MIRRORS/meta-virtualization
1
0
Fork 0
mirror of git://git.yoctoproject.org/meta-virtualization.git synced 2025-07-19 12:50:22 +02:00
Code Issues Actions Packages Projects Releases Wiki Activity
2,409 Commits 38 Branches 0 Tags 9.2 MiB
769cf8be74
Commit Graph

1023 Commits

Author SHA1 Message Date
Bruce Ashfield
769cf8be74 criu: patch cleanups 
Adding Upstream-Status and reformatting some of the long logs.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2024-03-15 17:17:20 +00:00
Tim Orling
8dd5ca2900 criu: pycriu RDEPENDS on python3-fcntl 
Signed-off-by: Tim Orling <tim.orling@konsulko.com>
 2024-03-15 17:17:20 +00:00
Tim Orling
c735cd2ec9 criu: pycriu RDEPENDS on python3-ctypes 
Signed-off-by: Tim Orling <tim.orling@konsulko.com>
 2024-03-15 17:17:20 +00:00
Tim Orling
6f7a7d62cb criu: pycriu RDEPENDS on python3-protobuf 
Signed-off-by: Tim Orling <tim.orling@konsulko.com>
 2024-03-15 17:17:20 +00:00
Tim Orling
227452ab4b criu: cleanup; export USRBINPATH PEP517_INSTALL_PYTHON 
Signed-off-by: Tim Orling <tim.orling@konsulko.com>
 2024-03-15 17:17:20 +00:00
Tim Orling
cd11ca9de3 criu: fix pycriu build of wheel 
Inherit python_setuptools_build_meta instead of setuptools3, as
this is the build-backend declared in the pyproject.toml

We seem to need python3-protobuf-native as a DEPENDS, but
then the dependency check complains because our version in meta-python
is python3-protobuf_4.25.bb

Workaround this (for now?) by telling python3 -m build to --skip-dependency-check

This allows criu to _build_. Whether it is functional and proper is a different
story.

Signed-off-by: Tim Orling <tim.orling@konsulko.com>
 2024-03-15 17:17:19 +00:00
Tim Orling
9b4acf5185 criu: build and install wheels 
Mimic what we do with python_pep517.bbclass in do_compile (python3 -m build) and
do_install (python3 -m install) to build and install wheels and avoid the heavy
handed pip install usage.

FIXME: even though lib/pycriu/version.py is properly being dynamically generated,
       setuptools/config/expand.py is failing to detect the __version__ attr.

Signed-off-by: Tim Orling <tim.orling@konsulko.com>
 2024-03-15 17:17:19 +00:00
Bruce Ashfield
6509f2f6e1 criu: update to v3.19 
Bumping criu to version v3.19, which comprises the following commits:

    f8b14286b criu: Version 3.19 (Bronze Peacock)
    f104b3d6d Makefile: introduce ARCHCFLAGS for arch specific cflags
    0b62f4267 lib: use separate packages for pycriu and crit
    97b8b659c zdtm: cgroup_ifpriomap: Improve skip check's robustness.
    e076c11e2 ci: fix codespell errors
    41938f14b zdtm/static: test the offset migration of ELF files
    29026496d zdtm/lib: add missing signal.h header
    a77185dae files-reg: don't change the file pos in get_build_id
    5d4179ddb criu/proc_parse: refactor the eventpoll parser
    cfaacfb58 zdtm/thread_different_uid_gid: remove the redundant check
    36a84751e zdtm/cow00: fix typo
    48d6a59a2 arch/x86: remove the redundant check
    45670b655 apparmor: remove the redundant check
    5e8d7dc94 tun: don't parse buffers that have not been filled with data
    4c9d23d33 util: allow to run criu under strace
    c9fdd355f pie: Mark __export_*() functions as externally_visible
    5d6c8bc58 clang-format: disable column limit constraint
    81a30c320 zdtm/memfd04: check execveat on memfd that has memory mappings
    e86e8dac0 memfd: don't reopen file descriptors for memory mappings
    28e854d66 amdgpu: fix clang warnings
    ba168ab78 ci: enable build with amdgpu plugin
    aa38a5989 amdgpu: print an error if the dup syscall fails
    940a05c0b amdgpu: don't leak fd on an error path in open_img_file
    a68975c06 plugins: the UPDATE_VMA_MAP callback returns fd with the full control
    66f39adf1 criu: change the comment about magic numbers
    9b4e8292c vma: Add !VVAR condition to vma_entry_can_be_lazy
    28adebefb Return page size as unsigned long
    00f8a56b6 zdtm: check userns once
    ba48ceb57 zdtm: socket_udp_shutdown: Make the test fail instead of timing out.
    f6e820bed zdtm: Treat ESRCH from kill() as success.
    c29c5a1df zdtm: cgroup04: Improve skip check's robustness.
    131e464a0 zdtm: cgroup04: Improve error messages.
    785d97a61 zdtm: If ignoring kernel taint, also ignore taint changes.
    5e544dc44 ci: stop testing ubuntu overlayfs
    7a2910f89 py/cli: add --version option
    61d9cf6f9 crit/setup.py: use __version__ from pycriu
    8adefc90d lib/pycriu: generate version.py
    59fcfa80d compel: Add support for ppc64le scv syscalls
    d06c9b5cd criu/plugin: Add environment variable to cap size of buffers.
    8caf460b9 zdtm: test MEMBARRIER_CMD_GLOBAL_EXPEDITED migration
    2ba872782 dump: use MEMBARRIER_CMD_GET_REGISTRATIONS when available
    32241b00d vagrant: run tests with fedora 38
    862cb5c1c vagrant: update to version 2.3.7
    d2a0d1fa6 lint: don't fail workflow on indent fail
    08f286ed9 CONTRIBUTING.md: improve coding-style related sections
    38bf7f42e CONTRIBUTING.md: don't mention ctags
    b7a8bb088 zdtm: test execveat(memfd)
    c9b2633ca memfd: return original memfd fd for execveat()
    480565437 kerndat: check_pagemap: close(fd) on error path
    d5284313f kerndat: Make errors from clone3() check more precise.
    badf8060c proc_parse: Log smaps entry while dumping VMA.
    1800018bc test/other: add test for action-script
    ea05b06ac proc_parse: remove trivial goto from vma_get_mapfile_user()
    f7d7dc9c0 compel/infect: include the relevant pid in "no-breakpoints restore" debug message
    b56a9cef3 kerndat: Make pagemap check more robust against swapped out pages.
    86ad52bc2 ci/loongarch64: compile tests before running zdtm.py
    0085f992c memfd: don't set fd attributes not needed for vma mapping
    8c17535f3 loongarch64: fix syscall_64.tbl
    6ea60d6ef github: auto-remove `changes requested` and `awaiting reply` labels
    620e8c0a6 Put a cap on the size of single preadv in restore operation.
    2547ac8ac zdtm: membarrier: test migration of membarrier() registration
    e07155e19 dump+restore: Implement membarrier() registration c/r.
    5b790aa18 loongarch64: reformat syscall_64.tbl for 8-wide tabs
    d1096e3b3 lib/py: add VMA_AREA_MEMFD constant
    d3b955e57 ci/docker: install all required packages
    9477354de scripts/apt: don't hide apt output
    a4b49c46f amdgpu_plugin: remove duplicated log prefix
    69200bec7 irmap: scan user-provided paths in order
    2a131167b page-xfer: Pull tcp_cork,nodelay().
    6ed50ea49 apparmor: fix incorrect usage of sizeof on char ptr
    3628589b5 zdtm/memfd00: test memfd file mode
    dfa541095 memfd: dump and restore permissions.
    ac1219f4e sk-inet: Extend 'TCP repair off' failure log.
    25d033080 restore: Skip dropping BSET capability if irrelevant.
    fe4be19de prctl: test prctl(NO_NEW_PRIVS) setting
    a605cc9f3 prctl: Migrate prctl(NO_NEW_PRIVS) setting.
    7df3f6595 restore: Fix capability migration requirements between different kernels.
    7ab02639f restore: Skip setgroups() when already correct.
    4998b724e restore: Avoid need for CAP_SETPCAP if not changing uids.
    99188cfbe tty: Avoid EPERM for no-op chown().
    113957270 memfd: Avoid EPERM for no-op chown().
    96fa42b79 cgroup: Replace restore_perms() with cr_fchperm().
    b074f92f9 files-reg: Avoid EPERM in ghost_apply_metadata() for no-op changes.
    f985d9f44 sk-unix: Avoid restore_file_perms() EPERM error for no-op changes.
    21560270d util: Implement fchown() and fchmod() wrappers.
    e25a243b2 ci: add workflow for loongarch64
    788e1e92e zdtm: add loongarch64 support
    ae0811475 criu: add loongarch64 support to parasite and restorer
    ec6dc2d5c images: add loongarch64 core image
    c9df09eea compel: add loongarch64 support
    b304106e6 include: add common header files for loongarch64
    8a24d4872 ci: add workflow to ensure self-contained commits
    23313080a kerndat: don't leak a socket file descriptor
    b2d74fbfd zdtm: replace NR_fstat with NR_statx
    8ee35bebb kerndat: bind ipv6-socket only if ipv6 is enabled
    6b8107cd1 irmap: Reduce error log severity to warning.
    4eb6cc319 mount: Demote fsnotify logs for ignored failures.
    3e428a1de log: Remove error logs for ignored or otherwise logged subprocess exits.
    804c0ba82 soccr: Log name of socket queue that failed to restore.
    4018b7877 soccr: Log offset when failed to restore socket's queued data.
    1cb791652 sk-unix: Log both peer names when failing on an external stream unix socket.
    5a723937a compel: Log the status word with "Task is still running" errors.
    664598dc7 files-reg: Debug "open file on overmounted mount" error.
    a5fe99d2c cgroup: Propagate error on cgroup mount failure.
    056cac474 zdtm: drop python 2 compatibility
    002f2372a lib/py: drop python 2 compatibility
    d388b91de test/others: drop setup_swrk() py2 compatibility
    ee9983d4a test/criu-ns: drop python 2 compatibility
    ede018176 make: remove checks for python 2 binary
    642fd99bf remove python-future dependency
    376f3d180 crit: add requirements.txt for pip>=20.1
    f5d06571c crit: drop python 2 support
    7825f4ebf coredump: drop python 2 support
    05f0535de ci: clean up CentOS 7 related tweaks
    362d8fa5c ci: disable CentOS 7 test in Cirrus CI
    94c9e4787 readme: refactor asciinema link for video playback
    7bda5e656 zdtm: Update netns purpose comment in zdtm_ct.
    9ad59f58f util: Make CRIU run_id machine-level unique.
    eecc53d05 kerndat: Don't fail on NETLINK/nsid support missing.
    bf8446ae5 kerndat: unexport kerndat_nsid()
    f2011e1c7 util: Downgrade ignored errors to warnings.
    2aa9cb933 rpc: Support setting images_dir by path.
    439b52243 rpc: Support gathering external file list after freezing process tree.
    82a0db036 docker/podman: test c/r with action-script
    28d005638 action-scripts: allow shell scripts in rpc mode
    3e0a8ffd6 build: libnfnetlink: Remove nla_get_s32().
    f043cb22a build: Guard against libbsd's version of `__aligned`.
    c5142104a build: Use make-provided AR for building libzdtmtst.
    88f8fdda8 build: Fix LIBS vs LDFLAGS order.
    cbbe6c683 build: Debug system feature tests.
    1a1fa439c build: Remove HAS_MEMFD test
    2bf10c8d2 restore: remove unused `secbits` field.
    e5c9bc4d0 kerndat: Make socket feature probing work on IPv6-only host.
    eea0d6ede pipes: Plug pipe fd leak in "Unable to set a pipe size" error case.
    ffa1e47fd sockets: Increase the size of sockets hashmap to 16K.
    304a309ae test/thp_disable: fix lint
    c97cc6a6c Allow skipping iptables/nftables invocation.
    d0ac547b3 zdtm: sock_opts00: Improve error messages.
    6bc00fcb8 zdtm: Implement test sharding.
    1fb5c410c zdtm: Allow --keep-going for single test.
    ed88e3241 zdtm: Add timeouts for test commands.
    516fade93 zdtm: Allow overriding /tmp.
    4b764a9dc Allow passing --log_to_stderr via RPC.
    1e5ebec39 Allow passing --display_stats via RPC.
    0e88a91ff Allow passing --leave_stopped by RPC.
    4455444ee compel/test: Return 0 in case of error in fdspy
    4c1409b8f Fill FPU init state if it's not provided by kernel.
    93ad8d40d zdtm: thp_disable: Verify MADV_NOHUGEPAGE before migration
    01238d270 zdtm: thp_disable: Verify prctl(THP_DISABLE) migration
    a0c78a790 zdtm: thp_disable: Output a single failure message
    2364c963c Log if prctl(SET_THP_DISABLE) doesn't work as expected.
    21ce76263 Restore THP_DISABLE prctl.
    9943dcde1 Fix mount(cgroup2) for older kernels.
    0218b1e8f Fix dumping hugetlb-based memfd on kernels < 4.16.
    a638043a7 cgroup/restore: split prepare_task_cgroup code into two separate functions
    2ac15e3ad action-scripts: Add pre-stream hook
    c6ac396aa timers: improve and fix posix timer id sequence checks
    fc08fa907 criu-ns: Update shebang line to python
    9cd09f586 criu-ns: Install Python pathlib module in CentOS 7
    9c9e8ea3f criu-ns: Add tests for criu-ns script
    e4b6fb2d1 criu-ns: Add support for older Python version in CI
    733f16551 criu-ns: Add --criu-binary argument to run_criu()
    36709536e lib/c: add empty_ns interfaces to libcriu
    b665dce3c docs: rename amdgpu_plugin.txt to criu-amdgpu-plugin.txt
    cc607f810 criu-ns: make --pidfile option show pid in caller pidns
    50e17a1cf scripts: make newer versions of shellcheck happy
    df7b897a2 ci: fix new codespell errors
    727d79650 compel: support XSAVE on newer Intel CPUs
    fa6af25e7 dump: increase fcntl call failure judgment
    1c0f8787b zdtm: Add tests for ip tos restore
    04cdbd610 sk-inet: Add IP TOS socket option
    4c1a2ac41 criu: Version 3.18 (Silver Sandpiper)
    b689bcc35 cr-check: remove excess kerndat_has_nspid from check_ns_pid
    9b3496043 log: fix timestamp logging when tv_sec>=100
    94ac9ee3c proc_parse: fix while condition in parse_pid_status
    45e4a6b27 netlink: fix netlink fd flags dump/restore failed
    6c728df1d zdtm: modify rseq01 to include a thread
    f8da250bb cr-dump: properly apply rseq fixup for all threads
    78c4e2c0f cr-dump: move rseq functions before dump_task_thread
    85e46c44d dump: extend parasite_thread_ctl lifetime to dump_task_thread
    9683097f2 zdtm: don't ignore rseq_cs mismatch in rseq01 test
    0c5239932 ci: cancel preceding workflows run
    5c8cdceec sk-unix: rework unix_resolve_name
    de39bd2bd sk-unix: simplify error handling in unix_resolve_name_old
    d93409cf1 sk-unix: remove bogus xfree from unix_resolve_name_old
    ccc790d54 zdtm/lib: fix cwd path freeing
    8e6fa9c3b net: Add net log prefix
    7f0f07599 crit: fix compatibility with Python 3.12
    bd0f209c2 pstree: improve id intersection detection in prepare_pstree_for_shell_job
    66fd45d51 sk-unix: add some missed error printing
    a0158e692 zdtm: add MNTNS_ZDTM macro to fix initialization
    12423abdb mount: allow bindmounts for external fuse mounts
    65407616e ci/archlinux: initialize machine ID
    34e2b0221 Optimized shell code with <'s (instead of cat + |)
    7cae16e97 mount: do collect_mntinfo of external mount namespace with no for_dump
    69befdde1 cgroup-v2: make new field cg_set optional
    529f29891 cgroup-v2: make new field is_threaded optional
    6e681afb6 net: fail restore if nftables isn't supported but image is present
    156c8da33 make: disable '-Wdangling-pointer' warning with gcc 12
    4930c9802 x86/xsave: Set only used XFEATURE_* in xstate_bv
    3f8e3220b CONTRIBUTING.md: document make lint / indent
    42c4be2a9 net: use get_legacy_iptables_bin also on restore
    298286718 pie/restorer: Fix fd leaking on error path
    1d4777e45 test: add long command-line to coredump test
    edaec5d76 coredump: report missing files without a backtrace
    3ca979f9a coredump: handle long command-lines
    a0cc95c03 lib/py: reduce code duplication
    85b5c1e45 ci/podman-test: drop crun installation script
    91ff24b47 ci: disable c/r of cgroups with podman
    e7ab6fe63 restore: don't miss futex abort in restore_task_with_children
    676b4579f zdtm/transition/epoll: don't rely on errno in case of zero return
    7b8035344 mailmap: update my email
    1ae9bac54 dump: improve error printing and readability of task_comm_info
    11c71656b ci: add test for crit info
    9b919ab74 crit: fix empty string comparison
    fa4af0430 dump: Show task comm early
    fd7e97fcf lint: exclude tags file from codespell
    50e42c9dd Add documentation for --ghost-fiemap
    4a8c02d63 zdtm: Add tests for IP_PKTINFO and IP_FREEBIND sock options
    bd9b66c8c sk-inet: support IP_PKTINFO and IPV6_RECVPKTINFO options
    7d4d4915a sk-inet: save IP_FREEBIND option for SOCK_RAW sockets also
    f1c8d386b kerndat: check if setsockopt IPV6_FREEBIND is supported
    14e883656 proc_parse: Handle btrfs files when map_files is not accessible
    d7da4a69a ci: Add maps00 test in unprivileged mode in user namespace
    d2abc9817 shmem: Close fd when VMA is copied from /proc/$pid/mem
    144b467a0 shmem: pr_err -> pr_perror
    6d7c0d007 compel/mips: fix parasite with GCC 12
    7280e96a7 clang-format: use IndentGotoLabels to get rid of goto label indentation
    fcdb753ed namespaces: cleanup switch_mnt_ns and restore_mnt_ns
    63159c14c mount: simplify code around mount_cr_time_mount
    43fa4e76d remap: refactor goto jumping to a while loop
    757a2b46c remap: Fix typo
    3837d31b5 ci/lint: make push action have at least too commits depth
    cec43025a criu(8): Add info about unprivileged mode limitations
    80528dbf7 proc_parse: Don't bail out on is_memfd() VMAs
    95e590b51 shmem: Fall back to /proc/$pid/mem if no map_files
    951c56917 proc_parse: Set VMA_AREA_REGULAR where needed
    a92dfb61f string: define wrapers __setproctitle and __setproctitle_init to hide bsd headers
    0a7c5fd1b string: use our own __strlcpy and __strlcat to remove bsd headers
    8cfda2748 log: remove all uses of %m specifier in pr_* functions
    7459d0204 lint: prohibit to use %m specifier in pr_* functions
    f73ba7726 ci: switch from lgtm to codeql
    0bddecead restorer: add logging on prctl PR_SET_MM_MAP failure
    fb66727a2 zdtm: add mntns_compare check to mount_complex_sharing
    ba09fad39 zdtm: add mountinfo topology compare to test lib
    2837a13ef zdtm: add mountinfo parsing to test lib
    543501d5f zdtm/lib: copy xmalloc.h
    d800ef658 zdtm/lib: copy list.h
    be61624f4 clang-format: rework make indent to check specific commits
    a918093ce scripts/ci: use Fedora 37 for vagrant based tests
    1bb84f96f tty: fix codding-style around for_each_bit call
    abfe0b5d2 clang-format: add for_each_bit macros to ForEachMacros
    c8b4fb9ba autofs: fix a frankenstein auto-created by clang-format
    aab709b60 log: Write more details in write_pidfile
    7c6eb0b85 asm: fix for_each_bit macro
    bb3f7bef6 crtools: fix help message alignment for --network-lock
    a302b3694 zdtm: fix 'zdtm.py list' command
    21f5be91a cgroups: ignore EOPNOTSUPP on setting memory.kmem.limit_in_byte
    9686693aa test/javaTests: update org.testng:testng (Maven)
    5c60d35be sockets: tiny style fix
    5a19c3432 non-root: Don't dump socket option SO_MARK if 0
    2180e03b9 non-root: Rework socket bufs for unprivileged mode
    e5ccfbb24 Fix typo in comment
    bdbccc315 zdtm: add two tests for highly sparse ghost file
    f3fdce81a files-reg.c: fiemap algorithm for ghost file
    14b9ec195 ci: fix make indent
    d0c64b7b3 ci/alpine: remove symlink for /usr/bin/python
    095b3e84b ci/lint: install ShellCheck with dnf
    c48b5290d Fix warnings from -Wstrict-prototypes in clang 16.0.0
    fa2c585c2 amdgpu: define __nmk_dir if missing
    c7211f52d Remove execute bit from source file
    f5e0f641a cgroup: Remove redundant code that handles zombie tasks
    c1ae880eb kerndat: Mark memfd_create(MFD_HUGETLB) unavailable when ENOSYS is returned
    153614cb1 ci: move cgroup unmounting to run-ci-tests.sh
    516ebc4f5 ci: Do not fail if latest epel repository definition is already installed
    2ebce9233 ci: Make cpuset move to cgroup-v2 hierarchy
    07d538cef zdtm: Check threads are restored into correct threaded controllers
    20ea8a064 cgroup-v2: Restore threads in a process into correct threaded controllers
    17d1d8810 cgroup-v2: Dump cgroup controllers of every threads in a process
    ad3936e81 zdtm: Add test to check global properties of cgroup-v2 are preserved
    d7e874659 zdtm: Add write_value/read_value helpers into zdtm library
    167cfd366 cgroup-v2: Checkpoint and restore some global properties
    8a336ab22 Switch aarch64 builds to Cirrus CI
    840735aa0 ipc_sysctl: Prioritize restoring IPC variables using non usernsd approach
    3db8d1a6c cgroup: add a comment to restore_cgroup_prop about path argument requirements
    1cba559da non-root: add non-root test case to cirrus runs
    6743d608c non-root: extend zdtm.py to be able to run tests as non-root
    251939992 Documentation: add details about --unprivileged
    47b07d011 non-root: Introduce unprivileged mode to kerndat
    6a30c7d1e non-root: enable non-root checkpoint/restore
    ce01f70d9 non-root: add functions to work with capabilities
    4b4bf0421 non-root: add infrastructure to run as non-root
    4c7f91aff ci: enable EPEL for CentOS 7
    a39d41656 compel: Fix ppc64le parasite stack layout
    17ec53913 compel: Add test to check parasite stack setup
    556ab0dea compel: Fix infect test to not override failures
    461fa7271 compel: Add APIs to facilitate testing
    debc9c16c seize: do not overwrite exit code from failpath
    16f1c147c test/others/crit/test.sh: use bash array
    0a872ccf1 scripts/protobuf-gen.sh: fix (not ignore) shellcheck warnings
    75b859f23 scripts/ci: rm shellcheck disable annotations
    aeb6961f3 scripts/ci/run-ci-tests: use bash arrays
    b1fb9f2f0 Fix, not ignore, shellcheck SC1091 warnings
    9d2948b23 scripts/ci/asan.sh: fix, not ignore, shellcheck warning
    968eec0d5 scripts/ci/apt-install: fix (not ignore) shellcheck warning
    86ac0f05e ci/gha/lint: install a recent shellcheck
    2039d7320 files-reg: skip failed mount lookup for shell-job's tty
    9e91e62a7 criu-ns: capture controlling tty
    40e1aaf56 mount: add definition for FSOPEN_CLOEXEC
    7bc24688d ci: Clean up and improve Java testing
    0178f2f99 ci: Add Dockerfile for openj9 on Ubuntu
    39b3de60b ci: Rename openj9 Dockerfiles to hotspot
    f78d3d821 gitignore: Ignore top-evel build dir only
    aeaff6445 test/unix: check C/R of unix listen queues
    83c606e02 zdtm: return 1 from pr_err, pr_perror, fail
    dca55d281 criu: fail migration if data was sent to an in-flight socket
    dfe9d006a breakpoint: enable breakpoints by default on amd64 and arm64
    bb73e1cf5 breakpoint: implement hw breakpoint for arm64 platform
    b7953c6c7 compel: switch breakpoint functions to non-inline at arm64 platform
    719fea2fc compel: clear a breakpoint right after it's been triggered
    d7477dac0 compel: set TRACESYSGOOD to distinguish breakpoints from syscalls
    c089159a4 ci/cirrus: centos 8 job nits
    a202ec271 ci/cirrus: add CentOS Stream 9
    2642b657d docker-test: handle race condition error
    49319cd57 Add Alexander Mikhalitsyn to maintainers
    f7972a3f0 cr-restore: rseq: use glibc-specific way to unregister only as fallback
    cacddf19d cr-restore: rseq: dynamically handle *libc with rseq
    1f9bd82a5 cr-check: optimize check for apparmor stacking
    a1262f55f cr-check: fix check for apparmor stacking
    f9bc0a750 docker-test: use containerd installed from package
    750acec25 Revert "ci: Switch to non overlaysfs tests"
    e8a6765d1 criu: fix conflicting headers
    eb4ecb3cf ci: unset XDG_RUNTIME_DIR when invoking podman
    da4803bea MAINTAINERS: Add Radostin (myself) to maintainers
    e62d541bd zdtm: add two tests for large ghost sparse file
    2d34b5602 unlink_largefile.desc: remove crfail, since criu now can support unlink_largefile test
    fbded7978 files-reg.c: modify the check of ghost_limit to support large sparse files
    01b8d40ce zdtm/mnt_root_ext: don't allow propagation from test mntns to criu mntns
    d12e2364c zdtm: make root mount private in criu mntns
    70a9cd6fb vdso-compat: Increase the reserved buffer for compat vdso
    b30f3ee3d zdtm: Remove permission part check for skipping vsyscall vma
    c502d480f x86/compel/fault-inject: fixup mxcsr for PTRACE_SETFPREGS
    e30d18f43 rseq: fix headers conflict on Mariner GNU/Linux
    ad58553d9 Add --skip-file-rwx-check opt test
    18fba4125 config/files-reg: Add opt to skip file r/w/x check on restore
    6cef6e726 zdtm: add tests for SIGTSTP
    c7858ba42 infect: add SIGTSTP support
    49caf85b2 config: fail on --track-mem option if dirty tracking is not available
    91e971c4d hugetlb: don't dump anonymous private hugetlb mapping using memfd approach
    dd0217976 amdgpu: Add gitignore
    b117b211a zdtm/scm: add scm09 test with closed sender fd
    5cd7092fd sk-unix: make add_fake_unix_queuers earier and rework find_queuer_for
    28358db13 Fix the check for mnt namespace in criu-ns
    295dc85ca github: use git-clang-format instead of make indent
    ced4ab4b0 zdtm: skip zdtm/static/shm-hugetlb when hugetlb is not supported
    c830643d8 Revert "ci: skip new hugetlb maps09/maps10 tests for pre-dump"
    b26e1fdbf mem: Skip pre-dumping on hugetlb mappings
    9066f8741 cr-dump: do not report success to logs if post-dump script failed
    d46f40f4f criu: Version 3.17.1

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2024-03-15 17:17:19 +00:00
Bruce Ashfield
417cfa77c5 kubernetes: fix build with go 1.21+ 
go1.21+ checks the GOTOOLCHAIN variable and will attempt
to validate/fetch the toolchain version requested.

That doesn't work in our environment, so we export the
variable as "local" to indicate that the build should trust
(and use) the local toolchain.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2024-03-15 17:17:19 +00:00
Bruce Ashfield
e11497bda2 kubernetes: allow go 1.20 building 
Although k8s checks for, and demands, golang 1.21.x, runtime
tests show that golang 1.20.x is properly building and providing
enough for core functionality.

In an effort to see what else may be lurking, we patch out the
check to allow builds with our 1.20.x toolchain.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2024-03-15 17:17:19 +00:00
Bruce Ashfield
17eeea68a5 kubernetes: update to 1.29.1 
Bumping kubernetes to version v1.29.1-1-ga02da633101, which comprises the following commits:

    a02da633101 Update CHANGELOG/CHANGELOG-1.29.md for v1.29.1
    bc401b91f27 Release commit for Kubernetes v1.29.1
    5350f0829f5 Revert "Graduate Evented PLEG to Beta"
    5b1e1446823 [go] Bump images, dependencies and versions to go 1.21.6 and distroless iptables to 0.4.4
    0da29848c53 Make OpenAPIGetter tolerant of nil
    865f214fe53 use context for lazy evaluation.
    cde050c4d0b Initialize default attach func regardless of the value of flag
    b055126537b .*: bump golang.org/x/tools to v0.16.1
    05937cba41d add ut
    00045c3c9d6 fix
    b10ad75ab1d fix
    4b8554018c1 fix: 119921
    a5f64b743e4 Address comment
    ed501c1f080 Keep presence cost to 0 to ensure backward compatibility.
    37717c1bc43 fix(scheduler): fix incorrect loop logic in MultiPoint to avoid a plugin being loaded multiple times
    4a597425b8b fix falky test pkg/registry/core/persistentvolume/storage TestUpdateStatus
    40d8e405b8e Use a separate function for checking if device was reconstructed
    d30fda3c68c Add tests for checking of uncertain device paths
    910fa603a25 Fix device uncertain errors on reboot
    62d0bd7260f Fix CSI migration for vSphere volumes
    ce513803ca9 Wire in field dropping for CRDs
    9abd608b99e Revert "scheduler/nodeaffinity: reduce pod scheduling latency"
    95751b4df7f Revert "scheduler/NodeUnschedulable: reduce pod scheduling latency"
    85ff8c0b081 kube-proxy: Fix etp:Local for externalIPs
    ee9a55c25d6 Add unit test for Job Controller for panic when PodFailurePolicy is used on 1.28
    e1e60c9b658 Update CHANGELOG/CHANGELOG-1.29.md for v1.29.0
    3f7a50f3868 Release commit for Kubernetes v1.29.0
    3b8f25dfdd9 fix: disable SchedulerQueueingHints feature flag by default
    0c645922edc CHANGELOG: Update directory for v1.29.0-rc.2 release
    a2115acba28 Update CHANGELOG/CHANGELOG-1.29.md for v1.29.0-rc.2
    e4636d05bc3 Release commit for Kubernetes v1.29.0-rc.2
    0ca3089bee6 Bump distroless-iptables to v0.4.2
    1c1347a3e71 [go] Bump images, dependencies and versions to go 1.21.5
    4e5321c92e0 add beta comment for pod replacement policy
    233949e05df Add an integration test to verify root path cleanup
    c769c2db6ed Revert conformance test addition of root paths
    ec9387da084 Remove scrape_error from resource_metrics_test due to deprecation
    022d50fe3a1 CHANGELOG: Update directory for v1.29.0-rc.1 release
    71c7e93ba7f Update CHANGELOG/CHANGELOG-1.29.md for v1.29.0-rc.1
    96a32568e66 Release commit for Kubernetes v1.29.0-rc.1
    f730dc39f9d Fix verify target to not update env var if already set
    51daa8cbd5e api: run hack/update-api-spec.sh
    f042994cb03 releng: update publishing bot rules for 1.29
    bacac254799 CHANGELOG: Update directory for v1.29.0-rc.0 release
    ab6a1ad8e1f Release commit for Kubernetes v1.29.0-rc.0
    af34f62170c code-generator: fix invalid replace of klog
    d203bb54f8a fix flake on conformance e2e test ResourceQuota controller should apply changes to a resourcequota status
    005e85c4d3e fix(framework): remove the mention about what happens with nil from EventsToRegister
    64f8c6939f8 Replace -E with --setenv for systemd-run parameter
    dd6e286a1ae TestSlowNodeSync: fix flake by allowing informer cache to get populated
    c3ff08250eb CHANGELOG: Update directory for v1.25.16 release
    59c63185457 CHANGELOG: Update directory for v1.26.11 release
    bb6c9ecb1a2 CHANGELOG: Update directory for v1.27.8 release
    3f81c5cf3ff CHANGELOG: Update directory for v1.28.4 release
    34e620d18c0 Support score extension function in preemption.
    99f7df3e1c1 improve default_servicecidr_controller startup
    c99b5a208de Check error from gomega
    49e8c196c34 use framework gomega
    8c68aa656b1 Update publishing-bot rules for active release branches that uses go120 to Go 1.20.11
    6aa3002ad24 add kubeup label instead of a feature label
    27dfe93f53d Use value(name) in gcloud compute instance-groups managed list-instances
    20853ef1200 Bump distroless-iptables to v0.4.2
    4b1b9a198a6 Fix issue with client rate limiter when polling
    7c5dfceff8a add false matchCondition benchmark
    f9ab24bf485 Refine test case
    617f2132fed e2e: avoid redundant labels in JUnit file
    172f680326a fix: smb file share unavailable issue when it's deleted
    2017fb2ec53 Fix "go test -count=2 ./pkg/proxy/iptables"
    bda722bb684 kubeadm: support updating certificate organization during 'kubeadm certs renew'
    2780060a789 kubeadm: change SystemPrivilegedGroup in apiserve-kubelet-client.crt
    11cdb8fd011 split compile and eval
    fe53db0dbdc authz: add benchmark for webhook authorizer
    475bfa4a633 set LimitedSwap
    819d1903a27 Add support for authorization-config to local-up-cluster
    b53134f129f Test anonymous and RBAC handling via config file
    264cd648246 Run RBAC hook correctly when running from authz config file
    1f40e0916ec Only default mode to AlwaysAllow when config file is unspecified
    76277f693d0 create a new KubeUp feature label for tests marked for removal
    9e5b8402bb9 update go.mod
    88e124ecaa4 [go] Bump images, dependencies and versions to go 1.21.4
    e4fdc96c188 Pass External Storage label parameters as individual arguments in framework variadic function
    f3dad977040 self nominate aroradaman as sig- proxy-reviewer
    2645b22003d Self nominate Kevin Hannon for reviewer for job controller
    b12db6d9b55 fix test store delete collection function failed
    9d5b2a44762 Fix API comment for the Job ready field
    1395e2e02c5 Fix API comment for the FailIndex Job pod failure policy action
    6dc11c1f219 kubeadm: ensure the kubelet and kube-apiserver wait checks go first
    bb315d13392 bump runc to v1.1.10
    f77a4543d13 Unregister events in schedulingGates plugin
    70c9eefff30 add --sbom=false --provenance=false for windows servercore cache build
    42a70cdbd16 codegen
    bba0c9a81e9 validate defaults across an update from nil to ensure create ratcheting rules work
    eef15158152 ratcheting-cel: use Optional[T] for oldSelf when optionalOldSelf is true
    5edb27aa382 ratcheting-cel: add optionalOldSelf field
    6b6be38896b test: Fix NodeLogQuery tests
    ad7b9b56f5b test/e2e_node: add e2e test for Kubeletconfig drop-in dir
    ee5578be526 cmd/kubelet: fix overriding default KubeletConfig fields in drop-in configs if not set
    bd6431323a5 ClusterTrustBundle projection: e2e test
    96e610ac188 ClusterTrustBundle: Enforce max size during validation
    1ebe5774d08 kubelet: Support ClusterTrustBundlePEM projections
    e83baddbb1a LRUExpireCache: Allow removing multiple keys under lock
    599fdb7adde Regenerate for ClusterTrustBundlePEM projected volume API
    ecfdc8fda55 Define ClusterTrustBundlePEM projected volume
    0fd13627820 ClusterTrustBundles: ClusterTrustBundleProjection feature gate
    2a23061f6c2 scheduler: fix performance regression at -v3 + contextual logging
    e5bba37f20a apiserver: promote flowcontrol tests to conformance
    9ae1fc366b8 Store nodes before calling EnsureLoadBalancer
    60338c79d77 KCCM: fix slow node sync + service update
    a8673fa5b4a KCCM: add test validating slow node sync issue
    b565fbeac06 test/e2e_kubeadm/dns_addon_test.go: drop kube-dns tests
    2259ac2444f pause: add --provenance=false during etcd multi-arch build
    50f092c1366 Add kubernetes.io/hostname to faked nodes in tests
    5bf63036c7f Make EnablePodSchedulingReadiness public
    0112d91a056 Add multi-webhook integration test
    b693f09d544 [StructuredAuthn] Ensure empty fields of user object are accessible by CEL
    34b2c4e1ed0 framework: add SSH support for Azure
    44d89c8cf8c Include empty string attributes for CEL authz evaluation
    2e2f51a4417 Plumb failure policy from config to webhook construction
    0674135c1aa CHANGELOG: Update directory for v1.29.0-alpha.3 release
    a000af25ff3 Require match condition version only if matchConditions are specified
    baebc376ff8 missed a few summary upper limits for major page faults
    3c268b75244 etcd: Update to version 3.5.10
    4c532213ae2 test/e2e_kubeadm: add test for the kubeadm:cluster-admins CRB
    ae73cf9cfb7 Add remaining e2e tests for backoffLimitPerIndex based on KEP
    2d9128116b6 Use golang library instead of mklink
    85b10c06fab update docs for v1.29 release (note this must be committed after code freeze)
    cda349cda49 Make service-cidrs-controller role feature-gated
    26923b91e8c implementation of split disk kep
    003e4886c6f Fix parameter passing error
    18adc309337 refactor: rename TransitionRule to UsesOldSelf
    b2c743154cc Fix the e2e bug related to the Garbage collector in api-machinery.
    338fe7ad55c e2e framework: validate test definitions
    f2cfbf44b1f e2e: use framework labels
    248100ce6df golangci-lint: tone down comment checking
    ecb32a3e29c increase bounded limits for major page faults
    ceaacc88f0d add --provenance=false during etcd multi-arch build
    833156b77e2 e2e: define environment
    4a380609a94 serviceaccount: fix incorrect usage of %w in Errorf
    878d037d3ba dependencies: klog v2.110.1
    bc1df9e7dab bump to newest etcd: v3.5.10
    38905462656 Update APIs and adjust tests
    77f4178c98a Promote CSINodeExpandSecret to GA
    252e1d2dfee Imagepull per runtime class alpha release changes
    0993bb78efe Redo service dispatch with maps
    9d71513ac1e Redo no-endpoint handling with maps
    4128631d0f3 Redo LoadBalancerSourceRanges firewall using sets
    edaa1d735b8 Redo --nodeport-addresses handling with a set
    ef1347b06db Port NAT rules to nftables (and backend is now functional)
    0c5c620b4f2 Port filter rules to nftables
    6cff4153057 Port service/endpoint chain creation/cleanup to nftables
    2735ad541e2 Port table setup/cleanup code to nftables
    bcced184c52 Replace "iptables-restore" sync in nftables/proxier.go with (trivial) "nft -f -" sync
    93860a52177 Distinguish iptables-based and nftables-based backends, do startup cleanup
    abb1a458a95 Create an nftables.Interface in nftables proxier
    1a530457f90 Drop unit tests of iptables-specific unit test helpers
    958e80ca3b0 Clarify nftables/proxier.go by distinguishing nat/filter table KUBE-SERVICES chains
    3abdda9800d Simplify nftables/proxier.go by using string rather than utiliptables.Chain
    96e53f64f4d Simplify nftables/proxier.go by removing the "args" reuse
    6535ac1e619 Simplify nftables/proxier.go by removing Monitor stuff
    ecb7752f0b8 Simplify nftables/proxier.go by removing HaveRandomFully checks
    5f09106063b Simplify nftables/proxier.go by dropping "-j ACCEPT" rules
    1a6b9b811e3 Simplify nftables/proxier.go by removing localhost nodeport support
    e7c35d27f75 Simplify nftables/proxier.go by removing partial syncing
    39a5af1d0aa Simplify nftables/proxier.go by removing large-cluster mode
    cac26737cd4 apiserver: add conformance tests for flowcontrol API
    a70653143e9 Add a dummy nftables kube-proxy backend which is just a copy of iptables
    ce5a22d54c1 hack/update-codegen
    3b69bd6a9ba servicecidrs controller clarify condition false reevaluation
    fee07ad6080 make update with the new API with arrays
    9917c727a1e test e2e: use new ServiceCIDR API
    5d90d07f2d2 test integration: use new ServiceCIDR API
    271900a0f05 integration etcd data: use new ServiceCIDR API
    3edcce52e3c service cidr controller manager: use new ServiceCIDR API
    016c3c9e363 repairip controller: use new ServiceCIDR API
    881cf4d54fd ipallocator/cidrallocator: use new ServiceCIDR API
    7e87806fab1 default_servicecidr_controller: use new ServiceCIDR API
    513fdb54229 describer: use new ServiceCIDR API
    5123a93b342 printers: use new ServiceCIDR API
    c3d9b77d94e update ServiceCIDR API: replace IPv4,IPv6 fields by an array of strings
    599597ca65a fix race on ServiceCIDR deletion
    e3a0df26a86 remove flag cidr max size validation if gate enable
    8182c4d9ec8 make update
    cb509b01f31 e2e for ServiceCIDRs
    46b13d48e20 etcd data
    ccbcadb0324 add integration test
    4ff80864e1c service cidr controller manager
    164276175fb plumb the new multicidr clusterip allocator
    65e69389463 make repair loop multi service cidr aware
    63fe539b4e7 expand IPAllocator to work with multiple ServiceCIDRs
    d3386e171a2 add iptree radix tree util
    3b450378e07 bootstrap controller for default ServiceCIDR
    55a35bebee9 API printers
    7e77e8b21d1 kubectl describe
    2feb1503e29 Add ServiceCIDR to the REST Registry
    391b25197b8 add apis to apiserver storage
    632081a9078 add ServiceCIDR APIs
    16363b6fb4a fix IPAddress.Name validation message
    df80775693f Include managed field comparison in test
    cc190e0ace1 add integration tests
    26e3a03d12d Implement CEL and wire it with OIDC authenticator
    e411fd340c5 cluster/gce: add webhook to replace PersistentVolumeLabel admission controller
    7e35823690d cacher: when forgeting a watcher, call stopWatcherLocked multiple times
    bd233a2aa55 typo/api change in cadvisor / updated unwanted-dependencies.json
    8b9fc325e28 Update to new cadvisor v0.48.1
    e4776e0f85b avoid infinite recursion for type resolvers.
    fba2d2fadc1 Move invocation to not to cause ginkgo panic
    eb32969ab8f Lazy load OpenAPIV2
    f23ab829bee Add feature toggle for OpenAPI V3 apply in kubectl
    e7216c66230 use OpenAPIV3 for kubectl diff
    4f3b0b15182 Use OpenAPI V3 for client side SMP
    6b971153d75 add new fields in v1alpha1 StructuredAuthenticationConfiguration
    168e016947c Benchmark job with backoff limit per index
    6ac7da1da87 encryptionconfig/controller: run unit tests faster
    c2a365c6a7d kubeadm: do not poll in TestEnsureAdminClusterRoleBindingImpl
    c2cb3209138 Revert "cacher: when forgeting a watcher, call stopWatcherLocked multiple times"
    98a2f22e740 Revert "Make the decode function respect the timeout context"
    c7fcef18756 apiserver: set APF featuregate to ga
    8e52fc72668 Minor fix to copy the required kubelet, service logs after the execution of the node e2e tests
    b02aad42fa4 Fix panic when process RunScorePlugins for cap out of range
    31c76e9abb2 authz: add cel expression to webhook matchconditions
    56ab6c59421 generated changes
    ae90a696772 volumeattributesclass and core api changes
    c4aab1036f6 Add sig OWNERS to registry packages
    1daf1b0705f test that controller descriptors should not be feature gated
    fed11c0793f remove unnecessary gating of taint-eviction-controller descriptor
    5b268e6daf5 apply: Add test for duplicates in associative lists
    9d1847c1963 managedfields: Allow duplicates for built-in updates associative lists
    dec443b305a Update sigs.k8s.io/structured-merge-diff to v4.4.1
    b8cd792b368 rename the roundtrip annotation, forbid it in v1
    76463e21d4d KEP-4193: bound service account token improvements
    a968f51fa2f k8s.io/apiserver/storage/etcd: refactor etcd GetList.
    84ec5e2eccb k8s.io/apiserver/storage/etcd: refactor etcd GetList.
    8d804078f97 Add set ext library into Kubernetes and pick up the new option cel provides
    70c1f2143fc Bump cel-go to v0.17.7
    d3de47ceeed chore: updates api doc
    2eb06e79ef3 OpenAPIResourcesGetter allows lazy-loading OpenAPI V2
    080fe8346da Fix typos in interface comments
    e95b7c6d8b8 feat: updates encryption config file watch logic to polling
    6d59480a70f Try a single gcloud command for scp-ing all files
    bbca4a4b9ad cacher: when forgeting a watcher, call stopWatcherLocked multiple times
    f78b367db63 Make the decode function respect the timeout context
    79c5b3ca6fd Mirror apiserver feature gates to kube feature gates file for consistent enablement
    ccda2d6fd41 kube-controller-manager: Decouple TaintManager from NodeLifeCycleController (KEP-3902)
    233bc2449d9 apiserver: fix apf enablement with runtime-config
    acd60896597 apiserver: remove prerelease annotation for flowcontrol v1
    25447b95ad2 apiserver: add testdata for flowcontrol v1
    730d10a8fb9 apiserver: add generated files for flowcontrol api change
    9fd2ab419ad apiserver: allow zero value for the 'nominalConcurrencyShares' field
    430c226709b apiserver: fix lint issue, defaulting and validation test for flowcontrol v1
    90c091dedad apiserver: add pre-lifecycle replacement for flowcontrol v1beta3
    17bda3c3e05 apiserver: apf controller, bootstrap, tests should use flowcontrol v1 API
    25aebca8d54 apiserver: add etcd data and storage version hash for apf v1
    5972037ffd6 apiserver: generate code for apf flowcontrol v1 API
    03a9ad200d7 apiserver: remove copied generated files
    b24dd44904e apiserver: enable apf v1 API
    5cb03064d95 apiserver: update copy, rename v1beta3 to v1
    dc723080939 apiserver: copy apf v1beta3 to v1
    05076de57fc kubeadm: poll additional CRB create calls for kubeadm:cluster-admins
    5a20ff16173 fix wrong controller name for ephemeralController
    afc6c03ba74 Pass through static overrides in addtion to cgo overrides
    feb0e2fc2f5 Fix flaky test for services that shouldn't be available when PublishNotReadyAddresses is false
    3a308140cd5 Fix e2e
    2c2fa2107a6 deprecate the kubeProxyVersion field of v1.Node
    070e7a38cb6 generic set
    36d6917ae16 valid error for creation and update from valid to invalid only - using an option AllowNamespacedSysctlsForHostNetAndHostIPC
    9a8ccdebc5a use sysctl utils to do pod spec validation
    11de9543ee7 move sysctl namespace and some funcs to component helpers util
    4321652d13f reject pod creation for hostNet pod with net sysctl; hostIPC pod with ipc sysctl
    6614a29f470 OpenAPIResourcesGetter allows lazy-loading OpenAPI V2
    04b21126e58 Add cel new validator into Kubernetes.
    9ae77364e95 pkg/proxy: configure tcp-be-liberal
    a375aa28ee3 pkg/proxy: move get kernel version out of ipvs proxier
    c1fd3f5f648 suppress per-expression cost limit for unmutated versions.
    4bb7dc224c5 metrics: publish metrics from ratcheting across a request
    e50cc47a068 Improve execution time for job e2e tests
    8c72be3b74e ratcheting: add benchmark
    7a91051caa1 cleanup: Refactor BaseEndpointInfo to cache IP and Port values
    c7842d9c63f narrow down the scope of EnqueueExtensions to subscribe less cluster events
    3f8e6d6f77f etcd: Build image 3.5.10
    a73725d7999 Promote SidecarContainers feature to beta
    1591a0e132c add unit tests for NewControllerDescriptors
    44cac266673 move start controller pre- and post- checks/actions out of StartControllers
    b7689672802 move aliases into each registrable controller
    a85779b4dfe include ServiceAccountTokenController in the NewControllerDescriptors to make it more generic
    27a77e0ef3c Encapsulate KCM controllers with their metadata
    77dfd63d1db fix volume conformance e2e test break other test
    77e0adeb31d KEP-127: Update PSS based on feature gate
    b0491d71bd5 Support skipping pulling addons image.
    760abc2a821 bump gomega to 1.29.0
    5925dc07758 LegacyServiceAccountTokenCleanUp beta
    69b9d50f9d0 e2e_node: mark CDI test as NodeSpecialFeature
    a9b1adbafc7 [KMSv2] promote KMSv2 and KMSv2KDF to GA
    9f06eb4ca2a don't run these tests on aws
    e98c33bfaf2 switch feature flag to beta for pod replacement policy and add e2e test
    af14f97cba7 sample device plugin: fix incorrect Errorf invocation
    fcc55280b01 Use k8s.io/utils/ptr in pkg/proxy (#121154)
    b6afba18fb1 verify-file-sizes.sh: ensure that no large binary files get added
    fd132665a8a extend VAP status controller for extensions type checking.
    3f73cdcf2ad extend SchemaResolver for more types of schemas.
    38fecc8319d opportunistically attempt to refresh RESTMapper
    05cd3e66ef5 simplified e2e test for CRD typechecking.
    60a602f1701 gce: fix test for non-existing instance in cloud
    4a640ea384a cloud-node-lifecycle controller: add fallback for empty providerID in shutdown
    84faaf4427f Prevent sampledeviceplugin binary commit
    7fc42189b19 Add back k8s.io/kms/internal/plugins/_mock/go.*
    110ffa13b7d Delete binary file
    e07d898cfd2 Make StatefulSet restart pods with phase Succeeded
    27f6fb2fa7e hack/tools: golangci-lint v1.55.1
    6302f011211 e2e node: fix broken assertion
    d0a5cd16da8 e2e upgrades: fix broken assertion
    fb872e86384 test: fix storage status update test
    53339894a1c enable PersistentVolumeLastPhaseTransitionTime feature gate for status update test
    071a67d8c29 export time function
    9cfd96dbb5e graduate PersistentVolumeLastPhaseTransitionTime to beta
    c6b42c8a72f Make e2e node image ID test more flexible
    517efd64425 cluster/gce: set KUBE_WATCHLIST_INCONSISTENCY_DETECTOR when requested by a CI job
    837090135f8 kubeadm: make super-admin.conf changes to app/cmd
    30ed50d32e3 kubeadm: make super-admin.conf changes in app/phases
    d0328df04e0 add time tracking to CorrelatedObject
    1165609036c Add metric for e2e pod startup latency including image pull
    702d911e226 working-config-otel
    e7a9a148489 replace CEL ValidateWithRatcheting with variadic options
    f71040f620e Remove the usage of feature gate
    0ac35fe44f4 Update security contacts for sig-cli
    8d3a25c7c98 [KMSv2] Add tracing
    c2a04fa1cf5 kubeadm: fix export comments to make golangci-lint happy
    f91228ee719 Unexport BaseEndpointInfo fields, fix getter names
    e3357d0c5f3 Clean up Endpoint / BaseEndpointInfo a bit
    2879ec10d50 Rewrite ipvs/iptables tests that manually construct BaseEndpointInfo
    27bb66fd7b7 cleanup: rename failedPlugin to plugin in framework.Status
    2a8982b27b8 Remove problematic Dbus restart test
    39df946c066 golangci-lint: enable doc comment checking for cmd/kubeadm
    3738111337e Add unit tests
    08b942028f9 DRA: call plugins for claims even if exist in cache
    69ca55f1368 Do not preallocate node for Job e2e tests to fix flakes
    98bed52fdd6 kubeadm: make super-admin.conf changes in app/constants
    e511edf11f7 Fix SELinux unit tests
    2f5903b4cf4 Move SELinux warning metric to be counted once per pod
    d20edf697aa verify-golangci-lint.sh: support arbitrary GOBIN
    a92c1269e25 test: fixes hot reload flake
    71a1565d065 revert: reverts fixes for TestEncryptionConfigHotReload flake
    83f5b5c240e Deep disablement for APF based on --enable-priority-and-fairness.
    8e0be64b8ff remove data race on the devicemanager client plugin
    aeceec72bbd add integration tests
    97e72d792cc Remove independent tests for metrics
    84cd6dbb0aa use the latest semver version for the badge
    b3525946d5e ratcheting: provide a shared correlated object
    dfeab6eca8c fetch a shared correlated object off the validation options if it exists
    0a19b5ab6e2 fix usage
    432e8937cfb add variadic options to ValidateUpdate
    9e2821d585e revert changes to TestMetricsOnSuccesses for job pods creation total metric
    055e926a924 e2e: Increases the memory limit for downward API tests
    88c0a8be1bd feat: add job_pods_creation_total metric
    b1ce529b2ac Remove unnecessary GetIndexer
    1224e0e881d Add PodHostIPs test
    f8a4e343a10 Fix tracking of terminating Pods when nothing else changes (#121342)
    12a972cc1e6 Promote KEP-2681 to beta in 1.29
    2cea51221a3 hack/logcheck.conf: enable contextual logging in kube-scheduler
    bd8ac8c7fac kube-scheduler: checked err for golangci-lint
    b0a73213d6d kube-scheduler: convert the remaining part to use contextual logging
    bbb4a88bbbc e2e_node: implement DevicePluginCDIDevices test case
    bf2f640ea2c Add more test cases ensuring nextScheduleTimeDuration is never < 0
    16b3acc27a1 cleanup UnknownCRISocket for unit tests
    71bedf5cb28 kubeadm: skip CRI detection for 'kubeadm upgrade diff'
    20c8b797a3c Indicate Job Backoff Limit Per Index reason consts are beta
    b06675724d6 Add e2e test for backoffLimitPerIndex
    4b59d2b05c0 kube-proxy: Optionally do privileged configs only
    35f4d29d735 Fix unit test
    b052c7b7cdf Update npd version to 0.8.13 in configure.sh
    a6f5246565b integration test for empty & unstructured.
    168998e87bf StreamTranslator and FallbackExecutor for WebSockets
    c6b3a2f477c allow empty object to be CEL value.
    8ae0d390d77 add container filesystem to CRI api
    93951bc00d3 Add stability tests for CEL cost estimation.
    d9c967113f9 tests: fixes flake in TestEncryptionConfigHotReload
    6d580da03fd ratcheting: ratchet CEL expressions for no-op updates
    27afb7d75d2 e2e storage: use framework to tag tests
    8a42be978bf Add CDI support to the sample device plugin
    d9131d5b390 [KMSv2] Drop the apimachinery
    6d02fbdbe07 Revert "Promote KEP-2681 to beta in 1.29"
    55e3662b72d dra: refactoring overall flow of prepare/unprepare resources
    fa83d5fef17 node: e2e: topology-mgr: Disambiguage cores from cpus
    e1f5eb3f142 node: e2e: topology-mgr: Determine threads per core
    e74f2d41aab Allow using upper and lower case true|false when setting kubectl feature flags
    074a8b00840 KEP-3638: Promote plugin resolution to beta (#120663)
    b31e7793d0d client-go/reflector: introduce a data consistency mechanism for the watch-list feature.
    d5085c9cbe5 Bumped the fsnotify from version v1.6.0 to v1.7.0
    fb6b10997a7 cleanup: remove useless test
    3f4d3b67682 Cleanup paging parameters in etcd3 store
    2dbd4055834 Graduate ReadWriteOncePod to GA
    42945ea6dc8 update suspend test to match other test cases
    49c947ba15a metrics: add and use ImageGarbageCollectedTotal
    d8a5cd59c08 kubelet/images: add unit test for MaxAge
    914aa746c18 kubelet/images: add and use freeOldImages function
    76e623098c8 kubelet config validation: add validation for image max gc age
    d992ea4b309 kubelet: add and use ImageMaximumGCAge in KubeletConfiguration
    9a58f6c4fb4 Forbid creating CronJob with TZ or CRON_TZ, but allow updates
    34294cd67f2 locking feature-gate for ready pods job status
    b386120da23 Remove storageConfig.Paging parameter
    106f58686d5 Remove disablePaging param
    b0d04d933be Introduce the job_finished_indexes_total metric
    6ab48d1adc5 e2e storage: remove dot at end of ginkgo.It text
    a913abe191b e2e test for checking ready of job status
    fb0ffb07a76 kubeadm coredns use drop ALL instead of all
    81b960efefe e2e framework: allow random ordering of tags and text, fix some functions
    a4efb6fc130 kubeadm: add debug log for kubeProxyConfigFromCluster
    4f5bc7e8d76 fix based on reviews
    82c0cbf6d84 e2e: stop using deprecated framework.ExpectNotEqual
    eb3a11ea142 registry/core: wire NotFound getter instead of nil
    cbe3d897629 Promote CRD validation rule to stable
    fb9f2f5bc59 DRA: e2e: test non-graceful node shutdown
    32fdb551920 Use Patch instead of SSA for Pod Disruption condition
    a7adde53be4 bump golang.org/grpc to v1.56.3
    a1d2df81fb3 e2e: add [Environment:NotInUserNS] tag to sysctl tests
    441d2b40dfd Undeprecated kubelet cloud-provider flag
    4a87ee26998 use PollUntilContextCancel to replace PollImmediateUntilWithContext in test
    cf836309dc2 Add validation for --storage-media-type option.
    8775d805fa6 use PollUntilContextTimeout to replace PollImmediateWithContext in test
    1a41ed394d6 convert pointer to ptr for sig-apps integration tests
    27bb40a9d83 Remove GAed feature gates OpenAPIV3
    c5e25637c64 fix typo
    a25b87d84a3 e2e apimachinery: use feature gate
    ceba3be6b58 e2e: add more feature definitions
    9be1b68ad03 Update staging/src/k8s.io/api/batch/v1/types.go
    00c21ced3ab Fixing CurrentReplicas and CurrentRevision in completeRollingUpdate
    cb5dc46edf7 feature(scheduler): simplify QueueingHint by introducing new statuses
    6dd0ad5c0f3 Graduate BackoffLimitPerIndex to Beta
    8ae32771523 kubeadm: remove unused DNSAddOnType from v1beta4 API
    259dd93e719 kubeadm: skip CRI detection for 'kubeadm config validate'
    3da7802b7c5 kubeadm: cleanup UnknownCRISocket from staticpods test
    aee73352853 add new test cases
    220d5c2e543 remove dead code in test
    79f9bfdc8e5 fix wait.PollUntilContextCancel immediately executes condition once
    8dff3fcb0c8 fix: Use upper case `ALL` in drop capabilities
    0a6d9531f40 update generated code and openapi
    4d21a23be35 pin openapi
    31a1c00e49c cleanup: move unstructured check earlier in status update
    d151f227803 cleanup: remove unused versions of cel validators and structural schemas from CRD strategy
    cc0264f7fc8 cleanup: check unstructured for Validate(Update) before validating
    ced56a6adab Restrict supported media types for new apiservers.
    f5cb2ada944 k8s.io/kms: drop direct dependency on klog
    db8b3031561 Modify mostRecentScheduleTime to return more detailed information about missed schedules
    6c4f71b31ce Fix spelling
    02b0b79eda5 CHANGELOG: Update directory for v1.25.15 release
    9cf35f40016 CHANGELOG: Update directory for v1.26.10 release
    b7477c31b03 update versioned types
    4780a75d5fb CHANGELOG: Update directory for v1.27.7 release
    d7556769e7f Job: Replace deprecated wait functions with supported one
    1babd6f0e3f CHANGELOG: Update directory for v1.28.3 release
    989aadda830 Revert "KEP 3085: check PodReadyToStartContainers condition after volume create"
    d5d3c26337a feature(scheduler): implement matchLabelKeys in PodAffinity and PodAntiAffinity
    2508f468a8f kubelet/userns: Add more unit tests
    0dd495e6dc2 Address review comments
    7ff866463af Refactor watch event serialization to allow caching
    0cda42af7ab Unregister group path from apiserver when the group no longer exists
    a50d83c669e Add basic authz config integration test
    22e5a806a73 Add --authorization-config flag to apiserver
    75f20ee64da update pretty param description
    e312d93a66a kubeadm: increase ut coverage for bootstraptoken/node
    7bcc98c46b9 sidecars: terminate sidecars after main containers
    c8b65422e58 Drop usage of deprecated method NewNamedRateLimitingQueue
    201c30fba82 Job: Handle error returned from AddEventHandler function (#119917)
    7a1ac18bc84 Fix panic if there are more terminating pods than active pods
    fad4430f9e6 cleanup: remove redundant logic in PodReplacementPolicy integration tests
    007ef653ad0 add feature gates for authorization config
    2ccf7e8e49b fix: minor lint issues and redundant check
    056b25dfcab fix: improve PodReplacementPolicy integration test case names and update deprecated methods
    bf32f87d00e skip CEL validations for enum violation.
    e73edf7764f fix: typo in indexed & non-indexed completion policies for failed pod replacement policy integration tests
    bcf1c113f4e cleanup: add new test cases for failed pod replacement policy instead of editing existing ones
    72e67e0ef0d kubeapiserver/options: fix cloud provider validation
    911700e64e3 Fix typos in markdown
    2bf2c4f3a41 staging/apiserver: correct KubeConfigFile type in authorization types
    b500c3d6930 Correct the label selector used in TestSampleAPIServer
    c281c70bac3 kubeadm: remove reference to UnknownCRISocket from getInitConfigurationFromCluster
    7d077f9271e e2e: move AllNodesReady check to DeferCleanup
    ca6fda05ce5 Restart containers in right order after the podSandboxChanged
    75612848195 Remove GA featuregate about CSIMigrationvSphere in 1.29
    e3c58378bc3 Revert "kubeadm: FeatureGate MergeCLIArgumentsWithConfig is added for ignorePreflightErrors"
    9a354fc9d03 node: sample-dp: Add retry to handle device plugin restart failure
    d0d133298d9 node: sample-dp: Use fsnotify for kubelet restart detection
    f46cdf1428c node: sample-dp: set default value for `pluginSocksDir`
    211d8cc80a7 node: sample-dp: stubRegisterControlFunc for controlling registration
    c4c9d61d66f node: sample-dp: Handle re-registration for controlled registrations
    6714e678d33 node: sample-dp: register by default and re-register on restarts
    465d3bb65b9 DRA: notify ResourceClaim or ResourceClass of wrong params
    d2b803246af Don't reuse the device allocated to the restartable init container
    a45a813d5e3 kubeadm: fix "eliptic" typo in API package
    fced85b27a9 run hack scripts to update cyphar/filepath-securejoin to v0.2.4 correctly
    1715fc0ca06 Fix issue in enabling evented pleg feature gate
    defda81bf8b kubeadm: remove `ClusterConfiguration` parameter from preflight check
    5d5958e3389 fix ImageLocality plugin score is inconsistent
    76059738a4f update standard protocols to match KEP3726
    4ae7150f05d remove pc pvc status endpoints
    757597fabfa track unmaintained repo - mailru/easyjson
    2e8f66afb39 Promote PV/PVC status e2e test to Conformance
    28f335a3397 kubelet/images: refactor image gc unit tests
    e22ebf13a95 kubelet/images: refactor freeImage and imagesInEvictionOrder
    d6d2c5775f1 Set gate SkipReadOnlyValidationGCE to Deprecated
    56023e00cbc cri-api: compress OWNERS files
    f2b723a130e fix: improve assertion for Failed PodReplacementPolicy integration test cases
    e3098225eaf bump kube-openapi
    b30c6bdff81 Fix v3 spec
    d1a6c0ae7df Update cri-api change in v1.29.0
    2f923e356e0 k8s.io/apiserver/storage: add a new TestCreate case.
    5d0f8530f6b fix Huge Pages failing test
    7d31b5ffd0a Add test case for sandbox condition if pod fails to mount volume from a missing secret
    dd9c3358f5e Revert "podresources: e2e: force eager connection"
    27abf99148b Remove GA featuregate about ProbeTerminationGracePeriod in 1.29
    5c0618b848d codegen
    011c65e17e2 configure npd to run as daemonset on cos
    39dcad8a19e Populate CRI filesystem info error
    bfda244e54e pkg/proxy: dual stack health checker
    73a8965e2a9 Graduate DevicePluginCDIDevices to Beta
    f69e1fed82f Remove GAed feature gates TopologyManager
    957adfac498 fix invalid log calls
    8009530d77d kubeadm: FeatureGate MergeCLIArgumentsWithConfig is added for ignorePreflightErrors
    fed4f16a7ad Remove GAed feature gates SeccompDefault
    33f2d487e2d Promote KEP-2681 to beta in 1.29
    18c3b6fce43 Register metrics for apiserver handlers
    56836608303 remove deprecated framework.ExpectNotEqual for node
    b548bbb8cf8 When reading pvc status allow bound to be a valid value
    11b0eed9e7f Work around bug in gcloud when downloading logs
    1132fd0afdf add tcp_fin_timeout, tcp_keepalive_intvl and tcp_keepalive_probes to safe sysctls
    4ea6ec738cf pkg/proxy: add an ipFamily field to the winkernel proxier
    6732c4110f3 kubeadm: fix uninvalid namespace field for clusterrole
    332779a3b29 add a simple e2e test
    3a96afdfefd implementation
    fa01dfdb0a4 validation
    0f46033dca2 fixed miscalled function
    9327f3a1734 api changes
    c2d473f0d43 remove ClusterCIDR
    32d2afe42bc kubeadm: fill with the DefaultCRISocket when CRI socket detection is not required
    c72923b17ae Register UnauthenticatedHTTP2DOSMitigation into kube components
    fb1fc8b4a72 ratcheting: disable correlation by index
    d991ed56c29 comments: clear up correlateOldValueForChildAtNewIndex godoc
    0ed67c9e41d cleanup: use swtich in CachedDeepEqual and add more comments
    60c90fc0854 cleanup: consistently support nil receiver and document
    abb68591afd cleanup: clarify correlatedOldValueForChildAtNewIndex comment
    ddcbae734af Add a 0 × 0 case
    fb2e28b0702 Verify more carefully the results in the TestInt64AmountMul
    26a4e06c92c k8s.io/apiserver/storage: add 3 new unit tests for delete.
    e1fa1df3ae8 cleanup: consistent interface{} and any
    0495616230a cleanup: add godoc
    4de3e73b8ac Add test cases for mostPositive and mostNegative
    685ae024332 Add more unit tests
    79325b6178d Multiply by a scalar
    4381eb7237e quantity: Add multiplication methods
    1ae54296291 add potential fixes for flakiness in eviction tests
    db8e106e3f6 Code Refactor: using struct option rather than a long list of parameters
    b0c7956a869 Bump distroless-iptables to v0.4.1
    a34d2f3b134 fix limitrange flaky test
    10151a5e38f kubelet/sysctl: update log level
    cd5db9b7f23 Skip TestUnauthenticatedHTTP2ClientConnectionClose http1 tests
    4dedabf2a65 test: fix boilerplate
    80e378181ea add rundir folder to gitignore
    800a8eaba7f Prevent rapid reset http2 DOS on API server
    968d6b8a325 Update busybox SHA based image to match tag - 1.36.1-1
    78ffa882be2 chore: updates api doc
    de5dcdc79b7 cleanup: fix missing manual selectors in strategy test
    761cb18a688 cleanup: refactor job strategy tests; add test for generating selectors in PrepareForCreate test
    b9b436a0183 cleanup: extract generateSelector from Validate method in job strategy
    c94240e2e2e move kubelet constant for podreadytostart to staging
    1d30a01186d Update publishing-bot rules for active release branches that uses go1.20 to Go 1.20.10
    de01788deaa Switch to newer cos-gpu-installer - v2.1.9
    adae1e33eae kubeadm: remove AlphaDisclaimer for certs phases
    7b1d87383ec add kubelet policy skew test for kubeadm
    5ad5ef1d0f6 Switch to newer cos-gpu-installer - v2.1.7
    0149c1f8b31 test: few more correlatedobject test cases
    ba9347230e6 test: add correlatedobject test cases
    15ae6cc1607 pkg/proxy: add flag to configure udp conntrack timeouts
    c08a9321eed cleanup: add header and fix spelling
    27cb869e559 refactor: move correlatedObject to its own file
    b321e8bf0db refactor: make CachedDeepEqual independent of validation
    921c0d01800 cleanup: add defaulting for job manual selector (#120206)
    c83e73ba571 CHANGELOG: Update directory for v1.29.0-alpha.2 release
    baac8bb573c k8s.io/apiserver/storage: add some ResourceVersion validation in GetList unit tests
    ebca5d438d9 k8s.io/apiserver/storage/etcd: refactor getCurrentState.
    555c1b8091c bump kube-openapi
    83760ae56c8 update openapi with required requestBody
    5eb7fea3834 [go] Bump images, dependencies and versions to go 1.21.3
    a504aed54d0 Add shortname ambiguity warning in shortcut expander (#117668)
    7989400bef5 Fix concurrent write when filling PVC labels
    54714686bc6 Modify test PVC to detect concurrent map write bug
    d7ee6b9d1bd fix possible panic if pod replacement policy is turned on and jobs do not set pod replacement policy
    2c1836bc245 remove deprecated framework.ExpectEqual
    990a46f9bde Update QueueingHInt's KEP
    b42b3f740a4 Pod Security admission allows net.ipv4.tcp_keepalive_time in v1.29+
    0167a9f833c mark net.ipv4.tcp_keepalive_time as a safe sysctl
    babac47c6f1 fix DevicePluginProbe node-e2e: pod and kubelet restarts
    4acaf9ebed7 Add service name tests
    438c0daab75 add rest of accessors to common.Schema
    0f989046d06 kube-apiserver: move cloud provider validation into options
    5de835d5d89 Add runtime handler field to ImageSpec Will be used by changes for image pull per runtime class in KEP 4216
    80269d5d349 fix missing http.target trace attribute
    dc334b953d9 dependencies: update otel-go dependencies
    e76aad1813b refactor: use common.Schema in CorrelatedObject
    83a1dbf885d refactor: export correlated fields
    e73f3c8cdb3 refactor: add methods for Key and Index on CorrelatedObject
    fc7c951d5a5 .: bump golang.org/x/net to v0.17.0
    2032b742546 KCCM: fix GCP ILB by reintroducing readiness predicate for eTP:Local
    471e3ab8281 refactor: factor out object correlation
    30cf9ed5677 refactor: directly implement ValueValidator
    4fb5f1a6119 refactor: remove unnecessary lambda (noop)
    19ecf93ec3d e2e: define features and node features
    f2d34426f86 e2e: enhance SIGDescribe
    39b6916cbcc e2e: add wrapper functions to annotate tests
    535ab743461 e2e framework: track and report internal bugs
    3afdcc03ea5 e2e framework: list specs and labels
    aa4d2fc5edf e2e storage: remove useless info message
    581af9ba6da kube-apiserver: use only one client in apiserver controllers
    215c4627ef9 Update SECURITY_CONTACTS
    e9957d79aae make update
    0eacff0baf9 compatibility (adapt testdata)
    b7ee8e84221 drop UID from the IPAddress.Spec.ParentRef
    f538be659c7 hack: fix update of golangci-lint verify scripts
    6c395eb098d Fix "Endpoint" vs "Endpoints" in proxy type names
    00ae26cda8f Create e2e test for PV/PVC status endpoints
    b190ea0c966 hack: update golangci-lint verify scripts
    302d350e88e set maxLength to longest enum.
    d4a5a085a84 Improve error message in cpu assignment logic
    79355caa565 dependencies: ginkgo v2.13.0, gomega v1.28.0
    52c58d970e5 fix data race in apf unit test
    a6b0a6c484d Bump distroless-iptables to v0.3.3
    f3c786cbda7 Fix regression in cmd/kube-proxy/app unit test speed
    e86e756c27e Update publishing-bot rules for active release branches that uses go1.20 to Go 1.20.9
    0be5fdb5ced Add volume plugin label to SELinux metrics
    137ad9bf2b5 clean up deprecated funcs in e2e framework
    d5d7fb595ee e2e_node: stop using deprecated framework.ExpectEqual
    5f74461bcd7 e2e_apimachinery: stop using deprecated framework.ExpectEqual
    122ff5a212a Move grpc rate limitter from podresource folder
    9cca527c4b3 Migrated  `pkg/scheduler/framework/plugins/examples/` to use contextual logging
    62683c8d959 pkg/proxy/ipvs: hardening lb source ranges filtering
    ccc6458683d e2e_node: add testcase to check status of pod ready to start condition are set to false after terminating
    c3bf541edee kubeadm: clean up unnecessary references to UnknownCRISocket
    bb02d0febab fix incorrect Consistently due to missing assignment when create a newAsyncAssertion
    7cba35f6519 nodeports: scheduler queueing hints
    20db4ef3d64 kubeadm: fix wrong ut for util/etcd
    4a8267f26be kubectl: ensure '--duration' must be positive for 'kubectl create token' command
    3c4512c6ccc hpa: always update status metrics when updating the replica count
    89adbb4b4aa Unit & integration tests for OpenAPIV2 AddUpdateAPIService
    83fb504e46c Fix 120878 - Refactor cacheabledownloader so handler can be updated and fix AddUpdateAPIService to update handler
    3ee2f27e5bb kubelet: cloud-provider external addresses
    619abfec70a [go] Bump images, dependencies and versions to go 1.21.2
    8b5f30ef096 Don't reuse CPU set of a restartable init container
    e8e22f645d0 kubeadm: Optimize the logic to override the arguments
    8510057e2da kubeadm: increase ut converage for bootstraptoken/clusterinfo
    a888fef242f Use timeout function to detect transient errors
    1b489963c8d Add nil checks for hpa object target type values
    0f632988297 generated: UPDATE_COMPATIBILITY_FIXTURE_DATA
    3808812de7e ValidatingAdmissionPolicySpec: Variables omitempty.
    a213edae2a6 Add package-level godoc to pkg/kubelet/cm
    b2f0052d27a Make a certain ipv4-vs-ipv6 config error non-fatal, for backward compat
    b96a074bcdf convert pointer to ptr for job controller
    1d519f1b087 cluster-bootstrap: make IsValidBootstrapToken() be in constant-time
    914210ee9a6 revert back to IsUnexpectedCloseError check
    e1ae9060480 Close websocket heartbeat explicitly when unexpected closure received
    c03579bfa40 typed variables support.
    4d157bb1427 add single boolean to composition e2e test.
    69a3e3d1089 Add --extra-peer in conversion in kube_codegen
    3de0d9afbb3 pkg/kubeapiserver: pass authorizer in top level while building from legacy options
    4b391501795 reflector: fallback to the previous mode on any error
    11ce6d29157 k8s.io/apiserver: fix levelling of the name field in AuthorizationConfiguration
    5f8fc30b2c0 Added locks on request tracker before accessing fields (#120599)
    9b32a47ab65 integration/apimachinery: add TestReflectorWatchListFallback integration test
    c65fe450d8a Generated files
    26f113be2fc reflector: close an established watcher when the StopCh was closed
    f17468ff060 Fixs a validation error in teh admission registration API
    6d759aac910 delete addon-manager test
    e7b2aeee930 Fix API docs for audit APIs
    38935b787ea Do not fail volume attach operation at kubelet if staging target path already exists on windows worker node.
    243ba5fb6b6 remove an e2e test specific to kubeup clusters
    98bad643cde e2e_apps: stop using deprecated framework.ExpectEqual
    566fad5eda3 add metrics to the ipallocator repair loop
    4eff70dcf9f add metrics to the nodeport allocator repair loop
    6c9ddf300cf update generated
    9242cb19348 Rearrange kube-proxy config fields / CLI flags to make more sense.
    44cb330aa00 Improve kube-proxy config / CLI documentation
    0b76e7b69fb Fixing attempt to deploy past allocatable memory limits test on Windows
    d2a3184c47c remove pkg/encrypt and pkg/value in kms
    e764e83fe88 remove mock aes, latency and ratelimit wrapper remote services
    2f5708833a5 [KMSv2] pkcs11 reference implementation using SoftHSM
    74180aaf661 Fix scalability concerns in test runs
    5ebde41efb5 Refactoring variable declaration and value setting
    0e8a1f18163 e2e: remove redundant spaces in test names
    6200eb04aff use generic sets in scheduler
    e320fadebe6 kubeadm: add unit test for phases/bootstraptoken/node/token.go
    d9002176649 fix missed branch - targets when building using arm64
    61603d36d73 Fix 120739 - Prevent AddUpdateAPIService from blocking on updating spec
    7437ad2617a Add/update prechecks to verify-govulncheck.sh
    59ad81a6157 controller/clusterauthenticationtrust: complete event filter
    a0610a97b3d pkg/kubelet/cm: Remove deprecated sets.String and sets.Int
    63950491764 controlplane: make option structs uniformly optional
    a97f4b7a312 endpoints/metrics: define watchListLatencies metric and associated functions
    5dc540ff57e k8s.io/client-go/tools/events: pass context into EventSink methods
    27a68aee3a4 k8s.io/client-go/tools: support context for event recording
    772b1f4cd84 handlers/watch: calculate and record WatchList latency metric.
    4d2d9947bf8 Deprecate cloud-provider/cloud-config in apiserver CLI
    394bcaf1820 Only configure swap if available on node
    2b973806bc7 Remove remaining unnecessary assertIPTablesRulesEqual checks
    de077f448e9 Rename TestNonLocalExternalIPs to TestExternalTrafficPolicyCluster
    19f19e2f4f9 Merge the `ExternalTrafficPolicy: Local` tests together
    ff5f5bc1613 Merge several NodePort tests into TestNodePorts
    f38231d5687 Merge all the "reject when no endpoints" tests together
    2435da11d5d Rewrite TestClusterIPEndpointsMore as TestClusterIPGeneral
    ce7ffa81754 Extend iptables packet tracer to support multiple node IPs
    2172ea60836 Fix typos: update Enpoint to Endpoint
    6297067ff1a apf: request ejected from queue should use reason 'time-out'
    11ef9514dad apf: remove RequestWaitLimit from queueset config
    da8a4722066 apf: remove timeoutOldRequestsAndRejectOrEnqueueLocked function
    f39213a7e44 apf: use context for queue wait
    52f5093d775 Build kubelet with CGO for sig-node e2e tests (not ginkgo)
    9b32d2f67d4 Default clientset_pkg and clientset_name variables
    36146ad686a e2e dra: enhance test driver
    46835f8792d CHANGELOG: Update directory for v1.29.0-alpha.1 release
    cdcf49ea12e Fix 120758 - prevent cache Load on uninitialized spec
    0ba37e70b6e k8s.io/dynamic-resource-allocation: fix potential scheduling deadlock
    2ce4f85a465 update verify script to check deprecated fields
    e5f25ccb620 k8s.io/dynamic-resource-allocation: fix compatibility with Kubernetes 1.27
    70ae9c441ce storage/util: introduce HasInitialEventsEndBookmarkAnnotation
    e1a572fb2ed update filepath-securejoin dependency to 0.2.4 to fix security vulnerability
    4a74958b2df deflake TestWebSocketClient_HeartbeatSucceeds
    ca562fd280a storage/etcd: the watcher supports the API streaming
    84d5e7c8fac remove RetroactiveDefaultStorageClass feature gate
    1a68195626a kubeadm: fix the bug that kubeadm always do CRI detection when --config is passed even if it is not required by subcommand
    1d88bf9789b scheduler/nodeaffinity: reduce pod scheduling latency
    72b68b8003c Remove dpasiukevich from cluster/addons/dns OWNERS
    b71d7f9305c use generic Set in scheduler
    7c5219438df Remove an old compatibility check/warning
    5c80007eccb cluster-bootstrap: make randBytes() be in constant-time
    1b602ffd9a4 Bump Konnectivity to 0.28.0
    06deb49d2c9 Fix panic testing intree vSphere dynamic PV.
    0910fe4b983 Extend iptables packet tracer to check the protocol
    a25fb03c00a Add assertIPTablesChainEquals, to streamline a few tests
    0ab0e404b83 Drop the now-unused assertIPTablesRulesNotEqual
    4438f5e436b Remove assertIPTablesRulesEqual checks from terminating endpoints tests
    d57a51d0a90 Remove assertIPTablesRulesEqual from InternalTrafficPolicy test
    43db55e93de Rename and extend TestOverallIPTablesRulesWithMultipleServices
    a96b97e40c0 storage/etcd3/metrics: add unit test for apiserver_storage_objects
    534a0941e8d kubeadm: change kubelet skew to apiserver to n-3
    0e238c4c28f storage/testing/watcher_tests: add new flavour to RunWatchSemantics test and fill the gap
    9345da51ac4 fix comment mistake, run "make update"
    45a776d5ff4 update rules to switch from deprecated dir field
    9fb77db9b93 e2e: set liveness probe timeout seconds for conformance test
    5d56f7cf86f Apimeta Set/RemoveStatusCondition: Indicate change
    b489beb365f Remove an old compatibility check/warning
    eb109e39480 e2e: bootstrap vsphere tests earlier
    d3d1827c054 Use local isCgroup2UnifiedMode consistently
    8a31bb6786c workqueue unit tests to assert collapsing behaviors
    dc5cfe3cff2 storage/testing/watcher_tests: refactor RunWatchSemantics tests
    b5bffb6d97f kubeadm: add v1beta4.ClusterConfiguration.EncryptionAlgorithm
    d8cf68e75fb kubeadm: Nominate myself (chendave) as kubeadm approver
    0786fcc941b kubeadm: Remove the support of configurable component configs
    3eb6c4d368e Migrated `pkg/scheduler/framework/plugins/volumebinding` to contextual logging
    0105a002bc6 when the hint fn returns error, the scheduling queue logs the error and treats it as QueueAfterBackoff.
    ed76c371df9 kubelet/lifecycle handlers: refactor port resolver
    e00551fe5d4 Allow storage migration of CTB without attest authorization
    c816601d834 reintroduce resourcequota.NewMonitor
    7cfdb792d69 Revert "Skip kube-dns tests if coredns is installed"
    f5d915b5947 topology-mgr: metrics: Deflake Topology Manager metrics e2e tests
    a7466f44e01 Change the scheduler plugins PluginFactory function to use context parameter to pass logger - Migrated pkg/scheduler/framework/plugins/nodevolumelimits to use contextual logging - Fix golangci-lint validation failed - Check for plugins creation err
    41584bde233 fix code style
    de244b2678f Promote StorageClass e2e test to Conformance
    b23575d0fcf remove storageclass endpoints
    a62eb45ae2b Rename job reasons to JobReasons as part of api review
    301aa69fec5 cronjob controller: ensure already existing jobs are added to Active list of cronjobs
    5ed60a72f62 Revert "Make StatefulSet restart pods with phase Succeeded"
    5341890c96f add missing labels to kube-dns deployment
    9e060590e6f skip kube-dns tests if kube-dns is missing
    2a827767458 change rolling update logic to exclude sunsetting nodes
    04668c00432 cache/reflector: check the value of the initial-events-end annotation
    83c37acb21f e2e framework: adapt unit test to Go 1.22
    5c28fd28478 vsphere: adapt to govmomi bump
    4b60c18183f storage/etcd3/watcher_test: refactor TestWatchErrorWhenNoNewFunc to a table test
    26a395ecc28 Trigger CI
    12c0c08e658 fix data race in test
    9533cfe2eed fix: add unit test
    bad0593a686 fix kubelet image gc
    91bb75883c6 storage/testing/watcher_tests: make TestCacherWatchSemantics storage agnostic
    272b23cc7ad kubelet: fix log when using --reserved-cpus
    42356bfbb3e move common logic of highestSupportedVersion to util package
    fc6b19a4ba6 .: bump govmomi to v0.30.6
    afbb1a6ef98 storage/testing/watcher_tests: move TestCacherWatchSemantics (no-op)
    3a96baf3fa8 storage/testing/utils: add helper functions
    c8b9d64d81f scheduler test: unify util to fake pod.
    b953708fa93 Update 1.29 Release Notes team
    a919079ff31 Check --show-events in kubectl describe pvc (#120380)
    1a27531d2e1 Fix for Kubeproxy Mock framework where hcn object is holding always new object and not the pointer reference.
    108d1955954 use AuthorizationConfiguration in kube-apiserver for storing authorizer config
    52c582ca77c Bootstrap API Types for Structured Authorization Configuration
    bbb905c794c remove gce healthcheck interval e2e lb test
    b59d4afd14e fix typo exeucting => executing
    62275e3cc8c fix typo dervied => derived
    79a7833ade0 fix typo Mininum => Minimum
    6e3ebdc68e7 fix typo Conext => Context
    409b46576ff bump github.com/emicklei/go-restful/v3 to v3.11.0.
    b4e5b868a8e Don't reuse memory of a restartable init container
    10caecb3b22 kubectl prune v2: switch to contains-group-kinds annotation
    6c59e8be5e2 hack/update-vendor.sh
    dad1b2a4306 Fixup kube-openapi/pkg/cached changes
    e1ffbacb7ae go.mod
    7cac1dcf678 dra scheduler: fall back to SSA for PodSchedulingContext updates
    39af594f312 storage/testing: a simple refactor
    40618b765cc add loging and bump timers to avoid races
    3cb0b520d60 Scheduler CSI tests: switch maxVols to int32
    79d0dde4a83 replace hardcode string with exists variable
    9b50af1f4f8 Use a wider-range of metric buckets for PodStartDuration
    62267518b83 Fix systemd unit string matchs
    c6e9fba79b8 move reasons to api package for job controller
    e22f8ed553c add CAP_NET_RAW to netadmin profile and remove privileged
    0288367db80 test-e2e: Retrigger the RBD image post merge job
    28dbe8a34dc scheduler/NodeUnschedulable: reduce pod scheduling latency
    2f10dd0a841 CHANGELOG: Update directory for v1.25.14 release
    2a7902f7c7b CHANGELOG: Update directory for v1.26.9 release
    7c98d3fffd7 CHANGELOG: Update directory for v1.27.6 release
    309876b5d78 CHANGELOG: Update directory for v1.28.2 release
    710dceded51 Look for pods in ownerReferences of PVC (#120427)
    80c8074e3be service controller: limit logging node names to 50.
    349e3ebf80b service controller: improve node lifecycle updates - update nodes if providerID has changed
    21e26486ac3 sync Service API status rest storage
    239ce7c52b1 e2e_network:stop using deprecated framework.ExpectNotEqual
    7fc11f47ff4 Mark a volume as uncertain-attached after detach error
    99903071469 kube-scheduler: drop deprecated pointer package
    9e34aa306cd Update hack/verify-govulncheck.sh
    5fcffcf4e48 Add APIGroup ratcheting validation to PVC.DataSource
    af151eeba2c specifically check that the pod was successful
    7710128636a kms: remove livez check
    15ce5dd9903 kubeadm: fix flaky-test TestManifestFilesAreEqual
    4f20a72ea00 variable name should not conflit with import package, replace the variable name
    084deb7a7cf clarify the description of the metric apiserver_storage_objects
    9da533ced6f API Chunking conformance metadata
    3d91ffc6f9b /cmd/kubeadm,/test/e2e*: update OWNERS for fabriziopandini & RA489
    4e0c8a97521 kubeadm: remove reference of k8s.io/kubernetes/pkg/apis/core/v1
    4d105eb1ce8 add TestUnmarshalJson for UniversalUnmarshal
    819eddaf9a4 scheduler: fix TestIncomingPodsMetrics unit test
    6fbb8ec7e44 Move scheduler testing utils to /scheduler/testing
    868adeb3bdb Update IPPVS e2e tests for containerd version above 1.6.9
    6b4ab616a2c Increase range of job_sync_duration_seconds
    d765e40a988 pass GOTOOLCHAIN to build containers
    7ad0e451aca remove unnecessary kube::golang::verify_go_version calls
    43b434f66a8 sig-node: add rphillips to reviewers
    d1b5a9953a0 handle GOTOOLCHAIN in kube::golang::verify_go_version
    4d55c0687db Reuse SupportedMediaTypes for CR content-type negotiation.
    09d64ed7d4f promote sli metrics to stable
    0df4a69f5c9 Kube-proxy: Get nodeIPs for both families with dual-stack (#119525)
    0d3eafdfa39 fix(scheduling_queue): always put Pods with no unschedulable plugins into activeQ/backoffQ (#119105)
    e6435e98eda promote component SLIs to GA; remove feature gates for component slis
    e2c1c0d34a6 kubeadm: drop deprecated pointer package
    357d7804b8f kube-proxy: drop deprecated pointer package
    678b958567e use universal decoder and add a check on default dns Policy of static pod for test
    1fb4eee94e0 Use container log instead of termination log
    190f9d0d4b9 Add govulncheck script to expose go vulnerabilities
    fc3ee07b512 e2e pods: fix WaitForPodsResponding retry
    6f9140e421c DRA scheduler: stop allocating before deallocation
    2dd7db306a6 Update modules.txt
    61ecc2ad884 Retry operations if CSI Driver Isn't Found by Treating this Error as Transient
    d3eb082568c Create a node startup latency tracker
    2d86c333f57 add test case for generating etcd manifests
    912041ce41b kubeadm: fix diff order and add test for new default value manifest
    41b62c4dd71 Promote PV/PVC e2e test to Conformance
    0936c8de59f remove persistentvolume endpoints from pending_eligible_endpoints.yaml
    f4467457776 Improve logging on kube-proxy exit
    df5c1bb1ea1 added documentation about the format of certificateKey
    43ccf6c4e8f kmsv2: add apiserver identity to metrics
    c1a0aa08e31 Add cni plugin auto Arch and OS selection
    b443a841e30 kubeadm: add log for static pod manifest diff
    f135eed37b9 update codegen
    d7264d0af03 Make StatefulSet restart pods with phase Succeeded
    4e73634b531 scheduler: start scheduling attempt with clean UnschedulablePlugins
    7e4b5d0d49a Final Fix
    f499b4f8918 Bump distroless-iptables to v0.3.2
    18932d970ef [releng] Update publishing-bot rules for active release branches that use go1.20 to Go 1.20.8
    93e3b07e11c [cluster/gce] Add KCM specific args
    48f453d6498 cloud-provider: Log additional options
    aa89e6dc978 Use ptr.To to retrieve intstr addresses
    9feaefb5cbc Increase ut for kubeadm phases init addon rename field casename to name do go lint check Update addons_test.go to remove whitespace
    5e0931336b5 kubelet: fix metric container_start_time_seconds's timestamp
    3e2bad02dcf kubeadm: remove 'system:masters' organization from apiserver-etcd-client certificate
    a0a8765027a fix: update thirdpartyresources refs
    5c7dac2d772 dra scheduler: refactor PodSchedulingContext updates
    43c05e98ca4 cleanup: Replace the deprecated NewMemCacheClient with memory.NewMemCacheClient
    a69f56e1375 fix: check if initsystem service exists
    7dea3d6c3bf New mock test framework for windows kubeproxy.
    975da2fb239 fix typo in client-go package
    3a1a67e33d7 add aojea as controplane reviewer
    cc77b97c5e9 add aojea as client-go approver
    7a13b11af0e update e2e import restrictions
    6c973f01d23 reduce CPU requests for fluentd-gcp to fix failing tests
    08006c842fd apiserver: rename request body size metric
    8451c80b601 pin gengo
    93d93258b19 bump: upgrade gorilla/websocket from v1.4.2 to v1.5.0
    98af8befe27 [go] Bump images, dependencies and versions to go 1.21.1
    dbd3eb54191 remove logcheck.yaml
    f365cae9ee6 Fix typo in api.proto
    2d1877c97b6 fix breaking pv creation when the validation webhook exists
    f33265cf5d0 HandleRetry has already called in the GetObject
    fc51a27c036 fix typecast missing
    2ea47038b90 podresources: e2e: force eager connection
    6cd446a2064 Add cloud library to unwanted deps
    9f76d8d45a0 Track vendor status of unwanted deps
    87d49a51bed fix(queue_test): make sure the first bind failure via counter
    94afd6e3a4d skip the reason check for OOM tests if it will fail
    f47661e1b72 fix inplace VPA stuck in InProgress when custom resources are specified added unit tests
    d7b7a85fbc0 feat: make user-defined plugins discoverable with e.g. kubectl help (#116752)
    b468e4eb1cd e2e_node: Assign enough time to finish the postStart hook
    c4dd16a1f86 golangci-lint: warn about deprecated APIs only as hints
    36d36722499 e2e_auth: stop using deprecated framework.ExpectEqual
    9c1df5ff0af move back to bullseye
    67858e1ff06 Bump images, dependencies and versions to go 1.21.0
    0593cfdd14f Fixed variable used for moving auth-provider-gcp binary
    c682d2b8c59 scheduler: add ResourceClass events
    2ad4304e8f2 Add Windows support for IPPVS
    15a402eefb7 e2e_apimachinery: stop using deprecated framework.ExpectEqual
    43fc6b5bdb0 Added suggests changes
    355ae44a3ca Revert "bump npd to v0.8.14"
    e7ee3ae3d94 Create e2e test for StorageClass endpoints
    418af0f4dcb register API types only once for encryption config
    2144852f7c9 Commits merged
    657cc2045ee kmsv2: enable KMSv2KDF feature gate by default
    b97cb6dd007 Revert "Do not attempt to overwrite higher system (sysctl) values"
    c131c92b9f3 scheduler: unit test case for concurrent event with other pod
    a0d6a815fcc WebSocket Client and V5 RemoteCommand Subprotocol
    0024c7e1668 Changed the generator codes for kubernetes metrics table
    cd943dd95e3 scheduler: fix tracking of concurrent events
    933bcc123b4 only drop invalid cstate packets if non liberal
    7c75b018d57 cmd/kube-apiserver: add .import-restrictions
    43783aeb18c drop release-1.24 rules from publishing-bot
    e190e179b3c Document `cluster/gce/gci/mounter` as static binary
    059e8353b76 check labels/annotations in the beginning
    6ec8dbe5b59 cmd/kube-apiserver: avoid importing the kubeadm pkiutils package
    a7748872621 cleanup:e2e:stop using deprecated framework.ExpectNotEqual
    e8564d6c5bc KEP-3895: Promote interactive delete to beta
    14e7d97151e Remove GA featuregate for JobTrackingWithFinalizers in 1.28
    ef235c4eac8 e2e_framework:stop using deprecated wait.ErrwaitTimeout
    b35357b6c08 cleanup: omit comparison with bool constants
    622eac23477 e2e_storage:stop using deprecated framework.ExpectNotEqual
    7c33b78418c  remove resource flowschemas and prioritylevelconfigurations for legacyBetaEnabledByDefaultResources in v1.29
    9795df456f3 cleanup:e2e:stop using deprecated wait.ErrWaitTimeout
    fc25af7f548 using wait.Interrupted instead of deprecated wait.ErrWaitTimeout for apps
    e6dfdb240fd Output the error message for better analylsis
    ff3cb43c300 remove labeld-deployment.yaml
    cae090e7fed scheduler: remove unused constant SchedulerPolicyConfigMapKey
    c74d045c4b7 scheduler_perf: show name of one pending pod in error message
    3c2cfd9a4fd resource claim controller: separate generated suffix from base
    2c5a11a55bf Match on cri-o socket suffix only
    214772c1104 dependencies: update opencontainers/selinux to v1.11.0
    95118ec30c1 e2e_network:stop using deprecated framework.ExpectError
    3f8f14397e1 Set external credential provider to true by default in kube-up.sh
    410ac1456ce Don't run the nodeipam controller on KCM if cloud provider external
    45b9b0df41f Add namespace to apiserver tracing
    c83eb6dcaaa Add subresource to apiserver tracing
    bcb59a03ebb Add name to apiserver tracing
    646053d73db Add api-version to apiserver tracing
    8c34208a62f Add group to apiserver tracing
    6f55437472e kubeadm: increase ut coverage for addons/dns/dns.go
    ceaed508ce7 Validate the cloud-provider passed in and the corresponding feature flags
    2e5f17166b9 pkg/proxy: fix stale detection logic
    95121fe846f kmsv2: add legacy data integration test
    42e8cfa28ac fix failing metadata test
    cdcbfcc0a6a [KEP-2395] Phase 4 - Disabling In-Tree Providers
    8255858a7c4 remove SkipFilterSchemaForKubectlOpenAPIV2Validation
    0fb1f59a881 Improve service unit test failure report
    39e433891bc fix(test): delete cronjobs.v1.example.com pi for clean up
    36e33cd88e8 fix(test): Remove 'shortNames' Property from CronJob Fields in e2e-test
    3e252857c1c Add unwanted cloud deps to track
    875b00137fd storage/etcd: add TestWatchDispatchBookmarkEvents unit test
    6058540f3d0 storage: document ProgressNotify from storage.ListOptions
    f4fc4b16b1d doc: Add example for restarting all deployments in a namespace
    936d67f6888 Update distroless-iptables image version to v0.3.1
    bb695ac67a2 eviction manager: add test case with localStorageCapacityIsolation open
    a56745c7066 e2e_cloud:stop using deprecated framework.ExpectError
    bfc3c2110fc e2e-node: fix TopologyManager test jobs.
    3d9b5d05772 e2e_node:stop using deprecated framework.ExpectError
    f1051f34a79 Remove deprecated framework
    062c57ae92f dra controller helper: make allocation error message more readable
    f96e23e477d dra controller helper: merge log entries for informer events
    78f3b76390b scheduler_perf: use different log names for different DRA drivers
    d781b58100f dra helper: skip allocated claims during UnsuitableNodes calculation
    fcff9969095 adjust error message a bit
    889c8e919bd New repo who dis? distribution/reference
    741f1461571 Revert to json-patch 4.12.0
    b10697c7880 kmsv2: fix race in simpleCache.set when setting cache size metric
    8f6a79b29fa use external cloud provider by default with gce
    903156daa2b fix(test): add e2e-test for kubectl events filter by GroupVersion
    a46bab69308 Fix a job quota related deadlock (#119776)
    696f84aeb09 Feature-gate SidecarContainers code in pkg/kubelet/kuberuntime
    63177db32c2 Add an e2e test for the pod sandbox changed scenario
    e167ecbb9ea fix: only invoke AddReference first time when to sync same pod to minimize unnecessary API requests to the API server for the configmap/secret get API
    3c5a58c5f89 Refactor checkErr func
    f22d8540723 unwanted-dependendencies: updating references, and `jq`
    0323fe42e23 adding more callbacks in kubedrain helper
    e01bd641447 Avoid creating local variables that don't change
    10553a19668 Flatten switch case
    1f4f2a5d601 Refactor common WithRange case
    ede524e1a6a fix a pidpressure test flake
    3bc6ee6fef7 unwanted-dependencies: sort this list
    eb5695b0c5c unwanted-dependencies: adding archived repos
    15c02f2a034 add integration tests
    9e1ff1e5120 add loading config and wire feature flag
    57b27fd3cd1 Fallback to legacy discovery on a wider range of conditions in aggregator
    160589a0edb Refactor transformers for watch to implement Encoder interface
    04f0b4a0147 Bump CloudDualStackNodeIPs to beta for 1.29
    46cb5386423 OWNERS_ALIASES: add tzneal to sig-node-reviewer
    bf41b0462cc Fix OpenAPI aggregation cleanup
    16a7b536022 Fix typos in comments
    2b69daa960c Allow specifying ExternalTrafficPolicy for ClusterIP Services with ExternalIPs
    be4692864bb Remove duplicated returnRV variable
    2e174a029f5 Add timeout to listContainerStats context
    2825519da2c apf: remove v1alpha1 API
    a926f594da9 Bump runc to v1.1.9
    7b44d73f73f bump npd to v0.8.14
    879dad9c2ff kubeadm: Remove the usage to print the default component configs for `reset` and `join`
    53cb35d6d48 e2e_apimachinery:stop using deprecated framework.ExpectError
    8a368afa273 e2e_storage: stop using deprecated framework.ExpectEqual
    209f23ecd7c e2e_upgrades: stop using deprecated framework.ExpectEqual
    41adc93ca3a remove GAed FG DownwardAPIHugePages
    e187368242b fix(test): fix TestGetPodResourcesV1 comparison logic in tests
    7e7b67f2ccd remove GAed FG GRPCContainerProbe
    af7d76fa059 Promoted feature gate `ServiceNodePortStaticSubrange` to stable and locked it to always active
    5dbec5c715b local debugging should utilize the same defaults as prod
    d5690f12b69 pkg/kubelet: allow sandbox image pinning from CRI
    8581703b07d Prune sig-auth-encryption-at-rest-reviewers and drop lavalamp across aliases
    f5d6c65186d paginate initial list inside the storage watcher
    8d9517318a4 Extend npd e2e timeout to fix npd e2e error
    618e40c61b7 kubeadm: promote EtcdLearnerMode to beta
    b2c0d80c37f Test watch converter encoder
    03126c54658 add comment
    651eb2fa58f revert PR https://github.com/kubernetes/kubernetes/pull/119592
    709721e0df1 feat: update google.golang.org/protobuf to v1.31.0
    3fcc045bce9 Minor cleanup tranformers interface
    172a41192c6 Cleanup setting non-nil Items field
    5269e769902 scheduler: properly skip DRA events
    1988c31fc81 storage/etcd3: error when progressNotify option set and newFunc was provided for a registry
    580f83ab4a5 Avoid duplicated dots in pod condition
    855b445d28d Remove deprecated selectorSpread
    c29234d3e10 Add integration tests for all bind plugins skipped in TestBindPlugin
    87165303464 Add unit tests for extract tag functions in prereleaselifecyclegenerators
    0ea6522807d apiextensions-apiserver: generate applyconfigurations
    dbbce2aaba2 sort stability list of metrics in the shell command (#120197)
    9a24dd2c27f fix(test): fix error comparison in GetPodResourcesV1 test
    94d03ccc83b Squashed commit of the following:
    030a114ce94 Add mengjiao-liu as sig-instrumentation reviewer
    cc784cfe857 Mark Job onPodConditions as optional in pod failure policy
    3d583398fe2 Avoid to build the error msg for twice
    484510863bf e2e_windows: stop using deprecated framework.ExpectEqual
    f5681f88179 e2e_autoscaling: stop using deprecated framework.ExpectEqual
    05bb01d27a8 e2e_cloud: stop using deprecated framework.ExpectEqual
    eb0afbc7d01 kubeadm: update swap warning for v1.28 change
    fa37bebcd4b Add comment about why AttachFunc be overridable
    d680bc540b5 fix(test): fix error handling condition in test
    01df59a73b9 pkg/proxy: remove equal method from endpoint interface
    6fc3d0ecefd remove GAed feature gates CronJobTimeZone, JobMutableNodeSchedulingDirectives and LegacyServiceAccountTokenNoAutoGeneration
    e9be1d7438b Test now has coverage!
    628bbb9ef8a kubeadm: add supported etcd version for v1.29
    dcbe7755bfb kubeadm: Add testcases for exported method `ValueFromFlagsOrConfig`
    78538bd303d update coredns to v1.11.0 update coredns to v1.11.1 update coredns-kubeadm to 1.11.1 bump up corefile-migration to v1.0.21 based on https://github.com/coredns/corefile-migration/releases/tag/v1.0.21 fix dns_test ut failure
    e410f86825f [StructuredAuthnConfig] use local variables in oidc pkg
    1bf90f9484c add StructuredAuthenticationConfiguration feature flag
    1bad3cbbf59 wiring existing oidc flags with internal API struct
    f909eb630ca add AuthenticationConfiguration v1alpha1 api
    ff56d3b6914 Refactor WatchServer to prepare for using encoders
    a4ce32769ff fix pod delete log in deployment controller
    0bc0256093b Update job_controller_test.go
    ff10df107a4 remove fake deployment
    13a8ad12b82 apiserver: fix data race in etcd metrics
    dec1c361255 add kubectl rollout e2e test
    22f4b1c56ad Static check fix
    70e2deb32f9 Fixing lint problem
    6ded53ce4dc Added back test changes
    5fb049ff473 Added create job & cleanup
    ff1659cb798 Added syncjob
    f87cc43cdb0 Review Changes
    d08fc3a4d01 Another one creeped in
    ef6a0eb6d85 Final Lint Fix
    aa9f38c36d8 More Lint Fixes
    601679446ae Lint fixes
    cf32ae9453b Initial Commit
    297f04b74ae Added function to remove finalizers as backup
    1d52fb2806e CHANGELOG: Update directory for v1.28.1 release
    5524f1651a2 using wait.PollUntilContextTimeout instead of deprecated wait.Poll/PollWithContext/PollImmediate/PollImmediateWithContext methods for scheduler
    c9c83d1af44 cleanup: e2e : stop using deprecated framework.ExpectHaveKey
    47d9a47a088 storage/util: introduce AnnotateInitialEventsEndBookmark function
    ccabc01093a storage/factory: extend the Create method by newList and resourcePrefix params
    02e51b27a9a CHANGELOG: Update directory for v1.27.5 release
    13b52a18483 fix crd finalizer validation
    ab018481342 Make sure skip score plugins alwarys returned
    6805632abb8 CHANGELOG: Update directory for v1.26.8 release
    f847565c081 Move mount warnings to info logs for normal expected paths
    63df8a5821a CHANGELOG: Update directory for v1.25.13 release
    52e85074042 CHANGELOG: Update directory for v1.24.17 release
    980fa6a2b9e Add CEL library lifecycle linter
    3fb14cf4e7a Bump cel string lib to v2, add tests
    640a2ec3327 Update k8s code to handle cel-go changes
    1a850a00630 Bump cel-go to v0.17.6
    24877f96fbb Incorporating feedback on 119341
    2bede058f92 Use environment varaibles for parameters in Powershell
    c761c165627 Use env varaibles for passing path
    1327a57aaf8 storage/cacher: duplicate logging when a watch is closed due to unresponsiveness.
    9ee94b0204a Remove duplicate codes in framework RemovePod
    f752ca2dc84 Make API chunking conformance test deterministic
    28621f1eb3f fix(kubectl): kubectl events doesn't filter events by GroupVersion for resource with full name
    79466886a17 doc(kubectl): Kubectl restart command without specific deployment will restart all deployments
    ce9e668a932 golangci-lint: suppress one issue, demote others to "hints"
    6a16c076e76 hack: move common "verify generated" shell code into function
    9c83c380e0c Add wait for cache sync
    b1223e0d1ac check for overflow
    87cf890632c Fix CEL cost handling of zero length replacement strings
    b0e249f657a Handle edge cases in seat demand stats
    037640af8c8 Apply suggestions from code review
    bd06c26d580 fix: concurrent map writes in e2e test
    826f3a130ae promote to conformance Service multiprotocol tests
    98d772ca3c4 Support multiarch/platfrom in find-release-tars
    c6e54169fc1 e2e_apps: stop using deprecated framework.ExpectConsistOf
    93832de6246 stop using deprecated framework.ExpectNotEqual
    145dbb6accf stop using deprecated framework.ExpectNotEqual
    d2dbc583a06 Adding coverage for OOM Kill scenario due to node allocatable memory limits, when pod level memory limits are not set
    0039f24d74d apf: refactor promise to use a context
    3e9a4c15a85 Restrict what imports get into code within test/e2e_node
    c1eb18c00ca generated files
    039859b9b72 e2e network test for udp services with hostNetwork clients
    2472291790e api: introduce separate VolumeResourceRequirements struct
    a5600b69251 storage/etcd: simplify passing the transformer
    6161752ecbe storage/etcd: remove newWatcher function
    3546831ceb2 e2e_storage: stoping using deprecated framework.ExpectEmpty
    a9308927691 Gate: disallow .status.loadBalancer on non-LB svc
    b8512cfe247 expect the new resource_scape_error metric
    905f07f1ac1 Revert "mark the OOM killer as serial to reduce flakes"
    5c7529a6fc3 kube-proxy service cache don't treat ipMode proxy address as invalid
    f93bd699aaf Trim managedFields in pod informer
    2f576969eee reducae function calling to once
    093093593c6 kubeadm: fix the field path for JoinControlPlane.CertificateKey validation
    700b55b3b26 kubeadm: fix the bug that --image-repository flag is missing for some init phase sub-commands
    75a80d5aba4 kubeadm: add validation to verify that the CertificateKey is a valid hex encoded AES key
    c112a34642d add unit test for kube-proxy service cache with ipMode
    7f805dc9354 fix test name
    30ff937aaf9 add a fake load balancer class to fix e2e test failure
    3cbecf218df kmsv2: add metric for DEK cache filled
    d86e72202c4 kmsv2 test feature enablement unit test
    bd6f5487463 mark the OOM killer as serial to reduce flakes
    afe9045e466 Add v1.28.0 API testdata
    a6a1f070e7f Signed-off-by: liyuerich <yue.li@daocloud.io>
    8163d244ede Update ccm flag help to describe disabling webhook serving
    8291b847d58 Allow disabling both webhook ports in cloud-provider
    f407b31d42a kubeadm: Fix typo where API group is not correct
    72af21e1a13 kubeadm: Cleanup the unused input parameters
    1eb6282016a kubeadm: Move the method used only in the test to `postupgrade_test.go`
    e290b4cb3bc e2e_network: stop using deprecated framework.ExpectEqual
    fd3f82531f8 kubeadm: increase ut coverage fo util/kubeconfig
    48260b4a77b kubernetes mutual (2-way) x509 comment
    ae0a0477bf6 add aramase to sig-auth-encryption-at-rest-reviewers
    6c2cfac0a97 Revert testgrid url changes from CHANGELOG
    577197559ae remove the legacy test dependency
    af26ebd0fa3 translate beta label to ga in volume_zone
    4712025ea84 Graduate kubelet resource metrics to GA
    6ef90979720 Update the URL of testgrid
    af9bf7b41e0 Prefer non-alpha storage versions when available
    09fa21ab879 Store validating admission policies and bindings as v1beta1
    a422d11c772 prep for go1.21: use -e in go list
    ef7d4047025 using wait.PollUntilContextTimeout instead of deprecated wait.Poll for pkg/scheduler
    cc1670ddd2b Limit intstr.Parse() to 32-bit integer parsing
    5567f288e74 api: change list type for node lists in PodSchedulingContext
    79333684600 Update CNI plugins to v1.3.0
    f07a3a3f263 calculate sidecar container resource in pod autoscaler
    427b703c37e scheduler: remove deprecated v1beta2 KubeSchedulerConfiguration
    5bbc4f76055 Pass Pinned field to kubecontainer.Image
    a5b3a4b738e cleanup: Update deprecated FromInt to FromInt32 (#119858)
    b75c5d33e5c bump the busybox test version to resolve test failures
    bd36be02188 Make gomaxprocs install optional, limit to tests
    9a253d896a0 storage/util: move GetCurrentResourceVersionFromStorage
    f7e659db236 storage/etcd: no-op, refactor watcher.Watch method signature
    5752cbd8c76 chore: add pod UID in event log
    7a6e056bbdc kubeadm: add TODO for NewMapStringString() and CLI extra-args
    f3da0d4ed32 kubeadm: update the rest of the code base for structured ExtraArgs
    a505c7160e2 kubeadm: adapt the validation and utils for structured ExtraArgs
    bc6fcb72a8a kubeadm: add structured ExtraArgs in v1beta4
    8314122382c e2e framework util subtle bug checking endpoints
    9742e276b95 update to golangci-lint v1.54.1 + go-ruleguard v0.4.0
    1e961af858b scheduler_perf: test case for DRA with multiple claims
    0331e98957f scheduler_perf: fix installing DRA test driver multiple times
    092897f061f drop v1.26.0 API testdata
    4950521ad88 kubeadm: increase ut for certs/certlist
    224087abfa0 Add Pod Scheduling SLI Duration metric (#119049)
    3edae95e5ae Add unit tests for subdomain match in keyring
    8cb979ae55d CHANGELOG: Update directory for v1.28.0 release
    a0f07f2b4d9 e2e WaitForServiceEndpointsNum take into account the address family
    a161fa8017b pull Host from kubeconfig when needed
    03415ebc1da Integration tests for IP mode field
    86b1f095ca7 Proxy changes for IP mode field
    47fec59a31a parse node selector in prefilter
    4fb0ce28377 Fix broken link to testgrid
    34a89f039b8 Update cri-tools to v1.28.0
    29a6705dabc Generated code for IP mode field
    3ac2899d2b5 Add IP mode field
    cf3f0bd7780 fix: register the plugin rejects Pods in WaitOnPermit to UnschedulablePlugins
    b0082237050 fix: when PreFilter returns UnschedulableAndUnresolvable, copy the state in all nodes in statusmap
    947c9376f6a change struct methods receiver to pointer
    e258228e4ac use a buffer equivalent to grace period to eliminate test flakes
    717c149a734 fix mirror pod nfs test failure due to differing NFS versions
    279a663f948 Update README.md
    6f27733af8d Job: Replace deprecated workqueue library with supported one
    dd7b7073c38 e2e: add test for verification of timestamp for new PVs
    8e661498702 e2e: remove extra spaces
    b9cf6991e63 Use tracing semconv types instead of own defines
    765f3916c27 Fix a bug that PostFilter plugin may not function if previous PreFilter plugins return Skip
    1863a808b20 fix: add code comments
    9646ae5a9ef Fix: null jsonpath serialization
    8ab6bee676a Make seccomp status checks in e2e tests more robust
    509ffe2938f Fix receiver names in legacyProvider
    80710976cfc [releng] Update publishing-bot rules for release-1.24 to Go 1.20.7
    f73c253accf fix typos for pod replacement policy
    5fb543a4118 kubeadm: remove 'system:masters' organization from etcd/healthcheck-client certificate
    62b063b74b5 wsstream: use a single approach to detect connection upgrade
    74053e21519 Create e2e test for PV/PVC endpoints
    49e00e8bdee Move adding GroupVersion log until after an update is confirmed
    77b3bb0f69b fix race on etcd client constructor for healthchecks
    a6329ac4536 Fix to honor PDB with an empty selector `{}`
    0e238409290 dra test: enhance performance of test driver controller
    40b604e3741 Update pkg/apis/core/helper/qos/qos.go
    f355b22f5f7 implement Stringer for podActions
    e4d16f34c15 Add test coverage of result size of string operations
    10fe3da87db Delete PSP API types and generated clients
    69a5a528967 Bump cel-go to v0.16.1
    6aad00ff73d client-go: chore: implement `Is` interface for `ErrGroupDiscoveryFailed`
    4063ca40501 Code review fix: Move GetPodQOS code to ComputePodQOS. If set, return PodStatus.QOSClass from GetPodQOS.
    5d4410b9601 Perf optimization: Move away from GetPodQOS, using PodStatus.QOSClass instead
    ef51dbfa0c7 Drop [Feature: tag to make sure this tests runs on pre-submits
    a1809ffae37 client-go: log proper 'caches populated' message, with type and source and only once
    37730c07dd6 apiserver/httplog: pretty up impersonation output
    3e908c5bdee e2e_common: stop using deprecated framework.ExpectEqual
    d154ca9c00a Statefulset should wait for new replicas when removing .start.ordinal
    0944c00778a Fix some typo in kubelet component source code
    3a2c4d6f096 kubeadm: fix nil pointer when etcd member is already removed
    ba9ce3ab08b fix flaky test on dra TestPrepareResources/should_timeout
    24f32d9d185 Local PV Stress test: don't fail on deleting missing PV
    074d5b53299 Rewrite the tests to be table driven
    391c1a3eccd dra: cleanup manager unit tests
    a5fff9a5d09 Catch direct references to unwanted dependencies in kubernetes modules
    85c385d4101 Update the container images used in cloudbuild to their latest version
    c4f4e3bc43b pkg/proxy: unit test refactoring
    4bc9434f99d SSA: prevent usage of Extract calls via forbidigo
    b6ae858e01f Drop AvailableResources from controller context
    d5d90b7b228 add support for ExponentialBucketsRange
    90b870b710a OWNERS_ALIASES: compress sig-node-{api,cri}-approvers
    a215b29d7cf remove makefile:generated_files in v1.29.
    f0b38766a06 use LoadBalancer type service for e2e service test to patch ingress status
    c23cee1be3c fix OOM killer
    4b6abf10c6e Handle errors when preparing lease for update
    ca338e517ba Fix the flaky legacy_service_account_token_clean_up_test.Fix the flaky legacy_service_account_token_clean_up_test.
    a44ce346d78 e2e/apimachinery/watchlist: stop panicking when run against unsupported cluster/environment
    14251738d21 NCC-E003660-PCK: Non Constant-Time Comparison of Service Account Token Secrets
    109cf6820d2 Update base image and add utilities to kubectl image
    2a767c9916a update the busybox test image to 1.36.1
    133696725ae implement secret empty string value integration test
    7f53f7649e1 Use intstr.Parse instead of reimplementing it
    1b8fb69d9ea kubeadm: increase ut for cmd/kubeadm/app/phases/addons/proxy
    63cf568251d e2e_node: stop using deprecated framework.ExpectEqual
    18c46b2487a add validation for static pods to have a name
    66aa2af0979 CEL lazy map: add test for boolean short-circuiting
    307b0630aa6 cri-api: add CRI implementation maintainers as approvers
    c4739313b7f Track manually created secret-based tokens
    df89045b53c dependencies: update github.com/ishidawataru/sctp
    2b12df56b0b Fix a race where a call to Shutdown was happening after ShutDownWithDrain() had performed the check q.isProcessing() && q.shouldDrain() and before waitForProcessing() has reached its Wait().  This is because waitForProcessing() is only checking the length part of the condition instead of both the length and whether we still need to drain. It turned out that there were lots of unnecessary accessor functions being called locking and unlocking the cond which are not needed because Wait() automatically unlocks and locks the cond for us and best practice says we should run it in a for checking for the condition (so this is what I have done).
    213ed03c000 remove deprecated kube-apiserver identity lease garbage collector
    57226fbd27a e2e_dra: stop using deprecated framework.ExpectEqual
    fb9646fd60d apiserver: add flow control metric current_inqueue_seats
    4e10ff91c5b pkg/proxy: move proxier health eventing to cmd/kube-proxy
    fdea6ad17d7 kubectl debug: Remove legacy server support
    baed6240468 kubectl debug: Introduce customizable AttachFunc instead static one
    41889984304 Improve conditionFuncFor expression parsing for wait --for jsonpath
    3964f71fe02 e2e:podresources: verify count for terminal pods
    6d244728b9e adjust order and fix typo for kube upgrade
    479b2d03a43 kubectl: fix describe node output when sidecars are present
    4e2e059c7b2 Graduate RemainingItemCount to GA
    6acfa3cb4ac Graduate APIListChunking to GA
    e9b69d1958d e2e_scheduling: stop using deprecated framework.ExpectEqual
    9d8959224cd add explanation for large-cluster-size-threshold arg about multiple zones cluster
    2222509cb41 e2e_instrumentation: stop using deprecated framework.ExpectEqual
    60a8bca507f dynamic resource allocation: add unit test to check the reuse of the gRPC connection
    7ffd3063cef dynamic resource allocation: reuse gRPC connection
    dbaa9fe6b46 added podgc orphaned pod unit tests
    173b5a75b96 Trim managedFields in controller-manager
    c86f562f29b Run hack/update-codegen.sh informers subprojects
    9c4651bd047 Add 'WithTransform' SharedInformerOption
    d1946392528 Cleanup kubectl legacy server fallback
    106a931c299 fix intergration test
    d2df65ba6c9 update the dependency sigs.k8s.io/structured-merge-diff/v4 to latest tag
    a35608cc614 Update debian-base for test images and others
    43f8ccfcca8 TopologyAwareHints: Take lock in HasPopulatedHints
    a9d26ac7c78 Optimize the code of NodeUnschedulable to reduce TolerationsTolerateTaint function calls
    2ce07981af7 kubeadm: Make dry-run is configurable in joinConfiguration
    f5a6797e563 kubeadm: Make `dry-run` is configurable in `initConfiguration`
    709eb6c0302 eviction for pid trigger PIDPressure condition slowly on CRI-O
    b8336f399bf KEP-2305: add metric to track unbounded label values
    1e17237dbf6 KEP-2305: introduce allow-metric-labels-manifest
    654e98e0a2e add endpointslice repo to staging README
    b7cbebcd034 Added oomkill test for init container and fix typos
    d8c145d20da fixes the issue in the documentation of kubectl events
    12a874d2273 Preserve resourcequota informers for groups with discovery resolution errors only
    c9a084d59ca Fix duplicate GC event handlers getting added if discovery flutters
    733f63c6c42 Add GroupDiscoveryFailedErrorGroups helper method
    3bae26ae58b Check dbus error on container runtime start/stop
    70f979c8da3 Alert message improved according to standards
    a6554b9d5d1 Make kubelet label types public
    f2fa6d5f6b3 Document PVLabeler as deprecated
    7ff4572f792 Remove reference to `RUNTIME` variable in `build/root/Makefile`
    fc36d2fee83 chore: improve error message for unstructured helper method
    b60a3a58df2 api-machinery: stop using deprecated io/ioutil
    0da37d8c544 chore: omit comparison to bool constant
    17e6c5cb9f0 Error Typofix
    9d4b489107e Renaming restartPolicy to containerRestartPolicy for better calrity
    01c2c4f35f3 Error test cases added
    a609beb6b19 Decline on resizePolicy if the restartPolicy is Never
    f2879eed00b [UT] add ut for pkg/registry/networking/ipaddress
    c1cced24aa9 WIP: don't exclude .git from rsync
    396c8a67832 test: TestPodDeletionEvent
    975b2c6611d scheduler: Fix field apiVersion is missing from events reported from taint manager
    ba49ccdbc9b Gracefully handle empty config error when local flag is used
    96ab232f5f7 Remove reasons from PodConditionType
    1d9eed9f950 chore: slice replace loop
    9378e580cf4 chore: loop optimization
    fc1b8a823d4 cli: stop using deprecated io/ioutil
    b4d1440063d unittests: Fixes hostutil.GetFileType for Windows
    01861282b1d controller: fix the help information format of sorting_deletion_age_ratio metric
    07a1aea2def remove unused cloudprovider param from the ProbeControllerVolumePlugins func
    208cf1afabb Fix: do not assign an empty value to the resource (CPU or memory) if it's not defined in the container
    72f89b63757 kubelet: fix comment typo
    12f8eeaf9b1 fixed typo in get-kube.sh
    3418ceaca64 test: replace intstr.FromInt with intstr.FromInt32
    8b363cc7c08 bump dependencies: github.com/godbus/dbus/v5 to v5.1.0
    887654160f9 Improve the performance of schedulinggates
    0ef4be48777 cloud-provider: replace intstr.FromInt with intstr.FromInt32
    847df6d9153 kubelet: output log even file is rotated
    05f04f866eb Keep PLEG interruptions in a separate interface
    b109a585398 Improve the performance of isPodStatusCacheTerminal
    84c14c65c6b Remove unnecessary type conversion
    55d471601b1 [ut] increase covrage for kubelet/prober/results
    e0f2ed1b92b [ut] Increase test coverage for kubelet/pleg
    18c86efeeaf kubelet: perform the admission checks that preemption will not help first to avoid meaningless pod eviction
    08a69d63413 Improve performance of method PodRequests
    337f4e524aa Do not error log CRI stats for not cached partitions
    f2aeb3b0d91 Improve lock performance
    fb6fd36384e Add endpoint to skip topology aware log when missing zone hint

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2024-03-15 17:17:19 +00:00
Bruce Ashfield
a5fee65b68 skopeo: update to v1.14.2 
Bumping skopeo to version v1.14.1-4-g1c2ab995, which comprises the following commits:

    c3e474e4 [release-1.14] Bump Skopeo to v1.14.3-dev
    b673eb60 [release-1.14] Bump Skopeo to v1.14.2
    18cc81ab [release-1.14] Bump c/image to v5.29.2, c/common to v0.57.3

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2024-03-15 17:17:19 +00:00
Bruce Ashfield
a906b81ca6 podman-tui: upate to v0.17.0 
Bumping podman-tui to version v0.9.0-246-gb4350927, which comprises the following commits:

    b4350927 Bump to v0.17.0
    db48222a Bump github.com/containers/podman/v4 from 4.9.1 to 4.9.2
    49c31e9e Bump github.com/containers/common from 0.57.3 to 0.57.4
    c8c25120 Bump github.com/containers/podman/v4 from 4.9.0 to 4.9.1
    00626a40 Bump github.com/containers/common from 0.57.2 to 0.57.3
    bbba9ec9 go version update to 1.20
    5674249f Bump github.com/containers/podman/v4 from 4.8.3 to 4.9.0
    4d0b84f5 Bump to v0.17.0-dev
    cacf1b90 Bump to v0.16.0
    67f735b5 Bump github.com/containers/common from 0.57.1 to 0.57.2
    be25c60d Bump golang.org/x/crypto from 0.17.0 to 0.18.0
    2ff1bb62 Bump github.com/containerd/containerd from 1.7.9 to 1.7.11
    9b492e25 Bump github.com/containers/podman/v4 from 4.8.2 to 4.8.3
    519ed36f Bump to v0.16.0-dev
    f7f47149 Bump to v0.15.0
    9ba724c1 gh action update
    1cdeadb4 Bump golang.org/x/crypto from 0.16.0 to 0.17.0
    fb1886ea github action use golang 1.21.4 for golangci-lint
    6521ce91 Bump github.com/gdamore/tcell/v2 from 2.6.0 to 2.7.0
    54cd7d7e Bump github.com/containers/podman/v4 from 4.8.1 to 4.8.2
    bbb8c9a9 Bump to v0.15.0-dev
    c545dbd7 Bump to v0.14.0

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2024-03-15 17:17:19 +00:00
Bruce Ashfield
a9f0f00637 podman: update to 5.0.0-rc 
Bumping libpod to version v5.0.0-rc4-2-g460fc4d65, which comprises the following commits:

    fc4e16366 Bump to v5.0.0-dev
    cfc5b8e0f Bump to v5.0.0-RC4
    0898b338b Use stop timeout of zero for system reset
    542883b9b chore(deps): update dependency python-dateutil to ~=2.9.0
    99bb2bfce CI: must-add-tests check: use GH label, not text
    c5c294a35 fix(deps): update module github.com/shirou/gopsutil/v3 to v3.24.2
    3abc488c8 Vendor in containers/(buildah, common)
    4a03da22a Run codespell on code
    03f6589f3 Fix events by fully adding the new PullError event
    52fd284fd Update dependency pytest to v7.4.4
    2b86ab5a1 Change image-path to image for tests
    527b3793b Use machine image as specified in containers.conf
    4c1c4c082 Vendor latest c/common and fix tests
    c50826cea test: fix manifest e2e test assumption
    f168b3c11 podman manifest add: support creating artifact manifest on the fly
    2bbed8f20 Add man page content for artifacts
    d8bb63705 pkg/env.Join(): don't modify passed-in maps
    66d60384f add --retry --retry-delay to podman run/create
    c3c0c4ab9 Add support for podman push --retry --retry-delay
    e5ee0bb5f pullImage does not need to be exported
    2c9c7273c Vendor in latest containers/common
    99b2f369d test/system: fix mount external container test
    35133c842 Move locks to shim layer
    6957c7819 CI: run logformatter on mac
    fd1d95126 Move ignition functions into Containerfiles
    b58f20bdb machine/ociartifact: Include image name in error
    064258b49 Reenable boltdb upgrade tests
    77bcf233e fix: split string Entrypoint by space
    90e6478cf refacto: unknown signal return signal number without prefix
    1de94dceb ci: fix module not found
    585af039d feat: allow compatibility with podman v4 machine
    facad62af tests: fix after make podman inspect cmd return compatible with Docker API v1.44
    23d6377ac chore: rename var host hostIP
    2cd72c272 tests: add docker api compatibility test
    de845a5b4 feat: make inspect compatible with docker v1.44
    950f612b5 logging: new mode -l passthrough-tty
    5952486df podman network inspect: include running containers
    8f02822c1 Remove xz unit tests as they are flaky
    f8abd7ff7 machine config: make write atomic
    26ec570c6 Ensure HyperV 9p mounts work when a dir doesn't exist
    dfae51a4b Clean up gvproxy if machine start fails
    ee52f9cd7 systests: kube play URL: workaround for ECONNREFUSED
    7e374a52a Vendor in latest containers/(image,storage)
    698219cf9 Expose as-tested Mac/Windows repository state
    9f5c20f9b macos installer: Add vfkit entitlement
    15734f8c5 macos-installer: Remove hvf.entitlements
    74b87874b macos installer: Default to using ad-hoc signing
    c2a2113bb new vms, with rc6 rawhide kernel
    7b6d9a586 Fixup: avoid overriding io.Copy error
    59704665a Avoid overriding io.Copy error
    24a33a538 Move code for sparse optimized copy to a dedicated method
    50a0c5176 [CI:BUILD] rpm: Add fallback for $SOURCE_DATE_EPOCH not being set
    e32c9bb5e Makefile: add machine policy.json to podman-remote.zip
    1e5b5a889 macos installer: install default policy.json file
    bed61806c pkg/machine/ocipull: add default policy.json file
    f5a268319 Makefile: add MACHINE_POLICY_JSON_DIR option
    a02aa8f6a pkg/machine/ocipull: add custom policy.json location
    a210a4d7c test/compose: add test for default connection
    d9aff9b41 podman compose: only trim path suffix when ssh protocol
    3cada0409 podman compose: correctly accept --connection/--url
    6d3571dcf podman compose: build for all arches
    7d5a68c9c CI: e2e: use distinct ports, not just 5000
    5e387cd8a [CI:BUILD] rpm: Use $SOURCE_DATE_EPOCH instead of the current date
    8d9ff04d1 vendor update gopkg.in/yaml.v2 to v3
    cc7b19279 [CI:BUILD] rpm: Make BuildRequires independent of the environment
    5b28a2b4a Fix podman stop -t -1 CID
    656bf7b76 Change QEMU netdev to Unix domain socket
    19b676f85 Enable lint for Darwin and fix identified issues
    1b068b79f Fix nightly cron checks
    83671ac34 systests: enable ipv6 tests
    188404366 Update github.com/containers/libhvee digest to c1bda9d
    f099250be Better file close and err handling
    ea4553d59 integrating changes from #21768
    fa99b9be9 renamed testfiles as testdata
    0b3f3f0ef Use faster gzip reader
    2245cf8dc Remove duplication and make consistent usage of the progress bar
    c42d3a74e Add a comment to explain why we look at file name for zip files
    95aa2c4e6 Use github.com/stretchr/testify assert in compression_test.go
    88af8852d Refactor machine decompress.go
    ecda4eab3 Update module go.etcd.io/bbolt to v1.3.9
    53b5fc781 Update module golang.org/x/tools to v0.18.0
    608976902 Update module github.com/openshift/imagebuilder to v1.2.6
    3b127286a Adds example for secret creation from environment variable
    b68d3c7a0 Fix race conditions in hyperv readiness checking
    127a8060a Ignore docker's end point config when the final network mode isn't bridge.
    5d303ca26 Reformulate sparseWriter to deal with starting/ending zeroes explicitly
    c5434bf71 Expand sparseWriter tests
    a9ee31b92 Bump to v5.0.0-dev
    54795efeb Bump to v5.0.0-RC3
    3e76e594b Fix assumptions in 'push with --add-compression and --force-compression'
    8e99c697f Fix assumptions in 'push test --force-compression"'
    7acb49875 Update module golang.org/x/net to v0.21.0
    f601a446b Bump VMs. New pasta, gvisor
    d85a71b4d Update module github.com/klauspost/compress to v1.17.7
    d7f7f07c9 Stop using rm'd inspect format templates in tests
    be9aba7cc Remove image provenance from `machine inspect`
    d68240b15 Update machine files rm order and add QEMU rm
    4078a4405 libpod/events: remove duplicated Details ID field
    6f6925cca pkg/machine: ignore gvproxy pidfile not exists error
    8f1cebf96 cmd/podman: remove duplicated event ToHumanReadable()
    a3a1b44c3 libpod/events: Update event time format and add timeNano
    f218f8430 machine: implement http proxy logic for all providers
    c4e68bdae Cirrus: Reuse shared clone script on Mac
    2af73b83f Vendor vfkit v0.5.1 and gopsutil v3.24.1
    f7d1726f9 Rearrange CI tasks for safety + efficiency
    89b415ba3 Comply to Kubernetes specifications for annotation size.
    a31e8d2a2 zstd now default compression for podman machine
    1c61f766d CI: fix search-test flakes
    0b861350c machine: add sparse file writer
    7746e2a3f systests: auto-update: minor cleanup
    09095acf2 machine: Add `ConnectionInfo` to `MachineConfig`
    5effdcca3 Fix up example description of podman-system commands
    ec68f07c0 Fix Lint on Windows and enable the job
    66fd41ff1 cirrus logcollector: update package list
    5327ddfdf Build with CNI support on FreeBSD
    c5a71c4fd Apply suggestions from code review
    67ead5cb5 Apply suggestions from code review
    408772d34 Apply suggestions from code review
    1612ff69c Fix up example description of podman-inspect.1.md.in
    62148bf61 Apply suggestions from code review
    b8c1a8e79 Apply suggestions from code review
    66f39eee5 machine: Remove unnecessary TODOs
    5b5343b38 Apply suggestions from code review
    9d73dc6ed Apply suggestions from code review
    f7659b12e Apply suggestions from code review
    4f13b836b Codespell code
    fc7140151 Fix up example description of podman-mount.1.md.in
    ee078a7e6 Update docs/source/markdown/podman-cp.1.md
    606865a47 Fix up example description of podman-container commands
    22effe8d4 Fix up example description of podman-stats.1.md.in
    3fd09dd18 System tests: enable debugging for parallel-rm test
    49400ecce Extract waitForGvProxy into shared utility function
    a0109caa7 Fix up example description of podman-volume commands
    803410f1a Fix up example description of podman-kill.1.md.in
    bc5a4fbb2 Fix up example description of podman-pod commands
    93a0c242c [skip-ci] Packit: Update downstream task targets
    8ed6d4fe5 Fix up example description of podman-build.1.md.in
    433efc1f5 Fix up example description of podman-commit.1.md
    fe910ae96 Fix up example description of podman-logout.1.md.in
    12af4f36b Fix up example description of podman-images.1.md.in
    66ed46987 Apply suggestions from code review
    de7cb639c Fix up example description of podman-export/export commands
    f59a5f135 Fix running container from docker client with rootful in rootless podman.
    10d748f58 Introduce Podman machine reset
    d4b3ab521 Fix up example description of podman-create.1.md.in
    717c00569 Fix up example description of podman-diff.1.md.in
    4e268c667 Fix up example description of podman-events.1.md
    537490cb9 Fix up example description of podman-farm commands
    aad195ca3 Fix up example description of podman-network commands
    777b258a7 Fix up example description of podman-image commands
    664d4ed28 Fix up example description of podman-port.1.md.in
    1116e68dd Fix up example description of podman-push.1.md.in
    79a10419c Fix up example description of podman-unshare.1.md
    63d9bf128 Fix up example description of podman-pause.1.md.in
    4b6ca1687 Fix up example description of podman-start.1.md.in
    f5c666d07 Fix up example description of podman-rm.1.md.in
    6c8123325 Fix up example description of podman-info.1.md
    8cbbd631d Fix up example description of podman-history.1.md
    1a06ec802 Fix up example description of podman-healthcheck-run.1.md
    10af44854 Fix up example description of podman-exec.1.md.in
    7e611f60b Fix up example description of podman-cp.1.md
    47d0aa1bc Fix up example description of podman-manifest commands
    7ba23cd6f Allow podman pull to specify --retry and --retry-delay
    f036476cf fix usermode test
    24b8d1446 fix(deps): update module github.com/opencontainers/image-spec to v1.1.0
    2846027dc machine init: validate machine name and username
    8be1c0b04 [CI:DOCS] Update dependency golangci/golangci-lint to v1.56.2
    30a18fc02 pkg/machine: make only one AddConnection() call
    7f2a6c735 Bump to v5.0.0-dev
    f620aa0fb Bump to v5.0.0-rc2
    d60757cca pkg/machine: cleanup MakeSSHURL
    e0a766854 Improve cross platform support in QEMU machine sources
    bd0a9e903 Fix remove docker.sock symlink
    1f64ae10f Prune FCOS related code
    4fffa78ee Manually discover wsl.exe location
    889454104 Turn WSL machine tests back on
    a9401dead Build tag out QEMU for Darwin
    c7537d193 man-page xref: make nested-structure warnings fatal
    d221e0b00 Remove log-level from runSystemCommand since wsl does not support it
    9ee17d422 machine/qemu: use extra gvproxy socket
    3ca221360 Add a helper for stopping pods and containers in E2E
    bcec7e627 machine: ocipull do not error if downloaddir exists
    e5f86f862 More test tweaks to avoid "StopSignal ... 10 seconds" warning
    144e420bb Add testcase for WSL dist conflicts
    d23dd35dc Correct VM existance check on WSL
    db34827bb Test PR, add a inconsequential period to docs
    9abc04232 Fix small bug in ocipull
    42a78c714 Add volumes-from support using annotation in kube yaml
    068d4e81c Allow CI user to cleanup own files
    41c3f9d4b chore(deps): update docker.io/library/golang docker tag to v1.22
    3de467d9f machine: Re-enable USBs check for wsl machine set
    0e9d86755 machine: `machine set` only when machine's stopped
    92d6194f0 Fix freebsd indentation + enable release-testing tasks
    f9bc9a85b Replace panic with no-op
    45b701b12 chore(deps): update dependency setuptools to ~=69.1.0
    464638cc8 Enable windows and PM windows testing
    001824b9f Windows uses USERPROFILE not HOME
    4c0d05718 Readme updates for Podman
    87947761e [CI:BUILD] Add VFKit into pkginstaller, remove QEMU
    7f2d8ae80 [CI:DOCS] Update dependency golangci/golangci-lint to v1.56.1
    66e292ebb Fix build on Main
    c29fde265 libpod: correctly map UID/GID for existing dirs
    2430fc71a Allow podman machine to download from oci registry
    ad55ba6eb Handle DOCKER_HOST environment for podman-docker package
    36853c0d0 Consistant handling DESTDIR variable expansion
    5eb801a56 Bump CI VMs to ones with netavark 1.10.3
    f7f4d1064 Fix the build on main
    eb8428df5 podman-image-scp: Load images without the use of a temporary file.
    f8847ea04 Improve comments on waitOnProcess
    d3328d4f3 Don't panic on podman4 machine configs
    00180bd5b Enforce podman-machine mac CI results
    667311c7d Use persist dir for oom file
    1f8a69bc9 docs: clarify when a URL is treated as a git repo
    bb7d8fdc4 Workaround connection hangups in start/stop racing
    09b86e26d Improve robustness of pipe checks
    487219d80 Complete WSL implementation, refactor a few areas
    d7cb66492 wsl - wip
    e74d268bf Minor cleanup from podman 4
    2a61998f0 Fail if vm exists in hyperv already
    477cb90a3 Update .cirrus.yml
    325d7f489 Re-enable mac testing
    7ecc41467 Vendor crc CopySparse
    69163af2a Remove gitleaks scanning
    5b6b68976 Remove disused Containerfile and docs
    d676c1b1a fix(deps): update module github.com/docker/docker to v25.0.3+incompatible
    4413e75f0 [CI:BUILD] rpm: bump podman module version
    1ca608ea9 fix "podman run port forward range" flake
    41cd90a8e image scp: don't require port for ssh URL
    dbfa201c9 new testimage and systemd-image
    a2c086c78 [CI:DOCS] fix userns.pod.md mapping table
    3495aae42 docs: resole hierarchical issues with userns parameters
    7be6cd4b0 machine: USB passthrough
    02eb907db machine: change getDefaultDevices signature
    dc0d07c71 document new connection/farm storage location
    ef8e63cb2 update c/common to latest main
    10265661e Fix Quadlet Options=key=value documentation/example
    9f38b2215 pkg/machine: make it build for freebsd
    bcd48a6a7 Bump to v5.0.0-dev
    dc218a3c6 Bump to v5.0.0-rc1
    7e73bb341 Add v4.8, v4.9 to release notes
    30fb5de71 Restore Cirrus DEST_BRANCH to main
    72f1617fa Bump Go module to v5
    c023b789f Re-enable passing a logfile to gvproxy
    69d54c482 Bump gvisor-tap-vsock from 0.7.2 to 0.7.3
    e20b70c2e Upgrade tests: reenable, but revamped
    d47979761 Quadlet - do not look for line continuation in comment lines
    90c938737 Add functionality for `podman machine set --rootful`
    f23b144c6 Podman Machine AppleHV CI fixes
    d5eb8f3b7 AppleHV - make gz ops sparse
    85d828148 create machine dirs at discovery
    b1ce6ef9a podman machine 5 - hyperv
    6b02c4894 Podman 5 machine refactor - applehv
    e8501ca99 Implement generic providers
    9bb191df5 [CI:MACHINE]Podman5 QEMU refactor
    b9bcfa474 podman5 machine reconfig 1
    c89dd4a92 Use tmpfs mounts when creating a memory-backed emptyDir volume
    3cf2f8ccf Handle more states during refresh
    77847bd67 docs: make --seccomp=profile.json clearer
    6ca6184ed gomod: Update containers/psgo to 1.9.0
    a8b2256cc Set interface name to the network_interface name for macvlan and ipvlan networks
    6e0decbe0 Send container stats over API on a per-interface basis
    9983e8744 Remove leftover autoremove containers during refresh
    43a01d7dc Temporarily ignore windows-linting failures
    defbf4237 Lint before windows-cross build
    d44bafc3c Reimplement lint with improved compatibility
    c7910e75e Show network name network events with podman -remote events
    46fe7ef3b use pkg/strongunits from c/common
    5de4bd5d1 vendor: update c/common + libhvee to latest main
    a997d7d81 test/e2e: unskip netavark macvlan/ipvlan tests
    7d15bc2ef fix userns + restart policy with slirp4netns
    fcae70220 Reuse timezone code from containers/common
    85904e01f Vendor in containers/common
    01a8539ef Warn if cgroups-v1
    d3281cf88 Use tmpfs mounts when creating a memory-backed emptyDir volume
    2eee3cd81 Corrected markdown documentation for `--stars`
    35d1f1221 make podman pod inspect output a json array
    26cd01ee5 Do not test CNI in CI
    ee923358c Vendor c/common
    249474a84 drop support for "pasta" as a network name
    a09889910 Use semi-colon as the field separator for internal volumes-from inspect annotation
    d217de642 [skip-ci] Update github/issue-labeler action to v3.4
    9e3d61a9d fix(deps): update module github.com/docker/docker to v25.0.2+incompatible
    39f22c382 Include machine-tests in cirrus-cron jobs
    7de64b47f Vendor c/storage main
    9fb57d346 Cease using deprecated runc userlookup
    91b8f208a Bump to runc main
    6a727fdbe Fix updated runc dep breaking pod devices cgroup
    2818abf84 Update to runc main, removing pin to an older version
    0da405453 Verify the empty  mounts.conf does not generate warnings.
    1ab55defb Test new CI VMs
    c5c079932 Scan-secrets: Fix PR forcepush detection condition
    0a4beea6d Scanning-secrets: Support new-branch/renovate link
    0e9b07a02 Secret-scanning: Fix newly-opened PR conditional
    3f3d1e4de Temporarily ignore mac-linting failures
    d9ad7cbc9 Run lint for mac builds
    90d6e92f2 fix(deps): update module github.com/opencontainers/runc to v1.1.12 [security]
    a06685a54 Farm build should read server registries.conf
    28856b6c1 Make leak-detection readable by humans
    b028f6aa7 add new libpod/images/$name/resolve endpoint
    f3ab6268a fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.21
    74454bf59 rework system connection and farm storage
    a1c47f029 Return nil health when inspecting containers without healthchecks
    6eca2f651 [skip-ci] Update dawidd6/action-send-mail action to v3.11.0
    76791a21c pkginstaller: bump Qemu version to 8.2.1
    d202acd86 Bump containers/common to latest main
    174631f72 Convert SpecGen values to be nullable where possible
    f8e1ea414 Fix SSH Host argument in tag command during scp.
    3136f0fca Don't require engine connection for farm
    0ec84b8ec Revert "Enable win podman-machine test failure"
    39e53e6dc chore: extract duplicate codes
    8d14d4155 Run codespell on code
    d5bed05df docs: fix podman-manifest-rm header
    3592b56c3 docs: fix unclosed code block
    6678260eb man: Minor wording tweak for host/connection
    cd5982e98 quadlet: Add tests for templates
    dc94a10d6 quadlet: Add documentation about template use to manpage
    01dccba50 quadlet: When loading dropin files for foo@instance, also load those for foo@.
    bb6dec46f quadlet: Support [Install] for templated units
    7e1942ed4 systemd.parser: Add GetTemplateParts()
    2df994ba0 quadlet: Don't put @ in container names for templated units
    b73eec88d [CI:DOCS] Packit: podman5 downstream for f40+
    7dcbc75aa [CI:DOCS] minor man page cleanup
    202cab612 Fix inspect test that rely on digest
    ffd7a8998 Update module github.com/google/uuid to v1.6.0
    848078c93 Fix auto-update digest comparison
    93510a299 bindings: suggest using -tags remote to reduce file size
    f18ebad1e bindings: pods uses entities/types
    668d517af bindings: volumes uses entities/types
    df6cc8550 bindings: secrets uses entities/types
    aee733c58 bindings: network uses entities/types
    c736a8e20 bindings: manifests uses entities/types
    34cc55741 bindings: play uses entities/types
    528414970 bindings: generate uses entities/types
    5ddc82f7a bindings: images uses entities/types
    08cd7ce41 specgen: use storageTypes instead of storage package
    7aede410d bindings: containers/update uses entities/types
    40cc962a5 bindings: containers/exec uses directly Docker type
    88fb291a3 bindings: containers/create uses entities/types
    6c5704a09 bindings: containers/containers uses entities/types
    2d8231efe bindings: containers/commit uses directly Docker type
    9f0ea0dc8 bindings: containers/checkpoint uses entities/types
    b304ac1ea bindings: containers/archive uses entities/types
    923123420 domain: move system structs to types sub-package
    48a99c651 domain: move Event to types sub-package
    ee61b130a [CI:DOCS] Update farm docs
    90867d987 Fix image filters parsing
    7c8c94549 Vendor in latest c/common
    27e76f3ee Update module github.com/mattn/go-sqlite3 to v1.14.20
    505ed030e [CI:BUILD] rpm: use go-rpm-macros on RHEL 10
    56cf5b6df Update module github.com/docker/docker to v25.0.1+incompatible
    3e6bfb6e9 Update module github.com/docker/docker to v25
    269149a9f Kube Play - allow creating image based volumes
    cf0b436b9 Deprecate BoltDB, preventing creation of new databases.
    d3a49fded Add information about --latest support on man pages
    d792cc448 Warn about whitespace in /etc/subuid and /etc/subgid files
    5cc83da1c Pass the OCI runtime an empty entrypoint when there is no entrypoint
    f53cb9c27 chore: remove unused file [NO NEW TESTS NEEDED]
    2e38b9816 Restrict building the pkg/fileserver implementation to windows
    17613cc96 podman farm is no longer hidden. Enable doc checks.
    0e64e107b Fix Mount Unit Option
    660778b2e [skip-ci] Update dawidd6/action-send-mail action to v3.10.0
    8d733b6d0 Update module github.com/onsi/gomega to v1.31.1
    a2cc04b15 Update module github.com/opencontainers/image-spec to v1.1.0-rc6
    a0c914c6d [CI:DOCS]Remove final references to varlink
    70c3accf7 Update module golang.org/x/tools to v0.17.0
    75790b42b Label host volume mounted content in machine as nfs_t
    7472bdb16 Ensure podman temp directory is created on Start as well.
    a5612bc54 Quadlet: ensure all keys are documented
    0c3b5e433 quadlet.go: clean up keys
    77389bd05 Add missing check for errors returned from SpecGenToOCI to MakeContainer.
    6226b5669 Update module github.com/onsi/gomega to v1.31.0
    4c583e7a1 Update module golang.org/x/net to v0.20.0
    e757f7631 Update module github.com/onsi/ginkgo/v2 to v2.14.0
    728e842db Update module github.com/docker/go-connections to v0.5.0
    f9a05717a Update module github.com/vbauerster/mpb/v8 to v8.7.2
    c566551e9 gvproxy: Update to 0.7.2 release
    1964dbd40 Set up podman machine remote user correctly
    1c88b1220 rm pod with podman run if ctr creation failed
    79fad91db Add a net health recovery service to Qemu machines
    e66413b51 CI: reenable tests that are working again
    3fef531d9 applehv: return socket path from setupAPIForwarding
    90f69891d applehv: Remove unneeded cmd.ExtraFiles assignment
    ab1316551 fix mongo-driver dependency
    971f2eb45 [NO NEW TESTS NEEDED] [FreeBSD] Fix crash when running podman inspect
    dbe0e6789 Man pages: tighter documenting of --format fields
    d95710a89 farm build: push built images to registry
    992e83d20 machine: Enable console autologin by default
    f374e07fb AppleHV: update LastUp time
    b94be90a1 Remove Libpod special-init conditions
    46cfc9858 Make --gpus work with nvidia gpus
    0e09527bd systests: kube with policies test: fix race
    f6107f631 Assign separate ports for each appleHV machine
    eeff3d2de Fix machine inspect test config
    7bd5dd42c Fix `podman machine set --rootful` for applehv
    585fbe373 Run mac jobs on labeled hosts
    a60fe34fd Fix `podman system reset` with external containers
    522934d5c Replace strings.SplitN with strings.Cut
    3714ae342 quadlet: fix quoting of example option values in container unit file documentation
    4e4c3e3db cmd: support --config option to locate authentication file
    83fa4843f Fix podman machine ssh command
    780733415 System tests: fixes for RHEL8 gating failures
    380fa1c83 Remove redundant code in generateSpec()
    a8c2b84c2 docs: update mariadb example
    d7760b23c labeler: Use `machine` label
    bccfda505 [CI:DOCS]Periodic update to OWNERS file
    3b881d4ec feat: disable pid max in the podman machine
    c90e9dad7 e2e: reenable warning checks on Debian
    e3f167f77 Add API forwarding support for HyperV
    a0a541351 consolidate ignition ready socket unit
    8341ca0e7 Remove --latest from podman CMD --help output
    06064150e machine: use GlobalDataDir helper
    8bdf77aa2 Refactor: replace StringInSlice with slices.Contains
    25602a03a fix(deps): update module golang.org/x/sys to v0.16.0
    3bfdd7915 Fix init teardown on bad ignition path
    b01a330d3 Use single persistent ssh key for all machines
    260f814bd test/system: add test for mounting issue in the init container
    f0319d5b7 Error messages not being reported unless more then one error present
    49e2589a5 fix(deps): update module golang.org/x/sync to v0.6.0
    450862054 xref-manpages script: more regression tests
    e63513542 Vendor latest c/image
    98f332d48 Use parser.UnitFile
    c728eeb39 Create `pkg/machine/ignition` package
    560455cbd docs: fix typos
    2a2d0b0e1 chore: delete obsolete // +build lines
    92f3bacc6 machine/qemu: A few debugging prints
    876b2207e ci/labeler: Add area/machine label
    f5a986f4e Set applehv as default darwin provider
    689d97a1d Quadlet - add StopTimeout key for .container file
    ac0353aec chore: remove unused link
    8c546cf7e CI: bump VMs
    f9de9809e docs/build_osx.md: Describe external gvproxy
    5827ecb42 fix(deps): update module github.com/shirou/gopsutil/v3 to v3.23.12
    70a53cb76 Quadlet - fix trailing whitespaces handling
    c315c8e74 Makefile - make sure gitvalidation is installed before calling it
    55b08d3ba applehv - fix vm lookup
    ec5422af5 e2e: Skip journalctl if journald is unavailable
    4f94c96b9 remote: fix podman-remote kube play --publish-all
    4083ddbb0 Kube Generate - check options in bind-mount-options exist before accessing
    f10a7bfd4 Add mmap cache option to QEMU mount
    2fc862d39 chore(deps): update module github.com/containerd/containerd to v1.7.11 [security]
    90b09b586 chore(deps): update module golang.org/x/crypto to v0.17.0 [security]
    f90b4e79a Tests for xref-helpmsgs-manpages
    1322f3193 abi: drop check for IsRootless()
    9d0da9d0f Strip key/values of external quotes
    4dd58f226 Move golang requirement from 1.18 to 1.20
    f169fc76a Allow PublishPorts to be used with [Pod] entry
    6a96c8b5f quadlet container support multiple Ulimit options
    ccc3eb774 Improve compose tests
    e51bab3c9 Remove duplicated content in docs
    d76bb978b docs: oci-dir does not support compress as suggested
    f02fe73c3 Update module github.com/vbauerster/mpb/v8 to v8.7.1
    5c4c76b8c Update module github.com/mattn/go-sqlite3 to v1.14.19
    db68764d8 Fix Docker API compatibility with network alias (#17167)
    7c72d8c2f Fix path to example files
    5cc5b4347 Error on HyperV VM start when gvproxy has failed to start
    58edd06ff [skip-ci] Update actions/upload-artifact action to v4
    d026ccf9a Kube Play - pass arguments to build
    e4ecd7cca doc cleanup
    1c59a9ced CI: safer podman-stop tests
    8d94fc156 fix(deps): update module github.com/containers/libhvee to v0.6.0
    3a842027a CheckExclusiveArch should use local JSON too
    c290a561b Update gitleaks baseline w/ harmless findings
    446df4379 machine e2e : set default disk size to 11
    126670d5d Fix push endpoint stream
    232c32bd3 CI: systests: safer isolation in registry & tests
    f51ff7764 Support podman ps --format '{{ .Label label }}'
    36e04599a fix(deps): update module golang.org/x/tools to v0.16.1
    5ca255c2c fix(deps): update module github.com/google/uuid to v1.5.0
    5c7f74546 Remove deprecated field ContainerState.NetworkStatusOld
    e5c726daf Make hyperv pass
    e5a4f00b7 Podman 5 machine config file - Step 1
    95eb22c71 Support a machine-test only mode
    0f02e43ce cli: podman manifest annotate --annotation use StringArray()
    d8c3e5b3c cli: podman manifest add --annotation use StringArray()
    3e10a6832 cli: podman kube play --configmap use StringArray()
    2be4b007b cli: podman kube play --log-opt use StringArray()
    48ab4aec3 podman kube play: fix broken annotation parsing
    e916f49f0 cli: podman kube play --annotation use StringArray()
    47b65086e cli: podman image trust set --pubkeysfile use StringArray()
    cdb178e95 cli: podman push --encryption-key use StringArray()
    3e1b9146f cli: podman pull --decryption-key use StringArray()
    36e29a843 Fix WSL machine test regressions
    6415471dc EMERGENCY: fix broken CI
    952c70890 added system test
    23f6c4851 Add test for relative idmap mount
    e7eb97b84 fix checking of relative idmapped mount
    c823d49fd CI: unskip tests
    4590b663a add test for podman exec --env-file
    06cee546a cli: podman exec --env-file use StringArray()
    7866f6c6e cli: podman run/create --blkio-weight-device use StringArray()
    432be1330 cli: podman run/create --device-{read,write}-bps use StringArray()
    8de13271c cli: podman run/create --device-{read,write}-iops use StringArray()
    e763cc62b cli: podman run/create --device use StringArray()
    833163ff3 add podman create --label-file test
    19571f750 cli: podman run/create --label-file use StringArray()
    24d08a94d cli: podman run/create --decryption-key use StringArray()
    f9b2da3eb [CI:BUILD] override crun-wasm in fcos + podman-next image build
    6c2a0196a machine: usb: Fix 'passtrough' typo
    201920f6a cli: podman run/create --chrootdirs use StringArray()
    dbbec9936 cli: podman run/create --log-opt use StringArray()
    b011aa443 cli: podman run/create --env-file use StringArray()
    ef10073b5 cli: podman run/create --annotation use StringArray()
    c5258d463 cli: podman --hooks-dir use StringArray()
    12c39ffda cli: podman --module use StringArray()
    c97560841 cli: add docs for StringArray vs StringSlice options
    1ebd507fb Fix regression in e2e machine test suite
    95145d957 buildah treadmill: cleaner YAML, uglier script
    0d1b90d36 CI: systests: fix flaking --since test
    9a963221b [CI:DOCS]use nginx in podman tutorial
    a1cc99dd4 [CI:DOCS] compat api: fix formatting syntax
    cac4aa3b4 [skip-ci] Update actions/stale action to v9
    19457f382 system service: split out cgroups call into linux specific file
    03d411abc libpod: split out cgroups call into linux specific file
    32c25c602 pkg/specgen/generate: NOP verifyContainerResources() on freebsd
    a687c3886 use rootless netns from c/common
    3d740674b Improve error handling in win-lib.ps1
    d78212a00 Update vendor of containers/storage
    98df5b397 Fix user-mode net init flag on first time install
    10db6442d [skip-ci] Update actions/setup-go action to v5
    8d8fb726f fix broken labeler.yml config
    4d2125baf systests: cp: add wait_for_ready
    7cc6501cf Add e2e tests for quadlet Entrypoint option
    01d397a65 podman: new option --preserve-fd
    a943be7e8 Kube Play - set ReportWriter when building an image
    972ffaca4 Add support for Entrypoint in quadlet
    94e67cfc7 fix(deps): update module github.com/containernetworking/plugins to v1.4.0
    1f42aff93 systests: debug systemd failures
    7f4b0f208 apiv2 tests: fix race
    f1dc126bf Do not aggregate failing mac test status
    2d46d0537 Implement bare-metal Mac M1 podman-machine testing
    b7a81c1ce Fix command failure not resulting in task failure
    ca66a90b8 [skip-ci] Update actions/labeler action to v5
    b1eccedf5 [CI:DOCS] Update health-start-periods docs
    bb1307970 fix(deps): update github.com/opencontainers/runtime-spec digest to 0625254
    07104fb27 fix podman-systemd.unit.5 Mask/Unmask placement
    0a72e3dad fix(deps): update github.com/docker/go-connections digest to fa09c95
    7e2a8d58a Quadlet .pod - add support for the Volume Key
    212b4c9e9 Quadlet .pod - add support for the Network Key
    0d260bdc1 Quadlet - fix pod service file name
    04519234e Add support for the userns annotation in kube play
    f384bdf66 Handle symlinks when checking DB vs runtime configs
    e14aa09bb Update podman-systemd.unit.5.md
    6efba48e2 fix(deps): update github.com/containers/image/v5 digest to 671ab94
    4e21ce5ba fix(deps): update module github.com/shirou/gopsutil/v3 to v3.23.11
    45e53ed7b libpod: Detect whether we have a private UTS namespace on FreeBSD
    00d96c2b9 fix(deps): update github.com/openshift/imagebuilder digest to ef2a5fe
    b1acb43d7 CI: fix system_test_aarch64 dependencies
    f9e8585c5 Enable win podman-machine test failure
    269f8ff06 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.2
    c1eea91a0 fix(deps): update common, image, and storage deps
    31df9c237 Move the --farm flag to farm build command
    fa0aa9113 @@option volume.image: be specific that -v only affects RUN
    426db6fcc Accept a config blob alongside the "changes" slice when committing
    e197cf57d container create: use ParseUserNamespace to parse a user namespace setting
    f95dd21d5 deferred test failures: handle a corner case
    42ea21121 Fix locking error in WSL machine rm -f
    d5cf46e80 support lookup of intermediate IDs in gidmapping/uidmapping options in userns=auto
    5b3d82f9b sqlite: set busy timeout to 100s
    d4ac2f3dd libpod: Allow using just one jail per container on FreeBSD
    55373dcce Vendor c/common
    3e7041508 Gating test fixes
    86296ff8d pkg/bindings: add new APIVersionError error type
    a5d11f404 Set `BUILDAH_ISOLATION=chroot` within Podman containers
    f35d1c1c2 Don't update health check status during initialDelaySeconds
    8ee262202 quadlet: Support systemd style dropin files
    93bcd2a25 fix podman-remote exec regression with v4.8
    cf1ad300b utils: close a couple of ReadClosers
    4314b1c34 Fix transferring data using tar
    7b4d6a295 [CI:DOCS] Fix markdown bugs
    a2bf8c6d5 refactor(machine): improve machine marker value
    572f38c0d Set correct exitcode in remove events and change ContainerExitCode from int to int ptr
    d7b970a4c sqlite: fix issue in ValidateDBConfig()
    e26f677b1 sqlite: fix missing Commit() in RemovePodContainers()
    248cbc6f6 docs: drop default for tmpfs-mode
    6b2f48129 Quadlet - Add support for .pod units
    c664cfe88 [systests] podman mount no-dereference: complete rewrite
    13e548820 [CI:DOCS] performance: document sometimes slow native overlayfs
    b39f76474 fix(deps): update module github.com/gorilla/schema to v1.2.1
    07a7b3ae5 fix(deps): update module golang.org/x/tools to v0.16.0
    c8f262fec Use idtools.SafeChown and SafeLchown everywhere
    29d18079c [systests] new defer-assertion-failure
    f07b15105 fix(deps): update module golang.org/x/net to v0.19.0
    8e2d5e191 Fix wsl.conf generation when user-mode-networking is disabled
    d280e481a test/compose: remove debug leftovers
    ac3d57016 [CI:BUILD] rpm: remove dnsname
    386c8d6bf swagger: document play kube annotations param
    f6b2a1378 Clean up farm-build miscommit
    c7f6844c0 fix(deps): update module github.com/vbauerster/mpb/v8 to v8.7.0
    41a6b992a system: enhance check for re-exec into rootless userns
    e82465773 Fix Ulimit syntax.
    fe65f059a libpod: drop dead code
    cd21973f4 pkg/util: use code from c/storage
    98c525cf9 Remove unnencessary pregenerated doc
    3ca8b4013 fix(deps): update module github.com/crc-org/vfkit to v0.5.0
    da9349ce4 podman machine image from oci updates
    75638a72a If API calls for kube play --replace, then replace pod
    414642efd [CI:DOCS] Add podman farm build doc
    ddd6cdfd7 Ignore SELinux relabel on unsupported file systems
    e85cedf43 Use configured timeout in list_test.go
    478afa728 vendor: update containers/{common,storage,image,buildah}
    48cf44f23 machine applehv: create better error on start failure
    6cb2f9b12 quadlet: Support `healthy` for `Notify` directives
    2b95700bc No longer support deprecated legacy QEMU machine structures
    e40d70cec new 'no-dereference' mount option
    be2463330 Bump to v5.0.0-dev
    e75fbe54e Update dependency setuptools to v69
    ae9b63fbf Check for imageID, not imageName
    ff80e40ad Use NewStoreReference instead of ParseStoreReference
    e9587f5e3 Don't re-assign imageID
    c85068220 Remove clearly dead code
    87cef3654 Update release notes from v4.7 branch
    8b2667ef6 More rootless-tutorial fixes
    62060f323 Get masked paths and readonly masked patchs from containers/common
    4c249a219 Change default QEMU CPU level to `qemu64` on Windows amd64

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2024-03-15 17:17:19 +00:00
Bruce Ashfield
1a813b0e6f netavark: update to 1.10.3 
Updated via:

   bitbake -c update_crates netavark

Bumping netavark to version v1.10.3-1-gbe7bd48, which comprises the following commits:

    d9f9fdc v1.10.3
    a88dc00 fix netavark update to not start a new aardvark-dns
    664637b Release v1.10.2
    8e53052 Release notes for v1.10.2
    c70dc8e [CI:BUILD] Packit/rpm: fix aardvark-dns handling
    8a7422e Do not perform network namespace detection on AV update
    a78cfa8 Release v1.10.1
    187e0a6 Updated release notes for v1.10.1
    851ac90 update to nftables release 0.3 from crates.io
    1f60bce DISTRO_PACKAGE: fix incorrect vendored tar archive URL
    3328784 Bump to 1.11.0-dev
    799c1ae Release 1.10.0
    2965880 Release notes for 1.10.0
    f20eeeb RPM: update .cargo/config before building
    fddc681 Add support for isolation to the nftables driver
    04538cd build(deps): bump h2 from 0.3.22 to 0.3.24
    020cdd2 chore(deps): update rust crate chrono to 0.4.32
    b953314 fix(deps): update rust crate env_logger to 0.11.0
    a6f8855 chore(deps): update dependency containers/automation_images to v20240102
    687f07e Bump nftables-rs to latest commit
    db43e53 Netavark: nftables support
    c31d678 fix(deps): update rust crate serde_json to 1.0.111
    f59c28d feat: added the --firewall-driver option
    1f75d87 Document how to generate a code coverage report for netavark
    40a6ee0 fix(deps): update rust crate clap to ~4.4.12
    9b3a3d0 fix(deps): update rust crate serde_json to 1.0.110
    04f1517 fix(deps): update rust-futures monorepo to 0.3.30
    059c0cb fix(deps): update rust crate nispor to 1.2.16
    5fe12c3 chore(deps): update rust crate tempfile to 3.9.0
    a6afa03 Use tonic::transport::Uri instead of HTTP
    33d8d04 chore(deps): update dependency containers/automation_images to v20231208
    3faf33f fix(deps): update rust crate tokio to 1.35
    4759152 dhcp-proxy: return actual error instead of generic one
    f571e31 dhcp-proxy: skip set gateway if missing
    87f6691 bump netlink-packet-route to 0.18.1
    63c34a5 chore(deps): update rust crate once_cell to 1.19.0
    ff45e22 fix(deps): update rust crate nispor to 1.2.15
    c85d844 fix(deps): update rust crate serde to 1.0.193
    3bbc9fd fix(deps): update rust crate clap to ~4.4.10
    4f27552 aardvark: show error if process is in wrong netns
    a4e082d aardvark: remove unessesary unlock lockfile calls
    4c58983 fix(deps): update rust crate url to 2.5.0
    f588f1d Bump working version to v1.10.0-dev

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2024-03-15 17:17:19 +00:00
Bruce Ashfield
8824967159 nerdctl: update to v2.0.0-beta 
Updated via:

    oe-go-mod-autogen.py --repo  https://github.com/containerd/nerdctl.git --rev v2.0.0-beta.1

One patch refresh, no other modifications.

Bumping nerdctl to version v2.0.0-beta.1-10-g0a20db63, which comprises the following commits:

    4420aa67 update BuildKit (0.13.0-rc1)
    4acb599e CI: test compilation with Go 1.22
    6f1c767e build(deps): bump github.com/tidwall/gjson from 1.17.0 to 1.17.1
    07dc8a58 build(deps): bump github.com/opencontainers/image-spec
    72a9737d platform: support loongarch64
    1b05ff3e Remove the support for the old CNI isolation plugin
    4c29703b rootless: fix `Not Authorized(uid): org.fedoraproject.FirewallD1.config`
    1eada1af build(deps): bump github.com/opencontainers/runtime-spec
    fdf7968b Fix soci image push with multi-platforms flags
    09168445 build(deps): bump golangci/golangci-lint-action from 3.7.1 to 4.0.0
    6fd3fb73 build(deps): bump golang.org/x/net from 0.20.0 to 0.21.0
    cad6b2af build(deps): bump golangci/golangci-lint-action from 3.7.0 to 3.7.1
    679adcf8 build(deps): bump golang.org/x/crypto from 0.18.0 to 0.19.0
    c6236eea build(deps): bump tonistiigi/xx from 1.3.0 to 1.4.0
    cfc063cc update slirp4netns (1.2.3)
    2d59841b build(deps): bump github.com/rootless-containers/rootlesskit/v2
    5733be85 update RootlessKit (2.0.1)
    ae224f40 build(deps): bump github.com/containerd/console from 1.0.3 to 1.0.4
    c797578e build(deps): bump github.com/klauspost/compress from 1.17.5 to 1.17.6
    6a229537  `containerd-rootless-setuptool.sh uninstall` cleanup all relevant services
    9ae613b3 support build attest
    741d06e5 Add support to run systemd in containers (with --systemd flag)
    b452c64b Support --ipc=container:<id> option
    3b45cc18 build(deps): bump github.com/containerd/nydus-snapshotter
    5df53e5f update BuildKit (0.13.0-beta3)
    37168690 build(deps): bump docker/metadata-action from 5.5.0 to 5.5.1
    a3e8cb46 build(deps): bump github.com/containerd/containerd from 1.7.12 to 1.7.13
    dc7bbed8 update Kubo (0.26.0)
    ad02e192 update bypass4netns (0.4.0)
    02dc9b44 update runc (1.1.12)
    3ab02f69 update containerd (1.7.13)
    4892364c [Carry 2535] rootless: support detach-netns mode
    328497a8 update RootlessKit (2.0.0)
    58cc30c7 update BuildKit (0.13.0-beta2)
    5e38fa10 containerd-rootless-setuptool.sh: avoid creating buildkitd.toml
    76199746 build(deps): bump github.com/containerd/nydus-snapshotter
    bd6a915c build(deps): bump github.com/containerd/nydus-snapshotter
    1050dd65 build(deps): bump github.com/klauspost/compress from 1.17.4 to 1.17.5
    8df3f8a9 containerd/containerd/platforms -> containerd/platforms
    0ac36b66 Retag images when tag is already present in nerdctl build
    2863b6c7 CI: use standard GHA runner for Windows too
    3149671e build(deps): bump github.com/opencontainers/image-spec
    3a7948b3 CI: use standard GHA runners
    7f88313c build(deps): bump actions/cache from 3 to 4
    77234f5a update gpu image to 12.3
    2410e1f6 go.mod: github.com/rootless-containers/rootlesskit/v2 v2.0.0
    d307fda9 build(deps): bump github.com/containerd/containerd from 1.7.11 to 1.7.12
    4af27bd1 go.mod: module github.com/containerd/nerdctl/v2
    5ee55f28 add allow option in build
    410d5915 Document that profiles are supported
    05059400 build(deps): bump github.com/rootless-containers/bypass4netns
    3b5717be containerd-rootless-setuptool.sh nsenter: inherit RootlessKit env
    8e09af1e shfmt containerd-rootless-setuptool.sh
    a71209f8 fix: return error if volume create failed
    d0179a63 build(deps): bump golang.org/x/net from 0.19.0 to 0.20.0
    aa11ded3 build(deps): bump github.com/docker/go-connections from 0.4.0 to 0.5.0
    3fa62388 build(deps): bump docker/metadata-action from 5.4.0 to 5.5.0
    ce955db1 build(deps): bump golang.org/x/sync from 0.5.0 to 0.6.0
    2053c384 build(deps): bump golang.org/x/term from 0.15.0 to 0.16.0
    b0458662 logging: respect ctx
    9afd9e3e update runc (v1.1.10)
    695f11a2 cniNetworkManager: move Windows-specific variable to `_windows.go`
    c44427fb nerdctl rm: fix printing `error="<nil>"` on warning
    df43d623 build(deps): bump go.uber.org/mock from 0.3.0 to 0.4.0
    f60bbc65 build(deps): bump github.com/containerd/cgroups/v3 from 3.0.2 to 3.0.3
    f59c2bed Add docs for trouble shooting nvidia gpu operator
    970fed9f Remove "soci image rpull" from testing suite
    843d8600 fix typo in filename
    e4bf8b99 Fix #2199 to allow users to bind a named pipe on Windows.
    392daca1 go.mod: clean up
    c2d71273 fix groupadd in compose
    ea3a4e02 build(deps): bump github.com/awslabs/soci-snapshotter
    ffd76b5b build(deps): bump golang.org/x/crypto from 0.16.0 to 0.17.0
    ef00a6d6 build(deps): bump docker/metadata-action from 5.3.0 to 5.4.0
    255716ea docs: Fix typo in command-reference.md
    b6436017 fix etchosts in host network
    990d7eca implement persistent logging for contaiers running in foreground
    ae004af5 fix deadlinks in the notation doc
    e538124a build(deps): bump github.com/pelletier/go-toml/v2 from 2.1.0 to 2.1.1
    24aa6e27 update BuildKit (0.12.4)
    de985457 update containerd (1.7.11)
    139022f8 build(deps): bump github.com/containerd/containerd from 1.7.10 to 1.7.11
    8567678e Dedup mounts for /etc/hosts /etc/resolv.conf
    a56dcfac build(deps): bump actions/setup-go from 4 to 5
    a4c33929 build(deps): bump github.com/containerd/nydus-snapshotter
    06628f63 nerdctl run: reset the default value of limits.
    f6004169 build(deps): bump docker/metadata-action from 5.2.0 to 5.3.0
    f2030d29 update CNI plugins (1.4.0)
    722040c4 build(deps): bump github.com/containernetworking/plugins
    f709735a build(deps): bump github.com/klauspost/compress from 1.17.3 to 1.17.4
    198797f2 build(deps): bump docker/metadata-action from 5.0.0 to 5.2.0
    0e73e3ed update containerd (1.7.10)
    21dc100a fix typo
    ed633b3b build(deps): bump github.com/containerd/containerd from 1.7.9 to 1.7.10
    71bf53b3 update golangci-lint (1.55.2)
    a8aaac29 build(deps): bump golang.org/x/net from 0.18.0 to 0.19.0
    d6c7f0f3 build(deps): bump golang.org/x/crypto from 0.15.0 to 0.16.0
    aeeb338b update Nydus (2.2.4)
    e0808016 update Kubo (0.24.0)
    ec728349 update containerd (1.7.9)
    6e5c7f76 build(deps): bump github.com/containerd/accelerated-container-image
    2d508151 Fix nerdctl system info : sort problem.
    afe990db remove incompatible in TestComposeExecTTY
    8e9ca2b1 build(deps): bump github.com/go-jose/go-jose/v3 from 3.0.0 to 3.0.1
    30eaca09 build(deps): bump github.com/compose-spec/compose-go
    76c57d20 fix: typo
    51d09871 build(deps): bump github.com/klauspost/compress from 1.17.2 to 1.17.3
    9b62e889 Add SOCI index digest flag
    d7676628 docs: read-only (RRO) bind-mount have been support by docker
    77d1fd64 build(deps): bump github.com/containerd/containerd from 1.7.8 to 1.7.9
    ca8c1180 build(deps): bump github.com/compose-spec/compose-go
    c6a4bfeb build(deps): bump docker/build-push-action from 5.0.0 to 5.1.0
    0d934074 Deflake TestContainerListWithFilter
    33350146 build(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.0
    411f9daf build(deps): bump github.com/fatih/color from 1.15.0 to 1.16.0
    a7cdd348 build(deps): bump golang.org/x/sync from 0.4.0 to 0.5.0
    651cc8cb build(deps): bump golang.org/x/net from 0.17.0 to 0.18.0
    6c560bcf [build][iidfile] Setthe same permissions as docker
    d08f4c47 build(deps): bump golang.org/x/text from 0.13.0 to 0.14.0
    d9d684bf chore(test): remove some incompatible in compose test
    a78b50ef Add diff command to docs & fix usage message
    3d1a5f11 Use prepared Stdout
    d03a5993 Fix wrong comment of completion
    00c0d3b7 Fix missing error handling
    cc52ea45 Support diff command's autocompletion
    da85b403 Remove diff test from windows
    2fcd3c4c Add comment to diff test
    d96ad3b4 Add `diff` command
    0008cd6c build(deps): bump github.com/Microsoft/hcsshim from 0.11.2 to 0.11.4
    a9e5ea43 update containerd-fuse-overlayfs (1.0.8)
    ae12819e Fix unstable sort of container list in compose
    0e643d2b update imgcrypt (1.1.9)
    2c57b5ca update BuildKit (0.12.3)
    9c1ee066 update runc (1.1.10)
    2c3cb4a4 update containerd (1.7.8)
    2af4cef9 nerdctl ps: implement `--format {{.Label "foo"}}`
    3dd95cd4 Dockerfile: stargz-snapshotter v0.15.1
    b5da5ea3 fix add-host overwritten
    9143054e build(deps): bump github.com/containerd/stargz-snapshotter/ipfs
    147cbbef build(deps): bump github.com/containerd/imgcrypt from 1.1.8 to 1.1.9
    e6e24c21 build(deps): bump github.com/containerd/stargz-snapshotter
    1138bfbe nerdctl-full: compile ipfs (Kubo) as a static binary
    ac0ceb5a nerdctl-full: compile containerd as static binaries
    a6a2d917 Support IPv6 for nerdctl network
    55987ae9 Add support to CernVM-FS Snapshotter
    fff98e35 build(deps): bump github.com/docker/cli
    792a0cb1 support running container with network id
    63b8df5e build(deps): bump github.com/containerd/containerd from 1.7.7 to 1.7.8
    59640025 build(deps): bump github.com/docker/docker
    161bf205 compose_config_test: workaround for Docker Compose v2.23.0
    0b977127 Vagrantfile.freebsd: pin generic/freebsd13 to version 4.3.2
    ae17b486 build(deps): bump google.golang.org/grpc from 1.56.2 to 1.56.3
    caea0f91 fix ps format names
    35966845 support ip-masq option
    5d18f61d build(deps): bump github.com/klauspost/compress from 1.17.1 to 1.17.2
    1c41c10f Replace logrus.SetOutput() with log.L.Logger.SetOutput()
    10854249 docs: minor soci push fix
    a97162ed build(deps): bump github.com/containerd/nydus-snapshotter
    8a5177c7 build(deps): bump github.com/containerd/continuity from 0.4.2 to 0.4.3
    0af5badb build(deps): bump tonistiigi/xx from 1.2.1 to 1.3.0
    f51e06d2 build(deps): bump github.com/compose-spec/compose-go
    35a7920a build(deps): bump github.com/Microsoft/hcsshim from 0.11.1 to 0.11.2
    8c2610a1 build(deps): bump github.com/mattn/go-isatty from 0.0.19 to 0.0.20
    6c8ea8bc build(deps): bump actions/checkout from 4.1.0 to 4.1.1
    41f2647a build(deps): bump github.com/klauspost/compress from 1.17.0 to 1.17.1
    63d446f1 Use https://github.com/containerd/log for logging
    04a35f82 build(deps): bump github.com/containerd/accelerated-container-image
    bc62b220 fix: typo
    5d4f0325 nerdctl compose: fix --env-file
    5a874813 build(deps): bump github.com/containerd/nydus-snapshotter
    ff0fa841 chore: unnecessary code
    a2cfe916 build(deps): bump golang.org/x/net from 0.16.0 to 0.17.0
    3b09b4cb fix: call client close
    3b6cf701 go.mod: github.com/containerd/containerd v1.7.7
    b6d76eae dockerconfigresolver: nullify DefaultTLS when DefaultScheme == "http"
    e590756c update gotestsum (1.10.0)
    98d5724e update Kubo (0.23.0)
    02a59fc5 update containerd-fuse-overlayfs (1.0.7)
    869dec83 update slirp4netns (1.2.2)
    ea86ea87 update containerd (1.7.7)
    abec5ef0 containerd/containerd/log -> containerd/log
    93cb4802 chore: Comment should with an optional leading article
    d5dd50ce build(deps): bump golang.org/x/net from 0.15.0 to 0.16.0
    3006f23e release.yml: migrate from `hub` to `gh`
    6664661c build(deps): bump golang.org/x/crypto from 0.13.0 to 0.14.0
    11a43ac4 build(deps): bump golang.org/x/sync from 0.3.0 to 0.4.0
    980019a2 build(deps): bump golang.org/x/term from 0.12.0 to 0.13.0
    fdf4b2c0 build(deps): bump golang.org/x/sys from 0.12.0 to 0.13.0
    34f73335 build(deps): bump github.com/containerd/nydus-snapshotter
    c1fd6782 Fix port allocate iptables regex
    6b5c43e2 CNI: prioritize `/opt/cni/bin` over `/usr/lib/cni`
    e230c3cf build(deps): bump github.com/containerd/nydus-snapshotter
    88188be6 docs: minor fixes to soci documentation
    72665a07 update toml to v2
    8ce38135 fix: client close connection
    004a05a8 Support zstd (non-chunked) conversion
    7291147c build(deps): bump github.com/tidwall/gjson from 1.16.0 to 1.17.0
    3b644b19 build(deps): bump actions/checkout from 4.0.0 to 4.1.0
    a9fb4c56 chore: Comment should with an optional leading article
    4b5129b5 build(deps): bump github.com/Microsoft/hcsshim from 0.11.0 to 0.11.1
    1b5a9867 add missing flags for compose ps
    20f929d1 add featrue network filter
    c407ceb5 build(deps): bump github.com/compose-spec/compose-go
    357113b4 nerdctl version: skip inspecting rootless daemon if the daemon is not running
    42cfd144 docs: add SOCI snapshotter guideline in README.md
    65334cc7 build(deps): bump github.com/klauspost/compress from 1.16.7 to 1.17.0
    98e87997 build(deps): bump gotest.tools/v3 from 3.5.0 to 3.5.1
    6db2c459 update containerd (1.7.6)
    4c82cde7 feat: support push with soci
    dd03ebea nerdctl compose cp: support rootless
    69a1833e compose: silence "build.config should be relative path" warning
    1605587b Implement `nerdctl compose exec -T`
    a08e668f docs: fix docs for supported quiet flag of push command
    76dd7065 build(deps): bump github.com/opencontainers/image-spec
    78c855e0 add feature nerdctl compose cp
    ce611af1 build(deps): bump github.com/containerd/nydus-snapshotter
    9d4e5d68 seccomp: rename "default" to "builtin" to follow Docker 23
    be2acea7 update golangci-lint (1.54.2)
    ba3c6b91 update soci-snapshotter (0.4.0)
    b5b1f2a1 update Nydus (2.2.3)
    c5794dd6 update Kubo (0.22.0)
    ee1ac8f0 update fuse-overlayfs (1.13)
    bdb2c006 update slirp4netns (1.2.1)
    70b1ba31 update RootlessKit (1.1.1)
    822f1154 update imgcrypt (1.1.8)
    bcface07 update BuildKit (0.12.2)
    e4a2ceb7 update containerd (1.7.6)
    1e0b0bbf image: dedup same platform entry
    6d77b40b build(deps): bump github.com/containerd/containerd from 1.7.5 to 1.7.6
    c373e1bc build(deps): bump docker/login-action from 2.2.0 to 3.0.0
    81f4dba5 build(deps): bump docker/setup-qemu-action from 2 to 3
    765711c4 build(deps): bump docker/metadata-action from 4.6.0 to 5.0.0
    ebede8d0 build(deps): bump docker/setup-buildx-action from 2 to 3
    03cb689c build(deps): bump docker/build-push-action from 4.2.1 to 5.0.0
    68b58d8a build(deps): bump github.com/compose-spec/compose-go
    248b2b3a remove useless option from containerd-rootless-setuptool
    fe87f8b7 build(deps): bump docker/build-push-action from 4.1.1 to 4.2.1
    bc7edb76 MAINTAINERS: add Kay Yan (yankay) as a REVIEWER
    a976067c fix bash completion of volume rm
    2cbb162b build(deps): bump github.com/cyphar/filepath-securejoin
    e1bad09d adjust writers fmt
    a80e0eb1 fix container_create_windows_test
    b598b583 add missing zero-length list check
    cdc917eb build(deps): bump github.com/docker/cli
    84309f24 build(deps): bump github.com/docker/docker
    1bb407c0 build(deps): bump golang.org/x/net from 0.14.0 to 0.15.0
    cf6ba305 build(deps): bump golang.org/x/term from 0.11.0 to 0.12.0
    c565933b build(deps): bump golang.org/x/text from 0.12.0 to 0.13.0
    c2b9f877 build(deps): bump golang.org/x/sys from 0.11.0 to 0.12.0
    f7752221 build(deps): bump actions/checkout from 3.6.0 to 4.0.0
    2739c8fc fix nerdctl run -v when host folder does not exist for bind mounts
    1352ac0d build(deps): bump github.com/awslabs/soci-snapshotter
    6e542c3a Makefile: install docs
    da05f926 Makefile: fix overriding GO command
    fa9e4edb Makefile: add GO_BUILD_FLAGS variable
    4dbe249e Makefile: derive BINDIR from PREFIX
    d30f0788 fix: grammatical errors
    79a15782 fix: succeeded typo
    c6dd2f5f build(deps): bump github.com/containerd/containerd from 1.7.3 to 1.7.5
    9a41384b build(deps): bump actions/checkout from 3.5.3 to 3.6.0
    a0aac07a Support copying out of volumes in stopped containers
    31d5d4ad Fix typo
    4dcef6e0 pkg/version: fulfill fields from `debug/buildinfo`
    1e5baaaf Fix usage of `errors.Join`
    91295033 build(deps): bump github.com/compose-spec/compose-go
    6ed3118e build(deps): bump github.com/containerd/imgcrypt from 1.1.7 to 1.1.8
    ccd5be5d build(deps): bump golangci/golangci-lint-action from 3.6.0 to 3.7.0
    0844a51e support test integration docker 23 compatibility
    42c312a8 support volume create anonymous
    89bb5bc3 update runc (1.1.9)
    5130ccbf Remove dependency on github.com/hashicorp/go-multierror
    b98ce6a6 build(deps): bump github.com/compose-spec/compose-go
    3bc8f05b build(deps): bump github.com/tidwall/gjson from 1.15.0 to 1.16.0
    56b0a7cb Update to Go 1.21 in CI
    ac0146f9 build(deps): bump github.com/fahedouch/go-logrotate from 0.1.3 to 0.2.0
    424bf4ed FreeBSD: Linux Container Support and BuildKit Integration
    0d631726 build(deps): bump golang.org/x/net from 0.13.0 to 0.14.0
    569fe4e3 CI: Windows: enable Hyper-V containers
    3df165d0 fix attach help is messed up
    dd60cfe6 build(deps): bump golang.org/x/crypto from 0.11.0 to 0.12.0
    2888c388 CI: move Windows tests to GHA
    855da424 CI: move FreeBSD tests to GHA
    65934e92 test-integration-docker-compatibility: install Docker 20.10
    cf7b7428 build(deps): bump github.com/coreos/go-iptables from 0.6.0 to 0.7.0
    b8a8100e .cirrus.yml: fix FreeBSD CI failure
    be2ba3ef build(deps): bump golang.org/x/net from 0.12.0 to 0.13.0
    f0140a5c feat: add 'nerdctl container attach'
    35296268 Bump containerd to 1.7.3
    7f5bca18 Remove special case for Windows when mounting view
    f57cb241 Add lease to prevent containerd GC

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2024-03-15 17:17:19 +00:00
Bruce Ashfield
5dfa9cf125 k3s: update to v1.28.7 
Generated with:

    ./scripts/oe-go-mod-autogen.py --repo https://github.com/rancher/k3s.git --rev v1.28.7+k3s1

plus one manual modification to relocation.inc:

   - sigs.k8s.io/kustomize/kustomize/v5:sigs.k8s.io/kustomize/kustomize/v5:force
   + sigs.k8s.io/kustomize/kustomize/v5:sigs.k8s.io/kustomize/kustomize/v5/kustomize:force

Bumping k3s to version v1.28.7+k3s1, which comprises the following commits:

    051b14b248 Fix netpol startup when flannel is disabled
    4c1b91e3f9 Use 3/2/1 cluster for split role test
    16ad3bc39c Change default number of etcd nodes in E2E splitserver test
    9c0e5a5ff8 Rename AgentReady to ContainerRuntimeReady for better clarity
    80baec697f Restore original order of agent startup functions
    f19db855bf remove e2e logs drone step (#9516)
    25e12bc10c [Release-1.28] Fix drone publish for arm (#9508)
    9f78e474d7 Update Kubernetes to v1.28.7 (#9492)
    1ca64a81be [Release-1.28] Support PR testing installs (#9469)
    45860105bb [Release-1.28] Test_UnitApplyContainerdQoSClassConfigFileIfPresent (#9440)
    78543f4850 [Release-1.28] Enable longer http timeout requests (#9444)
    3d0674ad1c Bump kine and set NotifyInterval to what the apiserver expects
    a3770d21e2 Expose rootless containerd socket directories for external access
    0259b8e535 Expose rootless state dir under ~/.rancher/k3s/rootless
    865b454a05 Don't verify the node password if the local host is not running an agent
    493ebb9517 Fix ipv6 endpoint address selection for on-demand snapshots
    cd7c557754 Fix issue with coredns node hosts controller
    3d46c7da70 Bump CNI plugins to v1.4.0
    b620348998 Add check for etcd-snapshot-dir and fix panic in Walk
    6b2c1ecb0f Retry startup snapshot reconcile
    c2c9a265bf Fix excessive retry on snapshot reconcile
    dda9780f23 Update Kube-router to v2.0.1
    a922a0e340 allow executors to define containerd and docker behavior
    034ee89344 Update flannel to v0.24.0 and remove multiclustercidr flag (#9075)
    6ff57ab749 Bump flannel version
    25c7208b7e Changed how lastHeartBeatTime works in the etcd condition
    f3b4effb32 Runtimes refactor using exec.LookPath
    5eb278b838 [Release-1.28] Auto Dependancy Bump (#9419)
    190864259e Consistently handle component exit on shutdown
    5857584463 Bump cri-dockerd
    35ef1cec92 Bump Local Path Provisioner version (#8953) (#9426)
    c9f49a3b06 Bump helm-controller to fix issue with ChartContent
    2f9788ab55 Bump runc and helm-controller versions
    14fdacb85b gofmt config_test.go
    aebdccfae5 Fix issues with certs.d template generation
    39a0001575 Use `ipFamilyPolicy: RequireDualStack` for dual-stack kube-dns (#8984)
    c236c9ff77 Update to v1.28.6 (#9260)
    6224ea62af Error getting node in setEtcdStatusCondition
    470bcd1bff Move proxy dialer out of init() and fix crash
    04ce0ac0a9 Rebase & Squash (#9070)
    4724315b8c Pin opa version for missing dependency chain (#9216)
    2858f89a5b Bump quic-go for CVE-2023-49295
    b04e18c4a0 Enable network policy controller metrics
    bda4b73493 Add e2e test for embedded registry mirror
    f3c6250b28 Add embedded registry implementation
    ef4e7ae143 Add server CLI flag and config fields for embedded registry
    ece564ec93 Add ADR for embedded registry
    ea66fe65b4 Propagate errors up from config.Get
    a62ee4fd0d Move registries.yaml load into agent config
    ace1714e0c Pin images instead of locking layers with lease
    3b863906e0 Fix OS PRETTY_NAME on tagged releases
    ee85990a83 Add runtime checking of golang version
    3be858a878 Add more paths to crun runtime detection (#9086)
    fa798ba272 Add support for containerd cri registry config_path
    f95ab7aaf9 Fix nil map in full snapshot configmap reconcile
    fe19faaf9a Handle logging flags when parsing kube-proxy args
    fc3136f54f Fix the OTHER log message that prints the wrong variable
    9d5950741e Dockerfile.dapper: set $HOME properly
    3248fd05c7 Add ServiceLB support for PodHostIPs FeatureGate
    a503d13591 Remove GA feature-gates (#8970)
    53c6e05ef5 Handle etcd status condition when cluster reset and disable etcd
    3d08cfd0fe Wait for taint to be gone in the node before starting the netpol controller
    90367d80b0 Add a retry around updating a secrets-encrypt node annotations (#9125)
    5b2d1271a6 Only publish to code_cov on merged E2E builds (#9083)
    19b361f30b Update to v1.28.5-k3s1 (#9081)
    71a3c35fb7 Bump containerd to v1.7.11
    08509a2a90 Allow setting default-runtime on servers
    b9c288f702 Bump containerd/runc to v1.7.10-k3s1/v1.1.10
    03532f7c0b Added runtime classes for crun/wasm/nvidia
    9c6ba42ca0 Nov 2023 stable channel update (#9022)
    79438cecaa Modify CONTRIBUTING.md guide
    d34550fb2f Fix overlapping address range
    6ba6c1b65f remove s390x from manifest (#8998)
    022cf6d51f remove s390x steps temporarily since runners are disabled
    3f23723035 Update to v1.28.4 (#8920)
    6d3a92a658 Print key instead of file path in snapshot metadata log message
    b23e70d519 Don't apply s3 retention if S3 client failed to initialize
    a92c4a0f17 Don't request metadata when listing objects
    96ebb96317 Fix flakey dynamic-cert.json in cert rotation e2e test
    611ac0894c Revert e2e pipeline depends_on change
    3a6284e2b9 Bump dynamiclistener to fix secret sync race
    1e0a7044cf Reorder snapshot configmap reconcile to reduce log spew during initial startup
    e53c189587 Handle nil pointer when runtime core is not ready in etcd
    6c544a4679 Add jitter to client config retry
    fa4c180637 Update install.sh sha256sum (#8885)
    da0593bcf9 More improves for K3s patch release docs (#8800)
    abc2efdd57 Disable helm CRD installation for disable-helm-controller (#8702)
    07ee854914 Tweaked order of ingress IPs in ServiceLB (#8711)
    7ecd5874d2 Skip initial datastore reconcile during cluster-reset
    2088218c5f Fix issue with snapshot metadata configmap
    fd8db56d5a Fix wrong warning from restorecon in install script (#8871)
    78ea593780 General updates to README (#8786)
    19fd7e38f6 enh: Force umount for NFS mount (like with longhorn)
    b47cbbfd42 add agent flag disable-apiserver-lb (#8717)
    30c8ad926d QoS-class resource configuration
    32a1efa408 Bump kine to fix multiple issues
    a26441613b add: timezone info in image
    0011eb5ead optimize: Simplify and clean up Dockerfile (#8244)
    8f7a8b23b7 Improve dualStack log
    f5920d7864 Add warning for multiclustercidr flag (#8758)
    ba5fcf13fc Wasm shims and runtimes detection
    875a9d19c6 Added ADR for etcd status
    c5cd7b3d65 Added etcd status condition
    022c49242d update channels latest to v1.27.7+k3s2 (#8799)
    bbafb86e91 Don't use iptables-save/iptables-restore if it will corrupt rules
    9e13aad4a8 Update traefik to fix registry value (#8792)
    1ae053d944 Upgrade traefik chart to v25.0.0 (#8771)
    f575a05be2 fix: Access outer scope .SystemdCgroup (#8761)
    c7c339f0b7 chore: Bump Trivy version (#8739)
    1e99a46256 chore: Update sonobuoy image versions (#8710)
    9377accd9e update stable to v1.27.7+k3s1 (#8753)
    112e1339b7 Restore selinux context systemd unit file (#8593)
    49411e7084 Don't try to read token hash and cluster id during cluster-reset
    6aef26e94b Update to v1.28.3 (#8682)
    5b6b9685e9 Manually requeue configmap reconcile when no nodes have reconciled snapshots
    3db1d33282 Re-enable etcd endpoint auto-sync
    b8dc95539b Fix CloudDualStackNodeIPs feature-gate inconsistency
    0c9bf36fe0 [K3s][Windows Port] Build script, multi-call binary, and Flannel (#7259)
    aaf8409096 Use version.Program not K3s in log (#8653)
    9597ea1183 Start etcd client before ensuring self removal
    2291d6d079 Add etcd-only/control-plane-only server test
    7bb4a826af Update kube-router package in build script
    3abc8b82ed Bump traefik, golang.org/x/net, google.golang.org/grpc
    1ffb4603cd Use IPv6 in case is the first configured IP with dualstack
    3d25e9f66c Switch build target from main.go to a package. (#8342)
    7c5b69ca1d Fix etcd snapshot integration tests
    d885162967 Add server token hash to CR and S3
    550ab36ab7 Switch to managing ETCDSnapshotFile resources
    5cd4f69bfa Move snapshot delete into local/s3 functions
    a15b804e00 Sort snapshots by time and key in tabwriter output
    7464007037 Store extra metadata and cluster ID for snapshots
    80f909d0ca Move s3 snapshot list functionality to s3.go
    8d47645312 Consistently set snapshotFile timestamp
    f1afe153a3 Tidy s3 upload functions
    2b0e2e8ada Elide old snapshot data when apiserver rejects configmap with ErrRequestEntityTooLarge
    676b00aa0e Move etcd snapshot code into separate file
    500744bb94 Add new CRD for etcd snapshots
    64107b54e4 Minor updates as per design review discussion
    22065affa2 Add ADR for etcd snapshot CRD migration
    9bb1ce1253 Bump busybox to v1.36.1
    5fe4f6709a Bump containerd to v1.7.7-k3s1
    7d38b4a3db E2E Domain Drone Cleanup (#8579)
    dface01de8 Server Token Rotation (#8265)
    ced25af5b1 Fixed tailscale node IP dualstack mode in case of IPv4 only node
    ba750e28b7 [v1.28] System agent push tags fix  (#8568)
    e33359d375 Update install.sh.sha256sum
    a6acdd0d75 Fix slemicro check for selinux (#8526)
    e82b37640a Network defaults are duplicated, remove one
    d4a487d83f Fix spellcheck problem (boostrap ==> bootstrap)
    f2c7117374 Take IPFamily precedence based on order
    0b23a478cf ipFamilyPolicy:PreferDualStack for coredns and metrics-server
    021c5b291b Improve release docs - updated (#8414)
    0e5c760625 Pass SystemdCgroup setting through to nvidia runtime options
    1e38b5d904 Don't ignore assets in home dir if system assets exist
    fe18b1fce9 Add --image-service-endpoint flag (#8279)
    79b44cee29 Create and validate install.sh signatures (#8312)
    ad206310d1 Update kube-router
    b6ab24c4fd Added error when cluster reset while using server flag
    b010c941cf Fix .github regex to skip drone runs on gh action bumps (#8433)
    d349c9db6c Added cluster reset from non bootstrap nodes on snapshot restore e2e test
    d0ab4ef26b Added advertise address integration test
    172a7f1d1a Fix gofmt error
    8705a88bf4 Clear remove annotations on cluster reset; refuse to delete last member from cluster
    002e6c43ee Reorganize Driver interface and etcd driver to avoid passing context and config into most calls
    890645924f Don't export functions not needed outside the etcd package
    a3c52d60a5 Skip creating CRDs and setting up event recorder for CLI controller context
    391e61bd72 Use admin kubeconfig instead of supervisor for etcd snapshot CLI
    bd9dad87d5 Typo fix
    5c5d957e73 Set server-token adr to accepted
    6398c38690 Server token rotation ADR
    8c73fd670b Disable HTTP on main etcd client port
    12459fca97 Add extraArgs to tailscale
    8c197bdce4 Include the interface name in the error message
    56abe7055f add link to drone in documentation (#8295)
    e1706875f4 Update channel latest to v1.27.6+k3s1 (#8397)
    66cb1064d1 Add context to flannel errors
    d3f7632463 Fix error reporting

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2024-03-15 17:17:19 +00:00
Bruce Ashfield
13c66b0983 cri-tools: update to v1.29.0 
Bumping cri-tools to version v1.26.0-489-g17b4dd65, which comprises the following commits:

    949545e1 Readd the logPath to the list
    5afb4c73 Matching kubelet's containerLogManager.rotateLog() glob pattern
    09b9303e Applying comment
    64e373b2 Changing option to keep-logs and inverting default
    67679ee3 1197: adding rm --dl (--deletelog) option
    edccf499 Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc
    dee3de0a Bump go.opentelemetry.io/otel/sdk from 1.23.1 to 1.24.0
    af4707c2 Don't remove pinned images on image prune
    fd867e1c A bunch of changes: * handle regexp error * better usage info * better documentation
    98843b15 Implemented the `--filter` flag for `images` command.
    196f9421 Update Kubernetes to v1.30.0-alpha.2
    376d9251 Don't skip windows tests
    2529cea9 Don't fail-fast containerd test matrix
    58cfa5b3 Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc
    3afa43ab Bump golang.org/x/net from 0.20.0 to 0.21.0
    f6e57a25 Add support for OTEL tracing
    9d1a1a1d Bump golang.org/x/term from 0.16.0 to 0.17.0
    e9842e43 Bump golang.org/x/sys from 0.16.0 to 0.17.0
    325307a6 Bump github.com/docker/docker
    16c59bdc Bump github.com/docker/docker
    32452408 Bump github.com/opencontainers/runc from 1.1.11 to 1.1.12
    971120b9 Replace dockershim with containerd
    c4276c46 Bump github.com/google/uuid from 1.5.0 to 1.6.0
    44e8b572 Bump github.com/onsi/gomega from 1.30.0 to 1.31.1
    4c9f5e69 Bump github.com/docker/docker
    0d805e78 Add corresponding man page
    8e04084e docs: state that crictl is GA
    ade93e9f Bump actions/cache from 3 to 4
    8badaef0 Bump github.com/onsi/ginkgo/v2 from 2.14.0 to 2.15.0
    1f0b5766 Bump golang.org/x/net from 0.19.0 to 0.20.0
    4cf8a2d2 Update Snyk configuration file to exclude vendor directory with a prefix
    2522d997 Bump github.com/onsi/ginkgo/v2 from 2.13.2 to 2.14.0
    f43276b7 Bump github.com/urfave/cli/v2 from 2.26.0 to 2.27.1
    7f90228b Bump golang.org/x/term from 0.15.0 to 0.16.0
    8010f920 Bump github.com/opencontainers/runc from 1.1.10 to 1.1.11
    a7b83b1c Provide precompiled manpage version
    43f44445 Bump actions/upload-artifact from 3 to 4
    746fa3dc Update vendored Kubernetes to v1.29.0
    51e7735f Add a .snyk file to configure the Snyk security scanner
    ddb95e1f Bump github.com/google/uuid from 1.4.0 to 1.5.0
    b0129e72 Vendor Kubernetes v1.29.0-rc.2
    87e7961e Bump google-github-actions/setup-gcloud from 1 to 2
    ed48a82e more detailed output for split filesystem
    b12bab01 Drop support for `linux/arm` platform
    7e24e264 Bump actions/setup-go from 4 to 5
    34721f47 Add darwin/arm64 to release binaries
    8643906d add support container runtime use systemd cgroups
    c5e443ae adding imagefsinfo endpoint for both container and image filesystems
    310528b8 Bump github.com/urfave/cli/v2 from 2.25.7 to 2.26.0
    83fc34e9 Update golangci-lint to v1.55.2
    f409932e Update vendored Kubernetes to v1.29.0-rc.1
    58d450ce Bump github.com/onsi/ginkgo/v2 from 2.13.1 to 2.13.2
    31cda1d3 Bump golang.org/x/net from 0.18.0 to 0.19.0
    6245bad2 Bump golang.org/x/term from 0.14.0 to 0.15.0
    950fb1b6 add cases.NoLower to cases.Title function
    c98c5ba4 add unit tests CI for crictl
    e992c1d4 add container_test.go
    8cf5fc4c ci: Switch to ubuntu 22.04 and go 1.21
    01dc72dd Bump github.com/onsi/ginkgo/v2 from 2.13.0 to 2.13.1
    16fb7a3f Bump golang.org/x/net from 0.17.0 to 0.18.0
    a6344e02 Bump golang.org/x/term from 0.13.0 to 0.14.0
    135c8ad0 Bump github.com/onsi/gomega from 1.29.0 to 1.30.0
    5933733c Bump golang.org/x/sys from 0.13.0 to 0.14.0
    5d34c252 Bump golang.org/x/text from 0.13.0 to 0.14.0
    f3aaa5c0 Update to Ubuntu 22.04
    445aa46f Bump github.com/opencontainers/runc from 1.1.9 to 1.1.10
    b45f7c09 Bump github.com/google/uuid from 1.3.1 to 1.4.0
    320ad0eb Bump github.com/docker/docker
    9a3c60e9 Bump github.com/onsi/gomega from 1.28.1 to 1.29.0
    28556ddd Bump sigs.k8s.io/yaml from 1.3.0 to 1.4.0
    935d5c3e Fix CRI-O get script location
    63ff0e12 Bump github.com/onsi/gomega from 1.28.0 to 1.28.1
    f570bc09 Bump golang.org/x/net from 0.16.0 to 0.17.0

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2024-03-15 17:17:19 +00:00
Bruce Ashfield
29ec8e5cea docker-compose: update to v2.24.6 
Bumping compose to version v2.21.0-154-gce1ddb6c, which comprises the following commits:

    c665c53c bump buildx to v0.12.0 and adapt code to changes
    a39cf75e build(deps): bump github.com/compose-spec/compose-go
    46ba9c99 build(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.0
    5c5d30c6 build(deps): bump github.com/docker/cli
    36fa8d4e build(deps): bump github.com/docker/docker
    2384635e build(deps): bump github.com/moby/buildkit from 0.12.2 to 0.12.3
    2ba5e4c1 in watch mode force pull policy to build for services with both build and develop attributes This default behaviour will force a rebuild of the service images at watch process startup and be sure containers will be in sync with the local source code
    b1a26dac Assume /src/pkg/compose/testdata absolute workingdir to make tests reproducible
    5e77ae92 avoir use of []types.ServiceConfig
    f5572201 identify services to build and don't display 'building' if none
    8e1b3236 fix --remove-orphans not to consider disabled services as orphaned
    7cb1f8ba introduce RuntimeVersion for code to check container runtime supports required features
    cb01186c push also consider build.tags
    9c4efbdd Strip project prefix from docker-compose up output
    8ea7c9e0 Make it context aware and add test skipping options
    c1694360 render quiet after filtering applied
    254a94b0 bump golang to version 1.21.4
    cf608fa9 bump compose-go to v1.20.1
    426377a4 reject compose file using `secrets|configs.driver or template_driver`
    493f6c80 skips flaky e2e tests on watch and attach
    646a8fc0 fix docker/compose#11170 add newline in cmd/compose/build.go fmt.Fprint
    2945532f fix --pull documentation
    e5cd265a improve watch configuration logging Add action associated to each managed path
    d646d757 lint
    71237ef6 do not resolve cache dir until remote resource is in use
    0d905a89 add a copyright notice with original author
    b847c7f5 implement runtime file selection
    5e3d8f67 re-implement cache folder detection
    67279088 introduce --resolve-image-digests for publish to seal service images by digest
    4cd61957 fix build
    0d4cbbdb fix
    9631a49d ENGDOCS-1764
    328ca3f2 add docs upstream validation workflow
    e1bbfc63 build(deps): bump go.uber.org/goleak from 1.2.1 to 1.3.0
    616bba0a linter errors fixed
    ee6e3c2a NetworkList to NetworkInspect for ID search
    c7e31a3c Squashing feature branch commits in order to add signoff message.
    704a9fd3 Use project.ServiceNames() if no service specified in hash
    d9e0e42d Add branch configuration for pull_request trigger
    c48e3c4a Initial codeql.yml commit
    dd0803db fix SIGTERM support to stop/kill stack
    39008c53 align with OCI artifact best practices
    6c345b37 refactor(cmd/compose/run): remove redundant `len` check
    1ffa194e fail start if depependency is missing
    b9298101 check that the pull policy provided is a valid one or is not missing when --pull is used
    3d0207eb remove uncessary return value of pullComposeFiles function
    16a7c209 enable profile when down is ran with explicit service names
    818bc3c3 add sync+restart action to watch attribute
    38bc6d5d build(deps): bump github.com/containerd/containerd from 1.7.6 to 1.7.7
    0b6ce6ee build(deps): bump github.com/google/go-cmp from 0.5.9 to 0.6.0
    ae16bbbf build(deps): bump google.golang.org/grpc from 1.58.2 to 1.59.0
    d13ad1f9 build(deps): bump golang.org/x/sync from 0.3.0 to 0.4.0
    9b4d577c remove refrecence docs generation
    14b43c1a remove cucumber tests as we haven't added new ones for a while
    9dd081b9 add support of COMPOSE_ENV_FILES env variable to pass a list of env files
    2c0b0232 add dry-run support for publish command
    599e4b24 extract method to reduce cyclomatic complexity
    fe8c2780 warn user remote resource is disabled
    a345515f Don't delete dependent services
    8967df7a Apply platform before hashing
    4f694919 deps: remove deprecated github.com/pkg/errors
    6ecab957 Include image name in error message
    12e0ac89 pkg/compose/publish: use empty config descriptor mediaType
    a6b7d785 pkg/remote/oci: check artifactType instead of config.mediaType
    991901f2 pkg/remote/oci: refer to the manifest as manifest
    2d971fc9 update the watch warning message when no services with a develop section
    78f33619 ci: enable verbose output for e2e tests (#11045)
    44d21280 truncate command by default, introduce --no-trunc flag to get the full command
    ff2ff18c build(deps): bump google.golang.org/grpc from 1.58.1 to 1.58.2
    ab81db5b config --xx don't need `env_file` being parsed
    61c8be11 remove --timeout=0 flag to cleanup function of watch e2e test compose down command need the watch process to be killed to succeed
    6be5f300 move watch from alpha to main command
    c34c306c TestWatch to use new  `develop` section
    5ca35c88 implement publish
    805541be watch: use official `develop` section (#11026)
    8f489d6d build(deps): bump github.com/opencontainers/image-spec
    9ea8fbc6 build(deps): bump github.com/moby/buildkit from 0.12.1 to 0.12.2
    76f150e4 build(deps): bump gotest.tools/v3 from 3.5.0 to 3.5.1
    f447c809 build(deps): bump google.golang.org/grpc from 1.58.0 to 1.58.1
    4587d4ba build(deps): bump github.com/containerd/containerd from 1.7.3 to 1.7.6
    a697a069 introduce pull --missing flag to only pull images not present in cache
    8af49ff3 resolve service reference into container based on observed state
    f6e31dbc don't rely on depends_on to resolve volume_from, better use observed state
    6d5eb6fd update to go1.21.1
    9d7e0ad6 correct scale error messages formatting
    1a98a70b add scale command
    19bbb12f ci: tweak restricted imports in linter (#10992)
    7a134578 deps: upgrade Moby to v24.0.6 and gRPC to v1.58.0 (#10991)
    13115468 cli: fix `--build` flag for `create` (#10982)
    e1aa4f77 otel: add args & flags to cli traces (#10974)
    d7b0b2bd watch: build & launch the project at start (#10957)
    e0f39ebb pull OCI remote resource
    c9d54f09 introduce publish (alpha) command
    52e54ef9 doc: updated README.md to remove broken link
    f4f2e934 migrate to github.com/distribution/reference
    32c3d0a3 Enable service explicitly requested to be restarted
    1fdbcb62 build: pass BuildOptions around explicitly & fix multi-platform issues
    407a0d5b up: fix various race/deadlock conditions on exit (#10934)
    8caa6f1f pkg/api: replace uuid for basic random id

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2024-03-15 17:17:19 +00:00
Bruce Ashfield
4ec4055f38 crun: update to v1.14.3 
Bumping crun to version 1.14.3-8-g89d4446, which comprises the following commits:

    5884fd4 linux: fix mount of file with recursive flags
    b9e87e7 tests: test bind mounts of files
    e81086b rpm: Use relative, not absolute, symbolic links
    9079a6d release: enable parallel builds
    1961d21 NEWS: tag 1.14.3
    0860c0f crun: really drop version check
    32b139f NEWS: tag 1.14.2
    4532a38 crun: drop check for OCI version
    de537a7 NEWS: tag 1.14.1
    fdb41c3 linux: initialize options variable
    31b08fc container: do not leak capabilities buffer
    1716fde container: do not leak version_string
    e72f3bc container: fix leak of mount_options_list
    242bb34 cgroup: do not leak dirfd
    deffa39 cgroup: fix leak of cpus/mems string buffer
    3df8f0c Add force_no_cgroup & no_pivot arguments to make_context() Python function
    b883e6c Make function arguments valid Python identifiers
    e0027bc Add no_new_keyring argument to make_context() Python function

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2024-03-15 17:17:19 +00:00
Bruce Ashfield
7a5bf9f670 conmon: update to 2.1.10 
Bumping conmon to version v2.1.3-138-gaffab49, which comprises the following commits:

    9ce7b1a Add support for s390x
    3e103d6 Remove checks for (long)deprecated libsystemd-journal in favor of libsystemd
    f2be46f update packit config, enable downstream tasks
    59c6de4 fix(deps): update module github.com/onsi/gomega to v1.31.1
    1e0d24b [skip-ci] Update actions/setup-go action to v5
    bc27f79 [skip-ci] Update actions/cache action to v4
    386bb80 fix(deps): update github.com/opencontainers/runtime-tools digest to 408c51e
    14a34a8 chore(deps): update dependency containers/automation_images to v20240102
    8c6e47f drop --tty on exec
    3e425d1 chore(deps): update dependency containers/automation_images to v20231208
    90432cc docs/Makefile: softcode GOMD2MAN
    2dcd736 bump to 2.1.10
    5fec3c0 fix(deps): update module github.com/onsi/gomega to v1.30.0
    8babb44 chore(deps): update module github.com/docker/docker to v24 [security]
    2bc8747 chore(deps): update module golang.org/x/net to v0.17.0 [security]
    8557c11 Fix incorrect free in conn_sock
    116675e logging: Respect log-size-max immediately after open
    fad6bac fix some issues flagged by SAST scan
    91092aa version: bump to 2.1.9
    521f585 README.md: update the correct Nix channel
    26053bd Fix podman tests
    20ce441 Forward more messages on the sd-notify socket
    57eedf0 ci: skip broken cri-o tests
    03b64fa logging: -l passthrough accepts TTYs
    3605a36 src: fix write after end of buffer
    f269c2f src: open all files with O_CLOEXEC
    633ac6b oom-score: restore oom score before running exit command
    f0eb924 src/seccomp_notify.c: fix static build
    a58206d CI: Update Fedora names
    f5eeb6a chore(deps): update dependency containers/automation_images to v20231004
    6d88cb3 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.12.0

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2024-03-15 17:17:19 +00:00
Bruce Ashfield
e3d1163c54 buildah: update to 1.34 
Bumping buildah to version v1.34.0-30-gdbeb097c6, which comprises the following commits:

    30a9cd1c0 [release-1.34] Bump to v1.34.2-dev
    a2bab63fd [release-1.34] Bump to v1.34.1
    b7a4562ad [release-1.34] Vendor bumps
    83a136866 manifest: addCompression use default from containers.conf
    ae557ac9c Build with CNI support on FreeBSD
    cd59f7c16 tests: retrofit test for heredoc summary
    2a399d67b build, heredoc: show heredoc summary in build output
    be6b9c3f0 docs: correct default authfile path
    6a8e296ea Make buildah match podman for handling of ulimits
    70fd07877 imagebuildah: fix crash with empty RUN
    aa729810a docs: move footnotes to where they're applicable
    58820ffd1 Run codespell on code
    638a825b1 Fix FreeBSD version parsing
    78599048e Allow users to specify no-dereference
    029063b9f Fix a build break on FreeBSD
    bb70cfc50 Remove a bad FROM line
    6fe37a59b commit: force omitHistory if the parent has layers but no history
    b0fb0cacb docs: fix a couple of typos
    6cacd1478 stage_executor,heredoc: honor interpreter in heredoc
    b8c0e21cf stage_executor,layers: burst cache if heredoc content is changed
    702dfe84f Replace map[K]bool with map[K]struct{} where it makes sense
    f818763f3 Replace strings.SplitN with strings.Cut
    47ecb727f Document use of containers-transports values in buildah
    d49e48412 commit: add a --add-file flag
    27018aef5 mkcw: populate the rootfs using an overlay
    413a35959 Ignore errors if label.Relabel returns ENOSUP
    1b00f9e63 manifest: addCompression use default from containers.conf
    21ec7aceb Bump to v1.34.0
    6977c91e2 fix(deps): update module github.com/containerd/containerd to v1.7.11
    b9852af08 fix(deps): update github.com/containers/storage digest to 15c3cb7
    ad90fba16 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.2
    669f19f6c fix(deps): update github.com/containers/common digest to 630c929
    bdbd69e38 fix(deps): update module github.com/moby/buildkit to v0.12.4
    ec76cbb60 fix(deps): update github.com/openshift/imagebuilder digest to ef2a5fe
    7dfdcf33b [CI:DOCS] man pages: underscores, too-wide lines
    b7a0f6b13 fix(deps): update module github.com/containerd/containerd to v1.7.10
    1f9103562 run.bats: use --quiet --pull=false when using a prefetched image
    3b795dd4b internal/mkcw/embed/entrypoint.gz: rename to include the arch
    7788160cb internal/mkcw/embed/entrypoint.gz: compress with -n9
    76c9307ff fix(deps): update module golang.org/x/crypto to v0.16.0
    d10b1e35b Integration tests: make skip_if_no_unshare check --map-users
    028a3f9a3 fix(deps): update module golang.org/x/term to v0.15.0
    3c23118f6 fix(deps): update module golang.org/x/sys to v0.15.0
    d4f577b39 fix(deps): update module github.com/onsi/ginkgo to v2
    c174e9162 vendor: update c/{common,image,storage}
    a23927ab5 run: Allow using just one jail per container on FreeBSD
    12b205f69 Remove makefile targets entrypoint{,.gz} for non x86_64

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2024-03-15 17:17:19 +00:00
Bruce Ashfield
eae2d31c7b aardvark-dns: update to v1.10.0 
Bumping aardvark-dns to version v1.10.0-14-g526260a, which comprises the following commits:

    875c717 Release 1.10.0
    09cf01b Release notes for 1.10.0
    be398c4 chore(deps): update rust crate chrono to 0.4.32
    9330e9c chore(deps): update dependency containers/automation_images to v20240102
    0f509bb fix(deps): update rust crate futures-util to 0.3.30
    74b3618 fix(deps): update rust crate anyhow to 1.0.79
    c706497 fix(deps): update rust crate tokio to 1.35.1
    b70e31b chore(deps): update dependency containers/automation_images to v20231208
    d2a7877 fix(deps): update rust crate tokio to 1.35.0
    26e2439 fix duplicated IP CI flake
    1525a69 server: remove unused kill switch
    faf66df fix(deps): update rust crate clap to ~4.4.10
    ffb59da Bump working version to v1.10.0-dev

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2024-03-15 17:17:19 +00:00
Bruce Ashfield
2961677b6a devtools: depreciate the go source-only packages 
We are now using vendoring from the upstream repos, or creating
our own vendor directory. We no longer need these source only
recipes.

Add an inherit to each recipe to warn that it will be removed
in the future.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2024-03-15 17:17:19 +00:00
Chen Qi
799c5a90b7 crun: remove unneeded deps 
These two deps do not affect the build result and are not used,
remove them.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2024-03-15 17:17:19 +00:00
Chen Qi
a4b847830f oci-image-tools: remove unneeded deps 
These deps no longer have any effect. Remove them.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2024-03-15 17:17:19 +00:00
Bruce Ashfield
9213f05f55 runc-opencontainers: update to 1.1.12 
Bumping runc to version v1.1.12-2-ga9833ff3, which comprises the following commits:

    29d6d873 VERSION: back to development
    51d5e946 VERSION: release 1.1.12
    e9665f4d init: don't special-case logrus fds
    683ad2ff libcontainer: mark all non-stdio fds O_CLOEXEC before spawning init
    b6633f48 cgroup: plug leaks of /sys/fs/cgroup handle
    284ba305 init: close internal fds before execve
    fbe3eed1 setns init: do explicit lookup of execve argument early
    0994249a init: verify after chdir that cwd is inside the container
    506552a8 Fix File to Close
    d0b1a374 keyring: update AkihiroSuda key expiry
    d561e5da keyring: update cyphar@cyphar.com key expiry
    7887736f VERSION: back to development
    4bccb38c VERSION: release 1.1.11

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2024-03-15 17:17:19 +00:00
Bruce Ashfield
54fdc5149a containerd: update to v2.0.0-beta-tip 
Bumping containerd to version v2.0.0-beta.2-204-gb1624c362, which comprises the following commits:

    5351ad6b4 .github: windows should use fix critool version
    a2768f19d plugins/sandbox: move local plugin into services
    464319b3a Remove pause package from runc shim
    2cd08156e cri: Expose runtimeHandler support for userns
    358aef4bc go.mod: Update cri-api to include userns changes
    105f2d727 build(deps): bump google.golang.org/grpc from 1.61.0 to 1.62.0
    02db6beb8 build(deps): bump github.com/prometheus/client_golang
    75f58579c build(deps): bump github.com/opencontainers/runtime-spec
    522130a66 sandbox: support vsock connection to task api
    f0e874941 Add ttrpc generated services
    65031eade Update protobuild to build ttrpc services
    04c37d565 build(deps): bump the k8s group with 5 updates
    bd4810415 ci: update crun version to 1.14.3
    50d0de96a Update 1.7 support timeline
    4fbc9842d Changes to configuring otel from env only
    753a525b3 Deprecate otel configs
    0693b936d replace deprecated Prestart to CreateRuntime hook
    6a21c96b5 Replace go-grpc-prometheus with go-grpc-middleware/providers/prometheus
    567e56a20 build(deps): bump github.com/opencontainers/image-spec
    6a759713a Update golangci-lint to v1.56.1
    f44d90be4 Rename variables and snapshotter option to resolve lint warnings
    5611db530 cri: Make sure host sandbox files exist before adding them to mounts
    9077d1372 KEP-3857: Recursive Read-only (RRO) mounts
    83ad4367d script/test/utils.sh: readiness_check: print daemon log
    f8f1e5f7a Add container monitor plugin type for restart
    c86c8a16f integration: add case related to ContainerStats in upgrade suite
    acec60f55 integration: update recover case for upgrade
    e659cd275 integration: connect to shim by bridge client
    51689b661 integration: introduce hook for upgrade test suite
    a95c8ed59 integration: check data dir after delete container or pod
    ec759f5be integration/*: extend Runtime.Status response
    401d4b491 integration: add some helper function to release upgrade cases
    7cf8a00c7 Run failpoints tests only for runc
    a890c8e53 Add job to report statuses from matrix jobs
    132485adb Convert CLI to urfave v2
    c8766123d Prevent GC from schedule itself with 0 period.
    a086125ae Move config version to version package
    99721c27e Disable the support for Schema 1 images
    b9dfba5b8 Add CRIImageService.RemoveImage()
    4c775fcfb Pass runtimehandler from CRI pull image request
    4dcf089fa Move high volume event logs to Trace level
    1b3a96da6 cri: propagate deprecation list to runtime status
    ac7febc93 moving up for new CRI changes
    ccec1e6e4 Remove internal LoopConfig struct
    3d8da2ebf build(deps): bump the golang-x group with 1 update
    a274439f2 build(deps): bump golangci/golangci-lint-action from 3 to 4
    468bee9a7 ctr: print deprecation warnings on every invocation
    c2dfae8d0 go.mod: Bump golang.org/x/sys to v0.17.0
    41bb8b816 Revert "Fix for k8s nfs related tests"
    48c8c5f50 Remove ParseSignal from client
    281eb22cc Remove deprecated dialer
    1ce7b9951 Remove deprecated filesys funcs
    5ca56ddbb Remove deprecated funcs from restart package
    653b80899 Remove deprecated docker package
    413fbe82c Fix unpacker link in remote snapshotter docs
    23ebfd030 Fix for k8s nfs related tests
    25ab90219 Update to v0.29.1 cri-api
    5e3e12d2a build(deps): bump the otel group with 8 updates
    c4bb72ae4 Remove CRI plugin path note
    87aa9e800 Drop go 1.20 and build against 1.22
    276384695 Update codeql-action/upload-sarif dependency in scorecards workflow
    634ac2f8f Update migration script for transfer packages
    f46aea618 Move transfer and unpack packages
    d9b95ab68 Update gce configure.sh to use registry config_path
    360fbf197 Fix windows integration tests
    2820343d4 Update workflow files to install Go via composite action
    488b56361 Extract a composite action to install Go
    5aa05481d Add OSVersion to platform protobuf
    d9cae66d8 Extend string match in make protos
    c58b1fb40 Update github.com/containerd/console to v1.0.4
    06ed897b2 cri/server: Add userns tests in PodSandboxStatus
    6c356a5c7 cri: Expose userns in PodSandboxStatus rpc
    1eaf0c1f0 bug fix: make sure cri image is pinned when it is pulled outside cri
    9eb9038a9 Avoid publishing data events during transaction
    86530c0af Move image event publishing to metadata store
    32bd8eff9 Move inline PS scripts into files
    4e8e21a7d go.{mod,sum}: update NRI dependency, re-vendor.
    5cbe92e88 Clean up repeated package import
    72950c00b Treat PRs that require rebase > 90 days as stale
    db437580b build(deps): bump github.com/opencontainers/image-spec
    2c7d69530 build(deps): bump github.com/klauspost/compress from 1.17.5 to 1.17.6
    da1673f55 Update vendor
    047d42e90 Update ttrpc to v1.2.3
    64e96c7d4 Update hcsshim to v0.12.0-rc.3
    a9060cda4 Support inject delay running with the old version (4.x) of strace for test case.
    9ef94fe52 fix(docs): fix cp and add step to include binaries in the $env:Path
    fe24b918f pkg/nri, docs: enable NRI by default.
    e230ed939 sandbox: add sandbox recover ut and e2e test
    312496474 sandbox: fix recover status set issue
    256637249 Fix config import relative path glob
    667069583 Revert "cri: make read-only mounts recursively read-only"
    a9152ebf8 copy: prevent potential deadlock if close before fully written
    b48e1141e copy: setError should imply Close
    e4f91c2df copy: remove max number of ErrResets
    651cfa2a2 pushWriter: refactor reset pipe logic into separate function
    9d7641ff3 copy: improve error detection from closed pipes
    91a50f70b copy: check if writer was closed before setting a pipe
    4660f6303 copy: remove wrapping io.NopCloser from push writer pipe
    0facc8592 Fix proto formatting
    7f2d2c4f4 Move Message proto to types
    287524733 Fix formatting after moving CRI
    bbac058cf Move CRI from pkg/ to internal/
    6e365e925 CRI: An empty DNSConfig != unspecified
    9340be717 Remove duplicated TOML duration parsers
    b2f254fff cri: make read-only mounts recursively read-only
    f74e5ce7e Move differ default to its own file
    82fb589ff Update runc binary to v1.1.12
    87a9835f1 docs: fix typo
    81409e937 Add a default differ that matches the snapshotter
    2369185aa CI: update Rocky Linux to 8.9
    d8460a702 CI: bump up crun to 1.14
    ebbce7423 rm docs/cri/installation.md
    49d5cc7f9 build(deps): bump github.com/klauspost/compress from 1.17.4 to 1.17.5
    4d33170ea build(deps): bump github.com/google/uuid from 1.5.0 to 1.6.0
    3a5b47d73 build(deps): bump google.golang.org/grpc from 1.60.1 to 1.61.0
    9a983caad build(deps): bump github.com/containerd/plugin
    495afb0c0 build(deps): bump lycheeverse/lychee-action from 1.9.1 to 1.9.3
    5365a1089 build(deps): bump google-github-actions/upload-cloud-storage
    64b4778fc Add deprecation warnings to CRI image server configuration
    65b3922df Split streaming config from runtime config
    58ff9d368 Move cri plugin to plugins subpackage
    d29a1bc6a Move sandbox info to cri types packages
    9795677fe Move cri base plugin to CRI runtime service
    966d51801 The `Links` workflow should be disabled in forks.
    e15f191a2 Fix func (m manager) Info in containerd-shim-runc-v2
    4f570db1a refactor: remove containerd/containerd/log
    010857d33 Add errdefs and platforms to migration script
    7cf54b437 Remove unused pkg/errdefs package
    fb9b59a84 Switch to new errdefs package
    6b906a22d Prepare release notes for v2.0.0-beta.2
    b608c6f73 doc: fix package import path in sample code
    b16e3572a refactor: move plugin/fieldpath to api/types/
    22d586e51 api/services/instrospection: add PluginInfo
    ad869e905 Use tags.cncf.io CDI url in config.md
    eb8981f35 mv contrib/seccomp/kernelversion pkg/kernelversion
    a6e52c74f seccomp: kernel 6.7
    ed4710241 Code clean for nri_api.
    ade80789b Remove walker diff plugin for Windows
    af6a90bf5 remotes/docker/authorizer.go: invalidate auth tokens when they expire.
    e79ec7a09 Remove deprecated platforms package
    3f620143f Use github.com/containerd/platforms package
    9dd29b3cf Update container-device-interface to v0.6.2
    7eccde5d0 Clean plugin indent in containerd-config.toml.5.md
    b16d46740 pod: CreatedAt time will be 269 years ago while creating cri network failed.
    378e9f443 build(deps): bump actions/cache from 3 to 4
    748fe2035 integration: add test for recovering images
    2e8e03389 Add multi-subscriber support to GetContainerEvents CRI API
    e7eb08eb5 Add support for multiple subscribers to CRI container events
    cfe8321b4 strip-volatile-option-tmp-mounts
    d34725f85 CI: use standard GHA runners
    9d2c22123 Prepare release notes for v2.0.0-beta.1
    e9f2bba1f remotes: FetchByDigest: propagate media type from config to desc
    d7689ae8b Remove CRI plugin config after migrating
    f48f61fd8 Add migration integration test
    eb9925d88 Update config migrations to decode using the plugin type
    15713014d Update server config slice merge strategy
    cf6f439eb Fix transfer plugin unpack configuration
    eb123db5f ctr: use transfer service by default
    94d1b2098 Add migration script to contrib
    9ee1f4716 Rebuild protos with updated runtime location
    dbc74db6a Move runtime to core/runtime
    df9b0a067 Move metrics to core/metrics
    19e763553 Move pkg/truncindex to internal/truncindex
    764c90700 Move pkg/tomlext to internal/tomlext
    1c4be2d88 Move pkg/testutil to internal/testutil
    114df368f Move pkg/registrar to internal/registrar
    4ee6419fa Move pkg/randutil to internal/randutil
    696cf2565 Move pkg/kmutex to internal/kmutex
    5e1d9543b Move pkg/hasher to internal/hasher
    23914a01b Move pkg/failpoint to internal/failpoint
    c79ecfe24 Move pkg/cleanup to internal/cleanup
    8f0eb2631 Move tracing to pkg/tracing
    6be90158c Move sys to pkg/sys
    de606680b Move rootfs to pkg/rootfs
    fdb8a527c Move reference to pkg/reference
    e59f64792 Move oci to pkg/oci
    fa8cae99d Move namespaces to pkg/namespaces
    b76236bb4 Move labels to pkg/labels
    bb71c2835 Move identifiers to pkg/identifiers
    5e00f63ce Move gc to pkg/gc
    11114b0a9 Move gc/scheduler to plugins/gc
    c38f2ab72 Move filters to pkg/filters
    44a836c9b Move errdefs to pkg/errdefs
    70ed2696f Move events to pkg/events
    b0c3d00e9 Move cio to pkg/cio
    8e14c39e8 Move archive to pkg/archive
    fcd39ccc5 Move snapshots to core/snapshots
    e0fe656da Move snapshots/windows to plugins/snapshots/windows
    57bdbfba6 Move snapshots/overlay to plugins/snapshots/overlay
    9b8c558f9 Move snapshots/native to plugins/snapshots/native
    5c07d5d36 Move snapshots/lcow to plugins/snapshots/lcow
    8473322f0 Move snapshots/devmapper to plugins/snapshots/devmapper
    7dd96fe34 Move snapshots/btrfs to plugins/snapshots/btrfs
    2909f07f8 Move snapshots/blockfile to plugins/snapshots/blockfile
    92d2a5fc0 Move services to plugins/services
    ce41d1c90 Move services/server to cmd/containerd/server
    228ad5a5c Move sandbox to core/sandbox
    d133019c9 Move runtime/restart/monitor to plugins/restart
    0dabf6f15 Move remotes to core/remotes
    6e5408dce Move mount to core/mount
    1a1e0e8c8 Move metadata to core/metadata
    18b3cbe4f Move metadata/plugin to plugins/metadata
    f80760f9f Move leases to core/leases
    cc6a5c9c6 Move leases/plugin to plugins/leases
    57ea8aef3 Move images to core/images
    913edcd48 Move diff to core/diff
    d14350376 Move diff/windows to plugins/diff/windows
    2d861b6ea Move diff/walking to plugins/diff/walking
    aaf6ac04c Move diff/lcow to plugins/diff/lcow
    9456048f4 Move containers to core/containers
    21b4f3f0a Move content to core/content
    846f7d4e6 Move content/local to plugins/content/local
    725c92e7c include image name in error message
    18b0d236c build(deps): bump actions/upload-artifact from 3 to 4
    f45b46b67 runtime/v2: reduce shim plugin log
    20619a7c9 ci: make artifact name unique in linux integration
    2053d9157 build(deps): bump lycheeverse/lychee-action from 1.9.0 to 1.9.1
    d4396c96b mount: UnmountRecursive return nil if path doesn't exist
    8aa2551ce Move DefaultSnapshotter constants
    c8e8a093c config: enable CDI by default
    5a3d3f613 Update load image test to use local import
    6041d4e60 Update fuzz contrib for updated image service
    2a476d421 Move ParseImageReferences to cri util
    3baf5edb8 Separate the CRI image config from the main plugin config
    ad4c9f8a9 Update CRI runtime platform and pinned image configuration
    11f311fdd Add minimal interface to CRI image store
    02a9a456e Split image config from CRI plugin
    d23ac1122 Split CRI image service from GRPC handler
    a2472c0b5 transfer: add OCI descriptors to Progress structure
    f26196950 Move certain debug logs to trace logs
    a5d958706 update to go1.21.6, go1.20.13
    21640c57a Uninstall mingw before attempting upgrade
    174efb1e0 update imgcrypt binary to v1.1.9
    dfb175380 build(deps): bump the golang-x group with 2 updates
    2b415c911 build(deps): bump lycheeverse/lychee-action from 1.8.0 to 1.9.0
    7dadd5f1b sandbox: remove sandboxStore from podsandbox
    a3c62e698 add label flags to ctr import, add integration tests
    d01056555 Handle failure when stopping a sandbox
    8235665e7 content: Add InfoReaderProvider
    fa83bc8de integration: remove use of golang.org/x/sys/execabs
    dffeea471 add get cgroupdriver from RuntimeConfig to integration
    46b2f1d16 Use latest VM image to get Windows updates regularly
    a8d39666d Move cimfs OS build compat check to the operation functions instead of init()
    0d3c3efe3 integration/import-export: Add WithSkipMissing tests
    b9af453f0 export: Copy distribution source labels to manifest annotations
    61a7c4999 import/export: Support references to missing content
    1ab4fac94 update runc binary to v1.1.11
    5387747e9 build(deps): bump github.com/containerd/cgroups/v3 from 3.0.2 to 3.0.3
    a1e0601e0 fix: Update go.opentelemetry.io/otel/sdk/trace to satisfy traceProvider interface
    78421616e deps: Update otelgrpc
    bd4c281c5 build(deps): bump github.com/fsnotify/fsnotify from 1.6.0 to 1.7.0
    62a824a4b build(deps): bump github.com/intel/goresctrl from 0.5.0 to 0.6.0
    7fe038e4a build(deps): bump google.golang.org/protobuf from 1.31.0 to 1.32.0
    81bb66942 build(deps): bump github.com/google/uuid from 1.3.1 to 1.5.0
    9d328410a shim: Create pid-file with 0644 permissions
    daa1ea522 Add cimfs differ and snapshotter
    c19193574 fix: return gRPC code "unavailable" if server is not initialized yet
    1f9151af6 build(deps): bump google.golang.org/grpc from 1.58.3 to 1.60.1
    0b48b5659 build(deps): bump google-github-actions/upload-cloud-storage
    97ec26a5e build(deps): bump actions/download-artifact from 3 to 4
    22138541a tracing/plugin: newTracer: ignore context.Canceled errors on Close()
    7c651e183 docs: fix CI badge in README
    e10c82e4c build(deps): bump github.com/google/uuid from 1.3.1 to 1.5.0
    25dc823bf integration: fix format string for klog.Infof
    fc4b78c05 build(deps): bump github.com/intel/goresctrl from 0.3.0 to 0.5.0
    1c96087ce build(deps): bump github.com/Microsoft/hcsshim
    7e3c8af52 build(deps): bump github.com/prometheus/client_golang
    f9303d04d build(deps): bump github/codeql-action from 2 to 3
    4c1ebe33b build(deps): bump docker/setup-buildx-action from 2 to 3
    51fd1d47e dependabot: enable groups
    4a71a9360 build(deps): bump github.com/moby/sys/mountinfo from 0.6.2 to 0.7.1
    344fe957f build(deps): bump golang.org/x/mod from 0.13.0 to 0.14.0
    6726a2aeb build(deps): bump k8s.io/component-base from 0.28.2 to 0.28.4
    0c98f1063 build(deps): bump github.com/klauspost/compress from 1.17.2 to 1.17.4
    39ba0347e build(deps): bump go.etcd.io/bbolt from 1.3.7 to 1.3.8
    db43e3d1f build(deps): bump golang.org/x/sync from 0.4.0 to 0.5.0
    4660090ba build(deps): bump actions/stale from 8 to 9
    ace8ab1bd build(deps): bump docker/login-action from 2 to 3
    0b94716e8 build(deps): bump actions/github-script from 6 to 7
    9133ad811 build(deps): bump actions/upload-artifact from 1 to 3
    c1823a7c6 build(deps): bump ossf/scorecard-action from 2.0.3 to 2.3.1
    36b12cbcb build(deps): bump crazy-max/ghaction-github-runtime from 2 to 3
    dc5a6cfae build(deps): bump google-github-actions/auth from 0 to 2
    f6a9c6966 build(deps): bump actions/setup-go from 3 to 5
    e27ea7d1a build(deps): bump google-github-actions/upload-cloud-storage
    3ca95282e build(deps): bump actions/checkout from 3 to 4
    1398186ca WithAppendAdditionalGroups: better /etc/group handling
    5a140dca5 CI: enable dependabot
    c1197995b go.mod: Bump up github.com/pelletier/go-toml to v2.1.1
    23278c81f *: introduce image_pull_with_sync_fs in CRI
    bd5c602c4 api: introduce sync_fs to diff.ApplyRequest
    6bb81ee57 Document `ns` query string added to mirror requests
    98526c9d3 Exclude releases directory from links checker
    f67c1632f Add ignore list for links
    e740dd3d6 Add links status badge
    bfa651c69 Fix broken links
    c9fa5b980 Add nighly job to verify doc links
    25b052cbc Move GenerateRuntimeOptions() to pkg/cri/config
    cb5a48e64 *: enable ARM64 runner
    596ada3ac release: add .dockerignore to fix repeated builds
    cf4b57989 Remove deprecated tracing function
    8203bb997 Add HTTP client update function to tracing library
    ad3b806a4 fix(tracing): use latest version of semconv
    22db60b6b upgrade crun version from 1.9 to 1.12
    993790969 go.mod: Bump up github.com/containernetworking/plugins to v1.4.0
    734219a21 update to go1.21.5, go1.20.12
    212200452 update to go1.21.4, go1.20.11
    ad96fded4 Don't block snapshot garbage collection on Remove failures
    8bbce8d37 pkg/process: Check using idmap mount options too
    96aaf5a3b Add core and internal root packages
    6c6dfcbce contrib/apparmor: deny /sys/devices/virtual/powercap
    106a9b776 oci/spec: deny /sys/devices/virtual/powercap

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2024-03-15 17:17:19 +00:00
Bruce Ashfield
b7911a2a07 moby: update to v25.0.3 
Bumping moby to version v25.0.3, which comprises the following commits:

    acd023d42b c8d: Use the same logic to get the present images
    ed7c26339e seccomp: add futex_wake syscall (kernel v6.7, libseccomp v2.5.5)
    74e3b4fb2e seccomp: add futex_wait syscall (kernel v6.7, libseccomp v2.5.5)
    4cc0416534 seccomp: add futex_requeue syscall (kernel v6.7, libseccomp v2.5.5)
    f9f9e7ff9a seccomp: add map_shadow_stack syscall (kernel v6.6, libseccomp v2.5.5)
    5fb4eb941d seccomp: add fchmodat2 syscall (kernel v6.6, libseccomp v2.5.5)
    67e9aa6d4d seccomp: add cachestat syscall (kernel v6.5, libseccomp v2.5.5)
    61b82be580 seccomp: add set_mempolicy_home_node syscall (kernel v5.17, libseccomp v2.5.4)
    0227d95f99 image/cache: Use Platform from ocispec
    fa9c5c55e1 image/cache: Ignore Build and Revision on Windows
    1652559be4 Dockerfile: update RootlessKit to v2.0.1
    147b5388dd integration/save: Add tests checking OCI archive output
    ba4a2dab16 plugins: fix panic installing from repo w/ digest
    51133117fb tests: add plugin install test w/ digest
    269a0d8feb Dockerfile: update docker compose to v2.24.5
    876b1d1dcd Dockerfile: update dev-shell version of the cli to v25.0.2
    0bcd64689b Dockerfile: update docker compose to v2.24.3
    8d454710cd Dockerfile: update dev-shell version of the cli to v25.0.1
    c12bbf549b libcontainerd/supervisor: fix data race
    9150d0115e d/logger/journald: quit waiting when logger closes
    9af7c8ec0a d/logger/journald: sync logger on close in tests
    3344c502da d/logger/loggertest: improve TestConcurrent
    6c9fafdda7 d/logger/journald: log journal-remote cmd output
    f8a8cdaf9e d/logger/journald: fix data race in test harness
    7a659049b8 libnet: bridge: ignore EINVAL when configuring bridge MTU
    0ccf1c2a93 api/t/network: ValidateIPAM: ignore v6 subnet when IPv6 is disabled
    28c1a8bc2b Revert "daemon: automatically set network EnableIPv6 if needed"
    bbe6f09afc No inspect 'Config.MacAddress' unless configured.
    5b13a38144 Only restore a configured MAC addr on restart.
    990e95dcf0 Add internal n/w bridge to firewalld docker zone
    c48b67160d api: Document `version` in `/build`
    225e043196 c8d/save: Handle digested reference same as ID
    78174d2e74 image/save: Fix untagged images not present in index.json
    85f4e6151a Assert temp output directory is not an empty string
    dd4de8f388 docs: remove dead links from api verison history
    f5ef4e76b3 ci: update to docker/bake-action@v4
    6c5e5271c1 ci: update to codecov/codecov-action@v4
    693fca6199 ci: update to actions/download-artifact@v4 and actions/upload-artifact@v4
    49487e996a ci: update to actions/cache@v3
    0358f31dc2 gha: update to crazy-max/ghaction-github-runtime@v3
    081cffb3fa gha: update to docker/login-action@v3
    9de19554c7 gha: update to docker/setup-qemu-action@v3
    2a80b8a7b2 gha: update to docker/bake-action@v4
    61ffecfa3b gha: update to docker/setup-buildx-action@v3
    02cd8dec03 gha: update to docker/metadata-action@v5
    1d7df5ecc0 gha: update to actions/setup-go@v5
    4e68a265ed gha: update to actions/github-script@v7
    e437f890ba gha: update to actions/checkout@v4
    fd6a419ad5 update containerd binary to v1.7.13
    13ce91825f vendor: github.com/moby/buildkit v0.12.5
    4b63c47c1e vendor: github.com/opencontainers/runc v1.1.12
    4edb71bb83 update runc binary to v1.1.12
    1b47bfac02 hack/make.ps1: Fix go list pattern
    f2d0d87c46 logger/journald: drop errDrainDone sentinel
    6ac38cdbeb logger/journald: wait no longer than the deadline
    d7bf237e29 logger/journald: use deadline for drain timeout
    f41b342cbe l/journald: make tests compatible with systemd 255
    f413ba6fdb daemon/logger/loggertest: expand log-follow tests
    c2ef38f790 vendor swarmkit v2.0.0-20240125134710-dcda100a8261
    d5eebf9e19 builder/windows: Don't set ArgsEscaped for RUN cache probe
    f3f5327b48 image/cache: Check image platform
    05a370f52f image/cache: Restrict cache candidates to locally built images
    be7b60ef05 daemon/imageStore: Mark images built locally
    6d05b9b65b image/cache: Compare all config fields
    c01bbbddeb pkg/ioutils: Make subsequent Close attempts noop
    32635850ed add more //go:build directives to prevent downgrading to go1.16 language
    2cf1c762f8 De-flake TestSwarmClusterRotateUnlockKey... again... maybe?
    5295e88ceb daemon: rename: don't reload endpoint from datastore
    3de920a0b1 volume/local: Fix cifs url containing spaces
    a445aa95e5 volume/local: Add tests for parsing nfs/cifs mounts
    cb77e48229 volume/local: Break early if `addr` was specified
    e8801fbe26 daemon: only add short cid to aliases for custom networks
    b8cc2e8c66 fix "host-gateway-ip" label not set for builder workers
    fcccfeb811 c8d/snapshot: Create any platform if not specified
    f8eaa14a18 pkg/platforms: internalize in daemon/containerd
    ac76925ff2 volume/local: Make host resolution backwards compatible
    ff15b49b47 Dockerfile: update docker compose to v2.24.2
    c0573b133f pkg/system: return even richer xattr errors
    7c185a1e40 daemon: return an InvalidParameter error when ep settings are wrong
    2b036fb1da Remove generated MAC addresses on restart.
    1f24da70d8 docs/api: remove version matrices from swagger files
    358fecb566 docs: remove documentation for deprecated API versions < v1.23
    f030b25770 Dockerfile: update docker compose to v2.24.1
    e07aed0f77 Dockerfile: update dev-shell version of the cli to v25.0.0
    cdf3611cff integration-cli: TestInspectAPIMultipleNetworks: use current version
    05267e9e8c integration-cli: TestInspectAPIBridgeNetworkSettings121: use current version
    e5edf62bca integration-cli: TestPutContainerArchiveErrSymlinkInVolumeToReadOnlyRootfs: use current API
    e0acf1cd70 daemon/cluster/executer: Add missing `StartInterval`
    1e335cfa74 image/save: Fix layers order in OCI manifest
    4d287e9267 image/save: Change layers type to DiffID
    0240f5675b Fix isGitURL regular expression
    13964248f1 libnetwork: loosen container IPAM validation
    05695c2458 c8d/integation: Adjust error in TestPullLinuxImageFailsOnWindows

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2024-03-15 17:17:19 +00:00
Bruce Ashfield
2118aace8f crun: update to v1.14 
Bumping crun to version 1.14-19-g9d01392, which comprises the following commits:

    3df8f0c Add force_no_cgroup & no_pivot arguments to make_context() Python function
    b883e6c Make function arguments valid Python identifiers
    e0027bc Add no_new_keyring argument to make_context() Python function
    cb3ffb5 apparmor: Fix wrong determination whether crun is confined
    adb912d linux: harden chdir()
    f157e80 container: attempt to close all the files before execv(2)
    ed1abf9 container: simplify statement
    3aaadf3 ebpf: add fallback when bpf(2) fails with ENOSPC
    f2ade60 ebpf: add fallback when bpf(2) fails
    8b611f2 ebpf: try harder to bump RLIMIT_MEMLOCK
    d88d77e build(deps): bump uraimo/run-on-arch-action from 2.6.0 to 2.7.1
    f70fe0b cgroup, systemd: fix segfault if resources not specified
    667e6eb NEWS: tag version 1.14
    688f186 build(deps): bump actions/cache from 3 to 4
    8d96f08 build: drop gcrypt dependency
    5221ca8 seccomp: use blake3 instead of libgcrypt
    6d9fa42 cpuset: don't clobber parent cgroup value
    3873541 build: embed blake3 hashing function
    4f1f3d4 seccomp: include default_errno_ret in cache digest
    beb9565 utils: remove unneeded if statement
    9306457 ebpf: do not require MEMLOCK for eBPF programs
    87740ce linux: force umask(0)
    5078ce6 apparmor: stack apparmor profiles if nnp and confined
    c761349 NEWS: tag 1.13
    cb53ac2 build(deps): bump actions/upload-artifact from 3 to 4
    94a5950 cgroup: use "max" when pids limit < 0
    3b819bc Improve error msg on idmap mounts
    bace3a2 build(deps): bump github/codeql-action from 2 to 3
    4ddf5e6 criu: remove unneeded if statement
    8c27dea error: reset pointer after vasprintf failure
    c5643c4 status: fix double free
    ece4f9e utils: return a valid error if access fails
    68a9487 list: initialize variable
    ea27b13 libcrun: fix compile error without libseccomp and libcap
    487ba3a fix checking of relative idmapped mount
    49f439d ctx: drop no_subreaper bool

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2024-03-15 17:17:19 +00:00
Bruce Ashfield
a6cf2e0e7d cri-o: update to 1.30 
Bumping cri-o to version v1.29.0-44-g5aff11c7c, which comprises the following commits:

    1b9754486 fix missing line ending on crio.8.md
    3cbaa5294 fix grep for whitespace
    8dea35388 add metrics_host to config

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2024-03-15 17:17:19 +00:00
Bruce Ashfield
5d211f85b4 skopeo: update to 1.14.1 
Bumping skopeo to version v1.14.1-4-g695538a3, which comprises the following commits:

    4baf4fe9 fix(deps): update module github.com/opencontainers/image-spec to v1.1.0-rc6
    e32dfefb Bump to v1.15.0-dev
    45b7bf5e Bump to v1.14.1
    b7ec87a1 fix(deps): update module github.com/containers/common to v0.57.2
    92edbcb7 fix(deps): update module github.com/containers/image/v5 to v5.29.1
    5684cd12 chore(deps): update dependency containers/automation_images to v20240102
    c7053312 Fix libsubid detection
    e51dbbd8 fix(deps): update module golang.org/x/term to v0.16.0
    852cca63 fix(deps): update golang.org/x/exp digest to 02704c9
    d1cb2e2c chore(deps): update dependency containers/automation_images to v20231208
    fe83b6fe [skip-ci] Update actions/stale action to v9
    f346045d fix(deps): update module github.com/containers/common to v0.57.1
    48d11dac fix(deps): update golang.org/x/exp digest to 6522937

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2024-03-15 17:17:19 +00:00
Bruce Ashfield
82b00eb592 moby: update to v25.0.0 
Bumping moby to version v25.0.0, which comprises the following commits:

    05695c2458 c8d/integation: Adjust error in TestPullLinuxImageFailsOnWindows
    ae6468b4b9 c8d/mount: Use ref-counted mounter by default
    bd481592ff ci: Always run snapshotter tests on Linux
    ed15f1d717 net=host: remove /var/run/docker/netns/default from OCI config
    568c064795 docker-py: unskip some tests
    e8f4bfb374 Root.Path for a process-isolated WCOW container must be the Volume GUID
    ec041193f9 Windows doesn't have 'host' mode networking, so use 'auto'.
    66325f7271 Implement GetLayerFolders for the containerd image store
    0dc07ccc3a Unmount RWLayer during Commit
    a1f6b64e24 Don't call setupInit in a temp mount if setupInit is nil
    efadb70ef8 The Windows snapshotter and graphdriver have different names
    641050c93f Typo fixes
    508a2d979a Revert "temporary: Disable deprecate-integration-cli validation"
    f7065ab207 Add testutil.TempDir function
    84d2229ffe dockerd-rootless-setuptool.sh: add `nsenter` subcommand
    7d08d84b03 dockerd-rootless.sh: set `rootlesskit --state-dir=DIR`
    ae9fbcb82c testutil/daemon: shorten XDG_RUNTIME_DIR
    bdc7d0c2db temporary: Disable deprecate-integration-cli validation
    8390bc5683 c8d/cache: Use ContainerConfig from content store
    f760cb4f97 c8d/builder: Store ContainerConfig
    a5a15c7782 c8d/cache: Optimize `FROM scratch` case
    71ebfc7c63 c8d: make the cache in classic builder work
    24da5233dd integration: Fix Parallel before setupTest
    d22c775e04 cdi: use separate feature-flag
    fa4deb02af environment: Error when t.Parallel was called before Protect
    97d32bb7d7 daemon: stop checkpointing health probes to disk
    a6d9462cb1 (*Daemon).fillRootlessVersion: fix nil panic
    e954cdc188 dockerd-rootless.sh: fix inconsistent description about "builtin" driver
    9de132dbf6 integration/image: Move Parallel after setupTest
    f0efb90f21 c8d/integration-cli: Skip tests checking `ContainerConfig`
    2a02403a94 c8d/exporter: Use WithSkipMissing
    9f50e06993 image/save: Refactor saveLayer
    b5a5ecf4a3 dockerd-rootless.sh: add comments about pasta
    f5d05b43d7 Dockerfile: update RootlessKit to v2.0.0
    ba86626642 vendor.mod: github.com/rootless-containers/rootlesskit/v2 v2.0.0
    312450d079 integration: test container healthcheck is reset
    c58acf06c2 image/save: Derive Descriptor from actual tar archive
    c4d2968183 vendor: github.com/moby/sys/mountinfo v0.7.1
    075e1141b8 vendor: golang.org/x/sys v0.16.0
    a759acd958 vendor: github.com/google/uuid v1.5.0
    3bcb01a84f vendor: github.com/google/go-cmp v0.6.0
    36dd2f029f doc: Correct typo in doc comments for volume/mounts/mounts/MountPoint
    92175dd78c vendor: containerd v1.7.12, and switch to dario.cat/mergo v1.0.0
    cd1709b0d4 update containerd binary to v1.7.12
    2c45df2ab4 image/save: Fix missing layers in manifest
    0790864064 Dockerfile: update buildx to v0.12.1
    a9d0128bd7 Dockerfile: update docker compose to v2.24.0
    28f48ce1ac c8d/commit-builder: Extract common code
    659d7b190f libcontainerd: create unstarted tasks
    d7141cfd06 update to go1.21.6
    0e62dbadcd daemon: reinit health monitor on live-restore
    71c9aec834 Add Rob Murray (robmry) to curators
    e8e20c0897 daemon/config: setPlatformDefaults: use debug for missing userland-proxy
    18a0e144c2 c8d/getImageLabelByDigest: Fix misspelled `labels` check
    e27ffdab0f Dockerfile: update rootlesskit to v1.1.1, and use tags as reference
    782fe1fe82 layer: ChecksumForGraphID: remove unused code for for migrating v1 layers
    1dd415df1a vendor: github.com/vbatts/tar-split v0.11.5
    372cd16b88 vendor: otelhttptrace v0.45.0 to align with other OTEL packages
    22597efa06 vendor: github.com/docker/go-connections v0.5.0
    1f9098e7d0 builder: remove redundant ExecBackend.ContainerKill()
    0aa96c5512 builder/dockerfile: containerManager.RemoveAll() prevent partial cleanup
    03a8188a9a builder/dockerfile: remove containerManager.removeContainer()
    a38b5d7430 daemon: Daemon.ContainerRename: move vars closer to where they're used
    00a863b25e daemon: Daemon.connectToNetwork: rename named return to prevent shadowing
    0f337e9c14 feat: make errdefs.IsXXX helper functions work with wrapped errors
    dd41f86339 hack/make: Refactor VERSION normalization
    2af17cd3f5 vendor: github.com/containerd/cgroups/v3 v3.0.3
    9a5393d500 hack/make: Strip "v" tag prefix name from VERSION
    12128189eb vendor: github.com/cilium/ebpf v0.11.0
    07d2ad30e5 daemon/cluster: Cluster.imageWithDigestString: include mirrors to resolve digest
    8aacbb3ba9 api: fix "GET /distribution" endpoint ignoring mirrors
    b9e27acabc libnet/d/bridge: dead code: no conflict on stale default nw
    0a26cdf344 libnet/d/bridge: remove dead ActiveEndpointsError
    6d2c4f87af daemon: work around go1.21 compiler bug
    69c23cc0c9 docs/api: add documentation for API v1.44
    ce574949f7 api: Deprecate outdated fields in NetworkSettingsBase
    d5a3fccb06 update golangci-lint to v1.55.2
    9b184e1268 daemon: remove dead code relying on SecondaryIPAddress
    7b0f8122b2 update AUTHORS
    fc8fcf85a2 vendor: github.com/opencontainers/runc v1.1.11
    5fa4cfcabf update runc binary to v1.1.11
    b8f2caa80a pkg/containerfs: deprecate ResolveScopedPath
    90f37f48e2 pkg/containerfs: unify CleanScopedPath implementation
    6fae583dba pkg/aaparser: remove, and integrate into profiles/apparmor
    53d405c37f pkg/aaparser: remove deprecated GetVersion utility
    f714730c40 libnetwork/portallocator: PortAllocator.ReleasePort: remove unused err-return
    4f9db655ed portmapper: move userland-proxy lookup to daemon config
    214ab2caef libnetwork/portmapper: PortMapper.MapRange: inline "cleanup" closure
    6ae6dcfc53 libnetwork/portmapper: PortMapper.MapRange: fix defer
    8712c6df22 libnetwork/portmapper: PortMapper.MapRange: rename err-return
    341e7b35a6 Updated manifest v2 URLs in image spec README
    882b79b254 Dockerfile: update crun to 1.12
    dc23efd3a2 vendor: github.com/klauspost/compress v1.17.4
    f74ca4ed36 Update commit id unmap to directly use active mounts
    0252a6f475 ci(bin-image): fix merge job run condition
    1ea1d561c7 ci: do not run ci workflow on push tag events
    141cb65e51 Check, then assume an IPv6 bridge has a subnet.
    437bc829bf Don't try to validate incomplete network config.
    52d9b0cb56 Remove unused error types.
    f9135cdeb5 libnet: Improve the debug log written when the extKeyListener is stopped
    13915f6521 libnet: document what Network.networkType represents
    6a2542dacf libnet: remove Endpoint.anonymous
    cf5a3bc531 c8d: Fix image commit with userns mapping
    5eaf898fcb libnetwork: write ServFail if DNS reply msg is bad
    1da85f7bdc libnetwork: assert DNS replies are well-formed
    f6a160d34e c8d/docker-py: Temporarily skip test_commit_*
    cf1ea9237c Add dangling image reference on delete when last image has children
    9603adb5b4 c8d/docker-py: Temporarily skip test_save_and_load*
    7a9b680a9c libnet: remove Endpoint.myAliases
    523b907359 daemon: no more IsAnonymousEndpoint
    8b7af1d0fc libnet: update dnsNames on ContainerRename
    3bb13c7eb4 libnet: Use Endpoint.dnsNames to create DNS records
    f5cc497eac libnet: populate Endpoint.dnsNames on UnmarshalJSON
    ab8968437b daemon: build the list of endpoint's DNS names
    0c6e9121b2 Add support for removing repo and digest
    c22fc41ddf vendor: golang.org/x/crypto v0.17.0
    87c87bccb5 Update cleanup logic to use resolve all images
    529d19bad8 Add resolve all images and unit test
    eb9ce779f6 Update OTEL in client hijack to use transport
    c84e889a69 Remove httputil lint exceptions
    35a51fd697 Update authz plugin test to not use httputil
    bb4e9c72d7 Replace use of httputil in client hijack
    dc1e73cbbf libnet: add a new dnsNames property to Endpoint
    1eb0751803 daemon: endpoints on default nw aren't anonymous
    27f3abd893 Allow overlapping change in bridge's IPv6 network.
    18b1aec0ee c8d/inspect: Fill `Parent` property
    e48b58e1be vendor: golang.org/x/crypto v0.16.0
    44511f9e43 vendor: golang.org/x/text v0.14.0
    2cdd4906ac vendor: golang.org/x/sys v0.15.0
    d6a656cf7f libnet: Remove unused cmd/readme_test
    aa5d1a8897 typo fixes
    2cf230951f add //go:build directives to prevent downgrading to go1.16 language
    9e6d012e9c docker info: expose runtime features ("rro" mount mode, etc.)
    1602e2f4f1 api: Deprecate `Container` and `ContainerConfig` for `/images/{id}/json`
    d91bf690ef ci(bin-image): fix conditional run for skipped job
    61d5e5ca9a ci(test): do not run on push tag events
    f8275cb303 c8d/docker-py: Skip test_build_squash
    279e6658ac Add devcontainer configuration
    d11a772080 c8d/tag: Remove duplicate label copy
    3b1d9f1a26 add validation and migration for deprecated logentries driver
    3a14b1235c docs/api: remove logentries
    30f739db44 api/swagger: remove logentries
    cd41f655f9 logger: remove logentries driver
    dbdfc71026 vendor: resenje.org/singleflight v0.4.1
    4d2a324fce update to go.opentelemetry.io/otel/semconv/v1.21.0, remove "httpconv" uses
    7d991b6e42 vendor: github.com/moby/buildkit v0.12.5-0.20231208203051-3b6880d2a00f
    fcf03cdfa9 vendor: github.com/containerd/containerd v1.7.11
    7028a03ffa vendor: github.com/containerd/containerd v1.7.10
    49ad10261e vendor: github.com/containerd/containerd v1.7.9
    c14bd4f1ad vendor: vendor: upgrade OpenTelemetry to v1.19.0 / v0.45.0
    291eaf0a77 vendor: github.com/cyphar/filepath-securejoin v0.2.4
    b524ed2dda testing: update docker-py to 7.0.0
    33d2ec08ba update containerd binary to 1.7.11
    c51a262e34 update containerd binary to 1.7.10
    12c70b4386 vendor: github.com/grpc-ecosystem/grpc-gateway/v2 v2.16.0
    a0615f6839 vendor: github.com/felixge/httpsnoop v1.0.4
    afe281964d daemon/logger/local: always use UTC for timestamps
    bea729c030 c8d/prune: Familiarize image names that were untagged
    8ba8a59697 c8d/prune: Default `dangling` filter to true
    eaaf1ea96d integration/prune: Run in a separate daemon
    90dfb1c8ad c8d/integration-cli: Adjust TestBuildClearCmd
    0f9f9a132e Move 'netip' utils from 'ipam' to 'internal'.
    1931a1bdc7 libnetwork/diagnostic: lock mutex in help handler
    424ae36046 libnetwork/diagnostic: use standard http.Handler
    bc94dfc7d2 hack: Load special images on demand
    7cb1efebec api/types: move NetworkListConfig to api/types/backend
    a58b0a3d9c api/types: move Plugin-types to api/types/backend
    862caf826c update to go1.21.5
    0bf6ffba43 update to go1.21.4
    08e4e88482 daemon: raise default minimum API version to v1.24
    484e6b784c api/types: move ContainerCreateConfig, ContainerRmConfig to api/types/backend
    c786c3a974 Dockerfile: update criu stage to Debian 12 (Bookworm)
    d5eba1bfe5 integration/build: Use setupTest
    713c7d49a1 integration(-cli): remove skips for old daemon versions (<20.10)
    7f68e3107e integration-cli: TestAPIClientVersionOldNotSupported: use daemon API version
    97549d923c integration/container: TestInfoAPIVersioned: adjust API version
    410feab962 integration/container: TestKillDifferentUserContainer: adjust API version
    757a004a90 libnetwork/diagnostic: drop Init method
    f270057e0c libnetwork/diagnostic: un-embed sync.Mutex field
    aa2fa2caa3 un-containerize TestDaemonNoSpaceLeftOnDeviceError
    49f3e7d233 Dockerfile: remove APT_MIRROR build-arg
    baca6cb417 Don't allow port in CIFS URL
    c8134fa046 vendor: github.com/moby/buildkit v0.12.4
    a189832454 add TaskStatus to swagger docs
    faa843fcef vendor: github.com/gorilla/mux v1.8.1
    028ed1bb22 vendor: github.com/spf13/cobra v1.8.0
    e18f5a5304 container: internalize InitAttachContext
    fcb89da9c2 c8d/integration-cli: Skip TestListDanglingImagesWithDigests
    61d94850a7 cmd/dockerd: make cobra templates a const
    0f163170a7 cmd/dockerd: remove various cobra templating
    3bfb6a9420 frozen images: update to debian:bookworm-slim
    fd40dfaf58 Dockerfile: remove uses of DEBIAN_FRONTEND
    e72c4818c4 Dockerfile: update to Debian "bookworm" (current stable)
    8ae94cafa5 cifs volume resolves hostname correctly.
    3a0af5ad30 integration/TestLiveRestore: Wait for process to exit
    61d8f57f2a daemon: kill: use log level to "warn" if container doesn't exit in time
    e262cd38ad c8d/integration-cli: Adjust DockerRegistryAuthTokenSuite
    49d088d9ce builder-next: fix timing filter for default policy
    c3eed9fa3e integration-cli: fix TestDaemonICC tests for newer iptables versions
    c5ea3d595c liverestore: Don't remove `--rm` containers on restart
    9b399814e7 integration-cli/TestCrossRepositoryLayerPush: Change repo name
    9709b7e458 quota: increase sparse test-image to 300MB
    65cfcc28ab hack/dind: update comments around AppArmor
    cfb8ca520a hack/dind-systemd: make AppArmor work with systemd enabled
    203bac0ec4 daemon/c8d: Unmount container fs after unclean shutdown
    964ab7158c Explicitly set MTU on bridge devices.
    05523e289b c8d/integration: Adjust TestSaveCheckTimes
    b1676a289c daemon: ContainerRename: move log args to log fields
    d2865f1e8a daemon: win: set DNS config on all adapters
    0fd0e8255f daemon: build ports-related ep options in a dedicated func
    7786f8512b Revert "testing: temporarily pin docker-py tests to use "bullseye""
    4394c61e6c testing: update docker-py to 7.0.0b1
    f877360dc1 api/t/swarm: Fix deprecation for ServiceSpec.Networks
    681c94ca17 Dockerfile: update buildx to v0.12.0
    68e73ceb67 update containerd binary to v1.7.9
    2f28582b55 vendor: github.com/Microsoft/hcsshim v0.11.4
    f4776ef9df ci(bin-image): skip dco on push tag events
    8641d2da3b client: update example in readme
    0ab7267ae3 Fix support for pull by digest
    ba46bda149 update authors and mailmap
    a3fdad84ad graphdriver/copy: faster copy of hard links
    fb53da508f vendor: github.com/opencontainers/runc v1.1.10
    15bcc707e6 update runc binary to v1.1.10
    84036d3e18 daemon/config: change DNSConfig.DNS to a []net.IP
    1eadfb0e28 opts: ValidateIPAddress: improve error, godoc, and tests
    981a878cf5 vendor: github.com/docker/go-connections fa09c952e3ea (v0.5.0-dev)
    677d41aa3b Plumb context through info endpoint
    f0b89e63b9 Fix missing import for "scope" package
    33564a0c03 libnetwork/d/overlay: support IPv6 transport
    e1d85da306 libnetwork/d/overlay: parse discovery data eagerly
    d47b3ef4c9 libnet: early return from updateSvcRecord if no addr available
    f5a611a74c daemon: ContainerRename: use named error-return
    8074e7a437 Bump go-connections for TLS 1.3 support
    d06af368ad c8d: "unremap" the user namespace on commit
    a7acfffea6 test: Add a test for userns remapped daemon commit
    876d4e5484 c8d: cleanup imports in the image builder file
    7995e3288f Add until filter to docker image ls Signed-off-by: Rachit Sharma <rachitsharma613@gmail.com>
    58785c2932 integration/networking: fix TestBridgeICC
    6979503a85 Include port in URL for locally built Swagger docs
    755f008c1e Default the auth config domain to the target image domain
    7d9d601e6d project: document supported containerd versions
    29ac09ee9d Revert "libcontainerd: work around exec start bug in c8d"
    c1a289e05a docs/api: update redirect metadata for hugo
    49e04102c1 Update container-device-interface to v0.6.2
    26f63600c1 daemon/snapshotter: Align mounter implementations
    d5d41c2849 daemon/config: Put params for the default network into a dedicated struct
    587ad8845a integration/system: update TestInfoAPI to not use string-matching
    c1ab6eda4b integration/networking: Test bridge ICC and INC
    409ea700c7 integration: Add a new networking integration test suite
    02a932d63f Fix case where health start interval is 0 uses default
    891241e7e7 seccomp: block io_uring_* syscalls in default profile
    3c2b06099d Skip TestPullManifestList when using containerd
    6ca1b9e4ce Skip the busybox digest check when containerd is enabled
    123ade3763 builder/dockerfile: errmsg: quote build target
    7257c77e19 libnetwork/ipam: refactor prefix-overlap checks
    4e8ba395f2 integration: TestSaveRepoWithMultipleImages: minor cleanup
    0dae0f2b5e integration: TestSaveRepoWithMultipleImages remove redundant remove
    30cd8b8fca integration: make TestSaveRepoWithMultipleImages less flaky
    1c50526092 daemon: improve daemon start informational log message
    a99bb24ea8 builder-next: make sure worker platforms normalized for containerd
    29977d5058 contrib/check-config: conditionally disable color output.
    d60de4cafd Move the golangci-lint configuration file to the root dir
    cd95cd0671 c8d/push: Return error when repository has no tags
    df34db1158 c8d/pull: Don't wrap `no basic auth` error
    5a83bebf76 ci: Setup otel tracing for windows integration tests
    29ddf2214d docs(API): Add reason to network connect 403
    63a9d72ee8 pkg/tarsum: handle xattrs like archive/tar does
    4356962c69 update containerd binary to v1.7.8
    38c4ceb00a vendor: github.com/containerd/containerd v1.7.8
    34f5793521 vendor: google.golang.org/grpc v1.58.3
    bd23c7729e vendor: golang.org/x/tools v0.10.0
    205e4de3fd vendor: golang.org/x/mod v0.11.0
    153d7e4038 exec/tests: add test for `--group-add` with `--user`
    27e064e7e9 c8d/history: Fix nil dereference
    808120e5b8 New `host_ipv6` bridge option to SNAT IPv6 connections
    9d578a2e6d Cleanup duplicate imports
    59c5f6e35b integration-cli: mark dockerCmdWithFail as an helper function
    61c78d9438 daemon: Validate MacAddress on container create
    ee9f0ed895 api: Deprecate ContainerConfig.MacAddress
    052562ffd5 api: Add a field MacAddress to EndpointSettings
    98323ac114 integration/container: target v1.43 in a soon-to-break test
    4f0cab3b74 api: ContainerCreate: re-organize BC conditions
    79589354df api: ContainerCreate: remove repetitive nil checks
    44a25f31a8 api: ContainerCreate: lowercase ErrEmptyConfig
    91eee33f62 api: ContainerCreate: return an error when config is nil
    417018659b daemon: remove redundant withResetAdditionalGIDs option
    8f756fe679 c8d: show the real image creation date when listing images
    a73dfe68d3 api: ContainerCreate: init hostConfig and networkingConfig when nil
    7e0cb4c46f c8d: Use the labels to get the children of an image
    f5535d516f c8d: Preserve image labels when tagging
    70158284b7 api: fix a nil check on the wrong var
    d7266afc7e c8d/exec: Add additional groups on exec
    df3a321164 migrate to github.com/moby/sys/user
    aeb8972281 daemon: daemon.containerRestart: don't cancel restart on context cancel
    52da88201c hack/validate: stop suppressing Xattrs deprecation
    c44c9dfa79 pkg/tarsum: migrate to (tar.Header).PAXRecords
    3cf409aa9e pkg/archive: migrate to (tar.Header).PAXRecords
    6a8a792019 pkg/archive: test tar headers are interoperable
    f2c67ea82f vendor: github.com/klauspost/compress v1.17.2
    a7b44ea10f Dockerfile: update github.com/tc-hib/go-winres v0.3.1
    0cf113e250 Add unit tests for outgoing NAT rules
    619d98ab49 vendor: github.com/moby/buildkit v0.12.3
    aad51c0b4e daemon: daemon.shutdownContainer: use context.WithoutCancel
    dca89c67ef daemon: daemon.containerStop: use context.WithoutCancel
    8166818791 c8d: Return the "tag does not exist error"
    4af420f978 libnetwork/internal/kvstore: prune unused method
    4039b9c9c4 libnetwork/datastore: drop (KVObject).DataScope()
    4f4a897dda libnetwork/datastore: drop (*Store).Scope() method
    4b40d82233 libnetwork/datastore: un-embed mutex from cache
    9536fabaa8 libnetwork/datastore: minor code cleanup
    43dccc6c1a libnetwork/datastore: unconditionally use ds.cache
    5a72ed3406 integration-cli: remove deprecated dockerCmd and waitRun utilities
    06115bf82c integration-cli: DockerCLIPruneSuite: replace dockerCmd
    285ab8c861 integration-cli: DockerCLIPluginsSuite: replace dockerCmd
    e28da7686e integration-cli: DockerCLIPluginLogDriverSuite: replace dockerCmd
    a837cb444c integration-cli: DockerExternalVolumeSuite: replace dockerCmd
    5f884478e5 integration-cli: DockerCLIImportSuite: replace dockerCmd
    885eceba1d integration-cli: DockerCLITopSuite: replace dockerCmd
    6ce6b63482 integration-cli: DockerCLIHistorySuite: replace dockerCmd
    268e72f10f integration-cli: DockerCLIRestartSuite: replace dockerCmd and waitRun
    c388416aac integration-cli: DockerCLICreateSuite: replace dockerCmd and waitRun
    5c297fcc09 integration-cli: DockerCLIStatsSuite: replace dockerCmd and waitRun
    7d2a6f2030 integration-cli: DockerCLICommitSuite: replace dockerCmd
    a4522b6a8f integration-cli: DockerCLIStartSuite: replace dockerCmd
    f7ddfdbae6 integration-cli: DockerCLIUpdateSuite: replace dockerCmd and waitRun
    d1108b8a06 integration-cli: DockerDaemonSuite: replace dockerCmd
    9c161cc65a integration-cli: DockerCLIVolumeSuite: replace dockerCmd
    f482857959 integration-cli: DockerCLIImagesSuite: replace dockerCmd
    f1102e98bb integration-cli: DockerCLIPortSuite: replace dockerCmd and waitRun
    ba4d491562 integration-cli: DockerCLIRmiSuite: replace dockerCmd
    5b3086db1f libnetwork/datastore: prevent accidental recursion
    16e4bc9827 integration-cli: DockerCLISearchSuite: replace dockerCmd
    89d7b77022 integration-cli: DockerRegistrySuite: replace dockerCmd
    c867ac4527 integration-cli: DockerCLICpSuite: replace dockerCmd
    980a5bc72a integration-cli: DockerCLIBuildSuite: replace dockerCmd
    4292f42308 integration-cli: DockerCLISaveLoadSuite: replace dockerCmd
    50062b413c integration-cli: DockerCLIRunSuite: replace dockerCmd and waitRun
    d63cab5193 integration-cli: DockerCLILogsSuite: replace dockerCmd and waitRun
    8e2e1f3d28 integration-cli: DockerRegistryAuthHtpasswdSuite: replace dockerCmd
    d3f4580519 integration-cli: DockerCLILinksSuite: replace dockerCmd and waitRun
    58c5986f8b integration-cli: DockerCLIHealthSuite: replace dockerCmd and waitRun
    707bb9b9ed integration-cli: DockerBenchmarkSuite: replace dockerCmd and waitRun
    eafb618594 integration-cli: findContainerIP: replace dockerCmd
    ba32bebd05 integration-cli: DockerCLIInfoSuite: replace dockerCmd and waitRun
    4562f07887 integration-cli: DockerCLIExecSuite: replace dockerCmd and waitRun
    8c661b5e9a integration-cli: DockerCLIEventSuite: replace dockerCmd and waitRun
    cf95278122 integration-cli: DockerCLIAttachSuite: replace dockerCmd and waitRun
    1baec48367 integration-cli: DockerAPISuite: replace dockerCmd and waitRun
    908821d48a integration-cli: dockerCmdWithFail: remove unused return
    02fd8485fa integration-cli: DockerCLINetmodeSuite: replace dockerCmd and waitRun
    dbb2bd727d integration-cli: DockerNetworkSuite: replace dockerCmd and waitRun
    5cc978c6a0 integration-cli: DockerCLIInspectSuite: replace dockerCmd and waitRun
    86fb048e59 integration-cli: DockerCLIPsSuite: replace dockerCmd and waitRun
    b4ff5234bd integration-cli: remove transformCmd utility
    cdb44010c9 c8d/history: Fill ID for parents without the label
    d28bd54f2a c8d/history: Fix Tags assigned from parents
    e97716a95a Fix disk usage test
    cf9073397c Update check-config.sh
    7bb54c3dc5 vendor: gotest.tools/v3 v3.5.1
    bcca214e36 libnetwork: open-code updating svc records
    33cf73f699 libnetwork: drop (*Controller).nmap
    804ef16822 libnetwork: only delete svc db entry on network rm
    c85398b020 libnetwork: drop vestigial endpoint-rename logic
    29da565133 libnetwork: change netWatch map to a set
    0456c0db87 libnetwork: refactor isDistributedControl()
    749d4abd41 libnetwork: get rid of watchLoop goroutine
    f05dce8d3a replace some strings with OCI consts
    e3feb05175 vendor: github.com/opencontainers/image-spec v1.1.0-rc5
    0d27579fc7 Ensure that non-JSON-parsing errors are returned to the caller
    26730c891a vendor: google.golang.org/grpc v1.56.3
    6f625ae65a c8d integration: skip TestImportWithCustomPlatform
    9357bcb582 c8d/pull: Return same access denied error as graphdrivers
    488559a330 c8d/push: Set distribution source recursively
    d9b5445f39 c8d/pull: Handle pull all tags
    095d2a29a3 distribution: Add Tags
    9664f33e0d daemon: release sandbox even when NetworkDisabled
    2df698025c HealthCheck: add validation for minimum accepted start-interval
    25fb4dd50d switch to go.opentelemetry.io/otel/semconv/v1.17.0
    96f85def5b s/HostIP/HostIPv4/ for `com.docker.network.host_ipv4` setting
    2a14b6cf60 Use `iptRule` to simplify `setIcc` (code health)
    d7c6fd2f80 Move `programChainRule` logic to `iptRule` methods (code health)
    e260808a57 Move duplicate logic to `iptRule.Exists` method (code health)
    14d2535f13 Move `iptables.IPVersion` into `iptRule` struct (code health)
    4e219ebafb Eliminate unnecessary `iptRule.preArgs` field (code health)
    4662e9889c Simplify `setupIPTablesInternal` parameters (code health)
    919fe72f60 vendor: github.com/moby/buildkit v0.12.3-dev
    40fde69be9 Revert "Return no basic auth creds error when needed"
    e1bacd18a3 ci: continue-on-error on non-PR with snapshotter enabled
    70892220c8 ci: use matrix to test containerd backed image store
    03decbc1e6 ci: split tests in a reusable workflow
    bb7408e851 c8d/changes: Fix concurrents diffs
    e3d8e979de integration-cli/TestSaveAndLoadWithProgressBar: Skip with c8d
    f51c5e1a5c c8d/save: Don't save name if exported by digest
    b5f5987959 c8d/load: Fix `Loaded image` message
    42af8795a3 c8d/save: Implement exporting all tags
    f20abbc96c libnetwork: use conntrack and --ctstate for all rules
    c279c48a0e Skip TestPullAllTagsFromCentralRegistry
    8777592397 Return no basic auth creds error when needed
    ebef4efb88 api/types: move ContainerLogsOptions to api/types/container
    9670d9364d api/types: move ContainerListOptions to api/types/container
    7bce33eb0f api/types: move ContainerStartOptions to api/types/container
    0f77875220 api/types: move ContainerRemoveOptions to api/types/container
    9498d897ab api/types: move ContainerCommitOptions to api/types/container
    30f09b4a1a api/types: move ContainerAttachOptions to api/types/container
    95b92b1f97 api/types: move ResizeOptions to api/types/container
    ec69501e94 api/types: move ServiceCreateResponse, and generate from swagger
    5b3e6555a3 api/types: move ServiceUpdateResponse
    48cacbca24 api/types: move image-types to api/types/image
    44dbbeb196 c8d/progress: Remove unused mountable
    bcbbd9538f c8d/progress: Show Mounted/Exists status
    bb8bc1ffc8 update to go1.21.3
    3bc45d78c9 update to go1.21.2
    1800dd0876 vendor: golang.org/x/net v0.17.0
    1946aead21 vendor: golang.org/x/crypto v0.14.0
    0679ae984b vendor: golang.org/x/text v0.13.0
    bc33c27796 vendor: golang.org/x/sys v0.13.0
    db806533e6 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230911190601-f082dd7a0cee
    b81b27c21f vendor: github.com/go-logr/logr v1.2.4
    cff4f20c44 migrate to github.com/containerd/log v0.1.0
    e1d0aacb6a vendor: github.com/docker/distribution v2.8.3
    0cd02ab1b4 integration/c8d: Skip TestBuildSquashParent
    aca9ea42bd vendor: github.com/moby/buildkit 0.12.3-dev
    d871a665de daemon/RegistryHosts: Don't lose mirrors
    a293cd6ab9 vendor: github.com/containerd/containerd v1.7.7
    f3aa9e151d c8d: Simplify error handling and distribution source label
    5f062032f7 TestPullNonExistingImage: Move to integration
    53345fe357 TestPullNonExistingImage: Use subtests
    2edb858b18 vendor: golang.org/x/net v0.13.0, golang.org/x/crypto v0.11.0
    87de23a6cd vendor: golang.org/x/text v0.11.0
    23f2e0fea7 Skip tests that check max concurrency
    37ca57e9d5 libnet/d/bridge: inline error checks
    fcabc48ee4 c8d/load: Handle compressed archives
    cbc2a71c27 libnet/d/bridge: Don't set container's gateway when network is internal
    491758a446 Dockerfile: upgrade Delve
    c587ba3422 registry: allow mirror path prefix in config
    2c4551d86d libnet: resolver: remove direct use of logrus
    4de8459265 libnet: add OTEL tracing to the embedded DNS
    b8ba263099 c8d/rmi: Handle explicit dangling name
    25a813e924 c8d/rmi: Don't emit Untagged for dangling images
    f99c4ec798 c8d/history: Fill ID and Tags for all entries
    1f6bacc486 TestDaemonNoSpaceLeftOnDeviceError: Adjust to snapshotters
    28d057cb0e c8d/TestPsListContainersSize: Only check if size increased
    34400dd4a2 TestPsListContainersSize: Fix size parsing/formatting
    e0e6ae741e daemon/c8d: Use WithoutCancel instead of context.Background
    c47cdd5f39 Revert "daemon/logger/etwlogs: rewrite to use go-winio/pkg/etw"
    6f27bef9fc daemon/c8d: Use non cancellable context in defers
    77f7c83114 c8d/push: Show progress only on blobs
    e8a7a9435f Dockerfile: update test-registry to v2.8.3
    5b16dd6469 Remove duplicated trace logs
    ad877271f3 Limit OOMScoreAdj when running in UserNS ("Rootful-in-Rootless")
    3d70af4ee4 adjust stats sampling order
    16063c7456 vendor.mod: bump go line to 1.20
    a4822abe37 c8d: Skip TestPullFailsWithAlteredManifest
    f9f439763a c8d/TestPullFailsWithAlteredManifest: Adjust error message
    4001241ccf c8d/TestPullByDigestNoFallback: Adjust error message
    9e3ed7b429 pkg/chrootarchive: fix Darwin build
    e465ebf2f3 update to go1.21.1, and fix download-URL
    aa282973d4 Dockerfile: use GOTOOLCHAIN=local
    f66c000229 c8d: Fix getting the platform of a single-platform image
    2c89640ab9 distribution: TestPullSchema2Config fix test response
    a9fcb775e5 integration-cli: fix getTestTokenService not sending header
    3197160114 daemon: Daemon.SetNetworkBootstrapKeys: make error-handling idiomatic
    f91c3cfda6 daemon: Daemon.initNetworkController: remove intermediate var
    dcc75e1563 libnetwork: Controller: agentInit, agentDriverNotify rm intermediate vars
    a384102fdf libnetwork/datastore: Store.Map, Store.List: remove intermediate vars
    bb5402e6fb libnetwork: Controller: getKeys, getPrimaryKeyTag: slight refactor
    603f49706e libnetwork: Controller: getKeys, getPrimaryKeyTag: prevent panic
    f6e44bc0e8 internal: Add compatcontext.WithoutCancel
    95aea39348 Make one-shot stats faster
    618d9b5d54 libnetwork: nwAgent: un-export mutex
    7cda3fb7b5 libnetwork: inline populateSpecial NetworkWalker
    ca1307c56e libnetwork: Controller: remove mutex for "store"
    a8ea752a93 libnetwork: Controller.cleanupLocalEndpoints: return errors
    2e60051c92 libnetwork: Controller.sandboxCleanup: return errors
    642cf261a8 libnetwork: Controller.NetworkByID: remove redundant error-handling
    430a5f8581 api: Add method and path to trace operation string
    41c186c344 hack: Run integration tests through Delve
    42a51cb285 Add support for swarm seccomp and apparmor
    0c66111c40 daemon: containers list code refactor
    13b775a96e integration-cli/TestSaveAndLoadRepoFlags: Ignore LastTagTime difference
    7c202d2fa4 integration-cli/SaveLoad: Don't check `repositories` file
    724db8650c integration-cli: Skip TestLoadZeroSizeLayer with c8d
    1337a66130 integration-cli: Skip Parent tests with c8d
    d5b067e04a ci(buildkit): remove regex skipping tests with digest inconsistency
    286704bf6f ci(buildkit): expose github runtime for gha tests
    34e71b374b builder-next/a/ci/pull: strongly type flightcontrol.Group
    c8773e10b1 builder-next/wrapper: use new exptypes constants
    a728bd0ee9 builder-next/pull: use ResolveMode.String() helper
    221b73e23d builder-next: apply source policies on config resolve
    2246297ae6 builder-next: adopt new wrapped types
    c217e3c87a vendor: github.com/moby/buildkit v0.12.2
    8cd5f04ea3 daemon/c8d: use new containerd LabelDistributionSource constant
    fd6dd6935b vendor: github.com/containerd/containerd v1.7.6
    79a4cbbec9 builder-next: make stub executor generic
    d7a31cfb2d libnetwork: Sandbox.resolveName: slightly simplify locking
    f549aaa205 libnetwork: Sandbox.resolveName: add fast-path for alias lookups
    9249b34be8 libnetwork: Sandbox.resolveName: rename vars for clarity
    4401ccac22 libnetwork: Sandbox: remove some intermediate vars
    0e80073e01 daemon: strongly type containerd log.OutputFormat
    4ff252456b libnetwork: rewrite Network.isClusterEligible to return agent
    6203e3660d libnetwork: Endpoint: return early if no agent was found
    6eeef51c6a libnetwork: Controller.agentSetup: use structured logs
    8b95ea4a35 libnetwork: Controller.agentSetup: remove redundant condition
    e852ba55a5 vendor: github.com/Microsoft/hcsshim v0.11.1
    06a640084f Fix graphdriver lookup in makefile
    093481618d c8d: Skip the test that checks Config.Image
    e6907243af client: negotiate api version before handling version-specific code
    3936c57294 c8d: test a backend dependent error on pull
    207c4d537c c8d: Fix `docker diff`
    601c9b29e6 c8d/pull: Fix stale Downloading progress
    313a090c0e libnetwork/osl: add some TODOs
    9d3b1f9419 libnetwork/osl: make constructing Interfaces more atomic
    47f9e70385 libnetwork/osl: Namespace.Restore: conditionally fetch IPs
    ee5a91e663 libnetwork/osl: Namespace.Restore: flatten nested conditions
    299bd58c5a libnetwork/osl: Namespace.Restore: rename vars for readability
    7b96663082 libnetwork/osl: Namespace: inline setGateway and setGatewayIPv6
    bd17d27658 libnetwork/osl: Namespace: make error-handling more idiomatic
    0b4a70ca2c libnetwork/osl: Namespace: programRoute, removeRoute rm path arg
    542fe0da40 libnetwork/osl: Namespace: make mutex private
    338fc49060 libnetwork/osl: implement Namespace.RemoveInterface
    3ff75aeb07 c8d/pull: Deprecation notice for schema1 manifests
    2cb94ade6c distribution: Extract schema1 deprecation notice
    39fe25b69e c8d: Fix  getting image with platform
    68b67b3230 c8d/pull: Support legacy schema1 prettyjws manifests
    d5425f28ae Don't run tests twice
    bddd826d7a profiles/apparmor: deny /sys/devices/virtual/powercap
    83cac3c3e3 oci/defaults: deny /sys/devices/virtual/powercap
    2394b07bce c8d: Number of containers using an image
    e19e541e2c libnet: add comment to ipamType
    acf825def2 api/t/net: test EndpointIPAMConfig.Validate()
    3092b261e2 daemon: move most of validateEndpointSettings into api/t/net
    554036040b vendor: github.com/AdaLogics/go-fuzz-headers v0.0.0-20230811130428-ced1acdcaa24
    6fc3ead321 vendor: google.golang.org/grpc v1.56.2
    73041028b6 vendor: google.golang.org/protobuf v1.31.0
    54dc8d2968 vendor: github.com/cenkalti/backoff/v4 v4.2.1
    d97e4300ee vendor: google.golang.org/api v0.114.0
    d50585b05b vendor: golang.org/x/tools v0.8.0
    51d8a975ab vendor: golang.org/x/oauth2 v0.7.0
    9670db3904 vendor: golang.org/x/crypto v0.9.0
    a046616249 vendor: golang.org/x/sys v0.10.0
    f29155950f vendor: golang.org/x/sync v0.3.0
    0354791147 vendor: github.com/klauspost/compress v1.16.5
    87dd1de046 vendor: github.com/tonistiigi/vt100 v0.0.0-20230623042737-f9a4f7ef6531
    bd6cadffb0 vendor: github.com/containerd/continuity v0.4.2
    6d93db06db vendor: github.com/vbatts/tar-split v0.11.3
    171ecf8cf2 vendor: github.com/vishvananda/netns v0.0.4
    81ab8db1c3 api/t/net: add missing comment to ValidateIPAM
    04a47e88d2 api/t/net: move endpoint structs into endpoint.go
    19c07198b6 daemon: Check if endpoint address is in allowed range
    bfd8c6deb7 daemon: Validate EndpointSettings.IPAMConfig.LinkLocalIPs
    4bd0553274 daemon: Return all validation errors for NetworkingConfig and EndpointSettings
    ff503882f7 daemon: Improve NetworkingConfig & EndpointSettings validation
    4c03618fab registry: remove jsonmessage dependency
    6c563cda82 c8d: fix TestRemoveContainerAfterLiveRestore
    0c4397deaf api/pull: Validate repo name
    ccb37fa567 imageService/PullImage: Move reference parse to api
    28861e0c47 c8d: Skip TestRemoveImageGarbageCollector
    bf692d47fb deprecate pkg/loopback (utility package for devicemapper)
    96faee9762 libcontainer: client.processEventStream: use locally scoped variables
    32e2c53467 c8d: Fix pull progress update
    5a4962f80d c8d: Refuse images with digest algo when tagging
    bd523abd44 remove more direct uses of logrus
    1ffbbe798a vendor: github.com/containerd/containerd v1.6.24
    7f281907dd c8d/push: Add missing message about repository
    babf907bfd c8d/push: Support pushing all tags
    7ec9f304e9 daemon/cluster: create managed ctr with multiple EndpointsConfig
    5e15ed314b api: Improve error on ContainerCreate with multiple endpoints
    cc9c930e29 vendor: github.com/Microsoft/hcsshim v0.9.10
    24102aa8ca update containerd binary to v1.7.6
    bbcd662532 api: Allow ContainerCreate to take several EndpointsConfig for >= 1.44
    35e9d688ba libnetwork: remove netWatch.remoteEps, as it's unused
    8ae5dc4aae libnetwork: Network.updateSvcRecord: remove unused localEps arg
    37b2ea9a8d libnetwork: Controller.processEndpointCreate, Delete: remove nmap arg
    62e55fd58a Add support for registry token in containerd pull logic
    14c5f7bf1d contrib: outline purpose of download-frozen-images-v2.sh
    0937aef261 libcontainerd/windows: Don't reap on failure
    b805599ef6 libcontainer/windows: Remove unneeded var declaration
    55b664046c libcontainer/windows: Fix process not being killed after stdio attach failure
    9c84994830 libnetwork/portmapper: remove unused PortMapper.checkIP
    f5d6af13d0 libnetwork/portmapper: un-export PortMapper.Allocator
    863909a749 libnetwork/portmapper: New(): remove unused argument
    5ab8d41d9f Add dmcgowan as curator
    de2447c2ab daemon: overlay2: Write layer metadata atomically
    78479b1915 libnet: Make sure network names are unique
    5fa011dc0c vendor: resenje.org/singleflight v0.4.0
    fd15ddbc30 daemon: GetImageAndReleasableLayer: simplify "FROM scratch" case
    4229032676 daemon/containerd: use "DiffID" type for diff fields
    5d5eeac310 daemon: automatically set network EnableIPv6 if needed
    0313544f4a c8d: Handle userns properly
    c63a952dc9 c8d/builder: Don't append empty tar layer to manifest
    9127285985 c8d/builder: Lease layer snapshots
    f22b112005 c8d/commit: Unpack committed image
    8832cdf6e1 c8d: Common unpack code for specific manifest
    c6bded3475 c8d/builder: Don't use diffID as snapshot parent
    8c7e19c5ff c8d/builder: Set empty diffID for rolayer
    6ebfa57364 c8d/builder: Don't mount the rolayer snapshot
    c41121cc48 update to go1.20.8
    4acbf7d8c3 c8d: disable schema1 registry integration tests
    833b514d98 c8d/mount: Create same directory owners as graphdrivers
    a8975c9042 api: Add consts for predefined networks
    12e27dfd8f Fix host_ipv4 bridge option when IPv6 and ip6tables are enabled
    7c0f6741eb go mod tidy
    cd204f1118 libnetwork/osl: Namespace.DeleteNeighbor: remove intermediate vars
    4215a1542b libnetwork/osl: Namespace.DeleteNeighbor: remove osDelete argument
    bc77104fed libnetwork/osl: Namespace.DeleteNeighbor: don't warn on non-existing neighbor
    5e7eade1f7 integration: don't poll for containers to be running
    b7d29c1e23 registry: un-skip some tests that don't require root
    de27973538 registry: merge validateEndpoint into newV1Endpoint
    6cc6682f5f daemon: fix under what conditions container's mac-address is applied
    820f37b1a6 hack: compile w/o optimizations & inlining when debugging
    c44f8958f6 vendor: github.com/cncf-tags/container-device-interface v0.6.1
    fa3ddc5116 distribution: newRepository: remove naked return and intermediate vars
    43740ab642 registry: remove intermediate vars in mock
    550e628f05 registry: newV1Endpoint: make it clear we skip validation for Docker Hub
    5728516371 c8d/image: Allow truncated id to have sha256: prefix
    c2004fb8c4 hack: Add TEST_IGNORE_CGROUP_CHECK
    7e506f71f3 registry: v1Endpoint.ping: include URL in debug log
    0c6f8f9290 registry: v1Endpoint.ping: don't io.Readall the response
    e9ad878df6 registry: v1Endpoint.ping: add fast-path for X-Docker-Registry-Standalone
    9e797a6db9 c8d: Remove the panic from UpdateConfig
    4982c70db4 integration-cli: Skip TestRmiParentImageFail when using c8d snapshotters
    0f7a65e59b registry: remove use of v1 Version field and X-Docker-Registry-Version
    3d8b8dc09a Use process substitution to redirect to tee
    c0ece8d4f3 integration-cli: Use different label in TestBuildMultiStageGlobalArg
    081b74b97d c8d/builder: Store parent in c8d image label
    5f59f7bb49 integration/container: combine TestResize tests into subtests
    a4ceb0e4ac integration/container: TestResize, TestResizeWithInvalidSize: rm poll.WaitOn
    ee7ca6822a integration/container: fix flaky TestResizeWhenContainerNotStarted
    da5ed8b35b CI: Switch to use tracing action
    a3c97beee0 image: implement CheckOS, deprecate pkg/system IsOSSupported
    150b657bad pkg/system: move ErrNotSupportedOperatingSystem to where it's used
    9b7784781d Add test for buildkit history trace propagation
    3b4ccb2eca CI: Setup otel tracing for integration tests
    e8dc902781 Wire up tests to support otel tracing
    642e9917ff Add otel support
    776c376227 c8d: Better pull progress
    1cb45e582c c8d/import: Don't close compressed stream twice
    b5376c7cec pkg/idtools: remove sync.Once, and include lookup error
    0be416dfdc distribution: filterManifests split complicated condition
    150b1c8c73 daemon: daemon.createSpec: remove uses of logrus
    dbb4d54e01 c8d: Add image save events
    09470db089 c8d: Add image pull events
    1847dc4b7f c8d: Add image push events
    1148a24e64 migrate to new github.com/distribution/reference module
    dffccfd0f1 integration-cli/build: Alias `cmp` as `is`
    5dbd198b53 integration-cli/build: Parse multiline `images -q` output
    96516002cc c8d: Print the tag, digest and size after push
    417328e44e libnetwork/osl: remove dead code
    237eb3b5f1 docs(api): rephrase description for /images/create
    0ffa3dd870 daemon/c8d: Use Docker imagespec
    14af90b868 c8d/integration/TestBuildOnBuildCache skip parent check
    366a5f1d74 image/spec: Add Go structs
    536826d66f image/spec: Add Healthcheck.StartInterval (v1.3)
    75097cf09a test: remove platform related timeout values
    6dd78a9ac2 image/spec: Fix typo in "superseded"
    84a4f37cf7 test: use info from the version endpoint for arch checks
    159b168eea test/integration: Remove checks for "not arm" in tests
    ebb9fade23 makefile: use info -f to get the current storage driver
    c243efb0cd client: TestImageTagInvalidSourceImageName remove invalid test-case
    3a4a04e462 distribution: simplify mocks
    d864d1eb97 image/spec: add back versioned files
    b8de6c01b5 image/spec: rename v1.2.md to spec.md
    c3f2bd1009 image/spec: rename v1.1.md to spec.md
    7ff38506ab image/spec: rename v1.0.md to spec.md
    32d5e6312d image/spec: use permalink to versioned documents
    7b7019a4da image/spec: add missing "Shell" field (v1.2)
    5380f3f0c4 image/spec: add missing "ArgsEscaped" field (v1.1, v1.2)
    f33370219b image/spec: add missing "OnBuild" field
    e19edd3f25 image/spec: minor fixes and touch-ups in markdown files
    b9f9e20f01 daemon: Daemon.killWithSignal(): don't discard snapshotting errors
    af535233cc daemon: Daemon.killWithSignal(): don't discard handleContainerExit error
    8c6a46f643 libnetwork: Endpoint.AddStaticRoute don't create StaticRoute if unused
    1dcb11f81d libnetwork: Endpoint.InterfaceName: remove redundant nil check
    a9a0ffaf51 testing: update docker-py 6.1.3
    f6959bc597 test-docker-py: skip AttachContainerTest::test_run_container_reading_socket_ws
    e0f171f342 testing: update docker-py 6.0.1
    79a0f82ca1 test-docker-py: remove comment about docker 17.06 limitations
    be90e5e1d4 libnetwork: Controller.addServiceBinding: fix duplicate word in comment
    77c2613d3a libnetwork: fix some missing imports on macOS and FreeBSD
    5da2dd98e9 registry: move search-related code to separate files
    f1a7028900 registry: rename v1-endpoint tests to have a common prefix
    19f6f0b3db registry: move v1 endpoint tests to endpoint_test.go
    47bf587f84 registry: ResolveAuthConfig: rename var that collided with import
    a0a8d9d057 libnetwork: notify another driver registerer
    2689484402 volume/local: Don't unmount, restore mounted status
    f1a6e16258 errdefs: remove redundant import comments
    b6ba2a4f75 errdefs: remove gotest.tools dependency
    3f8cbd8ec9 registry: update some godoc
    e10eca3d1a daemon/containerd: rename some vars that collided with imports
    aefbd49038 daemon/containerd: newROLayerForImage: remove unused args
    28d201feb7 daemon/containerd: log errors when releasing leases
    d43e61758a registry: deprecate APIEndpoint.Version and APIVersion type
    aef703fa1b integration/liveRestore: Check volume content
    4e4f62b6db distribution: use registry consts for API version in tests
    aa59b0f5a2 registry: improve error for invalid search endpoints
    14b53c6318 registry: simplify `trimV1Address`
    062c80199f registry: combine TestEndpointParse and TestEndpointParseInvalid
    0f871f8cb7 api/types/events: define "Action" type and consts
    10a3a3bc49 daemon: inline some variables when emitting events
    9331d6de1e daemon/events; fix TestLoadBufferedEventsOnlyFromPast
    f6f6c32138 api: ValidateRestartPolicy: improve errors for invalid policies
    333e04e84e integration-cli: TestEventsFormat: rewrite test to not use deprecated fields
    fa79b5d59f integration/container: TestPause: don't depend on deprecated fields
    0161aad462 client: TestEvents: don't depend on deprecated fields
    5123ae4352 daemon: TestLogContainerEventCopyLabels: inline vars
    2928c5ae92 daemon: TestHealthStates: don't depend on deprecated fields
    62ec14d9ec daemon/events: verify non-deprecated fields
    f443006fa2 daemon/events: rewrite test-assertions with gotest.tools
    70ad5b818f api/types/events: make events.Type an actual type
    5a02ed5e84 integration: use events-consts in tests
    9ea50365d6 daemon/events: use events-consts in tests, and fix vars that collided
    2f8e957713 Dockerfile: update crun binary to v1.8.7
    32e79c464a libnetwork: Network: return early where possible
    5512c7e838 libnetwork: Network.Services: remove some intermediate vars
    d6b8298cfd libnetwork: Network.Services: return early and don't lock in a loop
    8b21609654 libnetwork: remove Endpoint.Interface
    f8181b8875 libnetwork: Endpoint.Iface, Endpoint.Interface remove redundant "if"
    6a61bacafe libnetwork/drivers/remote: rollbackEndpoint.Interface: return concrete type
    dc061d2ed3 libnetwork/drivers/remote: driver.DeleteNetwork: remove var that collided
    40b1389917 libnetwork/drivers/remote: remove unused testEndpoint.Interface
    15435f7293 libnetwork/drivers/bridge: testEndpoint.Interface: return concrete type
    9afb688f5f libnetwork/drivers/bridge: getIPv4Data: remove unused argument
    639449f84e libnetwork: nwAgent.bindAddr: change to net.IP
    b75e831567 libnetwork: resolveAddr: add GoDoc
    ebe2347ac6 daemon: remove LogPluginEventWithAttributes as it's not used
    aa764e6009 daemon: logNetworkEvent, logSecretEvent, logConfigEvent rm unused args
    fa13b0715f integration/internal/swarm: rename max/min as it collides with go1.21 builtin
    79495c5b6a pkg/tailfile: rename max/min as it collides with go1.21 builtin
    df2f25a977 pkg/plugins: rename max/min as it collides with go1.21 builtin
    6c036f267f pkg/sysinfo: rename max/min as it collides with go1.21 builtin
    55192de9e3 pkg/archive: rename max/min as it collides with go1.21 builtin
    a3867992b7 daemon: rename max/min as it collides with go1.21 builtin
    f6b2e34268 Update example in README.md to close cli object
    318b3d4fe5 api/types/versions: rename max/min as it collides with go1.21 builtin
    cb394a62e5 restartmanager: rename max/min as it collides with go1.21 builtin
    8f64e2e925 daemon: daemon.logClusterEvent: use events.Type for event-types
    3dea2f230a daemon: inline some vars when producing events
    385f6429be api/server/router/network: remove empty file
    350223201e integration/container: TestCheckpoint: remove intermediate vars
    b688af2226 api/types: move checkpoint-types to api/types/checkpoint
    70baaec6a5 Dockerfile: remove libdevmapper-dev
    12d1f4f385 hack: remove devicemapper leftovers and build-tags
    f6a5318f94 Dockerfile: Windows: update Golang download domains to cut down redirects
    2aabd64477 hack: update link to GOPATH documentation
    b18e170631 CONTRIBUTING.md: update links to golang docs and blog
    136e86bb5c api: swagger: update link to Go documentation
    4862d39144 docs/api: update links to Go documentation
    cd49f9affd update golangci-lint to v1.54.2
    d52f20048d api/server: format code with gofumpt
    e9b09b49fd builder/builder-next: format code with gofumpt
    73894af9ff contrib/apparmor: format code with gofumpt
    ce01d779df daemon: format code with gofumpt
    211d3a8c32 pkg/stack: format code with gofumpt
    95e99e629c pkg/fileutils: format code with gofumpt
    6c6e1fb13d pkg/containerfs: format code with gofumpt
    1e579a7a2a pkg/sysinfo: format code with gofumpt
    263c00f27c testutil: format code with gofumpt
    b71951c70c container: format code with gofumpt
    87cedbe443 image: format code with gofumpt
    976da91fb7 pkg/loopback: format code with gofumpt
    b4d6eca9b8 pkg/chrootarchive: format code with gofumpt
    07e6b0ac70 integration: format code with gofumpt
    498da44aab remove some remaining pre-go1.17 build-tags
    210abfaef6 libnetwork: add godoc to Endpoint
    04422f5ec1 daemon: WithNamespaces(): add notes about user-namespaces
    dd26e6b15e daemon: Daemon.getIpcContainer: make errors less repetitive
    3d94eb9bcd daemon: Daemon.getPidContainer: change to accept "id" argument
    bc7f341f29 daemon: WithNamespaces(): fix incorrect error for PID, IPC namespace
    bd5d6480e7 daemon: WithNamespaces(): remove redundant "if"
    6eaefe5bf5 daemon: WithNamespaces(): use switch instead of if/else if/else
    43aa67a982 daemon: WithNamespaces(): use OCI-spec consts for namespaces
    759698581e daemon: WithNamespaces(): inline variables
    13648a0e21 daemon: remove Daemon.checkContainer and related utils
    78828f9b58 test/integration: Download the registry binary
    bd2c553870 Fix some broken executable flags
    143b3b2ef3 test: update registry version to latest
    01214bafd2 c8d/builder: Don't drop fields from created image
    b92cf68add libnetwork/osl: remove Sandbox and Info interfaces
    c881360e88 libnetwork/osl: remove Interface.Master() as it's unused
    b9bf407929 libnetwork/osl: remove Interface Interface
    8631e69cdf libnetwork/osl: remove Sandbox.InterfaceOptions() etc.
    f3d29db6a2 libnetwork/osl: remove Sandbox.NeighborOptions() etc.
    a365fb0e9d libnetwork: move more osl.Sandbox related code to Linux-only files
    95abde479a libnetwork: implement Controller.setupOSLSandbox
    35456d2eb1 libnetwork/osl: add godoc to networkNamespace
    aecfa55c4c libnetwork/iptables: (Add|Del)InterfaceFirewalld: check firewalld status
    4b0d38de06 TestDiskUsage: don't panic if results don't match
    c0568a95d8 integration/container: check some error-types in tests
    2b583c0923 daemon: cleanupContainer: slightly cleanup error messages
    69cf2ad6a5 daemon: cleanupContainer: don't fail if container is already stopped
    20b770237c daemon/network: Settings: move sandbox fields together
    405f571ae8 daemon: updateSandboxNetworkSettings: remove unused error-return
    2eccf0e8d1 libnetwork: Controller.NewSandbox: don't generate ID if not used
    6cbe06ff3f test: Skip graph driver tests when using containerd snapshotters
    3553b4c684 replace dockerfile/dockerignore with patternmatcher/ignorefile
    a479b287c7 vendor: github.com/moby/patternmatcher v0.6.0
    bedcc94de4 daemon: Handle NotFound when deleting container lease
    dfaff9598c c8d/run: Allow running container without image
    eb56493f4e c8d/commit: Don't produce an empty layer
    3e8af0817a ipam: Replace ChildSubnet with parent Subnet when its mask is bigger
    4f47013feb api: Validate IPAM config before creating a network
    2be118379e api/types/container: add RestartPolicyMode type and enum
    b8ff8ea58e Don't return an error if the lease is not found
    dff53a02ef libnetwork: remove Controller.Sandboxes as it's no longer used
    d6f340e784 gha: set 10-minute timeout on "report" actions
    f44fbab3ec libnetwork: remove Controller.WalkSandboxes and related code
    6dba98cf38 libnetwork: implement Controller.GetSandbox(containerID)
    6c4153f348 libnetwork: parallelTester: move vars closer to where they're used
    e690cdb6a3 libnetwork: remove redundant sandboxTable type
    3c10db669e libnetwork: remove unused SandboxKeyWalker
    cc414a2012 libnetwork/osl: remove Sandbox.Info()
    3b9f4395cf libnetwork: remove InterfaceInfo interface
    d146e592d8 api/t/network: Move IPAM types to their own file
    219d4d9db9 ci(bin-image): check repo origin
    d125823d3f hack: use long SHA for DOCKER_GITCOMMIT
    2010f4338e ci(bin-image): clean up metadata
    ad91fc1b00 ci(bin-image): clean up env var handling
    5dc44f03f0 classic builder: align "removing intermediate container" output
    06e540c271 libnetwork: move all SandboxOptions to a separate file
    2afa4eba43 libnetwork: resolver: Resolver.dialExtDNS use joinHostPort and cleanup
    3218e26a22 libnetwork: resolver: remove some intermediate variables
    986de11464 libnetwork: resolver: remove setCommonFlags, use createRespMsg
    7f965d55c7 volume/local: Fix debug log typo
    678ce73907 windows: update default base image for dev container
    0c522c6bbf libnetwork/datastore: remove deprecated scope consts
    73ffb48bfb ci(bin-image): populate DOCKER_GITCOMMIT, take 2
    9aed6308d4 ci(bin-image): populate DOCKER_GITCOMMIT
    c22ec82477 libnet: Fix error capitalization
    bd0111c1f4 libnet: Replace NoServiceError with UnavailableError
    42d34e40f9 libnet: Replace BadRequest with InvalidParameter
    a64adda4e7 c8d/inspect: Ignore manifest with missing config
    c85a33d74b libnetwork/iptables: un-export ZoneSettings, and slight refactor
    d979d2af45 libnetwork/iptables: fix TestFirewalldInit
    513063bcf9 libnetwork/iptables: ProgramChain: don't fail if interface not found
    64de635626 Add a temporary drop-in replacement for errors.Join
    cff341e5e6 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230815220644-3f2e40b3ed51
    56b62640a2 libnetwork: Controller.NewSandbox: use named error-return
    cbe692ffd1 libnetwork: Controller.NewNetwork: use named error-return
    e2f9d6c4c3 libnetwork: rename vars that collided with builtins
    e8f0f5a4ce libnetwork: rename agent type to reduce collisions
    0503cf2510 libnetwork/drivers/bridge: setupIPChains(): name output variables
    b9d9504df5 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230808164555-1983e41a9fff
    7b66ae1531 vendor: golang.org/x/crypto v0.3.0
    59aa3dce8a remove s390x and ppc64ls pipelines
    ea2d686468 libnetwork/iptables: DeleteConntrackEntries: remove "totals" returns
    f1240393d9 libnetwork/iptables: reduce DeleteConntrackEntriesXX debug logs
    18a0ff2b2b daemon: Daemon.handleContainerExit(): rename err-var for clarity
    178125ae39 libcontainerd/supervisor: explicitly ignore process kill errors
    f8363690ca daemon: Daemon.handleContainerExit(): reduce ambiguity in error handling
    72648f0ba6 oci: DefaultLinuxSpec: use OCI-spec consts for namespaces
    17571ff199 integration/internal/container: add WithPIDMode option
    917dae58e1 integration/internal/container: remove import aliases
    e0f5bb4820 daemon: withLibnetwork(): return early if networking is disabled
    225691e258 daemon: withLibnetwork(): use OCI-spec consts for namespaces
    8376595621 libnetwork: un-export SetExternalKey
    91a3a95385 libnetwork/options: OptionExecRoot: skip osl.SetBasePath on non-Linux
    48ea7ec970 libnetwork/osl: use filepath.Join() only when changing basedir
    8bf62010a4 libnetwork: merge linux-only test-files
    c0562d4eed libnetwork: rename unix-only testfiles
    8070f15966 libnetwork/drivers/bridge: rename some linux-only files
    014fefee1d libnetwork/drivers/bridge: minor formatting fixes
    80d158e0de daemon: remove containerNotModifiedError
    dffe634c19 daemon: Daemon.ContainerStart(): make validateState a regular function
    6da42ca830 c8d/diff: Reuse mount, mount parent as read-only
    051d51b222 c8d/export: Use ref counted mounter
    303e2b124e integration: Add test for not breaking overlayfs
    05deecaa45 internal/testutils/netnsutils: move utils that were not used on Windows
    d4e1c072e2 libnetwork: move resolverIPSandbox closer to where it's used
    f661bd8ee5 libnetwork: Resolved.SetupFunc() minor cleanup
    de4ba13400 libnetwork: move resolver tests that were skipped on Windows
    1e4e9161c5 libnetwork: move TestDNSOptions to a non-windows file
    bf1fb97575 daemon: Daemon.containerStart(): add comment to clarify error-type
    b039bbc678 update runc binary to v1.1.9
    79b467808e vendor.mod: github.com/opencontainers/runc v1.1.9
    74feadacf8 integration/internal/container: refactor CreateExpectingErr
    0899ba4a3f integration/internal/container: add NewTestConfig utility
    3cb52a6359 integration/internal/container: use consistent name for api-client
    26be2bc6b9 integration/container: use consistent name for api-client
    38e26c4717 daemon/create.go: Fix error capitalization
    435ecfe6e0 test/volume: Replace Check with NilError where suitable
    3d3ce9812f integration/tag: Move to client unit test
    742475bc8d daemon/create.go: Supersede github.com/pkg/errors
    4cc796ab93 client: Client.buildRequest: use http.NewRequestWithContext
    58dc0fcd1e client: Client.Ping: re-use request when falling back to GET
    87fff769f4 client: Client.checkResponseErr: change errorMessage to an error
    71da8c13e1 integration/tag: Use subtests and make parallel
    11a0c2779b pkg/plugins: Rewrite with assert.Check
    43956e1b71 hack/test: Don't exit early when all tests are filtered out
    ae008570ff hack/test: Split -test.run for integration and integration-cli
    510cac5f5b hack/test: Fix checking if integration-cli are filtered out
    8a1ca49657 libnetwork/osl: nwIface: add godoc
    16785b9b7b libnetwork/osl: move all networkNamespace methods together
    5b0fa7aaca libnetwork/osl: some minor nits
    972d80b596 libnetwork/osl: clean up newInfo() a bit
    0da721ec38 libnetwork/osl: make newKey and newInfo a t.Helper()
    d9442aab88 libnetwork/osl: nwIface: remove mutex altogether
    2afe18d2ce libnetwork/osl: nwIface: unexport sync.Mutex
    8b989ac665 libnetwork/osl: let's not do this, etc.
    3d0a7d819c libnetwork: remove Network.Info() and remove NetworkInfo interface
    74354043ff remove uses of libnetwork/Network.Info()
    36a0946aa9 libnet/ipamapi: Remove unused errors
    fd4ec26313 daemon/network.go: Fix error capitalization
    64e01c627f daemon/network.go: Remove github.com/pkg/errors pkg
    94dc10378d libnetwork: network.requestPoolHelper: slightly optimize order of checks
    67e2c1d482 libnetwork: network.requestPoolHelper: remove dead code
    ad68883c5a libnetwork: network.requestPoolHelper: don't defer in a loop
    32fcde6d9e libnetwork: network.IpamConfig, network.IpamInfo: name output vars
    df03357d19 libnetwork/ipam: move PoolID.FromString() to a PoolIDFromString() func
    808fed550d libnetwork/ipam: PoolID.String(): don't use fmt.Sprintf
    87fc8c772b libnetwork/ipam: Allocator.RequestPool: name args, output vars
    6dbc9c1c53 libnetwork/ipam: Allocator.RequestPool: mark options arg as unused
    7047964bd6 libnetwork/ipam: Allocator.RequestPool: make parseErr only handle errors
    821ef5cbaf libnetwork/ipams/null: use consts for fixed values
    05ef5559c3 pkg/plugins: override timeouts during tests
    6841a53d17 hack/test: Don't fail-fast before integration-cli
    2aa24519da ibnetwork/drivers/bridge: newLink: validate before creating
    5d722b35d9 libnetwork/drivers/bridge: bridgeNetwork.getEndpoint(): move lock
    eba15fe905 libnetwork/drivers/bridge: driver.link: don't defer in a loop
    76b736c242 libnetwork/drivers/bridge: driver.link: name return var for defer handling
    ea5f21ceac libnetwork/drivers/bridge: don't convert IP to string and back again
    8b6203b613 libnetwork/drivers/bridge: link.Enable: don't register reload on error
    0f4ba145ee libnetwork/drivers/bridge: link.Enable, link.Disable use iptables.Action
    40adb4317b api: Remove duplicated check on CheckDuplicate
    3e52785aae volume/drivers: use plugin Content-Type headers v1.2
    481dde8b70 libnetwork: use plugin Content-Type headers v1.2
    93b5c31541 integration-cli: use plugin Content-Type headers v1.2
    b663c7c5c3 pkg/plugins: add convenience alias for VersionMimeType
    c8930105bc fix: Normalize `RLIMIT_NOFILE` to sensible defaults
    4f9540f19f daemon: remove some intermediate vars and some cleanup
    8153a7760e daemon: Daemon.tryDetachContainerFromClusterNetwork: cleanup
    a018bb1da7 daemon: Daemon.initializeNetworking: remove var declaration
    12d8029d56 daemon: Daemon.getNetworkedContainer: remove intermediate var
    d1aa1979b4 daemon: buildEndpointInfo: minor refactor
    7a59913b1a Add CDISpecDirs to Info output
    0034a98eb1 pkg/plugins: Guard storage and unparallel racy tests
    bbb9255562 Skip CDI driver registration if CDISpecDirs is empty
    3b71197fb8 Set default CDI spec dirs after parsing args
    f3e62199ea daemon: Remove unneeded error wrapping in verifyNetworkingConfig
    d7a9f15775 bakefile: Remove default value of DOCKER_GITCOMMIT
    2b028dc55b daemon: Daemon.buildSandboxOptions: use range when looping
    33b4285eb1 daemon: Daemon.buildSandboxOptions: don't use PortBinding.GetCopy()
    ddb3d46533 daemon: Daemon.buildSandboxOptions: remove intermediate vars
    27a27db73f daemon: Daemon.buildSandboxOptions: move vars to where they're used
    91cab53a3e libnetwork: make OptionDNS, OptionDNSOptions, OptionDNSSearch take a slice
    2cbed9d2a8 daemon: inline Daemon.getDNSSearchSettings
    603547fa19 daemon: change Daemon.setupPathsAndSandboxOptions to a regular func
    07f2df69c7 daemon: buildCreateEndpointOptions: minor nits
    5158a33f15 daemon: buildCreateEndpointOptions: use range when looping
    1c6dae1291 daemon: buildCreateEndpointOptions: don't use PortBinding.GetCopy()
    cc79024761 daemon: buildCreateEndpointOptions: remove intermediate vars
    45de99aa06 daemon: buildCreateEndpointOptions: don't parse empty vip
    7d429125d2 daemon: buildCreateEndpointOptions: move vars to where they're used
    6ce92aa523 daemon: buildCreateEndpointOptions: skip getPortMapInfo() if not needed
    9e9a17950a daemon: FindNetwork: minor cleanups
    8c4af5dacb distribution: show image schema deprecation on all registries
    982bc0e228 distribution: update warning for deprecated image formats
    5bd8aa5246 integration: Add RunAttach helper
    d7fb4dd170 integration: Extract stream demultiplexing from container.Exec
    584f016e99 docs/api: remove stray underscore in version-history.md
    d5cb7cdeae update to go1.20.7
    fced566714 client: move resolveTLSConfig to a Client.tlsConfig()
    47af265234 client: Dialer: inline fallbackDial
    74d9850bb9 client/buildkit: ClientOpts: update docs to use doc-links, and inline
    971083d419 api: search: deprecate is_automated field, and is-automated filter
    5e2a1195d7 swap logrus types for their containerd/logs aliases
    1a51898d2e TestDaemonProxy: use new scanners to check logs
    476e788090 Fix daemon proxy test for "reload sanitized"
    e2d400bea9 libnet/d/bridge: Inline InvalidLinkIPAddrError
    6df4a00bb9 libnet/d/bridge: Remove pointless BadRequestError impl
    7c13985fa1 libnet/d/bridge: Inline InvalidIPTablesCfgError
    d8f42ee21a libnet/d/bridge: Inline IPTableCfgError
    a40d00c421 libnetwork: remove ErrDataStoreNotInitialized
    66b379785e libnetwork: remove unused InvalidContainerIDError
    d8cd4f6421 libnetwork: remove unused UnknownEndpointError
    fc5c16f491 libnetwork: remove unused NetworkTypeError
    e9f1888560 libnetwork: remove unused ErrInvalidConfigFile
    eadaaa7f79 libnetwork: remove unused ErrNoContainer
    99ab11bb90 libnetwork: remove unused ErrInvalidJoin
    9174eb00e2 libnetwork: remove unused ErrInvalidNetworkDriver
    7c2665298a libnetwork/types: move GetMinimalIP to overlay-driver and un-export
    d9b7a5f01a libnetwork/types: remove ErrInvalidProtocolBinding
    4445169cb5 libnetwork/types: remove PortBinding.Equal
    4269712d06 libnetwork/types: remove unused UUID type
    c203171ef6 libnetwork/types: remove unused RetryError and TimeoutError
    6d37ab0a83 libnet/d/bridge: Change interface implemented by error types
    03db2f8c3d libnet/d/bridge: Remove unused error types
    8197752d68 TestDaemonProxy: check proxy settings early
    4d674897f3 vendor: github.com/containerd/containerd v1.6.22
    5438356348 libnetwork: rename vars that collided with builtin and type
    ce053a14aa vendor: gotest.tools/v3 v3.5.0
    be0f4a4737 libnetwork/driver: remove discoverAPI from Windows and Windows overlay
    6ec03d6745 libnetwork: move datastore Scope consts to libnetwork/scope
    86299bbd35 vendor: github.com/opencontainers/image-spec v1.1.0-rc4
    fca38bcd0a libnetwork/driverapi: make discoverAPI an optional part of the interface
    490fee7d45 api/types/filters: fix errors not being matched by errors.Is()
    bf48d3ec29 update containerd binary to v1.7.3
    a78381c399 update containerd binary to v1.7.2
    0d76fc431a libnetwork/remote: newDriver(): return concrete type
    3e8fda0a70 windows: fix --register-service when executed from within binary directory
    d69b1fdb72 volume/mounts: cleanup tests
    da9e44a620 libnet/d/bridge: Allow IPv6 ICC from any IP address
    31d09f6ee9 testutils: move Logger interface to testutils
    492c09276d tests: Move libnetwork/testutils to internal/testutils/netnsutils
    13180c1c49 daemon/list: Drop unused arg from containerReducer
    68991ae240 daemon/list: Refactor refreshImage
    e5cffc07b3 c8d: Fix TestImagesFilterMultiReference
    1d8108b009 c8d: images/json, add image labels to the response
    a0bba26919 c8d: Populate RepoTags instead of adding a new image to the list
    ad2760ec80 integration: Move image filter tests to integration
    4d8e3f54cc c8d/container: Follow snapshot parents for size calculation
    5a39bee635 daemon/list: Replace ErrImageDoesNotExist check
    7379d18018 c8d/readConfig: Translate c8d NotFound to errdefs
    f3b76bc1da daemon: refactor buildNetworkResource to use a struct-literal
    a8c0b05052 daemon: split buildDetailedNetworkResources into two functions
    8caf974dcd daemon: refactor buildEndpointResource
    437ced91ec daemon: refactor buildIpamResources
    ca5ac19ea4 daemon: refactor buildPeerInfoResources
    02dc5ea720 libnetwork/datastore: remove Store.KVStore()
    0f7bf67f83 pkg/plugins: TestGet(): use sub-tests
    e1ad4aa002 pkg/plugins: make package-level socketsPath var a LocalRegistry field
    5bd44cf3c4 pkg/plugins: remove "load()" function
    77c03221c9 pkg/plugins/transport: remove RequestFactory interface
    d12ec5f796 pkg/plugins/transport: remove unused Transport interface
    dfd331b2c8 pkg/plugins/transport: export httpTransport, and return concrete type
    77103c7c03 pkg/plugins/transport: inline newHTTPRequest
    4af4adc7ba pkg/plugins: remove LocalRegistry.SpecsPaths()
    a44c25c2f1 pkg/plugins: split exported from implementation
    954d50b88a plg/plugins: rename vars that collided, or poorly cased
    20889dbac6 pkg/plugins: move Plugin.ScopedPath to platform-agnostic file
    a5ee0d6af8 libnetwork: don't access KVStore directly in tests
    b378669836 libnetwork/datastore: don't access KVStore directly in tests
    65978e6982 libnetwork/datastore: cleanup tests
    478f4aed63 libnetwork/datastore: ScopeCfg.IsValid(): un-wrap conditions
    37cbdeb1f2 libnetwork: remove most of kvstore
    d713b7ed45 api/server/router/network: remove unused Backend.FindNetwork
    1bc7a2aacd daemon/containerd: ImageService. LoadImage fix stray slash in comment
    126a089382 vendor: github.com/opencontainers/runtime-spec v1.1.0
    42fa7a1951 Integration test for capabilities
    5ef9e2632f libnetwork/datastore: prevent data races in Key()
    48cc28e4ef hack/integration: Add TEST_INTEGRATION_FAIL_FAST
    f70e1b315f libnetwork/datastore: remove unused ParseKey() utility
    704a19b25d libnetwork/datastore: remove DataStore interface
    d5b1e43b8f libnetwork/datastore: move MockData to a _test file
    0ec73a7892 vendor: github.com/moby/buildkit v0.11.7-dev
    64c6f72988 libnetwork: remove Network interface
    edafcb2c39 libnetwork/iptables: un-export ErrConntrackNotConfigurable, IsConntrackProgrammable
    e57b807a42 libnetwork: Controller.NewNetwork: inline arrangeUserFilterRule()
    be8ff186d6 libnetwork: refactor TestErrorInterfaces into a test
    9484520327 libnetwork: arrangeUserFilterRule: don't return early
    a5f45b47a3 libnetwork: Controller: combine iptablesEnabled and ip6tablesEnabled
    483a1933a2 volume: remove the short RRO forms in favor of the long forms
    5da84141c4 vendor: github.com/prometheus/common v0.42.0
    44ab4d44e0 vendor: github.com/prometheus/procfs v0.9.0
    6791b8051a vendor: github.com/felixge/httpsnoop v1.0.3
    9d3590f375 vendor: github.com/Microsoft/go-winio v0.6.1
    35d180126a vendor: google.golang.org/protobuf v1.30.0
    b835c28383 vendor: golang.org/x/oauth2 v0.6.0
    3cfc1ffb0a pkg/ioutils: some cleanups in tests
    df86d855f5 Dockerfile: update runc binary to v1.1.8
    f5e64a9eaa vendor: github.com/containerd/stargz-snapshotter/estargz v0.14.3
    d431345bf3 vendor: google.golang.org/protobuf v1.29.1
    30916df3d3 vendor: github.com/containerd/ttrpc v1.2.2
    4f4dd2d995 vendor: github.com/containerd/go-cni v1.1.9
    287130a254 vendor: github.com/cenkalti/backoff/v4 v4.2.0
    7145129f27 vendor: k8s.io/klog/v2 v2.90.1
    410a52b763 vendor: github.com/fsnotify/fsnotify v1.6.0
    741c28ae9f vendor: github.com/containerd/cgroups v1.1.0
    e84b72710b vendor: github.com/aws/aws-sdk-go-v2/config v1.18.16
    e235763a38 vendor: github.com/aws/aws-sdk-go-v2/credentials v1.13.16
    4c30bf1667 vendor: github.com/aws/aws-sdk-go-v2 v1.17.6
    cb53ce9f89 vendor: github.com/aws/smithy-go v1.13.5
    f463e50719 vendor: github.com/AdaLogics/go-fuzz-headers v0.0.0-20230106234847-43070de90fa1
    359ab384fd vendor: google.golang.org/genproto v0.0.0-20230306155012-7f2fa6fef1f4
    b11bdb9212 vendor: cloud.google.com/go/logging v1.7.0
    64609120d8 vendor: github.com/googleapis/gax-go/v2 v2.7.0
    2990defea7 vendor: go.opencensus.io v0.24.0
    d7aa47ddb8 vendor: github.com/googleapis/enterprise-certificate-proxy v0.2.3
    296040b1f4 vendor: github.com/cespare/xxhash/v2 v2.2.0
    033f882314 vendor: golang.org/x/oauth2 v0.5.0
    b615d195b2 vendor: github.com/golang/protobuf v1.5.3
    c5c8f433e6 vendor: github.com/containerd/typeurl/v2 v2.1.1
    2659f7f740 c8d/inspect: Include platform Variant
    a8fd1e3135 Dockerfile: update compose to v2.20.1
    d78893921a Dockerfile: update buildx to v0.11.2
    f3a6b0fd08 c8d: Make sure the content isn't removed while we export
    6cba44277f AUTHORS,.mailmap: update with recent contributors
    8b843732b3 pkg/chrootarchive: fix FreeBSD build
    eaf141c86a c8d/resolveImage: Fix Digested and Named reference
    028eab9ebb c8d/inspect: Don't duplicate digested ref
    7310a7cd0c ci(buildkit): remove early-return from buildkit-ref
    4ecc01f3ad ci(buildkit): remove misleading code from buildkit-ref
    48ff8a95cc hack/with-go-mod.sh: warn on stderr
    750c441dfd daemon: remove intermediate var
    468d6616bf daemon: configureLocalContentStore: return concrete types
    375c4eb31c daemon: rename vars that shadowed package-level types
    034e7e153f daemon: rename containerdCli to containerdClient
    1aa17222e7 quota: remove gotest.tools from testhelpers
    a972dbd682 hack/make/.binary: use with-go-mod.sh
    5563b09ac2 hack: use Git-free ROOTDIR convention
    780e8b2332 hack/d/cli.sh: properly handle errors in curl
    12a19dcd84 Dockerfile: improve CLI/rootlesskit caching
    235cd6c6b2 Dockerfile(.simple): align APT_MIRROR support
    bcea83ab9b Makefile: pass through APT_MIRROR
    f8c0d92a22 ci: extract buildkit version correctly with replace-d modules
    010c3718e3 vendor: github.com/tonistiigi/fsutil v0.0.0-20230629203738-36ef4d8c0dbb
    531dbd7af5 vendor: github.com/containerd/continuity v0.4.1
    eb68c5e747 daemon: support using CIDR notation for getting registry hosts
    e0b065cc33 daemon: use the registry service config for getting registry hosts
    2da589d454 client: return explicit "nil" for no errors, and remove nil check
    738b16d873 libnetwork/config: add Config.DriverConfig() and un-export DriverCfg
    82bb3d8d2b libnetwork: TestUserChain: use assert.Check and is.ErrorContains
    4e709e75da libnetwork: TestUserChain: re-use IPTables instances
    c471255153 libnetwork: TestUserChain: don't manually manipulate Controller.cfg.DriverCfg
    ddd33c6bbd libnetwork/iptables: move IPTable.LoopbackByVersion() to a utility
    aad2dbb93d libnetwork/iptables: GetIptable: validate provided IPversion
    47063ca3ae libnetwork/iptables: un-export IPTable.Version
    9c2cd65c0d libnetwork/iptables: make some vars local, and move bestEffortLock lock
    93d050f504 libnetwork/iptables: NewChain, RemoveExistingChain: validate chain, table
    ad0c928ab5 libnetwork/iptables: resetIptables(): don't pass empty table name
    1198fe8f6b libnetwork/iptables: un-export FirewalldInit
    20900b76f9 libnetwork/iptables: make xLockWaitMsg a const
    995da1e51d libnetwork/iptables: group "enum" consts per type
    c74a083672 libnetwork/iptables: IPTable.ExistChain(): remove redundant if/else
    9f9d57590b libnetwork: getTestEnv(): use literals for options
    534858aaed libnetwork/drivers: rewrite some strings to reduce quote-escaping
    7c360778bb libnetwork/drivers/bridge: driver.configure: remove redundant err-check
    e21ff6c0c9 libnetwork/config: remove IsValidName utility
    948f55d0b7 libnetwork/options: remove unused NewGeneric, and use map[string]any
    fa5c13542c libnetwork/drivers/bridge: setupBridgeNetFiltering: improve error handling
    077049d0b9 client: WithTLSClientConfig: return early if no transport is set
    6846c63252 client: WithTLSClientConfig, WithTLSClientConfigFromEnv: inline vars
    9d1e690751 client: TestGetAPIPath: don't use un-keyed structs
    6552441b46 client: TestClientRedirect: cleanup
    8d514f4e2e client: touch-up docs, and user doc-links
    c219b09d4a client: Client.postHijacked: use Client.buildRequest
    e11555218b client: Client.setupHijackConn: explicitly ignore errors
    41f235a2f8 gha: add note about buildkit using older go version
    1ead2dd35d update go to go1.20.6
    e1db9e9848 testutil: use dummyhost for non-tcp connections
    6b7705d5b2 pkg/plugins: use a dummy hostname for local connections
    92975f0c11 client: define a "dummy" hostname to use for local connections
    2a59188760 client: TestSetHostHeader: don't use un-keyed literals
    f93cfb2e31 Support for health start interval to swarm mode
    16e6d8af55 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230713153928-bc71908479e5
    79c72390b9 integration/container: use subtests for TestAttach
    f9e2eed55d integration: Don't env cleanup before parallel subtests
    cdac084fb4 Add t.Helper() to the cli test helper functions
    c395496e06 testutil: rename variable that collided with import
    1370b3c679 client: minor test improvements for requests
    f7f0a17ea2 client: TestSetHostHeader: use sub-tests
    2cb982b506 pkg/plugins: run tests with t.Parallel()
    b39362295a pkg/plugins: don't share plugin server between tests
    ee9fe2c838 ci(buildkit): match moby go version for buildkit tests
    3379414c76 vendor: github.com/moby/buildkit@v0.11 (0a15675)
    5e4878ed2b Dockerfile/shell: install compose cli plugin
    ecfa4f5866 ci(bin-image): add SHA-based tags
    ce2e6b5cda Bump container-device-interface dependency to v0.6.0
    0a126a85a4 ci(bin-image): fix meta step
    749d7449f9 ci(bin-image): fix typo
    1686540594 ci(bin-image): don't set tags when pushing by digest
    83477ce8d0 client: remove custom "headers" type, and use "http.Header" instead
    e4ce676d3d client: ServiceCreate, ServiceUpdate: omit "version" header on API >= 1.30
    d29240d9eb libnet: Return a 403 when overlay network isn't allowed
    21dcbada2d libnet: Return proper error when overlay network can't be created
    93853eca94 pkg/fileutils: GetTotalUsedFds(): slight optimization for macOS
    c5c977855d registry: session.searchRepositories(): return typed error, and small cleanup
    68ebfa2f18 registry: session.searchRepositories(): log actual search URL
    27698f1d13 registry: ParseSearchIndexInfo: remove redundant error-handling
    a0e1155b28 daemon/containerd: fix assignment to entry in nil map during commit
    6b1b71ced4 Disable tls when launching dockerd through hack/make.sh
    079a9d4562 Sort unconsumed build arguments before usage
    41261ea4ec ci: push bin image to Docker Hub
    5b3acc15d1 libnetwork: drop legacy driver cruft
    f9a83daebb libnetwork: delete package bitseq
    8b167535db libnetwork: delete package idm
    7366e44019 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230707182847-6f78b8199b05
    a490248f4d daemon: daemon.prepareMountPoints(): fix panic if mount is not a volume
    c90229ed9a api/types: move system info types to api/types/system
    3aef732e61 Do not drop effective&permitted set
    d519bde5da libnet/drivers: stop passing config to drivers...
    1980deffae libn: refactor platform driver registration
    c87c4b5bbf Add Albin Kerouanton (@akerouanton) as maintainer
    0066138379 Add Kevin Alvarez (@crazy-max) as maintainer
    d8056ddecd Add Laura Brehm (@laurazard) as maintainer
    2216d3ca8d Add health start interval
    2ab2503b6c Put integration daemon socket in /run
    914888cf8b Improve test daemon logging
    51bcf5954f libnet/d/overlay: parse VNI list w/o allocating
    96ca669fa4 libnet/d/overlay: extract VNI option parsing...
    a940462fc7 libnetwork/drivers/bridge: minor cleanups for iptables funcs
    6817b3697b libnetwork/iptables: signalHandler(): use s switch
    51bbcdb3c5 libnetwork/iptables: merge Conn.initConnection into newConnection
    0921360133 libnetwork/iptables: checkRunning(): use early return
    98592608d4 libnetwork/iptables: remove unused Ebtables const
    126525c03e libnetwork/iptables: TestReloaded(): minor cleanup
    b216669a02 libnetwork/iptables: TestPassthrough(): skip without firewalld
    753c190ef9 libnetwork/drivers/bridge: rename vars that collided with type
    d1ebe6689f libnetwork/iptables: errors should not be capitalized
    afe8d3076f libnetwork/iptables: remove ErrIptablesNotFound
    16f80f649b libnetwork/iptables: ChainInfo: don't pass whole IPTable as value
    42653787ea libnetwork/iptables: ChainInfo.Output(): explicitly suppress errors
    ea4baa24b1 libnetwork/iptables: IPTable.RemoveExistingChain() slight refactor
    04e54c6bb0 libnetwork/iptables: IPTable.exists(): return early on error
    829374337f libnetwork/iptables: don't use err.Error() if not needed
    9717734d1c libnetwork/iptables: IPTable.NewChain() minor cleanups
    9bb0e7a5ee libnetwork/iptables: inline some args
    564a13285f libnetwork/bitmap: improve documentation
    0fc6bf9a6e libn/d/o/ovmanager: assign vxlans using bitmap pkg
    f0127f1617 libn/d/o/ovmanager: inline obtainVxlanID method
    e97492e579 libn/d/o/ovmanager: drop mutex from network type
    6fb6635ceb libn/d/o/ovmanager: make mutexes private fields
    cdcb7c28c5 integration: disable iptables in parallel tests
    9cee34bc94 pkg/plugins: make unit test less time sensitive
    3721a525ce daemon: initBridgeDriver(): pass BridgeConfig, instead of daemon config
    b8220f5d0d daemon/config: move MTU to BridgeConfig
    11abd0742e dockerd: "--mtu": update description, hide on Windows and warn if set
    6944d2dddb libnetwork: TestBoltdbBackend(): use t.TempDir()
    2fd88c7ca4 libnetwork: inline store config options
    cda187222e libnetwork/config: remove options that were only used in tests
    bc80c5d067 libnetwork: rename vars that shadowed with pkg vars and imports
    332ffe8d74 libnetwork/networkdb: NetworkDB.Watch(): remove unused "key" argument
    4c4149a09c libnetwork/internal/kvstore: remove unused Delete()
    4d09e60f5b libnetwork/internal/kvstore: remove unused Watch() method
    c14a9f5b3d libnetwork/datastore: un-export Mutex
    e21e802fc6 libnetwork/datastore: remove unused DeleteTree() method
    58d2f21dae libnetwork/datastore: remove unused PutObject(), DeleteObject()
    a3b0181503 libnetwork/datastore: remove Watch(), Watchable(), RestartWatch()
    2409a36e29 libnetwork/datastore: cache.get(): remove unused "key" argument
    824abbf8d9 libnetwork/datastore: remove redundant datastore.sequential
    e9b6965079 libnetwork/datastore: remove unused datastore.Active()
    b32e41f016 libnetwork/internal/kvstore/boltdb: un-export Mutex
    7e7c7bbc17 libnetwork/internal/kvstore/boltdb: BoltDB.List(): minor cleanup
    95b96eebdd libnetwork/internal/kvstore/boltdb: BoltDB.Get(): don't shadow error
    fb61b07bcf libnetwork/internal/kvstore/boltdb: BoltDB.Exists(): fix error handling
    c94ccd4207 libnetwork/internal/kvstore/boltdb: minor cleanup/refactor
    acfd3934a7 libnetwork/internal/kvstore: AtomicDelete(): remove unused "deleted" return
    b576682bdc libnetwork/internal/kvstore: AtomicPut(): remove unused "created" return
    c37b58bbc3 libnetwork/internal/kvstore: remove unused WriteOptions
    e515bef423 libnetwork/internal/kvstore: remove unused WatchTree and NewLock methods
    a373983a86 libnetwork/internal/kvstore: fix some linting issues
    05988f88b7 libnetwork/internal/kvstore: remove unused Config options
    ec11aea880 pkg/jsonmessage: use string-literals for easier grep'ing
    fded42c3bd pkg/ioutils: use string-literals for easier grep'ing
    1da079f211 pkg/idtools: use string-literals for easier grep'ing
    84000190d3 opts: use string-literals for easier grep'ing
    ddec605aef integration: use string-literals for easier grep'ing
    96a1c444cc libnetwork: use string-literals for easier grep'ing
    0db4a32b9c daemon/cluster: use string-literals for easier grep'ing
    4e69e16fde client: use string-literals for easier grep'ing
    c3d533f37f cli/debug: use string-literals for easier grep'ing
    02815416bb daemon: use string-literals for easier grep'ing
    6331a3a346 integration-cli: use string-literals for easier grep'ing
    2f61620339 builder/builder-next: use string-literals for easier grep'ing
    202907b14c builder/dockerfile: use string-literals for easier grep'ing
    a1c9a686b0 api: use singleflight for /info endpoint
    8846c7e0ae daemon/cluster/executor/container: fix mixed pointer/value receiver
    8ea78b34ab rename some variables that shadowed imports or package types
    9f4acceb6a remove redundant alias for libnetwork/datastore imports
    cffe563d4d pkg/system: remove windows stubs for MkDev/MkNod
    6b6fed06b1 integration: don't use pkg/system MkNod/mkDev
    94c975e25a api: info: don't use ad-hoc type for compatibility with old api versions
    9ffca1fedd libnetwork/drivers/remote: rename vars that collided
    f6258f70cb docs: api  v1.28 - v1.40: add missing "force" query arg on plugin disable
    892e9f2c23 docs: api v1.41: add missing "force" query arg on plugin disable
    a4bdfb963f docs: api v1.42: add missing "force" query arg on plugin disable
    85ccb25eb8 docs: api v1.43: add missing "force" query arg on plugin disable
    aba8e04ab1 docs: api: amend changelog for API 1.28 for "force" option
    7055244547 docs: api v1.32 - v1.40: remove outdated information from ServerVersion
    ed0dbb8518 docs: api v1.41: remove outdated information from ServerVersion
    b770a50dee docs: api v1.42: remove outdated information from ServerVersion
    18d77ff455 docs: api v1.43: remove outdated information from ServerVersion
    92f1ddaf0a api: remove outdated information from ServerVersion
    e8f206972a docs: api v1.42: remove "ClusterStore" and "ClusterAdvertise" fields
    e58a60902c docs: api v1.43: remove "ClusterStore" and "ClusterAdvertise" fields
    3c905d0db9 api: remove "ClusterStore" and "ClusterAdvertise" fields
    e4d809b2b0 vendor: github.com/tinylib/msgp v1.1.8
    f379af6d17 vendor: github.com/containerd/cgroups/v3 v3.0.2
    e638351ef9 c8d/prune: Handle containers started from image id
    a93298d4db c8d/prune: Exclude dangling tag of the images used by containers
    a6d5db3f9b c8d/softDelete: Deep copy Labels
    2b0655a71a c8d/softDelete: Extract ensureDanglingImage
    a96e6044cc testutil/environment: Add GetTestDanglingImageId
    13472c6cf1 daemon/config: remove unused CommonConfig.Context
    40908c5fcd libnetwork/drivers: inline capabilities options
    97285711f3 libnetwork/drivers/overlay: Register does not require DriverCallback
    a718ccd0c5 libnetwork/drivers: remove unused "config" parameters and fields
    264dbad43a gha: don't fail if no daemon.json is present
    ec79d0fc05 pkg/fileutils: GetTotalUsedFds(): use fast-path for Kernel 6.2 and up
    eaa9494b71 pkg/fileutils: GetTotalUsedFds: reduce allocations
    03390be5fa pkg/fileutils: add BenchmarkGetTotalUsedFds
    252e94f499 pkg/fileutils: GetTotalUsedFds(): don't pretend to support FreeBSD
    7747327561 AUTHORS,.mailmap: update with recent contributors
    60d2eeaa5b MAINTAINERS: update my email
    a764cd5a40 pkg/chrootarchive: format code with gofumpt
    210932b3bf daemon: format code with gofumpt
    e236994b76 daemon/snapshotter: format code with gofumpt
    9213e35011 daemon/containerd: format code with gofumpt
    4b3900a257 daemon/logger: format code with gofumpt
    050de1e4f6 daemon/logger/journald: format code with gofumpt
    a083677af2 daemon/logger/local: format code with gofumpt
    74db0e9339 daemon/logger/loggertest: format code with gofumpt
    48124bac18 daemon/logger/loggerutils: format code with gofumpt
    011a32a4ad daemon/logger/gelf: format code with gofumpt
    7ed5a30b5c daemon/logger/splunk: format code with gofumpt
    bb5a1eb99d daemon/logger/jsonfilelog: format code with gofumpt
    1437037ed2 daemon/logger/awslogs: format code with gofumpt
    f930559076 pkg/stdcopy: format code with gofumpt
    1216328c2d pkg/plugins: format code with gofumpt
    651086d1d9 pkg/jsonmessage: format code with gofumpt
    1291bbfa50 pkg/capabilities: format code with gofumpt
    79af23e1ea pkg/ioutils: format code with gofumpt
    ac1514abf4 reference: format code with gofumpt
    99968eec3f restartmanager: format code with gofumpt
    f18ac2d0bc quota: format code with gofumpt
    b2663a0f73 layer: format code with gofumpt
    83b2daca6a plugin: format code with gofumpt
    169fab5146 profiles/seccomp: format code with gofumpt
    4175a550fd libcontainerd: format code with gofumpt
    091991606a opts: format code with gofumpt
    784ba59a08 registry: format code with gofumpt
    dd5ea7e996 libnetwork: format code with gofumpt
    bba21735bf libnetwork/ipamutils: format code with gofumpt
    0b75c02276 libnetwork/resolvconf: format code with gofumpt
    801cd50744 libnetwork/portallocator: format code with gofumpt
    6187ada21f libnetwork/options: format code with gofumpt
    882f7bbf1f libnetwork/osl: format code with gofumpt
    32e716e848 libnetwork/networkdb: format code with gofumpt
    65e2149b3e libnetwork/netutils: format code with gofumpt
    1cd937a867 libnetwork/etchosts: format code with gofumpt
    540e150e4e libnetwork/cmd: format code with gofumpt
    fffcbdae4c libnetwork/iptables: format code with gofumpt
    6f3fcbcfe1 libnetwork/ipam(s): format code with gofumpt
    eb6437b4db libnetwork/datastore: format code with gofumpt
    defa8ba7b4 ibnetwork/bitmap: format code with gofumpt
    f349754b55 libnetwork/bitseq: format code with gofumpt
    3af2963c74 libnetwork/drvregistry: format code with gofumpt
    dc17f5e613 libnetwork/drivers/remote: format code with gofumpt
    485977de57 libnetwork/drivers/windows: format code with gofumpt
    2cc5c2d2e6 libnetwork/drivers/overlay: format code with gofumpt
    e74028554e libnetwork/drivers/macvlan: format code with gofumpt
    7b02ccda86 libnetwork/drivers/ipvlan: format code with gofumpt
    17a35bc645 libnetwork/drivers/bridge: format code with gofumpt
    d2a6956afb daemon/graphdriver: format code with gofumpt
    8d923c60b9 daemon/config: format code with gofumpt
    425ccb1241 runconfig: format code with gofumpt
    c0edf0861b integration/system: format code with gofumpt
    5cc1c6eca0 integration/service: format code with gofumpt
    bb5ace2efb integration/plugin: format code with gofumpt
    9bd3e011e1 integration/internal: format code with gofumpt
    89a4e6b889 integration/container: format code with gofumpt
    846bcd7dd1 distribution: format code with gofumpt
    b7f5db432f daemon/images: format code with gofumpt
    2d12dc3a58 daemon/cluster: format code with gofumpt
    316c7331eb pkg/parsers: format code with gofumpt
    fb017754e1 pkg/system: format code with gofumpt
    ee2ac6c205 cmd/dockerd: format code with gofumpt
    47276bdb28 cmd/docker-proxy: format code with gofumpt
    0af6d9e291 client: format code with gofumpt
    3146ecbae6 api/types: format code with gofumpt
    b9833a2059 builder: format code with gofumpt
    540d6539be builder/remotecontext: format code with gofumpt
    3e0565e17c builder/dockerfile: format code with gofumpt
    9d4abbbc30 builder/builder-next: format code with gofumpt
    6592646632 api/server: format code with gofumpt
    5e9a354ff1 pkg/tarsum: format code with gofumpt
    2aac054f52 pkg/authorization: format code with gofumpt
    f7552f1de4 pkg/archive: format code with gofumpt
    7c697f58f2 Makefile: remove unused BUILD_APT_MIRROR
    a1d2132bf6 Dockerfile: use default apt mirrors
    225e2562c9 integration-cli: format code with gofumpt
    a31411c679 testutil: format code with gofumpt
    4c281fb29a volume: format code with gofumpt
    a08abec9f8 Update dockerd to support JSON logging format
    b335e3d305 seccomp: add name_to_handle_at to allowlist
    6d3bcd8017 c8d/images: handle images without manifests for default platform
    8caf63896c docs: document more buildx targets
    647c2a6cdd Restore active mount counts on live-restore
    d8bc5828cd gha: Setup Runner: add missing sudo
    fdc9b7cceb remove name_to_handle_at(2) from filtered syscalls
    9f6dbbc7ea Dockerfile: make cli stages more resilient against unclean termination
    19bd0730ef vendor: github.com/moby/swarmkit/v2 v2.0.0-20230627115642-ad0f3ae162fa
    e2dad6c3ff Revert "Temporarily skip DCO check"
    1741771b67 Skip cache lookup for "FROM scratch" in containerd
    7d7225fae6 Temporarily skip DCO check
    e60cda7051 libnetwork/internal/kvstore/boltdb: fix linting issues
    d18b89ced6 libnetwork/internal/kvstore: remove some unused code
    b873d70369 replace libkv with local fork
    5d25143ef3 libnetwork/kvstore: rewrite code for new location
    dd1c95edcd integration/windows: Unskip some kill tests
    3c1de2e667 pkg/homedir: deprecate Key() utility
    ddd9665289 pkg/homedir: deprecate GetShortcutString() utility
    6876e45f9e pkg/homedir: unify implementations
    0aca7f2a0d pkg/homedir: use os.UserHomeDir()
    0215a62d5b integration-cli: don't use pkg/homedir in test
    76d8bfdff4 testutil/environment: remove Execution.OSType field
    325786430b testutil/environment: remove unused TEST_OSTYPE env-var
    0fe2ac0437 testutil/environment: rename var that collided with import
    74da6a6363 Switch all logging to use containerd log pkg
    cdb1293eea Fix missing Topology in NodeCSIInfo
    165dfd6c3e daemon: fix restoring container with missing task
    786c9adaa2 daemon: fix double-unlock in health check probe
    3b28a24e97 daemon: fix panic on failed exec start
    e010223186 contrib/busybox: Update to FRP-5007-g82accfc19
    21e50b89c9 builder: pass host-gateway IP as worker label
    21c0a54a6b c8d: mark stargz as requiring reference-counted mounts
    4d831949a7 Dockerfile: update buildx to v0.11.0
    fc94ed0a86 don't cancel container stop when cancelling context
    19d860fa9d testing: temporarily pin docker-py tests to use "bullseye"
    cfa08f8366 builder-next: enable OTLP tracing for history records
    98a44bb18e update go to go1.20.5
    3ba67ee214 daemon: registerName(): don't reserve name twice
    2a6ff3c24f Use OCI "History" type instead of inventing our own copy
    59b5c6075f pkg/rootless: remove GetRootlessKitClient, and move to daemon
    3cc5d62f8a run `getent` with a noop stdin
    71589848a0 daemon: test runtimeoptions runtime options
    a6048fc792 client: add WithUserAgent() option
    197b0b16e3 vendor: github.com/sirupsen/logrus v1.9.3
    038a361a91 daemon/cluster: convert new BindOptions
    d41d2c3751 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230607145746-36334ed1876
    32d58144fd c8d: Use reference counting while mounting a snapshot
    8a094fe609 daemon: ensure OCI options play nicely together
    dea870f4ea daemon: stop setting container resources to zero
    8c4dfc9e6a vendor: github.com/rootless-containers/rootlesskit v1.1.1
    0b1c1877c5 update RootlessKit to v1.1.1
    9ff169ccf4 daemon: modernize oci_linux_test.go
    0f9c8e684a Dockerfile: Move dockercli to base-dev
    5433b88e2d hack/cli.sh: Quiet origin cleanup
    800ea039ec contrib/check-config: move xt_bpf check to overlay section
    49f76a34b5 Dockerfile/shell: Install buildx cli plugin
    17c99f7164 Dockerfile: Use separate cli for shell and integration-cli
    1910fdde81 contrib/check-config: check for xt_bpf
    d63569c73d builder-next: Set moby exporter as default
    4295806736 c8d/handlers: Handle error in walkPresentChildren
    ff2342154b Dockerfile: use COPY --link for source code as well
    0f6eeecac0 daemon: consolidate runtimes config validation
    d222bf097c daemon: reload runtimes w/o breaking containers
    0b592467d9 daemon: read-copy-update the daemon config
    742ac6e275 daemon: make config reloading more transactional
    038449467e Update BuildKit registry config on daemon reload
    982e4fb448 api/server: get features from a callback fn
    d099e47e00 containerd: add c8d version and storage-driver to User-Agent
    a6da1480b5 dockerversion: DockerUserAgent(): allow custom versions to be passed
    9a1f2e6d7c dockerversion: remove insertUpstreamUserAgent()
    ff40d2d787 dockerversion: simplify escapeStr()
    eb9a5392bc dockerversion: add a basic unit-test
    66137ae429 containerd: set user-agent when pushing/pulling images
    06aaf87aab vendor: github.com/moby/swarmkit/v2 v2.0.0-20230531205928-01bb7a41396b
    637ca59375 Dockerfile: use COPY --link to copy artifacts from build-stages
    4d3238dc0b c8d/load: Don't unpack pseudo images
    b08bff8ba3 c8d/load: Use walkImageManifests
    5210f48bfc c8d/list: Use walkImageManifests
    fabc1d5bef c8d: Add walkImageManifests and ImageManifest wrapper
    1178319313 libn: fix resolver restore w/ chatty 'iptables -C'
    50eb2d2782 libnetwork: fix sandbox restore
    18bf3aa442 libnetwork: log why osl sandbox restore failed
    ed32f5e241 Make sure the image is unpacked for the current snapshotter
    d58df1fc6c Update blogpost URL
    44124ab6b0 builder/remotecontext: remove CachableSource, NewCachableSource
    5efe72415d remove Dockerfile.e2e
    fd72b134d5 update generated files
    735537d6b1 replace gogofast with gogofaster extension
    1eaea43581 fix protos and "go generate" commands
    7daaa00120 hack: generated files update and validation
    f1ca793980 use tools build constraint for proto dependencies
    1e55ace875 Add oci index and layout files to exported tars
    487ea81316 Fix npe in exec resize when exec errored
    9a692a3802 libn/d/overlay: support encryption on any port
    e410e27547 builder/remotecontext: remove mimeTypes struct, use consts
    b42e367045 vendor: github.com/opencontainers/image-spec v1.1.0-rc3
    37d4b0bee9 builder/remotecontext: deprecate CachableSource, NewCachableSource
    fb7ec1555c libcontainerd: work around exec start bug in c8d
    79ca6630d4 vendor: github.com/moby/buildkit v0.11.7-0.20230525183624-798ad6b0ce9f
    5045a2de24 Support recursively read-only (RRO) mounts
    3512b04093 vendor: github.com/containerd/go-runc v1.1.0
    b9b8b6597a c8d/inspect: Fill `Created` time if available
    f17c9e4aeb c8d: ImageService.softImageDelete: rename var that collided with import
    df5deab20b c8d: ImageService.softImageDelete: use OCI and containerd constants
    9b9c5242eb daemon: lock in snapshotter setting at daemon init
    53d1b12bc0 hack/make/.binary: don't use "netgo" when building Windows binaries
    a7bc65fbd8 c8d/pull: Use same progress action as distribution
    6506579e18 integration: Add TestImageInspectEmptyTagsAndDigests
    a93aadc2e6 hack: Rename .ensure-emptyfs to .build-empty-images
    3a31f81838 hack/ensure-emptyfs: Create dangling image
    4373547857 Add testenv.UsingSnapshotter utility
    d3d2823edf Dockerfile: temporarily skip CRIU stage
    86108812b8 vendor: github.com/mistifyio/go-zfs/v3 v3.0.1
    ddd67b2535 Make image save more like the OCI layout for blobs
    871cf72363 libnetwork: check for netns leaks from prior tests
    6d79864135 libnetwork/osl: restore the right thread's netns
    d4f3858a40 libnetwork: leave global logger alone in tests
    0cc6e445d7 libnetwork: make resolver tests less confusing
    411a9e1b86 daemon: remove devicemapper driver-warnings
    424a1c5d21 daemon: remove warning for overlay/overlay2 without d_type
    ab35df454d remove pre-go1.17 build-tags
    34964c2454 c8d/list: Show layerless images
    61757032da d/graphdriver/vfs: fix unit test
    6e4bd3bbc2 vendor: github.com/spf13/cobra v1.7.0
    6690d2969c pkg/archive: bail if setting xattrs is unsupported
    0cdfd5f275 pkg/system: return rich errors from L(g|s)etxattr
    41356227f2 libnetwork: just forward the external DNS response
    6d139e5e95 build: use daemon id as worker id for the graph driver controller
    668af4be82 ci(bin-image): distribute build across runners
    1be26e9f0c api/inspect: Fix nil RepoTags and RepoDigests
    f450ea64e6 fix: `docker pull` with platform checks wrong image tag
    f3645a2aa3 reorder load funcs to match newServiceConfig()'s order
    3b15156e4d add mirror to daemon reload test for insecure registries
    0d8087fbbc Remove Upstart scripts
    967c7bc5d3 api/server: allow empty body for POST /commit again
    3ceb3810d7 client: don't marshal typed nils in request body
    ae737656f9 Remove Upstart and cgroups bits from Debian sysvinit script
    c2630c93f2 Update vendoring
    dedf5747cc Remove need to set Capabilities for cdi driver
    7ec9561a77 Add support for CDI devices to docker daemon under linux
    5a200ade7c Rename daemon/devices_liunx.go to daemom/devices.go
    484785456c update containerd binary to v1.7.1
    348a79958d c8d: The authorizer needs to be set even if AuthConfig is empty
    2f0ba0a7e5 more robust dockerd-rootless-setuptools.sh
    135d8f04f9 ci: bin-image workflow
    ae1ca67178 bin-image bake target
    3309e45ca1 c8d: Don't create authorizer for empty AuthConfig
    2ad499f93e c8d/authorizer: Default to docker.io
    bd6868557d c8d/builder: implement cache
    7821d2d788 vendor: github.com/docker/distribution v2.8.2
    e46674b6a7 c8d: implement classic builder
    8d76acfe6c testutil: replace uses of client.IsErrNotFound
    56fb56ccf0 integration: update error-assertions in tests
    0538cdd226 integration-cli: update error-assertions in tests
    66ff1e063e client: update error-assertions in tests
    685b3d820a client: make IsErrNotFound an alias for errdefs.IsNotFound
    9e817251a8 libnetwork/docs: fix broken link
    17882ed614 libnetwork: update example in README.md
    4603b6d6b6 c8d: fix image history for dangling images
    4e0319c878 [chore] clean up reexec.Init() calls
    9e43c11480 AUTHORS: regenerate
    5fee4439a0 .mailmap: update with my new email
    e8be792130 c8d: fix missing image history
    e3e715666f pkg/aaparser: deprecate GetVersion, as it's no longer used
    71d7908656 added alias validation
    ecaab085db profiles/apparmor: remove use of aaparser.GetVersion()
    f445ee1e6c contrib/apparmor: remove remaining version-conditionals (< 2.9) from template
    307b09e7eb fixing consistent aliases for OCI spec imports
    2ad37e1832 daemon: handleContainerExit(): add execDuration in attributes
    cad97135b3 c8d: implement missing image delete logic
    de363f1404 daemon: handleContainerExit(): use logrus.WithFields
    fb96b94ed0 daemon: remove handling for deprecated "oom-score-adjust", and produce error
    316781be48 api/types/container: remove deprecated ContainerChangeResponseItem
    9c14f98583 api/types: remove deprecated AuthConfig
    55608d8381 pkg/system: remove deprecated IsProcessAlive, IsProcessZombie, KillProcess
    a3b12ec420 pkg/system: remove deprecated DefaultPathEnv()
    dc76b90705 pkg/system: remove deprecated MemInfo, ReadMemInfo()
    7d0488b11e pkg/ioutils: remove deprecated TempDir() alias
    152c482fee pkg/platform: remove deprecated OSType const
    913b0f51ca API: omit deprecated VirtualSize field for API v1.44 and up
    fdc7a78652 docs/api: version-history: also mention /system/df for VirtualSize
    fd0b109bf7 API: bump version to 1.44
    43b1afb2cf make chownComment easy to read
    7665feeb52 hack: enable Go modules when building dockerd and docker-proxy
    5400366b90 Set BuildKit version using buildinfo
    c33b31116c daemon/graphdriver: remove isDeprecated() utility
    dc11d2a2d8 remove deprecated devicemapper storage-driver
    1e195acee4 libn/d/overlay: stop programming INPUT ACCEPT rule
    eb0edeafdd api: swagger: add missing "force" query arg on plugin disable
    ea4dd1bbf6 boltdb/bolt is not maintained. Used bbolt
    6c0e0d6250 Allow client to set boltdb timeout
    a0f6d0798a Do not return boltdb bucket not found error
    deb21faad0 Add support for etcd authentication
    cc0ed694ee fix typo
    fbdb24ec6a Fix typo in error text
    dcf8828165 Return store.ErrKeyExists on AtomicPut
    002f9c37ca Synchronize boltbd libkv apis
    15e5d4067a Change unsupported call error in boltdb backend to use general store error
    3b5fb3ec87 Remove docs in libkv.go
    2603af65e5 Migration to the new Etcd client
    f06f78e638 boltDB AtomicDelete fails for non-existent key
    0b81042dc3 Add transient connection option to bolt db
    7225aba3af add TTL to consul lock using store.LockOptions and add tests for the Lock ttl behavior
    1f9cf17713 Fix AtomicPut panic if previous KVPair is not nil and key not exists in boltdb
    599deba8c7 nits and refactor for etcd tls config
    cc9e627f8e Add etcd TLS client code and update README.md. Signed-off-by: Adam Thornton <adam.thornton@gonkulator.io>
    64eb25dff9 Honoring ConnectionTimeout in boltdb
    3ec6dfa346 Refactor libkv to not directly import storage backends
    f817826408 Create dir first before opening data file of boltdb
    29af4e0f27 BoltDB backend support for libkv
    06f01227c5 change heartbeat/ephemeral combination to use a single ttl field
    f26e4f4c52 Minor fix of store comment
    6b43181cfa Notify user of supported backend storage
    a961b70b2b Remove unused type WatchCallback
    06151b8a4d add top-level godoc: sample some parts of the README
    a2d4e1c246 API Change: AtomicPut with previous = nil is create.
    fcb98254b1 Use Backend type for stores
    79c320c1cf remove testify dependency through mock package
    48f5dca2ce Remove logging in library
    dbc1a6fa9a refactor and move store backends in sub-packages

Bumping docker-cli to version v25.0.0-7-g01f933261, which comprises the following commits:

    21c12847b docs: move base command to docker.md
    22e1f2cbf docs: fix broken links to alias pages
    68abf14c1 vendor: github.com/docker/docker v25.0.0
    9e1e07657 docs: add documentation for CDI
    cdb1c105f vendor: github.com/docker/docker v25.0.0-rc.3
    3df149545 docs(plugins): fix typos and formatting
    22bbdc798 docs: add "builder" key to full daemon.json example
    d2efc5b09 deprecate old API versions (1.23 and lower)
    508346ef6 plugins: fix plugin socket being closed before use
    f722e07c6 gha: update to use macos-12 runners
    5f6c55a72 plugins: don't handle signal/notify if TTY
    26560ff93 Revert "plugins: run plugin with new process group ID"
    37f551566 docs: fix broken link to tmpfs (missing anchor)
    b35361e8d docs: regenerate stubs for non-canonical commands
    dfa2930af ci: Add bin-image workflow
    21c253605 vendor: golang.org/x/sys v0.16.0
    a6774de68 docs: rename cli reference aliases to canonical
    cf9d3692a docs: remove empty cli reference stubs
    d868dca00 vendor: github.com/docker/docker v25.0.0-rc.2
    1609916f2 Revert "Dockerfile/binary: Output the binary directly"
    ff25c4334 Revert "ci: Add bin-image workflow"
    ef5e5fa03 plugins: run plugin with new process group ID
    6d0b329b0 cli-plugins: use non-abstract socket on darwin
    dbf992f91 cli-plugins: move socket code into common package
    8b6ffbdf7 vendor: github.com/containerd/containerd v1.7.12
    ccc7ad2f2 Dockerfile: update buildx to v0.12.1
    fdcb78a0f Dockerfile: update docker compose to v2.24.0
    15d4c99f3 ci: Add bin-image workflow
    ecf338f43 scripts/build: Handle VERSION containing git ref
    6ad07f2a4 Dockerfile/binary: Output the binary directly
    0e37dd49f cmd/docker: registerCompletionFuncForGlobalFlags: take store.Store as argument
    c0a0b05dc cli-plugins: helloworld: rename var that collided with import
    11b2e871b cmd/docker: move main() to the top
    4dc2c895b cli-plugins/manager: getPluginDirs: take ConfigFile as argument
    79992184e docs: dockerd: rephrase environment-variables intro
    4d2b4e7fb docs: dockerd: fix stray column-separateor in env-var table
    a5e5563f1 vendor: github.com/docker/docker-credential-helpers v0.8.1
    4f4950886 update to go1.21.6
    26f59b2f6 cli/compose/loader: use golden.Assert() for readability
    9db56ea2f vendor: golang.org/x/tools v0.16.0, golang.org/x/mod v0.14.0
    efae960e5 vendor: golang.org/x/net v0.19.0
    996cce909 vendor: golang.org/x/sync v0.6.0
    4b10e5525 vendor: github.com/google/go-cmp v0.6.0
    1ebc233b4 vendor: github.com/creack/pty v1.1.21
    b4fe77a12 vendor: github.com/docker/go-connections v0.5.0
    909111b3a docs: fix incorrect heading levels in docker run reference
    b43ea528b vendor: github.com/docker/docker v25.0.0-rc.1
    6d0aa0a52 cli/command/container: parseSecurityOpts: fix --security-opt seccomp=builtin
    9be600a97 Docker build command docs refresh
    878b1c55b docs: add links to volume ls, network ls, stack ps formatting examples
    f0edc7953 change back nolint -> nosec
    c1016c05c vendor: github.com/mitchellh/mapstructure v1.5.0
    58524685d vendor: github.com/mattn/go-runewidth v0.0.15
    1e38fc3b9 vendor: github.com/klauspost/compress v1.17.4
    0fa3a365f vendor: github.com/docker/docker v25.0.0-beta.3
    d1a51582e update authors and mailmap
    60af715d6 id and name filter in service ls is the prefix not a part
    90a1887d3 Fix wrong docker run command
    64e9cadd1 Add networking reference link
    924ec7f4c docs/deprecated: update "oom-score-adjust" status for daemon
    800a728e1 deprecated: fix anchor and add missing version
    c1c6198ae docs: deprecate short cid in Aliases field
    336787c50 vendor: github.com/docker/docker 7bc56c53657d (v25.0.0-dev)
    53a129e3d docs(plugins): remove Weave engine network plugin
    3ecd6b6c7 docs(plugins): remove inline CSS markup
    a4d805f9c docs(plugins): add Kathará engine network plugin
    1dcd5487f docs(plugins): update Docker Store to Docker Hub
    46355a194 export RunStat, StatsOptions, and add Filters option
    e9a5590ad cli/command/container: statsOptions: add GoDoc
    b642078c8 prevent "docker stats" from hanging if the initial API call fails
    633ba88c2 cli/command/container: runStats(): move code to where it's used
    5ed6c128e cli/command/container: runStats(): don't register unused event handlers
    2389768fb cli/command/container: runStats(): minor cleanup and fixes
    4d434dc69 vendor: github.com/docker/docker 388216fc45ab (v25.0.0-dev)
    5eac07b10 update typos and style in docs
    6fd4cff1f docs: minor editorial improvements, typo fixes
    0de84f019 vendor: golang.org/x/crypto v0.17.0
    3cf0bf84a vendor: golang.org/x/crypto v0.16.0
    36d4db27d vendor: golang.org/x/text v0.14.0
    3d70100d5 vendor: golang.org/x/sys v0.15.0
    70216b662 add //go:build directives to prevent downgrading to go1.16 language
    88e647435 build(deps): bump github/codeql-action from 2 to 3
    ca9ff8daf docs: run-reference: use table for health options
    77e67a0f9 docs/deprecated: mark logentries logging-driver as "removed"
    8f13b0416 cli/command: remove "logentries" driver from tests and fixtures
    d79dd7c53 docs, man: remove logentries logging-driver
    b14094df5 contrib/completion: remove logentries logging-driver
    f63065a58 vendor: github.com/docker/docker f3cc93630ed8 (v25.0.0-dev)
    fa1914426 vendor: github.com/docker/docker v25.0.0-beta.2
    e81a66661 docs/deprecated: mark logentries log-driver for removal
    f8dd8f074 docs: refresh --publish, add --publish-all
    5400a48aa Plumb contexts through commands
    aec7ec7f6 vendor: github.com/docker/docker 92884c25b394 (v25.0.0-dev)
    0a3a16d2b vendor: github.com/containerd/containerd v1.7.11
    54c103aff vendor: upgrade OpenTelemetry to v1.19.0 / v0.45.0
    d49970590 vendor: github.com/felixge/httpsnoop v1.0.4
    7af509c7f cli/command: merge DockerCliOption and InitializeOpt types
    1554ac3b5 cli-plugins: terminate plugin when CLI exits
    2e394eb5f docs: rewrite section on working directory
    4a8451455 docs: rewrite section on setting user id
    259aa9005 docs: rewrite section on filesystem mounts
    52716c813 docs: move --tmpfs to docker run reference
    5ede4c82a docs: minor improvements to the healthcheck section
    7585d66a0 docs: rewrite section on overriding environment variables
    3eeac2059 docs: rewrite section on exposing ports
    0a94d85cd docs: fix typo in "network create" docs
    b01e28752 docs: rewrite section on default entrypoint
    c695ad9d7 docs: rewrite section on overriding image defaults
    4a6cde885 docs: move --log-driver to docker run reference
    72df1960e docs: move --cgroup-parent to docker run reference
    9e75a4cf6 docs: move --init to docker run reference
    92c664b0d docs: move info about --security-opt to docker run reference
    f98444490 docs: move --rm to docker run reference
    32189ca27 docs: improve description about container exit codes
    dbffa0d12 docs: move --restart to docker run reference
    73620975d docs: simplify container networking intro
    5dd6e9a4d docs: move --ipc to docker run reference
    ff62bf47b docs: move --uts to docker run reference
    d66fe7881 docs: move --pid to docker run reference
    03dc8832e docs: improve docs on container identification
    fad227d3f docs: move info about fg/bg flags to run reference
    2f48f41fc docs: improve introduction to docker run
    3f519b824 docs/deprecated.md: add version for "-g" / "--graph" removal
    6dc92b667 docs/deprecate.md: add version for devicemapper removal to table
    a682b8e65 Permit '=' separator and '[ipv6]' in --add-host
    626e64ccf build(deps): bump actions/setup-go from 4 to 5
    0cf7bff0b vendor: github.com/docker/docker 4046ae5e2fd4 (v25.0.0-dev)
    bdb45a9c2 update to go1.21.5
    afc62d8d1 update to go1.21.4
    8bbc97c86 prune: fix build cache prune warning
    e93ec2f6a Fix typo in dockerd reference documentation
    5a0470888 vendor: github.com/docker/docker 029519a1498b (v25.0.0-dev)
    aa9fdb4dd vendor: github.com/gorilla/mux v1.8.1
    a431b1dda exec.md: remove misleading part
    b62b5d48f Readme: remove reference to "Docker EE"
    354f62f0c docs: reference/commandlin/cli: remove redundant italic
    e2626200a docs: remove "{% raw %}" / "{% endraw %}" Jekyl (liquid) leftovers
    174cbb588 docs/man: fix -name flag with single hyphen
    539537ddf vendor: github.com/docker/docker cfdca8dc1d4c (v25.0.0-dev)
    6a74a63ee Dockerfile: update ALPINE_VERSION to 3.18
    35c6e915d Dockerfile: update buildx to v0.12.0
    6468c63c8 docs: update debian examples to use bookworm
    0d95231cc Dockerfile: use "debian" in stages instead of distro name
    c5194a9e5 Dockerfile: update to debian bookworm
    7be05a6f4 mount: bind-recursive: remove boolean convenience values
    dad4a1962 vendor: github.com/docker/docker v25.0.0-beta.1
    30d36e977 templates: linting: fix "error return value is not checked (errchkjson)
    4e2477f85 golangci-lint: enable more linters
    0e73168b7 golangci-lint: revive: enable use-any
    9c0c49a5f golangci-lint: revive: enable empty-lines
    8e9aec690 golangci-lint: revive: enable import-shadowing
    f387558b5 Add zstd as supported in load command doc
    f4962c65b vendor: github.com/Microsoft/hcsshim v0.11.4
    391668f57 golangci-lint: enable perfsprint linter
    8bbdb93cf golangci-lint: enable nilerr linter
    7e9d2c78c golangci-lint: enable dupword linter
    2d61f70f0 golangci-lint: govet: enable shadow check
    606cbd60a golangci-lint: enable predeclared linter
    8661552e7 golangci-lint: enable thelper linter
    8e98c765f cli/command/system: fix deprecated comments (gocritic)
    9d7e21be2 cli/command/manifest: rename vars that collided with import
    3f0c189e4 linting: address slice-append issues found by gocritic
    a2c9f3c6c linting: address else/if/elseif statements found by gocritic
    888df0987 linting: address assorted issues found by gocritic
    d0dee3ceb linting: Consider pre-allocating sliceVar (prealloc)
    efbcdce9b linting: cli/command/trust: unusedwrite: unused write to field Hashes (govet)
    580ebf41a dockerfiles: update golangci-lint to v1.55.2
    8642b3c35 update authors and mailmap
    685d1baa0 vendor: github.com/docker/docker 34e923e3e31b (v25.0-dev)
    f0816bf67 opts: remove unused IPOpt option
    b0ee27d65 opts: ValidateIPAddress: improve error, godoc, and tests
    b24e7f85a Fix setting ServerAddress property in NativeStore
    f65d4a479 vendor: github.com/docker/go-connections fa09c952e3ea (v0.5.0-dev)
    b7c31c36f not actually a maintainer
    f9622b659 vendor: update go-connections for TLS 1.3 support
    4cf1c50ad Revert "update to go1.21.4" due to regressions / breaking changes.
    6472dabe4 update to go1.21.4
    3cd77c9d5 cli/command/container: ForwardAllSignals: rewrite to use ContainerAPIClient
    a2ec50a46 make `container` an explicit, required parameter
    a4abe42cb make runAttach public and allow passing context
    2b1f5a2e3 TestParseWithMacAddress: check endpoint-specific MacAddress field
    8f59f841a cli/command/container: mustParse: return network.NetworkingConfig
    d46de7087 vendor: github.com/docker/docker c14694a424ab (v25.0.0-dev)
    efc923679 --env-file about comments doc updated Signed-off-by: Saurabh Kumar <saurabhkumar0184@gmail.com>
    07338fe96 docs: update redirect metadata for hugo
    0239b8fd9 vendor: github.com/spf13/cobra v1.8.0
    848fe622c docs: add default-network-opt daemon option
    54eee599b Update container-device-interface to v0.6.2
    e08866098 vendor: github.com/docker/docker ed1a61dcb789 (v25.0.0-dev)
    13d34b21e vendor: github.com/containerd/containerd v1.7.8
    aa24d611b vendor: google.golang.org/grpc v1.58.3
    784149382 vendor: golang.org/x/tools v0.10.0
    1a0ae8c6b vendor: golang.org/x/mod v0.11.0
    39b1d37b3 Update CodeQL workflow
    663a89b7a vendor: github.com/docker/docker fc4d035e7a4e (v25.0.0-dev)
    6891974ee vendor: github.com/opencontainers/image-spec v1.1.0-rc5
    827c404ca vendor: github.com/moby/swarmkit/v2 v2.0.0-20230911190601-f082dd7a0cee
    137c495f7 vendor: github.com/go-logr/logr v1.2.4
    6372c6aae vendor: github.com/klauspost/compress v1.17.2
    8073525c0 vendor: google.golang.org/grpc v1.56.3
    b7b5b31a7 update to golangci-lint v1.55.0
    9e1f8d646 image/build: use "nolint" comment to work around gosec regression
    2294b17e7 cli/command/network: runCreate: inline types.NetworkCreate
    594aeb390 cli/command: remove dot-imports and unhandled errors
    b08e34b9f swarm: TestSwarmUpdate: remove non-existing "--quiet" flag
    defa52b8c stacks: Add support for start interval
    9df7be5d5 cli/compose: add schema 3.12 (no changes with 3.11 yet)
    7a2ea5c53 vendor: gotest.tools/v3 v3.5.1
    f2fced487 cli/compose/loader: remove platform-specific path handling
    74990623e cli/compose/loader: use gotest.tools/v3/golden
    8bf121c3b Add docker ps status descriptions
    a252a106c - What I did 	Removed broken link in #937 - How I did it 	Removed first section of CONTRIBUTING.md - How to verify it 	Check CONTRIBUTING.md - Description for the changelog 	Removed broken link in contributing to Docker documentation. A picture of a cute animal (not mandatory but encouraged) Closes #937
    74bace156 docs: add `bind-recursive` mount option
    46d0ba20f vendor: github.com/docker/docker cdb3f9fb8dca (v25.0.0-dev)
    3441151e0 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230823155524-12f0c246fed0
    412ebb677 vendor: github.com/containerd/containerd v1.7.7
    78eaac75c vendor: update OTEL dependencies
    a27466fb6 vendor: golang.org/x/net v0.17.0
    612a17155 vendor: golang.org/x/crypto v0.14.0
    392db31e2 vendor: golang.org/x/term v0.13.0
    ac307788a vendor: golang.org/x/text v0.13.0
    48655f794 vendor: golang.org/x/sys v0.13.0
    6de525416 vendor: github.com/docker/distribution v2.8.3
    ceab9b5e8 update to go1.21.3
    d249ce279 update to go1.21.2
    3f1195e4e update go-md2man to v2.0.3
    fc6976db4 mount: add `bind-recursive=<bool|string>` and deprecate `bind-nonrecursive=<bool>`
    0f59f04f5 Update minimum Go version to 1.19
    d254cc3bb update golang to go1.21.1
    4c75107a6 vendor: github.com/distribution/reference v0.5.0
    112d79a41 appcontext: remove unused parts
    febb37a38 remove buildkit as dependency
    e9759cee6 Dockerfile: use GOTOOLCHAIN=local
    f07e7e1ee Dockerfile: build gotestsum and goversioninfo without cgo
    9e424af5d e2e: update to use compose v2, and don't depend on distro-packages
    3e2187b4c vendor: github.com/docker/docker d3afa80b96bf (v25.0.0-dev)
    f90890fb4 vendor: github.com/Microsoft/hcsshim v0.11.1
    23f50a066 vendor: github.com/containerd/containerd v1.6.24
    497b13c66 vendor: github.com/klauspost/compress v1.16.5
    e0ad0127b vendor: google.golang.org/grpc v1.56.2
    c2308ad6f vendor: google.golang.org/protobuf v1.31.0
    56396ba35 vendor: golang.org/x/tools v0.8.0
    c9d56b850 vendor: golang.org/x/crypto v0.9.0
    ffea6940e vendor: golang.org/x/sys v0.10.0
    1554b4932 vendor: golang.org/x/sync v0.3.0
    78012b00a vendor: container-device-interface v0.6.1
    3a16c3bb0 docs: fix duplicate words in "docker tag" reference
    7e9467506 build(deps): bump docker/bake-action from 3 to 4
    315ff202c build(deps): bump docker/setup-buildx-action from 2 to 3
    4b00be585 update to go1.20.8
    9e1b42e64 Add missing opts to --network advanced syntax
    58f426087 Rename expectedCfg into expectedHostCfg
    f1048e1a3 Create default EndpointSettings if no --network provided
    2c193b59d Fix extremely minor typo in docker-run man page
    40dc66b26 vendor: github.com/docker/docker 06499c52e2b1 (v25.0.0-dev)
    f13b78672 vendor: github.com/docker/docker 032797ea4bcb (v25.0.0-dev)
    fb2ba5d63 migrate reference github.com/distribution/reference
    04af12821 vendor: github.com/docker/docker 7abd7fa73965 (v25.0.0-dev)
    dee40053f build(deps): bump actions/checkout from 3 to 4
    6dfdd1eae cli/command/system: fix "docker events" not supporting --format=json
    db6209abd update golangci-lint to v1.54.2
    9ad079244 cli/registry/client: remove some redundant conditions
    22b4bab90 cli/registry: client.iterateEndpoints: remove check for APIVersion1
    5250f1bab cli/registry: fix client.pullManifestList not de-referencing manifest
    d40fc1a0f vendor: github.com/docker/docker a65c948e7edf (v25.0.0-dev)
    261c18f9e ParseRestartPolicy: validate for missing policy-names
    3d2aac6a0 docs/reference: run.md: remove stray whitespace
    4cce7bb2f rewrite TestParseRestartPolicy to use sub-tests
    42ac5d4bf force TestNewHistoryCommandSuccess to use UTC timezone
    17f4c8259 update cli-docs-tool to v0.6.0
    be219b317 adding -c option for docker run/build in manpages
    273f2cd95 cli/command/manifest: update link to Go documentation
    722e3aae4 man: update links to Go documentation
    dc4feccb8 docs/reference: update links to Go documentation
    1d3af726e CONTRIBUTING.md: update links
    af05a6882 Dockerfile: use COPY --link where possible
    1da67be9c Stop slowing bash init by caching plugins path slowly
    5bff12354 replace dockerfile/dockerignore with patternmatcher/ignorefile
    55ff9e609 vendor: github.com/moby/patternmatcher v0.6.0
    e050312e6 update flag-description for --cgroup-parent
    d2047b954 cli/registry/client: set actions when authn with token
    1c2cc4bbe info: add CDI spec directories to output
    bb57783ab cmd/docker: areFlagsSupported: don't Ping if not needed
    6e2e92d77 Update docs/command output for volume pruning
    4fc3f0e6f search: deprecate "is-automated" filter and "IsAutomated" field
    299925f4c docs: document special host-gateway value for add-host
    211220cbb cli/command: ResolveAuthConfig, GetDefaultAuthConfig: take ConfigFile as arg
    57f0e46de cli/command/registry: cleanup login tests
    84c956a17 cli/command/registry: cleanup search tests
    3d0b14c3e vendor: github.com/docker/docker 4b19b2f4babd (25.0-dev)
    f38870e68 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230713153928-bc71908479e5
    a53b03520 vendor: github.com/opencontainers/image-spec v1.1.0-rc4
    8d51f36ca login: Add message about using PATs
    6517db939 update to go1.20.7
    373fa57ed vendor: github.com/containerd/containerd v1.6.22
    0b535c791 vendor: gotest.tools/v3 v3.5.0
    7a89e897e cli/command/container: waitExitOrRemoved: take APIClient as argument
    ce038e77b vendor: github.com/prometheus/common v0.42.0
    bffe277c9 vendor: github.com/prometheus/procfs v0.9.0
    92906a993 vendor: github.com/Microsoft/go-winio v0.6.1
    aacdca0fe vendor: google.golang.org/protobuf v1.30.0
    3cf34c6d9 vendor: google.golang.org/grpc v1.53.0
    5b138189b vendor: github.com/cespare/xxhash/v2 v2.2.0
    c1d065702 vendor: github.com/golang/protobuf v1.5.3
    0b7c72c3b cli/command/container: RunStart: inline variable
    ad43df5e8 configfile: Initialize nil AuthConfigs
    b52fd79f1 docs: add missing docs for "DOCKER_TLS" env-var
    298bddcc2 cli/command/container: deprecate NewStartOptions
    00870d68f Dockerfile: update buildx to v0.11.2
    78e463392 vendor: github.com/docker/docker-credential-helpers v0.8.0
    ff9f1be19 Dockerfile: update buildx to v0.11.1
    680fafdc9 update go to go1.20.6
    223bf80d4 cli/context/docker: Endpoint.ClientOpts, withHTTPClient: inline variables
    3469beb80 replace uses of deprecated api/types that moved to api/types/system
    1f87420b5 vendor: github.com/docker/docker dab9ffb252186f4c47416addb136d579f9314c6a (25.0-dev)
    4d03b935c vendor: github.com/moby/swarmkit/v2 v2.0.0-20230707182847-6f78b8199b05
    fe7afb700 cli/container: Don't ignore error when parsing volume spec
    323ca1d56 Bump container-device-interface dependency to v0.6.0
    fca67dd81 Dockerfile: update to xx 1.2.1
    de9f1f5b9 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230627115642-ad0f3ae162fa
    125eeb7ab Add docs for health-start-interval
    986879c07 Add flags to container/service for health start interval
    9bfaa6ff7 revendor docker/docker from master
    dbd9d5d74 Update vendoring for CDI parser
    dad225d1e Support CDI devices in --device flag
    d5f564ada commandconn: return original error while closing
    92d7a234d docker info: fix condition for printing debug information
    88f44ec15 cli: SetupRootCommand: remove redundant flags return
    3cad05fbf cli: move "config" flag to cli/flags/ClientOptions.InstallFlags()
    1c1329fc7 cli/flags: add EnvEnableTLS const for "DOCKER_TLS"
    0b3cadb05 cli/config: add EnvOverrideConfigDir const
    13e842a11 cli/config: add synchronisation for configDir (Dir, SetDir)
    9f4af6cb7 vendor: docker/docker 7f8b1cd7f928dee54174d51dc9da17f443c31480 (v25.0-dev)
    b32264a1a rename and update mergo module
    5936fd2a8 docs: fix static ip example, network needs a subnet
    b85d6a8f9 docs: fix broken link
    79ff64f06 cli/command/context: don't use pkg/homedir in test
    6c7d17fa0 docs: update the runtime configuration section
    bf5d1ce97 Dockerfile: update buildx to v0.11.0
    2133d0446 cli/command/context: remove deprecated k8s / orchestrator option-stubs
    2d06cfcde cli/command: newAPIClientFromEndpoint: use WithUserAgent
    8181aa887 cli/command/context: don't pass CLI if we only need context-store
    3b8d5da66 update go to go1.20.5
    acb248f8d Dockerfile: update ALPINE_VERSION to 3.17
    9c2694d2b Dockerfile: update gotestsum to v1.10.0
    c2535aa46 build: error if Dockerfile name is passed with Dockerfile from stdin
    77dd05caa cli/command/image: remove errStdinConflict
    d68b36153 cli/compose/convert: convertEnvironment: sort results
    f4bde6869 replace some basic uses of fmt.Sprintf()
    6a50c4f70 cli-plugins: remove deprecated Metadata.Experimental
    58ec4161b vendor: github.com/moby/swarmkit/v2 v2.0.0-20230607145746-36334ed18760
    bf492bffd vendor: docker/docker ed798d651a50cbd0af4dca127c4bfa243dda9cf7 (v25.0.0-dev)
    54c80d49d vendor: github.com/opencontainers/image-spec v1.1.0-rc3
    9ad605acc vendor: github.com/sirupsen/logrus v1.9.3
    e15ae9e2e vendor: golang.org/x/net v0.10.0
    3b62102ea vendor: golang.org/x/term v0.8.0
    db7886eef vendor: golang.org/x/text v0.9.0
    45fd37aaa vendor: golang.org/x/sys v0.8.0
    a5ebe2282 commandconn: don't return error if command closed successfully
    2331e4d52 cli/command/container: don't mutate ConfigFile.DetachKeys
    23e26f40f cli/command/container: createContainer(): return container-ID
    c2c6fbe23 cli/command/container: TestCreateContainerImagePullPolicy: use sub-tests
    0c5adb2e9 cli/command/container: attach: rename var that collided with import
    47951ff44 docs: add "--detach-keys" example to docker run reference
    c17b0df2a docs: move "--detach-keys" example to examples section
    e4ceed468 docs: added example for specifying socket path with -H
    5251d3748 cli/command: add EnvOverrideContext const for "DOCKER_CONTEXT"
    6458dcbe5 Dockerfile.vendor: update GOPROXY to use default with fallback
    0692d762a cli/command: fix GoDoc referencing wrong const
    982857531 docs: rephrase section on credential stores for docker login
    5d6612798 docs: remove devicemapper
    4cf04988a remove uses of golang.org/x/sys/execabs
    db5e1fa54 vendor: update docker/docker to latest v25.0.0-dev
    2713d0bcd docs: fix example for proxies in daemon.json
    b22290052 docs: remove AuFS from glossary
    e4211c91e docs: remove Docker Toolbox from glossary
    c246ea851 docs: remove boot2docker and docker-machine from glossary
    4c11f73dc man: remove devicemapper from examples
    c61b56518 docs/deprecated: remove "disabled by default" for AuFS, overlay
    9f537a756 docs: remove aufs and legacy overlay
    73fbcdea0 contrib/completion: remove aufs, legacy overlay
    1ec68fabe cli/command/system: remove aufs from fixtures
    6460eea54 docs/deprecated: remove .patch release from deprecation status
    035e26fb0 docs: update link location for the overlay driver
    988e37956 Correct "ps --no-trunc" example output
    2fc30fd45 replace uses of client.IsErrNotFound for errdefs.IsNotFound
    537b88dab cli/command: don't use legacy "notfound" error-type in tests
    353e0a942 vendor: github.com/docker/distribution v2.8.2
    379122b03 cli/config: remove warning for deprecated ~/.dockercfg file
    9b791b4fe cli/config: Load: remove outdated FIXME
    ff7111ae2 cli/command: remove deprecated EncodeAuthToBase64
    d3ac80127 cli/command/stack: remove deprecated RunDeploy, RunPS, RunRemove, GetServices
    72e3813ab cli-plugins/manager: fix deprecation comment of Metadata.Experimental
    4119d268e Update tag docs to clarify name
    28bc90f3b vendor: update docker/docker to v25.0.0-dev, API v1.44
    60b4cdf04 Update version to v25.0.0-dev
    759fa585c docs: update description for docker -H flag
    1d8e2b652 vendor: github.com/docker/docker v24.0.0-rc.2
    ce11b28d8 cli/config/credentials: skip unneeded exec.LookPath()
    2ae223038 remove pre-go1.17 build-tags
    1073b0269 cli/context/docker: rename receiver for Endpoint
    2b7bfb399 cli/command/image/build: GetContextFromReader: rename var that collided
    ab17029c6 cli/command/container: hijackedIOStreamer: explicitly ignore err
    f5e224e94 un-skip history test and fix golden mismatches

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2024-03-15 17:17:19 +00:00
Bruce Ashfield
22877e9bd0 runc-docker: update to 1.1.11 
Bumping runc to version v1.1.11-2-g452f520c, which comprises the following commits:

    7887736f VERSION: back to development
    4bccb38c VERSION: release 1.1.11
    617db785 configs: make id mappings int64 to better handle 32-bit
    e65d4cac specconv: temporarily allow userns path and mapping if they match
    2dd8368e integration: add mega-test for joining namespaces
    8f8cb455 configs: disallow ambiguous userns and timens configurations
    0c8e2cc6 *: actually support joining a userns with a new container
    87792ce0 libct/cg: add swapOnlyUsage in MemoryStats
    32a26a71 build(deps): bump github.com/cyphar/filepath-securejoin
    be887840 VERSION: back to development
    18a0cb0f VERSION: release 1.1.10
    b426e9b7 libct/cgroups.OpenFile: clean "file" argument
    8214e634 libct/cg: support hugetlb rsvd
    f8be7009 [1.1] tests/int/helpers: add get_cgroup_path
    1f66027a ci/gha: fix downloading Release.key
    5a5b2cc3 Fix directory perms vs umask for tmpcopyup
    b365458f fix a typo in cloned_binary.c: re-use -> reuse
    8f66c9fb fix two typos
    016b2b42 Handle kmem.limit_in_bytes removal
    11737f55 VERSION: back to development
    ccaecfcb VERSION: release 1.1.9

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2024-03-15 17:17:19 +00:00
Bruce Ashfield
e4b6616a90 runc-opencontainers: update to 1.1.11 
Bumping runc to version v1.1.11-2-g452f520c, which comprises the following commits:

    7887736f VERSION: back to development
    4bccb38c VERSION: release 1.1.11
    617db785 configs: make id mappings int64 to better handle 32-bit
    e65d4cac specconv: temporarily allow userns path and mapping if they match
    2dd8368e integration: add mega-test for joining namespaces
    8f8cb455 configs: disallow ambiguous userns and timens configurations
    0c8e2cc6 *: actually support joining a userns with a new container
    87792ce0 libct/cg: add swapOnlyUsage in MemoryStats
    32a26a71 build(deps): bump github.com/cyphar/filepath-securejoin
    be887840 VERSION: back to development
    18a0cb0f VERSION: release 1.1.10

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2024-03-15 17:17:19 +00:00
Bruce Ashfield
f27566f573 layer-wide: drop PYTHON_PN 
Similar to OE core commit b566b1e32c7993d1ab7795562f648e52ce186a70,
we no longer need PYTHON_PN for any abstraction of python2 vs python3.

Our similar / dup recipes are now causing signature differences, so
we go ahead and make the substitution, even if it isn't stricly
required.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2024-02-21 22:48:29 +00:00
Ming Liu
eccd6f11b8 container-host-config:storage.conf: sync with libpod v4.8.2 
The current storage.conf is based on v1.33.0 of:
https://github.com/containers/storage.git

while in podman v4.8.2, it has been upgraded to
v1.50.3-0.20231005112617-44418abb2d89 of:
https://github.com/containers/storage.git

let's sync it with podman v4.8.2.

which comprises the following commits in storage.conf:

```
42d1d9637 Run codespell on code
91da0c2be add documentation on imagestore and add a warning if set
01fccaa58 options: enable Remap-User/Group setting
e125790e9 Fix typo in storage.conf
57582350c Document transient_store in man page
522b67c94 Add new storage.conf option "transient_store"
5e9e2ba6b Revert incorrect "heeded" -> "needed" typo fix
cffa19709 fix typos and spelling
268af0001 chunked: drop host dedup feature
b64cfb4f4 Document the pull_options
17fccdc2d Clearup inheritance rules for storage.conf
3c76f174d Tell users who change graphroot location to fix the SELinux labels
```

Signed-off-by: Ming Liu <liu.ming50@gmail.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2024-02-01 14:15:13 +00:00
Peter Kjellerstedt
a0ad18ea28 containerd-opencontainers: Use RDEPENDS:${PN} instead of RDEPENDS:${BPN} 
The original purpose of using BPN vs PN in the RDEPENDS was due to
32bit multilib issues. Those problems are no longer present, so we
can adjust this recipe to use the standard PN in rdepends.

This change avoids the following warning:

  WARNING: .../containerd-opencontainers_git.bb: Variable key
  RDEPENDS:${PN} (...) replaces original key
  RDEPENDS:containerd-opencontainers
  (  ${VIRTUAL-RUNTIME_container_runtime}).

if, e.g., RDEPENDS:${PN}:append = " ..." is used in a bbappend or
bbclass.

Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2024-01-19 14:43:37 +00:00
Bruce Ashfield
5bd48ee74f buildah: update to 1.33.3 
Bumping buildah to version v1.33.3-1-g5ca83472c, which comprises the following commits:

    21e754fd3 [release-1.33.2] Bump Buildah to v1.33.3
    b44d6bd56 [release-1.33.2] Bump c/common to 0.57.2 and c/image to 5.29.1
    7fffb3366 [release-1.33.2] Bump to v1.33.2

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2024-01-19 14:38:36 +00:00
Chen Qi
b3e5c517bf buildah: fix branch name 
The branch 1.33.2 is not there any more. The correct branch for now
is 1.33.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2024-01-19 14:38:30 +00:00
Xiangyu Chen
cb84780339 criu: add cgroup-lite to RDEPENDS 
criu needs cgroup-lite to init the cgroup configurations during system start.

Signed-off-by: Xiangyu Chen <xiangyu.chen@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2024-01-19 14:29:24 +00:00
Xiangyu Chen
664e3573d4 lxc: adjust the lxc-test-unpriv running order 
Some of lxc test cases can not full clean the system environment, that cause
lxc-test-unpriv cannot execute successfully.

Since those code in lxc are using for tests, so just adjust the cases order.

Signed-off-by: Xiangyu Chen <xiangyu.chen@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2024-01-19 14:29:24 +00:00
Ming Liu
f33765288d podman: add test instructions for podman system service 
Signed-off-by: Ming Liu <liu.ming50@gmail.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2024-01-19 14:29:24 +00:00
Ming Liu
8891c1e02c docker-compose: introduce pkgconfig docker-plugin 
This allows docker-compose choose to be built as a docker plugin or a
standalone binary, in the later case, docker-compose does not have to
rdepends on docker, so nother container tools like podman can also use
it.

Signed-off-by: Ming Liu <liu.ming50@gmail.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2024-01-04 02:52:53 +00:00
Bruce Ashfield
a3da99e3ff podman-tui: update to v0.14.0 
Bumping podman-tui to version v0.9.0-207-gc545dbd7, which comprises the following commits:

    c545dbd7 Bump to v0.14.0
    ac61433c container create dialog - user/groups category options
    c3274937 Bump github.com/containers/common from 0.57.0 to 0.57.1
    7227ec91 Bump actions/stale from 8 to 9
    808dc504 Bump actions/setup-python from 4 to 5
    d4121000 Bump actions/setup-go from 4 to 5
    1df86623 Bump github.com/containers/podman/v4 from 4.8.0 to 4.8.1
    9822b029 container create dialog - environment category options
    7f698267 container create options (privileged, timeout)
    b985d1fa Bump to v0.14.0-dev
    c0bf2daa Bump to v0.13.0
    74103352 running golangci-lint on ui/containers package
    6fad611b Bump github.com/containers/podman/v4 from 4.7.2 to 4.8.0
    717e859a running golangci-lint on ui/images package
    e9207835 Bump golang.org/x/crypto from 0.15.0 to 0.16.0
    0ab99d84 running golangci-lint on ui/dialogs package
    f19ddfc2 running golangci-lint on ui/networks package
    f99918f6 running golangci-lint on ui/pods package
    068b7c00 running golangci-lint on ui/system package
    e27eaf42 running golangci-lint on ui/utils package
    c5f1711c running golangci-lint on app package
    b94bfa90 running golangci-lint on config package
    ce5905bd running golangci-lint on cmd package
    56190b2a github action update
    05f7e7ab adding container create mount inputfield option
    8cfb6130 use inputfield for container create volume option
    76e6d03a Bump github.com/navidys/tvxwidgets from 0.4.0 to 0.4.1
    7a7897c6 Bump github.com/go-jose/go-jose/v3 from 3.0.0 to 3.0.1
    ef812d9c Bump github.com/containers/storage from 1.50.2 to 1.51.0
    ae72e400 EPEL rpm package
    e62199b1 docs update - add Gentoo in packaged versions
    35468621 Bump to v0.13.0-dev
    15759448 Bump to v0.12.0
    28e8a2d5 Bump github.com/containers/buildah from 1.31.2 to 1.32.2
    5ce10afe Bump github.com/containers/podman/v4 from 4.6.2 to 4.7.2
    1e56294d gh action update
    226be72d using github.com/distribution/reference
    38ed7d29 Bump github.com/docker/distribution
    00759199 Bump github.com/docker/docker
    d61975c8 Bump google.golang.org/grpc from 1.57.0 to 1.57.1
    8231c9ca Bump golang.org/x/net from 0.13.0 to 0.17.0
    c42e4015 Bump golang.org/x/crypto from 0.13.0 to 0.15.0
    4cca7cae update ginkgo cli version to 2.11.0
    03ad465a Bump github.com/spf13/cobra from 1.7.0 to 1.8.0
    0b5ff67e running codespell
    8cfaf08d Bump github.com/rs/zerolog from 1.30.0 to 1.31.0
    f5e6f7ed Bump github.com/containers/storage from 1.48.0 to 1.50.2
    fa255fdc Bump github.com/navidys/tvxwidgets from 0.3.0 to 0.4.0
    2d854793 Bump github.com/containers/podman/v4 from 4.6.1 to 4.6.2
    c132c0e6 Bump github.com/cyphar/filepath-securejoin from 0.2.3 to 0.2.4
    e4643785 Bump github.com/docker/docker
    f05f381b Bump golang.org/x/crypto from 0.12.0 to 0.13.0
    78ce8c9d Bump actions/checkout from 3 to 4
    de8383d9 Bump tim-actions/commit-message-checker-with-regex from 0.3.1 to 0.3.2
    11f9b244 Bump to v0.12.0-dev
    33d9be57 Bump to v0.11.0
    74360a37 fix missing volume list created time column
    c532db41 Bump github.com/containers/podman/v4 to 4.6.1
    65b96aa3 Vagrantfile update (fedora-38 image)
    78e96572 Bump github.com/containers/buildah from 1.31.1 to 1.31.2
    af0700f2 Bump github.com/containers/common from 0.55.2 to 0.55.3
    a6c67e96 Bump golang.org/x/crypto from 0.11.0 to 0.12.0
    83f9b0f0 Bump github.com/docker/docker
    bd51d4bd Bump github.com/rs/zerolog from 1.29.1 to 1.30.0
    f1e9e1fb Bump github.com/containers/buildah from 1.30.0 to 1.31.1
    24ff42f2 Bump github.com/containers/common from 0.53.0 to 0.55.2
    6e9ce1bc Bump golang.org/x/crypto from 0.10.0 to 0.11.0
    efdfbe48 Bump github.com/containers/storage from 1.46.1 to 1.48.0
    e99a7b0e Bump golang.org/x/crypto from 0.9.0 to 0.10.0
    98c6660a Bump github.com/BurntSushi/toml from 1.2.1 to 1.3.2
    cc2eedf9 Bump github.com/docker/docker
    dbe94d6c Bump github.com/sirupsen/logrus from 1.9.2 to 1.9.3
    4479d607 Bump github.com/containers/podman/v4 from 4.5.0 to 4.5.1
    22e1da63 Bump github.com/sirupsen/logrus from 1.9.0 to 1.9.2
    661d46e4 Bump github.com/docker/distribution
    3f90e76b Bump github.com/sigstore/rekor from 1.1.0 to 1.2.0
    9ab5f1fa Bump tim-actions/get-pr-commits from 1.2.0 to 1.3.0
    ee3cfd11 Bump github.com/containers/common from 0.52.0 to 0.53.0
    9596156d Bump to v1.5.0-dev
    53e2d8af Bump to v1.4.0
    ef699e43 Bump github.com/rs/zerolog from 1.29.0 to 1.29.1
    3213a478 Bump github.com/containers/podman/v4 from 4.4.0-rc1 to 4.5.0
    55bdd266 Bump github.com/containers/common
    24231629 Bump github.com/docker/docker
    84ae09ed podman update to v4.4.4
    d7314c7a Bump github.com/spf13/cobra from 1.6.1 to 1.7.0
    d8d12e1a Bump github.com/containers/storage from 1.45.4 to 1.46.0
    c8141ba5 packit update - remove centos stream build
    449d8f48 golangci-lint system package
    b0d20b2a Bump actions/stale from 7 to 8
    613d18f4 ui/styles - applying golint
    78395235 ui/infobar - applying golint
    745a331d ui/help - applying golint
    4c27c3de ui/volumes code improvement and golint
    02740c14 adding container attach command to container page/view
    6b5beb41 fix container create error without health options
    705bc347 Bump actions/setup-go from 3 to 4
    cf4509ed Add container health options to the container create dialog
    d79883ea Add packit configurtion to build RPM as part of PR tests
    ba02fb57 Update unit tests and github workflow for running the tests
    4e3889f0 fix container create error when volume is selected
    0af3e47b update github workflow golang version to 1.18.8
    f572f481 Golangci-lint update to v1.51.1
    c2932fc2 fix vendor + codepsell
    1e35d9af Bump golang.org/x/crypto from 0.6.0 to 0.7.0
    bb17bbc5 unit tests fix
    13286688 Bump to v0.10.0-dev
    28f800cd Bump github.com/onsi/ginkgo/v2 from 2.8.4 to 2.9.0

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2024-01-04 02:52:53 +00:00
Bruce Ashfield
01a60446c5 podman: update to v4.8.2 
Bumping libpod to version v4.8.2-2-g0ec4c8b1d, which comprises the following commits:

    4aab4e3fe bump release to v4.8.3-dev
    aa546902f v4.8.2
    a9b20a4a2 [CI:DOCS] Update RELEASE_NOTES.md for v4.8.2
    775054343 Kube Play - set ReportWriter when building an image
    1864ea94f Fix user-mode net init flag on first time install
    3c0d66d83 bump c/common to v0.57.1
    b0e2ffc51 bump version to v4.8.2-dev
    ef6e5ac40 v4.8.1
    0b72d1bf2 Update RELEASE_NOTES.md for v4.8.1
    2d20d2e5c Handle symlinks when checking DB vs runtime configs
    6bbbfaa05 libpod: Detect whether we have a private UTS namespace on FreeBSD
    a8b8dc570 pkg/bindings: add new APIVersionError error type
    86bb91001 fix podman-remote exec regression with v4.8
    9c9d2fcaf sqlite: fix issue in ValidateDBConfig()
    1e5a1336f sqlite: fix missing Commit() in RemovePodContainers()
    429080f02 sqlite: set busy timeout to 100s
    a72c39a53 Fix locking error in WSL machine rm -f
    a7c522dfe Gating test fixes
    a62b81d90 If API calls for kube play --replace, then replace pod
    70ba64f4c Fix wsl.conf generation when user-mode-networking is disabled
    e627de1b4 Bump to v4.8.1-dev
    c4dfcf148 Bump to v4.8.0
    0efc6ea30 Update release notes for 4.8.0
    4b95c6c30 Add notes on upcoming deprecations to release notes
    1c1477ddf [v4.8] Bump to Buildah v1.33.2
    f02155142 [CI:DOCS] Update release notes
    697e66c78 machine applehv: create better error on start failure
    53f176732 Bump to v4.8.0-dev
    ac1d54e68 Bump to v4.8.0-rc1
    66cba2794 Create release notes for v4.8.0
    ac290f446 Update release notes from v4.7 branch
    883ce7704 Cirrus: Update operating branch
    9ea390191 rootless_tutorial: modernize
    ee1654622 Bump Buildah to v1.33.1
    3d86a9658 Bump Buildah to v1.33.0
    60d9f9b80 Update to libhvee 0.5.0
    d32f61d91 vmtypes names cannot be used as machine names
    d0b32255e Add support for --compat-auth-file in login/logout
    a3d5814e0 Update tests for a c/common error message change
    ced07a55f Update c/image and c/common to latest, c/buildah to main
    a10b88cb2 CI: test overlay and vfs
    da899b92d [CI:DOCS] Add link to podman py docs
    d2a4ec867 Test fixes for debian
    23ead49de pasta tests: remove some skips
    d711c3f46 VM images: bump to 2023-11-16
    5f3f8a3ca fix(deps): update module k8s.io/kubernetes to v1.28.4 [security]
    3d88f614f [CI:DOCS] Machine test timeout env var
    e35fc92c0 Quadlet - add support for UID and GID Mapping
    dc709e4d7 Quadlet - Allow using symlink on the base search paths
    7b826b230 [skip-ci] Update dessant/lock-threads action to v5
    ea89eaa1c Avoid empty SSH keys on applehv
    33ddd79e2 qemu,parseUSB: minor refactor
    669829447 fix(deps): update module github.com/gorilla/handlers to v1.5.2
    49b152f49 docs: fix relabeling command
    5dc807487 Pass secrets from the host down to internal podman containers
    047da19b5 (Temporary) Emergency CI fix: quay search is broken
    e1f3ae0d8 Update podman-stats.1.md.in
    6fa4a975c [CI:BUILD] packit: handle builds for RC releases
    bd375058c Quadlet test - add case for multi = sign in mount
    5e0471ba7 set RLIMIT_NOFILE soft limit to match the hard limit on mac
    d636ce8d7 rootless: use functionalities from c/storage
    6b5b39912 CI: e2e: fix a smattering of test bugs that slipped in
    d07263f34 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.1
    fbd1ba68f vendor: update c/storage
    956c0d6ec Improve the documentation of quadlet
    39d647a2f Fix socket mapping socket mapping nits
    5388836c1 fix(deps): update module golang.org/x/tools to v0.15.0
    60f67eec7 fix(deps): update github.com/containers/libhvee digest to 9651e31
    9cd975d59 [skip-ci] Update github/issue-labeler action to v3.3
    b8d59030c Document --userns=auto behaviour for rootless users
    c23963d7a machine: qemu: add usb host passthrough
    4a75a2b3c fix(deps): update module golang.org/x/net to v0.18.0
    1c5bc7e09 fix(deps): update module github.com/onsi/gomega to v1.30.0
    b2c56365b Refactor Ignition configuration for virt providers
    81dc3f183 [CI:BUILD] rpm: disable GOPROXY
    78798cab0 Automatic code cleanups - JetBrains
    a45ba06d0 Refactor key machine objects
    1c969219d systests: add [NNN] prefix in logs, NNN = filename
    92cd7b25f systests: add a last-minute check for db backend
    d44f71c13 applehv: allow virtiofs to mount to /
    c2de6d34c Run codespell on podman
    8f5c46c9e update completion scripts for cobra v1.8.0
    28f3e9fe3 Fix man page display of podman-kube-generate
    8effb7825 Try to fix the broken formatting of man podman‐kube‐apply(1).
    3eb2d5ceb fix(deps): update module golang.org/x/text to v0.14.0
    108d2bc43 docs: make CNI removal explicit
    c1fe1f9d3 fix(deps): update module github.com/gorilla/mux to v1.8.1
    e78288344 fix(deps): update module github.com/spf13/cobra to v1.8.0
    0824e45c8 fix(deps): update module golang.org/x/sync to v0.5.0
    da897bd04 fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.18
    420316ef6 Podman push --help should reveal default compression
    942bcf34b Update container-device-interface (CDI) to v0.6.2
    375b0cc13 fix: adjust helper string in machine_common
    9e05fb14a fix: adjust helper string in machine_common
    607aff55f remote,test: remove .dockerignore which is a symlink
    6b7d7f6fb [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.2
    b5f854458 fix: adjust helper string in machine_common
    ce334ed9d vendor: update github.com/coreos/go-systemd/v22 to latest main
    2a17baa29 CI: default to sqlite
    33753db47 vendor: update c/common
    613f50c7a check system connections before machine init
    ea4775ec9 Consume OCI images for machine image
    d2a37222b freebsd: drop dead code
    06a07c98e libpod: make removePodCgroup linux specific
    e4f1c87ea containers: drop special handling for ErrCgroupV1Rootless
    0b6abfe1e compose: fix compose provider debug message
    aefa9abf4 image: replace GetStoreImage with ResolveReference
    03419d6da vendor: bump c/image to 373c52a9466f
    ce9c1b9b8 Refactor machine socket mapping
    f6ec210f3 AppleHV: Fix machine rm error message
    af0ef47f0 Add status messages to podman --remote commit
    3241b3259 End-of-Life policy for github issues
    390e9ddc9 fix(deps): update module github.com/shirou/gopsutil/v3 to v3.23.10
    18d6bb40d Support passing of Ulimits as -1 to mean max
    78765b14d fix(deps): update github.com/docker/go-connections digest to 0b8c1f4
    ffb96ad8b fix(deps): update github.com/crc-org/vfkit digest to f3c783d
    7153124f9 Log gvproxy and server9 to file on log-level=debug
    d9c388e2f Change to using gopsutil for cross-OS process ops
    642fa9897 Initial addition of 9p code to Podman
    b332ca7a0 libpod: fix /etc/hostname with --uts=host
    89d7b2735 systests: stty test: retry once on flake
    6b94c8fd3 systests: pasta: avoid hangs
    4c67a6aed Fix secrets scanning GHA Workflow
    2193bb8fc [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
    e9dd41183 docs: clarify systemd cgroup mount
    a1577ec7b podman build --remote URI Dockerfile shoud not be treated as file
    95a5ad258 Small fixes for wacko CI environments
    c6d410cc3 Do not add powercap mask if no paths are masked
    3743955d6 compose: try all possible providers before throwing an error
    91df369ae podman kube play --replace should force removal of pods and containers
    3ce62d3cc Sort kube options alphabetically
    e966c86d9 container.conf: support attributed string slices
    91ccd7cd2 CI: podman farm tests cleanup
    be7dd128e Mask /sys/devices/virtual/powercap
    05a607f14 Update module github.com/google/uuid to v1.4.0
    6a0b2c680 fix(deps): update module github.com/docker/docker to v24.0.7+incompatible
    6badb659c fix(deps): update module go.etcd.io/bbolt to v1.3.8
    9e3363c5e CI: systest: safer random_rfc1918_subnet
    c841fa9e9 CI: e2e: safer GetPort()
    fd5140d87 Fix broken code block markup in Introduction.rst
    d0ce60c63 chore(deps): update module google.golang.org/grpc to v1.57.1 [security]
    15969a60b chore: remove npipe const and use vmtype const for checking
    2158e1540 Update module github.com/onsi/gomega to v1.29.0
    c0fb8fe59 CI: try to fix more networking flakes
    c21f28813 fix: check wsl npipe when executing podman compose
    9ea1ed6d4 [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.1
    76cca08f8 Quadlet - explicit support for read-only-tmpfs
    c13b8e3c9 compat API: fix image-prune --all
    0e15861c5 Makefile - allow more control over Ginkgo parameters
    ebe01ca29 Add e2e tests for farm build
    989afd910 vendor c/{buildah,common}: appendable containers.conf strings, Part 1
    dd8f57a3b Add podman farm build command
    2e88d580a Add emulation package
    06b726497 Use buildah default isolation when working with podman play kube
    0a2aae119 docs(API): Fix compat network (dis-)connect
    1b466ccbd test/e2e: do not import buildah
    8a0968baa pkg/specgen: remove config_unsupported.go
    cb9dfeb8e pkg/parallel/ctr: add !remote tag
    d4a67cf45 pkg/domain/filters: add !remote tag
    9cecae8c2 pkg/ps: add !remote tag
    1d1630990 pkg/systemd/generate: add !remote tag
    bad25da92 libpod: add !remote tag
    abb5c86b6 pkg/autoupdate: add !remote tag
    01a750699 vendor latest c/common
    3615af903 libpod: remove build support non linux/freebsd
    1850670f1 Fix typo
    2e57746ff test/apiv2: adapt apiv2 test on cgroups v1 environment
    c3ba0221e ginkgo setup: retry cache pulls
    ee6070888 Support size option when creating tmpfs volumes
    8876380af not mounted layers should be reported as info not error
    85cc4092f CI: stop using registry.k8s.io
    a8e1a5ed1 fix(deps): update module github.com/vbatts/git-validation to v1.2.1
    6d99cb5cd test fixes for c/common tag chnages
    dfdd93323 vendor latest c/common
    d6f44d956 hyperV: Update lastUp time
    1ac110835 [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.0
    9e648a1f5 lint: disable testifylint
    29273cda1 lint: fix warnings found by perfsprint
    64f43fed4 lint: fix warnings found by inamedparam
    c21f42a4e lint: fix warnings found by protogetter
    03947ab03 libpod: skip DBUS_SESSION_BUS_ADDRESS in conmon
    936e30f68 Use node hostname in kube play when hostNetwork=true
    bd953fdc7 cirrus setup: special-case perl unicode
    ca9efb0cd network: document ports and macvlan interaction
    f2bc63894 quadlet: document cgroupv2 requirement
    e8183e836 [skip-ci] Update actions/checkout digest to b4ffde6
    1d2589c3f Revert "Emergency workaround for CI breakage"
    f48a706ab remote: exec: do not leak session IDs on errors
    ad1ab71b8 fix(deps): update github.com/containers/storage digest to 79aa304
    d1086281b fix(deps): update module k8s.io/kubernetes to v1.28.3
    657029da7 System tests: fix broken silence127
    b72bb1162 Add TERM iff TERM not defined in container when podman exec -t
    44ed415b2 Emergency workaround for CI breakage
    d4d76479c Kill gvproxy when machine rm -f
    cad4d0ee9 Fix path for omvf vars on Darwin/arm64
    285718915 Allow systemd specifiers in User and Group Quadlet keys
    caef657c5 libpod: rename confusing import name
    efe5e98d0 use FindInitBinary() for init binary
    1d3ec78e0 vendor latest c/common
    fa19e1baa exec: do not leak session IDs on errors
    1efcd1ecf systests: cp test: lots of cleanup
    2d65e57ae Define better error message for container name conflicts with external storage.
    9b8e01efd Quadlet - support ImageName for .image files
    64171043a test/system: ignore 127 if it is the expected rc
    c65d1c02b test/apiv2/20-containers.at: fix NanoCPUs tests on cgroups v1
    831844b59 image history: fix walking layers
    ad5319025 fix(api): Ensure compatibality for network connect
    e0561301c [CI:DOCS] Add cross-build target info.
    dc705d370 machine set: document --rootful better
    bbd6281ec libpod: restart+userns cleanup netns correctly
    3b6a4ac37 Minor log and doc fixes
    f875ae317 Quadlet man page - discuss volume removal explicitly
    5d5facbd7 Quadlet - add support for KubeDownForce
    6ba67ba96 System Test - Quadlet kube oneshot
    9637fed2f Fix output of podman --remote top
    dcb421bc5 buildah-bud: test relative TMPDIR
    c8604081e Fix handling of --read-only-tmpfs flag
    1b0be2f34 Vendor common and buildah main
    5db3b753a remote,build: wire unsetlabels
    331e47acb test: build with TMPDIR as relative
    6cf3dd493 docs: add unsetlabel
    64ff14932 vendor: bump buildah to v1.32.1-0.20231012130144-244170240d85
    74ed1d6e7 fix(deps): update module github.com/vbauerster/mpb/v8 to v8.6.2
    b9f2c4d17 fix: pull error response docker rest api compatibility
    29f5c563e Show client info even if remote connection fails
    52112fc5c fix(deps): update github.com/containers/libhvee digest to e51be96
    cb53bcf23 Run codespell
    987dc2b8b SetLock for all virt providers
    61e0b64b9 Machine: Teardown on init failure
    99a14332e healthcheck: make sure to always show health_status events
    7b84b55da Apply suggestions from code review
    ca518888e [CI:DOCS]rtd: implement v2 build file
    702f15528 Quadlet - support oneshot .kube files
    3cc9db862 libpod: fix deadlock while parallel container create
    2301320f6 fix(deps): update module golang.org/x/net to v0.17.0
    8b46e852e api: add `compatMode` paramenter to libpod's pull endpoint
    76fec1227 api: break out compat image pull
    40f897653 fix(deps): update module github.com/cpuguy83/go-md2man/v2 to v2.0.3
    29ae51600 use sqlite as default database
    8a52e638e vendor latest c/common
    acd0a93c3 fix(deps): update module github.com/nxadm/tail to v1.4.11
    d18369ee8 Check for image with /libpod/containers/create
    8ac2aa793 container: always check if mountpoint is mounted
    787b1b25c fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.0
    9beb3a972 vendor: update c/storage
    36bf90518 api: drop debug statement
    d321d427d Quadlet - add support for global arguments
    732cec794 Add system test
    10aa39068 fix(deps): update module golang.org/x/tools to v0.14.0
    3fdb6ee2d Don't ignore containerfiles outside of build context
    b3209dc5d fix(deps): update github.com/containers/libhvee digest to fcf1cc2
    eda275820 fix(deps): update module golang.org/x/term to v0.13.0
    da6c86dfc Update module golang.org/x/sys to v0.13.0
    1c0780097 [CI:DOCS] Add updating version on podman.io to release process
    362eca669 containers.conf: add `privileged` field to containers table
    6cb10425d Implement secrets/credential scanning
    106abd13b Cirrus: Execute Windows podman-machine e2e tests
    338e4f590 vendor: bump c/storage
    8807243cc Update module golang.org/x/sync to v0.4.0
    2168f0745 [CI:DOCS] update swagger version on docs.podman.io
    0414f88b3 Create Qemu command wrapper
    df6a00026 Adjust to path name change for resolved unit
    2a38f30b6 Revert "Fix WSL systemd detection"
    f622a2a54 [CI:BUILD] rpm/copr: gvforwarder recommends for RHEL
    27f58803d [CI:DOCS] update kube play delete endpoint docs
    3fc7c42e1 [CI:DOCS] Remove dead link from README
    1b3cedbf3 test/system: --env-file test fixes
    617af9bea Revert "feat(env): support multiline in env-file"
    5f340487e Revert "docs(env-file): improve document description"
    9599589f1 Revert "fix(env): parsing --env incorrect in cli"
    7e6e26732 Filter health_check and exec events for logging in console
    0443c5166 inspect: ignore ENOENT during device lookup
    b576b7932 test, manifest: test push retry
    cbca39529 Fix locale issues with WSL version detection
    b988eadaf vendor: update module github.com/docker/distribution to v2.8.3+incompatible
    1ebd22303 vendor: bump c/common to v0.56.1-0.20231002091908-745eaa498509
    8b647cdb5 Update github.com/containers/libhvee digest to e9b1811
    cc946daff windows: Use prebuilt gvproxy/win-sshproxy binaries
    979c77f10 Volume create - fast exit when ignore is set and volume exists
    874e4466a Update golang.org/x/exp digest to 9212866
    22a1d015c Update github.com/opencontainers/runtime-spec digest to c0e9043
    229734c10 remove selinux tag as not needed anymore
    049a5fb92 [skip-ci] Improve podmansh(1)
    85ed9edde Build applehv for Intel Macs
    7ef8519f4 Revert "GHA Workflow: Faster discussion-locking"
    59e0919bc update vfkit vendored code
    17cebb3ff Add DefaultMode to kube play
    ba788c1bb Fix broken podman images filters
    9b3964111 Remove `c.ExtraFiles` line in machine
    f21c1d238 podman: run --replace prints only the new container id
    bcfd9f340 New machines should show Never as LastUp
    94818f594 podman machine: disable zincati update service
    b284128d7 Revert "cirrus setup: install en_US.UTF-8 locale"
    b28188de2 Cirrus: CI VM images w/ newer automation-library
    2b9c0555f CI VMs: bump to f39 + f38
    ecd7b3802 [CI:DOCS] Update podman load doc
    58b5ae22e Update mac installer to latest gvproxy release
    5b990c383 Fix WSL systemd detection
    be823b388 Add documentation for the vrf option on netavark
    fda028ca0 fix(deps): update github.com/containers/common digest to 9342cdd
    6306e8985 fix: typos in links, path and code example
    ccb7da52c e2e: ExitCleanly(): manual special cases
    611db19b3 e2e: ExitCleanly(): the final fron^Wcommit
    149d3f7ad [CI:DOCS] Add win-sshproxy target to winmake
    0d4526e61 wsl: enable machine init tests
    455d16549 Update docs/source/markdown/options/rdt-class.md
    bfbd0c896 move IntelRdtClosID to HostConfig
    4853320ce use default when user does not provide rdt-class
    77336de8f Add documentation for Intel RDT support
    24b2f829b Add test for Intel RDT support
    40d3c3b9b Add Intel RDT support
    295439265 [CI:DOCS] Fix podman form update --help examples
    f0eb45667 Quadlet container mount - support non key=val options
    0b5ea1e6e test/e2e: default to netavark
    4ed9dc1ad [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
    48ea4b9ec fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.7.1
    90eb73629 fix(deps): update github.com/containers/common digest to 4619314
    172494423 applehv: enable machine tests for start
    2ff43429f applehv: machine tests for stop and rm
    127ebe2b2 Update machine tests README
    995a6a8ac Add podman socket info to machine inspect
    80952db0b Fix podman machine info test for hyperV
    7ade97210 libpod: pass entire environment to conmon
    e4b7455b7 e2e: ExitCleanly(): manual fixes to get tests working
    dbd946a93 e2e: ExitCleanly(): a few more
    59ffea80d FCOS+podman-next: correct GHA conditional syntax
    8bad842a4 pkg/machine/e2e: wsl stop
    217c4d546 wsl: machine tests for inspect
    e4bfcfc25 wsl: machine tests for ssh
    5636d0219 fix(deps): update github.com/containers/common digest to e18cda8
    a112ee895 wsl: machine start test
    d3d5011dc wsl machine tests: set
    cc4917d81 wsl: machine tests
    ec68a7489 Skip proxy test for hyperV
    33a92aa00 Enable machine e2e test for applehv
    65ce03486 hyperV: Respect rootful option on machine init
    52ba1bfff [CI:BUILD] FCOS image: enable nightly build
    ffd67cf75 e2e: use safe fedora-minimal image
    41e51f473 hyperv: machine e2e tests for set command
    59e295f2a podman build: correct default pull policy
    6293ec2e2 fix handling of static/volume dir
    26b5b1dd3 unbreak CI: useradd not found
    08936db35 hyperv: set more realistic starting state
    2bef573f3 hyperv: use StopWithForce with remove
    f52b02f40 Fix all ports exposed by kube play
    cd4f61181 Fix setting timezone on HyperV
    172369b54 fix(deps): update github.com/containers/gvisor-tap-vsock digest to 97028a6
    e0b44bcf3 Fix farm update to check for connections
    d8e305716 Adjust machine CPU tests
    8188a6fcf Bump version on main
    e65874903 [CI:BUILD] Packit: show SHORT_SHA in `podman --version` for COPR builds
    96142c2f7 Vendor c/common
    af2665c28 pod rm: do not log error if anonymous volume is still used
    4916f7d77 e2e: ExitCleanly(): manual fixes to get tests passing
    8e743fa1d e2e: ExitCleanly(): a few more
    c66aa3b7b fixes for pkg/machine/e2e on hyperv
    83b6975d1 test: fix rootless propagation test
    6c2493f78 [CI:BUILD] packit: tag @containers/packit-build team on copr build failures
    92f4dcb09 Enable disk resizing for applehv
    5b3801776 Various updates for hyperv and machine e2e tests
    682ca6b2e test: update fedoraMinimal version
    8d3010d06 specgen, rootless: fix mount of cgroup without a netns
    39ba5ff24 Automatically remove anonymous volumes when removing a container
    24d3347ed Use ActiveServiceDestination in ssh remoteConnectionUsername
    b6ea49f5a fix(deps): update github.com/containers/gvisor-tap-vsock digest to 9298405
    c69873d67 e2e: ExitCleanly(): generate_kube_test.go
    841cfa802 e2e: generate kube -> kube generate
    d1f86d524 e2e: ExitCleanly(): generate_kube_test.go
    f3e9a6369 windows cannot "do" extra files
    62e13bec7 e2e: ExitCleanly(): Fixes for breaking tests
    09c3ac48f play kube -> kube play
    e83ced8a0 e2e: ExitCleanly(): play_kube_test.go
    eb9283c6f introduce pkg/strongunits
    6d8b3047d Makefile equiv Powershell script
    4652a2623 pass --syslog to the cleanup process
    73dc72f80 vendor of containers/common
    1cbe692de fix --authfile auto-update test
    8e5adde0b compat API: speed up network list
    8c95aa402 Change priority for cli-flags for remotely operating Podman
    befdb4199 libpod: remove unused ContainerState() fucntion
    0ec63abca [CI:BUILD] Packit: Enable failure notifications for cockpit tests
    0ac98176b e2e: ExitCleanly(): more low-hanging fruit
    a50fb7e06 e2e: ExitCleanly(): more low-hanging fruit
    1908663f1 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.12.1
    38f5ead33 Enable machine e2e tests for WSL
    ff07abea4 systests: tighter checks for unwanted warnings
    618f846ed GHA Workflow: Faster discussion-locking
    289be0c01 [CI:BUILD] FCOS + podman-next image: pull in wasm
    649539519 [CI:BUILD] rpm: remove gvproxy subpackage
    b0f7072ac [CI:DOCS] Tweak podman to Podman in a few farm man pages
    8afffa1aa Docs on sig-proxy are wrong, we support TTY
    4fca726f7 e2e: ExitCleanly(): low-hanging fruit, part 2
    64c46c429 e2e: ExitCleanly(): low-hanging fruit, part 1
    113b41b6f Buildtag out unix commands for common OS files
    aec58f515 systests: clean up after tests; fix missing path in logs
    fa7150451 [CI:BUILD] followup PR for fcos with podman-next
    289e59ee1 Implement gvproxy networking using cmdline wrapper
    e68e37136 fix, test: rmi should work with images w/o layers
    e9b98510d vendor: bump c/common to v0.56.1-0.20230919073449-d1d9d38d8282
    50a685bd1 Quadlet Image test - rearrange test function
    e6cf09b68 e2e: continuing ExitCleanly() work: manual tweaks
    d78221545 e2e: continuing ExitCleanly() work
    47160da7a [CI:DOCS] Improve podman-tag man page
    ef553fb0d [CI:DOCS] Improve podman-build man page
    93dc30e1e [CI:DOCS] Include precheck to release process
    a80a908df [CI:DOCS] consistentize filter options in man pages
    55ca571e5 Quadlet - add support for .image units
    41beb5374 --env-host: use default from containers.conf
    0b7142f4a error when --module is specified on the command level
    deba3b80a man page crossrefs: add --filter autocompletes
    03dd5f256 Fix specification of unix:///run
    98e6dda69 Add label! filter and tests to containers and pods
    6f4f94137 Add test for legacy address without two slashes
    336055fe3 Use url with scheme and path for the unix address

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2024-01-04 02:52:53 +00:00
Bruce Ashfield
695a4ca0a4 netavark: update to v1.9.0 
Bumping netavark to version v1.9.0-20-g167e2e4, which comprises the following commits:

    3faf33f fix(deps): update rust crate tokio to 1.35
    4759152 dhcp-proxy: return actual error instead of generic one
    f571e31 dhcp-proxy: skip set gateway if missing
    63c34a5 chore(deps): update rust crate once_cell to 1.19.0
    ff45e22 fix(deps): update rust crate nispor to 1.2.15
    c85d844 fix(deps): update rust crate serde to 1.0.193
    3bbc9fd fix(deps): update rust crate clap to ~4.4.10
    4f27552 aardvark: show error if process is in wrong netns
    a4e082d aardvark: remove unessesary unlock lockfile calls
    4c58983 fix(deps): update rust crate url to 2.5.0
    f588f1d Bump working version to v1.10.0-dev
    1ac6900 v1.9.0 Release
    d688bdc v1.9.0 Release notes
    2f31a95 test: fix syntax problem in helpers.bash
    530c911 run cargo update
    d49f979 use OsString/Path over String for file paths
    c6f48d6 chore(deps): update dependency containers/automation_images to v20231116
    8e943b5 firewalld-reload: fix CI tests
    2172205 firewalld-reload: prevent race which could leak fw rules
    6aee10f fix(deps): update rust crate clap to ~4.4.8
    74ed450 CI: skip broken firewalld test
    e281e9b fix(deps): update rust crate http to 0.2.11
    708bd43 rpm: add netavark-firewalld-reload.service to spec
    b5d7510 firewalld-reload: add integration tests
    268a927 firewall/state: make sure to ignore enoent on read
    0449ba5 firewall-reload: integrate actual logic to reload rules
    13b2133 firewall/state: improve error messages
    d2eeaab firewall: add state functions to serialize configs
    cd1114c firewalld: fix lint errors with rust v1.73
    28c48ce firewall: do not use full Network in NetworkStruct
    aebb5da firewall: add dns_port to SetupNetwork
    cb5aa2e add firewalld-reload subcommand
    3df3c88 fix(deps): update rust crate http to 0.2.10
    9a3266b fix(deps): update rust crate env_logger to 0.10.1
    a063151 fix(deps): update rust crate tokio to 1.34
    dce15ba Update rust container build files
    730e1bf bridge: force static mac on bridge interface
    fca4999 fix(deps): update rust crate futures-core to 0.3.29
    6291f27 fix(deps): update rust crate serde to 1.0.190
    e7a4435 fix(deps): update rust crate serde_json to 1.0.108
    b4ca3e0 fix(deps): update rust crate sysctl to 0.5.5
    9d9f600 fix(deps): update rust-futures monorepo to 0.3.29
    78b4fea CI: Drop CI VM distro name
    116d565 chore(deps): update dependency containers/automation_images to v20231004
    f42b296 fix(deps): update rust crate tokio to 1.33
    881828f build-sys: Filter to tier 2 Linux declaratively
    f29b03f fix(deps): update rust crate sha2 to 0.10.8
    a54db5d fix podman.io community link
    33a4c86 Bump to v1.9.0-dev
    837f1f3 Release v1.8.0
    046b4cf update release notes for v1.8.0
    11db130 run cargo update
    4b6d5ab Add vrf support for bridges
    d211c7a Packit: switch to @containers/packit-build team for copr failure notification comments
    6989cda fix(deps): update rust crate nispor to 1.2.14
    40df9d9 [CI:BUILD] Packit: tag @lsm5 on copr build failures
    b8671a6 chore(deps): update rust crate chrono to 0.4.31
    2904dc1 fix(deps): update rust crate serde_json to 1.0.107
    bc383f2 rust io safety: convert RawFd to BorrowedFd<>
    61b8e62 bump nix to 0.27.1
    156073b chore(deps): update rust crate chrono to 0.4.30
    521e490 fix(deps): update rust crate serde_json to 1.0.106
    b9441cf chore(deps): update rust crate chrono to 0.4.29
    8c6c7fd fix(deps): update rust crate netlink-packet-route to 0.17.1
    f5d0a95 Bump tonic and prost
    70cc3e9 Update container image to F38
    3806d9a Add ACCEPT rules in firewall for bridge network with internal dns.
    d9961dc chore(deps): update rust crate tonic-build to 0.10
    7d581d2 fix(deps): update rust crate nispor to 1.2.13
    ddbfc60 fix(deps): update rust crate serde to 1.0.188
    96368f4 Fix clippy warnings about formatting
    4b0b499 update chrono crate
    be29339 fix(deps): update rust crate url to 2.4.1
    bcd1ebc Add protoc dependency to README
    9c840e9 [CI:BUILD] rpm: spdx compatible license field
    a19bf24 fix(deps): update rust crate tokio to 1.32
    4636b22 chore(deps): update dependency containers/automation_images to v20230816
    735ea2f fix(deps): update rust crate serde_json to 1.0.105
    719ded6 fix(deps): update rust crate tokio to 1.31
    3b5ce46 fix(deps): update rust crate log to 0.4.20
    60d6185 run cargo update
    ab90b2b update tonic-build to 0.9.2
    fcdacab bump rust edition to 2021
    845fbdf iptables: drop invalid packages
    080a814 fix(deps): update rust crate tokio to 1.30
    6caef06 docs: Convert markdown with go-md2man instead of mandown
    bb22c34 fix(deps): update rust crate clap to 4.3.21
    00c05a6 packit: Build PRs into default packit COPRs
    2f44e50 chore(deps): update dependency containers/automation_images to v20230807
    c5df890 fix(deps): update rust crate serde to 1.0.183
    be2a8ea fix(deps): update rust crate serde to 1.0.181
    067bbde fix(deps): update rust crate serde to 1.0.180

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2024-01-04 02:52:53 +00:00
Bruce Ashfield
f6f61282bf aardvark-dns: update to v1.9.0 
Bumping aardvark-dns to version v1.9.0-10-gf1c946c, which comprises the following commits:

    e4785bd Release v1.9.0
    e406f83 v1.9.0 Update release notes
    8880d68 run cargo update
    864fa96 chore(deps): update dependency containers/automation_images to v20231116
    a8642b3 fix(deps): update rust crate tokio to 1.34.0
    b154c3b fix(deps): update rust crate async-broadcast to 0.6.0
    5ee6646 update trust-dns to hickory
    f516597 fix(deps): update rust crate futures-util to 0.3.29
    20ab8f5 fix(deps): update rust crate trust-dns-server to 0.23.2
    d9f023a fix(deps): update rust crate trust-dns-proto to 0.23.2
    645fb12 tmt: initial enablement
    3633db0 aardvark main: change error reporting
    7820735 chore(deps): update dependency containers/automation_images to v20231004
    dc1ef13 fix(deps): update rust crate trust-dns-proto to 0.23.1
    085608c fix(deps): update rust crate trust-dns-client to 0.23.1
    ceca55b clippy: some format fixes
    9c90865 fix(deps): update rust crate tokio to 1.33.0
    3391c8d Bump to v1.9.0-dev
    1ed9402 Release v1.8.0
    a9e95ca update release notes for v1.8.0
    1730fef run cargo update
    2a3415e Packit: switch to @containers/packit-build team for copr failure notification comments
    82752dd [CI:BUILD] Packit: tag @lsm5 on copr build failures
    0356081 chore(deps): update rust crate chrono to 0.4.31
    0d831cf cargo: bump chrono to 0.4.30
    ea06d05 test: IPv6 format is changed in v1.72.0
    d2a7527 bump nix to 0.27.1
    20e5b56 vendor: bump trust_dns_proto and trust_dns_client to 0.23.0
    cce63be fix(deps): update rust crate trust-dns-server to 0.23.0
    c81a038 [CI:BUILD] rpm: spdx compatible license field
    cae27d7 fix(deps): update rust crate anyhow to 1.0.75
    b46553e fix(deps): update rust crate tokio to 1.32.0
    1d8d421 chore(deps): update dependency containers/automation_images to v20230816
    f8bdbf1 fix(deps): update rust crate tokio to 1.31.0
    88e847d fix(deps): update rust crate anyhow to 1.0.74
    3f74fdc fix(deps): update rust crate anyhow to 1.0.73
    17ca8a1 fix(deps): update rust crate log to 0.4.20
    70ad545 chore(deps): update dependency containers/automation_images to v20230809
    cb2b0e6 fix(deps): update rust crate tokio to 1.30.0
    def4232 fix(deps): update rust crate clap to 4.3.21
    cd85a71 packit: Build PRs into default packit COPRs
    4df6054 chore(deps): update dependency containers/automation_images to v20230807
    a713fa6 fix(deps): update rust crate anyhow to 1.0.72
    dc36e6b fix(deps): update rust crate signal-hook to 0.3.17
    62cd6e2 fix(deps): update rust crate clap to 4.3.19
    7f3c50d fix(deps): update rust crate clap to 4.3.15
    8821976 fix(deps): update rust crate signal-hook to 0.3.16
    75a7b92 [CI:BUILD] Packit: remove pre-sync action
    1e54ac4 fix(deps): update rust crate clap to 4.3.11
    389a189 fix(deps): update rust crate tokio to 1.29.1
    836a441 fix(deps): update rust crate clap to 4.3.10
    c81743a [CI:BUILD] RPM: cleanup spec and fix eln builds
    2703165 bump to v1.8.0-devel

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2024-01-04 02:52:53 +00:00
Bruce Ashfield
ba9cbc0914 skopeo: update to 1.14.0 
Bumping skopeo to version v1.14.0-10-ga85eaac9, which comprises the following commits:

    48d11dac fix(deps): update golang.org/x/exp digest to 6522937
    87eef310 DOCS: add Gentoo in install.md
    f50dc204 DOCS: Update to add Arch Linux in install.md
    9f52e728 fix(deps): update module golang.org/x/term to v0.15.0
    efd76e74 Bump to v1.14.1-dev
    6abf96bb Bump to v1.14.0
    14496ba4 fix(deps): update module github.com/containers/common to v0.57.0
    fa85e47b chore(deps): update dependency containers/automation_images to v20231116
    e4b67e78 fix(deps): update module github.com/containers/image/v5 to v5.29.0
    edefdb66 Add documentation and smoke tests for the new --compat-auth-file options
    518181e5 Update c/image and c/common to latest
    56b96a4d fix(deps): update module github.com/containers/storage to v1.51.0
    a8e7d94e fix(deps): update module golang.org/x/term to v0.14.0
    50cffa38 fix(deps): update module github.com/spf13/cobra to v1.8.0
    0c2cca96 [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.2
    6b2a26f1 [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.1
    6ef8acff fix(deps): update github.com/containers/common digest to 3e5caa0
    5d4e89cc chore(deps): update module google.golang.org/grpc to v1.57.1 [security]
    5307dd66 fix(deps): update module github.com/containers/ocicrypt to v1.1.9
    03c94252 Update github.com/klauspost/compress to v1.17.2
    91611a3a chore(deps): update module github.com/docker/docker to v24.0.7+incompatible [security]
    a9c7c505 Fix ENTRYPOINT documentation, drop others.
    70551db8 Remove unused environment variables in Cirrus
    a2eb508b [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.0
    1fa360a6 chore(deps): update dependency containers/automation_images to v20231004
    fa3e62f2 chore(deps): update module golang.org/x/net to v0.17.0 [security]
    dc4fa672 copy: Note support for `zstd:chunked`
    538dd6f3 fix(deps): update module golang.org/x/term to v0.13.0
    611db7c3 fix(deps): update module github.com/docker/distribution to v2.8.3+incompatible
    43e1a96e fix(deps): update github.com/containers/common digest to 745eaa4
    5fad766c Packit: switch to @containers/packit-build team for copr failure notification comments
    d8b3a17f Packit: tag @lsm5 on copr build failures
    57034826 vendor of containers/common
    7db8fbde fix(deps): update module github.com/opencontainers/image-spec to v1.1.0-rc5
    4d921585 fix(deps): update module github.com/containers/common to v0.56.0
    9e89e18f Cirrus: Remove multi-arch skopeo image builds
    32c8a05a fix(deps): update module github.com/containers/image/v5 to v5.28.0
    679615f5 Increase the golangci-lint timeout
    c1e7c974 fix(deps): update module github.com/containers/storage to v1.50.2
    9563e3b8 fix(deps): update module github.com/containers/storage to v1.50.1
    427e58f5 fix(deps): update golang.org/x/exp digest to 9212866
    7c39f363 Fix a man page link
    897619f6 fix(deps): update github.com/containers/image/v5 digest to 58d5eb6
    2976f4f8 GHA: Closed issue/PR comment-lock test
    46979914 fix(deps): update module github.com/containers/common to v0.55.4
    3249973d fix(deps): update module github.com/containers/storage to v1.49.0
    b87a1b3e rpm: spdx compatible license field
    b0d587a9 chore(deps): update dependency golangci/golangci-lint to v1.54.2
    7ced0fb0 chore(deps): update dependency containers/automation_images to v20230816
    4b952d61 Packit: set eln target correctly
    6b827fa7 packit: Build PRs into default packit COPRs
    fec950c2 DOCS: Update Go version requirement info
    449ac9bb DOCS: Add information about the cross-build
    78187ca8 fix(deps): update module github.com/containers/ocicrypt to v1.1.8
    df117e28 fix(deps): update module github.com/containers/common to v0.55.3
    4ee2946b Update c/image after https://github.com/containers/image/pull/2070
    0e3efc64 chore(deps): update dependency golangci/golangci-lint to v1.54.1
    46fcbd3a chore(deps): update dependency containers/automation_images to v20230809
    e98561e2 fix(deps): update golang.org/x/exp digest to 352e893
    4f5ba65a chore(deps): update dependency containers/automation_images to v20230807
    5abce03c Update to Go 1.19
    276b8095 fix(deps): update module golang.org/x/term to v0.11.0
    60ee543f Update c/image for golang.org/x/exp
    ab892075 RPM: define gobuild macro for rhel/centos stream
    f236b5ef Fix handling the unexpected return value combination from IsRunningImageAllowed
    c40f1485 Close the PolicyContext, as required by the API
    e90ad861 Use globalOptions.getPolicyContext instead of an image-targeted SystemContext
    a4aa15f4 Packit: remove pre-sync action
    a0a340a1 fix(deps): update module github.com/containers/common to v0.55.2
    f7dc0847 proxy: Change the imgid to uint64
    a39972ca [CI:BUILD] Packit: install golist before updating downstream spec
    2945e9e0 Update module golang.org/x/term to v0.10.0
    5f87f6ab Bump to v1.14.0-dev
    cb1e9012 Bump to v1.13.0

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2024-01-04 02:52:53 +00:00
Bruce Ashfield
8c6303bb83 crun: update to v1.12 
Bumping crun to version 1.12-19-g90b21dd, which comprises the following commits:

    49f439d ctx: drop no_subreaper bool
    b5ad30f krun: fix use of uninitialized integer
    7c5a32a criu: do not set CLOEXEC on fds to inherit
    c9e23a8 criu: fix error return value
    501aa98 handlers: Fix -Werror=unused-parameter build error for spin
    c9014f8 src: use O_CLOEXEC with pipes
    3ad89be src: use O_CLOEXEC for all open/openat calls
    0f0d5be src: close std streams on exec
    08b7d33 build(deps): bump uraimo/run-on-arch-action from 2.5.1 to 2.6.0
    2ad31d4 linux: fix error string
    ce429cb NEWS: tag 1.12
    08d9fea preconfigure cpuset with required resources
    a18356e README.md: update the correct Nix channel
    da991db utils: try attr/<lsm>/* before attr/*
    616aea7 feat: add spin handler
    172bbd0 container: move dereference after check
    2cc04ea systemd: fallback to system bus

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2024-01-04 02:52:53 +00:00