fe0db Update distroless-iptables to v0.2.4
c4575c34382 Fix up detect-local-mode validation
3734fe7ab1d Remove some useless error checks
19885264f3d [go] Bump images, dependencies and versions to go 1.20.4
d82684e691d Add check to skip PodTopologySpread PreFilter if no constraints are specified
d22b9310e6e Allow override of prerelease/buildID portions of version at runtime
36b760a9317 upgrade etcd deps to v3.5.8
7c5573d326d Fix cmd, integration, and conformance tests
69eccd41b89 endpointslice: reduce visibility of vars/funcs
933b665c18c Upgrades spf13/cobra to 1.7.0
3653b21e6ba Move glusterfs 1.25 deprecation notice to the deprecation section.
9d19c207d22 fix: fixes flake in TestKMSv2Healthz
561548e86c4 unit tests: Fixes kuberuntime unittests for Windows
5f489a33277 feat: rename PodHasNetwork to PodReadyToStartContainers
a40810a2d9d Add comment about removing the feature gate
e51e5962d5a Use early return pattern to avoid nested conditions
e1e38148bb2 Add DisruptionTarget condition when preempting for critical pod
7be3f8e43f7 Remove old metric scheduler_goroutines
e7396e35513 remove ability to re-enable serving deprecated versions of the runtimeclasses kind
d96f83f02f9 windows-tests: Update connectivity check util function
e496085bd34 Kube-proxy/ipvs: accept access to healthCheckNodePort on LbIP
d257d5dfdc4 Trigger re-sync on any change to providerID
40de26dcff8 KEP-3325: Promote SelfSubjectReview to GA
d9524379210 Fix flaky HPA e2e tests by not failing on context cancelled (#117669)
5fff8cae749 dependencies: klog v2.100.1
d55b67b3490 Clean up brace whitespace in **/validation_test.go
2ad2c15c9ca Update copyright year to 2023
b464d084278 Remove custom fake svc lister in favor of regular indexer
b899ae48477 remove genericfeatures.DryRun in 1.28
c6bdde8051c Create e2e test for APIResources endpoints
ab9c8eb1e8d Removing WindowsHostProcessContainers feature-gate
077cc20f8af fixup patcher test to include field manager
ad5cda4d219 remove checks for fieldmanager from handlers
4721ec7519c include apiextensions types in apiextensions generated openapi
08e756342c2 fix scale not being given gvk in CRD openapi schemas
ffb9c076d77 add OpenAPIV3 config to tests and server options
c2177dca5f6 add error for attempting to initialize field manager with nil typeconverter
94909af68ae supply deduced typeconverter to apiserver tests
302daa889c5 Throw error if OpenAPIV3 config is not provided
1b766839677 filter out directives before taking patch value as-is
6de6cd0a658 add integration test for nested $patch in SMP
e00a9c3a0b1 add subtests
ffeec1f4d44 Update compatibility data test
ec997d5433a Generated files for NetworkPolicyStatus removal
bff8a6cd9f3 Remove withdrawn feature NetworkPolicyStatus
0fcf42f3211 Move test double queue to test file and unexport
208af2d1d83 Localize SpyWorkQueue to cloud-provider for now
a15013ec8b1 Document RetryError properly
73bc9861d25 Improve error logging in processNextServiceItem
18e978a89df Improve RetryError GoDocs
de34540248a Update kube-openapi to fix race
d0677f528c0 Add json tag
69bc6855568 node: podresources: graduate to GA
04ad946e8fb kubelet dra: lock before getting claimInfo CDIDevices and annotations fields
aaa30439bdd reduce util pkg for testing in tempdir.
4c83aae2cc7 kubeadm: replace intstr.FromInt with intstr.FromInt32
026e7c7cb37 registry: replace intstr.FromInt with intstr.FromInt32
0ee9f1b7a75 kubelet: replace intstr.FromInt with intstr.FromInt32
1c4b97ea272 network: replace intstr.FromInt with intstr.FromInt32
5bfe738af2e apps: replace intstr.FromInt with intstr.FromInt32
94410ee8078 api-machinery: replace intstr.FromInt with intstr.FromInt32
4911e9de4a7 api: replace intstr.FromInt with intstr.FromInt32
79266560383 kubelet: Implement support for Windows podAndContainerStatsFromCRI
14952cef5b7 kubelet: Move Linux stats to a Linux specific file
fc8b4657c18 Add tests
ea4ce5dc28e Alias api/errors instead of stdlib errors
a179203bdba Support specifying custom LB retry period from cloud provider
da922f0af67 Remove ability to re-enable serving deprecated discoveryv1beta1 APIs
e28f3de6568 Revert "proxy startup-time config handling cleanup"
d94c733ee2b Use absolute path instead requestURI in openapiv3 discovery (#117495)
34d3c7520be update Deps gopkg.in/warnings.v0 v0.1.1 to v0.1.2
944a4cd3114 Remove ability to re-enable serving deprecated autoscalingapiv2beta APIs
671a3f43fdf Correct the changelog for GlusterFS removal in 1.26.
859690d72a4 Added support for image credential provider for windows and arm64 on gce
28c573358b0 test for init container restarts
d727df1741e node: device-plugin: e2e: Additional test cases
3dbb741c976 node: device-plugin: add node reboot test scenario
a26f4d855d5 node: device-plugin: e2e: Capture pod admission failure
96975737033 node: device-mgr: e2e: adapt to sample device plugin refactoring
282a6a80b92 node: device-mgr: e2e: Update the e2e test to reproduce issue:109595
d509e79837d node: device-mgr: e2e: Implement End to end test
dc1a5926321 node: device-mgr: Handle recovery by checking if healthy devices exist
53c9103a1de Set ENABLE_AUTH_PROVIDER_GCP to true in gce tests
2572a430344 kubeadm: fix unit test failure on node with multiple cri endpoints
f81b49d8739 Remove ability to re-enable serving deprecated eventv1beta1 APIs
48d01d6d9b0 Remove ability to re-enable serving deprecated batchapiv1beta1 APIs
c6f4bee98dd kubeadm: add deprecated FG UpgradeAddonsBeforeControlPlane
4d9261c7567 Fix LocationOfOrigin shows up unexpectedly
76fe41a996e chore: update cgroups and ttrpc versions
0dbeff4b6e6 remove GA feature gates in 1.28 about network
4e7b6e8ba49 remove DelegateFSGroupToCSIDriver featuregate
fc0d2cd32f5 added init containers tests to simplify the sidecar KEP large PR
258c4c4251e Remove duplicated config fields from ProxyServer
9d4f10f5d28 Fix up detect-local-mode validation
5ece6541b80 proxy/ipvs: don't bind nodeips to the dummy device
5310305098a proxy/ipvs: add a GetAllLocalAddressesExcept() function
f24d1d2c950 use go 1.19.x for etcd version monitor compilation
91ee58050f8 wait: fix PollUntilContextTimeout godoc comment
b3e0bc88640 scheduler_perf: let the test decide which informers are needed
969d28b12b7 scheduler_perf: refactor common code
91df71be549 correct etcd base image reference in the doc
6b40cd8cd37 update test/conformance/image version to v1.4.2
6c8be35fa86 update the etcd base image to v1.4.2
1eca720dcc7 Refactor some watchcache tests
7f370d651dd Migrated `pkg/scheduler/framework/plugins/podtopologyspread` to contextual logging
54e6f609ceb Migrated `pkg/scheduler/framework/plugins/noderesources` to contextual logging
152c1a02723 Chore: Replace re-initialized variables with create new ones
37a9260d5c5 Migrate pkg/scheduler/framework/plugins/defaultpreemption/default_preemption.go to use contextual logging
eeb13993832 Migrated `pkg/scheduler/framework/preemption` to use contextual logging
550d4c00746 scheduler_perf: support test case selection via labels
79de8879cbe OWNERS_ALIASES: add self to sig-node-reviewers
217196c59fa Add ROX storage tests (#114628)
6a4cf352b8b remove tracking annotation from validation and webhooks
2af662b05fe Refactors discovery content-type and helper functions
170d5ef9fa0 code cleanup for kubeadm
902c4ecc90f Add jpbetz to approvers of apiextensions-apiserver
0a582431593 node: device-plugin: e2e: Add test case for kubelet restart
09100804722 node: device-plugin: e2e: Provide sleep intervals via constants
4a0f7c791fe node: device-plugin: e2e: Update test description to make it explicit
fd459beeff6 node: device-plugin: e2e: Isolate test to pod restart scenario
5ab4ba62052 node: device-plugin: e2e: Annotate device check with error message
5c4f397361f node: device-plugins: e2e: s/devLen/expectedSampleDevsAmount
0aa6a5726a6 node: device-plugins: e2e: Refactor parse log to return string and error
8ed861889aa feat(NodeVolumeLimits): return Skip in PreFilter
28519e240ed Fix scheduler performance regression after adding plugin metrics
c96188a38b5 remove seccomp profile path
96eaed9980d cluster/gce: update cloud-controller-manager to use go-runner
0d27d3cfffc cluster/gce: update cloud-provider-gcp image to latest tagged version
4cdfe600e04 Fix image pull error type `ErrRegistryUnavailable`
6da128bdb3e dependencies: go.uber.org/atomic v1.10.0
87230578802 dependencies: update go.uber.org/multierr v1.11.0
f7ce6f834a1 Chore: add ipfamilies tweak functions
78b8af9fed3 scheduler_perf: update throughputCollector
a325fdbbe5d update Deps gopkg.in/natefinch/lumberjack.v2 v2.0.0 to v2.2.1
da3e7e37816 stop watcher when error occurs
018564b8cfc change the seccompProfile field description to match the imlpementation
6d8a0100f70 Fix typo in kubectl api-resources help text for --categories flag
3c45b61b643 [KCCM]: have providerID trigger re-sync, but not be required for nodes
a4f98e4c1e8 Update staging/src/k8s.io/apiserver/pkg/cel/common/values.go
e115d5234c2 Fix bug where CEL listOfString.join() results in unexpected error
3229deda37b register missing metrics
24e68b3c6ac use client-go metrics not only rest_client
2bd42061b6e Remove support for EndpointsLeases and ConfigMapsLeases lock from leader election
3f247e59edf Refactor cacher.ListerWatcher code structure
892ebf2d253 Ensure version "*" is passed instead of "" for all authz checks (#116937)
73d9a9cfa06 kubelet/kuberuntime: Fix flaky test 'TestGeneratePodSandboxConfig'
e3d84aa93cd kubeadm: add the experimental (alpha) feature gate UpgradeAddonsAfterControlPlane that supports upgrade coredns and kube-proxy addons after all the control plane instances have been upgraded
78e6cb1cccb intstr: add FromInt32, deprecate FromInt
88e2c344390 Enable a bunch of generic storage tests for watchcache.
860329c04b5 drop v1.25.0 API testdata
440d5910f7d Chore: add app protocol tweak function
06993afdd6a Chore: cleanup whitespaces
3d8f7233da9 Chore: remove impossible and redunant cases
4a6bc66e40f updating microsft/go-winio package to latest version
60d25c3ed77 improve remotecommand testing fuzzing the data stream
d76f5dae67c Add a comment to roleRef to document that it is immutable
959c90c1d9a Chore: add deletion timestamp tweak function
4169d7d0283 golangci-lint: allow exceptions for Go naming convention
4f8eba2a0be Chore: add finalizers tweak function
28db34a231f Chore: add load balancer tweak function
1c465c51e80 Chore: add service port tweak function
0cc7369196b Chore: add LBIngress tweak function
23c242770fe Chore: add etp tweak function
2f6bc661dc3 Chore: rewrite newService function
f9bab9a60b0 add --concurrent-cron-job-syncs flag
bc00f5c071f Update cri-tools to v1.27.0
c3384191ea6 remove validation GCE-ism
28ac914bc54 Remove repeated info
e0d5c4aa93e Move info where its most relevant
0a508ad8067 Update `kubectl edit` documentation
d0412928961 Add v1.27.0 API testdata
7514d8b3339 add shortnames for mutatingwebhookconfigurations and validatingwebhookconfigurations
95fea2f2bff add test case for merging a patch against empty list
3469bb05db7 kubeadm: fix unit test panic for TestNewResetData
ed37e6986b6 uncomment exit trap to cleanup tmpdir
63d44fdde58 retain KUBE_GOPATH on recursive kube::golang
4d736a0435e cleanup update-mocks.sh
726992f9db9 call kube::golang::setup_env before setting up worktree
17db22d0558 Fix potential mutex usage bug
39e52449f9f remove nodes resource from CoreDNS RBAC manifest
7a14c5ad6dd ensure we can remove _output
11f3ef1ed7d drop linux/arm build warning, now that 1.27 is released, this is covered by the release notes
104c208d0fb add Authentication tracking request/error counts and latency metrics
65f3454c1d9 fix undefined convertion
8efeb5afcfd Dependencies Update google.golang.org/protobuf v1.28.1 to v1.30.0
6f90c536330 Dependencies Update golang.org/x/tools v0.7.0 to v0.8.0
5c584269a79 avoid volume copy in checkAttachableInlineVolume
2bbd07c0192 remove defunct interactive tutorial
1d15354ccb5 update gofuzz dependency
2cd23c8b17c Update go-logr dependencies
062f146d325 Replace the deprecated ioutil method in the pkg/credentialprovider directory
be6709044ad etcd: Build image 3.5.8-0
6db4cbfde7b cacher: do not popExpiredWatchers when the cacher hasn't dispatched any event
eab66a687b2 cacher avoid double locking (#117410)
a02e94ae2b4 e2e: fix flaky test 'should contain OpenAPI V3 for Aggregated APIServer'
0c54d9af6f2 Fix stomping os env in kubectl e2e tests
766f6c3ad41 Include stderr in cred provider plugin errors
eaba1703b1b enhancemanet: reduce calculation calls
a8b808ee6ca Replace the deprecated ioutil methods in the test directory
a959785f964 dependencies: udpate coredns/caddy to v1.1.1
0297329795e Refactor watch bookmark tests to allow sharing between etcd3 and watchcache
45e836a968a Generalize few watch tests from cacher
f3b9e0ddc9b Replace os.Setenv with testing.T.Setenv in tests
7cbbf47f5ea Cleanup environment in tests that call os.Unsetenv
d38ac7e7c6b Replace os.Setenv with testing.T.Setenv in tests
e8d3a4a105c Cleanup environment in tests that call os.Unsetenv
2181eea4843 Replace os.Setenv with testing.T.Setenv in tests
cf125a35611 Replace os.Setenv with testing.T.Setenv in tests
b9ef1603223 Cleanup environment in tests that call os.Unsetenv
240fccd7668 Replace os.Setenv with testing.T.Setenv in tests
89467ad3e9b Replace os.Setenv with testing.T.Setenv in tests
fc643d2e40c Replace os.Setenv with testing.T.Setenv in tests
29b6c54d158 dependencies: update github.com/cenkalti/backoff/v4 to v4.2.1
0a8343352b4 Document gomega.Equal() instead of gomega.BeEqual()
d231d6022b0 Remove endpoints (old leader election) related RBAC from kube-controller-manager ClusterRole
e340325024d Fix nil pointer in test AfterEach for volumeperf.go
453f81d1cae kubelet: pass context to VolumeManager.WaitFor*
4de0d2c6f8f use generic set in storage/validation
3ac77335303 Add `saschagrunert` to `sig-node-reviewers`
7fb88eec73c support fieldSelector spec.hostNetwork
4d73864026c Dependencies Update golang.org/x/timet 90d013bbcef8 to v0.3.0
ff9ebfa90de e2e framework: control k/k/pkg imports
ee99ca25ee6 Remove unnecessary if judgments
1359ebcc5b0 fix doc mismatch
a6339e2702f proxy/conntrack: using common conntrack cleaning function in proxiers
399f09dde05 proxy/conntrack: common function for cleaning stale conntrack entries
efb05630946 proxy/conntrack: moved pkg/util/conntrack -> pkg/proxy/conntrack
37ea51fd567 Improve the performance of map usage
9c0153aef9e KCCM: add providerID predicate to service controller
d3c103edce7 Re-work logic in shouldSyncUpdatedNode
dc4f6f9da6a e2e framework: remove last dependency to k/k/pkg/util
40521fe3601 e2e framework: remove last dependency to k/k/pkg/kubelet
030debc1990 changelog: fix formatting issue with v1.27 change log
4e8c5364bc6 CHANGELOG: Update directory for v1.27.1 release
1b93abb9bac Move kubelet config API to e2e_node
4e928c96b5e skip checks when topologyPolicyName is PolicyNone
71a989e5e9c Fix CHANGELOG-1.27 correct
06dc3d00fcc e2e/apimachinery: Add an e2e test for the API Streaming feature
8d19c0002bb Add node check to vSphere cloud provider
3b7c14e8cfb Remove unnecessary int type conversion
36e6e759182 dependencies: udpate seccomp/libseccomp-golang to v0.10.0
5bce18c98ec dependencies: update go-semver to v0.3.1
d7270f4ba72 dependencies: update go-oidc to v2.2.1
b0d89a7807e dependencies: update github.com/gofrs/uuid v4.4.0
1595d7f52d7 dependencies: update go-systemd to v22.5.0
9cfdf989eda dependencies: update gh/fvbommel/v1.1.0
6b70710b0d1 dependencies: xlab/treeprint v1.2.0
6320b6843a2 dependencies: update netns to v0.0.4
9e2bb40e158 fix typo annotation key notes.
becf73a82b1 add invaild scope test case
c4e1b01416e replace spew methods with dump methods
a96358ac0fa Remove some useless error checks
867be8fc3e2 get rid of e2e/framework -> k/k/pkg/kubelet dependency
2bb35e08f4b Clarify kubelet/kube-proxy iptables rule skew constraints
6d13cad2cf5 dependencies: update gh/Azure/auto-test/{adal,validation}
432a3016a49 Revert "Merge pull request #113151 from ncdc/refactor-crd-conversion"
9c5a66e2080 Revert "CR conversion: protect from converter input edits"
ed0124855aa add log includes pod preemption details
0979d554435 unit tests: Skip flaky tests on Windows (part 2)
2d06fad5163 dependencies: azure-sdk-for-go to v55->v68
625c3025057 change pv recycler scrub cmd to find -delete
c042837a761 truncate the precision at a millisecond for image pull event message
804d9f47c9f kube-aggregator: correctly use client-go TLS cache with custom dialer
db5d74935ee optimize evict sandbox logic
ccf7ddacfce replace ioutil with os, update doc
5668399a87c Codegen: use openapi-gen via k8s.io/code-generator
b23ab389b4f Add SIG ownership to controller/nodelifecycle
375e3cf869b CHANGELOG: Update directory for v1.24.13 release
f7295ac5e08 CHANGELOG: Update directory for v1.25.9 release
d567d61aa56 Fix a data race in TopologyCache
a62563f1305 Fix TopologyAwareHint not working when zone label is added after Node creation
83a1774df2b CHANGELOG: Update directory for v1.26.4 release
a7a8cd6e5de Codegen: subprojects: nuke existing files
bc302fa4144 Replace uses of ObjectReflectDiff with cmp.Diff
9627c50ef37 Replace uses of ObjectGoPrintDiff with cmp.Diff
29c0b73d640 Replace uses of diff.ObjectDiff with cmp.Diff
dd7af241c11 Replace diff.ObjectDiff with cmp.Equal
97bab44cae3 Replace apimachinery diff.StringDiff with cmp
4f6714ef42d apiserver/etcd: add request and request_error metrics (#117222)
d09842e0adf node-lifecycle-controller: improve monitorNodeHealth test-coverage (#116687)
be101a748dd Remove some unused winkernel arguments/fields/functions
8a790ac2e1b Remove unused ProxyServer.EventClient field
9754386c764 Remove write-only ProxyServer fields
b4c384ebfb2 vendor: bump runc to 1.1.6
c69689659a6 Add `--concurrent-job-syncs` flag to kube-controller-manager
4438208511e api: encode NamespacedName with lower case in JSON
476e407ffd2 cacher: prevent a potential deadlock
7cdffe37c1d update container storage interface spec to v1.8.0
10a8ec5b2cc use case-insensitive header keys for http probes
a6173fad88a Delete duplicate code in schedule.go
5588e8a4cd0 hack/logcheck.conf: remove certificate controller exception
277c03fc799 remove these unrelated openapi files (#117051)
9a468563070 remove reuse buf todo (#117033)
5da386745af Kubectl convert - warn users with NotRegisteredError and Fail on all other errors (#117002)
0eec63fd687 fix the mistake in the release note
02d8fc28faa fix: add the bug as a known issue o on the v1.26 release note
75f17eb38fc optimize watch-cache getlist (#116327)
9c15d75f234 Migrated `pod-security-admission` to contextual logging (#114471)
2bed67d0f1c Revert "Optimization on running prePreEnqueuePlugins before adding pods into activeQ"
73eb7c09309 Codegen: easier to read logs for subproject output
bbbb695060a Codegen: subproject: chdir to the project dir
893ec0ca453 Codegen: simpler k8s.io/code-generator/examples
af29cca6ced Codegen: new tools will not become part of 'all'
5f7345deaac Codegen subprojects: consolidate generate-*groups
95e614b3717 Codegen subprojects: deprecate "all" in scripts
a94ed5b8ac8 Codegen metrics: include v1beta2
8b68e063e14 Codegen subprojects: regen defaulters when needed
5200f4b0d36 Codegen subprojects: reify 'all' into explicit
201653aa870 Trivial change to reduce diffs
901dea73073 Fix azure disk e2e after migration
d212041d513 hack/local-up-cluster.sh: Remove old dynamic certs
ed5dd38dcdc CHANGELOG: Update directory for v1.27.0 release
464edfe6f6e test/integration: create nodes directly with kubernetes.io/hostname label
9204e6b286e remove unused constant `expansionFailed` in expansion test.
4491ba89171 rename variable delete to avoid collision to builtin variable
d04d7ffa6ec kubelet: Mark new terminal pods as non-finished in pod worker
0020631985e test: Add node e2e to restart kubelet while pod is terminating
aa73f06e569 scheduler perf: allow creating 0 items
49bbf7c2681 scheduler_perf: fix race condition
a869a898257 scheduler perf: remove cleanup func
b039a2ff2c7 Add new contribex leads to sig-contribex-approvers
9363afc6502 Fixing broken tests
d102a6fea51 HPA Controller - Update Owners
8d18ae6fc24 Use the generic Set in scheduler
b04ca79445e Add unit tests showing the effect of unlimited containers when calculating pod limits.
1dec97436c8 Fix typo at job_test.go
046bb892566 supported version of etcd 3.5.7-0 for Kubernetes v1.27.0-rc.0
f138d29bf2d watchcache: currentCapacity acquires read lock
c77ad3116f4 kubelet: fix setup of emptyDir with sizeLimit (fsquota)
ea74a2d877d cpumanager: fix typo in godoc
1cce3b3e2f5 wait: fix incorrect suggested method
d3ae6c2df3c Specify KUBE_ROOT for test-e2e-node/AWS to work
d9bd22115ff Alias deprecated genericclioptions.IOStreams with new one
26b35ce36ae Remove endpoint related RBAC from scheduler cluster role
7fa3d54ea5b unittests: Fixes server journal unit test on Windows
08a324bf512 cluster/addons: set metrics-resolution to 15s
eba18d503cc cluster/addons: bump metrics-server to v0.6.3
88e055059cd component-base: avoid data race in log format registry
a2fb32870f3 test/integration/auth: fix data race
1dde8ef026e test/integration/framework: avoid race around grpclog.SetLoggerV2
f91518b81a5 Add genericiooptions in allowed list of genericclioptions
b4e4db336f6 More migrations from genericclioptions to genericiooptions
5e1c6cd0d4f pkg/registry/flowcontrol: avoid race condition during Create
934516791c6 Swap assert.Equal parameters oders to follow convention
2d06601b81c RBD: e2e containers base image has been udpated to F38
0518dffd259 iscsi: e2e containers base image has been udpated to F38
8d9386fc402 Remove genericclioptions.IOStreams struct
c3497b30aca More migrations from genericclioptions to genericiooptions
00c30941260 Migrate genericclioptions.IOStreams usage to genericiooptions
51a7751a496 Move genericclioptions.IOStreams into genericiooptions.IOStreams
e450ed98122 CVE-2023-27561: Bump runc go module v1.1.4 -> v1.1.5
3d3686b9cf0 Return error for localhost seccomp type with no localhost profile defined
e1bcfd47da9 Sort unmounted volumes message in volume manager
79b3126f00a skip clear quota if FSQuotaMonitoring is disabled
0a37f09c32b Fix directory mismatch for `volume.SetVolumeOwnership()`
731068288e1 correct storage class selection message
cc8cd88a94d remove duplicate validation for csi
978da1e8f13 remove GA feature-gates
bda73bd1129 Refactor remote runners
e389d140ae6 fix as suggested
457bb58ebbf kubectl events: Support fully qualified names for --for flag
1893f639d03 test: Fix flake in node e2e mirror pod tests
ffcf3ee6f87 feature(pkg/api): warning for Pod with null labelSelector in PodAffinity and TopologySpread
70369bfe299 remove GAed KubeletCredentialProviders
5662566e03a Set GOMAXPROCS explicitly
56755b8ffdb fix doc mismatch
8e36e948ce6 verifyVolumeNoStatusUpdateNeeded may cause flake and so only keep the last ones
dac85fe2d3f [KMSv2] cleanup comments in v2 proto api
feba08a6947 Create local copy to avoid potential race condition
29503fd8d45 openapi: Make file client more easy to re-use
ed48dcd2d71 kubelet: Ensure pods that have not started track a pendingUpdate
db92cc13880 ftr(etcd): add benchmarks
05f4e497f1d Deflake TestGetListNonRecursive
906f0607efc Clean up kms test
d3f6cb717f7 update conformance yaml
7bfcfc4d5de docs: fix storage e2e test README
f7765eb0d42 Add damemi to emeritus SIG scheduling approvers
bbbd366cf39 Move damemi to sig-scheduling reviewers
397cc73dc9b delete unused functions in pkg/controller directory
47f8d42a6ba Add CecileRobertMichon to sig-cluster-lifecycle-leads
449f847630e [KMSv2] update ci script and add readme
86e1f4b9d10 e2e node: bump all nodes ready timeout
beb329f4bfa Do not look at VPC-related resources outside the cluster's network
8d92cfb1316 Added conversions to/from NamespacedName
df0a2538205 generate ReportingInstance and ReportingController in Event
e9b384f5a75 fix typo
f638e2849fb replaced spew.Sprintf with a util pretty print function
838ed7feb53 Improve the performance of map usage
f6fa250e304 Add API approvers
03be789851d Fix sample-controller docs after moving to context-based cancellation
99ad88a2611 Remove unnecessary int type conversion
f2fe1fff655 [KMSv2] add tests for generate transformer
479fcf0b13f kmsv2: validate encrypt response at DEK generation time
8d644fbc725 return skip in volumerestrictions
ade63dd7647 cronjob: add ut for namespace terminating cause no extra log
9a776cbf212 kubelet pod-resources: e2e node test add failure description ExpectNoError
1031977b7d8 kubelet PodResources API: follow-up review comments
ec9515a828e Add structured alternatives to strings in client-go/tools/cache
2b01f63b115 move check for noop managed field timestamp updates
07ebb22db92 added known issue for 1.27 release
80480f8e215 combine conditional checks
7a6d58001b7 handle event errors caused due to terminating namespaces
af95a76bb21 cri-api: fix comment lines about PROPAGATION_PRIVATE
daa1d287e4d fix GetPodVolumeClaims in comments
c14068c2023 deflake: Add retry with timeout to wait for final conditions
fbf33e32e61 Fix memory leak in kubelet volume_manager populator processedPods
27f84b755e1 Migrated the volumezone scheduler plugin to use contextual logging
ddc13e983b5 Chore: add selector labels tweak function
4cab11f26f0 Chore: add persistent volume claim retention policy tweak function
ba9dfe686fd Chore: add persistent volume claim template tweak function
f97d3cf7486 Chore: add rolling update max unavailable type tweak function
1b17b4fa799 Chore: add rolling update partition type tweak function
f3ffeae426f Chore: add update strategy type tweak function
5e0161b3de8 Chore: add labels tweak function
ec34891782c Chore: add annotation tweak function
b907d5af49f Chore: add finalizers tweak function
18ba7c0e433 Chore: add ordinal start tweak function
3eb34d8b6ce Chore: add min ready seconds tweak function
2161d095fa1 Chore: add template restart policy tweak function
4418a9f5906 Chore: add replicas tweak function
7fc08e0ce70 Chore: add pod management policy tweak function
77c7d6efcf6 Chore: add basic make function for stateful set
4a667a1026c fix: remove case sensitive checking of probe headers
81a0ea3da3c return name when error occurred in csi-translation
a2cf4e73459 use describe node to print node events as well
e5674903178 fix: remove last ip when apiserver was shut down
f59ac6e6524 [WinProxy] Adding additional validations to queried endpoint list iteration.
db5590a194b Remove sig-network-driver-approvers alias
fc8892d26d7 Add more labels (esp. area/kube-proxy) to sig-network OWNERS
2f3800e1007 Make pkg/util/iptables and pkg/util/ipvs owned by sig-network
10b36075df6 Cleanup: use Set instead of map in endpointSlice utils
eb60dce33b0 deprecate ExperimentalHostUserNamespaceDefaulting
94f2d351644 Wire bootstrap token authn secret lister only when it is enabled
d71aea434e5 docs(readme): add go report and latest release badges
a780544f58c add log for kubemark start
d25572c3892 kubelet: HandlePodCleanups takes an extra sync to restart pods
41ed0e12341 Add an image for kubectl
1c7155e7ff6 Move hollow_proxy.go from pkg/kubemark to pkg/proxy/kubemark
8d3a498c879 don't ignore UID impersonation in webhook clients
364b66ddd65 admission ApplyTo: take in clients
630af564be3 Update cri-tools to v1.26.1
1aeec10efb7 DRA: get rid of unneeded loops over pod containers
017bb93887f certificate controller: use contextual logging
c94a9a14d8d update gofmt
8cbe9fe543e trigger update event when service ipFamilies changes.
b430464df06 gce: podresources: don't disable on windows
6b4ffdb9f75 node: re-implement Localendpoint on windows
195fc2f5162 kubelet: podresources: rename variable
d6d19a290de Simplify statefulset fuzzer
376bda41c74 undeprecate kubelet --provider-id flag
8bb328680c0 upgrade cluster-autoscaler v1.26.1 to fix ci warnings
c94bcabd7e2 [fix][typing] startResourceClaimController errrorf message has typos
31e1df9ae6c Bump Konnectivity to 0.1.2
aadb87bdcdb kubelet: Do not mutate pods in the pod manager
13192176002 Remove vestigal err check from CEL admission controller.
a6ffbb41f8e Squashed commit of the following:
bbf2b968c89 skip pod resource check when request is zero
64ecb161d47 Codegen: git grep returns non-zero if no match
241d46d1dd5 Codegen: deepcopy needs to run before swagger
3405853e6d0 Codegen: clean up stray ls-files use
3dd0c416639 support short name for flowschema and prioritylevelconfiguration
e2b10505162 add some buff for pod initial restart count that is not zero
efee9b4866d cleanup: promote ProbeTerminationGracePeriod to conformance tests
b0eeeacfc0c fix: the volume is not detached after the pod and PVC objects are deleted
4d3f92d5f75 Update toplogy keyset initialization
a890724f9ef cronjob: return immediately when failed to create job for the namespace is terminating
37aff025ff8 cleanup: remove Clear for fake job controller
b7cdbca2374 Add more tests that should exist but don't for some reason
67d7f09eb82 hack/OWNERS: add pohly as reviewer and approver
5dca1be0160 Add tests
bab2c18c246 Add jsonpath support for explain
77692f1b1c5 fix linting
fabf1cba947 Add warning about TLS 1.3 cipher suites
6ad156d80ee Cleanup: modify some sentences about statefulset
13354d3da4d Add note about TLS 1.3 cipher suites
c50c19d13af remove unused not api functions in the pkg/apis directory
b1e3326eaee Fix gorestful typos in the APIServerHandler.Director docstring
a3b44b574fb cluster/gce: Fetch image from image family
26f0325734c fix typo in volume util
0311a4e8e6d Fixed typo
9b9f22f06b5 Fix unknown field error in deployment lifecycle e2e
6f19e8656f5 Apply suggestions from code review
1134134e727 kubelet/cm/containermap: Improving test coverage
87f094c5e88 Replaces path.Operation with filepath.Operation (part 2)
5111bced373 fix test cases that may be incorrect
9a3c4aa2dc9 initial e2e tests for ValidatingAdmissionPolicy
bd778449f4d versioning of CRI API
34d980e7709 i18n: Fix bug where package-level variables are not translated.
ad2d23eb9ff Add test for cmd/kubeadm/app/phases/upgrade/compute.go
fd4adba9acd add sig/storage label for pkg/controller/volume package PR
2557b35202f controller: add non-exist node test case
95fe0a158c2 Fix strategic merge patch $deleteFromPrimitiveList bug
76c8765bda5 ensure etc-host file permission is 644 whatever umask is
73883c71574 Remove default annotations from copied storage class
f16f9100e57 cleanup: delete unused AuditDynamicOptions in apiserver
583ea17efd6 Add parameter to set SecurityContext for containers in tests
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
2c49b125b5 |
docker-distribution: update to 2.8.3
Bumping distribution to version v2.8.3-2-gd607c6cc, which comprises the following commits:
6b9f48f3 docs: remove blank line
a4fa6992 Add v2.8.3 release notes
5e6b1b5c Do not close HTTP request body in HTTP handler
29b00e8b digestset: deprecate package in favor of go-digest/digestset
d1ab2430 [release/2.8] vendor: github.com/opencontainers/go-digest v1.0.0
3dda0677 deprecate reference package, migrate to github.com/distribution/reference
3c6f7788 update to go1.20.8
31f5cd48 Handle rand deprecations in go 1.20
29b8ba0b Update to go 1.20
3316b198 Update to golang 1.19.10
444d053e update golangci-lint to v1.52
b800af44 ignore SA1019: ac.(*accessController).rootCerts.Subjects has been deprecated
0a98a00d Ignore SA1019: SplitHostname is deprecated.
2ec0471b Dont parse errors as JSON unless Content-Type is set to JSON
cb121c3f Set Content-Type header in registry client ReadFrom
b57133cc referene: fix formatting of "deprecated" comment.
2c4bf1a6 replace deprecated function
110cb753 Enable build tags in 2.8
2d62a402 s3: add interface assertion
2548973b Enable Go build tags
ab7178cc Pass BUILDTAGS argument to go build
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
9e8a6af947 |
moby: update to v24.0.6-tip
Bumping moby to version v24.0.6-36-gf9b8a35ac4, which comprises the following commits:
58c1c7b8dc Limit OOMScoreAdj when running in UserNS ("Rootful-in-Rootless")
f87492689e update to go1.20.10
3715eaf078 update to go1.20.9
31f49bd685 Make one-shot stats faster
37796c7029 Revert "daemon/logger/etwlogs: rewrite to use go-winio/pkg/etw"
51dc5fb58f integration/internal/swarm: rename max/min as it collides with go1.21 builtin
4e11c149d1 pkg/tailfile: rename max/min as it collides with go1.21 builtin
0b97ecddb0 pkg/plugins: rename max/min as it collides with go1.21 builtin
710c748801 pkg/sysinfo: rename max/min as it collides with go1.21 builtin
b340a777c0 pkg/archive: rename max/min as it collides with go1.21 builtin
e996dffe56 daemon: rename max/min as it collides with go1.21 builtin
334719141c api/types/versions: rename max/min as it collides with go1.21 builtin
0702941de6 restartmanager: rename max/min as it collides with go1.21 builtin
bed0c789dd daemon/cluster: format code with gofumpt
30fe6540a5 libcontainerd/windows: Don't reap on failure
1320e79bd8 libcontainer/windows: Remove unneeded var declaration
a1ba69a82b libcontainer/windows: Fix process not being killed after stdio attach failure
1f3ea9841e update containerd binary to v1.7.6
58224457c3 ipam: Replace ChildSubnet with parent Subnet when its mask is bigger
df983b7990 daemon: fix under what conditions container's mac-address is applied
f014c349a0 update to go1.20.8
e2ab5f72eb 24.0: Update buildkit to fix source policy order
8216da20af more robust dockerd-rootless-setuptools.sh
c35376c455 volume/local: Don't unmount, restore mounted status
5d4cc0b5b5 integration/liveRestore: Check volume content
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
c431b46959 |
crun: update to v1.9.2
Bumping crun to version 1.9.2-12-g8af8ee2, which comprises the following commits:
bdb95d6 features: export intelRDT status
e2f9853 update: support update of Intel RDT
05bc600 libcrun: support update of Intel RDT
41ae2a2 libcrun: plug Intel RDT support
52d5faa libcrun: add Intel RDT support functions
a7a1af9 container: fix early return
122f8ae linux: open mounts before setgroups if in a userns
64105d9 Use overlay and single nix derivation
35274d3 NEWS: tag 1.9.2
8f6b76f tests, podman: enable more tests
255268d Reset the inherited cpu affinity after moving to cgroup
745b6d9 tests, podman: run tests on overlay
f42e279 tests, podman: get more information on the environment
379b17c tests, podman: avoid deprecated options
bd251c9 rpm: do not special case krun man
fe4e15d build: install krun.1 only if krun is enabled
0cabf0c rpm: fix manpage installation
67ee730 Packit: notify @containers/packit-build team on failed tasks
1f2769e linux: fix fallback mechanism in a userns
a0b7e18 NEWS: tag 1.9.1
bb4e975 utils: partially rewrite improve error message patch
14afa8a utils: fix ignore ENOTSUP when chmod a symlink
0acb237 oci-validation,test: lock tap to @16.3.8
bbb1c87 tests: install device-mapper-devel
75dd83c podman, test: disable more tests failing in the CI
98db1d2 utils: improve error message for ensure_dir
57262a2 utils: ignore ENOTSUP when chmod a symlink
523eed3 linux: add new fallback when mount fails with EBUSY
2239c50 linux: teach MS_MOVE to do_mount
c9a1a12 Add man page for krun
8645d1a Fix CentOS 7 Build by Checking if FSOPEN_CLOEXEC exists
a538ac4 NEWS: tag 1.9
1e2f0c4 fix: correctly handle unknow signal string
41fa779 crun delete: call systemd's reset-failed
76b80ae fix random errors
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
8933a2cf4c |
cri-tools: update to v1.28.0-tip
Bumping cri-tools to version v1.26.0-353-gf8733ddf, which comprises the following commits:
f570bc09 Bump golang.org/x/net from 0.16.0 to 0.17.0
75c136c8 Validate sandbox and container metadata
4f3475f5 Bump github.com/onsi/ginkgo/v2 from 2.12.1 to 2.13.0
93bc1bf2 Bump golang.org/x/net from 0.15.0 to 0.16.0
57d7848c Switch to `github.com/distribution/reference`
f61309ae Bump github.com/docker/distribution
6a1c7883 Bump github.com/onsi/gomega from 1.27.10 to 1.28.0
024268e7 Bump github.com/onsi/ginkgo/v2 from 2.12.0 to 2.12.1
04fb3af1 Verify required checkpoint parameters are set
544d4792 Remove duplicated import "k8s.io/cri-api/pkg/apis"
dbd6c086 Enable staticcheck linter with SA1019 to find deprecated methods
06bb4c99 Use executor.StreamWithContext instead of deprecated executor.Stream
092eddc1 Address deprecation of Strings.Title
9059543c Remove unnecessary rand.Seed
52fcfd43 Address deprecated io/ioutils
833ab93c Address deprecated call cli.NewExitError of urfave/cli package
3e036cfa Bump github.com/onsi/ginkgo/v2 from 2.11.0 to 2.12.0
b84b1817 Bump actions/checkout from 3 to 4
4b5c3fe1 Update version compatibility between Kubernetes and cri-tools
7458ab35 Bump golang.org/x/net from 0.14.0 to 0.15.0
aa049113 Bump github.com/docker/docker
71beb1da Fix containerd tests
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
82d2ac74cb |
cri-o: update to 1.29.0
Bumping cri-o to version v1.27.0-662-gf8ccf314a, which comprises the following commits:
3b7ab35ff build(deps): bump crate-ci/typos from 1.16.17 to 1.16.18
f7d3228a7 Avoid an unnecessary c/storage lookup in ListImages
96e6aa9b5 Inline getImageCacheItem into ListImages
e4f2b888d Split imageIsBeingPulled from ListImages
c7188518d Simplify ListImages more
1cfe3c8bb Simplify appendCachedResult
ae597ba16 Remove the "filter" parameter to ListImages
e0750462f Turn ListImages(filter) into ImageStatus
50ce23e89 Simplify storageImageStatus a bit
2cb166512 Simplify ImageStatus a bit
1b0e82a22 Split storageImageStatus from ImageStatus
ad8be44cc Simplify error handling in ImageStatus
203612b23 Move the ImageResult -> ImageStatusResponse conversion out of the loop
97329e4fa build(deps): bump ossf/scorecard-action from 2.2.0 to 2.3.0
013a0998c Update release-notes to v0.16.1
dc44bac35 Fix quoting issue in usage help text
f22040da2 crio: add support for --imagestore
1d0e5d074 build(deps): bump crate-ci/typos from 1.16.15 to 1.16.17
bb4ab8110 Run GitHub actions in `update-nixpkgs-*` branches
45a6e70e7 Update nixpkgs
8ec74c5fa contrib/test: pin the latest release of runc
2505851e0 Update crun to 1.9.2
f3e53a058 test: Add test for image pinning behavior
12cabc651 internal/storage: compute Pinned field from recently loaded image
0fd641c6d build(deps): bump crate-ci/typos from 1.16.14 to 1.16.15
347194d3f build(deps): bump crate-ci/typos from 1.16.13 to 1.16.14
f532cbd89 Add nixpkgs update cron
8fa9260fc build(deps): bump crate-ci/typos from 1.16.12 to 1.16.13
72280f09c Update install.md removed spaces (markdown lint error)
fe9ed4e3a storage: add support to split filesystem using imagestore
544db3209 RFC: Use RuntimeContainerMetadata for passing container data
c9309ebb6 Add a layer name in one step
4f5a2e95c Microoptimize reference creation
3a77cc956 Eliminate the now unused imageAuthFile and isPauseImage parameters
61d86923c Simplify createContainerOrPodSandbox again
a936e6861 Simplify CreatePodSandbox
39095cbb4 CHANGE: Simplify CreateContainer image lookup
a09320639 Eliminate the clearly dead part of the just copy&pasted code
a7f841955 Blindly copy the image handling code from createContainerOrPodSandbox into callers
6cabaaee1 Remove an imageID parameter to CreatePodSandbox
2b4652c52 Fix/Add error handling
8e1e1e672 update containers storage to 1.50.2
5d8538318 build(deps): bump DavidAnson/markdownlint-cli2-action from 12 to 13
6c1574efc Fix nix `dirty` build
d951faa32 Make the release branch fast forward a cronjob
5dee42bcf build(deps): bump crate-ci/typos from 1.16.11 to 1.16.12
91b83b10c Fix release notes job
096f803a3 Bump golang dependencies
7d86c2e25 docs: fix CI failure
f182fb411 Bump version to 1.29.0
51bae7a96 Remove the IsFullIdentifier check from Server.pullImage again
7eb248b1a Don't silently modify the caller's SystemContext
2d72e13e6 Fix a VERY misleading comment.
472d2c5f9 Remove an unnecessary check
23d7c35d5 Remove an unnecessary parse call
6f9a7173f Remove an unnecessary check
8c3e301da Optimize handling of full image IDs
5f45d232a Remove the ErrCannotParseImageID special case
335d4b0f3 Fix a VERY misleading comment
b489507c9 Remove a completely unused ErrImageMultiplyTagged
98f171147 Make Server.pullImage responsible for rejecting image IDs
e292f17c0 docs: Update the containers/image branch name
6005b03f2 contrib/test/ci: remove the redundant golang setup file
059a7b5f8 Add conmon-rs binary to bundle
4ac3aeef2 internal/storage: address unpredictable behavior of image names
61a0b7c79 config/server: add functions to check IDMap support in runtime
9ce778351 Remove golang-go from debian installation
3d450274e Pause container during checkpointing
e069cc827 contrib/test: fix golang version extraction for CI
0774b644d build(deps): bump actions/checkout from 3 to 4
d6f4c7100 Adopters.md: fix linting issue
d805d28fd Add new adopter
940de5009 build(deps): bump crate-ci/typos from 1.16.10 to 1.16.11
ac9c6fbfe Don't vendor main Kubernetes repo any more
4a1e406b0 Mention Roadmap GitHub Project in README.md
bacc5e638 build(deps): bump crate-ci/typos from 1.16.9 to 1.16.10
9cbd8d555 build(deps): bump cachix/install-nix-action from 22 to 23
798a8d701 build(deps): bump actions/checkout from 3 to 4
758e3d8c3 cgmgr: reorder setting of sched_load_balance for pod cgroup
0e6b13e08 build(deps): bump crate-ci/typos from 1.16.8 to 1.16.9
ff434ba27 build(deps): bump github.com/containers/podman/v4 from 4.6.1 to 4.6.2
0002792fa build(deps): bump DavidAnson/markdownlint-cli2-action from 11 to 12
3aa18aff3 Switch to go 1.21
5b9f7f96d Add dependabot group for OTEL deps
d7ad3fcbf build(deps): bump github.com/containers/buildah from 1.31.2 to 1.31.3
85c3d9db1 Bump conmon and crun dependencies
5ab387fe5 build(deps): bump github.com/containers/common from 0.55.3 to 0.55.4
a4f2d8071 server: remove deprecated functionality
28ae1f81a Fix bundle e2e tests
a9afa0442 Add ppc64le binaries to release notes
c8f8ca498 Add Kubernetes package test for static binary bundle
734e1538c build(deps): bump github.com/google/uuid from 1.3.0 to 1.3.1
873c0f420 Policy: Allow backport of independent features
bebd421b5 Configure systemd install path based on OS
ec4bbac12 feat(cmdrunner): add support for context
59f9b823d move shmSetup in server/sandbox to internal/factory/sandbox
d1946b30a blockio: add blockio_reload option
ce1cdfa54 main: create parent crio dir before creating clean.shutdown.supported
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
022ec69e9b |
containerd: update to 1.7.7
Bumping containerd to version v1.7.7-5-g5e21abb18, which comprises the following commits:
d0a1fedb5 *: add runc-fp as runc wrapper to inject failpoint
04491240a containerd-shim-runc-v2: avoid potential deadlock in create handler
6982a0df5 containerd-shim-runc-v2: remove unnecessary `s.getContainer()`
0e2320398 Uncopypaste parsing of OCI Bundle spec file
a34fa5681 Prepare release notes for v1.7.7
6ca0aebf0 Allow for images with artifacts to pull
7df492a95 remotes/docker: Fix MountedFrom prefixed with target repository
7779ce64e remotes: always try to establish tls connection when tls configured
b3db314a5 Bump x/net to 0.13
a83c66813 Require plugins to succeed after registering readiness
171d76849 cri: call RegisterReadiness after NewCRIService
6013b5e03 cri: stop recommending disable_cgroup
3d27bc738 Handle unexpected shim kill events
4ffa3ed29 Build binaries with 1.21.1
5756f6064 [release/1.7] vendor: github.com/Microsoft/hcsshim v0.11.1
09633b539 deprecate logs package, but disable linter (for transitioning)
cb201519f alias log package to github.com/containerd/log v0.1.0
a5024e6dd vendor: github.com/stretchr/testify v1.8.4
7bd976af3 vendor: github.com/sirupsen/logrus v1.9.3
3ca015e55 nri: update mock plugin handlers
4cd208c1f vendor: update github.com/containerd/nri@v0.4.0
8cd2d33c2 [release/1.7] remotes/docker: Add MountedFrom and Exists push status
3e09c65b2 Prepare release notes for v1.7.6
5ebf05d97 push: inherit distribution sources from parent
d206896dd content: add InfoProvider interface
423693d7b [release/1.7] update to go1.20.8
c7a35ccdc Fix transfer service dependencies:
38d4e506d Invoke Stable ABI compatibility function in windows platform matcher
ddffc7c9a Update hcsshim tag to v0.11.0
b449440a4 CRI: Support Linux usernames for !linux platforms
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Mingli Yu
|
5cec30aae4 |
umoci: Remove the buildpath issue
Pass -trimpath to the build to fix the below build path issue: WARNING: umoci-v0.4.7+git-r0 do_package_qa: QA Issue: File /usr/sbin/umoci in package umoci contains reference to TMPDIR [buildpaths] Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Bruce Ashfield
|
01da1f2a29 |
buildah: update to 1.32.0
The new version has an internally stripped binary, so we inhibit the
QA warning.
Bumping buildah to version v1.31.0-159-g4f3d7b0b6, which comprises the following commits:
5151ccff5 .cirrus.yml: run tests relative to the release-1.32 branch
2326d4929 Tag v1.32.0
e90b3502b GetTmpDir is not using ImageCopyTmpdir correctly
ccac7ca0b Run codespell on code
6be719454 Bump vendor containers/(common, storage, image)
9545744e8 Cirrus: Remove multi-arch buildah image builds
206cda149 fix(deps): update module github.com/containerd/containerd to v1.7.6
0191bc671 Split GetTempDir from internal/util
6e6827b27 Move most of internal/parse to internal/volumes
292b429f6 copier: remove libimage dependency via util package
4f3abf936 Add some docs for `build --cw`, `commit --cw`, and `mkcw`
e89fac6c9 Add `buildah mkcw`, add `--cw` to `buildah commit` and `buildah build`
cc619c28d Make sure that pathnames picked up from the environment are absolute
4ee5f020a fix(deps): update module github.com/cyphar/filepath-securejoin to v0.2.4
fd72bbee2 fix(deps): update module github.com/docker/docker to v24.0.6+incompatible
754568580 Don't try to look up names when committing images
d5b02e551 fix(deps): update module golang.org/x/crypto to v0.13.0
3fc5274d3 docs: use valid github repo
f94689199 fix(deps): update module golang.org/x/sys to v0.12.0
6ec6f046f vendor containers/common@12405381ff
df1bc3834 push: --force-compression should be true with --compression-format
9c5cde533 Update module github.com/containerd/containerd to v1.7.5
3ebeaa2dd [skip-ci] Update tim-actions/commit-message-checker-with-regex action to v0.3.2
cc9f15f09 docs: add reference to oci-hooks
3454d5b29 Support passing of ULimits as -1 to mean max
f330c77be GHA: Attempt to fix discussion_lock workflow
4942cc908 Fixing the owner of the storage.conf.
f4e43f0e8 pkg/chrootuser: Ignore comments when parsing /etc/group on FreeBSD
2b57cef2b Use buildah repo rather then podman repo
a8bbc9f5f GHA: Closed issue/PR comment-lock test
82069390f fix(deps): update module github.com/containers/storage to v1.49.0
4c4ff3128 chore(deps): update dependency containers/automation_images to v20230816
af3891258 Replace troff code with markdown in buildah-{copy,add}.1.md
e997a966f [CI:BUILD] rpm: spdx compatible license field
a3f2aa3c7 executor: build-arg warnings must honor global args
f6fb75d9d fix(deps): update module github.com/containers/ocicrypt to v1.1.8
5643a7fa8 chroot: `setSeccomp` add support for `ArchPARISC(64)` and `ArchRISCV64`
8428dee36 make,cross: restore loong64
e3cd4d790 Clear CommonBuildOpts when loading Builder status
d68d9a237 buildah/push/manifest-push: add support for --force-compression
3445a775a vendor: bump c/common to v0.55.1-0.20230811093040-524b4d5c12f9
2d6e43071 chore(deps): update dependency containers/automation_images to v20230809
065b95599 [CI:BUILD] RPM: fix buildtags
3964ca9d6 fix(deps): update module github.com/opencontainers/runc to v1.1.9
591b5390d chore(deps): update dependency ubuntu to v22
204c5a1ce chore(deps): update dependency containers/automation_images to v20230807
9ab3b526d [CI:BUILD] Packit: add fedora-eln targets
ed2a501c9 [CI:BUILD] RPM: build docs with vendored go-md2man
5bdb8c70d packit: Build PRs into default packit COPRs
fc7329d7c Update install.md
f6c4ead1b Update install.md changes current Debian stable version name
2254ca208 fix(deps): update module golang.org/x/term to v0.11.0
248f5a2b3 fix(deps): update module golang.org/x/crypto to v0.12.0
ae36f6542 tests: fix layer-label tests
f888b3d84 buildah: add --layer-label for setting labels on layers
239b2a877 Cirrus: container/rootless env. var. passthrough
65c1c9327 Cirrus: Remove duplicate env. var. definitions
978be7796 fix(deps): update github.com/containers/storage digest to c3da76f
62d405771 Add a missing .Close() call on an ImageSource
e588986fa Create only a reference when that's all we need
fe947ed9c Add a missing .Close() call on an ImageDestination
597d30880 CI:BUILD] RPM: define gobuild macro for rhel/centos stream
b9ac8d5e0 manifest/push: add support for --add-compression
d27a82356 manifest/inspect: add support for tls-verify and authfile
071f851da vendor: bump c/common to v0.55.1-0.20230727095721-647ed1d4d79a
512273587 vendor: bump c/image to v5.26.1-0.20230726142307-8c387a14f4ac
3d8616537 fix(deps): update module github.com/containerd/containerd to v1.7.3
c20d0164f fix(deps): update module github.com/onsi/gomega to v1.27.10
2e7dcc143 fix(deps): update module github.com/docker/docker to v24.0.5+incompatible
6a236937a fix(deps): update module github.com/containers/image/v5 to v5.26.1
d78f6c2a2 fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0
dbc71b7cc Update vendor of containers/(storage,image,common)
331fac670 fix(deps): update module github.com/opencontainers/runc to v1.1.8
9cc5d5e8c [CI:BUILD] Packit: remove pre-sync action
09a1cd698 fix(deps): update module github.com/containers/common to v0.55.2
11cec8523 [CI:BUILD] Packit: downstream task script needs GOPATH
70cb4c7e0 Vendor in containers/(common, image, storage)
173ac7dc9 fix(deps): update module golang.org/x/term to v0.10.0
8b84d9b8a [CI:BUILD] Packit: fix pre-sync action for downstream tasks
97b84029a contrib/buildahimage: set config correctly for rootless build user
cba7b9fae fix(deps): update module github.com/opencontainers/image-spec to v1.1.0-rc4
e00845797 Bump to v1.32.0-dev
f704a67a1 Update debian install instructions
4c72c25a2 pkg/overlay: add limited support for FreeBSD
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Patrick Wicki
|
7e17ee02a3 |
catatonit: update to version 0.2.0
Main change is the relicense from GPL-3 to GPL-2, which will allow
catatonit (and hence podman) to be used in deployments where the license
previously posed an issue.
Contains the following commits:
7f0c9bb version: release catatonit 0.2.0
fe191ef license: switch to GPLv2-or-later
Signed-off-by: Patrick Wicki <patrick.wicki@siemens.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
51a017123d |
k3s: update to v1.28.2
Bumping k3s to v1.28.2, which comprises the following commits:
6330a5b49c Update to v1.28.2 and go v1.20.8 (#8364)
550dd0578f Bump kine to v0.10.3
b3bb7e5a11 update channel for version v1.28 (#8305)
0d23cfe038 Add RWMutex to address controller
cba9f0d142 Add new CLI flag to disable TLS SAN CN filtering
2cb7023660 Use already imported semver, bump kine
f2d0c5409a Add check for support on cp nodes
51f1a5a0ab Review comments and fixes
42c2ac95e2 CLI + Backend for Secrets Encryption v3
e45a674457 Add new encryption test
b967f92785 Replace os.Write with AtomicWrite function
ced330c66a [v1.28] CLI Removal for v1.28.0 (#8203)
62db5fa27c Update to v1.28.1 (#8239)
af50e1b096 Update to v1.28.0-k3s1 (#8199)
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Chen Qi
|
827092c2ec |
docker-compose: fix textrel QA issue
Fix textrel QA issue like below:
ERROR: QA Issue: docker-compose: ELF binary /usr/lib/docker/cli-plugins/
docker-compose has relocations in .text [textrel]
The problem could be fixed by adding -buildmode=pie, as this option has
already been in GOBUILDFLAGS except for mips and riscv32, let's make
use of GOBUILDFLAGS.
Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
77fc0a2613 |
podman: mark incompatible with mips
Some of the (current) rdepends for skopeo are not compatible with mips. To make this restriction more obvious, we also mark skopeo itself incompatible with mips. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Bruce Ashfield
|
4e602f8949 |
skopeo: mark incompatible with mips
When building skopeo for mips(64), we get the following errors: | go.go:(.text+0xdd07fc): relocation R_MIPS_26 against `a local symbol' cannot be used when making a shared object; recompile with -fPIC | go.go:(.text+0xdd0830): relocation R_MIPS_26 against `a local symbol' cannot be used when making a shared object; recompile with -fPIC | go.go:(.text+0xdd0864): relocation R_MIPS_26 against `a local symbol' cannot be used when making a shared object; recompile with -fPIC | collect2: error: ld returned 1 exit status Tag the recipe as incompatible with mips to avoid having it built at all. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Chen Qi
|
b65fe24b8c |
nerdctl: fix textrel QA issue
Fix the following QA issue: ERROR: QA Issue: nerdctl: ELF binary /usr/bin/nerdctl has relocations in .text [textrel] We want to use -buildmode=pie, in order to avoid duplicating codes with go.bbclass, make use of GOBUILDFLAGS. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Chen Qi
|
96598a7d71 |
nerdctl: upgrade to v1.5.0
Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Chen Qi
|
0e2058840e |
docker-compose: upgrade to v2.20.3
Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Chen Qi
|
03085cfb54 |
docker-compose: fix installation location for multilib
In case of multilib, the location is /usr/lib64/docker/cli-plugins, which cannot be recognized by docker. We should use nonarch_libdir instead. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Bruce Ashfield
|
86ec0fea15 |
k3s: update to v1.27.5
We refresh one patch, but otherwise, the build is unchanged. Generated via: scripts/oe-go-mod-autogen.py --repo https://github.com/rancher/k3s.git --rev v1.27.5+k3s1 Bumping k3s to version v1.27.5+k3s1, which comprises the following commits: 8d074ecb5a Add RWMutex to address controller f365a9cb98 Add new CLI flag to enable TLS SAN CN filtering 8d6483a59e Update to v1.27.5 (#8236) e31f00f863 Move flannel to 0.22.2 f8727f56d7 E2E test for token coverage (#8184) 84ded911e9 Bump helm-controller/klipper-helm versions 66bae3e326 Bump dynamiclistener for init deadlock fix e83b1ba4aa Fixed the etcd retention to delete orphaned snapshots based on the date (#8177) 561db17a31 chore: Bump Trivy version (#8178) 38a0b91c1a chore: Bump Trivy version (#8150) 7f58a1cb23 Run integration test CI in parallel (#8156) c97211866a Fix for cluster-reset backup from s3 when etcd snapshots are disabled (#8155) 9702f92345 Fix for Kubeflag Integration test (#8154) b2e71553ce Use VERSION_K8S in tests instead of grep go.mod bc332ac667 Use 'go list -m' instead of grep to look up versions 53fc3eef0a add --disable-cloud-controller and --disable-kube-proxy test (#8018) e551308db8 fix for etcd-snapshot delete with --etcd-s3 flag (#8110) 45bc26309f Remove terraform test package (#8136) fd531140e5 Bump kine to v0.10.2 ca7aeed090 Etcd snapshots retention when node name changes (#8099) 23d6842f9a Bump versions for etcd, containerd, runc, kine a0da8eded3 Bump docker/docker to master commit aa76942d0f Add FilterCN function to prevent SAN Stuffing 3515d712a7 Fix typo in terraform/README.md (#8090) a87b183f9c E2E: Support GOCOVER for more tests + fixes (#8080) 46cbbab263 Consolidate CopyFile functions (#8079) 59eec78c62 Fix tailscale bug with ip modes 468bddb59c update stable channel to v1.27.4+k3s1 (#8067) 767b64ba58 Fix coreos multiple installs (#8083) cc9dce5764 Security bump to docker/distribution (#8047) f21ae1d949 Make apiserver egress args conditional on egress-selector-mode 546dc247a0 Add support for `{{ template "base" . }}` in etc/containerd/config.toml.tmpl (#7991) 6d360e6473 Unit test for MustFindString (#8013) 946c8ea842 ADR on secrets encryption v3 (#7938) 780e638099 Update flannel to v0.22.1 e56839b329 Update cni plugins version to v1.3.0 36645e7311 fix update go version doc (#8028) d8ae6ef59b Update to v1.27.4 (#8014) be44243353 Adjust default kubeconfig file permissions (#7978) 0b18a65d4f Revert "Warn that v1.28 will deprecate reencrypt/prepare (#7848)" 58a8deb25d fix image_scan.sh script and download trivy version (#7950) 3eb4e12c3b Don't use zgrep in `check-config` if apparmor porfile is enforced (#7939) 34617390d0 Generation of certificates and keys for etcd gated if etcd is disabled. (#6998) 2eddfe6cf4 Add retry for clone step (#7862) 782a3a1cb4 Bump google.golang.org/grpc from 1.51.0 to 1.53.0 in /tests/terraform (#7879) 8405813c12 Fix rootless node password (#7887) 607320d670 Improve for K3s release Docs (#7864) b9a2bf11ee Support setting control server URL for Tailscale. 4ab01f3941 Warn that v1.28 will deprecate reencrypt/prepare (#7848) 9e334153cf add e2e s3 test (#7833) bca0adbca8 Fix code spell check 7f50b40cfe Fall back to basic/bearer auth when node identity auth is rejected ce3443ddf6 Allow k3s to customize apiServerPort on helm-controller 324f9ad4da fix e2e startup flaky test (#7839) 72d50b1f7c Add `--data-dir` to the `k3s certificate rotate-ca` cli (#7791) d593c83603 Remove file_windows.go f21a01474d Check if we are on ipv4, ipv6 or dualStack when doing tailscale 0809187cff Adding cli to custom klipper helm image (#7682) c7dec8ed24 Update stable channel to v1.27.3+k3s1 (#7827) 70691a95ee Faster K3s Binary Build Option (#7805) 2215870d5d chore: pkg imported more than once fe9604cac1 Update Kubernetes to v1.27.3 (#7790) d968e64de0 Add commands to logout from tailscale 43611bb5ad Fix the error report b66a118362 Bump helm-controller to v0.15.0 for create-namespace support a5874f855f Remove unused libvirt config c6a6e8ef57 Fix spelling check cc22c80e49 Add issue template for OS validation (#7695) efa86a63e8 Remove unnecessary daemonset addition/deletion (#7696) 7c151d468f add private registry e2e test (#7653) 869e030bdd VPN PoC 1e73bb8967 Run integration tests on E2E changes, ensures correct coverage values 8f9502233a E2E: Inject gocover ENV for k3s commands 4a68fbd8e9 E2E: Use sudo for all RunCmdOnNode 00f3e2413f chore: Bump Trivy version (#7672) dc6c569b98 Shortcircuit commands with version or help flags (#7683) 3a8e98a3b8 Bump docker go.mod (#7681) e5e1a674ce Enable containerd aufs/devmapper/zfs snapshotter plugins 5170bc5a04 Improve error response logging 45d8c1a1a2 Soft-fail on node password verification if the secret cannot be created b0188f5a13 Test Coverage Reports for E2E tests (#7526) afc88cec88 check variant before version to decide rpm target and packager fa0dc5900a Use el8 rpm for fedora 38 and 39 (#7664) 7c0a7687c6 add format command on Makefile and remove vendor 9227e0bde2 Bump vagrant libvirt with fix for plugin installs (#7605) b64a226ebd Make LB image configurable when compiling k3s a5928ee137 chore: Bump golang:alpine version 612473755d Add ADR 7b61aacb56 Fix test file list 64a5f58f1e Create new kubeconfig for supervisor use 8748813a61 Use distinct clients for supervisor, deploy, and helm controllers e9958cf070 Bump metrics-server to v0.6.3 and update tls-cipher-suites 93279d2f59 Bump klipper-lb to v0.4.4 0485a56f33 allow coredns override extensions 85e10cf9d2 update channels (#7634) 9543470eb7 Add el9 selinux rpm (#7635) d1b0254b91 Update flannel version 213d7ad499 Revert "Add el9 selinux rpm (#7443)" (#7608) d55ec08675 Add el9 selinux rpm (#7443) fe554fe703 Pin emicklei/go-restful to v3.9.0 91c5e0d75a Fix iptables rules clean during upgrade d069a85fcc Update to v1.27.2-k3s1 (#7575) 290f67c939 Add '-all' flag to apply to inactive units 2b24c9917c Bump alpine from 3.17 to 3.18 in /conformance (#7551) 266926693a Bump alpine from 3.17 to 3.18 in /package (#7550) 9bcfac8b88 Add Rotation certification Check (#7097) 4aafff0219 Wrap error stating that it is coming from netpol cbe8d33c93 Bump containerd/runc to v1.7.1-k3s1/v1.1.7 8f450bafe1 Bump helm-controller version for repo auth/ca support 06296815e6 Adding PITS and Getdeck Beiboot as adopters thanks to Schille and Miworfi for the additions (#7524) 607cbf0ad6 Bump containerd to v1.7.0 and move back into multicall binary 239021e759 Consistently use constant-time comparison of password hashes 9ec1789c21 Bump kube-router version to fix a bug when a port name is used c6dc789e25 Add support for `-cover` + integration test code coverage (#7415) 3982213f06 add kube-* server flags integration tests (#7416) b32bf49541 Bump kine to v0.10.1 c98137ddca Fix token startup test cf9ebb3259 Fail to validate server tokens that use bootstrap id/secret format 7175ebe2be E2E: Startup test cleanup + RunCommand Enhancement (#7388) bbb8ee0b2d Add dependabot label and reviewer (#7423) cedefeff24 Bump cni plugins to v1.2.0-k3s1 a736b4b1b9 local-storage: Fix permission (#7217) 437ad128c7 Migrate netutil methods into /utils/net.go e1d4cff14c Enable FindString to search dotD config files (#7323) 132b41c3bf Add v1.27 channel (#7387) d5f560360e Handle multiple arguments with StringSlice flags (#7380) a3ddff2f29 chore: Bump Trivy version e61fde93c1 Fix MemberList error handling and incorrect etcd-arg passthrough 91afb38799 Retry cluster join on "too many learners" error f1b6a3549c Fix stack log on panic c44d33d29b Fix race condition in tunnel server startup 1ca035accc Add e2e test for --disable-agent 31a6386994 Improve egress selector handling on agentless servers 5348b5e696 Improve error message when CLI wrapper Exec fails bbda54b332 Add longhorn storage test (#6445) 0247794aa9 go generate 0bbc6ad3f0 Bump traefik to v2.9.10 1ac03aad43 Add integration tests for etc-snapshot server flags and refactor /tests/integration/integration.go/K3sStartServer (#7300) ef648b7a5d Bump Runc and Containerd (#7339) 9539147ee1 Bump k3s-root for aarch64 page size fix ad41fb8c96 Create CRDs with schema bc5b42c279 Cleanup help messages (#7369) f076080b2b Bump cri-dockerd (#7347) 87f0dc5dd3 update channel server for april 2023 (#7327) 66fcca66cb ensure that klog verbosity is set to the same level as logrus by repeatedly settting it every second during k3s startup 36699bbd60 Changed command -v redirection for iptables bin check 944f811dc5 v1.27.1 CLI Deprecation (#7311) f2bde63eea Kubernetes v1.27.1 (#7271) 8d0255af07 Bump Trivy version (#7257) 779d5f3aa2 chore: Updated the content of the file "/tmp/updatecli/github/k3s-io/... (#7256) 554ad87c8d chore: Bump golang:alpine version (#7292) 257fa2c54c Update to v1.26.4-k3s1 (#7282) d9f40d4f5b Update install script to clean iptables rules before start 0c683720ad Update kube-router to insert iptables rules right after kubernetes ones 6b51ed478d Fix call for k3s-selinux versions in airgapped environments (#7264) 027cc187ce Add coreos and sle micro to selinux support (#6945) 30638072c9 Update klipper lb to v0.4.2 (#7210) 6c394abb32 Add make commands to terraform automation and fix external dbs related issue (#7159) 3e3512bdae Updated kube-route version to move the iptables ACCEPT default rule at the end of the chain d95980bba3 Lock bootstrap data with empty key to prevent conflicts 12091fc724 Bump actions/setup-go from 3 to 4 2992477c4b Debounce kubernetes service endpoint updates ece4d8e45c Fix tests to not hide failure location in dummp assert functions e54ceaa497 Fix issue with stale connections to removed LB server 5dece799df Update remotedialer to silence errors when disconnecting 4182dcaac8 [UpdateCLI] Improve Klipper Helm and Helm controller bumps (#7146) 127cea1f3f Upgrade helm-controller to v0.13.3 (#7209) d2e04b826a Don't apply hardened args to agent (#7089) d388b82d25 go generate de80c07053 Ensure that loopback is used for the advertised address when resetting b010db0cff Ensure that loopback is used for the advertised address when resetting 877247a691 Bump runc to v1.1.5 eb982bbbde Bump etcd to v3.5.7 cee3ddbc4a Bump Local Path Provisioner version (#7167) ddd9665fed Improve Trivy configuration (#7154) fdf994dc35 [UpdateCLI] Improve workflow (#7142) 37b3f4d25c Run go generate in local-path-provisioner Updatecli pipeline (#7181) 8ec7d5e6b0 fix_get_sha_url (#7187) a99376663b Drone Pipelines enhancement (#7169) fb491f5ebf Update stable channel to v1.26.3+k3s1 (#7161) d13ee64403 Enhance `k3s check-config` (#7091) 01ea3ff27b Update flannel to fix NAT issue with old iptables version c97370be6f Clean E2E VMs before testing (#7109) 7c32f88fec Pin golangci-lint version to v1.51.2 (#7113) dc4a148725 Update to v1.26.3-k3s1 (#7108) 561ec056c1 Drone: Cleanup E2E VMs on test panic (#7104) 9980504196 Fix to Rotate CA e2e test (#7101) 85b261096c Add automation for Restart command for K3s (#7002) 19ac384929 Remove Nikolai from MAINTAINERS list (#7088) 7d2f997b3e Added multiClusterCIDR E2E test 262cd7de0a Added IPv6 check and agent restart on e2e test utils 15ee88964b Added multiClusterCidr feature 822ee79eb8 Remove deprecated nodeSelector label beta.kubernetes.io/os (#6970) a912902aa7 Add missing kernel config checks (#6946) 8503d0143c skip all pipelines based on what is in the PR (#6996) 977a85559e Add support for cross-signing new certs during ca rotation 68fcb48a35 Update/rename certs.sh; add default cert rotation script b7f90f389c Wait for kubelet port to be ready before setting (#7041) a45d081027 update stable version in channel server (#7066) d218068f34 Adds a warning about editing to the containerd config.toml file (#7057) c259403af1 Bump various dependencies for CVEs (#7044) e098b99bfa Update flannel and kube-router (#7039) c78dc4db71 Add flannel adr (#6973) 522ad1e697 Add E2E to Drone (#6890) ea094d1d49 Update to v1.26.2-k3s1 (#7011) ee28c20b62 Bump kine to v0.9.9 cbe4bcfeee Add test for filterByIPFamily cc333d8d0c Fix ServiceLB dual-stack ingress IP listing 2156015521 Improve default umask for certs.sh 23d98cec22 Fix CACertPath stripping trailing path components 0c302f4341 Fix etcd member deletion 9efa0797b7 Don't default to local K3s for startup test (#6950) 7739c8b97e Update flannel to v0.21.1 b8e69712a3 Updated flannel version to v0.21.0 3d146d2f1b Allow for multiple sets of leader-elected controllers 0d416d797d Wait for server to become ready before creating token 290d7e8fd1 Fix access to hostNetwork port on NodeIP when egress-selector-mode=agent ddcc4d4034 go generate c6d0afd0cb Check for existing resources before creating them 32d62c5786 Use default address family when adding kubernetes service address to SAN list a92f163c9d Add NATS to the list of supported data stores (#6876) b43dd7746d Add CI test c900089e88 Add ADR 87f9c4ab11 Ensure that node exists when using node auth 992e64993d Add support for kubeadm token and client certificate auth 373df1c8b0 Add support for `k3s token` command 7d49202721 Ignore value conflicts when reencrypting secrets (#6850) be7f751863 Add e2e tests for CA cert rotation 8a6404f97c Add basic test for custom CA certs 9b6b72941f Clarify ADR based on design review feedback f13768c247 Add ADR 215fb157ff Add `certificate rotate-ca` to write updated CA certs to datastore 3c324335b2 Add utility functions for getting kubernetes client 58d40327b4 Fix CA cert hash for root certs 0919ec6755 Ensure cluster-signing CA files contain only a single CA cert 1ec242d816 Add example certificate generation script 7e59376bb9 Fix check for (open)SUSE version (#6791) ee007bc7cf Bump deps: trivy, sonobuoy, dapper (#6807) bb353f5d2b Fix reference to documentation (#6860) 7cad3db251 E2E: Consoldiate docker and prefer bundled tests into new startup test (#6851) 32086717fc Ensure flag type consistency (#6852) 750cff561d Bump vagrant boxes to fedora37 (#6832) 9fcc7c0db8 Fix cronjob example (#6707) 0d4caf4e24 Wait for cri-dockerd socket (#6812) 1c6fde9a52 go generate 369b81b45e Honor Service ExternalTrafficPolicy 94d1a87509 Bump wrangler version for EndpointSlice support 86e36225f5 Consolidate E2E tests and GH Actions (#6772) 808c71a63e Add Ayedo (#6801) 75f77ab951 E2E Rancher and Hardened script improvements (#6778) f0655f153e update stable channel to v1.25.6+k3s1 (#6828) 3cb6fa5cc7 Set cri-dockerd version at build time f72649d1bd Bump cri-dockerd 89f7062431 Add build tag to disable cri-dockerd f10af367c3 Update to v1.26.1-k3s1 (#6774) f19892c2d2 drone correct plugins/docker tag supporting linux/arm (#6769) 291f8bfe00 Slow dependency CI to weekly (#6764) 2007cdd54f generate report and upload test results (#6737) 7bbcac92fd Bump download action to v3 (#6746) d71ab6317e Update stable to 1.25.5+k3s2 (#6753) f54b5e4fa0 Fix CI tests 23c1040adb Bugfix: do not break cert-manager when pprof is enabled (#6635) a4549cf989 chore: Bump golang:alpine version (#6683) 8340b54309 Pass through default tls-cipher-suites cc3583399a Add explicit permissions to workflows (#6700) d85952d6a0 Bump ubuntu from 20.04 to 22.04 in /tests/e2e/scripts (#6686) 674a05478f Containerd restart testlet (#6696) d78e490716 Bump containerd to v1.6.15-k3s1 e53500f37f Bump alpine from 3.16 to 3.17 in /conformance (#6687) c7151e8b61 Bump alpine from 3.16 to 3.17 in /package (#6688) 3cafc8e6dd RIP Codespell (#6701) fd8481a29d Adjust e2e test run script and fixes (#6718) a298bfdb18 Add jitter to scheduled snapshots and retry harder on conflicts f0ec6a4c12 Exclude December r1 releases from channel server bc6bebc998 Bump containerd to v1.6.14-k3s1 454440f9a3 Add Dependabot config for security ADR (#6560) 870d9c32b0 Fix OpenRC init script error 'openrc-run.sh: source: not found' (#6614) 97f162291a Change Updatecli GH action reference branch (#6682) beafd9eaff Update stable to v1.25.5 (#6618) 8f28de259c Add initial Updatecli ADR automation (#6583) 9e97a3b4aa Current status badges (#6653) fae8817655 Bump k3s-root version to v0.12.1 0c9b43746b Preload iptable_filter/ip6table_filter f8b661d590 Update to v1.26.0-k3s1 (#6370) b5d39df929 Deprecation of `etcd-snapshot` command in v1.26 (#6575) d723775792 Remove deprecated flags in v1.26 (#6574) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Bruce Ashfield
|
7ed351dbdc |
docker: drop docker-ce recipe
docker-ce is now the same as moby. We've had a warning for quite some time now, so it is time to remove the recipe. We don't RPROVIDE docker-ce in the docker-moby recipe as part of this removal, as all docker packages have been RPROVIDING "docker" regardless of the variant. images and packagelists should be using that provider, not docker-moby and docker-ce Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Bruce Ashfield
|
103695c7b9 |
docker-moby: update to 24.0.6
Bumping moby to version v24.0.6, which comprises the following commits:
c35376c455 volume/local: Don't unmount, restore mounted status
5d4cc0b5b5 integration/liveRestore: Check volume content
1d983e2e8a update golangci-lint to v1.54.2
d2e9a19358 CONTRIBUTING.md: update links to golang docs and blog
73f6053bb3 api: swagger: update link to Go documentation
de13951b9d docs/api: update links to Go documentation
377af4c9b4 Dockerfile: Windows: update Golang download domains to cut down redirects
088cec8f0f hack: update link to GOPATH documentation
ed2f5d1d85 c8d/builder: Don't drop fields from created image
1d10e8633d daemon: Handle NotFound when deleting container lease
63422515ba c8d/run: Allow running container without image
49671250f6 c8d/commit: Don't produce an empty layer
b83f5a89f4 Don't return an error if the lease is not found
4ac2355d62 hack: use long SHA for DOCKER_GITCOMMIT
ac2a80fcc3 ci(bin-image): clean up metadata
5eef5a7f59 ci(bin-image): clean up env var handling
aaf84dd4cf remove Dockerfile.e2e
a99e62fa3d distribution: show image schema deprecation on all registries
e239799583 distribution: update warning for deprecated image formats
bb22b8a418 ci(bin-image): check repo origin
fb6784bdf0 gha: set 10-minute timeout on "report" actions
74bf46aea6 c8d/diff: Reuse mount, mount parent as read-only
b76a0c7d00 c8d/export: Use ref counted mounter
54953f2f5a integration: Add test for not breaking overlayfs
3897724f4a volume/local: Fix debug log typo
0c131f58ba ci(bin-image): populate DOCKER_GITCOMMIT, take 2
448ae33f87 ci(bin-image): populate DOCKER_GITCOMMIT
3ce0dc7e35 bakefile: Remove default value of DOCKER_GITCOMMIT
600aa7b7a5 c8d/inspect: Ignore manifest with missing config
5d2c383d72 remove s390x and ppc64ls pipelines
15bd07b4fd update runc binary to v1.1.9
cc39fb9f6b Integration test for capabilities
bf2b8a05a0 Do not drop effective&permitted set
e67f9dadc6 hack/make/.binary: use with-go-mod.sh
314b84b023 hack: enable Go modules when building dockerd and docker-proxy
72947f5022 hack: use Git-free ROOTDIR convention
7e7bc0f1bc vendor: github.com/containerd/containerd v1.6.22
5f0df8c534 vendor github.com/containerd/ttrpc v1.1.2
25b709df48 windows: fix --register-service when executed from within binary directory
b7d1e98ae7 libnet/d/bridge: Allow IPv6 ICC from any IP address
749e687e1b integration/windows: Unskip some kill tests
128838227e hack/test: Don't fail-fast before integration-cli
b7c5385b81 update to go1.20.7
4cd50eb1ed TestDaemonProxy: use new scanners to check logs
a49bca97df Fix daemon proxy test for "reload sanitized"
d6536d44e9 TestDaemonProxy: check proxy settings early
a6f8e97342 Improve test daemon logging
Bumping docker-cli to version v24.0.6, which comprises the following commits:
fab55e13c cli/command/system: fix "docker events" not supporting --format=json
d3485b9e9 cli/registry: client.iterateEndpoints: remove check for APIVersion1
613380299 cli/registry: fix client.pullManifestList not de-referencing manifest
b83959e00 force TestNewHistoryCommandSuccess to use UTC timezone
28a08a22b un-skip history test and fix golden mismatches
8e0393932 update cli-docs-tool to v0.6.0
efd052eb8 docs/reference: run.md: remove stray whitespace
d9770a962 adding -c option for docker run/build in manpages
6efe73abe cli/command/manifest: update link to Go documentation
d97753101 man: update links to Go documentation
e9f843bf0 docs/reference: update links to Go documentation
cfbaee468 CONTRIBUTING.md: update links
daeee4697 update flag-description for --cgroup-parent
08ad72160 Update docs/command output for volume pruning
3c4fe7b3e docs: add missing docs for "DOCKER_TLS" env-var
dc45bcc99 Stop slowing bash init by caching plugins path slowly
710dd00e9 replace dockerfile/dockerignore with patternmatcher/ignorefile
bf632329d vendor: github.com/moby/patternmatcher v0.6.0
3c6c0bce1 cli/registry/client: set actions when authn with token
65655cc26 cmd/docker: areFlagsSupported: don't Ping if not needed
11606268f login: Add message about using PATs
a8987063b docs: document special host-gateway value for add-host
c0e376854 update to go1.20.7
We refresh one patch to adapt to the new build script structure.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
81fb357125 |
crun: update to v1.8.7
Bumping crun to version 1.8.7-32-gf8fa497, which comprises the following commits:
76b80ae fix random errors
d602fc0 build(deps): bump actions/checkout from 3 to 4
d348000 linux: fix check for oom_score_adj
382edc9 wasmer: inherit_stdout instead of capture
5057f98 wasmer: use latest wasix API
f60a903 linux: do not join already joined namespaces
46ef792 lua: fixed luarocks package directory structure
0e506e5 linux: add support for ridmap mount option
44e51fa linux: honor rbind
f6f92b8 utils: tighten check in check_fd_under_path()
58fa192 fix typos in comments
9e66109 linux + cgroup-systemd: fix error return values
668f5d5 features: Support mountExtensions
1836bed lua: rename variable to fix spelling
2779f02 linux: support arbitrary idmapped mounts
08def0a linux: move function definition forward
53a9996 NEWS: tag 1.8.7
a867e35 lua: fix missing dereference of pointer
c90c3ca cgroup-systemd: fix error return value
b6c8708 tests: Update expected features output
7c524e7 features: Fix annotations formatting
f0054ea src/libcrun: Mark we implement up to OCI 1.1.0
59e2b84 build(deps): bump uraimo/run-on-arch-action from 2.5.0 to 2.5.1
3a50988 use just enough arg_unused to silence -Wunused-parameter
9864f09 Packit: enable eln builds, enable wasmedge on all non-eln builds
cf72f8b container: fix error return value
88441d9 linux: simplify setns with pidfd
261a4fa mount_flags.c: regenerate
f9f4e06 mount_flags.perf: add get_mount_flags_from_wordlist
387d3ac packit: Build PRs into default packit COPRs
907d032 libcrun: handle SIGWINCH by resizing terminal_fd
57a252b nix: rename `default-nix` to `default-amd64.nix`
5224aa2 build-aux: simplify `release.sh`
a7102e8 github: simplify `release.yml`
8908248 Add support for riscv64 arch
31eeb19 cgroup: fix error return value
fec9b0f RPM: include criu dependencies
02ee7c4 linux: do not create error twice
c786d4c linux: simplify error handling
c972772 linux: do not write twice errors
74a3874 linux: use helper functions instead of custom read/write
35a0166 linux: define helper to ack on the sync socket
c3e518e libcrun: drop symbol for crun_make_error
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
d79b200eda |
cri-tools: update to v1.28.0
Bumping cri-tools to version v1.26.0-318-gd5f3f2df, which comprises the following commits:
71beb1da Fix containerd tests
7d7fd9bb add --pinned flag for `crictl images`
f74240d3 Bump github.com/google/uuid from 1.3.0 to 1.3.1
25ae10aa `crictl images -v` prints Pinned when image is pinned
163da8b9 Move events streaming test to own suite with BeforeEach and AfterEach
5461a963 Validate template
aa7bd9a9 Fix tests
88b0bedc Update cmd/crictl/events.go
3a881ad2 Address review comments
459ff574 Remove the Kubernetes incubator reference from README.md
9d084877 Vendor Kubernetes v1.28.0
b703e6a9 Add crictl events command
7f5104d9 Bump latest version in README.md
552f7387 Use previous and latest tag from git in release script
db0bc1a3 Vendor Kubernetes v1.28.0-rc.1
2b86addd Bump github.com/opencontainers/runc from 1.1.8 to 1.1.9
26d35da6 Fix seccomp value in test
a8a71d9f statsp: enhance description
e373e4a8 crictl: add metricsp command
5b337756 Dedup test code and activate linter
ba784045 Bump golang.org/x/net from 0.12.0 to 0.14.0
86ca3498 Bump golang.org/x/sys from 0.10.0 to 0.11.0
306ebdfa crictl: deduplicate display boilerplate
16975aba Make `haircommander` an approver
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
5569d65881 |
cri-o: update to release 1.28.0
Bumping cri-o to version v1.28.0, which comprises the following commits:
23dec8c7d version: bump to v1.28.0
c104a0608 build(deps): bump github.com/containers/storage from 1.48.0 to 1.49.0
5524b65d3 add info about pulling image before doing the tutorial
922573ffe build(deps): bump crate-ci/typos from 1.16.6 to 1.16.8
67724cb6f build(deps): bump github.com/containers/podman/v4 from 4.6.0 to 4.6.1
a2d46ae01 build(deps): bump github.com/containers/ocicrypt from 1.1.7 to 1.1.8
7e3522a9c Added a flag internal-repair
39ea33e29 feat: Added a feature to check at reboot time shutdown was clean or not, If it was not clean then apply repair logic
c5def7f72 build(deps): bump crate-ci/typos from 1.16.5 to 1.16.6
b873985b8 Add `conmon` to ppc64le static bundle
3e3f70c22 Update install.md
9c3d622a6 Vendor Kubernetes v1.28.0
a7f160b49 build(deps): bump crate-ci/typos from 1.16.3 to 1.16.5
d2fa125a4 Update nixpkgs and use overlay
80fdf486e Add containers_events_dropped_total metric
e19002329 Fix indentation in installation instructions
94f5e75c8 Update cri-tools to v1.28.0
a8d7c29e1 Vendor Kubernetes v1.28.0-rc.1
23f51c3e1 Update OWNERS_ALIASES
f1bb83127 Update runc to v1.1.9
581a388ac build(deps): bump crate-ci/typos from 1.16.2 to 1.16.3
5022d956a test/image.bats: add test for checking crun-wasm workflow
05ef7a189 *: add platform_runtime_paths to RuntimeHandler
6a0c4b9ec build(deps): bump github.com/containers/image/v5 from 5.26.1 to 5.27.0
f18d122e8 Revert "devices: fill the FileMode field in spec"
8937245b0 build-static: misc fixes needed for 1.25.4 generation
abfc2d616 build(deps): bump crate-ci/typos from 1.16.1 to 1.16.2
3f06640cf contrib/test/ci: add crun-wasm
3a9232c62 build(deps): bump google.golang.org/grpc from 1.56.2 to 1.57.0
bb98e2b2a Set mount type HostToContainer for mounts that include container storage root
309d045ec add script bumping
927843ea4 test/metrics: simplify oom test, add debug
64fdfbcaa build(deps): bump github.com/opencontainers/image-spec
15a586215 build(deps): bump github.com/opencontainers/runtime-spec
f30ef84ad build(deps): bump github.com/onsi/gomega from 1.27.8 to 1.27.10
ecd7f9a3e cri: implement RuntimeConfig rpc
2463fdf78 vendor: update Kubernetes to v1.28.0-beta.0
edc5ece7b build(deps): bump github.com/containers/podman/v4
ef1653c8e internal/config/seccomp: Sync call signature of (*Config).Setup
67b43c4b5 internal/config/cgmgr: add non-linux stubs
1dffd7e71 internal/config/node: add non-linux stubs
ecb372986 internal/config/device: add non-linux stubs
10168b534 internal/config/nsmgr: add non-linux stubs
8edfbfd45 internal/config/capabilities: add non-linux stubs
2bd7fcbd8 internal/config/apparmor: add non-linux stubs
da69490d0 oci: update unit tests for new stop code
be5bac87b oci: simplify stopping code
7371b1e77 oci: don't return ErrContainerStopped from StopContainer
c0e34644c build(deps): bump github.com/containers/buildah from 1.31.0 to 1.31.1
41b13e28d Fix ImageRef field for containers to default to an image ID
930f49889 runc: 1.1.7 -> 1.1.8
b563cd728 Add Adobe to ADOPTERS.md
3bc609eb1 build(deps): bump sigs.k8s.io/release-sdk from 0.10.2 to 0.10.3
4e0f88970 build(deps): bump github.com/opencontainers/runc from 1.1.7 to 1.1.8
e6af91f6a oci: change IsAlive to Living
320671ed2 devices: fill the FileMode field in spec
126bd4ca9 build(deps): bump crate-ci/typos from 1.16.0 to 1.16.1
b79391fe1 Update bats to v1.10.0
5e86a5261 build(deps): bump github.com/go-chi/chi/v5 from 5.0.8 to 5.0.10
92e1d1910 Bump vendored Podman to v4.6-rc2
a3d229acf internal/factory/container: get CDI devices from CRI field.
21181672b Add Debian 12 as a supported OS to the install doc
b7c826d38 build(deps): bump github.com/containers/common from 0.55.1 to 0.55.2
151572a56 build(deps): bump github.com/container-orchestrated-devices/container-device-interface
c0c7ce5ae Add OpenSSF best practices badge in favor of CII
0d92db47e build(deps): bump golang.org/x/net from 0.11.0 to 0.12.0
70e5b76ca build(deps): bump google.golang.org/grpc from 1.56.1 to 1.56.2
79859a9d9 build(deps): bump crate-ci/typos from 1.15.10 to 1.16.0
7ebe2f614 Update vendored Kubernetes to v1.28.0-alpha.4
c28303fad container_test: fix "AddCapabilities ALL" test case
e176397c8 vendor: drop podman replace and update runc
eff07b834 Run irqbalance tests in serial within the actual suite
059dce220 build(deps): bump crate-ci/typos from 1.15.9 to 1.15.10
d43833d61 Bump bats in ci jobs to latest release
66ac754c7 build(deps): bump github.com/containers/buildah from 1.30.0 to 1.31.0
59952bf00 build(deps): bump github.com/containers/common from 0.54.0 to 0.55.1
ff3bb58db build(deps): bump crate-ci/typos from 1.15.7 to 1.15.9
4fe0b8164 build(deps): bump github.com/containers/image/v5 from 5.26.0 to 5.26.1
cb51739b1 server: use platform struct to set OS details
bac73aa42 Pre-check request values on container creation
5a85cfc95 Remove non existent Debian builds from install instructions
73cf5597a test: fix make mockgen test failure
dfdd2acde vendor: update release-sdk to v0.10.2
abcf50239 build(deps): bump google.golang.org/grpc from 1.55.0 to 1.56.1
9c78a1e23 vendor: update containers/storage to v1.48.0
87b126342 build(deps): bump github.com/intel/goresctrl from 0.3.0 to 0.4.0
8a9d4ef17 vendor: update containers/common to v0.54.0
cb247caf5 build(deps): bump github.com/containers/image/v5 from 5.25.0 to 5.26.0
ad3dd698b build(deps): bump google.golang.org/protobuf from 1.30.0 to 1.31.0
b8bb276a0 build(deps): bump github.com/uptrace/opentelemetry-go-extra/otellogrus
0882a1dcb build(deps): bump crate-ci/typos from 1.15.6 to 1.15.7
6b9e49d3b Try to find `CONTAINER_CNI_PLUGIN_DIR` by binary lookup
40bbe8218 vendor: fix vendoring issue
f6317807c typos: add WRONLY to the list of extend-ignore-re
6a10113c7 build(deps): bump crate-ci/typos from 1.14.12 to 1.15.6
1062a4cd3 build(deps): bump ossf/scorecard-action from 2.1.3 to 2.2.0
91d6bd38b vendor: bump github.com/onsi/ginkgo/v2 to 2.11.0
7f66c1428 build(deps): bump cachix/install-nix-action from 21 to 22
d0526337e vendor: bump github.com/urfave/cli/v2 to 2.25.7
7a2b9a220 vendor: bump golang.org/x/sync to 0.3.0
ba0751938 vendor: bump golang.org/x/net to 0.11.0
9f0680cde vendor: bump github.com/prometheus/client_golang to 1.16.0
67a132dc6 runtime handler hooks: run default hook when container stops gracefully
49d9efe8b vendor: bump github.com/stretchr/testify to 1.8.4
001733570 vendor: bump github.com/sigstore/rekor to 1.2.1
d274dd121 Use a variable to manage the version of kata used for testing.
4a7d0857b Update supported version and variable guide for adding repository
0534d7eff governance: tweak voting behavior
bfc7cf55a Use kata 3.0 for testing
db4b8eaab kata tests: Enabling more than one test file for kata tests.
0f08aeb6f kata tests: Update list of skipped tests for the ctr.bats file
4310e3342 Modify ansible files to re-enable kata tests
8224bd8a5 build(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc
f84eb7874 Move reload watcher into `Server`
e3b7406b9 Update golangci-lint and config
159aaf6c6 utils: make this package build on non-linux platforms
c088d69aa fix function name in comment
c702bb78a build(deps): bump DavidAnson/markdownlint-cli2-action from 10 to 11
098fbebf7 Add a test for log linking
5620764ae linklogs: add support for symlinking container directory
5d7ecfe4b Add support for linking pods logs
a7d314bea build(deps): bump ossf/scorecard-action from 2.1.2 to 2.1.3
e614bc756 server: ensure pod labels are present
d84cc85c5 build(deps): bump github.com/BurntSushi/toml from 1.3.1 to 1.3.2
72b735603 OCPBUGS-14750: Pod termination must succeed when a hook fails
98c43d537 Add OSFF scorecard action
85c7e712e main: Added a call to GarbageCollect
ccb91bc8a docs: fix eol test
08f7c0776 build(deps): bump github.com/onsi/gomega from 1.27.7 to 1.27.8
f2feb7c6f Use staging k8s.io/kubelet/cri/streaming package
72011b3c4 Add support for namespaced signature policies
3939fba97 Apply markdown linting, cleanup docs and fix broken links #6890
96e6aed74 Apply markdown linting on the tutorials folder #6890
2ead2413a Apply markdown linting on the contrib folder #6890
5d7b64018 Add markdown linter action #6890
d58f408f5 test: fix timeout metric test
5f74e7994 build(deps): bump github.com/BurntSushi/toml from 1.3.0 to 1.3.1
c87b11115 server: do not take lock to populate pid in container status and inspect
28b34889a build(deps): bump github.com/sirupsen/logrus from 1.9.2 to 1.9.3
b373909cf build(deps): bump github.com/containerd/containerd from 1.7.1 to 1.7.2
d456a11ef crio: deprecate config migration
259e7980c metrics: add metric for resource stalled at stage
85a4ba091 build(deps): bump crate-ci/typos from 1.14.11 to 1.14.12
75aacdb04 Drop support for path based seccomp profiles
e18e2e90a test/helpers: rm useless code
b7d1c2e61 test/helpers: use cli to set container dirs
459372c24 test: adapt for sched_load_balance disable after stop
6da8e46b1 runtime handler hooks: add DefaultCPULoadBalanceHooks
23b9179f9 server: call hooks and NRI in stopContainer
e1c68ea2a Update `README.md` version table
56ac8ac79 crio: remove DefaultsPath config feature
b2a20a418 server: call hooks on infra container creation
2efd04aa4 high perf hooks: workaround libcontainer quirk when disabling cpu quota
9ec701691 cgmgr: export CrioPrefix and use containerCgroupPath more
775690b1e build(deps): bump github.com/onsi/ginkgo/v2 from 2.9.5 to 2.9.7
cf7e0946e tests/timeout: skip for conmon-rs
c1c431836 ci/gha: add space-at-eol check, fix existing ones
0a35354c4 build(deps): bump github.com/BurntSushi/toml from 1.2.1 to 1.3.0
65792546b ci: bump shellcheck to 0.9.0
6b2f35e2c test: fix a few cases of SC2086
d6b793c46 contrib/kube-local/kube-local: rm unreachable code
b6014826c test/copyimg: use log.Fatalf
587e3d595 test/*.bats: rm useless echo "$output"
bdb765635 test: rm explicit $status checks
933e33c1c test: simplify assigning IDs
22978429a test/status.bats: simplify exit code checks
ff7bc1b52 test: simplify non-zero exit status checks
0bf509d35 test/cdi.bats: rm run_cmd, use run
21e5dcebe test/nri.bats: fix checking exit code
2fab13028 test/README.md: fix wrong bats example
9c2fcb3bd test/*bats: drop fail()
84ee0c931 Fix using ! in bats tests
045c026da test/timeout: fix "dup ctr" test
1da9bf5f7 ci: require bats 1.9.0
c5a1c1b1e test: separate var setting and img preload
7b9e5201b ci: bump bats to 1.9.0
9ad33da53 build(deps): bump github.com/containers/podman/v4 from 4.5.0 to 4.5.1
2604665cc Update nix and nixpkgs
792a5d0ad test: limit number of parallel jobs
1cc1958de test/cgroup: fix for cgroupfs
aa86e94f0 ci/gha: fix double caching
47c13e037 [FEAT] Add new parameter disable_hostport_mapping in CRI-O
df7df847d build(deps): bump go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc
f7f085f6f Makefile: Remove GOPATH references
1eeaad851 build(deps): bump cachix/install-nix-action from 20 to 21
7cc3e206c build(deps): bump github.com/onsi/gomega from 1.27.6 to 1.27.7
3b5c9f115 build(deps): bump crate-ci/typos from 1.14.10 to 1.14.11
7003312b0 OCPNODE-1286: Add a CI job to run cri-o e2e tests by enabling the evented pleg feature
47958dc0b Update crun to v1.8.5
9b6a4cff7 Wrap CRI errors on image pull
defdf1c9e build(deps): bump github.com/sirupsen/logrus from 1.9.0 to 1.9.2
6a3ee4e6b docs: update cri-o podman doc and remove stale information
7ed2cfc7f deps: bump runc to 1.1.7
f59c1f72a sandbox: Handle PodLinuxOverhead and PodLinuxResources CRI fields
f5e58c0ea build(deps): bump crate-ci/typos from 1.14.9 to 1.14.10
1009668bb build(deps): bump github.com/stretchr/testify from 1.8.2 to 1.8.3
42e0f7fac go.{mod,sum}, vendor: update NRI.
d97ac8a10 contrib/test: reenable Statefulset Basic tests
3761965f8 contrib/test: re-enable block volmod tests
003edc26c high perf hooks: disable CPU quota with libcontainer as a pre start hook
a875ef486 test: add test for cpu-quota.crio.io
e1c3cf960 Check and fix typos in CI
fa57ffd3e *: switch to go-chi/chi mux
6330b1d5f build(deps): bump github.com/cloudflare/circl from 1.1.0 to 1.3.3
786109a6e build(deps): bump github.com/containerd/containerd from 1.7.0 to 1.7.1
ecc712850 Support image policy verification error
ccaef6a7d build(deps): bump github.com/onsi/ginkgo/v2 from 2.9.4 to 2.9.5
484870532 build(deps): bump sigs.k8s.io/release-utils from 0.7.3 to 0.7.4
3480e9efa Fix GitHub action `bundles` test
937ed8cf6 - Convert status cli as a subcommand of crio - Moved commands to the internal criocli package and used them in the crio and crio-status binaries - Adding the status subcommands directly to the binary
a247c52d9 pkg/config: update the description for templateStringCrioImagePinnedImages
4fadec5f1 internal/storge: fix CompileRegexpsForPinnedImages test case
5e751fda3 vendor: fix vendoring
5ecc82e6f contrib/metrics-explorer: fix nested modules
640624ec9 Update CNI plugins to v1.3.0
9fc177ed4 build(deps): bump golang.org/x/net in /contrib/metrics-exporter
8b230dec7 clients connected to container event stream now receive the same data
3fd71bdc9 vendor: fix CI due to incosistent vendoring
20fd7770e fix kubectl version in bug report template
21b47b11c *: update sandbox/pause image to 3.9
edbd4890f internal/storage: add sandbox/pause image to the list of pinned_images
b0531365f build(deps): bump github.com/containernetworking/plugins
22ad8957b Changes to build binaries for ppc64le architecture.
32ec246ba Update README.md and associated files
f10ea341d build(deps): bump golang.org/x/net from 0.9.0 to 0.10.0
c9bb988d1 *: fix warnings related to gosec
0e65290c4 .github/worflows: add go vulnerability management check for cri-o
f9abf50c9 pkg/config: reload pinned_images when the new config is provided
bbe9a7a2c *: add support for pinned_images in crio configuration
dfcf222c3 refactoring vars
386509caf Use native crierrors package for registry unavailable
a90d00103 build(deps): bump golang.org/x/sys from 0.7.0 to 0.8.0
16ab25339 Vendor latest Kubernetes master
6a095aef7 build(deps): bump google.golang.org/grpc from 1.54.0 to 1.55.0
5c064914f build(deps): bump golang.org/x/sync from 0.1.0 to 0.2.0
639b6dddf OWNERS: add sohankunkerkar to cri-o-reviewers
4477a804b tests: add a fake pinns call to delay things and cause the timeout
6fa761497 tests: use crictl binary directly when checking its capabilities
1ff3303df cni: configure cgroupPath capability arg
e52e63a41 vendor: bump ocicni to tip
914763fb1 Remove vendor specific changes
08cd56fc9 Migrate image registry to registry.k8s.io
3311658af build(deps): bump github.com/uptrace/opentelemetry-go-extra/otellogrus
02fe074f2 build(deps): bump github.com/onsi/ginkgo/v2 from 2.9.2 to 2.9.4
0b8a2c068 build(deps): bump github.com/sigstore/rekor from 1.1.0 to 1.1.1
660b63bd7 cgmgr: set sched_load_balance to disabled on sandbox cgroup
5a1707e4c test/pod.bats: update to current setup
f83a4faba cgmgr: create cgroups for systemd cgroup driver for dropped infra pods
f21e178f8 build(deps): bump github.com/prometheus/client_golang
bf23f5c01 Support `RegistryUnavailable` type
e80464e07 Update generated docs
ed9c419e7 OWNERS: allow cri-o reviewers to approve dependabot PRs
58c101634 build(deps): bump github.com/urfave/cli/v2 from 2.25.1 to 2.25.3
a4fc119af .github/workflows: remove auto-approve workflow
a0009cb25 build(deps): bump go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc
541b6563d Extend cpu-c-states.crio.io annotation to add max latency
2417374a6 build(deps): bump k8s.io/klog/v2 from 2.90.1 to 2.100.1
249c340d3 contrib/test/ci: fix the bin folder location for cri-tools
cf30845e7 #6833 user ns: Fix segfault while constructing id mappings
38774e14a Use ImageRef instead of ImageName for restore
1f224d1e0 build(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc
7c6676f02 contrib/test/ci/build: use `force:yes` while linking crictl/critest
c9cc1529f .github/workflows: fix the github_token field
a1c09ad99 .github/workflows: fix the token field
30ddd6d89 Fix events generated by Evented PLEG
b8d8ff14b Update c/common to v0.53.0
b34038f8f build(deps): bump actions/setup-go from 3 to 4
4c828dc48 build(deps): bump github.com/opencontainers/runtime-spec
928d5d49c build(deps): bump github.com/prometheus/client_golang
e806005d6 test/network: skip flaky test running on a node with cgroupv2
e914f0e15 test: combined oom test to avoid CI flake
d5048e7ff test/seccomp: fix the syscall
473ee6b73 contrib/test/ci: remove duplicate code
a1c6ae7e4 test/*: consolidate images used for integration tests
25fb4fa76 build(deps): bump github.com/Microsoft/go-winio from 0.6.0 to 0.6.1
a950c837d Download more dependencies instead of vendoring
839bd1203 build(deps): bump github.com/containers/conmon-rs from 0.5.0 to 0.5.1
edbe9c27e build(deps): bump github.com/go-logr/logr from 1.2.3 to 1.2.4
e53dcc003 Stop vendoring release notes tool
1c26776cb .github/workflows: auto approve dependabot PRs
e967a178c user ns: fix segfault when host id mapping is empty
19c0b4d7b server: fix failing tests
edf6a88a9 build(deps): bump k8s.io/release from 0.15.0 to 0.15.1
7a612bc4b Allow restoring of containers with different names
86b36ee6e build(deps): bump lumaxis/shellcheck-problem-matchers from 1 to 2
6da5b1272 build(deps): bump actions/stale from 7 to 8
1c1cfb92a Fix Flannel PodCIDR in kubeadm tutorial
bac3a79b6 adding support for configmap namespace
603f176a0 Add debug to identify when a relabel was not requested
f9fa10915 Update tutorials/debugging.md
75c8b181b Added documentation to force the Go garbage collector for CRI-O
11f5c4326 Remove remnants of CONTAINER_MANAGE_NS_LIFECYCLE
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
13fe43d1e1 |
containerd: update to 1.7.5
Bumping containerd to version v1.7.5-8-g86dc86e62, which comprises the following commits:
ed4bac11e Blockfile: Enlighten blockfile copy on Darwin
4d1cfbbdd Revert "log: define G() as a function instead of a variable"
a34e93241 make repositories of install dependencies configurable
b449440a4 CRI: Support Linux usernames for !linux platforms
503ab21bf go.mod: github.com/containerd/continuity v0.4.2
93b23eb10 Prepare release notes for v1.7.5
fb1292c8d Bump version to v1.7.4
7a0cae3ca [release/1.7] Prepare release notes for v1.7.4
537d7526e integration: issue7496 case should work for runc.v2 only
0f4885c16 Add configurable mount options to overlay
8804a27d7 feat: make overlay sync removal configurable
5add172be Vagrantfile: add strace tool
207e28f36 integration: add ShouldRetryShutdown case based on #7496
b4f480fb3 pkg/cri/sbserver: fix leaked shim issue for podsandbox mode
88ff575c5 pkg/cri/server: fix leaked shim issue
9f61dfb7c integration: add case to reproduce #7496
2a9ae3c51 log: swap logrus functions with their equivalent on default logger
01445bb73 log: add package documentation and summary of package's purpose
932795f45 log: make Fields type a generic map[string]any
707ca94d8 log: add log.Entry type
0a79e67e4 log: define OutputFormat type
dbbe28b7d log: define G() as a function instead of a variable
93b6cb784 log: add all log-levels that are accepted
e8e086e02 log: group "enum" consts and touch-up docs
7aa4f8fdc log: WithLogger: remove redundant intermediate var
bfdce4ce4 log: SetFormat: include returns in switch
6621e0888 log: remove testify dependency
df76aaede removes/docker: remove unnecessary conversion (unconvert)
1c2dd5198 Remove temporary replace
2bf6bd143 vendor: update github.com/containerd/continuity
30a163086 snapshots|pkg: umount without DETACH and nosync after umount
c9eebe3d1 mount: support direct-io for loopback device
1c2977db0 Modify loopback size
cf9c78d2d snapshots/blockfile: fix lint issue
b823b4f54 snapshots/blockfile: deflaky the testsuite
6daeceb11 snapshots/blockfile: use passed in dst in scratchGenerator
99b61aee3 snapshots/blockfile: use loop if options is empty
fd39769ac Add mount options to blockfile snapshotter
8d732c6c2 Add sync before unmount on snapshotter layer test
8472a407e Add blockfile snapshotter to snapshotters doc
6740d77ca Add blockfile as a builtin
07cc24b32 Add blockfile snapshotter
32e3b76ee Add diffservice to contrib
661e505c8 Add proxy differ
af79c07fd update runc binary to v1.1.9
c0b1c8f74 fix ci Linux Integration test fail
4e97a115f cri: Don't use rel path for image volumes
34a5d0330 fix: allow attaching to any combination of stdin/stdout/stderr
c5e7b84c0 update to go1.20.7, go1.19.12
2eaeb3205 Fix ro mount option being passed
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
dae8061c08 |
conmon: update to 2.1.8
Bumping conmon to version v2.1.3-87-g6d88cb3, which comprises the following commits:
6d88cb3 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.12.0
00e08f4 bump to v2.1.8
57d5e7f fix(deps): update module github.com/containers/storage to v1.48.0
adc748c cli: log parsing errors to stderr
b0bdc23 Update nix and use an overlay
04cf7ba chore(deps): update dependency containers/automation_images to v20230809
ccdae54 gh actions: bump to go 1.21
4e61870 gh actions: drop perma-failing jobs
730d92c fix(deps): update module github.com/onsi/ginkgo/v2 to v2.11.0
73ab92e Changes to build conmon for `riscv64`
53b3691 stdio: ignore EIO for terminals
77ce312 refactor: handle a broken pipe with write_sync_fd
fa67ce6 ensure console socket buffers are properly sized
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
48b63ed575 |
buildah: update to 1.31.3
Bumping buildah to version v1.31.1-23-g0926e05c3, which comprises the following commits:
f449589dd [release-1.31] Bump to v1.31.4-dev
3ae75d4a4 [release-1.31] Bump to v1.31.3
68fa52ca5 [release-1.31] Bump c/common 0.55.4, c/image 5.26.2, c/storage 1.48.1
140f028d6 rpm: spdx compatible license field
20b479ec4 RPM: fix buildtags
d1e3a7bf3 [release-1.31] Bump to v1.31.3-dev
d4d1d7513 [release-1.31] Bump to v1.31.2
4d9260cc3 [release-1.31] Bump to v1.31.2-dev
800b1549b [release-1.31] Bump to v1.31.1
0a63bc63d [release-1.31] Remove zstd:chunked from man, bump c/common to v0.55.3
98f684ff3 [CI:BUILD] Packit: add fedora-eln targets
708c07761 [CI:BUILD] RPM: build docs with vendored go-md2man
68fa9389a packit: Build PRs into default packit COPRs
95e1dfb3d [CI:BUILD] Packit: remove pre-sync action
806fcccee CI:BUILD] RPM: define gobuild macro for rhel/centos stream
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
22989818f3 |
runc-docker: update to 1.9.0
Bumping runc to version v1.1.9-2-g26a98ea2, which comprises the following commits:
11737f55 VERSION: back to development
ccaecfcb VERSION: release 1.1.9
f44190e0 libct/intelrdt: check if available iff configured
6cf9ac15 libct/intelrdt: skip remove unless configured
4796f49c libct/intelrdt: elide parsing mountinfo
6a7a6a57 libct/intelrdt: skip reading /proc/cpuinfo
7c83dbe6 libct/intelrdt: delete IsMBAScEnabled()
5ebcfa62 [1.1] libct: rm intelrtd.Manager interface, NewIntelRdtManager
69473d0a libct: rm TestGetContainerStats, mockIntelRdtManager
dfdc7d07 libct/intelrdt: explain why mountinfo is required
5ba1b8ec libct/intelrdt: faster init if rdt is unsupported
a5407b9a libct/intelrdt: remove findMountpointDir test
dc8d0cc1 libct/intelrdt: wrap Root in sync.Once
929d04fc libct/cg/fs2: use `file` + `anon` + `swap` for usage
bdbfe042 ci: bump golangci-lint, remove fixed exception
d398ad2a gha: disable setup-go cache for golangci job
5888c55d ci/gha: rm actions/cache from validate/deps job
a47c15b4 build(deps): bump actions/setup-go from 3 to 4
44a53f08 ci: fix TestOpenat2 when no systemd is used
cff41a89 ci: fix TestNilResources when systemd not available
37405ca0 Fix running tests under Docker/Podman and cgroup v2
1c524242 [1.1] ci/gha: rm unsup Go 1.19.x, add 1.21.x
ac310917 ci/cirrus: improve host_info
ecccc432 [1.1] ci/cirrus: use Go 1.19.x not 1.19
bb2401ee [1.1] ci/cirrus: use Go 1.20
aaed58c8 add a test case about missing stricky bit
3d3a2b38 fix some file mode bits missing when doing mount syscall
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
606fe98a98 |
runc-opencontainers: update to 1.9.0
Bumping runc to version v1.1.9-2-g26a98ea2, which comprises the following commits:
11737f55 VERSION: back to development
ccaecfcb VERSION: release 1.1.9
f44190e0 libct/intelrdt: check if available iff configured
6cf9ac15 libct/intelrdt: skip remove unless configured
4796f49c libct/intelrdt: elide parsing mountinfo
6a7a6a57 libct/intelrdt: skip reading /proc/cpuinfo
7c83dbe6 libct/intelrdt: delete IsMBAScEnabled()
5ebcfa62 [1.1] libct: rm intelrtd.Manager interface, NewIntelRdtManager
69473d0a libct: rm TestGetContainerStats, mockIntelRdtManager
dfdc7d07 libct/intelrdt: explain why mountinfo is required
5ba1b8ec libct/intelrdt: faster init if rdt is unsupported
a5407b9a libct/intelrdt: remove findMountpointDir test
dc8d0cc1 libct/intelrdt: wrap Root in sync.Once
929d04fc libct/cg/fs2: use `file` + `anon` + `swap` for usage
bdbfe042 ci: bump golangci-lint, remove fixed exception
d398ad2a gha: disable setup-go cache for golangci job
5888c55d ci/gha: rm actions/cache from validate/deps job
a47c15b4 build(deps): bump actions/setup-go from 3 to 4
44a53f08 ci: fix TestOpenat2 when no systemd is used
cff41a89 ci: fix TestNilResources when systemd not available
37405ca0 Fix running tests under Docker/Podman and cgroup v2
1c524242 [1.1] ci/gha: rm unsup Go 1.19.x, add 1.21.x
ac310917 ci/cirrus: improve host_info
ecccc432 [1.1] ci/cirrus: use Go 1.19.x not 1.19
bb2401ee [1.1] ci/cirrus: use Go 1.20
aaed58c8 add a test case about missing stricky bit
3d3a2b38 fix some file mode bits missing when doing mount syscall
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Kai Kang
|
64c7c56236 |
k3s: not compatible with mips
k3s depends on 'virtual-containerd' provided by containerd-opencontainers which is not compatible with mips. So set COMPATIBLE_HOST for k3s that not compatible with mips to align with containerd-opencontainers. Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Kai Kang
|
33a437dc42 |
docker-compose: not compatible with mips
docker-compose rdepends on docker which is not compatible with mips. So set COMPATIBLE_HOST for docker-compose accordingly. Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Bruce Ashfield
|
113af45b75 |
lxcfs: add systemd to REQUIRED_DISTRO_FEATURES
lxcfs requires systemd, so we add it to the feature check. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Changqing Li
|
8f25bfcbae |
oci-image-tools: don't build for riscv64
Currently oci-image-tools has a do_compile error for riscv64. The
problem could be reproduced by:
MACHINE=qemuriscv64 bitbake oci-image-tools
So explicitly set COMPATIBLE_HOST here to avoid it building for riscv64.
When someone interested in using this recipe for riscv64 fixes the
compile issue, this setting could be removed.
Also don't build packagegroup-container/packagegroup-kubernetes since
they depends on oci-image-tools
Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Patrick Wicki
|
dbffe9f4c2 |
netavark: skip plugins in ptest
Skip the plugin tests that were introduced in 1.6.0 and lead to ptest failure. Signed-off-by: Patrick Wicki <patrick.wicki@siemens.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Patrick Wicki
|
898d0e9c3b |
netavark: require iputils for ptest
Fixes ptest not working on systems using busybox ping. Signed-off-by: Patrick Wicki <patrick.wicki@siemens.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Bruce Ashfield
|
08435d20b1 |
recipes/classes/scripts: Drop SRCPV usage
bitbake has been enhanced such that SRCPV is no longer needed in PV to handle updating git hashes and task signatures. We can simplify our PV by dropping SRCPV Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Bruce Ashfield
|
a03c4f5845 |
podman: introduce README for testing/configuration
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Bruce Ashfield
|
7bd56074fe |
docker-compose: drop python variant
The python variant of docker-compose is no longer updated. We have the golang version, so we drop this recipe to avoid use of an obselete and potentially non-secure application. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Bruce Ashfield
|
78f1c22f61 |
skopeo: update to 1.13.1
Bumping skopeo to version v1.13.1-4-g416218f5, which comprises the following commits:
882b087b Packit: remove pre-sync action
3162e17e [release-1.13] Bump to v1.13.2-dev
8ace37a4 [release-1.13] Bump to v1.13.1
cac20311 [release-1.13] Bump c/common to v0.55.2
d5b1f34e [release-1.13 backport] [CI:BUILD] Packit: install golist before updating downstream spec
85d99af2 [release-1.13] Bump to v1.13.1-dev
8b9999e1 Bump to v1.13.0
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
dddc423fa3 |
runc-docker: update to 1.1.8
Bumping runc to version v1.1.8-7-gaa68c400, which comprises the following commits:
aaed58c8 add a test case about missing stricky bit
3d3a2b38 fix some file mode bits missing when doing mount syscall
7c36375a Update github actions packages in validate workflow
1fa89476 VERSION: back to development
82f18fe0 VERSION: release 1.1.8
ef6491ec tests/int/delete: make sure runc delete removes failed unit
ebdd4fa6 [1.1] tests/int: add "requires systemd_vNNN"
1188c5a1 runc delete: call systemd's reset-failed
71e76007 libct/cg/sd: remove logging from resetFailedUnit
3a4b3af6 tests/int/cgroups: remove useless/wrong setting
6bc3f22a libct/cg/sd/v1: do not update non-frozen cgroup after frozen failed.
d375351b ci/cirrus: enable rootless tests on cs9
e1a8b52f tests/int/cgroups: filter out rdma
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
ea3b6a8398 |
runc-opencontainers: update to 1.1.8
Bumping runc to version v1.1.8-7-gaa68c400, which comprises the following commits:
aaed58c8 add a test case about missing stricky bit
3d3a2b38 fix some file mode bits missing when doing mount syscall
7c36375a Update github actions packages in validate workflow
1fa89476 VERSION: back to development
82f18fe0 VERSION: release 1.1.8
ef6491ec tests/int/delete: make sure runc delete removes failed unit
ebdd4fa6 [1.1] tests/int: add "requires systemd_vNNN"
1188c5a1 runc delete: call systemd's reset-failed
71e76007 libct/cg/sd: remove logging from resetFailedUnit
3a4b3af6 tests/int/cgroups: remove useless/wrong setting
6bc3f22a libct/cg/sd/v1: do not update non-frozen cgroup after frozen failed.
d375351b ci/cirrus: enable rootless tests on cs9
e1a8b52f tests/int/cgroups: filter out rdma
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
5d01102077 |
podman-tui: update to v0.9.1
Bumping podman-tui to version v0.9.1, which comprises the following commits:
d77db5fd bump to 0.9.1
ad29f4fa Container create error fix when selecting a volume
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
ba6e5e9db1 |
podman: update to 4.6.0
Bumping libpod to version v4.6.0-14-g2215847e6, which comprises the following commits:
f05f00717 do not redefine gobuild for eln
45fd917fa [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
8ee1f1197 [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora >= 38
5831bd68b System tests: add test tags
954177e7e API: kill: return 409 on invalid state
e4e983e7a Mention TimeoutStartSec in quadlet man page
d68ee576e If quadlets have same name, only use first
94431182b Bump to v4.6.1-dev
38e6fab96 Bump to v4.6.0
8aec5997e Update release notes for v4.6.0
09b1da382 Ensure that we appropriately warn that TCP is insecure
0115a4800 CI: remove build without cgo task
598ebe8a1 libpod: use io.Writer vs io.WriteCloser for attach streams
574b78291 top: do not depend on ps(1) in container
255111269 api: fix doc for default ps_args
34274ce15 Add more tests for liveness probes with default hostname & named ports
48deafc64 Fix TCP probes when the optional host field is not given
6817e0ae3 Add support for using port names in Kubernetes health probes
5445bd6f0 [CI:DOCS] fix command incorrect in windows
50195c244 [CI:DOCS] Reformat and reorder table with --userns options
924bc7055 [CI:DOCS] Better document the default value of --userns
e4c38e719 Add missing return after utils.InternalServerError()
7a4bd4c95 Fix markdown in docs for podman-network-create
7cbe41212 Fix multiple filter options logic for `podman volume ls `
5ea019419 Should be checking tmpfs versus type not source
b4859d283 Use constants for mount types
39b7ac99d Fix `podman container prune` docs for `--filter`
7ba306ec6 docs: podman-build --network add slirp and pasta
c810420c8 docs: podman run --network mention comma separted names
2c970dd01 network create: document --internal better
5106b7a38 pkg/specgen: fix support for --rootfs on FreeBSD
41f809e3e systests: quadlet: fixes for RHEL8
061841c0c Fix windows installer
8f05405db Podmansh: Better error, increase timeout to 30s
2b683a400 Emergency gating-test fixes for RHEL8
d0dee61e7 Packit: remove pre-sync action
70e30a2be [CI:DOCS] Update RELEASE_NOTES.md with Makefile change
b8ef289e3 Bump to v4.6.0-dev
bfe2e0fca Bump to v4.6.0-rc2
145748d1f Makefile: `package` -> `rpm`
be21bc082 Update release notes
8fffcf4d6 system tests: refactor registry code
624bb8350 machine start: qemu: wait for SSH readiness
732a02c57 machine start: qemu: adjust backoffs
afe48ba36 auto update: fix usage of --authfile
24439cdd2 [CI:BUILD] Packit: downstream task action fix
7b3d47c3b Fix container errors not being sent via pod removal API
9d0470f12 netavark: macvlan networks keep custom nameservers
5583358f6 add hostname to network alias
2aea98cab libpod: set cid network alias in setupContainer()
d0b0c6285 Fix: cgroup is not set: internal libpod error after os reboot
258135221 test/e2e: wait for socket
a3a62854f api: fix slow version endpoint
28e92b9de manifest inspect: support authentication
e354514dc libpod: don't make a broken symlink for /etc/mtab on FreeBSD
c81a00101 make --syslog errors non fatal
edc51d9ff Fixes typo in the path where quadlet looks for files
a673bb23e [CI:DOCS] uidmap man pages: fix corrupt italics
dd7dbb826 [CI:DOCS] podman-system-service.1.md: document systemd usage
a312553fc Use bytes size consistently instead of human size
2ef2a671e bugfix: do not try to parse empty ranges
662cca7cc pkg/specgen: properly identify image OS on FreeBSD
cf5c4c9ee [CI:DOCS] Document support of pod security context IDs
c8cfcc253 pkg/specgen: add support for 'podman run --init' on FreeBSD
fc8f229bd Remove 'inspecting object' from inspect errors
ee6329374 Fix readonly=false failure
a3598ff61 pkg/specgen: Add support for Linux emulation on FreeBSD
e30197e6f Fix up podmansh man page
47e6ce19c Pass in correct cwd value for hooks exe
f654f7cc7 specgen: honor --device-cgroup-rule with a new user namespace
fcf673d5d specgen, rootless: raise error with --device-cgroup-rule
f70189991 make image listing more resilient
62fc35c07 Trim whitespace from unit files while parsing
ed5618759 play.go: remove volumes on down -f
04897ee64 Vendor c/common v0.55.2
ff71df0e8 system service: unset listen fds on tcp
6960a8183 [CI:DOCS] [Release Notes]: add static routes
e4cf2afbc [CI:DOCS] tag podmansh as tech preview in RELEASE_NOTES.md
c422072b6 [CI:DOCS] uidmap man pages: fix corrupt tables
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
5bc9a9fc2f |
netavark: update to 1.7.0
Bumping netavark to version v1.7.0-49-gab03eec, which comprises the following commits:
067bbde fix(deps): update rust crate serde to 1.0.180
0ae529b fix(deps): update rust crate serde_json to 1.0.104
e155cbf fix(deps): update rust crate serde to 1.0.179
e64a5a9 fix(deps): update rust crate serde to 1.0.176
6f5dc41 fix(deps): update rust crate clap to 4.3.19
074de60 fix(deps): update rust crate serde to 1.0.175
2a2d066 fix(deps): update rust crate clap to 4.3.17
cb49b4f fix(deps): update rust crate clap to 4.3.15
69c802a fix(deps): update rust crate clap to 4.3.12
c627b76 fix(deps): update rust crate serde_json to 1.0.103
747384d [CI:BUILD] Packit: remove pre-sync action
64d55ee fix(deps): update rust crate serde_json to 1.0.102
cc1d2aa fix(deps): update rust crate nispor to 1.2.12
c227eed macvlan: use netlink type for bclim
f92a065 bump netlink deps
ba31874 fix(deps): update rust crate serde to 1.0.171
355ad29 fix(deps): update rust crate serde to 1.0.167
91665d4 fix(deps): update rust crate clap to 4.3.11
dd3a221 fix(deps): update rust crate serde to 1.0.166
0eb2033 fix(deps): update rust crate serde_json to 1.0.100
1340988 iptables: improve error when ip6?tables commands are missing
6f56308 fix(deps): update rust crate clap to 4.3.10
e7518b2 fix(deps): update rust crate zbus to 3.14.1
3455012 [CI:BUILD] RPM: Fix ELN build and cleanup spec
1691f8c bump to v1.8.0-dev
158e11b release v1.7.0
6ba1f8a Update release notes for v1.7.0
15af075 fix(deps): update rust crate tokio to 1.29
6e06b7d netavark: make --config required for dns
816d73d fix(deps): update rust crate serde_json to 1.0.99
14d4c54 fix(deps): update rust crate clap to 4.3.8
c5784bc [CI:BUILD] Packit: add Fedora downstream tasks
d2d3092 run cargo update
da6ee1f fix(deps): update rust crate serde_json to 1.0.97
0d62a35 fix(deps): update rust crate sha2 to 0.10.7
77b09a7 fix(deps): update rust crate clap to 4.3.4
68080c7 chore(deps): update dependency containers/automation_images to v20230614
0e976f1 fix(deps): update rust crate clap to 4.3.3
175c095 fix(deps): update rust crate log to 0.4.19
23c48d8 aardvark: fix missleading dns disabled log
d31c157 firewall: add NETAVARK_ISOLATION_3 chain for strict isolation
bb690f9 docs: fix link to getting started
ca147fb fix(deps): update rust crate serde to 1.0.164
871096c netlink: fix incorrect info log for del_route
72aa0dd dhcp-proxy: apply new ip address/gateway
2a17957 test-dhcp: fix broekn has_ip() check
44b5a28 dhcp-proxy: actually implement renewing leases
1a5f674 dhcp-proxy: simplify code
f7e950b dhcp-proxy: drop macaddr dependency
827bdd9 dhcp-proxy: remove some unused traits
5b2662e fix(deps): update rust crate zbus to 3.13.1
8fd57c7 fix(deps): update rust crate clap to 4.3.2
7000903 chore(deps): update rust crate once_cell to 1.18.0
e495d0b fix(deps): update rust crate url to 2.4.0
3a2c8e5 fix(deps): update rust crate clap to 4.3.1
3fcbfab chore(deps): update dependency containers/automation_images to v20230601
be0e01e chore(deps): update rust crate chrono to 0.4.26
3bdb499 chore(deps): update rust crate chrono to 0.4.25
f9dce04 fix(deps): update rust crate log to 0.4.18
8db90d8 chore(deps): update rust crate once_cell to 1.17.2
e4e78f0 macvlan: add bclim option
3d3563b parse_option(): return option instead of default
e0ae9bc add no_default_gateway option
d39db0b fix(deps): update rust crate clap to 4.3.0
ba0cb46 chore(deps): update dependency containers/automation_images to v20230517
62b35fd fix(deps): update rust crate serde to 1.0.163
416853b Add ability to add static route
d2ef6cc fix(deps): update rust crate serde to 1.0.162
9e0e186 Cirrus: Update fedora name to match image
11626fc fix(deps): update rust crate clap to 4.2.7
e6ee988 chore(deps): update dependency containers/automation_images to v20230426
85dde17 correct typo in Makefile
8418f9b simplify path printing
65ff4f1 fix(deps): update rust crate tokio to 1.28
690fa8d aardvark-dns pid: return better errors
394789f fix comment in Subnet definition
2362e82 aardvark: no error when aardvark config is not there
5d41c71 fix(deps): update rust crate zbus to 3.12.0
bdf84b8 fix(deps): update rust crate clap to 4.2.4
fced2f1 fix(deps): update rust crate clap to 4.2.2
6aeabc0 fix(deps): update rust crate serde_json to 1.0.96
f0d5cc8 update clap to v4
be0e133 fix(deps): update rust crate serde to 1.0.160
173d7ac bump to v1.7.0-dev
2f01092 v1.6.0 release
1d2d150 Update release notes for v1.6.0
e1b0aa9 dhcp-proxy: fix typo for --activity-timeout
f125bf0 chore(deps): update dependency containers/automation_images to v20230405
8b4c678 dhcp-proxy: use better error when connection fails
c4a216d add documentation for netavark plugins
3ad293d add stderr example plugin to test stderr passthrough
cee4d9f add netavark plugin driver
b2ffb90 add example error plugin
bc35cdd add host-device example plugin
ab8156d plugin: add simple plugin interface
092b9a3 netlink: add dump_addresses
cc1730e netlink: add set_link_ns
14a5205 dhcp-proxy: correctly exit > 0 on errors
24698f1 fix(deps): update rust crate tonic to 0.9
50b0fbb fix(deps): update rust crate mozim to 0.2.2
a5eba62 fix(deps): update rust crate serde to 1.0.159
dd0034c fix(deps): update rust crate netlink-sys to 0.8.5
40695e6 dhcp-proxy: create socket directory only when used
fe9ca67 dhcp-proxy: do not remove socket when running under systemd
dca3d53 Makefile: netavark-dhcp-proxy.service use correct path
71d128a fix(deps): update rust crate http to 0.2.9
5d85d4e chore(deps): update rust crate once_cell to 1.17.1
08d163e fix(deps): update rust-futures monorepo to 0.3.28
0370986 fix(deps): update rust crate serde_json to 1.0.95
2d7cb2a chore(deps): update dependency containers/automation_images to v20230330
9fd64cf Disable Dependabot in favor of Renovate
5ed1430 chore(deps): update rust crate chrono to 0.4.24
3f3a73e build(deps): bump ipnet from 2.7.1 to 2.7.2
1b8d361 build(deps): bump serde from 1.0.158 to 1.0.159
a3d7d79 build(deps): bump serde_json from 1.0.94 to 1.0.95
4f0dcc0 update,main: dont write empty space when no network_dns_servers is given
9532644 fix(deps): update rust crate tokio to 1.27
5ea45b7 Quit Leasing when Client disconnects
b2aeb6c build(deps): bump mozim from 0.2.1 to 0.2.2
f36ff11 iptables: fix incorrect debug statement
cdf27dc build(deps): bump serde from 1.0.156 to 1.0.158
8a1975a iptables: port fw handle wildcard address correctly
ab6c621 chore(deps): update dependency containers/automation_images to v20230320
2f38b17 build(deps): bump zbus from 3.11.0 to 3.11.1
99142bf build(deps): bump anyhow from 1.0.69 to 1.0.70
e42393c [CI:BUILD] Packit: trigger builds on commit to main branch
c30f461 Cirrus: Invalidate v2 bin cache
28c63f2 Include Systemd Files in RPM Package
8ec9d4b Cirrus: Fix success failing on artifact extraction
95c6fc4 fix lint issue with new rust version 1.68
d84e415 Cirrus: Update to newer CI VM images
c637b1a build(deps): bump serde from 1.0.152 to 1.0.156
ca27aa6 combine dhcp-proxy and netavark into one binary
cecef1e update: should allow empty network_dns_servers
07dfcae build(deps): bump libc from 0.2.139 to 0.2.140
bf22c29 fix aarch64 ncat flake
98f18b8 update to mozim 0.2.1
64bb7f0 build(deps): bump zbus from 3.10.0 to 3.11.0
4199dc0 packit: Update build release tag correctly
de88f04 test: move proto option into run_nc_test()
91f3bfb test: add netns pid param to port checks
eea98ee test: import podman code to check for ports
9d070c8 cirrus.yaml: add new binaries in art_prep_script
bca5370 fix netavark-dhcp-proxy binary in system unit
31b4bb4 import netavark-proxy-dhcp tests
c599b2e add build_proxy_client target
c76e257 add netavark-dhcp-proxy to rpm
a8cff4d Fix dhcp-proxy build
8dc8c96 Merge nv-dhcp-proxy into nv
3a365ed fix default route metric test name
ad222b7 build(deps): bump tokio from 1.25.0 to 1.26.0
c505c58 Support none parameter on NETAVARK_FW
2272042 build(deps): bump anyhow from 1.0.68 to 1.0.69
2798f06 Fix typos
88a2a7a update netlink-packet-{route,core} to 0.15 and 0.5
216f6f6 build(deps): bump serde_json from 1.0.92 to 1.0.93
bbbec75 build(deps): bump zbus from 3.8.0 to 3.10.0
70d6f33 [CI:BUILD] Packit: initial enablement
065243d Allow custom cargo binary path
5ce550d build(deps): bump serde_json from 1.0.91 to 1.0.92
781b84e Cirrus: Reduce requested CPUs for compile-tasks
9deb91b bump to version 1.0.6-dev
dbdeb9a v1.0.5 release
43c9bf2 release notes updates for v1.0.5
97f91f0 build(deps): bump netlink-sys from 0.8.3 to 0.8.4
b8fae87 build(deps): bump tokio from 1.24.1 to 1.25.0
3919e0f build(deps): bump zbus from 3.7.0 to 3.8.0
f688710 Switch to explicit platform list for `cargo vendor-filterer`
67b7da4 Add renovate.json5
c02fb16 Convert a few words to more inclusive
102b81c build(deps): bump nix from 0.26.1 to 0.26.2
60c08e9 Minor: Add script remote re-use comment.
dae850f Cirrus: Fix two minor typos.
c361afa Cirrus: Improve caching effectiveness
f11a8fc Fix UDS path
823e69b build(deps): bump ipnet from 2.7.0 to 2.7.1
c55b1b3 build(deps): bump tokio from 1.23.0 to 1.24.1
e7c41c8 build(deps): bump zbus from 3.6.2 to 3.7.0
d690d35 build(deps): bump serde from 1.0.151 to 1.0.152
5a19903 build(deps): bump libc from 0.2.138 to 0.2.139
040f3d6 add ipvlan support
058be67 fix lint issues for rust 1.66
2524e56 update CI images
8055fb4 build(deps): bump serde_json from 1.0.89 to 1.0.91
f80f417 Add ability for MacVLAN dhcp
a810489 build(deps): bump serde from 1.0.150 to 1.0.151
53c6774 build(deps): bump anyhow from 1.0.66 to 1.0.68
bcb52af CI: install mandown for validate
97e90a3 fix make docs
3eee824 build(deps): bump serde from 1.0.149 to 1.0.150
820d538 build(deps): bump sysctl from 0.5.2 to 0.5.4
753c3de build(deps): bump ipnet from 2.6.0 to 2.7.0
bd1bf8b build(deps): bump zbus from 3.6.1 to 3.6.2
a3f90ec build(deps): bump ipnet from 2.5.1 to 2.6.0
3a1ff24 lock: stop using yanked 0.8.13 crossbeam-utils
75b440c Cirrus: Add backup to aardvark-binary artifact DL
a03b7b1 Bump to v1.4.1-dev
c2a4b9a Release v1.4.0
0e3268b Update release notes for v1.4.0
011f899 release,make: add rule crate-publish for publishing crates.io
302828f main: Pass config_dir as `&str`
bb4c73d [skip-ci] GHA/Cirrus-cron: Fix execution order
d957601 build(deps): bump serde from 1.0.148 to 1.0.149
cece3d6 build(deps): bump nix from 0.25.0 to 0.26.1
354450f build(deps): bump libc from 0.2.137 to 0.2.138
8c1a071 build(deps): bump zbus from 3.5.0 to 3.6.1
7563db2 remove verify_vendor CI task
15894f3 chrono: use from_timestamp_opt
0c61f05 update: add support for netavark update command
2f0b025 Add nspath to commands
64d762f build(deps): bump serde from 1.0.147 to 1.0.148
d27588c build(deps): bump env_logger from 0.9.3 to 0.10.0
46f9f59 aardvark, netavark: support network scoped dns via network_dns_servers
c9cbc6a build(deps): bump serde_json from 1.0.88 to 1.0.89
84b9078 Drop now unneeded futures dep
c858e2f Make use of zbus::blocking wrappers
84a0ddd Port to zbus 3.5
a3c8156 Drop direct zvariant dep
03cb6a5 remove number of .clone() calls
581352c build(deps): bump serde_json from 1.0.87 to 1.0.88
9dad47a fix iptables teardown
d7d88da fix rust doc comments
effd448 GHA: Add cirrus-cron rerun job
ada06b4 fix new lint issues reported with rust 1.65
2af0d9f update CI images
f5d114d Correct dev version
34f1488 Bump to v1.3.0-dev
6df8139 Release v1.3.0
53a7b00 v1.3.0 Release notes
832098f run cargo update
d36af04 build(deps): bump ipnet from 2.5.0 to 2.5.1
e383f8d build(deps): bump env_logger from 0.9.1 to 0.9.3
0cc2556 macvlan modes: use upstream consts
e6d09ff macvlan: remove tmp interface when name already used in netns
0789f44 Add support for route metrics
52b1b08 Drop indirect dependency on time 0.1
72c42b6 netlink: return better error if ipv6 is disabled
980d68a macvlan: fix name collision on hostns
3c03dce build(deps): bump libc from 0.2.136 to 0.2.137
99459c1 build(deps): bump clap from 3.2.22 to 3.2.23
8247f46 Ignore dns-enabled for macvlan
bd18cb1 build(deps): bump libc from 0.2.135 to 0.2.136
3f7e75e build(deps): bump serde_json from 1.0.86 to 1.0.87
b65a35b build(deps): bump serde from 1.0.145 to 1.0.147
885f657 netlink: check sequence_number
795fa47 build(deps): bump anyhow from 1.0.65 to 1.0.66
61181e5 tests: add test for verifying multiple custom dns severs
95c982b tests: unskip exisiting test for custom dns server
698627b build(deps): bump futures from 0.3.24 to 0.3.25
6e04f79 netlink: improve error message on invalid netlink result
3aac0a0 NetworkOptions::load(): do not open /dev/stdin
f07cc04 use cargo-vendor-filterer to create vendor tarball
d89f4bd teardown: handle errors better
c9de5d0 error: remove unused equal code
c11c5f8 fix broken build
f6e0258 netavark ,aardvark: accept and populate custom dns_servers for containers
59be422 netlink: add del_{addr,route} calls
6646be4 error: NetavarkError use Into<String> Trait
0417eb8 netlink: add basic unit tests
454ebb3 bridge: do not set gateway for internal network
c017bfe README.md: remove latest release section
652d233 build(deps): bump libc from 0.2.134 to 0.2.135
3166b7b build(deps): bump serde from 1.0.144 to 1.0.145
ca5f4f6 build(deps): bump serde_json from 1.0.85 to 1.0.86
7c93f79 Do not use ipv6 autoconf #2
36a20bf fix test issues in podman
0fb6ddc improve error messages
96993f4 netlink: use low level sync api
4881651 add simple script to measure the netavark perfomance
4294bf6 Do not use ipv6 autoconf
0805420 build(deps): bump tokio from 1.21.1 to 1.21.2
060c6a6 Make build date reproducible
08c3152 Cirrus: Use images w/ fixed-in-time rust + clippy
3d4fe6b build(deps): bump libc from 0.2.133 to 0.2.134
7ab86f6 build(deps): bump clap from 3.2.8 to 3.2.22
cbc0a31 Bumping to v1.2.0-dev
90cccc1 Release v1.2.0
We also refresh one patch, and add protobuf-c as a build depenency
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
4ecc9488d1 |
lxcfs: update to 5.0.4 and convert to meson
This is a large update to lxcfs, that includes a move to meson as the build backend. We drop a couple of uneeded patches, and add a new meson specific one as the detection of pid_* functions is failing. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Bruce Ashfield
|
6b10588476 |
lxc: update to 5.0.3
Bumping lxc to version lxc-5.0.3, which comprises the following commits:
cb8e38aca Release LXC 5.0.3
85d3f4b1d github: Update for main branch
d195603e3 CONTRIBUTING: add a note on AI generated code
54227bdb1 get_hierarchy: dont WARN about no usable controller
be7efff35 github: Add DCO/target tests
8751cd208 explicitly convert *mainloop_handler to __u64
c16bb5b71 tests: fix parse_config_file seccomp test
95ef57c73 src/tests: Fix container creation errors
30c79f8a7 rename functions which clash with libsystemd's
3801a6a3d mainloop: io_uring: disable IORING_POLL_ADD_MULTI
fba0ae071 terminal: make a terminal FDs non-blocking
1af412d2f file_utils: add fd_make_nonblocking helper
eaaf041f6 file_utils: rename fd_make_nonblocking to fd_make_blocking
d05fb8a45 setproctitle(): Handle potential NULL return from strrchr()
709d42691 make setproctitle()'s /proc/pid/stat parsing safe
b183d437b console-log test: make sure container is stopped before restarting
d638d5951 tree-wide: convert fcntl(FD_CLOEXEC) to SOCK_CLOEXEC
c12c0acb0 Allow fuse mounts in apparmor start-container.
c93418d98 Add support for squashfs images in oci via atomfs
3754e803f apparmor: don't try to mmap empty files
706ee25cd initutils: use PRIu64 for uint64_t in setproctitle
3cdd5078c lxc-net.in: fix nftables syntax for IPv6 NAT
97bf62247 Fix strlcat's return value checks
7c81572af Fix typo: bev_type -> bdev_type
727adc052 drop broken lxc-test-fuzzers
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
06e6947fc9 |
docker-distribution: update to 2.8.2
Bumping docker-distribution to version v2.8.2-2-g8728c52e, which comprises the following commits:
ab7178cc Pass BUILDTAGS argument to go build
a173a9c6 Add v2.8.2 release notes
483ad69d registry/errors: Parse http forbidden as denied
2b0f84df Revert "registry/client: set Accept: identity header when getting layers"
5f3ca1b2 Add release notes for 2.8.2-beta.2 release
e884644f Dockerfile: fix filenames of artifacts
ac6c72b2 Add 2.8.2-beta.1 release notes
ae58bde9 Fix gofmt warnings
3f2a4e24 update to go1.19.9
9c04409f [release/2.8] ignore deprecation of io/ioutil
3d8f3cc4 Dockerfile: update xx to v1.2.1
70db3a46 bump up golang version
db1389e0 dockerfiles: formatting
018472de dockerfiles: set ALPINE_VERSION
19b3feb5 Update to xx 1.1.1
14bd72bc Dockerfile: switch to xx
2392893b bump up golang v1.17
092a2197 [release/2.8] fix package name in Dockerfile
22a80503 fix(ci): use go install instead of go get
1d52366d Merge pull request #2815 from bainsy88/issue_2814
521ea3d9 Fix runaway allocation on /v2/_catalog
ad5991de Fix panic in inmemory driver
38018aeb Fix CVE-2022-28391 by bumping alpine from 3.15 to 3.16
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
3fe898899f |
crun: update to v1.8.6
Bumping crun to version 1.8.6-11-gd7ee549, which comprises the following commits:
c786d4c linux: simplify error handling
c972772 linux: do not write twice errors
74a3874 linux: use helper functions instead of custom read/write
35a0166 linux: define helper to ack on the sync socket
c3e518e libcrun: drop symbol for crun_make_error
080e560 features: use exported function libcrun_make_error
5c2dedc Make the spec file parseable without copr_username defined
73f759f NEWS: tag 1.8.6
26ef1e0 linux: add sync before sending mounts
71c53b0 RPM: Set Epoch only for Copr builds
ee0e405 tests: install procps-ng for podman tests
6a3d7a7 Packit: initial enablement
58bb52c tests: fix cpu-weight-systemd test under a user manager
ee111ae tests: skip test_uid_tty if no tty is attached
74dd5f9 tests: use get_crun_path() in oci_features
b160e2c cgroup-resources: allow setting swap to 0
19cd8aa ps: fix segfault with pids=NULL
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
08f58c3181 |
cri-tools: update to v1.27.1
Bumping cri-tools to version v1.26.0-279-gdd51f3b7, which comprises the following commits:
16975aba Make `haircommander` an approver
e3cc516b override path defaults for FreeBSD
f8f05611 Use `UserSpecifiedImage` for seccomp tests
a4110ef6 Bump github.com/onsi/gomega from 1.27.9 to 1.27.10
2cffae40 Bump github.com/docker/docker
2d4e6c27 Bump github.com/onsi/gomega from 1.27.8 to 1.27.9
4a84e5a3 Bump github.com/opencontainers/runc from 1.1.7 to 1.1.8
28bbd92a Switch to logrus in favor of glog
edf8fd39 Update version in README
dafc2b62 Add `crictl runtime-config` command
01952e78 Use google/uuid
183c8fa3 Fix release notes job
cf42ba9f Drop support for docker log format
c1e6f2eb Bump Kubernetes to v1.28.0-alpha.4
fc7c11ed Bump github.com/docker/docker
fcb21b99 Revert "fix listCoontainerStats not filter"
ffb1ef1e Bump github.com/docker/docker
505d5ce7 Bump Kubernetes to v1.27.3
49cf12cb Bump golang.org/x/net from 0.11.0 to 0.12.0
0aa3049e Bump golang.org/x/sys from 0.9.0 to 0.10.0
e6438103 fix listCoontainerStats not filter
2ee62a09 Typo fix in critest
5b6b7180 Format print output in imagefsinfo cmd
b432bc8d Bump github.com/onsi/ginkgo/v2 from 2.10.0 to 2.11.0
d901bb43 Bump github.com/urfave/cli/v2 from 2.25.6 to 2.25.7
acc3f298 Bump golang.org/x/net from 0.10.0 to 0.11.0
5feab035 Bump github.com/urfave/cli/v2 from 2.25.5 to 2.25.6
90b22c75 Bump golang.org/x/term from 0.8.0 to 0.9.0
0b7c24b5 Bump google-github-actions/setup-gcloud from 0 to 1
5c28a488 Bump actions/upload-artifact from 1 to 3
c3a28fe2 add dependabot config to update github actions
806c66f9 update actions using node12
5e9d1f5d Add image build test to GitHub actions
b80b9bde Bump github.com/onsi/gomega from 1.27.7 to 1.27.8
8e03fbd3 Bump github.com/onsi/ginkgo/v2 from 2.9.7 to 2.10.0
a8ca78a0 Pin `FROM` images to tags
bde07883 Bump github.com/sirupsen/logrus from 1.9.2 to 1.9.3
5fd98895 Migrate to field based seccomp tests
5d362aa6 Bump github.com/onsi/ginkgo/v2 from 2.9.6 to 2.9.7
32ba4251 added testing on 1.7
b7e85c71 Bump github.com/onsi/ginkgo/v2 from 2.9.5 to 2.9.6
4714253b Update critest from 1.17 to 1.27
88a2b60b Bump github.com/urfave/cli/v2 from 2.25.3 to 2.25.5
63e39e26 Bump github.com/docker/docker
2c0f354e Bump github.com/docker/docker
aeea5099 Update the incorrect link to release page in crictl.md
ea559418 Bump github.com/onsi/gomega from 1.27.6 to 1.27.7
7ed308a3 Bump github.com/sirupsen/logrus from 1.9.1 to 1.9.2
f0bf767c Bump github.com/sirupsen/logrus from 1.9.0 to 1.9.1
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
791ffcd5df |
cri-o: update to 1.27.1
Bumping cri-o to version v1.27.1-7-gab7845e07, which comprises the following commits:
fbfca3a52 oci: update unit tests for new stop code
6dec88e7c oci: simplify stopping code
5b7b82f56 oci: don't return ErrContainerStopped from StopContainer
0e4df2e9c oci: change IsAlive to Living
92b455156 devices: fill the FileMode field in spec
e54504a00 version: bump to 1.27.1
a61082768 vendor: drop podman replace and actually update runc
9c86a1269 vendor: bump runc to 1.1.6
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
c82deadd3b |
containerd: update to 1.7.2
Bumping containerd to version v1.7.3-2-g98e8e05b6, which comprises the following commits:
2eaeb3205 Fix ro mount option being passed
4cb2f1515 [release/1.7] Add release notes for v1.7.3
b461ecacf cri: memory.memsw.limit_in_bytes: no such file or directory
14328ae03 migrate to community owned bucket
b985f7ef1 update runc binary to v1.1.8
f7a20e17c Move logrus setup code to log package
7353c0286 ctr: update WritePidFile to use atomicfile
ae7021300 shim: WritePidFile & WriteAddress use atomicfile
186eb64b7 cri: write generated CNI config atomically on Unix
64c3dcd8e atomicfile: new package for atomic file writes
083f57160 capture desc variable in range variable just in case that it run in parallel mode
a9440ce6b Use t.TempDir instead of os.MkdirTemp
eea3440d8 use strings.Cut instead of strings.Split for parsing imageConfig.User
eace67180 fix userstr for dditionalGids on Linux
973778193 Update Go to 1.20.6,1.19.11
60a6db9c2 Cirrus CI: configure apt-get to wait for locks
6b6b0c828 bugfix(port-forward): Correctly handle known errors
898eca21e Change http.Header copy to builtin Clone
fa2efc406 Resolve docker.NewResolver race condition
241514815 pkg/cri/server: Test net.ipv4.ping_group_range works with userns
801e8c806 pkg/cri/server: Fix net.ipv4.ping_group_range with userns
d5639a5a8 vendor: github.com/containerd/zfs v1.1.0
403033e52 update go to go1.20.5, go1.19.10
15d65709e ci: remove libseccomp-dev installation for nightly
a08ae718c [release/1.7] go.mod: Update cgroups to 3.0.2
c2c54af9d Update ginkgo to match cri-tools' version
6281d46df seccomp: always allow name_to_handle_at
3bf3996d9 integration/client: add timeout to `TestShimOOMScore`
699d6701a Pinned image support
18c6503d9 runtime/v2/runc: handle early exits w/o big locks
dafbeb5b1 No more nondistributable layers in MS registry
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
7867b58ca2 |
conmon: update to 2.1.7
Bumping conmon to version v2.1.3-74-g75f8ceb, which comprises the following commits:
fa67ce6 ensure console socket buffers are properly sized
2902909 Remove lgtm badge
2832e4f chore(deps): update dependency containers/automation_images to v20230614
7a7c893 log fds more permissive
c26648e Fix close_other_fds on FreeBSD
ebc6717 chore(deps): update dependency containers/automation_images to v20230601
8225789 chore(deps): update dependency containers/automation_images to v20230517
dcee6fb Update nixos image and dependencies' version.
e907fdc Changes to build conmon for ppc64le
5510eb0 fix compile regression on FreeBSD
be144a1 chore(deps): update dependency containers/automation_images to v20230426
3fcc1d2 Packit: update config
676e86d ctrl: fix a debug statement
b7aa7b1 [skip-ci] Update actions/setup-go action to v4
d8bf969 [skip-ci] Update actions/checkout action to v3
53debe6 [skip-ci] Update actions/cache action to v3
758ff5a vendor: bump to latest packages
44448e7 fix(deps): update module github.com/containers/libpod to v4
95ecbf5 chore(deps): update dependency containers/automation_images to v20230405
3b447bc conmon: drop return after pexit()
d637b73 ctrl: make accept4 failures fatal
cbc7c40 cmsg: recvfd returns an error on failures
0251765 cmsg: fix program name
5fcb8da ctrl: on EINTR retry accept4
08c34bd Add renovate configuration
9a3af8f logging: avoid opening /dev/null for each write
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
63dd08bf86 |
buildah: update to 1.31.1
Bumping buildah to version v1.31.1-3-g0cc7680cc, which comprises the following commits:
806fcccee CI:BUILD] RPM: define gobuild macro for rhel/centos stream
a3056cacd [release-1.31] Bump c/common
d0de60bbf Bump 1.31.0
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
c08591fd7d |
aardvark-dns: update to v1.7.0
Bumping aardvark-dns to version v1.7.0, which comprises the following commits:
d27d3b3 release v1.7.0
b6a270b Update release notes for v1.7.0
099f5d4 fix(deps): update rust crate tokio to 1.29.0
47219ee fix(deps): update rust crate clap to 4.3.8
1648525 fix(deps): update rust crate clap to 4.3.5
5d9add2 run cargo update
03fc574 [CI:BUILD] Packit: add Fedora downstream tasks
ed141a4 fix(deps): update rust crate clap to 4.3.4
4facdac chore(deps): update dependency containers/automation_images to v20230614
ffdfd7b fix(deps): update rust crate clap to 4.3.3
7d9827a fix(deps): update rust crate log to 0.4.19
ebd84ca fix(deps): update rust crate clap to 4.3.2
bdf07b1 fix(deps): update rust crate clap to 4.3.1
93a0f4f cirrus: remove verify_vendor task
90038b0 chore(deps): update dependency containers/automation_images to v20230601
8709a43 fix(deps): update rust crate trust-dns-server to 0.22.1
f22fc51 chore(deps): update rust crate chrono to 0.4.26
2163d08 fix(deps): update rust crate tokio to 1.28.2
d7b61ec fix(deps): update rust crate log to 0.4.18
fde8e1a chore(deps): update rust crate chrono to 0.4.25
a0ac881 fix(deps): update rust crate clap to 4.3.0
d298585 chore(deps): update dependency containers/automation_images to v20230517
4c29222 fix(deps): update rust crate tokio to 1.28.1
3358de3 chore(deps): update dependency containers/automation_images to v20230426
c4deaf8 fix(deps): update rust crate clap to 4.2.7
4dd6a17 fix(deps): update rust crate anyhow to 1.0.71
140846f fix typo in makefile
8cd804a fix(deps): update rust crate tokio to 1.28.0
15db510 fix(deps): update rust crate clap to 4.2.5
e322d2c fix(deps): update rust crate syslog to ^6.1.0
f591500 fix(deps): update rust crate clap to 4.2.4
7961a9b fix(deps): update rust crate clap to 4.2.3
e6ce1a5 fix(deps): update rust crate clap to v4
40bcf9e chore(deps): update dependency containers/automation_images to v20230405
c09d67b bump to v1.7.0-dev
fb411dd v1.6.0 release
619c232 Update release notes for v1.6.0
63bdcac fix(deps): update rust crate tokio to 1.27.0
f587536 use lower TTL for contianer entries
234e75b fix(deps): update rust crate syslog to ^6.0.1
21d7555 fix(deps): update rust crate futures-util to 0.3.28
3067fd0 chore(deps): update dependency containers/automation_images to v20230330
4fb8f35 Disable Dependabot in favor of Renovate
bf19047 chore(deps): update dependency containers/automation_images to v20230320
302b099 build(deps): bump futures-util from 0.3.26 to 0.3.27
35c5bab [CI:BUILD] Packit: trigger builds on commit to main branch
075e095 build(deps): bump anyhow from 1.0.68 to 1.0.70
cc81866 fix lint issue with new rust version 1.68
3555692 Cirrus: Update to newer CI VM images
65d68c8 build(deps): bump chrono from 0.4.23 to 0.4.24
abb9cf7 build(deps): bump libc from 0.2.139 to 0.2.140
dec9b98 build(deps): bump async-broadcast from 0.5.0 to 0.5.1
de81a25 build(deps): bump signal-hook from 0.3.14 to 0.3.15
d41f573 build(deps): bump futures-util from 0.3.25 to 0.3.26
5438208 build(deps): bump tokio from 1.25.0 to 1.26.0
dfea9a8 [CI:DOCS] Clarify packit related comments
62737ec [CI:BUILD] Packit: initial enablement
ff56126 Allow custom cargo binary path
0049b88 Switch to explicit platform list for `cargo vendor-filterer`
c30a24d bump to v1.6.0-dev
65480f4 v1.5.0 release
24350c4 update release notes for v1.0.5
997ab9a build(deps): bump nix from 0.26.1 to 0.26.2
8ff094a build(deps): bump tokio from 1.24.2 to 1.25.0
4769592 Add renovate.json5
938e1bb build(deps): bump tokio from 1.24.1 to 1.24.2
8f72cb9 Cirrus: Groom rust cache before updating
0763020 add code of conduct
36224d6 cargo: bump trust-dns-client and trust-dns-proto to 0.22
81def17 Cirrus: Add backup to netavark-binary artifact DL
ce45624 build(deps): bump tokio from 1.23.0 to 1.24.1
ef56659 build(deps): bump async-broadcast from 0.4.1 to 0.5.0
7425f56 build(deps): bump libc from 0.2.138 to 0.2.139
6f294d7 fix lint issues with rust 1.66
af49056 update CI images
860bd4c build(deps): bump tokio from 1.21.2 to 1.23.0
0431acc build(deps): bump anyhow from 1.0.66 to 1.0.68
6d22d42 Bump to v1.4.1-dev
65b9804 Release v1.4.0
bc265b0 Update release notes for v1.4.0
e632528 release,make: add rule crate-publish for publishing crates.io
563c2d7 silly pr to fix ci
33ceb7e [skip-ci] GHA/Cirrus-cron: Fix execution order
89b85bf build(deps): bump libc from 0.2.137 to 0.2.138
614d9df build(deps): bump nix from 0.25.0 to 0.26.1
01a9f18 config,coredns: add support for network scoped dns servers
26a3ae8 fix new lint issues with rust 1.65
3eace77 update CI images
bb0b151 GHA: Add cirrus-cron auto-rerun job
1c3798f build: stop using deprecated from_timestamp
34b2e76 cargo: bump chrono to 0.4.23
142af2c Fix dev version
87e26bd Bump to v1.3.0-dev
9254bb9 v1.3.0 Release
046f3cb v1.3 Release notes
36208f3 use cargo-vendor-filterer to create vendor tarball
612da2f build(deps): bump anyhow from 1.0.65 to 1.0.66
a5e4104 build(deps): bump libc from 0.2.136 to 0.2.137
e6dc1b4 build(deps): bump clap from 3.2.22 to 3.2.23
619a398 build(deps): bump libc from 0.2.135 to 0.2.136
d3cc7e0 test,helpers: refactor create_config to accept named args
c541311 cirrus,setup: show netavark binary being used by commit
044f425 aardvark-dns: add support for container's custom dns_servers
836d0bd build(deps): bump futures-util from 0.3.24 to 0.3.25
7c2774c Reduce tokio and futures-util features
d3b49a1 build(deps): bump libc from 0.2.134 to 0.2.135
496825e Cirrus: Update CI VM Images
096b1b7 build(deps): bump libc from 0.2.133 to 0.2.134
54bbab7 build(deps): bump tokio from 1.21.1 to 1.21.2
b417fee Bump to v1.2.0-dev
cb1a462 Release v1.2.0
b6d0679 backend,clippy: remove needless borrow from lookup logic
ad541ca Make build date reproducible
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Martin Jansa
|
81bd76bd18 |
nerdctl: fix installed-vs-shipped with usrmerge
* fixes: ERROR: nerdctl-v1.3.0-r0 do_package: QA Issue: nerdctl: Files/directories were installed but not shipped in any package: /bin /bin/nerdctl Please set FILES such that these items are packaged. Alternatively if they are unneeded, avoid installing them or delete them within do_install. nerdctl: 2 installed and not shipped files. [installed-vs-shipped] Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Martin Jansa
|
884c0bbbc0 |
kubernetes: fix installed-vs-shipped with usrmerge
* fixes: ERROR: kubernetes-1_v1.27.1+git2555e0f90e80a13628f47eca5cde34decc89babb-r0 do_package: QA Issue: kubernetes: Files/directories were installed but not shipped in any package: /bin /bin/k8s-init Please set FILES such that these items are packaged. Alternatively if they are unneeded, avoid installing them or delete them within do_install. kubernetes: 2 installed and not shipped files. [installed-vs-shipped] Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Bruce Ashfield
|
23373571e7 |
moby: update to v24.0.5
Bumping moby to version v24.0.5-20-g00e46f85f6, which comprises the following commits:
b7c5385b81 update to go1.20.7
6be708aa7d vendor: gotest.tools/v3 v3.5.0
b6568d2dd5 api/types/filters: fix errors not being matched by errors.Is()
02241b05fc update containerd binary to v1.7.3
3a6899c6fd update containerd binary to v1.7.2
7927cae910 c8d/container: Follow snapshot parents for size calculation
45ba926c6d daemon/list: Drop unused arg from containerReducer
6c4121a943 daemon/list: Refactor refreshImage
fcb68e55fa daemon/list: Replace ErrImageDoesNotExist check
3029f554cc c8d/readConfig: Translate c8d NotFound to errdefs
35a8b00b18 hack/integration: Add TEST_INTEGRATION_FAIL_FAST
fed26d5b3c vendor: github.com/moby/buildkit v0.11.7-dev
eede7f09c7 Remove Upstart scripts
907f838603 Remove Upstart and cgroups bits from Debian sysvinit script
f022632503 Dockerfile: update runc binary to v1.1.8
98a6422cbc c8d/inspect: Include platform Variant
aab94fb340 Dockerfile: update buildx to v0.11.2
1be48ec553 c8d: Make sure the content isn't removed while we export
ff0144de3b ci(buildkit): remove early-return from buildkit-ref
a936ae7e98 ci(buildkit): remove misleading code from buildkit-ref
4c29864b02 hack/with-go-mod.sh: warn on stderr
3c5c192baf c8d/resolveImage: Fix Digested and Named reference
572de8764e c8d/inspect: Don't duplicate digested ref
5dded3340c ci: extract buildkit version correctly with replace-d modules
bd1ae65aab quota: remove gotest.tools from testhelpers
544032f7a4 hack/d/cli.sh: properly handle errors in curl
0df2e1bdd8 Dockerfile: improve CLI/rootlesskit caching
05f82fdd00 Dockerfile(.simple): align APT_MIRROR support
151686a5c8 Makefile: pass through APT_MIRROR
31567e0973 Dockerfile: use default apt mirrors
d94f2dcab2 client: Client.postHijacked: use Client.buildRequest
bff68bf2cc client: Client.setupHijackConn: explicitly ignore errors
8bdf6d1baf ci(bin-image): add SHA-based tags
26a457e7a3 ci(bin-image): fix meta step
b9904ba319 ci(bin-image): fix typo
e7c333cb6e ci(bin-image): don't set tags when pushing by digest
fcb87e8ae1 ci: push bin image to Docker Hub
68c0cec772 Disable tls when launching dockerd through hack/make.sh
738d8417e0 libnet: Return a 403 when overlay network isn't allowed
a5c0fda157 libnet: Return proper error when overlay network can't be created
deea880581 pkg/jsonmessage: use string-literals for easier grep'ing
962a4f434f pkg/ioutils: use string-literals for easier grep'ing
cea5829402 pkg/idtools: use string-literals for easier grep'ing
69d77bc150 opts: use string-literals for easier grep'ing
ff667ed932 integration: use string-literals for easier grep'ing
efe9e90ef5 libnetwork: use string-literals for easier grep'ing
2d2df4376b daemon/cluster: use string-literals for easier grep'ing
ae8e3294dd client: use string-literals for easier grep'ing
892857179a cli/debug: use string-literals for easier grep'ing
147b87a03e daemon: use string-literals for easier grep'ing
a3f1f4eeb0 integration-cli: use string-literals for easier grep'ing
5bba60b1bb builder/builder-next: use string-literals for easier grep'ing
632fc235d6 builder/dockerfile: use string-literals for easier grep'ing
75a90f85ad gha: add note about buildkit using older go version
fa909dfaf4 update go to go1.20.6
bdaadec788 testutil: use dummyhost for non-tcp connections
547ea18fbb pkg/plugins: use a dummy hostname for local connections
597a5f9794 client: define a "dummy" hostname to use for local connections
fee4db80a0 client: TestSetHostHeader: don't use un-keyed literals
959889efd9 integration: Don't env cleanup before parallel subtests
6c5144d3e5 Add t.Helper() to the cli test helper functions
9ff2c3918c ci(buildkit): match moby go version for buildkit tests
a4b1a5aef4 vendor: github.com/moby/buildkit@v0.11 0a0807e
6c7f6c2d47 daemon/containerd: fix assignment to entry in nil map during commit
0e88c57c47 integration: disable iptables in parallel tests
a3049653c1 pkg/plugins: make unit test less time sensitive
d3893b58ff daemon: daemon.prepareMountPoints(): fix panic if mount is not a volume
5892aae60f docs: api v1.28 - v1.40: add missing "force" query arg on plugin disable
7adb590e16 docs: api v1.41: add missing "force" query arg on plugin disable
b5aacf8161 docs: api v1.42: add missing "force" query arg on plugin disable
b732cfd392 docs: api v1.43: add missing "force" query arg on plugin disable
50fb65f0f5 docs: api: amend changelog for API 1.28 for "force" option
32bcbdfe65 api: swagger: add missing "force" query arg on plugin disable
f66ef31605 docs: api v1.41: remove outdated information from ServerVersion
acb95e4544 docs: api v1.42: remove outdated information from ServerVersion
335ed29345 docs: api v1.43: remove outdated information from ServerVersion
0ef846ce2e api: remove outdated information from ServerVersion
af25852baa docs: api v1.42: remove "ClusterStore" and "ClusterAdvertise" fields
7a9c831e6a docs: api v1.43: remove "ClusterStore" and "ClusterAdvertise" fields
649bb2b9b8 api: remove "ClusterStore" and "ClusterAdvertise" fields
457399013b vendor: github.com/containerd/cgroups/v3 v3.0.2
016ad9b3e8 c8d/prune: Handle containers started from image id
87778af711 c8d/prune: Exclude dangling tag of the images used by containers
8bf037b246 c8d/softDelete: Deep copy Labels
8afe75ffa9 c8d/softDelete: Extract ensureDanglingImage
e2bade43e7 testutil/environment: Add GetTestDanglingImageId
e0091d6616 c8d: ImageService.softImageDelete: rename var that collided with import
42f3f7ed86 c8d: ImageService.softImageDelete: use OCI and containerd constants
aace62f6d3 pkg/fileutils: GetTotalUsedFds(): use fast-path for Kernel 6.2 and up
bb50485dfd pkg/fileutils: GetTotalUsedFds: reduce allocations
5dcea89ce1 pkg/fileutils: add BenchmarkGetTotalUsedFds
01eb4835c9 pkg/fileutils: GetTotalUsedFds(): don't pretend to support FreeBSD
cd44aba8db [24.0] pkg/fileutils: switch to use containerd log pkg
ee29fd944b gha: don't fail if no daemon.json is present
b8ee9a7829 c8d/images: handle images without manifests for default platform
d9e097e328 vendor: github.com/opencontainers/image-spec v1.1.0-rc3
806849eb62 seccomp: add name_to_handle_at to allowlist
c24c37bd8a Restore active mount counts on live-restore
c306276ab1 remove name_to_handle_at(2) from filtered syscalls
d5e31e03b6 gha: Setup Runner: add missing sudo
85ad299668 Dockerfile: make cli stages more resilient against unclean termination
e84365f967 Skip cache lookup for "FROM scratch" in containerd
96534f015d integration-cli: don't use pkg/homedir in test
6424ae830b Dockerfile: update buildx to v0.11.0
6055b07292 Fix missing Topology in NodeCSIInfo
2f379ecfd6 daemon: fix restoring container with missing task
136893e33b daemon: fix double-unlock in health check probe
290fc0440c daemon: fix panic on failed exec start
0556ba23a4 daemon: handleContainerExit(): use logrus.WithFields
35a29c7328 builder: pass host-gateway IP as worker label
210c4d6f4b daemon: ensure OCI options play nicely together
f50cb0c7bd daemon: stop setting container resources to zero
0a6a5a9140 daemon: modernize oci_linux_test.go
c92fd5220a c8d: mark stargz as requiring reference-counted mounts
5e48bbd14c contrib/busybox: Update to FRP-5007-g82accfc19
6776279896 daemon: registerName(): don't reserve name twice
7db3243e34 don't cancel container stop when cancelling context
aec7a80c6f c8d: Use reference counting while mounting a snapshot
5652c59647 testing: temporarily pin docker-py tests to use "bullseye"
aa47b29dbc vendor: github.com/moby/swarmkit/v2 v2.0.0-20230531205928-01bb7a41396b
Bumping libnetwork to version v0.7.0-dev.3-1874-g67e0588f, which comprises the following commits:
11eaf1f0 sync MAINTAINERS file with new moby maintainers
dbbf124d Clean up inDelete network atomically
Bumping docker-cli to version v24.0.5-6-gb74562d91, which comprises the following commits:
c0e376854 update to go1.20.7
1481c8ce9 vendor: gotest.tools/v3 v3.5.0
e97c76557 vendor: github.com/docker/docker v24.0.5
1ee40e2c7 configfile: Initialize nil AuthConfigs
3bd6d6902 Dockerfile: update buildx to v0.11.2
05bf7fbcc vendor: github.com/docker/docker v24.0.5-0.20230718221249-d4a26c153000
8b5023dd2 vendor: github.com/docker/docker v24.0.5-0.20230717072055-8443a06149b5
2a6348d1b Dockerfile: update buildx to v0.11.1
f4782b325 update go to go1.20.6
7d06f6b2f vendor: github.com/docker/docker v24.0.5-0.20230714235725-36e9e796c6fc
1447974b8 docs: rephrase section on credential stores for docker login
46293e97f Dockerfile: update to xx 1.2.1
bfe2ff820 cli/container: Don't ignore error when parsing volume spec
b40742962 vendor: github.com/docker/docker v24.0.4
79c42c0b9 vendor: golang.org/x/net v0.10.0
a96d0a526 vendor: golang.org/x/text v0.9.0
5c5c50d71 vendor: golang.org/x/term v0.8.0
4bf11b756 vendor: golang.org/x/sys v0.8.0
224c7dbec vendor: github.com/sirupsen/logrus v1.9.3
e25d5c64c vendor: github.com/opencontainers/image-spec v1.1.0-rc3
419e94df4 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230531205928-01bb7a41396b
2d5f041bd commandconn: return original error while closing
520e3600e commandconn: don't return error if command closed successfully
cd68c8f00 docker info: fix condition for printing debug information
a78fd6ca6 docs: update link location for the overlay driver
9cd335d44 docs: fix static ip example, network needs a subnet
d61e4fe87 docs: fix broken link
8e3a2942a cli/command/context: don't use pkg/homedir in test
c3ef1cead docs: update the runtime configuration section
44eebb8bc Dockerfile: update buildx to v0.11.0
7ecfa2e7f Dockerfile: update gotestsum to v1.10.0
f11f30909 update go to go1.20.5
3a6c11773 Dockerfile: update ALPINE_VERSION to 3.17
11af1189d docs: add "--detach-keys" example to docker run reference
f118c05e8 docs: move "--detach-keys" example to examples section
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
ade1182494 |
docker-compose: switch branch to main
The upstream repoistory transitioned from master to main, and also deleted the v2 branch this recipe was using. Switch everything to main until (if?) new versioned branches appear. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Leonard Anderweit
|
23ce17f66c |
podman-compose: Add missing runtime dependency python-dotenv
Signed-off-by: Leonard Anderweit <l.anderweit@phytec.de> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Bruce Ashfield
|
58ef402d44 |
skopeo: update to 1.13.0
Bumping skopeo to version v1.13.0, which comprises the following commits:
8b9999e1 Bump to v1.13.0
4de3a90f proxy: Policy verification of OCI Image before pulling
e9303879 Update module github.com/opencontainers/image-spec to v1.1.0-rc4
3d8d2128 Update module github.com/containers/common to v0.55.1
bfa04ea2 Update module github.com/containers/common to v0.54.0
1d5458fa Update module github.com/containers/image/v5 to v5.26.0
290a7630 [CI:BUILD] RPM: fix ELN builds
d72d53cc Update module github.com/containers/storage to v1.47.0
0297033e Packit: easier to read distro conditionals
03a19132 Update dependency golangci/golangci-lint to v1.53.3
c04ee48b Help Renovate manage the golangci-lint version
37a81ea7 Minor: Cleanup renovate configuration
e2174f17 Update dependency containers/automation_images to v20230614
ceeeb67e Update module golang.org/x/term to v0.9.0
411e9838 [CI:BUILD] Packit: add jobs for downstream Fedora package builds
deee28a9 Update module github.com/sirupsen/logrus to v1.9.3
574b2cc4 Update dependency containers/automation_images to v20230601
73e7618d Update golang.org/x/exp digest to 2e198f4
1c738806 Update github.com/containers/image/v5 digest to e14c1c5
2e07073c Update module github.com/stretchr/testify to v1.8.4
c06aa5c6 Update module github.com/stretchr/testify to v1.8.3
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
feb1d78952 |
crun: update to v1.8.5-tip
Bumping crun to version 1.8.5-40-g56d9d9a, which comprises the following commits:
19cd8aa ps: fix segfault with pids=NULL
d006733 features: add wasm annotation
935f4fe tests: add test for oci_features
366af73 src/*: implement features
21b1733 Makefile.am: update clang-format command
9e5a749 libcrun: report when status file not found
84a6599 libcrun: crun_path_exists distinguish ENOENT
ef224f9 docs: remove module.wasm.image/variant=compat annotation
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
1fc1b1935f |
podman-compse: update to v1.0.6
Bumping podman-compose to version v1.0.6, which comprises the following commits:
f6dbce3 version 1.0.6
dfb64d8 fix pylint
990f774 fix pylint
5e518c7 #648: check if sed exists to color logs
9046f7e #634: follow up
ef55067 add support for network priorities
ed2a6c0 Support network_mode: none
b4c0792 Add --remove-orphans on down command
e84451f Allow environment parameters without value
456370b Support build secrets
efe3714 Add support for the `group_add` property of a service.
c55a2f4 Fixes #657: Support act and developer-friendly environment
b8a7593 #154: timeout
bd29ddb #154: no -t for start
38219eb FIXES #154: handle stop_grace_period
08ffcf6 updating test_podman_compose_extends_w_file_subdir to use the correct image name
801faea Bump actions/setup-python from 2 to 4
06da966 Bump actions/checkout from 2 to 3
de3f607 Check for github actions updates weekly
db1861d pull: accept service names as positional arguments
9d5b255 Use top-level name property as project name if user doesn't set one explicitly
2d05c5c FIXES #534: add systemd unit label
3c46016 FIXES #534: add systemd unit label
5b9cfe5 implement services.*.build.tags
8d1a4d7 Implemented basic Bash shell completion
859f03c Add healthcheck.disable support
ae6be27 reformat
ccdb98c implement podman kill command
909d05e reformat
0cf98c7 reimplement the of pause and unpause commands
843b876 fix typo
1188463 fix Typo podman-composer in version command
10580db Add pause,unpause commands support
f7d335d #516: allow empty network
4a73ae8 FIXES #511: ipv6
f674ab8 #512: only use --net when bridge
265e0ca #512: only use --net when bridge
92662f3 FIXES #511: ipv6
42c0078 mac_address with dash
da5ee72 reformat
06fc071 reformat
9eda56c FIXES #507: respecte mac_address
13c8981 Fix help message for systemd subcommand
ee7029f reformat
75033a4 add python demo example
c175fd1 reformat
d479001 reference awesome-compose
a2defdd example wordpress
c55cd67 #307: default to /etc/
eed38ce Fixed accidental deletion of project functionality.
86ffad8 Added port subcommand.
118d39b Fix linter errors
814bd2a Support driver_opts for networks
606b9d9 Simplify var assignment
0057a4b Fix default external name in dict case
8ecb749 Update external volume name management
d983056 Update external volume name management
ed302ca Fix external volume name when no name provided
0b5c844 Add runtime error if no external volume exists
9c29c89 FIXES #486: replace realpath with abspath
89d2062 Fixed some spelling and grammar issues
f42b568 Correct the help text for --pod-args
a1d3ba4 Lint fixes for --services flag handling in config
6be661f Support platform property
fc3598f Allow --services in config
fbff315 FIXES #464: accept -v in run
fc34703 format
c7ada82 format
5e286f6 format
3dd8b05 format
3ecb4b5 FIXES #462: fix extends merge
d05cad4 FIXES #462: fix extends merge
ebb3dfe #452: better missing network message
7b99b38 nethost test
4ef8afc hit counter with redis cluster example
a1aed09 GCR hello app
2cacf9c add echo example
4064c84 add azure vote example
0dde95a update gitignore
1be41b4 do not merge command array
105c27c example nodejs project
f820594 use exec for wait
8a72321 FIXES #409: detect changes and recreate
5293919 FIXES #409: detect changes and recreate
48a19f1 print more help with systemd
a9faabb print more help with systemd
3fb2b98 print more help with systemd
b35b7e4 add systemd -a list
1a72e1e add systemd -a list
b620311 FIXES #449: accept int port
bf8004b systemd unit file
cadf046 fix pylint
8d8149c fix pylint
3dd9817 fix pylint
0b469e0 format
9e3020a FIXES #307: systemd command
fc9ed19 wait command
2d6bb52 FIXES #442: allow --no-pod or custom --pod-args
7942a09 FIXES #442: allow --no-pod or custom --pod-args
701311a FIXES #447: support --env-file
d704915 FIXES #447: support --env-file
3b7bf81 remove unused test
a735aa5 Fix inverted condition in merging arguments
b785095 Fix linter issues
7623180 Force black formatting
af10345 FIXES #440: absolute secret
2d1bcdd update readme
4f02567 add unit tests
0645212 add badge
b7c5609 pylint
4450835 pylint
5c33e4e pylint
cbd6f6b pylint cleanups
de1e59d fix some pylint
2f0ca9e add pytest ci
59c9a69 add pylint
b7eac1e pylint
0d47e47 activate test
c2d7b26 #434: handle unknown service
1e895c0 calc proper hash
132a22b #130: handle nested extend and normalize build context
0bde01d remove unused imports
91a579b Adding Test that the changes can build Image from build context of extended compose-file
56b8863 Fixing subdirectory from extends where extended service will build a Service from Dockerfile in an own subdirectory
5c3ec5f FIXES #431: support dns
779198b #379: no infra container
40cb6a7 log version
4fd9d86 #379: nothing shared in the pod to allow hostname
2a2c3a0 Fix timeout value data type
80e8527 #379: create a pod
d6e21dc FIXES #425: pass --requires
b9b2f83 FIXES #415: allow network_mode=slirp4netns
9af65ea adjust comment
3e6e268 test for logs
af6a306 fix syntax error without a new line
68f745f referenced unmerged pr #192 to bring colors into container logging
90dcfdb FIXES #420: document -t
ed8635a FIXES #422: Remove debug print
1d972ef Propagate all bind-type mount options
536925c FIXES #413: parse network_mode: container:container_name correctly
09c6cbe FIXES #408: preserve exit code
154a512 FIXES #386: make sure volumes are present in top level
523d215 #407: allow network_mode=service:mysrv
25494b5 Update README.md
19662c0 Fix healthcheck test type on replicas
4943e52 #395: make podman respect PODMAN_* in .env
4aa08cd FIXES #399: pass specific ip
15e0ab9 FIXES #397: support host network mode
f66861f #249: read COMPOSE_PROJECT_NAME env
af53b65 Simplify volume identification
890c584 Update README.md
0bd493f Allow empty default/error value in substitution
481c6d0 #394: config: multiple yaml
31df70b updated per maintainer review
df40051 removes version from CONTRIBUTING
21a716c added log back in
f00ac92 added config command
0433410 added args for version
0f9fe2b FiXES #393: missing arg when build as part of run
a1be5ce add fallback to get
56a4988 Add support for volume driver and options
377b552 Fix substitution for empty variables
c50599c FIXES #388: do not force build in run
4557279 #88: multiple aliases
7ad3775 FIXES #380: output to stderr
30051c2 Update README.md. Add link to podman dns plugin source
9e8e25c #378: down -v
2c60516 fix hostname in test
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
2a4b72b3a2 |
podman: update to 4.6
Bumping libpod to version v4.6.0-rc1-6-g932b8a997, which comprises the following commits:
c422072b6 [CI:DOCS] uidmap man pages: fix corrupt tables
7680e5013 libpod: use new libcontainer BlockIO constructors
829b3e9b3 Bump to v4.6.0-dev
4d59a0f5c Bump to v4.6.0-rc1
e4a7923ca Bump to v4.6.1-dev
c756b24f4 Bump to v4.6.0
2e53a5083 Release notes for v4.6.0
727362bde Update Release Notes for v4.5.1
8f2b73b03 rootless: use default_rootless_network_cmd config
3bd4c6a10 tests: fix "Storing signatures" check
d5e8cc1d1 Fixes for vendoring Buildah
2203f2aa9 Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
a306eb5f6 Do not use deprecated hook functions from c/common
bf36f1139 Bump c/storage to v1.48.0, c/image to v5.26.1, c/common to v0.55.1, buildah to v1.31.0
a64016e17 pasta: Remove some leftover code from pasta bats tests
6feb179f4 pasta: Fix pasta tests to work on hosts with multiple interfaces
9cc19b055 fix(command): ignore `--format` in `podman search --list-tags`
714c3fe72 Use /proc/self/gid_map as intended, not uid_map
d29e33650 podman machine start: fix ready service
1a1602b72 Makefile: don't rely on the non-standard -r flag for ln
db91ce788 cmd/podman, pkg/domain/infra: sockets should live in /var/run on FreeBSD
82a4b0816 cmd/podman/system: add API server support on FreeBSD
2f25372de pasta: Create /etc/hosts entries for pods using pasta networking
9555446d3 RPM: Fix koji and ELN issues
0749d685a Cirrus: Update operating branch
dde6bcbca system tests: add and use _prefetch
0ee19f08c pkg/api: BufferedResponseWriter flush correctly
d0505d6ba pkg/api: top return error to client
1398cbce8 container wait: support health states
b680daa2d [CI:DOCS] Fix example on PublishPort
811867249 container wait API: use string slice instead of state slice
64153ace0 podman wait: update man page
a699ed0eb StopContainer(): ignore one more conmon warning
bd69b151f run,create: modify `--env-merge` behavior for non-existent vars
614c962c2 use libnetwork/slirp4netns from c/common
180cf0cf1 update c/common to latest
d0af5df89 e2e: use parallel-safe /dev subdirectories
aeff58e0b [CI:BUILD] Help Renovate manage the golangci-lint version
00292ae1c systests: test instrumentation
63dfe842b compat API create/pull: fix error handling
d54541894 compat API push: fix error handling
26721b0a0 GetSafeIPAddress(): discourage its use
810c97bd8 libpod: write /etc/{hosts,resolv.conf} once
13db83a00 e2e: fix one of the many log flakes
bb932cc84 cmd, push: expose --compression-level
459248337 vendor: bump containers/common
f4c514bff compat API container create: handle platform parameter
04a1cdfa9 refactor(machine): remove hard code
ae6e39076 vendor in latests containers/common
81e63227e fix(machine): throw `connect: connection refused` after set proxy
ec0924c6d [CI:BUILD] Packit: cleanups
65e5d2773 Add console mode to podman machine
ddcefc9b9 e2e: kube test: specify expected exit code
574e00d32 e2e --authfile test: fix test condition
f8f337501 chore(deps): update dependency setuptools to v68
84e42877a make lint: re-enable revive
aa453c4f1 make lint: re-enable ginkgolinter
2efa7c3fa make lint: enable rowserrcheck
f07aa1bfd make lint: enable wastedassign
60a5a5947 make lint: enable mirror
a35da3ad8 bump golangci-lint to v1.53.3
47e0557d5 auto update: restart instead of stop+start
acb5f97f9 cmd/podman/root.go: fix help document issue of the image store
e5399aaf3 vendor: bump c/storage to v1.46.2-0.20230616083707-cc0d208e5e1c
3829fbd35 podman: add support for splitting imagestore
e29274853 network create --ip-range allow for custom range
c2360800e fix(ssh): start machine failed to start with exit status 255
ed24f0b2c remote wait: fix "removed" condition
8d036906a [CI:DOCS] Fix service_destinations description in podman man page
bfe61af6d quadlet should exit non zero on failures
91fc435cb fix(deps): update module golang.org/x/tools to v0.10.0
ef42f54ac e2e: GetSafeIPAddress() replaces GetRandomIPAddress
5ffbfd937 pasta: use code from c/common
479677cb6 Add support for setting autoupdate in quadlet
3efaffae4 New command: podmansh
67674b3a6 vendor: update c/common to latest
bdc2e8165 Add quadlet container support for Mask,Umask options
13c2aca21 libpod: make conmon always log to syslog
0ecc0d9e1 Document how to get secret mounts working on RHEL8
c28a43efd Verify podman pull dup image only prints id once
d464e1d4f Vendor in latests containers/common
741ad0b4f Apply suggestions from code review
f31466e74 Revert "rootlessport: exclude storage drivers via build tags"
8a90765b9 filters: use new FilterID function from c/common
de494eb05 logformatter: ignore 'TOP-LEVEL' headings
63f5116ad test/e2e: fix network ID test
8c48f97c9 update c/{common,image,storage} to latest
354b8e20b [CI:DOCS] clarify supported transports in manifest push
aa7a4219e [CI:DOCS] podman-push: rm confusion on supported transports
c0ab29313 container wait: indicate timeout in error
af7555e0d network-create: document new bclim option
7d2f722ef fix(deps): update module golang.org/x/text to v0.10.0
6f821634a libpod: Podman info output more network information
d0e2428fb fix(deps): update module golang.org/x/term to v0.9.0
ac0ba2c2c quadlet: adjust container unit documentation
837b47244 e2e: GetRandomIPAddress(): parallelize
676c4d4e8 Makefile: add support for 'make help' on FreeBSD
ab502fc5c criu: return error when checking for min version
16092930c Update docs/source/markdown/podman-systemd.unit.5.md
faa2689dc 250-systemd.bats: remove outdated comment
0714321de github: add issue type as link to podman-desktop
a66bab340 Add WorkingDir support to quadlet
ebf747474 rootlessport: exclude storage drivers via build tags
8bf168cc1 Add ability to set static routes
68183b07d test/upgrade: correctly share mounts between host and container
444f19cb2 Update common, image, and storage deps
ec6b7dbd9 Fix system service manpage name in API Documentation
d734fcbff style(specgen): omit nil check
53834ef0d fix(specgen): index out of range when unmask=[]
71cae3159 Makefile to force a shell when running command
02432fc69 cirrus,ci: default to overlay for debian env
b37f74b73 Quadlet: Add support for --sysctl flag
44ec044c4 chore(deps): update dependency requests-mock to ~=1.11.0
2ebc9004f Ignore spurious warnings when killing containers
7832879bf Makefile: don't hard-code the path for bash
de4b383ef fix(deps): update module github.com/burntsushi/toml to v1.3.2
a7271f9dd GHA: Fix bad job-names & links in monitoring emails
6a696cb8f podman-registry: simpler, safer invocations
f1ecdca4b Ensure our mutexes handle recursive locking properly
310082444 Fix an expected error message from pod removal
a750cd987 Fix a race removing multiple containers in the same pod
0e47465e4 Discard errors when a pod is already removed
398e48a24 Change Inherit to use a pointer to a container
b65ba90df e2e: add ginkgo decorators to address flakes
992093ae9 filters: better handling of id=
7bdbbd0ce fix(deps): update module github.com/onsi/gomega to v1.27.8
c7a8d29f1 refactor: improve get ssh path duplicate code
137c8ef4d logformatter: better recognition of ginkgo test names
944673c88 Address review feedback and add manpage notes
3b79f241b Add support for SecurityLabelNested flag in quadlet
a1c1d8d0a fix(deps): update module github.com/burntsushi/toml to v1.3.1
4fda7936c `system locks` now reports held locks
92309d917 fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.17
0948c078c Add a new hidden command, podman system locks
1013696ad Add number of free locks to `podman info`
3b39eb133 Include lock number in pod/container/volume inspect
1ce53677a fix ignition config creation
4584350f6 Makefile binaries target adopted for Mac and Win
e93b1f997 fix(deps): update github.com/crc-org/vfkit digest to 3d57f09
c51c6675e logformatter: proper status color for failed tests
cf9bc25bb pasta: Test handling of unknown protocols
b2c000670 pasta: Correct handling of unknown protocols
6611735ae Quadlet - add support for Pull key in .container
5b629e9c4 fix(deps): update module github.com/sirupsen/logrus to v1.9.3
d68121a60 Add default ulimit test for gen kube
81d64547f feat: add insecure registry troubleshooting solution
1768bf150 fix(deps): update module golang.org/x/tools to v0.9.3
7e550f78e fix(deps): update module github.com/coreos/stream-metadata-go to v0.4.2
28934897e e2e: GetPort(): safer allocation of random ports
2c9f18182 The removeContainer function now accepts a struct
4e6efbbbb Revert "test/e2e: fix "podman run ipcns ipcmk container test""
b75ff3a8f Add a test for removing dependencies with rm -fa
bafb3d6cc Revert "ginkgo-v2 cleanup workaround for #18180"
ef1a22cde Fix a deadlock when removing pods
8cb5d39d4 Pods now return what containers were removed with them
bc1a31ce6 Make RemoveContainer return containers and pods removed
e8d745627 Add an API for removing a container and dependencies
543b80949 systests: fixes for coping with extra systemd image
34c258b41 libpod: fix timezone handling
22424eb5d fix(deps): update github.com/godbus/dbus/v5 digest to 7623695
7987d2ee0 fix(deps): update module golang.org/x/tools to v0.9.2
4173f942f test/system: quadlet use correct systemd restart policy
0372bf4bd systests: minimize race-condition window
1a34e1f85 systests: fix improper backgrounding of run_podman
f09772889 set max ulimits for rootless on each start
5c7d50f08 Fix: display online_cpus in compat REST API
bd62119f3 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.6
72d4cede2 systests: fix race in quadlet tests
f48fa1113 fix(deps): update module github.com/burntsushi/toml to v1.3.0
88e78456d e2e: make BuildImage parallel-safe
370e1132c completion: fix panic in simplePathJoinUnix()
46456f5f1 Update module github.com/stretchr/testify to v1.8.4
585d715bb authfile.md: add default path of file for Windows/macOS.
01012a080 Update module github.com/rootless-containers/rootlesskit to v1.1.1
e3240c2fb hack: fix typo in hack/podman-registry
de92db0c8 man pages and command help: clean up descriptions
e6bfc81a8 RPM: bump gvisor-tap-vsock subpackage and fix packit scripts
dfba6ddd4 Man pages: fix broken tables
5b2d963c4 test/e2e: add regression testing for comma-containing labels
047a4bc83 fix: volume create filters
0be9887af fix: move filter flags from StringSliceVar to StringArrayVar
6bc52c9c5 pkg/rootless: correctly handle proxy signals on reexec
85b4c896b [CI:BUILD] Packit: set propose-downstream action type to pre-sync
8f94a4775 [CI:DOCS] fix Quadlet man page rendering
29f7c494e Quadlet: kube: use ExecStopPost
6487d9c11 Quadlet: kube: add ExitCodePropagation field
08b0d93ea kube play: exit-code propagation
6dbc13833 prune exit codes only when container doesn't exist
977b3cdbf podman: Add pasta to podman info
373919ca0 Revert "test/system/255-auto-update.bats: add debug logs"
901900530 Quadlet - add support for PodmanArgs to all groups
6003dca9c [CI:BUILD] Packit: add jobs for downstream Fedora package builds
fb8a12490 In a concurrent removal test, don't remove concurrently with builds
032d4a95f Consolidate error handling in Runtime.removeContainer
f556e58bb Consolidate error handling in Container.cleanupStorage
4969c552e Fix reporting errors on container unmount
94c65a659 TEMPORARY(?) instrumentation for unlinkat-ebusy
d623670e1 pkginstaller: bump Qemu to version 8.0.0
4108b3711 Support podman --remote when Containerfile is not in context directory
9969374b6 chore(deps): update dependency requests to ~=2.31.0
5f29c7bf9 fix: podman event --filter volume=vol-name should compare the event name with volume name
6b48e9962 fix(deps): update module github.com/docker/docker to v24
1b9272a06 wait: look for exit code in stopped state
7d831d555 network create/update: allow dns servers comma separated
685c73618 source code comments and docs: fix typos, language, Markdown layout
fe41077d4 Increase download progress to 80ch
8fbcf8bce chore(deps): update dependency setuptools to ~=67.8.0
29749362a podman: Added find slirp4netns binary file from helper_binaries_dir [NO NEW TESTS NEEDED]
2253f709b fix(deps): update module github.com/sirupsen/logrus to v1.9.2
7c53a463b stats: get mem limit from the cgroup
8e2e7a440 quadlet tests: enable device.volume test
bb3f611ff quadlet tests: remove unused socketactivated.container
18c3de596 fix(deps): update module github.com/stretchr/testify to v1.8.3
5d522431c Correct markdown in docs
76595c7b9 fix(deps): update module github.com/onsi/gomega to v1.27.7
a99ad3b36 [CI:DOCS] Improve security in mysql examples
99cedae31 Cirrus: Record the buildah version for reference
a54d4d7e1 test/e2e: do not call setenforce
458f2e8ed Fix discombobulated kubernetes support table
192ad70e9 run: ignore PODMAN_USERNS with --pod
5ff6fc559 Add --configmap to podman-remote kube play
ad8d0e57d compat: accept tag in /images/create?fromSrc
bf0cea76c fix HTMLSpan warnings
a576fa3f1 generate systemd: error on init containers
32c2cea0f Remove future tense from man pages
5b148a0a6 compat,build: pull must accept string
d1dcb0846 Cirrus: Add support for `[CI:NEXT]`
eb4f0bc17 Cirrus: Remove support for `[CI:COPR]` magic
3360214a0 system tests: add precision timestamps
8b4987266 Makefile: add ginkgo FOCUS/FOCUS_FILE options
4bed2c285 e2e: refactor and document serialization
ce07860a1 machine: fix default connection URL to use 127.0.0.1
a485ba505 e2e: serialize gpg tests
b9aaafbe1 Document podman-machine-default behavior
7580b8ae4 e2e: fix more test races (missing "wait")
6d58f5bb0 fix(deps): update module github.com/openshift/imagebuilder to v1.2.5
520979ba2 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.5
ae5cbf37c Fix documentation of `--network-cmd-path` CLI option
71853319f Skip rhel-release branch unnecessary CI tasks
ab29ff2f6 test/e2e: dedup Before/AfterEach nodes
d01ae436e remote-save: fix permissions and dir formats
5a176f09c Set machine docker.sock according to rootful flag
13f787842 Fix handling of .containenv on tmpfs
2c0f40482 Do not include image annotations when building spec
dd5d22cb3 build(deps): bump github.com/docker/distribution
26f1e95ab Kube Play - Support multi-doc YAML files for configmap argument
c33ba70f9 system tests: instrument, to try to catch unlinkat-ebusy
74a5b92b3 test: check restart policy of init containers
3aa6a792e Update sigstore/rekor after https://github.com/sigstore/rekor/pull/1469
04707f62d issue template: mention `su`
14001ad48 e2e: logs test: fix flakes
6b329d8c9 fix(deps): update module github.com/containernetworking/plugins to v1.3.0
ff37615bf e2e: stop podman.service test: wait for server
cb8e19677 logformatter: handle podman-machine test logs
58fd87959 fix(deps): update module golang.org/x/tools to v0.9.1
2d8929d95 [CI:DOCS] Disable Dependabot in favor of Renovate
01e20818c Ensure the consistent setting of the HOME env variable on container start
8aaa13acc Quadlet system tests - fix socket notification
1fb3cdf8a sqlite: disable WAL mode
d24bec0d0 system tests: timeoutize quadlet, systemd
3d6894426 test: update README for integration tests
c400cc7ea libpod/Container.rootFsSize(): use recorded image sizes
b97be3406 quadlet: support `HostName`
9dc107e74 e2e: fix race in a play-kube test
bdb3ed795 Fix preference of user quadlets directories
40b21fa7d fix(deps): update module golang.org/x/tools to v0.9.0
661a238a9 fix(deps): update module golang.org/x/net to v0.10.0
332b47fef Check on client side for Containerfile, if none specified
18cd174c9 build(deps): bump github.com/docker/docker
9ec630f30 Buildah treadmill: several fixes
11d92ea37 fix(deps): update github.com/containers/common digest to 3e93a76
1bf057e8c chore(deps): update dependency docker to ~=6.1.0
27891a664 Update docs/source/markdown/podman-systemd.unit.5.md
505e02e04 fix(deps): update github.com/containers/common digest to bc15b04
53220717e fix: initContainer restart policy overridden by pod
c27cda7c9 fix(deps): update module golang.org/x/sync to v0.2.0
773b45704 chore(deps): update dependency requests to ~=2.30.0
0c070ebfb ginkgo json output: only in CI, not on laptop runs
73d3487cc Allow user quadlets to be stored under /etc
334adac74 fix(deps): update github.com/containers/common digest to ea87b34
95557a532 libpod: do not Cleanup() more than once
df9344ac4 compat container create: match duplicate mounts correctly
42c822720 Update podman-completion.1.md
3d56e4f3a fix(deps): update github.com/containers/buildah digest to e925b58
75d92f41d Run generate.CompleteSpec() for initContainers as well
d25356c30 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.4
df8cc7af3 remote: return better connect error
61985a610 Add missing man page links for Docker man pages
f877d7dcd Replace egrep/fgrep with grep -E/-F
19aabf440 remote: exec inspect update exec session status
305bad184 fix(deps): update github.com/digitalocean/go-qemu digest to f035778
999c620d5 fix(deps): update github.com/godbus/dbus/v5 digest to 6cc540d
38f993543 fix(deps): update github.com/containers/buildah digest to f353690
1b2b0d031 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.3
dc7515dc3 MVP for Podman Machine with AppleHV
54fd0d752 e2e tests: try writing & preserving ginkgo json artifacts
1c5ab9e7b vendor: bump buildah to v1.30.1-0.20230501124043-3908816d5310
e1e03a0e3 bindings, build: don't pass invalid platform in case of none
ae5305134 Revert "logformatter: anchors: link to test summary, not name"
fbe62f329 More cleanup: volumes: do not export to stdout
3050a6437 e2e test cleanup
fa1ba17bc Update kube gen & play to use pod restart policy
db4ad54f9 Add {{.Restarts}} to podman pod ps
0fef113a4 Add {{.Restarts}} to podman ps
edbeee523 Add --restart flag to pod create
9e9bcec9e history: correctly set tags
073cd4bb4 fix(deps): update module github.com/moby/term to v0.5.0
3858a833b Makefile: do not run machine test in parallel
5af433923 pkg/machine/e2e: switch to GinkgoWriter
1720042d0 api: fix parsing filters
c4b9f4b34 ginkgo-v2 cleanup workaround for #18180
5eb99a0ac test/e2e: fix custom timing reporting
1bff0108f logformatter: anchors: link to test summary, not name
914ff01f9 WIP: logformatter: handle ginkgo v2 logs
b3424f370 test/e2e: unshare --rootless-netns cleanup slirp4netns
054154c77 test/e2e: run system reset test serial
c5922cc6f test/e2e: fix CleanupVolume/Secrets()
bc1ed07b5 ginkgo v2: fix new Skip() behavior
cd46e7279 test/e2e: fix pause tests to unpause before cleanup()
2ce4e935b ginkgo v2: drop localbenchmarks
fb7a96638 test/e2e: switch to GinkgoWriter
cc19091e9 test/e2e: unset CONTAINERS_CONF before Cleanup()
8cc7a3618 ginkgo: run on all cores
9c1f713c7 test/e2e: fix Cleanup()
9bd833bcf test/e2e: fix "podman run ipcns ipcmk container test"
629a6a6e4 test/e2e: actually check for cleanup errors
b9ba85044 Lower e2e timeout to not waste time when it hangs
fbb7c980a test/e2e: containers.conf tests add missing Wait()
c564d9d7a ginkgo v2: remove CurrentGinkgoTestDescription()
666e31447 ginkgo v2: remove deprecated flags
445815036 update to ginkgo v2
502654580 test/e2e: do not remove CNI directory
7b25f362e e2e: login_logout: use unique authfile for each test
d06480d99 Fix clashing subuid
24be46a51 [CI:DOCS] troubleshooting: fix subuid example
bab4217cd manifest, push: use source as destination if not specified
202701e65 Update github.com/moby/term digest to 0564e01
e8f34e457 Add name-generation test
b5ef9555a Implement machine provider selection
70870895b libpod: improve errors management in cleanupStorage
5592dc12f libpod: report unmount idmapped rootfs errors
2932208c2 test: do not wait 10 seconds before killing myyaml
891bc117e podman: simplify code with a switch
bac57409f test: fix typo
5fefb54d2 build(deps): bump github.com/docker/docker
0a92b399d swagger: fix Info name conflict
20c42489e Nightly dependency treadmill: remove
33fa54580 Update short description for disconnect cmd
aca993632 windows: podman save allow the use of stdout
512b39475 Update c/common and avoid setting umask
7ff2eaf96 Cirrus: Update CI VM Image to F38/37
0e1ddd3df Cirrus: Run code validation on rawhide
221e3023f Fix rand.Seed() deprecation in golang 1.20
edaf3b4d5 Add sha256: to images history id for docker compatibility
d51911f7b Support systemd optional prefix '-' for devices.
a0c7bb26a Fix a copy/paste error in an error message
ba4586375 chore(deps): update dependency requests to ~=2.29.0
d905e412e Fix simple typo in podman-network-create.md
a027bf102 e2e cleanup: push with auth: add error checks
eeb210bc5 e2e: remove "-it" from podman run & exec
64959b744 pkg/machine: rework RemoveConnection()
2296e71e3 machine: qemu only remove connection after confirmation
c8e423b55 Add file swith for pre-exec
6aaf6a284 system reset: show graphRoot/runRoot before removal
e95e9be76 fix manifest annotate help
bdf367958 Netavark userns test: give aardvark time to come up
bbe9d61c4 sqlite: move first read into a transaction
f3c3ef72d Recover from failed podman machine start
d222a392c rootless: support joining contianers that use host ns
0e955bec7 auto-update: return errors when checking for updates
fc8bd4521 [skip-ci] Update dawidd6/action-send-mail action to v3.7.2
ed6b19fef fix(deps): update github.com/containers/common digest to 46c4463
230ddbe0c Add user mode networking feature to Windows
3216110de system/reset.go: help: fix typo
ae5ed6d85 e2e create same-IP: try to fix flake
faeed14f6 system tests: safer container-stop signaling
6014f26c4 Revert "Resolve symlink path for qemu directory if possible"
c5a928c5b ps: --format {{.State}} match docker output
b4eecd908 test/system/260-sdnotify.bats: fix test flake
1361c6a33 [CI:DOCS] Quadlet: clarify overriding user/system services
fb3b92b96 Eliminate transient container deps from wslkerninst
dd217d8e0 Wording
d16c880fb fix(deps): update github.com/containers/common digest to 5547996
70bd096e4 cmd/podman/pods: omit superfluous runtime.NumCPU call
1f1525f2e support `--digestfile` for remote push
d640461ce e2e: skip journald test if journald is unavailable
5156ab996 Cirrus: Enable testing on Fedora rawhide
8a3265f65 [CI:BUILD] Cirrus: remove copr rpm build task
77f86f48e chore(deps): update dependency setuptools to ~=67.7.0
03a7c6a91 Cirrus: Drop benchmarks artifacts
15664b4b0 test/e2e: correctly reap service process
c9d861023 test/e2e: add missing options to remote service
1f45c715d test/e2e: fix incorrect usage of CreateTempDirInTempDir()
601d228ca test/e2e: "podman-remote send correct path to copier" do not leak file
08c651016 test/e2e: fix network create flake due same subnet
525c27fe1 test/e2e: fix SkipIfNotActive()
01d518a97 test/e2e: do not try to use docker as rootless
6e97976ad test/e2e: do not leak "hello" file
750442d09 podman-remote logs: handle server error correctly
3aaa2793d test/e2e: use custom network config v2
00fdfa063 rename ImagePushReport to ImagePushStream
81621ce8a Specify format to buildah before commit
7382494ca Add eBPF snooper that traces the entire fork/exec graph of podman
edb64f8a7 libpod: stop containers with --restart=always
0364aef1e test: fix race when listing cgroups
b65ab52d8 compat: Translate `noprune` into ImageRemoveOptions.NoPrune
346483717 [CI:DOCS] Update RELEASE_PROCESS.md
8019dc9e6 hyperv: add podman socket mapping
a089f1b5c e2e networking test: better way to get host IP
bce38c1af Updated system test to be easier to read
5f5bea0d1 bindings tests: bail out early on image errors
f2cec7348 libpod: fix TestPostDeleteHooks do not depend on version
8125bab9b chore(deps): update dependency setuptools to v67
a00ed20e0 fix(deps): update module github.com/containers/libhvee to v0.0.5
da83364eb e2e: quadlet uses PODMAN env for podman binary path
6e0cf9344 Fixes format inconsistencies with docker for certain history fields
acb24f164 Makefile: do not prefix /etc
7e4cd22ac libpod: configureNetNS() tear down on errors
4f93a6eee libpod: rootlessNetNs.Cleanup() fix error message
4b8230119 HyperV: wait on stop
3cdaf85d6 build(deps): bump github.com/docker/docker
459f751ae Makefile: include `release-artifacts` target
3222545ad Enabled network over vsock
aec7ce4a1 fix(deps): update module github.com/microsoft/go-winio to v0.6.1
64b26df60 fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.2
41d516412 fix remote start --filter
1cac53506 Update API reference to include v4.5
a0204f1dd Add missing security options to /info response
de5fa9ce9 Add mention of redir to doc `rootless.md`
08f137aec fix(deps): update module github.com/vbauerster/mpb/v8 to v8.4.0
8e7f98ae6 docs(readme): add status badges and remove hardcoded release info
e9356ba20 Don't use bytes.NewBuffer to read data
f488d9890 Add support for HVSOCK on hyperv
e7a323635 docs: update network tutorial with netavark DHCP support
32344952a bump main to v4.6.0-dev
54ba17f69 Remove disused test/install
1fa4e45a9 Return title fields as a list
be148665c [CI:BUILD] Packit: Initial Enablement
4aced7e3e Quadlet - do not set log-driver by default
51b582d0e system tests: address COPY-hardlink flake
25d4ecf47 chore(deps): update registry.centos.org/centos/centos docker tag to v8
31420112c system tests: fix race in kube-play read-only
f544971b7 chore(deps): update dependency docker to v6
f95276bfa CI: enable sqlite system tests
d28656403 test: enable test_wait_next_exit
f312c8533 Update dependency PyYAML to v6
f67d640b8 test/e2e/systemd_activate_test.go: simplify test
5315c0cc7 Update docker.io/library/golang Docker tag to v1.20
b4cfc727b api: auth: fix nil deref
176c329f9 Update dependency requests-mock to ~=1.10.0
b75ee05d3 Update dependency requests to ~=2.28.2
d38b22d50 fix: Document removing anonymous volumes at create
fe22299f9 Use a sane polling interval in WaitContainerDocker
bb2deef8e podman: added the --out option for capturing formatted output emitted by various commands
785c63c0f Renovate: Ensure release-note-none label is added
4bc4609d8 Renovate: Update ignore paths
64ea5971a *: migrate image registry to registry.k8s.io
4f5f89cf8 Do not display the resource limits warning message
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
b37f53350d |
buildah: update to 1.31
Bumping buildah to version v1.31.0, which comprises the following commits:
d0de60bbf Bump 1.31.0
723ed8e18 Bump c/common to 0.55.1 and c/image to 5.26.1
b835631bf Update vendor of containers/common
c4d2a8520 Run unit tests for copier and chroot without -cover
135b5a8f0 Fix transition test to work with latest selinux policy
d8b06097d Bump c/image to 5.26.0 and c/common to 0.54.0
7a5a18334 chore: replace `github.com/ghodss/yaml` with `sigs.k8s.io/yaml`
a8f350fc5 rootless: use default_rootless_network_cmd config
b3edcaa06 vendor: update c/{common,image,storage} to latest
d22a5293b chore: pkg imported more than once
74b885b9e buildah: add pasta(1) support
11ba328e2 use slirp4netns package from c/common
a5c0c8acf update c/common to latest
14cd28c26 add hostname to /etc/hosts when running with host network
eb135b8d5 vendor: update c/common to latest
237ac533e [CI:BUILD] Packit: add jobs for downstream Fedora package builds
eeaf80f95 fix(deps): update module golang.org/x/sync to v0.3.0
b064ad7f6 fix(deps): update module golang.org/x/crypto to v0.10.0
bdd27d393 Add smoke tests for encryption CLI helpers
b090ae238 fix(deps): update module golang.org/x/term to v0.9.0
fefbd04e5 fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.3
bd32a04c3 Remove device mapper support
92582a75c Remove use of deprecated tar.TypeRegA
261a524b9 Update tooling to support newer golangci-lint
6714a79eb Make cli.EncryptConfig,DecryptConfig, GetFormat public
b3e39dfd9 Don't decrypt images by default
14b74e7f8 fix(deps): update module github.com/onsi/gomega to v1.27.8
1d08bd9de fix(deps): update github.com/containers/storage digest to 3f3fb2f
0dac0dfa5 Renovate: Don't touch fragile test stuffs
d9ecd7c59 [CI:DOCS] Update comment to remove ambiguity
232230cae fix(deps): update github.com/containers/image/v5 digest to abe5133
4247a3e47 fix(deps): update module github.com/sirupsen/logrus to v1.9.3
925ff0e62 fix(deps): update module github.com/containerd/containerd to v1.7.2
5a83012c9 Explicitly ref. quay images for CI
9b65b12ae At startup, log the effective capabilities for debugging
3a351f603 parse: use GetTempDir from internal utils
6adbfeeb4 GetTmpDir: honor image_copy_tmp_dir from containers.conf
5eb356bb8 docs/Makefile: don't show sed invocations
a630e3513 CI: Support testing w/ podman-next COPR packages
90f7436ac intermediate-images inherit-label test: make it debuggable
08b9a5407 fix(deps): update github.com/containers/common digest to 462ccdd
7e327cf18 Add a warning to `--secret` docs
9cd28db91 vendor: bump c/storage to v1.46.2-0.20230526114421-55ee2d19292f
0766b004b executor: apply label to only final stage
beae5647c remove registry.centos.org
68337bf9c Go back to setting SysProcAttr.Pdeathsig for child processes
371bc34fe Fix auth.json path (validated on Fedora 38) wq Signed-off-by: Andreas Mack <andreas.mack@gmail.com>
c6e73322b fix(deps): update module github.com/stretchr/testify to v1.8.3
0b69f7029 CI: fix test broken by renovatebot
a5ad7b047 chore(deps): update quay.io/libpod/testimage docker tag to v20221018
86470bfd9 fix(deps): update module github.com/onsi/gomega to v1.27.7
91ce0571d test: use debian instead of docker.io/library/debian:testing-slim
7d9447b2f vendor: bump logrus to 1.9.2
e2b751a0b [skip-ci] Update tim-actions/get-pr-commits action to v1.3.0
d58d3a14b Revert "Proof of concept: nightly dependency treadmill"
911c3b5e8 fix(deps): update module github.com/sirupsen/logrus to v1.9.1
797f03430 vendor in containers/(common,storage,image)
ba8a1bd0e fix(deps): update module github.com/docker/distribution to v2.8.2+incompatible
0eb266a95 run: drop Pdeathsig
e8d11201a chroot: lock thread before setPdeathsig
51c03212e tests: add a case for required=false
00581b806 fix(deps): update module github.com/openshift/imagebuilder to v1.2.5
be682de68 build: validate volumes on backend
dcc7feb6f secret: accept required flag w/o value
ba06158ab fix(deps): update module github.com/containerd/containerd to v1.7.1
cad25dd6b fix(deps): update module golang.org/x/crypto to v0.9.0
dffb148b3 Update the demos README file to fix minor typos
efa0d69a2 fix(deps): update module golang.org/x/sync to v0.2.0
e0fe30e61 fix(deps): update module golang.org/x/term to v0.8.0
d5b32b0f0 manifest, push: use source as destination if not specified
2fed5fc91 run,mount: remove path only if they didnt pre-exist
4b1c5e3a9 Cirrus: Fix meta task failing to find commit
a913dc56a parse: filter edge-case for podman-remote
9252470c4 fix(deps): update module github.com/opencontainers/runc to v1.1.7
0019256f2 fix(deps): update module github.com/docker/docker to v23.0.5+incompatible
b37c4ee43 build: --platform must accept only arch
5e43f8c9d fix(deps): update module github.com/containers/common to v0.53.0
562172751 makefile: increase conformance timeout
4775b247b Cap suffixDigitsModulo to a 9-digits suffix.
07fda81df Rename conflict to suffixDigitsModulo
4bb28899e fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.2
411bdc968 fix(deps): update module github.com/opencontainers/runc to v1.1.6
d27c59f85 chore(deps): update centos docker tag to v8
43440ec6e Clarify the need for qemu-user-static package
c34fbea7c chore(deps): update quay.io/centos/centos docker tag to v8
449fd3d2e Renovate: Ensure test/tools/go.mod is managed
6d877d89d Revert "buildah image should not enable fuse-overlayfs for rootful mode"
e9884fc41 Bump to v1.31.0-dev
04965f119 Bump to v1.30.0
b5867198c fix(deps): update module github.com/containers/common to v0.52.0
41b760f97 fix(deps): update module golang.org/x/crypto to v0.8.0
9bd6ccf92 chore(deps): update dependency containers/automation_images to v20230405
d57638879 vendor c/common ff62cdebdd0e
f847463ed vendor in latest containers/(storage, image)
45940016c fix(deps): update module github.com/opencontainers/runc to v1.1.5
0ff4746c4 fix(deps): update module github.com/fsouza/go-dockerclient to v1.9.7
2e25b156f buildah image should not enable fuse-overlayfs for rootful mode
dcd7b789a stage_executor: inline network add default string
c8c37c78f parse: add support for relabel bind mount option
c95370cd3 build: pass process environment variables by reference
2ad68d816 run: pass process environment variables by reference
d45916350 fix(deps): update module github.com/containers/common to v0.51.2
a92fe130e chore(deps): update dependency containers/automation_images to v20230330
e67bddded fix(deps): update module github.com/docker/docker to v23.0.2+incompatible
20861cd21 chore(deps): update dependency containers/automation_images to v20230320
73dc43c1d fix(deps): update module github.com/onsi/gomega to v1.27.6
e3a30b54a fix(deps): update github.com/opencontainers/runtime-tools digest to e931285
374133c95 [skip-ci] Update actions/stale action to v8
ce8c56780 test: don't allow to override io.buildah.version
dfc9bb20e executor: only apply label on the final stage
946395494 Update docs/buildah-build.1.md
58a22053b update build instruction for Ubuntu
aad1e994a code review
3afa5ca74 build: accept arguments from file with --build-arg-file
8e84bb709 run_linux: Update heuristic for mounting /sys
78416393f [CI:BUILD] Packit: Enable Copr builds on PR and commit to main
e8dee4083 fix(deps): update module github.com/fsouza/go-dockerclient to v1.9.6
c0f0efada Update to Go 1.18
db0bafef3 Disable dependabot in favor of renovate
4055cc880 chore(deps): update dependency containers/automation_images to v20230314
2088f6bd7 Fix requiring tests on Makefile changes
b85a38946 Vendor in latest containers/(storage, common, image)
b6f32e576 imagebuildah: set len(short_image_id) to 12
499f1301f Re-enable conformance tests
fa145b092 Skip conformance test failures with Docker 23.0.1
bc2423ebc Cirrus: Replace Ubuntu -> Debian SID
37afb5dbc run: add support for inline --network in RUN stmt
e2210c3b7 vendor: bump imagebuilder to a3c3f8358ca31b1e4daa6
db509859d stage_executor: attempt to push cache only when cacheKey is valid
a35dbb284 Add "ifnewer" as option in help message for pull command
c1b82d195 build: document behaviour of buildah's distributed cache
f444d6589 fix(deps): update module golang.org/x/term to v0.6.0
376eb73ab Add default list of capabilities required to run buildah in a container
46ffaf935 executor,copy: honor default ARG value while eval stage
fd5db96c0 sshagent: use ExtendedAgent instead of Agent
9e6e15c31 tests/bud: remove unwated test
8a8f99e09 executor: do not warn on builtin default args
b9e4e29e9 executor: don't warn about unused TARGETARCH,TARGETOS,TARGETPLATFORM
0ed9b4c8c Fix tutorial for rootless mode
cf408f758 Vendor in latest containers/(common, storage, image)
0e707faa7 Ignore the base image's base image annotations
30f84c8ee fix(deps): update module github.com/fsouza/go-dockerclient to v1.9.5
05785ee57 build(deps): bump github.com/containers/storage from 1.45.3 to 1.45.4
21e6e91e4 Vendor in latest containers/common
0b7a7f80b docs/tutorials/04: add defaults for Run()
7baf73b2a imagebuildah.StageExecutor: suppress bogus "Pushing cache []:..."
be10b8d20 executor: also add stage with no children to cleanupStages
f9e51e744 [CI:BUILD] copr: fix el8 builds
8125e45a5 Fix documentation on which Capabilities are allowed by default
a8ed3bb58 Skip subject-length validation for renovate PRs
956c5155d Temporarily hard-skip bud-multiple-platform-values test
3afa7e360 fix(deps): update github.com/openshift/imagebuilder digest to 86828bf
4875f1bc9 build(deps): bump github.com/containerd/containerd from 1.6.16 to 1.6.17
36cade0c3 build(deps): bump tim-actions/get-pr-commits from 1.1.0 to 1.2.0
e0e43a419 build(deps): bump github.com/containers/image/v5 from 5.24.0 to 5.24.1
24b85d217 [skip-ci] Update tim-actions/get-pr-commits digest to 55b867b
f96e1ad4d build(deps): bump github.com/opencontainers/selinux
2ef59fc2c build(deps): bump golang.org/x/crypto from 0.5.0 to 0.6.0
482bf4df4 Add renovate configuration
4dfb82890 Run codespell on codebase
ae697555c login: support interspersed args for password
123ef1693 conformance: use scratch for minimal test
6a0367ff2 pkg/parse: expose public CleanCacheMount API
5d50a7320 build(deps): bump go.etcd.io/bbolt from 1.3.6 to 1.3.7
6d53ec7a3 build(deps): bump github.com/containerd/containerd from 1.6.15 to 1.6.16
dbf1d43b3 docs: specify order preference for FROM
2008a5302 Bump to v1.30.0-dev
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Peter Marko
|
489fa21681 |
skopeo: convert CVE_CHECK_IGNORE to new CVE_STATUS format
See https://git.openembedded.org/openembedded-core/commit/?id=34f682a24b7075b12ec308154b937ad118d69fe5 Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Peter Marko
|
07a578d49c |
podman: ignore CVE-2022-2989 and CVE-2023-0778
NVD shows only redhat links and does not mention fixed-in release se these CVEs will show-up in reports indefinitely. They are already fixed in current version, so ignore them. CVE-2022-2989 * https://github.com/advisories/GHSA-4wjj-jwc9-2x96 * https://github.com/containers/podman/pull/15618 * commit d82a41687e614d9ac8b2d169dee47fe226835e4c Add container GID to additional groups CVE-2023-0778 * https://github.com/advisories/GHSA-qwqv-rqgf-8qh8 * https://github.com/containers/podman/pull/17528 * commit 6ca857feb07a5fdc96fd947afef03916291673d8 volume,container: chroot to source before exporting content Signed-off-by: Peter Marko <peter.marko@siemens.com> |
||
|
Martin Jansa
|
5bb2ad0d25 |
runc-opencontainers: use bfd linker even when gold is selected by ls-is-gold
* fixes:
ld: --no-dynamic-linker: unknown option
* you might need to clean the build for updated LDFLAGS to be corectly re-configured
* lld and bfd are fine:
$ ld.gold --help | grep dynamic-linker
-I PROGRAM, --dynamic-linker PROGRAM
$ ld.bfd --help | grep dynamic-linker
-I PROGRAM, --dynamic-linker PROGRAM
--no-dynamic-linker Produce an executable with no program interpreter header
$ ld.lld --help | grep dynamic-linker
--dynamic-linker=<value>
--no-dynamic-linker Inhibit output of .interp section
* not sure where this came from only place where I see --no-dynamic-linker
in runc-opencontainers WORKDIR is:
aarch64-oe-linux/13.1.1/plugin/include/config/aarch64/aarch64-linux.h: %{static-pie:-Bstatic -pie --no-dynamic-linker -z text} \
aarch64-oe-linux/13.1.1/plugin/include/aarch64-linux.h: %{static-pie:-Bstatic -pie --no-dynamic-linker -z text} \
so my guess is:
923ae4da Makefile: add support for static PIE
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Chen Qi
|
fcf7968f1d |
kubernetes: set CVE_VERSION explicitly
The CVE_VERSION defaults to PV, but in NVD database, there's no prefixing 'v' in database. So set CVE_VERSION explicitly for better CVE scanning. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Bruce Ashfield
|
5dda7078ba |
runc-opencontainers: update to 1.1.7-tip
Bumping runc to version v1.1.7-37-gca73c9fd, which comprises the following commits:
0d93d7d1 release: add riscv64 binary
9164fe17 libct/seccomp: add riscv64
ed47e31a Makefile: set CGO_ENABLED=1 when needed
923ae4da Makefile: add support for static PIE
2abca872 Makefile: fix GO_BUILDMODE setting
120ec5bd Makefile: add LDFLAGS_COMMON and LDFLAGS_STATIC
b9940113 Dockerfile: don't use crossbuild-essential-*
028fc57a Dockerfile: rm dpkg --add-architecture lines
4449ce84 Dockerfile: nit
d375351b ci/cirrus: enable rootless tests on cs9
e1a8b52f tests/int/cgroups: filter out rdma
02e065ef docs/systemd: fix a broken link
9af462e4 Fix tmpfs mode opts when dir already exists
7d1bdc7d .codespellrc: update for 2.2.5
8397943e man/runc: fixes
f9da684d tests/int: increase num retries for oom tests
7fa912ed ci/cirrus: limit numcpu
e9c1ca08 Fix Vagrant caching
e2265a92 ci: bump bats 1.8.2 -> 1.9.0
bbddb6bd Vagrantfile.fedora: bump to 38
27b86b4c ci/cirrus: use vagrant from hashicorp repo
98a1b76c tests/int: fix some checks
1eadcede ci: bump bats 1.3.0 -> 1.8.2
63af8b00 init: do not print environment variable value
404ea7ab libct: fix a race with systemd removal
f0ecf30b VERSION: back to development
860f061b VERSION: release 1.1.7
We refresh one patch for context changes.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
248be027d6 |
runc-docker: update to 1.1.7-tip
Bumping runc to version v1.1.7-37-gca73c9fd, which comprises the following commits:
0d93d7d1 release: add riscv64 binary
9164fe17 libct/seccomp: add riscv64
ed47e31a Makefile: set CGO_ENABLED=1 when needed
923ae4da Makefile: add support for static PIE
2abca872 Makefile: fix GO_BUILDMODE setting
120ec5bd Makefile: add LDFLAGS_COMMON and LDFLAGS_STATIC
b9940113 Dockerfile: don't use crossbuild-essential-*
028fc57a Dockerfile: rm dpkg --add-architecture lines
4449ce84 Dockerfile: nit
d375351b ci/cirrus: enable rootless tests on cs9
e1a8b52f tests/int/cgroups: filter out rdma
02e065ef docs/systemd: fix a broken link
9af462e4 Fix tmpfs mode opts when dir already exists
7d1bdc7d .codespellrc: update for 2.2.5
8397943e man/runc: fixes
f9da684d tests/int: increase num retries for oom tests
7fa912ed ci/cirrus: limit numcpu
e9c1ca08 Fix Vagrant caching
e2265a92 ci: bump bats 1.8.2 -> 1.9.0
bbddb6bd Vagrantfile.fedora: bump to 38
27b86b4c ci/cirrus: use vagrant from hashicorp repo
98a1b76c tests/int: fix some checks
1eadcede ci: bump bats 1.3.0 -> 1.8.2
63af8b00 init: do not print environment variable value
404ea7ab libct: fix a race with systemd removal
f0ecf30b VERSION: back to development
860f061b VERSION: release 1.1.7
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
5d41297f4b |
cri-o: update to 1.27-tip
Bumping cri-o to version v1.27.0-48-g3abbef701, which comprises the following commits:
a61082768 vendor: drop podman replace and actually update runc
9c86a1269 vendor: bump runc to 1.1.6
1d6f5a00c [1.27] Add support for namespaced signature policies
35afa9859 runtime handler hooks: run default hook when container stops gracefully
3907696a4 main: Added a call to GarbageCollect
ee6868938 Add a test for log linking
5319875b4 linklogs: add support for symlinking container directory
13f8ae560 Add support for linking pods logs
605e4d935 server: ensure pod labels are present
15d6d5977 OCPBUGS-14750: Pod termination must succeed when a hook fails
ccd7e23af server: do not take lock to populate pid in container status and inspect
57662c6f8 go.{mod,sum}, vendor: update NRI.
ef90744ae test: adapt for sched_load_balance disable after stop
169220817 runtime handler hooks: add DefaultCPULoadBalanceHooks
a74999eb6 server: call hooks and NRI in stopContainer
ea3297939 server: call hooks on infra container creation
37518c031 high perf hooks: workaround libcontainer quirk when disabling cpu quota
eca28447d cgmgr: export CrioPrefix and use containerCgroupPath more
49cfa2060 *: update sandbox/pause image to 3.9
bf9eec8cb Add debug to identify when a relabel was not requested
2ee3398cb high perf hooks: disable CPU quota with libcontainer as a pre start hook
11141ac32 test: add test for cpu-quota.crio.io
69a6d6fc2 Fix events generated by Evented PLEG
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
f634a540c4 |
podman: update to 4.5.1
Bumping libpod to version v4.5.1-6-gdae7df5a1, which comprises the following commits:
3d7aba056 completion: fix panic in simplePathJoinUnix()
9de891616 RPM: bump gvisor-tap-vsock subpackage and fix packit scripts
5933be9ba Bump to v4.5.2-dev
9eef30051 Release v4.5.1
777ddfc42 [CI:DOCS] Final release notes for v4.5.1
2b045de48 [CI:BUILD] Packit: set propose-downstream action type to pre-sync
b1281ae46 Revert "Resolve symlink path for qemu directory if possible"
8b35bbab9 no need for podman-next rpm test on maint branch
6652633ce [CI:BUILD] Packit: add jobs for downstream Fedora package builds
97ec57da5 libpod: configureNetNS() tear down on errors
d812087d1 libpod: rootlessNetNs.Cleanup() fix error message
083894a22 network create/update: allow dns servers comma separated
1575b3a7f machine: fix default connection URL to use 127.0.0.1
1e86d0a75 compat: accept tag in /images/create?fromSrc
7d0e4a644 compat container create: match duplicate mounts correctly
dc21698d6 machine: qemu only remove connection after confirmation
02b9f4f5d windows: podman save allow the use of stdout
66fb7c9bb remote: exec inspect update exec session status
5b21c38c8 podman-remote logs: handle server error correctly
9558af2c4 libpod: stop containers with --restart=always
0f18a0144 Do not include image annotations when building spec
bc2f0115d [v4.5] system tests: fix race in kube-play read-only
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
ee055b339d |
containerd: update to 1.7.2
Bumping containerd to version v1.7.2-13-ga766dc550, which comprises the following commits:
dafbeb5b1 No more nondistributable layers in MS registry
e5b2a0131 task: don't `close()` io before `cancel()`
a6a15afe3 move to CRI-TOOLS v1.27.0
58b6b99cd Add a check to skip stats for containers that are not running
0b2b96479 RELEASES.md: de-deprecation of CNI conf_template will be v1.7.3
a24267b28 Remove cni conf_template deprecation
89415fe36 Fix issue for HPC pod metrics
e134b6393 Fix panic when remote differ returns empty result
0e41daaea [release/1.7] Prepare release notes for v1.7.2
99582fb1a fix: cio.Cancel() should close the pipes
eeda70fb0 remotes/docker: ResolverOptions: fix deprecation comments
313c226b8 Update continuity to a tagged version
e21c8beee Post cherry-pick fixes
246240f71 Move PLEG event back to CRI
16f3726dd Generate sandbox exit events from CRI
0c8cfb1a7 Move pod sandbox recovery to podsandbox/ package
91d9f5c64 Publish sandbox events
4b77683b4 Add sandbox events protos
8dd16285a UnmountAll is a no-op for missing mount points
acff3eefa Improve error messages and remove check
b4dd3bf4e Make ReadOnly() available on all platforms
08d8baf3f Increase integration test tmieout to 20m
1f0dbd011 Remove bind code path in mount()
8f37b1c63 Remove "bind" code path from diff
9139208b3 Properly mount base layers
e61e7b312 Skip parent layer options on bind mounts
e4307926f Add ReadOnly() function
0277b9b01 Remove escalated privileges
d5c18dfb7 Use DefaultSnapshotter
853179366 use t.Fatal if we cannot enable process privileges
5b3ee413f Update continuity
375172604 Fix go.mod, simplify boolean logic, add logging
600abd137 Ignore ERROR_NOT_FOUND error when removing mount
df7295dcd Update continuity, go-winio and hcsshim
0db78c482 Remove unused function
219058766 Grant needed privileges for snapshotter tests
96fbe5bc8 Fix layer comparison and enable read-only checks
279e0d3c9 Use bind filer for mounts
93e94da40 Enable TestSnapshotterClient on Windows
3a3da693a Run Windows snapshotter through the test suite
e7b62322f Fix misspelling of 'Native' as 'Naive'
e1f999a18 Add paired 'mount' log for 'unmount'
5788d6e52 Don't use all-upper-case filenames in snapshot tests
3cdcb2f10 Skip tests that do not apply to WCOW on Windows
b0968b8bb Ensure mounts are unmounted before leaving the test
b57424851 Unify testutil.Unmount on Windows and Unix
b9a8aad45 Implement Windows mounting for bind and windows-layer mounts
1a64ee183 Implement WCOW parentless active snapshots and view snapshots
7851b0a9f CRI: Make stats respect sandbox's platform
8d7c340ca [sbserver] handle missing cpu stats
d08b2a088 [sbserver] Refactor usageNanoCores be to used for all OSes
2c38cad77 notify readiness when registered plugins are ready
08de6e7b8 Update volume-ownership image with latest hashes
6a5e54c15 Get CDI devices from CRI Config.CDIDevices field
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Renato Caldas
|
680f56d9e4 |
cri-o: drop unneeded dependency on virtual-containerd
Signed-off-by: Renato Caldas <renato@calgera.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Renato Caldas
|
7e6f503083 |
crun: fix compilation with musl
Requires either libargp or argp-standalone. Signed-off-by: Renato Caldas <renato@calgera.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Chen Qi
|
3ce3ef9486 |
kubernetes: do not strip binaries at build
Yocto/OE has its own way to control binary stripping. So don't do it in the go build process. Otherwise, we'll get empty dbg packages. Setting DBG=1 solves this problem, as stated in comments in the Makefile. """ # Note: Specify DBG=1 for building unstripped binaries, which allows you to use code debugging # tools like delve. When DBG is unspecified, it defaults to "-s -w" which strips debug # information. """ Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Chen Qi
|
4bc2f6e550 |
containerd: fix HOMEPAGE
The previous HOMEPAGE has been archived. Use the active one. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Martin Jansa
|
c2e8199d87 |
netavark, xen: *.patch: add Upstream-Status to all patches
There is new patch-status QA check in oe-core: https://git.openembedded.org/openembedded-core/commit/?id=76a685bfcf927593eac67157762a53259089ea8a This is temporary work around just to hide _many_ warnings from optional patch-status (if you add it to WARN_QA). This just added Upstream-Status: Pending everywhere without actually investigating what's the proper status. This is just to hide current QA warnings and to catch new .patch files being added without Upstream-Status, but the number of Pending patches is now: Patches in Pending state: 15 (11%) Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Bruce Ashfield
|
49fdcebf5b |
moby: update to v24.0.2
Bumping moby to version v24.0.2-56-gd7aa1e14e5, which comprises the following commits:
5652c59647 testing: temporarily pin docker-py tests to use "bullseye"
789a8755b8 run `getent` with a noop stdin
f7298b326e vendor: github.com/sirupsen/logrus v1.9.3
1c18ad6ca6 vendor: github.com/rootless-containers/rootlesskit v1.1.1
ae4a10df67 update RootlessKit to v1.1.1
24c882c3e0 update go to go1.20.5
b3133d7471 contrib/check-config: move xt_bpf check to overlay section
8c552012ae contrib/check-config: check for xt_bpf
61d547fd06 Dockerfile: Move dockercli to base-dev
e5fbc3f75a hack/cli.sh: Quiet origin cleanup
1a078977e1 Dockerfile/shell: Install buildx cli plugin
c4198e6053 Dockerfile: Use separate cli for shell and integration-cli
647ba03224 builder-next: Set moby exporter as default
961fe27408 c8d/handlers: Handle error in walkPresentChildren
087cf6f238 c8d/load: Don't unpack pseudo images
0b9d68f59d c8d/load: Use walkImageManifests
cbf0779bfc c8d/list: Use walkImageManifests
0139309fef c8d: Add walkImageManifests and ImageManifest wrapper
e1c7956764 Dockerfile: use COPY --link for source code as well
75afe3201b containerd: add c8d version and storage-driver to User-Agent
8018ee4689 dockerversion: DockerUserAgent(): allow custom versions to be passed
ed376a603f dockerversion: remove insertUpstreamUserAgent()
1d45ea52f4 dockerversion: simplify escapeStr()
a27b0381a6 dockerversion: add a basic unit-test
1fc19772e0 Make sure the image is unpacked for the current snapshotter
4217d9ea0a Dockerfile: use COPY --link to copy artifacts from build-stages
4c6b8e737f added alias validation
e370f224ae fixing consistent aliases for OCI spec imports
ac1a867282 vendor: github.com/mistifyio/go-zfs/v3 v3.0.1
2949fee1d3 containerd: set user-agent when pushing/pulling images
f9c68e5fbc libn: fix resolver restore w/ chatty 'iptables -C'
3452a76589 libnetwork: fix sandbox restore
fec801a103 libnetwork: log why osl sandbox restore failed
d9e39914a7 Fix npe in exec resize when exec errored
042f0799db libn/d/overlay: support encryption on any port
ec8ec9056c builder/remotecontext: deprecate CachableSource, NewCachableSource
7a4ea19803 libcontainerd: work around exec start bug in c8d
ae6e9333c0 vendor: github.com/moby/buildkit v0.11.7-0.20230525183624-798ad6b0ce9f
0d9acd24fe c8d/inspect: Fill `Created` time if available
04eccf8165 vendor: github.com/containerd/go-runc v1.1.0
d64bab35ee daemon: lock in snapshotter setting at daemon init
329d671aef Dockerfile: temporarily skip CRIU stage
4cc2081119 integration: Add TestImageInspectEmptyTagsAndDigests
27df42255c hack: Rename .ensure-emptyfs to .build-empty-images
9ee7d30aef hack/ensure-emptyfs: Create dangling image
8a4b7c5af8 Add testenv.UsingSnapshotter utility
a753ca64e2 hack/make/.binary: don't use "netgo" when building Windows binaries
5276c2b6e0 c8d/pull: Use same progress action as distribution
baf1fd1c3f libnetwork: check for netns leaks from prior tests
992dc33fc5 libnetwork/osl: restore the right thread's netns
ef1545ed4a libnetwork: leave global logger alone in tests
876f5eda51 libnetwork: make resolver tests less confusing
47a3dad256 c8d/list: Show layerless images
0869b089e4 libnetwork: just forward the external DNS response
3467ba6451 reorder load funcs to match newServiceConfig()'s order
f9b886c01b add mirror to daemon reload test for insecure registries
07140c0eca build: use daemon id as worker id for the graph driver controller
d5ad186d49 ci(bin-image): distribute build across runners
4d924c35f7 api/server: allow empty body for POST /commit again
68b7ba0d03 api/inspect: Fix nil RepoTags and RepoDigests
5ea7b8d091 fix: `docker pull` with platform checks wrong image tag
Bumping docker-cli to version v24.0.2-9-g0823df7da, which comprises the following commits:
11af1189d docs: add "--detach-keys" example to docker run reference
f118c05e8 docs: move "--detach-keys" example to examples section
f66f7ed7f cli/command: fix GoDoc referencing wrong const
2814c01b0 Dockerfile.vendor: update GOPROXY to use default with fallback
32f66cbe5 vendor: github.com/docker/docker v24.0.2
dc4707edb [24.0] vendor: github.com/docker/docker v24.0.1
298e67926 docs: fix example for proxies in daemon.json
9175ffa9b man: remove devicemapper from examples
beb0330a7 Correct "ps --no-trunc" example output
405be9063 docs: remove AuFS from glossary
7a269817b docs: remove Docker Toolbox from glossary
41ef7c45c docs: remove boot2docker and docker-machine from glossary
c184a61da docs/deprecated: remove "disabled by default" for AuFS, overlay
e7a60449f docs: remove aufs and legacy overlay
77541afea contrib/completion: remove aufs, legacy overlay
e67a7acd0 docs/deprecated: remove .patch release from deprecation status
fb6ae356c vendor: github.com/docker/docker v24.0.0-rc.3
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
6385f57723 |
oci-image-spec: update to 1.1.0-rc3
Bumping image-spec to version v1.1.0-rc3-14-g9615142, which comprises the following commits:
32036d8 Apply version change from #1050
f3f0906 Specify the content of the scratch blob
29a1380 Remove special guidance around wasm
2720969 Update descriptor.go
a68ca3e Remove artifact media type reference
428b1e5 releases: use +dev as in-development suffix
2f691e8 version: bump HEAD back to -dev
085b884 version: bump for release of v1.1.0-rc.3
fd45b6b Add scratch descriptor and scope layer limits
63b8bd0 Remove artifact manifest
23c4647 Define image manifest artifactType and guidance
5751791 Add Tianon as maintainer
f4fc83a Fix unused variable linting error
d09d13d Update Jon Johnson's email
4136bec descriptor schema: add missing data and artifactType definitions
729a03e manifest, specs-go/: provide guidance on SCRATCH config descriptor
31de013 manifest schema: add tests for the subject field
7a9efbd manifest schema: add the missing `subject` field
f2f1956 descriptor: clarify artifactType field must have compliant values
98f35df Update image spec and conversion to clarify groups
336b02c Require IANA mediaType for image config.mediaType and layers.mediaType
1f60184 Add Go 1.20 support
f99b121 Remove filtersApplied from image-spec
b5998ba specs-go/v1/*.go: align the deprecation style
6687119 Chore: fix go.mod - split direct/indirect dependencies
867ce74 ArtifactType is optional, omit when empty
ccb86b9 mention deprecation in media-types.md
9b4e6c0 even fewer words
2cdbef2 Deprecate non-distributable layers
265874e Note an exception to the platform.os recommendation for wasi
59780aa Add ArgsEscaped field to image config
3625ee3 doc: fix example in artifact.md
94f2431 version: bump main back to -dev
19a74bc version: release v1.1.0-rc2
0a97fe7 docs: Added artifact.md to docs and spec.md
c91663b Update RELEASES.md
0e7e0dd docs: Update release process docs with checklist
5d055a4 version: switch back to -dev
4728b6e version: bump for 1.1.0-rc1 release
a7ac485 Rename refers field to subject (#950)
4c15674 Use go install and full path to commands
ce50f1f Bump from Go 1.16 to 1.17
ca2e500 Embed Platform in Image
a865bc0 Fix whitespace consistency in config.md
da33ef0 Remove io/ioutil references
ed7e07b Add artifact to spec.md
bc9c4bd Update schema for mediaType validation (#933)
b04b320 Working Group Proposal for Reference Types
ba36edd Add regclient to implementations
293f064 Reverting json schema to well known value
ba3f174 Add maintainer nomination template
08825b8 Pinning version of golangci-lint to support 1.16
9747134 Move inactive maintainers to emeritus
0bd8a03 Add Brandon as maintainer
c7ca3ac Update URLs to https
874a191 Add Sajay as maintainer
6ffdc78 Move inactive maintainers to emeritus
d6ce48a Add mediaType fields into example manifest & image index JSON references
0895292 implementations: point to krustlet/oci-distribution
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
c8d2b7f738 |
oci-runtime-spec: update to 1.1.0-rc.2
Bumping runtime-spec to version v1.1.0-rc.2-22-g720792f, which comprises the following commits:
1beaf68 CODEOWNER: Add Toru Komatsu(@utam0) to sync with MAINTAINERS
d46c8b2 schema: fix definition for ioPriority
504f70e Add I/O Priority Configuration for Process Group in Linux Containers
05563ea features: update Example
d89ef1e glossary: s/features document/Features structure/g
39bd2ef MAINTAINERS: add Toru Komatsu (utam0k)
f66aad4 Update ociVersion in config-linux.md example
206251f releases: use +dev as in-development suffix
8947849 spec: add scheduler entity
4ee185a version: v1.1.0-rc.2-dev
a5b4da4 version: release v1.1.0-rc.2
54f948c ChangeLog: Document changes since v1.1.0-rc.1
6152be4 schema: remove duplicate keys
9d7c878 Clarify I/O throttling differences between cgroup v1 and v2
b6980b0 schema: fix schema for timeOffsets
689874f Add `features.md` to formalize the `runc features` JSON
167ffb4 Add Go 1.20 support to CI
15d2a5a Switch Go linting to use golangci-lint
c9b5d0e Remove references to deprecated io/ioutil package
77c37f1 Update config-linux.md fix time_namespaces url error.
6c638b1 config: clarify Linux mount options
72efacb runtime: remove `When serialized in JSON, the format MUST adhere to the following pattern`
c42f9ae version: v1.1.0-rc.1-dev
3e013c2 version: release v1.1.0-rc.1
f790b68 ChangeLog: Document changes since v1.0.2
36bb632 Add support for time namespace
f225699 config: change prestart hook spec to match reality
4bcd065 seccomp: Add flag SECCOMP_FILTER_FLAG_WAIT_KILLABLE_RECV
d931d4b config-linux: add CFS bandwidth burst
6be797c CODEOWNERS: sync with MAINTAINERS
9e658bc config-linux: add memory.checkBeforeUpdate
3565df5 config-linux: Clarify where device nodes can be created
1924f6b GOVERNANCE: correct the Charter URL
744912b add domainname spec entity
0da1600 fix rfc link
b57ada5 maintainer updates as per #1101
9d1130d IDMapping field for mount point
fc985aa config-linux: update type of LinuxCPU.Idle to *int64
bc545ec schema: add cpu idle
1fef707 Update Windows CPU comments
e78a3c3 Add available `LinuxSeccompFlag`s
600a8bd cgroup ownership: clarify that some files may not exist
b8dbce9 update idle type of LinuxCPU from *int64 to int64
9d363b3 config-linux: add idle option for container cgroup
b05eb53 typo: seccompFD -> seccompFd
a650533 config-linux: add support for rsvd hugetlb cgroup
84251a4 specs-go: export LinuxBlockIODevice
3f30167 schema: make with golang 1.16
34a7544 schema: update README.md
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
de3a655dc0 |
crun: update to v1.8.5
Bumping crun to version 1.8.5-30-g7da99fb, which comprises the following commits:
ef224f9 docs: remove module.wasm.image/variant=compat annotation
38f29c2 ci, wasmedge: use --platform wasi/wasm
62e68e2 ci,wasmedge: use latest instead of rawhide
5c9dbca libcrun: return with no-op when io_priority is NULL
755b47a lua: added luarocks packing
1d5748e src: define symbol for /proc/self/timens_offsets
c56e556 src: replace /proc/sys/kernel/cap_last_cap with symbol
db9274f src: define PROC_SELF_CGROUP and use it
1eeba46 src: quote more strings
8ca1f68 build: add check for atomic_bool
e542666 build: add explicit check for atomic_int
43fc74c src: uniform the quoting style
3839e6e src: add missing quotes
0ca1f0b container: do proper cleanup on errors
ee3e6f6 tests: add tests for ioprio
63a4f97 src: fix macro check
e6306b8 tests: reorder includes
edfd0c9 container: support io_priority from the OCI specs
478f047 libocispec: sync
b6f80f7 NEWS: tag 1.8.5
a1f9b7d tests: update ubuntu to lunar
026f249 tests: update containerd
6494b69 cgroup: set the memory limit on the system scope
4d2d5b3 cgroup: move code to an utility function
c56c3c4 cgroups: fix creating cgroup under "domain threaded"
bbee4bc More informative error message for the case where dlopen fails
1ad17f8 Refactor: Restore serial settings for incorrect serial
087db89 scheduler: use definition from OCI
0135eb1 libocispec: update
76ed8df criu: fix memory leak
7a45ba8 ci: temporarily disable cri-o tests
a717db7 criu: fix segfault if CRIU_JOIN_NS_SUPPORT is defined
3f972e1 github: try not loading kernel modules
bca0b3b linux: check the PID is valid before kill(2)
62b149b tests: skip slow cri-o tests
7bbacf9 fix clang-format
c0eb006 src: make clang-format
6639649 lua: fix typo
906142d linux: do not precreate devs with euid > 0
f40d974 Improve whitespace in generated `crun spec`
ed25b47 tests/test_exec: don't fail on PIDs < 10000
909ae4d tests: abstract tests/init to get_init_path()
df8ee48 criu: check if the criu_join_ns_add function exists
5a8fa99 NEWS: tag 1.8.4
898ffb5 tests: fix idmap mount test
a2ac2b9 tests: install irqbalance
6b33ec5 tests: drop cri-o tests instead of deleting file
6824924 cgroup: workaround cpu quota/period issue with v1
fc276e6 cgroup: fix set quota to -1
58b394a build(deps): bump lumaxis/shellcheck-problem-matchers from 1 to 2
bf79b09 src: wire the runtime spec time namespace
bfa4f48 linux: create PID namespace as part of the last step
4320b5d libocispec: sync
39bf623 criu: drop loading unused functions
59f2beb NEWS: tag 1.8.3
ae18930 update: initialize the rt_scheduler only on cgroupv1
crun/rspec: update to 1.1.0-rc.2
1beaf68 CODEOWNER: Add Toru Komatsu(@utam0) to sync with MAINTAINERS
d46c8b2 schema: fix definition for ioPriority
504f70e Add I/O Priority Configuration for Process Group in Linux Containers
05563ea features: update Example
d89ef1e glossary: s/features document/Features structure/g
39bd2ef MAINTAINERS: add Toru Komatsu (utam0k)
f66aad4 Update ociVersion in config-linux.md example
206251f releases: use +dev as in-development suffix
8947849 spec: add scheduler entity
4ee185a version: v1.1.0-rc.2-dev
a5b4da4 version: release v1.1.0-rc.2
54f948c ChangeLog: Document changes since v1.1.0-rc.1
6152be4 schema: remove duplicate keys
9d7c878 Clarify I/O throttling differences between cgroup v1 and v2
b6980b0 schema: fix schema for timeOffsets
689874f Add `features.md` to formalize the `runc features` JSON
167ffb4 Add Go 1.20 support to CI
15d2a5a Switch Go linting to use golangci-lint
c9b5d0e Remove references to deprecated io/ioutil package
77c37f1 Update config-linux.md fix time_namespaces url error.
6c638b1 config: clarify Linux mount options
72efacb runtime: remove `When serialized in JSON, the format MUST adhere to the following pattern`
c42f9ae version: v1.1.0-rc.1-dev
3e013c2 version: release v1.1.0-rc.1
f790b68 ChangeLog: Document changes since v1.0.2
36bb632 Add support for time namespace
f225699 config: change prestart hook spec to match reality
d931d4b config-linux: add CFS bandwidth burst
9e658bc config-linux: add memory.checkBeforeUpdate
3565df5 config-linux: Clarify where device nodes can be created
a650533 config-linux: add support for rsvd hugetlb cgroup
crun/ispec: update to 1.1.0-rc.3
32036d8 Apply version change from #1050
f3f0906 Specify the content of the scratch blob
29a1380 Remove special guidance around wasm
2720969 Update descriptor.go
a68ca3e Remove artifact media type reference
428b1e5 releases: use +dev as in-development suffix
2f691e8 version: bump HEAD back to -dev
085b884 version: bump for release of v1.1.0-rc.3
fd45b6b Add scratch descriptor and scope layer limits
63b8bd0 Remove artifact manifest
23c4647 Define image manifest artifactType and guidance
5751791 Add Tianon as maintainer
f4fc83a Fix unused variable linting error
d09d13d Update Jon Johnson's email
4136bec descriptor schema: add missing data and artifactType definitions
729a03e manifest, specs-go/: provide guidance on SCRATCH config descriptor
31de013 manifest schema: add tests for the subject field
7a9efbd manifest schema: add the missing `subject` field
f2f1956 descriptor: clarify artifactType field must have compliant values
98f35df Update image spec and conversion to clarify groups
336b02c Require IANA mediaType for image config.mediaType and layers.mediaType
1f60184 Add Go 1.20 support
f99b121 Remove filtersApplied from image-spec
b5998ba specs-go/v1/*.go: align the deprecation style
6687119 Chore: fix go.mod - split direct/indirect dependencies
ccb86b9 mention deprecation in media-types.md
9b4e6c0 even fewer words
2cdbef2 Deprecate non-distributable layers
265874e Note an exception to the platform.os recommendation for wasi
0a97fe7 docs: Added artifact.md to docs and spec.md
293f064 Reverting json schema to well known value
crun/libocispec: update to -tip
b085839 runtime-spec: update
553cfb4 image-spec: update
384a230 runtime-spec: update
2c9fb39 libocispec: write _present tags together
dc7412b image-spec: update
2e11380 runtime-spec: update
e7b7344 rust: sync runtime-spec and image-spec
df3036c runtime-spec: sync
8a0ee41 image-spec: sync
70826dc clean: remove unwanted diff file
4d1d608 add redefine for stdin stdout stderr when using musl
02f231b Move header files under ocispec/
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
703feb3116 |
umoci: update to 0.4.7-tip
Bumping umoci to version v0.4.7-150-g33ec006, which comprises the following commits:
150b9e0 build(deps): bump github.com/stretchr/testify from 1.8.3 to 1.8.4
1c365a2 build(deps): bump github.com/stretchr/testify from 1.8.2 to 1.8.3
6e6027c build(deps): bump golang.org/x/sys from 0.7.0 to 0.8.0
b267d7b test: move 'go test' output to stderr for coverage binary
947f407 build(deps): bump github.com/opencontainers/runc from 1.1.6 to 1.1.7
e9394e8 CHANGELOG: update to include changes from v0.4.7
08672f5 vendor: bump several deps
b4f2258 go.mod: update Go version to go1.18
b285980 build(deps): bump github.com/vbatts/go-mtree from 0.5.2 to 0.5.3
61c566b build(deps): bump google.golang.org/protobuf from 1.28.1 to 1.30.0
a0bb45f build(deps): bump actions/setup-go from 3 to 4
bdfd50b build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.2
37c828e gha: ci: make ci-image cache expire weekly
3e7ddbd dockerfile: update to leap 15.4
44a127b Makefile: pull image details from Dockerfile
c99bc38 dockerfile: fetch oci-*-tools with go install
701c194 test: update to gomtree 0.5.2
ac5e249 test: (raw-)config: only use export in sub-shell
c8183de oci: config: strip "-dev" from runtime-spec version
b1c2cdf oci: config: correctly handle runtime-spec versions
de9ad94 make: add -buildvcs=false to builds
6d52935 gha: bump Go version for validate to Go 1.20.x
3544ece build(deps): bump github.com/stretchr/testify from 1.8.0 to 1.8.1
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
e215f05c27 |
skopeo: restructure recipe to fix buildpaths warnings
Like many of the other go recipes, the method of symlinking vendor packages ends up recording the path in the binary. -trimpath can't fix those embedded paths, so we switch skopeo to be link the other recipes and position our source in a way that doesn't require the symlinking, and hence no QA warning. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Bruce Ashfield
|
05e51d92d5 |
skopeo: update to 1.12.0
Note: this has trimpath issues, and needs to be re-worked to not use
symlinked vendor directories.
Bumping skopeo to version v1.12.0-25-gcf502780, which comprises the following commits:
c06aa5c6 Update module github.com/stretchr/testify to v1.8.3
ac75f71f Update dependency containers/automation_images to v20230517
21b1dfee Update module github.com/sirupsen/logrus to v1.9.2
ead979a9 Update module github.com/docker/distribution to v2.8.2+incompatible
12b24fce Trigger an update of the ostree_ext container image
44ed4cea Update c/image with https://github.com/containers/image/pull/1944
9213943e Update module github.com/containers/common to v0.53.0
2825ffd9 Update module golang.org/x/term to v0.8.0
86eea6ce Update dependency containers/automation_images to v20230426
03e18aa9 Update golang.org/x/exp digest to 47ecfdc
7b587697 Emphasize the semantics of --preserve-digests a tiny bit
1e6b333f Improve the static build documentation a tiny bit
95e8cce2 Bump to v1.12.1-dev
a5529097 Release 1.12.0
5f0314f3 Update module github.com/containers/common to v0.52.0
66157589 Update module github.com/containers/storage to v1.46.1
7c66b740 Add (make tools) to install (for now only) golangci-lint, use it in Cirrus
d4bd787e Use golangci-lint instead of golint
c538340e Finally, eliminate hack/make.sh
f8f5a25f Actually fail if (go vet) fails
aebab492 Speed up validate-git-marks by about a factor of three
4298692d Don't use hack/make.sh for validate-git-marks
7e35ad54 Test all files by validate-git-marks
789257f7 Simplify the package list of (go vet)
bee51e5e Don't use hack/make.sh for validate-gofmt
85fef036 Run gofmt on all files, not just the changed ones
82268ea8 Don't use hack/make.sh for validate-lint
694b1565 Lint many more files in validate-lint
43090b29 Don't use hack/make.sh for validate-vet
225f239a Remove no-longer-necessary module options
98b01af0 Fix Makefile dependencies
835d71a3 Remove some outright unused code from hack/make*
30ecd8f0 Cross-link the top-level and subcommand option lists
4be583c8 Fix error handling of signature.NewEphemeralGPGSigningMechanism
e8414097 chore(deps): update dependency containers/automation_images to v20230405
4f5e8214 Avoid use of a deprecated capability.NewPid
ca0f8418 fix(deps): update module github.com/spf13/cobra to v1.7.0
b0d339f0 fix(deps): update module github.com/containers/image/v5 to v5.25.0
03ca2871 fix(deps): update module golang.org/x/term to v0.7.0
4ca2058d Use multiple fingerprint function Allow comma separated fingerprint list
c54f2025 Review comments (to be squashed later
9b1f1fa1 Rename argument. Only use any with public key file. Double check fingerprint is in public key file.
3097b7a4 Verify signatures from a trust store
bfe82593 Update c/image from the main branch
468ac655 Update module github.com/containers/common to v0.51.2
7481aae6 Update dependency containers/automation_images to v20230330
454f8559 systemtests: Fix 040-local-registry-auth about XDG_RUNTIME_DIR
bbdcb79c [CI:BUILD] Packit: trigger builds on commit to main branch
cd4f2ee5 [skip-ci] Update actions/stale action to v8
b2ede999 Make the installation instructions more prominent in README.md
8ea5fd44 Update dependency containers/automation_images to v20230320
aa9862a7 Update module github.com/containers/common to v0.51.1
0ad54d6d Cirrus: Update CI VM images
20447df1 bump golang.org/x/net to v0.8.0
3481a5b9 Update module golang.org/x/term to v0.6.0
bcc0d54e Simplify inspectOptions.writeOutput a bit more
c345785d Factor out the output of data in (skopeo inspect)
2a6a944c Use io.WriteString
9a02c1eb Update module github.com/stretchr/testify to v1.8.2
f1c03ef1 Update module github.com/containers/storage to v1.45.4
64daedca Update golang.org/x/exp digest to 5e25df0
c07f2098 Fix formatting of inspect examples
313f142c Use common library reporter
4beb3f0a Fix some warnings
1c3d49f0 Fix tabelating output in (skopeo inspect --format)
fb0be613 Corrected typo in skopeo-sync and updated description
2ef9cf69 Replace gopkg.in/check.v1 by github.com/stretchr/testify/suite/
0ba164f0 Update c/image after https://github.com/containers/image/pull/1842
012e1144 [CI:BUILD] Packit: initial enablement
5435c808 Renovate: c/common rule moved to defaults
643a2359 Update c/image after https://github.com/containers/image/pull/1816
2c6e15b5 Run codespell on codebase
df708d16 [CI:DOCS] Disable dependabot
2acac8a6 Update module golang.org/x/term to v0.5.0
f9e2c676 Update golang.org/x/exp digest to 46f607a
47c7902e Remove unnecessary blank lines
c1a57ca1 Pre-allocate an array
2a7b1327 Simplify a condition
e7ab33e6 Rename a variable to avoid an underscore
e90c381a Add missing comment punctuation
70c06b4a Fix, or remove, comments using lint syntax
9137ac56 Simplify an increment
efc6e837 Reformat import statements
a8b9e4e3 Use %w when wrapping errors
99215e40 Remove a duplicate word
afa031e8 Use net/netip.Addr instead of net.IP
891ba3d4 s/interface{}/any/g
f2b3a9c0 Use golang.org/x/exp
f1a6d427 Use strings.Cut
22955d05 go mod tidy -go=1.18
007f01c6 [CI:BUILD] enable debuginfo for el8 copr builds
036bf598 [CI:BUILD] copr: fix el8 build and enable debuginfo
f9406bb0 Cirrus: Use human-readable CI VM Images
b41b85ab Update module gopkg.in/yaml.v2 to v3
d2fbec35 Add unit tests for tlsVerifyConfig's yaml.Unmarshaler
9e24a195 [CI:DOCS] Fix up language in README
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
28eda60a52 |
moby: update to v24.0.0
Bumping moby to version v24.0.0-2-g821e4ec4c7, which comprises the following commits:
5ea7b8d091 fix: `docker pull` with platform checks wrong image tag
907f037141 update containerd binary to v1.7.1
8bbfa32741 c8d: The authorizer needs to be set even if AuthConfig is empty
8587a1c617 c8d/builder: implement cache
9717369913 c8d: implement classic builder
233c49438b c8d: Don't create authorizer for empty AuthConfig
2b7424512a c8d/authorizer: Default to docker.io
f77a3274b4 [chore] clean up reexec.Init() calls
c76bb6a3a3 ci: bin-image workflow
71846e82c1 bin-image bake target
ecbc27aa22 vendor: github.com/docker/distribution v2.8.2
1235338836 c8d: implement missing image delete logic
763d2b7996 c8d: fix image history for dangling images
86770904be c8d: fix missing image history
bfffb0974e pkg/aaparser: deprecate GetVersion, as it's no longer used
e28bc0d271 profiles/apparmor: remove use of aaparser.GetVersion()
d169a57306 contrib/apparmor: remove remaining version-conditionals (< 2.9) from template
63640838ba daemon: handleContainerExit(): add execDuration in attributes
012dd239ce docs/api: version-history: also mention /system/df for VirtualSize
a87313497b vendor: github.com/containerd/containerd v1.6.21
5f36d4af15 api: synchronize api/swagger.yaml with docs/api/v1.43.yaml
2b6761fd3e d/graphdriver/copy: support src fs w/o xattr support
3e6092f5b2 pkg/jsonmessage: touch-up GoDoc
05cb0e5a7d pkg/jsonmessage: JSONProgress.String(), JSONProgress.now(): simplify
4cadee65b3 pkg/jsonmessage: JSONMessage.Display(): remove special case for 401 errors
66cf0e3f55 client: slightly improve ContainerDiff tests
dbb48e4b29 api/types/container: create type for changes endpoint
b7e8868235 update go to go1.20.4
bf3c156654 vendor: github.com/moby/term v0.5.0
c1d420ec60 vendor: github.com/moby/term v0.0.0-20221205130635-1aeaba878587
0df38c3e2b vendor: github.com/opencontainers/runtime-spec v1.1.0-rc.2
167fa429f0 daemon: Daemon.CreateImageFromContainer(): remove intermediate vars
bf5ae17c16 api/server/router/container: containerRouter.postCommit: inline struct
9613da63dc c8d: commit: generateCommitImageConfig: don't merge image config
e510abbc8c daemon/containerd: containerConfigToOciImageConfig: add ArgsEscaped
3eebf4d162 container: split security options to a SecurityOptions struct
8142051a3b libnetwork/osl: unify stubs for NeighOption
0ea41eaa51 libnetwork/osl: unify stubs for IfaceOption
021e89d702 libnetwork/osl: rename var that collided with import
3a4158e4fa libnetwork: add missing stub for getInitializers()
939a4eb5c9 libnetwork: fix stubs
17feabcba0 libnetwork: overlayutils: remove redundant init()
44a6587608 c8d: delete dangling image on pull
1e9ebfb00c libnetwork: inline sendKey() into SetExternalKey()
9d8fcb3296 libnetwork: setKey(): remove intermediate buffer
a813d7e961 libnetwork: don't register "libnetwork-setkey" re-exec on non-unix
881fff1a2f libnetwork: processSetKeyReexec: don't use logrus.Fatal()
e974599593 libnetwork: processSetKeyReexec() remove defer()
1845a915b0 c8d/import: Don't gc unnamed images
0ffd3225d2 vendor: github.com/opencontainers/runc v1.1.7
2d0e899819 update runc binary to v1.1.7
56fbbde2ed libnetwork/resolvconf: fix some minor (linting) issues
820975595c libnetwork/resolvconf: improve tests for Build
93c7b25ccd libnetwork/resolvconf: refactor tests for readability
43378636d0 libnetwork/resolvconf: allow tests to be run on unix
73c637ad60 libnetwork/resolvconf: use t.TempDir(), change t.Fatal to t.Error
fc1e698914 libnetwork/resolvconf: fix TestGet() testing wrong path
55d18b7db9 libnetwork/resolvconf: use []byte for hash instead of string
630fc3839e libnetwork/resolvconf: simplify hashData() and improve performance
12bf850c84 cmd/dockerd: gracefully shut down the API server
520aa08d42 c8d/prune: Logging fixes
52af6d957e c8d/prune: Remove gc.ref labels from configs of deleted images
993ca8c6de cmd/dockerd/trap: log to logrus directly
0f3c5d3893 cmd/dockerd/trap: don't force exit after cleanup
a1e1038736 Use the image service instead of the reference store for tagging
9fe5ac6614 c8d: Handle nil container.ImageManifest
16d5d4b6e1 cmd/dockerd: ignore SIGPIPE using signal.Ignore
2d31697d82 daemon: set docker0 subpool as the IPAM pool
d8b784a15e daemon/cluster: inline filters
da8e07edb5 volume/service: inline filters in tests
c0c4a16053 testutil: inline filters in tests
b6154189e8 integration: inline filters in tests
1bc0d7080a integration-cli: inline filters in tests
5bc0832766 daemon: inline filters in tests
081b5e3d4e client: inline filters in tests
aca8dde362 integration/TestKillContainer: Bigger timeout on Windows
391f9635cc c8d/list: Initialize capacity instead of length
4ec063fade pkg/sysinfo: omit Getpid call in numCPU
f66684fdeb fix some comments
c399963243 libn/d/overlay: make VNI matcher IPv6-compatible
7d9bb170b7 libn/d/overlay: test the VNI BPF matcher on IPv4
4876c09b2a build(deps): bump github.com/creack/pty from v1.1.11 to v1.1.18
8df3db4b97 c8d: add support for removing images by shortID
117ceac82b daemon/prune: Use errdefs for invalid "until" value
e502c69140 builder: use typed error for invalid "until" value
9791756284 overlay2: remove deprecated overlay2.override_kernel_check option
54a125f677 builder-next/prune: Handle "until" filter timestamps
38e791fb2f vendor: update buildkit to v0.11.6
005150ed69 check-config.sh: do not check for RT_GROUP_SCHED
f72548956f remove deprecated legacy "overlay" storage-driver
4ecb587eff daemon: skip TestGetInspectData when using containerd snapshotters
a82c434447 daemon: setupFakeDaemon(): add fakeImageService
1261fe69a3 API: deprecate VirtualSize field for /images/json and /images/{id}/json
eb7738221c Add no-new-privileges to SecurityOptions returned by /info
e7980275c0 c8d: align "Size" and "VirtualSize" for images
1e1efe1f61 libnet/d/overlay: clean up iptables rules on network delete
9a9dfb1d0d api/server: getImagesJSON(): don't check version in a loop
3903f16cd6 daemon: remove deprecated AuFS storage driver
890959eea8 builder-next: fix buildkit version
bc37e3f830 Fix returning errors from snapshotter.Prepare
f846349824 c8d/list: Implement `until` filter
d89590eab9 c8d: Implement prune
e6ac640d2e vendor: github.com/opencontainers/runc v1.1.6
f531e3cf69 vendor: golang.org/x/net v0.8.0
3886faced8 vendor: golang.org/x/text v0.8.0
d0efca893b update runc binary to v1.1.6
7fe0f73838 Fix argument quoting bugs in dockerd-rootless.sh
9cb5da400c images/Children: Return error
edf802956e c8d/list: Implement `label` and `label!` filter
03fc3aad12 daemon: touch-up flag description for --seccomp-profile
5a922dc162 daemon: deprecate --oom-score-adjust for the daemon
f696a1b3b3 Fix error checking when pulling from an insecure registry
c957ad0067 libnetwork: clean up inDelete network atomically
e5dbd28afd Added timeout to validate job in github actions
106c694993 Dockerfile: update xx to 1.2.1
a5d46a15f5 split GetRepository from ImageService
893d28469f vendor: github.com/ishidawataru/sctp v0.0.0-20230406120618-7ff4192f6ff2
f66374f6a8 golangci-lint: enable importas linter to force consistent aliases
81e62af94a use consistent alias for containerd's errdefs package
f691b13450 daemon: move code related to stats together
5c78cbd3be pkg/platform: deprecate OSType in favor or runtime.GOOS
cf9a76fe8f pkg/platform: un-export consts that are only for internal use
790dd8cc92 pkg/platform: use const for OSType, improve GoDoc
87019144f6 pkg/platform: replace use of deprecated syscall.Syscall
7ca38d64d2 pkg/platform: move package doc to platform-agnostic file
9434919f76 pkg/platform: rename files for consistency
be4abf9d6e Vendor containerd 1.6.x with the readonly mount fix
41a230758c c8d: Set the process user on exec
70229b55ec vendor: github.com/moby/swarmkit/v2 v2.0.0-20230406225228-75e92ce14ff7
3f09316e3b vendor: re-vendor to add missing file
8ed900263e libnetwork/overlay: remove host mode
1d46597c8b libnetwork/overlay: remove KVObject implementation
f32f09e78f libnetwork/overlay: don't lock network when accessing subnet vni
b67446a8fa libnetwork: remove local store from overlay driver
8aa1060c34 libnetwork/overlay: remove live-restore support
e3708a89cc libnetwork/overlay: remove vni allocation
e251837445 libnetwork/overlay: remove Serf-based clustering
644e3d4cdb libnetwork/netlabel: remove dead code
f8b5fe5724 libnetwork/netutils: remove dead code
c8d2c6ea77 libnetwork: remove unused props from windows overlay driver
0fa873c0fe libnetwork: remove global store from overlay driver
00037cd44b libnetwork: remove ovrouter cmd
e0f36f9d8b ImageService: Pass ctx to Children
bea751beb7 c8d: Implement Children by comparing diff ids
ba47cdcc0b c8d/list: Implement `reference` filter
4aa2876c75 docker-rootless-setuptools.sh: improve readability of messages
4d04068184 libn/d/overlay: only program xt_bpf rules
f6cc8e3512 update go to go1.20.3
465cbccdaf c8d: use the container's configured snapshotter where possible
c8f8d11ac4 awslogs: fix non-blocking log drop bug
1b178dffa3 Send an event when an image is deleted
36d28b73fc Send an event when an image is tagged
750218c5e5 d/config: fix default-network-opts in daemon.json
36935bd869 libcontainerd: close stdin sync if possible
3beda17773 integration-cli: rename vars that collided with imports
92e38b6e27 c8d/list: Ignore attestation manifests
773a9d85a1 c8d: Send event when an image is exported
00545ef4d6 c8d: Send event when an image is imported
e59f7fba6a pkg/fileutils: remove aliases for deprecated functions and types
6b9968e8b1 client: deprecate NewClient properly
027f70562e c8d/push: Rename jobs to avoid shadowing type
e1dd9c0396 c8d/push: Ignore :port when comparing source repository
4a34c501c1 c8d/push: Parse source labels with multiple sources
cb788bea9c c8d/push: Add distribution source labels only on success
013e44ec5d c8d/push: Log error if releasing the lease failed
c9012c798e c8d/push: Sync mountableBlobs access
f6b50d52d4 libnetwork/netutils: drop ElectInterfaceAddresses
61a0e79ad6 vendor: github.com/containerd/containerd v1.6.20
b8e963595e libnetwork: sbState: rename ExtDNS2 back to ExtDNS
0233029d5a vendor: opencontainers/image-spec v1.1.0-rc2.0.20221005185240-3a7f492d3f1b
c733cf223d vendor: github.com/containerd/ttrpc v1.1.1
a0ef2ac59c c8d: push: addressing some nits
a75354c045 c8d: Implement push
e7393d0fc5 images/push: Accept reference
15b9176d53 Add the events services to the containerd image service
77be7b777c update runc binary to v1.1.5
a17029ba49 vendor: github.com/opencontainers/runc v1.1.5
24804e67f5 c8d/commit: Use manifest digest for dangling image
845b328734 Skip Buildkit digest tests
4c459ddabd c8d: add support for `docker diff`
e85c69e1b7 Update `github.com/containerd/containerd` to the HEAD of `release/1.6` and vendor
f09b1022aa c8d/inspect: Handle dangling images
9e3a6ccf69 libn/i/setmatrix: make generic and constructorless
713c9280ca Move buildkit client opts to new package
4f511bd06e Add akerouanton as curator
bb2c5617d6 Add laurazard as curator
988d26afe4 vendor: github.com/moby/buildkit v0.11.5
6caaa8cadc Prefer loading `docker-init` from an appropriate "libexec" directory
bae49ff278 libnet/d/windows: log EnableInternalDNS val after setting it
4f48a4ea2a Update delve version
0fa7a4e3b4 client: Add buildkit ClientOpts
965eda3b9a libnet/d/overlay: insert the input-drop rule
66dfc0169f dockerversion: DockerUserAgent(): use sync.Once to construct User-Agent
72dc7a0f7b vendor: github.com/moby/swarmkit/v2 v2.0.0-20230315203717-e28e8ba9bc83
c7ccc68b15 Silence GRPC logs unless our log level is debug
be34e93f20 integration-cli: Enable TestExecStartFails on Windows
cb76638699 registry/search: pass User-Agent through headers
88992de283 StartWithLogFile: Fix d.cmd race
fed1c96e10 TestDaemonRestartKillContainers: Fix loop capture
f5050d4ef2 ci: disable testing mergeop and diffop with the dockerd worker
0ac3bf837b builder-next: disable mergeop and diffop
c14463d1e4 ci: enable BuildKit tests with containerd integration worker
105b9834fb libnet/d/overlay: add BPF-powered VNI matcher
44cf27b5fc libnet/d/overlay: extract VNI match rule builder
142f46cac1 libn/d/overlay: enforce encryption on sandbox init
0ac02ba342 vendor: github.com/opencontainers/runtime-spec v1.1.0-rc.1
ab131642a1 vendor: github.com/opencontainers/runc v1.1.4
b98c05dc50 vendor: github.com/klauspost/compress v1.16.3
664c0d3201 vendor: github.com/godbus/dbus/v5 v5.1.0
3e4ce10342 vendor: github.com/coreos/go-systemd/v22 v22.5.0
0a2e3f14e7 vendor: github.com/opencontainers/selinux v1.11.0
bc1dec71c5 vendor: github.com/imdario/mergo v0.3.13
9752e43644 vendor: golang.org/x/sys v0.6.0
d4fd582fb2 libnet/d/overlay: document some encryption code
58504620c5 api/types/container: IpcMode: use common function for container-mode
6f0e28d024 api/types/container: PidMode: fix validation for empty container name/ID
53c813961e api/types/container: fix .Container() returning a name, when it shouldn't
c76331e13f api/types/container: put "valid" field as first check in tests
2d49080056 pkg/sysinfo: move MemInfo and ReadMemInfo to a separate package
a050db4a6f libnetwork/d/overlay: handle peer ops directly
09d39c023c libnetwork/i/setmatrix: devirtualize
3b569cc686 daemon/graphdriver/windows: cleanup errors
bbeaeee3c7 daemon/graphdriver/windows: remove some intermediate variables
9db5dc9a46 daemon/graphdriver/windows: use strings.EqualFold()
d742188e3b daemon/graphdriver/windows: remove fileFlagSequentialScan const
3a8c97be45 daemon/graphdriver/windows: rename vars that collided with imports
605e8f53b1 daemon/graphdriver/windows: InitFilter() don't use idtools.MkdirAllAndChown()
34303ccd55 libnetwork/i/setmatrix: un-embed the mutex
127cd9def1 integration/plugin: fix duplicate import
2987393768 integration/volume: fix duplicate import
146df5fbd3 Fix pruning anon volume created from image config
058a31e479 volumes: fix error-handling when removing volumes with swarm enabled
a2c29e9128 update containerd binary to v1.7.0
7531f05c7c integration/volumes: TestVolumesRemove: add coverage for force/no-force
7b3acdff5d registry: return concrete service type
3991faf464 Move filtered registry search out of image service
06619763a2 remove GetLayerByID from ImageService interface
02dec48bab update to go1.20.2
37a9d6aabe Fix listener parsering regression when no addr set
3bbffe96e1 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230309194213-a745a8755ce3
af677245fb c8d/builder: Store untagged images as dangling
8f716ca06a builder/overrides: Add consts for attribute key names
e807ae4f2e vendor: github.com/containerd/cgroups/v3 v3.0.1
44d0522848 c8d/inspect: Add digested reference to details
a8f5c524a0 libcontainerd: Upgrade to typeurl/v2
45ee4d7c78 c8d: Compute container's layer size
4026148ef1 Dockerfile: Update shfmt to 3.6.0
a0741cacef contrib/dockerize-disk.sh: Fix indentation
088aff1620 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230302163403-80a528a86877
f8b468fda2 builder-next: enable more cache backends
bba77163ff c8d: Make build and buildx work
b0b3c62a84 vendor: github.com/moby/buildkit v0.11.4
117cdb28ce regenerate AUTHORS
608a122aef integration: Extract StopContainerWindowsPollTimeout const
74dbb721aa TestLogs: Increase stop check poll timeout on Windows
a34060cdb4 Resolve and store manifest when creating container
168ca2dcc8 Introduce support for docker commit
22f303e422 layer: NewStoreFromOptions(): include driver-name in error message
f52e935f36 reference: add test-coverage for digested references
f71439d527 reference: don't string-match errors in tests, and fix error format
669940065f reference: use t.TempDir() for tests
520dc12c0e reference: rename variables that collided with type / import
c477cda59f c8d/list: Support dangling filter
3e4c4df664 builder/exporter: Remove commented unused const
324290a5eb vendor: buildkit v0.11.4-0.20230228113103-218e934edfba
6588b3eef0 builder: Remove buildkit's build information
4ea1c9f8e5 `docker image ls`: handle multi-platform images
a9e7360775 daemon/config: remove AuthzMiddleware field
47e9caede7 libcontainerd/client: Rename `cp` to `checkpoint`
0c751f904f libcontainerd/client: Fix checkpoint not being set
be39be87f6 api/server: delete Wait method
91c2b12205 Make default options for newly created networks configurable
19ad4ac03d registry: acquire mutex in IsInsecureRegistry
ef6f5367dc vendor: github.com/containerd/containerd v1.6.19
5997ad8512 vendor: github.com/Microsoft/hcsshim v0.9.7
0a6a726d26 api/server: drop unused Config struct
248745004a api: Remove <none> in Repo(Tags|Digests) for >= 1.43
0ffaa6c785 daemon: add annotations to container HostConfig
3c59ef247f libnet/ipam: use netip types internally
01dbe23b6f libnet/ipam: simplify the data model
8273db28f3 libnet/ipam: inline parsePoolRequest function
9a8b45c133 libnet/ipam: drop vestiges of custom addrSpaces
18ac200efe libnet/ipam: get rid of superfluous closure
88f6b637a0 libnet/networkdb: fix nil-dereference panic in test
f8791db4be c8d/list: Fix Repo(Digests|Tags) for untagged images
cd779dae46 Upgrade to Go 1.20.1
d4e7a87b96 Upgrade to Go 1.20
3606d6a7cd Upgrade to golangci-lint v1.51.2
2f9e3cca3d api: Move Repo(Digests|Tags) <none> fallback from daemon
8657c87c8c c8d/tag: Don't create a separate error variable
9f6649b248 AUTHORS: regenerate
50d7164978 docs/api: add v1.43 OpenAPI definitions
bb21e0f191 Close DecompressStream after layer is downloaded
d6c4e17411 Upgrade containerd/fifo to v1.1.0
782a369f92 c8d/pull: Add CRI-compatible annotation of pulled content
a770153af0 chore: use http constants to replace numbers
9104cd5441 vendor: github.com/moby/buildkit v0.11.3
b0eed5ade6 daemon: allow shimv2 runtimes to be configured
4a886a3e8f dependency: bump go.etcd.io/bbolt to v1.3.7
e40c4c997e update containerd binary to v1.7.0-beta.4
f8cfd3a61f libnetwork: devirtualize Resolver type
faaa4fdf18 libnetwork: forward unknown PTR queries externally
8f5a9a741b libnetwork: fail loudly on resolver iptables setup
25b51cad3d libnetwork: replace ad-hoc semaphore implementation
a1f7c644be libnetwork: use dns.Client for forwarded requests
e6258e6590 libnetwork: reply SERVFAIL if DNS forwarding fails
9cf8c4f689 libnetwork: extract DNS client exchange to method
854ec3ffb3 libnetwork: extract dialExtDNS to method
51cdd7ceac libnetwork: truncate DNS msgs using library method
860e83e52f libnetwork: get rid of truncation red herring
8a35fb0d1c libnetwork: refactor ServeDNS for readability
0bd30e90bb libnetwork: reply SERVFAIL on resolve error
92aa6e6282 libnetwork: extract fn for external DNS forwarding
78792eae68 libnetwork: add regression test for issue 44575
94feb31516 update to go1.19.6
b62445871e libnet/ipam: fix racy, flaky unit test
81f9f90e47 Do not log connection info before the connection exists
c4c54683a9 Revert "apparmor: Check if apparmor_parser is available"
174802e15f vendor: github.com/containerd/containerd v1.6.18
a4e3c67e44 api/s/r/swarm: log backend errors at Debug level
e66995d840 d/l/awslogs: fix ineffective Add in test
713e02e03e daemon: handle EISDIR error from runtime
97921915a8 distribution/xfer: fix download fencepost bug
0c68b655f6 Fix loop-closure bugs in tests
dea3f2b417 Migrate away from things deprecated in Go 1.20
a36286cf89 vendor: golang.org/x/net v0.7.0
c7de76569e vendor: golang.org/x/text v0.7.0
a53b44a266 vendor: golang.org/x/sys v0.5.0
c53e22af19 add new maintainers!
046cc9e776 libnetwork: check DNS loopback with user DNS opts
d31fa84c7c libnet/networkdb: use atomics for stats counters
3539452ef0 libnetwork/networkdb: make go test -race ./libnetwork/networkdb pass
5287b2ddbf libnet/ipam: stop eagerly stringifying debug logs
2e19a4d56b contrib/apparmor: remove version-conditionals (< 2.9) from template
7008a51449 profiles/apparmor: remove version-conditional constraints (< 2.8.96)
eaeaa7b7fd vendor: update buildkit to latest v0.11
335907d187 builder: define GetRemotes for the worker
80f8432b52 ci: fix branch filter pattern in buildkit workflow
62be425bcc api: Extract parsing reference from repo and tag
afc6e3fa46 c8d/import: Use danglingImageName instead of hardcoded
b3a8b6b198 api/tag: Reject digested target references
eaa56afda9 daemon/c8d: Implement TagImageWithReference
1ca85e835c daemon/imageService: Remove TagImageWithReference
7b6f71dced daemon: Pass ctx to image tagging operations
22776f8fdb ci: enhance tests distribution
e304e82b66 ci: update gotestlist to 0.3.1
ab3fa46502 apparmor: Check if apparmor_parser is available
0137446248 Implement run using the containerd snapshotter
e564932792 gha: switch buildkit back to upstream for testing
91725ddc92 libnet/d/ipvlan: gracefully migrate from older dbs
21677816a0 Dockerfile: configure code dir as "safe" directory
3bcb350711 graphdriver/overlay2: usingMetacopy ENOTSUP is non-fatal
521c2b25c2 docs: fix JSON format error
af32603ae3 daemon/c8d: Implement save and load
043dbc05df github: apply patch for CNI test that was incorrectly skipped
666334bd48 vendor: update buildkit to v0.11.2
85169a04cf vendor: github.com/tonistiigi/fsutil v0.0.0-20221114235510-0127568185cf
cf83842304 Dockerfile: Make it easier to use ctr in shell container
0e4d3feb94 daemon: identify container exits by ProcessID
843fcc96f7 libc8d/remote: name task fifos after task ID
719b08313f libc8d/local: set task id to container id
d634ae9b60 Wait longer for exit events on Windows
7950abcc46 libnetwork: delete CHANGELOG.md
31f4ec92f6 update containerd binary to v1.7.0-beta.3
c41c8c2f86 vendor: github.com/containerd/containerd v1.6.16
22098745e7 vendor: github.com/pelletier/go-toml v1.9.5
a264f2dc55 libnetwork/ipam: skip Destroy()ing bitseq.Handle values
6f08fe20e9 libnetwork/bit{seq,map}: delete CheckConsistency()
a08a254df3 libnetwork: drop DatastoreConfig discovery type
28edc8e2d6 libnet: convert to new-style driver registration
5595311209 libnetwork/drvregistry: split up the registries
d478e13639 libnet: un-plumb datastores from IPAM inits
27cca19c9a libnetwork/drvregistry: drop unused args
befff0e13f libnetwork: remove more datastore scope plumbing
142b522946 libnetwork/config: remove vestiges of global scope
52d9883812 libnetwork: drop (*Controller).ReloadConfiguration
9900c7a348 client: improve error messaging on crash
e8011d7872 libnw/ipamutils: make local defaults immutable
540d1e0561 libnw: untangle IPAM allocator from global state
48ad9e19e4 libnetwork/netutils: drop ElectInterfaceAddresses
cc19eba579 daemon: let libnetwork assign default bridge IPAM
a654cbfd2f Use GetBoolOrDefault to remove duplicated invalidFilter usages
0d68591c8e api/types/filters: Add GetBoolOrDefault
390532cbc6 libnetwork/windows/overlay: drop unused variables
b3e6aa9316 libnetwork/netutils: clean up GenerateIfaceName
3775939303 libnetwork/netutils: refactor GenerateRandomName
1776f72c96 c8d/progress: Update progress when finished
54f0b0ec4b c8d: Implement image history
c0eb207b76 libnetwork/bitseq: refactor JSON marshaling
89ae725d23 libnetwork/bitseq: make mutex an unexported field
94ef26428b libnetwork/bitseq: refactor in terms of bitmap
143c092187 libnetwork/bitmap: optimize binary serialization
c4d7294b5c libnetwork/bitmap: remove datastore concerns
ad03a09451 libnetwork/bitmap: dup from package bitseq
cd2e7fafd4 libnetwork/bitseq: add marshal/unmarshal tests
b3c5352386 rootless: support `--ipc=host`
67aa86f1e0 hack: check if cross-compiling before setting ARM target name
25f95b0000 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230119195359-904c221ac281
170a1c4709 hack: display build cmd when DOCKER_DEBUG set
877baae03e hack: remove unnecessary vars in make.sh script
b80f16157e hack: remove ORIG_BUILDFLAGS var
0c008cc4f8 hack: remove -installsuffix build flag
d2d6ef431f Dockerfile: prefer ld for building against arm64
518be73a5c Dockerfile: smoke tests for static builds
f676dab8dc Dockerfile: use clang to build dockerd/docker-proxy
f49c88f1c4 Disable chrootarchive.init() on Windows
9b5c21309b images: Pass context to commit related operations
596c8960b2 c8d: Fix resolving truncated id to a descriptor
65c6ba1fc4 vendor: golang.org/x/net v0.5.0
ff14f8ef16 Add GetLibHome stub for non-linux OS
824dc51341 vendor: golang.org/x/text v0.6.0
e66e6bb28a vendor: golang.org/x/sys v0.4.0
dcfe23a038 fix blockThreshold full bug
0b83fd3217 ioutils: add regression test for bytespipe deadlock
71fa3b1337 Dockerfile: fix PKG_CONFIG for xx
945704208a hack: name for target ARM architecture not specified
94639eb66f hack: typo in displayed platform name
ffd75c2e0c libnetwork: Support IPv6 in arrangeUserFilterRule() (redux)
17723691e5 Revert "libnetwork: Support IPv6 in arrangeUserFilterRule()"
833096ce42 homedir: fallback to user.Current().homeDir if XDG_DATA_HOME/XDG_CONFIG_HOME and HOME are unset
af6b5d55db vendor: github.com/moby/ipvs v1.1.0
f53feeea8b vendor: github.com/vishvananda/netns v0.0.2
8be470eea8 libnetwork: don't embed mutex in network
c71555f030 libnetwork: return concrete-typed *Endpoint
581f005aad libnetwork: don't embed mutex in endpoint
0e91d2e0e9 libnetwork: return concrete-typed *Sandbox
0425baf883 libnetwork: don't embed mutex in sandbox
f96b9bf761 libnetwork: return concrete-typed *Controller
ae09fe3da7 libnetwork: don't embed mutex in controller
bb5cae2c94 vendor: github.com/vishvananda/netns v0.0.1
102090916e libnetwork: addRedirectRules without reexec
582dd705c1 libnetwork: fwmarker without reexec
d6cc02d301 libnetwork: drop (resolver).resolverKey field
50a4951ddc libnetwork: setup DNS resolver without reexec
4733127a04 libnetwork: set default VLAN without reexec
7037c48e58 libnetwork: set IPv6 without reexec
0246332954 libnetwork: create netns without reexec
ef161d4aeb libnetwork: Clean up sysfs-based operations
9032e6779d c8d/resolver: Fallback to http for insecure registries
c83fce86d4 c8d/resolver: Use hosts from daemon configuration
3a3f98b32b c8d/pull: Don't unpack manually
4a8c4110e3 produce progress events polling ctrd's content.Store
566a2e4c79 libnetwork: Remove iptables nat rule when hairpin is disabled
d7deec1993 daemon/c8d: Implement import
a254dad2e5 api/import: Guard from Digested instead of Canonical reference
28327f10a2 daemon/import: Extract common logic to api
8dbc5df952 daemon/config: inform the user when the input JSON contains invalid UTF-8
155e8d7d78 update to go1.19.5
d42495033e daemon/config: support alternate (common) unicode encodings using a BOM
8d1e56e210 CONTRIBUTING.md: drop reference to the Derek GitHub bot
0867d3173c cmd/dockerd: use default SIGQUIT behaviour
1dcf7d5b03 daemon/config: clean up tests to use common helper
1e1d326b50 plugins: Move GlobalSpecPaths into LocalRegistry
805aea501a docs: api: synchronise versioned API docs (v1.39 - v1.41)
92cbd1c69e docs: api: synchronise versioned API docs (v1.42)
4f81f9d5ea builder/dockerfile: use example.com for tests
65aa43bf66 libnetwork: use example.com for tests and examples
dc30785947 ci: update buildkit to fix integration tests
cba3edbc37 daemon/config: group JSON preprocessing steps
bb19265ba8 daemon/config: ignore UTF-8 BOM in config JSON
2d397beb00 libnetwork: Support IPv6 in arrangeUserFilterRule()
6ab12ec8f4 rootless: move ./rootless to ./pkg/rootless
c1bd5e9144 Use user paths for plugin discovery in rootless mode
bffe6d5670 vendor: github.com/containerd/containerd v1.6.15
89fb8b32f6 graphdriver/btrfs: needs kernel headers >= 4.12, not >= 4.7
c12d7b6d21 upgrade to aws sdk go v2
aa80c33360 Dockerfile.*: drop libbtrfs
c9d632e485 PACKAGERS: update Btrfs graphdriver dependencies
d3778d65fa graphdriver/btrfs: use free wrapper consistently
3208dcabdc graphdriver/btrfs: use kernel UAPI headers
1449c82484 graphdriver/btrfs: drop version information
fdcab58ccf Remove reference to "requireRegistryMatch"
deb4910c5b integration-cli: Fix hanging TestLogsFollowGoroutines*
1616a09b61 add support for image inspect with containerd-integration
bbe6e9e8d1 hack/make: Don't add -buildmode=pie with -race
7e7b0622a6 hack: restore copy_binaries func
b37d34307d Clear conntrack entries for published UDP ports
1fdfd45995 Updated outdated docker contributing guidelines link
01fd23b625 Fix volume CreatedAt being altered on initialization
d131147a5c use errors.Is() to handle image store errors
83280d44d0 docs: contributing docs update for cross comp
e8a82ed24d Dockerfile: add "all" stage to build binaries and extra tools
113e95ec02 ci: add extra steps to check artifacts
b565b496ba Dockerfile: rename dev stages
27ba1766e7 ci: use GITHUB_REF and GITHUB_SHA to set version and commit
0b3af098e1 bake: define additional vars
9bcf5bed05 bake: define DESTDIR
491467b0b9 hack: update buildmode pie condition
347a5f68da hack: do not set buildmode pie for statically linked binary
e37985f590 hack: use PKG_CONFIG var when checking libdevmapper
84ea9ee0f9 IAmStatic not used anymore
04c90b8cf5 hack: remove containerutility script
8086f40123 Dockerfile: use TARGETPLATFORM to build Docker
722d477bc6 client: defaultHTTPClient(): don't ignore transport errors
31ee158394 client: defaultHTTPClient() accept URL
1de3966b84 image: store: rename vars that collided with types or shadowed vars
2910163df1 daemon/images: imageKey() accept string
040b5bbc52 image: store.restore(): use more structured logs
456ea1bb1d image: deprecate IDFromDigest()
a5ebd28797 daemon/graphdriver/devicemapper: simplify Udev log, and update link
155e39187c daemon/logger/gcplogs: remove ensureHomeIfIAmStatic workaround
5fed968b1d api: can marshal and unmarshal when args.fields is empty
ad8804885c Update delve version
e7d75c8db7 api/types/container: fix validation for UTSMode, UsernsMode, PidMode
018347f802 integration-cli: remove waitInspectWithArgs()
61c434c030 integration-cli: remove inspectMountPointJSON()
ffbbe3d103 daemon/graphdriver/btrfs: workaround field rename in btrfs-progs 6.1
0eb7b49a17 daemon: remove some intermediate vars, use struct-literals
288cf20f98 daemon: rename some vars that collided with imports
c5d4b6b311 restartmanager: remove RestartManager interface
efb97da0da restartmanager: add SetPolicy() to the RestartManager interface
d68b68fc43 restartmanager: RestartManager.Cancel(): remove unused error return
42f1be8030 daemon: translateContainerdStartErr(): rename to setExitCodeFromError()
83dd99177f daemon: translateContainerdStartErr(): use exit code 128 as default
46dae0b8bb daemon: translateContainerdStartErr(): use early return for errors
4e750caf96 daemon: translateContainerdStartErr(): extract detecting wrong cmd
a756fa60ef daemon: translateContainerdStartErr(): use const/enum for exit-statuses
2cf09c5446 daemon: translateContainerdStartErr(): remove unused cmd argument
087369aeeb daemon: containerStart(): rename return variable
940730093b integration-cli: remove cli.Build(), cli.Inspect()
bc0885f364 integration-cli: remove WaitRestart(), un-export WaitForInspectResult()
1bd486666b api/types/container: use strings.Cut() and DRY
ab5e69c442 api/types/container: rewrite tests to use subtests and asserts
e155cb4fee hostconfig: move unit tests to api/types/container
12df6024db cmd/docker-proxy: add "-v / --version" flag
c42b304f62 gha: update buildkit to fix integration tests
799cc143c9 Always use iptables -C to look for rules
205e5278c6 Merge iptables.probe() into iptables.detectIptables()
0787ea8b26 libnetwork: improve logs for DNS failures
a959487597 libnetwork/netlabel: remove Key(), Value(), and KeyValue() utils
9015cb7111 libnetwork: controller: rename vars that collided or shadowed
96cfb076ce libnetwork/netlabel: make consts actual consts
36151bd1d7 libnetwork/drivers/bridge: remove "ioctl" fallback code for legacy kernels
6a91e09218 pkg/parsers: use strings.Cut(), and cleanup error-messages
3f935d0e2c daemon/graphdriver/zfs: use strings.Cut, and refactor
f95e9b68d6 daemon: use strings.Cut() and cleanup error messages
46f7c92c9a libnetwork: use strings.Cut() and minor refactor
87ca9490b0 libnetwork/datastore: rename var that collided with import
ff447f4fd5 runconfig/opts: use strings.Cut()
bffb35612c plugin: use strings.Cut()
01365cbd74 libcontainerd/local: use strings.Cut()
6059d38f21 pkg/parsers/operatingsystem: don't use strings.SplitN()
451b8579ef pkg/parsers/kernel: use strings.Cut() and minor refactor
774cd9a26c opts: use strings.Cut() and refactor parseDaemonHost()
d3cd746067 integration-cli: use strings.Cut()
38b0c47f37 integration-cli: links: use gotest.tools compare and assert.Check
ebda2fa2b5 integration/internal: use strings.Cut() and minor refactor
39f59c3289 daemon/links: use strings.Cut()
ad7f1a8dcc daemon/logger: use strings.Cut()
32c4c15f15 daemon/events: use strings.Cut()
5008409b5c cmd/dockerd: use strings.Cut()
19cd5ff164 client: use strings.Cut()
64adea1ce1 volume: use strings.Cut() and minor refactor
19db33afc9 pkg/tarsum: use strings.Cut() and minor refactor
59880cb855 builder/dockerfile: use strings.Cut()
604a2d67b5 builder/remotecontext/git: use strings.Cut()
380a2dfc3a api/types: use strings.Cut()
7841ce781c api/types/time: use strings.Cut()
ba9bcf92f6 api/types/filters: use strings.Cut()
6db4af7bd5 graphdriver: windows: use strings.Cut()
c545473920 daemon/cluster: use strings.Cut()
ec878a3d89 pkg/sysinfo: unify ReadMemInfo implementation
09ea6744fe pkg/sysinfo: remove github.com/docker/go-units dependency
6a516acb2e pkg/system: move memory-info types to pkg/systeminfo
6919b9879b pkg/sysinfo: unify NumCPU implementation
c63ea32a17 pkg/ioutils: TempDir: move to pkg/longpath
3314f4ef09 pkg/ioutils: unify TempDir implementation
2e67c85c13 pkg/longpath: fix package GoDoc
c4c53659f1 integration-cli: remove uses of ioutils.TempDir
2e67c827bb errdefs: FromStatusCode() don't log "FIXME" debug message
83d7ae76e8 vendor: github.com/containerd/containerd v1.6.14
72ea8cfb43 registry: use http.NewServeMux for tests instead of gorilla/mux
54512f2184 pkg/stringid: optimize performance
d20ddb6807 update containerd binary to v1.7.0-beta.1
35cbdc9661 vendor: github.com/containerd/containerd v1.6.13
9300aca2a6 vendor: github.com/Microsoft/hcsshim v0.9.6
19f3448c21 Dockerfile: delve cross build with TARGETPLATFORM
ed95e1a9ff Dockerfile: swagger cross build with TARGETPLATFORM
879b023706 Dockerfile: containerutility cross build with TARGETPLATFORM
8d9a357a67 Dockerfile: registry cross build with TARGETPLATFORM
a4bc2922c2 Dockerfile: dockercli cross build with TARGETPLATFORM
420591c4a2 Dockerfile: rootlesskit cross build with TARGETPLATFORM
f0307892ea Dockerfile: tini cross build with TARGETPLATFORM
5e19d7ec54 Dockerfile: runc cross build with TARGETPLATFORM
81d704d15d Dockerfile: containerd cross build with TARGETPLATFORM
b19c11621a Dockerfile: DOCKER_STATIC arg
69c9dfd6d5 Dockerfile: add dummy stage
6cba7d22e9 Dockerfile: add cross compilation helper
0007490b21 vendor: github.com/moby/swarmkit/v2 v2.0.0-20221215132206-0da442b2780f
e19dff9285 daemon/config: remove deprecated RootDeprecated field
32b299f63e daemon/config: rename CommonTLSOptions to TLSOptions
ef7ab7bde8 cli: remove cli/config package, integrate into cmd/dockerd
6a90113e68 cli: move cobra customizations into cmd/dockerd
3d58b43efe cli: remove unused Errors type
25c3421802 hack: introduce validate/no-module
a449f77774 hack: replace go-mod-prepare.sh with wrapper script
388fe4aea8 daemon: drop side effect from registerLinks()
0141c6db81 daemon: don't checkpoint container until registered
00157a42d3 daemon: fix GetContainer() returning (nil, nil)
7b13076f56 daemon: CreateNetwork: remove redundant error check
389dacd6e2 vendor: github.com/tinylib/msgp v1.1.6
24496fe097 vendor: github.com/philhofer/fwd v1.1.2
8fb71ce208 manage image inspect data in backend
a8eb15eafb ImageService.ImageHistory(): pass context
0426c76142 List images with multiple since/before filters
e214503789 image/store: Use errdefs for errors
28382c58ec container: ViewDB: use logrus.WithError()
6549a270e9 container: ViewDB: return typed system errors
94dea2018e container: ViewDB: GetByPrefix() return typed errors
da4d627e79 container: ViewDB: use errdefs for non-existing containers
ddaba6d576 daemon: filterByNameIDMatches() fix error handling
8c9a240597 container: use const for null-terminator
200edf8030 libcontainerd/remote: remove stray import comment
12c76d4a15 vendor: github.com/containerd/containerd v1.6.12
4bbc37687e vendor: golang.org/x/net v0.4.0
18f85467e7 docs: add 401 to possible status codes of /auth
d331bc3b03 vendor: github.com/containerd/containerd v1.6.11
52bc1ad744 update to go1.19.4
f577f31f50 Add Bjorn Neergaard to maintainers
9da935629e Better not pretend to be an active currator
383e23fd61 Add Kevin Alvarez ("crazy-max") to curators
521b8c02cc builder: handle host-gateway with extra hosts
381fa4afca ci(buildkit): update buildkit ref to fix issue with alpine image
a6a539497a distribution: checkSupportedMediaType: allow additional media-types
57b229012a seccomp: block socket calls to AF_VSOCK in default profile
eaa74497b8 libnetwork: use go-immutable-radix instead of radix
93fa093122 testing: move fuzzers over from OSS-Fuzz
3d97f1e22d client/list: Handle SharedSize
e1c3305015 AUTHORS: regenerate
672383bc56 .mailmap: cleanup and additions
b94d1604a9 hack/generate-authors.sh: refactor and simplify
6326ad1729 vendor.mod: remove outdated comment about replaced module
0f0fce5dcc libnetwork/netutils: FindAvailableNetwork(): simplify reading of resolv.conf
0cbe6524db libnetwork/drivers/overlay: getBridgeNamePrefix() simplify reading of resolv.conf
0ef0dab2f7 libnetwork: sandbox.rebuildDNS() make updating sandbox more atomic
806b4fbcad libnetwork: sandbox.rebuildDNS() move variables closer to where they're used
d178a71b7c libnetwork: sandbox.rebuildDNS() simplify reading of resolv.conf
05b3356631 libnetwork: sandbox.setupDNS() don't parse host resolv.conf if not needed
08d5e3d0fa libnetwork: sandbox.setupDNS() simplify reading of resolv.conf
a44f547343 registry: session: remove unused id
fb77973201 pkg/system: move CheckSystemDriveAndRemoveDriveLetter to pkg/archive
c4872b4519 pkg/system: CheckSystemDriveAndRemoveDriveLetter: fix error format
ad371893f2 pkg/system: move GetLongPathName to integration-cli
9f3e5eead5 pkg/system: deprecate DefaultPathEnv, move to oci
dec81e489f daemon/disk_usage: Use context aware singleflight
f7e59cbccc Jenkinsfile: Fix dev image build fox ppc64le/s390x archs
85fddc0081 distribution: remove unused RequireSchema2
8feeaecb84 use ad-hoc libtrust key
e854b2a459 distribution: use ad-hoc trustkey for tests
5cdd6ab7cd daemon/config: remove TrustKeyPath, and local utilities
1981706196 daemon: remove migrateTrustKeyID()
c1756e1b63 update containerd binary to v1.7.0-beta.0
c1a9e82d3e vendor: google.golang.org/grpc v1.50.1
bade242ddd Makefile: always use buildx
426e3926ef ci: define timeout for jobs
dc52e08bb5 vendor: github.com/prometheus/client_golang v1.14.0
b2fe29ba79 vendor: github.com/go-logr/logr v1.2.3
7c1b7842c6 vendor: golang.org/x/crypto v0.2.0
efe17dbdb4 vendor: golang.org/x/net v0.2.0
0588a83380 vendor: github.com/opencontainers/runc v1.1.3
38adf7a694 vendor: github.com/klauspost/compress v1.15.12
e1058e6bc3 go.mod: golang_protobuf_extensions v1.0.4 - prevent incompatible versions
62344f515c layer: layerStore.registerWithDescriptor: rename var to prevent shadowing
e5e6480694 Add Sam Thibault (sam-thibault) as curator
4769809555 api/server/backend/build: sanitizeRepoAndTags() check for digest
64f9ea1cf5 vendor: github.com/moby/swarmkit/v2 v2.0.0-20221123162438-b17f02f0a054
a5898e3a2d vendor: github.com/prometheus/client_golang v1.13.0
2cc6a86fd3 vendor: github.com/aws/aws-sdk-go v1.37.0
8f1bc3a3b7 vendor: google.golang.org/grpc v1.48.0
b0e20e1b3c vendor: go.uber.org/zap v1.21.0
066fb6c69e vendor: go.uber.org/multierr v1.8.0
b41580d66e vendor: go.uber.org/atomic v1.9.0
341c9e77a8 vendor: github.com/jmespath/go-jmespath v0.4.0
9a8b46518b vendor: google.golang.org/genproto v0.0.0-20220706185917-7780775163c4
1e48b64538 vendor: github.com/fernet/fernet-go v0.0.0-20211208181803-9f70042a33ee
4113a88523 vendor: google.golang.org/protobuf v1.28.1
26c4429f7e vendor: github.com/spf13/cobra v1.6.1
8a46a2a364 Dockerfile: remove hardcoded platforms for vpnkit stage
4f17d17009 ignorefiles: cleanup
61f266f660 vendor: github.com/moby/term v0.0.0-20221120202655-abb19827d345
af8e955e8f hack/go-mod-prepare.sh: find root robustly; make steps transparent
30b0cb0cd4 vendor.mod: add comment about replaced dependency
62a4a45a72 vendor.mod: remove replace for github.com/rexray/gocsi
a2d758acc9 vendor: github.com/armon/go-radix v1.0.1-0.20221118154546-54df44f2176c
9f004830a5 hack/validate/vendor: clean up license validation step
dbd76848ca hack/validate/vendor: split tidy from vendor
72568286ab hack/vendor.sh: allow running tidy & vendor separately
40069797ef hack: remove obsolete sources for go-autogen
07ba3e35d3 Add additional loggig in case of error of renaming runtimes-old and removing it
d591710f82 Handle docker start inside overlayfs
ca807edac0 update github.com/tc-hib/go-winres v0.3.0 to fix schema version in manifest
25dc760162 Dockerfile: variant support in frozen-images stage
882ddf4b16 update gotestsum to v1.8.2
b529870558 daemon/config: use strings.Cut(), fix panic in BuilderGCFilter
7ca03c1a79 rootlesskit.installer: s/vendor.conf/vendor.mod/
a2cea992c2 libnetwork/iptables: Fix test panic when execute only one test
a6cb8efd81 vendor: golang.org/x/oauth2 v0.1.0
9d7bd47cb6 vendor: golang.org/x/crypto v0.1.0
d9fb730148 update RootlessKit to v1.1.0
08516af897 vendor: github.com/rootless-containers/rootlesskit v1.1.0
be18f92bf4 hack/validate: drop changelog-related steps
ec1bb21649 cleanup: drop historical CHANGELOG.md
e8ad01594a cleanup: drop .DEREK.yml
4e5c3b82cb vendor: github.com/containerd/containerd v1.6.10
a5979a2106 update containerd binary to v1.6.10
06e4b7d1f8 vendor: github.com/moby/buildkit v0.10.6
40908fca45 fix vendor.mod: add hashicorp/go-multierror as direct dependency
81ccfd44e4 Fix grammar in README.md
6a02afa56f ci(actions): bump outdated actions on Linux
0557569947 ci(actions): migrate to file-based commands
79f9ffd401 vendor: golang.org/x/net v0.1.0
71fa64a272 vendor: golang.org/x/time v0.1.0
4965f19626 vendor: golang.org/x/sync v0.1.0
4bb95eef6f vendor: golang.org/x/sys v0.1.0
67b9f120d5 pkg/archive: switch back to os/exec
b7d242f094 builder/remotecontext/gitutils: switch back to os/exec
6a15f40803 libnetwork_test: improve OptionBoltdbWithRandomDBFile
a0f9caec99 libnetwork_test: stop controllers at end of test
010077ba0f libnet/d/bridge: fix race condition in test case
7b2308980c libnet/d/bridge: fix bridgeInterface.addresses()
c2a087a9f7 libnet/d/bridge: use fresh PortAllocator in tests
1b64f2e28b libnetwork: stop caching global netlink handle
d0096bba21 libnetwork_test: overhaul TestParallel
32ace57479 libnetwork_test: isolate tests from each other
0411336b49 libnetwork_test: pass controller into createTestNetwork
9a0953a0a0 libnet/testutils: spawn goroutines in test OS ctxs
07be7b087d libnetwork_test: remove in-container special case
e2a89b7ad1 libnet/d/bridge: configure store when opts missing
8a20564847 libnet/datastore: stop sharing defaultScopes singleton
8404507b9b libnet/osl: stop assuming caller thread is clean
0f7c9cd27e Remove uses of deprecated go-digest.NewDigestFromHex, go-digest.Digest.Hex
6174d00c03 replace distribution/digestset with opencontainers/go-digest/digestset
bbb1b82232 go.mod: github.com/miekg/dns v1.1.43
d43bc26717 vendor: gotest.tools/v3 v3.4.0
57ba2df970 vendor: github.com/google/go-cmp v0.5.9 to remove golang.org/x/xerrors dep
f39b83e232 libnetwork: fix TestParallel "bad file descriptor"
fe6706a2ce libnetwork: make tests less dependent on others
cea8e9b583 libcontainerd/supervisor: use pkg/pidfile for reading and writing pidfile
14da1bfe40 cmd/dockerd: adjust error message for pidfile changes
7493debe26 pkg/pidfile: implement Read()
7d3e1ad943 pkg/pidfile: Write(): don't automatically create parent directories
81945da0ac pkg/pidfile: Write(): take pid as argument
735e250326 pkg/process: Alive(): fix PID 0, -1, negative values
55d15e9d05 pkg/pidfile, pkg/process: use single implementation for process alive
9d5e754caa move pkg/system: process to a separate package
0040fb93d6 pkg/system: IsProcessZombie() skip conversion to string, use bytes instead
970ad4e3c7 pkg/system: IsProcessZombie() ignore "os.ErrNotExist" errors
8d6da1e100 pkg/system: IsProcessAlive() remove redundant type-cast
2006d9f7d1 cmd/dockerd: Rewrite shutdownDaemon to use context timeout
66a0289081 builder: Don't store context in struct
a181a825c8 daemon/start: Revert passing ctx to ctr.Start
def549c8f6 imageservice: Add context to various methods
57c2545cd5 vendor: github.com/moby/swarmkit/v2 v2.0.0-20221102165002-6341884e5fc9
1bef9e3fbf Fix containerd task deletion after failed start
be1829f63d daemon/logger: fix godoc
407e3a4552 distribution: Error when pulling OCI artifacts
4386e3f7c0 pkg/parsers/kernel: un-export Utsname
775dcab7a2 pkg/parsers/kernel: remove duplicate Package godoc
8d0dc69027 implement docker system df
952e1e62c5 Sort entries in pkg/namesgenerator
5bc17c3e54 Remove long-deprecated "arm" fallback
3d71555a47 Remove errant "runtime.GOARCH" from debug message
f9d4589976 Update to Go 1.19.3 to address CVE-2022-41716
1e88fe578e pkg/idtools: remove execCmd() utility
3d73d32499 api/types/filters: add output to example
c207947508 integration-cli: DockerPluginSuite: use gotest.tools compare utilities
346a438da8 opts: TestParseLink(): add test-case for legacy format
ad4073edc1 daemon: fix docs for config-default constants
dcd6c1d2e2 container: make path resolution fns Windows-only
2bdc7fb0a1 daemon: archive in a dedicated mount namespace
7d23c50599 integration: test more copy edge-cases
6750d1bac8 daemon: drop Windows-only code from archive_unix.go
4fd91c3f37 daemon: refactor isOnlineFSOperationPermitted
84cbe29d5b daemon: dupe the archive implementation
60ee6f739f Add reusable chroot and unshare utilities
317d3d10b8 Revert "Use real chroot if daemon is running in a user namespace"
5de229644f pkg/chrootarchive: stop reexec'ing before chroot
f2f884a92f pkg/archive: create whiteout temp dir under dest
1f32e3c95d Add integration test for #38995, #43390
6c0aa5b00a Fix the max-concurrent-downloads and max-concurrent-uploads configs documentation
22529b81f8 libnetwork: drop InitOSContext()
7fc29c1435 libnetwork/osl: clean up Linux InvokeFunc()
d1e3705c1a libnet/d/overlay: restore thread netns
3e2f0c7a39 libnetwork: fixup thread locking in Linux tests
afa41b16ea libnetwork/testutils: restore netns on teardown
04dc007c76 vendor: github.com/containerd/containerd v1.6.9
ac79a02ace update containerd binary to v1.6.9
4f1d1422de integration: download busybox-w32 from GitHub Release
4fdc1bb1fb builder/remotecontext/git: allow building on go1.18
4f43cb660a skip TestImagePullStoredfDigestForOtherRepo() on Windows and rootless
27530efedb Validate digest in repo for pull by digest
92eca900b0 Revert "testutil/registry: remove unused WithStdout(), WithStErr() opts"
201fdf67ac gha: update buildkit to v0.10.5-6-ge27c8e24 to skip some tests
0760c6f4e1 gha: buildkit: make checks more readable
cfa2f9a2f2 gha: buildkit: remove "skip-integration-tests" from matrix
67d010bd2c builder: add missing doc comment
94672c89cc builder: fix running git commands on Windows
61acc9939f builder: make git config isolation opt-in
72119f5d9b builder: isolate git from local system
0f7b0897cc builder: explicitly set CWD for all git commands
8deb92d653 builder: modernize TestCheckoutGit
0fc17c42af vendor: github.com/moby/buildkit v0.10.5
51fe170224 daemon: NewDaemon() fix import colliding with local variable
27bd49f4bf daemon: NewDaemon(): replace system.MkdirAll for os.Mkdir where possible
19c5d21e6f daemon: getPluginExecRoot(): pass config
17fb29c9e8 daemon: NewDaemon(): check system requirements early
7ff0f654fb daemon: add TEST_INTEGRATION_USE_SNAPSHOTTER for CI
0a004fd361 daemon: NewDaemon(): log message if containerd snapshotter is enabled
4fa853f5de pkg/fileutils: ReadSymlinkedDirectory: preserve underlying error
24e371c812 pkg/fileutils: improve tests
d4d242ba76 pkg/chrootarchive: gofumpt test files
dee3f716b3 pkg/chrootarchive: replace system.MkdirAll for os.Mkdir
8a8202fcdc pkg/chrootarchive: TestChrootTarUntar fix copy/paste mistake
0955c88c2e pkg/chrootarchive: use t.TempDir()
30e5333ce3 registry: allow "allow-nondistributable-artifacts" for Docker Hub
69f72417f4 pkg/idtools: remove CanAccess(), and move to daemon
ee34a8ac29 pkg/idtools: setPermissions() accept Identity as argument
bca90530fa pkg/idtools: simplify if-statement
d68fa0382d pkg/idtools: don't use system.Stat() on unix
43d6eb7173 pkg/pidfile: remove PIDFile type, rename New() to Write()
dd8983f96c pkg/pidfile: reduce cyclomatic complexity, and small optimisation
4917bcc039 pkg/pidfile: don't ignore all errors when reading file
3ce2a7d026 pkg/pidfile: pkg/pidfile: use strconv instead of fmt.Sprintf(), and unconvert
a9fa147a92 daemon/logger/etwlogs: rewrite to use go-winio/pkg/etw
f058afc861 pkg/system: synchronize mkdirall() with latest os.MkDirAll()
2e66c0b6f0 pkg/system: create SecurityAttribute only once (Windows)
55ceb5047c pkg/system: update volumePath regex to allow returning earlier
cfef1b11e5 pkg/system: compile volume-path regex once, and update GoDoc
264706f804 hack: allow pkg/ to import internal/ packages
3246db3755 fix force remove for cluster volumes
624daf8d9e Change restart delay for Windows service to 15s
3c585e6567 cmd/dockerd: use golang.org/x/sys Service.SetRecoveryActions()
34f459423a Replace overlay2 mount reexec with in-proc impl
6176ab5901 cmd/dockerd: use golang.org/x/sys/windows.SetStdHandle()
ffcddc908e cmd/dockerd: replace deprecated windows.IsAnInteractiveSession()
75bdbf02a6 daemon/graphdriver/windows: Remove() don't use defer() in a loop
90431d1857 daemon/graphdriver/windows: use go-winio.GetFileSystemType()
e35700eb50 daemon/graphdriver/overlay2: remove deprecated overrideKernelCheck
b43a7ac530 integration/plugin: remove deprecated overlay2.override_kernel_check
de705907a5 client: remove solaris build-tag, simplify and gofumpt
6fd2d4e772 integration: remove uses of pkg/system.Stat()
0242fef89c integration-cli: remove uses of pkg/system.Stat()
402e0b58ca testutil: use filepath.WalkDir instead of filepath.Walk
3db11af44b libnetwork/drivers/overlay: use filepath.WalkDir instead of filepath.Walk
0ee5518e76 oci: use filepath.WalkDir instead of filepath.Walk
ec000ce555 pkg/archive: use filepath.WalkDir instead of filepath.Walk
f595434abc daemon/graphdriver/devmapper: use filepath.WalkDir instead of filepath.Walk
8f1bc0bccc daemon/graphdriver/btrfs: use filepath.WalkDir instead of filepath.Walk
1870d5f4aa builder: use filepath.WalkDir instead of filepath.Walk
d33428f0bf pkg/system: remove solaris left-over
a35bcd01c5 pkg/pidfile: replace uses of windows.Close() with windows.CloseHandle()
89de943401 pkg/pidfile: windows: replace magic consts for golang.org/x/sys consts
11cceea58a pkg/idtools: cleanup errors
8d5b17e939 pkg/idtools: don't use system.MkdirAll() where not needed
2e74e307d0 pkg/idtools: format code with gofumpt
0fc13104e7 pkg/idtools: CanAccess(): reorder checks to allow early return
c7c02eea81 pkg/loopback: use ioctl helpers from x/sys/unix
6742f74e0e vendor: golang.org/x/sys v0.0.0-20221006211917-84dc82d7e875
1ffdac4502 layer: gofumpt
c3a5641132 layer: use strconv instead of fmt.Sprintf()
1fccb39316 pkg/idtools: remove unused CanAccess() stub for Windows
3b9b5842b3 pkg/idtools: mkdirAs(): move var and comment to where it's used
838fc976c8 integration(-cli): remove some redundant formatting
07b2e4cb79 client: use strconv instead of fmt.Sprintf()
145817a9cf libnetwork: use strconv instead of fmt.Sprintf()
56e64270f3 daemon: use strconv instead of fmt.Sprintf()
533ecb44b1 daemon/logger: use strconv instead of fmt.Sprintf()
7fbf321c2a daemon/graphdriver: use strconv instead of fmt.Sprintf
27aea4956c pkg/idtools: mkdirAs() be more explicit about ignored args on Windows
a19ee75bd1 pkg/system: fix missing assertions and use sub-tests for ChTimes
a9c5a40087 pkg/system: rename some tests to be more descriptive
ab7bc6b7d2 pkg/system: use t.TempDir(), remove some test-utils
7bd051eeec pkg/system: windows: setCTime(): remove redundant conversion
0b8444aa0c pkg/system: rename maxTime and re-use, define unixEpochTime, update GoDoc
2c9684e35c pkg/system: add note about maxTime
247f90c82e pkg/system: move maxTime init() back to Chtimes code
4347080b46 pkg/system: remove Umask() utility
76ce3fd9c9 remove aliases for deprecated pkg/pubsub
89a9d7d650 fix typo
c1729f876c remove aliases for deprecated pkg/fsutils
ce2abb82c0 remove aliases for deprecated pkg/urlutil
a5e1baf3ab vendor: github.com/opencontainers/selinux v1.10.2
1f22b15030 Lock OS threads when exec'ing with Pdeathsig
ab677c41ea pkg/system: unconvert
07b1aa822c pkg/system: move GetExitCode() to pkg/idtools, and un-export
5b6b42162b pkg/fsutils: deprecate in favor of containerd/continuity/fs
26659d5eb8 pkg/directory: remove unused MoveToSubdir() utility
bd6217bb74 pkg/directory: minor refactor of Size()
0a861e68df pkg/directory: Size(): add back type-casts to account for platform differences
618f26ccbc Volume prune: only prune anonymous volumes by default
7b4e4c08b5 Update to go 1.19.2 to address CVE-2022-2879, CVE-2022-2880, CVE-2022-41715
271243d382 docs: swagger: update description for default builder version
c523d6d25c libnetwork: remove some outdated comments
6f435e0bb9 Update awslogs driver batching documentation.
60ace31be0 libnetwork: sandbox.updateDNS(): use const for file permissions
f0be4d126d libnetwork: use object-literal for some structs
50a7c67363 libnetwork: fix some whitespace formatting
481185fb8a libnetwork/osl: fix GoDoc formatting
4c0e0979b4 Fix live-restore w/ restart policies + volume refs
3c69b9f2c5 replace pkg/fileutils Matching funcs with github.com/moby/patternmatcher
0249afc523 migrate pkg/pubsub to github.com/moby/pubsub
0440ca07ba pkg/fileutils: remove gotest.tools as dependency, use t.TempDir()
f73d72bfdc pkg: replace some README's with GoDoc package descriptions
b44b3193d0 oci.DevicesFromPath() switch to use containerd implementation
c3a6de9ec8 logger/journald: unlock OS threads
e2114731e7 contrib: make dockerd-rootless-setuptool.sh more robust
8a2e1245d4 runconfig, oci, image, layer, distribution: fix empty-lines (revive)
f63dea4337 cmd/dockerd: fix empty-lines (revive)
cd51c9fafb client: fix empty-lines (revive)
f71fe8476a api/server: fix empty-lines (revive)
b04f1416f6 opts: fix empty-lines (revive)
ddb42f3ad2 daemon: fix empty-lines (revive)
05042ce472 daemon/images: fix empty-lines (revive)
0695a910c6 daemon/logger: fix empty-lines (revive)
9d9cca49b4 daemon/graphdriver: fix empty-lines (revive)
0c7b930952 daemon/cluster: fix empty-lines (revive)
4eb9b5f20e plugin: fix empty-lines (revive)
188724a597 volume: fix empty-lines (revive)
e9f1b83a4a testutil: fix empty-lines (revive)
786e6d80ba integration: fix empty-lines (revive)
ecb4ed172b builder: fix empty-lines (revive)
dc0c2340b8 integration-cli: fix empty-lines (revive)
31441778fa api/types: fix empty-lines (revive)
412c650e05 pkg/*: fix "empty-lines" (revive)
8cd244a318 daemon: replace ErrExtractPointNotDirectory with errdefs
c78af57e21 daemon: replace ErrVolumeReadonly with errdefs
0f1eeed5c2 daemon: replace ErrRootFSReadOnly with errdefs
e31e9180cd integration-cli: remove isCpCannotCopyReadOnly utility
3564d03b0f daemon: remove getPortMapInfo alias
ee5d8f43e1 pkg/signal: remove stubs for deprecated package
4a8b3b8bc5 api/types: remove aliases for deprecated Volume and VolumeUsageData
18ca7546f6 pkg/system: remove stubs for deprecated sequential functions
1e13247d6d pkg/idtools: mkdirAs(): fix infinite loops and repeated "chown"
7f3602f1c9 swagger: update links to logo
5dff494b87 test(pkg/archive): add TestImpliedDirectoryPermissions
cd381aea56 libnetwork: fix empty-lines (revive)
267108e113 libnetwork/config: rename ParseConfigOptions() to New()
4831ff9f27 refactor(pkg/archive): factor out createImpliedDirectories helper
09cc2f9d0e libnetwork/config: inline LoadDefaultScopes()
528428919e libnetwork/config: merge DaemonCfg into Config
571baffd59 libnetwork: remove old integration tests
46f4a45769 libnetwork/config: remove ParseConfig()
7d574f5ac6 libnetwork/config: inline ProcessOptions
a8a8bd1e42 libnetwork/config: remove "Experimental" and "Debug" options
2f1c382a6d golangci-lint: update to v1.49.0
a5be811269 chore(integration): delete outdated TODO comment
6ca4eda960 daemon: clean up vestiges of ContainerFS
9ce2b30b81 pkg/containerfs: drop ContainerFS type alias
e332c41e9d pkg/containerfs: alias ContainerFS to string
95824f2b5f pkg/containerfs: simplify ContainerFS type
be4f4644a8 pkg/containerfs: drop Driver abstraction
7014c0d65d pkg/containerfs: drop PathDriver abstraction
e37a2d1879 pkg/containerfs: delete Archiver, Driver
a7c8fdc55b pkg/containerfs: make ResolveScopedPath a free fn
fd16e003fb pkg/containerfs: Remove NewLocalDriver()
4d48c00f94 pkg/containerfs: Trim away Driver interface part 1
489e7b61bf vendor: github.com/moby/sys/sequential v0.5.0
323ab8ef97 vendor: github.com/github.com/coreos/go-systemd v22.4.0
0af7b4961a client: TestNewClientWithOpsFromEnv(): use sub-tests
1a3d8019d1 Remove the OS check when creating a container
3e1601a980 vendor: gotest.tools v3.3.0
49de15cdcc libnetwork/resolvconf: removed unused GetIfChanged() and GetLastModified()
55fd77f724 set ReadHeaderTimeout to address G112: Potential Slowloris Attack (gosec)
6d59619d6e ci: reduce cache throttling limits
511a909ae6 container: remove ViewDB and View interfaces, use concrete types
419c47a80a Jenkinsfile: use Ubuntu 20.04 for DCO stage
5e50d002f1 ci: fix branch filter pattern
8596486743 Jenkinsfile: remove unit-validate stage
cd54f31984 Jenkinsfile: remove report bundles creation in unit-validate
a354970eaa Jenkinsfile: remove validation steps moved to GHA
85fa72c599 chore: update supported go version to 1.18+
c0fa14e8af vendor: github.com/armon/go-metrics v0.4.1
1d7ceb2fee vendor: github.com/google/btree v1.1.2
2597a71623 client: ignore kernel-memory on API >= 1.42
9b428a3d33 integration-cli: remove TestDockerSuite func
7b9877bd8a ci(test): report summary output
8ad8c6d887 fix debian sysvinit script fails to restart docker daemon when stopped
7602edfd06 ci: reusable dco workflow
5a98363a92 ci(test): dynamic validate matrix
9b71a46899 Revert "validation: temporarily allows changes in integration-cli"
3cb933db9d Update uses of Image platform fields in OCI image-spec
a73d78f8d5 ci(test): validate job matrix
c7e77dba7f Update some tests for supplementary group permissions
f6b695d2fb use consistent alias for gotest.tools/v3/assert/cmp
9f8bd80487 Jenkinsfile: remove steps moved to GitHub Actions
36688496ca ci: fix .windows workflow name
807c849431 ci(test): send coverage to codecov
4c8af0e2f9 ci(test): upload reports
60864229b8 integration-cli: TestPluginInstallImage broken on GitHub Runner
b8bf60c590 integration-cli: TestEventsOOM* broken on GitHub Runner
df731c745a integration: TestNetworkLoopbackNat is broken on GitHub Runner
2e04be3fb9 ci: gha test workflow for integration and unit test
4dd86a0b33 containerd-integration: prefer error over panic where possible
ff81dc3544 api/server/backend/build: remove Tagger and NewTagger
779a5b3029 ImageService.GetImage(): pass context
1eadbdd9fa Update to go 1.19.1 to address CVE-2022-27664, CVE-2022-32190
58413c15cb update to golang 1.19
9dab00a76e daemon/images: manifestMatchesPlatform() punch through context
518179f63e vendor: golang.org/x/net v0.0.0-20220906165146-f3363e06e74c
cba36a064d Update to go 1.18.6 to address CVE-2022-27664, CVE-2022-32190
878906630b Wrap local calls to the content and lease service
0f052eb4f5 namesgenerator: remove Valentina Tereshkova
609d87003a pkg/archive: strip "write" bits again on Windows
cddaa84777 pkg/archive: remove backward compat hack for go < 1.9
306b8c89e8 linting: host:port in url should be constructed with net.JoinHostPort
31fb92c609 linting: gosec: fix or suppress G112, G114 in test code
561a010161 linting: suppress false positive for G404 (gosec)
a33d1f9a7c libnetwork/diagnostic: EnableDiagnostic(): use net.JoinHostPort
de4af86e98 daemon: set containerd default snapshotter if none is configured
13f99eb65f vendor: github.com/docker/go-units v0.5.0
1557892c37 api: swagger: add errorDetail to CreateImageInfo
d983fa0ebe api: docs: add errorDetail to CreateImageInfo (v1.42)
8b36298d7f pkg/archive: remove tests for CanonicalTarNameForPath
d59758450b pkg/archive: make CanonicalTarNameForPath and alias for filepath.ToSlash
509f19f611 replace pkg/system Sequential funcs with moby/sys/sequential
a4d081cc17 ci: move buildkit tests to a dedicated workflow
5cfc9c374c validate: address SC2155 (shellcheck)
b9fd2cf605 validate: format vendor script with shfmt
6cef06b940 validate: add yamllint validation
91bb776bb8 validate: yamllint: ignore "truthy value should be one of" warnings
cc2134ea83 validate: yamllint: set locale in config file
f679d8c821 validate: yamllint: use "parsable" output
5f114b65b4 validate: yamllint rename config-file
1d7cd76ee9 Dockerfile: update yamllint to v1.27.1
5e0599cb6e pkg/jsonmessage: export "Stream" interface
2640aec0d7 pkg/system: make IsAbs() platform-agnostic
65fdd10d4e ci(windows): move windows-2019 to another workflow
8e8d9a3650 ci: fix broken workflow
8b748bd326 daemon: stop health checks before deleting task
d0731af939 Unskip TestHealthCheckProcessKilled on Windows
f7277806c8 vendor: github.com/klauspost/compress v1.15.9
d52ffce38f update containerd binary to v1.6.8
bd98bf38e9 update runc to v1.1.4
5dcaad0dd3 Upgrades buildx to 0.9.1
c500d8824d vendor: github.com/moby/buildkit v0.10.4
6217f8001e gha: temporarily pin BuildKit integration test version
a09f8dbe6e daemon: Maintain container exec-inspect invariant
15b8e4a490 integration: synchronize TestWaitConditions
18e322bc7c Lock container when deleting its root directory
6a2f385aea Share logic to create-or-replace a container
4bafaa00aa Refactor libcontainerd to minimize c8d RPCs
57d2d6ef62 Update container OOMKilled flag immediately
b75246202a Stop locking container exec store while starting
92d2e12a4d daemon: getInspectData(): reduce cyclomatic complexity
313a7d716d daemon: getInspectData(): skip graphdriver data for snapshotters
74b84d00b3 integration-cli: add utility to check if snapshotters are enabled
0cbb92bcc5 daemon: capture output of killed health checks
549d24b437 libnetwork/drivers/ipvlan: fix missing IpvlanFlag field in config JSON
ba138d6201 daemon: don't set ignoreImagesArgsEscaped, managed where not needed
e14924570c client: remove deprecated WithDialer() option
7f0cf432e9 client: remove redundant pluginPermissionDenied
c3f0cd7457 client: remove deprecated IsErrUnauthorized, IsErrNotImplemented
23b8fcc74d ci: print Windows daemon event log timestamps
4b84a33217 daemon: kill exec process on ctx cancel
774e25de13 info: add driver-type
d8d990f2e3 daemon: make the snapshotter configurable
e6ee27a541 Allow containerd shim refs in default-runtime
7b7d1132e8 seccomp: allow "bpf", "perf_event_open", gated by CAP_BPF, CAP_PERFMON
360238e9e1 vendor: github.com/hasicorp/memberlist v0.4.0
b58de39ca7 daemon: complete the "--graph" / "-g" deprecation
d2276ff3f2 daemon: remove daemon.graphdriver
c6eab4077a daemon: info: fillDriverInfo() get driver-name from ImageService
8dd14509d7 ImageService: rename GraphDriverName to StorageDriver
ca52e0a244 vendor: github.com/containerd/containerd v1.6.8
f27b74f0f7 Makefile: update buildx to v0.9.0
327c8fc52f daemon/config: use initialized config in more tests
2d7d81bc46 cmd/dockerd: use initialized config in tests
b28e66cf4f daemon/config: New(): initialize config with platform-specific defaults
9d74c7ab99 daemon: Mount(): use container's driver information for error-message
239d9c5eda daemon: restore(): remove fallback for legacy containers
6ccda5a041 daemon: restore(): remove platform-check (was used for LCOW)
9a849cc83a introduce GetImageOpts to manage image inspect data in backend
a4b28e23cf integration-cli: Correct emptyfs id under c8d
502d3a1fcb containerd/load: Load all platforms
8925f735a1 daemon/config: fix GoDoc for StockRuntimeName
226e07144e cmd/dockerd: initContainerd() use early return
6560e0b136 cmd/dockerd: initContainerD(): clean-up some logs
b6b0b0a05f libcontainerd/supervisor: don't write log-level to config file
bff3e85625 libcontainerd/supervisor: store location of config-file
7a9791f096 libcontainerd/supervisor: store location of pidFile
89ab14a115 libcontainerd/supervisor: make supervisor adjust OOM score for containerd
1d2a669445 libcontainerd/supervisor: use correct logger
2d511f28f2 libcontainerd/supervisor: platformCleanup(): use canonical socket address
7b0bd43a27 libcontainerd/supervisor: remove unused remote.rootDir
6b7e19ff42 libcontainerd/supervisor: remove unused RWMutex
37a241768d cmd/dockerd: fix some minor issues in Windows implementation
df965f51bf pkg/idtools: remove deprecated NewIdentityMapping, UIDS() and GIDS()
9861dd069b vendor: github.com/moby/swarmkit/v2 v2.0.0-20220721174824-48dd89375d0a
7797480eb0 daemon, builder: rename variables that collided with imports
acd0aa7d38 api/server/router/image: address some linter warnings
e05f614267 vendor buildkit 8e2d9b9 (v0.10 branch)
4e46d9f963 update containerd binary to v1.6.7
7376bf948b vendor: github.com/containerd/containerd v1.6.7
30295c1750 api: swagger: fix invalid example value (API v1.39-v1.41)
9031de6a9b fix minor code unreachability error
5c96365c94 containerd: Unpack loaded images
50fb999bb1 add image load/save support
43956c1bfc api: swagger: document BuildCache fields (API v1.39-v1.41)
5371c889a8 api: swagger: document BuildCache fields (API v1.42)
e0db8207f3 api: add BuildCache.Parents for API >= v1.42
ebf339628a api: deprecate BuildCache.Parent in API >= v1.42
e0286d7f4e api/types: add missing GoDoc for BuildCache fields.
dc2b34af6a api: swagger: document BuildCache fields.
d4579a983e containerd/pull: Use authorization
340711db3d api: add types/volume.ListOptions for a more consistent API
f1d71f7cc3 Update golang to 1.18.5
051e604adc libcontainerd/supervisor: simplify logic for disabling CRI plugin
d4d5e0ae0c libcontainerd/supervisor: remove unused options
0f5ac7761d api: api/server/router/build: fix API errors
69f077f1aa vendor: github.com/Microsoft/hcsshim v0.9.4
982f09f837 docs: api: add missing "platform" query-arg on create (v1.42)
1000e4ee7d docs: api: add missing "platform" query-arg on create (v1.41)
3dae8e9fc2 api: swagger: add missing "platform" query-arg on create
7ca66e3cfc api: add registry.EncodeAuthConfig
7819811835 api: add registry.DecodeAuthConfig, registry.DecodeAuthConfigBody
e3a7a1c6ae client: linting: fix "invalid auth header" error
360d38adb1 daemon/containerd: use types/registry.AuthConfig
2b7416ef34 testutil, integration: use types/registry.AuthConfig
d817f4dcee registry: use types/registry.AuthConfig
55d1a56826 plugin: use types/registry.AuthConfig
04c339a12b distribution: use types/registry.AuthConfig
a02abca49a daemon: use types/registry.AuthConfig
39f3adc079 daemon/images: use types/registry.AuthConfig
05eacf92fe daemon/cluster: use types/registry.AuthConfig
eaf1a604f2 client: use types/registry.AuthConfig
d8a43399a8 api/server/router: use types/registry.AuthConfig
818ee96219 api/types: move AuthConfig to registry types
857cb260c7 api: add const for 'X-Registry-Auth'
26c65447df Implement ImageDelete for containerd
f4c0ec8ffc integration-cli: Make service process live forever
547da0d575 daemon: support other containerd runtimes (MVP)
31f654a704 Fix file capabilities droping in Dockerfile
ba2ff69894 libcontainerd: switch generated containerd.toml to v2 (v1 is deprecated)
ef5b279887 logger/journald: implement --follow correctly
e278d3f185 logger/*: fix reading w/ non-monotonic timestamps
342b44bf20 logger/journald: rewrite reader w/o cursors
3e8405aa82 logger/journald: refactor cgo out of business logic
7ff4b64319 logger/journald: simplify control flow
f7fe2c2290 logger/journald: follow the thread-safety rules
12744335c0 logger/journald: simplify build constraints
0e0b300a1c Fix `make BIND_DIR=. DOCKER_SYSTEMD=1 shell`
a61f7abf5a integration-cli: Enable TestGetContainersAttachWebsocket for Windows
1213881712 libnetwork: refactor networkdb test implementation
6cc644abef integration-cli: Remove unnecessary Windows-only code
7bdc0a6291 compute image's shared size
a1bc0a6d79 daemon/containerd: add more TODO's for image list, and reformat
f499c6b9ec Test: wait for network changes in TestNetworkDBNodeJoinLeaveIteration
669fbed1ac daemon/containerd: validate image filters
4d3b32bf3d add support for since, before, labels images filters
0e9a66d35a logger/journald: remove journald_compat (for systemd < 209)
75577fe7a8 logger/journald: fix SA4011: ineffective break statement
a290f5d04c state/Wait: Fix race when reading exit status
5571d5139b integration: TestWaitRestartedContainer
498803bec9 daemon/restart: Don't mutate AutoRemove when restarting
c492105b8f integration: Add TestContainerWithAutoRemoveCanBeRestarted
67c36d5d6e Windows: Re-create custom NAT networks after restart if missing from HNS
a46ce37d25 compute image VirtualSize
9c8b0b6050 daemon/containerd: split methods to separate files
e4cd1933c6 daemon/containerd: ImageService: rename receiver
91bd9a6642 daemon/containerd: change alias for oci-specs to match existing code
b529fe0995 daemon/images: fix some linting issues
b94f7157ca daemon/images: rename images.go to image_list.go for consistency
046b3fc5dd daemon/images: move SquashImage to its own file
6e0e5d7a31 daemon/images: rename variables that collided with imports
2527e6dd09 daemon/containerd: ImageService: remove unused LookupImage()
7b510fda0c daemon: ImageService: remove unused Map() method
ff3d2eb589 Add Cory Snider (corhere) as maintainer
9464898b47 libnetwork: skip firewalld management for rootless
7d74269c0d Create the containerd image service
4f08346686 fix formatting of "nolint" tags for go1.19
34b8670b1a update golang to 1.18.4
68bf777ece daemon: remove deprecated fields and flags for cluster-advertise
494dadb8a3 api/types: remove deprecated fields for cluster-advertise
f02cdb50be api/types/volume: remove deprecated types
efb1f141a4 api/types/container: remove deprecated types
10829dd222 daemon: NewDaemon(): fail early on non-supported platforms
1de20b2012 API: bump version to 1.43
264b41fb9e docs: add API v1.42
e258d66f17 profiles: seccomp: add syscalls related to PKU in default policy
9cd67df5b2 timestamp: clarify doc for ParseTimestamp
ee230d8fdd client: errors: remove dead code
52c1a2fae8 gofmt GoDoc comments with go1.19
e4e819b49c pkg/parsers/operatingsystem: fix stray import
6668801d40 gofmt files
5b0eb69635 Extract ImageService interface from the image service
98ce26624b maintainers: Add Paweł Gronowski as curator
4336271b57 maintainers: Add Bruno Sousa as curator
ab6b40e5a9 Add github issue forms
b1a6d5388d libnetwork: macvlan: reduce use of const for driver name
aca80d1cda libnetwork: ipvlan: reduce use of const for driver name
dddb4d25d2 libnetwork: macvlan: cleanup parseNetworkGenericOptions
1992190162 libnetwork: macvlan: make configuration.fromOptions a constructor
99bde59229 libnetwork: ipvlan: cleanup parseNetworkGenericOptions
1a1a885423 libnetwork: ipvlan: make configuration.fromOptions a constructor
4e39cdd9bb libnetwork: ipvlan: move validation into parseNetworkOptions()
9f0cb20d9f libnetwork: macvlan: move validation into parseNetworkOptions()
b768d69c04 libnetwork: macvlan: processIPAM(): simplify
5d13b38479 libnetwork: macvlan: processIPAM(): remove unused arg and error return
798021af9f libnetwork: macvlan: set network ID as part of parseNetworkOptions
35cba9b1c9 libnetwork: ipvlan: processIPAM(): simplify
8d067bbdb4 libnetwork: ipvlan: processIPAM(): remove unused arg and error return
a893540b66 libnetwork: ipvlan: set network ID as part of parseNetworkOptions
afeb4c7a6e libnetwork: macvlan: use single ipSubnet type
d3e3d43482 libnetwork: ipvlan: use single ipSubnet type
9fba1514d2 libnetwork: macvlan: clean up some consts
aec4853498 libnetwork: ipvlan: clean up some consts
33121d3d45 introduce Containerd-snapshotter feature flag
2293de1c82 update runc binary to v1.1.3
af7236f85a Check ipt options before looking for ip6t
25345f2c04 AdditionalGids must include effective group ID
7b153b9e28 api: set default "Builder-Version" to "2" (BuildKit) on Linux
70dc392bfa Use hashicorp/go-memdb instead of truncindex
8d5eebcc6e vendor: github.com/bsphere/le_go v0.0.0-20200109081728-fc06dab2caa8
Bumping docker-cli to version v24.0.0, which comprises the following commits:
fb6ae356c vendor: github.com/docker/docker v24.0.0-rc.3
de93c9b26 vendor: github.com/docker/distribution v2.8.2
cafdcf283 cli-plugins/manager: fix deprecation comment of Metadata.Experimental
3768143c2 Update tag docs to clarify name
52ac1a974 docs: update description for docker -H flag
58f37f630 vendor: github.com/docker/docker v24.0.0-rc.2
4f97f5599 vendor: github.com/docker/docker v24.0.0-rc.1.0.20230505222407-8d9a40a82034
0428418d6 vendor: github.com/containerd/containerd v1.6.21
05bf6fff2 vendor: github.com/opencontainers/runc v1.1.7
44fce0706 vendor: github.com/mattn/go-runewidth v0.0.14
fd0621d0f update go to go1.20.4
155f7d9e2 cli/command/system: add utilities for printing
1e89037d7 cli/command/system: prettyInfo: accept Streams
8cfefc6ea cli/command/system: prettyPrintServerInfo: accept Streams
ba7a200f0 cli/command/system: prettyPrintClientInfo: accept Streams
73938cd61 cli/command/system: printSwarmInfo(): accept io.Writer
2d0ea86b0 cli/command/system: use io.Writer for printing warnings
be6f4cd56 cli/command/system: prettyPrintServerInfo: refactor printing "runtimes"
1d70f7cdb cli/command/system: prettyPrintServerInfo: rename var that collided with import
416e55bed github.com/docker/cli/cli/command/system: add BenchmarkPrettyPrintInfo
f233becf9 vendor: github.com/moby/term v0.5.0
bd2c26328 vendor: github.com/docker/docker v24.0.0-rc.1
f02301ab5 remove uses of deprecated VirtualSize field
eeaaf5d01 e2e: Update alpine to 3.17.2
4569378ca e2e: Match notary server version with the main Dockerfile
ec5504a83 test/e2e: Use "frozen" tag to reference test images
41b6ec07c e2e: Skip tests with platform-specific digests on other platforms
962e22c31 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230406225228-75e92ce14ff7
72192c75c vendor: github.com/moby/buildkit v0.11.6
c177e2060 vendor: github.com/creack/pty v1.1.18
e693e7f3b Docs freshness updates
1c1fca4eb docs: update deprecation status of "overlay" and "AuFS"
c180202ce cli/command: remove deprecated Stream types
4e19b8128 docs: update deprecation status for overlay2.override_kernel_check
0dec5d20a volumes: prune: add --all / -a option
ff7f76af7 Handle empty DOCKER_BUILDKIT like unset
271b9667e Swarm: allow additional properties in `build`
e2bfd2199 cli/compose: add schema 3.11 (no changes with 3.10 yet)
6c4c3c23c build(deps): bump docker/bake-action from 2 to 3
8ef8f4131 man/dockerd.8: assorted formatting fixes
e3cb324ed man/dockerd.8: escape asterisks and underscores
a4bcabc7d vendor: github.com/docker/docker v24.0.0-beta.2
0286e36bb vendor: github.com/opencontainers/runc v1.1.6
1f1a6c5a8 vendor: golang.org/x/net v0.8.0
6e2163a71 vendor: golang.org/x/text v0.8.0
551d519b5 vendor: golang.org/x/term v0.6.0
c97c3211b docs: deprecation: OOM-score adjust for the daemon
88be16cb5 cli/command/container: implement `docker run --annotation`
6f415d240 docs: update deprecation status of BuildKit "buildInfo" for v24.0.0
da3871fd8 cli/command/system: printServerWarnings: use client API version from info
be307c579 cli/command/system: prettyPrintServerInfo: move out collecting username
71fde20e1 cli/command/system: prettyPrintServerInfo: simplify username
375b17a31 docker info: don't print "registry" (IndexServerAddress)
b87ed3435 cli/command: deprecate EncodeAuthToBase64
5d856a5d9 cli/command/container: pullImage: use DisplayJSONMessagesToStream utility
b9b98aee5 cli/command/container/create: pullImage(): use RetrieveAuthTokenFromImage
a27acd62b cli/command/container/create: pullImage() remove intermediate vars
e0b47cc2c cli/command/image: imagePullPrivileged: remove intermediate variables
372bb56ad cli/command: replace EncodeAuthToBase64 for registry.EncodeAuthConfig
534bfc230 cli/command/registry: remove intermediate var that collided
5e76d41bf cli/command: ConfigureAuth: fix links to related tickets
68d791e56 cli/command: ConfigureAuth: trim whitespace both for username and password
d0ec8fa5c cli/command: ConfigureAuth: fix terminal state not being restored on error
c846428cb docs: update dockerd usage output for new proxy-options
c730a8eb9 docs/reference: dockerd: remove default oom-score-adjust
c20974361 docs/reference: dockerd: update seccomp flag description
32bc91200 docs/reference: dockerd: use table for env-vars
370174800 docs/reference: use table for proxy env-vars
879e0804a docs/reference: reformat env-vars table, and simplify
4a863df57 docs/reference: remove mention of DOCKER_NOWARN_KERNEL_VERSION
c388fe4de cli: make cobra templates a const
341c843ac ci: remove fetch depth 0 for validate jobs
25ed7847e ci: add validation for generated markdown
04df70025 docs: deprecated: fix version (23.1.0 -> 24.0.0)
5bd359132 cli/command: fix documentation for ResolveAuthConfig
8ee771114 docker info: include Client Version and "platform name"
3347d7b5a cli/command/system: add newClientVersion() utility
3124e779c cli/command/system: clientVersion: make all fields "omitempty"
9202bef4a cli/command/system: add platformInfo type, and fix "omitempty"
5d37acdde cli/command/system:remove versionInfo.ServerOK() utility
5d33b7276 docs: update engine versions in some examples
23bd746c4 fix docker version --format=json not outputting json format
80640bca7 cli/command/system: make default version template a const
46234b82e fix docker info --format=json not outputting json format
1aaa179d9 cli/command/formatter: export JSONFormat const
37e02ff21 docker ps: print warning if both --format and --quiet are set
f52290559 docker ps: always use --quiet, also combined with --format
f36e4b094 cli/command/container: rename vars that collided
c25b8f803 vendor: github.com/spf13/cobra v1.7.0
ca1d0eb90 Update version to v24.0.0-dev
08a794dc0 docs: regenerate markdown docs
37f234fbe scripts/docs/generate-md.sh: fix location of generate code
591bead14 update go to go1.20.3
683e4bf0c Fix plugin completion parsing for plugins using `ShellCompDirectiveFilterFileExt`
808032652 cli/streams: minor refactoring and docs touch-ups
66a1c3bab cli/config/configfile: remove deprecated StackOrchestrator field
328fac3a6 cli/context/docker: remove deprecated Endpoint.TLSPassword
aace828bb cli/flags: remove deprecated CommonOptions, NewCommonOptions
8b418be6d cli/context/store: remove deprecated error-utilities
3405eb1f4 cli/command/formatter: remove deprecated KubernetesEndpoint
817897f89 cli/command: fix deprecation comments for Stream types
89583b92b improve plugins listing performance
fc560038e vendor: github.com/docker/docker v24.0.0-beta.1
e14f5fc1a revert "improve plugins discovery performance"
05cffcbed vendor: github.com/docker/docker 7c93e4a09be1 (v24.0.0-dev)
a36a54d3c vendor: github.com/containerd/containerd v1.6.20
f4b22fb6c vendor: github.com/opencontainers/image-spec v1.1.0-rc2.0.20221005185240-3a7f492d3f1b
eb392ff4c cp: Do not block transfer on writing to terminal
7189716d5 replace uses of deprecated api/types.AuthConfig
bfa79fd75 vendor: github.com/docker/docker master (v24.0.0-dev)
e86d2f411 vendor: github.com/moby/buildkit v0.11.5
cd9c6a4c0 vendor: github.com/klauspost/compress v1.16.3
5843fbd5f vendor: github.com/imdario/mergo v0.3.13
149d28963 vendor: golang.org/x/sys v0.6.0
6dca335d0 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230315203717-e28e8ba9bc83
4389c966f vendor: github.com/opencontainers/runc v1.1.5
a79828287 update to go1.20.2
b8747b0f9 update golangci-lint to v1.52.2
399ded9b9 internal/test: FakeCli: remove name for unused arg (revive)
20a70cb53 internal/test/notary: remove name for unused arg (revive)
90380d957 cli/connhelper/commandconn: remove name for unused arg (revive)
dd6ede210 cli/config/configfile: mockNativeStore: remove name for unused arg (revive)
7c8680c69 cli/compose/schema: remove name for unused arg (revive)
6355bcee6 cli/compose/convert: fakeClient: remove name for unused arg (revive)
607f290f6 cli/command/volume: remove name for unused arg (revive)
546cf6d98 cli/command/trust: fakeClient: remove name for unused arg (revive)
b32b28041 cli/command/task: fakeClient: remove name for unused arg (revive)
40a51d554 cli/command/swarm: fakeClient: remove name for unused arg (revive)
b0d0b0efc cli/command/stack: fakeClient: remove name for unused arg (revive)
c69640d8c cli/command/service: fakeClient: remove name for unused arg (revive)
5254081fd cli/command/registry: fakeClient: remove name for unused arg (revive)
da3416c02 cli/command/plugin: fakeClient: remove name for unused arg (revive)
625988c3a cli/command/node: fakeClient: remove name for unused arg (revive)
92d9e3bf6 cli/command/network: fakeClient: remove name for unused arg (revive)
316c4992c cli/command/image: fakeClient: remove name for unused arg (revive)
ae5a86bb8 cli/command/image/build: remove name for unused arg (revive)
38ef40ee7 cli/command/idresolver: fakeClient: remove name for unused arg (revive)
45b5676ac cli/command/container: fakeClient: remove name for unused arg (revive)
5563c5a91 cli/command/checkpoint: fakeClient: remove name for unused arg (revive)
9dd012aa5 cli/command/secret: fakeClient: include context in fake client (revive)
66c66bdce cli/command/config: fakeClient: include context in fake client (revive)
ac024a4d8 internal/test/network: FakeClient: embed interface to remove boilerplating
a2d532819 cli/trust: remove name for unused args (revive)
f5fad186c opts: NormalizeCapability(): fix redefinition of the built-in function (revive)
9252fae83 cli/registry/client: AuthorizeRequest(): remove name for unused arg (revive)
92506afd4 cli/command/service/progress: remove name for unused parameter (revive)
c3d7f167b cli/command: RunPrune(): remove name for unused "all" parameter (revive)
b4aff3a14 cli/command/completion: NoComplete(): remove unused argument (revive)
f08252c10 cli/command/stack: deprecate now obsolete wrappers
78c474539 cli/command/context: remove redundant if ...; err != nil check (revive)
be97731f1 cli/command/container: fix redefinition of the built-in function close (revive)
b9a1b0928 cp: Make gocyclo happy
90b7bc36d cp: Reduce number of progress updates
efd011b79 cp: reduce branching in progress printer
e4436853e gha: align stray go 1.19.4 version
9335690a6 Fix grammar in docs by adding omitted word
ccae6e929 cp: Improve tty flashing on progress updates
f27927d93 cp: do not emit progress if stderr is not a term
a39958846 vendor: github.com/docker/docker v23.0.2
c39c711a1 load plugin command stubs when required
62f2358b9 improve plugins discovery performance
bebdb6fa2 ci: enhanced build workflow
bec5d37e9 don't use null values in the bake definition
b201ce5ef e2e: update notary certificates
c6c33380d e2e: increase tests certificates duration (10 years)
d234a81de bake target to generate certs for e2e tets
3ce95c7af Dockerfile: build binary if no target specified
b854eff30 Dockerfile: align go version
0ba820ed0 cli/trust: remove special handling for "plugin" Class
a3d56e7d0 cli/command: remove deprecated ElectAuthServer()
742881fc5 cli/command: fix imports formatting
e3fa7280a cli/command: ElectAuthServer: fix deprecation comment
db827d583 cli/command/volume: suppress err output in tests
aa0aa4a6d Add bash completion for available plugins
8805f8ea2 build(deps): bump actions/setup-go from 3 to 4
e60c748c1 vendor: github.com/moby/buildkit v0.11.4
6c8cc226f vendor: google.golang.org/grpc v1.50.1
d213548bd vendor: golang.org/x/net v0.7.0
3a0d492d1 vendor: golang.org/x/term v0.5.0
f40bbf4f7 vendor: golang.org/x/time v0.3.0
a85537d34 vendor: golang.org/x/text v0.7.0
3e9c6e84c vendor: golang.org/x/sys v0.5.0
ca8783ef4 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230309194213-a745a8755ce3
33806760a vendor: github.com/containerd/containerd v1.6.19
71e495aa5 vendor: github.com/docker/docker v23.0.1
74c4ed417 Dockerfile: update buildx to v0.10.4
23da1cec6 update to go1.19.7
012b77952 stack: Change unexpected environment variable error
a47058bbd stack/loader: Ignore cmd.exe special env variables
25ebf0ec9 connhelper: Allow socket path when using SSH
973333448 Don't automatically request size if `--size` was explicitly set to `false`
8bc1aacea docs: Deprecate buildkit's build information
89687d5b3 formatter: Consider empty RepoTags and RepoDigests as dangling
a1953e19b test/cli: Use empty array as empty output of images/json
e636747a1 docs: drop dated comments about graphdrivers
dac79b19a Dockerfile: update buildx to v0.10.3 release notes: https://github.com/docker/buildx/releases/tag/v0.10.3
c2487c299 context: avoid corrupt file writes
e921e103a update to go1.19.6
d2f726d5a changed the container name in docker stats page
de9b47ae6 Fix styling of arguments
0f3959868 ci: fix branch filter pattern
4254cd19b MAINTAINERS: add myself as curator
bbebebaed vendor: github.com/docker/docker v23.0.0
5195db1ff vendor: github.com/containerd/containerd v1.6.16
9b5ceb52b cli/command/container: exit 126 on EISDIR error
56051b84b Fix bad ThrottleDevice path
74973adaa cli/command: embed "Streams" interface in "Cli"
2753057c4 contrib/completion: bash `nounset` mode fixes
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
d38fffa859 |
moby: update to v23.0.6
Bumping moby to version v23.0.6-2-gcb3fd005d4, which comprises the following commits:
e94c22cc39 vendor: github.com/docker/distribution v2.8.2
e73310d8c9 update runc binary to v1.1.7
3f0402cb68 update runc binary to v1.1.6
edadebe177 update containerd binary to v1.6.21
14661fc010 vendor: github.com/containerd/containerd v1.6.21
e00f6efb20 Vendor containerd 1.6.x with the readonly mount fix
bd4620f6ee vendor: github.com/containerd/containerd v1.6.20
d06cf03729 vendor: re-vendor to add missing file
cf7742ea7c vendor: opencontainers/image-spec v1.1.0-rc2.0.20221005185240-3a7f492d3f1b
382e9ebbf6 vendor: github.com/containerd/ttrpc v1.1.1
e0843f264d Update `github.com/containerd/containerd` to the HEAD of `release/1.6` and vendor
94fcd2d2ef d/graphdriver/copy: support src fs w/o xattr support
70dbd2c870 [23.0] update go to go1.19.9
fe0a414613 Use the image service instead of the reference store for tagging
40ec0eb9fe vendor: github.com/opencontainers/runc v1.1.5
227d3f39a3 daemon: set docker0 subpool as the IPAM pool
c82be35412 libnetwork: clean up inDelete network atomically
ccccb7a170 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230315203717-e28e8ba9bc83
8a6bec6e16 Silence GRPC logs unless our log level is debug
844fd50c67 Added timeout to validate job in github actions
8cec683574 Dockerfile: update xx to 1.2.1
7ff53c3c78 Update delve version
4d57ee692d TestLogs: Increase stop check poll timeout on Windows
838d5ea058 chore: use http constants to replace numbers
61d084593c client: deprecate NewClient properly
28b694d32d awslogs: fix non-blocking log drop bug
3731ce10d4 Fix argument quoting bugs in dockerd-rootless.sh
23774ada04 vendor: github.com/moby/buildkit v0.10.7-0.20230412161310-d52b2d584242
9277e64444 vendor: github.com/ishidawataru/sctp v0.0.0-20230406120618-7ff4192f6ff2
09fbbd5677 docker-rootless-setuptools.sh: improve readability of messages
d3e52936c3 [23.0] update go to go1.19.8
a0a597cbbe [23.0] fix vendor.mod: add hashicorp/go-multierror as direct dependency
063d3a6f1a daemon: let libnetwork assign default bridge IPAM
389e18081d update containerd binary to v1.6.20
348544e6e8 libnet/d/windows: log EnableInternalDNS val after setting it
3923e302a4 update runc binary to v1.1.5
f3946c14fe integration-cli: Enable TestExecStartFails on Windows
b87f7f18b8 libnet/d/overlay: insert the input-drop rule
c6bf3071fe StartWithLogFile: Fix d.cmd race
7f49ca259b TestDaemonRestartKillContainers: Fix loop capture
98cbcb8003 libnet/d/overlay: add BPF-powered VNI matcher
5c5fac2374 libnet/d/overlay: extract VNI match rule builder
c492a22287 libn/d/overlay: enforce encryption on sandbox init
018edb0284 libnet/d/overlay: document some encryption code
Bumping libnetwork to version v0.7.0-dev.3-1872-g3f004841, which comprises the following commits:
dbbf124d Clean up inDelete network atomically
d4d07f4a d/windows: log EnableInternalDNS val after setting it
91f0d508 update maintainers
c5aa85f9 drivers/overlay: insert the input-drop rule
bef66946 drivers/overlay: appease the old deprecated linter
a94fe95b drivers/overlay: add BPF-powered VNI matcher
e0376b6c drivers/overlay: extract VNI match rule builder
f1945d37 drivers/overlay: enforce encryption on sandbox init
97442407 drivers/overlay: document some encryption code
Bumping docker-cli to version v23.0.6-8-g44a7d9537, which comprises the following commits:
a98af2b39 vendor: github.com/docker/distribution v2.8.2
6f353c800 cli-plugins/manager: fix deprecation comment of Metadata.Experimental
63b205048 Update tag docs to clarify name
c76773b19 docs: update description for docker -H flag
c769f2079 [23.0] update go to go1.19.9
802f17488 [23.0] vendor: github.com/docker/docker v23.0.5
498743aed [23.0] vendor: github.com/moby/swarmkit/v2 v2.0.0-20230315203717-e28e8ba9bc83
fde09d1d8 [23.0] vendor: github.com/opencontainers/runc v1.1.5
3cda7c30c [23.0] vendor: github.com/docker/docker v23.0.4
6c0f9022c Docs freshness updates
17357a778 build(deps): bump docker/bake-action from 2 to 3
2cf68537d ci: remove fetch depth 0 for validate jobs
4a4291708 ci: add validation for generated markdown
f914316a9 fix docker version --format=json not outputting json format
9dfe5a29e cli/command/system: make default version template a const
2c1fde223 fix docker info --format=json not outputting json format
99124087e cli/command/formatter: export JSONFormat const
86e79b55e volumes: prune: add --all / -a option
ada43812d cli/command/volume: suppress err output in tests
c648e0b06 Handle empty DOCKER_BUILDKIT like unset
b6cd3c85b docs: update dockerd usage output for new proxy-options
aa85421ff docs/reference: dockerd: remove default oom-score-adjust
6bc4bf4f0 docs/reference: dockerd: update seccomp flag description
8a35f92ff docs/reference: dockerd: use table for env-vars
2cb152c41 docs/reference: use table for proxy env-vars
623da1997 docs/reference: reformat env-vars table, and simplify
e76242fff docs/reference: remove mention of DOCKER_NOWARN_KERNEL_VERSION
4b4d7e2b4 cli/command: fix documentation for ResolveAuthConfig
e67e5559d docs: deprecated: fix version (23.1.0 -> 24.0.0)
a8e3b4b85 docs: update engine versions in some examples
f88c159c7 [23.0] vendor: github.com/docker/docker v23.0.3
6c052fcda vendor: github.com/docker/docker v23.0.2
079e80889 vendor: golang.org/x/net v0.7.0
ff448ff45 vendor: golang.org/x/term v0.5.0
476933b68 vendor: golang.org/x/time v0.3.0
6131fe9e4 vendor: golang.org/x/text v0.7.0
bbc791ed7 vendor: golang.org/x/sys v0.5.0
dd6f77bba vendor: github.com/moby/swarmkit/v2 v2.0.0-20230309194213-a745a8755ce3
cb338ec97 vendor: github.com/containerd/containerd v1.6.19
ffafb38e3 vendor: github.com/docker/docker v23.0.1
a763e5114 Fix plugin completion parsing for plugins using `ShellCompDirectiveFilterFileExt`
3c7de6454 Fix grammar in docs by adding omitted word
3d0d576af ci: enhanced build workflow
2609bd23f docs: regenerate markdown docs
5fd2c0850 scripts/docs/generate-md.sh: fix location of generate code
5cd7710a0 update go to go1.19.8
209e9c0c1 cp: Do not block transfer on writing to terminal
ce68ce7ae cp: Make gocyclo happy
c28cb35c4 cp: Reduce number of progress updates
948dfa91c cp: reduce branching in progress printer
f813c9639 cp: Improve tty flashing on progress updates
97d91f13a cp: do not emit progress if stderr is not a term
6efc4eacc cli/command: fix deprecation comments for Stream types
c7cdab58d improve plugins listing performance
d93d78588 load plugin command stubs when required
8e38271f2 gha: align stray go 1.19.4 version
f6643207a don't use null values in the bake definition
f381e0842 Dockerfile: align go version
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
55de27c51a |
containerd: update to 1.7.1
Bumping containerd to version v1.7.1-4-g835383b17, which comprises the following commits:
6a5e54c15 Get CDI devices from CRI Config.CDIDevices field
9e60300ea snapshots/testsuite: Rename: fix fuse-overlayfs incompatibility
7b288e2d7 Update ttrpc to v1.2.2
27a0d957b Prepare release notes for v1.7.1
0e0532eb2 bump typeurl to v2.1.1
35e86f96c [transfer] avoid setting limiters when max is 0
f7233811f Update transfer configuration
4510eac00 Fix image pulling with Transfer service
aaa65e8c1 Update hcsshim tag to v0.10.0-rc.8
95ef67e19 Fix umarshal metrics for CRI server
3ef5b689a runtime/shim: fix the nil checkpoint options
021bba28b update go to go1.20.4, go1.19.9
6b3ae0129 Remove entry for container from container store on error
c0e128624 skip TestContainerStartWithAbsRuntimePath if the runtime is v1
aa3c63c15 integration: add container start test using abs runtime path
d2d9eedb1 WithRuntimePath uses the TaskInfo.RuntimePath field
fae4b6223 update runc binary to v1.1.7
571715a9d cri: Vendor v0.27.1
a6d336c1f Fix argsEscaped tests
1bbf98e53 oci: partially restore comment on read-only mounts for uid/gid uses
8f6e86fec go.mod: add comment explaining go-fuzz-headers replace rule
1ece0cb50 go.mod: remove replace for github.com/opencontainers/runtime-tools
e9f962187 go.mod: integration: use non-pre-release of containerd
84393b005 go.mod: integration: move indirect dependencies to the right group
dec2595af update runc binary to v1.1.6
7de8629be cri: Throw an error if idmap mounts is requested
75ac7e0d8 cri: Vendor v0.27.0-beta.0 for mounts uid/gid mappings
54d12b872 oci: Use WithReadonlyTempMount when adding users/groups
624327651 update go to go1.20.3, go1.19.8
1d6641b7c export: add test for WithSkipDockerManifest
0e0d84f6b archive: consistently respect value of WithSkipDockerManifest
9b4935d86 Update sbserver to add noexec nodev and nosuid to /etc/resolv.conf mount bind.
5e953cfa6 Test to ensure nosuid,nodev,noexec are set on /etc/reolv.conf mount.
0aad93f08 Add noexec nodev and nosuid to sandbox /etc/resolv.conf mount bind.
1a64f1b43 ctr/tasks: fix unmarshal the task metrics for cgroups v1
17c52a26d Keep linux mounts for linux sandboxes on Windows/Darwin
d81fc15af update runc binary to v1.1.5
755efbe64 go.mod: github.com/opencontainers/runc v1.1.5
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
c772a5c230 |
cri-tools: update to v1.27.0
We refresh one patch for context, but otherwise no changes.
Bumping cri-tools to version v1.26.0-186-ge73a7139, which comprises the following commits:
00212a72 Bump github.com/docker/docker
f0bf767c Bump github.com/sirupsen/logrus from 1.9.0 to 1.9.1
c6ca9164 Bump github.com/onsi/ginkgo/v2 from 2.9.4 to 2.9.5
8c87ebfb Bump github.com/docker/distribution
b4fdcd33 Add validation when container OOMKilled
43675ad1 Bump github.com/docker/docker
3a32265d Bump github.com/onsi/ginkgo/v2 from 2.9.2 to 2.9.4
dd924127 Bump golang.org/x/net from 0.9.0 to 0.10.0
557024a5 Fix build flakiness
b2bee82a Bump github.com/urfave/cli/v2 from 2.25.1 to 2.25.3
801d6985 Bump golang.org/x/term from 0.7.0 to 0.8.0
f2e40682 Bump github.com/moby/term
dadffe3e test rm{,i,p} subcommands help message
13dbe21f Add CrictlExpect() to test framework
c714ecd6 Display help when running 'crictl rmi'
4eb6a64b Do not display help when deleting all pods/containers
ce6ad257 Bump github.com/opencontainers/runc from 1.1.6 to 1.1.7
c2c53b77 Bump github.com/docker/docker
deb3bf67 Download release notes tool binary directly
ae7a5eb7 Allow setting CGO_ENABLED
464d6452 Allow overriding GOFLAGS
e64d6e37 Allow providing (additional) custom GO_LDFLAGS
664ef74f Allow setting custom version but use git by default
a2ab0b20 Bump github.com/docker/docker
80bff8b3 Disable dependency gathering for release notes
74092cb9 Vendor Kubernetes v1.27.0
5c6a90bc Update CI badges
5c9d2ee0 Bump github.com/opencontainers/runc from 1.1.5 to 1.1.6
c953d28b golangci-lint: bump to 1.52.2 and fix errors
8d781b8f bump to go 1.20
554b1637 vendor: bump to kube 1.27.0
0497653a Improve text formatting
87cd4d48 Bump golang.org/x/net from 0.8.0 to 0.9.0
e2dc71a2 Bump golang.org/x/term from 0.6.0 to 0.7.0
b8009174 Bump github.com/docker/docker
1f393c4e Bump github.com/onsi/gomega from 1.27.5 to 1.27.6
1dbda3f7 Bump github.com/opencontainers/runc from 1.1.4 to 1.1.5
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
ea6911aea4 |
cri-o: update to 1.27.0
Bumping cri-o to version v1.27.0-14-g81ac4cea5, which comprises the following commits:
69a6d6fc2 Fix events generated by Evented PLEG
86cae21ec cgmgr: set sched_load_balance to disabled on sandbox cgroup
47d6d6c82 test/pod.bats: update to current setup
2b7f614e0 cgmgr: create cgroups for systemd cgroup driver for dropped infra pods
b415e72d6 Fix vendoring
6df1f0711 Update c/common to v0.53.0
cd9636049 Download more dependencies instead of vendoring
230e28acb Stop vendoring release notes tool
a2b280af4 build(deps): bump k8s.io/release from 0.15.0 to 0.15.1
cc00b5a62 version: bump to 1.27.0
f5ce04e04 bump cri-tools to 1.27.0
bc45b9021 Fix restore tests
8d6b49db2 build(deps): bump github.com/containers/podman/v4 from 4.4.2 to 4.5.0
a28b1e760 Add unit test for crictl info with verbose
875c3a2b1 Add basic crictl info config with sandboxImage
070668a35 Bump crun to v1.8.4
48bc2bd8d contrib/test/ci: cache runc and crun setup unconditionally
48cf728dd config: mark seccomp-use-default-when-empty as deprecated
a2961f8c3 Bump runc to v1.1.6
efaea1060 high perf hooks: move cpu-quota disable handling to container creation
566aa128a high perf hooks: remove test for cpu load balancing
65d25545e high perf hooks: update cpu load balancing to be cgroup based
cc50b438b test: add cpu load balancing test
cf77d5383 build(deps): bump github.com/onsi/gomega from 1.27.2 to 1.27.6
acd4d30ba Bump Kubernetes to v1.27.0
0087d0ee7 Don't use KUBE-MARK-MASQ in hostport rules
c1c52191d Update template.go
4bc36eabd contrib/test: don't cache the cri-o content
6fcbca13f Don't print `Dependencies` if `crio version` it not verbose
4073764a8 Update nixpkgs
9aa7afcec Update golangci-lint and config
cb70d29b9 internal: fix the release version for release notes
3890a7222 internal/storage.runtimeService.createContainerOrPodSandbox(): read ID maps
b325ad692 Set umask for crio container
28f910952 build(deps): bump github.com/docker/docker
53431c68a runtimeVM: fix Exec(sync) overwriting the initial spec args
400793fab vendor: use go-github to fetch the latest tag from github
e9a932f04 Update bom and use binary directly
4edb9e8ea Fixed signature check for commit-based downloads
a86fbb63e Fixed issues found by shellcheck
0c029c62e Fixed signature check
9e5b533a3 Fixed version substitution
bbe4b04a5 Generate proper signature check
683e4f858 test: run irqbalance tests serially to avoid race condition
e07246fc1 Update crun to v1.8.3 and runc to v1.5.1
fd35a25b1 OCPBUGS-10970: Fix the interrupt mask width when encoding
934765cf6 Update zeitgeist to v0.4.1
5e512d6ef create the metrics endpoint with correct shutdown logic
2b7efa752 build(deps): bump github.com/urfave/cli/v2 from 2.24.4 to 2.25.1
604e7bb6b Remove `scripts/node_e2e_installer`
f1e9c0e8c server: wire support for userns volumes
973c51a7b vendor: bump cri-api
a8bd24c60 test: add irqbalance dependency to CI
ed7bbaf28 contrib/test/ci: disable failing sig-network test for v1.27 release
2184981ea Remove SELinux policy download
e57047253 Add spdx signature and cert to release notes
d7cf40b7e oci: Enable checkpointing of file locks
d719028aa build(deps): bump golang.org/x/sys from 0.5.0 to 0.6.0
c4c583014 go.mod: update CDI dependency to 0.5.4.
11cbc5fd7 build(deps): bump go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc
44d878e93 test: add irqbalance dependency
f74da33a7 build(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc
4bb2e930e Fix get script
f556f5a58 build(deps): bump sigstore/cosign-installer from 2 to 3
244982179 Bump crun to v1.8.1
246c59139 go.mod: update github.com/containerd/nri to 0.3.0.
be2cc0eb5 build(deps): bump cachix/install-nix-action from 19 to 20
11c9401a8 build(deps): bump github.com/onsi/gomega from 1.27.1 to 1.27.2
cd8346082 Pin nix version to fix static builds
f112d497d Add new parameter hostnetwork-disable-selinux
96906a86c [CI] Fix validate-completion
ab8fc4f7d build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.2
dde09588c build(deps): bump github.com/containers/storage from 1.45.3 to 1.45.4
b769f0dbb build(deps): bump github.com/containers/podman/v4 from 4.4.1 to 4.4.2
9f9fc8a19 build(deps): bump github.com/containerd/containerd
1a488f516 test: Avoid parallel execution
b74d76c79 test: add integration test for irqbalance
e15854938 highperfhooks: add option to configure irqbalance restore
3f9d21c7e Fix cgroup leak for systemd cgroup driver
7af09fa0a unit-test: call UpdateContainerResources when nri enabled
828ad0200 nri: add protection against nil dereference
97b03c338 build(deps): bump github.com/containerd/fifo from 1.0.0 to 1.1.0
b267ed784 highperfhooks: add logs in the irqbalance restore
3774df887 highperfhooks: test: use ExpectWithOffset
e21dd08e9 highperfhook: use internal/.log, not logrus
9ee51c429 docs-validation: try String() for struct field values.
ab3b401b0 internal/oci: don't crash when getting unset Spec.
fa2abd239 test: update NRI BATS test.
1d0ca6fd1 completions, docs: update completions and man pages.
f5afa87ce config,criocli: update NRI deps, configuration.
7cfdaebb6 Update to c/image 5.24.2
a78a7d470 build(deps): bump github.com/onsi/gomega from 1.27.0 to 1.27.1
38455da55 build(deps): bump github.com/psampaz/go-mod-outdated from 0.8.0 to 0.9.0
221a7d0f9 build(deps): bump github.com/onsi/ginkgo/v2 from 2.8.1 to 2.8.3
95f5c57aa build(deps): bump cachix/install-nix-action from 18 to 19
1f909bc5e test/*: add test for checking the /etc folder permission
ef164da82 server: fix the permission issue for `/etc`
7b812d0ab build(deps): bump github.com/containers/buildah from 1.29.0 to 1.29.1
7c21bc7d7 build(deps): bump github.com/onsi/gomega from 1.26.0 to 1.27.0
a091d6c8f build(deps): bump github.com/urfave/cli/v2 from 2.24.3 to 2.24.4
25b06a987 Remove `zeitgeist` from golang dependencies
ba4d53c14 Bump golang dependencies
9216a817a Revert "main: shutdown server only once"
d573f0406 Drop `ENABLE_POD_EVENTS` var from e2e installer script
79a6d4fec Fix roadmap links
b59e59572 test: use container_sleep for idempotent test
169908b5a Update github.com/containers/image to v5.24.0
62173e974 main: shutdown server only once
2f2d152d8 Bump the CRIO commit to the latest main
10a6096f9 Add documentation about how to use tracing
66b6bb3bc Switch to go 1.20 for CI jobs
49cbab56a dependencies: bump conmon to v2.1.6
679bbbf20 Closes #5653 Return ContainerResources in ContainerStatusResponse Signed-off-by: T K Chandra Hasan <t.k.chandra.hasan@ibm.com>
0e7fdcaf0 Update opencontainers/runtime-tools to a6a073817ab0.
4cf3d3774 runtimeVM: ignore missing shim path for deleted containers
c80ae0acd runtimeVM: notify server that the container exited
5d23b6a02 contrib/test/ci/*: refactor CI to build a cache image
7600cb4e3 contrib/test/ci: adds time information to tasks
1fb1771bd go.mod: update github.com/containerd/nri.
905bd1b37 Take MaskedPaths and ReadonlyPaths from checkpointed container
cd406494f build(deps): bump google.golang.org/grpc from 1.52.0 to 1.52.3
9a2dae755 Fix unit tests
1edf19505 build(deps): bump k8s.io/klog/v2 from 2.80.1 to 2.90.0
193ae758c build(deps): bump github.com/onsi/gomega from 1.25.0 to 1.26.0
a6a95fe96 Add container stats to the ListPodSandboxStats response
8b3fca69a contrib/cni: provide more context around file selection
f648ff47f build(deps): bump github.com/urfave/cli/v2 from 2.23.7 to 2.24.1
72e54a7de Add additional metadata to inspect and checkpoint
a9d845a6b Update to latest version of checkpointctl
7a8f62f1b Removed pod checkpointing support
f291de93a Make storage unmount less strict
f3ed08a35 build(deps): bump k8s.io/release from 0.14.0 to 0.15.0
1226a601c packit: install wget before build
8e42d5360 build(deps): bump github.com/containers/ocicrypt from 1.1.6 to 1.1.7
d85a8b3cf Update OTEL dependencies
42c00941b Update CNI plugins to v1.2.0
437d7bbf9 GOVERNANCE: add org member tier
8fc1e91d3 CoC: replace with CNCF one
0059f24a6 mention MAINTAINERS file in GOVERNANCE
dbf1ee997 Add MAINTAINERS.md document
700fe6590 README: add roadmap
35cce86f8 add a public roadmap
ae9712231 update GOVERNANCE.md file
5ef5271b3 build(deps): bump mvdan.cc/sh/v3 from 3.5.1 to 3.6.0
34a7052a8 build(deps): bump helm.sh/helm/v3 from 3.10.0 to 3.10.3
1cc037f57 build(deps): bump github.com/onsi/gomega from 1.24.1 to 1.25.0
ff3aa8105 build(deps): bump sigs.k8s.io/release-sdk from 0.9.3 to 0.9.7
f57e36946 build(deps): bump github.com/sigstore/cosign from 1.11.1 to 1.12.0
ae60a2bb6 Update vendor of opencontainers/runtime-tools
47922035d Allow cross building from non-linux
dfc43f7ba Inject release-notes branch from GitHub actions
6d35f54d7 build(deps): bump google.golang.org/grpc from 1.51.0 to 1.52.0
faeaceddb ci-verify: Run get-scripts only on main branch
752bf4d69 Update critest parameters
89029ed43 hostport: use generic Set
dcc7437db server: update streaming interface to take context
1135dbad5 ci: bump cri-o.spec file to 1.26
5ae6ba51d static: bump go version
9e1b732a9 bump to cri-tools 1.26.0
2d0457814 server: add support for new CRI calls
9f1c91349 server/streaming: add context to methods
eb4719b55 vendor: bump kube to 1.26.0
815a426e8 Enable upstream CI to test node e2e with evented pleg feature
404afb004 Bump e2e-installer script with the latest commit
a410ce6e8 mocks: update with new c/storage mocks
43ed06ee4 vendor: bump storage to v1.44.1-0.20230101110555-a747b27fe4ca
fadc73bc7 job get script: fix conflist path
666a9e91c fix inconsistent documentation for default value of
b78350830 build(deps): bump actions/stale from 6 to 7
79b1b5937 Pass tracer to conmon-rs client
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
4aa2aadb01 |
runc-docker: update to 1.1.7
Bumping runc to version v1.1.7-2-gb6109acd, which comprises the following commits:
f0ecf30b VERSION: back to development
860f061b VERSION: release 1.1.7
c1063b1c runc.keyring: add Akihiro Suda
b0fae8c4 scripts: keyring validate: print some more information
79a52b43 libct/cg/sd: use systemd version when generating dev props
6a806d4d runc.keyring: add Kolyshkin
b6f686f2 keyring: add Aleksa's <cyphar@cyphar.com> signing key
63355bf8 keyring: add Aleksa's <asarai@suse.com> signing key
3bdb63bf keyring: verify runc.keyring has legitimate maintainer keys
853d5e38 scripts: release: add verification checks for signing keys
bd1d5370 release: add runc.keyring file and script
7cd72cc3 VERSION: go back to development
0f48801a VERSION: release 1.1.6
e4ce94e2 libct/cg: add misc controller to v1 drivers
10cfd816 libctr/cgroups: don't take init's cgroup into account
d30d240b tests/int: test for CAP_DAC_OVERRIDE
840b9539 Fix runc run "permission denied" when rootless
165d2323 tests/int: add a "update cpuset cpus range via v2 unified map" test
26a58fdb cgroups: cpuset: fix byte order while parsing cpuset range to bits
8d9d1d25 libct/int: make TestFdLeaks more robust
b66d6d56 libct/int: wording nits
ddbb6d41 libc/int: add/use runContainerOk wrapper
3531cc2d ci: add call to check-config.sh
ed9a0e1d ci/gha: bump actions/cache to v3
7683e508 ci/gha: switch to Go 1.19.x for validate
568d4407 ci/gha: bump golangci-lint to 1.48
1f9e36c0 libct: fixes for godoc 1.19
50f06554 ci: bump golangci-lint to 1.46
77472ef6 libct: fix staticcheck warning
9994fe3f libct: suppress strings.Title deprecation warning
403ea1f0 ci/gha: convert lint-extra from a job to a step
d2c83bdf ci/gha: switch to Go 1.18.x for validate
03a631df ci: switch to golangci-lint 1.45
e5a5522a Add supported Go releases (1.19, 1.20)
3ce12483 Dockerfile: fix build wrt new git
bac06cf6 ci/gha: remove stable: when installing Go
e74040e0 build(deps): bump actions/setup-go from 2 to 3
55462355 Require Go 1.17, bump x/sys and x/net
3ce9c1e2 tests: Fix weird error on centos-9
abd6adde ci: bump shfmt to 3.5.1, simplify CI setup
1a4bf049 man/*sh: fix shellcheck warnings, add to shellcheck
9201794a script/check-config.sh: fix remaining shellcheck warnings
8b976428 shfmt: add more files
b0fbd2f8 script/check-config.sh: fix SC2166 warnings
7f8cb3d6 script/check-config.sh: fix wrap_color usage
f6562f19 [1.1] libct/cg/dev: skip flaky test of CentOS 7
12f2f03f [1.1] runc run: refuse a non-empty cgroup for systemd driver
e618ec36 libct/cg/sd: reset-failed and retry startUnit on UnitExists
931b9bf3 libct/cg/sd: ignore UnitExists only for Apply(-1)
b46ac860 libct/cg/sd: refactor startUnit
822623b6 CHANGELOG.md: move 1.1.5 CVEs to Security section
54cfb25d Makefile: add verify-changelog as release dependency
7b3ac330 verify-changelog: allow non-ASCII
37e586ab CHANGELOG: fix a typo
de0c2277 [1.1] CHANGELOG: fix 1.1.5 git compare link
1fe2ec53 tests/int/mounts: only check non-shadowed mounts
9b8ebe4d tests/int/mount: fix issues with ro cgroup test
17a2d451 VERSION: back to development
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
b3fd5097ab |
runc-opencontainers: update to 1.1.7
Bumping runc to version v1.1.7-2-gb6109acd, which comprises the following commits:
f0ecf30b VERSION: back to development
860f061b VERSION: release 1.1.7
c1063b1c runc.keyring: add Akihiro Suda
b0fae8c4 scripts: keyring validate: print some more information
79a52b43 libct/cg/sd: use systemd version when generating dev props
6a806d4d runc.keyring: add Kolyshkin
b6f686f2 keyring: add Aleksa's <cyphar@cyphar.com> signing key
63355bf8 keyring: add Aleksa's <asarai@suse.com> signing key
3bdb63bf keyring: verify runc.keyring has legitimate maintainer keys
853d5e38 scripts: release: add verification checks for signing keys
bd1d5370 release: add runc.keyring file and script
7cd72cc3 VERSION: go back to development
0f48801a VERSION: release 1.1.6
e4ce94e2 libct/cg: add misc controller to v1 drivers
10cfd816 libctr/cgroups: don't take init's cgroup into account
d30d240b tests/int: test for CAP_DAC_OVERRIDE
840b9539 Fix runc run "permission denied" when rootless
165d2323 tests/int: add a "update cpuset cpus range via v2 unified map" test
26a58fdb cgroups: cpuset: fix byte order while parsing cpuset range to bits
8d9d1d25 libct/int: make TestFdLeaks more robust
b66d6d56 libct/int: wording nits
ddbb6d41 libc/int: add/use runContainerOk wrapper
3531cc2d ci: add call to check-config.sh
ed9a0e1d ci/gha: bump actions/cache to v3
7683e508 ci/gha: switch to Go 1.19.x for validate
568d4407 ci/gha: bump golangci-lint to 1.48
1f9e36c0 libct: fixes for godoc 1.19
50f06554 ci: bump golangci-lint to 1.46
77472ef6 libct: fix staticcheck warning
9994fe3f libct: suppress strings.Title deprecation warning
403ea1f0 ci/gha: convert lint-extra from a job to a step
d2c83bdf ci/gha: switch to Go 1.18.x for validate
03a631df ci: switch to golangci-lint 1.45
e5a5522a Add supported Go releases (1.19, 1.20)
3ce12483 Dockerfile: fix build wrt new git
bac06cf6 ci/gha: remove stable: when installing Go
e74040e0 build(deps): bump actions/setup-go from 2 to 3
55462355 Require Go 1.17, bump x/sys and x/net
3ce9c1e2 tests: Fix weird error on centos-9
abd6adde ci: bump shfmt to 3.5.1, simplify CI setup
1a4bf049 man/*sh: fix shellcheck warnings, add to shellcheck
9201794a script/check-config.sh: fix remaining shellcheck warnings
8b976428 shfmt: add more files
b0fbd2f8 script/check-config.sh: fix SC2166 warnings
7f8cb3d6 script/check-config.sh: fix wrap_color usage
f6562f19 [1.1] libct/cg/dev: skip flaky test of CentOS 7
12f2f03f [1.1] runc run: refuse a non-empty cgroup for systemd driver
e618ec36 libct/cg/sd: reset-failed and retry startUnit on UnitExists
931b9bf3 libct/cg/sd: ignore UnitExists only for Apply(-1)
b46ac860 libct/cg/sd: refactor startUnit
822623b6 CHANGELOG.md: move 1.1.5 CVEs to Security section
54cfb25d Makefile: add verify-changelog as release dependency
7b3ac330 verify-changelog: allow non-ASCII
37e586ab CHANGELOG: fix a typo
de0c2277 [1.1] CHANGELOG: fix 1.1.5 git compare link
1fe2ec53 tests/int/mounts: only check non-shadowed mounts
9b8ebe4d tests/int/mount: fix issues with ro cgroup test
17a2d451 VERSION: back to development
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
86d7836cd4 |
podman: update to 4.5.0
This version introduces envsubt in the install stage, so we add
gettext-native to our build dependencies.
Bumping libpod to version v4.5.0-14-gc926b12c5, which comprises the following commits:
bc2f0115d [v4.5] system tests: fix race in kube-play read-only
696c2d40d api: fix parsing filters
1fa2eb53b Support systemd optional prefix '-' for devices.
74634a46c *: migrate image registry to registry.k8s.io
0fb11cccd Makefile: include `release-artifacts` target
4d2cf293e [CI:BUILD] Packit: Initial Enablement
da927a75c Bump to v4.5.1-dev
75e3c1257 Release v4.5.0
32a6892b6 [CI:DOCS] Final release notes for v4.5.0
5de2a13e0 Quadlet - do not set log-driver by default
c5e704c82 Return title fields as a list
bf6f58b02 Bump to v4.5.0-dev
f3c365887 Bump to v4.5.0-RC2
15c302533 Final release notes for v4.5.0-RC2
af7c25811 test/e2e: remove unnecessary SkipIfNetavark() calls
80652cacf test/e2e: deduplicated network test
b526839a4 docs: update podman-network-create.1
ed99a979c network create: add --interface-name
676486a85 test/system/252-quadlet.bats: fix flake
1bf5bdc68 Read kube_generate_type from containers.conf
11ac0d03e Debian setup: workaround for runc /dev/char/10:200 bug
38c217a0b pkg/rootless: use catatonit from /usr/libexec/podman
bab95de9a rootless: make sure we only use a single pause process
3b2b1441e Use atomic config writing strategy for podman machine config files
67307603b Add remaining release notes for v4.5.0-RC2
d53871cf1 GHA: Use version instead of SHA for actions
25bc7d161 chore(deps): update dependency containers/automation_images to v20230405
944accffa build: pass env by reference
7edf73dfd test: retrofit error message
b624ad757 test/system: expect 12 char for short id
260bc3ec4 vendor: bump containers/(storage, common, buildah, image)
c5a0d8646 [skip-ci] Update actions/upload-artifact action to v3
d3cf8ccf8 [skip-ci] Update actions/stale action to v8
21fbd5c1a [skip-ci] Update actions/setup-go action to v4
f3971e412 [skip-ci] Update github/issue-labeler action to v2.6
c4e79fc16 Fix up codespell errors
a5dd5c20e Capitalize all uid,gid and id words that are not options in docs
352a41e3a build(deps): bump golang.org/x/tools from 0.7.0 to 0.8.0 in /test/tools
13135f924 Properly remove the service container during kube down
f6a50311c quadlet: add `UserNS` option key
29aac4dfe [CI:DOCS] Release notes for 4.5.0 Part 1
358b46225 "podman pull by digest and list --all" test: untag instead of rmi
f417861e0 build(deps): bump golang.org/x/text from 0.8.0 to 0.9.0
43e6bc9d9 Add renovate.json configuration
cf6f13704 CI: postbuild step: skip under nightly treadmill
db9785ba5 The `--ulimit` option accepts the name with an `RLIMIT_` prefix both upper and lower case
dc9a65e34 test/e2e: use custom network config dir where needed
35165df37 chore: replace `github.com/ghodss/yaml` with `sigs.k8s.io/yaml`
b858c7e7f update completion scripts for cobra v1.7.0
e4aad8f0f libpod.storageService.CreateContainerStorage(): retrieve ID maps
d0ffb8792 Fix invalid pod name and hostname during kube generate
761eca9e7 e2e tests: fix racy flakes
56e7b511e Cirrus: Enable labeling of EC2 VMs
74f9fd8e6 Cirrus: Fix aarch64 clone_script 404 errors
ce8a3a0c1 e2e: GinkgoParallelNode() -> ...Process()
45b1099ef build(deps): bump github.com/spf13/cobra from 1.6.1 to 1.7.0
34a5c7f15 build(deps): bump golang.org/x/sys from 0.6.0 to 0.7.0
10d2e9fde [CI:DOCS] --creds and registries
9b7fd3936 Copr: fix build deps for /usr/bin/envsubst
80f9f8077 Don't error when removing non-existant env vars
ecce01e61 e2e: healthcheck on stopped container: fix flake
cb7b8fb31 test/apiv2/80-kube.at
e1be7d141 test/apiv2/80-kube.at
1f3ae8a4f system service: do not close Body
bb70d60f1 rm `hack/release.sh`
704901d11 build(deps): bump github.com/onsi/gomega from 1.27.5 to 1.27.6
243ca7c28 add `quadlet -version` flag
7eb78f8a7 add version/rawversion package
53b16ccd2 quadlet: use `Flag` suffix for variables
443f8d89c quadlet: implement `Tmpfs` option
91ca15e96 Bump to v4.5.0-dev
3e48017d8 Bump to 4.5.0-rc1
b7175a366 Update release notes from 4.4 branch
2051e54e0 rootless netns: recover from invalid netns
99ace1908 System tests: unverbosify a flake log
68dbddd97 Add support for secret exists
78e7ade0d Fix Win install task failures with large PR bodies
21febcb5c docs: add `starting` to `HealthCheckResults.Status`
d7051d745 Add support for cgroup_config from containers.conf
4d56292e7 libpod: mount safely subpaths
4f9019406 Support Deployment generation with kube generate
8b6a7c182 Use secret.items to create volume mounts if present
359f40869 [CI:DOCS] fix typo in --systemd option
266cc7882 rootless: drop preexec hook error message
3c9ce3e52 Edit the docker wrapper to use the install prefix
5643058c8 Update podman-for-windows.md
d79519e70 Quadlet: RemapUsers documentation fixes
7f8d5e565 speed up image listing
f0cfbbe2c vendor containers/common@e27c30ee9b
70abb4ae5 fix volume-plugin-test flake
b3e8791f6 Document building Podman remote on Windows hosts
c40eaa242 test/e2e: gpg keep stdout/err attached
f131eaa74 auto-update: stop+start instead of restart sytemd units
b7a8e1285 [CI:DOCS] Improve basic tutorial
be7827c7e Update docs/source/markdown/podman-network.1.md
c335ff241 Add debug to --wait test
81e5bffc3 fix slirp4netns resolv.conf ip with a userns
11e5c2d0f Quadlet: add support for keep-id with mapping values
b5df38c23 Quadlet E2E test - run quadlet as user generator
cdb5b3e99 sqlite: do not `Ping()` after connecting
da96ff6cc Quadlet - treat paths starting with systemd specifiers as absolute
dd8ee49f6 Update docs/source/markdown/podman-kube-play.1.md.in
d85c8d7e8 system tests: use CONTAINERS_CONF_OVERRIDE
51d068ecc implement podman machine set for hyperv
46b826a90 [CI:DOCS] Add network subnets info to network man page
dd8574022 CI: retry the golangci install
92e0efc5d system tests: fix racey sdnotify test
518eafaa3 hyperv: lookup machine on local filesystem first
4c72fc26b fix os.IsNotExist() CI check
7daab31f1 Ensure that SQLite state handles name-ID collisions
64ba82601 macos pkginstaller: do not fail when podman-mac-helper fails
4f3cbf15c podman-mac-helper: install: do not error if already installed
ade46ae6a build(deps): bump github.com/onsi/gomega from 1.27.4 to 1.27.5
e061cb968 Fix a race around SQLite DB config validation
c5fc44582 add CONTAINERS_CONF_OVERRIDE
5f86fae71 vendor containers/common@main
6825740fc docs: minor grammar fix in `--volume` description
b31d9e15f sqlite: do not use shared cache
9be4a525f test: podman checkpoint/restore the latest container
5185e7e39 stats compat API: return "id" lowercase
5f274e45f Run make codespell
3925cd653 Drop SQLite max connections
0fbc32515 sqlite: set connection attributes on open
9f0e0e833 Fix database locked errors with SQLite
cf5df5b80 quadlet tests: skip on RHEL8 rootless
cb24d6c3d Kube Play Doc: Document the support for K8S Secret
6b2101bc7 New ulimit test: bump up minimum nfiles
5447e88b4 logformatter: hide --db-backend, and friendlyize quadlet
5382997e0 Quadlet - add support for relative path in Volume key in .container file
3e405a2fd Add service ctr cleanup to PlayKubeDown
956341543 fix --health-on-failure=restart in transient unit
26d5df77d Quadlet Doc: Suggest the kill operation for HealthOnFailure
5d1342fc5 Quadlet - Add support for health checks configuration in .container files
3ef707def Makefile: allow specifying /lib dir location
a5abbdf1f Fix option --opts -> --opt
0dac214f5 basic hypverv machine implementation
94f905a50 Fix SQLite DB schema migration code
46d165040 Add support for oom_score_adj value from containers.conf
6046832f3 Use default_ulimits field in containers.conf
e2d49fb65 CI: test and confirm DESIRED_DATABASE
1ea62f32f build(deps): bump github.com/openshift/imagebuilder
526dfb893 logformatter: futureproof output filename
e21cf2d8d Vendor in latest containers/(storage, common, image)
686bdcc29 build(deps): bump google.golang.org/protobuf from 1.29.0 to 1.30.0
ba141adce test/system/255-auto-update.bats: add debug logs
c2a24abc0 Revert "Revert "pasta: Use two connections instead of three in TCP range forward tests""
3a59af219 Add information for secret inspect
87e93a7b6 Add format to podman volume ls
b424f8fb0 Add format to podman volume inspect
2555c8034 Add format to podman secret ls
1c4bd4a73 Add format to podman system df
71bcd9891 Add format to podman machine info
581611844 Add format table to podman image inspect man page
e92955245 Cirrus: Store podman machine benchmark data
b3035b9d6 Update Cirrus display names, and fix get-ci-vm script
6142c16a9 Ensure SQLite places uses the runroot in transient mode
2ec11b16a Fix various integration test issues with SQLite state
0f8530b1e Remove test for pod/container name global uniqueness
6e0f11da5 Improve handling of existing container names in SQLite
39fd9aa08 Add SQLite job to CI
7ed1c7fd9 buildah treadmill: also run rootless tests
2b4a27719 build(deps): bump github.com/vbatts/git-validation in /test/tools
3c51b61d7 auto update: return restart error
ea2a0767a fix: Document removing anonymous volumes
408e764b9 events: no duplicates when streaming during a log rotation
82f2f8258 Add search --cert-dir, --creds
bae07b6ea podman-mac-helper: exit 1 on error
7d8d3e810 system service --log-level=trace: support hijack
eed389508 test/system: fix wait_for_port() to wait for bind
2d1f4a8bf cgroupns: private cgroupns on cgroupv1 breaks --systemd
01fd5bcc3 libpod: remove error stutter
4562e61d2 podman events: unhide --stream
7a7af735a test/system/255-auto-update.bats: multiple services
40d0d233e 255-auto-update.bats: turn off rollback where needed
a9d70e9fe Use append() to add elements to a slice
1c08f2eda Revert "pasta: Use two connections instead of three in TCP range forward tests"
ad8a96ab9 Support running nested SELinux container separation
159936a11 bud tests: rootless remote: use correct socket path
6f9f395b3 build(deps): bump github.com/vbauerster/mpb/v8 from 8.2.1 to 8.3.0
bad41f67e compat: /auth: parse server address correctly
6363fb08f docs: fix cmd `set DOCKER_HOST` suggestion
fb4f6f95c test: reenable idmap test
b5a99e081 Must use mountlabel when creating builtin volumes
8d952c01d podman.spec.rpkg: distro conditionals for modulesloaddir
9294b7350 build(deps): bump google.golang.org/protobuf from 1.28.1 to 1.29.0
21651706e podman inspect list network when using --net=host or none
f928cf54a pasta: Re-enable "Local forwarder, IPv4" test, accept NXDOMAIN as response
829e910cd build(deps): bump golang.org/x/tools from 0.6.0 to 0.7.0 in /test/tools
cc7a1e614 CI: Switch to c20230307t192532z-f37f36d12 images
799c20177 Cirrus: Run system & integration tests in parallel
c03cb5718 Update checkpointctl v0.1.0
cb3cda55f Quadlet: add support for setting --ip and --ip6
af7a759e9 build(deps): bump golang.org/x/net from 0.7.0 to 0.8.0
5d039ce22 build(deps): bump golang.org/x/sys from 0.5.0 to 0.6.0
34ff27b81 libpod: avoid nil pointer dereference in (*Container).Cleanup
25dd4d653 [CI:DOCS] Add image not found info to troubleshooting
0498ce3a5 cmd: do not require userns for "version"
2860d55c9 cmd: drop special handling for "scp"
da04469f0 cmd: clarify meaning of ParentNSRequired
0ab4b2614 Fix package restore
0d219486f [CI:DOCS] Fix docs/version-check always requesting updates
e77f370f8 sqlite: add a hidden --db-backend flag
cca65db01 fix: update the default machine value when the previously set default machine is deleted
9ac0d4f1a podman machine: Adjust Chrony makestep config
2c67ff5d4 sqlite: add container short ID to network aliases
38acab832 sqlite: remove dead code
2342d1a31 sqlite: addContainer: add named volume only once
86d12520e sqlite: implement RewriteVolumeConfig
df88f546b sqlite: LookupVolume: fix partial name match
01359457c sqlite: LookupVolume: wrap error
69ff04f73 sqlite: fix type rewriting container config
e87014e44 sqlite: return correct error on pod-name conflict
84b5c6c71 sqlite: RewritePodConfig: update error message
51cf2dd36 test/system/255-auto-update.bats: wait 10 for update to finish
b727f30ac auto-update test: wait for service to be ready
76056c670 Vendor in latest containers/(common, storage, image)
20a42d0e4 play kube: Add --wait option
6babef598 Cirrus: Fix git config permission denied
ccc5aa59a Quadlet: Add support for the Mount key in .container files
6f09dbc2d build(deps): bump github.com/onsi/gomega from 1.27.1 to 1.27.2
77861d6af fix "podman logs --since --follow" flake
6d352dc0b Clarify that replicas are ignored in kubernetes deployment
42540a667 Revert "Skip all pasta tests"
e804ddc5a CI: Switch to c20230223t153813z-f37f36d12 images
070572245 Fix user socket path
1e516e657 pkginstaller: bump Qemu to version 7.2.0
0f92e19e8 Cirrus: Fix bud tests failing to apply patches
1ef8a860c build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.2
b00874c16 build(deps): bump github.com/coreos/stream-metadata-go
9d93486d2 Vendor in latest containers/storage
d838c08b3 buildah-bud tests: don't sudo when rootless is desired
1f6f81f5d Temporarily disable version-check
5a08ddaec CI: new rootless buildah-bud tests (cron only)
5d2d609be sqlite: fix volume lookups with partial names
495314a16 sqlite: fix container lookups with partial IDs
efe7aeb1d sqlite: fix LookupPod
19c2f37ba sqlite: fix pod create/rm
e32bea937 sqlite: LookupContainer: update error message
565bb5645 sqlite: AddContainerExitCode: allow to replace
4b3b94473 system: add warning when running rootless on cgroupv1
1b1cdfa35 sqlite: fix AllContainers with state
21fcc9070 sqlite: fix "UPDATE TABLE" typos
3f96b0ef2 sqlite: SaveVolume: fix syntax error updating the volumes table
7c11f7e17 sqlite: exit code: allow -1
e74f7bcaf sqlite: fix typo when removing exec sessions
560805ac4 sqlite: AllContainers: fix inner join
8c64c4370 sqlite: move migration after table creation
eeabe975e sqlite: implement pod methods
0d75854c5 Quadlet - use the default runtime
49d560e1b docs: context is not optional for build
03aaa8d35 Fix an incorrect comment on NewSqliteState
eb228f264 Add support for containers.conf database setting
59a54f32d Add support for volume operations to SQLite state
c0b92bdbc Implement exec session handling in SQL database
627a5b73b Various fixes from code review
c4fe0af2a Remove `--namespace` flag from Podman root
89d0ccd19 Get E2E tests to pass
97499a70a Implement network disconnect for SQLite state
939a4ccef Implement Network Connect/Modify for SQLite state
8ab18d848 Fix various lint issues
b4c4f9c93 Some further work on SQLite state
5c2a0670f Remove concept of Namespaces from BoltDB
1b968c607 Add initial SQLite-backed state implementation
93e7cc119 Cirrus: Support runc testing on debian VMs
81f116c59 Skip all pasta tests
642e9ddb8 Skip buildah-bud test
10382d0bc Skip buildx test with VFS podman storage driver
dd51b62b7 Skip 'podman kube --network' test for rootless CGv1
197529f08 Skip tests which fail with CGv1 & runc
5b4f248a8 Skip rootless CGv1 quadlet tests due to issue
e19922d09 Makefile: Define SHELL
43eb35a77 Machine refactor for QEMU/AppleHV
e838ad86b machine refactoring preparations for hyperv
b4471c6ed [CI:BUILD] spec.rpkg: trim dependency list
12153da83 Logs follow-until tests: loosen checks
7d17ec07f [CI:DOCS] Windows/Mac docs link update
7f5fc04b4 Doc update for docker network options via CLI
4b4b423b6 compat API: network create return 409 for duplicate
40f21da0c Apply suggestions to man page
adacd3b12 vendor c/common@852ca05a1f
6a3757b73 Quadlet: Add support for LogDriver key in container and kube units
ebb45b5bd machine refactoring preparations for hyperv
af8d649da libpod: always use direct mapping
9dc730d9f netavark: only use aardvark ip as nameserver
e9942c61d build(deps): bump github.com/container-orchestrated-devices/container-device-interface
79a05ca2b podman logs passthrough driver support --cgroups=split
d7e96536e journald logs: simplify entry parsing
1590c7bf4 podman logs: read journald with passthrough
5754df806 make docs: sanity check for broken man pages
5056bd45f build(deps): bump github.com/vbauerster/mpb/v8 from 8.1.6 to 8.2.0
5fcd2c3fa build(deps): bump github.com/onsi/gomega from 1.27.0 to 1.27.1
2659a3228 kube: rm secret on down, print secret on play
9ce589a4a Fix spacing typo that triggered OCD & indent units in podman-systemd.unit(5)
ad866fecb Update remote_client.md
e74f60dee [CI:DOCS] Add restriction to option README
975b096bc Revert "CI: Temporarily disable all AWS EC2-based tasks"
22a207d45 build(deps): bump github.com/onsi/gomega from 1.26.0 to 1.27.0
c95978f60 kube play: only enforce passthrough in Quadlet
21cddd723 journald: remove initializeJournal()
6dd797844 auto-update: support pods
9622d25be Emergency fix for man pages: check for broken includes
c81fbd5d0 System tests: assert(): friendlier failure messages
761da776a Cirrus: Fix version-check to only run on `main` job
7f8bc6f51 CI: Temporarily disable all AWS EC2-based tasks
6f5ca7318 build(deps): bump github.com/containerd/containerd from 1.6.16 to 1.6.18
6ca857feb volume,container: chroot to source before exporting content
94d4b5278 Support sysctl configs via podman kube play
510e44359 [CI:BUILD] copr: podman.spec.rpkg cleanups
a4677405c quadlet system tests: add useful defaults, logging
96af9e4e0 libpod: support relative positions for idmaps
c7ee65596 Experimental workaround for cdn03.quay.io flake
86e55d0ec system tests: prevent leading tabs
9abe8c785 Introduce podman machine os apply
828708bac create: add support for --group-entry
33a918711 fix != filter in volume prune
4c5b79120 Allow specification of podman --remote build -f -
3d8936642 Quadlet use crun specified in containers.conf
9f84b9b52 build(deps): bump golang.org/x/net from 0.6.0 to 0.7.0
86a4c6b65 Vendor c/image after https://github.com/containers/image/pull/1847
c0f983db8 Don't set hostPort when generating a service
3a9d14d4e man page --format xref: tighten the autocompletion check
0999991b2 add support for limiting tmpfs size for systemd-specific mnts
9a1f47887 build(deps): bump golang.org/x/text from 0.6.0 to 0.7.0
35d16ea02 Add ulimit annotation to kube gen & play
34d412e13 man page xref: validate displayed man page names
7c54d1423 quadlet: add ExecStop
d2ac85f7a install sigproxy before start/attach
191e4ce40 build(deps): bump golang.org/x/tools from 0.5.0 to 0.6.0 in /test/tools
a5ca73225 Fix typos
45fb353f4 Cirrus: Make benchmarks .env file easier to load
a7db3e8d2 Cirrus: Omit functions in env. file
1541ce56c kube play: set service container as main PID when possible
08e13867a Fix typos. Improve language.
9cba0474b events + container inspect test: RHEL fixes
5a9074dab Add ctrName to network alias during kube play
586515976 Run codespell on codebase
c7619c8ae podman image scp: added identity for ssh.Exec
fb54be2e1 [CI:DOCS] Clarify nomap constrains
433413549 [CI:DOCS] man-page checker: include --format (Go templates)
e308ba021 Vendor c/image after https://github.com/containers/image/pull/1816
ec4ab08c8 [CI:DOCS] Cleanup some man pages to display options with line breaks
5ed217409 [CI:DOCS] Add tables to podman-systemd.unit man page
3de409ad6 github: remove prefix from bugs/features
d6dd17fdf Quadlet: Add support for the Secret key in Container group
08d28bfc2 [CI:DOCS] OWNERS: add @ygalblum and @alexlarsson
47df0ca25 build(deps): bump golang.org/x/term from 0.4.0 to 0.5.0
ded44be16 build(deps): bump github.com/vbauerster/mpb/v8 from 8.1.4 to 8.1.6
42c7c59dd Sort quadlet keys to make it easier to read
43b357068 e2e: fix some tests on remote
83367a6b3 kube play: do not teardown unconditionally on error
ac71fa01c Fix typos in comments
6b6458916 Resolve symlink path for qemu directory if possible
90eb834e7 #17363 Fix contradicting documentation podman-commit
1916da596 Fix a potential UID/GID collision in unit tests
93c35a703 golangci-lint: show all errors at once
77e4b1939 update golangci-lint to version 1.51.1
1fd0ce71d [CI:DOCS] events: document journald identifiers
f1352521f Quadlet: exit 0 when there are no files to process
ced934284 network ls: handle removed container
315215020 e2e: adapt play kube test on remote rootless
4e8906c5e docs/podman-systemd.unit: Explicitely mention network & kube units
c4f338eec docs/podman-systemd.unit: Update example to work out of the box
50f72fe7b [CI:BUILD] Cirrus: Fix GraphQL ownerRepository:null error
83a0e97ab Add missing return after errors
84c674fee Revert "Cirrus: Emergency fix to un-stuck PRs"
af0f10a22 pasta: Fix ICMPv6 Echo test, skip it for the moment
859579b6b pasta: Fix ICMP Echo Request (IPv4) test
e33f4e0bc pasta: Use two connections instead of three in TCP range forward tests
acaab3fa7 Add SELinux label types support to quadlet
928d589b7 Add quadlet support for rootfs= containers
6b3073f53 Cirrus: Emergency fix to un-stuck PRs
8441f01be Move clean-binaries before podman-remote in podman-remote-docs target
aa0d4b266 oci: bind mount /sys with --userns=(auto|pod:)
e6904f6f8 Cleanup podman-systemd.unit file
3c3526e53 Install podman-systemd.unit man page, make quadlet discoverable
de63ad704 libpod: allow userns=keep-id for root
9e7f1bea4 system-reset: use CleanCacheMount to clear build cache
5ca35d6de vendor: bump buildah to v1.29.1-0.20230201192322-e56eb25575c7
3ce07b556 system tests: fix noexistent labels test in the remote
a909e2f2d Expose Podman named pipe in Inspect output
2bb4c7cdd libpod: support idmap for --rootfs
ed1f76917 test: adapt test to work on cgroupv1
ed18cdd6e Bump to v4.5.0-dev
b6d91ebfb Update main to reflect v4.4.0 release
be47eeb85 Update from /github.com/vbauerster/mpb/v7 to /v8
8aa377698 hack/perf: cleanup after benchmarks
cb5a9e9f4 hack/perf/bz-2162111.sh: use custom network
a1436d8fb Update bug_report.yaml
02bcf0bac Handle filetype field in kubernetes.yaml files
1a786ea53 hack/perf/bz-2162111.sh: measure stop
bd8937c50 make hack/markdown-preprocess parallel-safe
68371ff55 system tests: fix volume exec/noexec test
f69efb6ee system tests: minor fix for RHEL8 incompatibility
cf7afed05 Cirrus: Use versionable IMAGE_SUFFIX
cbb45a6d4 utils: new conversion method
0e949bfd3 libpod: use GraphRoot for overlay upper dir
427d69cc3 vendor: update containers/storage
d10860a32 Do not mount /dev/tty into rootless containers
5c059e3ed build(deps): bump go.etcd.io/bbolt from 1.3.6 to 1.3.7
9272cabd3 e2e: fix run_staticip_test about no_proxy
2e397120d docs: specify order preference for FROM
15594e92e Fixes port collision issue on use of --publish-all
952049fe5 Support for Windows paths in the source position of the volume mounts
0e3524b8b e2e tests: fix incorrect os.User.Name
7c60a784c Log data that we failed to unmarshal
61db1d5aa [CI:DOCS] hack/perf: add script for BZ 216111
29b346dea container rm: save once for exec removal and state change
8f2a40d81 [DOCS:CI] podman-events: document verbose create events
7e80edd3a e2e: Avoid hard-coding included in quadlet test
2682d3ad9 e2e: Avoid hard-coding ImageCacheDir
387f0ea2f Making gvproxy.exe optional for building Windows installer
74c090973 Add gvproxy to Windows packages
ab8e49d74 Add comment to clarify error handling intention
12d70446f fix #17244: use /etc/timezone where `timedatectl` is missing on Linux
063e273e9 Fix usage of absolute windows paths with --image-path
b0b166b5b Match VT device paths to be blocked from mounting exactly
553e53d44 Fix default handling of pids-limit
069edc3ad Add (podman {image,manifest} push --sign-by-sigstore=param-file.yaml)
e51991030 journald: podman logs only show logs for current user
2ab90f2ed journald: podman events only show events for current user
21b82bb68 e2e: Remove the cache with "podman unshare rm" when a rootless user
9db657f40 Clean up more language for inclusiveness
814f7c569 e2e: Remove some directories at SynchronizedAfterSuite
497be102a fix: don't output "ago" when container is currently up and running
b28519fd9 fix: running check error when podman is default in wsl
a745d99a8 fix CI: test fail due to merge
f3d8f6c49 Bump Bulidah to v1.29.0
38d5319f1 e2e: reduce dependency on /tmp for e2e tests
0ffce8181 Bump cirrus image with easier dependency management
e62e42bfa quadlet: Add device support for .volume files
70e8f6243 remote,build: error if containerignore is symlink
c74bdae35 DB: make loading container states optional
6132c4d54 ps: do not sync container
958c94094 Set runAsNonRoot=true in gen kube
7aef3301d WSL refactoring
08186d7dd kube-play: add support for HostIPC in pod.Spec
8850db961 Allow --device-cgroup-rule to be passed in by docker API
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
da0cfbb0b4 |
kubernetes: update to v1.27.1
Bumping kubernetes to version v1.27.1-89-g2555e0f90e8, which comprises the following commits:
2eccb77b2c5 OpenAPI V3 invalid document checks
642ea896178 update for feedback
0457fbc83b3 QueryParamVerifier falls back on invalid v3 document
4cd33af1419 QueryParamVerifierV3 resilient to minimal OpenAPI V3 documents
ce458add6f1 kubeadm: fix a bug where file copy(backup) could not be executed correctly on Windows platform during upgrade
3a56c1e954b Fix CHANGELOG-1.27 correct
fa86f2dce30 benchmark test to evaluate the overhead of podMatchesScopeFunc
4a2e6971f7d Fix incorrect calculation for ResourceQuota with PriorityClass as its scope
c041924dd10 Update podFailurePolicy comments from alpha-level to beta
7f9b3cb8540 Disable NewVolumeManagerReconstruction feature gate
3324649c1c6 releng/go: Update images, dependencies and version to Go 1.20.4
ae2f576d0b7 Bump konnectivity-client to v0.1.2
8af1ce5863d Kube-proxy/ipvs: accept access to healthCheckNodePort on LbIP
940b6892a1e node: device-plugin: e2e: Additional test cases
4cf566e32e9 node: device-plugin: add node reboot test scenario
d67481c4784 node: device-plugin: e2e: Capture pod admission failure
6f5e29e26c4 node: device-mgr: e2e: adapt to sample device plugin refactoring
367e3d7c471 node: device-mgr: e2e: Update the e2e test to reproduce issue:109595
d241f58d8c8 node: device-mgr: e2e: Implement End to end test
aac4c15e624 node: device-mgr: Handle recovery by checking if healthy devices exist
b157e1741fb node: device-plugin: e2e: Add test case for kubelet restart
5278e9c02cd node: device-plugin: e2e: Provide sleep intervals via constants
b3c58acde98 node: device-plugin: e2e: Update test description to make it explicit
0cd0fe70aa1 node: device-plugin: e2e: Isolate test to pod restart scenario
ed8d4e1d6a5 node: device-plugin: e2e: Annotate device check with error message
4899dc75dde node: device-plugins: e2e: s/devLen/expectedSampleDevsAmount
c81ec1ae5b0 node: device-plugins: e2e: Refactor parse log to return string and error
86904a7c580 Update kube-openapi to fix race
ee1d7eb5d82 Use absolute path instead requestURI in openapiv3 discovery
bbca939c661 proxy/ipvs: don't bind nodeips to the dummy device
ca1e563141a proxy/ipvs: add a GetAllLocalAddressesExcept() function
3ce0c108fe9 Refactors discovery content-type and helper functions
574829867a9 Fix scheduler performance regression after adding plugin metrics
192e9dae316 Update staging/src/k8s.io/apiserver/pkg/cel/common/values.go
8d0ac2f6f8f Fix bug where CEL listOfString.join() results in unexpected error
57e67a91e39 Fix directory mismatch for `volume.SetVolumeOwnership()`
d0514936f3a Fix stomping os env in kubectl e2e tests
7a6640798a7 KCCM: add providerID predicate to service controller
8221a54e1ee Re-work logic in shouldSyncUpdatedNode
a9d07f4e9ef add log includes pod preemption details
9ef90afb4fb verifyVolumeNoStatusUpdateNeeded may cause flake and so only keep the last ones
b598ea5c392 deflake: Add retry with timeout to wait for final conditions
2eb94fa835a kubelet: Mark new terminal pods as non-finished in pod worker
ae07535c855 test: Add node e2e to restart kubelet while pod is terminating
861e1935e2a kubelet: Ensure pods that have not started track a pendingUpdate
ae92fd28072 changelog: fix formatting issue with v1.27 change log
95feac5269b Update CHANGELOG/CHANGELOG-1.27.md for v1.27.1
4c9411232e1 Release commit for Kubernetes v1.27.1
2c81ecc2e29 use case-insensitive header keys for http probes
1601bb75401 fix: add the bug as a known issue o on the v1.26 release note
fddf859d6a5 kube-aggregator: correctly use client-go TLS cache with custom dialer
845ba3e3a23 Revert "Optimization on running prePreEnqueuePlugins before adding pods into activeQ"
a1f97a35fcb Revert "Merge pull request #113151 from ncdc/refactor-crd-conversion"
1da781e29b3 Revert "CR conversion: protect from converter input edits"
f564f7a3559 api: encode NamespacedName with lower case in JSON
e827a4b61f5 Do not look at VPC-related resources outside the cluster's network
d662e339aa5 kubelet: Do not mutate pods in the pod manager
d977e7e0dbf Fix azure disk e2e after migration
e599722bc59 vendor: bump runc to 1.1.6
25b061d8202 CVE-2023-27561: Bump runc go module v1.1.4 -> v1.1.5
854c72766bb fix: the volume is not detached after the pod and PVC objects are deleted
398e38784e7 Update CHANGELOG/CHANGELOG-1.27.md for v1.27.0
1b4df30b3cd Release commit for Kubernetes v1.27.0
2b6072ba00c Update CHANGELOG/CHANGELOG-1.27.md for v1.27.0-rc.1
ad18954259e CHANGELOG: Update directory for v1.27.0-rc.1 release
80bc6ffd0df Release commit for Kubernetes v1.27.0-rc.1
951f8dcc965 Return error for localhost seccomp type with no localhost profile defined
4e0bc2397da Update publishing-bot rules for release branches to Go 1.19.8
1972dd10058 Do not log entire pod struct while attaching the volume
b19c362bf52 Update distroless-iptables to v0.2.3
2a69edb43de [go] Bump images, dependencies and versions to go 1.20.3
b5dd5f1f3a7 Investigate and fix the handling of Succeeded pods in DaemonSet
873127e3b04 Export WebhookHandler struct because some CCMs use Run directly
735bbc135c3 Clean up formatting
27ad623b3d1 Skip vendor directory when removing generated files
63b5ca69f1f .*: update vendor dir and cleanup
1ad7cacba59 publishing-bot rules for the new release-1.27 branch
b83600de01e fix nil pointer dereference panic for deprecated metrics
5469c198e5d kmsv2: validate encrypt response at DEK generation time
0e9dd5c51d8 Call function that validates in-place vpa resize policy
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Chen Qi
|
668871ce79 |
docker-moby: fix docker run on NFS
For now, a simple `docker run -it alpine' fails on NFS.
This regression was introduced by a commit[1] which makes
DirCopy error out if failing to copy xattr.
As the vfs storage driver is supposed to just work on
any filesystem[2], we need to allow its failure on copying
extended attributes as the support for xattr depends on
filesystem.
[1]
|
||
|
Peter Kjellerstedt
|
8c599baea9 |
netavark: Rewrite the recipe
The previous version of the recipe was generated by cargo-bitbake, which expects that future updates to the recipe will also be done by cargo-bitbake and therefore formats it to accomodate this. Since we have now switched to the more commonly used (and supported) cargo-update-recipe-crates bbclass for updating the crate URIs, the recipe can be rewritten to better conform to common recipe standards. This also folds netavark.inc into it as there is no longer any need to keep it separate. Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Peter Kjellerstedt
|
d903219b9e |
netavark: Add checksums for the crate URIs
Use the cargo-update-recipe-crates bbclass to update the crate URIs including adding checksums for them, as they are now required by the crate fetcher. Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Peter Kjellerstedt
|
498a53037e |
netavark: Move the crate URIs to a separate .inc file
As a preparation for switching to using the cargo-update-recipe-crates bbclass to update the crate URIs, move the existing crate URIs to the netavark-crates.inc file that it expects. Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Peter Kjellerstedt
|
508517af3e |
aardvark-dns: Rewrite the recipe
The previous version of the recipe was generated by cargo-bitbake, which expects that future updates to the recipe will also be done by cargo-bitbake and therefore formats it to accomodate this. Since we have now switched to the more commonly used (and supported) cargo-update-recipe-crates bbclass for updating the crate URIs, the recipe can be rewritten to better conform to common recipe standards. This also folds aardvark-dns.inc into it as there is no longer any need to keep it separate. Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Peter Kjellerstedt
|
57704b2216 |
aardvark-dns: Add checksums for the crate URIs
Use the cargo-update-recipe-crates bbclass to update the crate URIs including adding checksums for them, as they are now required by the crate fetcher. Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Peter Kjellerstedt
|
cd6d4550a6 |
aardvark-dns: Move the crate URIs to a separate .inc file
As a preparation for switching to using the cargo-update-recipe-crates bbclass to update the crate URIs, move the existing crate URIs to the aardvark-dns-crates.inc file that it expects. Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Martin Jansa
|
cd816688c5 |
k3s, kubernetes, nagios-nrpe: fix Upstream-Status formatting
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Martin Jansa
|
d1b6bf580e |
lxcfs: fix build with newer linux-libc-headers
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Bruce Ashfield
|
3f692e3fe1 |
docker: start depreciation of docker-ce
docker-ce and docker-moby are now exactly the same. To allow layers which bbappend or otherwise consume docker-ce, we merge the two recipes and leave a warning in docker-ce that it will be removed in the future. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Martin Jansa
|
fff79433b6 |
aardvark-dns, netavark: add seccomp to REQUIRED_DISTRO_FEATURES
* because of runtime dependency on slirp4netns * fixes: ERROR: Nothing RPROVIDES 'slirp4netns' (but meta-virtualization/recipes-containers/aardvark-dns/aardvark-dns_1.2.0.bb RDEPENDS on or otherwise requires it) slirp4netns was skipped: missing required distro feature 'seccomp' (not in DISTRO_FEATURES) NOTE: Runtime target 'slirp4netns' is unbuildable, removing... Missing or unbuildable dependency chain was: ['slirp4netns'] NOTE: Runtime target 'aardvark-dns' is unbuildable, removing... Missing or unbuildable dependency chain was: ['aardvark-dns', 'slirp4netns'] NOTE: Runtime target 'netavark-dev' is unbuildable, removing... Missing or unbuildable dependency chain was: ['netavark-dev', 'aardvark-dns', 'slirp4netns'] NOTE: Runtime target 'netavark' is unbuildable, removing... Missing or unbuildable dependency chain was: ['netavark', 'aardvark-dns', 'slirp4netns'] NOTE: Runtime target 'aardvark-dns-dev' is unbuildable, removing... Missing or unbuildable dependency chain was: ['aardvark-dns-dev', 'slirp4netns'] Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Martin Jansa
|
31e8dc838b |
crun: fix REQUIRED_DISTRO_FEATURES
* features_check was inherit twice and REQUIRED_DISTRO_FEATURES was set twice as well but both with ?= so the 2nd one was ignored * seccomp was added in: commit |
||
|
Martin Jansa
|
f964138a21 |
buildah: add seccomp and ipv6 to REQUIRED_DISTRO_FEATURES
* because it rdepends on podman with the same restriction * BTW: .gitignore has: build*/ which gets triggered for buildah as well: meta-virtualization $ git add ./recipes-containers/buildah/buildah_git.bb The following paths are ignored by one of your .gitignore files: recipes-containers/buildah I've adjusted it to /build*/ only. Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
|
Bruce Ashfield
|
d74219e96b |
skopeo: update to 1.11.2
Bumping skopeo to version v1.11.2-1-gd79588e6, which comprises the following commits:
d79588e6 Bump to v1.11.3-dev
dc1e14f7 Release 1.11.2
902506dd bump golang.org/x/net to v0.7.0
b2884205 [release-1.11] Bump to v1.11.2-dev
fb1ade6d [release-1.11] Bump to v1.11.1
40dd6507 Update to c/image 5.24.1
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
d51e06f053 |
skopeo: update to 1.11.0-tip
Bumping skopeo to version v1.11.0-102-g1e70fee2, which comprises the following commits:
ca0f8418 fix(deps): update module github.com/spf13/cobra to v1.7.0
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
486c9bdb00 |
podman-tui: update to v0.9.0
We drop our btrfs patch, as it is now part of the upstream.
Bumping podman-tui to version v0.9.0-37-g24bdb2a, which comprises the following commits:
449d8f4 golangci-lint system package
b0d20b2 Bump actions/stale from 7 to 8
613d18f ui/styles - applying golint
7839523 ui/infobar - applying golint
745a331 ui/help - applying golint
4c27c3d ui/volumes code improvement and golint
02740c1 adding container attach command to container page/view
6b5beb4 fix container create error without health options
705bc34 Bump actions/setup-go from 3 to 4
cf4509e Add container health options to the container create dialog
d79883e Add packit configurtion to build RPM as part of PR tests
ba02fb5 Update unit tests and github workflow for running the tests
4e3889f fix container create error when volume is selected
0af3e47 update github workflow golang version to 1.18.8
f572f48 Golangci-lint update to v1.51.1
c2932fc fix vendor + codepsell
1e35d9a Bump golang.org/x/crypto from 0.6.0 to 0.7.0
bb17bbc unit tests fix
1328668 Bump to v0.10.0-dev
8ad97a1 Bump to v0.9.0
28f800c Bump github.com/onsi/ginkgo/v2 from 2.8.4 to 2.9.0
f18b55b Bump to podman v4.2.2
064a53b Bump github.com/onsi/gomega from 1.27.1 to 1.27.2
c3c1cb3 Bump github.com/containers/common
28ca42e Bump github.com/containers/podman/v4 from 4.4.0-rc1 to 4.4.2
88e898f Bump github.com/onsi/ginkgo/v2 from 2.8.3 to 2.8.4
df84886 Bump github.com/containers/storage from 1.45.3 to 1.45.4
370a785 New feature - container healthcheck
3d18e6a Bump to v0.9.0-dev
073a500 Bump to v0.8.0
fe2fafb Bump github.com/onsi/gomega from 1.24.1 to 1.27.1
4a78fc7 Bump github.com/onsi/ginkgo/v2 from 2.6.0 to 2.8.3
6d03623 Bump podman/v4 to 4.4.2
fa3ea79 Bump github.com/gdamore/tcell/v2
a6d175a Bump golang.org/x/net from 0.6.0 to 0.7.0
0d6726c Bump github.com/containerd/containerd from 1.6.12 to 1.6.18
5cf21f8 Bump github.com/docker/docker
80431f0 Bump golang.org/x/crypto from 0.5.0 to 0.6.0
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
6912464b10 |
nerdctl: update to v1.3.0
Bumping nerdctl to version v1.3.0-2-g1525035, which comprises the following commits:
0973d30 bump: buildkit to v0.11.3, fuse-overlayfs to v1.10, kubo to v0.18.1
813a575 build(deps): bump golang.org/x/term from 0.6.0 to 0.7.0
8a5e2fe build(deps): bump github.com/docker/cli
129a757 build(deps): bump github.com/docker/docker
6b866e0 build(deps): bump github.com/spf13/cobra from 1.6.1 to 1.7.0
a5f95e4 build(deps): bump golang.org/x/sys from 0.6.0 to 0.7.0
e2fabe3 build(deps): bump github.com/ipfs/go-cid from 0.4.0 to 0.4.1
bd6d908 pkg/mountutil: improve error messages
ffc1577 use digest instead of a tag while signing
29a9cc1 Add manugupt1's GPG key
28aa476 build(deps): bump github.com/opencontainers/runc from 1.1.4 to 1.1.5
ae18699 build(deps): bump github.com/docker/docker
7300210 build(deps): bump github.com/docker/cli
050016d build(deps): bump github.com/compose-spec/compose-go
815d91b Support quiet in push cmd
1fa35ba Refactor image sign and verify logic
5fc6f2e build(deps): bump github.com/compose-spec/compose-go
5482743 build(deps): bump actions/checkout from 3.4.0 to 3.5.0
b6f9cfa Fix nerdctl help show the hidden commands
512bc74 set container state error
3c23201 build(deps): bump github.com/mattn/go-isatty from 0.0.17 to 0.0.18
8bc1d42 rootlessutil: always claim non-rootless on non-Linux.
89a78b4 Refactor run command networking options for Windows support.
ade009b Fix the top command on Windows
cbead58 Add support for showing image size on inspect
75c7914 build(deps): bump github.com/ipfs/go-cid from 0.3.2 to 0.4.0
ab2beab Completely skip syslog-related tests on Windows.
dde73be test: rootless: main: use v2 config
0586121 Upgrade cosign to 2.0.0 in tests
3effa44 Add unit test for exposing devices to Windows containers
5501d46 Add MAINTAINERS_GUIDE.md
d12122a build(deps): bump actions/checkout from 3.3.0 to 3.4.0
2d0c580 build(deps): bump github.com/compose-spec/compose-go
f42f125 build(deps): bump actions/setup-go from 3 to 4
b455f38 build(deps): bump github.com/containerd/nydus-snapshotter
1780943 build(deps): bump github.com/klauspost/compress from 1.16.0 to 1.16.3
874894d build(deps): bump github.com/fatih/color from 1.14.1 to 1.15.0
9a6810b update containerd (1.7.0)
02c83a1 build(deps): bump github.com/containerd/nydus-snapshotter
6e58c63 build(deps): bump github.com/containerd/containerd
ff6ec3c build(deps): bump github.com/containerd/containerd
ee64917 Drop dependency on ctr/commands
52d5787 Drop dependency on ctr/commands/content
74fc0b1 Drop dependency on ctr/commands/tasks
23f9c6e remote snapshotters: migrate to containerd-based label management
d5f917f build(deps): bump github.com/containerd/containerd
2eb25f1 Port Windows device support from containerd
4d02668 build(deps): bump golang.org/x/crypto from 0.6.0 to 0.7.0
fcb42d6 Add notation signing and verification
361c987 build(deps): bump golang.org/x/net from 0.7.0 to 0.8.0
df08a17 handle container deps removal with postsop hooks
b2ac061 build(deps): bump github.com/containerd/containerd
00ea98e Update naming of filter containers function && `container list` handler
b50f0b6 build(deps): bump github.com/compose-spec/compose-go
5e6000d build(deps): bump github.com/containerd/nydus-snapshotter
ad6ed08 Fix `operation not permitted` with systemd-homed
c93f4c8 build(deps): bump github.com/containerd/go-cni
54cb1c4 build(deps): bump github.com/containerd/nydus-snapshotter
52532dc update containerd (1.6.19)
5108bb4 update Kubo (0.18.1)
dd87b58 update Nydus (2.1.4)
760d136 update BuildKit (0.11.3)
8c8630e build(deps): bump github.com/klauspost/compress from 1.15.15 to 1.16.0
2905b88 build(deps): bump github.com/containerd/containerd
f386373 add network in use check to `compose down`
a30e765 feat: resolve special ip host-gateway
ca5f02f cmd/compose: add support for profiles
73b8ebd build(deps): bump github.com/opencontainers/runtime-spec
11dc28d build(deps): bump github.com/vishvananda/netns
c03d691 update system prune flag `--all` confirm tooltip
cf18cc4 build(deps): bump github.com/containerd/nydus-snapshotter
dab24b5 Refactor system prune command flag process
84bec01 refactor(container-list): separate main logic out of printing logic
5b481ea Update command-reference system/image prune --all optional
ef06dcb refactor(container): refactor cp flag
795c75c func Save shouldn't create file from options.Output
a303ab1 fix: `options.Stdout` should be used instead of `os.Stdout`
01cdaf9 Make system prune all flag optional
754f134 Fix unsupported restart policy message
7c78c80 make confirm logic in `volume prune` be consistent with other Prune
0996732 Fix rmi err checking containers with deleted image
d688365 build(deps): bump github.com/compose-spec/compose-go
195da3d CI: test compilation with an old release of Go
57165af update Go (1.20)
e30503c Add TestRunAddGroup_CVE_2023_25173
6b9fc94 build(deps): bump github.com/containerd/containerd
fa9f627 Build containerd and runc for specific arch with xx
484c853 `types.KillOptions` > `types.ContainerKillOptions` to be consistent
abb1da2 Fix the rename command on Windows
12cdfe6 build(deps): bump github.com/compose-spec/compose-go
efed3ae Fix images output check bug
0e13baa make prune to remove dangling images only
5e60bfb build(deps): bump golang.org/x/net from 0.6.0 to 0.7.0
ba8545f Retag commonimage before loading to ensure it does not fail.
3ad3e1e build(deps): bump github.com/docker/docker
ec78af9 build(deps): bump github.com/docker/cli
8aed73e Refactor container prune and rename command flagging process
8fadc65 test for MergeEnvFileAndOSEnv
587e627 Split rootless driver tests by network driver and portdriver.
371ec29 build(deps): bump golang.org/x/crypto from 0.5.0 to 0.6.0
cd1e43e build(deps): bump github.com/containerd/go-cni from 1.1.7 to 1.1.8
2e05e06 build(deps): bump golang.org/x/net from 0.5.0 to 0.6.0
b584d31 Add more comments to imgutil pull
67df79e test for volume create command
50b4289 build(deps): bump golang.org/x/term from 0.4.0 to 0.5.0
402a1a8 accept Ctrl-C in cri log viewer
8db1886 Cache go artifacts that are not tested within docker
84e4cad Combine image filter logic to imgutil
6a5e423 Combine image options types
ff5f333 Optimize id walkers and muti error handling
faae24a build(deps): bump golang.org/x/sys from 0.4.0 to 0.5.0
d0e36b6 refactor image prune flag
3eedefa refactor: container list flagging process
1802fe3 build(deps): bump github.com/docker/cli
c078dea Refactor (un)pause in nerdctl and compose
1e5120b build(deps): bump github.com/docker/docker
d8d409b build(deps): bump github.com/containerd/nydus-snapshotter
f60251b build(deps): bump docker/build-push-action from 3.3.0 to 4.0.0
47c094a docs: fix internal links to other Markdown docs.
efa2c28 Mark `cri` log viewer as experimental
34e5711 typo: Encoode -> Encode
6240ed7 go.mod: github.com/containerd/accelerated-container-image v0.6.0
9dae8e5 compose: show detailed errors again
2220c08 update gotestsum (1.9.0)
6b48134 update Kubo (0.18.0)
3e649f0 update Nydus (2.1.3)
0767970 update BuildKit (0.11.2)
b9d9dfb Update CNI plugins (1.2.0)
bdb97a3 update containerd (1.6.16)
1ba5b93 go.mod: github.com/containerd/containerd v1.7.0-beta.3
2ab87da refactor: extract main logic of image.List
af317f0 refactor: move unpackedImageSize to imgutil
ab92b4f ipfs: move to `net/http`-based implementation instead of binary-based one
143a1a1 refactor: container wait flagging process
aee0d8a refactor image save flag
0f254af build: propagate SOURCE_DATE_EPOCH from the client env
65eeaec refactor: system events flagging process
72f447f [Refactor] Refactor the (container) pause command flagging process
5d35581 [Refactor] Refactor the new client outside pkg/cmd.
efe04d9 refactor restart flag
6db805f Update readme for dangling image support
c59b88b Bump github.com/klauspost/compress from 1.15.14 to 1.15.15
ca0af1b Bump github.com/docker/cli
0823d99 Deduplicate client and option creation in inspect
90baad8 Move client create out of pkg/cmd in inspect cmds
318ec06 refactor container top
ea9ac34 Fix: inspect multiple networks stops at first inspect fail
609c264 Bump github.com/docker/docker
9c61793 Bump github.com/fatih/color from 1.13.0 to 1.14.1
d50d490 Bump golangci/golangci-lint-action from 3.3.1 to 3.4.0
8d9d83d refactor exec flag
801320a [Refactor] Refactor the container start command flagging process
192ed67 cmd/nerdctl: use canonical filenames (e.g., run.go -> container_run.go)
b5c4ca7 mv pkg/cmd/info/info.go pkg/cmd/system/info.go
32d796f [Refactor] Refactor the IPFS command flagging process
105aacb refactor: container stop flagging process
fb20478 refactor: container logs flagging process
9470efa refactor: pass an io.Writer to image.List
00cc517 refactor commit flag
71d7b8b [Refactor] Move the function reconfig for container from cmd to pkg/containerutil.
85d2283 refactor image remove command flag
1316fd2 [Refactor] Reorder the method argument ordering in pkg/cmd
a09ce88 refactor: move stopContainer to containerutil
0dcf6ab add comment for api types
8cb887a [Refactor] Move generateSharingPIDOpts from cmd to pkg/containerutil
7eae969 Bump github.com/compose-spec/compose-go from 1.8.2 to 1.9.0
0088e84 cmd/nerdctl: withBindMountHostIPC: slight refactor
eab7e67 [Refactor] Move withBindMountHostProcfs from cmd to pkg/containerutil
eec294d refactor: move updateContainerStoppedLabel to containerutil
7ad50eb Add Windows HyperV container mode
a108460 Move command reference to a separate doc
0517682 refactor: consolidate main logic of volume.List into volume.Volumes
caf406f refactor image info flag
eada6de refactor image pull flag
b829764 refactor: image tag flagging process
1089061 Increase CI timeout
b726a3a Refactor the network command flagging process
572d790 Bump github.com/containernetworking/plugins from 1.1.1 to 1.2.0
76fb67f Refactor container inspect
287e0af [Refactor] Move getContainerNetNSPath from cmd to pkg/containerutil
9db3857 [Refactor] Refactor the namespace command flagging process
ad635da add support logs for namespace k8s.io
0c46a70 [refactor] Adjust code style for apparmor command
0b37d72 [refactor] Adjust the code style in `pkg/cmd/volume/*`
fad078a refactor: login flagging process
efb501c [Refactor] Move exit_coder from cmd to pkg/exit_coder
5de2d33 Bump docker/build-push-action from 3.2.0 to 3.3.0
393e207 Refactor nerdctl rm
2581da9 [Refactor] Refactor the image_* command flagging process
e49e9be [Refactor] Refactor the kill command flagging process.
1d7c743 Refactor network list
a91f502 Bump docker/metadata-action from 4.2.0 to 4.3.0
cd5892f go.mod: github.com/docker/docker v23.0.0-rc.2+incompatible
4f33d57 CI: ensure that ./pkg/... is decoupled from the CLI packages
23af1bb nerdctl system prune: drop Go dependency on BuildKit
b083a6e update BuildKit (0.11.0)
422e826 tests: rmiAll: prune content blobs
6f1c8eb pkg/cmd: Ls -> List
361099e mv pkg/cmd/load/load.go pkg/cmd/image/load.go
99ba431 mv pkg/cmd/build pkg/cmd/builder
ba01a64 Add nerdctl builder build command
907fb61 Fix rename command readme
391bb6a Add ability to run Hostprocess containers
3de4c8c Bump docker/metadata-action from 4.1.1 to 4.2.0
f54251c [Refactor] Refactor all the GlobalCommandOptions from pointer to value reference
4c1097b [Refactor] Refactor the images command flagging process
6dbeba5 Use current console when attaching a tty container
bf00c2a ipfs: allow configuring ipfs daemon address
b07417f [Refactor] Refactor the compose command flagging process
0c5328c Refactor the volume flagging process
efaf3d6 [Refactor] Refactor the load command flagging process
b9ce2af [Refactor] Refactor the build subcommand flagging process
c2024be Fix the container will be created when `nerdctl run -d --rm`
dc374a5 [refactor] Add global flag process helper function
c246de7 Bump github.com/compose-spec/compose-go from 1.8.1 to 1.8.2
cd82f2e Bump github.com/containerd/nydus-snapshotter from 0.4.1 to 0.5.0
1488291 Bump actions/checkout from 3.2.0 to 3.3.0
a18765b Bump golang.org/x/crypto from 0.4.0 to 0.5.0
a9d28ac Bump golang.org/x/text from 0.5.0 to 0.6.0
47eb362 Bump github.com/containerd/containerd from 1.7.0-beta.1 to 1.7.0-beta.2
88cabdd CI: Pass GITHUB_TOKEN to containerd/project-checks
156cf0e Bump github.com/klauspost/compress from 1.15.13 to 1.15.14
49d28f0 Add a prefix to apparmor command options to avoid conflict
30b09eb [Refactor] Move the Config Struct from cmd/main.go to pkg/config
c79d835 Refactor the volume ls command flagging process
e5b76f4 run: Add cgroup-parent flag
5a21b84 tests: Use AssertOk for deferred cleanup
6081141 [Refactor] Move containerd client helper from cmd to pkg/clientutil
606261d Refactor the apparmor flagging process
9d79e98 Filter dangling images using image filters.
52b2fa0 [Refactor]: Move fmtutil from cmd to pkg/formatter
3dc21df Bump github.com/mattn/go-isatty from 0.0.16 to 0.0.17
426208f feat: add `--remove-orphans` flag to `compose down`
0258743 Make nerdctl save work with image ids
17800d1 run: Consolidate namespace options
359521e run: Add --uts flag
c7487db fix can't save image by image id
8038d41 retain custom hosts outside markedRegion
0c495fc setPlatformOptions: Change signature
4e33afe Refactor restart flag process in update command
d210d08 add update restart policy
5d0d3cc remove processed TODO
b7c39f7 Bump github.com/containerd/nydus-snapshotter from 0.4.0 to 0.4.1
858b7be Bump github.com/klauspost/compress from 1.15.12 to 1.15.13
5726ecd Disable default hostname when network is set to container mode
5546d6d IPFS: use ipfs binary instead of library
ace02c1 Bump github.com/compose-spec/compose-go from 1.8.0 to 1.8.1
181e5a3 SetInterspersed(false) for compose run
38d03da Add compose create command
ae7796c Fix and make compose start work with compose create
a0a4006 Clean test duplication
9463f3a Fix a bug that goroutine refers loop variable
c67b102 Support NewTerminal & Detached mode
162602b Add RequireExecutable to testutil
07e3c37 Bump github.com/docker/cli
43a7150 Minor format change to pkg/composer/up.go
2d51277 Fix compose dependency order
06f9af8 Bump github.com/containerd/containerd from 1.7.0-beta.0 to 1.7.0-beta.1
44b6a6c Bump github.com/klauspost/compress from 1.15.12 to 1.15.13
385e1fd Add compose start command
73777ec tentative defalke testRunWithJsonFileLogDriver*
0575de8 feat: use buildkit API for clean up build cache
2e13172 MAINTAINERS: add Jin Dong(djdongjin) as a REVIEWER
894abcf feat: support for multi-arch image build support
53c7293 Bump actions/checkout from 3.1.0 to 3.2.0
e541997 Make titles Bold in nerdctl output
af06549 go.mod: github.com/ipfs/go-merkledag v0.8.1
dea3ad9 go.mod: accelerated-container-image v0.5.3-0.20221209054854-fbdabc5a08b6
f04c7c0 Fix timeout arg bug
e771508 Fix: Delete the used network in other namespace
e833819 Bump github.com/ipfs/interface-go-ipfs-core from 0.7.0 to 0.8.0
8fab27b Fix: Deleting multiple networks stops at first delete fail
276be12 build: improve error message
94116f6 CI: add gotestsum with --rerun-fails=2
e2dbab5 Upgrade indirect dependancy go-libp2p-core to v0.20.1
6d03d64 pkg/idutil/netwalker: fix nil pointer dereference
9271dcd Add compose port
f0a5c61 Add compose top
e772c36 update fuse-overlayfs (1.10)
b44116e update containerd (1.6.12)
3442558 Add compose pause and unpause
b669481 docs: minimum oom-score-adj for rootless containerd
3bdb39f Bump golang.org/x/crypto from 0.3.0 to 0.4.0
e213a7a Bump golang.org/x/net from 0.3.0 to 0.4.0
09fa4f5 Bump golang.org/x/net from 0.2.0 to 0.3.0
a48a342 Improve compose exec test
40c44ca Fix env flag in compose exec
677c433 fix: multi-image files load output
4404583 Add unit tests for default network creation.
f530136 Add usage output to commands without arguments
368ca30 deflake TestNetworkRemoveById
84ed0d6 Add compose exec command
69cdf19 Bump golang.org/x/text from 0.4.0 to 0.5.0
70a864d Bump golang.org/x/sys from 0.2.0 to 0.3.0
41cdacf Make `netutil.CNIEnv` stateless.
6baa5f6 Prevent double-creation of nerdctl default network.
fab8702 Add filter by image support by reference
16dc40f Change run to AssertOK in network test
4525c82 deflake network tests
01ca115 Moved NetworkWalker to another package
9165474 Export NetworkConfig struct
98054c2 Add the option to remove a network by id
2b6b614 Remove unnecessary lock
aa82640 Improve compose test
2600e0f Bump github.com/compose-spec/compose-go from 1.7.1 to 1.8.0
1ca5e90 doctoc docs/faq.md
51c570b docs: explain how to get rootless containerd socket address
6da1acb allow container network_mode in compose
a5ce077 Add json format support in compose ps
12e4f61 fix network rm: no running tasks
9013bdc Deflake TestCompletion
9a184ed Bump github.com/containerd/nydus-snapshotter from 0.3.3 to 0.4.0
b2735d1 Refactor the logging driver process function
74aff28 go.mod: add a comment about indirect dependency on btcsuite/btcd/btcec
150547f Add an extra validation when remove the network
ff9775b update Kubo (0.17.0)
a388cf0 update containerd-fuse-overlayfs (1.0.5)
f13819e update Nydus (2.1.1)
f9df0c8 update containerd (1.6.10)
b6f90fc update RootlessKit (1.1.0)
977336b MAINTAINERS: add Manu Gupta (manugupt1) as a REVIEWER
f1f33d8 MAINTAINERS: promote Ye Sijun (junnplus) from a REVIEWER to a COMMITTER
1767349 MAINTAINERS: add Hanchin Hsieh (yuchanns) as a REVIEWER
e830a44 Bump github.com/Masterminds/semver/v3 from 3.1.1 to 3.2.0
a4099c7 Bump github.com/compose-spec/compose-go from 1.7.0 to 1.7.1
8523663 default network creation behavior
daa99c3 Refactor remove containers in compose
3c5b069 Add support for filtering images by labels.
f07b3f5 Add compose images command
5fea9dc Add yaml linter
72f74f5 Fix block issue for `stats -a` command when there is dead container
b318c01 Add compose rm command
579a0e3 binfmt: support /proc/sys/fs/binfmt_misc/rosetta
0c7f619 Resolve flaky TestRunWithLogBinary
671be9a Add project name log in some tests
fa8caf9 Add compose restart command
6251c46 Add support to overlaybd convert
5b69fad Bump github.com/tidwall/gjson from 1.14.3 to 1.14.4
cdb5320 MAINTAINERS: promote Zheao Li from a REVIEWER to a COMMITTER
5fb66b8 Ensure compose down is called in tests
1ea5ab8 Reorder internalLabels
4779fa7 Delete setPlatformContainerOptions()
6596486 Simplify internalLabels
4f87ff0 fix stats collect bool var
e367097 Use service label to check orphan container
e65ac4d relax "containerIP assignment is not supported in rootless mode" error
38f4bcb Copy host env to container for env/envfile option
e7674c8 Deny rm image action when this image is used by running container
bf0aacf Update command use
bef23b9 go.mod: unfork hashicorp/golang-lru
dd0ff4b restrict the oom_score_adj value when running in a userNS
b532478 Support for ephemeral ports
2d91967 add-golint-revive
292d849 Bump golang.org/x/crypto from 0.2.0 to 0.3.0
cfa27df Fix keyless mode in compose up|run
9a0621f Add cosign in compose run, up, pull, push
229dad2 fix-blkio-weight-panic
47e26a7 golangci lint add unconvert check
7e8a1cf update-golangci-lint 1.50.1
c2523f0 Add more flags for image conversion
89243da Bump github.com/multiformats/go-multiaddr from 0.7.0 to 0.8.0
9148a60 Bump golangci/golangci-lint-action from 3.3.0 to 3.3.1
b0434b5 Enable image convert to customize zstd compression level
65981f1 Let calculate the number of unique images
f23d8c9 Refactor stop containers
63ff756 Fix `--time` argument for `nerdctl restart` command
a03f8ae update BuildKit (0.10.6)
af44dbb update stargz-snapshotter (0.13.0)
48e9c0f Refactor `nerdctl logs` functionality to pkg/logging.
005ad3c Enable 'nerdctl/log-uri' label passing on Windows.
287d7a2 Bump containerd dependency in go.mod.
f9a7eb4 Bump github.com/containerd/nydus-snapshotter from 0.3.2 to 0.3.3
805e63c Remove compose stop from unimplemented
e6c5c90 Add more specific description about restart and kill command
cf3430f Bump github.com/ipfs/go-ipfs-files from 0.1.1 to 0.2.0
086e4eb Small fix on bridge ipam
8cb1679 Bump github.com/compose-spec/compose-go from 1.6.0 to 1.7.0
9593367 Improve the documenation of 'compose build --progress'
41d5019 Bump github.com/containerd/nydus-snapshotter from 0.3.1 to 0.3.2
d43b1f1 Bump github.com/coreos/go-systemd/v22 from 22.4.0 to 22.5.0
cbae86b Update getRestart doc in compose
09f9ed6 Remove DockerIncompatible
85cf730 switch master to main
5836776 removes the obsolete //+build lines with go1.18
a92afb0 CI: support main branch
e688de7 Add a dangling image prefix when tag name is not specified.
bc69897 containerd-rootless-setuptool.sh: fix CONTAINERD_SNAPSHOTTER isn't recognized
a9936f3 Bump github.com/docker/cli
55b8629 Bump github.com/spf13/cobra from 1.6.0 to 1.6.1
0d14fbe Bump github.com/containerd/nydus-snapshotter from 0.3.0 to 0.3.1
91517ae Bump github.com/docker/docker
e46eb50 Add support for converting nydus images to `nerdctl image convert`
3df677d Bump golangci/golangci-lint-action from 3.2.0 to 3.3.0
ec8e352 Support `nerdctl build` custom outputs alias of type local
a13e1f0 Add '--mode' to 'network inspect' in README
8c59b2b Bump github.com/containerd/nydus-snapshotter from 0.3.0-rc.3 to 0.3.0
b004a8e Dockerfile: demo: enable bash completions
d2e5dc8 Dockerfile: demo: configure BuildKit to use containerd worker
132dc09 release note: clarify the compatible containerd versions
6fb9de5 update Kubo (0.16.0)
29f718d update stargz-snapshotter (0.12.1)
6c80673 update BuildKit (0.10.5)
3e367ab update imgcrypt (1.1.7)
98eac1e Bump github.com/docker/cli
666fece Add more examples of Kubernetes (Kind) + IPFS
1f839b2 Bump github.com/docker/docker
f83a913 Support --pid=container:xxx for `nerdctl run` cmd
6d5e5a2 Bump golang.org/x/text from 0.3.8 to 0.4.0
490ca8c Bump docker/metadata-action from 4.1.0 to 4.1.1
6c3a519 Bump github.com/containerd/stargz-snapshotter/ipfs from 0.12.0 to 0.12.1
ef50c08 Bump github.com/containerd/stargz-snapshotter from 0.12.0 to 0.12.1
0a8e2c7 Bump github.com/containerd/imgcrypt from 1.1.6 to 1.1.7
174119d Bump containerd/project-checks from 1.0.2 to 1.1.0
5fce296 Bump github.com/docker/docker
a446c9a Bump github.com/docker/cli
a9dda52 Support build args without explicit value
b4036f6 Support `log-path` opt for json-file logging driver
ac6c767 Bump docker/login-action from 2.0.0 to 2.1.0
32f541e Bump docker/metadata-action from 4.0.1 to 4.1.0
b963a6e Bump docker/build-push-action from 3.1.1 to 3.2.0
82f806a Use sys/windows to lock file
1708238 Bump github.com/spf13/cobra from 1.5.0 to 1.6.0
0ede9c8 Bump golang.org/x/text from 0.3.7 to 0.3.8
bfc44ae Bump gotest.tools/v3 from 3.3.0 to 3.4.0
adca3e4 Support argument `--mac-address` for nerdctl run command
02ad394 Bump actions/checkout from 3.0.2 to 3.1.0
ea90e56 follow-up TestLoadStdinFromPipe
0bcedac Fix nerdctl load stdin for pipes.
a83d5b7 Drop dependency on github.com/docker/docker/registry
184a45e Makefile: Set VERSION & REVISION only if unset
ca696e5 Bump github.com/Microsoft/go-winio from 0.5.2 to 0.6.0
5ec1a8f Bump github.com/compose-spec/compose-go from 1.5.1 to 1.6.0
0a5016d Support `syslog` driver for nerdctl
21c6c89 fix flag conflicts
3e1b10d Add `nerdctl compose version` command
2308828 Create an anonymous volume when --mount is specified.
82b9f41 Fix typo: builctl -> buildctl
80bb6cb Bump github.com/coreos/go-systemd/v22 from 22.3.2 to 22.4.0
3603055 Update images usage to contain positional arguments
971d9cb Bump github.com/compose-spec/compose-go from 1.5.0 to 1.5.1
5e93fa5 Change login and logout msg from Docker registry to container registry
0273c00 Implements logURI to support 3rd party ctrd shim logger
6de0662 Bump github.com/docker/cli
e953d09 Bump github.com/docker/docker
17a58aa Bump github.com/multiformats/go-multiaddr from 0.6.0 to 0.7.0
70bea8c Bump up buildg to v0.4.1
0b21ba7 Bump github.com/containerd/nydus-snapshotter
42f8a10 ServerAddress: Refactor logic and preserve debug logging
e53cde0 Fix crun incompatibility `cannot set swap limit without the memory limit`
ba373e5 cmd/nerdctl: simplify --help
37c045d update bypass4netns (0.3.0)
3d6e51a typo
1bbae54 Randomize container names in compose run
7418f35 Bump github.com/docker/go-units from 0.4.0 to 0.5.0
e28ca33 update bypass4netns (0.2.3)
c8ab6c3 update Kubo (0.15.0)
6b7a2d6 update BuildKit (0.10.4)
aeb3342 update runc (1.1.4)
7828a38 README.md: `nerdctl compose run` is now implemented
b5c027b Add tests and docs for compose run command
3296c14 Implement StdinOpen and Tty options in `compose`
fbd8ba0 Add compose run command template
0691b36 Support filter argument for `nerdctl ps` command
fdaaf34 replace use of deprecated sys.RunningInUserNS
3616607 remove dep between detach and cid in compose run
8c3cf4a golangci-lint: remove deprecated linters
fb57539 feat: add an experimental config in toml
ed70c23 Support filter argument for nerdctl volume ls command
4929d19 Support filter argument for `nerdctl images` command
e62f44c Bump github.com/containerd/nydus-snapshotter
488921c Bump github.com/compose-spec/compose-go from 1.4.0 to 1.5.0
5bff48b run: add a new privileged-without-host-devices option
0d3beee Bump github.com/tidwall/gjson from 1.14.2 to 1.14.3
5dc9863 pkg/testutil: remove unused GolangImage
df84d82 update Go (1.19)
2d477e3 go fmt (1.19)
44063b9 go mod tidy (1.19)
b36c69f update containerd (1.6.8)
24c851c Bump github.com/mattn/go-isatty from 0.0.14 to 0.0.16
e70f7d7 exclude default bridge network in `network prune`
b3d3958 Make the ServerAddress optional for the main docker registry.
3245439 Bump github.com/containerd/nydus-snapshotter
d347673 nit: remove unused variable and unreqd variable
b71febc fix stats output
4c2140d upgrade containerd to main
b1893b2 Bump github.com/tidwall/gjson from 1.14.1 to 1.14.2
20e319e Bump docker/build-push-action from 3.1.0 to 3.1.1
2a7a712 Add ability to show sizes in volume ls as well
013ebdc Bump github.com/containerd/nydus-snapshotter
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
379c743852 |
lxc: update to 5.0.2-tip
Bumping lxc to version lxc-5.0.2-1-g727adc052, which comprises the following commits:
727adc052 drop broken lxc-test-fuzzers
d57173681 Release LXC 5.0.2
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
||
|
Bruce Ashfield
|
46fb24baad |
k3s: update to v1.25.8
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |