mirror of
git://git.yoctoproject.org/meta-virtualization.git
synced 2025-07-19 12:50:22 +02:00
0e64f6382f
2204 Commits
Author | SHA1 | Message | Date | |
---|---|---|---|---|
![]() |
0e64f6382f |
vhost-device: fix README.md location
I accidentially created it in the root while it meant to go to the subfolder. Link: https://lore.kernel.org/yocto-meta-virtualization/CUUO41I813NY.CPU5GWIZUCC4@fedora/ Signed-off-by: Erik Schilling <erik.schilling@linaro.org> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
7fee614060 |
xen-boot-cmd: Remove hard assigment for ramdisk image
Setting hard assignment for RAMDISK_IMAGE will take precedence during variable pre-expansion. Hence set RAMDISK_IMAGE variable with soft assignment. Signed-off-by: Sandeep Gundlupet Raju <sandeep.gundlupet-raju@amd.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
2820535869 |
vhost-device: add recipes for vhost-device daemons
This adds recipes for the first tagged release of the vhost-device daemons of the rust-vmm project. While the initial release was done for all daemons at the same time, the daemons all have indepentend version numbers and will be released on their own schedules in the future. Therefore, I splitted them into independent recipes. Signed-off-by: Erik Schilling <erik.schilling@linaro.org> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
81bd76bd18 |
nerdctl: fix installed-vs-shipped with usrmerge
* fixes: ERROR: nerdctl-v1.3.0-r0 do_package: QA Issue: nerdctl: Files/directories were installed but not shipped in any package: /bin /bin/nerdctl Please set FILES such that these items are packaged. Alternatively if they are unneeded, avoid installing them or delete them within do_install. nerdctl: 2 installed and not shipped files. [installed-vs-shipped] Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
884c0bbbc0 |
kubernetes: fix installed-vs-shipped with usrmerge
* fixes: ERROR: kubernetes-1_v1.27.1+git2555e0f90e80a13628f47eca5cde34decc89babb-r0 do_package: QA Issue: kubernetes: Files/directories were installed but not shipped in any package: /bin /bin/k8s-init Please set FILES such that these items are packaged. Alternatively if they are unneeded, avoid installing them or delete them within do_install. kubernetes: 2 installed and not shipped files. [installed-vs-shipped] Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
926d714972 |
cloud-init: fix usrmerge QA issue
* backport a fix from 23.2 version (notice that the recipe claims to be: v23.2.2+git, but the commit in master-next which updated PV only changed the branch name, not the SRCREV, so it's still 23.1 and missing this fix cloud-init/v23.2.2+git/git $ git describe --tags 23.1-53-g57752970e * fixes: ERROR: cloud-init-v23.2.2+git-r0 do_package_qa: QA Issue: cloud-init package is not obeying usrmerge distro feature. /lib should be relocated to /usr. [usrmerge] caused by udev rules: $ find cloud-init/v23.2.2+git/image/lib/ cloud-init/v23.2.2+git/image/lib/ cloud-init/v23.2.2+git/image/lib/udev cloud-init/v23.2.2+git/image/lib/udev/rules.d cloud-init/v23.2.2+git/image/lib/udev/rules.d/66-azure-ephemeral.rules Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
0f1601d98f |
cloud-init: update to 23.2.2
Bumping cloud-init to version 23.2.2, which comprises the following commits: e65a715d Release 23.2.2 7e22ea8b Fix reference before assignment (#4292) bd909995 Fix NoCloud kernel commandline key parsing (#4273) cda47255 Release 23.2.1 0bbf84e5 nocloud: parse_cmdline no longer detects nocloud-net datasource (#4204) cdc24d86 Release 23.2 2f83ab48 BSD: simplify finding MBR partitions by removing duplicate code 10721027 tests: bump pycloudlib version for mantic builds f663e94a network-manager: Set higher autoconnect priority for nm keyfiles (#3671) 2a927738 alpine.py: change the locale file used (#4139) e0b1a477 cc_ntp: Sync up with current FreeBSD ntp.conf (#4122) ddb07212 config: drop refresh_rmc_and_interface as RHEL 7 no longer supported a5366e24 docs: Add feedback button to docs 009dbf85 net/sysconfig: enable sysconfig renderer if network manager has ifcfg-rh plugin (#4132) 431d2c14 For Alpine use os-release PRETTY_NAME (#4138) 5d440856 network_manager: add a method for ipv6 static IP configuration (#4127) 06eadd8a correct misnamed template file host.mariner.tmpl (#4124) ea573ba6 nm: generate ipv6 stateful dhcp config at par with sysconfig (#4115) 6d09df5e Add templates for GitHub Issues 1b9c2b57 Add 'peers' and 'allow' directives in cc_ntp (#3124) 8c1a3ff8 FreeBSD: Fix user account locking (#4114) 21006925 FreeBSD: add ResizeGrowFS class to cc_growpart (#2334) ffdb7a7d Update tests in Azure TestCanDevBeReformatted class (#2771) ce2f26c2 Replace Launchpad references with GitHub Issues 7c52b8a5 Fix KeyError in iproute pformat (#3287) 73f34575 schema: read_cfg_paths call init.fetch to lookup /v/l/c/instance 9f845036 azure/errors: introduce reportable errors for imds (#3647) 60248d88 FreeBSD (and friends): better identify MBR slices (#2168) 481bf4d3 azure/errors: add host reporting for dhcp errors (#2167) 0c4d53f2 net: purge blacklist_drivers across net and azure (#2160) 64227612 net: refactor hyper-v VF filtering and apply to get_interfaces() (#2153) 6cc09f3c tests: avoid leaks to underlying filesystem for /etc/cloud/clean.d (#2251) a0f5279b net: refactor find_candidate_nics_on_linux() to use get_interfaces() (#2159) 0dfe06ba resolv_conf: Allow > 3 nameservers (#2152) e07ad4a5 Remove mount NTFS error message (#2134) b1a14a2a integration tests: fix image specification parsing (#2166) 4d28d203 ci: add hypothesis scheduled GH check (#2149) a18442af Move supported distros list to docs (#2162) e8ef58b9 Fix logger, use instance rather than module function (#2163) ed2ebf09 README: Point to Github Actions build status (#2158) 59edb3f1 Revert "fix linux-specific code on bsd (#2143)" (#2161) c53f04ae Do not generate dsa and ed25519 key types when crypto FIPS mode is enabled (#2142) 76fe7ddb Add documentation label automatically (#2156) 96710408 sources/azure: report success to host and introduce kvp module (#2141) 5abf5f5f setup.py: use pkg-config for udev/rules path (#2137) 7ffd0bcd openstack/static: honor the DNS servers associated with a network (#2138) a9cec5da fix linux-specific code on bsd (#2143) e9d1d3a0 cli: schema validation of jinja template user-data (SC-1385) (#2132) aa0cd62c gce: activate network discovery on every boot (#2128) be3441b2 tests: update integration test to assert 640 across reboots (#2145) a378b7e4 Make user/vendor data sensitive and remove log permissions (#2144) c1b47220 Update kernel command line docs (SC-1457) (#2133) 1132b2ce docs: update network configuration path links (#2140) 6e380dd6 sources/azure: report failures to host via kvp (#2136) 34637a49 net: Document use of `ip route append` to add routes (#2130) 0a534a6d dhcp: Add missing mocks (#2135) 4f3fe823 azure/imds: retry fetching metadata up to 300 seconds (#2121) 5942f402 [1/2] DHCP: Refactor dhcp client code (#2122) 9e4cb4f0 azure/errors: treat traceback_base64 as string (#2131) d6de22e3 azure/errors: introduce reportable errors (#2129) 3ee38468 users: schema permit empty list to indicate create no users b7179409 azure: introduce identity module (#2116) 34e8c914 Standardize disabling cloud-init on non-systemd (#2112) 44ab4f4a Update .github-cla-signers (#2126) f146fe71 NoCloud: Use seedfrom protocol to determine mode (#2107) 24945cad rhel: Remove sysvinit files. (#2114) a664b712 tox.ini: set -vvvv --showlocals for pytest (#2104) 250280ad Fix NoCloud kernel commandline semi-colon args d9844fa8 run-container: make the container/VM timeout configurable (#2118) e572643f suse: Remove sysvinit files. (#2115) e71f0a13 test: Backport assert_call_count for old requests (#2119) 9490585f Add "licebmi" as contributor (#2113) e02c4607 Adapt DataSourceScaleway to upcoming IPv6 support (#2033) 6d42aa8e rhel: make sure previous-hostname file ends with a new line (#2108) 55eaba2f Adding contributors for DataSourceAkamai (#2110) 0273712c Cleanup ephemeral IP routes on exception (#2100) 09a64bad Fix private key permissions when openssh not earlier than 9.0 #2072 612b4de8 Standardize kernel commandline user interface (#2093) 2a61a589 config/cc_resizefs: fix do_resize arguments (#2106) b33d528e Fix test_dhclient_exits_with_error (#2105) c82ace92 net/dhcp: catch dhclient failures and raise NoDHCPLeaseError (#2083) 4fbf5317 sources/azure: move pps handling out of _poll_imds() (#2075) d6ac22e1 tests: bump pycloudlib version (#2102) d7bdba6f schema: do not manipulate draft4 metaschema for jsonschema 2.6.0 (#2098) ed3ebfc4 sources/azure/imds: don't count timeout errors as connection errors (#2074) e3f1ec3f Fix Python 3.12 unit test failures (#2099) 2562f933 integration tests: Refactor instance checking (#1989) ad33cbba ci: migrate remaining jobs from travis to gh (#2085) 4b6e4e13 missing ending quote in instancedata docs(#2094) baad0946 refactor: stop passing log instances to cc_* handlers (#2016) 7803f9c6 tests/vmware: fix test_no_data_access_method failure (#2092) 56c88caf Don't change permissions of netrules target (#2076) e54ca3ad tests/sources: patch util.get_cmdline() for datasource tests (#2091) ceb66d45 macs: ignore duplicate MAC for devs with driver driver qmi_wwan (#2090) 055395d3 Fedora: Enable CA handling (#2086) 74ed9ef2 Add frantisekz as contributor (#2087) 7f91bdea Send dhcp-client-identifier for InfiniBand ports (#2043) 85b2fbc2 cc_ansible: complete the examples and doc (#2082) eaa4ccb1 contributor: add bdrung c13f4738 bddeb: for dev package, derive debhelper-compat from host system 7382cb66 apport: only prompt for cloud_name when instance-data.json is absent a60c0845 datasource: Optimize datasource detection, fix bugs (#2060) 36346784 Handle non existent ca-cert-config situation (#2073) 5eb43b95 sources/azure: add networking check for all source PPS (#2061) fc6c1d37 do not attempt dns resolution on ip addresses (#2040) 8a0feb1e chore: fix style tip (#2071) 2e697bb0 Fix metadata IP in instancedata.rst (#2063) b463f30c util: Pass deprecation schedule in deprecate_call() (#2064) 9af4b0bf config: Update grub-dpkg docs (#2058) b91dd0e8 docs: Cosmetic improvements and styling (#2057) 2fd24cc8 cc_grub_dpkg: Added UEFI support (#2029) 20335153 tests: Write to /var/spool/rsyslog to adhere to apparmor profile (#2059) 6b9bf7b9 oracle-ds: prefer system_cfg over ds network config source (#1998) b728b4e7 Remove dead code (#2038) 4896402b Release 23.1.1 (#2052) d1ffbea5 source: Force OpenStack when it is only option (#2045) 635b5a52 cc_ubuntu_advantage: improve UA logs discovery d781e14c sources/azure: fix regressions in IMDS behavior (#2041) 5d1d2544 tests: fix test_schema (#2042) b2220798 dhcp: Cleanup unused kwarg (#2037) f79efeba sources/vmware/imc: fix-missing-catch-few-negtive-scenarios (#2027) 2ee614aa dhclient_hook: remove vestigal dhclient_hook command (#2015) 6100fda6 log: Add standardized deprecation tooling (SC-1312) (#2026) 46fcd031 Enable SUSE based distros for ca handling (#2036) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
23373571e7 |
moby: update to v24.0.5
Bumping moby to version v24.0.5-20-g00e46f85f6, which comprises the following commits: b7c5385b81 update to go1.20.7 6be708aa7d vendor: gotest.tools/v3 v3.5.0 b6568d2dd5 api/types/filters: fix errors not being matched by errors.Is() 02241b05fc update containerd binary to v1.7.3 3a6899c6fd update containerd binary to v1.7.2 7927cae910 c8d/container: Follow snapshot parents for size calculation 45ba926c6d daemon/list: Drop unused arg from containerReducer 6c4121a943 daemon/list: Refactor refreshImage fcb68e55fa daemon/list: Replace ErrImageDoesNotExist check 3029f554cc c8d/readConfig: Translate c8d NotFound to errdefs 35a8b00b18 hack/integration: Add TEST_INTEGRATION_FAIL_FAST fed26d5b3c vendor: github.com/moby/buildkit v0.11.7-dev eede7f09c7 Remove Upstart scripts 907f838603 Remove Upstart and cgroups bits from Debian sysvinit script f022632503 Dockerfile: update runc binary to v1.1.8 98a6422cbc c8d/inspect: Include platform Variant aab94fb340 Dockerfile: update buildx to v0.11.2 1be48ec553 c8d: Make sure the content isn't removed while we export ff0144de3b ci(buildkit): remove early-return from buildkit-ref a936ae7e98 ci(buildkit): remove misleading code from buildkit-ref 4c29864b02 hack/with-go-mod.sh: warn on stderr 3c5c192baf c8d/resolveImage: Fix Digested and Named reference 572de8764e c8d/inspect: Don't duplicate digested ref 5dded3340c ci: extract buildkit version correctly with replace-d modules bd1ae65aab quota: remove gotest.tools from testhelpers 544032f7a4 hack/d/cli.sh: properly handle errors in curl 0df2e1bdd8 Dockerfile: improve CLI/rootlesskit caching 05f82fdd00 Dockerfile(.simple): align APT_MIRROR support 151686a5c8 Makefile: pass through APT_MIRROR 31567e0973 Dockerfile: use default apt mirrors d94f2dcab2 client: Client.postHijacked: use Client.buildRequest bff68bf2cc client: Client.setupHijackConn: explicitly ignore errors 8bdf6d1baf ci(bin-image): add SHA-based tags 26a457e7a3 ci(bin-image): fix meta step b9904ba319 ci(bin-image): fix typo e7c333cb6e ci(bin-image): don't set tags when pushing by digest fcb87e8ae1 ci: push bin image to Docker Hub 68c0cec772 Disable tls when launching dockerd through hack/make.sh 738d8417e0 libnet: Return a 403 when overlay network isn't allowed a5c0fda157 libnet: Return proper error when overlay network can't be created deea880581 pkg/jsonmessage: use string-literals for easier grep'ing 962a4f434f pkg/ioutils: use string-literals for easier grep'ing cea5829402 pkg/idtools: use string-literals for easier grep'ing 69d77bc150 opts: use string-literals for easier grep'ing ff667ed932 integration: use string-literals for easier grep'ing efe9e90ef5 libnetwork: use string-literals for easier grep'ing 2d2df4376b daemon/cluster: use string-literals for easier grep'ing ae8e3294dd client: use string-literals for easier grep'ing 892857179a cli/debug: use string-literals for easier grep'ing 147b87a03e daemon: use string-literals for easier grep'ing a3f1f4eeb0 integration-cli: use string-literals for easier grep'ing 5bba60b1bb builder/builder-next: use string-literals for easier grep'ing 632fc235d6 builder/dockerfile: use string-literals for easier grep'ing 75a90f85ad gha: add note about buildkit using older go version fa909dfaf4 update go to go1.20.6 bdaadec788 testutil: use dummyhost for non-tcp connections 547ea18fbb pkg/plugins: use a dummy hostname for local connections 597a5f9794 client: define a "dummy" hostname to use for local connections fee4db80a0 client: TestSetHostHeader: don't use un-keyed literals 959889efd9 integration: Don't env cleanup before parallel subtests 6c5144d3e5 Add t.Helper() to the cli test helper functions 9ff2c3918c ci(buildkit): match moby go version for buildkit tests a4b1a5aef4 vendor: github.com/moby/buildkit@v0.11 0a0807e 6c7f6c2d47 daemon/containerd: fix assignment to entry in nil map during commit 0e88c57c47 integration: disable iptables in parallel tests a3049653c1 pkg/plugins: make unit test less time sensitive d3893b58ff daemon: daemon.prepareMountPoints(): fix panic if mount is not a volume 5892aae60f docs: api v1.28 - v1.40: add missing "force" query arg on plugin disable 7adb590e16 docs: api v1.41: add missing "force" query arg on plugin disable b5aacf8161 docs: api v1.42: add missing "force" query arg on plugin disable b732cfd392 docs: api v1.43: add missing "force" query arg on plugin disable 50fb65f0f5 docs: api: amend changelog for API 1.28 for "force" option 32bcbdfe65 api: swagger: add missing "force" query arg on plugin disable f66ef31605 docs: api v1.41: remove outdated information from ServerVersion acb95e4544 docs: api v1.42: remove outdated information from ServerVersion 335ed29345 docs: api v1.43: remove outdated information from ServerVersion 0ef846ce2e api: remove outdated information from ServerVersion af25852baa docs: api v1.42: remove "ClusterStore" and "ClusterAdvertise" fields 7a9c831e6a docs: api v1.43: remove "ClusterStore" and "ClusterAdvertise" fields 649bb2b9b8 api: remove "ClusterStore" and "ClusterAdvertise" fields 457399013b vendor: github.com/containerd/cgroups/v3 v3.0.2 016ad9b3e8 c8d/prune: Handle containers started from image id 87778af711 c8d/prune: Exclude dangling tag of the images used by containers 8bf037b246 c8d/softDelete: Deep copy Labels 8afe75ffa9 c8d/softDelete: Extract ensureDanglingImage e2bade43e7 testutil/environment: Add GetTestDanglingImageId e0091d6616 c8d: ImageService.softImageDelete: rename var that collided with import 42f3f7ed86 c8d: ImageService.softImageDelete: use OCI and containerd constants aace62f6d3 pkg/fileutils: GetTotalUsedFds(): use fast-path for Kernel 6.2 and up bb50485dfd pkg/fileutils: GetTotalUsedFds: reduce allocations 5dcea89ce1 pkg/fileutils: add BenchmarkGetTotalUsedFds 01eb4835c9 pkg/fileutils: GetTotalUsedFds(): don't pretend to support FreeBSD cd44aba8db [24.0] pkg/fileutils: switch to use containerd log pkg ee29fd944b gha: don't fail if no daemon.json is present b8ee9a7829 c8d/images: handle images without manifests for default platform d9e097e328 vendor: github.com/opencontainers/image-spec v1.1.0-rc3 806849eb62 seccomp: add name_to_handle_at to allowlist c24c37bd8a Restore active mount counts on live-restore c306276ab1 remove name_to_handle_at(2) from filtered syscalls d5e31e03b6 gha: Setup Runner: add missing sudo 85ad299668 Dockerfile: make cli stages more resilient against unclean termination e84365f967 Skip cache lookup for "FROM scratch" in containerd 96534f015d integration-cli: don't use pkg/homedir in test 6424ae830b Dockerfile: update buildx to v0.11.0 6055b07292 Fix missing Topology in NodeCSIInfo 2f379ecfd6 daemon: fix restoring container with missing task 136893e33b daemon: fix double-unlock in health check probe 290fc0440c daemon: fix panic on failed exec start 0556ba23a4 daemon: handleContainerExit(): use logrus.WithFields 35a29c7328 builder: pass host-gateway IP as worker label 210c4d6f4b daemon: ensure OCI options play nicely together f50cb0c7bd daemon: stop setting container resources to zero 0a6a5a9140 daemon: modernize oci_linux_test.go c92fd5220a c8d: mark stargz as requiring reference-counted mounts 5e48bbd14c contrib/busybox: Update to FRP-5007-g82accfc19 6776279896 daemon: registerName(): don't reserve name twice 7db3243e34 don't cancel container stop when cancelling context aec7a80c6f c8d: Use reference counting while mounting a snapshot 5652c59647 testing: temporarily pin docker-py tests to use "bullseye" aa47b29dbc vendor: github.com/moby/swarmkit/v2 v2.0.0-20230531205928-01bb7a41396b Bumping libnetwork to version v0.7.0-dev.3-1874-g67e0588f, which comprises the following commits: 11eaf1f0 sync MAINTAINERS file with new moby maintainers dbbf124d Clean up inDelete network atomically Bumping docker-cli to version v24.0.5-6-gb74562d91, which comprises the following commits: c0e376854 update to go1.20.7 1481c8ce9 vendor: gotest.tools/v3 v3.5.0 e97c76557 vendor: github.com/docker/docker v24.0.5 1ee40e2c7 configfile: Initialize nil AuthConfigs 3bd6d6902 Dockerfile: update buildx to v0.11.2 05bf7fbcc vendor: github.com/docker/docker v24.0.5-0.20230718221249-d4a26c153000 8b5023dd2 vendor: github.com/docker/docker v24.0.5-0.20230717072055-8443a06149b5 2a6348d1b Dockerfile: update buildx to v0.11.1 f4782b325 update go to go1.20.6 7d06f6b2f vendor: github.com/docker/docker v24.0.5-0.20230714235725-36e9e796c6fc 1447974b8 docs: rephrase section on credential stores for docker login 46293e97f Dockerfile: update to xx 1.2.1 bfe2ff820 cli/container: Don't ignore error when parsing volume spec b40742962 vendor: github.com/docker/docker v24.0.4 79c42c0b9 vendor: golang.org/x/net v0.10.0 a96d0a526 vendor: golang.org/x/text v0.9.0 5c5c50d71 vendor: golang.org/x/term v0.8.0 4bf11b756 vendor: golang.org/x/sys v0.8.0 224c7dbec vendor: github.com/sirupsen/logrus v1.9.3 e25d5c64c vendor: github.com/opencontainers/image-spec v1.1.0-rc3 419e94df4 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230531205928-01bb7a41396b 2d5f041bd commandconn: return original error while closing 520e3600e commandconn: don't return error if command closed successfully cd68c8f00 docker info: fix condition for printing debug information a78fd6ca6 docs: update link location for the overlay driver 9cd335d44 docs: fix static ip example, network needs a subnet d61e4fe87 docs: fix broken link 8e3a2942a cli/command/context: don't use pkg/homedir in test c3ef1cead docs: update the runtime configuration section 44eebb8bc Dockerfile: update buildx to v0.11.0 7ecfa2e7f Dockerfile: update gotestsum to v1.10.0 f11f30909 update go to go1.20.5 3a6c11773 Dockerfile: update ALPINE_VERSION to 3.17 11af1189d docs: add "--detach-keys" example to docker run reference f118c05e8 docs: move "--detach-keys" example to examples section Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
8e1a34f550 |
kernel: drop 5.15 inc file
5.15 hasn't been in master for quite some time, so we drop our version matching .inc Support for 5.15 can be found on release branches. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
ade1182494 |
docker-compose: switch branch to main
The upstream repoistory transitioned from master to main, and also deleted the v2 branch this recipe was using. Switch everything to main until (if?) new versioned branches appear. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
23ce17f66c |
podman-compose: Add missing runtime dependency python-dotenv
Signed-off-by: Leonard Anderweit <l.anderweit@phytec.de> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
ed6bcd97fa |
xen: Update arm assembly patch to upstream accepted one
Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
56593e277a |
python3-dtc: drop recipe
oe-core commit 123077ecd9f3c1839d [python3-dtc: add from meta-virtualization] brings this recipe into core, so we drop our version. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
77193109eb |
qemu: adapt to OE-core qemu splitting
Since oe-core commit 893846ead7ee54d53 [qemu: Split the qemu package], qemu now has a similar (but different) split to what meta-virt has been providing to vmsep enabled systems. We override the oe-core splitting function to restore our ability to separate functionality into logical groups. This commit also provided RDEPENDS for the new oe-core named packages to allow compatbility with updated images. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
58ef402d44 |
skopeo: update to 1.13.0
Bumping skopeo to version v1.13.0, which comprises the following commits: 8b9999e1 Bump to v1.13.0 4de3a90f proxy: Policy verification of OCI Image before pulling e9303879 Update module github.com/opencontainers/image-spec to v1.1.0-rc4 3d8d2128 Update module github.com/containers/common to v0.55.1 bfa04ea2 Update module github.com/containers/common to v0.54.0 1d5458fa Update module github.com/containers/image/v5 to v5.26.0 290a7630 [CI:BUILD] RPM: fix ELN builds d72d53cc Update module github.com/containers/storage to v1.47.0 0297033e Packit: easier to read distro conditionals 03a19132 Update dependency golangci/golangci-lint to v1.53.3 c04ee48b Help Renovate manage the golangci-lint version 37a81ea7 Minor: Cleanup renovate configuration e2174f17 Update dependency containers/automation_images to v20230614 ceeeb67e Update module golang.org/x/term to v0.9.0 411e9838 [CI:BUILD] Packit: add jobs for downstream Fedora package builds deee28a9 Update module github.com/sirupsen/logrus to v1.9.3 574b2cc4 Update dependency containers/automation_images to v20230601 73e7618d Update golang.org/x/exp digest to 2e198f4 1c738806 Update github.com/containers/image/v5 digest to e14c1c5 2e07073c Update module github.com/stretchr/testify to v1.8.4 c06aa5c6 Update module github.com/stretchr/testify to v1.8.3 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
feb1d78952 |
crun: update to v1.8.5-tip
Bumping crun to version 1.8.5-40-g56d9d9a, which comprises the following commits: 19cd8aa ps: fix segfault with pids=NULL d006733 features: add wasm annotation 935f4fe tests: add test for oci_features 366af73 src/*: implement features 21b1733 Makefile.am: update clang-format command 9e5a749 libcrun: report when status file not found 84a6599 libcrun: crun_path_exists distinguish ENOENT ef224f9 docs: remove module.wasm.image/variant=compat annotation Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
1fc1b1935f |
podman-compse: update to v1.0.6
Bumping podman-compose to version v1.0.6, which comprises the following commits: f6dbce3 version 1.0.6 dfb64d8 fix pylint 990f774 fix pylint 5e518c7 #648: check if sed exists to color logs 9046f7e #634: follow up ef55067 add support for network priorities ed2a6c0 Support network_mode: none b4c0792 Add --remove-orphans on down command e84451f Allow environment parameters without value 456370b Support build secrets efe3714 Add support for the `group_add` property of a service. c55a2f4 Fixes #657: Support act and developer-friendly environment b8a7593 #154: timeout bd29ddb #154: no -t for start 38219eb FIXES #154: handle stop_grace_period 08ffcf6 updating test_podman_compose_extends_w_file_subdir to use the correct image name 801faea Bump actions/setup-python from 2 to 4 06da966 Bump actions/checkout from 2 to 3 de3f607 Check for github actions updates weekly db1861d pull: accept service names as positional arguments 9d5b255 Use top-level name property as project name if user doesn't set one explicitly 2d05c5c FIXES #534: add systemd unit label 3c46016 FIXES #534: add systemd unit label 5b9cfe5 implement services.*.build.tags 8d1a4d7 Implemented basic Bash shell completion 859f03c Add healthcheck.disable support ae6be27 reformat ccdb98c implement podman kill command 909d05e reformat 0cf98c7 reimplement the of pause and unpause commands 843b876 fix typo 1188463 fix Typo podman-composer in version command 10580db Add pause,unpause commands support f7d335d #516: allow empty network 4a73ae8 FIXES #511: ipv6 f674ab8 #512: only use --net when bridge 265e0ca #512: only use --net when bridge 92662f3 FIXES #511: ipv6 42c0078 mac_address with dash da5ee72 reformat 06fc071 reformat 9eda56c FIXES #507: respecte mac_address 13c8981 Fix help message for systemd subcommand ee7029f reformat 75033a4 add python demo example c175fd1 reformat d479001 reference awesome-compose a2defdd example wordpress c55cd67 #307: default to /etc/ eed38ce Fixed accidental deletion of project functionality. 86ffad8 Added port subcommand. 118d39b Fix linter errors 814bd2a Support driver_opts for networks 606b9d9 Simplify var assignment 0057a4b Fix default external name in dict case 8ecb749 Update external volume name management d983056 Update external volume name management ed302ca Fix external volume name when no name provided 0b5c844 Add runtime error if no external volume exists 9c29c89 FIXES #486: replace realpath with abspath 89d2062 Fixed some spelling and grammar issues f42b568 Correct the help text for --pod-args a1d3ba4 Lint fixes for --services flag handling in config 6be661f Support platform property fc3598f Allow --services in config fbff315 FIXES #464: accept -v in run fc34703 format c7ada82 format 5e286f6 format 3dd8b05 format 3ecb4b5 FIXES #462: fix extends merge d05cad4 FIXES #462: fix extends merge ebb3dfe #452: better missing network message 7b99b38 nethost test 4ef8afc hit counter with redis cluster example a1aed09 GCR hello app 2cacf9c add echo example 4064c84 add azure vote example 0dde95a update gitignore 1be41b4 do not merge command array 105c27c example nodejs project f820594 use exec for wait 8a72321 FIXES #409: detect changes and recreate 5293919 FIXES #409: detect changes and recreate 48a19f1 print more help with systemd a9faabb print more help with systemd 3fb2b98 print more help with systemd b35b7e4 add systemd -a list 1a72e1e add systemd -a list b620311 FIXES #449: accept int port bf8004b systemd unit file cadf046 fix pylint 8d8149c fix pylint 3dd9817 fix pylint 0b469e0 format 9e3020a FIXES #307: systemd command fc9ed19 wait command 2d6bb52 FIXES #442: allow --no-pod or custom --pod-args 7942a09 FIXES #442: allow --no-pod or custom --pod-args 701311a FIXES #447: support --env-file d704915 FIXES #447: support --env-file 3b7bf81 remove unused test a735aa5 Fix inverted condition in merging arguments b785095 Fix linter issues 7623180 Force black formatting af10345 FIXES #440: absolute secret 2d1bcdd update readme 4f02567 add unit tests 0645212 add badge b7c5609 pylint 4450835 pylint 5c33e4e pylint cbd6f6b pylint cleanups de1e59d fix some pylint 2f0ca9e add pytest ci 59c9a69 add pylint b7eac1e pylint 0d47e47 activate test c2d7b26 #434: handle unknown service 1e895c0 calc proper hash 132a22b #130: handle nested extend and normalize build context 0bde01d remove unused imports 91a579b Adding Test that the changes can build Image from build context of extended compose-file 56b8863 Fixing subdirectory from extends where extended service will build a Service from Dockerfile in an own subdirectory 5c3ec5f FIXES #431: support dns 779198b #379: no infra container 40cb6a7 log version 4fd9d86 #379: nothing shared in the pod to allow hostname 2a2c3a0 Fix timeout value data type 80e8527 #379: create a pod d6e21dc FIXES #425: pass --requires b9b2f83 FIXES #415: allow network_mode=slirp4netns 9af65ea adjust comment 3e6e268 test for logs af6a306 fix syntax error without a new line 68f745f referenced unmerged pr #192 to bring colors into container logging 90dcfdb FIXES #420: document -t ed8635a FIXES #422: Remove debug print 1d972ef Propagate all bind-type mount options 536925c FIXES #413: parse network_mode: container:container_name correctly 09c6cbe FIXES #408: preserve exit code 154a512 FIXES #386: make sure volumes are present in top level 523d215 #407: allow network_mode=service:mysrv 25494b5 Update README.md 19662c0 Fix healthcheck test type on replicas 4943e52 #395: make podman respect PODMAN_* in .env 4aa08cd FIXES #399: pass specific ip 15e0ab9 FIXES #397: support host network mode f66861f #249: read COMPOSE_PROJECT_NAME env af53b65 Simplify volume identification 890c584 Update README.md 0bd493f Allow empty default/error value in substitution 481c6d0 #394: config: multiple yaml 31df70b updated per maintainer review df40051 removes version from CONTRIBUTING 21a716c added log back in f00ac92 added config command 0433410 added args for version 0f9fe2b FiXES #393: missing arg when build as part of run a1be5ce add fallback to get 56a4988 Add support for volume driver and options 377b552 Fix substitution for empty variables c50599c FIXES #388: do not force build in run 4557279 #88: multiple aliases 7ad3775 FIXES #380: output to stderr 30051c2 Update README.md. Add link to podman dns plugin source 9e8e25c #378: down -v 2c60516 fix hostname in test Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
2a4b72b3a2 |
podman: update to 4.6
Bumping libpod to version v4.6.0-rc1-6-g932b8a997, which comprises the following commits: c422072b6 [CI:DOCS] uidmap man pages: fix corrupt tables 7680e5013 libpod: use new libcontainer BlockIO constructors 829b3e9b3 Bump to v4.6.0-dev 4d59a0f5c Bump to v4.6.0-rc1 e4a7923ca Bump to v4.6.1-dev c756b24f4 Bump to v4.6.0 2e53a5083 Release notes for v4.6.0 727362bde Update Release Notes for v4.5.1 8f2b73b03 rootless: use default_rootless_network_cmd config 3bd4c6a10 tests: fix "Storing signatures" check d5e8cc1d1 Fixes for vendoring Buildah 2203f2aa9 Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs a306eb5f6 Do not use deprecated hook functions from c/common bf36f1139 Bump c/storage to v1.48.0, c/image to v5.26.1, c/common to v0.55.1, buildah to v1.31.0 a64016e17 pasta: Remove some leftover code from pasta bats tests 6feb179f4 pasta: Fix pasta tests to work on hosts with multiple interfaces 9cc19b055 fix(command): ignore `--format` in `podman search --list-tags` 714c3fe72 Use /proc/self/gid_map as intended, not uid_map d29e33650 podman machine start: fix ready service 1a1602b72 Makefile: don't rely on the non-standard -r flag for ln db91ce788 cmd/podman, pkg/domain/infra: sockets should live in /var/run on FreeBSD 82a4b0816 cmd/podman/system: add API server support on FreeBSD 2f25372de pasta: Create /etc/hosts entries for pods using pasta networking 9555446d3 RPM: Fix koji and ELN issues 0749d685a Cirrus: Update operating branch dde6bcbca system tests: add and use _prefetch 0ee19f08c pkg/api: BufferedResponseWriter flush correctly d0505d6ba pkg/api: top return error to client 1398cbce8 container wait: support health states b680daa2d [CI:DOCS] Fix example on PublishPort 811867249 container wait API: use string slice instead of state slice 64153ace0 podman wait: update man page a699ed0eb StopContainer(): ignore one more conmon warning bd69b151f run,create: modify `--env-merge` behavior for non-existent vars 614c962c2 use libnetwork/slirp4netns from c/common 180cf0cf1 update c/common to latest d0af5df89 e2e: use parallel-safe /dev subdirectories aeff58e0b [CI:BUILD] Help Renovate manage the golangci-lint version 00292ae1c systests: test instrumentation 63dfe842b compat API create/pull: fix error handling d54541894 compat API push: fix error handling 26721b0a0 GetSafeIPAddress(): discourage its use 810c97bd8 libpod: write /etc/{hosts,resolv.conf} once 13db83a00 e2e: fix one of the many log flakes bb932cc84 cmd, push: expose --compression-level 459248337 vendor: bump containers/common f4c514bff compat API container create: handle platform parameter 04a1cdfa9 refactor(machine): remove hard code ae6e39076 vendor in latests containers/common 81e63227e fix(machine): throw `connect: connection refused` after set proxy ec0924c6d [CI:BUILD] Packit: cleanups 65e5d2773 Add console mode to podman machine ddcefc9b9 e2e: kube test: specify expected exit code 574e00d32 e2e --authfile test: fix test condition f8f337501 chore(deps): update dependency setuptools to v68 84e42877a make lint: re-enable revive aa453c4f1 make lint: re-enable ginkgolinter 2efa7c3fa make lint: enable rowserrcheck f07aa1bfd make lint: enable wastedassign 60a5a5947 make lint: enable mirror a35da3ad8 bump golangci-lint to v1.53.3 47e0557d5 auto update: restart instead of stop+start acb5f97f9 cmd/podman/root.go: fix help document issue of the image store e5399aaf3 vendor: bump c/storage to v1.46.2-0.20230616083707-cc0d208e5e1c 3829fbd35 podman: add support for splitting imagestore e29274853 network create --ip-range allow for custom range c2360800e fix(ssh): start machine failed to start with exit status 255 ed24f0b2c remote wait: fix "removed" condition 8d036906a [CI:DOCS] Fix service_destinations description in podman man page bfe61af6d quadlet should exit non zero on failures 91fc435cb fix(deps): update module golang.org/x/tools to v0.10.0 ef42f54ac e2e: GetSafeIPAddress() replaces GetRandomIPAddress 5ffbfd937 pasta: use code from c/common 479677cb6 Add support for setting autoupdate in quadlet 3efaffae4 New command: podmansh 67674b3a6 vendor: update c/common to latest bdc2e8165 Add quadlet container support for Mask,Umask options 13c2aca21 libpod: make conmon always log to syslog 0ecc0d9e1 Document how to get secret mounts working on RHEL8 c28a43efd Verify podman pull dup image only prints id once d464e1d4f Vendor in latests containers/common 741ad0b4f Apply suggestions from code review f31466e74 Revert "rootlessport: exclude storage drivers via build tags" 8a90765b9 filters: use new FilterID function from c/common de494eb05 logformatter: ignore 'TOP-LEVEL' headings 63f5116ad test/e2e: fix network ID test 8c48f97c9 update c/{common,image,storage} to latest 354b8e20b [CI:DOCS] clarify supported transports in manifest push aa7a4219e [CI:DOCS] podman-push: rm confusion on supported transports c0ab29313 container wait: indicate timeout in error af7555e0d network-create: document new bclim option 7d2f722ef fix(deps): update module golang.org/x/text to v0.10.0 6f821634a libpod: Podman info output more network information d0e2428fb fix(deps): update module golang.org/x/term to v0.9.0 ac0ba2c2c quadlet: adjust container unit documentation 837b47244 e2e: GetRandomIPAddress(): parallelize 676c4d4e8 Makefile: add support for 'make help' on FreeBSD ab502fc5c criu: return error when checking for min version 16092930c Update docs/source/markdown/podman-systemd.unit.5.md faa2689dc 250-systemd.bats: remove outdated comment 0714321de github: add issue type as link to podman-desktop a66bab340 Add WorkingDir support to quadlet ebf747474 rootlessport: exclude storage drivers via build tags 8bf168cc1 Add ability to set static routes 68183b07d test/upgrade: correctly share mounts between host and container 444f19cb2 Update common, image, and storage deps ec6b7dbd9 Fix system service manpage name in API Documentation d734fcbff style(specgen): omit nil check 53834ef0d fix(specgen): index out of range when unmask=[] 71cae3159 Makefile to force a shell when running command 02432fc69 cirrus,ci: default to overlay for debian env b37f74b73 Quadlet: Add support for --sysctl flag 44ec044c4 chore(deps): update dependency requests-mock to ~=1.11.0 2ebc9004f Ignore spurious warnings when killing containers 7832879bf Makefile: don't hard-code the path for bash de4b383ef fix(deps): update module github.com/burntsushi/toml to v1.3.2 a7271f9dd GHA: Fix bad job-names & links in monitoring emails 6a696cb8f podman-registry: simpler, safer invocations f1ecdca4b Ensure our mutexes handle recursive locking properly 310082444 Fix an expected error message from pod removal a750cd987 Fix a race removing multiple containers in the same pod 0e47465e4 Discard errors when a pod is already removed 398e48a24 Change Inherit to use a pointer to a container b65ba90df e2e: add ginkgo decorators to address flakes 992093ae9 filters: better handling of id= 7bdbbd0ce fix(deps): update module github.com/onsi/gomega to v1.27.8 c7a8d29f1 refactor: improve get ssh path duplicate code 137c8ef4d logformatter: better recognition of ginkgo test names 944673c88 Address review feedback and add manpage notes 3b79f241b Add support for SecurityLabelNested flag in quadlet a1c1d8d0a fix(deps): update module github.com/burntsushi/toml to v1.3.1 4fda7936c `system locks` now reports held locks 92309d917 fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.17 0948c078c Add a new hidden command, podman system locks 1013696ad Add number of free locks to `podman info` 3b39eb133 Include lock number in pod/container/volume inspect 1ce53677a fix ignition config creation 4584350f6 Makefile binaries target adopted for Mac and Win e93b1f997 fix(deps): update github.com/crc-org/vfkit digest to 3d57f09 c51c6675e logformatter: proper status color for failed tests cf9bc25bb pasta: Test handling of unknown protocols b2c000670 pasta: Correct handling of unknown protocols 6611735ae Quadlet - add support for Pull key in .container 5b629e9c4 fix(deps): update module github.com/sirupsen/logrus to v1.9.3 d68121a60 Add default ulimit test for gen kube 81d64547f feat: add insecure registry troubleshooting solution 1768bf150 fix(deps): update module golang.org/x/tools to v0.9.3 7e550f78e fix(deps): update module github.com/coreos/stream-metadata-go to v0.4.2 28934897e e2e: GetPort(): safer allocation of random ports 2c9f18182 The removeContainer function now accepts a struct 4e6efbbbb Revert "test/e2e: fix "podman run ipcns ipcmk container test"" b75ff3a8f Add a test for removing dependencies with rm -fa bafb3d6cc Revert "ginkgo-v2 cleanup workaround for #18180" ef1a22cde Fix a deadlock when removing pods 8cb5d39d4 Pods now return what containers were removed with them bc1a31ce6 Make RemoveContainer return containers and pods removed e8d745627 Add an API for removing a container and dependencies 543b80949 systests: fixes for coping with extra systemd image 34c258b41 libpod: fix timezone handling 22424eb5d fix(deps): update github.com/godbus/dbus/v5 digest to 7623695 7987d2ee0 fix(deps): update module golang.org/x/tools to v0.9.2 4173f942f test/system: quadlet use correct systemd restart policy 0372bf4bd systests: minimize race-condition window 1a34e1f85 systests: fix improper backgrounding of run_podman f09772889 set max ulimits for rootless on each start 5c7d50f08 Fix: display online_cpus in compat REST API bd62119f3 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.6 72d4cede2 systests: fix race in quadlet tests f48fa1113 fix(deps): update module github.com/burntsushi/toml to v1.3.0 88e78456d e2e: make BuildImage parallel-safe 370e1132c completion: fix panic in simplePathJoinUnix() 46456f5f1 Update module github.com/stretchr/testify to v1.8.4 585d715bb authfile.md: add default path of file for Windows/macOS. 01012a080 Update module github.com/rootless-containers/rootlesskit to v1.1.1 e3240c2fb hack: fix typo in hack/podman-registry de92db0c8 man pages and command help: clean up descriptions e6bfc81a8 RPM: bump gvisor-tap-vsock subpackage and fix packit scripts dfba6ddd4 Man pages: fix broken tables 5b2d963c4 test/e2e: add regression testing for comma-containing labels 047a4bc83 fix: volume create filters 0be9887af fix: move filter flags from StringSliceVar to StringArrayVar 6bc52c9c5 pkg/rootless: correctly handle proxy signals on reexec 85b4c896b [CI:BUILD] Packit: set propose-downstream action type to pre-sync 8f94a4775 [CI:DOCS] fix Quadlet man page rendering 29f7c494e Quadlet: kube: use ExecStopPost 6487d9c11 Quadlet: kube: add ExitCodePropagation field 08b0d93ea kube play: exit-code propagation 6dbc13833 prune exit codes only when container doesn't exist 977b3cdbf podman: Add pasta to podman info 373919ca0 Revert "test/system/255-auto-update.bats: add debug logs" 901900530 Quadlet - add support for PodmanArgs to all groups 6003dca9c [CI:BUILD] Packit: add jobs for downstream Fedora package builds fb8a12490 In a concurrent removal test, don't remove concurrently with builds 032d4a95f Consolidate error handling in Runtime.removeContainer f556e58bb Consolidate error handling in Container.cleanupStorage 4969c552e Fix reporting errors on container unmount 94c65a659 TEMPORARY(?) instrumentation for unlinkat-ebusy d623670e1 pkginstaller: bump Qemu to version 8.0.0 4108b3711 Support podman --remote when Containerfile is not in context directory 9969374b6 chore(deps): update dependency requests to ~=2.31.0 5f29c7bf9 fix: podman event --filter volume=vol-name should compare the event name with volume name 6b48e9962 fix(deps): update module github.com/docker/docker to v24 1b9272a06 wait: look for exit code in stopped state 7d831d555 network create/update: allow dns servers comma separated 685c73618 source code comments and docs: fix typos, language, Markdown layout fe41077d4 Increase download progress to 80ch 8fbcf8bce chore(deps): update dependency setuptools to ~=67.8.0 29749362a podman: Added find slirp4netns binary file from helper_binaries_dir [NO NEW TESTS NEEDED] 2253f709b fix(deps): update module github.com/sirupsen/logrus to v1.9.2 7c53a463b stats: get mem limit from the cgroup 8e2e7a440 quadlet tests: enable device.volume test bb3f611ff quadlet tests: remove unused socketactivated.container 18c3de596 fix(deps): update module github.com/stretchr/testify to v1.8.3 5d522431c Correct markdown in docs 76595c7b9 fix(deps): update module github.com/onsi/gomega to v1.27.7 a99ad3b36 [CI:DOCS] Improve security in mysql examples 99cedae31 Cirrus: Record the buildah version for reference a54d4d7e1 test/e2e: do not call setenforce 458f2e8ed Fix discombobulated kubernetes support table 192ad70e9 run: ignore PODMAN_USERNS with --pod 5ff6fc559 Add --configmap to podman-remote kube play ad8d0e57d compat: accept tag in /images/create?fromSrc bf0cea76c fix HTMLSpan warnings a576fa3f1 generate systemd: error on init containers 32c2cea0f Remove future tense from man pages 5b148a0a6 compat,build: pull must accept string d1dcb0846 Cirrus: Add support for `[CI:NEXT]` eb4f0bc17 Cirrus: Remove support for `[CI:COPR]` magic 3360214a0 system tests: add precision timestamps 8b4987266 Makefile: add ginkgo FOCUS/FOCUS_FILE options 4bed2c285 e2e: refactor and document serialization ce07860a1 machine: fix default connection URL to use 127.0.0.1 a485ba505 e2e: serialize gpg tests b9aaafbe1 Document podman-machine-default behavior 7580b8ae4 e2e: fix more test races (missing "wait") 6d58f5bb0 fix(deps): update module github.com/openshift/imagebuilder to v1.2.5 520979ba2 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.5 ae5cbf37c Fix documentation of `--network-cmd-path` CLI option 71853319f Skip rhel-release branch unnecessary CI tasks ab29ff2f6 test/e2e: dedup Before/AfterEach nodes d01ae436e remote-save: fix permissions and dir formats 5a176f09c Set machine docker.sock according to rootful flag 13f787842 Fix handling of .containenv on tmpfs 2c0f40482 Do not include image annotations when building spec dd5d22cb3 build(deps): bump github.com/docker/distribution 26f1e95ab Kube Play - Support multi-doc YAML files for configmap argument c33ba70f9 system tests: instrument, to try to catch unlinkat-ebusy 74a5b92b3 test: check restart policy of init containers 3aa6a792e Update sigstore/rekor after https://github.com/sigstore/rekor/pull/1469 04707f62d issue template: mention `su` 14001ad48 e2e: logs test: fix flakes 6b329d8c9 fix(deps): update module github.com/containernetworking/plugins to v1.3.0 ff37615bf e2e: stop podman.service test: wait for server cb8e19677 logformatter: handle podman-machine test logs 58fd87959 fix(deps): update module golang.org/x/tools to v0.9.1 2d8929d95 [CI:DOCS] Disable Dependabot in favor of Renovate 01e20818c Ensure the consistent setting of the HOME env variable on container start 8aaa13acc Quadlet system tests - fix socket notification 1fb3cdf8a sqlite: disable WAL mode d24bec0d0 system tests: timeoutize quadlet, systemd 3d6894426 test: update README for integration tests c400cc7ea libpod/Container.rootFsSize(): use recorded image sizes b97be3406 quadlet: support `HostName` 9dc107e74 e2e: fix race in a play-kube test bdb3ed795 Fix preference of user quadlets directories 40b21fa7d fix(deps): update module golang.org/x/tools to v0.9.0 661a238a9 fix(deps): update module golang.org/x/net to v0.10.0 332b47fef Check on client side for Containerfile, if none specified 18cd174c9 build(deps): bump github.com/docker/docker 9ec630f30 Buildah treadmill: several fixes 11d92ea37 fix(deps): update github.com/containers/common digest to 3e93a76 1bf057e8c chore(deps): update dependency docker to ~=6.1.0 27891a664 Update docs/source/markdown/podman-systemd.unit.5.md 505e02e04 fix(deps): update github.com/containers/common digest to bc15b04 53220717e fix: initContainer restart policy overridden by pod c27cda7c9 fix(deps): update module golang.org/x/sync to v0.2.0 773b45704 chore(deps): update dependency requests to ~=2.30.0 0c070ebfb ginkgo json output: only in CI, not on laptop runs 73d3487cc Allow user quadlets to be stored under /etc 334adac74 fix(deps): update github.com/containers/common digest to ea87b34 95557a532 libpod: do not Cleanup() more than once df9344ac4 compat container create: match duplicate mounts correctly 42c822720 Update podman-completion.1.md 3d56e4f3a fix(deps): update github.com/containers/buildah digest to e925b58 75d92f41d Run generate.CompleteSpec() for initContainers as well d25356c30 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.4 df8cc7af3 remote: return better connect error 61985a610 Add missing man page links for Docker man pages f877d7dcd Replace egrep/fgrep with grep -E/-F 19aabf440 remote: exec inspect update exec session status 305bad184 fix(deps): update github.com/digitalocean/go-qemu digest to f035778 999c620d5 fix(deps): update github.com/godbus/dbus/v5 digest to 6cc540d 38f993543 fix(deps): update github.com/containers/buildah digest to f353690 1b2b0d031 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.3 dc7515dc3 MVP for Podman Machine with AppleHV 54fd0d752 e2e tests: try writing & preserving ginkgo json artifacts 1c5ab9e7b vendor: bump buildah to v1.30.1-0.20230501124043-3908816d5310 e1e03a0e3 bindings, build: don't pass invalid platform in case of none ae5305134 Revert "logformatter: anchors: link to test summary, not name" fbe62f329 More cleanup: volumes: do not export to stdout 3050a6437 e2e test cleanup fa1ba17bc Update kube gen & play to use pod restart policy db4ad54f9 Add {{.Restarts}} to podman pod ps 0fef113a4 Add {{.Restarts}} to podman ps edbeee523 Add --restart flag to pod create 9e9bcec9e history: correctly set tags 073cd4bb4 fix(deps): update module github.com/moby/term to v0.5.0 3858a833b Makefile: do not run machine test in parallel 5af433923 pkg/machine/e2e: switch to GinkgoWriter 1720042d0 api: fix parsing filters c4b9f4b34 ginkgo-v2 cleanup workaround for #18180 5eb99a0ac test/e2e: fix custom timing reporting 1bff0108f logformatter: anchors: link to test summary, not name 914ff01f9 WIP: logformatter: handle ginkgo v2 logs b3424f370 test/e2e: unshare --rootless-netns cleanup slirp4netns 054154c77 test/e2e: run system reset test serial c5922cc6f test/e2e: fix CleanupVolume/Secrets() bc1ed07b5 ginkgo v2: fix new Skip() behavior cd46e7279 test/e2e: fix pause tests to unpause before cleanup() 2ce4e935b ginkgo v2: drop localbenchmarks fb7a96638 test/e2e: switch to GinkgoWriter cc19091e9 test/e2e: unset CONTAINERS_CONF before Cleanup() 8cc7a3618 ginkgo: run on all cores 9c1f713c7 test/e2e: fix Cleanup() 9bd833bcf test/e2e: fix "podman run ipcns ipcmk container test" 629a6a6e4 test/e2e: actually check for cleanup errors b9ba85044 Lower e2e timeout to not waste time when it hangs fbb7c980a test/e2e: containers.conf tests add missing Wait() c564d9d7a ginkgo v2: remove CurrentGinkgoTestDescription() 666e31447 ginkgo v2: remove deprecated flags 445815036 update to ginkgo v2 502654580 test/e2e: do not remove CNI directory 7b25f362e e2e: login_logout: use unique authfile for each test d06480d99 Fix clashing subuid 24be46a51 [CI:DOCS] troubleshooting: fix subuid example bab4217cd manifest, push: use source as destination if not specified 202701e65 Update github.com/moby/term digest to 0564e01 e8f34e457 Add name-generation test b5ef9555a Implement machine provider selection 70870895b libpod: improve errors management in cleanupStorage 5592dc12f libpod: report unmount idmapped rootfs errors 2932208c2 test: do not wait 10 seconds before killing myyaml 891bc117e podman: simplify code with a switch bac57409f test: fix typo 5fefb54d2 build(deps): bump github.com/docker/docker 0a92b399d swagger: fix Info name conflict 20c42489e Nightly dependency treadmill: remove 33fa54580 Update short description for disconnect cmd aca993632 windows: podman save allow the use of stdout 512b39475 Update c/common and avoid setting umask 7ff2eaf96 Cirrus: Update CI VM Image to F38/37 0e1ddd3df Cirrus: Run code validation on rawhide 221e3023f Fix rand.Seed() deprecation in golang 1.20 edaf3b4d5 Add sha256: to images history id for docker compatibility d51911f7b Support systemd optional prefix '-' for devices. a0c7bb26a Fix a copy/paste error in an error message ba4586375 chore(deps): update dependency requests to ~=2.29.0 d905e412e Fix simple typo in podman-network-create.md a027bf102 e2e cleanup: push with auth: add error checks eeb210bc5 e2e: remove "-it" from podman run & exec 64959b744 pkg/machine: rework RemoveConnection() 2296e71e3 machine: qemu only remove connection after confirmation c8e423b55 Add file swith for pre-exec 6aaf6a284 system reset: show graphRoot/runRoot before removal e95e9be76 fix manifest annotate help bdf367958 Netavark userns test: give aardvark time to come up bbe9d61c4 sqlite: move first read into a transaction f3c3ef72d Recover from failed podman machine start d222a392c rootless: support joining contianers that use host ns 0e955bec7 auto-update: return errors when checking for updates fc8bd4521 [skip-ci] Update dawidd6/action-send-mail action to v3.7.2 ed6b19fef fix(deps): update github.com/containers/common digest to 46c4463 230ddbe0c Add user mode networking feature to Windows 3216110de system/reset.go: help: fix typo ae5ed6d85 e2e create same-IP: try to fix flake faeed14f6 system tests: safer container-stop signaling 6014f26c4 Revert "Resolve symlink path for qemu directory if possible" c5a928c5b ps: --format {{.State}} match docker output b4eecd908 test/system/260-sdnotify.bats: fix test flake 1361c6a33 [CI:DOCS] Quadlet: clarify overriding user/system services fb3b92b96 Eliminate transient container deps from wslkerninst dd217d8e0 Wording d16c880fb fix(deps): update github.com/containers/common digest to 5547996 70bd096e4 cmd/podman/pods: omit superfluous runtime.NumCPU call 1f1525f2e support `--digestfile` for remote push d640461ce e2e: skip journald test if journald is unavailable 5156ab996 Cirrus: Enable testing on Fedora rawhide 8a3265f65 [CI:BUILD] Cirrus: remove copr rpm build task 77f86f48e chore(deps): update dependency setuptools to ~=67.7.0 03a7c6a91 Cirrus: Drop benchmarks artifacts 15664b4b0 test/e2e: correctly reap service process c9d861023 test/e2e: add missing options to remote service 1f45c715d test/e2e: fix incorrect usage of CreateTempDirInTempDir() 601d228ca test/e2e: "podman-remote send correct path to copier" do not leak file 08c651016 test/e2e: fix network create flake due same subnet 525c27fe1 test/e2e: fix SkipIfNotActive() 01d518a97 test/e2e: do not try to use docker as rootless 6e97976ad test/e2e: do not leak "hello" file 750442d09 podman-remote logs: handle server error correctly 3aaa2793d test/e2e: use custom network config v2 00fdfa063 rename ImagePushReport to ImagePushStream 81621ce8a Specify format to buildah before commit 7382494ca Add eBPF snooper that traces the entire fork/exec graph of podman edb64f8a7 libpod: stop containers with --restart=always 0364aef1e test: fix race when listing cgroups b65ab52d8 compat: Translate `noprune` into ImageRemoveOptions.NoPrune 346483717 [CI:DOCS] Update RELEASE_PROCESS.md 8019dc9e6 hyperv: add podman socket mapping a089f1b5c e2e networking test: better way to get host IP bce38c1af Updated system test to be easier to read 5f5bea0d1 bindings tests: bail out early on image errors f2cec7348 libpod: fix TestPostDeleteHooks do not depend on version 8125bab9b chore(deps): update dependency setuptools to v67 a00ed20e0 fix(deps): update module github.com/containers/libhvee to v0.0.5 da83364eb e2e: quadlet uses PODMAN env for podman binary path 6e0cf9344 Fixes format inconsistencies with docker for certain history fields acb24f164 Makefile: do not prefix /etc 7e4cd22ac libpod: configureNetNS() tear down on errors 4f93a6eee libpod: rootlessNetNs.Cleanup() fix error message 4b8230119 HyperV: wait on stop 3cdaf85d6 build(deps): bump github.com/docker/docker 459f751ae Makefile: include `release-artifacts` target 3222545ad Enabled network over vsock aec7ce4a1 fix(deps): update module github.com/microsoft/go-winio to v0.6.1 64b26df60 fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.2 41d516412 fix remote start --filter 1cac53506 Update API reference to include v4.5 a0204f1dd Add missing security options to /info response de5fa9ce9 Add mention of redir to doc `rootless.md` 08f137aec fix(deps): update module github.com/vbauerster/mpb/v8 to v8.4.0 8e7f98ae6 docs(readme): add status badges and remove hardcoded release info e9356ba20 Don't use bytes.NewBuffer to read data f488d9890 Add support for HVSOCK on hyperv e7a323635 docs: update network tutorial with netavark DHCP support 32344952a bump main to v4.6.0-dev 54ba17f69 Remove disused test/install 1fa4e45a9 Return title fields as a list be148665c [CI:BUILD] Packit: Initial Enablement 4aced7e3e Quadlet - do not set log-driver by default 51b582d0e system tests: address COPY-hardlink flake 25d4ecf47 chore(deps): update registry.centos.org/centos/centos docker tag to v8 31420112c system tests: fix race in kube-play read-only f544971b7 chore(deps): update dependency docker to v6 f95276bfa CI: enable sqlite system tests d28656403 test: enable test_wait_next_exit f312c8533 Update dependency PyYAML to v6 f67d640b8 test/e2e/systemd_activate_test.go: simplify test 5315c0cc7 Update docker.io/library/golang Docker tag to v1.20 b4cfc727b api: auth: fix nil deref 176c329f9 Update dependency requests-mock to ~=1.10.0 b75ee05d3 Update dependency requests to ~=2.28.2 d38b22d50 fix: Document removing anonymous volumes at create fe22299f9 Use a sane polling interval in WaitContainerDocker bb2deef8e podman: added the --out option for capturing formatted output emitted by various commands 785c63c0f Renovate: Ensure release-note-none label is added 4bc4609d8 Renovate: Update ignore paths 64ea5971a *: migrate image registry to registry.k8s.io 4f5f89cf8 Do not display the resource limits warning message Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
b37f53350d |
buildah: update to 1.31
Bumping buildah to version v1.31.0, which comprises the following commits: d0de60bbf Bump 1.31.0 723ed8e18 Bump c/common to 0.55.1 and c/image to 5.26.1 b835631bf Update vendor of containers/common c4d2a8520 Run unit tests for copier and chroot without -cover 135b5a8f0 Fix transition test to work with latest selinux policy d8b06097d Bump c/image to 5.26.0 and c/common to 0.54.0 7a5a18334 chore: replace `github.com/ghodss/yaml` with `sigs.k8s.io/yaml` a8f350fc5 rootless: use default_rootless_network_cmd config b3edcaa06 vendor: update c/{common,image,storage} to latest d22a5293b chore: pkg imported more than once 74b885b9e buildah: add pasta(1) support 11ba328e2 use slirp4netns package from c/common a5c0c8acf update c/common to latest 14cd28c26 add hostname to /etc/hosts when running with host network eb135b8d5 vendor: update c/common to latest 237ac533e [CI:BUILD] Packit: add jobs for downstream Fedora package builds eeaf80f95 fix(deps): update module golang.org/x/sync to v0.3.0 b064ad7f6 fix(deps): update module golang.org/x/crypto to v0.10.0 bdd27d393 Add smoke tests for encryption CLI helpers b090ae238 fix(deps): update module golang.org/x/term to v0.9.0 fefbd04e5 fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.3 bd32a04c3 Remove device mapper support 92582a75c Remove use of deprecated tar.TypeRegA 261a524b9 Update tooling to support newer golangci-lint 6714a79eb Make cli.EncryptConfig,DecryptConfig, GetFormat public b3e39dfd9 Don't decrypt images by default 14b74e7f8 fix(deps): update module github.com/onsi/gomega to v1.27.8 1d08bd9de fix(deps): update github.com/containers/storage digest to 3f3fb2f 0dac0dfa5 Renovate: Don't touch fragile test stuffs d9ecd7c59 [CI:DOCS] Update comment to remove ambiguity 232230cae fix(deps): update github.com/containers/image/v5 digest to abe5133 4247a3e47 fix(deps): update module github.com/sirupsen/logrus to v1.9.3 925ff0e62 fix(deps): update module github.com/containerd/containerd to v1.7.2 5a83012c9 Explicitly ref. quay images for CI 9b65b12ae At startup, log the effective capabilities for debugging 3a351f603 parse: use GetTempDir from internal utils 6adbfeeb4 GetTmpDir: honor image_copy_tmp_dir from containers.conf 5eb356bb8 docs/Makefile: don't show sed invocations a630e3513 CI: Support testing w/ podman-next COPR packages 90f7436ac intermediate-images inherit-label test: make it debuggable 08b9a5407 fix(deps): update github.com/containers/common digest to 462ccdd 7e327cf18 Add a warning to `--secret` docs 9cd28db91 vendor: bump c/storage to v1.46.2-0.20230526114421-55ee2d19292f 0766b004b executor: apply label to only final stage beae5647c remove registry.centos.org 68337bf9c Go back to setting SysProcAttr.Pdeathsig for child processes 371bc34fe Fix auth.json path (validated on Fedora 38) wq Signed-off-by: Andreas Mack <andreas.mack@gmail.com> c6e73322b fix(deps): update module github.com/stretchr/testify to v1.8.3 0b69f7029 CI: fix test broken by renovatebot a5ad7b047 chore(deps): update quay.io/libpod/testimage docker tag to v20221018 86470bfd9 fix(deps): update module github.com/onsi/gomega to v1.27.7 91ce0571d test: use debian instead of docker.io/library/debian:testing-slim 7d9447b2f vendor: bump logrus to 1.9.2 e2b751a0b [skip-ci] Update tim-actions/get-pr-commits action to v1.3.0 d58d3a14b Revert "Proof of concept: nightly dependency treadmill" 911c3b5e8 fix(deps): update module github.com/sirupsen/logrus to v1.9.1 797f03430 vendor in containers/(common,storage,image) ba8a1bd0e fix(deps): update module github.com/docker/distribution to v2.8.2+incompatible 0eb266a95 run: drop Pdeathsig e8d11201a chroot: lock thread before setPdeathsig 51c03212e tests: add a case for required=false 00581b806 fix(deps): update module github.com/openshift/imagebuilder to v1.2.5 be682de68 build: validate volumes on backend dcc7feb6f secret: accept required flag w/o value ba06158ab fix(deps): update module github.com/containerd/containerd to v1.7.1 cad25dd6b fix(deps): update module golang.org/x/crypto to v0.9.0 dffb148b3 Update the demos README file to fix minor typos efa0d69a2 fix(deps): update module golang.org/x/sync to v0.2.0 e0fe30e61 fix(deps): update module golang.org/x/term to v0.8.0 d5b32b0f0 manifest, push: use source as destination if not specified 2fed5fc91 run,mount: remove path only if they didnt pre-exist 4b1c5e3a9 Cirrus: Fix meta task failing to find commit a913dc56a parse: filter edge-case for podman-remote 9252470c4 fix(deps): update module github.com/opencontainers/runc to v1.1.7 0019256f2 fix(deps): update module github.com/docker/docker to v23.0.5+incompatible b37c4ee43 build: --platform must accept only arch 5e43f8c9d fix(deps): update module github.com/containers/common to v0.53.0 562172751 makefile: increase conformance timeout 4775b247b Cap suffixDigitsModulo to a 9-digits suffix. 07fda81df Rename conflict to suffixDigitsModulo 4bb28899e fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.2 411bdc968 fix(deps): update module github.com/opencontainers/runc to v1.1.6 d27c59f85 chore(deps): update centos docker tag to v8 43440ec6e Clarify the need for qemu-user-static package c34fbea7c chore(deps): update quay.io/centos/centos docker tag to v8 449fd3d2e Renovate: Ensure test/tools/go.mod is managed 6d877d89d Revert "buildah image should not enable fuse-overlayfs for rootful mode" e9884fc41 Bump to v1.31.0-dev 04965f119 Bump to v1.30.0 b5867198c fix(deps): update module github.com/containers/common to v0.52.0 41b760f97 fix(deps): update module golang.org/x/crypto to v0.8.0 9bd6ccf92 chore(deps): update dependency containers/automation_images to v20230405 d57638879 vendor c/common ff62cdebdd0e f847463ed vendor in latest containers/(storage, image) 45940016c fix(deps): update module github.com/opencontainers/runc to v1.1.5 0ff4746c4 fix(deps): update module github.com/fsouza/go-dockerclient to v1.9.7 2e25b156f buildah image should not enable fuse-overlayfs for rootful mode dcd7b789a stage_executor: inline network add default string c8c37c78f parse: add support for relabel bind mount option c95370cd3 build: pass process environment variables by reference 2ad68d816 run: pass process environment variables by reference d45916350 fix(deps): update module github.com/containers/common to v0.51.2 a92fe130e chore(deps): update dependency containers/automation_images to v20230330 e67bddded fix(deps): update module github.com/docker/docker to v23.0.2+incompatible 20861cd21 chore(deps): update dependency containers/automation_images to v20230320 73dc43c1d fix(deps): update module github.com/onsi/gomega to v1.27.6 e3a30b54a fix(deps): update github.com/opencontainers/runtime-tools digest to e931285 374133c95 [skip-ci] Update actions/stale action to v8 ce8c56780 test: don't allow to override io.buildah.version dfc9bb20e executor: only apply label on the final stage 946395494 Update docs/buildah-build.1.md 58a22053b update build instruction for Ubuntu aad1e994a code review 3afa5ca74 build: accept arguments from file with --build-arg-file 8e84bb709 run_linux: Update heuristic for mounting /sys 78416393f [CI:BUILD] Packit: Enable Copr builds on PR and commit to main e8dee4083 fix(deps): update module github.com/fsouza/go-dockerclient to v1.9.6 c0f0efada Update to Go 1.18 db0bafef3 Disable dependabot in favor of renovate 4055cc880 chore(deps): update dependency containers/automation_images to v20230314 2088f6bd7 Fix requiring tests on Makefile changes b85a38946 Vendor in latest containers/(storage, common, image) b6f32e576 imagebuildah: set len(short_image_id) to 12 499f1301f Re-enable conformance tests fa145b092 Skip conformance test failures with Docker 23.0.1 bc2423ebc Cirrus: Replace Ubuntu -> Debian SID 37afb5dbc run: add support for inline --network in RUN stmt e2210c3b7 vendor: bump imagebuilder to a3c3f8358ca31b1e4daa6 db509859d stage_executor: attempt to push cache only when cacheKey is valid a35dbb284 Add "ifnewer" as option in help message for pull command c1b82d195 build: document behaviour of buildah's distributed cache f444d6589 fix(deps): update module golang.org/x/term to v0.6.0 376eb73ab Add default list of capabilities required to run buildah in a container 46ffaf935 executor,copy: honor default ARG value while eval stage fd5db96c0 sshagent: use ExtendedAgent instead of Agent 9e6e15c31 tests/bud: remove unwated test 8a8f99e09 executor: do not warn on builtin default args b9e4e29e9 executor: don't warn about unused TARGETARCH,TARGETOS,TARGETPLATFORM 0ed9b4c8c Fix tutorial for rootless mode cf408f758 Vendor in latest containers/(common, storage, image) 0e707faa7 Ignore the base image's base image annotations 30f84c8ee fix(deps): update module github.com/fsouza/go-dockerclient to v1.9.5 05785ee57 build(deps): bump github.com/containers/storage from 1.45.3 to 1.45.4 21e6e91e4 Vendor in latest containers/common 0b7a7f80b docs/tutorials/04: add defaults for Run() 7baf73b2a imagebuildah.StageExecutor: suppress bogus "Pushing cache []:..." be10b8d20 executor: also add stage with no children to cleanupStages f9e51e744 [CI:BUILD] copr: fix el8 builds 8125e45a5 Fix documentation on which Capabilities are allowed by default a8ed3bb58 Skip subject-length validation for renovate PRs 956c5155d Temporarily hard-skip bud-multiple-platform-values test 3afa7e360 fix(deps): update github.com/openshift/imagebuilder digest to 86828bf 4875f1bc9 build(deps): bump github.com/containerd/containerd from 1.6.16 to 1.6.17 36cade0c3 build(deps): bump tim-actions/get-pr-commits from 1.1.0 to 1.2.0 e0e43a419 build(deps): bump github.com/containers/image/v5 from 5.24.0 to 5.24.1 24b85d217 [skip-ci] Update tim-actions/get-pr-commits digest to 55b867b f96e1ad4d build(deps): bump github.com/opencontainers/selinux 2ef59fc2c build(deps): bump golang.org/x/crypto from 0.5.0 to 0.6.0 482bf4df4 Add renovate configuration 4dfb82890 Run codespell on codebase ae697555c login: support interspersed args for password 123ef1693 conformance: use scratch for minimal test 6a0367ff2 pkg/parse: expose public CleanCacheMount API 5d50a7320 build(deps): bump go.etcd.io/bbolt from 1.3.6 to 1.3.7 6d53ec7a3 build(deps): bump github.com/containerd/containerd from 1.6.15 to 1.6.16 dbf1d43b3 docs: specify order preference for FROM 2008a5302 Bump to v1.30.0-dev Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
900c85076e |
xen: Fix build with gas/2.41
Signed-off-by: Khem Raj <raj.khem@gmail.com> Cc: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
489fa21681 |
skopeo: convert CVE_CHECK_IGNORE to new CVE_STATUS format
See https://git.openembedded.org/openembedded-core/commit/?id=34f682a24b7075b12ec308154b937ad118d69fe5 Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
07a578d49c |
podman: ignore CVE-2022-2989 and CVE-2023-0778
NVD shows only redhat links and does not mention fixed-in release se these CVEs will show-up in reports indefinitely. They are already fixed in current version, so ignore them. CVE-2022-2989 * https://github.com/advisories/GHSA-4wjj-jwc9-2x96 * https://github.com/containers/podman/pull/15618 * commit d82a41687e614d9ac8b2d169dee47fe226835e4c Add container GID to additional groups CVE-2023-0778 * https://github.com/advisories/GHSA-qwqv-rqgf-8qh8 * https://github.com/containers/podman/pull/17528 * commit 6ca857feb07a5fdc96fd947afef03916291673d8 volume,container: chroot to source before exporting content Signed-off-by: Peter Marko <peter.marko@siemens.com> |
||
![]() |
7332b59472 |
recipes-bsp: Add u-boot-xlnx scripts for Xen support
Add new boot.cmd.xen to u-boot-xlnx-scr bbappend to enable Xen support for ZynqMP and Versal devices. User can enable xen u-boot script by adding below variable from configuration file. BOOTMODE = "xen" This u-boot script also supports to configure below Xen params from configuration file params variable assignment ------ ------------------- duart XEN_SERIAL_CONSOLES = "serial0" dom0_mem DOM0_MEM = "1500M" dom0_max_vcpus DOM0_MAX_VCPUS = "1" extra params XEN_CMDLINE_APPEND = "loglvl=all" Signed-off-by: Sandeep Gundlupet Raju <sandeep.gundlupet-raju@amd.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
c9b65ee0e5 |
recipes-bsp: Add device-tree files for Xen support
Add device-tree files for Xen support, Earlier all these files were in meta-petalinux layer, Hence move these files to this layer so that users can build Xen without including meta-petalinux. Signed-off-by: Sandeep Gundlupet Raju <sandeep.gundlupet-raju@amd.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
5bb2ad0d25 |
runc-opencontainers: use bfd linker even when gold is selected by ls-is-gold
* fixes: ld: --no-dynamic-linker: unknown option * you might need to clean the build for updated LDFLAGS to be corectly re-configured * lld and bfd are fine: $ ld.gold --help | grep dynamic-linker -I PROGRAM, --dynamic-linker PROGRAM $ ld.bfd --help | grep dynamic-linker -I PROGRAM, --dynamic-linker PROGRAM --no-dynamic-linker Produce an executable with no program interpreter header $ ld.lld --help | grep dynamic-linker --dynamic-linker=<value> --no-dynamic-linker Inhibit output of .interp section * not sure where this came from only place where I see --no-dynamic-linker in runc-opencontainers WORKDIR is: aarch64-oe-linux/13.1.1/plugin/include/config/aarch64/aarch64-linux.h: %{static-pie:-Bstatic -pie --no-dynamic-linker -z text} \ aarch64-oe-linux/13.1.1/plugin/include/aarch64-linux.h: %{static-pie:-Bstatic -pie --no-dynamic-linker -z text} \ so my guess is: 923ae4da Makefile: add support for static PIE Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
c507955709 |
ovs: fix some installed packages in openvswitch cannot be executed
The variable "PYTHON3" in Makefile.am set as python3, this cause the following scripts error: /usr/sbin/ovs-bugtool Not found the interpreter python3 /usr/bin/ovs-pcap Not found the interpreter python3 /usr/bin/ovs-test Not found the interpreter python3 /usr/bin/ovs-tcpdump Not found the interpreter python3 /usr/bin/ovs-tcpundump Not found the interpreter python3 /usr/bin/ovs-vlan-test Not found the interpreter python3 /usr/bin/ovs-l3ping Not found the interpreter python3 /usr/bin/ovs-parse-backtrace Not found the interpreter python3 /usr/bin/ovs-dpctl-top Not found the interpreter python3 /usr/share/openvswitch/scripts/ovs-check-dead-ifs Not found the interpreter python3 /usr/share/openvswitch/scripts/ovs-check-dead-ifs Not found the interpreter python3 /usr/share/openvswitch/scripts/ovs-monitor-ipsec Not found the interpreter python3 /usr/share/openvswitch/scripts/ovs-vtep Not found the interpreter python3 Signed-off-by: Xiangyu Chen <xiangyu.chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
fcf7968f1d |
kubernetes: set CVE_VERSION explicitly
The CVE_VERSION defaults to PV, but in NVD database, there's no prefixing 'v' in database. So set CVE_VERSION explicitly for better CVE scanning. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
5dda7078ba |
runc-opencontainers: update to 1.1.7-tip
Bumping runc to version v1.1.7-37-gca73c9fd, which comprises the following commits: 0d93d7d1 release: add riscv64 binary 9164fe17 libct/seccomp: add riscv64 ed47e31a Makefile: set CGO_ENABLED=1 when needed 923ae4da Makefile: add support for static PIE 2abca872 Makefile: fix GO_BUILDMODE setting 120ec5bd Makefile: add LDFLAGS_COMMON and LDFLAGS_STATIC b9940113 Dockerfile: don't use crossbuild-essential-* 028fc57a Dockerfile: rm dpkg --add-architecture lines 4449ce84 Dockerfile: nit d375351b ci/cirrus: enable rootless tests on cs9 e1a8b52f tests/int/cgroups: filter out rdma 02e065ef docs/systemd: fix a broken link 9af462e4 Fix tmpfs mode opts when dir already exists 7d1bdc7d .codespellrc: update for 2.2.5 8397943e man/runc: fixes f9da684d tests/int: increase num retries for oom tests 7fa912ed ci/cirrus: limit numcpu e9c1ca08 Fix Vagrant caching e2265a92 ci: bump bats 1.8.2 -> 1.9.0 bbddb6bd Vagrantfile.fedora: bump to 38 27b86b4c ci/cirrus: use vagrant from hashicorp repo 98a1b76c tests/int: fix some checks 1eadcede ci: bump bats 1.3.0 -> 1.8.2 63af8b00 init: do not print environment variable value 404ea7ab libct: fix a race with systemd removal f0ecf30b VERSION: back to development 860f061b VERSION: release 1.1.7 We refresh one patch for context changes. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
248be027d6 |
runc-docker: update to 1.1.7-tip
Bumping runc to version v1.1.7-37-gca73c9fd, which comprises the following commits: 0d93d7d1 release: add riscv64 binary 9164fe17 libct/seccomp: add riscv64 ed47e31a Makefile: set CGO_ENABLED=1 when needed 923ae4da Makefile: add support for static PIE 2abca872 Makefile: fix GO_BUILDMODE setting 120ec5bd Makefile: add LDFLAGS_COMMON and LDFLAGS_STATIC b9940113 Dockerfile: don't use crossbuild-essential-* 028fc57a Dockerfile: rm dpkg --add-architecture lines 4449ce84 Dockerfile: nit d375351b ci/cirrus: enable rootless tests on cs9 e1a8b52f tests/int/cgroups: filter out rdma 02e065ef docs/systemd: fix a broken link 9af462e4 Fix tmpfs mode opts when dir already exists 7d1bdc7d .codespellrc: update for 2.2.5 8397943e man/runc: fixes f9da684d tests/int: increase num retries for oom tests 7fa912ed ci/cirrus: limit numcpu e9c1ca08 Fix Vagrant caching e2265a92 ci: bump bats 1.8.2 -> 1.9.0 bbddb6bd Vagrantfile.fedora: bump to 38 27b86b4c ci/cirrus: use vagrant from hashicorp repo 98a1b76c tests/int: fix some checks 1eadcede ci: bump bats 1.3.0 -> 1.8.2 63af8b00 init: do not print environment variable value 404ea7ab libct: fix a race with systemd removal f0ecf30b VERSION: back to development 860f061b VERSION: release 1.1.7 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
5d41297f4b |
cri-o: update to 1.27-tip
Bumping cri-o to version v1.27.0-48-g3abbef701, which comprises the following commits: a61082768 vendor: drop podman replace and actually update runc 9c86a1269 vendor: bump runc to 1.1.6 1d6f5a00c [1.27] Add support for namespaced signature policies 35afa9859 runtime handler hooks: run default hook when container stops gracefully 3907696a4 main: Added a call to GarbageCollect ee6868938 Add a test for log linking 5319875b4 linklogs: add support for symlinking container directory 13f8ae560 Add support for linking pods logs 605e4d935 server: ensure pod labels are present 15d6d5977 OCPBUGS-14750: Pod termination must succeed when a hook fails ccd7e23af server: do not take lock to populate pid in container status and inspect 57662c6f8 go.{mod,sum}, vendor: update NRI. ef90744ae test: adapt for sched_load_balance disable after stop 169220817 runtime handler hooks: add DefaultCPULoadBalanceHooks a74999eb6 server: call hooks and NRI in stopContainer ea3297939 server: call hooks on infra container creation 37518c031 high perf hooks: workaround libcontainer quirk when disabling cpu quota eca28447d cgmgr: export CrioPrefix and use containerCgroupPath more 49cfa2060 *: update sandbox/pause image to 3.9 bf9eec8cb Add debug to identify when a relabel was not requested 2ee3398cb high perf hooks: disable CPU quota with libcontainer as a pre start hook 11141ac32 test: add test for cpu-quota.crio.io 69a6d6fc2 Fix events generated by Evented PLEG Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
f634a540c4 |
podman: update to 4.5.1
Bumping libpod to version v4.5.1-6-gdae7df5a1, which comprises the following commits: 3d7aba056 completion: fix panic in simplePathJoinUnix() 9de891616 RPM: bump gvisor-tap-vsock subpackage and fix packit scripts 5933be9ba Bump to v4.5.2-dev 9eef30051 Release v4.5.1 777ddfc42 [CI:DOCS] Final release notes for v4.5.1 2b045de48 [CI:BUILD] Packit: set propose-downstream action type to pre-sync b1281ae46 Revert "Resolve symlink path for qemu directory if possible" 8b35bbab9 no need for podman-next rpm test on maint branch 6652633ce [CI:BUILD] Packit: add jobs for downstream Fedora package builds 97ec57da5 libpod: configureNetNS() tear down on errors d812087d1 libpod: rootlessNetNs.Cleanup() fix error message 083894a22 network create/update: allow dns servers comma separated 1575b3a7f machine: fix default connection URL to use 127.0.0.1 1e86d0a75 compat: accept tag in /images/create?fromSrc 7d0e4a644 compat container create: match duplicate mounts correctly dc21698d6 machine: qemu only remove connection after confirmation 02b9f4f5d windows: podman save allow the use of stdout 66fb7c9bb remote: exec inspect update exec session status 5b21c38c8 podman-remote logs: handle server error correctly 9558af2c4 libpod: stop containers with --restart=always 0f18a0144 Do not include image annotations when building spec bc2f0115d [v4.5] system tests: fix race in kube-play read-only Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
ee055b339d |
containerd: update to 1.7.2
Bumping containerd to version v1.7.2-13-ga766dc550, which comprises the following commits: dafbeb5b1 No more nondistributable layers in MS registry e5b2a0131 task: don't `close()` io before `cancel()` a6a15afe3 move to CRI-TOOLS v1.27.0 58b6b99cd Add a check to skip stats for containers that are not running 0b2b96479 RELEASES.md: de-deprecation of CNI conf_template will be v1.7.3 a24267b28 Remove cni conf_template deprecation 89415fe36 Fix issue for HPC pod metrics e134b6393 Fix panic when remote differ returns empty result 0e41daaea [release/1.7] Prepare release notes for v1.7.2 99582fb1a fix: cio.Cancel() should close the pipes eeda70fb0 remotes/docker: ResolverOptions: fix deprecation comments 313c226b8 Update continuity to a tagged version e21c8beee Post cherry-pick fixes 246240f71 Move PLEG event back to CRI 16f3726dd Generate sandbox exit events from CRI 0c8cfb1a7 Move pod sandbox recovery to podsandbox/ package 91d9f5c64 Publish sandbox events 4b77683b4 Add sandbox events protos 8dd16285a UnmountAll is a no-op for missing mount points acff3eefa Improve error messages and remove check b4dd3bf4e Make ReadOnly() available on all platforms 08d8baf3f Increase integration test tmieout to 20m 1f0dbd011 Remove bind code path in mount() 8f37b1c63 Remove "bind" code path from diff 9139208b3 Properly mount base layers e61e7b312 Skip parent layer options on bind mounts e4307926f Add ReadOnly() function 0277b9b01 Remove escalated privileges d5c18dfb7 Use DefaultSnapshotter 853179366 use t.Fatal if we cannot enable process privileges 5b3ee413f Update continuity 375172604 Fix go.mod, simplify boolean logic, add logging 600abd137 Ignore ERROR_NOT_FOUND error when removing mount df7295dcd Update continuity, go-winio and hcsshim 0db78c482 Remove unused function 219058766 Grant needed privileges for snapshotter tests 96fbe5bc8 Fix layer comparison and enable read-only checks 279e0d3c9 Use bind filer for mounts 93e94da40 Enable TestSnapshotterClient on Windows 3a3da693a Run Windows snapshotter through the test suite e7b62322f Fix misspelling of 'Native' as 'Naive' e1f999a18 Add paired 'mount' log for 'unmount' 5788d6e52 Don't use all-upper-case filenames in snapshot tests 3cdcb2f10 Skip tests that do not apply to WCOW on Windows b0968b8bb Ensure mounts are unmounted before leaving the test b57424851 Unify testutil.Unmount on Windows and Unix b9a8aad45 Implement Windows mounting for bind and windows-layer mounts 1a64ee183 Implement WCOW parentless active snapshots and view snapshots 7851b0a9f CRI: Make stats respect sandbox's platform 8d7c340ca [sbserver] handle missing cpu stats d08b2a088 [sbserver] Refactor usageNanoCores be to used for all OSes 2c38cad77 notify readiness when registered plugins are ready 08de6e7b8 Update volume-ownership image with latest hashes 6a5e54c15 Get CDI devices from CRI Config.CDIDevices field Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
680f56d9e4 |
cri-o: drop unneeded dependency on virtual-containerd
Signed-off-by: Renato Caldas <renato@calgera.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
7e6f503083 |
crun: fix compilation with musl
Requires either libargp or argp-standalone. Signed-off-by: Renato Caldas <renato@calgera.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
0cc4d01dcb |
cni: fix textrel QA issue
When building cni, we get textrel QA issue like below: cni: ELF binary /usr/libexec/cni/macvlan has relocations in .text The problem could be solved by adding '-buildmode=pie' to ${GO}. In go.bbclass, this flag is added to GOBUILDFLAGS conditionally, that is, if the arch is not mips nor riscv32, this '-buildmode=pie' is added to GOBUILDFLAGS. So make use of that. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
3ce3ef9486 |
kubernetes: do not strip binaries at build
Yocto/OE has its own way to control binary stripping. So don't do it in the go build process. Otherwise, we'll get empty dbg packages. Setting DBG=1 solves this problem, as stated in comments in the Makefile. """ # Note: Specify DBG=1 for building unstripped binaries, which allows you to use code debugging # tools like delve. When DBG is unspecified, it defaults to "-s -w" which strips debug # information. """ Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
4bc2f6e550 |
containerd: fix HOMEPAGE
The previous HOMEPAGE has been archived. Use the active one. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
c2e8199d87 |
netavark, xen: *.patch: add Upstream-Status to all patches
There is new patch-status QA check in oe-core: https://git.openembedded.org/openembedded-core/commit/?id=76a685bfcf927593eac67157762a53259089ea8a This is temporary work around just to hide _many_ warnings from optional patch-status (if you add it to WARN_QA). This just added Upstream-Status: Pending everywhere without actually investigating what's the proper status. This is just to hide current QA warnings and to catch new .patch files being added without Upstream-Status, but the number of Pending patches is now: Patches in Pending state: 15 (11%) Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
eaa50e95bd |
ipxe: Fix malformed Upstream-Status
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
ed8c773b1b |
diod: Fix malformed Upstream-Status
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
49fdcebf5b |
moby: update to v24.0.2
Bumping moby to version v24.0.2-56-gd7aa1e14e5, which comprises the following commits: 5652c59647 testing: temporarily pin docker-py tests to use "bullseye" 789a8755b8 run `getent` with a noop stdin f7298b326e vendor: github.com/sirupsen/logrus v1.9.3 1c18ad6ca6 vendor: github.com/rootless-containers/rootlesskit v1.1.1 ae4a10df67 update RootlessKit to v1.1.1 24c882c3e0 update go to go1.20.5 b3133d7471 contrib/check-config: move xt_bpf check to overlay section 8c552012ae contrib/check-config: check for xt_bpf 61d547fd06 Dockerfile: Move dockercli to base-dev e5fbc3f75a hack/cli.sh: Quiet origin cleanup 1a078977e1 Dockerfile/shell: Install buildx cli plugin c4198e6053 Dockerfile: Use separate cli for shell and integration-cli 647ba03224 builder-next: Set moby exporter as default 961fe27408 c8d/handlers: Handle error in walkPresentChildren 087cf6f238 c8d/load: Don't unpack pseudo images 0b9d68f59d c8d/load: Use walkImageManifests cbf0779bfc c8d/list: Use walkImageManifests 0139309fef c8d: Add walkImageManifests and ImageManifest wrapper e1c7956764 Dockerfile: use COPY --link for source code as well 75afe3201b containerd: add c8d version and storage-driver to User-Agent 8018ee4689 dockerversion: DockerUserAgent(): allow custom versions to be passed ed376a603f dockerversion: remove insertUpstreamUserAgent() 1d45ea52f4 dockerversion: simplify escapeStr() a27b0381a6 dockerversion: add a basic unit-test 1fc19772e0 Make sure the image is unpacked for the current snapshotter 4217d9ea0a Dockerfile: use COPY --link to copy artifacts from build-stages 4c6b8e737f added alias validation e370f224ae fixing consistent aliases for OCI spec imports ac1a867282 vendor: github.com/mistifyio/go-zfs/v3 v3.0.1 2949fee1d3 containerd: set user-agent when pushing/pulling images f9c68e5fbc libn: fix resolver restore w/ chatty 'iptables -C' 3452a76589 libnetwork: fix sandbox restore fec801a103 libnetwork: log why osl sandbox restore failed d9e39914a7 Fix npe in exec resize when exec errored 042f0799db libn/d/overlay: support encryption on any port ec8ec9056c builder/remotecontext: deprecate CachableSource, NewCachableSource 7a4ea19803 libcontainerd: work around exec start bug in c8d ae6e9333c0 vendor: github.com/moby/buildkit v0.11.7-0.20230525183624-798ad6b0ce9f 0d9acd24fe c8d/inspect: Fill `Created` time if available 04eccf8165 vendor: github.com/containerd/go-runc v1.1.0 d64bab35ee daemon: lock in snapshotter setting at daemon init 329d671aef Dockerfile: temporarily skip CRIU stage 4cc2081119 integration: Add TestImageInspectEmptyTagsAndDigests 27df42255c hack: Rename .ensure-emptyfs to .build-empty-images 9ee7d30aef hack/ensure-emptyfs: Create dangling image 8a4b7c5af8 Add testenv.UsingSnapshotter utility a753ca64e2 hack/make/.binary: don't use "netgo" when building Windows binaries 5276c2b6e0 c8d/pull: Use same progress action as distribution baf1fd1c3f libnetwork: check for netns leaks from prior tests 992dc33fc5 libnetwork/osl: restore the right thread's netns ef1545ed4a libnetwork: leave global logger alone in tests 876f5eda51 libnetwork: make resolver tests less confusing 47a3dad256 c8d/list: Show layerless images 0869b089e4 libnetwork: just forward the external DNS response 3467ba6451 reorder load funcs to match newServiceConfig()'s order f9b886c01b add mirror to daemon reload test for insecure registries 07140c0eca build: use daemon id as worker id for the graph driver controller d5ad186d49 ci(bin-image): distribute build across runners 4d924c35f7 api/server: allow empty body for POST /commit again 68b7ba0d03 api/inspect: Fix nil RepoTags and RepoDigests 5ea7b8d091 fix: `docker pull` with platform checks wrong image tag Bumping docker-cli to version v24.0.2-9-g0823df7da, which comprises the following commits: 11af1189d docs: add "--detach-keys" example to docker run reference f118c05e8 docs: move "--detach-keys" example to examples section f66f7ed7f cli/command: fix GoDoc referencing wrong const 2814c01b0 Dockerfile.vendor: update GOPROXY to use default with fallback 32f66cbe5 vendor: github.com/docker/docker v24.0.2 dc4707edb [24.0] vendor: github.com/docker/docker v24.0.1 298e67926 docs: fix example for proxies in daemon.json 9175ffa9b man: remove devicemapper from examples beb0330a7 Correct "ps --no-trunc" example output 405be9063 docs: remove AuFS from glossary 7a269817b docs: remove Docker Toolbox from glossary 41ef7c45c docs: remove boot2docker and docker-machine from glossary c184a61da docs/deprecated: remove "disabled by default" for AuFS, overlay e7a60449f docs: remove aufs and legacy overlay 77541afea contrib/completion: remove aufs, legacy overlay e67a7acd0 docs/deprecated: remove .patch release from deprecation status fb6ae356c vendor: github.com/docker/docker v24.0.0-rc.3 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
6385f57723 |
oci-image-spec: update to 1.1.0-rc3
Bumping image-spec to version v1.1.0-rc3-14-g9615142, which comprises the following commits: 32036d8 Apply version change from #1050 f3f0906 Specify the content of the scratch blob 29a1380 Remove special guidance around wasm 2720969 Update descriptor.go a68ca3e Remove artifact media type reference 428b1e5 releases: use +dev as in-development suffix 2f691e8 version: bump HEAD back to -dev 085b884 version: bump for release of v1.1.0-rc.3 fd45b6b Add scratch descriptor and scope layer limits 63b8bd0 Remove artifact manifest 23c4647 Define image manifest artifactType and guidance 5751791 Add Tianon as maintainer f4fc83a Fix unused variable linting error d09d13d Update Jon Johnson's email 4136bec descriptor schema: add missing data and artifactType definitions 729a03e manifest, specs-go/: provide guidance on SCRATCH config descriptor 31de013 manifest schema: add tests for the subject field 7a9efbd manifest schema: add the missing `subject` field f2f1956 descriptor: clarify artifactType field must have compliant values 98f35df Update image spec and conversion to clarify groups 336b02c Require IANA mediaType for image config.mediaType and layers.mediaType 1f60184 Add Go 1.20 support f99b121 Remove filtersApplied from image-spec b5998ba specs-go/v1/*.go: align the deprecation style 6687119 Chore: fix go.mod - split direct/indirect dependencies 867ce74 ArtifactType is optional, omit when empty ccb86b9 mention deprecation in media-types.md 9b4e6c0 even fewer words 2cdbef2 Deprecate non-distributable layers 265874e Note an exception to the platform.os recommendation for wasi 59780aa Add ArgsEscaped field to image config 3625ee3 doc: fix example in artifact.md 94f2431 version: bump main back to -dev 19a74bc version: release v1.1.0-rc2 0a97fe7 docs: Added artifact.md to docs and spec.md c91663b Update RELEASES.md 0e7e0dd docs: Update release process docs with checklist 5d055a4 version: switch back to -dev 4728b6e version: bump for 1.1.0-rc1 release a7ac485 Rename refers field to subject (#950) 4c15674 Use go install and full path to commands ce50f1f Bump from Go 1.16 to 1.17 ca2e500 Embed Platform in Image a865bc0 Fix whitespace consistency in config.md da33ef0 Remove io/ioutil references ed7e07b Add artifact to spec.md bc9c4bd Update schema for mediaType validation (#933) b04b320 Working Group Proposal for Reference Types ba36edd Add regclient to implementations 293f064 Reverting json schema to well known value ba3f174 Add maintainer nomination template 08825b8 Pinning version of golangci-lint to support 1.16 9747134 Move inactive maintainers to emeritus 0bd8a03 Add Brandon as maintainer c7ca3ac Update URLs to https 874a191 Add Sajay as maintainer 6ffdc78 Move inactive maintainers to emeritus d6ce48a Add mediaType fields into example manifest & image index JSON references 0895292 implementations: point to krustlet/oci-distribution Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
c8d2b7f738 |
oci-runtime-spec: update to 1.1.0-rc.2
Bumping runtime-spec to version v1.1.0-rc.2-22-g720792f, which comprises the following commits: 1beaf68 CODEOWNER: Add Toru Komatsu(@utam0) to sync with MAINTAINERS d46c8b2 schema: fix definition for ioPriority 504f70e Add I/O Priority Configuration for Process Group in Linux Containers 05563ea features: update Example d89ef1e glossary: s/features document/Features structure/g 39bd2ef MAINTAINERS: add Toru Komatsu (utam0k) f66aad4 Update ociVersion in config-linux.md example 206251f releases: use +dev as in-development suffix 8947849 spec: add scheduler entity 4ee185a version: v1.1.0-rc.2-dev a5b4da4 version: release v1.1.0-rc.2 54f948c ChangeLog: Document changes since v1.1.0-rc.1 6152be4 schema: remove duplicate keys 9d7c878 Clarify I/O throttling differences between cgroup v1 and v2 b6980b0 schema: fix schema for timeOffsets 689874f Add `features.md` to formalize the `runc features` JSON 167ffb4 Add Go 1.20 support to CI 15d2a5a Switch Go linting to use golangci-lint c9b5d0e Remove references to deprecated io/ioutil package 77c37f1 Update config-linux.md fix time_namespaces url error. 6c638b1 config: clarify Linux mount options 72efacb runtime: remove `When serialized in JSON, the format MUST adhere to the following pattern` c42f9ae version: v1.1.0-rc.1-dev 3e013c2 version: release v1.1.0-rc.1 f790b68 ChangeLog: Document changes since v1.0.2 36bb632 Add support for time namespace f225699 config: change prestart hook spec to match reality 4bcd065 seccomp: Add flag SECCOMP_FILTER_FLAG_WAIT_KILLABLE_RECV d931d4b config-linux: add CFS bandwidth burst 6be797c CODEOWNERS: sync with MAINTAINERS 9e658bc config-linux: add memory.checkBeforeUpdate 3565df5 config-linux: Clarify where device nodes can be created 1924f6b GOVERNANCE: correct the Charter URL 744912b add domainname spec entity 0da1600 fix rfc link b57ada5 maintainer updates as per #1101 9d1130d IDMapping field for mount point fc985aa config-linux: update type of LinuxCPU.Idle to *int64 bc545ec schema: add cpu idle 1fef707 Update Windows CPU comments e78a3c3 Add available `LinuxSeccompFlag`s 600a8bd cgroup ownership: clarify that some files may not exist b8dbce9 update idle type of LinuxCPU from *int64 to int64 9d363b3 config-linux: add idle option for container cgroup b05eb53 typo: seccompFD -> seccompFd a650533 config-linux: add support for rsvd hugetlb cgroup 84251a4 specs-go: export LinuxBlockIODevice 3f30167 schema: make with golang 1.16 34a7544 schema: update README.md Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
de3a655dc0 |
crun: update to v1.8.5
Bumping crun to version 1.8.5-30-g7da99fb, which comprises the following commits: ef224f9 docs: remove module.wasm.image/variant=compat annotation 38f29c2 ci, wasmedge: use --platform wasi/wasm 62e68e2 ci,wasmedge: use latest instead of rawhide 5c9dbca libcrun: return with no-op when io_priority is NULL 755b47a lua: added luarocks packing 1d5748e src: define symbol for /proc/self/timens_offsets c56e556 src: replace /proc/sys/kernel/cap_last_cap with symbol db9274f src: define PROC_SELF_CGROUP and use it 1eeba46 src: quote more strings 8ca1f68 build: add check for atomic_bool e542666 build: add explicit check for atomic_int 43fc74c src: uniform the quoting style 3839e6e src: add missing quotes 0ca1f0b container: do proper cleanup on errors ee3e6f6 tests: add tests for ioprio 63a4f97 src: fix macro check e6306b8 tests: reorder includes edfd0c9 container: support io_priority from the OCI specs 478f047 libocispec: sync b6f80f7 NEWS: tag 1.8.5 a1f9b7d tests: update ubuntu to lunar 026f249 tests: update containerd 6494b69 cgroup: set the memory limit on the system scope 4d2d5b3 cgroup: move code to an utility function c56c3c4 cgroups: fix creating cgroup under "domain threaded" bbee4bc More informative error message for the case where dlopen fails 1ad17f8 Refactor: Restore serial settings for incorrect serial 087db89 scheduler: use definition from OCI 0135eb1 libocispec: update 76ed8df criu: fix memory leak 7a45ba8 ci: temporarily disable cri-o tests a717db7 criu: fix segfault if CRIU_JOIN_NS_SUPPORT is defined 3f972e1 github: try not loading kernel modules bca0b3b linux: check the PID is valid before kill(2) 62b149b tests: skip slow cri-o tests 7bbacf9 fix clang-format c0eb006 src: make clang-format 6639649 lua: fix typo 906142d linux: do not precreate devs with euid > 0 f40d974 Improve whitespace in generated `crun spec` ed25b47 tests/test_exec: don't fail on PIDs < 10000 909ae4d tests: abstract tests/init to get_init_path() df8ee48 criu: check if the criu_join_ns_add function exists 5a8fa99 NEWS: tag 1.8.4 898ffb5 tests: fix idmap mount test a2ac2b9 tests: install irqbalance 6b33ec5 tests: drop cri-o tests instead of deleting file 6824924 cgroup: workaround cpu quota/period issue with v1 fc276e6 cgroup: fix set quota to -1 58b394a build(deps): bump lumaxis/shellcheck-problem-matchers from 1 to 2 bf79b09 src: wire the runtime spec time namespace bfa4f48 linux: create PID namespace as part of the last step 4320b5d libocispec: sync 39bf623 criu: drop loading unused functions 59f2beb NEWS: tag 1.8.3 ae18930 update: initialize the rt_scheduler only on cgroupv1 crun/rspec: update to 1.1.0-rc.2 1beaf68 CODEOWNER: Add Toru Komatsu(@utam0) to sync with MAINTAINERS d46c8b2 schema: fix definition for ioPriority 504f70e Add I/O Priority Configuration for Process Group in Linux Containers 05563ea features: update Example d89ef1e glossary: s/features document/Features structure/g 39bd2ef MAINTAINERS: add Toru Komatsu (utam0k) f66aad4 Update ociVersion in config-linux.md example 206251f releases: use +dev as in-development suffix 8947849 spec: add scheduler entity 4ee185a version: v1.1.0-rc.2-dev a5b4da4 version: release v1.1.0-rc.2 54f948c ChangeLog: Document changes since v1.1.0-rc.1 6152be4 schema: remove duplicate keys 9d7c878 Clarify I/O throttling differences between cgroup v1 and v2 b6980b0 schema: fix schema for timeOffsets 689874f Add `features.md` to formalize the `runc features` JSON 167ffb4 Add Go 1.20 support to CI 15d2a5a Switch Go linting to use golangci-lint c9b5d0e Remove references to deprecated io/ioutil package 77c37f1 Update config-linux.md fix time_namespaces url error. 6c638b1 config: clarify Linux mount options 72efacb runtime: remove `When serialized in JSON, the format MUST adhere to the following pattern` c42f9ae version: v1.1.0-rc.1-dev 3e013c2 version: release v1.1.0-rc.1 f790b68 ChangeLog: Document changes since v1.0.2 36bb632 Add support for time namespace f225699 config: change prestart hook spec to match reality d931d4b config-linux: add CFS bandwidth burst 9e658bc config-linux: add memory.checkBeforeUpdate 3565df5 config-linux: Clarify where device nodes can be created a650533 config-linux: add support for rsvd hugetlb cgroup crun/ispec: update to 1.1.0-rc.3 32036d8 Apply version change from #1050 f3f0906 Specify the content of the scratch blob 29a1380 Remove special guidance around wasm 2720969 Update descriptor.go a68ca3e Remove artifact media type reference 428b1e5 releases: use +dev as in-development suffix 2f691e8 version: bump HEAD back to -dev 085b884 version: bump for release of v1.1.0-rc.3 fd45b6b Add scratch descriptor and scope layer limits 63b8bd0 Remove artifact manifest 23c4647 Define image manifest artifactType and guidance 5751791 Add Tianon as maintainer f4fc83a Fix unused variable linting error d09d13d Update Jon Johnson's email 4136bec descriptor schema: add missing data and artifactType definitions 729a03e manifest, specs-go/: provide guidance on SCRATCH config descriptor 31de013 manifest schema: add tests for the subject field 7a9efbd manifest schema: add the missing `subject` field f2f1956 descriptor: clarify artifactType field must have compliant values 98f35df Update image spec and conversion to clarify groups 336b02c Require IANA mediaType for image config.mediaType and layers.mediaType 1f60184 Add Go 1.20 support f99b121 Remove filtersApplied from image-spec b5998ba specs-go/v1/*.go: align the deprecation style 6687119 Chore: fix go.mod - split direct/indirect dependencies ccb86b9 mention deprecation in media-types.md 9b4e6c0 even fewer words 2cdbef2 Deprecate non-distributable layers 265874e Note an exception to the platform.os recommendation for wasi 0a97fe7 docs: Added artifact.md to docs and spec.md 293f064 Reverting json schema to well known value crun/libocispec: update to -tip b085839 runtime-spec: update 553cfb4 image-spec: update 384a230 runtime-spec: update 2c9fb39 libocispec: write _present tags together dc7412b image-spec: update 2e11380 runtime-spec: update e7b7344 rust: sync runtime-spec and image-spec df3036c runtime-spec: sync 8a0ee41 image-spec: sync 70826dc clean: remove unwanted diff file 4d1d608 add redefine for stdin stdout stderr when using musl 02f231b Move header files under ocispec/ Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
703feb3116 |
umoci: update to 0.4.7-tip
Bumping umoci to version v0.4.7-150-g33ec006, which comprises the following commits: 150b9e0 build(deps): bump github.com/stretchr/testify from 1.8.3 to 1.8.4 1c365a2 build(deps): bump github.com/stretchr/testify from 1.8.2 to 1.8.3 6e6027c build(deps): bump golang.org/x/sys from 0.7.0 to 0.8.0 b267d7b test: move 'go test' output to stderr for coverage binary 947f407 build(deps): bump github.com/opencontainers/runc from 1.1.6 to 1.1.7 e9394e8 CHANGELOG: update to include changes from v0.4.7 08672f5 vendor: bump several deps b4f2258 go.mod: update Go version to go1.18 b285980 build(deps): bump github.com/vbatts/go-mtree from 0.5.2 to 0.5.3 61c566b build(deps): bump google.golang.org/protobuf from 1.28.1 to 1.30.0 a0bb45f build(deps): bump actions/setup-go from 3 to 4 bdfd50b build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.2 37c828e gha: ci: make ci-image cache expire weekly 3e7ddbd dockerfile: update to leap 15.4 44a127b Makefile: pull image details from Dockerfile c99bc38 dockerfile: fetch oci-*-tools with go install 701c194 test: update to gomtree 0.5.2 ac5e249 test: (raw-)config: only use export in sub-shell c8183de oci: config: strip "-dev" from runtime-spec version b1c2cdf oci: config: correctly handle runtime-spec versions de9ad94 make: add -buildvcs=false to builds 6d52935 gha: bump Go version for validate to Go 1.20.x 3544ece build(deps): bump github.com/stretchr/testify from 1.8.0 to 1.8.1 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
e215f05c27 |
skopeo: restructure recipe to fix buildpaths warnings
Like many of the other go recipes, the method of symlinking vendor packages ends up recording the path in the binary. -trimpath can't fix those embedded paths, so we switch skopeo to be link the other recipes and position our source in a way that doesn't require the symlinking, and hence no QA warning. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
05e51d92d5 |
skopeo: update to 1.12.0
Note: this has trimpath issues, and needs to be re-worked to not use symlinked vendor directories. Bumping skopeo to version v1.12.0-25-gcf502780, which comprises the following commits: c06aa5c6 Update module github.com/stretchr/testify to v1.8.3 ac75f71f Update dependency containers/automation_images to v20230517 21b1dfee Update module github.com/sirupsen/logrus to v1.9.2 ead979a9 Update module github.com/docker/distribution to v2.8.2+incompatible 12b24fce Trigger an update of the ostree_ext container image 44ed4cea Update c/image with https://github.com/containers/image/pull/1944 9213943e Update module github.com/containers/common to v0.53.0 2825ffd9 Update module golang.org/x/term to v0.8.0 86eea6ce Update dependency containers/automation_images to v20230426 03e18aa9 Update golang.org/x/exp digest to 47ecfdc 7b587697 Emphasize the semantics of --preserve-digests a tiny bit 1e6b333f Improve the static build documentation a tiny bit 95e8cce2 Bump to v1.12.1-dev a5529097 Release 1.12.0 5f0314f3 Update module github.com/containers/common to v0.52.0 66157589 Update module github.com/containers/storage to v1.46.1 7c66b740 Add (make tools) to install (for now only) golangci-lint, use it in Cirrus d4bd787e Use golangci-lint instead of golint c538340e Finally, eliminate hack/make.sh f8f5a25f Actually fail if (go vet) fails aebab492 Speed up validate-git-marks by about a factor of three 4298692d Don't use hack/make.sh for validate-git-marks 7e35ad54 Test all files by validate-git-marks 789257f7 Simplify the package list of (go vet) bee51e5e Don't use hack/make.sh for validate-gofmt 85fef036 Run gofmt on all files, not just the changed ones 82268ea8 Don't use hack/make.sh for validate-lint 694b1565 Lint many more files in validate-lint 43090b29 Don't use hack/make.sh for validate-vet 225f239a Remove no-longer-necessary module options 98b01af0 Fix Makefile dependencies 835d71a3 Remove some outright unused code from hack/make* 30ecd8f0 Cross-link the top-level and subcommand option lists 4be583c8 Fix error handling of signature.NewEphemeralGPGSigningMechanism e8414097 chore(deps): update dependency containers/automation_images to v20230405 4f5e8214 Avoid use of a deprecated capability.NewPid ca0f8418 fix(deps): update module github.com/spf13/cobra to v1.7.0 b0d339f0 fix(deps): update module github.com/containers/image/v5 to v5.25.0 03ca2871 fix(deps): update module golang.org/x/term to v0.7.0 4ca2058d Use multiple fingerprint function Allow comma separated fingerprint list c54f2025 Review comments (to be squashed later 9b1f1fa1 Rename argument. Only use any with public key file. Double check fingerprint is in public key file. 3097b7a4 Verify signatures from a trust store bfe82593 Update c/image from the main branch 468ac655 Update module github.com/containers/common to v0.51.2 7481aae6 Update dependency containers/automation_images to v20230330 454f8559 systemtests: Fix 040-local-registry-auth about XDG_RUNTIME_DIR bbdcb79c [CI:BUILD] Packit: trigger builds on commit to main branch cd4f2ee5 [skip-ci] Update actions/stale action to v8 b2ede999 Make the installation instructions more prominent in README.md 8ea5fd44 Update dependency containers/automation_images to v20230320 aa9862a7 Update module github.com/containers/common to v0.51.1 0ad54d6d Cirrus: Update CI VM images 20447df1 bump golang.org/x/net to v0.8.0 3481a5b9 Update module golang.org/x/term to v0.6.0 bcc0d54e Simplify inspectOptions.writeOutput a bit more c345785d Factor out the output of data in (skopeo inspect) 2a6a944c Use io.WriteString 9a02c1eb Update module github.com/stretchr/testify to v1.8.2 f1c03ef1 Update module github.com/containers/storage to v1.45.4 64daedca Update golang.org/x/exp digest to 5e25df0 c07f2098 Fix formatting of inspect examples 313f142c Use common library reporter 4beb3f0a Fix some warnings 1c3d49f0 Fix tabelating output in (skopeo inspect --format) fb0be613 Corrected typo in skopeo-sync and updated description 2ef9cf69 Replace gopkg.in/check.v1 by github.com/stretchr/testify/suite/ 0ba164f0 Update c/image after https://github.com/containers/image/pull/1842 012e1144 [CI:BUILD] Packit: initial enablement 5435c808 Renovate: c/common rule moved to defaults 643a2359 Update c/image after https://github.com/containers/image/pull/1816 2c6e15b5 Run codespell on codebase df708d16 [CI:DOCS] Disable dependabot 2acac8a6 Update module golang.org/x/term to v0.5.0 f9e2c676 Update golang.org/x/exp digest to 46f607a 47c7902e Remove unnecessary blank lines c1a57ca1 Pre-allocate an array 2a7b1327 Simplify a condition e7ab33e6 Rename a variable to avoid an underscore e90c381a Add missing comment punctuation 70c06b4a Fix, or remove, comments using lint syntax 9137ac56 Simplify an increment efc6e837 Reformat import statements a8b9e4e3 Use %w when wrapping errors 99215e40 Remove a duplicate word afa031e8 Use net/netip.Addr instead of net.IP 891ba3d4 s/interface{}/any/g f2b3a9c0 Use golang.org/x/exp f1a6d427 Use strings.Cut 22955d05 go mod tidy -go=1.18 007f01c6 [CI:BUILD] enable debuginfo for el8 copr builds 036bf598 [CI:BUILD] copr: fix el8 build and enable debuginfo f9406bb0 Cirrus: Use human-readable CI VM Images b41b85ab Update module gopkg.in/yaml.v2 to v3 d2fbec35 Add unit tests for tlsVerifyConfig's yaml.Unmarshaler 9e24a195 [CI:DOCS] Fix up language in README Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
d61d6cff9c |
libvmi: add dependency on autoconf-archive-native
* since https://git.openembedded.org/openembedded-core/commit/?id=571132415ea7fe2d91c62948f2b6aa553eafa83d this doesn't get autoconf-archive-native dependency and fails with: http://errors.yoctoproject.org/Errors/Details/708195/ ./configure: line 14424: syntax error near unexpected token `-fno-strict-overflow,' ./configure: line 14424: ` AX_CHECK_COMPILE_FLAG(-fno-strict-overflow, HARDEN_CFLAGS="$HARDEN_CFLAGS -fno-strict-overflow", , -Werror )' Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
28eda60a52 |
moby: update to v24.0.0
Bumping moby to version v24.0.0-2-g821e4ec4c7, which comprises the following commits: 5ea7b8d091 fix: `docker pull` with platform checks wrong image tag 907f037141 update containerd binary to v1.7.1 8bbfa32741 c8d: The authorizer needs to be set even if AuthConfig is empty 8587a1c617 c8d/builder: implement cache 9717369913 c8d: implement classic builder 233c49438b c8d: Don't create authorizer for empty AuthConfig 2b7424512a c8d/authorizer: Default to docker.io f77a3274b4 [chore] clean up reexec.Init() calls c76bb6a3a3 ci: bin-image workflow 71846e82c1 bin-image bake target ecbc27aa22 vendor: github.com/docker/distribution v2.8.2 1235338836 c8d: implement missing image delete logic 763d2b7996 c8d: fix image history for dangling images 86770904be c8d: fix missing image history bfffb0974e pkg/aaparser: deprecate GetVersion, as it's no longer used e28bc0d271 profiles/apparmor: remove use of aaparser.GetVersion() d169a57306 contrib/apparmor: remove remaining version-conditionals (< 2.9) from template 63640838ba daemon: handleContainerExit(): add execDuration in attributes 012dd239ce docs/api: version-history: also mention /system/df for VirtualSize a87313497b vendor: github.com/containerd/containerd v1.6.21 5f36d4af15 api: synchronize api/swagger.yaml with docs/api/v1.43.yaml 2b6761fd3e d/graphdriver/copy: support src fs w/o xattr support 3e6092f5b2 pkg/jsonmessage: touch-up GoDoc 05cb0e5a7d pkg/jsonmessage: JSONProgress.String(), JSONProgress.now(): simplify 4cadee65b3 pkg/jsonmessage: JSONMessage.Display(): remove special case for 401 errors 66cf0e3f55 client: slightly improve ContainerDiff tests dbb48e4b29 api/types/container: create type for changes endpoint b7e8868235 update go to go1.20.4 bf3c156654 vendor: github.com/moby/term v0.5.0 c1d420ec60 vendor: github.com/moby/term v0.0.0-20221205130635-1aeaba878587 0df38c3e2b vendor: github.com/opencontainers/runtime-spec v1.1.0-rc.2 167fa429f0 daemon: Daemon.CreateImageFromContainer(): remove intermediate vars bf5ae17c16 api/server/router/container: containerRouter.postCommit: inline struct 9613da63dc c8d: commit: generateCommitImageConfig: don't merge image config e510abbc8c daemon/containerd: containerConfigToOciImageConfig: add ArgsEscaped 3eebf4d162 container: split security options to a SecurityOptions struct 8142051a3b libnetwork/osl: unify stubs for NeighOption 0ea41eaa51 libnetwork/osl: unify stubs for IfaceOption 021e89d702 libnetwork/osl: rename var that collided with import 3a4158e4fa libnetwork: add missing stub for getInitializers() 939a4eb5c9 libnetwork: fix stubs 17feabcba0 libnetwork: overlayutils: remove redundant init() 44a6587608 c8d: delete dangling image on pull 1e9ebfb00c libnetwork: inline sendKey() into SetExternalKey() 9d8fcb3296 libnetwork: setKey(): remove intermediate buffer a813d7e961 libnetwork: don't register "libnetwork-setkey" re-exec on non-unix 881fff1a2f libnetwork: processSetKeyReexec: don't use logrus.Fatal() e974599593 libnetwork: processSetKeyReexec() remove defer() 1845a915b0 c8d/import: Don't gc unnamed images 0ffd3225d2 vendor: github.com/opencontainers/runc v1.1.7 2d0e899819 update runc binary to v1.1.7 56fbbde2ed libnetwork/resolvconf: fix some minor (linting) issues 820975595c libnetwork/resolvconf: improve tests for Build 93c7b25ccd libnetwork/resolvconf: refactor tests for readability 43378636d0 libnetwork/resolvconf: allow tests to be run on unix 73c637ad60 libnetwork/resolvconf: use t.TempDir(), change t.Fatal to t.Error fc1e698914 libnetwork/resolvconf: fix TestGet() testing wrong path 55d18b7db9 libnetwork/resolvconf: use []byte for hash instead of string 630fc3839e libnetwork/resolvconf: simplify hashData() and improve performance 12bf850c84 cmd/dockerd: gracefully shut down the API server 520aa08d42 c8d/prune: Logging fixes 52af6d957e c8d/prune: Remove gc.ref labels from configs of deleted images 993ca8c6de cmd/dockerd/trap: log to logrus directly 0f3c5d3893 cmd/dockerd/trap: don't force exit after cleanup a1e1038736 Use the image service instead of the reference store for tagging 9fe5ac6614 c8d: Handle nil container.ImageManifest 16d5d4b6e1 cmd/dockerd: ignore SIGPIPE using signal.Ignore 2d31697d82 daemon: set docker0 subpool as the IPAM pool d8b784a15e daemon/cluster: inline filters da8e07edb5 volume/service: inline filters in tests c0c4a16053 testutil: inline filters in tests b6154189e8 integration: inline filters in tests 1bc0d7080a integration-cli: inline filters in tests 5bc0832766 daemon: inline filters in tests 081b5e3d4e client: inline filters in tests aca8dde362 integration/TestKillContainer: Bigger timeout on Windows 391f9635cc c8d/list: Initialize capacity instead of length 4ec063fade pkg/sysinfo: omit Getpid call in numCPU f66684fdeb fix some comments c399963243 libn/d/overlay: make VNI matcher IPv6-compatible 7d9bb170b7 libn/d/overlay: test the VNI BPF matcher on IPv4 4876c09b2a build(deps): bump github.com/creack/pty from v1.1.11 to v1.1.18 8df3db4b97 c8d: add support for removing images by shortID 117ceac82b daemon/prune: Use errdefs for invalid "until" value e502c69140 builder: use typed error for invalid "until" value 9791756284 overlay2: remove deprecated overlay2.override_kernel_check option 54a125f677 builder-next/prune: Handle "until" filter timestamps 38e791fb2f vendor: update buildkit to v0.11.6 005150ed69 check-config.sh: do not check for RT_GROUP_SCHED f72548956f remove deprecated legacy "overlay" storage-driver 4ecb587eff daemon: skip TestGetInspectData when using containerd snapshotters a82c434447 daemon: setupFakeDaemon(): add fakeImageService 1261fe69a3 API: deprecate VirtualSize field for /images/json and /images/{id}/json eb7738221c Add no-new-privileges to SecurityOptions returned by /info e7980275c0 c8d: align "Size" and "VirtualSize" for images 1e1efe1f61 libnet/d/overlay: clean up iptables rules on network delete 9a9dfb1d0d api/server: getImagesJSON(): don't check version in a loop 3903f16cd6 daemon: remove deprecated AuFS storage driver 890959eea8 builder-next: fix buildkit version bc37e3f830 Fix returning errors from snapshotter.Prepare f846349824 c8d/list: Implement `until` filter d89590eab9 c8d: Implement prune e6ac640d2e vendor: github.com/opencontainers/runc v1.1.6 f531e3cf69 vendor: golang.org/x/net v0.8.0 3886faced8 vendor: golang.org/x/text v0.8.0 d0efca893b update runc binary to v1.1.6 7fe0f73838 Fix argument quoting bugs in dockerd-rootless.sh 9cb5da400c images/Children: Return error edf802956e c8d/list: Implement `label` and `label!` filter 03fc3aad12 daemon: touch-up flag description for --seccomp-profile 5a922dc162 daemon: deprecate --oom-score-adjust for the daemon f696a1b3b3 Fix error checking when pulling from an insecure registry c957ad0067 libnetwork: clean up inDelete network atomically e5dbd28afd Added timeout to validate job in github actions 106c694993 Dockerfile: update xx to 1.2.1 a5d46a15f5 split GetRepository from ImageService 893d28469f vendor: github.com/ishidawataru/sctp v0.0.0-20230406120618-7ff4192f6ff2 f66374f6a8 golangci-lint: enable importas linter to force consistent aliases 81e62af94a use consistent alias for containerd's errdefs package f691b13450 daemon: move code related to stats together 5c78cbd3be pkg/platform: deprecate OSType in favor or runtime.GOOS cf9a76fe8f pkg/platform: un-export consts that are only for internal use 790dd8cc92 pkg/platform: use const for OSType, improve GoDoc 87019144f6 pkg/platform: replace use of deprecated syscall.Syscall 7ca38d64d2 pkg/platform: move package doc to platform-agnostic file 9434919f76 pkg/platform: rename files for consistency be4abf9d6e Vendor containerd 1.6.x with the readonly mount fix 41a230758c c8d: Set the process user on exec 70229b55ec vendor: github.com/moby/swarmkit/v2 v2.0.0-20230406225228-75e92ce14ff7 3f09316e3b vendor: re-vendor to add missing file 8ed900263e libnetwork/overlay: remove host mode 1d46597c8b libnetwork/overlay: remove KVObject implementation f32f09e78f libnetwork/overlay: don't lock network when accessing subnet vni b67446a8fa libnetwork: remove local store from overlay driver 8aa1060c34 libnetwork/overlay: remove live-restore support e3708a89cc libnetwork/overlay: remove vni allocation e251837445 libnetwork/overlay: remove Serf-based clustering 644e3d4cdb libnetwork/netlabel: remove dead code f8b5fe5724 libnetwork/netutils: remove dead code c8d2c6ea77 libnetwork: remove unused props from windows overlay driver 0fa873c0fe libnetwork: remove global store from overlay driver 00037cd44b libnetwork: remove ovrouter cmd e0f36f9d8b ImageService: Pass ctx to Children bea751beb7 c8d: Implement Children by comparing diff ids ba47cdcc0b c8d/list: Implement `reference` filter 4aa2876c75 docker-rootless-setuptools.sh: improve readability of messages 4d04068184 libn/d/overlay: only program xt_bpf rules f6cc8e3512 update go to go1.20.3 465cbccdaf c8d: use the container's configured snapshotter where possible c8f8d11ac4 awslogs: fix non-blocking log drop bug 1b178dffa3 Send an event when an image is deleted 36d28b73fc Send an event when an image is tagged 750218c5e5 d/config: fix default-network-opts in daemon.json 36935bd869 libcontainerd: close stdin sync if possible 3beda17773 integration-cli: rename vars that collided with imports 92e38b6e27 c8d/list: Ignore attestation manifests 773a9d85a1 c8d: Send event when an image is exported 00545ef4d6 c8d: Send event when an image is imported e59f7fba6a pkg/fileutils: remove aliases for deprecated functions and types 6b9968e8b1 client: deprecate NewClient properly 027f70562e c8d/push: Rename jobs to avoid shadowing type e1dd9c0396 c8d/push: Ignore :port when comparing source repository 4a34c501c1 c8d/push: Parse source labels with multiple sources cb788bea9c c8d/push: Add distribution source labels only on success 013e44ec5d c8d/push: Log error if releasing the lease failed c9012c798e c8d/push: Sync mountableBlobs access f6b50d52d4 libnetwork/netutils: drop ElectInterfaceAddresses 61a0e79ad6 vendor: github.com/containerd/containerd v1.6.20 b8e963595e libnetwork: sbState: rename ExtDNS2 back to ExtDNS 0233029d5a vendor: opencontainers/image-spec v1.1.0-rc2.0.20221005185240-3a7f492d3f1b c733cf223d vendor: github.com/containerd/ttrpc v1.1.1 a0ef2ac59c c8d: push: addressing some nits a75354c045 c8d: Implement push e7393d0fc5 images/push: Accept reference 15b9176d53 Add the events services to the containerd image service 77be7b777c update runc binary to v1.1.5 a17029ba49 vendor: github.com/opencontainers/runc v1.1.5 24804e67f5 c8d/commit: Use manifest digest for dangling image 845b328734 Skip Buildkit digest tests 4c459ddabd c8d: add support for `docker diff` e85c69e1b7 Update `github.com/containerd/containerd` to the HEAD of `release/1.6` and vendor f09b1022aa c8d/inspect: Handle dangling images 9e3a6ccf69 libn/i/setmatrix: make generic and constructorless 713c9280ca Move buildkit client opts to new package 4f511bd06e Add akerouanton as curator bb2c5617d6 Add laurazard as curator 988d26afe4 vendor: github.com/moby/buildkit v0.11.5 6caaa8cadc Prefer loading `docker-init` from an appropriate "libexec" directory bae49ff278 libnet/d/windows: log EnableInternalDNS val after setting it 4f48a4ea2a Update delve version 0fa7a4e3b4 client: Add buildkit ClientOpts 965eda3b9a libnet/d/overlay: insert the input-drop rule 66dfc0169f dockerversion: DockerUserAgent(): use sync.Once to construct User-Agent 72dc7a0f7b vendor: github.com/moby/swarmkit/v2 v2.0.0-20230315203717-e28e8ba9bc83 c7ccc68b15 Silence GRPC logs unless our log level is debug be34e93f20 integration-cli: Enable TestExecStartFails on Windows cb76638699 registry/search: pass User-Agent through headers 88992de283 StartWithLogFile: Fix d.cmd race fed1c96e10 TestDaemonRestartKillContainers: Fix loop capture f5050d4ef2 ci: disable testing mergeop and diffop with the dockerd worker 0ac3bf837b builder-next: disable mergeop and diffop c14463d1e4 ci: enable BuildKit tests with containerd integration worker 105b9834fb libnet/d/overlay: add BPF-powered VNI matcher 44cf27b5fc libnet/d/overlay: extract VNI match rule builder 142f46cac1 libn/d/overlay: enforce encryption on sandbox init 0ac02ba342 vendor: github.com/opencontainers/runtime-spec v1.1.0-rc.1 ab131642a1 vendor: github.com/opencontainers/runc v1.1.4 b98c05dc50 vendor: github.com/klauspost/compress v1.16.3 664c0d3201 vendor: github.com/godbus/dbus/v5 v5.1.0 3e4ce10342 vendor: github.com/coreos/go-systemd/v22 v22.5.0 0a2e3f14e7 vendor: github.com/opencontainers/selinux v1.11.0 bc1dec71c5 vendor: github.com/imdario/mergo v0.3.13 9752e43644 vendor: golang.org/x/sys v0.6.0 d4fd582fb2 libnet/d/overlay: document some encryption code 58504620c5 api/types/container: IpcMode: use common function for container-mode 6f0e28d024 api/types/container: PidMode: fix validation for empty container name/ID 53c813961e api/types/container: fix .Container() returning a name, when it shouldn't c76331e13f api/types/container: put "valid" field as first check in tests 2d49080056 pkg/sysinfo: move MemInfo and ReadMemInfo to a separate package a050db4a6f libnetwork/d/overlay: handle peer ops directly 09d39c023c libnetwork/i/setmatrix: devirtualize 3b569cc686 daemon/graphdriver/windows: cleanup errors bbeaeee3c7 daemon/graphdriver/windows: remove some intermediate variables 9db5dc9a46 daemon/graphdriver/windows: use strings.EqualFold() d742188e3b daemon/graphdriver/windows: remove fileFlagSequentialScan const 3a8c97be45 daemon/graphdriver/windows: rename vars that collided with imports 605e8f53b1 daemon/graphdriver/windows: InitFilter() don't use idtools.MkdirAllAndChown() 34303ccd55 libnetwork/i/setmatrix: un-embed the mutex 127cd9def1 integration/plugin: fix duplicate import 2987393768 integration/volume: fix duplicate import 146df5fbd3 Fix pruning anon volume created from image config 058a31e479 volumes: fix error-handling when removing volumes with swarm enabled a2c29e9128 update containerd binary to v1.7.0 7531f05c7c integration/volumes: TestVolumesRemove: add coverage for force/no-force 7b3acdff5d registry: return concrete service type 3991faf464 Move filtered registry search out of image service 06619763a2 remove GetLayerByID from ImageService interface 02dec48bab update to go1.20.2 37a9d6aabe Fix listener parsering regression when no addr set 3bbffe96e1 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230309194213-a745a8755ce3 af677245fb c8d/builder: Store untagged images as dangling 8f716ca06a builder/overrides: Add consts for attribute key names e807ae4f2e vendor: github.com/containerd/cgroups/v3 v3.0.1 44d0522848 c8d/inspect: Add digested reference to details a8f5c524a0 libcontainerd: Upgrade to typeurl/v2 45ee4d7c78 c8d: Compute container's layer size 4026148ef1 Dockerfile: Update shfmt to 3.6.0 a0741cacef contrib/dockerize-disk.sh: Fix indentation 088aff1620 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230302163403-80a528a86877 f8b468fda2 builder-next: enable more cache backends bba77163ff c8d: Make build and buildx work b0b3c62a84 vendor: github.com/moby/buildkit v0.11.4 117cdb28ce regenerate AUTHORS 608a122aef integration: Extract StopContainerWindowsPollTimeout const 74dbb721aa TestLogs: Increase stop check poll timeout on Windows a34060cdb4 Resolve and store manifest when creating container 168ca2dcc8 Introduce support for docker commit 22f303e422 layer: NewStoreFromOptions(): include driver-name in error message f52e935f36 reference: add test-coverage for digested references f71439d527 reference: don't string-match errors in tests, and fix error format 669940065f reference: use t.TempDir() for tests 520dc12c0e reference: rename variables that collided with type / import c477cda59f c8d/list: Support dangling filter 3e4c4df664 builder/exporter: Remove commented unused const 324290a5eb vendor: buildkit v0.11.4-0.20230228113103-218e934edfba 6588b3eef0 builder: Remove buildkit's build information 4ea1c9f8e5 `docker image ls`: handle multi-platform images a9e7360775 daemon/config: remove AuthzMiddleware field 47e9caede7 libcontainerd/client: Rename `cp` to `checkpoint` 0c751f904f libcontainerd/client: Fix checkpoint not being set be39be87f6 api/server: delete Wait method 91c2b12205 Make default options for newly created networks configurable 19ad4ac03d registry: acquire mutex in IsInsecureRegistry ef6f5367dc vendor: github.com/containerd/containerd v1.6.19 5997ad8512 vendor: github.com/Microsoft/hcsshim v0.9.7 0a6a726d26 api/server: drop unused Config struct 248745004a api: Remove <none> in Repo(Tags|Digests) for >= 1.43 0ffaa6c785 daemon: add annotations to container HostConfig 3c59ef247f libnet/ipam: use netip types internally 01dbe23b6f libnet/ipam: simplify the data model 8273db28f3 libnet/ipam: inline parsePoolRequest function 9a8b45c133 libnet/ipam: drop vestiges of custom addrSpaces 18ac200efe libnet/ipam: get rid of superfluous closure 88f6b637a0 libnet/networkdb: fix nil-dereference panic in test f8791db4be c8d/list: Fix Repo(Digests|Tags) for untagged images cd779dae46 Upgrade to Go 1.20.1 d4e7a87b96 Upgrade to Go 1.20 3606d6a7cd Upgrade to golangci-lint v1.51.2 2f9e3cca3d api: Move Repo(Digests|Tags) <none> fallback from daemon 8657c87c8c c8d/tag: Don't create a separate error variable 9f6649b248 AUTHORS: regenerate 50d7164978 docs/api: add v1.43 OpenAPI definitions bb21e0f191 Close DecompressStream after layer is downloaded d6c4e17411 Upgrade containerd/fifo to v1.1.0 782a369f92 c8d/pull: Add CRI-compatible annotation of pulled content a770153af0 chore: use http constants to replace numbers 9104cd5441 vendor: github.com/moby/buildkit v0.11.3 b0eed5ade6 daemon: allow shimv2 runtimes to be configured 4a886a3e8f dependency: bump go.etcd.io/bbolt to v1.3.7 e40c4c997e update containerd binary to v1.7.0-beta.4 f8cfd3a61f libnetwork: devirtualize Resolver type faaa4fdf18 libnetwork: forward unknown PTR queries externally 8f5a9a741b libnetwork: fail loudly on resolver iptables setup 25b51cad3d libnetwork: replace ad-hoc semaphore implementation a1f7c644be libnetwork: use dns.Client for forwarded requests e6258e6590 libnetwork: reply SERVFAIL if DNS forwarding fails 9cf8c4f689 libnetwork: extract DNS client exchange to method 854ec3ffb3 libnetwork: extract dialExtDNS to method 51cdd7ceac libnetwork: truncate DNS msgs using library method 860e83e52f libnetwork: get rid of truncation red herring 8a35fb0d1c libnetwork: refactor ServeDNS for readability 0bd30e90bb libnetwork: reply SERVFAIL on resolve error 92aa6e6282 libnetwork: extract fn for external DNS forwarding 78792eae68 libnetwork: add regression test for issue 44575 94feb31516 update to go1.19.6 b62445871e libnet/ipam: fix racy, flaky unit test 81f9f90e47 Do not log connection info before the connection exists c4c54683a9 Revert "apparmor: Check if apparmor_parser is available" 174802e15f vendor: github.com/containerd/containerd v1.6.18 a4e3c67e44 api/s/r/swarm: log backend errors at Debug level e66995d840 d/l/awslogs: fix ineffective Add in test 713e02e03e daemon: handle EISDIR error from runtime 97921915a8 distribution/xfer: fix download fencepost bug 0c68b655f6 Fix loop-closure bugs in tests dea3f2b417 Migrate away from things deprecated in Go 1.20 a36286cf89 vendor: golang.org/x/net v0.7.0 c7de76569e vendor: golang.org/x/text v0.7.0 a53b44a266 vendor: golang.org/x/sys v0.5.0 c53e22af19 add new maintainers! 046cc9e776 libnetwork: check DNS loopback with user DNS opts d31fa84c7c libnet/networkdb: use atomics for stats counters 3539452ef0 libnetwork/networkdb: make go test -race ./libnetwork/networkdb pass 5287b2ddbf libnet/ipam: stop eagerly stringifying debug logs 2e19a4d56b contrib/apparmor: remove version-conditionals (< 2.9) from template 7008a51449 profiles/apparmor: remove version-conditional constraints (< 2.8.96) eaeaa7b7fd vendor: update buildkit to latest v0.11 335907d187 builder: define GetRemotes for the worker 80f8432b52 ci: fix branch filter pattern in buildkit workflow 62be425bcc api: Extract parsing reference from repo and tag afc6e3fa46 c8d/import: Use danglingImageName instead of hardcoded b3a8b6b198 api/tag: Reject digested target references eaa56afda9 daemon/c8d: Implement TagImageWithReference 1ca85e835c daemon/imageService: Remove TagImageWithReference 7b6f71dced daemon: Pass ctx to image tagging operations 22776f8fdb ci: enhance tests distribution e304e82b66 ci: update gotestlist to 0.3.1 ab3fa46502 apparmor: Check if apparmor_parser is available 0137446248 Implement run using the containerd snapshotter e564932792 gha: switch buildkit back to upstream for testing 91725ddc92 libnet/d/ipvlan: gracefully migrate from older dbs 21677816a0 Dockerfile: configure code dir as "safe" directory 3bcb350711 graphdriver/overlay2: usingMetacopy ENOTSUP is non-fatal 521c2b25c2 docs: fix JSON format error af32603ae3 daemon/c8d: Implement save and load 043dbc05df github: apply patch for CNI test that was incorrectly skipped 666334bd48 vendor: update buildkit to v0.11.2 85169a04cf vendor: github.com/tonistiigi/fsutil v0.0.0-20221114235510-0127568185cf cf83842304 Dockerfile: Make it easier to use ctr in shell container 0e4d3feb94 daemon: identify container exits by ProcessID 843fcc96f7 libc8d/remote: name task fifos after task ID 719b08313f libc8d/local: set task id to container id d634ae9b60 Wait longer for exit events on Windows 7950abcc46 libnetwork: delete CHANGELOG.md 31f4ec92f6 update containerd binary to v1.7.0-beta.3 c41c8c2f86 vendor: github.com/containerd/containerd v1.6.16 22098745e7 vendor: github.com/pelletier/go-toml v1.9.5 a264f2dc55 libnetwork/ipam: skip Destroy()ing bitseq.Handle values 6f08fe20e9 libnetwork/bit{seq,map}: delete CheckConsistency() a08a254df3 libnetwork: drop DatastoreConfig discovery type 28edc8e2d6 libnet: convert to new-style driver registration 5595311209 libnetwork/drvregistry: split up the registries d478e13639 libnet: un-plumb datastores from IPAM inits 27cca19c9a libnetwork/drvregistry: drop unused args befff0e13f libnetwork: remove more datastore scope plumbing 142b522946 libnetwork/config: remove vestiges of global scope 52d9883812 libnetwork: drop (*Controller).ReloadConfiguration 9900c7a348 client: improve error messaging on crash e8011d7872 libnw/ipamutils: make local defaults immutable 540d1e0561 libnw: untangle IPAM allocator from global state 48ad9e19e4 libnetwork/netutils: drop ElectInterfaceAddresses cc19eba579 daemon: let libnetwork assign default bridge IPAM a654cbfd2f Use GetBoolOrDefault to remove duplicated invalidFilter usages 0d68591c8e api/types/filters: Add GetBoolOrDefault 390532cbc6 libnetwork/windows/overlay: drop unused variables b3e6aa9316 libnetwork/netutils: clean up GenerateIfaceName 3775939303 libnetwork/netutils: refactor GenerateRandomName 1776f72c96 c8d/progress: Update progress when finished 54f0b0ec4b c8d: Implement image history c0eb207b76 libnetwork/bitseq: refactor JSON marshaling 89ae725d23 libnetwork/bitseq: make mutex an unexported field 94ef26428b libnetwork/bitseq: refactor in terms of bitmap 143c092187 libnetwork/bitmap: optimize binary serialization c4d7294b5c libnetwork/bitmap: remove datastore concerns ad03a09451 libnetwork/bitmap: dup from package bitseq cd2e7fafd4 libnetwork/bitseq: add marshal/unmarshal tests b3c5352386 rootless: support `--ipc=host` 67aa86f1e0 hack: check if cross-compiling before setting ARM target name 25f95b0000 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230119195359-904c221ac281 170a1c4709 hack: display build cmd when DOCKER_DEBUG set 877baae03e hack: remove unnecessary vars in make.sh script b80f16157e hack: remove ORIG_BUILDFLAGS var 0c008cc4f8 hack: remove -installsuffix build flag d2d6ef431f Dockerfile: prefer ld for building against arm64 518be73a5c Dockerfile: smoke tests for static builds f676dab8dc Dockerfile: use clang to build dockerd/docker-proxy f49c88f1c4 Disable chrootarchive.init() on Windows 9b5c21309b images: Pass context to commit related operations 596c8960b2 c8d: Fix resolving truncated id to a descriptor 65c6ba1fc4 vendor: golang.org/x/net v0.5.0 ff14f8ef16 Add GetLibHome stub for non-linux OS 824dc51341 vendor: golang.org/x/text v0.6.0 e66e6bb28a vendor: golang.org/x/sys v0.4.0 dcfe23a038 fix blockThreshold full bug 0b83fd3217 ioutils: add regression test for bytespipe deadlock 71fa3b1337 Dockerfile: fix PKG_CONFIG for xx 945704208a hack: name for target ARM architecture not specified 94639eb66f hack: typo in displayed platform name ffd75c2e0c libnetwork: Support IPv6 in arrangeUserFilterRule() (redux) 17723691e5 Revert "libnetwork: Support IPv6 in arrangeUserFilterRule()" 833096ce42 homedir: fallback to user.Current().homeDir if XDG_DATA_HOME/XDG_CONFIG_HOME and HOME are unset af6b5d55db vendor: github.com/moby/ipvs v1.1.0 f53feeea8b vendor: github.com/vishvananda/netns v0.0.2 8be470eea8 libnetwork: don't embed mutex in network c71555f030 libnetwork: return concrete-typed *Endpoint 581f005aad libnetwork: don't embed mutex in endpoint 0e91d2e0e9 libnetwork: return concrete-typed *Sandbox 0425baf883 libnetwork: don't embed mutex in sandbox f96b9bf761 libnetwork: return concrete-typed *Controller ae09fe3da7 libnetwork: don't embed mutex in controller bb5cae2c94 vendor: github.com/vishvananda/netns v0.0.1 102090916e libnetwork: addRedirectRules without reexec 582dd705c1 libnetwork: fwmarker without reexec d6cc02d301 libnetwork: drop (resolver).resolverKey field 50a4951ddc libnetwork: setup DNS resolver without reexec 4733127a04 libnetwork: set default VLAN without reexec 7037c48e58 libnetwork: set IPv6 without reexec 0246332954 libnetwork: create netns without reexec ef161d4aeb libnetwork: Clean up sysfs-based operations 9032e6779d c8d/resolver: Fallback to http for insecure registries c83fce86d4 c8d/resolver: Use hosts from daemon configuration 3a3f98b32b c8d/pull: Don't unpack manually 4a8c4110e3 produce progress events polling ctrd's content.Store 566a2e4c79 libnetwork: Remove iptables nat rule when hairpin is disabled d7deec1993 daemon/c8d: Implement import a254dad2e5 api/import: Guard from Digested instead of Canonical reference 28327f10a2 daemon/import: Extract common logic to api 8dbc5df952 daemon/config: inform the user when the input JSON contains invalid UTF-8 155e8d7d78 update to go1.19.5 d42495033e daemon/config: support alternate (common) unicode encodings using a BOM 8d1e56e210 CONTRIBUTING.md: drop reference to the Derek GitHub bot 0867d3173c cmd/dockerd: use default SIGQUIT behaviour 1dcf7d5b03 daemon/config: clean up tests to use common helper 1e1d326b50 plugins: Move GlobalSpecPaths into LocalRegistry 805aea501a docs: api: synchronise versioned API docs (v1.39 - v1.41) 92cbd1c69e docs: api: synchronise versioned API docs (v1.42) 4f81f9d5ea builder/dockerfile: use example.com for tests 65aa43bf66 libnetwork: use example.com for tests and examples dc30785947 ci: update buildkit to fix integration tests cba3edbc37 daemon/config: group JSON preprocessing steps bb19265ba8 daemon/config: ignore UTF-8 BOM in config JSON 2d397beb00 libnetwork: Support IPv6 in arrangeUserFilterRule() 6ab12ec8f4 rootless: move ./rootless to ./pkg/rootless c1bd5e9144 Use user paths for plugin discovery in rootless mode bffe6d5670 vendor: github.com/containerd/containerd v1.6.15 89fb8b32f6 graphdriver/btrfs: needs kernel headers >= 4.12, not >= 4.7 c12d7b6d21 upgrade to aws sdk go v2 aa80c33360 Dockerfile.*: drop libbtrfs c9d632e485 PACKAGERS: update Btrfs graphdriver dependencies d3778d65fa graphdriver/btrfs: use free wrapper consistently 3208dcabdc graphdriver/btrfs: use kernel UAPI headers 1449c82484 graphdriver/btrfs: drop version information fdcab58ccf Remove reference to "requireRegistryMatch" deb4910c5b integration-cli: Fix hanging TestLogsFollowGoroutines* 1616a09b61 add support for image inspect with containerd-integration bbe6e9e8d1 hack/make: Don't add -buildmode=pie with -race 7e7b0622a6 hack: restore copy_binaries func b37d34307d Clear conntrack entries for published UDP ports 1fdfd45995 Updated outdated docker contributing guidelines link 01fd23b625 Fix volume CreatedAt being altered on initialization d131147a5c use errors.Is() to handle image store errors 83280d44d0 docs: contributing docs update for cross comp e8a82ed24d Dockerfile: add "all" stage to build binaries and extra tools 113e95ec02 ci: add extra steps to check artifacts b565b496ba Dockerfile: rename dev stages 27ba1766e7 ci: use GITHUB_REF and GITHUB_SHA to set version and commit 0b3af098e1 bake: define additional vars 9bcf5bed05 bake: define DESTDIR 491467b0b9 hack: update buildmode pie condition 347a5f68da hack: do not set buildmode pie for statically linked binary e37985f590 hack: use PKG_CONFIG var when checking libdevmapper 84ea9ee0f9 IAmStatic not used anymore 04c90b8cf5 hack: remove containerutility script 8086f40123 Dockerfile: use TARGETPLATFORM to build Docker 722d477bc6 client: defaultHTTPClient(): don't ignore transport errors 31ee158394 client: defaultHTTPClient() accept URL 1de3966b84 image: store: rename vars that collided with types or shadowed vars 2910163df1 daemon/images: imageKey() accept string 040b5bbc52 image: store.restore(): use more structured logs 456ea1bb1d image: deprecate IDFromDigest() a5ebd28797 daemon/graphdriver/devicemapper: simplify Udev log, and update link 155e39187c daemon/logger/gcplogs: remove ensureHomeIfIAmStatic workaround 5fed968b1d api: can marshal and unmarshal when args.fields is empty ad8804885c Update delve version e7d75c8db7 api/types/container: fix validation for UTSMode, UsernsMode, PidMode 018347f802 integration-cli: remove waitInspectWithArgs() 61c434c030 integration-cli: remove inspectMountPointJSON() ffbbe3d103 daemon/graphdriver/btrfs: workaround field rename in btrfs-progs 6.1 0eb7b49a17 daemon: remove some intermediate vars, use struct-literals 288cf20f98 daemon: rename some vars that collided with imports c5d4b6b311 restartmanager: remove RestartManager interface efb97da0da restartmanager: add SetPolicy() to the RestartManager interface d68b68fc43 restartmanager: RestartManager.Cancel(): remove unused error return 42f1be8030 daemon: translateContainerdStartErr(): rename to setExitCodeFromError() 83dd99177f daemon: translateContainerdStartErr(): use exit code 128 as default 46dae0b8bb daemon: translateContainerdStartErr(): use early return for errors 4e750caf96 daemon: translateContainerdStartErr(): extract detecting wrong cmd a756fa60ef daemon: translateContainerdStartErr(): use const/enum for exit-statuses 2cf09c5446 daemon: translateContainerdStartErr(): remove unused cmd argument 087369aeeb daemon: containerStart(): rename return variable 940730093b integration-cli: remove cli.Build(), cli.Inspect() bc0885f364 integration-cli: remove WaitRestart(), un-export WaitForInspectResult() 1bd486666b api/types/container: use strings.Cut() and DRY ab5e69c442 api/types/container: rewrite tests to use subtests and asserts e155cb4fee hostconfig: move unit tests to api/types/container 12df6024db cmd/docker-proxy: add "-v / --version" flag c42b304f62 gha: update buildkit to fix integration tests 799cc143c9 Always use iptables -C to look for rules 205e5278c6 Merge iptables.probe() into iptables.detectIptables() 0787ea8b26 libnetwork: improve logs for DNS failures a959487597 libnetwork/netlabel: remove Key(), Value(), and KeyValue() utils 9015cb7111 libnetwork: controller: rename vars that collided or shadowed 96cfb076ce libnetwork/netlabel: make consts actual consts 36151bd1d7 libnetwork/drivers/bridge: remove "ioctl" fallback code for legacy kernels 6a91e09218 pkg/parsers: use strings.Cut(), and cleanup error-messages 3f935d0e2c daemon/graphdriver/zfs: use strings.Cut, and refactor f95e9b68d6 daemon: use strings.Cut() and cleanup error messages 46f7c92c9a libnetwork: use strings.Cut() and minor refactor 87ca9490b0 libnetwork/datastore: rename var that collided with import ff447f4fd5 runconfig/opts: use strings.Cut() bffb35612c plugin: use strings.Cut() 01365cbd74 libcontainerd/local: use strings.Cut() 6059d38f21 pkg/parsers/operatingsystem: don't use strings.SplitN() 451b8579ef pkg/parsers/kernel: use strings.Cut() and minor refactor 774cd9a26c opts: use strings.Cut() and refactor parseDaemonHost() d3cd746067 integration-cli: use strings.Cut() 38b0c47f37 integration-cli: links: use gotest.tools compare and assert.Check ebda2fa2b5 integration/internal: use strings.Cut() and minor refactor 39f59c3289 daemon/links: use strings.Cut() ad7f1a8dcc daemon/logger: use strings.Cut() 32c4c15f15 daemon/events: use strings.Cut() 5008409b5c cmd/dockerd: use strings.Cut() 19cd5ff164 client: use strings.Cut() 64adea1ce1 volume: use strings.Cut() and minor refactor 19db33afc9 pkg/tarsum: use strings.Cut() and minor refactor 59880cb855 builder/dockerfile: use strings.Cut() 604a2d67b5 builder/remotecontext/git: use strings.Cut() 380a2dfc3a api/types: use strings.Cut() 7841ce781c api/types/time: use strings.Cut() ba9bcf92f6 api/types/filters: use strings.Cut() 6db4af7bd5 graphdriver: windows: use strings.Cut() c545473920 daemon/cluster: use strings.Cut() ec878a3d89 pkg/sysinfo: unify ReadMemInfo implementation 09ea6744fe pkg/sysinfo: remove github.com/docker/go-units dependency 6a516acb2e pkg/system: move memory-info types to pkg/systeminfo 6919b9879b pkg/sysinfo: unify NumCPU implementation c63ea32a17 pkg/ioutils: TempDir: move to pkg/longpath 3314f4ef09 pkg/ioutils: unify TempDir implementation 2e67c85c13 pkg/longpath: fix package GoDoc c4c53659f1 integration-cli: remove uses of ioutils.TempDir 2e67c827bb errdefs: FromStatusCode() don't log "FIXME" debug message 83d7ae76e8 vendor: github.com/containerd/containerd v1.6.14 72ea8cfb43 registry: use http.NewServeMux for tests instead of gorilla/mux 54512f2184 pkg/stringid: optimize performance d20ddb6807 update containerd binary to v1.7.0-beta.1 35cbdc9661 vendor: github.com/containerd/containerd v1.6.13 9300aca2a6 vendor: github.com/Microsoft/hcsshim v0.9.6 19f3448c21 Dockerfile: delve cross build with TARGETPLATFORM ed95e1a9ff Dockerfile: swagger cross build with TARGETPLATFORM 879b023706 Dockerfile: containerutility cross build with TARGETPLATFORM 8d9a357a67 Dockerfile: registry cross build with TARGETPLATFORM a4bc2922c2 Dockerfile: dockercli cross build with TARGETPLATFORM 420591c4a2 Dockerfile: rootlesskit cross build with TARGETPLATFORM f0307892ea Dockerfile: tini cross build with TARGETPLATFORM 5e19d7ec54 Dockerfile: runc cross build with TARGETPLATFORM 81d704d15d Dockerfile: containerd cross build with TARGETPLATFORM b19c11621a Dockerfile: DOCKER_STATIC arg 69c9dfd6d5 Dockerfile: add dummy stage 6cba7d22e9 Dockerfile: add cross compilation helper 0007490b21 vendor: github.com/moby/swarmkit/v2 v2.0.0-20221215132206-0da442b2780f e19dff9285 daemon/config: remove deprecated RootDeprecated field 32b299f63e daemon/config: rename CommonTLSOptions to TLSOptions ef7ab7bde8 cli: remove cli/config package, integrate into cmd/dockerd 6a90113e68 cli: move cobra customizations into cmd/dockerd 3d58b43efe cli: remove unused Errors type 25c3421802 hack: introduce validate/no-module a449f77774 hack: replace go-mod-prepare.sh with wrapper script 388fe4aea8 daemon: drop side effect from registerLinks() 0141c6db81 daemon: don't checkpoint container until registered 00157a42d3 daemon: fix GetContainer() returning (nil, nil) 7b13076f56 daemon: CreateNetwork: remove redundant error check 389dacd6e2 vendor: github.com/tinylib/msgp v1.1.6 24496fe097 vendor: github.com/philhofer/fwd v1.1.2 8fb71ce208 manage image inspect data in backend a8eb15eafb ImageService.ImageHistory(): pass context 0426c76142 List images with multiple since/before filters e214503789 image/store: Use errdefs for errors 28382c58ec container: ViewDB: use logrus.WithError() 6549a270e9 container: ViewDB: return typed system errors 94dea2018e container: ViewDB: GetByPrefix() return typed errors da4d627e79 container: ViewDB: use errdefs for non-existing containers ddaba6d576 daemon: filterByNameIDMatches() fix error handling 8c9a240597 container: use const for null-terminator 200edf8030 libcontainerd/remote: remove stray import comment 12c76d4a15 vendor: github.com/containerd/containerd v1.6.12 4bbc37687e vendor: golang.org/x/net v0.4.0 18f85467e7 docs: add 401 to possible status codes of /auth d331bc3b03 vendor: github.com/containerd/containerd v1.6.11 52bc1ad744 update to go1.19.4 f577f31f50 Add Bjorn Neergaard to maintainers 9da935629e Better not pretend to be an active currator 383e23fd61 Add Kevin Alvarez ("crazy-max") to curators 521b8c02cc builder: handle host-gateway with extra hosts 381fa4afca ci(buildkit): update buildkit ref to fix issue with alpine image a6a539497a distribution: checkSupportedMediaType: allow additional media-types 57b229012a seccomp: block socket calls to AF_VSOCK in default profile eaa74497b8 libnetwork: use go-immutable-radix instead of radix 93fa093122 testing: move fuzzers over from OSS-Fuzz 3d97f1e22d client/list: Handle SharedSize e1c3305015 AUTHORS: regenerate 672383bc56 .mailmap: cleanup and additions b94d1604a9 hack/generate-authors.sh: refactor and simplify 6326ad1729 vendor.mod: remove outdated comment about replaced module 0f0fce5dcc libnetwork/netutils: FindAvailableNetwork(): simplify reading of resolv.conf 0cbe6524db libnetwork/drivers/overlay: getBridgeNamePrefix() simplify reading of resolv.conf 0ef0dab2f7 libnetwork: sandbox.rebuildDNS() make updating sandbox more atomic 806b4fbcad libnetwork: sandbox.rebuildDNS() move variables closer to where they're used d178a71b7c libnetwork: sandbox.rebuildDNS() simplify reading of resolv.conf 05b3356631 libnetwork: sandbox.setupDNS() don't parse host resolv.conf if not needed 08d5e3d0fa libnetwork: sandbox.setupDNS() simplify reading of resolv.conf a44f547343 registry: session: remove unused id fb77973201 pkg/system: move CheckSystemDriveAndRemoveDriveLetter to pkg/archive c4872b4519 pkg/system: CheckSystemDriveAndRemoveDriveLetter: fix error format ad371893f2 pkg/system: move GetLongPathName to integration-cli 9f3e5eead5 pkg/system: deprecate DefaultPathEnv, move to oci dec81e489f daemon/disk_usage: Use context aware singleflight f7e59cbccc Jenkinsfile: Fix dev image build fox ppc64le/s390x archs 85fddc0081 distribution: remove unused RequireSchema2 8feeaecb84 use ad-hoc libtrust key e854b2a459 distribution: use ad-hoc trustkey for tests 5cdd6ab7cd daemon/config: remove TrustKeyPath, and local utilities 1981706196 daemon: remove migrateTrustKeyID() c1756e1b63 update containerd binary to v1.7.0-beta.0 c1a9e82d3e vendor: google.golang.org/grpc v1.50.1 bade242ddd Makefile: always use buildx 426e3926ef ci: define timeout for jobs dc52e08bb5 vendor: github.com/prometheus/client_golang v1.14.0 b2fe29ba79 vendor: github.com/go-logr/logr v1.2.3 7c1b7842c6 vendor: golang.org/x/crypto v0.2.0 efe17dbdb4 vendor: golang.org/x/net v0.2.0 0588a83380 vendor: github.com/opencontainers/runc v1.1.3 38adf7a694 vendor: github.com/klauspost/compress v1.15.12 e1058e6bc3 go.mod: golang_protobuf_extensions v1.0.4 - prevent incompatible versions 62344f515c layer: layerStore.registerWithDescriptor: rename var to prevent shadowing e5e6480694 Add Sam Thibault (sam-thibault) as curator 4769809555 api/server/backend/build: sanitizeRepoAndTags() check for digest 64f9ea1cf5 vendor: github.com/moby/swarmkit/v2 v2.0.0-20221123162438-b17f02f0a054 a5898e3a2d vendor: github.com/prometheus/client_golang v1.13.0 2cc6a86fd3 vendor: github.com/aws/aws-sdk-go v1.37.0 8f1bc3a3b7 vendor: google.golang.org/grpc v1.48.0 b0e20e1b3c vendor: go.uber.org/zap v1.21.0 066fb6c69e vendor: go.uber.org/multierr v1.8.0 b41580d66e vendor: go.uber.org/atomic v1.9.0 341c9e77a8 vendor: github.com/jmespath/go-jmespath v0.4.0 9a8b46518b vendor: google.golang.org/genproto v0.0.0-20220706185917-7780775163c4 1e48b64538 vendor: github.com/fernet/fernet-go v0.0.0-20211208181803-9f70042a33ee 4113a88523 vendor: google.golang.org/protobuf v1.28.1 26c4429f7e vendor: github.com/spf13/cobra v1.6.1 8a46a2a364 Dockerfile: remove hardcoded platforms for vpnkit stage 4f17d17009 ignorefiles: cleanup 61f266f660 vendor: github.com/moby/term v0.0.0-20221120202655-abb19827d345 af8e955e8f hack/go-mod-prepare.sh: find root robustly; make steps transparent 30b0cb0cd4 vendor.mod: add comment about replaced dependency 62a4a45a72 vendor.mod: remove replace for github.com/rexray/gocsi a2d758acc9 vendor: github.com/armon/go-radix v1.0.1-0.20221118154546-54df44f2176c 9f004830a5 hack/validate/vendor: clean up license validation step dbd76848ca hack/validate/vendor: split tidy from vendor 72568286ab hack/vendor.sh: allow running tidy & vendor separately 40069797ef hack: remove obsolete sources for go-autogen 07ba3e35d3 Add additional loggig in case of error of renaming runtimes-old and removing it d591710f82 Handle docker start inside overlayfs ca807edac0 update github.com/tc-hib/go-winres v0.3.0 to fix schema version in manifest 25dc760162 Dockerfile: variant support in frozen-images stage 882ddf4b16 update gotestsum to v1.8.2 b529870558 daemon/config: use strings.Cut(), fix panic in BuilderGCFilter 7ca03c1a79 rootlesskit.installer: s/vendor.conf/vendor.mod/ a2cea992c2 libnetwork/iptables: Fix test panic when execute only one test a6cb8efd81 vendor: golang.org/x/oauth2 v0.1.0 9d7bd47cb6 vendor: golang.org/x/crypto v0.1.0 d9fb730148 update RootlessKit to v1.1.0 08516af897 vendor: github.com/rootless-containers/rootlesskit v1.1.0 be18f92bf4 hack/validate: drop changelog-related steps ec1bb21649 cleanup: drop historical CHANGELOG.md e8ad01594a cleanup: drop .DEREK.yml 4e5c3b82cb vendor: github.com/containerd/containerd v1.6.10 a5979a2106 update containerd binary to v1.6.10 06e4b7d1f8 vendor: github.com/moby/buildkit v0.10.6 40908fca45 fix vendor.mod: add hashicorp/go-multierror as direct dependency 81ccfd44e4 Fix grammar in README.md 6a02afa56f ci(actions): bump outdated actions on Linux 0557569947 ci(actions): migrate to file-based commands 79f9ffd401 vendor: golang.org/x/net v0.1.0 71fa64a272 vendor: golang.org/x/time v0.1.0 4965f19626 vendor: golang.org/x/sync v0.1.0 4bb95eef6f vendor: golang.org/x/sys v0.1.0 67b9f120d5 pkg/archive: switch back to os/exec b7d242f094 builder/remotecontext/gitutils: switch back to os/exec 6a15f40803 libnetwork_test: improve OptionBoltdbWithRandomDBFile a0f9caec99 libnetwork_test: stop controllers at end of test 010077ba0f libnet/d/bridge: fix race condition in test case 7b2308980c libnet/d/bridge: fix bridgeInterface.addresses() c2a087a9f7 libnet/d/bridge: use fresh PortAllocator in tests 1b64f2e28b libnetwork: stop caching global netlink handle d0096bba21 libnetwork_test: overhaul TestParallel 32ace57479 libnetwork_test: isolate tests from each other 0411336b49 libnetwork_test: pass controller into createTestNetwork 9a0953a0a0 libnet/testutils: spawn goroutines in test OS ctxs 07be7b087d libnetwork_test: remove in-container special case e2a89b7ad1 libnet/d/bridge: configure store when opts missing 8a20564847 libnet/datastore: stop sharing defaultScopes singleton 8404507b9b libnet/osl: stop assuming caller thread is clean 0f7c9cd27e Remove uses of deprecated go-digest.NewDigestFromHex, go-digest.Digest.Hex 6174d00c03 replace distribution/digestset with opencontainers/go-digest/digestset bbb1b82232 go.mod: github.com/miekg/dns v1.1.43 d43bc26717 vendor: gotest.tools/v3 v3.4.0 57ba2df970 vendor: github.com/google/go-cmp v0.5.9 to remove golang.org/x/xerrors dep f39b83e232 libnetwork: fix TestParallel "bad file descriptor" fe6706a2ce libnetwork: make tests less dependent on others cea8e9b583 libcontainerd/supervisor: use pkg/pidfile for reading and writing pidfile 14da1bfe40 cmd/dockerd: adjust error message for pidfile changes 7493debe26 pkg/pidfile: implement Read() 7d3e1ad943 pkg/pidfile: Write(): don't automatically create parent directories 81945da0ac pkg/pidfile: Write(): take pid as argument 735e250326 pkg/process: Alive(): fix PID 0, -1, negative values 55d15e9d05 pkg/pidfile, pkg/process: use single implementation for process alive 9d5e754caa move pkg/system: process to a separate package 0040fb93d6 pkg/system: IsProcessZombie() skip conversion to string, use bytes instead 970ad4e3c7 pkg/system: IsProcessZombie() ignore "os.ErrNotExist" errors 8d6da1e100 pkg/system: IsProcessAlive() remove redundant type-cast 2006d9f7d1 cmd/dockerd: Rewrite shutdownDaemon to use context timeout 66a0289081 builder: Don't store context in struct a181a825c8 daemon/start: Revert passing ctx to ctr.Start def549c8f6 imageservice: Add context to various methods 57c2545cd5 vendor: github.com/moby/swarmkit/v2 v2.0.0-20221102165002-6341884e5fc9 1bef9e3fbf Fix containerd task deletion after failed start be1829f63d daemon/logger: fix godoc 407e3a4552 distribution: Error when pulling OCI artifacts 4386e3f7c0 pkg/parsers/kernel: un-export Utsname 775dcab7a2 pkg/parsers/kernel: remove duplicate Package godoc 8d0dc69027 implement docker system df 952e1e62c5 Sort entries in pkg/namesgenerator 5bc17c3e54 Remove long-deprecated "arm" fallback 3d71555a47 Remove errant "runtime.GOARCH" from debug message f9d4589976 Update to Go 1.19.3 to address CVE-2022-41716 1e88fe578e pkg/idtools: remove execCmd() utility 3d73d32499 api/types/filters: add output to example c207947508 integration-cli: DockerPluginSuite: use gotest.tools compare utilities 346a438da8 opts: TestParseLink(): add test-case for legacy format ad4073edc1 daemon: fix docs for config-default constants dcd6c1d2e2 container: make path resolution fns Windows-only 2bdc7fb0a1 daemon: archive in a dedicated mount namespace 7d23c50599 integration: test more copy edge-cases 6750d1bac8 daemon: drop Windows-only code from archive_unix.go 4fd91c3f37 daemon: refactor isOnlineFSOperationPermitted 84cbe29d5b daemon: dupe the archive implementation 60ee6f739f Add reusable chroot and unshare utilities 317d3d10b8 Revert "Use real chroot if daemon is running in a user namespace" 5de229644f pkg/chrootarchive: stop reexec'ing before chroot f2f884a92f pkg/archive: create whiteout temp dir under dest 1f32e3c95d Add integration test for #38995, #43390 6c0aa5b00a Fix the max-concurrent-downloads and max-concurrent-uploads configs documentation 22529b81f8 libnetwork: drop InitOSContext() 7fc29c1435 libnetwork/osl: clean up Linux InvokeFunc() d1e3705c1a libnet/d/overlay: restore thread netns 3e2f0c7a39 libnetwork: fixup thread locking in Linux tests afa41b16ea libnetwork/testutils: restore netns on teardown 04dc007c76 vendor: github.com/containerd/containerd v1.6.9 ac79a02ace update containerd binary to v1.6.9 4f1d1422de integration: download busybox-w32 from GitHub Release 4fdc1bb1fb builder/remotecontext/git: allow building on go1.18 4f43cb660a skip TestImagePullStoredfDigestForOtherRepo() on Windows and rootless 27530efedb Validate digest in repo for pull by digest 92eca900b0 Revert "testutil/registry: remove unused WithStdout(), WithStErr() opts" 201fdf67ac gha: update buildkit to v0.10.5-6-ge27c8e24 to skip some tests 0760c6f4e1 gha: buildkit: make checks more readable cfa2f9a2f2 gha: buildkit: remove "skip-integration-tests" from matrix 67d010bd2c builder: add missing doc comment 94672c89cc builder: fix running git commands on Windows 61acc9939f builder: make git config isolation opt-in 72119f5d9b builder: isolate git from local system 0f7b0897cc builder: explicitly set CWD for all git commands 8deb92d653 builder: modernize TestCheckoutGit 0fc17c42af vendor: github.com/moby/buildkit v0.10.5 51fe170224 daemon: NewDaemon() fix import colliding with local variable 27bd49f4bf daemon: NewDaemon(): replace system.MkdirAll for os.Mkdir where possible 19c5d21e6f daemon: getPluginExecRoot(): pass config 17fb29c9e8 daemon: NewDaemon(): check system requirements early 7ff0f654fb daemon: add TEST_INTEGRATION_USE_SNAPSHOTTER for CI 0a004fd361 daemon: NewDaemon(): log message if containerd snapshotter is enabled 4fa853f5de pkg/fileutils: ReadSymlinkedDirectory: preserve underlying error 24e371c812 pkg/fileutils: improve tests d4d242ba76 pkg/chrootarchive: gofumpt test files dee3f716b3 pkg/chrootarchive: replace system.MkdirAll for os.Mkdir 8a8202fcdc pkg/chrootarchive: TestChrootTarUntar fix copy/paste mistake 0955c88c2e pkg/chrootarchive: use t.TempDir() 30e5333ce3 registry: allow "allow-nondistributable-artifacts" for Docker Hub 69f72417f4 pkg/idtools: remove CanAccess(), and move to daemon ee34a8ac29 pkg/idtools: setPermissions() accept Identity as argument bca90530fa pkg/idtools: simplify if-statement d68fa0382d pkg/idtools: don't use system.Stat() on unix 43d6eb7173 pkg/pidfile: remove PIDFile type, rename New() to Write() dd8983f96c pkg/pidfile: reduce cyclomatic complexity, and small optimisation 4917bcc039 pkg/pidfile: don't ignore all errors when reading file 3ce2a7d026 pkg/pidfile: pkg/pidfile: use strconv instead of fmt.Sprintf(), and unconvert a9fa147a92 daemon/logger/etwlogs: rewrite to use go-winio/pkg/etw f058afc861 pkg/system: synchronize mkdirall() with latest os.MkDirAll() 2e66c0b6f0 pkg/system: create SecurityAttribute only once (Windows) 55ceb5047c pkg/system: update volumePath regex to allow returning earlier cfef1b11e5 pkg/system: compile volume-path regex once, and update GoDoc 264706f804 hack: allow pkg/ to import internal/ packages 3246db3755 fix force remove for cluster volumes 624daf8d9e Change restart delay for Windows service to 15s 3c585e6567 cmd/dockerd: use golang.org/x/sys Service.SetRecoveryActions() 34f459423a Replace overlay2 mount reexec with in-proc impl 6176ab5901 cmd/dockerd: use golang.org/x/sys/windows.SetStdHandle() ffcddc908e cmd/dockerd: replace deprecated windows.IsAnInteractiveSession() 75bdbf02a6 daemon/graphdriver/windows: Remove() don't use defer() in a loop 90431d1857 daemon/graphdriver/windows: use go-winio.GetFileSystemType() e35700eb50 daemon/graphdriver/overlay2: remove deprecated overrideKernelCheck b43a7ac530 integration/plugin: remove deprecated overlay2.override_kernel_check de705907a5 client: remove solaris build-tag, simplify and gofumpt 6fd2d4e772 integration: remove uses of pkg/system.Stat() 0242fef89c integration-cli: remove uses of pkg/system.Stat() 402e0b58ca testutil: use filepath.WalkDir instead of filepath.Walk 3db11af44b libnetwork/drivers/overlay: use filepath.WalkDir instead of filepath.Walk 0ee5518e76 oci: use filepath.WalkDir instead of filepath.Walk ec000ce555 pkg/archive: use filepath.WalkDir instead of filepath.Walk f595434abc daemon/graphdriver/devmapper: use filepath.WalkDir instead of filepath.Walk 8f1bc0bccc daemon/graphdriver/btrfs: use filepath.WalkDir instead of filepath.Walk 1870d5f4aa builder: use filepath.WalkDir instead of filepath.Walk d33428f0bf pkg/system: remove solaris left-over a35bcd01c5 pkg/pidfile: replace uses of windows.Close() with windows.CloseHandle() 89de943401 pkg/pidfile: windows: replace magic consts for golang.org/x/sys consts 11cceea58a pkg/idtools: cleanup errors 8d5b17e939 pkg/idtools: don't use system.MkdirAll() where not needed 2e74e307d0 pkg/idtools: format code with gofumpt 0fc13104e7 pkg/idtools: CanAccess(): reorder checks to allow early return c7c02eea81 pkg/loopback: use ioctl helpers from x/sys/unix 6742f74e0e vendor: golang.org/x/sys v0.0.0-20221006211917-84dc82d7e875 1ffdac4502 layer: gofumpt c3a5641132 layer: use strconv instead of fmt.Sprintf() 1fccb39316 pkg/idtools: remove unused CanAccess() stub for Windows 3b9b5842b3 pkg/idtools: mkdirAs(): move var and comment to where it's used 838fc976c8 integration(-cli): remove some redundant formatting 07b2e4cb79 client: use strconv instead of fmt.Sprintf() 145817a9cf libnetwork: use strconv instead of fmt.Sprintf() 56e64270f3 daemon: use strconv instead of fmt.Sprintf() 533ecb44b1 daemon/logger: use strconv instead of fmt.Sprintf() 7fbf321c2a daemon/graphdriver: use strconv instead of fmt.Sprintf 27aea4956c pkg/idtools: mkdirAs() be more explicit about ignored args on Windows a19ee75bd1 pkg/system: fix missing assertions and use sub-tests for ChTimes a9c5a40087 pkg/system: rename some tests to be more descriptive ab7bc6b7d2 pkg/system: use t.TempDir(), remove some test-utils 7bd051eeec pkg/system: windows: setCTime(): remove redundant conversion 0b8444aa0c pkg/system: rename maxTime and re-use, define unixEpochTime, update GoDoc 2c9684e35c pkg/system: add note about maxTime 247f90c82e pkg/system: move maxTime init() back to Chtimes code 4347080b46 pkg/system: remove Umask() utility 76ce3fd9c9 remove aliases for deprecated pkg/pubsub 89a9d7d650 fix typo c1729f876c remove aliases for deprecated pkg/fsutils ce2abb82c0 remove aliases for deprecated pkg/urlutil a5e1baf3ab vendor: github.com/opencontainers/selinux v1.10.2 1f22b15030 Lock OS threads when exec'ing with Pdeathsig ab677c41ea pkg/system: unconvert 07b1aa822c pkg/system: move GetExitCode() to pkg/idtools, and un-export 5b6b42162b pkg/fsutils: deprecate in favor of containerd/continuity/fs 26659d5eb8 pkg/directory: remove unused MoveToSubdir() utility bd6217bb74 pkg/directory: minor refactor of Size() 0a861e68df pkg/directory: Size(): add back type-casts to account for platform differences 618f26ccbc Volume prune: only prune anonymous volumes by default 7b4e4c08b5 Update to go 1.19.2 to address CVE-2022-2879, CVE-2022-2880, CVE-2022-41715 271243d382 docs: swagger: update description for default builder version c523d6d25c libnetwork: remove some outdated comments 6f435e0bb9 Update awslogs driver batching documentation. 60ace31be0 libnetwork: sandbox.updateDNS(): use const for file permissions f0be4d126d libnetwork: use object-literal for some structs 50a7c67363 libnetwork: fix some whitespace formatting 481185fb8a libnetwork/osl: fix GoDoc formatting 4c0e0979b4 Fix live-restore w/ restart policies + volume refs 3c69b9f2c5 replace pkg/fileutils Matching funcs with github.com/moby/patternmatcher 0249afc523 migrate pkg/pubsub to github.com/moby/pubsub 0440ca07ba pkg/fileutils: remove gotest.tools as dependency, use t.TempDir() f73d72bfdc pkg: replace some README's with GoDoc package descriptions b44b3193d0 oci.DevicesFromPath() switch to use containerd implementation c3a6de9ec8 logger/journald: unlock OS threads e2114731e7 contrib: make dockerd-rootless-setuptool.sh more robust 8a2e1245d4 runconfig, oci, image, layer, distribution: fix empty-lines (revive) f63dea4337 cmd/dockerd: fix empty-lines (revive) cd51c9fafb client: fix empty-lines (revive) f71fe8476a api/server: fix empty-lines (revive) b04f1416f6 opts: fix empty-lines (revive) ddb42f3ad2 daemon: fix empty-lines (revive) 05042ce472 daemon/images: fix empty-lines (revive) 0695a910c6 daemon/logger: fix empty-lines (revive) 9d9cca49b4 daemon/graphdriver: fix empty-lines (revive) 0c7b930952 daemon/cluster: fix empty-lines (revive) 4eb9b5f20e plugin: fix empty-lines (revive) 188724a597 volume: fix empty-lines (revive) e9f1b83a4a testutil: fix empty-lines (revive) 786e6d80ba integration: fix empty-lines (revive) ecb4ed172b builder: fix empty-lines (revive) dc0c2340b8 integration-cli: fix empty-lines (revive) 31441778fa api/types: fix empty-lines (revive) 412c650e05 pkg/*: fix "empty-lines" (revive) 8cd244a318 daemon: replace ErrExtractPointNotDirectory with errdefs c78af57e21 daemon: replace ErrVolumeReadonly with errdefs 0f1eeed5c2 daemon: replace ErrRootFSReadOnly with errdefs e31e9180cd integration-cli: remove isCpCannotCopyReadOnly utility 3564d03b0f daemon: remove getPortMapInfo alias ee5d8f43e1 pkg/signal: remove stubs for deprecated package 4a8b3b8bc5 api/types: remove aliases for deprecated Volume and VolumeUsageData 18ca7546f6 pkg/system: remove stubs for deprecated sequential functions 1e13247d6d pkg/idtools: mkdirAs(): fix infinite loops and repeated "chown" 7f3602f1c9 swagger: update links to logo 5dff494b87 test(pkg/archive): add TestImpliedDirectoryPermissions cd381aea56 libnetwork: fix empty-lines (revive) 267108e113 libnetwork/config: rename ParseConfigOptions() to New() 4831ff9f27 refactor(pkg/archive): factor out createImpliedDirectories helper 09cc2f9d0e libnetwork/config: inline LoadDefaultScopes() 528428919e libnetwork/config: merge DaemonCfg into Config 571baffd59 libnetwork: remove old integration tests 46f4a45769 libnetwork/config: remove ParseConfig() 7d574f5ac6 libnetwork/config: inline ProcessOptions a8a8bd1e42 libnetwork/config: remove "Experimental" and "Debug" options 2f1c382a6d golangci-lint: update to v1.49.0 a5be811269 chore(integration): delete outdated TODO comment 6ca4eda960 daemon: clean up vestiges of ContainerFS 9ce2b30b81 pkg/containerfs: drop ContainerFS type alias e332c41e9d pkg/containerfs: alias ContainerFS to string 95824f2b5f pkg/containerfs: simplify ContainerFS type be4f4644a8 pkg/containerfs: drop Driver abstraction 7014c0d65d pkg/containerfs: drop PathDriver abstraction e37a2d1879 pkg/containerfs: delete Archiver, Driver a7c8fdc55b pkg/containerfs: make ResolveScopedPath a free fn fd16e003fb pkg/containerfs: Remove NewLocalDriver() 4d48c00f94 pkg/containerfs: Trim away Driver interface part 1 489e7b61bf vendor: github.com/moby/sys/sequential v0.5.0 323ab8ef97 vendor: github.com/github.com/coreos/go-systemd v22.4.0 0af7b4961a client: TestNewClientWithOpsFromEnv(): use sub-tests 1a3d8019d1 Remove the OS check when creating a container 3e1601a980 vendor: gotest.tools v3.3.0 49de15cdcc libnetwork/resolvconf: removed unused GetIfChanged() and GetLastModified() 55fd77f724 set ReadHeaderTimeout to address G112: Potential Slowloris Attack (gosec) 6d59619d6e ci: reduce cache throttling limits 511a909ae6 container: remove ViewDB and View interfaces, use concrete types 419c47a80a Jenkinsfile: use Ubuntu 20.04 for DCO stage 5e50d002f1 ci: fix branch filter pattern 8596486743 Jenkinsfile: remove unit-validate stage cd54f31984 Jenkinsfile: remove report bundles creation in unit-validate a354970eaa Jenkinsfile: remove validation steps moved to GHA 85fa72c599 chore: update supported go version to 1.18+ c0fa14e8af vendor: github.com/armon/go-metrics v0.4.1 1d7ceb2fee vendor: github.com/google/btree v1.1.2 2597a71623 client: ignore kernel-memory on API >= 1.42 9b428a3d33 integration-cli: remove TestDockerSuite func 7b9877bd8a ci(test): report summary output 8ad8c6d887 fix debian sysvinit script fails to restart docker daemon when stopped 7602edfd06 ci: reusable dco workflow 5a98363a92 ci(test): dynamic validate matrix 9b71a46899 Revert "validation: temporarily allows changes in integration-cli" 3cb933db9d Update uses of Image platform fields in OCI image-spec a73d78f8d5 ci(test): validate job matrix c7e77dba7f Update some tests for supplementary group permissions f6b695d2fb use consistent alias for gotest.tools/v3/assert/cmp 9f8bd80487 Jenkinsfile: remove steps moved to GitHub Actions 36688496ca ci: fix .windows workflow name 807c849431 ci(test): send coverage to codecov 4c8af0e2f9 ci(test): upload reports 60864229b8 integration-cli: TestPluginInstallImage broken on GitHub Runner b8bf60c590 integration-cli: TestEventsOOM* broken on GitHub Runner df731c745a integration: TestNetworkLoopbackNat is broken on GitHub Runner 2e04be3fb9 ci: gha test workflow for integration and unit test 4dd86a0b33 containerd-integration: prefer error over panic where possible ff81dc3544 api/server/backend/build: remove Tagger and NewTagger 779a5b3029 ImageService.GetImage(): pass context 1eadbdd9fa Update to go 1.19.1 to address CVE-2022-27664, CVE-2022-32190 58413c15cb update to golang 1.19 9dab00a76e daemon/images: manifestMatchesPlatform() punch through context 518179f63e vendor: golang.org/x/net v0.0.0-20220906165146-f3363e06e74c cba36a064d Update to go 1.18.6 to address CVE-2022-27664, CVE-2022-32190 878906630b Wrap local calls to the content and lease service 0f052eb4f5 namesgenerator: remove Valentina Tereshkova 609d87003a pkg/archive: strip "write" bits again on Windows cddaa84777 pkg/archive: remove backward compat hack for go < 1.9 306b8c89e8 linting: host:port in url should be constructed with net.JoinHostPort 31fb92c609 linting: gosec: fix or suppress G112, G114 in test code 561a010161 linting: suppress false positive for G404 (gosec) a33d1f9a7c libnetwork/diagnostic: EnableDiagnostic(): use net.JoinHostPort de4af86e98 daemon: set containerd default snapshotter if none is configured 13f99eb65f vendor: github.com/docker/go-units v0.5.0 1557892c37 api: swagger: add errorDetail to CreateImageInfo d983fa0ebe api: docs: add errorDetail to CreateImageInfo (v1.42) 8b36298d7f pkg/archive: remove tests for CanonicalTarNameForPath d59758450b pkg/archive: make CanonicalTarNameForPath and alias for filepath.ToSlash 509f19f611 replace pkg/system Sequential funcs with moby/sys/sequential a4d081cc17 ci: move buildkit tests to a dedicated workflow 5cfc9c374c validate: address SC2155 (shellcheck) b9fd2cf605 validate: format vendor script with shfmt 6cef06b940 validate: add yamllint validation 91bb776bb8 validate: yamllint: ignore "truthy value should be one of" warnings cc2134ea83 validate: yamllint: set locale in config file f679d8c821 validate: yamllint: use "parsable" output 5f114b65b4 validate: yamllint rename config-file 1d7cd76ee9 Dockerfile: update yamllint to v1.27.1 5e0599cb6e pkg/jsonmessage: export "Stream" interface 2640aec0d7 pkg/system: make IsAbs() platform-agnostic 65fdd10d4e ci(windows): move windows-2019 to another workflow 8e8d9a3650 ci: fix broken workflow 8b748bd326 daemon: stop health checks before deleting task d0731af939 Unskip TestHealthCheckProcessKilled on Windows f7277806c8 vendor: github.com/klauspost/compress v1.15.9 d52ffce38f update containerd binary to v1.6.8 bd98bf38e9 update runc to v1.1.4 5dcaad0dd3 Upgrades buildx to 0.9.1 c500d8824d vendor: github.com/moby/buildkit v0.10.4 6217f8001e gha: temporarily pin BuildKit integration test version a09f8dbe6e daemon: Maintain container exec-inspect invariant 15b8e4a490 integration: synchronize TestWaitConditions 18e322bc7c Lock container when deleting its root directory 6a2f385aea Share logic to create-or-replace a container 4bafaa00aa Refactor libcontainerd to minimize c8d RPCs 57d2d6ef62 Update container OOMKilled flag immediately b75246202a Stop locking container exec store while starting 92d2e12a4d daemon: getInspectData(): reduce cyclomatic complexity 313a7d716d daemon: getInspectData(): skip graphdriver data for snapshotters 74b84d00b3 integration-cli: add utility to check if snapshotters are enabled 0cbb92bcc5 daemon: capture output of killed health checks 549d24b437 libnetwork/drivers/ipvlan: fix missing IpvlanFlag field in config JSON ba138d6201 daemon: don't set ignoreImagesArgsEscaped, managed where not needed e14924570c client: remove deprecated WithDialer() option 7f0cf432e9 client: remove redundant pluginPermissionDenied c3f0cd7457 client: remove deprecated IsErrUnauthorized, IsErrNotImplemented 23b8fcc74d ci: print Windows daemon event log timestamps 4b84a33217 daemon: kill exec process on ctx cancel 774e25de13 info: add driver-type d8d990f2e3 daemon: make the snapshotter configurable e6ee27a541 Allow containerd shim refs in default-runtime 7b7d1132e8 seccomp: allow "bpf", "perf_event_open", gated by CAP_BPF, CAP_PERFMON 360238e9e1 vendor: github.com/hasicorp/memberlist v0.4.0 b58de39ca7 daemon: complete the "--graph" / "-g" deprecation d2276ff3f2 daemon: remove daemon.graphdriver c6eab4077a daemon: info: fillDriverInfo() get driver-name from ImageService 8dd14509d7 ImageService: rename GraphDriverName to StorageDriver ca52e0a244 vendor: github.com/containerd/containerd v1.6.8 f27b74f0f7 Makefile: update buildx to v0.9.0 327c8fc52f daemon/config: use initialized config in more tests 2d7d81bc46 cmd/dockerd: use initialized config in tests b28e66cf4f daemon/config: New(): initialize config with platform-specific defaults 9d74c7ab99 daemon: Mount(): use container's driver information for error-message 239d9c5eda daemon: restore(): remove fallback for legacy containers 6ccda5a041 daemon: restore(): remove platform-check (was used for LCOW) 9a849cc83a introduce GetImageOpts to manage image inspect data in backend a4b28e23cf integration-cli: Correct emptyfs id under c8d 502d3a1fcb containerd/load: Load all platforms 8925f735a1 daemon/config: fix GoDoc for StockRuntimeName 226e07144e cmd/dockerd: initContainerd() use early return 6560e0b136 cmd/dockerd: initContainerD(): clean-up some logs b6b0b0a05f libcontainerd/supervisor: don't write log-level to config file bff3e85625 libcontainerd/supervisor: store location of config-file 7a9791f096 libcontainerd/supervisor: store location of pidFile 89ab14a115 libcontainerd/supervisor: make supervisor adjust OOM score for containerd 1d2a669445 libcontainerd/supervisor: use correct logger 2d511f28f2 libcontainerd/supervisor: platformCleanup(): use canonical socket address 7b0bd43a27 libcontainerd/supervisor: remove unused remote.rootDir 6b7e19ff42 libcontainerd/supervisor: remove unused RWMutex 37a241768d cmd/dockerd: fix some minor issues in Windows implementation df965f51bf pkg/idtools: remove deprecated NewIdentityMapping, UIDS() and GIDS() 9861dd069b vendor: github.com/moby/swarmkit/v2 v2.0.0-20220721174824-48dd89375d0a 7797480eb0 daemon, builder: rename variables that collided with imports acd0aa7d38 api/server/router/image: address some linter warnings e05f614267 vendor buildkit 8e2d9b9 (v0.10 branch) 4e46d9f963 update containerd binary to v1.6.7 7376bf948b vendor: github.com/containerd/containerd v1.6.7 30295c1750 api: swagger: fix invalid example value (API v1.39-v1.41) 9031de6a9b fix minor code unreachability error 5c96365c94 containerd: Unpack loaded images 50fb999bb1 add image load/save support 43956c1bfc api: swagger: document BuildCache fields (API v1.39-v1.41) 5371c889a8 api: swagger: document BuildCache fields (API v1.42) e0db8207f3 api: add BuildCache.Parents for API >= v1.42 ebf339628a api: deprecate BuildCache.Parent in API >= v1.42 e0286d7f4e api/types: add missing GoDoc for BuildCache fields. dc2b34af6a api: swagger: document BuildCache fields. d4579a983e containerd/pull: Use authorization 340711db3d api: add types/volume.ListOptions for a more consistent API f1d71f7cc3 Update golang to 1.18.5 051e604adc libcontainerd/supervisor: simplify logic for disabling CRI plugin d4d5e0ae0c libcontainerd/supervisor: remove unused options 0f5ac7761d api: api/server/router/build: fix API errors 69f077f1aa vendor: github.com/Microsoft/hcsshim v0.9.4 982f09f837 docs: api: add missing "platform" query-arg on create (v1.42) 1000e4ee7d docs: api: add missing "platform" query-arg on create (v1.41) 3dae8e9fc2 api: swagger: add missing "platform" query-arg on create 7ca66e3cfc api: add registry.EncodeAuthConfig 7819811835 api: add registry.DecodeAuthConfig, registry.DecodeAuthConfigBody e3a7a1c6ae client: linting: fix "invalid auth header" error 360d38adb1 daemon/containerd: use types/registry.AuthConfig 2b7416ef34 testutil, integration: use types/registry.AuthConfig d817f4dcee registry: use types/registry.AuthConfig 55d1a56826 plugin: use types/registry.AuthConfig 04c339a12b distribution: use types/registry.AuthConfig a02abca49a daemon: use types/registry.AuthConfig 39f3adc079 daemon/images: use types/registry.AuthConfig 05eacf92fe daemon/cluster: use types/registry.AuthConfig eaf1a604f2 client: use types/registry.AuthConfig d8a43399a8 api/server/router: use types/registry.AuthConfig 818ee96219 api/types: move AuthConfig to registry types 857cb260c7 api: add const for 'X-Registry-Auth' 26c65447df Implement ImageDelete for containerd f4c0ec8ffc integration-cli: Make service process live forever 547da0d575 daemon: support other containerd runtimes (MVP) 31f654a704 Fix file capabilities droping in Dockerfile ba2ff69894 libcontainerd: switch generated containerd.toml to v2 (v1 is deprecated) ef5b279887 logger/journald: implement --follow correctly e278d3f185 logger/*: fix reading w/ non-monotonic timestamps 342b44bf20 logger/journald: rewrite reader w/o cursors 3e8405aa82 logger/journald: refactor cgo out of business logic 7ff4b64319 logger/journald: simplify control flow f7fe2c2290 logger/journald: follow the thread-safety rules 12744335c0 logger/journald: simplify build constraints 0e0b300a1c Fix `make BIND_DIR=. DOCKER_SYSTEMD=1 shell` a61f7abf5a integration-cli: Enable TestGetContainersAttachWebsocket for Windows 1213881712 libnetwork: refactor networkdb test implementation 6cc644abef integration-cli: Remove unnecessary Windows-only code 7bdc0a6291 compute image's shared size a1bc0a6d79 daemon/containerd: add more TODO's for image list, and reformat f499c6b9ec Test: wait for network changes in TestNetworkDBNodeJoinLeaveIteration 669fbed1ac daemon/containerd: validate image filters 4d3b32bf3d add support for since, before, labels images filters 0e9a66d35a logger/journald: remove journald_compat (for systemd < 209) 75577fe7a8 logger/journald: fix SA4011: ineffective break statement a290f5d04c state/Wait: Fix race when reading exit status 5571d5139b integration: TestWaitRestartedContainer 498803bec9 daemon/restart: Don't mutate AutoRemove when restarting c492105b8f integration: Add TestContainerWithAutoRemoveCanBeRestarted 67c36d5d6e Windows: Re-create custom NAT networks after restart if missing from HNS a46ce37d25 compute image VirtualSize 9c8b0b6050 daemon/containerd: split methods to separate files e4cd1933c6 daemon/containerd: ImageService: rename receiver 91bd9a6642 daemon/containerd: change alias for oci-specs to match existing code b529fe0995 daemon/images: fix some linting issues b94f7157ca daemon/images: rename images.go to image_list.go for consistency 046b3fc5dd daemon/images: move SquashImage to its own file 6e0e5d7a31 daemon/images: rename variables that collided with imports 2527e6dd09 daemon/containerd: ImageService: remove unused LookupImage() 7b510fda0c daemon: ImageService: remove unused Map() method ff3d2eb589 Add Cory Snider (corhere) as maintainer 9464898b47 libnetwork: skip firewalld management for rootless 7d74269c0d Create the containerd image service 4f08346686 fix formatting of "nolint" tags for go1.19 34b8670b1a update golang to 1.18.4 68bf777ece daemon: remove deprecated fields and flags for cluster-advertise 494dadb8a3 api/types: remove deprecated fields for cluster-advertise f02cdb50be api/types/volume: remove deprecated types efb1f141a4 api/types/container: remove deprecated types 10829dd222 daemon: NewDaemon(): fail early on non-supported platforms 1de20b2012 API: bump version to 1.43 264b41fb9e docs: add API v1.42 e258d66f17 profiles: seccomp: add syscalls related to PKU in default policy 9cd67df5b2 timestamp: clarify doc for ParseTimestamp ee230d8fdd client: errors: remove dead code 52c1a2fae8 gofmt GoDoc comments with go1.19 e4e819b49c pkg/parsers/operatingsystem: fix stray import 6668801d40 gofmt files 5b0eb69635 Extract ImageService interface from the image service 98ce26624b maintainers: Add Paweł Gronowski as curator 4336271b57 maintainers: Add Bruno Sousa as curator ab6b40e5a9 Add github issue forms b1a6d5388d libnetwork: macvlan: reduce use of const for driver name aca80d1cda libnetwork: ipvlan: reduce use of const for driver name dddb4d25d2 libnetwork: macvlan: cleanup parseNetworkGenericOptions 1992190162 libnetwork: macvlan: make configuration.fromOptions a constructor 99bde59229 libnetwork: ipvlan: cleanup parseNetworkGenericOptions 1a1a885423 libnetwork: ipvlan: make configuration.fromOptions a constructor 4e39cdd9bb libnetwork: ipvlan: move validation into parseNetworkOptions() 9f0cb20d9f libnetwork: macvlan: move validation into parseNetworkOptions() b768d69c04 libnetwork: macvlan: processIPAM(): simplify 5d13b38479 libnetwork: macvlan: processIPAM(): remove unused arg and error return 798021af9f libnetwork: macvlan: set network ID as part of parseNetworkOptions 35cba9b1c9 libnetwork: ipvlan: processIPAM(): simplify 8d067bbdb4 libnetwork: ipvlan: processIPAM(): remove unused arg and error return a893540b66 libnetwork: ipvlan: set network ID as part of parseNetworkOptions afeb4c7a6e libnetwork: macvlan: use single ipSubnet type d3e3d43482 libnetwork: ipvlan: use single ipSubnet type 9fba1514d2 libnetwork: macvlan: clean up some consts aec4853498 libnetwork: ipvlan: clean up some consts 33121d3d45 introduce Containerd-snapshotter feature flag 2293de1c82 update runc binary to v1.1.3 af7236f85a Check ipt options before looking for ip6t 25345f2c04 AdditionalGids must include effective group ID 7b153b9e28 api: set default "Builder-Version" to "2" (BuildKit) on Linux 70dc392bfa Use hashicorp/go-memdb instead of truncindex 8d5eebcc6e vendor: github.com/bsphere/le_go v0.0.0-20200109081728-fc06dab2caa8 Bumping docker-cli to version v24.0.0, which comprises the following commits: fb6ae356c vendor: github.com/docker/docker v24.0.0-rc.3 de93c9b26 vendor: github.com/docker/distribution v2.8.2 cafdcf283 cli-plugins/manager: fix deprecation comment of Metadata.Experimental 3768143c2 Update tag docs to clarify name 52ac1a974 docs: update description for docker -H flag 58f37f630 vendor: github.com/docker/docker v24.0.0-rc.2 4f97f5599 vendor: github.com/docker/docker v24.0.0-rc.1.0.20230505222407-8d9a40a82034 0428418d6 vendor: github.com/containerd/containerd v1.6.21 05bf6fff2 vendor: github.com/opencontainers/runc v1.1.7 44fce0706 vendor: github.com/mattn/go-runewidth v0.0.14 fd0621d0f update go to go1.20.4 155f7d9e2 cli/command/system: add utilities for printing 1e89037d7 cli/command/system: prettyInfo: accept Streams 8cfefc6ea cli/command/system: prettyPrintServerInfo: accept Streams ba7a200f0 cli/command/system: prettyPrintClientInfo: accept Streams 73938cd61 cli/command/system: printSwarmInfo(): accept io.Writer 2d0ea86b0 cli/command/system: use io.Writer for printing warnings be6f4cd56 cli/command/system: prettyPrintServerInfo: refactor printing "runtimes" 1d70f7cdb cli/command/system: prettyPrintServerInfo: rename var that collided with import 416e55bed github.com/docker/cli/cli/command/system: add BenchmarkPrettyPrintInfo f233becf9 vendor: github.com/moby/term v0.5.0 bd2c26328 vendor: github.com/docker/docker v24.0.0-rc.1 f02301ab5 remove uses of deprecated VirtualSize field eeaaf5d01 e2e: Update alpine to 3.17.2 4569378ca e2e: Match notary server version with the main Dockerfile ec5504a83 test/e2e: Use "frozen" tag to reference test images 41b6ec07c e2e: Skip tests with platform-specific digests on other platforms 962e22c31 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230406225228-75e92ce14ff7 72192c75c vendor: github.com/moby/buildkit v0.11.6 c177e2060 vendor: github.com/creack/pty v1.1.18 e693e7f3b Docs freshness updates 1c1fca4eb docs: update deprecation status of "overlay" and "AuFS" c180202ce cli/command: remove deprecated Stream types 4e19b8128 docs: update deprecation status for overlay2.override_kernel_check 0dec5d20a volumes: prune: add --all / -a option ff7f76af7 Handle empty DOCKER_BUILDKIT like unset 271b9667e Swarm: allow additional properties in `build` e2bfd2199 cli/compose: add schema 3.11 (no changes with 3.10 yet) 6c4c3c23c build(deps): bump docker/bake-action from 2 to 3 8ef8f4131 man/dockerd.8: assorted formatting fixes e3cb324ed man/dockerd.8: escape asterisks and underscores a4bcabc7d vendor: github.com/docker/docker v24.0.0-beta.2 0286e36bb vendor: github.com/opencontainers/runc v1.1.6 1f1a6c5a8 vendor: golang.org/x/net v0.8.0 6e2163a71 vendor: golang.org/x/text v0.8.0 551d519b5 vendor: golang.org/x/term v0.6.0 c97c3211b docs: deprecation: OOM-score adjust for the daemon 88be16cb5 cli/command/container: implement `docker run --annotation` 6f415d240 docs: update deprecation status of BuildKit "buildInfo" for v24.0.0 da3871fd8 cli/command/system: printServerWarnings: use client API version from info be307c579 cli/command/system: prettyPrintServerInfo: move out collecting username 71fde20e1 cli/command/system: prettyPrintServerInfo: simplify username 375b17a31 docker info: don't print "registry" (IndexServerAddress) b87ed3435 cli/command: deprecate EncodeAuthToBase64 5d856a5d9 cli/command/container: pullImage: use DisplayJSONMessagesToStream utility b9b98aee5 cli/command/container/create: pullImage(): use RetrieveAuthTokenFromImage a27acd62b cli/command/container/create: pullImage() remove intermediate vars e0b47cc2c cli/command/image: imagePullPrivileged: remove intermediate variables 372bb56ad cli/command: replace EncodeAuthToBase64 for registry.EncodeAuthConfig 534bfc230 cli/command/registry: remove intermediate var that collided 5e76d41bf cli/command: ConfigureAuth: fix links to related tickets 68d791e56 cli/command: ConfigureAuth: trim whitespace both for username and password d0ec8fa5c cli/command: ConfigureAuth: fix terminal state not being restored on error c846428cb docs: update dockerd usage output for new proxy-options c730a8eb9 docs/reference: dockerd: remove default oom-score-adjust c20974361 docs/reference: dockerd: update seccomp flag description 32bc91200 docs/reference: dockerd: use table for env-vars 370174800 docs/reference: use table for proxy env-vars 879e0804a docs/reference: reformat env-vars table, and simplify 4a863df57 docs/reference: remove mention of DOCKER_NOWARN_KERNEL_VERSION c388fe4de cli: make cobra templates a const 341c843ac ci: remove fetch depth 0 for validate jobs 25ed7847e ci: add validation for generated markdown 04df70025 docs: deprecated: fix version (23.1.0 -> 24.0.0) 5bd359132 cli/command: fix documentation for ResolveAuthConfig 8ee771114 docker info: include Client Version and "platform name" 3347d7b5a cli/command/system: add newClientVersion() utility 3124e779c cli/command/system: clientVersion: make all fields "omitempty" 9202bef4a cli/command/system: add platformInfo type, and fix "omitempty" 5d37acdde cli/command/system:remove versionInfo.ServerOK() utility 5d33b7276 docs: update engine versions in some examples 23bd746c4 fix docker version --format=json not outputting json format 80640bca7 cli/command/system: make default version template a const 46234b82e fix docker info --format=json not outputting json format 1aaa179d9 cli/command/formatter: export JSONFormat const 37e02ff21 docker ps: print warning if both --format and --quiet are set f52290559 docker ps: always use --quiet, also combined with --format f36e4b094 cli/command/container: rename vars that collided c25b8f803 vendor: github.com/spf13/cobra v1.7.0 ca1d0eb90 Update version to v24.0.0-dev 08a794dc0 docs: regenerate markdown docs 37f234fbe scripts/docs/generate-md.sh: fix location of generate code 591bead14 update go to go1.20.3 683e4bf0c Fix plugin completion parsing for plugins using `ShellCompDirectiveFilterFileExt` 808032652 cli/streams: minor refactoring and docs touch-ups 66a1c3bab cli/config/configfile: remove deprecated StackOrchestrator field 328fac3a6 cli/context/docker: remove deprecated Endpoint.TLSPassword aace828bb cli/flags: remove deprecated CommonOptions, NewCommonOptions 8b418be6d cli/context/store: remove deprecated error-utilities 3405eb1f4 cli/command/formatter: remove deprecated KubernetesEndpoint 817897f89 cli/command: fix deprecation comments for Stream types 89583b92b improve plugins listing performance fc560038e vendor: github.com/docker/docker v24.0.0-beta.1 e14f5fc1a revert "improve plugins discovery performance" 05cffcbed vendor: github.com/docker/docker 7c93e4a09be1 (v24.0.0-dev) a36a54d3c vendor: github.com/containerd/containerd v1.6.20 f4b22fb6c vendor: github.com/opencontainers/image-spec v1.1.0-rc2.0.20221005185240-3a7f492d3f1b eb392ff4c cp: Do not block transfer on writing to terminal 7189716d5 replace uses of deprecated api/types.AuthConfig bfa79fd75 vendor: github.com/docker/docker master (v24.0.0-dev) e86d2f411 vendor: github.com/moby/buildkit v0.11.5 cd9c6a4c0 vendor: github.com/klauspost/compress v1.16.3 5843fbd5f vendor: github.com/imdario/mergo v0.3.13 149d28963 vendor: golang.org/x/sys v0.6.0 6dca335d0 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230315203717-e28e8ba9bc83 4389c966f vendor: github.com/opencontainers/runc v1.1.5 a79828287 update to go1.20.2 b8747b0f9 update golangci-lint to v1.52.2 399ded9b9 internal/test: FakeCli: remove name for unused arg (revive) 20a70cb53 internal/test/notary: remove name for unused arg (revive) 90380d957 cli/connhelper/commandconn: remove name for unused arg (revive) dd6ede210 cli/config/configfile: mockNativeStore: remove name for unused arg (revive) 7c8680c69 cli/compose/schema: remove name for unused arg (revive) 6355bcee6 cli/compose/convert: fakeClient: remove name for unused arg (revive) 607f290f6 cli/command/volume: remove name for unused arg (revive) 546cf6d98 cli/command/trust: fakeClient: remove name for unused arg (revive) b32b28041 cli/command/task: fakeClient: remove name for unused arg (revive) 40a51d554 cli/command/swarm: fakeClient: remove name for unused arg (revive) b0d0b0efc cli/command/stack: fakeClient: remove name for unused arg (revive) c69640d8c cli/command/service: fakeClient: remove name for unused arg (revive) 5254081fd cli/command/registry: fakeClient: remove name for unused arg (revive) da3416c02 cli/command/plugin: fakeClient: remove name for unused arg (revive) 625988c3a cli/command/node: fakeClient: remove name for unused arg (revive) 92d9e3bf6 cli/command/network: fakeClient: remove name for unused arg (revive) 316c4992c cli/command/image: fakeClient: remove name for unused arg (revive) ae5a86bb8 cli/command/image/build: remove name for unused arg (revive) 38ef40ee7 cli/command/idresolver: fakeClient: remove name for unused arg (revive) 45b5676ac cli/command/container: fakeClient: remove name for unused arg (revive) 5563c5a91 cli/command/checkpoint: fakeClient: remove name for unused arg (revive) 9dd012aa5 cli/command/secret: fakeClient: include context in fake client (revive) 66c66bdce cli/command/config: fakeClient: include context in fake client (revive) ac024a4d8 internal/test/network: FakeClient: embed interface to remove boilerplating a2d532819 cli/trust: remove name for unused args (revive) f5fad186c opts: NormalizeCapability(): fix redefinition of the built-in function (revive) 9252fae83 cli/registry/client: AuthorizeRequest(): remove name for unused arg (revive) 92506afd4 cli/command/service/progress: remove name for unused parameter (revive) c3d7f167b cli/command: RunPrune(): remove name for unused "all" parameter (revive) b4aff3a14 cli/command/completion: NoComplete(): remove unused argument (revive) f08252c10 cli/command/stack: deprecate now obsolete wrappers 78c474539 cli/command/context: remove redundant if ...; err != nil check (revive) be97731f1 cli/command/container: fix redefinition of the built-in function close (revive) b9a1b0928 cp: Make gocyclo happy 90b7bc36d cp: Reduce number of progress updates efd011b79 cp: reduce branching in progress printer e4436853e gha: align stray go 1.19.4 version 9335690a6 Fix grammar in docs by adding omitted word ccae6e929 cp: Improve tty flashing on progress updates f27927d93 cp: do not emit progress if stderr is not a term a39958846 vendor: github.com/docker/docker v23.0.2 c39c711a1 load plugin command stubs when required 62f2358b9 improve plugins discovery performance bebdb6fa2 ci: enhanced build workflow bec5d37e9 don't use null values in the bake definition b201ce5ef e2e: update notary certificates c6c33380d e2e: increase tests certificates duration (10 years) d234a81de bake target to generate certs for e2e tets 3ce95c7af Dockerfile: build binary if no target specified b854eff30 Dockerfile: align go version 0ba820ed0 cli/trust: remove special handling for "plugin" Class a3d56e7d0 cli/command: remove deprecated ElectAuthServer() 742881fc5 cli/command: fix imports formatting e3fa7280a cli/command: ElectAuthServer: fix deprecation comment db827d583 cli/command/volume: suppress err output in tests aa0aa4a6d Add bash completion for available plugins 8805f8ea2 build(deps): bump actions/setup-go from 3 to 4 e60c748c1 vendor: github.com/moby/buildkit v0.11.4 6c8cc226f vendor: google.golang.org/grpc v1.50.1 d213548bd vendor: golang.org/x/net v0.7.0 3a0d492d1 vendor: golang.org/x/term v0.5.0 f40bbf4f7 vendor: golang.org/x/time v0.3.0 a85537d34 vendor: golang.org/x/text v0.7.0 3e9c6e84c vendor: golang.org/x/sys v0.5.0 ca8783ef4 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230309194213-a745a8755ce3 33806760a vendor: github.com/containerd/containerd v1.6.19 71e495aa5 vendor: github.com/docker/docker v23.0.1 74c4ed417 Dockerfile: update buildx to v0.10.4 23da1cec6 update to go1.19.7 012b77952 stack: Change unexpected environment variable error a47058bbd stack/loader: Ignore cmd.exe special env variables 25ebf0ec9 connhelper: Allow socket path when using SSH 973333448 Don't automatically request size if `--size` was explicitly set to `false` 8bc1aacea docs: Deprecate buildkit's build information 89687d5b3 formatter: Consider empty RepoTags and RepoDigests as dangling a1953e19b test/cli: Use empty array as empty output of images/json e636747a1 docs: drop dated comments about graphdrivers dac79b19a Dockerfile: update buildx to v0.10.3 release notes: https://github.com/docker/buildx/releases/tag/v0.10.3 c2487c299 context: avoid corrupt file writes e921e103a update to go1.19.6 d2f726d5a changed the container name in docker stats page de9b47ae6 Fix styling of arguments 0f3959868 ci: fix branch filter pattern 4254cd19b MAINTAINERS: add myself as curator bbebebaed vendor: github.com/docker/docker v23.0.0 5195db1ff vendor: github.com/containerd/containerd v1.6.16 9b5ceb52b cli/command/container: exit 126 on EISDIR error 56051b84b Fix bad ThrottleDevice path 74973adaa cli/command: embed "Streams" interface in "Cli" 2753057c4 contrib/completion: bash `nounset` mode fixes Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
d38fffa859 |
moby: update to v23.0.6
Bumping moby to version v23.0.6-2-gcb3fd005d4, which comprises the following commits: e94c22cc39 vendor: github.com/docker/distribution v2.8.2 e73310d8c9 update runc binary to v1.1.7 3f0402cb68 update runc binary to v1.1.6 edadebe177 update containerd binary to v1.6.21 14661fc010 vendor: github.com/containerd/containerd v1.6.21 e00f6efb20 Vendor containerd 1.6.x with the readonly mount fix bd4620f6ee vendor: github.com/containerd/containerd v1.6.20 d06cf03729 vendor: re-vendor to add missing file cf7742ea7c vendor: opencontainers/image-spec v1.1.0-rc2.0.20221005185240-3a7f492d3f1b 382e9ebbf6 vendor: github.com/containerd/ttrpc v1.1.1 e0843f264d Update `github.com/containerd/containerd` to the HEAD of `release/1.6` and vendor 94fcd2d2ef d/graphdriver/copy: support src fs w/o xattr support 70dbd2c870 [23.0] update go to go1.19.9 fe0a414613 Use the image service instead of the reference store for tagging 40ec0eb9fe vendor: github.com/opencontainers/runc v1.1.5 227d3f39a3 daemon: set docker0 subpool as the IPAM pool c82be35412 libnetwork: clean up inDelete network atomically ccccb7a170 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230315203717-e28e8ba9bc83 8a6bec6e16 Silence GRPC logs unless our log level is debug 844fd50c67 Added timeout to validate job in github actions 8cec683574 Dockerfile: update xx to 1.2.1 7ff53c3c78 Update delve version 4d57ee692d TestLogs: Increase stop check poll timeout on Windows 838d5ea058 chore: use http constants to replace numbers 61d084593c client: deprecate NewClient properly 28b694d32d awslogs: fix non-blocking log drop bug 3731ce10d4 Fix argument quoting bugs in dockerd-rootless.sh 23774ada04 vendor: github.com/moby/buildkit v0.10.7-0.20230412161310-d52b2d584242 9277e64444 vendor: github.com/ishidawataru/sctp v0.0.0-20230406120618-7ff4192f6ff2 09fbbd5677 docker-rootless-setuptools.sh: improve readability of messages d3e52936c3 [23.0] update go to go1.19.8 a0a597cbbe [23.0] fix vendor.mod: add hashicorp/go-multierror as direct dependency 063d3a6f1a daemon: let libnetwork assign default bridge IPAM 389e18081d update containerd binary to v1.6.20 348544e6e8 libnet/d/windows: log EnableInternalDNS val after setting it 3923e302a4 update runc binary to v1.1.5 f3946c14fe integration-cli: Enable TestExecStartFails on Windows b87f7f18b8 libnet/d/overlay: insert the input-drop rule c6bf3071fe StartWithLogFile: Fix d.cmd race 7f49ca259b TestDaemonRestartKillContainers: Fix loop capture 98cbcb8003 libnet/d/overlay: add BPF-powered VNI matcher 5c5fac2374 libnet/d/overlay: extract VNI match rule builder c492a22287 libn/d/overlay: enforce encryption on sandbox init 018edb0284 libnet/d/overlay: document some encryption code Bumping libnetwork to version v0.7.0-dev.3-1872-g3f004841, which comprises the following commits: dbbf124d Clean up inDelete network atomically d4d07f4a d/windows: log EnableInternalDNS val after setting it 91f0d508 update maintainers c5aa85f9 drivers/overlay: insert the input-drop rule bef66946 drivers/overlay: appease the old deprecated linter a94fe95b drivers/overlay: add BPF-powered VNI matcher e0376b6c drivers/overlay: extract VNI match rule builder f1945d37 drivers/overlay: enforce encryption on sandbox init 97442407 drivers/overlay: document some encryption code Bumping docker-cli to version v23.0.6-8-g44a7d9537, which comprises the following commits: a98af2b39 vendor: github.com/docker/distribution v2.8.2 6f353c800 cli-plugins/manager: fix deprecation comment of Metadata.Experimental 63b205048 Update tag docs to clarify name c76773b19 docs: update description for docker -H flag c769f2079 [23.0] update go to go1.19.9 802f17488 [23.0] vendor: github.com/docker/docker v23.0.5 498743aed [23.0] vendor: github.com/moby/swarmkit/v2 v2.0.0-20230315203717-e28e8ba9bc83 fde09d1d8 [23.0] vendor: github.com/opencontainers/runc v1.1.5 3cda7c30c [23.0] vendor: github.com/docker/docker v23.0.4 6c0f9022c Docs freshness updates 17357a778 build(deps): bump docker/bake-action from 2 to 3 2cf68537d ci: remove fetch depth 0 for validate jobs 4a4291708 ci: add validation for generated markdown f914316a9 fix docker version --format=json not outputting json format 9dfe5a29e cli/command/system: make default version template a const 2c1fde223 fix docker info --format=json not outputting json format 99124087e cli/command/formatter: export JSONFormat const 86e79b55e volumes: prune: add --all / -a option ada43812d cli/command/volume: suppress err output in tests c648e0b06 Handle empty DOCKER_BUILDKIT like unset b6cd3c85b docs: update dockerd usage output for new proxy-options aa85421ff docs/reference: dockerd: remove default oom-score-adjust 6bc4bf4f0 docs/reference: dockerd: update seccomp flag description 8a35f92ff docs/reference: dockerd: use table for env-vars 2cb152c41 docs/reference: use table for proxy env-vars 623da1997 docs/reference: reformat env-vars table, and simplify e76242fff docs/reference: remove mention of DOCKER_NOWARN_KERNEL_VERSION 4b4d7e2b4 cli/command: fix documentation for ResolveAuthConfig e67e5559d docs: deprecated: fix version (23.1.0 -> 24.0.0) a8e3b4b85 docs: update engine versions in some examples f88c159c7 [23.0] vendor: github.com/docker/docker v23.0.3 6c052fcda vendor: github.com/docker/docker v23.0.2 079e80889 vendor: golang.org/x/net v0.7.0 ff448ff45 vendor: golang.org/x/term v0.5.0 476933b68 vendor: golang.org/x/time v0.3.0 6131fe9e4 vendor: golang.org/x/text v0.7.0 bbc791ed7 vendor: golang.org/x/sys v0.5.0 dd6f77bba vendor: github.com/moby/swarmkit/v2 v2.0.0-20230309194213-a745a8755ce3 cb338ec97 vendor: github.com/containerd/containerd v1.6.19 ffafb38e3 vendor: github.com/docker/docker v23.0.1 a763e5114 Fix plugin completion parsing for plugins using `ShellCompDirectiveFilterFileExt` 3c7de6454 Fix grammar in docs by adding omitted word 3d0d576af ci: enhanced build workflow 2609bd23f docs: regenerate markdown docs 5fd2c0850 scripts/docs/generate-md.sh: fix location of generate code 5cd7710a0 update go to go1.19.8 209e9c0c1 cp: Do not block transfer on writing to terminal ce68ce7ae cp: Make gocyclo happy c28cb35c4 cp: Reduce number of progress updates 948dfa91c cp: reduce branching in progress printer f813c9639 cp: Improve tty flashing on progress updates 97d91f13a cp: do not emit progress if stderr is not a term 6efc4eacc cli/command: fix deprecation comments for Stream types c7cdab58d improve plugins listing performance d93d78588 load plugin command stubs when required 8e38271f2 gha: align stray go 1.19.4 version f6643207a don't use null values in the bake definition f381e0842 Dockerfile: align go version Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |