Commit Graph

998 Commits

Author SHA1 Message Date
Chen Qi
a4b847830f oci-image-tools: remove unneeded deps
These deps no longer have any effect. Remove them.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-03-15 17:17:19 +00:00
Bruce Ashfield
9213f05f55 runc-opencontainers: update to 1.1.12
Bumping runc to version v1.1.12-2-ga9833ff3, which comprises the following commits:

    29d6d873 VERSION: back to development
    51d5e946 VERSION: release 1.1.12
    e9665f4d init: don't special-case logrus fds
    683ad2ff libcontainer: mark all non-stdio fds O_CLOEXEC before spawning init
    b6633f48 cgroup: plug leaks of /sys/fs/cgroup handle
    284ba305 init: close internal fds before execve
    fbe3eed1 setns init: do explicit lookup of execve argument early
    0994249a init: verify after chdir that cwd is inside the container
    506552a8 Fix File to Close
    d0b1a374 keyring: update AkihiroSuda key expiry
    d561e5da keyring: update cyphar@cyphar.com key expiry
    7887736f VERSION: back to development
    4bccb38c VERSION: release 1.1.11

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-03-15 17:17:19 +00:00
Bruce Ashfield
54fdc5149a containerd: update to v2.0.0-beta-tip
Bumping containerd to version v2.0.0-beta.2-204-gb1624c362, which comprises the following commits:

    5351ad6b4 .github: windows should use fix critool version
    a2768f19d plugins/sandbox: move local plugin into services
    464319b3a Remove pause package from runc shim
    2cd08156e cri: Expose runtimeHandler support for userns
    358aef4bc go.mod: Update cri-api to include userns changes
    105f2d727 build(deps): bump google.golang.org/grpc from 1.61.0 to 1.62.0
    02db6beb8 build(deps): bump github.com/prometheus/client_golang
    75f58579c build(deps): bump github.com/opencontainers/runtime-spec
    522130a66 sandbox: support vsock connection to task api
    f0e874941 Add ttrpc generated services
    65031eade Update protobuild to build ttrpc services
    04c37d565 build(deps): bump the k8s group with 5 updates
    bd4810415 ci: update crun version to 1.14.3
    50d0de96a Update 1.7 support timeline
    4fbc9842d Changes to configuring otel from env only
    753a525b3 Deprecate otel configs
    0693b936d replace deprecated Prestart to CreateRuntime hook
    6a21c96b5 Replace go-grpc-prometheus with go-grpc-middleware/providers/prometheus
    567e56a20 build(deps): bump github.com/opencontainers/image-spec
    6a759713a Update golangci-lint to v1.56.1
    f44d90be4 Rename variables and snapshotter option to resolve lint warnings
    5611db530 cri: Make sure host sandbox files exist before adding them to mounts
    9077d1372 KEP-3857: Recursive Read-only (RRO) mounts
    83ad4367d script/test/utils.sh: readiness_check: print daemon log
    f8f1e5f7a Add container monitor plugin type for restart
    c86c8a16f integration: add case related to ContainerStats in upgrade suite
    acec60f55 integration: update recover case for upgrade
    e659cd275 integration: connect to shim by bridge client
    51689b661 integration: introduce hook for upgrade test suite
    a95c8ed59 integration: check data dir after delete container or pod
    ec759f5be integration/*: extend Runtime.Status response
    401d4b491 integration: add some helper function to release upgrade cases
    7cf8a00c7 Run failpoints tests only for runc
    a890c8e53 Add job to report statuses from matrix jobs
    132485adb Convert CLI to urfave v2
    c8766123d Prevent GC from schedule itself with 0 period.
    a086125ae Move config version to version package
    99721c27e Disable the support for Schema 1 images
    b9dfba5b8 Add CRIImageService.RemoveImage()
    4c775fcfb Pass runtimehandler from CRI pull image request
    4dcf089fa Move high volume event logs to Trace level
    1b3a96da6 cri: propagate deprecation list to runtime status
    ac7febc93 moving up for new CRI changes
    ccec1e6e4 Remove internal LoopConfig struct
    3d8da2ebf build(deps): bump the golang-x group with 1 update
    a274439f2 build(deps): bump golangci/golangci-lint-action from 3 to 4
    468bee9a7 ctr: print deprecation warnings on every invocation
    c2dfae8d0 go.mod: Bump golang.org/x/sys to v0.17.0
    41bb8b816 Revert "Fix for k8s nfs related tests"
    48c8c5f50 Remove ParseSignal from client
    281eb22cc Remove deprecated dialer
    1ce7b9951 Remove deprecated filesys funcs
    5ca56ddbb Remove deprecated funcs from restart package
    653b80899 Remove deprecated docker package
    413fbe82c Fix unpacker link in remote snapshotter docs
    23ebfd030 Fix for k8s nfs related tests
    25ab90219 Update to v0.29.1 cri-api
    5e3e12d2a build(deps): bump the otel group with 8 updates
    c4bb72ae4 Remove CRI plugin path note
    87aa9e800 Drop go 1.20 and build against 1.22
    276384695 Update codeql-action/upload-sarif dependency in scorecards workflow
    634ac2f8f Update migration script for transfer packages
    f46aea618 Move transfer and unpack packages
    d9b95ab68 Update gce configure.sh to use registry config_path
    360fbf197 Fix windows integration tests
    2820343d4 Update workflow files to install Go via composite action
    488b56361 Extract a composite action to install Go
    5aa05481d Add OSVersion to platform protobuf
    d9cae66d8 Extend string match in make protos
    c58b1fb40 Update github.com/containerd/console to v1.0.4
    06ed897b2 cri/server: Add userns tests in PodSandboxStatus
    6c356a5c7 cri: Expose userns in PodSandboxStatus rpc
    1eaf0c1f0 bug fix: make sure cri image is pinned when it is pulled outside cri
    9eb9038a9 Avoid publishing data events during transaction
    86530c0af Move image event publishing to metadata store
    32bd8eff9 Move inline PS scripts into files
    4e8e21a7d go.{mod,sum}: update NRI dependency, re-vendor.
    5cbe92e88 Clean up repeated package import
    72950c00b Treat PRs that require rebase > 90 days as stale
    db437580b build(deps): bump github.com/opencontainers/image-spec
    2c7d69530 build(deps): bump github.com/klauspost/compress from 1.17.5 to 1.17.6
    da1673f55 Update vendor
    047d42e90 Update ttrpc to v1.2.3
    64e96c7d4 Update hcsshim to v0.12.0-rc.3
    a9060cda4 Support inject delay running with the old version (4.x) of strace for test case.
    9ef94fe52 fix(docs): fix cp and add step to include binaries in the $env:Path
    fe24b918f pkg/nri, docs: enable NRI by default.
    e230ed939 sandbox: add sandbox recover ut and e2e test
    312496474 sandbox: fix recover status set issue
    256637249 Fix config import relative path glob
    667069583 Revert "cri: make read-only mounts recursively read-only"
    a9152ebf8 copy: prevent potential deadlock if close before fully written
    b48e1141e copy: setError should imply Close
    e4f91c2df copy: remove max number of ErrResets
    651cfa2a2 pushWriter: refactor reset pipe logic into separate function
    9d7641ff3 copy: improve error detection from closed pipes
    91a50f70b copy: check if writer was closed before setting a pipe
    4660f6303 copy: remove wrapping io.NopCloser from push writer pipe
    0facc8592 Fix proto formatting
    7f2d2c4f4 Move Message proto to types
    287524733 Fix formatting after moving CRI
    bbac058cf Move CRI from pkg/ to internal/
    6e365e925 CRI: An empty DNSConfig != unspecified
    9340be717 Remove duplicated TOML duration parsers
    b2f254fff cri: make read-only mounts recursively read-only
    f74e5ce7e Move differ default to its own file
    82fb589ff Update runc binary to v1.1.12
    87a9835f1 docs: fix typo
    81409e937 Add a default differ that matches the snapshotter
    2369185aa CI: update Rocky Linux to 8.9
    d8460a702 CI: bump up crun to 1.14
    ebbce7423 rm docs/cri/installation.md
    49d5cc7f9 build(deps): bump github.com/klauspost/compress from 1.17.4 to 1.17.5
    4d33170ea build(deps): bump github.com/google/uuid from 1.5.0 to 1.6.0
    3a5b47d73 build(deps): bump google.golang.org/grpc from 1.60.1 to 1.61.0
    9a983caad build(deps): bump github.com/containerd/plugin
    495afb0c0 build(deps): bump lycheeverse/lychee-action from 1.9.1 to 1.9.3
    5365a1089 build(deps): bump google-github-actions/upload-cloud-storage
    64b4778fc Add deprecation warnings to CRI image server configuration
    65b3922df Split streaming config from runtime config
    58ff9d368 Move cri plugin to plugins subpackage
    d29a1bc6a Move sandbox info to cri types packages
    9795677fe Move cri base plugin to CRI runtime service
    966d51801 The `Links` workflow should be disabled in forks.
    e15f191a2 Fix func (m manager) Info in containerd-shim-runc-v2
    4f570db1a refactor: remove containerd/containerd/log
    010857d33 Add errdefs and platforms to migration script
    7cf54b437 Remove unused pkg/errdefs package
    fb9b59a84 Switch to new errdefs package
    6b906a22d Prepare release notes for v2.0.0-beta.2
    b608c6f73 doc: fix package import path in sample code
    b16e3572a refactor: move plugin/fieldpath to api/types/
    22d586e51 api/services/instrospection: add PluginInfo
    ad869e905 Use tags.cncf.io CDI url in config.md
    eb8981f35 mv contrib/seccomp/kernelversion pkg/kernelversion
    a6e52c74f seccomp: kernel 6.7
    ed4710241 Code clean for nri_api.
    ade80789b Remove walker diff plugin for Windows
    af6a90bf5 remotes/docker/authorizer.go: invalidate auth tokens when they expire.
    e79ec7a09 Remove deprecated platforms package
    3f620143f Use github.com/containerd/platforms package
    9dd29b3cf Update container-device-interface to v0.6.2
    7eccde5d0 Clean plugin indent in containerd-config.toml.5.md
    b16d46740 pod: CreatedAt time will be 269 years ago while creating cri network failed.
    378e9f443 build(deps): bump actions/cache from 3 to 4
    748fe2035 integration: add test for recovering images
    2e8e03389 Add multi-subscriber support to GetContainerEvents CRI API
    e7eb08eb5 Add support for multiple subscribers to CRI container events
    cfe8321b4 strip-volatile-option-tmp-mounts
    d34725f85 CI: use standard GHA runners
    9d2c22123 Prepare release notes for v2.0.0-beta.1
    e9f2bba1f remotes: FetchByDigest: propagate media type from config to desc
    d7689ae8b Remove CRI plugin config after migrating
    f48f61fd8 Add migration integration test
    eb9925d88 Update config migrations to decode using the plugin type
    15713014d Update server config slice merge strategy
    cf6f439eb Fix transfer plugin unpack configuration
    eb123db5f ctr: use transfer service by default
    94d1b2098 Add migration script to contrib
    9ee1f4716 Rebuild protos with updated runtime location
    dbc74db6a Move runtime to core/runtime
    df9b0a067 Move metrics to core/metrics
    19e763553 Move pkg/truncindex to internal/truncindex
    764c90700 Move pkg/tomlext to internal/tomlext
    1c4be2d88 Move pkg/testutil to internal/testutil
    114df368f Move pkg/registrar to internal/registrar
    4ee6419fa Move pkg/randutil to internal/randutil
    696cf2565 Move pkg/kmutex to internal/kmutex
    5e1d9543b Move pkg/hasher to internal/hasher
    23914a01b Move pkg/failpoint to internal/failpoint
    c79ecfe24 Move pkg/cleanup to internal/cleanup
    8f0eb2631 Move tracing to pkg/tracing
    6be90158c Move sys to pkg/sys
    de606680b Move rootfs to pkg/rootfs
    fdb8a527c Move reference to pkg/reference
    e59f64792 Move oci to pkg/oci
    fa8cae99d Move namespaces to pkg/namespaces
    b76236bb4 Move labels to pkg/labels
    bb71c2835 Move identifiers to pkg/identifiers
    5e00f63ce Move gc to pkg/gc
    11114b0a9 Move gc/scheduler to plugins/gc
    c38f2ab72 Move filters to pkg/filters
    44a836c9b Move errdefs to pkg/errdefs
    70ed2696f Move events to pkg/events
    b0c3d00e9 Move cio to pkg/cio
    8e14c39e8 Move archive to pkg/archive
    fcd39ccc5 Move snapshots to core/snapshots
    e0fe656da Move snapshots/windows to plugins/snapshots/windows
    57bdbfba6 Move snapshots/overlay to plugins/snapshots/overlay
    9b8c558f9 Move snapshots/native to plugins/snapshots/native
    5c07d5d36 Move snapshots/lcow to plugins/snapshots/lcow
    8473322f0 Move snapshots/devmapper to plugins/snapshots/devmapper
    7dd96fe34 Move snapshots/btrfs to plugins/snapshots/btrfs
    2909f07f8 Move snapshots/blockfile to plugins/snapshots/blockfile
    92d2a5fc0 Move services to plugins/services
    ce41d1c90 Move services/server to cmd/containerd/server
    228ad5a5c Move sandbox to core/sandbox
    d133019c9 Move runtime/restart/monitor to plugins/restart
    0dabf6f15 Move remotes to core/remotes
    6e5408dce Move mount to core/mount
    1a1e0e8c8 Move metadata to core/metadata
    18b3cbe4f Move metadata/plugin to plugins/metadata
    f80760f9f Move leases to core/leases
    cc6a5c9c6 Move leases/plugin to plugins/leases
    57ea8aef3 Move images to core/images
    913edcd48 Move diff to core/diff
    d14350376 Move diff/windows to plugins/diff/windows
    2d861b6ea Move diff/walking to plugins/diff/walking
    aaf6ac04c Move diff/lcow to plugins/diff/lcow
    9456048f4 Move containers to core/containers
    21b4f3f0a Move content to core/content
    846f7d4e6 Move content/local to plugins/content/local
    725c92e7c include image name in error message
    18b0d236c build(deps): bump actions/upload-artifact from 3 to 4
    f45b46b67 runtime/v2: reduce shim plugin log
    20619a7c9 ci: make artifact name unique in linux integration
    2053d9157 build(deps): bump lycheeverse/lychee-action from 1.9.0 to 1.9.1
    d4396c96b mount: UnmountRecursive return nil if path doesn't exist
    8aa2551ce Move DefaultSnapshotter constants
    c8e8a093c config: enable CDI by default
    5a3d3f613 Update load image test to use local import
    6041d4e60 Update fuzz contrib for updated image service
    2a476d421 Move ParseImageReferences to cri util
    3baf5edb8 Separate the CRI image config from the main plugin config
    ad4c9f8a9 Update CRI runtime platform and pinned image configuration
    11f311fdd Add minimal interface to CRI image store
    02a9a456e Split image config from CRI plugin
    d23ac1122 Split CRI image service from GRPC handler
    a2472c0b5 transfer: add OCI descriptors to Progress structure
    f26196950 Move certain debug logs to trace logs
    a5d958706 update to go1.21.6, go1.20.13
    21640c57a Uninstall mingw before attempting upgrade
    174efb1e0 update imgcrypt binary to v1.1.9
    dfb175380 build(deps): bump the golang-x group with 2 updates
    2b415c911 build(deps): bump lycheeverse/lychee-action from 1.8.0 to 1.9.0
    7dadd5f1b sandbox: remove sandboxStore from podsandbox
    a3c62e698 add label flags to ctr import, add integration tests
    d01056555 Handle failure when stopping a sandbox
    8235665e7 content: Add InfoReaderProvider
    fa83bc8de integration: remove use of golang.org/x/sys/execabs
    dffeea471 add get cgroupdriver from RuntimeConfig to integration
    46b2f1d16 Use latest VM image to get Windows updates regularly
    a8d39666d Move cimfs OS build compat check to the operation functions instead of init()
    0d3c3efe3 integration/import-export: Add WithSkipMissing tests
    b9af453f0 export: Copy distribution source labels to manifest annotations
    61a7c4999 import/export: Support references to missing content
    1ab4fac94 update runc binary to v1.1.11
    5387747e9 build(deps): bump github.com/containerd/cgroups/v3 from 3.0.2 to 3.0.3
    a1e0601e0 fix: Update go.opentelemetry.io/otel/sdk/trace to satisfy traceProvider interface
    78421616e deps: Update otelgrpc
    bd4c281c5 build(deps): bump github.com/fsnotify/fsnotify from 1.6.0 to 1.7.0
    62a824a4b build(deps): bump github.com/intel/goresctrl from 0.5.0 to 0.6.0
    7fe038e4a build(deps): bump google.golang.org/protobuf from 1.31.0 to 1.32.0
    81bb66942 build(deps): bump github.com/google/uuid from 1.3.1 to 1.5.0
    9d328410a shim: Create pid-file with 0644 permissions
    daa1ea522 Add cimfs differ and snapshotter
    c19193574 fix: return gRPC code "unavailable" if server is not initialized yet
    1f9151af6 build(deps): bump google.golang.org/grpc from 1.58.3 to 1.60.1
    0b48b5659 build(deps): bump google-github-actions/upload-cloud-storage
    97ec26a5e build(deps): bump actions/download-artifact from 3 to 4
    22138541a tracing/plugin: newTracer: ignore context.Canceled errors on Close()
    7c651e183 docs: fix CI badge in README
    e10c82e4c build(deps): bump github.com/google/uuid from 1.3.1 to 1.5.0
    25dc823bf integration: fix format string for klog.Infof
    fc4b78c05 build(deps): bump github.com/intel/goresctrl from 0.3.0 to 0.5.0
    1c96087ce build(deps): bump github.com/Microsoft/hcsshim
    7e3c8af52 build(deps): bump github.com/prometheus/client_golang
    f9303d04d build(deps): bump github/codeql-action from 2 to 3
    4c1ebe33b build(deps): bump docker/setup-buildx-action from 2 to 3
    51fd1d47e dependabot: enable groups
    4a71a9360 build(deps): bump github.com/moby/sys/mountinfo from 0.6.2 to 0.7.1
    344fe957f build(deps): bump golang.org/x/mod from 0.13.0 to 0.14.0
    6726a2aeb build(deps): bump k8s.io/component-base from 0.28.2 to 0.28.4
    0c98f1063 build(deps): bump github.com/klauspost/compress from 1.17.2 to 1.17.4
    39ba0347e build(deps): bump go.etcd.io/bbolt from 1.3.7 to 1.3.8
    db43e3d1f build(deps): bump golang.org/x/sync from 0.4.0 to 0.5.0
    4660090ba build(deps): bump actions/stale from 8 to 9
    ace8ab1bd build(deps): bump docker/login-action from 2 to 3
    0b94716e8 build(deps): bump actions/github-script from 6 to 7
    9133ad811 build(deps): bump actions/upload-artifact from 1 to 3
    c1823a7c6 build(deps): bump ossf/scorecard-action from 2.0.3 to 2.3.1
    36b12cbcb build(deps): bump crazy-max/ghaction-github-runtime from 2 to 3
    dc5a6cfae build(deps): bump google-github-actions/auth from 0 to 2
    f6a9c6966 build(deps): bump actions/setup-go from 3 to 5
    e27ea7d1a build(deps): bump google-github-actions/upload-cloud-storage
    3ca95282e build(deps): bump actions/checkout from 3 to 4
    1398186ca WithAppendAdditionalGroups: better /etc/group handling
    5a140dca5 CI: enable dependabot
    c1197995b go.mod: Bump up github.com/pelletier/go-toml to v2.1.1
    23278c81f *: introduce image_pull_with_sync_fs in CRI
    bd5c602c4 api: introduce sync_fs to diff.ApplyRequest
    6bb81ee57 Document `ns` query string added to mirror requests
    98526c9d3 Exclude releases directory from links checker
    f67c1632f Add ignore list for links
    e740dd3d6 Add links status badge
    bfa651c69 Fix broken links
    c9fa5b980 Add nighly job to verify doc links
    25b052cbc Move GenerateRuntimeOptions() to pkg/cri/config
    cb5a48e64 *: enable ARM64 runner
    596ada3ac release: add .dockerignore to fix repeated builds
    cf4b57989 Remove deprecated tracing function
    8203bb997 Add HTTP client update function to tracing library
    ad3b806a4 fix(tracing): use latest version of semconv
    22db60b6b upgrade crun version from 1.9 to 1.12
    993790969 go.mod: Bump up github.com/containernetworking/plugins to v1.4.0
    734219a21 update to go1.21.5, go1.20.12
    212200452 update to go1.21.4, go1.20.11
    ad96fded4 Don't block snapshot garbage collection on Remove failures
    8bbce8d37 pkg/process: Check using idmap mount options too
    96aaf5a3b Add core and internal root packages
    6c6dfcbce contrib/apparmor: deny /sys/devices/virtual/powercap
    106a9b776 oci/spec: deny /sys/devices/virtual/powercap

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-03-15 17:17:19 +00:00
Bruce Ashfield
b7911a2a07 moby: update to v25.0.3
Bumping moby to version v25.0.3, which comprises the following commits:

    acd023d42b c8d: Use the same logic to get the present images
    ed7c26339e seccomp: add futex_wake syscall (kernel v6.7, libseccomp v2.5.5)
    74e3b4fb2e seccomp: add futex_wait syscall (kernel v6.7, libseccomp v2.5.5)
    4cc0416534 seccomp: add futex_requeue syscall (kernel v6.7, libseccomp v2.5.5)
    f9f9e7ff9a seccomp: add map_shadow_stack syscall (kernel v6.6, libseccomp v2.5.5)
    5fb4eb941d seccomp: add fchmodat2 syscall (kernel v6.6, libseccomp v2.5.5)
    67e9aa6d4d seccomp: add cachestat syscall (kernel v6.5, libseccomp v2.5.5)
    61b82be580 seccomp: add set_mempolicy_home_node syscall (kernel v5.17, libseccomp v2.5.4)
    0227d95f99 image/cache: Use Platform from ocispec
    fa9c5c55e1 image/cache: Ignore Build and Revision on Windows
    1652559be4 Dockerfile: update RootlessKit to v2.0.1
    147b5388dd integration/save: Add tests checking OCI archive output
    ba4a2dab16 plugins: fix panic installing from repo w/ digest
    51133117fb tests: add plugin install test w/ digest
    269a0d8feb Dockerfile: update docker compose to v2.24.5
    876b1d1dcd Dockerfile: update dev-shell version of the cli to v25.0.2
    0bcd64689b Dockerfile: update docker compose to v2.24.3
    8d454710cd Dockerfile: update dev-shell version of the cli to v25.0.1
    c12bbf549b libcontainerd/supervisor: fix data race
    9150d0115e d/logger/journald: quit waiting when logger closes
    9af7c8ec0a d/logger/journald: sync logger on close in tests
    3344c502da d/logger/loggertest: improve TestConcurrent
    6c9fafdda7 d/logger/journald: log journal-remote cmd output
    f8a8cdaf9e d/logger/journald: fix data race in test harness
    7a659049b8 libnet: bridge: ignore EINVAL when configuring bridge MTU
    0ccf1c2a93 api/t/network: ValidateIPAM: ignore v6 subnet when IPv6 is disabled
    28c1a8bc2b Revert "daemon: automatically set network EnableIPv6 if needed"
    bbe6f09afc No inspect 'Config.MacAddress' unless configured.
    5b13a38144 Only restore a configured MAC addr on restart.
    990e95dcf0 Add internal n/w bridge to firewalld docker zone
    c48b67160d api: Document `version` in `/build`
    225e043196 c8d/save: Handle digested reference same as ID
    78174d2e74 image/save: Fix untagged images not present in index.json
    85f4e6151a Assert temp output directory is not an empty string
    dd4de8f388 docs: remove dead links from api verison history
    f5ef4e76b3 ci: update to docker/bake-action@v4
    6c5e5271c1 ci: update to codecov/codecov-action@v4
    693fca6199 ci: update to actions/download-artifact@v4 and actions/upload-artifact@v4
    49487e996a ci: update to actions/cache@v3
    0358f31dc2 gha: update to crazy-max/ghaction-github-runtime@v3
    081cffb3fa gha: update to docker/login-action@v3
    9de19554c7 gha: update to docker/setup-qemu-action@v3
    2a80b8a7b2 gha: update to docker/bake-action@v4
    61ffecfa3b gha: update to docker/setup-buildx-action@v3
    02cd8dec03 gha: update to docker/metadata-action@v5
    1d7df5ecc0 gha: update to actions/setup-go@v5
    4e68a265ed gha: update to actions/github-script@v7
    e437f890ba gha: update to actions/checkout@v4
    fd6a419ad5 update containerd binary to v1.7.13
    13ce91825f vendor: github.com/moby/buildkit v0.12.5
    4b63c47c1e vendor: github.com/opencontainers/runc v1.1.12
    4edb71bb83 update runc binary to v1.1.12
    1b47bfac02 hack/make.ps1: Fix go list pattern
    f2d0d87c46 logger/journald: drop errDrainDone sentinel
    6ac38cdbeb logger/journald: wait no longer than the deadline
    d7bf237e29 logger/journald: use deadline for drain timeout
    f41b342cbe l/journald: make tests compatible with systemd 255
    f413ba6fdb daemon/logger/loggertest: expand log-follow tests
    c2ef38f790 vendor swarmkit v2.0.0-20240125134710-dcda100a8261
    d5eebf9e19 builder/windows: Don't set ArgsEscaped for RUN cache probe
    f3f5327b48 image/cache: Check image platform
    05a370f52f image/cache: Restrict cache candidates to locally built images
    be7b60ef05 daemon/imageStore: Mark images built locally
    6d05b9b65b image/cache: Compare all config fields
    c01bbbddeb pkg/ioutils: Make subsequent Close attempts noop
    32635850ed add more //go:build directives to prevent downgrading to go1.16 language
    2cf1c762f8 De-flake TestSwarmClusterRotateUnlockKey... again... maybe?
    5295e88ceb daemon: rename: don't reload endpoint from datastore
    3de920a0b1 volume/local: Fix cifs url containing spaces
    a445aa95e5 volume/local: Add tests for parsing nfs/cifs mounts
    cb77e48229 volume/local: Break early if `addr` was specified
    e8801fbe26 daemon: only add short cid to aliases for custom networks
    b8cc2e8c66 fix "host-gateway-ip" label not set for builder workers
    fcccfeb811 c8d/snapshot: Create any platform if not specified
    f8eaa14a18 pkg/platforms: internalize in daemon/containerd
    ac76925ff2 volume/local: Make host resolution backwards compatible
    ff15b49b47 Dockerfile: update docker compose to v2.24.2
    c0573b133f pkg/system: return even richer xattr errors
    7c185a1e40 daemon: return an InvalidParameter error when ep settings are wrong
    2b036fb1da Remove generated MAC addresses on restart.
    1f24da70d8 docs/api: remove version matrices from swagger files
    358fecb566 docs: remove documentation for deprecated API versions < v1.23
    f030b25770 Dockerfile: update docker compose to v2.24.1
    e07aed0f77 Dockerfile: update dev-shell version of the cli to v25.0.0
    cdf3611cff integration-cli: TestInspectAPIMultipleNetworks: use current version
    05267e9e8c integration-cli: TestInspectAPIBridgeNetworkSettings121: use current version
    e5edf62bca integration-cli: TestPutContainerArchiveErrSymlinkInVolumeToReadOnlyRootfs: use current API
    e0acf1cd70 daemon/cluster/executer: Add missing `StartInterval`
    1e335cfa74 image/save: Fix layers order in OCI manifest
    4d287e9267 image/save: Change layers type to DiffID
    0240f5675b Fix isGitURL regular expression
    13964248f1 libnetwork: loosen container IPAM validation
    05695c2458 c8d/integation: Adjust error in TestPullLinuxImageFailsOnWindows

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-03-15 17:17:19 +00:00
Bruce Ashfield
2118aace8f crun: update to v1.14
Bumping crun to version 1.14-19-g9d01392, which comprises the following commits:

    3df8f0c Add force_no_cgroup & no_pivot arguments to make_context() Python function
    b883e6c Make function arguments valid Python identifiers
    e0027bc Add no_new_keyring argument to make_context() Python function
    cb3ffb5 apparmor: Fix wrong determination whether crun is confined
    adb912d linux: harden chdir()
    f157e80 container: attempt to close all the files before execv(2)
    ed1abf9 container: simplify statement
    3aaadf3 ebpf: add fallback when bpf(2) fails with ENOSPC
    f2ade60 ebpf: add fallback when bpf(2) fails
    8b611f2 ebpf: try harder to bump RLIMIT_MEMLOCK
    d88d77e build(deps): bump uraimo/run-on-arch-action from 2.6.0 to 2.7.1
    f70fe0b cgroup, systemd: fix segfault if resources not specified
    667e6eb NEWS: tag version 1.14
    688f186 build(deps): bump actions/cache from 3 to 4
    8d96f08 build: drop gcrypt dependency
    5221ca8 seccomp: use blake3 instead of libgcrypt
    6d9fa42 cpuset: don't clobber parent cgroup value
    3873541 build: embed blake3 hashing function
    4f1f3d4 seccomp: include default_errno_ret in cache digest
    beb9565 utils: remove unneeded if statement
    9306457 ebpf: do not require MEMLOCK for eBPF programs
    87740ce linux: force umask(0)
    5078ce6 apparmor: stack apparmor profiles if nnp and confined
    c761349 NEWS: tag 1.13
    cb53ac2 build(deps): bump actions/upload-artifact from 3 to 4
    94a5950 cgroup: use "max" when pids limit < 0
    3b819bc Improve error msg on idmap mounts
    bace3a2 build(deps): bump github/codeql-action from 2 to 3
    4ddf5e6 criu: remove unneeded if statement
    8c27dea error: reset pointer after vasprintf failure
    c5643c4 status: fix double free
    ece4f9e utils: return a valid error if access fails
    68a9487 list: initialize variable
    ea27b13 libcrun: fix compile error without libseccomp and libcap
    487ba3a fix checking of relative idmapped mount
    49f439d ctx: drop no_subreaper bool

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-03-15 17:17:19 +00:00
Bruce Ashfield
a6cf2e0e7d cri-o: update to 1.30
Bumping cri-o to version v1.29.0-44-g5aff11c7c, which comprises the following commits:

    1b9754486 fix missing line ending on crio.8.md
    3cbaa5294 fix grep for whitespace
    8dea35388 add metrics_host to config

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-03-15 17:17:19 +00:00
Bruce Ashfield
5d211f85b4 skopeo: update to 1.14.1
Bumping skopeo to version v1.14.1-4-g695538a3, which comprises the following commits:

    4baf4fe9 fix(deps): update module github.com/opencontainers/image-spec to v1.1.0-rc6
    e32dfefb Bump to v1.15.0-dev
    45b7bf5e Bump to v1.14.1
    b7ec87a1 fix(deps): update module github.com/containers/common to v0.57.2
    92edbcb7 fix(deps): update module github.com/containers/image/v5 to v5.29.1
    5684cd12 chore(deps): update dependency containers/automation_images to v20240102
    c7053312 Fix libsubid detection
    e51dbbd8 fix(deps): update module golang.org/x/term to v0.16.0
    852cca63 fix(deps): update golang.org/x/exp digest to 02704c9
    d1cb2e2c chore(deps): update dependency containers/automation_images to v20231208
    fe83b6fe [skip-ci] Update actions/stale action to v9
    f346045d fix(deps): update module github.com/containers/common to v0.57.1
    48d11dac fix(deps): update golang.org/x/exp digest to 6522937

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-03-15 17:17:19 +00:00
Bruce Ashfield
82b00eb592 moby: update to v25.0.0
Bumping moby to version v25.0.0, which comprises the following commits:

    05695c2458 c8d/integation: Adjust error in TestPullLinuxImageFailsOnWindows
    ae6468b4b9 c8d/mount: Use ref-counted mounter by default
    bd481592ff ci: Always run snapshotter tests on Linux
    ed15f1d717 net=host: remove /var/run/docker/netns/default from OCI config
    568c064795 docker-py: unskip some tests
    e8f4bfb374 Root.Path for a process-isolated WCOW container must be the Volume GUID
    ec041193f9 Windows doesn't have 'host' mode networking, so use 'auto'.
    66325f7271 Implement GetLayerFolders for the containerd image store
    0dc07ccc3a Unmount RWLayer during Commit
    a1f6b64e24 Don't call setupInit in a temp mount if setupInit is nil
    efadb70ef8 The Windows snapshotter and graphdriver have different names
    641050c93f Typo fixes
    508a2d979a Revert "temporary: Disable deprecate-integration-cli validation"
    f7065ab207 Add testutil.TempDir function
    84d2229ffe dockerd-rootless-setuptool.sh: add `nsenter` subcommand
    7d08d84b03 dockerd-rootless.sh: set `rootlesskit --state-dir=DIR`
    ae9fbcb82c testutil/daemon: shorten XDG_RUNTIME_DIR
    bdc7d0c2db temporary: Disable deprecate-integration-cli validation
    8390bc5683 c8d/cache: Use ContainerConfig from content store
    f760cb4f97 c8d/builder: Store ContainerConfig
    a5a15c7782 c8d/cache: Optimize `FROM scratch` case
    71ebfc7c63 c8d: make the cache in classic builder work
    24da5233dd integration: Fix Parallel before setupTest
    d22c775e04 cdi: use separate feature-flag
    fa4deb02af environment: Error when t.Parallel was called before Protect
    97d32bb7d7 daemon: stop checkpointing health probes to disk
    a6d9462cb1 (*Daemon).fillRootlessVersion: fix nil panic
    e954cdc188 dockerd-rootless.sh: fix inconsistent description about "builtin" driver
    9de132dbf6 integration/image: Move Parallel after setupTest
    f0efb90f21 c8d/integration-cli: Skip tests checking `ContainerConfig`
    2a02403a94 c8d/exporter: Use WithSkipMissing
    9f50e06993 image/save: Refactor saveLayer
    b5a5ecf4a3 dockerd-rootless.sh: add comments about pasta
    f5d05b43d7 Dockerfile: update RootlessKit to v2.0.0
    ba86626642 vendor.mod: github.com/rootless-containers/rootlesskit/v2 v2.0.0
    312450d079 integration: test container healthcheck is reset
    c58acf06c2 image/save: Derive Descriptor from actual tar archive
    c4d2968183 vendor: github.com/moby/sys/mountinfo v0.7.1
    075e1141b8 vendor: golang.org/x/sys v0.16.0
    a759acd958 vendor: github.com/google/uuid v1.5.0
    3bcb01a84f vendor: github.com/google/go-cmp v0.6.0
    36dd2f029f doc: Correct typo in doc comments for volume/mounts/mounts/MountPoint
    92175dd78c vendor: containerd v1.7.12, and switch to dario.cat/mergo v1.0.0
    cd1709b0d4 update containerd binary to v1.7.12
    2c45df2ab4 image/save: Fix missing layers in manifest
    0790864064 Dockerfile: update buildx to v0.12.1
    a9d0128bd7 Dockerfile: update docker compose to v2.24.0
    28f48ce1ac c8d/commit-builder: Extract common code
    659d7b190f libcontainerd: create unstarted tasks
    d7141cfd06 update to go1.21.6
    0e62dbadcd daemon: reinit health monitor on live-restore
    71c9aec834 Add Rob Murray (robmry) to curators
    e8e20c0897 daemon/config: setPlatformDefaults: use debug for missing userland-proxy
    18a0e144c2 c8d/getImageLabelByDigest: Fix misspelled `labels` check
    e27ffdab0f Dockerfile: update rootlesskit to v1.1.1, and use tags as reference
    782fe1fe82 layer: ChecksumForGraphID: remove unused code for for migrating v1 layers
    1dd415df1a vendor: github.com/vbatts/tar-split v0.11.5
    372cd16b88 vendor: otelhttptrace v0.45.0 to align with other OTEL packages
    22597efa06 vendor: github.com/docker/go-connections v0.5.0
    1f9098e7d0 builder: remove redundant ExecBackend.ContainerKill()
    0aa96c5512 builder/dockerfile: containerManager.RemoveAll() prevent partial cleanup
    03a8188a9a builder/dockerfile: remove containerManager.removeContainer()
    a38b5d7430 daemon: Daemon.ContainerRename: move vars closer to where they're used
    00a863b25e daemon: Daemon.connectToNetwork: rename named return to prevent shadowing
    0f337e9c14 feat: make errdefs.IsXXX helper functions work with wrapped errors
    dd41f86339 hack/make: Refactor VERSION normalization
    2af17cd3f5 vendor: github.com/containerd/cgroups/v3 v3.0.3
    9a5393d500 hack/make: Strip "v" tag prefix name from VERSION
    12128189eb vendor: github.com/cilium/ebpf v0.11.0
    07d2ad30e5 daemon/cluster: Cluster.imageWithDigestString: include mirrors to resolve digest
    8aacbb3ba9 api: fix "GET /distribution" endpoint ignoring mirrors
    b9e27acabc libnet/d/bridge: dead code: no conflict on stale default nw
    0a26cdf344 libnet/d/bridge: remove dead ActiveEndpointsError
    6d2c4f87af daemon: work around go1.21 compiler bug
    69c23cc0c9 docs/api: add documentation for API v1.44
    ce574949f7 api: Deprecate outdated fields in NetworkSettingsBase
    d5a3fccb06 update golangci-lint to v1.55.2
    9b184e1268 daemon: remove dead code relying on SecondaryIPAddress
    7b0f8122b2 update AUTHORS
    fc8fcf85a2 vendor: github.com/opencontainers/runc v1.1.11
    5fa4cfcabf update runc binary to v1.1.11
    b8f2caa80a pkg/containerfs: deprecate ResolveScopedPath
    90f37f48e2 pkg/containerfs: unify CleanScopedPath implementation
    6fae583dba pkg/aaparser: remove, and integrate into profiles/apparmor
    53d405c37f pkg/aaparser: remove deprecated GetVersion utility
    f714730c40 libnetwork/portallocator: PortAllocator.ReleasePort: remove unused err-return
    4f9db655ed portmapper: move userland-proxy lookup to daemon config
    214ab2caef libnetwork/portmapper: PortMapper.MapRange: inline "cleanup" closure
    6ae6dcfc53 libnetwork/portmapper: PortMapper.MapRange: fix defer
    8712c6df22 libnetwork/portmapper: PortMapper.MapRange: rename err-return
    341e7b35a6 Updated manifest v2 URLs in image spec README
    882b79b254 Dockerfile: update crun to 1.12
    dc23efd3a2 vendor: github.com/klauspost/compress v1.17.4
    f74ca4ed36 Update commit id unmap to directly use active mounts
    0252a6f475 ci(bin-image): fix merge job run condition
    1ea1d561c7 ci: do not run ci workflow on push tag events
    141cb65e51 Check, then assume an IPv6 bridge has a subnet.
    437bc829bf Don't try to validate incomplete network config.
    52d9b0cb56 Remove unused error types.
    f9135cdeb5 libnet: Improve the debug log written when the extKeyListener is stopped
    13915f6521 libnet: document what Network.networkType represents
    6a2542dacf libnet: remove Endpoint.anonymous
    cf5a3bc531 c8d: Fix image commit with userns mapping
    5eaf898fcb libnetwork: write ServFail if DNS reply msg is bad
    1da85f7bdc libnetwork: assert DNS replies are well-formed
    f6a160d34e c8d/docker-py: Temporarily skip test_commit_*
    cf1ea9237c Add dangling image reference on delete when last image has children
    9603adb5b4 c8d/docker-py: Temporarily skip test_save_and_load*
    7a9b680a9c libnet: remove Endpoint.myAliases
    523b907359 daemon: no more IsAnonymousEndpoint
    8b7af1d0fc libnet: update dnsNames on ContainerRename
    3bb13c7eb4 libnet: Use Endpoint.dnsNames to create DNS records
    f5cc497eac libnet: populate Endpoint.dnsNames on UnmarshalJSON
    ab8968437b daemon: build the list of endpoint's DNS names
    0c6e9121b2 Add support for removing repo and digest
    c22fc41ddf vendor: golang.org/x/crypto v0.17.0
    87c87bccb5 Update cleanup logic to use resolve all images
    529d19bad8 Add resolve all images and unit test
    eb9ce779f6 Update OTEL in client hijack to use transport
    c84e889a69 Remove httputil lint exceptions
    35a51fd697 Update authz plugin test to not use httputil
    bb4e9c72d7 Replace use of httputil in client hijack
    dc1e73cbbf libnet: add a new dnsNames property to Endpoint
    1eb0751803 daemon: endpoints on default nw aren't anonymous
    27f3abd893 Allow overlapping change in bridge's IPv6 network.
    18b1aec0ee c8d/inspect: Fill `Parent` property
    e48b58e1be vendor: golang.org/x/crypto v0.16.0
    44511f9e43 vendor: golang.org/x/text v0.14.0
    2cdd4906ac vendor: golang.org/x/sys v0.15.0
    d6a656cf7f libnet: Remove unused cmd/readme_test
    aa5d1a8897 typo fixes
    2cf230951f add //go:build directives to prevent downgrading to go1.16 language
    9e6d012e9c docker info: expose runtime features ("rro" mount mode, etc.)
    1602e2f4f1 api: Deprecate `Container` and `ContainerConfig` for `/images/{id}/json`
    d91bf690ef ci(bin-image): fix conditional run for skipped job
    61d5e5ca9a ci(test): do not run on push tag events
    f8275cb303 c8d/docker-py: Skip test_build_squash
    279e6658ac Add devcontainer configuration
    d11a772080 c8d/tag: Remove duplicate label copy
    3b1d9f1a26 add validation and migration for deprecated logentries driver
    3a14b1235c docs/api: remove logentries
    30f739db44 api/swagger: remove logentries
    cd41f655f9 logger: remove logentries driver
    dbdfc71026 vendor: resenje.org/singleflight v0.4.1
    4d2a324fce update to go.opentelemetry.io/otel/semconv/v1.21.0, remove "httpconv" uses
    7d991b6e42 vendor: github.com/moby/buildkit v0.12.5-0.20231208203051-3b6880d2a00f
    fcf03cdfa9 vendor: github.com/containerd/containerd v1.7.11
    7028a03ffa vendor: github.com/containerd/containerd v1.7.10
    49ad10261e vendor: github.com/containerd/containerd v1.7.9
    c14bd4f1ad vendor: vendor: upgrade OpenTelemetry to v1.19.0 / v0.45.0
    291eaf0a77 vendor: github.com/cyphar/filepath-securejoin v0.2.4
    b524ed2dda testing: update docker-py to 7.0.0
    33d2ec08ba update containerd binary to 1.7.11
    c51a262e34 update containerd binary to 1.7.10
    12c70b4386 vendor: github.com/grpc-ecosystem/grpc-gateway/v2 v2.16.0
    a0615f6839 vendor: github.com/felixge/httpsnoop v1.0.4
    afe281964d daemon/logger/local: always use UTC for timestamps
    bea729c030 c8d/prune: Familiarize image names that were untagged
    8ba8a59697 c8d/prune: Default `dangling` filter to true
    eaaf1ea96d integration/prune: Run in a separate daemon
    90dfb1c8ad c8d/integration-cli: Adjust TestBuildClearCmd
    0f9f9a132e Move 'netip' utils from 'ipam' to 'internal'.
    1931a1bdc7 libnetwork/diagnostic: lock mutex in help handler
    424ae36046 libnetwork/diagnostic: use standard http.Handler
    bc94dfc7d2 hack: Load special images on demand
    7cb1efebec api/types: move NetworkListConfig to api/types/backend
    a58b0a3d9c api/types: move Plugin-types to api/types/backend
    862caf826c update to go1.21.5
    0bf6ffba43 update to go1.21.4
    08e4e88482 daemon: raise default minimum API version to v1.24
    484e6b784c api/types: move ContainerCreateConfig, ContainerRmConfig to api/types/backend
    c786c3a974 Dockerfile: update criu stage to Debian 12 (Bookworm)
    d5eba1bfe5 integration/build: Use setupTest
    713c7d49a1 integration(-cli): remove skips for old daemon versions (<20.10)
    7f68e3107e integration-cli: TestAPIClientVersionOldNotSupported: use daemon API version
    97549d923c integration/container: TestInfoAPIVersioned: adjust API version
    410feab962 integration/container: TestKillDifferentUserContainer: adjust API version
    757a004a90 libnetwork/diagnostic: drop Init method
    f270057e0c libnetwork/diagnostic: un-embed sync.Mutex field
    aa2fa2caa3 un-containerize TestDaemonNoSpaceLeftOnDeviceError
    49f3e7d233 Dockerfile: remove APT_MIRROR build-arg
    baca6cb417 Don't allow port in CIFS URL
    c8134fa046 vendor: github.com/moby/buildkit v0.12.4
    a189832454 add TaskStatus to swagger docs
    faa843fcef vendor: github.com/gorilla/mux v1.8.1
    028ed1bb22 vendor: github.com/spf13/cobra v1.8.0
    e18f5a5304 container: internalize InitAttachContext
    fcb89da9c2 c8d/integration-cli: Skip TestListDanglingImagesWithDigests
    61d94850a7 cmd/dockerd: make cobra templates a const
    0f163170a7 cmd/dockerd: remove various cobra templating
    3bfb6a9420 frozen images: update to debian:bookworm-slim
    fd40dfaf58 Dockerfile: remove uses of DEBIAN_FRONTEND
    e72c4818c4 Dockerfile: update to Debian "bookworm" (current stable)
    8ae94cafa5 cifs volume resolves hostname correctly.
    3a0af5ad30 integration/TestLiveRestore: Wait for process to exit
    61d8f57f2a daemon: kill: use log level to "warn" if container doesn't exit in time
    e262cd38ad c8d/integration-cli: Adjust DockerRegistryAuthTokenSuite
    49d088d9ce builder-next: fix timing filter for default policy
    c3eed9fa3e integration-cli: fix TestDaemonICC tests for newer iptables versions
    c5ea3d595c liverestore: Don't remove `--rm` containers on restart
    9b399814e7 integration-cli/TestCrossRepositoryLayerPush: Change repo name
    9709b7e458 quota: increase sparse test-image to 300MB
    65cfcc28ab hack/dind: update comments around AppArmor
    cfb8ca520a hack/dind-systemd: make AppArmor work with systemd enabled
    203bac0ec4 daemon/c8d: Unmount container fs after unclean shutdown
    964ab7158c Explicitly set MTU on bridge devices.
    05523e289b c8d/integration: Adjust TestSaveCheckTimes
    b1676a289c daemon: ContainerRename: move log args to log fields
    d2865f1e8a daemon: win: set DNS config on all adapters
    0fd0e8255f daemon: build ports-related ep options in a dedicated func
    7786f8512b Revert "testing: temporarily pin docker-py tests to use "bullseye""
    4394c61e6c testing: update docker-py to 7.0.0b1
    f877360dc1 api/t/swarm: Fix deprecation for ServiceSpec.Networks
    681c94ca17 Dockerfile: update buildx to v0.12.0
    68e73ceb67 update containerd binary to v1.7.9
    2f28582b55 vendor: github.com/Microsoft/hcsshim v0.11.4
    f4776ef9df ci(bin-image): skip dco on push tag events
    8641d2da3b client: update example in readme
    0ab7267ae3 Fix support for pull by digest
    ba46bda149 update authors and mailmap
    a3fdad84ad graphdriver/copy: faster copy of hard links
    fb53da508f vendor: github.com/opencontainers/runc v1.1.10
    15bcc707e6 update runc binary to v1.1.10
    84036d3e18 daemon/config: change DNSConfig.DNS to a []net.IP
    1eadfb0e28 opts: ValidateIPAddress: improve error, godoc, and tests
    981a878cf5 vendor: github.com/docker/go-connections fa09c952e3ea (v0.5.0-dev)
    677d41aa3b Plumb context through info endpoint
    f0b89e63b9 Fix missing import for "scope" package
    33564a0c03 libnetwork/d/overlay: support IPv6 transport
    e1d85da306 libnetwork/d/overlay: parse discovery data eagerly
    d47b3ef4c9 libnet: early return from updateSvcRecord if no addr available
    f5a611a74c daemon: ContainerRename: use named error-return
    8074e7a437 Bump go-connections for TLS 1.3 support
    d06af368ad c8d: "unremap" the user namespace on commit
    a7acfffea6 test: Add a test for userns remapped daemon commit
    876d4e5484 c8d: cleanup imports in the image builder file
    7995e3288f Add until filter to docker image ls Signed-off-by: Rachit Sharma <rachitsharma613@gmail.com>
    58785c2932 integration/networking: fix TestBridgeICC
    6979503a85 Include port in URL for locally built Swagger docs
    755f008c1e Default the auth config domain to the target image domain
    7d9d601e6d project: document supported containerd versions
    29ac09ee9d Revert "libcontainerd: work around exec start bug in c8d"
    c1a289e05a docs/api: update redirect metadata for hugo
    49e04102c1 Update container-device-interface to v0.6.2
    26f63600c1 daemon/snapshotter: Align mounter implementations
    d5d41c2849 daemon/config: Put params for the default network into a dedicated struct
    587ad8845a integration/system: update TestInfoAPI to not use string-matching
    c1ab6eda4b integration/networking: Test bridge ICC and INC
    409ea700c7 integration: Add a new networking integration test suite
    02a932d63f Fix case where health start interval is 0 uses default
    891241e7e7 seccomp: block io_uring_* syscalls in default profile
    3c2b06099d Skip TestPullManifestList when using containerd
    6ca1b9e4ce Skip the busybox digest check when containerd is enabled
    123ade3763 builder/dockerfile: errmsg: quote build target
    7257c77e19 libnetwork/ipam: refactor prefix-overlap checks
    4e8ba395f2 integration: TestSaveRepoWithMultipleImages: minor cleanup
    0dae0f2b5e integration: TestSaveRepoWithMultipleImages remove redundant remove
    30cd8b8fca integration: make TestSaveRepoWithMultipleImages less flaky
    1c50526092 daemon: improve daemon start informational log message
    a99bb24ea8 builder-next: make sure worker platforms normalized for containerd
    29977d5058 contrib/check-config: conditionally disable color output.
    d60de4cafd Move the golangci-lint configuration file to the root dir
    cd95cd0671 c8d/push: Return error when repository has no tags
    df34db1158 c8d/pull: Don't wrap `no basic auth` error
    5a83bebf76 ci: Setup otel tracing for windows integration tests
    29ddf2214d docs(API): Add reason to network connect 403
    63a9d72ee8 pkg/tarsum: handle xattrs like archive/tar does
    4356962c69 update containerd binary to v1.7.8
    38c4ceb00a vendor: github.com/containerd/containerd v1.7.8
    34f5793521 vendor: google.golang.org/grpc v1.58.3
    bd23c7729e vendor: golang.org/x/tools v0.10.0
    205e4de3fd vendor: golang.org/x/mod v0.11.0
    153d7e4038 exec/tests: add test for `--group-add` with `--user`
    27e064e7e9 c8d/history: Fix nil dereference
    808120e5b8 New `host_ipv6` bridge option to SNAT IPv6 connections
    9d578a2e6d Cleanup duplicate imports
    59c5f6e35b integration-cli: mark dockerCmdWithFail as an helper function
    61c78d9438 daemon: Validate MacAddress on container create
    ee9f0ed895 api: Deprecate ContainerConfig.MacAddress
    052562ffd5 api: Add a field MacAddress to EndpointSettings
    98323ac114 integration/container: target v1.43 in a soon-to-break test
    4f0cab3b74 api: ContainerCreate: re-organize BC conditions
    79589354df api: ContainerCreate: remove repetitive nil checks
    44a25f31a8 api: ContainerCreate: lowercase ErrEmptyConfig
    91eee33f62 api: ContainerCreate: return an error when config is nil
    417018659b daemon: remove redundant withResetAdditionalGIDs option
    8f756fe679 c8d: show the real image creation date when listing images
    a73dfe68d3 api: ContainerCreate: init hostConfig and networkingConfig when nil
    7e0cb4c46f c8d: Use the labels to get the children of an image
    f5535d516f c8d: Preserve image labels when tagging
    70158284b7 api: fix a nil check on the wrong var
    d7266afc7e c8d/exec: Add additional groups on exec
    df3a321164 migrate to github.com/moby/sys/user
    aeb8972281 daemon: daemon.containerRestart: don't cancel restart on context cancel
    52da88201c hack/validate: stop suppressing Xattrs deprecation
    c44c9dfa79 pkg/tarsum: migrate to (tar.Header).PAXRecords
    3cf409aa9e pkg/archive: migrate to (tar.Header).PAXRecords
    6a8a792019 pkg/archive: test tar headers are interoperable
    f2c67ea82f vendor: github.com/klauspost/compress v1.17.2
    a7b44ea10f Dockerfile: update github.com/tc-hib/go-winres v0.3.1
    0cf113e250 Add unit tests for outgoing NAT rules
    619d98ab49 vendor: github.com/moby/buildkit v0.12.3
    aad51c0b4e daemon: daemon.shutdownContainer: use context.WithoutCancel
    dca89c67ef daemon: daemon.containerStop: use context.WithoutCancel
    8166818791 c8d: Return the "tag does not exist error"
    4af420f978 libnetwork/internal/kvstore: prune unused method
    4039b9c9c4 libnetwork/datastore: drop (KVObject).DataScope()
    4f4a897dda libnetwork/datastore: drop (*Store).Scope() method
    4b40d82233 libnetwork/datastore: un-embed mutex from cache
    9536fabaa8 libnetwork/datastore: minor code cleanup
    43dccc6c1a libnetwork/datastore: unconditionally use ds.cache
    5a72ed3406 integration-cli: remove deprecated dockerCmd and waitRun utilities
    06115bf82c integration-cli: DockerCLIPruneSuite: replace dockerCmd
    285ab8c861 integration-cli: DockerCLIPluginsSuite: replace dockerCmd
    e28da7686e integration-cli: DockerCLIPluginLogDriverSuite: replace dockerCmd
    a837cb444c integration-cli: DockerExternalVolumeSuite: replace dockerCmd
    5f884478e5 integration-cli: DockerCLIImportSuite: replace dockerCmd
    885eceba1d integration-cli: DockerCLITopSuite: replace dockerCmd
    6ce6b63482 integration-cli: DockerCLIHistorySuite: replace dockerCmd
    268e72f10f integration-cli: DockerCLIRestartSuite: replace dockerCmd and waitRun
    c388416aac integration-cli: DockerCLICreateSuite: replace dockerCmd and waitRun
    5c297fcc09 integration-cli: DockerCLIStatsSuite: replace dockerCmd and waitRun
    7d2a6f2030 integration-cli: DockerCLICommitSuite: replace dockerCmd
    a4522b6a8f integration-cli: DockerCLIStartSuite: replace dockerCmd
    f7ddfdbae6 integration-cli: DockerCLIUpdateSuite: replace dockerCmd and waitRun
    d1108b8a06 integration-cli: DockerDaemonSuite: replace dockerCmd
    9c161cc65a integration-cli: DockerCLIVolumeSuite: replace dockerCmd
    f482857959 integration-cli: DockerCLIImagesSuite: replace dockerCmd
    f1102e98bb integration-cli: DockerCLIPortSuite: replace dockerCmd and waitRun
    ba4d491562 integration-cli: DockerCLIRmiSuite: replace dockerCmd
    5b3086db1f libnetwork/datastore: prevent accidental recursion
    16e4bc9827 integration-cli: DockerCLISearchSuite: replace dockerCmd
    89d7b77022 integration-cli: DockerRegistrySuite: replace dockerCmd
    c867ac4527 integration-cli: DockerCLICpSuite: replace dockerCmd
    980a5bc72a integration-cli: DockerCLIBuildSuite: replace dockerCmd
    4292f42308 integration-cli: DockerCLISaveLoadSuite: replace dockerCmd
    50062b413c integration-cli: DockerCLIRunSuite: replace dockerCmd and waitRun
    d63cab5193 integration-cli: DockerCLILogsSuite: replace dockerCmd and waitRun
    8e2e1f3d28 integration-cli: DockerRegistryAuthHtpasswdSuite: replace dockerCmd
    d3f4580519 integration-cli: DockerCLILinksSuite: replace dockerCmd and waitRun
    58c5986f8b integration-cli: DockerCLIHealthSuite: replace dockerCmd and waitRun
    707bb9b9ed integration-cli: DockerBenchmarkSuite: replace dockerCmd and waitRun
    eafb618594 integration-cli: findContainerIP: replace dockerCmd
    ba32bebd05 integration-cli: DockerCLIInfoSuite: replace dockerCmd and waitRun
    4562f07887 integration-cli: DockerCLIExecSuite: replace dockerCmd and waitRun
    8c661b5e9a integration-cli: DockerCLIEventSuite: replace dockerCmd and waitRun
    cf95278122 integration-cli: DockerCLIAttachSuite: replace dockerCmd and waitRun
    1baec48367 integration-cli: DockerAPISuite: replace dockerCmd and waitRun
    908821d48a integration-cli: dockerCmdWithFail: remove unused return
    02fd8485fa integration-cli: DockerCLINetmodeSuite: replace dockerCmd and waitRun
    dbb2bd727d integration-cli: DockerNetworkSuite: replace dockerCmd and waitRun
    5cc978c6a0 integration-cli: DockerCLIInspectSuite: replace dockerCmd and waitRun
    86fb048e59 integration-cli: DockerCLIPsSuite: replace dockerCmd and waitRun
    b4ff5234bd integration-cli: remove transformCmd utility
    cdb44010c9 c8d/history: Fill ID for parents without the label
    d28bd54f2a c8d/history: Fix Tags assigned from parents
    e97716a95a Fix disk usage test
    cf9073397c Update check-config.sh
    7bb54c3dc5 vendor: gotest.tools/v3 v3.5.1
    bcca214e36 libnetwork: open-code updating svc records
    33cf73f699 libnetwork: drop (*Controller).nmap
    804ef16822 libnetwork: only delete svc db entry on network rm
    c85398b020 libnetwork: drop vestigial endpoint-rename logic
    29da565133 libnetwork: change netWatch map to a set
    0456c0db87 libnetwork: refactor isDistributedControl()
    749d4abd41 libnetwork: get rid of watchLoop goroutine
    f05dce8d3a replace some strings with OCI consts
    e3feb05175 vendor: github.com/opencontainers/image-spec v1.1.0-rc5
    0d27579fc7 Ensure that non-JSON-parsing errors are returned to the caller
    26730c891a vendor: google.golang.org/grpc v1.56.3
    6f625ae65a c8d integration: skip TestImportWithCustomPlatform
    9357bcb582 c8d/pull: Return same access denied error as graphdrivers
    488559a330 c8d/push: Set distribution source recursively
    d9b5445f39 c8d/pull: Handle pull all tags
    095d2a29a3 distribution: Add Tags
    9664f33e0d daemon: release sandbox even when NetworkDisabled
    2df698025c HealthCheck: add validation for minimum accepted start-interval
    25fb4dd50d switch to go.opentelemetry.io/otel/semconv/v1.17.0
    96f85def5b s/HostIP/HostIPv4/ for `com.docker.network.host_ipv4` setting
    2a14b6cf60 Use `iptRule` to simplify `setIcc` (code health)
    d7c6fd2f80 Move `programChainRule` logic to `iptRule` methods (code health)
    e260808a57 Move duplicate logic to `iptRule.Exists` method (code health)
    14d2535f13 Move `iptables.IPVersion` into `iptRule` struct (code health)
    4e219ebafb Eliminate unnecessary `iptRule.preArgs` field (code health)
    4662e9889c Simplify `setupIPTablesInternal` parameters (code health)
    919fe72f60 vendor: github.com/moby/buildkit v0.12.3-dev
    40fde69be9 Revert "Return no basic auth creds error when needed"
    e1bacd18a3 ci: continue-on-error on non-PR with snapshotter enabled
    70892220c8 ci: use matrix to test containerd backed image store
    03decbc1e6 ci: split tests in a reusable workflow
    bb7408e851 c8d/changes: Fix concurrents diffs
    e3d8e979de integration-cli/TestSaveAndLoadWithProgressBar: Skip with c8d
    f51c5e1a5c c8d/save: Don't save name if exported by digest
    b5f5987959 c8d/load: Fix `Loaded image` message
    42af8795a3 c8d/save: Implement exporting all tags
    f20abbc96c libnetwork: use conntrack and --ctstate for all rules
    c279c48a0e Skip TestPullAllTagsFromCentralRegistry
    8777592397 Return no basic auth creds error when needed
    ebef4efb88 api/types: move ContainerLogsOptions to api/types/container
    9670d9364d api/types: move ContainerListOptions to api/types/container
    7bce33eb0f api/types: move ContainerStartOptions to api/types/container
    0f77875220 api/types: move ContainerRemoveOptions to api/types/container
    9498d897ab api/types: move ContainerCommitOptions to api/types/container
    30f09b4a1a api/types: move ContainerAttachOptions to api/types/container
    95b92b1f97 api/types: move ResizeOptions to api/types/container
    ec69501e94 api/types: move ServiceCreateResponse, and generate from swagger
    5b3e6555a3 api/types: move ServiceUpdateResponse
    48cacbca24 api/types: move image-types to api/types/image
    44dbbeb196 c8d/progress: Remove unused mountable
    bcbbd9538f c8d/progress: Show Mounted/Exists status
    bb8bc1ffc8 update to go1.21.3
    3bc45d78c9 update to go1.21.2
    1800dd0876 vendor: golang.org/x/net v0.17.0
    1946aead21 vendor: golang.org/x/crypto v0.14.0
    0679ae984b vendor: golang.org/x/text v0.13.0
    bc33c27796 vendor: golang.org/x/sys v0.13.0
    db806533e6 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230911190601-f082dd7a0cee
    b81b27c21f vendor: github.com/go-logr/logr v1.2.4
    cff4f20c44 migrate to github.com/containerd/log v0.1.0
    e1d0aacb6a vendor: github.com/docker/distribution v2.8.3
    0cd02ab1b4 integration/c8d: Skip TestBuildSquashParent
    aca9ea42bd vendor: github.com/moby/buildkit 0.12.3-dev
    d871a665de daemon/RegistryHosts: Don't lose mirrors
    a293cd6ab9 vendor: github.com/containerd/containerd v1.7.7
    f3aa9e151d c8d: Simplify error handling and distribution source label
    5f062032f7 TestPullNonExistingImage: Move to integration
    53345fe357 TestPullNonExistingImage: Use subtests
    2edb858b18 vendor: golang.org/x/net v0.13.0, golang.org/x/crypto v0.11.0
    87de23a6cd vendor: golang.org/x/text v0.11.0
    23f2e0fea7 Skip tests that check max concurrency
    37ca57e9d5 libnet/d/bridge: inline error checks
    fcabc48ee4 c8d/load: Handle compressed archives
    cbc2a71c27 libnet/d/bridge: Don't set container's gateway when network is internal
    491758a446 Dockerfile: upgrade Delve
    c587ba3422 registry: allow mirror path prefix in config
    2c4551d86d libnet: resolver: remove direct use of logrus
    4de8459265 libnet: add OTEL tracing to the embedded DNS
    b8ba263099 c8d/rmi: Handle explicit dangling name
    25a813e924 c8d/rmi: Don't emit Untagged for dangling images
    f99c4ec798 c8d/history: Fill ID and Tags for all entries
    1f6bacc486 TestDaemonNoSpaceLeftOnDeviceError: Adjust to snapshotters
    28d057cb0e c8d/TestPsListContainersSize: Only check if size increased
    34400dd4a2 TestPsListContainersSize: Fix size parsing/formatting
    e0e6ae741e daemon/c8d: Use WithoutCancel instead of context.Background
    c47cdd5f39 Revert "daemon/logger/etwlogs: rewrite to use go-winio/pkg/etw"
    6f27bef9fc daemon/c8d: Use non cancellable context in defers
    77f7c83114 c8d/push: Show progress only on blobs
    e8a7a9435f Dockerfile: update test-registry to v2.8.3
    5b16dd6469 Remove duplicated trace logs
    ad877271f3 Limit OOMScoreAdj when running in UserNS ("Rootful-in-Rootless")
    3d70af4ee4 adjust stats sampling order
    16063c7456 vendor.mod: bump go line to 1.20
    a4822abe37 c8d: Skip TestPullFailsWithAlteredManifest
    f9f439763a c8d/TestPullFailsWithAlteredManifest: Adjust error message
    4001241ccf c8d/TestPullByDigestNoFallback: Adjust error message
    9e3ed7b429 pkg/chrootarchive: fix Darwin build
    e465ebf2f3 update to go1.21.1, and fix download-URL
    aa282973d4 Dockerfile: use GOTOOLCHAIN=local
    f66c000229 c8d: Fix getting the platform of a single-platform image
    2c89640ab9 distribution: TestPullSchema2Config fix test response
    a9fcb775e5 integration-cli: fix getTestTokenService not sending header
    3197160114 daemon: Daemon.SetNetworkBootstrapKeys: make error-handling idiomatic
    f91c3cfda6 daemon: Daemon.initNetworkController: remove intermediate var
    dcc75e1563 libnetwork: Controller: agentInit, agentDriverNotify rm intermediate vars
    a384102fdf libnetwork/datastore: Store.Map, Store.List: remove intermediate vars
    bb5402e6fb libnetwork: Controller: getKeys, getPrimaryKeyTag: slight refactor
    603f49706e libnetwork: Controller: getKeys, getPrimaryKeyTag: prevent panic
    f6e44bc0e8 internal: Add compatcontext.WithoutCancel
    95aea39348 Make one-shot stats faster
    618d9b5d54 libnetwork: nwAgent: un-export mutex
    7cda3fb7b5 libnetwork: inline populateSpecial NetworkWalker
    ca1307c56e libnetwork: Controller: remove mutex for "store"
    a8ea752a93 libnetwork: Controller.cleanupLocalEndpoints: return errors
    2e60051c92 libnetwork: Controller.sandboxCleanup: return errors
    642cf261a8 libnetwork: Controller.NetworkByID: remove redundant error-handling
    430a5f8581 api: Add method and path to trace operation string
    41c186c344 hack: Run integration tests through Delve
    42a51cb285 Add support for swarm seccomp and apparmor
    0c66111c40 daemon: containers list code refactor
    13b775a96e integration-cli/TestSaveAndLoadRepoFlags: Ignore LastTagTime difference
    7c202d2fa4 integration-cli/SaveLoad: Don't check `repositories` file
    724db8650c integration-cli: Skip TestLoadZeroSizeLayer with c8d
    1337a66130 integration-cli: Skip Parent tests with c8d
    d5b067e04a ci(buildkit): remove regex skipping tests with digest inconsistency
    286704bf6f ci(buildkit): expose github runtime for gha tests
    34e71b374b builder-next/a/ci/pull: strongly type flightcontrol.Group
    c8773e10b1 builder-next/wrapper: use new exptypes constants
    a728bd0ee9 builder-next/pull: use ResolveMode.String() helper
    221b73e23d builder-next: apply source policies on config resolve
    2246297ae6 builder-next: adopt new wrapped types
    c217e3c87a vendor: github.com/moby/buildkit v0.12.2
    8cd5f04ea3 daemon/c8d: use new containerd LabelDistributionSource constant
    fd6dd6935b vendor: github.com/containerd/containerd v1.7.6
    79a4cbbec9 builder-next: make stub executor generic
    d7a31cfb2d libnetwork: Sandbox.resolveName: slightly simplify locking
    f549aaa205 libnetwork: Sandbox.resolveName: add fast-path for alias lookups
    9249b34be8 libnetwork: Sandbox.resolveName: rename vars for clarity
    4401ccac22 libnetwork: Sandbox: remove some intermediate vars
    0e80073e01 daemon: strongly type containerd log.OutputFormat
    4ff252456b libnetwork: rewrite Network.isClusterEligible to return agent
    6203e3660d libnetwork: Endpoint: return early if no agent was found
    6eeef51c6a libnetwork: Controller.agentSetup: use structured logs
    8b95ea4a35 libnetwork: Controller.agentSetup: remove redundant condition
    e852ba55a5 vendor: github.com/Microsoft/hcsshim v0.11.1
    06a640084f Fix graphdriver lookup in makefile
    093481618d c8d: Skip the test that checks Config.Image
    e6907243af client: negotiate api version before handling version-specific code
    3936c57294 c8d: test a backend dependent error on pull
    207c4d537c c8d: Fix `docker diff`
    601c9b29e6 c8d/pull: Fix stale Downloading progress
    313a090c0e libnetwork/osl: add some TODOs
    9d3b1f9419 libnetwork/osl: make constructing Interfaces more atomic
    47f9e70385 libnetwork/osl: Namespace.Restore: conditionally fetch IPs
    ee5a91e663 libnetwork/osl: Namespace.Restore: flatten nested conditions
    299bd58c5a libnetwork/osl: Namespace.Restore: rename vars for readability
    7b96663082 libnetwork/osl: Namespace: inline setGateway and setGatewayIPv6
    bd17d27658 libnetwork/osl: Namespace: make error-handling more idiomatic
    0b4a70ca2c libnetwork/osl: Namespace: programRoute, removeRoute rm path arg
    542fe0da40 libnetwork/osl: Namespace: make mutex private
    338fc49060 libnetwork/osl: implement Namespace.RemoveInterface
    3ff75aeb07 c8d/pull: Deprecation notice for schema1 manifests
    2cb94ade6c distribution: Extract schema1 deprecation notice
    39fe25b69e c8d: Fix  getting image with platform
    68b67b3230 c8d/pull: Support legacy schema1 prettyjws manifests
    d5425f28ae Don't run tests twice
    bddd826d7a profiles/apparmor: deny /sys/devices/virtual/powercap
    83cac3c3e3 oci/defaults: deny /sys/devices/virtual/powercap
    2394b07bce c8d: Number of containers using an image
    e19e541e2c libnet: add comment to ipamType
    acf825def2 api/t/net: test EndpointIPAMConfig.Validate()
    3092b261e2 daemon: move most of validateEndpointSettings into api/t/net
    554036040b vendor: github.com/AdaLogics/go-fuzz-headers v0.0.0-20230811130428-ced1acdcaa24
    6fc3ead321 vendor: google.golang.org/grpc v1.56.2
    73041028b6 vendor: google.golang.org/protobuf v1.31.0
    54dc8d2968 vendor: github.com/cenkalti/backoff/v4 v4.2.1
    d97e4300ee vendor: google.golang.org/api v0.114.0
    d50585b05b vendor: golang.org/x/tools v0.8.0
    51d8a975ab vendor: golang.org/x/oauth2 v0.7.0
    9670db3904 vendor: golang.org/x/crypto v0.9.0
    a046616249 vendor: golang.org/x/sys v0.10.0
    f29155950f vendor: golang.org/x/sync v0.3.0
    0354791147 vendor: github.com/klauspost/compress v1.16.5
    87dd1de046 vendor: github.com/tonistiigi/vt100 v0.0.0-20230623042737-f9a4f7ef6531
    bd6cadffb0 vendor: github.com/containerd/continuity v0.4.2
    6d93db06db vendor: github.com/vbatts/tar-split v0.11.3
    171ecf8cf2 vendor: github.com/vishvananda/netns v0.0.4
    81ab8db1c3 api/t/net: add missing comment to ValidateIPAM
    04a47e88d2 api/t/net: move endpoint structs into endpoint.go
    19c07198b6 daemon: Check if endpoint address is in allowed range
    bfd8c6deb7 daemon: Validate EndpointSettings.IPAMConfig.LinkLocalIPs
    4bd0553274 daemon: Return all validation errors for NetworkingConfig and EndpointSettings
    ff503882f7 daemon: Improve NetworkingConfig & EndpointSettings validation
    4c03618fab registry: remove jsonmessage dependency
    6c563cda82 c8d: fix TestRemoveContainerAfterLiveRestore
    0c4397deaf api/pull: Validate repo name
    ccb37fa567 imageService/PullImage: Move reference parse to api
    28861e0c47 c8d: Skip TestRemoveImageGarbageCollector
    bf692d47fb deprecate pkg/loopback (utility package for devicemapper)
    96faee9762 libcontainer: client.processEventStream: use locally scoped variables
    32e2c53467 c8d: Fix pull progress update
    5a4962f80d c8d: Refuse images with digest algo when tagging
    bd523abd44 remove more direct uses of logrus
    1ffbbe798a vendor: github.com/containerd/containerd v1.6.24
    7f281907dd c8d/push: Add missing message about repository
    babf907bfd c8d/push: Support pushing all tags
    7ec9f304e9 daemon/cluster: create managed ctr with multiple EndpointsConfig
    5e15ed314b api: Improve error on ContainerCreate with multiple endpoints
    cc9c930e29 vendor: github.com/Microsoft/hcsshim v0.9.10
    24102aa8ca update containerd binary to v1.7.6
    bbcd662532 api: Allow ContainerCreate to take several EndpointsConfig for >= 1.44
    35e9d688ba libnetwork: remove netWatch.remoteEps, as it's unused
    8ae5dc4aae libnetwork: Network.updateSvcRecord: remove unused localEps arg
    37b2ea9a8d libnetwork: Controller.processEndpointCreate, Delete: remove nmap arg
    62e55fd58a Add support for registry token in containerd pull logic
    14c5f7bf1d contrib: outline purpose of download-frozen-images-v2.sh
    0937aef261 libcontainerd/windows: Don't reap on failure
    b805599ef6 libcontainer/windows: Remove unneeded var declaration
    55b664046c libcontainer/windows: Fix process not being killed after stdio attach failure
    9c84994830 libnetwork/portmapper: remove unused PortMapper.checkIP
    f5d6af13d0 libnetwork/portmapper: un-export PortMapper.Allocator
    863909a749 libnetwork/portmapper: New(): remove unused argument
    5ab8d41d9f Add dmcgowan as curator
    de2447c2ab daemon: overlay2: Write layer metadata atomically
    78479b1915 libnet: Make sure network names are unique
    5fa011dc0c vendor: resenje.org/singleflight v0.4.0
    fd15ddbc30 daemon: GetImageAndReleasableLayer: simplify "FROM scratch" case
    4229032676 daemon/containerd: use "DiffID" type for diff fields
    5d5eeac310 daemon: automatically set network EnableIPv6 if needed
    0313544f4a c8d: Handle userns properly
    c63a952dc9 c8d/builder: Don't append empty tar layer to manifest
    9127285985 c8d/builder: Lease layer snapshots
    f22b112005 c8d/commit: Unpack committed image
    8832cdf6e1 c8d: Common unpack code for specific manifest
    c6bded3475 c8d/builder: Don't use diffID as snapshot parent
    8c7e19c5ff c8d/builder: Set empty diffID for rolayer
    6ebfa57364 c8d/builder: Don't mount the rolayer snapshot
    c41121cc48 update to go1.20.8
    4acbf7d8c3 c8d: disable schema1 registry integration tests
    833b514d98 c8d/mount: Create same directory owners as graphdrivers
    a8975c9042 api: Add consts for predefined networks
    12e27dfd8f Fix host_ipv4 bridge option when IPv6 and ip6tables are enabled
    7c0f6741eb go mod tidy
    cd204f1118 libnetwork/osl: Namespace.DeleteNeighbor: remove intermediate vars
    4215a1542b libnetwork/osl: Namespace.DeleteNeighbor: remove osDelete argument
    bc77104fed libnetwork/osl: Namespace.DeleteNeighbor: don't warn on non-existing neighbor
    5e7eade1f7 integration: don't poll for containers to be running
    b7d29c1e23 registry: un-skip some tests that don't require root
    de27973538 registry: merge validateEndpoint into newV1Endpoint
    6cc6682f5f daemon: fix under what conditions container's mac-address is applied
    820f37b1a6 hack: compile w/o optimizations & inlining when debugging
    c44f8958f6 vendor: github.com/cncf-tags/container-device-interface v0.6.1
    fa3ddc5116 distribution: newRepository: remove naked return and intermediate vars
    43740ab642 registry: remove intermediate vars in mock
    550e628f05 registry: newV1Endpoint: make it clear we skip validation for Docker Hub
    5728516371 c8d/image: Allow truncated id to have sha256: prefix
    c2004fb8c4 hack: Add TEST_IGNORE_CGROUP_CHECK
    7e506f71f3 registry: v1Endpoint.ping: include URL in debug log
    0c6f8f9290 registry: v1Endpoint.ping: don't io.Readall the response
    e9ad878df6 registry: v1Endpoint.ping: add fast-path for X-Docker-Registry-Standalone
    9e797a6db9 c8d: Remove the panic from UpdateConfig
    4982c70db4 integration-cli: Skip TestRmiParentImageFail when using c8d snapshotters
    0f7a65e59b registry: remove use of v1 Version field and X-Docker-Registry-Version
    3d8b8dc09a Use process substitution to redirect to tee
    c0ece8d4f3 integration-cli: Use different label in TestBuildMultiStageGlobalArg
    081b74b97d c8d/builder: Store parent in c8d image label
    5f59f7bb49 integration/container: combine TestResize tests into subtests
    a4ceb0e4ac integration/container: TestResize, TestResizeWithInvalidSize: rm poll.WaitOn
    ee7ca6822a integration/container: fix flaky TestResizeWhenContainerNotStarted
    da5ed8b35b CI: Switch to use tracing action
    a3c97beee0 image: implement CheckOS, deprecate pkg/system IsOSSupported
    150b657bad pkg/system: move ErrNotSupportedOperatingSystem to where it's used
    9b7784781d Add test for buildkit history trace propagation
    3b4ccb2eca CI: Setup otel tracing for integration tests
    e8dc902781 Wire up tests to support otel tracing
    642e9917ff Add otel support
    776c376227 c8d: Better pull progress
    1cb45e582c c8d/import: Don't close compressed stream twice
    b5376c7cec pkg/idtools: remove sync.Once, and include lookup error
    0be416dfdc distribution: filterManifests split complicated condition
    150b1c8c73 daemon: daemon.createSpec: remove uses of logrus
    dbb4d54e01 c8d: Add image save events
    09470db089 c8d: Add image pull events
    1847dc4b7f c8d: Add image push events
    1148a24e64 migrate to new github.com/distribution/reference module
    dffccfd0f1 integration-cli/build: Alias `cmp` as `is`
    5dbd198b53 integration-cli/build: Parse multiline `images -q` output
    96516002cc c8d: Print the tag, digest and size after push
    417328e44e libnetwork/osl: remove dead code
    237eb3b5f1 docs(api): rephrase description for /images/create
    0ffa3dd870 daemon/c8d: Use Docker imagespec
    14af90b868 c8d/integration/TestBuildOnBuildCache skip parent check
    366a5f1d74 image/spec: Add Go structs
    536826d66f image/spec: Add Healthcheck.StartInterval (v1.3)
    75097cf09a test: remove platform related timeout values
    6dd78a9ac2 image/spec: Fix typo in "superseded"
    84a4f37cf7 test: use info from the version endpoint for arch checks
    159b168eea test/integration: Remove checks for "not arm" in tests
    ebb9fade23 makefile: use info -f to get the current storage driver
    c243efb0cd client: TestImageTagInvalidSourceImageName remove invalid test-case
    3a4a04e462 distribution: simplify mocks
    d864d1eb97 image/spec: add back versioned files
    b8de6c01b5 image/spec: rename v1.2.md to spec.md
    c3f2bd1009 image/spec: rename v1.1.md to spec.md
    7ff38506ab image/spec: rename v1.0.md to spec.md
    32d5e6312d image/spec: use permalink to versioned documents
    7b7019a4da image/spec: add missing "Shell" field (v1.2)
    5380f3f0c4 image/spec: add missing "ArgsEscaped" field (v1.1, v1.2)
    f33370219b image/spec: add missing "OnBuild" field
    e19edd3f25 image/spec: minor fixes and touch-ups in markdown files
    b9f9e20f01 daemon: Daemon.killWithSignal(): don't discard snapshotting errors
    af535233cc daemon: Daemon.killWithSignal(): don't discard handleContainerExit error
    8c6a46f643 libnetwork: Endpoint.AddStaticRoute don't create StaticRoute if unused
    1dcb11f81d libnetwork: Endpoint.InterfaceName: remove redundant nil check
    a9a0ffaf51 testing: update docker-py 6.1.3
    f6959bc597 test-docker-py: skip AttachContainerTest::test_run_container_reading_socket_ws
    e0f171f342 testing: update docker-py 6.0.1
    79a0f82ca1 test-docker-py: remove comment about docker 17.06 limitations
    be90e5e1d4 libnetwork: Controller.addServiceBinding: fix duplicate word in comment
    77c2613d3a libnetwork: fix some missing imports on macOS and FreeBSD
    5da2dd98e9 registry: move search-related code to separate files
    f1a7028900 registry: rename v1-endpoint tests to have a common prefix
    19f6f0b3db registry: move v1 endpoint tests to endpoint_test.go
    47bf587f84 registry: ResolveAuthConfig: rename var that collided with import
    a0a8d9d057 libnetwork: notify another driver registerer
    2689484402 volume/local: Don't unmount, restore mounted status
    f1a6e16258 errdefs: remove redundant import comments
    b6ba2a4f75 errdefs: remove gotest.tools dependency
    3f8cbd8ec9 registry: update some godoc
    e10eca3d1a daemon/containerd: rename some vars that collided with imports
    aefbd49038 daemon/containerd: newROLayerForImage: remove unused args
    28d201feb7 daemon/containerd: log errors when releasing leases
    d43e61758a registry: deprecate APIEndpoint.Version and APIVersion type
    aef703fa1b integration/liveRestore: Check volume content
    4e4f62b6db distribution: use registry consts for API version in tests
    aa59b0f5a2 registry: improve error for invalid search endpoints
    14b53c6318 registry: simplify `trimV1Address`
    062c80199f registry: combine TestEndpointParse and TestEndpointParseInvalid
    0f871f8cb7 api/types/events: define "Action" type and consts
    10a3a3bc49 daemon: inline some variables when emitting events
    9331d6de1e daemon/events; fix TestLoadBufferedEventsOnlyFromPast
    f6f6c32138 api: ValidateRestartPolicy: improve errors for invalid policies
    333e04e84e integration-cli: TestEventsFormat: rewrite test to not use deprecated fields
    fa79b5d59f integration/container: TestPause: don't depend on deprecated fields
    0161aad462 client: TestEvents: don't depend on deprecated fields
    5123ae4352 daemon: TestLogContainerEventCopyLabels: inline vars
    2928c5ae92 daemon: TestHealthStates: don't depend on deprecated fields
    62ec14d9ec daemon/events: verify non-deprecated fields
    f443006fa2 daemon/events: rewrite test-assertions with gotest.tools
    70ad5b818f api/types/events: make events.Type an actual type
    5a02ed5e84 integration: use events-consts in tests
    9ea50365d6 daemon/events: use events-consts in tests, and fix vars that collided
    2f8e957713 Dockerfile: update crun binary to v1.8.7
    32e79c464a libnetwork: Network: return early where possible
    5512c7e838 libnetwork: Network.Services: remove some intermediate vars
    d6b8298cfd libnetwork: Network.Services: return early and don't lock in a loop
    8b21609654 libnetwork: remove Endpoint.Interface
    f8181b8875 libnetwork: Endpoint.Iface, Endpoint.Interface remove redundant "if"
    6a61bacafe libnetwork/drivers/remote: rollbackEndpoint.Interface: return concrete type
    dc061d2ed3 libnetwork/drivers/remote: driver.DeleteNetwork: remove var that collided
    40b1389917 libnetwork/drivers/remote: remove unused testEndpoint.Interface
    15435f7293 libnetwork/drivers/bridge: testEndpoint.Interface: return concrete type
    9afb688f5f libnetwork/drivers/bridge: getIPv4Data: remove unused argument
    639449f84e libnetwork: nwAgent.bindAddr: change to net.IP
    b75e831567 libnetwork: resolveAddr: add GoDoc
    ebe2347ac6 daemon: remove LogPluginEventWithAttributes as it's not used
    aa764e6009 daemon: logNetworkEvent, logSecretEvent, logConfigEvent rm unused args
    fa13b0715f integration/internal/swarm: rename max/min as it collides with go1.21 builtin
    79495c5b6a pkg/tailfile: rename max/min as it collides with go1.21 builtin
    df2f25a977 pkg/plugins: rename max/min as it collides with go1.21 builtin
    6c036f267f pkg/sysinfo: rename max/min as it collides with go1.21 builtin
    55192de9e3 pkg/archive: rename max/min as it collides with go1.21 builtin
    a3867992b7 daemon: rename max/min as it collides with go1.21 builtin
    f6b2e34268 Update example in README.md to close cli object
    318b3d4fe5 api/types/versions: rename max/min as it collides with go1.21 builtin
    cb394a62e5 restartmanager: rename max/min as it collides with go1.21 builtin
    8f64e2e925 daemon: daemon.logClusterEvent: use events.Type for event-types
    3dea2f230a daemon: inline some vars when producing events
    385f6429be api/server/router/network: remove empty file
    350223201e integration/container: TestCheckpoint: remove intermediate vars
    b688af2226 api/types: move checkpoint-types to api/types/checkpoint
    70baaec6a5 Dockerfile: remove libdevmapper-dev
    12d1f4f385 hack: remove devicemapper leftovers and build-tags
    f6a5318f94 Dockerfile: Windows: update Golang download domains to cut down redirects
    2aabd64477 hack: update link to GOPATH documentation
    b18e170631 CONTRIBUTING.md: update links to golang docs and blog
    136e86bb5c api: swagger: update link to Go documentation
    4862d39144 docs/api: update links to Go documentation
    cd49f9affd update golangci-lint to v1.54.2
    d52f20048d api/server: format code with gofumpt
    e9b09b49fd builder/builder-next: format code with gofumpt
    73894af9ff contrib/apparmor: format code with gofumpt
    ce01d779df daemon: format code with gofumpt
    211d3a8c32 pkg/stack: format code with gofumpt
    95e99e629c pkg/fileutils: format code with gofumpt
    6c6e1fb13d pkg/containerfs: format code with gofumpt
    1e579a7a2a pkg/sysinfo: format code with gofumpt
    263c00f27c testutil: format code with gofumpt
    b71951c70c container: format code with gofumpt
    87cedbe443 image: format code with gofumpt
    976da91fb7 pkg/loopback: format code with gofumpt
    b4d6eca9b8 pkg/chrootarchive: format code with gofumpt
    07e6b0ac70 integration: format code with gofumpt
    498da44aab remove some remaining pre-go1.17 build-tags
    210abfaef6 libnetwork: add godoc to Endpoint
    04422f5ec1 daemon: WithNamespaces(): add notes about user-namespaces
    dd26e6b15e daemon: Daemon.getIpcContainer: make errors less repetitive
    3d94eb9bcd daemon: Daemon.getPidContainer: change to accept "id" argument
    bc7f341f29 daemon: WithNamespaces(): fix incorrect error for PID, IPC namespace
    bd5d6480e7 daemon: WithNamespaces(): remove redundant "if"
    6eaefe5bf5 daemon: WithNamespaces(): use switch instead of if/else if/else
    43aa67a982 daemon: WithNamespaces(): use OCI-spec consts for namespaces
    759698581e daemon: WithNamespaces(): inline variables
    13648a0e21 daemon: remove Daemon.checkContainer and related utils
    78828f9b58 test/integration: Download the registry binary
    bd2c553870 Fix some broken executable flags
    143b3b2ef3 test: update registry version to latest
    01214bafd2 c8d/builder: Don't drop fields from created image
    b92cf68add libnetwork/osl: remove Sandbox and Info interfaces
    c881360e88 libnetwork/osl: remove Interface.Master() as it's unused
    b9bf407929 libnetwork/osl: remove Interface Interface
    8631e69cdf libnetwork/osl: remove Sandbox.InterfaceOptions() etc.
    f3d29db6a2 libnetwork/osl: remove Sandbox.NeighborOptions() etc.
    a365fb0e9d libnetwork: move more osl.Sandbox related code to Linux-only files
    95abde479a libnetwork: implement Controller.setupOSLSandbox
    35456d2eb1 libnetwork/osl: add godoc to networkNamespace
    aecfa55c4c libnetwork/iptables: (Add|Del)InterfaceFirewalld: check firewalld status
    4b0d38de06 TestDiskUsage: don't panic if results don't match
    c0568a95d8 integration/container: check some error-types in tests
    2b583c0923 daemon: cleanupContainer: slightly cleanup error messages
    69cf2ad6a5 daemon: cleanupContainer: don't fail if container is already stopped
    20b770237c daemon/network: Settings: move sandbox fields together
    405f571ae8 daemon: updateSandboxNetworkSettings: remove unused error-return
    2eccf0e8d1 libnetwork: Controller.NewSandbox: don't generate ID if not used
    6cbe06ff3f test: Skip graph driver tests when using containerd snapshotters
    3553b4c684 replace dockerfile/dockerignore with patternmatcher/ignorefile
    a479b287c7 vendor: github.com/moby/patternmatcher v0.6.0
    bedcc94de4 daemon: Handle NotFound when deleting container lease
    dfaff9598c c8d/run: Allow running container without image
    eb56493f4e c8d/commit: Don't produce an empty layer
    3e8af0817a ipam: Replace ChildSubnet with parent Subnet when its mask is bigger
    4f47013feb api: Validate IPAM config before creating a network
    2be118379e api/types/container: add RestartPolicyMode type and enum
    b8ff8ea58e Don't return an error if the lease is not found
    dff53a02ef libnetwork: remove Controller.Sandboxes as it's no longer used
    d6f340e784 gha: set 10-minute timeout on "report" actions
    f44fbab3ec libnetwork: remove Controller.WalkSandboxes and related code
    6dba98cf38 libnetwork: implement Controller.GetSandbox(containerID)
    6c4153f348 libnetwork: parallelTester: move vars closer to where they're used
    e690cdb6a3 libnetwork: remove redundant sandboxTable type
    3c10db669e libnetwork: remove unused SandboxKeyWalker
    cc414a2012 libnetwork/osl: remove Sandbox.Info()
    3b9f4395cf libnetwork: remove InterfaceInfo interface
    d146e592d8 api/t/network: Move IPAM types to their own file
    219d4d9db9 ci(bin-image): check repo origin
    d125823d3f hack: use long SHA for DOCKER_GITCOMMIT
    2010f4338e ci(bin-image): clean up metadata
    ad91fc1b00 ci(bin-image): clean up env var handling
    5dc44f03f0 classic builder: align "removing intermediate container" output
    06e540c271 libnetwork: move all SandboxOptions to a separate file
    2afa4eba43 libnetwork: resolver: Resolver.dialExtDNS use joinHostPort and cleanup
    3218e26a22 libnetwork: resolver: remove some intermediate variables
    986de11464 libnetwork: resolver: remove setCommonFlags, use createRespMsg
    7f965d55c7 volume/local: Fix debug log typo
    678ce73907 windows: update default base image for dev container
    0c522c6bbf libnetwork/datastore: remove deprecated scope consts
    73ffb48bfb ci(bin-image): populate DOCKER_GITCOMMIT, take 2
    9aed6308d4 ci(bin-image): populate DOCKER_GITCOMMIT
    c22ec82477 libnet: Fix error capitalization
    bd0111c1f4 libnet: Replace NoServiceError with UnavailableError
    42d34e40f9 libnet: Replace BadRequest with InvalidParameter
    a64adda4e7 c8d/inspect: Ignore manifest with missing config
    c85a33d74b libnetwork/iptables: un-export ZoneSettings, and slight refactor
    d979d2af45 libnetwork/iptables: fix TestFirewalldInit
    513063bcf9 libnetwork/iptables: ProgramChain: don't fail if interface not found
    64de635626 Add a temporary drop-in replacement for errors.Join
    cff341e5e6 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230815220644-3f2e40b3ed51
    56b62640a2 libnetwork: Controller.NewSandbox: use named error-return
    cbe692ffd1 libnetwork: Controller.NewNetwork: use named error-return
    e2f9d6c4c3 libnetwork: rename vars that collided with builtins
    e8f0f5a4ce libnetwork: rename agent type to reduce collisions
    0503cf2510 libnetwork/drivers/bridge: setupIPChains(): name output variables
    b9d9504df5 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230808164555-1983e41a9fff
    7b66ae1531 vendor: golang.org/x/crypto v0.3.0
    59aa3dce8a remove s390x and ppc64ls pipelines
    ea2d686468 libnetwork/iptables: DeleteConntrackEntries: remove "totals" returns
    f1240393d9 libnetwork/iptables: reduce DeleteConntrackEntriesXX debug logs
    18a0ff2b2b daemon: Daemon.handleContainerExit(): rename err-var for clarity
    178125ae39 libcontainerd/supervisor: explicitly ignore process kill errors
    f8363690ca daemon: Daemon.handleContainerExit(): reduce ambiguity in error handling
    72648f0ba6 oci: DefaultLinuxSpec: use OCI-spec consts for namespaces
    17571ff199 integration/internal/container: add WithPIDMode option
    917dae58e1 integration/internal/container: remove import aliases
    e0f5bb4820 daemon: withLibnetwork(): return early if networking is disabled
    225691e258 daemon: withLibnetwork(): use OCI-spec consts for namespaces
    8376595621 libnetwork: un-export SetExternalKey
    91a3a95385 libnetwork/options: OptionExecRoot: skip osl.SetBasePath on non-Linux
    48ea7ec970 libnetwork/osl: use filepath.Join() only when changing basedir
    8bf62010a4 libnetwork: merge linux-only test-files
    c0562d4eed libnetwork: rename unix-only testfiles
    8070f15966 libnetwork/drivers/bridge: rename some linux-only files
    014fefee1d libnetwork/drivers/bridge: minor formatting fixes
    80d158e0de daemon: remove containerNotModifiedError
    dffe634c19 daemon: Daemon.ContainerStart(): make validateState a regular function
    6da42ca830 c8d/diff: Reuse mount, mount parent as read-only
    051d51b222 c8d/export: Use ref counted mounter
    303e2b124e integration: Add test for not breaking overlayfs
    05deecaa45 internal/testutils/netnsutils: move utils that were not used on Windows
    d4e1c072e2 libnetwork: move resolverIPSandbox closer to where it's used
    f661bd8ee5 libnetwork: Resolved.SetupFunc() minor cleanup
    de4ba13400 libnetwork: move resolver tests that were skipped on Windows
    1e4e9161c5 libnetwork: move TestDNSOptions to a non-windows file
    bf1fb97575 daemon: Daemon.containerStart(): add comment to clarify error-type
    b039bbc678 update runc binary to v1.1.9
    79b467808e vendor.mod: github.com/opencontainers/runc v1.1.9
    74feadacf8 integration/internal/container: refactor CreateExpectingErr
    0899ba4a3f integration/internal/container: add NewTestConfig utility
    3cb52a6359 integration/internal/container: use consistent name for api-client
    26be2bc6b9 integration/container: use consistent name for api-client
    38e26c4717 daemon/create.go: Fix error capitalization
    435ecfe6e0 test/volume: Replace Check with NilError where suitable
    3d3ce9812f integration/tag: Move to client unit test
    742475bc8d daemon/create.go: Supersede github.com/pkg/errors
    4cc796ab93 client: Client.buildRequest: use http.NewRequestWithContext
    58dc0fcd1e client: Client.Ping: re-use request when falling back to GET
    87fff769f4 client: Client.checkResponseErr: change errorMessage to an error
    71da8c13e1 integration/tag: Use subtests and make parallel
    11a0c2779b pkg/plugins: Rewrite with assert.Check
    43956e1b71 hack/test: Don't exit early when all tests are filtered out
    ae008570ff hack/test: Split -test.run for integration and integration-cli
    510cac5f5b hack/test: Fix checking if integration-cli are filtered out
    8a1ca49657 libnetwork/osl: nwIface: add godoc
    16785b9b7b libnetwork/osl: move all networkNamespace methods together
    5b0fa7aaca libnetwork/osl: some minor nits
    972d80b596 libnetwork/osl: clean up newInfo() a bit
    0da721ec38 libnetwork/osl: make newKey and newInfo a t.Helper()
    d9442aab88 libnetwork/osl: nwIface: remove mutex altogether
    2afe18d2ce libnetwork/osl: nwIface: unexport sync.Mutex
    8b989ac665 libnetwork/osl: let's not do this, etc.
    3d0a7d819c libnetwork: remove Network.Info() and remove NetworkInfo interface
    74354043ff remove uses of libnetwork/Network.Info()
    36a0946aa9 libnet/ipamapi: Remove unused errors
    fd4ec26313 daemon/network.go: Fix error capitalization
    64e01c627f daemon/network.go: Remove github.com/pkg/errors pkg
    94dc10378d libnetwork: network.requestPoolHelper: slightly optimize order of checks
    67e2c1d482 libnetwork: network.requestPoolHelper: remove dead code
    ad68883c5a libnetwork: network.requestPoolHelper: don't defer in a loop
    32fcde6d9e libnetwork: network.IpamConfig, network.IpamInfo: name output vars
    df03357d19 libnetwork/ipam: move PoolID.FromString() to a PoolIDFromString() func
    808fed550d libnetwork/ipam: PoolID.String(): don't use fmt.Sprintf
    87fc8c772b libnetwork/ipam: Allocator.RequestPool: name args, output vars
    6dbc9c1c53 libnetwork/ipam: Allocator.RequestPool: mark options arg as unused
    7047964bd6 libnetwork/ipam: Allocator.RequestPool: make parseErr only handle errors
    821ef5cbaf libnetwork/ipams/null: use consts for fixed values
    05ef5559c3 pkg/plugins: override timeouts during tests
    6841a53d17 hack/test: Don't fail-fast before integration-cli
    2aa24519da ibnetwork/drivers/bridge: newLink: validate before creating
    5d722b35d9 libnetwork/drivers/bridge: bridgeNetwork.getEndpoint(): move lock
    eba15fe905 libnetwork/drivers/bridge: driver.link: don't defer in a loop
    76b736c242 libnetwork/drivers/bridge: driver.link: name return var for defer handling
    ea5f21ceac libnetwork/drivers/bridge: don't convert IP to string and back again
    8b6203b613 libnetwork/drivers/bridge: link.Enable: don't register reload on error
    0f4ba145ee libnetwork/drivers/bridge: link.Enable, link.Disable use iptables.Action
    40adb4317b api: Remove duplicated check on CheckDuplicate
    3e52785aae volume/drivers: use plugin Content-Type headers v1.2
    481dde8b70 libnetwork: use plugin Content-Type headers v1.2
    93b5c31541 integration-cli: use plugin Content-Type headers v1.2
    b663c7c5c3 pkg/plugins: add convenience alias for VersionMimeType
    c8930105bc fix: Normalize `RLIMIT_NOFILE` to sensible defaults
    4f9540f19f daemon: remove some intermediate vars and some cleanup
    8153a7760e daemon: Daemon.tryDetachContainerFromClusterNetwork: cleanup
    a018bb1da7 daemon: Daemon.initializeNetworking: remove var declaration
    12d8029d56 daemon: Daemon.getNetworkedContainer: remove intermediate var
    d1aa1979b4 daemon: buildEndpointInfo: minor refactor
    7a59913b1a Add CDISpecDirs to Info output
    0034a98eb1 pkg/plugins: Guard storage and unparallel racy tests
    bbb9255562 Skip CDI driver registration if CDISpecDirs is empty
    3b71197fb8 Set default CDI spec dirs after parsing args
    f3e62199ea daemon: Remove unneeded error wrapping in verifyNetworkingConfig
    d7a9f15775 bakefile: Remove default value of DOCKER_GITCOMMIT
    2b028dc55b daemon: Daemon.buildSandboxOptions: use range when looping
    33b4285eb1 daemon: Daemon.buildSandboxOptions: don't use PortBinding.GetCopy()
    ddb3d46533 daemon: Daemon.buildSandboxOptions: remove intermediate vars
    27a27db73f daemon: Daemon.buildSandboxOptions: move vars to where they're used
    91cab53a3e libnetwork: make OptionDNS, OptionDNSOptions, OptionDNSSearch take a slice
    2cbed9d2a8 daemon: inline Daemon.getDNSSearchSettings
    603547fa19 daemon: change Daemon.setupPathsAndSandboxOptions to a regular func
    07f2df69c7 daemon: buildCreateEndpointOptions: minor nits
    5158a33f15 daemon: buildCreateEndpointOptions: use range when looping
    1c6dae1291 daemon: buildCreateEndpointOptions: don't use PortBinding.GetCopy()
    cc79024761 daemon: buildCreateEndpointOptions: remove intermediate vars
    45de99aa06 daemon: buildCreateEndpointOptions: don't parse empty vip
    7d429125d2 daemon: buildCreateEndpointOptions: move vars to where they're used
    6ce92aa523 daemon: buildCreateEndpointOptions: skip getPortMapInfo() if not needed
    9e9a17950a daemon: FindNetwork: minor cleanups
    8c4af5dacb distribution: show image schema deprecation on all registries
    982bc0e228 distribution: update warning for deprecated image formats
    5bd8aa5246 integration: Add RunAttach helper
    d7fb4dd170 integration: Extract stream demultiplexing from container.Exec
    584f016e99 docs/api: remove stray underscore in version-history.md
    d5cb7cdeae update to go1.20.7
    fced566714 client: move resolveTLSConfig to a Client.tlsConfig()
    47af265234 client: Dialer: inline fallbackDial
    74d9850bb9 client/buildkit: ClientOpts: update docs to use doc-links, and inline
    971083d419 api: search: deprecate is_automated field, and is-automated filter
    5e2a1195d7 swap logrus types for their containerd/logs aliases
    1a51898d2e TestDaemonProxy: use new scanners to check logs
    476e788090 Fix daemon proxy test for "reload sanitized"
    e2d400bea9 libnet/d/bridge: Inline InvalidLinkIPAddrError
    6df4a00bb9 libnet/d/bridge: Remove pointless BadRequestError impl
    7c13985fa1 libnet/d/bridge: Inline InvalidIPTablesCfgError
    d8f42ee21a libnet/d/bridge: Inline IPTableCfgError
    a40d00c421 libnetwork: remove ErrDataStoreNotInitialized
    66b379785e libnetwork: remove unused InvalidContainerIDError
    d8cd4f6421 libnetwork: remove unused UnknownEndpointError
    fc5c16f491 libnetwork: remove unused NetworkTypeError
    e9f1888560 libnetwork: remove unused ErrInvalidConfigFile
    eadaaa7f79 libnetwork: remove unused ErrNoContainer
    99ab11bb90 libnetwork: remove unused ErrInvalidJoin
    9174eb00e2 libnetwork: remove unused ErrInvalidNetworkDriver
    7c2665298a libnetwork/types: move GetMinimalIP to overlay-driver and un-export
    d9b7a5f01a libnetwork/types: remove ErrInvalidProtocolBinding
    4445169cb5 libnetwork/types: remove PortBinding.Equal
    4269712d06 libnetwork/types: remove unused UUID type
    c203171ef6 libnetwork/types: remove unused RetryError and TimeoutError
    6d37ab0a83 libnet/d/bridge: Change interface implemented by error types
    03db2f8c3d libnet/d/bridge: Remove unused error types
    8197752d68 TestDaemonProxy: check proxy settings early
    4d674897f3 vendor: github.com/containerd/containerd v1.6.22
    5438356348 libnetwork: rename vars that collided with builtin and type
    ce053a14aa vendor: gotest.tools/v3 v3.5.0
    be0f4a4737 libnetwork/driver: remove discoverAPI from Windows and Windows overlay
    6ec03d6745 libnetwork: move datastore Scope consts to libnetwork/scope
    86299bbd35 vendor: github.com/opencontainers/image-spec v1.1.0-rc4
    fca38bcd0a libnetwork/driverapi: make discoverAPI an optional part of the interface
    490fee7d45 api/types/filters: fix errors not being matched by errors.Is()
    bf48d3ec29 update containerd binary to v1.7.3
    a78381c399 update containerd binary to v1.7.2
    0d76fc431a libnetwork/remote: newDriver(): return concrete type
    3e8fda0a70 windows: fix --register-service when executed from within binary directory
    d69b1fdb72 volume/mounts: cleanup tests
    da9e44a620 libnet/d/bridge: Allow IPv6 ICC from any IP address
    31d09f6ee9 testutils: move Logger interface to testutils
    492c09276d tests: Move libnetwork/testutils to internal/testutils/netnsutils
    13180c1c49 daemon/list: Drop unused arg from containerReducer
    68991ae240 daemon/list: Refactor refreshImage
    e5cffc07b3 c8d: Fix TestImagesFilterMultiReference
    1d8108b009 c8d: images/json, add image labels to the response
    a0bba26919 c8d: Populate RepoTags instead of adding a new image to the list
    ad2760ec80 integration: Move image filter tests to integration
    4d8e3f54cc c8d/container: Follow snapshot parents for size calculation
    5a39bee635 daemon/list: Replace ErrImageDoesNotExist check
    7379d18018 c8d/readConfig: Translate c8d NotFound to errdefs
    f3b76bc1da daemon: refactor buildNetworkResource to use a struct-literal
    a8c0b05052 daemon: split buildDetailedNetworkResources into two functions
    8caf974dcd daemon: refactor buildEndpointResource
    437ced91ec daemon: refactor buildIpamResources
    ca5ac19ea4 daemon: refactor buildPeerInfoResources
    02dc5ea720 libnetwork/datastore: remove Store.KVStore()
    0f7bf67f83 pkg/plugins: TestGet(): use sub-tests
    e1ad4aa002 pkg/plugins: make package-level socketsPath var a LocalRegistry field
    5bd44cf3c4 pkg/plugins: remove "load()" function
    77c03221c9 pkg/plugins/transport: remove RequestFactory interface
    d12ec5f796 pkg/plugins/transport: remove unused Transport interface
    dfd331b2c8 pkg/plugins/transport: export httpTransport, and return concrete type
    77103c7c03 pkg/plugins/transport: inline newHTTPRequest
    4af4adc7ba pkg/plugins: remove LocalRegistry.SpecsPaths()
    a44c25c2f1 pkg/plugins: split exported from implementation
    954d50b88a plg/plugins: rename vars that collided, or poorly cased
    20889dbac6 pkg/plugins: move Plugin.ScopedPath to platform-agnostic file
    a5ee0d6af8 libnetwork: don't access KVStore directly in tests
    b378669836 libnetwork/datastore: don't access KVStore directly in tests
    65978e6982 libnetwork/datastore: cleanup tests
    478f4aed63 libnetwork/datastore: ScopeCfg.IsValid(): un-wrap conditions
    37cbdeb1f2 libnetwork: remove most of kvstore
    d713b7ed45 api/server/router/network: remove unused Backend.FindNetwork
    1bc7a2aacd daemon/containerd: ImageService. LoadImage fix stray slash in comment
    126a089382 vendor: github.com/opencontainers/runtime-spec v1.1.0
    42fa7a1951 Integration test for capabilities
    5ef9e2632f libnetwork/datastore: prevent data races in Key()
    48cc28e4ef hack/integration: Add TEST_INTEGRATION_FAIL_FAST
    f70e1b315f libnetwork/datastore: remove unused ParseKey() utility
    704a19b25d libnetwork/datastore: remove DataStore interface
    d5b1e43b8f libnetwork/datastore: move MockData to a _test file
    0ec73a7892 vendor: github.com/moby/buildkit v0.11.7-dev
    64c6f72988 libnetwork: remove Network interface
    edafcb2c39 libnetwork/iptables: un-export ErrConntrackNotConfigurable, IsConntrackProgrammable
    e57b807a42 libnetwork: Controller.NewNetwork: inline arrangeUserFilterRule()
    be8ff186d6 libnetwork: refactor TestErrorInterfaces into a test
    9484520327 libnetwork: arrangeUserFilterRule: don't return early
    a5f45b47a3 libnetwork: Controller: combine iptablesEnabled and ip6tablesEnabled
    483a1933a2 volume: remove the short RRO forms in favor of the long forms
    5da84141c4 vendor: github.com/prometheus/common v0.42.0
    44ab4d44e0 vendor: github.com/prometheus/procfs v0.9.0
    6791b8051a vendor: github.com/felixge/httpsnoop v1.0.3
    9d3590f375 vendor: github.com/Microsoft/go-winio v0.6.1
    35d180126a vendor: google.golang.org/protobuf v1.30.0
    b835c28383 vendor: golang.org/x/oauth2 v0.6.0
    3cfc1ffb0a pkg/ioutils: some cleanups in tests
    df86d855f5 Dockerfile: update runc binary to v1.1.8
    f5e64a9eaa vendor: github.com/containerd/stargz-snapshotter/estargz v0.14.3
    d431345bf3 vendor: google.golang.org/protobuf v1.29.1
    30916df3d3 vendor: github.com/containerd/ttrpc v1.2.2
    4f4dd2d995 vendor: github.com/containerd/go-cni v1.1.9
    287130a254 vendor: github.com/cenkalti/backoff/v4 v4.2.0
    7145129f27 vendor: k8s.io/klog/v2 v2.90.1
    410a52b763 vendor: github.com/fsnotify/fsnotify v1.6.0
    741c28ae9f vendor: github.com/containerd/cgroups v1.1.0
    e84b72710b vendor: github.com/aws/aws-sdk-go-v2/config v1.18.16
    e235763a38 vendor: github.com/aws/aws-sdk-go-v2/credentials v1.13.16
    4c30bf1667 vendor: github.com/aws/aws-sdk-go-v2 v1.17.6
    cb53ce9f89 vendor: github.com/aws/smithy-go v1.13.5
    f463e50719 vendor: github.com/AdaLogics/go-fuzz-headers v0.0.0-20230106234847-43070de90fa1
    359ab384fd vendor: google.golang.org/genproto v0.0.0-20230306155012-7f2fa6fef1f4
    b11bdb9212 vendor: cloud.google.com/go/logging v1.7.0
    64609120d8 vendor: github.com/googleapis/gax-go/v2 v2.7.0
    2990defea7 vendor: go.opencensus.io v0.24.0
    d7aa47ddb8 vendor: github.com/googleapis/enterprise-certificate-proxy v0.2.3
    296040b1f4 vendor: github.com/cespare/xxhash/v2 v2.2.0
    033f882314 vendor: golang.org/x/oauth2 v0.5.0
    b615d195b2 vendor: github.com/golang/protobuf v1.5.3
    c5c8f433e6 vendor: github.com/containerd/typeurl/v2 v2.1.1
    2659f7f740 c8d/inspect: Include platform Variant
    a8fd1e3135 Dockerfile: update compose to v2.20.1
    d78893921a Dockerfile: update buildx to v0.11.2
    f3a6b0fd08 c8d: Make sure the content isn't removed while we export
    6cba44277f AUTHORS,.mailmap: update with recent contributors
    8b843732b3 pkg/chrootarchive: fix FreeBSD build
    eaf141c86a c8d/resolveImage: Fix Digested and Named reference
    028eab9ebb c8d/inspect: Don't duplicate digested ref
    7310a7cd0c ci(buildkit): remove early-return from buildkit-ref
    4ecc01f3ad ci(buildkit): remove misleading code from buildkit-ref
    48ff8a95cc hack/with-go-mod.sh: warn on stderr
    750c441dfd daemon: remove intermediate var
    468d6616bf daemon: configureLocalContentStore: return concrete types
    375c4eb31c daemon: rename vars that shadowed package-level types
    034e7e153f daemon: rename containerdCli to containerdClient
    1aa17222e7 quota: remove gotest.tools from testhelpers
    a972dbd682 hack/make/.binary: use with-go-mod.sh
    5563b09ac2 hack: use Git-free ROOTDIR convention
    780e8b2332 hack/d/cli.sh: properly handle errors in curl
    12a19dcd84 Dockerfile: improve CLI/rootlesskit caching
    235cd6c6b2 Dockerfile(.simple): align APT_MIRROR support
    bcea83ab9b Makefile: pass through APT_MIRROR
    f8c0d92a22 ci: extract buildkit version correctly with replace-d modules
    010c3718e3 vendor: github.com/tonistiigi/fsutil v0.0.0-20230629203738-36ef4d8c0dbb
    531dbd7af5 vendor: github.com/containerd/continuity v0.4.1
    eb68c5e747 daemon: support using CIDR notation for getting registry hosts
    e0b065cc33 daemon: use the registry service config for getting registry hosts
    2da589d454 client: return explicit "nil" for no errors, and remove nil check
    738b16d873 libnetwork/config: add Config.DriverConfig() and un-export DriverCfg
    82bb3d8d2b libnetwork: TestUserChain: use assert.Check and is.ErrorContains
    4e709e75da libnetwork: TestUserChain: re-use IPTables instances
    c471255153 libnetwork: TestUserChain: don't manually manipulate Controller.cfg.DriverCfg
    ddd33c6bbd libnetwork/iptables: move IPTable.LoopbackByVersion() to a utility
    aad2dbb93d libnetwork/iptables: GetIptable: validate provided IPversion
    47063ca3ae libnetwork/iptables: un-export IPTable.Version
    9c2cd65c0d libnetwork/iptables: make some vars local, and move bestEffortLock lock
    93d050f504 libnetwork/iptables: NewChain, RemoveExistingChain: validate chain, table
    ad0c928ab5 libnetwork/iptables: resetIptables(): don't pass empty table name
    1198fe8f6b libnetwork/iptables: un-export FirewalldInit
    20900b76f9 libnetwork/iptables: make xLockWaitMsg a const
    995da1e51d libnetwork/iptables: group "enum" consts per type
    c74a083672 libnetwork/iptables: IPTable.ExistChain(): remove redundant if/else
    9f9d57590b libnetwork: getTestEnv(): use literals for options
    534858aaed libnetwork/drivers: rewrite some strings to reduce quote-escaping
    7c360778bb libnetwork/drivers/bridge: driver.configure: remove redundant err-check
    e21ff6c0c9 libnetwork/config: remove IsValidName utility
    948f55d0b7 libnetwork/options: remove unused NewGeneric, and use map[string]any
    fa5c13542c libnetwork/drivers/bridge: setupBridgeNetFiltering: improve error handling
    077049d0b9 client: WithTLSClientConfig: return early if no transport is set
    6846c63252 client: WithTLSClientConfig, WithTLSClientConfigFromEnv: inline vars
    9d1e690751 client: TestGetAPIPath: don't use un-keyed structs
    6552441b46 client: TestClientRedirect: cleanup
    8d514f4e2e client: touch-up docs, and user doc-links
    c219b09d4a client: Client.postHijacked: use Client.buildRequest
    e11555218b client: Client.setupHijackConn: explicitly ignore errors
    41f235a2f8 gha: add note about buildkit using older go version
    1ead2dd35d update go to go1.20.6
    e1db9e9848 testutil: use dummyhost for non-tcp connections
    6b7705d5b2 pkg/plugins: use a dummy hostname for local connections
    92975f0c11 client: define a "dummy" hostname to use for local connections
    2a59188760 client: TestSetHostHeader: don't use un-keyed literals
    f93cfb2e31 Support for health start interval to swarm mode
    16e6d8af55 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230713153928-bc71908479e5
    79c72390b9 integration/container: use subtests for TestAttach
    f9e2eed55d integration: Don't env cleanup before parallel subtests
    cdac084fb4 Add t.Helper() to the cli test helper functions
    c395496e06 testutil: rename variable that collided with import
    1370b3c679 client: minor test improvements for requests
    f7f0a17ea2 client: TestSetHostHeader: use sub-tests
    2cb982b506 pkg/plugins: run tests with t.Parallel()
    b39362295a pkg/plugins: don't share plugin server between tests
    ee9fe2c838 ci(buildkit): match moby go version for buildkit tests
    3379414c76 vendor: github.com/moby/buildkit@v0.11 (0a15675)
    5e4878ed2b Dockerfile/shell: install compose cli plugin
    ecfa4f5866 ci(bin-image): add SHA-based tags
    ce2e6b5cda Bump container-device-interface dependency to v0.6.0
    0a126a85a4 ci(bin-image): fix meta step
    749d7449f9 ci(bin-image): fix typo
    1686540594 ci(bin-image): don't set tags when pushing by digest
    83477ce8d0 client: remove custom "headers" type, and use "http.Header" instead
    e4ce676d3d client: ServiceCreate, ServiceUpdate: omit "version" header on API >= 1.30
    d29240d9eb libnet: Return a 403 when overlay network isn't allowed
    21dcbada2d libnet: Return proper error when overlay network can't be created
    93853eca94 pkg/fileutils: GetTotalUsedFds(): slight optimization for macOS
    c5c977855d registry: session.searchRepositories(): return typed error, and small cleanup
    68ebfa2f18 registry: session.searchRepositories(): log actual search URL
    27698f1d13 registry: ParseSearchIndexInfo: remove redundant error-handling
    a0e1155b28 daemon/containerd: fix assignment to entry in nil map during commit
    6b1b71ced4 Disable tls when launching dockerd through hack/make.sh
    079a9d4562 Sort unconsumed build arguments before usage
    41261ea4ec ci: push bin image to Docker Hub
    5b3acc15d1 libnetwork: drop legacy driver cruft
    f9a83daebb libnetwork: delete package bitseq
    8b167535db libnetwork: delete package idm
    7366e44019 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230707182847-6f78b8199b05
    a490248f4d daemon: daemon.prepareMountPoints(): fix panic if mount is not a volume
    c90229ed9a api/types: move system info types to api/types/system
    3aef732e61 Do not drop effective&permitted set
    d519bde5da libnet/drivers: stop passing config to drivers...
    1980deffae libn: refactor platform driver registration
    c87c4b5bbf Add Albin Kerouanton (@akerouanton) as maintainer
    0066138379 Add Kevin Alvarez (@crazy-max) as maintainer
    d8056ddecd Add Laura Brehm (@laurazard) as maintainer
    2216d3ca8d Add health start interval
    2ab2503b6c Put integration daemon socket in /run
    914888cf8b Improve test daemon logging
    51bcf5954f libnet/d/overlay: parse VNI list w/o allocating
    96ca669fa4 libnet/d/overlay: extract VNI option parsing...
    a940462fc7 libnetwork/drivers/bridge: minor cleanups for iptables funcs
    6817b3697b libnetwork/iptables: signalHandler(): use s switch
    51bbcdb3c5 libnetwork/iptables: merge Conn.initConnection into newConnection
    0921360133 libnetwork/iptables: checkRunning(): use early return
    98592608d4 libnetwork/iptables: remove unused Ebtables const
    126525c03e libnetwork/iptables: TestReloaded(): minor cleanup
    b216669a02 libnetwork/iptables: TestPassthrough(): skip without firewalld
    753c190ef9 libnetwork/drivers/bridge: rename vars that collided with type
    d1ebe6689f libnetwork/iptables: errors should not be capitalized
    afe8d3076f libnetwork/iptables: remove ErrIptablesNotFound
    16f80f649b libnetwork/iptables: ChainInfo: don't pass whole IPTable as value
    42653787ea libnetwork/iptables: ChainInfo.Output(): explicitly suppress errors
    ea4baa24b1 libnetwork/iptables: IPTable.RemoveExistingChain() slight refactor
    04e54c6bb0 libnetwork/iptables: IPTable.exists(): return early on error
    829374337f libnetwork/iptables: don't use err.Error() if not needed
    9717734d1c libnetwork/iptables: IPTable.NewChain() minor cleanups
    9bb0e7a5ee libnetwork/iptables: inline some args
    564a13285f libnetwork/bitmap: improve documentation
    0fc6bf9a6e libn/d/o/ovmanager: assign vxlans using bitmap pkg
    f0127f1617 libn/d/o/ovmanager: inline obtainVxlanID method
    e97492e579 libn/d/o/ovmanager: drop mutex from network type
    6fb6635ceb libn/d/o/ovmanager: make mutexes private fields
    cdcb7c28c5 integration: disable iptables in parallel tests
    9cee34bc94 pkg/plugins: make unit test less time sensitive
    3721a525ce daemon: initBridgeDriver(): pass BridgeConfig, instead of daemon config
    b8220f5d0d daemon/config: move MTU to BridgeConfig
    11abd0742e dockerd: "--mtu": update description, hide on Windows and warn if set
    6944d2dddb libnetwork: TestBoltdbBackend(): use t.TempDir()
    2fd88c7ca4 libnetwork: inline store config options
    cda187222e libnetwork/config: remove options that were only used in tests
    bc80c5d067 libnetwork: rename vars that shadowed with pkg vars and imports
    332ffe8d74 libnetwork/networkdb: NetworkDB.Watch(): remove unused "key" argument
    4c4149a09c libnetwork/internal/kvstore: remove unused Delete()
    4d09e60f5b libnetwork/internal/kvstore: remove unused Watch() method
    c14a9f5b3d libnetwork/datastore: un-export Mutex
    e21e802fc6 libnetwork/datastore: remove unused DeleteTree() method
    58d2f21dae libnetwork/datastore: remove unused PutObject(), DeleteObject()
    a3b0181503 libnetwork/datastore: remove Watch(), Watchable(), RestartWatch()
    2409a36e29 libnetwork/datastore: cache.get(): remove unused "key" argument
    824abbf8d9 libnetwork/datastore: remove redundant datastore.sequential
    e9b6965079 libnetwork/datastore: remove unused datastore.Active()
    b32e41f016 libnetwork/internal/kvstore/boltdb: un-export Mutex
    7e7c7bbc17 libnetwork/internal/kvstore/boltdb: BoltDB.List(): minor cleanup
    95b96eebdd libnetwork/internal/kvstore/boltdb: BoltDB.Get(): don't shadow error
    fb61b07bcf libnetwork/internal/kvstore/boltdb: BoltDB.Exists(): fix error handling
    c94ccd4207 libnetwork/internal/kvstore/boltdb: minor cleanup/refactor
    acfd3934a7 libnetwork/internal/kvstore: AtomicDelete(): remove unused "deleted" return
    b576682bdc libnetwork/internal/kvstore: AtomicPut(): remove unused "created" return
    c37b58bbc3 libnetwork/internal/kvstore: remove unused WriteOptions
    e515bef423 libnetwork/internal/kvstore: remove unused WatchTree and NewLock methods
    a373983a86 libnetwork/internal/kvstore: fix some linting issues
    05988f88b7 libnetwork/internal/kvstore: remove unused Config options
    ec11aea880 pkg/jsonmessage: use string-literals for easier grep'ing
    fded42c3bd pkg/ioutils: use string-literals for easier grep'ing
    1da079f211 pkg/idtools: use string-literals for easier grep'ing
    84000190d3 opts: use string-literals for easier grep'ing
    ddec605aef integration: use string-literals for easier grep'ing
    96a1c444cc libnetwork: use string-literals for easier grep'ing
    0db4a32b9c daemon/cluster: use string-literals for easier grep'ing
    4e69e16fde client: use string-literals for easier grep'ing
    c3d533f37f cli/debug: use string-literals for easier grep'ing
    02815416bb daemon: use string-literals for easier grep'ing
    6331a3a346 integration-cli: use string-literals for easier grep'ing
    2f61620339 builder/builder-next: use string-literals for easier grep'ing
    202907b14c builder/dockerfile: use string-literals for easier grep'ing
    a1c9a686b0 api: use singleflight for /info endpoint
    8846c7e0ae daemon/cluster/executor/container: fix mixed pointer/value receiver
    8ea78b34ab rename some variables that shadowed imports or package types
    9f4acceb6a remove redundant alias for libnetwork/datastore imports
    cffe563d4d pkg/system: remove windows stubs for MkDev/MkNod
    6b6fed06b1 integration: don't use pkg/system MkNod/mkDev
    94c975e25a api: info: don't use ad-hoc type for compatibility with old api versions
    9ffca1fedd libnetwork/drivers/remote: rename vars that collided
    f6258f70cb docs: api  v1.28 - v1.40: add missing "force" query arg on plugin disable
    892e9f2c23 docs: api v1.41: add missing "force" query arg on plugin disable
    a4bdfb963f docs: api v1.42: add missing "force" query arg on plugin disable
    85ccb25eb8 docs: api v1.43: add missing "force" query arg on plugin disable
    aba8e04ab1 docs: api: amend changelog for API 1.28 for "force" option
    7055244547 docs: api v1.32 - v1.40: remove outdated information from ServerVersion
    ed0dbb8518 docs: api v1.41: remove outdated information from ServerVersion
    b770a50dee docs: api v1.42: remove outdated information from ServerVersion
    18d77ff455 docs: api v1.43: remove outdated information from ServerVersion
    92f1ddaf0a api: remove outdated information from ServerVersion
    e8f206972a docs: api v1.42: remove "ClusterStore" and "ClusterAdvertise" fields
    e58a60902c docs: api v1.43: remove "ClusterStore" and "ClusterAdvertise" fields
    3c905d0db9 api: remove "ClusterStore" and "ClusterAdvertise" fields
    e4d809b2b0 vendor: github.com/tinylib/msgp v1.1.8
    f379af6d17 vendor: github.com/containerd/cgroups/v3 v3.0.2
    e638351ef9 c8d/prune: Handle containers started from image id
    a93298d4db c8d/prune: Exclude dangling tag of the images used by containers
    a6d5db3f9b c8d/softDelete: Deep copy Labels
    2b0655a71a c8d/softDelete: Extract ensureDanglingImage
    a96e6044cc testutil/environment: Add GetTestDanglingImageId
    13472c6cf1 daemon/config: remove unused CommonConfig.Context
    40908c5fcd libnetwork/drivers: inline capabilities options
    97285711f3 libnetwork/drivers/overlay: Register does not require DriverCallback
    a718ccd0c5 libnetwork/drivers: remove unused "config" parameters and fields
    264dbad43a gha: don't fail if no daemon.json is present
    ec79d0fc05 pkg/fileutils: GetTotalUsedFds(): use fast-path for Kernel 6.2 and up
    eaa9494b71 pkg/fileutils: GetTotalUsedFds: reduce allocations
    03390be5fa pkg/fileutils: add BenchmarkGetTotalUsedFds
    252e94f499 pkg/fileutils: GetTotalUsedFds(): don't pretend to support FreeBSD
    7747327561 AUTHORS,.mailmap: update with recent contributors
    60d2eeaa5b MAINTAINERS: update my email
    a764cd5a40 pkg/chrootarchive: format code with gofumpt
    210932b3bf daemon: format code with gofumpt
    e236994b76 daemon/snapshotter: format code with gofumpt
    9213e35011 daemon/containerd: format code with gofumpt
    4b3900a257 daemon/logger: format code with gofumpt
    050de1e4f6 daemon/logger/journald: format code with gofumpt
    a083677af2 daemon/logger/local: format code with gofumpt
    74db0e9339 daemon/logger/loggertest: format code with gofumpt
    48124bac18 daemon/logger/loggerutils: format code with gofumpt
    011a32a4ad daemon/logger/gelf: format code with gofumpt
    7ed5a30b5c daemon/logger/splunk: format code with gofumpt
    bb5a1eb99d daemon/logger/jsonfilelog: format code with gofumpt
    1437037ed2 daemon/logger/awslogs: format code with gofumpt
    f930559076 pkg/stdcopy: format code with gofumpt
    1216328c2d pkg/plugins: format code with gofumpt
    651086d1d9 pkg/jsonmessage: format code with gofumpt
    1291bbfa50 pkg/capabilities: format code with gofumpt
    79af23e1ea pkg/ioutils: format code with gofumpt
    ac1514abf4 reference: format code with gofumpt
    99968eec3f restartmanager: format code with gofumpt
    f18ac2d0bc quota: format code with gofumpt
    b2663a0f73 layer: format code with gofumpt
    83b2daca6a plugin: format code with gofumpt
    169fab5146 profiles/seccomp: format code with gofumpt
    4175a550fd libcontainerd: format code with gofumpt
    091991606a opts: format code with gofumpt
    784ba59a08 registry: format code with gofumpt
    dd5ea7e996 libnetwork: format code with gofumpt
    bba21735bf libnetwork/ipamutils: format code with gofumpt
    0b75c02276 libnetwork/resolvconf: format code with gofumpt
    801cd50744 libnetwork/portallocator: format code with gofumpt
    6187ada21f libnetwork/options: format code with gofumpt
    882f7bbf1f libnetwork/osl: format code with gofumpt
    32e716e848 libnetwork/networkdb: format code with gofumpt
    65e2149b3e libnetwork/netutils: format code with gofumpt
    1cd937a867 libnetwork/etchosts: format code with gofumpt
    540e150e4e libnetwork/cmd: format code with gofumpt
    fffcbdae4c libnetwork/iptables: format code with gofumpt
    6f3fcbcfe1 libnetwork/ipam(s): format code with gofumpt
    eb6437b4db libnetwork/datastore: format code with gofumpt
    defa8ba7b4 ibnetwork/bitmap: format code with gofumpt
    f349754b55 libnetwork/bitseq: format code with gofumpt
    3af2963c74 libnetwork/drvregistry: format code with gofumpt
    dc17f5e613 libnetwork/drivers/remote: format code with gofumpt
    485977de57 libnetwork/drivers/windows: format code with gofumpt
    2cc5c2d2e6 libnetwork/drivers/overlay: format code with gofumpt
    e74028554e libnetwork/drivers/macvlan: format code with gofumpt
    7b02ccda86 libnetwork/drivers/ipvlan: format code with gofumpt
    17a35bc645 libnetwork/drivers/bridge: format code with gofumpt
    d2a6956afb daemon/graphdriver: format code with gofumpt
    8d923c60b9 daemon/config: format code with gofumpt
    425ccb1241 runconfig: format code with gofumpt
    c0edf0861b integration/system: format code with gofumpt
    5cc1c6eca0 integration/service: format code with gofumpt
    bb5ace2efb integration/plugin: format code with gofumpt
    9bd3e011e1 integration/internal: format code with gofumpt
    89a4e6b889 integration/container: format code with gofumpt
    846bcd7dd1 distribution: format code with gofumpt
    b7f5db432f daemon/images: format code with gofumpt
    2d12dc3a58 daemon/cluster: format code with gofumpt
    316c7331eb pkg/parsers: format code with gofumpt
    fb017754e1 pkg/system: format code with gofumpt
    ee2ac6c205 cmd/dockerd: format code with gofumpt
    47276bdb28 cmd/docker-proxy: format code with gofumpt
    0af6d9e291 client: format code with gofumpt
    3146ecbae6 api/types: format code with gofumpt
    b9833a2059 builder: format code with gofumpt
    540d6539be builder/remotecontext: format code with gofumpt
    3e0565e17c builder/dockerfile: format code with gofumpt
    9d4abbbc30 builder/builder-next: format code with gofumpt
    6592646632 api/server: format code with gofumpt
    5e9a354ff1 pkg/tarsum: format code with gofumpt
    2aac054f52 pkg/authorization: format code with gofumpt
    f7552f1de4 pkg/archive: format code with gofumpt
    7c697f58f2 Makefile: remove unused BUILD_APT_MIRROR
    a1d2132bf6 Dockerfile: use default apt mirrors
    225e2562c9 integration-cli: format code with gofumpt
    a31411c679 testutil: format code with gofumpt
    4c281fb29a volume: format code with gofumpt
    a08abec9f8 Update dockerd to support JSON logging format
    b335e3d305 seccomp: add name_to_handle_at to allowlist
    6d3bcd8017 c8d/images: handle images without manifests for default platform
    8caf63896c docs: document more buildx targets
    647c2a6cdd Restore active mount counts on live-restore
    d8bc5828cd gha: Setup Runner: add missing sudo
    fdc9b7cceb remove name_to_handle_at(2) from filtered syscalls
    9f6dbbc7ea Dockerfile: make cli stages more resilient against unclean termination
    19bd0730ef vendor: github.com/moby/swarmkit/v2 v2.0.0-20230627115642-ad0f3ae162fa
    e2dad6c3ff Revert "Temporarily skip DCO check"
    1741771b67 Skip cache lookup for "FROM scratch" in containerd
    7d7225fae6 Temporarily skip DCO check
    e60cda7051 libnetwork/internal/kvstore/boltdb: fix linting issues
    d18b89ced6 libnetwork/internal/kvstore: remove some unused code
    b873d70369 replace libkv with local fork
    5d25143ef3 libnetwork/kvstore: rewrite code for new location
    dd1c95edcd integration/windows: Unskip some kill tests
    3c1de2e667 pkg/homedir: deprecate Key() utility
    ddd9665289 pkg/homedir: deprecate GetShortcutString() utility
    6876e45f9e pkg/homedir: unify implementations
    0aca7f2a0d pkg/homedir: use os.UserHomeDir()
    0215a62d5b integration-cli: don't use pkg/homedir in test
    76d8bfdff4 testutil/environment: remove Execution.OSType field
    325786430b testutil/environment: remove unused TEST_OSTYPE env-var
    0fe2ac0437 testutil/environment: rename var that collided with import
    74da6a6363 Switch all logging to use containerd log pkg
    cdb1293eea Fix missing Topology in NodeCSIInfo
    165dfd6c3e daemon: fix restoring container with missing task
    786c9adaa2 daemon: fix double-unlock in health check probe
    3b28a24e97 daemon: fix panic on failed exec start
    e010223186 contrib/busybox: Update to FRP-5007-g82accfc19
    21e50b89c9 builder: pass host-gateway IP as worker label
    21c0a54a6b c8d: mark stargz as requiring reference-counted mounts
    4d831949a7 Dockerfile: update buildx to v0.11.0
    fc94ed0a86 don't cancel container stop when cancelling context
    19d860fa9d testing: temporarily pin docker-py tests to use "bullseye"
    cfa08f8366 builder-next: enable OTLP tracing for history records
    98a44bb18e update go to go1.20.5
    3ba67ee214 daemon: registerName(): don't reserve name twice
    2a6ff3c24f Use OCI "History" type instead of inventing our own copy
    59b5c6075f pkg/rootless: remove GetRootlessKitClient, and move to daemon
    3cc5d62f8a run `getent` with a noop stdin
    71589848a0 daemon: test runtimeoptions runtime options
    a6048fc792 client: add WithUserAgent() option
    197b0b16e3 vendor: github.com/sirupsen/logrus v1.9.3
    038a361a91 daemon/cluster: convert new BindOptions
    d41d2c3751 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230607145746-36334ed1876
    32d58144fd c8d: Use reference counting while mounting a snapshot
    8a094fe609 daemon: ensure OCI options play nicely together
    dea870f4ea daemon: stop setting container resources to zero
    8c4dfc9e6a vendor: github.com/rootless-containers/rootlesskit v1.1.1
    0b1c1877c5 update RootlessKit to v1.1.1
    9ff169ccf4 daemon: modernize oci_linux_test.go
    0f9c8e684a Dockerfile: Move dockercli to base-dev
    5433b88e2d hack/cli.sh: Quiet origin cleanup
    800ea039ec contrib/check-config: move xt_bpf check to overlay section
    49f76a34b5 Dockerfile/shell: Install buildx cli plugin
    17c99f7164 Dockerfile: Use separate cli for shell and integration-cli
    1910fdde81 contrib/check-config: check for xt_bpf
    d63569c73d builder-next: Set moby exporter as default
    4295806736 c8d/handlers: Handle error in walkPresentChildren
    ff2342154b Dockerfile: use COPY --link for source code as well
    0f6eeecac0 daemon: consolidate runtimes config validation
    d222bf097c daemon: reload runtimes w/o breaking containers
    0b592467d9 daemon: read-copy-update the daemon config
    742ac6e275 daemon: make config reloading more transactional
    038449467e Update BuildKit registry config on daemon reload
    982e4fb448 api/server: get features from a callback fn
    d099e47e00 containerd: add c8d version and storage-driver to User-Agent
    a6da1480b5 dockerversion: DockerUserAgent(): allow custom versions to be passed
    9a1f2e6d7c dockerversion: remove insertUpstreamUserAgent()
    ff40d2d787 dockerversion: simplify escapeStr()
    eb9a5392bc dockerversion: add a basic unit-test
    66137ae429 containerd: set user-agent when pushing/pulling images
    06aaf87aab vendor: github.com/moby/swarmkit/v2 v2.0.0-20230531205928-01bb7a41396b
    637ca59375 Dockerfile: use COPY --link to copy artifacts from build-stages
    4d3238dc0b c8d/load: Don't unpack pseudo images
    b08bff8ba3 c8d/load: Use walkImageManifests
    5210f48bfc c8d/list: Use walkImageManifests
    fabc1d5bef c8d: Add walkImageManifests and ImageManifest wrapper
    1178319313 libn: fix resolver restore w/ chatty 'iptables -C'
    50eb2d2782 libnetwork: fix sandbox restore
    18bf3aa442 libnetwork: log why osl sandbox restore failed
    ed32f5e241 Make sure the image is unpacked for the current snapshotter
    d58df1fc6c Update blogpost URL
    44124ab6b0 builder/remotecontext: remove CachableSource, NewCachableSource
    5efe72415d remove Dockerfile.e2e
    fd72b134d5 update generated files
    735537d6b1 replace gogofast with gogofaster extension
    1eaea43581 fix protos and "go generate" commands
    7daaa00120 hack: generated files update and validation
    f1ca793980 use tools build constraint for proto dependencies
    1e55ace875 Add oci index and layout files to exported tars
    487ea81316 Fix npe in exec resize when exec errored
    9a692a3802 libn/d/overlay: support encryption on any port
    e410e27547 builder/remotecontext: remove mimeTypes struct, use consts
    b42e367045 vendor: github.com/opencontainers/image-spec v1.1.0-rc3
    37d4b0bee9 builder/remotecontext: deprecate CachableSource, NewCachableSource
    fb7ec1555c libcontainerd: work around exec start bug in c8d
    79ca6630d4 vendor: github.com/moby/buildkit v0.11.7-0.20230525183624-798ad6b0ce9f
    5045a2de24 Support recursively read-only (RRO) mounts
    3512b04093 vendor: github.com/containerd/go-runc v1.1.0
    b9b8b6597a c8d/inspect: Fill `Created` time if available
    f17c9e4aeb c8d: ImageService.softImageDelete: rename var that collided with import
    df5deab20b c8d: ImageService.softImageDelete: use OCI and containerd constants
    9b9c5242eb daemon: lock in snapshotter setting at daemon init
    53d1b12bc0 hack/make/.binary: don't use "netgo" when building Windows binaries
    a7bc65fbd8 c8d/pull: Use same progress action as distribution
    6506579e18 integration: Add TestImageInspectEmptyTagsAndDigests
    a93aadc2e6 hack: Rename .ensure-emptyfs to .build-empty-images
    3a31f81838 hack/ensure-emptyfs: Create dangling image
    4373547857 Add testenv.UsingSnapshotter utility
    d3d2823edf Dockerfile: temporarily skip CRIU stage
    86108812b8 vendor: github.com/mistifyio/go-zfs/v3 v3.0.1
    ddd67b2535 Make image save more like the OCI layout for blobs
    871cf72363 libnetwork: check for netns leaks from prior tests
    6d79864135 libnetwork/osl: restore the right thread's netns
    d4f3858a40 libnetwork: leave global logger alone in tests
    0cc6e445d7 libnetwork: make resolver tests less confusing
    411a9e1b86 daemon: remove devicemapper driver-warnings
    424a1c5d21 daemon: remove warning for overlay/overlay2 without d_type
    ab35df454d remove pre-go1.17 build-tags
    34964c2454 c8d/list: Show layerless images
    61757032da d/graphdriver/vfs: fix unit test
    6e4bd3bbc2 vendor: github.com/spf13/cobra v1.7.0
    6690d2969c pkg/archive: bail if setting xattrs is unsupported
    0cdfd5f275 pkg/system: return rich errors from L(g|s)etxattr
    41356227f2 libnetwork: just forward the external DNS response
    6d139e5e95 build: use daemon id as worker id for the graph driver controller
    668af4be82 ci(bin-image): distribute build across runners
    1be26e9f0c api/inspect: Fix nil RepoTags and RepoDigests
    f450ea64e6 fix: `docker pull` with platform checks wrong image tag
    f3645a2aa3 reorder load funcs to match newServiceConfig()'s order
    3b15156e4d add mirror to daemon reload test for insecure registries
    0d8087fbbc Remove Upstart scripts
    967c7bc5d3 api/server: allow empty body for POST /commit again
    3ceb3810d7 client: don't marshal typed nils in request body
    ae737656f9 Remove Upstart and cgroups bits from Debian sysvinit script
    c2630c93f2 Update vendoring
    dedf5747cc Remove need to set Capabilities for cdi driver
    7ec9561a77 Add support for CDI devices to docker daemon under linux
    5a200ade7c Rename daemon/devices_liunx.go to daemom/devices.go
    484785456c update containerd binary to v1.7.1
    348a79958d c8d: The authorizer needs to be set even if AuthConfig is empty
    2f0ba0a7e5 more robust dockerd-rootless-setuptools.sh
    135d8f04f9 ci: bin-image workflow
    ae1ca67178 bin-image bake target
    3309e45ca1 c8d: Don't create authorizer for empty AuthConfig
    2ad499f93e c8d/authorizer: Default to docker.io
    bd6868557d c8d/builder: implement cache
    7821d2d788 vendor: github.com/docker/distribution v2.8.2
    e46674b6a7 c8d: implement classic builder
    8d76acfe6c testutil: replace uses of client.IsErrNotFound
    56fb56ccf0 integration: update error-assertions in tests
    0538cdd226 integration-cli: update error-assertions in tests
    66ff1e063e client: update error-assertions in tests
    685b3d820a client: make IsErrNotFound an alias for errdefs.IsNotFound
    9e817251a8 libnetwork/docs: fix broken link
    17882ed614 libnetwork: update example in README.md
    4603b6d6b6 c8d: fix image history for dangling images
    4e0319c878 [chore] clean up reexec.Init() calls
    9e43c11480 AUTHORS: regenerate
    5fee4439a0 .mailmap: update with my new email
    e8be792130 c8d: fix missing image history
    e3e715666f pkg/aaparser: deprecate GetVersion, as it's no longer used
    71d7908656 added alias validation
    ecaab085db profiles/apparmor: remove use of aaparser.GetVersion()
    f445ee1e6c contrib/apparmor: remove remaining version-conditionals (< 2.9) from template
    307b09e7eb fixing consistent aliases for OCI spec imports
    2ad37e1832 daemon: handleContainerExit(): add execDuration in attributes
    cad97135b3 c8d: implement missing image delete logic
    de363f1404 daemon: handleContainerExit(): use logrus.WithFields
    fb96b94ed0 daemon: remove handling for deprecated "oom-score-adjust", and produce error
    316781be48 api/types/container: remove deprecated ContainerChangeResponseItem
    9c14f98583 api/types: remove deprecated AuthConfig
    55608d8381 pkg/system: remove deprecated IsProcessAlive, IsProcessZombie, KillProcess
    a3b12ec420 pkg/system: remove deprecated DefaultPathEnv()
    dc76b90705 pkg/system: remove deprecated MemInfo, ReadMemInfo()
    7d0488b11e pkg/ioutils: remove deprecated TempDir() alias
    152c482fee pkg/platform: remove deprecated OSType const
    913b0f51ca API: omit deprecated VirtualSize field for API v1.44 and up
    fdc7a78652 docs/api: version-history: also mention /system/df for VirtualSize
    fd0b109bf7 API: bump version to 1.44
    43b1afb2cf make chownComment easy to read
    7665feeb52 hack: enable Go modules when building dockerd and docker-proxy
    5400366b90 Set BuildKit version using buildinfo
    c33b31116c daemon/graphdriver: remove isDeprecated() utility
    dc11d2a2d8 remove deprecated devicemapper storage-driver
    1e195acee4 libn/d/overlay: stop programming INPUT ACCEPT rule
    eb0edeafdd api: swagger: add missing "force" query arg on plugin disable
    ea4dd1bbf6 boltdb/bolt is not maintained. Used bbolt
    6c0e0d6250 Allow client to set boltdb timeout
    a0f6d0798a Do not return boltdb bucket not found error
    deb21faad0 Add support for etcd authentication
    cc0ed694ee fix typo
    fbdb24ec6a Fix typo in error text
    dcf8828165 Return store.ErrKeyExists on AtomicPut
    002f9c37ca Synchronize boltbd libkv apis
    15e5d4067a Change unsupported call error in boltdb backend to use general store error
    3b5fb3ec87 Remove docs in libkv.go
    2603af65e5 Migration to the new Etcd client
    f06f78e638 boltDB AtomicDelete fails for non-existent key
    0b81042dc3 Add transient connection option to bolt db
    7225aba3af add TTL to consul lock using store.LockOptions and add tests for the Lock ttl behavior
    1f9cf17713 Fix AtomicPut panic if previous KVPair is not nil and key not exists in boltdb
    599deba8c7 nits and refactor for etcd tls config
    cc9e627f8e Add etcd TLS client code and update README.md. Signed-off-by: Adam Thornton <adam.thornton@gonkulator.io>
    64eb25dff9 Honoring ConnectionTimeout in boltdb
    3ec6dfa346 Refactor libkv to not directly import storage backends
    f817826408 Create dir first before opening data file of boltdb
    29af4e0f27 BoltDB backend support for libkv
    06f01227c5 change heartbeat/ephemeral combination to use a single ttl field
    f26e4f4c52 Minor fix of store comment
    6b43181cfa Notify user of supported backend storage
    a961b70b2b Remove unused type WatchCallback
    06151b8a4d add top-level godoc: sample some parts of the README
    a2d4e1c246 API Change: AtomicPut with previous = nil is create.
    fcb98254b1 Use Backend type for stores
    79c320c1cf remove testify dependency through mock package
    48f5dca2ce Remove logging in library
    dbc1a6fa9a refactor and move store backends in sub-packages

Bumping docker-cli to version v25.0.0-7-g01f933261, which comprises the following commits:

    21c12847b docs: move base command to docker.md
    22e1f2cbf docs: fix broken links to alias pages
    68abf14c1 vendor: github.com/docker/docker v25.0.0
    9e1e07657 docs: add documentation for CDI
    cdb1c105f vendor: github.com/docker/docker v25.0.0-rc.3
    3df149545 docs(plugins): fix typos and formatting
    22bbdc798 docs: add "builder" key to full daemon.json example
    d2efc5b09 deprecate old API versions (1.23 and lower)
    508346ef6 plugins: fix plugin socket being closed before use
    f722e07c6 gha: update to use macos-12 runners
    5f6c55a72 plugins: don't handle signal/notify if TTY
    26560ff93 Revert "plugins: run plugin with new process group ID"
    37f551566 docs: fix broken link to tmpfs (missing anchor)
    b35361e8d docs: regenerate stubs for non-canonical commands
    dfa2930af ci: Add bin-image workflow
    21c253605 vendor: golang.org/x/sys v0.16.0
    a6774de68 docs: rename cli reference aliases to canonical
    cf9d3692a docs: remove empty cli reference stubs
    d868dca00 vendor: github.com/docker/docker v25.0.0-rc.2
    1609916f2 Revert "Dockerfile/binary: Output the binary directly"
    ff25c4334 Revert "ci: Add bin-image workflow"
    ef5e5fa03 plugins: run plugin with new process group ID
    6d0b329b0 cli-plugins: use non-abstract socket on darwin
    dbf992f91 cli-plugins: move socket code into common package
    8b6ffbdf7 vendor: github.com/containerd/containerd v1.7.12
    ccc7ad2f2 Dockerfile: update buildx to v0.12.1
    fdcb78a0f Dockerfile: update docker compose to v2.24.0
    15d4c99f3 ci: Add bin-image workflow
    ecf338f43 scripts/build: Handle VERSION containing git ref
    6ad07f2a4 Dockerfile/binary: Output the binary directly
    0e37dd49f cmd/docker: registerCompletionFuncForGlobalFlags: take store.Store as argument
    c0a0b05dc cli-plugins: helloworld: rename var that collided with import
    11b2e871b cmd/docker: move main() to the top
    4dc2c895b cli-plugins/manager: getPluginDirs: take ConfigFile as argument
    79992184e docs: dockerd: rephrase environment-variables intro
    4d2b4e7fb docs: dockerd: fix stray column-separateor in env-var table
    a5e5563f1 vendor: github.com/docker/docker-credential-helpers v0.8.1
    4f4950886 update to go1.21.6
    26f59b2f6 cli/compose/loader: use golden.Assert() for readability
    9db56ea2f vendor: golang.org/x/tools v0.16.0, golang.org/x/mod v0.14.0
    efae960e5 vendor: golang.org/x/net v0.19.0
    996cce909 vendor: golang.org/x/sync v0.6.0
    4b10e5525 vendor: github.com/google/go-cmp v0.6.0
    1ebc233b4 vendor: github.com/creack/pty v1.1.21
    b4fe77a12 vendor: github.com/docker/go-connections v0.5.0
    909111b3a docs: fix incorrect heading levels in docker run reference
    b43ea528b vendor: github.com/docker/docker v25.0.0-rc.1
    6d0aa0a52 cli/command/container: parseSecurityOpts: fix --security-opt seccomp=builtin
    9be600a97 Docker build command docs refresh
    878b1c55b docs: add links to volume ls, network ls, stack ps formatting examples
    f0edc7953 change back nolint -> nosec
    c1016c05c vendor: github.com/mitchellh/mapstructure v1.5.0
    58524685d vendor: github.com/mattn/go-runewidth v0.0.15
    1e38fc3b9 vendor: github.com/klauspost/compress v1.17.4
    0fa3a365f vendor: github.com/docker/docker v25.0.0-beta.3
    d1a51582e update authors and mailmap
    60af715d6 id and name filter in service ls is the prefix not a part
    90a1887d3 Fix wrong docker run command
    64e9cadd1 Add networking reference link
    924ec7f4c docs/deprecated: update "oom-score-adjust" status for daemon
    800a728e1 deprecated: fix anchor and add missing version
    c1c6198ae docs: deprecate short cid in Aliases field
    336787c50 vendor: github.com/docker/docker 7bc56c53657d (v25.0.0-dev)
    53a129e3d docs(plugins): remove Weave engine network plugin
    3ecd6b6c7 docs(plugins): remove inline CSS markup
    a4d805f9c docs(plugins): add Kathará engine network plugin
    1dcd5487f docs(plugins): update Docker Store to Docker Hub
    46355a194 export RunStat, StatsOptions, and add Filters option
    e9a5590ad cli/command/container: statsOptions: add GoDoc
    b642078c8 prevent "docker stats" from hanging if the initial API call fails
    633ba88c2 cli/command/container: runStats(): move code to where it's used
    5ed6c128e cli/command/container: runStats(): don't register unused event handlers
    2389768fb cli/command/container: runStats(): minor cleanup and fixes
    4d434dc69 vendor: github.com/docker/docker 388216fc45ab (v25.0.0-dev)
    5eac07b10 update typos and style in docs
    6fd4cff1f docs: minor editorial improvements, typo fixes
    0de84f019 vendor: golang.org/x/crypto v0.17.0
    3cf0bf84a vendor: golang.org/x/crypto v0.16.0
    36d4db27d vendor: golang.org/x/text v0.14.0
    3d70100d5 vendor: golang.org/x/sys v0.15.0
    70216b662 add //go:build directives to prevent downgrading to go1.16 language
    88e647435 build(deps): bump github/codeql-action from 2 to 3
    ca9ff8daf docs: run-reference: use table for health options
    77e67a0f9 docs/deprecated: mark logentries logging-driver as "removed"
    8f13b0416 cli/command: remove "logentries" driver from tests and fixtures
    d79dd7c53 docs, man: remove logentries logging-driver
    b14094df5 contrib/completion: remove logentries logging-driver
    f63065a58 vendor: github.com/docker/docker f3cc93630ed8 (v25.0.0-dev)
    fa1914426 vendor: github.com/docker/docker v25.0.0-beta.2
    e81a66661 docs/deprecated: mark logentries log-driver for removal
    f8dd8f074 docs: refresh --publish, add --publish-all
    5400a48aa Plumb contexts through commands
    aec7ec7f6 vendor: github.com/docker/docker 92884c25b394 (v25.0.0-dev)
    0a3a16d2b vendor: github.com/containerd/containerd v1.7.11
    54c103aff vendor: upgrade OpenTelemetry to v1.19.0 / v0.45.0
    d49970590 vendor: github.com/felixge/httpsnoop v1.0.4
    7af509c7f cli/command: merge DockerCliOption and InitializeOpt types
    1554ac3b5 cli-plugins: terminate plugin when CLI exits
    2e394eb5f docs: rewrite section on working directory
    4a8451455 docs: rewrite section on setting user id
    259aa9005 docs: rewrite section on filesystem mounts
    52716c813 docs: move --tmpfs to docker run reference
    5ede4c82a docs: minor improvements to the healthcheck section
    7585d66a0 docs: rewrite section on overriding environment variables
    3eeac2059 docs: rewrite section on exposing ports
    0a94d85cd docs: fix typo in "network create" docs
    b01e28752 docs: rewrite section on default entrypoint
    c695ad9d7 docs: rewrite section on overriding image defaults
    4a6cde885 docs: move --log-driver to docker run reference
    72df1960e docs: move --cgroup-parent to docker run reference
    9e75a4cf6 docs: move --init to docker run reference
    92c664b0d docs: move info about --security-opt to docker run reference
    f98444490 docs: move --rm to docker run reference
    32189ca27 docs: improve description about container exit codes
    dbffa0d12 docs: move --restart to docker run reference
    73620975d docs: simplify container networking intro
    5dd6e9a4d docs: move --ipc to docker run reference
    ff62bf47b docs: move --uts to docker run reference
    d66fe7881 docs: move --pid to docker run reference
    03dc8832e docs: improve docs on container identification
    fad227d3f docs: move info about fg/bg flags to run reference
    2f48f41fc docs: improve introduction to docker run
    3f519b824 docs/deprecated.md: add version for "-g" / "--graph" removal
    6dc92b667 docs/deprecate.md: add version for devicemapper removal to table
    a682b8e65 Permit '=' separator and '[ipv6]' in --add-host
    626e64ccf build(deps): bump actions/setup-go from 4 to 5
    0cf7bff0b vendor: github.com/docker/docker 4046ae5e2fd4 (v25.0.0-dev)
    bdb45a9c2 update to go1.21.5
    afc62d8d1 update to go1.21.4
    8bbc97c86 prune: fix build cache prune warning
    e93ec2f6a Fix typo in dockerd reference documentation
    5a0470888 vendor: github.com/docker/docker 029519a1498b (v25.0.0-dev)
    aa9fdb4dd vendor: github.com/gorilla/mux v1.8.1
    a431b1dda exec.md: remove misleading part
    b62b5d48f Readme: remove reference to "Docker EE"
    354f62f0c docs: reference/commandlin/cli: remove redundant italic
    e2626200a docs: remove "{% raw %}" / "{% endraw %}" Jekyl (liquid) leftovers
    174cbb588 docs/man: fix -name flag with single hyphen
    539537ddf vendor: github.com/docker/docker cfdca8dc1d4c (v25.0.0-dev)
    6a74a63ee Dockerfile: update ALPINE_VERSION to 3.18
    35c6e915d Dockerfile: update buildx to v0.12.0
    6468c63c8 docs: update debian examples to use bookworm
    0d95231cc Dockerfile: use "debian" in stages instead of distro name
    c5194a9e5 Dockerfile: update to debian bookworm
    7be05a6f4 mount: bind-recursive: remove boolean convenience values
    dad4a1962 vendor: github.com/docker/docker v25.0.0-beta.1
    30d36e977 templates: linting: fix "error return value is not checked (errchkjson)
    4e2477f85 golangci-lint: enable more linters
    0e73168b7 golangci-lint: revive: enable use-any
    9c0c49a5f golangci-lint: revive: enable empty-lines
    8e9aec690 golangci-lint: revive: enable import-shadowing
    f387558b5 Add zstd as supported in load command doc
    f4962c65b vendor: github.com/Microsoft/hcsshim v0.11.4
    391668f57 golangci-lint: enable perfsprint linter
    8bbdb93cf golangci-lint: enable nilerr linter
    7e9d2c78c golangci-lint: enable dupword linter
    2d61f70f0 golangci-lint: govet: enable shadow check
    606cbd60a golangci-lint: enable predeclared linter
    8661552e7 golangci-lint: enable thelper linter
    8e98c765f cli/command/system: fix deprecated comments (gocritic)
    9d7e21be2 cli/command/manifest: rename vars that collided with import
    3f0c189e4 linting: address slice-append issues found by gocritic
    a2c9f3c6c linting: address else/if/elseif statements found by gocritic
    888df0987 linting: address assorted issues found by gocritic
    d0dee3ceb linting: Consider pre-allocating sliceVar (prealloc)
    efbcdce9b linting: cli/command/trust: unusedwrite: unused write to field Hashes (govet)
    580ebf41a dockerfiles: update golangci-lint to v1.55.2
    8642b3c35 update authors and mailmap
    685d1baa0 vendor: github.com/docker/docker 34e923e3e31b (v25.0-dev)
    f0816bf67 opts: remove unused IPOpt option
    b0ee27d65 opts: ValidateIPAddress: improve error, godoc, and tests
    b24e7f85a Fix setting ServerAddress property in NativeStore
    f65d4a479 vendor: github.com/docker/go-connections fa09c952e3ea (v0.5.0-dev)
    b7c31c36f not actually a maintainer
    f9622b659 vendor: update go-connections for TLS 1.3 support
    4cf1c50ad Revert "update to go1.21.4" due to regressions / breaking changes.
    6472dabe4 update to go1.21.4
    3cd77c9d5 cli/command/container: ForwardAllSignals: rewrite to use ContainerAPIClient
    a2ec50a46 make `container` an explicit, required parameter
    a4abe42cb make runAttach public and allow passing context
    2b1f5a2e3 TestParseWithMacAddress: check endpoint-specific MacAddress field
    8f59f841a cli/command/container: mustParse: return network.NetworkingConfig
    d46de7087 vendor: github.com/docker/docker c14694a424ab (v25.0.0-dev)
    efc923679 --env-file about comments doc updated Signed-off-by: Saurabh Kumar <saurabhkumar0184@gmail.com>
    07338fe96 docs: update redirect metadata for hugo
    0239b8fd9 vendor: github.com/spf13/cobra v1.8.0
    848fe622c docs: add default-network-opt daemon option
    54eee599b Update container-device-interface to v0.6.2
    e08866098 vendor: github.com/docker/docker ed1a61dcb789 (v25.0.0-dev)
    13d34b21e vendor: github.com/containerd/containerd v1.7.8
    aa24d611b vendor: google.golang.org/grpc v1.58.3
    784149382 vendor: golang.org/x/tools v0.10.0
    1a0ae8c6b vendor: golang.org/x/mod v0.11.0
    39b1d37b3 Update CodeQL workflow
    663a89b7a vendor: github.com/docker/docker fc4d035e7a4e (v25.0.0-dev)
    6891974ee vendor: github.com/opencontainers/image-spec v1.1.0-rc5
    827c404ca vendor: github.com/moby/swarmkit/v2 v2.0.0-20230911190601-f082dd7a0cee
    137c495f7 vendor: github.com/go-logr/logr v1.2.4
    6372c6aae vendor: github.com/klauspost/compress v1.17.2
    8073525c0 vendor: google.golang.org/grpc v1.56.3
    b7b5b31a7 update to golangci-lint v1.55.0
    9e1f8d646 image/build: use "nolint" comment to work around gosec regression
    2294b17e7 cli/command/network: runCreate: inline types.NetworkCreate
    594aeb390 cli/command: remove dot-imports and unhandled errors
    b08e34b9f swarm: TestSwarmUpdate: remove non-existing "--quiet" flag
    defa52b8c stacks: Add support for start interval
    9df7be5d5 cli/compose: add schema 3.12 (no changes with 3.11 yet)
    7a2ea5c53 vendor: gotest.tools/v3 v3.5.1
    f2fced487 cli/compose/loader: remove platform-specific path handling
    74990623e cli/compose/loader: use gotest.tools/v3/golden
    8bf121c3b Add docker ps status descriptions
    a252a106c - What I did 	Removed broken link in #937 - How I did it 	Removed first section of CONTRIBUTING.md - How to verify it 	Check CONTRIBUTING.md - Description for the changelog 	Removed broken link in contributing to Docker documentation. A picture of a cute animal (not mandatory but encouraged) Closes #937
    74bace156 docs: add `bind-recursive` mount option
    46d0ba20f vendor: github.com/docker/docker cdb3f9fb8dca (v25.0.0-dev)
    3441151e0 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230823155524-12f0c246fed0
    412ebb677 vendor: github.com/containerd/containerd v1.7.7
    78eaac75c vendor: update OTEL dependencies
    a27466fb6 vendor: golang.org/x/net v0.17.0
    612a17155 vendor: golang.org/x/crypto v0.14.0
    392db31e2 vendor: golang.org/x/term v0.13.0
    ac307788a vendor: golang.org/x/text v0.13.0
    48655f794 vendor: golang.org/x/sys v0.13.0
    6de525416 vendor: github.com/docker/distribution v2.8.3
    ceab9b5e8 update to go1.21.3
    d249ce279 update to go1.21.2
    3f1195e4e update go-md2man to v2.0.3
    fc6976db4 mount: add `bind-recursive=<bool|string>` and deprecate `bind-nonrecursive=<bool>`
    0f59f04f5 Update minimum Go version to 1.19
    d254cc3bb update golang to go1.21.1
    4c75107a6 vendor: github.com/distribution/reference v0.5.0
    112d79a41 appcontext: remove unused parts
    febb37a38 remove buildkit as dependency
    e9759cee6 Dockerfile: use GOTOOLCHAIN=local
    f07e7e1ee Dockerfile: build gotestsum and goversioninfo without cgo
    9e424af5d e2e: update to use compose v2, and don't depend on distro-packages
    3e2187b4c vendor: github.com/docker/docker d3afa80b96bf (v25.0.0-dev)
    f90890fb4 vendor: github.com/Microsoft/hcsshim v0.11.1
    23f50a066 vendor: github.com/containerd/containerd v1.6.24
    497b13c66 vendor: github.com/klauspost/compress v1.16.5
    e0ad0127b vendor: google.golang.org/grpc v1.56.2
    c2308ad6f vendor: google.golang.org/protobuf v1.31.0
    56396ba35 vendor: golang.org/x/tools v0.8.0
    c9d56b850 vendor: golang.org/x/crypto v0.9.0
    ffea6940e vendor: golang.org/x/sys v0.10.0
    1554b4932 vendor: golang.org/x/sync v0.3.0
    78012b00a vendor: container-device-interface v0.6.1
    3a16c3bb0 docs: fix duplicate words in "docker tag" reference
    7e9467506 build(deps): bump docker/bake-action from 3 to 4
    315ff202c build(deps): bump docker/setup-buildx-action from 2 to 3
    4b00be585 update to go1.20.8
    9e1b42e64 Add missing opts to --network advanced syntax
    58f426087 Rename expectedCfg into expectedHostCfg
    f1048e1a3 Create default EndpointSettings if no --network provided
    2c193b59d Fix extremely minor typo in docker-run man page
    40dc66b26 vendor: github.com/docker/docker 06499c52e2b1 (v25.0.0-dev)
    f13b78672 vendor: github.com/docker/docker 032797ea4bcb (v25.0.0-dev)
    fb2ba5d63 migrate reference github.com/distribution/reference
    04af12821 vendor: github.com/docker/docker 7abd7fa73965 (v25.0.0-dev)
    dee40053f build(deps): bump actions/checkout from 3 to 4
    6dfdd1eae cli/command/system: fix "docker events" not supporting --format=json
    db6209abd update golangci-lint to v1.54.2
    9ad079244 cli/registry/client: remove some redundant conditions
    22b4bab90 cli/registry: client.iterateEndpoints: remove check for APIVersion1
    5250f1bab cli/registry: fix client.pullManifestList not de-referencing manifest
    d40fc1a0f vendor: github.com/docker/docker a65c948e7edf (v25.0.0-dev)
    261c18f9e ParseRestartPolicy: validate for missing policy-names
    3d2aac6a0 docs/reference: run.md: remove stray whitespace
    4cce7bb2f rewrite TestParseRestartPolicy to use sub-tests
    42ac5d4bf force TestNewHistoryCommandSuccess to use UTC timezone
    17f4c8259 update cli-docs-tool to v0.6.0
    be219b317 adding -c option for docker run/build in manpages
    273f2cd95 cli/command/manifest: update link to Go documentation
    722e3aae4 man: update links to Go documentation
    dc4feccb8 docs/reference: update links to Go documentation
    1d3af726e CONTRIBUTING.md: update links
    af05a6882 Dockerfile: use COPY --link where possible
    1da67be9c Stop slowing bash init by caching plugins path slowly
    5bff12354 replace dockerfile/dockerignore with patternmatcher/ignorefile
    55ff9e609 vendor: github.com/moby/patternmatcher v0.6.0
    e050312e6 update flag-description for --cgroup-parent
    d2047b954 cli/registry/client: set actions when authn with token
    1c2cc4bbe info: add CDI spec directories to output
    bb57783ab cmd/docker: areFlagsSupported: don't Ping if not needed
    6e2e92d77 Update docs/command output for volume pruning
    4fc3f0e6f search: deprecate "is-automated" filter and "IsAutomated" field
    299925f4c docs: document special host-gateway value for add-host
    211220cbb cli/command: ResolveAuthConfig, GetDefaultAuthConfig: take ConfigFile as arg
    57f0e46de cli/command/registry: cleanup login tests
    84c956a17 cli/command/registry: cleanup search tests
    3d0b14c3e vendor: github.com/docker/docker 4b19b2f4babd (25.0-dev)
    f38870e68 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230713153928-bc71908479e5
    a53b03520 vendor: github.com/opencontainers/image-spec v1.1.0-rc4
    8d51f36ca login: Add message about using PATs
    6517db939 update to go1.20.7
    373fa57ed vendor: github.com/containerd/containerd v1.6.22
    0b535c791 vendor: gotest.tools/v3 v3.5.0
    7a89e897e cli/command/container: waitExitOrRemoved: take APIClient as argument
    ce038e77b vendor: github.com/prometheus/common v0.42.0
    bffe277c9 vendor: github.com/prometheus/procfs v0.9.0
    92906a993 vendor: github.com/Microsoft/go-winio v0.6.1
    aacdca0fe vendor: google.golang.org/protobuf v1.30.0
    3cf34c6d9 vendor: google.golang.org/grpc v1.53.0
    5b138189b vendor: github.com/cespare/xxhash/v2 v2.2.0
    c1d065702 vendor: github.com/golang/protobuf v1.5.3
    0b7c72c3b cli/command/container: RunStart: inline variable
    ad43df5e8 configfile: Initialize nil AuthConfigs
    b52fd79f1 docs: add missing docs for "DOCKER_TLS" env-var
    298bddcc2 cli/command/container: deprecate NewStartOptions
    00870d68f Dockerfile: update buildx to v0.11.2
    78e463392 vendor: github.com/docker/docker-credential-helpers v0.8.0
    ff9f1be19 Dockerfile: update buildx to v0.11.1
    680fafdc9 update go to go1.20.6
    223bf80d4 cli/context/docker: Endpoint.ClientOpts, withHTTPClient: inline variables
    3469beb80 replace uses of deprecated api/types that moved to api/types/system
    1f87420b5 vendor: github.com/docker/docker dab9ffb252186f4c47416addb136d579f9314c6a (25.0-dev)
    4d03b935c vendor: github.com/moby/swarmkit/v2 v2.0.0-20230707182847-6f78b8199b05
    fe7afb700 cli/container: Don't ignore error when parsing volume spec
    323ca1d56 Bump container-device-interface dependency to v0.6.0
    fca67dd81 Dockerfile: update to xx 1.2.1
    de9f1f5b9 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230627115642-ad0f3ae162fa
    125eeb7ab Add docs for health-start-interval
    986879c07 Add flags to container/service for health start interval
    9bfaa6ff7 revendor docker/docker from master
    dbd9d5d74 Update vendoring for CDI parser
    dad225d1e Support CDI devices in --device flag
    d5f564ada commandconn: return original error while closing
    92d7a234d docker info: fix condition for printing debug information
    88f44ec15 cli: SetupRootCommand: remove redundant flags return
    3cad05fbf cli: move "config" flag to cli/flags/ClientOptions.InstallFlags()
    1c1329fc7 cli/flags: add EnvEnableTLS const for "DOCKER_TLS"
    0b3cadb05 cli/config: add EnvOverrideConfigDir const
    13e842a11 cli/config: add synchronisation for configDir (Dir, SetDir)
    9f4af6cb7 vendor: docker/docker 7f8b1cd7f928dee54174d51dc9da17f443c31480 (v25.0-dev)
    b32264a1a rename and update mergo module
    5936fd2a8 docs: fix static ip example, network needs a subnet
    b85d6a8f9 docs: fix broken link
    79ff64f06 cli/command/context: don't use pkg/homedir in test
    6c7d17fa0 docs: update the runtime configuration section
    bf5d1ce97 Dockerfile: update buildx to v0.11.0
    2133d0446 cli/command/context: remove deprecated k8s / orchestrator option-stubs
    2d06cfcde cli/command: newAPIClientFromEndpoint: use WithUserAgent
    8181aa887 cli/command/context: don't pass CLI if we only need context-store
    3b8d5da66 update go to go1.20.5
    acb248f8d Dockerfile: update ALPINE_VERSION to 3.17
    9c2694d2b Dockerfile: update gotestsum to v1.10.0
    c2535aa46 build: error if Dockerfile name is passed with Dockerfile from stdin
    77dd05caa cli/command/image: remove errStdinConflict
    d68b36153 cli/compose/convert: convertEnvironment: sort results
    f4bde6869 replace some basic uses of fmt.Sprintf()
    6a50c4f70 cli-plugins: remove deprecated Metadata.Experimental
    58ec4161b vendor: github.com/moby/swarmkit/v2 v2.0.0-20230607145746-36334ed18760
    bf492bffd vendor: docker/docker ed798d651a50cbd0af4dca127c4bfa243dda9cf7 (v25.0.0-dev)
    54c80d49d vendor: github.com/opencontainers/image-spec v1.1.0-rc3
    9ad605acc vendor: github.com/sirupsen/logrus v1.9.3
    e15ae9e2e vendor: golang.org/x/net v0.10.0
    3b62102ea vendor: golang.org/x/term v0.8.0
    db7886eef vendor: golang.org/x/text v0.9.0
    45fd37aaa vendor: golang.org/x/sys v0.8.0
    a5ebe2282 commandconn: don't return error if command closed successfully
    2331e4d52 cli/command/container: don't mutate ConfigFile.DetachKeys
    23e26f40f cli/command/container: createContainer(): return container-ID
    c2c6fbe23 cli/command/container: TestCreateContainerImagePullPolicy: use sub-tests
    0c5adb2e9 cli/command/container: attach: rename var that collided with import
    47951ff44 docs: add "--detach-keys" example to docker run reference
    c17b0df2a docs: move "--detach-keys" example to examples section
    e4ceed468 docs: added example for specifying socket path with -H
    5251d3748 cli/command: add EnvOverrideContext const for "DOCKER_CONTEXT"
    6458dcbe5 Dockerfile.vendor: update GOPROXY to use default with fallback
    0692d762a cli/command: fix GoDoc referencing wrong const
    982857531 docs: rephrase section on credential stores for docker login
    5d6612798 docs: remove devicemapper
    4cf04988a remove uses of golang.org/x/sys/execabs
    db5e1fa54 vendor: update docker/docker to latest v25.0.0-dev
    2713d0bcd docs: fix example for proxies in daemon.json
    b22290052 docs: remove AuFS from glossary
    e4211c91e docs: remove Docker Toolbox from glossary
    c246ea851 docs: remove boot2docker and docker-machine from glossary
    4c11f73dc man: remove devicemapper from examples
    c61b56518 docs/deprecated: remove "disabled by default" for AuFS, overlay
    9f537a756 docs: remove aufs and legacy overlay
    73fbcdea0 contrib/completion: remove aufs, legacy overlay
    1ec68fabe cli/command/system: remove aufs from fixtures
    6460eea54 docs/deprecated: remove .patch release from deprecation status
    035e26fb0 docs: update link location for the overlay driver
    988e37956 Correct "ps --no-trunc" example output
    2fc30fd45 replace uses of client.IsErrNotFound for errdefs.IsNotFound
    537b88dab cli/command: don't use legacy "notfound" error-type in tests
    353e0a942 vendor: github.com/docker/distribution v2.8.2
    379122b03 cli/config: remove warning for deprecated ~/.dockercfg file
    9b791b4fe cli/config: Load: remove outdated FIXME
    ff7111ae2 cli/command: remove deprecated EncodeAuthToBase64
    d3ac80127 cli/command/stack: remove deprecated RunDeploy, RunPS, RunRemove, GetServices
    72e3813ab cli-plugins/manager: fix deprecation comment of Metadata.Experimental
    4119d268e Update tag docs to clarify name
    28bc90f3b vendor: update docker/docker to v25.0.0-dev, API v1.44
    60b4cdf04 Update version to v25.0.0-dev
    759fa585c docs: update description for docker -H flag
    1d8e2b652 vendor: github.com/docker/docker v24.0.0-rc.2
    ce11b28d8 cli/config/credentials: skip unneeded exec.LookPath()
    2ae223038 remove pre-go1.17 build-tags
    1073b0269 cli/context/docker: rename receiver for Endpoint
    2b7bfb399 cli/command/image/build: GetContextFromReader: rename var that collided
    ab17029c6 cli/command/container: hijackedIOStreamer: explicitly ignore err
    f5e224e94 un-skip history test and fix golden mismatches

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-03-15 17:17:19 +00:00
Bruce Ashfield
22877e9bd0 runc-docker: update to 1.1.11
Bumping runc to version v1.1.11-2-g452f520c, which comprises the following commits:

    7887736f VERSION: back to development
    4bccb38c VERSION: release 1.1.11
    617db785 configs: make id mappings int64 to better handle 32-bit
    e65d4cac specconv: temporarily allow userns path and mapping if they match
    2dd8368e integration: add mega-test for joining namespaces
    8f8cb455 configs: disallow ambiguous userns and timens configurations
    0c8e2cc6 *: actually support joining a userns with a new container
    87792ce0 libct/cg: add swapOnlyUsage in MemoryStats
    32a26a71 build(deps): bump github.com/cyphar/filepath-securejoin
    be887840 VERSION: back to development
    18a0cb0f VERSION: release 1.1.10
    b426e9b7 libct/cgroups.OpenFile: clean "file" argument
    8214e634 libct/cg: support hugetlb rsvd
    f8be7009 [1.1] tests/int/helpers: add get_cgroup_path
    1f66027a ci/gha: fix downloading Release.key
    5a5b2cc3 Fix directory perms vs umask for tmpcopyup
    b365458f fix a typo in cloned_binary.c: re-use -> reuse
    8f66c9fb fix two typos
    016b2b42 Handle kmem.limit_in_bytes removal
    11737f55 VERSION: back to development
    ccaecfcb VERSION: release 1.1.9

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-03-15 17:17:19 +00:00
Bruce Ashfield
e4b6616a90 runc-opencontainers: update to 1.1.11
Bumping runc to version v1.1.11-2-g452f520c, which comprises the following commits:

    7887736f VERSION: back to development
    4bccb38c VERSION: release 1.1.11
    617db785 configs: make id mappings int64 to better handle 32-bit
    e65d4cac specconv: temporarily allow userns path and mapping if they match
    2dd8368e integration: add mega-test for joining namespaces
    8f8cb455 configs: disallow ambiguous userns and timens configurations
    0c8e2cc6 *: actually support joining a userns with a new container
    87792ce0 libct/cg: add swapOnlyUsage in MemoryStats
    32a26a71 build(deps): bump github.com/cyphar/filepath-securejoin
    be887840 VERSION: back to development
    18a0cb0f VERSION: release 1.1.10

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-03-15 17:17:19 +00:00
Bruce Ashfield
f27566f573 layer-wide: drop PYTHON_PN
Similar to OE core commit b566b1e32c7993d1ab7795562f648e52ce186a70,
we no longer need PYTHON_PN for any abstraction of python2 vs python3.

Our similar / dup recipes are now causing signature differences, so
we go ahead and make the substitution, even if it isn't stricly
required.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-02-21 22:48:29 +00:00
Ming Liu
eccd6f11b8 container-host-config:storage.conf: sync with libpod v4.8.2
The current storage.conf is based on v1.33.0 of:
https://github.com/containers/storage.git

while in podman v4.8.2, it has been upgraded to
v1.50.3-0.20231005112617-44418abb2d89 of:
https://github.com/containers/storage.git

let's sync it with podman v4.8.2.

which comprises the following commits in storage.conf:

```
42d1d9637 Run codespell on code
91da0c2be add documentation on imagestore and add a warning if set
01fccaa58 options: enable Remap-User/Group setting
e125790e9 Fix typo in storage.conf
57582350c Document transient_store in man page
522b67c94 Add new storage.conf option "transient_store"
5e9e2ba6b Revert incorrect "heeded" -> "needed" typo fix
cffa19709 fix typos and spelling
268af0001 chunked: drop host dedup feature
b64cfb4f4 Document the pull_options
17fccdc2d Clearup inheritance rules for storage.conf
3c76f174d Tell users who change graphroot location to fix the SELinux labels
```

Signed-off-by: Ming Liu <liu.ming50@gmail.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-02-01 14:15:13 +00:00
Peter Kjellerstedt
a0ad18ea28 containerd-opencontainers: Use RDEPENDS:${PN} instead of RDEPENDS:${BPN}
The original purpose of using BPN vs PN in the RDEPENDS was due to
32bit multilib issues. Those problems are no longer present, so we
can adjust this recipe to use the standard PN in rdepends.

This change avoids the following warning:

  WARNING: .../containerd-opencontainers_git.bb: Variable key
  RDEPENDS:${PN} (...) replaces original key
  RDEPENDS:containerd-opencontainers
  (  ${VIRTUAL-RUNTIME_container_runtime}).

if, e.g., RDEPENDS:${PN}:append = " ..." is used in a bbappend or
bbclass.

Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-01-19 14:43:37 +00:00
Bruce Ashfield
5bd48ee74f buildah: update to 1.33.3
Bumping buildah to version v1.33.3-1-g5ca83472c, which comprises the following commits:

    21e754fd3 [release-1.33.2] Bump Buildah to v1.33.3
    b44d6bd56 [release-1.33.2] Bump c/common to 0.57.2 and c/image to 5.29.1
    7fffb3366 [release-1.33.2] Bump to v1.33.2

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-01-19 14:38:36 +00:00
Chen Qi
b3e5c517bf buildah: fix branch name
The branch 1.33.2 is not there any more. The correct branch for now
is 1.33.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-01-19 14:38:30 +00:00
Xiangyu Chen
cb84780339 criu: add cgroup-lite to RDEPENDS
criu needs cgroup-lite to init the cgroup configurations during system start.

Signed-off-by: Xiangyu Chen <xiangyu.chen@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-01-19 14:29:24 +00:00
Xiangyu Chen
664e3573d4 lxc: adjust the lxc-test-unpriv running order
Some of lxc test cases can not full clean the system environment, that cause
lxc-test-unpriv cannot execute successfully.

Since those code in lxc are using for tests, so just adjust the cases order.

Signed-off-by: Xiangyu Chen <xiangyu.chen@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-01-19 14:29:24 +00:00
Ming Liu
f33765288d podman: add test instructions for podman system service
Signed-off-by: Ming Liu <liu.ming50@gmail.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-01-19 14:29:24 +00:00
Ming Liu
8891c1e02c docker-compose: introduce pkgconfig docker-plugin
This allows docker-compose choose to be built as a docker plugin or a
standalone binary, in the later case, docker-compose does not have to
rdepends on docker, so nother container tools like podman can also use
it.

Signed-off-by: Ming Liu <liu.ming50@gmail.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-01-04 02:52:53 +00:00
Bruce Ashfield
a3da99e3ff podman-tui: update to v0.14.0
Bumping podman-tui to version v0.9.0-207-gc545dbd7, which comprises the following commits:

    c545dbd7 Bump to v0.14.0
    ac61433c container create dialog - user/groups category options
    c3274937 Bump github.com/containers/common from 0.57.0 to 0.57.1
    7227ec91 Bump actions/stale from 8 to 9
    808dc504 Bump actions/setup-python from 4 to 5
    d4121000 Bump actions/setup-go from 4 to 5
    1df86623 Bump github.com/containers/podman/v4 from 4.8.0 to 4.8.1
    9822b029 container create dialog - environment category options
    7f698267 container create options (privileged, timeout)
    b985d1fa Bump to v0.14.0-dev
    c0bf2daa Bump to v0.13.0
    74103352 running golangci-lint on ui/containers package
    6fad611b Bump github.com/containers/podman/v4 from 4.7.2 to 4.8.0
    717e859a running golangci-lint on ui/images package
    e9207835 Bump golang.org/x/crypto from 0.15.0 to 0.16.0
    0ab99d84 running golangci-lint on ui/dialogs package
    f19ddfc2 running golangci-lint on ui/networks package
    f99918f6 running golangci-lint on ui/pods package
    068b7c00 running golangci-lint on ui/system package
    e27eaf42 running golangci-lint on ui/utils package
    c5f1711c running golangci-lint on app package
    b94bfa90 running golangci-lint on config package
    ce5905bd running golangci-lint on cmd package
    56190b2a github action update
    05f7e7ab adding container create mount inputfield option
    8cfb6130 use inputfield for container create volume option
    76e6d03a Bump github.com/navidys/tvxwidgets from 0.4.0 to 0.4.1
    7a7897c6 Bump github.com/go-jose/go-jose/v3 from 3.0.0 to 3.0.1
    ef812d9c Bump github.com/containers/storage from 1.50.2 to 1.51.0
    ae72e400 EPEL rpm package
    e62199b1 docs update - add Gentoo in packaged versions
    35468621 Bump to v0.13.0-dev
    15759448 Bump to v0.12.0
    28e8a2d5 Bump github.com/containers/buildah from 1.31.2 to 1.32.2
    5ce10afe Bump github.com/containers/podman/v4 from 4.6.2 to 4.7.2
    1e56294d gh action update
    226be72d using github.com/distribution/reference
    38ed7d29 Bump github.com/docker/distribution
    00759199 Bump github.com/docker/docker
    d61975c8 Bump google.golang.org/grpc from 1.57.0 to 1.57.1
    8231c9ca Bump golang.org/x/net from 0.13.0 to 0.17.0
    c42e4015 Bump golang.org/x/crypto from 0.13.0 to 0.15.0
    4cca7cae update ginkgo cli version to 2.11.0
    03ad465a Bump github.com/spf13/cobra from 1.7.0 to 1.8.0
    0b5ff67e running codespell
    8cfaf08d Bump github.com/rs/zerolog from 1.30.0 to 1.31.0
    f5e6f7ed Bump github.com/containers/storage from 1.48.0 to 1.50.2
    fa255fdc Bump github.com/navidys/tvxwidgets from 0.3.0 to 0.4.0
    2d854793 Bump github.com/containers/podman/v4 from 4.6.1 to 4.6.2
    c132c0e6 Bump github.com/cyphar/filepath-securejoin from 0.2.3 to 0.2.4
    e4643785 Bump github.com/docker/docker
    f05f381b Bump golang.org/x/crypto from 0.12.0 to 0.13.0
    78ce8c9d Bump actions/checkout from 3 to 4
    de8383d9 Bump tim-actions/commit-message-checker-with-regex from 0.3.1 to 0.3.2
    11f9b244 Bump to v0.12.0-dev
    33d9be57 Bump to v0.11.0
    74360a37 fix missing volume list created time column
    c532db41 Bump github.com/containers/podman/v4 to 4.6.1
    65b96aa3 Vagrantfile update (fedora-38 image)
    78e96572 Bump github.com/containers/buildah from 1.31.1 to 1.31.2
    af0700f2 Bump github.com/containers/common from 0.55.2 to 0.55.3
    a6c67e96 Bump golang.org/x/crypto from 0.11.0 to 0.12.0
    83f9b0f0 Bump github.com/docker/docker
    bd51d4bd Bump github.com/rs/zerolog from 1.29.1 to 1.30.0
    f1e9e1fb Bump github.com/containers/buildah from 1.30.0 to 1.31.1
    24ff42f2 Bump github.com/containers/common from 0.53.0 to 0.55.2
    6e9ce1bc Bump golang.org/x/crypto from 0.10.0 to 0.11.0
    efdfbe48 Bump github.com/containers/storage from 1.46.1 to 1.48.0
    e99a7b0e Bump golang.org/x/crypto from 0.9.0 to 0.10.0
    98c6660a Bump github.com/BurntSushi/toml from 1.2.1 to 1.3.2
    cc2eedf9 Bump github.com/docker/docker
    dbe94d6c Bump github.com/sirupsen/logrus from 1.9.2 to 1.9.3
    4479d607 Bump github.com/containers/podman/v4 from 4.5.0 to 4.5.1
    22e1da63 Bump github.com/sirupsen/logrus from 1.9.0 to 1.9.2
    661d46e4 Bump github.com/docker/distribution
    3f90e76b Bump github.com/sigstore/rekor from 1.1.0 to 1.2.0
    9ab5f1fa Bump tim-actions/get-pr-commits from 1.2.0 to 1.3.0
    ee3cfd11 Bump github.com/containers/common from 0.52.0 to 0.53.0
    9596156d Bump to v1.5.0-dev
    53e2d8af Bump to v1.4.0
    ef699e43 Bump github.com/rs/zerolog from 1.29.0 to 1.29.1
    3213a478 Bump github.com/containers/podman/v4 from 4.4.0-rc1 to 4.5.0
    55bdd266 Bump github.com/containers/common
    24231629 Bump github.com/docker/docker
    84ae09ed podman update to v4.4.4
    d7314c7a Bump github.com/spf13/cobra from 1.6.1 to 1.7.0
    d8d12e1a Bump github.com/containers/storage from 1.45.4 to 1.46.0
    c8141ba5 packit update - remove centos stream build
    449d8f48 golangci-lint system package
    b0d20b2a Bump actions/stale from 7 to 8
    613d18f4 ui/styles - applying golint
    78395235 ui/infobar - applying golint
    745a331d ui/help - applying golint
    4c27c3de ui/volumes code improvement and golint
    02740c14 adding container attach command to container page/view
    6b5beb41 fix container create error without health options
    705bc347 Bump actions/setup-go from 3 to 4
    cf4509ed Add container health options to the container create dialog
    d79883ea Add packit configurtion to build RPM as part of PR tests
    ba02fb57 Update unit tests and github workflow for running the tests
    4e3889f0 fix container create error when volume is selected
    0af3e47b update github workflow golang version to 1.18.8
    f572f481 Golangci-lint update to v1.51.1
    c2932fc2 fix vendor + codepsell
    1e35d9af Bump golang.org/x/crypto from 0.6.0 to 0.7.0
    bb17bbc5 unit tests fix
    13286688 Bump to v0.10.0-dev
    28f800cd Bump github.com/onsi/ginkgo/v2 from 2.8.4 to 2.9.0

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-01-04 02:52:53 +00:00
Bruce Ashfield
01a60446c5 podman: update to v4.8.2
Bumping libpod to version v4.8.2-2-g0ec4c8b1d, which comprises the following commits:

    4aab4e3fe bump release to v4.8.3-dev
    aa546902f v4.8.2
    a9b20a4a2 [CI:DOCS] Update RELEASE_NOTES.md for v4.8.2
    775054343 Kube Play - set ReportWriter when building an image
    1864ea94f Fix user-mode net init flag on first time install
    3c0d66d83 bump c/common to v0.57.1
    b0e2ffc51 bump version to v4.8.2-dev
    ef6e5ac40 v4.8.1
    0b72d1bf2 Update RELEASE_NOTES.md for v4.8.1
    2d20d2e5c Handle symlinks when checking DB vs runtime configs
    6bbbfaa05 libpod: Detect whether we have a private UTS namespace on FreeBSD
    a8b8dc570 pkg/bindings: add new APIVersionError error type
    86bb91001 fix podman-remote exec regression with v4.8
    9c9d2fcaf sqlite: fix issue in ValidateDBConfig()
    1e5a1336f sqlite: fix missing Commit() in RemovePodContainers()
    429080f02 sqlite: set busy timeout to 100s
    a72c39a53 Fix locking error in WSL machine rm -f
    a7c522dfe Gating test fixes
    a62b81d90 If API calls for kube play --replace, then replace pod
    70ba64f4c Fix wsl.conf generation when user-mode-networking is disabled
    e627de1b4 Bump to v4.8.1-dev
    c4dfcf148 Bump to v4.8.0
    0efc6ea30 Update release notes for 4.8.0
    4b95c6c30 Add notes on upcoming deprecations to release notes
    1c1477ddf [v4.8] Bump to Buildah v1.33.2
    f02155142 [CI:DOCS] Update release notes
    697e66c78 machine applehv: create better error on start failure
    53f176732 Bump to v4.8.0-dev
    ac1d54e68 Bump to v4.8.0-rc1
    66cba2794 Create release notes for v4.8.0
    ac290f446 Update release notes from v4.7 branch
    883ce7704 Cirrus: Update operating branch
    9ea390191 rootless_tutorial: modernize
    ee1654622 Bump Buildah to v1.33.1
    3d86a9658 Bump Buildah to v1.33.0
    60d9f9b80 Update to libhvee 0.5.0
    d32f61d91 vmtypes names cannot be used as machine names
    d0b32255e Add support for --compat-auth-file in login/logout
    a3d5814e0 Update tests for a c/common error message change
    ced07a55f Update c/image and c/common to latest, c/buildah to main
    a10b88cb2 CI: test overlay and vfs
    da899b92d [CI:DOCS] Add link to podman py docs
    d2a4ec867 Test fixes for debian
    23ead49de pasta tests: remove some skips
    d711c3f46 VM images: bump to 2023-11-16
    5f3f8a3ca fix(deps): update module k8s.io/kubernetes to v1.28.4 [security]
    3d88f614f [CI:DOCS] Machine test timeout env var
    e35fc92c0 Quadlet - add support for UID and GID Mapping
    dc709e4d7 Quadlet - Allow using symlink on the base search paths
    7b826b230 [skip-ci] Update dessant/lock-threads action to v5
    ea89eaa1c Avoid empty SSH keys on applehv
    33ddd79e2 qemu,parseUSB: minor refactor
    669829447 fix(deps): update module github.com/gorilla/handlers to v1.5.2
    49b152f49 docs: fix relabeling command
    5dc807487 Pass secrets from the host down to internal podman containers
    047da19b5 (Temporary) Emergency CI fix: quay search is broken
    e1f3ae0d8 Update podman-stats.1.md.in
    6fa4a975c [CI:BUILD] packit: handle builds for RC releases
    bd375058c Quadlet test - add case for multi = sign in mount
    5e0471ba7 set RLIMIT_NOFILE soft limit to match the hard limit on mac
    d636ce8d7 rootless: use functionalities from c/storage
    6b5b39912 CI: e2e: fix a smattering of test bugs that slipped in
    d07263f34 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.1
    fbd1ba68f vendor: update c/storage
    956c0d6ec Improve the documentation of quadlet
    39d647a2f Fix socket mapping socket mapping nits
    5388836c1 fix(deps): update module golang.org/x/tools to v0.15.0
    60f67eec7 fix(deps): update github.com/containers/libhvee digest to 9651e31
    9cd975d59 [skip-ci] Update github/issue-labeler action to v3.3
    b8d59030c Document --userns=auto behaviour for rootless users
    c23963d7a machine: qemu: add usb host passthrough
    4a75a2b3c fix(deps): update module golang.org/x/net to v0.18.0
    1c5bc7e09 fix(deps): update module github.com/onsi/gomega to v1.30.0
    b2c56365b Refactor Ignition configuration for virt providers
    81dc3f183 [CI:BUILD] rpm: disable GOPROXY
    78798cab0 Automatic code cleanups - JetBrains
    a45ba06d0 Refactor key machine objects
    1c969219d systests: add [NNN] prefix in logs, NNN = filename
    92cd7b25f systests: add a last-minute check for db backend
    d44f71c13 applehv: allow virtiofs to mount to /
    c2de6d34c Run codespell on podman
    8f5c46c9e update completion scripts for cobra v1.8.0
    28f3e9fe3 Fix man page display of podman-kube-generate
    8effb7825 Try to fix the broken formatting of man podman‐kube‐apply(1).
    3eb2d5ceb fix(deps): update module golang.org/x/text to v0.14.0
    108d2bc43 docs: make CNI removal explicit
    c1fe1f9d3 fix(deps): update module github.com/gorilla/mux to v1.8.1
    e78288344 fix(deps): update module github.com/spf13/cobra to v1.8.0
    0824e45c8 fix(deps): update module golang.org/x/sync to v0.5.0
    da897bd04 fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.18
    420316ef6 Podman push --help should reveal default compression
    942bcf34b Update container-device-interface (CDI) to v0.6.2
    375b0cc13 fix: adjust helper string in machine_common
    9e05fb14a fix: adjust helper string in machine_common
    607aff55f remote,test: remove .dockerignore which is a symlink
    6b7d7f6fb [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.2
    b5f854458 fix: adjust helper string in machine_common
    ce334ed9d vendor: update github.com/coreos/go-systemd/v22 to latest main
    2a17baa29 CI: default to sqlite
    33753db47 vendor: update c/common
    613f50c7a check system connections before machine init
    ea4775ec9 Consume OCI images for machine image
    d2a37222b freebsd: drop dead code
    06a07c98e libpod: make removePodCgroup linux specific
    e4f1c87ea containers: drop special handling for ErrCgroupV1Rootless
    0b6abfe1e compose: fix compose provider debug message
    aefa9abf4 image: replace GetStoreImage with ResolveReference
    03419d6da vendor: bump c/image to 373c52a9466f
    ce9c1b9b8 Refactor machine socket mapping
    f6ec210f3 AppleHV: Fix machine rm error message
    af0ef47f0 Add status messages to podman --remote commit
    3241b3259 End-of-Life policy for github issues
    390e9ddc9 fix(deps): update module github.com/shirou/gopsutil/v3 to v3.23.10
    18d6bb40d Support passing of Ulimits as -1 to mean max
    78765b14d fix(deps): update github.com/docker/go-connections digest to 0b8c1f4
    ffb96ad8b fix(deps): update github.com/crc-org/vfkit digest to f3c783d
    7153124f9 Log gvproxy and server9 to file on log-level=debug
    d9c388e2f Change to using gopsutil for cross-OS process ops
    642fa9897 Initial addition of 9p code to Podman
    b332ca7a0 libpod: fix /etc/hostname with --uts=host
    89d7b2735 systests: stty test: retry once on flake
    6b94c8fd3 systests: pasta: avoid hangs
    4c67a6aed Fix secrets scanning GHA Workflow
    2193bb8fc [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
    e9dd41183 docs: clarify systemd cgroup mount
    a1577ec7b podman build --remote URI Dockerfile shoud not be treated as file
    95a5ad258 Small fixes for wacko CI environments
    c6d410cc3 Do not add powercap mask if no paths are masked
    3743955d6 compose: try all possible providers before throwing an error
    91df369ae podman kube play --replace should force removal of pods and containers
    3ce62d3cc Sort kube options alphabetically
    e966c86d9 container.conf: support attributed string slices
    91ccd7cd2 CI: podman farm tests cleanup
    be7dd128e Mask /sys/devices/virtual/powercap
    05a607f14 Update module github.com/google/uuid to v1.4.0
    6a0b2c680 fix(deps): update module github.com/docker/docker to v24.0.7+incompatible
    6badb659c fix(deps): update module go.etcd.io/bbolt to v1.3.8
    9e3363c5e CI: systest: safer random_rfc1918_subnet
    c841fa9e9 CI: e2e: safer GetPort()
    fd5140d87 Fix broken code block markup in Introduction.rst
    d0ce60c63 chore(deps): update module google.golang.org/grpc to v1.57.1 [security]
    15969a60b chore: remove npipe const and use vmtype const for checking
    2158e1540 Update module github.com/onsi/gomega to v1.29.0
    c0fb8fe59 CI: try to fix more networking flakes
    c21f28813 fix: check wsl npipe when executing podman compose
    9ea1ed6d4 [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.1
    76cca08f8 Quadlet - explicit support for read-only-tmpfs
    c13b8e3c9 compat API: fix image-prune --all
    0e15861c5 Makefile - allow more control over Ginkgo parameters
    ebe01ca29 Add e2e tests for farm build
    989afd910 vendor c/{buildah,common}: appendable containers.conf strings, Part 1
    dd8f57a3b Add podman farm build command
    2e88d580a Add emulation package
    06b726497 Use buildah default isolation when working with podman play kube
    0a2aae119 docs(API): Fix compat network (dis-)connect
    1b466ccbd test/e2e: do not import buildah
    8a0968baa pkg/specgen: remove config_unsupported.go
    cb9dfeb8e pkg/parallel/ctr: add !remote tag
    d4a67cf45 pkg/domain/filters: add !remote tag
    9cecae8c2 pkg/ps: add !remote tag
    1d1630990 pkg/systemd/generate: add !remote tag
    bad25da92 libpod: add !remote tag
    abb5c86b6 pkg/autoupdate: add !remote tag
    01a750699 vendor latest c/common
    3615af903 libpod: remove build support non linux/freebsd
    1850670f1 Fix typo
    2e57746ff test/apiv2: adapt apiv2 test on cgroups v1 environment
    c3ba0221e ginkgo setup: retry cache pulls
    ee6070888 Support size option when creating tmpfs volumes
    8876380af not mounted layers should be reported as info not error
    85cc4092f CI: stop using registry.k8s.io
    a8e1a5ed1 fix(deps): update module github.com/vbatts/git-validation to v1.2.1
    6d99cb5cd test fixes for c/common tag chnages
    dfdd93323 vendor latest c/common
    d6f44d956 hyperV: Update lastUp time
    1ac110835 [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.0
    9e648a1f5 lint: disable testifylint
    29273cda1 lint: fix warnings found by perfsprint
    64f43fed4 lint: fix warnings found by inamedparam
    c21f42a4e lint: fix warnings found by protogetter
    03947ab03 libpod: skip DBUS_SESSION_BUS_ADDRESS in conmon
    936e30f68 Use node hostname in kube play when hostNetwork=true
    bd953fdc7 cirrus setup: special-case perl unicode
    ca9efb0cd network: document ports and macvlan interaction
    f2bc63894 quadlet: document cgroupv2 requirement
    e8183e836 [skip-ci] Update actions/checkout digest to b4ffde6
    1d2589c3f Revert "Emergency workaround for CI breakage"
    f48a706ab remote: exec: do not leak session IDs on errors
    ad1ab71b8 fix(deps): update github.com/containers/storage digest to 79aa304
    d1086281b fix(deps): update module k8s.io/kubernetes to v1.28.3
    657029da7 System tests: fix broken silence127
    b72bb1162 Add TERM iff TERM not defined in container when podman exec -t
    44ed415b2 Emergency workaround for CI breakage
    d4d76479c Kill gvproxy when machine rm -f
    cad4d0ee9 Fix path for omvf vars on Darwin/arm64
    285718915 Allow systemd specifiers in User and Group Quadlet keys
    caef657c5 libpod: rename confusing import name
    efe5e98d0 use FindInitBinary() for init binary
    1d3ec78e0 vendor latest c/common
    fa19e1baa exec: do not leak session IDs on errors
    1efcd1ecf systests: cp test: lots of cleanup
    2d65e57ae Define better error message for container name conflicts with external storage.
    9b8e01efd Quadlet - support ImageName for .image files
    64171043a test/system: ignore 127 if it is the expected rc
    c65d1c02b test/apiv2/20-containers.at: fix NanoCPUs tests on cgroups v1
    831844b59 image history: fix walking layers
    ad5319025 fix(api): Ensure compatibality for network connect
    e0561301c [CI:DOCS] Add cross-build target info.
    dc705d370 machine set: document --rootful better
    bbd6281ec libpod: restart+userns cleanup netns correctly
    3b6a4ac37 Minor log and doc fixes
    f875ae317 Quadlet man page - discuss volume removal explicitly
    5d5facbd7 Quadlet - add support for KubeDownForce
    6ba67ba96 System Test - Quadlet kube oneshot
    9637fed2f Fix output of podman --remote top
    dcb421bc5 buildah-bud: test relative TMPDIR
    c8604081e Fix handling of --read-only-tmpfs flag
    1b0be2f34 Vendor common and buildah main
    5db3b753a remote,build: wire unsetlabels
    331e47acb test: build with TMPDIR as relative
    6cf3dd493 docs: add unsetlabel
    64ff14932 vendor: bump buildah to v1.32.1-0.20231012130144-244170240d85
    74ed1d6e7 fix(deps): update module github.com/vbauerster/mpb/v8 to v8.6.2
    b9f2c4d17 fix: pull error response docker rest api compatibility
    29f5c563e Show client info even if remote connection fails
    52112fc5c fix(deps): update github.com/containers/libhvee digest to e51be96
    cb53bcf23 Run codespell
    987dc2b8b SetLock for all virt providers
    61e0b64b9 Machine: Teardown on init failure
    99a14332e healthcheck: make sure to always show health_status events
    7b84b55da Apply suggestions from code review
    ca518888e [CI:DOCS]rtd: implement v2 build file
    702f15528 Quadlet - support oneshot .kube files
    3cc9db862 libpod: fix deadlock while parallel container create
    2301320f6 fix(deps): update module golang.org/x/net to v0.17.0
    8b46e852e api: add `compatMode` paramenter to libpod's pull endpoint
    76fec1227 api: break out compat image pull
    40f897653 fix(deps): update module github.com/cpuguy83/go-md2man/v2 to v2.0.3
    29ae51600 use sqlite as default database
    8a52e638e vendor latest c/common
    acd0a93c3 fix(deps): update module github.com/nxadm/tail to v1.4.11
    d18369ee8 Check for image with /libpod/containers/create
    8ac2aa793 container: always check if mountpoint is mounted
    787b1b25c fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.0
    9beb3a972 vendor: update c/storage
    36bf90518 api: drop debug statement
    d321d427d Quadlet - add support for global arguments
    732cec794 Add system test
    10aa39068 fix(deps): update module golang.org/x/tools to v0.14.0
    3fdb6ee2d Don't ignore containerfiles outside of build context
    b3209dc5d fix(deps): update github.com/containers/libhvee digest to fcf1cc2
    eda275820 fix(deps): update module golang.org/x/term to v0.13.0
    da6c86dfc Update module golang.org/x/sys to v0.13.0
    1c0780097 [CI:DOCS] Add updating version on podman.io to release process
    362eca669 containers.conf: add `privileged` field to containers table
    6cb10425d Implement secrets/credential scanning
    106abd13b Cirrus: Execute Windows podman-machine e2e tests
    338e4f590 vendor: bump c/storage
    8807243cc Update module golang.org/x/sync to v0.4.0
    2168f0745 [CI:DOCS] update swagger version on docs.podman.io
    0414f88b3 Create Qemu command wrapper
    df6a00026 Adjust to path name change for resolved unit
    2a38f30b6 Revert "Fix WSL systemd detection"
    f622a2a54 [CI:BUILD] rpm/copr: gvforwarder recommends for RHEL
    27f58803d [CI:DOCS] update kube play delete endpoint docs
    3fc7c42e1 [CI:DOCS] Remove dead link from README
    1b3cedbf3 test/system: --env-file test fixes
    617af9bea Revert "feat(env): support multiline in env-file"
    5f340487e Revert "docs(env-file): improve document description"
    9599589f1 Revert "fix(env): parsing --env incorrect in cli"
    7e6e26732 Filter health_check and exec events for logging in console
    0443c5166 inspect: ignore ENOENT during device lookup
    b576b7932 test, manifest: test push retry
    cbca39529 Fix locale issues with WSL version detection
    b988eadaf vendor: update module github.com/docker/distribution to v2.8.3+incompatible
    1ebd22303 vendor: bump c/common to v0.56.1-0.20231002091908-745eaa498509
    8b647cdb5 Update github.com/containers/libhvee digest to e9b1811
    cc946daff windows: Use prebuilt gvproxy/win-sshproxy binaries
    979c77f10 Volume create - fast exit when ignore is set and volume exists
    874e4466a Update golang.org/x/exp digest to 9212866
    22a1d015c Update github.com/opencontainers/runtime-spec digest to c0e9043
    229734c10 remove selinux tag as not needed anymore
    049a5fb92 [skip-ci] Improve podmansh(1)
    85ed9edde Build applehv for Intel Macs
    7ef8519f4 Revert "GHA Workflow: Faster discussion-locking"
    59e0919bc update vfkit vendored code
    17cebb3ff Add DefaultMode to kube play
    ba788c1bb Fix broken podman images filters
    9b3964111 Remove `c.ExtraFiles` line in machine
    f21c1d238 podman: run --replace prints only the new container id
    bcfd9f340 New machines should show Never as LastUp
    94818f594 podman machine: disable zincati update service
    b284128d7 Revert "cirrus setup: install en_US.UTF-8 locale"
    b28188de2 Cirrus: CI VM images w/ newer automation-library
    2b9c0555f CI VMs: bump to f39 + f38
    ecd7b3802 [CI:DOCS] Update podman load doc
    58b5ae22e Update mac installer to latest gvproxy release
    5b990c383 Fix WSL systemd detection
    be823b388 Add documentation for the vrf option on netavark
    fda028ca0 fix(deps): update github.com/containers/common digest to 9342cdd
    6306e8985 fix: typos in links, path and code example
    ccb7da52c e2e: ExitCleanly(): manual special cases
    611db19b3 e2e: ExitCleanly(): the final fron^Wcommit
    149d3f7ad [CI:DOCS] Add win-sshproxy target to winmake
    0d4526e61 wsl: enable machine init tests
    455d16549 Update docs/source/markdown/options/rdt-class.md
    bfbd0c896 move IntelRdtClosID to HostConfig
    4853320ce use default when user does not provide rdt-class
    77336de8f Add documentation for Intel RDT support
    24b2f829b Add test for Intel RDT support
    40d3c3b9b Add Intel RDT support
    295439265 [CI:DOCS] Fix podman form update --help examples
    f0eb45667 Quadlet container mount - support non key=val options
    0b5ea1e6e test/e2e: default to netavark
    4ed9dc1ad [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
    48ea4b9ec fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.7.1
    90eb73629 fix(deps): update github.com/containers/common digest to 4619314
    172494423 applehv: enable machine tests for start
    2ff43429f applehv: machine tests for stop and rm
    127ebe2b2 Update machine tests README
    995a6a8ac Add podman socket info to machine inspect
    80952db0b Fix podman machine info test for hyperV
    7ade97210 libpod: pass entire environment to conmon
    e4b7455b7 e2e: ExitCleanly(): manual fixes to get tests working
    dbd946a93 e2e: ExitCleanly(): a few more
    59ffea80d FCOS+podman-next: correct GHA conditional syntax
    8bad842a4 pkg/machine/e2e: wsl stop
    217c4d546 wsl: machine tests for inspect
    e4bfcfc25 wsl: machine tests for ssh
    5636d0219 fix(deps): update github.com/containers/common digest to e18cda8
    a112ee895 wsl: machine start test
    d3d5011dc wsl machine tests: set
    cc4917d81 wsl: machine tests
    ec68a7489 Skip proxy test for hyperV
    33a92aa00 Enable machine e2e test for applehv
    65ce03486 hyperV: Respect rootful option on machine init
    52ba1bfff [CI:BUILD] FCOS image: enable nightly build
    ffd67cf75 e2e: use safe fedora-minimal image
    41e51f473 hyperv: machine e2e tests for set command
    59e295f2a podman build: correct default pull policy
    6293ec2e2 fix handling of static/volume dir
    26b5b1dd3 unbreak CI: useradd not found
    08936db35 hyperv: set more realistic starting state
    2bef573f3 hyperv: use StopWithForce with remove
    f52b02f40 Fix all ports exposed by kube play
    cd4f61181 Fix setting timezone on HyperV
    172369b54 fix(deps): update github.com/containers/gvisor-tap-vsock digest to 97028a6
    e0b44bcf3 Fix farm update to check for connections
    d8e305716 Adjust machine CPU tests
    8188a6fcf Bump version on main
    e65874903 [CI:BUILD] Packit: show SHORT_SHA in `podman --version` for COPR builds
    96142c2f7 Vendor c/common
    af2665c28 pod rm: do not log error if anonymous volume is still used
    4916f7d77 e2e: ExitCleanly(): manual fixes to get tests passing
    8e743fa1d e2e: ExitCleanly(): a few more
    c66aa3b7b fixes for pkg/machine/e2e on hyperv
    83b6975d1 test: fix rootless propagation test
    6c2493f78 [CI:BUILD] packit: tag @containers/packit-build team on copr build failures
    92f4dcb09 Enable disk resizing for applehv
    5b3801776 Various updates for hyperv and machine e2e tests
    682ca6b2e test: update fedoraMinimal version
    8d3010d06 specgen, rootless: fix mount of cgroup without a netns
    39ba5ff24 Automatically remove anonymous volumes when removing a container
    24d3347ed Use ActiveServiceDestination in ssh remoteConnectionUsername
    b6ea49f5a fix(deps): update github.com/containers/gvisor-tap-vsock digest to 9298405
    c69873d67 e2e: ExitCleanly(): generate_kube_test.go
    841cfa802 e2e: generate kube -> kube generate
    d1f86d524 e2e: ExitCleanly(): generate_kube_test.go
    f3e9a6369 windows cannot "do" extra files
    62e13bec7 e2e: ExitCleanly(): Fixes for breaking tests
    09c3ac48f play kube -> kube play
    e83ced8a0 e2e: ExitCleanly(): play_kube_test.go
    eb9283c6f introduce pkg/strongunits
    6d8b3047d Makefile equiv Powershell script
    4652a2623 pass --syslog to the cleanup process
    73dc72f80 vendor of containers/common
    1cbe692de fix --authfile auto-update test
    8e5adde0b compat API: speed up network list
    8c95aa402 Change priority for cli-flags for remotely operating Podman
    befdb4199 libpod: remove unused ContainerState() fucntion
    0ec63abca [CI:BUILD] Packit: Enable failure notifications for cockpit tests
    0ac98176b e2e: ExitCleanly(): more low-hanging fruit
    a50fb7e06 e2e: ExitCleanly(): more low-hanging fruit
    1908663f1 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.12.1
    38f5ead33 Enable machine e2e tests for WSL
    ff07abea4 systests: tighter checks for unwanted warnings
    618f846ed GHA Workflow: Faster discussion-locking
    289be0c01 [CI:BUILD] FCOS + podman-next image: pull in wasm
    649539519 [CI:BUILD] rpm: remove gvproxy subpackage
    b0f7072ac [CI:DOCS] Tweak podman to Podman in a few farm man pages
    8afffa1aa Docs on sig-proxy are wrong, we support TTY
    4fca726f7 e2e: ExitCleanly(): low-hanging fruit, part 2
    64c46c429 e2e: ExitCleanly(): low-hanging fruit, part 1
    113b41b6f Buildtag out unix commands for common OS files
    aec58f515 systests: clean up after tests; fix missing path in logs
    fa7150451 [CI:BUILD] followup PR for fcos with podman-next
    289e59ee1 Implement gvproxy networking using cmdline wrapper
    e68e37136 fix, test: rmi should work with images w/o layers
    e9b98510d vendor: bump c/common to v0.56.1-0.20230919073449-d1d9d38d8282
    50a685bd1 Quadlet Image test - rearrange test function
    e6cf09b68 e2e: continuing ExitCleanly() work: manual tweaks
    d78221545 e2e: continuing ExitCleanly() work
    47160da7a [CI:DOCS] Improve podman-tag man page
    ef553fb0d [CI:DOCS] Improve podman-build man page
    93dc30e1e [CI:DOCS] Include precheck to release process
    a80a908df [CI:DOCS] consistentize filter options in man pages
    55ca571e5 Quadlet - add support for .image units
    41beb5374 --env-host: use default from containers.conf
    0b7142f4a error when --module is specified on the command level
    deba3b80a man page crossrefs: add --filter autocompletes
    03dd5f256 Fix specification of unix:///run
    98e6dda69 Add label! filter and tests to containers and pods
    6f4f94137 Add test for legacy address without two slashes
    336055fe3 Use url with scheme and path for the unix address

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-01-04 02:52:53 +00:00
Bruce Ashfield
695a4ca0a4 netavark: update to v1.9.0
Bumping netavark to version v1.9.0-20-g167e2e4, which comprises the following commits:

    3faf33f fix(deps): update rust crate tokio to 1.35
    4759152 dhcp-proxy: return actual error instead of generic one
    f571e31 dhcp-proxy: skip set gateway if missing
    63c34a5 chore(deps): update rust crate once_cell to 1.19.0
    ff45e22 fix(deps): update rust crate nispor to 1.2.15
    c85d844 fix(deps): update rust crate serde to 1.0.193
    3bbc9fd fix(deps): update rust crate clap to ~4.4.10
    4f27552 aardvark: show error if process is in wrong netns
    a4e082d aardvark: remove unessesary unlock lockfile calls
    4c58983 fix(deps): update rust crate url to 2.5.0
    f588f1d Bump working version to v1.10.0-dev
    1ac6900 v1.9.0 Release
    d688bdc v1.9.0 Release notes
    2f31a95 test: fix syntax problem in helpers.bash
    530c911 run cargo update
    d49f979 use OsString/Path over String for file paths
    c6f48d6 chore(deps): update dependency containers/automation_images to v20231116
    8e943b5 firewalld-reload: fix CI tests
    2172205 firewalld-reload: prevent race which could leak fw rules
    6aee10f fix(deps): update rust crate clap to ~4.4.8
    74ed450 CI: skip broken firewalld test
    e281e9b fix(deps): update rust crate http to 0.2.11
    708bd43 rpm: add netavark-firewalld-reload.service to spec
    b5d7510 firewalld-reload: add integration tests
    268a927 firewall/state: make sure to ignore enoent on read
    0449ba5 firewall-reload: integrate actual logic to reload rules
    13b2133 firewall/state: improve error messages
    d2eeaab firewall: add state functions to serialize configs
    cd1114c firewalld: fix lint errors with rust v1.73
    28c48ce firewall: do not use full Network in NetworkStruct
    aebb5da firewall: add dns_port to SetupNetwork
    cb5aa2e add firewalld-reload subcommand
    3df3c88 fix(deps): update rust crate http to 0.2.10
    9a3266b fix(deps): update rust crate env_logger to 0.10.1
    a063151 fix(deps): update rust crate tokio to 1.34
    dce15ba Update rust container build files
    730e1bf bridge: force static mac on bridge interface
    fca4999 fix(deps): update rust crate futures-core to 0.3.29
    6291f27 fix(deps): update rust crate serde to 1.0.190
    e7a4435 fix(deps): update rust crate serde_json to 1.0.108
    b4ca3e0 fix(deps): update rust crate sysctl to 0.5.5
    9d9f600 fix(deps): update rust-futures monorepo to 0.3.29
    78b4fea CI: Drop CI VM distro name
    116d565 chore(deps): update dependency containers/automation_images to v20231004
    f42b296 fix(deps): update rust crate tokio to 1.33
    881828f build-sys: Filter to tier 2 Linux declaratively
    f29b03f fix(deps): update rust crate sha2 to 0.10.8
    a54db5d fix podman.io community link
    33a4c86 Bump to v1.9.0-dev
    837f1f3 Release v1.8.0
    046b4cf update release notes for v1.8.0
    11db130 run cargo update
    4b6d5ab Add vrf support for bridges
    d211c7a Packit: switch to @containers/packit-build team for copr failure notification comments
    6989cda fix(deps): update rust crate nispor to 1.2.14
    40df9d9 [CI:BUILD] Packit: tag @lsm5 on copr build failures
    b8671a6 chore(deps): update rust crate chrono to 0.4.31
    2904dc1 fix(deps): update rust crate serde_json to 1.0.107
    bc383f2 rust io safety: convert RawFd to BorrowedFd<>
    61b8e62 bump nix to 0.27.1
    156073b chore(deps): update rust crate chrono to 0.4.30
    521e490 fix(deps): update rust crate serde_json to 1.0.106
    b9441cf chore(deps): update rust crate chrono to 0.4.29
    8c6c7fd fix(deps): update rust crate netlink-packet-route to 0.17.1
    f5d0a95 Bump tonic and prost
    70cc3e9 Update container image to F38
    3806d9a Add ACCEPT rules in firewall for bridge network with internal dns.
    d9961dc chore(deps): update rust crate tonic-build to 0.10
    7d581d2 fix(deps): update rust crate nispor to 1.2.13
    ddbfc60 fix(deps): update rust crate serde to 1.0.188
    96368f4 Fix clippy warnings about formatting
    4b0b499 update chrono crate
    be29339 fix(deps): update rust crate url to 2.4.1
    bcd1ebc Add protoc dependency to README
    9c840e9 [CI:BUILD] rpm: spdx compatible license field
    a19bf24 fix(deps): update rust crate tokio to 1.32
    4636b22 chore(deps): update dependency containers/automation_images to v20230816
    735ea2f fix(deps): update rust crate serde_json to 1.0.105
    719ded6 fix(deps): update rust crate tokio to 1.31
    3b5ce46 fix(deps): update rust crate log to 0.4.20
    60d6185 run cargo update
    ab90b2b update tonic-build to 0.9.2
    fcdacab bump rust edition to 2021
    845fbdf iptables: drop invalid packages
    080a814 fix(deps): update rust crate tokio to 1.30
    6caef06 docs: Convert markdown with go-md2man instead of mandown
    bb22c34 fix(deps): update rust crate clap to 4.3.21
    00c05a6 packit: Build PRs into default packit COPRs
    2f44e50 chore(deps): update dependency containers/automation_images to v20230807
    c5df890 fix(deps): update rust crate serde to 1.0.183
    be2a8ea fix(deps): update rust crate serde to 1.0.181
    067bbde fix(deps): update rust crate serde to 1.0.180

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-01-04 02:52:53 +00:00
Bruce Ashfield
f6f61282bf aardvark-dns: update to v1.9.0
Bumping aardvark-dns to version v1.9.0-10-gf1c946c, which comprises the following commits:

    e4785bd Release v1.9.0
    e406f83 v1.9.0 Update release notes
    8880d68 run cargo update
    864fa96 chore(deps): update dependency containers/automation_images to v20231116
    a8642b3 fix(deps): update rust crate tokio to 1.34.0
    b154c3b fix(deps): update rust crate async-broadcast to 0.6.0
    5ee6646 update trust-dns to hickory
    f516597 fix(deps): update rust crate futures-util to 0.3.29
    20ab8f5 fix(deps): update rust crate trust-dns-server to 0.23.2
    d9f023a fix(deps): update rust crate trust-dns-proto to 0.23.2
    645fb12 tmt: initial enablement
    3633db0 aardvark main: change error reporting
    7820735 chore(deps): update dependency containers/automation_images to v20231004
    dc1ef13 fix(deps): update rust crate trust-dns-proto to 0.23.1
    085608c fix(deps): update rust crate trust-dns-client to 0.23.1
    ceca55b clippy: some format fixes
    9c90865 fix(deps): update rust crate tokio to 1.33.0
    3391c8d Bump to v1.9.0-dev
    1ed9402 Release v1.8.0
    a9e95ca update release notes for v1.8.0
    1730fef run cargo update
    2a3415e Packit: switch to @containers/packit-build team for copr failure notification comments
    82752dd [CI:BUILD] Packit: tag @lsm5 on copr build failures
    0356081 chore(deps): update rust crate chrono to 0.4.31
    0d831cf cargo: bump chrono to 0.4.30
    ea06d05 test: IPv6 format is changed in v1.72.0
    d2a7527 bump nix to 0.27.1
    20e5b56 vendor: bump trust_dns_proto and trust_dns_client to 0.23.0
    cce63be fix(deps): update rust crate trust-dns-server to 0.23.0
    c81a038 [CI:BUILD] rpm: spdx compatible license field
    cae27d7 fix(deps): update rust crate anyhow to 1.0.75
    b46553e fix(deps): update rust crate tokio to 1.32.0
    1d8d421 chore(deps): update dependency containers/automation_images to v20230816
    f8bdbf1 fix(deps): update rust crate tokio to 1.31.0
    88e847d fix(deps): update rust crate anyhow to 1.0.74
    3f74fdc fix(deps): update rust crate anyhow to 1.0.73
    17ca8a1 fix(deps): update rust crate log to 0.4.20
    70ad545 chore(deps): update dependency containers/automation_images to v20230809
    cb2b0e6 fix(deps): update rust crate tokio to 1.30.0
    def4232 fix(deps): update rust crate clap to 4.3.21
    cd85a71 packit: Build PRs into default packit COPRs
    4df6054 chore(deps): update dependency containers/automation_images to v20230807
    a713fa6 fix(deps): update rust crate anyhow to 1.0.72
    dc36e6b fix(deps): update rust crate signal-hook to 0.3.17
    62cd6e2 fix(deps): update rust crate clap to 4.3.19
    7f3c50d fix(deps): update rust crate clap to 4.3.15
    8821976 fix(deps): update rust crate signal-hook to 0.3.16
    75a7b92 [CI:BUILD] Packit: remove pre-sync action
    1e54ac4 fix(deps): update rust crate clap to 4.3.11
    389a189 fix(deps): update rust crate tokio to 1.29.1
    836a441 fix(deps): update rust crate clap to 4.3.10
    c81743a [CI:BUILD] RPM: cleanup spec and fix eln builds
    2703165 bump to v1.8.0-devel

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-01-04 02:52:53 +00:00
Bruce Ashfield
ba9cbc0914 skopeo: update to 1.14.0
Bumping skopeo to version v1.14.0-10-ga85eaac9, which comprises the following commits:

    48d11dac fix(deps): update golang.org/x/exp digest to 6522937
    87eef310 DOCS: add Gentoo in install.md
    f50dc204 DOCS: Update to add Arch Linux in install.md
    9f52e728 fix(deps): update module golang.org/x/term to v0.15.0
    efd76e74 Bump to v1.14.1-dev
    6abf96bb Bump to v1.14.0
    14496ba4 fix(deps): update module github.com/containers/common to v0.57.0
    fa85e47b chore(deps): update dependency containers/automation_images to v20231116
    e4b67e78 fix(deps): update module github.com/containers/image/v5 to v5.29.0
    edefdb66 Add documentation and smoke tests for the new --compat-auth-file options
    518181e5 Update c/image and c/common to latest
    56b96a4d fix(deps): update module github.com/containers/storage to v1.51.0
    a8e7d94e fix(deps): update module golang.org/x/term to v0.14.0
    50cffa38 fix(deps): update module github.com/spf13/cobra to v1.8.0
    0c2cca96 [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.2
    6b2a26f1 [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.1
    6ef8acff fix(deps): update github.com/containers/common digest to 3e5caa0
    5d4e89cc chore(deps): update module google.golang.org/grpc to v1.57.1 [security]
    5307dd66 fix(deps): update module github.com/containers/ocicrypt to v1.1.9
    03c94252 Update github.com/klauspost/compress to v1.17.2
    91611a3a chore(deps): update module github.com/docker/docker to v24.0.7+incompatible [security]
    a9c7c505 Fix ENTRYPOINT documentation, drop others.
    70551db8 Remove unused environment variables in Cirrus
    a2eb508b [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.0
    1fa360a6 chore(deps): update dependency containers/automation_images to v20231004
    fa3e62f2 chore(deps): update module golang.org/x/net to v0.17.0 [security]
    dc4fa672 copy: Note support for `zstd:chunked`
    538dd6f3 fix(deps): update module golang.org/x/term to v0.13.0
    611db7c3 fix(deps): update module github.com/docker/distribution to v2.8.3+incompatible
    43e1a96e fix(deps): update github.com/containers/common digest to 745eaa4
    5fad766c Packit: switch to @containers/packit-build team for copr failure notification comments
    d8b3a17f Packit: tag @lsm5 on copr build failures
    57034826 vendor of containers/common
    7db8fbde fix(deps): update module github.com/opencontainers/image-spec to v1.1.0-rc5
    4d921585 fix(deps): update module github.com/containers/common to v0.56.0
    9e89e18f Cirrus: Remove multi-arch skopeo image builds
    32c8a05a fix(deps): update module github.com/containers/image/v5 to v5.28.0
    679615f5 Increase the golangci-lint timeout
    c1e7c974 fix(deps): update module github.com/containers/storage to v1.50.2
    9563e3b8 fix(deps): update module github.com/containers/storage to v1.50.1
    427e58f5 fix(deps): update golang.org/x/exp digest to 9212866
    7c39f363 Fix a man page link
    897619f6 fix(deps): update github.com/containers/image/v5 digest to 58d5eb6
    2976f4f8 GHA: Closed issue/PR comment-lock test
    46979914 fix(deps): update module github.com/containers/common to v0.55.4
    3249973d fix(deps): update module github.com/containers/storage to v1.49.0
    b87a1b3e rpm: spdx compatible license field
    b0d587a9 chore(deps): update dependency golangci/golangci-lint to v1.54.2
    7ced0fb0 chore(deps): update dependency containers/automation_images to v20230816
    4b952d61 Packit: set eln target correctly
    6b827fa7 packit: Build PRs into default packit COPRs
    fec950c2 DOCS: Update Go version requirement info
    449ac9bb DOCS: Add information about the cross-build
    78187ca8 fix(deps): update module github.com/containers/ocicrypt to v1.1.8
    df117e28 fix(deps): update module github.com/containers/common to v0.55.3
    4ee2946b Update c/image after https://github.com/containers/image/pull/2070
    0e3efc64 chore(deps): update dependency golangci/golangci-lint to v1.54.1
    46fcbd3a chore(deps): update dependency containers/automation_images to v20230809
    e98561e2 fix(deps): update golang.org/x/exp digest to 352e893
    4f5ba65a chore(deps): update dependency containers/automation_images to v20230807
    5abce03c Update to Go 1.19
    276b8095 fix(deps): update module golang.org/x/term to v0.11.0
    60ee543f Update c/image for golang.org/x/exp
    ab892075 RPM: define gobuild macro for rhel/centos stream
    f236b5ef Fix handling the unexpected return value combination from IsRunningImageAllowed
    c40f1485 Close the PolicyContext, as required by the API
    e90ad861 Use globalOptions.getPolicyContext instead of an image-targeted SystemContext
    a4aa15f4 Packit: remove pre-sync action
    a0a340a1 fix(deps): update module github.com/containers/common to v0.55.2
    f7dc0847 proxy: Change the imgid to uint64
    a39972ca [CI:BUILD] Packit: install golist before updating downstream spec
    2945e9e0 Update module golang.org/x/term to v0.10.0
    5f87f6ab Bump to v1.14.0-dev
    cb1e9012 Bump to v1.13.0

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-01-04 02:52:53 +00:00
Bruce Ashfield
8c6303bb83 crun: update to v1.12
Bumping crun to version 1.12-19-g90b21dd, which comprises the following commits:

    49f439d ctx: drop no_subreaper bool
    b5ad30f krun: fix use of uninitialized integer
    7c5a32a criu: do not set CLOEXEC on fds to inherit
    c9e23a8 criu: fix error return value
    501aa98 handlers: Fix -Werror=unused-parameter build error for spin
    c9014f8 src: use O_CLOEXEC with pipes
    3ad89be src: use O_CLOEXEC for all open/openat calls
    0f0d5be src: close std streams on exec
    08b7d33 build(deps): bump uraimo/run-on-arch-action from 2.5.1 to 2.6.0
    2ad31d4 linux: fix error string
    ce429cb NEWS: tag 1.12
    08d9fea preconfigure cpuset with required resources
    a18356e README.md: update the correct Nix channel
    da991db utils: try attr/<lsm>/* before attr/*
    616aea7 feat: add spin handler
    172bbd0 container: move dereference after check
    2cc04ea systemd: fallback to system bus

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-01-04 02:52:53 +00:00
Bruce Ashfield
bf3b7371a3 moby: update to v24.0.7-tip
Bumping moby to version v24.0.7-9-gafcd2cde95, which comprises the following commits:

    d0b5a5a8a5 integration/TestLiveRestore: Wait for process to exit
    f0b5ca47fb liverestore: Don't remove `--rm` containers on restart
    bfbb1dd890 update containerd binary to v1.7.9
    8a9a6702d0 update containerd binary to v1.7.8
    56d9d85c99 Dockerfile: update github.com/tc-hib/go-winres v0.3.1
    6d5c35c0ce update runc binary to v1.1.10
    05d7386665 daemon: daemon.containerRestart: don't cancel restart on context cancel

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-01-04 02:52:53 +00:00
Bruce Ashfield
08ec5a182d buildah: update to 1.33.2
Bumping buildah to version v1.33.2-1-g8be6786d5, which comprises the following commits:

    7fffb3366 [release-1.33.2] Bump to v1.33.2
    7add02a3b Update minimum to golang 1.20
    b92ad028b fix(deps): update module github.com/fsouza/go-dockerclient to v1.10.0
    20565e530 fix(deps): update module github.com/moby/buildkit to v0.12.3
    bd0ae2aff Bump to v1.33.2-dev
    38d6d5f11 Bump to v1.33.1
    6d66008b6 Bump to v1.31.2-dev
    f18868d06 Bump to v1.31.1
    f6cb3e474 fix(deps): update module github.com/moby/buildkit to v0.11.4 [security]
    7aa395489 test,heredoc: use fedora instead of docker.io/library/python:latest
    8fb826177 Bump to v1.33.1-dev
    98da6c8d6 Bump to v1.33.0
    2087848c3 Never omit layers for emptyLayer instructions when squashing/cwing
    3a61cc099 Add OverrideChanges and OverrideConfig to CommitOptions
    bbb55b8b8 buildah: add heredoc support for RUN, COPY and ADD
    69f52f805 vendor: bump imagebuilder to v1.2.6-0.20231110114814-35a50d57f722
    fadc0ba08 conformance tests: archive the context directory as 0:0 (#5171)
    3c61dfd4f blobcacheinfo,test: blobs must be resued when pushing across registry
    19d9a6bc0 Bump c/storage v1.51.0, c/image v5.29.0, c/common v0.57.0
    b2b761573 pkg/util.MirrorToTempFileIfPathIsDescriptor(): don't leak an fd
    1fab39559 StageExecutor.Execute: force a commit for --unsetenv, too
    4cf16730b Increase a copier+chroot test timeout
    57d863dfd Add support for --compat-auth-file in login/logout
    dcfbe69a3 Update existing tests for error message change
    5fc64afe1 Update c/image and c/common to latest
    eebecc94d fix(deps): update module github.com/containerd/containerd to v1.7.9
    fe9bdce86 build: downgrade to go 1.20
    4f3876d8e Add godoc for pkg/parse.GetTempDir
    00e73de71 conformance tests: use go-dockerclient for BuildKit builds
    0a85c0629 Make TEE types case-insensitive
    bc59f69c0 fix(deps): update module golang.org/x/crypto to v0.15.0
    10c0222d4 Tweak some help descriptions
    8df9b760b Stop using DefaultNetworkSysctl and use containers.conf only
    99cad6ee1 Implement ADD checksum flag #5135
    1d30520e8 vendor of openshift/imagebuilder #5135
    7e0d66483 Pass secrets from the host down to internal podman containers
    8f86c5784 Update cirrus and version of golang
    61de02b0f image: replace GetStoreImage with ResolveReference
    1306a64cd vendor: bump c/image to 373c52a9466f
    af394a83d pkg/parse.Platform(): minor simplification
    d1bfccf22 createConfigsAndManifests: clear history before cw-specific logic
    9f1c9a8ee Use a constant definition instead of "scratch"
    6552b619c conformance: use require.NoErrorf() more
    acf60abbe fix(deps): update module golang.org/x/term to v0.14.0
    4a470feec fix(deps): update module golang.org/x/sync to v0.5.0
    e8ae12013 fix(deps): update module github.com/spf13/cobra to v1.8.0
    fc74d5071 fix(deps): update module golang.org/x/sys to v0.14.0
    892014df1 fix(deps): update github.com/containers/common digest to 8354404
    2f118fe61 fix(deps): update module github.com/opencontainers/runc to v1.1.10
    ef439b8ad fix(deps): update github.com/containers/luksy digest to b5a7f79
    934c40e73 Log the platform for build errors during multi-platform builds
    3b96b1caf Use mask definitions from containers/common
    34ac2cc4f Vendor in latest containers/common
    2779e7062 fix(deps): update module github.com/containerd/containerd to v1.7.8
    52d48d720 fix(deps): update module go.etcd.io/bbolt to v1.3.8
    02f781b35 container.conf: support attributed string slices
    2b2a4bed8 fix(deps): update module sigs.k8s.io/yaml to v1.4.0
    03b004224 Use cutil.StringInSlice rather then contains
    48a9c4371 Add --no-hostname option to buildah containers
    c536048ca vendor c/common: appendable containers.conf strings, Part 1
    a9e06a64d fix(deps): update module github.com/onsi/gomega to v1.28.1
    2a3a956cb chroot.setupChrootBindMounts: pay more attention to flags
    a4f0d7dec chore(deps): update dependency containers/automation_images to v20231004
    7c8b51068 Vendor containers/common
    0f0ca0cfc chore(deps): update module golang.org/x/net to v0.17.0 [security]
    9c99d7ca8 run: use internal.GetTempDir with os.MkdirTemp
    7704ca6d3 fix(deps): update module github.com/containerd/containerd to v1.7.7
    07d955f27 imagebuildah,multi-stage: do not remove base images
    6fd4f0373 gitignore: add mkcw binary
    9c57af8d1 mkcw: remove entrypoint binaries
    b97f887ca fix(deps): update module golang.org/x/crypto to v0.14.0
    4e6c2b2cd fix(deps): update module golang.org/x/sys to v0.13.0
    f99de537e fix(deps): update module golang.org/x/sync to v0.4.0
    5bfc7d9a4 Update some comments related to confidential workload
    c48a459ea Use the parent's image ID in the config that we pass to imagebuilder
    2d4896f6e fix(deps): update github.com/containers/common digest to 8892536
    065c8d43e fix(deps): update github.com/containers/luksy digest to 6df88cb
    249e30c98 bug: Ensure the mount type is always BindMount by default
    ad3211c26 Protocol can be specified with --port. Ex. --port 514/udp
    a3d2c3125 fix(deps): update module github.com/onsi/gomega to v1.28.0
    8b63fa37b build,config: add support for --unsetlabel
    91f54ed54 tests/bud: add tests
    351012792 [CI:BUILD] Packit: tag @containers/packit-build on copr build failures
    ae5f11e45 stage_executor: allow images without layers
    4c6255679 vendor of containers/common
    b3084b5f4 Removing selinux_tag.sh as no longer needed after 580356f [NO NEW TESTS NEEDED]
    9dd66e4cb add/copy: make sure we handle relative path names correctly
    68ffd1e97 fix(deps): update module github.com/opencontainers/image-spec to v1.1.0-rc5
    abc57f8df Bump to v1.33.0-dev
    b574b806e imagebuildah: consider ignorefile with --build-context

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-01-04 02:52:53 +00:00
Bruce Ashfield
a6ed7b60ff containerd: update to 2.0-beta
We refresh our GO_FLAGS patch for new context, and drop the install
of v1 or unversioned shims as the runtime-v1 has been dropped

Bumping containerd to version v2.0.0-beta.0-88-g87bf39a7f, which comprises the following commits:

    96aaf5a3b Add core and internal root packages
    c0363754f sandbox: get runtime info from sandbox or container
    95d2a3b7c upgrade: add cri upgrade test case
    0bc963341 runtime/v2: net.Dial gRPC shim sockets before trying grpc
    e1b495866 sandbox: keep rootDir and stateDir compatible
    b0fef6738 sandbox: migrate sandbox_mode to sandboxer
    c8012b6d7 sandbox: make a clear dependency of cri plugins
    2ead89509 Support gzip and zstd HTTP transport compression to fetch remote resources
    8e567aa58 mv pkg/process cmd/containerd-shim-runc-v2/process
    a813097dc Bump up github.com/fsnotify/fsnotify to v1.7.0
    c384e3717 containerd-stress: use config address for CRI test
    d4c828c2c integration: add new binary upgrade case
    8e91edb71 fix(pkg/dialer): minor fix on dialer function for windows
    ad3f8c563 tomlext.Duration add MarshalText method
    6da015284 go.mod: github.com/containerd/continuity v0.4.3
    cd348e6ef .golangci.yml: remove directories that don't exist
    4b556a6e0 Bump up golangci-lint to v1.55.2
    c51d4f9b6 push: always inherit distribution sources from parent
    e15c24655 Move CRI image service into a separate plugin
    80dd779de remotes/docker: close connection if no more data
    7f410ae05 integration: reproduce #9347
    2e9686c05 fix: deflake TestCRIImagePullTimeout/HoldingContentOpenWriter
    4aa932337 CI: update Fedora to 39
    f6c4de6b5 fix: podsandbox depends on Lease plugin
    1b65fe264 fix ticker leak
    1af0cba1a Update documentation for containerd v2.0 packages
    4f42da416 adopters.md: remove Eliot project
    01c442147 Enhance container image unpack client logs
    e7390d4ed vendor: upgrade OpenTelemetry to v1.19.0 / v0.45.0
    1a1bd6d0a runtime/v2/shim: use structured log for plugin ID
    71fd85f5e runtime/v2/shim: run(): remove unused "name" argument
    0a59c33be runtime/v2/shim: rename var that shadowed package var
    be22e12d5 services/server: use structured log for plugin ID
    09de4f1fc services/server: rename var that collided with import
    14e621cf9 services/server: gofumpt
    32bf805e5 sandbox: add a sandboxService interface to criService
    25a4c3d23 sandbox: remove SandboxersServicePlugin
    0cf48bab2 sandbox: podsandbox init its own client
    7d65a4563 Move runc shim implementation to cmd
    e682da76c fix labels in pod sandbox
    64c41162c update tests to use labels from cri/labels
    7e79225ce refactor labels used in cri server
    274a16282 update runc binary to v1.1.10
    2e014fa2a cri: fix update of pinned label for images
    cb555fa16 golangci-lint: enable depguard to prevent re-introducing libcontainer
    dac056fe7 integration: deflake TestIssue9103
    7b9fcfd7c add default enable unprivileged icmp/ports
    a7cd49c68 expected and actual field position adjustment
    e099717f9 validate kernel version for unprivileged icmp/port
    76049170b document runtime and shim configuration and selection
    2fab240f2 integration: init release upgrade test
    2af6db672 switch back from golang.org/x/sys/execabs to os/exec (go1.19)
    a596d09ec cri: add deprecation warning for configs
    35924bccc cri: add deprecation warning for auths
    d7cb25d77 cri: add deprecation warning for mirrors
    58cc275eb cri: add ability to emit deprecation warnings
    68cac3f62 client: remove obsolete ErrCheckpointRWUnsupported
    df19888f8 add warning use inheritable Capabilities
    411e2bce4 Remove plugins package
    9db21401c Switch to github.com/containerd/plugin
    a48ddf4a2 Don't allow io_uring related syscalls in the RuntimeDefault seccomp profile.
    2dfae4c4b Prepare release notes for v2.0.0-beta.0
    6ca4b5260 Update mailmap
    a67efe88d Add tests cases
    f1d659dc5 Update package name in Makefile
    0ffc3e987 Handle ArgsEscaped for new Sb Server
    b85df264e Rename opt to avoid stutter
    261e01c2a Move client to subpackage
    b6adf43d4 test: use 'Autoclear: ture' in TestRwLoop and add Autoclear test
    124d3a20a Sync ops.md, update CLI --help output to be consistent in descriptions
    5fdf55e49 Update go module to github.com/containerd/containerd/v2
    abfc8be53 Fix lint in integration/client
    ddd73ad30 Move protofiles generated into v2 directory
    638b474c8 Temporarily remove imgcrypt in CRI to fix circular dependency
    192168038 Temporarily remove integration/client submodule
    4e3fbd36e vendor: github.com/klauspost/compress v1.17.2
    856d1053f vendor: google.golang.org/grpc v1.58.3
    466ee870d Check scheme and host of request on push redirect
    3fff8b4f6 ctr: new deprecations command
    079383dbe dynamic: record deprecation for dynamic plugins
    260e71abc server: add ability to record config deprecations
    bc861b66f pull: record deprecation warning for schema 1
    9aab44673 introspection: add support for deprecations
    57c897f10 api/introspection: deprecation warnings in server
    240733ce2 warning: new service for deprecations
    aff5b809c deprecation: new package for deprecations
    d48ceb606 Avoid TLS fallback when protocol is not ambiguous
    ed759bae3 Update go fuzz to directly instantiate server
    09e40511a fix bug that using invalid token to retry fetching layer
    2fea521d0 Disable windows-2019 integration test temporarily
    9fc407d8c ci: bump up golangci-lint to v1.55.0
    8b4f9656d sandbox: remove ValidateMode as it is not used
    337cc2171 pkg/cri: should ignore no sandbox bucket
    f515cd5c5 Reorder fields when writing bootstrap params
    3d53fbe85 Fix CRI integration tests
    f76eaf5a6 Fix 'not a directory' error when restoring bootstrap.json
    cf75cfa32 Add more logs around shim restore
    8061cb023 Save bootstrap.json instead of address file
    e03bf32b8 Switch runc to v3
    7a2d801d6 Expose shim instance version
    f66c46806 Bridge task service v2
    daaf67662 Switch runc shim to task v3
    bb64e6a8e Initialize sandbox controller list on CRI server creation
    03d81f595 Use cri streaming pkg from k8s staging
    b006f1c15 integration/client: replace hardcoded strings for OCI-spec consts
    d3f5e0c90 images/archive: replace hardcoded strings for OCI-spec consts
    8e7c10c6d CRI: enhance ImageFsInfo() to support multiple snapshotters
    e4639ad18 Add exports to proxy plugin config
    3986f80c3 go.mod: bump up github.com/opencontainers/image-spec to v1.1.0-rc5
    f7c9e9942 vendor: golang.org/x/net v0.17.0
    c3652540c vendor: golang.org/x/text v0.13.0
    ff602c213 vendor: golang.org/x/sys v0.13.0
    39b168cdb vendor: google.golang.org/grpc v1.57.1
    930ee552e Fix typos
    3ef300ca7 sandbox: remove global variable of podsandbox controller
    7bca70c0c sandbox: do not call Connect when loadShim
    d2d434b7d sandbox: add all sandbox information to Create method
    0707f6869 sandbox: ignore not found error when remove sandbox
    2951fb6dc sandbox: support more sandbox controllers
    8b3597685 sandbox: add Sandboxer field to sandbox metadata
    69e501e7c sandbox: change SandboxMode to Sandboxer
    f372b3501 sandbox: add sandboxer field of sandbox requests
    a782fd6da Use LOOP_CONFIGURE when creating loop devices
    771237563 Add a new image label if it is docker schema 1
    5ad6f3432 CRI: use (snapshotter_id, snapshot_key) to uniquely identify snapshots
    41b2b2a7b go.mod: bump up github.com/klauspost/compress from v1.17.0 to v1.17.1
    4febb0852 deprecated: go-plugin library as runtime plugin
    51c9ffe46 remotes: add handling for missing basic auth credentials
    4f339b5b5 RELEASES.md: mark legacy CRI as removed status
    0a4f79211 Remove use of v1 runtime plugin type for Unix
    71f8b4357 Move dynamic plugins to a subpackage
    7b2a91821 Generalize the plugin package
    a80606bc2 Move plugin type definitions to containerd plugins package
    cb969085f Temporarily remove zfs as built in plugin
    2486c1298 Exit shim when shutdown manager is done
    1b3199324 Rename sbserver to server
    4edc6c2d9 Add note about configuration versions in releases
    c5c94dc86 Fix CRI tests panic on CI
    a3c2c1e4d Clean shell scripts
    fa1d3a9cc Fix dependencies after remove
    3742f7f0d idmapped: use pidfd to avoid pid reuse issue
    2332b9ba1 Remove legacy CRI from CI
    536abf1b3 Remove legacy CRI
    33b1a833c Move CRI testing package out
    016114ff6 Move bandwidth package out of CRI server
    3c1e7ffb8 Integration: Alter TestContainerPids for Windows
    8f013bb71 Add migration for older configuration versions
    313f514fd update to go1.21.3. gp1.20.10
    6b752b536 update to go1.21.2, go1.20.9
    8f3d1c9d9 add cpu-burst param to ctr command
    3ddcd6120 add Duration type to compatible toml v1 version
    535916d1d Skip exec.LookPath if a specific gzip implementation is disabled
    4b59d67dd add a new flag "skip-reference-check" to skip reference name check
    34378ec9b Use Intel ISA-L's igzip if available
    7d6369087 Fix windows default path overwrite issue
    13dcf558e Fix windows default path overwrite issue
    39478eeec go.mod: Bump up github.com/klauspost/compress v1.16.7 to v1.17.0
    859c2651e remotes/docker: Fix MountedFrom prefixed with target repository
    c85b1d1e4 Bump up golangci-lint to v1.54.2
    6169433b6 Fix linter issues for golangci-lint 1.54.2
    e3cb7471a CRI: Snapshotter per runtime handler adjustments
    42dc8faba Bump x/net to 0.13
    79772a0dd remotes: always try to establish tls connection when tls configured
    11a7751af *: add runc-fp as runc wrapper to inject failpoint
    68dd47ef7 containerd-shim-runc-v2: avoid potential deadlock in create handler
    6604ff6c5 containerd-shim-runc-v2: remove unnecessary `s.getContainer()`
    0d76fe5c1 Fix some assertions for integ tests
    1dced31c3 ci-fix: pin the mingw version 12.2.0.3042023
    aae71aa8e update gitignore to indicate that where contributors can use global gitignore
    8ffb03d68 cri: stop recommending disable_cgroup
    5365f4b29 cri: call RegisterReadiness after NewCRIService
    46645b393 Call migrations per version
    5518a5026 remotes: simplify mediatype logic
    8b105984b pkg/transfer/local: simplify mediatype logic
    79acce462 integration: use mediatype helpers
    0ba5b4b62 oci: use mediatype helpers
    cdba61603 remotes: use mediatype helpers
    69034f755 pkg/display: use mediatype helpers
    5ab04ac5a pkg/unpack: use mediatype helpers
    da1196979 pkg/snapshotters: use mediatype helpers
    f1cbc5f90 containerd: use mediatype helpers
    4b1bb1293 remove github.com/opencontainers/runc dependency
    62f621a34 images: simplify mediatype logic
    377c5ca9c images/archive: use mediatype helpers
    bb8a472f2 images: use mediatype helpers
    e7254406c Require plugins to succeed after registering readiness
    62f273d50 Add migrate subcommand to config command
    0320ad184 Add config migration to plugin package
    f58158e2d Add config migration and bump config version
    bf4fbe4e8 docs: Update `transfer` service docs to reflect completed implementations for 1.7
    b40e95e0e images: Config: explicitly return nil-error
    36c2222d3 Add usage calculation test
    3b60e9366 Create new imagetest package
    4c344f2fa Add warning for plugin configs with unknown fields
    a9ba33f8f Allow for images with artifacts to pull
    650148313 Add warning log for unknown config fields
    b5615caf1 Update go-toml to v2
    8b413daff Remove log package except for exported const used by hcsshim
    2f1b92710 Update zfs library to use new log repository
    508aa3a1e Move to use github.com/containerd/log
    f1070c4e1 docs/userns: Clarify requirements for k8s 1.25/1.26
    42eee8bf0 fix: Add `containerd` to the message type reference
    9e819fb4a Update CRI image store to not use containerd client
    dcb2e7447 Improve doc of func NewNetNS
    2ce971d89 Add delete target to image remove
    f8fb2dad3 api: update image service to support target in delete request
    8e3722c7d CI: Set slow_chown for overlayfs snapshotter
    46d3094aa docs/userns: Fix small typo
    d008d64a8 docs/userns: Clarify containerd 1.7 limitations
    e37908200 docs/userns: Document the need to opt-in for a slow chown
    8bf8e2b97 snapshotter: Use capa prefix consistently for capabilities
    ec9e0dca9 overlay: Require opt-in if idmap mounts are not supported.
    03b9ce56b deprecate logs package, but disable linter (for transitioning)
    d69ae811d alias log package to github.com/containerd/log v0.1.0
    729c97cf3 Handle unexpected shim kill events
    ed5f7e7c8 Update image in client to use new usage package
    96a23ccc1 Create new usage package
    79f781d00 Refactor: Removing inherently flaky and unused SourceDateEpochOrNow function.
    8cbb4ea5d vendor: github.com/containerd/nri v0.5.0
    3ca39ef01 fix: Remove `LimitNOFILE` from `containerd.service`
    83240a4f7 Bump crun to 1.9
    967313049 doc: Add documentation about CRI user namespaces
    2e13d3954 pkg/process: Only use idmap mounts if runc supports it
    fce1b9507 go.mod: Update runtime spec to include features.MountExtensions
    a81f80884 Revert "cri: Throw an error if idmap mounts is requested"
    e832605a8 integration: Simplify WithVolumeMount()
    24aa808fe integration: Add userns test with volumes
    ab5b43fe8 cri/sbserver: Pass down UID/GID mappings to OCI runtime
    e916d77c8 platforms: move ToProto, FromProto to api/types
    381442945 platforms: remove errdefs dependency
    e0b2b17de cri/server: Add tests for the linux-specific parts of VolumeMounts()
    10cb112e4 cri/server: Add tests for ContainerMounts()
    97dfa7f55 cri/server: Pass down uidMappings to OCI runtime
    b42bdd125 release: remove `cri-containerd-*.tar.gz` release bundles
    9656b8c0d nri: update mock plugin handlers
    6f9de91ef vendor: update github.com/containerd/nri@v0.4.0
    f7089ba22 leases: add WithLabel
    1480e3bd4 leases: cleanup TestWithLabels
    d94a789d1 Fix usages of `mountinfo.PrefixFilter`
    45e303eea task: expose criu work path opt
    f77185f9e Fix "even if IPv4 comes first" test to have IPv4 first
    88a849626 Don't use `To16() != nil` to detect IPv6 addresses
    eaf607101 update to go1.21.1, go1.20.8
    1a7490c5a Add link to CONTRIBUTING from README
    0413f1272 Add contributors guide
    05093d7c0 vendor: github.com/cncf-tags/container-device-interface v0.6.1
    ac1d556b9 Add image verifier transfer service plugin system based on a binary directory
    55b2df560 go.mod: github.com/grpc-ecosystem/grpc-gateway/v2 v2.16.2
    a00888db8 fix reference to canonical fieldmask type
    0041996ca CI: bump up crun to 1.8.7
    4bc0b2660 Revert the removal of the parameter Container
    6ec0d4a3a prevent ctr from creating tags with forbidden characters
    a4bdbf784 content: reduce the contention between ref lock and boltdb lock
    abfabb6d8 contrib/fuzz: fix redeclared issue
    295bcec07 snapshotter: implement unit tests for idmapped mounts for overlay
    9d01ed1c3 integration: add test for idmapped mounts
    e49e6d6fd snapshotter: implement slow path for idmapped mounts check for overlay
    1555a31bf mount: support idmapped mount points
    723c88ce3 snapshotter: add "--remap-labels" support to overlayfs
    e8ddf669f snapshotter: support "remap-ids" capability for overlayfs
    ef6b91947 fix(docs): fix on the windows installation script
    5d31e9378 pkg/systemd: use sync.Once for systemd detection
    7d0ab4fc2 remove uses of github.com/runc/libcontainer/cgroups
    9bc6441c2 vendor: github.com/google/uuid v1.3.1
    13ff185ba Blockfile: Enlighten blockfile copy on Darwin
    a3e8503ed .github: enable fuzz build
    cd705af89 metadata: add image delete events during garbage collection
    3f9756c18 gc: add support for image expiration
    b32638e21 ctr: pull or fetch image metadata by default
    20f79300c push: inherit distribution sources from parent
    24aca53fa Update use of content.Infoprovider
    f8c789f31 content: add InfoProvider interface
    02d519ad6 Update hcsshim tag in runhcs-version script
    a2817ca16 CRI: Include sandbox ID in failed to load error
    492347090 replace reference/docker for github.com/distribution/reference v0.5.0
    26dcae2f6 fix ossfuzz building error
    19d6c37a3 Revert "log: define G() as a function instead of a variable"
    fd5d92a7f Update hcsshim tag versioning to v0.12.0-rc.0
    779875a05 Add missing unpacker.Wait for image import
    4f5db2bc0 metadata: format unit test output
    15b13fb3e Windows: Supply windows shim version via file
    7a0ad09a0 make repositories of install dependencies configurable
    34def8b33 Remove redundant nil check
    fc45365fa Remove most logrus
    f9c35feb3 Makefile: allow overriding GO_BUILD_FLAGS via environment
    490905be6 go.mod: github.com/containerd/continuity v0.4.2
    03abceac5 Update LTS description
    34f32043b Blockfile: Expose RecreateScratch option
    b4f487ce9 Apply suggestions from code review
    1e3540e11 Add stale bot
    4e236962f Update critools to 1.28.0
    c92f4a160 Update RELEASES
    c3f3cad28 Use sandboxed CRI by default
    b76cd4d9f replace some fmt.Sprintfs with strconv
    bbdbf7ab6 Add inspect image commands
    78308b4a4 Add manifest printer library
    11a5dd826 snapshots: replace some fmt.Sprintfs with strconv
    06765c9ef oci: replace some fmt.Sprintfs with strconv
    710d22366 removes/docker: replace some fmt.Sprintfs with strconv
    d7bc8694b pkg/cri: replace some fmt.Sprintfs with strconv
    73e9cfd1c append k8s 1.28  to releases
    6d8329d7f Remove unnecessary joinError unwrap
    8399a4ee7 Remove temporary replace
    7ad0a6ccf Update to latest releases in RELEASES.md
    cd8c8ae4b Remove hashicorp/go-multierror
    1571a5aa0 ctr: metrics: drop unused retval from printWindowsStats()
    7063ae1f6 Makefile: add rule for installing documentation
    de4c338ab Docs: Document proxy plugin diff support
    d09f7cbe0 cri: Fix sandbox_mode "shim"
    60b2cb143 cmd: containerd: allow building w/o systemd notify
    23c95359a Add WithMetaStore to overlay snapshotter to allow bringing your own
    0c1ad52ea cri: spec_linux: drop unused retvals
    eacd74c2b Go 1.21.0
    5756cb00e CI: increase timeout for Binaries
    c883410c9 CI: Explicitly upgrade MinGW on Windows 2019 GitHub runners.
    0f043ae43 seccomp, apparmor: add go:noinline
    5d9bf7d13 CI: temporarily disable ci_fuzz due to incompatibility with recent Go
    e2ce4f58f Populate commit memory for windows memory usage stats
    823e0420e Fix transfer service dependencies:
    cfb30a31a Invoke Stable ABI compatibility function in windows platform matcher
    0cea317a5 FreeBSD: set default runtime
    def5ff3c4 Sandbox: Add annotations to controller CreateOptions
    939ccbed4 Sandbox: Add annotations to CreateSandbox surface
    1fd3a4652 archive/tarheader: fix FreeBSD hdr for regular files
    f8edd5555 update runc binary to v1.1.9
    f35d1f08e go.mod: github.com/opencontainers/runc v1.1.9
    00ef8ba99 Vagrantfile: add strace tool
    601699a18 integration: add ShouldRetryShutdown case based on #7496
    8dcb2a6e6 pkg/cri/sbserver: fix leaked shim issue for podsandbox mode
    72bc63d83 pkg/cri/server: fix leaked shim issue
    5bdd9ca93 integration: add case to reproduce #7496
    b451fa96a bump client-go v0.26.4
    a645ff2e6 Update dependencies after protobuf update in hcsshim
    e7e5619fe Update hcsshim tag to v0.10.0
    54baf766e add metrics for discarding events
    189a1599c archive/compression: update out of date RFC draft link
    cac8b6f4b Makefile: allow overriding the binary executable target dir
    90443f038 CI: update Rocky Linux to 8.8
    0a57dc2a0 CI: update Fedora to 38
    30dd0a17f CI: install Vagrant from Hashicorp
    965641dbc Makefile: allow REVISION be overwritten by environment
    fc32197d4 Makefile: fix overriding go command
    2d3360ec7 CI: move Vagrant tests to GitHub Actions (larger runners)
    4f3c8c468 replace mcr.microsoft.com registry to ghcr.io/containerd registry
    d41c62a55 .github/workflows: add dmesg step for integration-linux
    fd8778fba delete checkout branch in doc
    c62abcb14 docs: document CRI cgroup driver auto detection
    c80a3ecaf cri/sbserver: Use platform instead of GOOS for userns detection
    157dff281 update to go1.20.7, go1.19.12
    687a5f51a fix: allow attaching to any combination of stdin/stdout/stderr
    aa8b094ab platforms: clarify docs for amd64/arm64 variant normalization
    710d987d2 Fix default platform matcher when ctr import
    2d64ab8d7 cri: Don't use rel path for image volumes
    85a2c9a01 log: swap logrus functions with their equivalent on default logger
    6baff1694 log: add package documentation and summary of package's purpose
    238da2c52 log: make Fields type a generic map[string]any
    634a4a1bb log: add log.Entry type
    dd67240f1 log: define OutputFormat type
    778ac302b log: define G() as a function instead of a variable
    81ac648d9 log: add all log-levels that are accepted
    0b6333a41 log: group "enum" consts and touch-up docs
    4a36022e2 log: WithLogger: remove redundant intermediate var
    40ee5fb11 log: SetFormat: include returns in switch
    6fe7e03b8 log: remove testify dependency
    e2ad5a985 removes/docker: remove unnecessary conversion (unconvert)
    ed47d6ba7 cri: implement RuntimeConfig rpc
    a1cdf60cb docker: add test to ensure not found error is returned by resolve
    b4814a29d docker: return most relevant error from docker resolution
    7f7ba31b6 cri: fix using the pinned label to pin image
    480757135 pkg/epoch: fix Y2038 on 32-bit hosts
    98974117b migrate to community owned bucket
    a3404ac42 docker: add missing info log for 4XX/5XX responses
    850b2e1bf go.mod: update cri-api to v1.28.0-beta.0
    480bc8a2b .github/workflows/ci.yml: upgrade Ubuntu from 20.04 to 22.04
    bc96b9039 go.mod: github.com/AdamKorcz/go-118-fuzz-build v0.0.0-20230306123547-8075edf89bb0
    da2740885 go.mod: google.golang.org/genproto v0.0.0-20230720185612-659f7aaaa771
    73dc13ad6 go.mod: github.com/urfave/cli/compare v1.22.14
    1c4fc568b go.mod: github.com/prometheus/client_golang/compare v1.16.0
    68abb525a go.mod: github.com/minio/sha256-simd v1.0.1
    1f2216cc7 go.mod: github.com/klauspost/compress v1.16.7
    3c6ab0420 go.mod: dario.cat/mergo v1.0.0
    4bda0a69e go.mod: github.com/grpc-ecosystem/go-grpc-middleware v1.4.0
    0f033b612 go.mod: github.com/emicklei/go-restful/v3 v3.10.2
    90e050298 go.mod: github.com/containernetworking/plugin v1.3.0
    0498acefb go.mod: github.com/.../container-device-interface v0.6.0
    74b8cb850 go.mod: github.com/opencontainers/runc v1.1.8
    895dd2e93 go.mod: github.com/opencontainers/image-spec v1.1.0-rc4
    235a4452d go.mod: github.com/opencontainers/runtime-spec v1.1.0
    06f18c69d cri: memory.memsw.limit_in_bytes: no such file or directory
    f3daf32c7 Fix ro mount option being passed
    b2967a8d6 update runc binary to v1.1.8
    90ecb8104 fix: `ctr images check` outputs not unpacked images in quite mode
    98f27e1d9 Revert "Add support for mounts on Darwin"
    e939d1319 Revert "Revert 416899fc8e81a80a4b09b59c801f98d36ddc0e74"
    6c9c71112 Revert 416899fc8e81a80a4b09b59c801f98d36ddc0e74
    2799b28e6 Add support for mounts on Darwin
    56d80f81a Update hcsshim tag to v0.10.0-rc.9
    9c673f967 pkg/cri/server: TestImageGetLabels: use registry.k8s.io
    f914edf4f [cri] Handle Windows pod transitions gracefully
    52ef3468b Update Go to 1.20.6,1.19.11
    48cdf1fe2 integration: Enable userns tests for sbserver
    9160386ec cri/sbserver: Test net.ipv4.ping_group_range works with userns
    1c6e26844 cri/sbserver: Fix net.ipv4.ping_group_range with userns
    36a96d7f3 cri/sbserver: Remap snapshots for sbserver too
    508e6f6e0 cri/sbserver: Add userns tests to TestLinuxSandboxContainerSpec()
    fb9ce5d48 cri/sbserver: Support pods with user namespaces
    c99cb95f0 cri/sbserver: Let OCI runtime create netns when userns is used
    73c75e2c7 cri/sbserver: Copy userns helpers to podsandbox
    0b6a0fe77 cri/sbserver: Move runtimeStart to match position with cri/server
    90087ac44 WithRemapperLabels: Update doc to mention overlay supports it
    9d9903565 cri: Fix comment typos
    9e34b8b44 Uncopypaste parsing of OCI Bundle spec file
    232538b76 bugfix(port-forward): Correctly handle known errors
    5c480d9c8 Modify loopback size
    7ef133ad4 Fix mount pkg typo
    83ff030e4 Change http.Header copy to builtin Clone
    cdb153ec9 Resolve docker.NewResolver race condition
    01a6e1c73 Dedup WithNewSnapshotView
    6a913ac82 Cirrus CI: configure apt-get to wait for locks
    38f9bc3e0 fix ci Linux Integration test fail
    c17d3bdb5 pkg/cri/server: Test net.ipv4.ping_group_range works with userns
    9bf5aeca7 pkg/cri/server: Fix net.ipv4.ping_group_range with userns
    05fef52b6 vendor: github.com/containerd/zfs v1.1.0
    073de9308 Fix the auto restart fail when using LogURI and TTY together
    00e5ae211 shim: change ttrpcService and ttrpcServerOptioner to exported interfaces
    e9f63f64f update go to go1.20.5, go1.19.10
    22a7c63c0 Sandbox: Change to mount.Mount for CreateOptions
    51a1e7f0b Fix example shim to actually use its task service
    a9cb6090e ci: remove libseccomp-dev installation for nightly
    0607e7326 Move GetTopic function out of runc shim
    5dedb6d0d archive: use 1970-01-01 as the whiteout timestamp
    d6dbc4040 go.mod: Update cgroups to 3.0.2
    f3b7436b6 Platforms: Add From/ToProto helpers for types
    b3ab1f26c Snapshots: Add From/ToProto helpers for types
    0a6b8f0ee OCI: Add From/ToProto helpers for Descriptor
    4df27fd77 Update ginkgo to match cri-tools' version
    9a202e342 seccomp: always allow name_to_handle_at
    55a8102ec mount: Add From/ToProto helpers
    e85352183 integration/client: Rework withBytesBuffers
    54a93c6c5 Make ptypes.Empty a var in contentserver
    cdc90c838 Remove duplicated code in content Copy
    50376ec9f remotes: allow FetchByDigest client to pass mediatype as header
    0a92661e6 Add a platform.ParseAll helper
    e89d7204e MergeStringSlices use sets
    8760b8717 pkg/epoch: extract parsing SOURCE_DATE_EPOCH to a function
    9924e56f4 pkg/epoch: fix tests on macOS
    dfd7ad8b3 Reword Windows file related TODO
    44e2b26a8 pkg/epoch: replace some fmt.Sprintfs with strconv
    f82d9b799 Integration: Align empty IO func on Windows
    f3124d569 Makefile: Remove hcsshim related TODO
    2aeac9a8f Remove duplicated writeIndex func
    7601dd9a9 Dedup manifest config platform helper
    f3df7f739 log when a lease expires
    a01118bbe Minor changes to sandbox metadata
    f60a4a271 cri: drop unused arg from generateRuntimeOptions
    1fb835f04 Remove unnecessary label bucket loop
    a207b430e snapshots/blockfile: fix lint issue
    59b0b39af vendor: update github.com/containerd/continuity
    d358f1680 fix unbound variable
    f4ad68d5f fix-push-image-rate
    7de95cbc4 snapshots/blockfile: deflaky the testsuite
    6dfb16f99 snapshots|pkg: umount without DETACH and nosync after umount
    72b7d1650 mount: support direct-io for loopback device
    437f13410 Don't run CI on push
    e26c97cb8 Save marshalled empty response in streaming service
    9e09bfb59 Use RWMutex in NSMap and reduce lock area
    38b0f970f No more nondistributable layers in MS registry
    d278d37ca Sandbox: Add Metrics rpc for controller
    d115129d1 Add configurable mount options to overlay
    d56722ef2 Sandbox: Add SandboxMetrics rpc
    4bb709c01 avoid "any" as variable name
    577696f60 replace some basic uses of fmt.Sprintf()
    5cd6210ad runtime/v2/runc: handle early exits w/o big locks
    df280942a integration/client: add timeout to `TestShimOOMScore`
    6dd529e40 Pass in imagespec.Platform to WithVolumes()
    d18026592 release ticker correctly
    28a5199ff Add a check to skip stats for containers that are not running
    34a93a0c2 task: don't `close()` io before `cancel()`
    007c5b6e3 Setup otlp from env
    104b9ef9e Update x/sys to 0.8.0
    69b451af5 RELEASES.md: de-deprecation of CNI conf_template will be v1.7.3
    ab5365222 ctr: update WritePidFile to use atomicfile
    c409c631c shim: WritePidFile & WriteAddress use atomicfile
    3c4a1ab1c cri: write generated CNI config atomically on Unix
    f3ba7c8a3 atomicfile: new package for atomic file writes
    28d8c79de Replace atomicBool with the standard library atomic.Bool
    fe4f8bd88 Pinned image support
    a85b12d4d docs: cherry-pick individual commits instead of merge commit
    738c4c6fa Fix issue for HPC pod metrics
    52997ea98 remotes/docker: ResolverOptions: fix deprecation comments
    a35ead5b9 bugfix: add nil pointer check for cgroup v1 mem usage
    2a60fe5a6 Remove events from init context
    d3887b2e6 Support CDI devices in ctr --device flag
    3ca5b4437 Remove cni conf_template deprecation
    94f0af3ec Image.IsUnpacked(): make error-handling more iodiomatic
    54658a115 Image: rename variable that shadowed import
    d2b7a1e29 cleanup DEPRECATED TLS config
    f857626d6 Move PLEG event back to CRI
    fc50334ca Generate sandbox exit events from CRI
    d2605de73 add handling of a '.' commondir and bounds checking to mount_linux
    cf5605459 Move pod sandbox recovery to podsandbox/ package
    45dbb4e54 Publish sandbox events
    65906335b Add sandbox events protos
    21b3318eb Fix several conversions of "ocispec.Image" to "ocispec.Platform"
    f2bc73782 Add cpuset-mems flag to 'ctr run' command
    f642c0a5f ctr: add cpuset-cpus flag to 'ctr run' command
    314d758fa update auths code comment
    9702d4aee snapshots/blockfile: use passed in dst in scratchGenerator
    bb82f3683 snapshots/blockfile: use loop if options is empty
    9287711b7 upgrade registry.k8s.io/pause version
    fbb38ab6b Fix the spelling of repository within the NRI plugin documentation.
    752e13d9a fix(docs): minor fix on the windows installation steps
    c1b926800 Windows Integration: Switch Azure-based CI to vanilla 2019 image.
    b9dfd29b7 Update tests to use volume-copy-up:2.2
    4bfcac85f notify readiness when registered plugins are ready
    7819da843 Document Protocol Buffer Setup
    579b5596c Update volume-ownership image with latest hashes
    88a3e25b3 Add targetOS to WithVolumes()
    c7ec95caf Reword comment and make slight change to code
    ec2bec648 Fix non C volumes on Windows
    3d7522b7f ctr: allow run to override mounts
    7beaa5e85 Add mount options to blockfile snapshotter
    261d45efe docs/remote-snapshotter.md: update links and description
    7274e33e3 CRI: Make stats respect sandbox's platform
    82deabf9d Optimize metadata Schema notes to correctly match metadata structures
    a6cd5e3f4 bugfix: resolve symlink when looking up mountpoint
    b9f2e48e3 feat: make overlay sync removal configurable
    becf04a59 Update to docker/login-action V2
    79709a205 disable provenance
    1be571b14 Add sync before unmount on snapshotter layer test
    b729962e3 Add blockfile snapshotter to snapshotters doc
    798dba9fa Add blockfile as a builtin
    0c386e2eb Add blockfile snapshotter
    d280cb83b chore: update comment for NetworkPluginSetupSerially
    f8907ab87 Update volume-copy-up
    811456b31 go.mod: github.com/containerd/continuity v0.4.0
    6f715ab10 go.mod: github.com/containerd/go-runc v1.1.0
    85cf9a09e Bump seccomp version to be the same as one in runc repo
    cdaa4025e Fix some typos
    3d9dd2022 ctr: fix the cleanup of task
    66307d0b4 CRI: Support Linux usernames for !linux platforms
    5dbae3819 snapshots/testsuite: Rename: fix fuse-overlayfs incompatibility
    df65e321e Simplify closing bundle dir fd
    718250b6b Update ttrpc to v1.2.2
    7e42dc34d improve container Task comment
    4347fc8bc go.mod: github.com/opencontainers/image-spec v1.1.0-rc3
    5e054ee63 go.mod: github.com/opencontainers/runtime-spec v1.1.0-rc.2
    bb61a6d4b cache diffIDs
    6e2c915a4 Bump up golangci-lint to v1.52.2
    ecb693ec7 bump typeurl to v2.1.1
    f5211ee3f Change to Readdirnames for some cases
    e60a17925 .github: disable cache for actions/setup-go@v4
    52afa34f5 cri: update WithoutDefaultSecuritySettings comment
    6f34da5f8 Cleanup logrus imports
    717169bb8 plugin: remove go < 1.8 stub, enable on windows and arm64
    28d749c9e move to CRI-TOOLS v1.27.0
    27f56e607 Fix umarshal metrics for CRI server
    b947a6f52 update go to go1.20.4, go1.19.9
    c54b706c0 Add faasd and actuated into the ADOPTERS file
    d56466cf3 [transfer] avoid setting limiters when max is 0
    2e53c0ec8 Windows integration: fix critest binary path in Azure-based workflow.
    9e7f8fe30 Update CRI registry configuration docs
    0d975230e Fix panic when remote differ returns empty result
    c58a229e5 Run CI when adding to the merge queue
    0ba066474 vendor: github.com/opencontainers/runc v1.1.7
    cbd10e41a vendor: github.com/opencontainers/runc v1.1.6
    27c0fe3eb update runc binary to v1.1.7
    4891bba83 Update tar tests to run on Darwin
    d9f3e387c Remove entry for container from container store on error
    8ba285f6b fix unable to checkpoint the container more than once
    370be0c18 Move logrus setup code to log package
    92b93e376 cri: Vendor v0.27.1
    8c80ccc7f Update external repo links that changed default branch to main
    519457e3e ctr: Add sandbox flag to ctr run
    c786994ea Update transfer configuration
    4e5693938 Add platform config to proxy plugins
    4192ca8f8 pkg/cri/server: sub-test uses array and capture range var
    8bcfdda39 pkg/cri/sbserver: sub-test uses array and capture range var
    745ec84e5 Add diffservice to contrib
    3784c1c91 Add proxy differ
    cb2c3ec8f oci: partially restore comment on read-only mounts for uid/gid uses
    f23816740 go.mod: add comment explaining go-fuzz-headers replace rule
    ec9e74ed9 go.mod: remove replace for github.com/opencontainers/runtime-tools
    6c40cf305 go.mod: integration: use non-pre-release of containerd
    92d1e9bee go.mod: integration: move indirect dependencies to the right group
    18d7e84f9 runtime/shim: fix the nil checkpoint options
    cd16b31cd Get CDI devices from CRI Config.CDIDevices field
    da4de96e2 containerd support k8s 1.27
    4b35c3829 update shim example
    71ababe30 runtime/shim: remove runc/v2/services
    b71f4b751 runtime/shim: rename RunManager to Run
    49111b115 update runc binary to v1.1.6
    85df1cc6b doc: update CI signal info in README
    7e6ab8488 cri: Throw an error if idmap mounts is requested
    85afda6f5 cri: Vendor v0.27.0-beta.0 for mounts uid/gid mappings
    f7b8b1181 update the version of the runc shim in the readme and examples
    dc2fc987c capture desc variable in range variable just in case that it run in parallel mode
    05bb52b27 Use t.TempDir instead of os.MkdirTemp
    7a7519a78 CRI Sbserver: Make PodSandboxStatus friendlier to shim crashes
    79cb4b000 [sbserver] handle missing cpu stats
    464a4977a [sbserver] Refactor usageNanoCores be to used for all OSes
    e0b817ec1 Fix argsEscaped tests
    aee358765 Update to setup-go@v4 action
    811be6085 Update Azure-based Windows workflow image SKUs.
    dfc7590d5 remotes/docker: Add MountedFrom and Exists push status
    db223271e Register imagePullThroughput and count with MiB
    6f0714efc Use RunWithPrivileges
    b41ca1159 Fix access denied on mounted vhdx root
    a7fddb40b Use wait instead of a sleep to check for startup delay
    d0527e228 Support for dropping inheritable capabilities
    0fb2d9132 update go to go1.20.3, go1.19.8
    cab056226 oci: Use WithReadonlyTempMount when adding users/groups
    c9e5c33a1 UnmountAll is a no-op for missing mount points
    8538e7a2a Improve error messages and remove check
    ba74cdf15 Make ReadOnly() available on all platforms
    7bb2756bc Increase integration test tmieout to 20m
    1279ad880 Remove bind code path in mount()
    6a5b4c9c2 Remove "bind" code path from diff
    76690706f CI: bump up crun to 1.8.3
    d373ebc4d Properly mount base layers
    ca5605b4a Skip parent layer options on bind mounts
    7f82dd91f Add ReadOnly() function
    157fe6a13 docs: fix typo in comment of ExitStatus.Exit(Code|Time)
    4012c1b85 Remove escalated privileges
    54f8abe55 Use DefaultSnapshotter
    47dd3dcff use t.Fatal if we cannot enable process privileges
    e31bef15f Update continuity
    95687a932 Fix go.mod, simplify boolean logic, add logging
    7a36efd75 Ignore ERROR_NOT_FOUND error when removing mount
    db3279859 Update continuity, go-winio and hcsshim
    00efd3e6d Remove unused function
    dc980b14a Grant needed privileges for snapshotter tests
    feb637f92 Fix layer comparison and enable read-only checks
    36dc2782c Use bind filer for mounts
    d591bb042 Enable TestSnapshotterClient on Windows
    7b36becd2 Run Windows snapshotter through the test suite
    ac30eabbd Fix misspelling of 'Native' as 'Naive'
    639c5799a Add paired 'mount' log for 'unmount'
    8395e3a89 Don't use all-upper-case filenames in snapshot tests
    909730dec Skip tests that do not apply to WCOW on Windows
    469c13997 Ensure mounts are unmounted before leaving the test
    84cc3e496 Unify testutil.Unmount on Windows and Unix
    474a257b1 Implement Windows mounting for bind and windows-layer mounts
    34b07d3e2 Implement WCOW parentless active snapshots and view snapshots
    82ec62b86 fix: cio.Cancel() should close the pipes
    ac84bf7c8 Update sbserver to add noexec nodev and nosuid to /etc/resolv.conf mount bind.
    126ab72fe Keep linux mounts for linux sandboxes on Windows/Darwin
    990199a02 Test to ensure nosuid,nodev,noexec are set on /etc/reolv.conf mount.
    96490734b update runc binary to v1.1.5
    b55dad06a go.mod: github.com/opencontainers/runc v1.1.5
    c89438e83 integration: add container start test using abs runtime path
    3557ac884 Extract image service from CRI
    97064b077 WithRuntimePath uses the TaskInfo.RuntimePath field
    c56f54aa1 devmapper plugin: skip plugin when not configured
    a11e47b48 Use built in atomic.Bool
    87346df54 Defer uid lookups on Darwin
    ae4dbb60d Add noexec nodev and nosuid to sandbox /etc/resolv.conf mount bind.
    1be08b10f ctr/tasks: fix unmarshal the task metrics for cgroups v1
    8322bcb88 Adds a file header
    50b576a94 Adds a dev container and Codespaces docs
    0bbca7f1b Cleanup protobuild config
    daa3a7665 Add `WithReadonlyTempMount` to create readonly temporary mounts
    f48ae2227 fix: Update error message format based on feedback
    3193650f1 fix: 'failed to resolve symlink' error messaging
    14714b94d Fold the output of `crictl info`
    5fdca538d adding cni metadata to the container in the `ctr run --config`
    32d431a7c Update crictl doc
    690ae58ca Update cri-tools version on windows
    5956cdea8 Remove third-party package cri-api
    c011502bd Remove cri v1alpha1 services
    23d288a80 Remove the CriuPath field from runc's options
    62f98a1c1 CRI: Don't always close netConfMonitor channel
    a4d33a784 Remove support for config.toml `version = 1`
    3e87f05b6 Fix image pulling with Transfer service
    c5f1086ad Update docs
    fda5c84bc Update gce contrib to use v2 by default
    8bd82e355 Remove no_pivot when creating container from CRI
    07c2ae12e Remove v1 runctypes
    c50a3ef04 Update Makefile and CI
    ef516a150 Remove runtime v1
    76778aee6 integration: add restart monitor test for paused task
    35a103d32 Remove "containerd.io/restart.logpath" label (deprecated since v1.5)
    08337f356 Pre-splice strings and determine whether it is a file and check criCleanup err.
    e0d9b9663 Fix restarting the paused containers
    86fc1ccab Remove `aufs` snapshotter (deprecated since v1.5)
    50740a1a0 use strings.Cut instead of strings.Split for parsing imageConfig.User
    b39ac5d09 docs: fix typo in comment of plugin.Plugin.Err()
    d835fd2a3 Sandbox: Correct/add some fields to Status()
    d3e856da7 export: add test for WithSkipDockerManifest
    70da5c783 Sandbox: Cleanup shim on Start failure
    406583165 archive: consistently respect value of WithSkipDockerManifest
    727b25403 fix userstr for dditionalGids on Linux

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-01-04 02:52:53 +00:00
Xiangyu Chen
6e69a270b3 lxc: add distrosysconfdir option to make sure the lxc configuration in correct folder
After the commit[1] "meson.build: allow explicit distrosysconfdir", the config of lxc would install
to distrosysconfdir[2], if this value not set, it might set to /etc/sysconfig, that cause lxc-net
configuration cannot be found[3] due to our bb file install the lxc-net to /etc/default folder.

Ref:
[1] 16ebb29dcc
[2] https://github.com/lxc/lxc/blob/main/config/sysconfig/meson.build#L9
[3] https://github.com/lxc/lxc/blob/main/config/sysconfig/lxc.in#L28

Signed-off-by: Xiangyu Chen <xiangyu.chen@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-12-04 21:05:40 +00:00
Jose Quaresma
1db447e785 docker-compose: v2.20.3 -> v2.21.0
- d6f842b0 test: e2e test reliability improvements (#10950)
- 4fbbf201 build(deps): upgrade to compose-go v1.18.3 (#10947)
- 935d72f4 added the dot at the end of the sentence
- 41682acc add support for attributes exposed by `docker ps`
- 1054792b align docker compose ps with docker CLI to support --format
- 19f66918 watch: only allow a single instance per-project
- 186744e0 ci: bump golangci-lint to v1.54.2
- bc9d696f Merge pull request #10922 from thaJeztah/replace_dockerignore
- 6204fb1c logs: fix for missing output on container exit (#10925)
- 5d732010 replace dockerfile/dockerignore with patternmatcher/ignorefile
- 2006f3fe go.mod: github.com/moby/patternmatcher v0.6.0
- 192718c0 go.mod: remove some outdated comments
- c79f67fe otel: add `include` to project up span
- 3b294bfd build(deps): bump github.com/compose-spec/compose-go from 1.18.1 to 1.18.2 (#10915)
- dd34f7a2 include: add experimental support for Git resources (#10811)
- caad7271 up: handle various attach use cases better
- 792afb8d build: use correct values for proxy variables (#10908)
- 150449bb warn user secret uid/gid/mode is not supported

Signed-off-by: Jose Quaresma <jose.quaresma@foundries.io>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-12-04 21:02:28 +00:00
Jose Quaresma
9a1f4d91d9 docker-compose: drop patches from the removed python version
Drop unused patches from the python version removed in 7bd56074.

https://git.yoctoproject.org/meta-virtualization/commit/recipes-containers/docker-compose?id=7bd56074fece944ef9279d87106eb16452ec6338

Signed-off-by: Jose Quaresma <jose.quaresma@foundries.io>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-12-04 21:02:21 +00:00
Chen Qi
0eef35edee docker: remove unnecessary dependencies
The build is not using the codes from these source packages.
Remove the dependencies.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-12-04 20:37:15 +00:00
Bruce Ashfield
62ac94c50d runc-opencontainers: update to 1.1.10
Bumping runc to version v1.1.10-2-gf3446b1e, which comprises the following commits:

    be887840 VERSION: back to development
    18a0cb0f VERSION: release 1.1.10
    b426e9b7 libct/cgroups.OpenFile: clean "file" argument
    8214e634 libct/cg: support hugetlb rsvd
    f8be7009 [1.1] tests/int/helpers: add get_cgroup_path
    1f66027a ci/gha: fix downloading Release.key
    5a5b2cc3 Fix directory perms vs umask for tmpcopyup
    b365458f fix a typo in cloned_binary.c: re-use -> reuse
    8f66c9fb fix two typos
    016b2b42 Handle kmem.limit_in_bytes removal
    11737f55 VERSION: back to development
    ccaecfcb VERSION: release 1.1.9

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-11-24 21:04:15 +00:00
Bruce Ashfield
2e11f93ab4 crun: update to v1.11.2
Bumping crun to version 1.11.2-7-gff2b74f, which comprises the following commits:

    2cc04ea systemd: fallback to system bus
    767ba88 Fix build without libcap
    98d9cc9 systemd, cgroup: configure cgroups before joining them
    ab0edee NEWS: tag 1.11.2
    c965462 src: fix codespell error
    267f2c5 make: fix clang-format
    6e65f5e cgroup: fix crash on cgroup v1 without cpu resources
    57e6f9c terminal: adopt ptsname_r POSIX specified return value
    6674353 fix: remove the redundant header file
    1084f95 NEWS: tag 1.11.1
    4cbc9ad linux: force remount with mounts from parent
    11f8d3d NEWS: tag 1.11
    f8e4f4e cgroup: honor cpu burst
    8b44699 systemd: set CPUQuota and CPUPeriod on the scope
    5a0ede2 systemd, cgroupv1: set the cpuset data also on the scope
    20bb4aa systemd, cgroupv2: set the cpuset data also on the scope
    970d20e tests: fix ioprio test
    3b874c2 linux: append tmpfs mode if missing for mounts
    863008d init: add new function to check file mode
    7c3393c cgroup: always use the user session for rootless
    c60c9f2 Update nixpkgs
    c053c83 NEWS: tag 1.10
    2cc7390 linux: new mount option "copy-symlink"
    33cabe6 tests: fix test name
    9ee3460 linux: fix error propagation
    53c28d9 utils: export safe_readlinkat
    a549ce0 tests: skip ioprio tests as rootless
    1466b7b linux: Fix -Wunused-result compiler warnings when run './configure' only
    bdb95d6 features: export intelRDT status
    e2f9853 update: support update of Intel RDT
    05bc600 libcrun: support update of Intel RDT
    41ae2a2 libcrun: plug Intel RDT support
    52d5faa libcrun: add Intel RDT support functions
    a7a1af9 container: fix early return

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-11-24 21:04:15 +00:00
Bruce Ashfield
c43ce48045 moby: update to v24.0.7
Bumping moby to version v24.0.7, which comprises the following commits:

    05d7386665 daemon: daemon.containerRestart: don't cancel restart on context cancel
    dd37b0b960 vendor: github.com/klauspost/compress v1.17.2
    7058c0d24d vendor: github.com/klauspost/compress v1.16.5
    57bd388582 daemon: overlay2: Write layer metadata atomically
    05d95fd503 daemon: release sandbox even when NetworkDisabled
    2783345d3a daemon/c8d: Use non cancellable context in defers
    a9e20aeaed daemon/containerd: rename some vars that collided with imports
    a8d0a58b24 daemon/containerd: newROLayerForImage: remove unused args
    c981f8aff7 daemon/containerd: log errors when releasing leases
    73814c48df internal: Add compatcontext.WithoutCancel
    535b70e90c Update check-config.sh
    dde5995051 vendor: golang.org/x/net v0.17.0
    8864727bae vendor: golang.org/x/crypto v0.14.0
    81d73e17f7 vendor: golang.org/x/text v0.13.0
    d8c62df0b6 vendor: golang.org/x/sys v0.13.0
    d7a1fcef8f vendor: golang.org/x/net v0.13.0, golang.org/x/crypto v0.11.0
    a22da0d5c4 vendor: golang.org/x/text v0.11.0
    85234039a6 vendor: golang.org/x/crypto v0.9.0
    9702281ba0 vendor: golang.org/x/sys v0.10.0
    01860dc813 vendor: golang.org/x/crypto v0.3.0
    daf599ea0a replace dockerfile/dockerignore with patternmatcher/ignorefile
    1dffa3a814 vendor: github.com/moby/patternmatcher v0.6.0
    58c1c7b8dc Limit OOMScoreAdj when running in UserNS ("Rootful-in-Rootless")
    19039eae0b profiles/apparmor: deny /sys/devices/virtual/powercap
    164a1a0f14 oci/defaults: deny /sys/devices/virtual/powercap

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-11-24 21:04:15 +00:00
Bruce Ashfield
a215d8320e buildah: drop statically linked x86 entrypoint
commit e89fac6c9bf8d0b [Add `buildah mkcw`, add `--cw` to `buildah
commit` and `buildah build`] added a statically linked x86
entrypoint binary

This entrypoint is not currently used in the tested / supported
worflows.

To avoid packaging QA warnings on non-x86 architectures, we remove
the binary during the compilation phase.

If it does need to be rebuilt in the future, buildah's Makefiles
will have to be changed to not test the host for architecture
support, and use the OE defined target arch and cross compilers
instead.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-11-09 06:25:16 +00:00
Bruce Ashfield
5587dd1535 podman: fix documentation build issues
podman commit dfec510b41b5 [go-md2man: use vendored-in version, not
system] removes the shell test for go-md2man, which means our native
executable is not found.

While we could export GOMD2MAN and point it to our sysroot version
(${RECIPE_SYSROOT_NATIVE}/usr/bin/go-md2man), we could run into the
issues with formatting that the podman commit is trying to avoid.

If we pass our build host architecture to the build, it will be
used and the executable created as part of the compilation.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-11-09 05:35:44 +00:00
Kai Kang
710f858012 umoci & buildah & podman-tui: mark incompatible with mips
Since the runtime dependency skopeo has been marked incompatible with
mips, mark for umoci accordingly.

buildah and podman-tui rdepends on podman which has been marked
incompatible with mips, so mark for them too.

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-11-06 16:21:12 +00:00
Leonard Anderweit
28e044b98e podman-compose: Actually update to v1.0.6
Commit 1fc1b193 (podman-compse: update to v1.0.6) states an update to v1.0.6
but does not change the SRCREV. Fix this by using the correct SRCREV of v1.0.6.

Fixes: 1fc1b193 (podman-compse: update to v1.0.6)

Signed-off-by: Leonard Anderweit <l.anderweit@phytec.de>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-11-06 16:21:12 +00:00
Bruce Ashfield
d9af8d1514 podman: update to 4.7.1
Bumping libpod to version v4.7.1-6-g85b5f5723, which comprises the following commits:

    d1cb93d79 rtd: implement v2 build file
    8d045d4c9 Adjust to path name change for resolved unit
    eb5b5dbc8 Switch version to 4.7.2-dev
    ef83eeb9c New version: v4.7.1
    cc5acabf0 Update RELEASE_NOTES.md for v4.7.1
    456450438 compat API: speed up network list
    a2efda96d inspect: ignore ENOENT during device lookup
    f931f08a7 test/system: --env-file test fixes
    297a66c30 Revert "feat(env): support multiline in env-file"
    46a85e054 Revert "docs(env-file): improve document description"
    6afddf430 Revert "fix(env): parsing --env incorrect in cli"
    c5ca7e5fc [CI:DOCS] update swagger version on docs.podman.io
    51ee25d3f Fix locale issues with WSL version detection
    4d15c88a9 switch version to 4.7.1-dev
    073183fe1 Bump to v4.7.0
    44f727fb0 [CI:DOCS] v4.7.0 RELEASE_NOTES update
    2d32314d2 rpm: remove gvproxy subpackage
    a2697c028 packit: tag @containers/packit-build team on copr build failures
    54ce0ca7c specgen, rootless: fix mount of cgroup without a netns
    d2f9af717 pass --syslog to the cleanup process
    133e3a4f2 fix --authfile auto-update test
    2c62815e1 version: switch back from -rc1 to -dev
    7845dd175 New pre-release: v4.7.0-rc1
    49f76e95e [CI:DOCS] Update release notes for v4.7.0-rc1
    fa6f94001 Cirrus: Update operating branch
    0728a10c6 Move podman build opts to common file
    8a9f778e2 Add ability for machine rm -f for WSL
    919dce131 Plumbing to run machine tests with hyperv
    ade0c4932 CI: trace setup and runner scripts
    c37443e8b Bump to Buildah v1.32.0
    9b36f334d [CI:DOCS] bump release notes on main with the latest release
    cae110f8b fix(deps): update module github.com/opencontainers/image-spec to v1.1.0-rc5
    4a2a423df Add --filter pod= autocompletion
    075cf2254 e2e: ExitCleanly(): manual test fixes
    db5adca73 e2e: continuing ExitCleanly(): just the replacements
    c689fb4a5 Fix some spelling and formatting
    522e0f43f Add support for Ulimit in quadlet
    b1e3e8d97 Run codespell on code
    6b7f718b4 wire in new buildah build options
    f9aba28ca make golangci-lint happy
    c1b6effac add !remote tag to pkg/specgen/generate
    3acee29cf pkg/specgen: do not depend on libimage for remote
    2c2299ad8 bump buildah to latest
    bf86ed72c [CI:DOCS] restart.md: migrate to container unit
    304b22729 fix(deps): update module k8s.io/kubernetes to v1.28.2
    4ed3273f6 Add support for PidsLimit in quadlet
    70560f916 Add DNS fields to Container and Network unit groups
    777b5efa4 [CI:DOCS] update API docs version list
    7b9114023 Try to fix broken CI (gvisor-something)
    df011f437 e2e: more ExitCleanly(): manual test fixes
    cb1cb338c e2e: more ExitCleanly(): dumb string replacements
    62ac96e12 e2e: create_test: use ExitCleanly()
    b0f77acd1 e2e: diff_test: use ExitCleanly()
    5920bfa2e The `podman init` command cannot modify containers.
    639a1a029 bump c/common to latest main
    806c5de12 Podmansh: use podmansh_timeout
    eefaa512a e2e: more ExitCleanly(): low-hanging fruit
    9b17d6cb0 vendor: update checkpointctl to v1.1.0
    cdcf18b86 kube: add DaemonSet support for generate
    75b4679a7 vendor of containers/(common, storage, image)
    19bd9b33d libpod: move oom_score_adj clamp to init
    4f017236e e2e: commit_test: use ExitCleanly()
    3a4be5e90 e2e: container_clone_test.go: use ExitCleanly()
    8cb14e54a e2e: use ExitCleanly() in cleanup_test.go
    925794c6a Ensure HC events fire after logs are written
    65a64da27 [CI:DOCS] podman-systemd.unit: fix equivalents
    d9a85466a Add support for kube TerminationGracePeriodSeconds
    5eb0a53a0 Update podman-kube-play.1.md.in
    c2cd93cdc Split up alt binaries to speed up build
    7bf9f302a Switch installer task to EC2
    fbbad0439 pod: fix duplicate volumes from containers.conf
    0c75eac63 tests: add test for pod cgroups
    b8f6a12d0 libpod: create the cgroup pod before containers
    331b3c216 cmd, specgen: allow cgroup resources without --infra
    83334fb4e specgen: allow --share-parent with --infra=false
    5de8f4aba libpod: allow cgroup path without infra container
    5121c9eb0 libpod: check if cgroup exists before creating it
    38209ef49 libpod: refactor platformMakePod signature
    627ac1c96 libpod: destroy pod cgroup on pod stop
    9a347619d utils: export MoveUnderCgroup
    556db46a6 libpod: refactor code to new function
    65bddfcd2 e2e: use ExitCleanly() in checkpoint tests
    479680232 [CI:DOCS]Remove use of --latest|-l from tutorial
    afeab39d1 CI test runner: upgrade tests rely on system tests
    59bd6a74a run --rmi: "cannot remove" is a warning, not an error
    70cf9740f StopContainer: display signal num when name unknown
    6f913f5f3 URGENT: fix broken CI
    b83485022 Add support for kube  securityContext\.procMount
    589867d71 podman: don't restart after kill
    2d7d8d1d1 Tmpfs should not be mounted noexec
    c2575f726 sys tests: run_podman: check for unwanted warnings/errors
    1211518e8 chore(deps): update dependency setuptools to ~=68.2.0
    465150f10 e2e: use ExitCleanly() in attach & build tests
    27495981c Some distros do not default to docker.io for shortname searches
    30abd7f1a security: accept empty capabilities list
    c32cfb1d0 systests: random_free_port: fix EADDRINUSE flake
    a5798e9f5 fix(deps): update module github.com/cyphar/filepath-securejoin to v0.2.4
    dbfc3e7e0 Restrict fcos_test to amd64, arm64
    7b2fc5f8d fix(deps): update github.com/containers/libhvee digest to 56fb235
    0a913d578 fix(deps): update module github.com/docker/docker to v24.0.6+incompatible
    f9fd40221 fix(deps): update module golang.org/x/tools to v0.13.0
    71549c642 Ignore spurious container-removal errors
    e5bf0f96d fix(deps): update module golang.org/x/net to v0.15.0
    fdf694fcf systests: manifest zstd test: lots of tiny cleanups
    9730c0373 vendor: update github.com/opencontainers/runc to main
    e825bd5d5 [skip-ci] Update actions/checkout action to v4
    8b4a79a74 linux, rootless: clamp oom_score_adj if it is too low
    681b6db3f machine: increase max number of inotify instances
    302d15334 fix(deps): update module golang.org/x/term to v0.12.0
    f094884c1 Remove redundant nil checks in system connection remove
    17037af48 fix(deps): update module golang.org/x/text to v0.13.0
    1d51cd14a fix(deps): update module golang.org/x/sys to v0.12.0
    f542d21a7 fix(deps): update github.com/containers/libhvee digest to 2bf7930
    d4fedb288 docs(readme): fix a broken link
    50cd072bf [CI:BUILD] Podman FCOS image from main
    58a0b7ac8 Update golang.org/x/exp digest to d852ddb
    fe7bafb83 Add port forwarding and gvproxy machine test
    702709a91 libpod: do not parse --hostuser in base 8
    13342e503 fix: default typo
    3a6fc8d2b Add Japanese locale and translation of index
    39c5b7fac remove rh.container.bot@gmail.com
    a62abfe3d Tweaks and cleanups to prepare hyperv for CI
    a0738e7e6 system tests: housekeeping: various small fixes
    4082b67f6 CI: e2e: first use of new ExitCleanly() matcher
    6cbd17c0f CI: e2e: new ginkgo matcher, ExitCleanly()
    da1246d58 CI: e2e: fetch the standard system-test image
    d20b5869f kube play: fix pull policy
    18d35b612 Fix gidmap command in example
    e66c04c1f vendor containers/common@12405381ff
    b95ae3b4a manifest,push: support add_compression from containers.conf
    1085177fe hyperv ignition: use gvforwarder instead of vm
    2a8e6acec Set remote username earlier for hyperv
    26cefcbf9 Added an additional troubleshooting problem and solution
    a3c2d6ad2 Remove a dependency on libimage from pkg/bindings
    f1c24df4f Rename parameter in pkg/bindings
    259ab8594 Remove a dependency on libimage from pkg/api/handlers
    4cac1d3bc Don't re-inspect an image
    99834947d Cirrus: Remove multi-arch podman image builds
    91b8bc7f1 uid/gid mapping flags
    18c2a2be8 [DOC] Clarify default behaviour on uidmap
    60e3b5ef1 Update containers/common to latest
    fe3c4562f update libhvee
    1b45fd723 /_ping handler: return OSType http header
    2dbb0b096 e2e: fix race condition (kube play + logs)
    fe11db1e8 Update module github.com/vbauerster/mpb/v8 to v8.6.0
    7ef97fa49 Kube - support List documents
    346e5e52e kube down/play --replace: handle absent objects
    0938ee189 push, manifest-push: --force-compression must be true with --compression-format
    4b347609d oci: print stderr only after checking state
    461230c49 Updated docs to reflect pod spec sysctls support added in v4.6
    b8146a8a2 [CI:BUILD] Packit: Disable unexpected journal message check for cockpit-podman
    a6f2f5854 [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras
    b6b300c79 Update machine init/set tests
    da81bc13a Add rootful status to machine inspect
    d3618719b Dedup and refactor image acquisition
    adf34cbd7 Share podman sock bindings with other WSL distros
    db95e678a Fix user-mode validation check
    d898ae7f9 system tests: try to fix sdnotify flakes
    ecf9f9fd8 Cirrus: Disable only hello multiarch build
    f32e954b8 Set StopTimeout for service-container started under podman kube play
    d2ec127c1 Set StopTimeout for compat API if not set by client
    6f284dbd4 podman exec should set umask to match container
    2c5c2d213 [CI:BUILD] Packit: run cockpit-podman tests in PRs
    52ed7fce2 Add infra-name annotations to kube gen/play
    a5f6a4a3b kube: notifyproxy: close once
    7a94f8c12 system service: unset NOTIFY_SOCKET
    638f994c2 Update module k8s.io/kubernetes to v1.28.1
    7c9c96981 API attach: return vnd.docker.multiplexed-stream header
    60e58f059 test/apiv2/60-auth.at: use `doesnotexists.podman.io`
    61dd7f80c e2e tests: use registry:2.8.2 (was 2.8)
    243f365aa create apiutils package
    c5b4eb943 api docs: document stream format
    70f77efef Revert "Remove `hello` multi-arch image build"
    82bd56be7 manifest-push: add support for --force-compression
    469ace091 push: add support for --force-compression
    202cc433a Update module github.com/onsi/ginkgo/v2 to v2.12.0
    7e0130f75 Remove `hello` multi-arch image build
    1b0e64a10 hack/perf/system-df.sh: add `df` benchmarks
    148d95d8d Expand env variables for cmds/entrypoint with format $(ENV)
    e092f887f vendor c/storage@6902c2d
    c416e4576 Ignore the resource limits on cgroups V1 rootless systems
    9e680cbc6 Fixups for stopping gvproxy
    21c9517b5 Revert "GHA: Closed issue/PR comment-lock test"
    f0e8e79c9 GHA: Closed issue/PR comment-lock test
    5477fd38a GHA: Add workflow to lock closed issues/PRs
    75ce47347 [CI:DOCS] update auto-update docs
    85d0df330 chore(deps): update dependency containers/automation_images to v20230816
    bc35e28c0 fix(deps): update module github.com/google/uuid to v1.3.1
    3d00744d2 libpod: sum per-interface network stats for FreeBSD
    5eee8825e Set default Umask for `podman kube play`
    ef8f4db81 [CI:BUILD] rpm: spdx compatible license field
    e9539768c chore(deps): update dependency golangci/golangci-lint to v1.54.2
    63a8926e9 Implement automatic port reassignment on Windows
    45ce4834a Add support for ramfs as well as tmpfs in volume mounts
    bdc304058 Validate current generation of WSL2 with user-mode-networking
    67756ac60 use container restart policy if user specifies one
    0772d8ddb Stop gvproxy on hyperv machine stop
    50136ea86 [CI:BUILD] rpm: depend on man-db
    36e09f18b Update machine list test
    8b2990131 Update machine start tests
    c3dbfa9a1 Update machine rm tests
    c726cf810 libpod: improve conmon error handling
    ed1f514d5 cirrus setup: install en_US.UTF-8 locale
    8f85aaf07 fixup "podman logs with non ASCII log tag" tests
    27b41f087 libpod: use /var/run instead of /run on FreeBSD
    9b4f1cdb9 cirrus/lib.sh: extend env to passthrough at start for locale work
    ff66f31dd libpod: correctly pass env so alternative locales work
    29c298856 cgroups_linux: use SessionBusPrivateNoAutoStartup
    362747cfa podmansh man page UID=$(id -u lockedu) is not allowed
    e38cf33a6 CI: systests: remove pasta ICMP tests
    7103fdb3f podman.1.md: Fix formatting of exit code 127, clarify wording of `exit code` example.
    896cab612 document available secret drivers
    53dd37cc4 pkg/specgen: add support for read-only root on FreeBSD
    d5841ed52 add --module flag
    6a3f09e8a Update dependency setuptools to ~=68.1.0
    1d5890bcd Add riscv64 architecture to the cross build target
    252f51de8 GetFcosArch add `riscv64` arch
    98e7d7af0 Update WSL backend to be compat with FCOS defaults
    9e14e3ebe enabled hyperv image downloads
    3e2e360b9 fix(deps): update module github.com/containers/ocicrypt to v1.1.8
    abd35d4d3 [CI:DOCS] Fix git build example in build page
    0c52d1004 CI: e2e manifest_test: use image from quay
    31dc42224 Cirrus: Remove EC2 experimental flag
    4c7546cb3 sphinx: skip options include dir
    345b9b029 Update rootfs.md: Fix formatting and wording of idmap option
    f33b01b73 fix: Docker API compatible bool deserialization
    4cb2d48ca Revert "compat,build: pull must accept string"
    68bd81470 Add missing verb in machinectl example
    78d6cd4c9 [CI:DOCS] Update Release Notes and Release Process
    b6349017a chore(deps): update dependency golangci/golangci-lint to v1.54.1
    4b80492bd fix podman top missing output flake
    5908999e6 New partial-line test is flaking
    555b4f930 [CI:BUILD] Packit: add back fedora-eln targets
    f0dac3677 Cirrus: Prune defunct job + fix noop alias
    1947f035c Bump bundled gvproxy to 0.7.0
    df28df1ae systests: tests for --env and --env-file
    bcebcad1f Update system connection add & remove
    310f971fc Add tests for podman farm
    dce3ef3c4 Add podman farm update command
    44a704dfc Add podman farm remove command
    59a8140f1 Add podman farm list command
    6fcdf1a19 Add podman farm create command
    1d5ef29f0 Add podman farm subcommand
    23d5b5008 CI: e2e: add delay before podman logs or journalctl
    2951316b2 Add completion for Farms
    b672ddc79 Vendor c/common changes
    3963c5639 chore(deps): update dependency golangci/golangci-lint to v1.54.0
    a55c2636d file logger: fix podman logs --tail with partial lines
    7ce654fea fix(env): parsing --env incorrect in cli
    4c4bc0922 Update docker.io/library/golang Docker tag to v1.21
    f55c48ad3 podman stop --cidfile missing --ignore
    7ef03517f Skip podman exec cannot be invoked on Debian
    95ceacefb Re-enable checkpoint test on Debian SID
    c193dbd94 Require a non-generic reason for non-Fedora skip
    d79e3a23d CI FIXME removal/update.
    5ec856652 Update dependency containers/automation_images to v20230807
    7988dd82c [skip-ci] Update dawidd6/action-send-mail action to v3.8.0
    8a410784b [CI:DOCS] fixed couple typos in build docs
    282594e58 Stop timer in function waitPidStop
    7c0bccaf7 packit: Build PRs into default packit COPRs
    afaeedef7 Add support for host-gateway
    2de22ebf0 Ensure volumes-from mounts override image volumes
    03d7a5120 Minor: Include shasums in GHA workflow artifacts
    d63ac0652 Minor: Add important comment to windows GHA workflow
    9d7fe4e90 Minor: Update/fix dry-run input descriptions
    518daef72 [CI:DOCS] Quadlet - provide more information about network files
    819129b0d man-page xref: check for duplicate entries
    39641482c cp: close temporary file on error path
    018fdb48e Makefile: work around the lack of 'man -l' on FreeBSD
    0b7769fda Update module golang.org/x/net to v0.14.0
    ec5a9b9cc libpod: fix a crash in 'kube generate' on FreeBSD
    23c5890f2 remove temporary files when copy [NO NEW TESTS NEEDED]
    fab62f816 Update module golang.org/x/sys to v0.11.0
    b46d72fec [ci] Remove the podman socket in remove_packaged_podman_files()
    706c51b52 [ci] Correct the podman systemd file names
    dd4f47dd9 Always show RemoteSocket.Exists in json
    fc7c6efd3 Fail if ssh key exists
    69e883493 Fix regression for hyperv
    803a49da4 [CI:BUILD] Makefile: rpm target generates correct version
    1a63c1b23 Fix nits in #19480
    1e5453943 Add support for passing container stop timeout as -1 (infinite)
    d50054f1e pkg/specgen: Add device support for FreeBSD
    f5058f148 [CI:DOCS] man: remove duplicate entry .LastUp
    a8974d4a3 CI: e2e: remove useless test
    53d44a65e Check tty flag to set default terminal in Env
    62a22c5d6 Run codespell on code
    44f159ed3 Deprecate podman generate systemd
    346f9cb4e manifest/push: add support for --add-compression
    8ccda1ee8 [CI:DOCS]Update Release Notes
    b91599742 CI: sys: quadlet %T test: do not rely on journal
    4d69f0146 GHA: Support testing build/sign workflows
    15f35d354 Remove unnecessary backslashes
    18e75daa5 [docs] Use code blocks for commands in podman-completion
    f3ebd798c Make podman run --rmi automatically set --rm
    8b7701f52 machine: QEMU: recover from failed start
    49b8b971a vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a
    bfd2a8cad secret: add support for `--ignore` with rm
    21ebe0e90 Move `writeConfig` logic to shared function
    597ccff0b Move some logic of `setRootful` to a common file
    98cf8462a move `removeFilesAndConnections` to a common file
    75a8f13c4 Move `waitAPIAndPrintInfo` to common file
    55c7b5cec Move `addSSHConnectionsToPodmanSocket` code to shared file
    0489d3aa6 Update module golang.org/x/net to v0.13.0
    d74c225f4 chore(deps): update dependency containers/automation_images to v20230726
    27d79e1fc Skip pasta local forwarder test on debian SID
    b69cd8d84 Skip broken/flaky blkio-weight test
    822f2f495 Skip tarball re-inport test in rawhide for CI
    851cd9cca Cleanup CIDFile on podman-remote run --rm command
    a237c3f46 CI: e2e: remove workaround for missing login file
    42ad0c6e7 vendor: bump c/image and c/common
    5b7dce8a3 Add support for confined users
    78b850c48 Cirrus: Temp. disable rawhide validation task
    def70012b Limit git-validation to 'short-subject'
    33b8c451e Fix up man page and add test on globs
    850482b31 Move alternate image acquisition to separate function
    906af5bbc Move `getDevNullFiles` into a common file
    89f1fdc7f Update github.com/digitalocean/go-qemu digest to 2e3d018
    d6847b19c Convert QEMU functions to methods with documentation
    6930f39a6 Update docs/source/markdown/podman-build.1.md.in
    e1114f03c do not redefine gobuild for eln
    39341f283 Set default userns from containers.conf file
    4f1f88d7c Mention TimeoutStartSec in quadlet man page
    ada71889c inspect with network=none show SandboxKey netns path
    93f4cc1b5 [CI:DOCS] GHA: Use stable go for Mac/Win builds
    ff7d287fc Breakup AppleHV machine funcs
    64873e322 Codespell fixups
    acbe7703f Update docs/source/markdown/podman-stats.1.md.in
    0b7157e3b CI: e2e: reenable containerized checkpoint tests
    c67ef7c1a docs(env-file): improve document description
    4ee31dc37 Don't log EOF error when using podman --remote build with an empty context directory.
    f2794f9a8 API: kill: return 409 on invalid state
    170a78631 feat(env): support multiline in env-file
    19deb6a34 Adds documentation to new functions that were added
    481143e58 `startHostNetworking`: get DevNull files
    13da82466 `Remove`: remove network and ready sockets from registry
    d896431b2 `Remove`: remove files and connections
    32265e1f6 `Remove`: collect files to destroy
    381b103dd `Init`: read and split ign file
    aa6827a67 `Init`: write ign config
    cc30639d7 `Init`: add network and registry socks to registry
    78d3b549c `Init`: add SSH conns to podman sock
    630e7ba39 Improve the description of fields in podman-stats man page
    22a8b6886 make /dev & /dev/shm read/only when --read-only --read-only-tmpfs=false
    663fe9446 Mention no comment lines in Containerfile.in podman-build man page
    e973d15c3 [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
    837bc2568 Fix HyperV loadMachineFromJSON function name
    416a471ee machine: QEMU: lock VM on stop/rm/set
    bb57c1631 libpod: add 'pod top' support on FreeBSD
    f592c33fb [CI:DOCS] Build and Sign Mac Pkginstaller
    f540bbffa Make sure users changes --authfile before checking
    8757fe88a github: add issue type as link to podman github discussions
    3523b9b05 Break QEMU `config.go` code into its own functions
    c341a0ffe machine: QEMU: lock VM on start
    afe8d5d84 libpod: fix 'podman kube generate' on FreeBSD
    0fefcf8a4 Add glob support to podman run/create --mount
    d6815da8c kube: add DaemonSet support
    239a5b64a Fix artifacts script after removal of msitools msi build
    e335a66a9 System tests: quadlet: fix race in %T test
    d6a32a3da If quadlets have same name, only use first
    db0ba9b25 Add support for mounts listed in containers.conf
    6dda21984 Update vendor of containers/common
    33891e8e9 System tests: add test tags
    5ba055937 [CI:DOCS] socket_activation.md: increase socat timeout
    dfec510b4 go-md2man: use vendored-in version, not system
    a92bb3219 CI: use different TMPDIR on prior-fedora
    6894e2031 system tests: authfile-exists: minor cleanup
    d70f15cc0 start(): don't defer event
    de122bb44 Fix: use --all in podman stats to get all containers stats
    349d775de Verify authfile exists if user specifies it
    e0ef23955 libpod: don't generate errors for createTimer etc.
    0cfd12786 add "healthy" sdnotify policy
    cbc96a7b4 Remove LICENSE and general doc files that are installed by the main package
    37f0e9620 Add missing `
    2f21df7b3 Remove legacy msitools based msi installer
    ac212605c Remove any quotes around distribution id
    e596b17fb add a podman-compose command
    eee2817de pkg/specgen: Don't crash for device spec with...
    d2796c6c1 fix(deps): update module github.com/docker/docker to v24.0.5+incompatible
    f4fbd6fd0 Update vendor of containers/(storage,image)
    d4fc66af9 Clean up /var/tmp/ when using oci-archives when creating  containers
    49257a3c5 [CI:BUILD] RPM: separate out gvproxy for copr and rawhide
    b57091ac9 Reduce qemu machine function sizes
    baf30e612 [CI:DOCS] migrate socket_activation.md to quadlet
    7314569cb [CI:DOCS] Update kube play volume support
    b5ce0ab2d Fix language, typos and markdown layout
    cb5450af7 [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet debug
    0bb73bf55 Add note on debugging quadlet unit files
    d4cfc498d Remove unnecessary use of the word "please".
    a6a207673 libpod: fix FreeBSD 'podman-remote top' default behaviour
    709beb6c0 fix(deps): update module github.com/onsi/gomega to v1.27.9
    3e534eff9 Add support for ShmSize to quadlet
    4b9f670ca Quadlet system test - force journald log driver for short lived containers
    731bd7d94 fix(deps): update module github.com/containers/libhvee to v0.4.0
    413552e10 quadlet recursively scan for unit files
    ce736413b Ensure that we appropriately warn that TCP is insecure
    558a70262 systests: quadlet: fixes for RHEL8
    8d190704a Quadlet - Allow setting Service WorkingDirectory for Kube units
    24bf6fc24 Quadlet system test - do not rely on journalctl in kube file tests
    3d6bc2f86 Fix markdown in docs for podman-network-create
    11ffea313 Man pages: check for corrupt tables
    1d14bb7a8 quadlet systest: fix broken tmpdir references
    e55e128fc Add `since` as valid filter option for `volume` subcommands
    6df17332b Podmansh: Better error, increase timeout to 30s
    96241159a Fix multiple filter options logic for `podman volume ls `
    00a5b0709 Add bash-completion for podman inspect
    3b6343202 Fix windows installer
    d7e25e14a Add missing reserved annotation support to `play`
    d2862c7dd Avoid progress hang with empty files
    5c0912b07 Revert the usage of `home.GetConfigHome()`
    5aa52659b Fix bug report issue template README link
    47997857f Replace error check for non-existent file
    8febb6aa1 Emergency gating-test fixes for RHEL8
    d8d600b1d Add progress bar for decompress image
    46058cfed refactor: move progressbar to a function
    ca9874ab7 Use pkg/homedir to get the home config directory
    7fb17ae78 fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
    a224ff731 Should be checking tmpfs versus type not source
    9e60f3ec5 fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
    b4ffbcdfd Enabled arm64 arch for podman applehv provider
    4e4078dbb [CI:BUILD] Packit: remove pre-sync action
    d0602e8f7 Add `--podman-only` flag to `podman generate kube`
    13a950016 Update vendor containers/(common, buildah, image, storage)
    f256f4f95 Use constants for mount types
    310a8f103 libpod: use define.TypeBind when resolving container paths
    1e9410094 Tests: remove/update obsolete skips
    a3bbc3a2c Fix trust not using local policy file
    0997cf012 Fix `podman container prune` docs for `--filter`
    a8d8c9497 Add more tests for liveness probes with default hostname & named ports
    383d683f8 docs: podman-build --network add slirp and pasta
    5e64cbf35 docs: podman run --network mention comma separted names
    1443e2918 Podman machine AppleHV pass number 3
    315a7887a Makefile: `package` -> `rpm`
    85d936133 network create: document --internal better
    e43127e0b pkg/specgen: fix support for --rootfs on FreeBSD
    8c16322a8 machine start: qemu: wait for SSH readiness
    12dc546fc [CI:BUILD] Packit: downstream task action fix
    2b2c4453f Fix container errors not being sent via pod removal API
    6ec261e7a Add missing return after utils.InternalServerError()
    d1950869a Update cmd/podman/login.go
    cce8501a5 [CI:DOCS] Reformat and reorder table with --userns options
    d497eb369 Add secret support to podman login
    2a9b9bb53 netavark: macvlan networks keep custom nameservers
    c6b5b9a02 remote: fix podman-remote play kube --userns
    441af003a fix(deps): update container-device-interface to v0.6.0
    656ad760f go mod: no longer use 1.18
    aeef403cd fix(deps): update module github.com/containers/libhvee to v0.3.0
    6fd4ae6d2 chore(deps): update module github.com/gin-gonic/gin to v1.9.1 [security]
    0dcfe6e06 Run codespell on code
    3ad55f48b system service: unset listen fds on tcp
    f1c68b79e add hostname to network alias
    b6ec2127b libpod: set cid network alias in setupContainer()
    4e96686e9 AppleHV enablement pass #2
    72a1857e4 e2e: Fetch the correct user name
    7b54fd84e Add `--no-trunc` flag to maintain original annotation length
    600de05e3 Fix TCP probes when the optional host field is not given
    ac3a115c3 Add support for using port names in Kubernetes health probes
    4494cefbc Fix: cgroup is not set: internal libpod error after os reboot
    932fae402 Allow setting volume and network names in Quadlet
    427b959a1 pasta tests: automatically determine test parameters
    97fd03ccd test/e2e: wait for socket
    a69194b02 manifest inspect: support authentication
    70428baef api: fix slow version endpoint
    f8213a6d5 libpod: don't make a broken symlink for /etc/mtab on FreeBSD
    499b8d13c CI: remove build without cgo task
    42ea0bf9c libpod: use io.Writer vs io.WriteCloser for attach streams
    597ebeb60 top: do not depend on ps(1) in container
    3f8ee70d0 make --syslog errors non fatal
    dbec2b5aa api: fix doc for default ps_args
    1b7eb44d3 Fixes typo in the path where quadlet looks for files
    efefd8cf5 Add --replace flag to podman secret create
    eec438222 [CI:DOCS] uidmap man pages: fix corrupt italics
    8d24e2838 [skip-ci] Update github/issue-labeler action to v3.2
    f9077689e [CI:DOCS] podman-system-service.1.md: document systemd usage
    dd16661b1 fix(deps): update module github.com/docker/docker to v24.0.4+incompatible
    65136521e fix(deps): update module github.com/docker/docker to v24.0.3+incompatible
    fa654e985 Use bytes size consistently instead of human size
    dee94ea69 bugfix: do not try to parse empty ranges
    9e4045768 [CI:BUILD] Packit: fix pre-sync action for downstream tasks
    531fb21d0 fix(deps): update module golang.org/x/tools to v0.11.0
    ab2fa45ad fix(deps): update module golang.org/x/net to v0.12.0
    459b1578c fix(deps): update module golang.org/x/term to v0.10.0
    99f93d55c e2e: fix two toolbox flakes
    fc5aa9c9c test/e2e: use GinkgoT().TempDir() over MkdirTemp()
    ea8992cb4 test/e2e: use random ImageCacheDir
    17a06d343 test/e2e: remove RHEL7 workaround
    bc22aefce test/e2e: remove unnecessary code in SynchronizedAfterSuite
    ff7790038 test/e2e: do not use /tmp for podman commands
    db7cb1dbf test/tools: vendor ginkgo v2.11
    c20612bab test/e2e: write timings directly to file
    a0b765552 machine start: qemu: adjust backoffs
    d874790bc auto update: fix usage of --authfile
    ba1355b23 system tests: refactor registry code
    94b321337 fix(deps): update module golang.org/x/text to v0.11.0
    644f7cd9b pkg/specgen: properly identify image OS on FreeBSD
    a3a62275c libpod: use new libcontainer BlockIO constructors
    2d68c3add [CI:BUILD] Minor: Don't confuse osx-debugging
    5aabc5088 [CI:DOCS] Better document the default value of --userns
    e4644c3cb Cirrus: build FreeBSD binaries in a VM
    92fc0f481 Makefile: add support for building freebsd release tarballs
    4a5396b46 [CI:DOCS] uidmap man pages: fix corrupt tables
    5a8e092a2 fix(deps): update github.com/crc-org/vfkit digest to c9a4b08
    d0359fcca fix(deps): update module github.com/containers/buildah to v1.31.0
    300eb36b4 fix(deps): update module github.com/opencontainers/image-spec to v1.1.0-rc4
    94e59bd2f Use /proc/self/gid_map as intended, not uid_map
    a16488f89 fix(command): ignore `--format` in `podman search --list-tags`
    9fb2f8e10 podman machine start: fix ready service
    8408ad498 Makefile: don't rely on the non-standard -r flag for ln
    39624473b pasta: Create /etc/hosts entries for pods using pasta networking
    fe0de8b9f fix(deps): update module github.com/containers/libhvee to v0.2.0
    2393fe453 pasta tests: add sanity check for test name vs function
    4da3e47b6 pasta tests: cleanup + 1 new test
    43b9426fc cmd/podman, pkg/domain/infra: sockets should live in /var/run on FreeBSD
    e3f2a97d1 cmd/podman/system: add API server support on FreeBSD
    0d7da5c0b [CI:DOCS] Document support of pod security context IDs
    f64a1a1cc rootless: use default_rootless_network_cmd config
    e4efd709d Revert^3 "pasta: Use two connections instead of three in TCP range forward tests"
    17cd5aecb pasta: Workaround occasional socat failures in CI
    13c7d05cc pasta: Remove some leftover code from pasta bats tests
    bc58dae36 Bump c/image to v5.26.0, c/common 0.54.0
    2cb549339 fix(deps): update module github.com/coreos/stream-metadata-go to v0.4.3
    bf60bb073 Display secret to user in inpspect
    448e01566 [CI:BUILD] RPM: Fix koji and ELN issues
    8fb719a9e e2e: systemd test: major fixes
    865d77e94 pkg/specgen: add support for 'podman run --init' on FreeBSD
    74b4615aa Bump version after v4.6 branch cut
    b6e636cbe Remove 'inspecting object' from inspect errors
    fe8355be7 pasta: Fix pasta tests to work on hosts with multiple interfaces
    d15cca024 [CI:DOCS] fix command incorrect in windows
    bcb89fc8b Fix readonly=false failure
    609c47ae6 pkg/specgen: Add support for Linux emulation on FreeBSD
    cf9ebcddf Fix up podmansh man page
    05eb3e6f1 Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
    f5cc0487e Fixes for vendoring Buildah
    0f4c86e26 vendor in latest buildah
    6eaf8a271 tests: fix "Storing signatures" check
    b80fd54a5 update c/image and c/storage to latest
    eeb7aeb49 Kube quadlets can support autoupdate as well as containers
    2160a114c debug tail 800 lines flake
    dd81f7ac6 Pass in correct cwd value for hooks exe
    227c07aeb specgen: honor --device-cgroup-rule with a new user namespace
    0220f3338 specgen, rootless: raise error with --device-cgroup-rule
    db37d66cd make image listing more resilient
    17a18b16c Update module google.golang.org/protobuf to v1.31.0
    bc5269f18 Trim whitespace from unit files while parsing
    516034215 Re-organize hypervisor implementations
    ba3da15e0 play.go: remove volumes on down -f

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-11-06 16:21:12 +00:00
Bruce Ashfield
58a5300e7a kubernetes: update to 1.28.2
Bumping kubernetes to version v1.28.2-44-ge3b5e621f07, which comprises the following commits:

    b5e28b1cdd6 [go] Bump images, dependencies and versions to go 1.20.10
    1cd2ac99542 .: bump golang.org/x/net to v0.17.0
    cecc0e93916 Mark a volume as uncertain-attached after detach error
    15101d92e18 Unit & integration tests for OpenAPIV2 AddUpdateAPIService
    9f4011446a2 Fix 120878 - Refactor cacheabledownloader so handler can be updated and fix AddUpdateAPIService to update handler
    489c08ddf47 Fix 120739 - Prevent AddUpdateAPIService from blocking on updating spec
    d35a00e218c Fix 120758 - prevent cache Load on uninitialized spec
    985ef265511 Add nil checks for hpa object target type values
    88669d0a23b Make a certain ipv4-vs-ipv6 config error non-fatal, for backward compat
    84a3ad3573b [go] Bump images, versions and deps to use Go 1.20.9
    63fcac91c42 Only configure swap if available on node
    07a74666cb2 Use local isCgroup2UnifiedMode consistently
    57bbc335fd7 cronjob controller: ensure already existing jobs are added to Active list of cronjobs
    8ea9b219c69 reintroduce resourcequota.NewMonitor
    794d56966e8 change rolling update logic to exclude sunsetting nodes
    a08ec1215fe vsphere: adapt to govmomi bump
    ef63f36ff82 .: bump govmomi to v0.30.6
    aba7c443072 Increase range of job_sync_duration_seconds
    bcaa53c9c10 sync Service API status rest storage
    a68748c7cd0 Update CHANGELOG/CHANGELOG-1.28.md for v1.28.2
    89a4ea3e1e4 Release commit for Kubernetes v1.28.2
    0c6a0c3f69b kubeadm: remove reference of k8s.io/kubernetes/pkg/apis/core/v1
    47507f9f022 fix race on etcd client constructor for healthchecks
    7d33fba21a8 e2e pods: fix WaitForPodsResponding retry
    2480fce67f5 kmsv2: reload metrics bug fix backport
    110a6fe8a9f scheduler: start scheduling attempt with clean UnschedulablePlugins
    0aebbad4731 fix(queue_test): make sure the first bind failure via counter
    798a0abe368 [go] Bump images, versions and deps to use Go 1.20.8
    62321a9201c scheduler: unit test case for concurrent event with other pod
    e5b981ebcd7 scheduler: fix tracking of concurrent events
    16298b54483 fix verify errors
    38904e5f2d1 remove used vars
    ce017591468 sort stability list of metrics in the shell command
    b5fd7e9f23c Feature-gate SidecarContainers code in pkg/kubelet/kuberuntime
    958c30349fa Add an e2e test for the pod sandbox changed scenario
    ac67de196ff fix: concurrent map writes in e2e test
    19c4cf0f1a0 Automated cherry pick of #119776: Fix a job quota related deadlock (#120319)
    dda909d6c51 TopologyAwareHints: Take lock in HasPopulatedHints
    8656da75f2a Fallback to legacy discovery on a wider range of conditions in aggregator
    526e25b685a Fix OpenAPI aggregation cleanup
    0bca3b0e4de apiextensions-apiserver: generate applyconfigurations
    8c7c4f3fc4d Revert to json-patch 4.12.0
    a4fdac21a98 update build cross image to the correct release branch image
    fc184558921 Mark Job onPodConditions as optional in pod failure policy
    955843efcf3 Incorporating feedback on 119341
    4c8b24d8618 Update CHANGELOG/CHANGELOG-1.28.md for v1.28.1
    8dc49c4b984 Release commit for Kubernetes v1.28.1
    ad60b95eb63 Add wait for cache sync
    175bbaa8894 check for overflow
    f3f88b8e7b5 Fix CEL cost handling of zero length replacement strings
    90715527543 Use env varaibles for passing path
    53902ce5ede Use environment varaibles for parameters in Powershell
    e8abf3c441c e2e framework util subtle bug checking endpoints
    a1fdd1152d9 Pass Pinned field to kubecontainer.Image
    27e6c94259f prep for go1.21: use -e in go list
    04de4683cb1 kubeadm: fix nil pointer when etcd member is already removed
    8fd45c6bd0f update to golangci-lint v1.54.1 + go-ruleguard v0.4.0
    cce3f6ffa79 Make gomaxprocs install optional, limit to tests
    20b69aea685 Drop [Feature: tag to make sure this tests runs on pre-submits
    58ac6e12ccc Statefulset should wait for new replicas when removing .start.ordinal
    e7cfe85b9c1 e2e WaitForServiceEndpointsNum take into account the address family
    96696c15f89 fix: when PreFilter returns UnschedulableAndUnresolvable, copy the state in all nodes in statusmap
    d20fe4d8487 Update CHANGELOG/CHANGELOG-1.28.md for v1.28.0
    855e7c48de7 Release commit for Kubernetes v1.28.0
    b4053c3b293 Fix a bug that PostFilter plugin may not function if previous PreFilter plugins return Skip
    b4fac632cd1 Remove release-notes for the PR#118895
    5f7b27f4ade Remove release-notes for the PR#118895
    87caf500e1f Update CHANGELOG/CHANGELOG-1.28.md for v1.28.0-rc.1
    c5048f41fe3 CHANGELOG: Update directory for v1.28.0-rc.1 release
    add7e14df11 Release commit for Kubernetes v1.28.0-rc.1
    c6efaf16c1e apiserver/etcd3: fix segv during metric collection
    6ddcdef29ae kube-proxy: fix combination of --config and logging command line flags
    0d90d1ffa5e Revert "Merge pull request #118895 from RyanAoh/kep-1860"
    1876ddf7149 Avoid returning nil responseKind in v1beta1 aggregated discovery
    55ca1a6ee15 Remove leases test case from AdmissionWebhookMatchConditions suit
    050c0437e60 fix: broadcast when pod is pushed back to activeQ directly in AddUnschedulableIfNotPresent
    9bc857d6d90 [releng] Update publishing-bot rules for release branches to Go 1.20.7
    38a81ca04f3 Bump distroless-iptables to 0.2.7
    ae86051ec5a Bump protoc
    ab26637eae4 Add test coverage of result size of string operations
    8e72718249e Bump cel-go to v0.16.1
    72c8cf9fce7 [go] Bump images, versions and deps to use Go 1.20.7
    2ceca1c78db e2e WaitForServiceEndpointsNum should watch EndpointSlices
    2f30fae0e8b scheduler: fix data race after binding failure
    1b90dff5276 .*: bump golang.org/x/net to v0.13.0
    73107c1b755 Update OWNERS
    53c8872cc18 Update OWNERS
    2a82aac5248 Update CHANGELOG-1.28.md for KMSv2KDF
    294c7df3285 Avoid pulling node-problem-detector through CDN
    b4ef4015a29 Avoid pulling mounter.tar through the CDN
    cfcbce31a39 apiextensions: fix validation error for status.storedVersions
    936819c21bc docs: update release note for KMSv1 deprecation
    6689fd97469 DefaultHostNetworkHostPortsInWorkloads -> DefaultHostNetworkHostPortsInPodTemplates
    a65d2075072 calculate the correct machine-type
    182a4f858a3 API warn non-ExternalName services w/ externalName
    7bd0a857e30 API warn ExternalName services with externalIPs
    dd8a64d7e15 publishing-bot rules for release-1.28 branch
    a005617111c CHANGELOG: Update directory for v1.28.0-rc.0 release
    7d13c9b096b set map to nil if an empty string is passed
    eb4063f0ced Add cases to tests `AdmissionWebhook` MatchConditions size limit (#119404)
    ef4907eddd7 Add e2e tests for admission webhooks MatchCondition fields (#118319)
    a248c4de521 test: fix NodeLogQuery tests to query the correct node for logs
    45710678b30 Release commit for Kubernetes v1.28.0-rc.0
    67769438e1d kmsv2 test feature enablement disablement and restart
    18a7025383c update documentation with descriptions
    7e0a9a7f4e7 Use statusReason for reason under x-kubernetes-validations (#119544)
    3b9af471185 add admission policy integration test all resources
    22bf29ad22f Treat empty string as nil in fuzzer for CEL Reason field
    a164005cc09 Fix non-test code relying on test-code
    e1b0bc3d0a7 bugfix: use matched resource for AdmissionRequest.resource, not the resource it was converted from
    5e2e8c80647 bump validatingadmissionpolicy alpha->beta
    1c99f9591b0 add node-env and instance-type flags to node-e2e tests
    d6479587445 update codegen
    ef8670c946d refactor: replace usage of v1alpha1 with v1beta1
    294f5c9a42f make update
    ae185e91186 e2e: test LastPhaseTransitionTime field when binding PV
    a9c3444a47b test: add coverage for pv status update and create strategy
    bf49c727ba1 kmsv2: KDF based nonce extension
    aa65bab4269 implement pv last phase transition time
    c97eb2b5cb0 Fix XValidations deepcopy to copy contents of nested pointers
    76eefd3a012 CHANGELOG: Update directory for v1.28.0-beta.0 release
    1b4de065df4 add LastPhaseTransitionTime field to PersistentVolume
    5310dd7ff53 add PersistentVolumeLastPhaseTransitionTime feature gate
    a31fee98f09 rename function for dropping disabled fields
    dbea2791129 Fix the flaky TestJobApiBackoffReset test
    8f35fceae37 update vendor to use containerd cgroups
    c4bf42199a0 do not touch swap for cgroup v1 if swap not enabled
    74fcf3e7668 implementation of PodReplacementPolicy kep in the job controller
    cb6d7fbe66c update documented metrics
    f50e74206e1 Address comment
    c46ffc2b422 Refactor jsonpath parser and add tests.
    b3b775baa51 test: adjust tests for v1beta1 validatingadmissionpolicy
    88becfc0ba5 api: add v1beta1 ValidatingAdmissionPolicy/Binding types and storage
    b5e9e0168cf feature: add multiple params capability to VAP controller
    3f63a2d17d4 refactor: make scope of ParamKind available to vap controller
    6323c106e9b refactor: use the provided sharedInformerFactory for params
    9a595209bd2 update-codegen
    c8dbf4712cf add namespaceParamRef to v1alpha1 and internal
    03aad1f823c Fix the semantic meaning of etcd server within component statuses and metrics.
    e0a6eb93a1f node_e2e: Fix createStaticSystemNodeCriticalPod's invalid spec
    2863b3d1ab7 Revert "refactor: simplify RunScorePlugins for readability + performance"
    3685e5e5a9c CHANGELOG: Update directory for v1.24.16 release
    51bfe417b81 CHANGELOG: Update directory for v1.25.12 release
    c575a1e31aa CHANGELOG: Update directory for v1.26.7 release
    ba01bfcdc6c CHANGELOG: Update directory for v1.27.4 release
    ce929520376 add podReplacementPolicy and terminating field to job api
    35d0af9243c Include ignored pods when computing backoff delay for Job pod failures
    ee82654e398 Add pod_swap_usage_bytes as an expected metric in e2e test
    81abfca4078 Add a haveKeys() helper function to match multiple keys
    1000ed64e09 Use debian-base instead of distroless for conformance image
    d6e525877b5 [KEP-2876]Add reason and fieldPath into CRD validation rules (#118041)
    b1d685a05fe apiextensions: validate status updates with status schema
    06a81d13959 cmd/kubelet: implement drop-in configuration directory for kubelet
    c1aef65640b Add integration test
    cd5f3d9f9d5 Add impl for uvip
    2c8288ac873 feat: improves metric and logging
    0449cef8fd5 Increase timeout for DRA kubelet plugin client
    a15c27661e6 Job controller implementation of backoff limit per index (#118009)
    b5012ba1e2d Mark existing NodeLogQuery e2e tests as [LinuxOnly] since they do not run on Windows
    bfb2c6a22a2 update go.mod
    668497e7550 use ratcheting schema validator when feature is enabled
    e0f9db42ace add ratcheting schema validator using new openapi hooks
    6f238334ab4 add CRDValidationRatcheting feature gate
    635875ad521 refactor: convert slices to []interface before inserion into VendorExtensible
    9ee6d97fc05 refactor: add ValidateCustomResourceUpdate to support future validators for CRD Updates
    a8a2fb317c8 Add tracking and reporting of executing requests
    1351845133b Update cri-api change in v1.28.0
    59b4951c649 Expose commit memory used in WindowsMemoryUsage struct
    0ec99fb0b24 Kubelet DRA: fix failing test cases
    f6431c61386 DRA: don't query claims from API server
    cf0b74774f6 Extend the API for the Job job-index-failure-count annotation
    d281daee335 Prefer pods without a deletion timestamp over pods with a deletion timestamp when getting an ordered list of active pods.
    0372e4b6620 add unit test for dra/manager.go.
    fcbfdc17106 Extend the Job API for BackoffLimitPerIndex
    3fd40ffb0ef addons/metrics-server: fix nanny rbac permissions
    056c19e8b39 Add slash ended urls for service-account-issuer-discovery to match API in swagger (#117511)
    89ab733760a Improve docs on framework.CycleState
    4da418aba7f refactor: cleanup to NewSchemaValidator takes JSONSchemaProps
    ba581300213 refactor: rename apiservervalidation -> apiextensionsvalidation
    735be024cf9 Make CRDs built and aggregated lazily for oasv2
    ea23e13463f Update OpenAPI Aggregator
    850dc6123af Remove ability to re-enable serving deprecated policyv1beta1 APIs
    e7be841957d cli-runtime: make VerifiableQueryParam shared-parameter aware
    a4a607198a1 hack/update-openapi-spec.sh
    961c1503b5b Bump kube-openapi
    4cb5547f934 Adjust summary API e2e test
    e429793db1e Unit tests: node swap usage resource metric
    1d368420b28 Add a node swap usage resource metric (/metrics/resource)
    7d187f967ba Unit tests: CRI swap stats
    59e3e3897e3 Add SwapStats to summary API through CRI
    87ff9c45256 Add swap statistics to CRI-API
    053d7ac61f5 Unit tests: cadvisor swap stats
    c74ee8045de Add SwapStats to summary API through cadvisor
    a05d200ac89 Add SwapStats to NodeStats, PodStats and ContainerStats
    d029f0ef060 Add restartable init container lifecycle hook e2e tests
    f17e9117776 Add restartable init container probe e2e tests
    9d6c1030db0 Generate containers ready condition including restartable init containers
    3bf282652f0 Allow restartable init containers to have lifecycle
    7ef2d674e24 Allow restartable init containers to have livenessProbe
    2c8b37498e5 Allow restartable init containers to have readinessProbe
    8b20dbd0d16 Add validateStartupProbe
    c7e7eee554a feature(scheduling_queue): track events per Pods (#118438)
    91ea8043355 Replace lavalamp with jpbetz as feature-approver for api-machinery
    94c8ad289bb Enable admissionWebhookMatchCondition by default
    4321d8c60f3 Graduate NodeSwap to Beta1
    f1e7386fbc4 Deprecate now-unused kubelet iptables flags
    d486736dd38 Remove IPTablesOwnershipCleanup checks and dead code
    77cbd86b0b1 Add metrics for cloud-provider node sync, update.
    d3c506133f1 Skip apiserver_admission_webhook_request_total during context-canceled
    7698fe76397 Add StatefulSet pod index as pod label (#119232)
    2e217e8cea1 Reduce duplication between helpers for checking featuregate
    7edd72f7805 Update generated documentation
    137474e2839 Fix validation options for old pvc
    d765fa6b747 Update generated stuff after changing comments
    f01a1faa8cb Update comments about allocatedResourceStatus
    c072e5b3a7e Update test generated data for 1.26 branch
    db8998265e9 Update 1.27 generated data
    6a780f57ce5 Update generated data
    e0111871149 Update code to use new generic allocatedResourceStatus field
    d3ef2d4fe95 priority & fairness: support dynamically configuring work estimator max seats
    9189c3d5599 fix tests
    aa788219f46 fix metric names
    d32aa62d844 promote beta metrics
    65ce7222ced All sig node approvers should be able to merge changes to CRI API
    9cb2c103107 Adding node feature owners
    00de051729a Make matchConditionsFeatureGateInitiallyEnabled a boolean instead
    48eee4eed86 Fix e2e tests for overriding timoutGracePeriodSeconds of probes
    0074b24ca42 Graduate AdmissionWebhookMatchCondition to beta
    bfa62e0009a kubelet: retry RuntimeConfig call and prep for nil values from GetLinux
    6aeff13def3 Never drop the `terminationGracePeriodSeconds` of a probe
    d0952686f68 CRI: add cavieats about cgroup driver field
    d7797fbc616 kubelet: get cgroup driver config from CRI
    fd434003f3f kubelet: initialization of runtime service earlier in the startup
    37330a13924 Add KubeletCgroupDriverFromCRI feature gate
    d2d5e2e27dc Add CRI fake runtimes for RuntimeConfig rpc
    0f05a92ce68 cri-api: add rpc for querying runtime configuration
    660be4484b4 Update publishing-bot rules for release branches to Go 1.20.6
    be01f4a0838 KEP-3178 IPTablesOwnershipCleanup to GA
    ff62cca47b8 Bump distroless-iptables to 0.2.6
    229eb93a834 DRA: report NodePrepareResource errors
    b57c7e2fe4b Add CDI devices to device plugin API
    b1850497b4b Integration tests for IP mode field
    7eab0d7a0de Proxy changes for IP mode field
    7c6e399b228 Generated code for IP mode field
    e6863757f4f Add IP mode field
    e38ab6d3671 Add PodGC changes for PodReplacementPolicy
    169abcc0398 openapi: reference shared parameters
    6c0ea702d43 Conditionally serialize flushFrequency as int
    19f61caabee aggregate kube-proxy metrics
    bd9b78d6861 kubeadm: remove the limitation that the 'ignorePreflightErrors' field can not be set to 'all' in kubeadm config file, and keep CLI / config consistent
    6b3ce3004db Add integration tests for match conditions feature gate enablement
    b883f305011 kubeadm: Support `kubeadm config validate` for ResetConfiguration
    171b19d9fe1 fix histogram vec compare using ignore fields
    9b6af80a631 upgrade prometheus common to v0.44.0
    8f9e2cb8a80 kubeadm: Support `kubeadm config migrate` for ResetConfiguration
    22f0f2e210f kubeadm: add 'kubeadm config print reset-defaults' command for ResetConfiguration
    13172cba5c0 ValidatingAdmissionPolicy: support namespace access (#118267)
    df0d51d3b35 add some detailed message for dup container ports(steal from thockin)
    1732b23a343 Ignore context canceled from validate and mutate webhook failopen metric
    90ab7580aae add list of served versions to storage version
    9564bdc39de Ensure final diff is used for setting expectations for Job pod creation
    8a4a29d5917 remove todo/spelling
    bef43788fc0 update histogram
    01b9f4b6eb8 matchCondition metrics
    5f37c102cb5 revert changes in staging
    d9bd413f991 Proactively bump golang.org/x/net to v0.12.0
    883d0c3b717 Add a dummy implementation of proxyutil.LineBuffer
    34640772ed4 implement SchedulerQueueingHints feature gate
    619be9c1537 Add a swap e2e test
    4b6314f815b Unit test: Swap - Limited/Unlimited Swap, cgroups v1/v2, etc
    a30410d9ceb LimitedSwap: Automatically configure swap limit for Burstable QoS Pods
    e4da568f331 Make kuberuntime unit tests environment independent + support cgroup v2
    f37aec6c57f Add LIMITED_SWAP env var to enable limited swap
    0ed7bdb057e Update vendor
    69c4bc29f55 [go] Bump images, versions and deps to use Go 1.20.6
    2a907e60043 kubeadm: fix fuzzing for ResetConfiguration
    2e6715bc77b kubeadm: implementation of `ResetConfiguration` API types
    037847066ce replace strings.Index  with strings.Contains instead
    3e2a1a7b9ce Regenerate
    b2613dd381b Add e2e to check that hostIPs and Downward API works
    14b09c414ac Add DownwardAPI validation for status.hostIPs
    335d905ce95 Downward API support for status.hostIPs
    bf030fd68ab Add validate HostIPs
    267e76a66e2 Add status.hostIPs in validEnvDownwardAPIFieldPathExpressions
    c287943bdd5 Add status.hostIPs in ConvertDownwardAPIFieldLabel
    7a81ef6406c Add fuzzer for PodStatus
    e6bdd224c17 Add HostIPs for kubelet
    dacb6890027 Add dropDisabledStatusFields
    e061143de7f Add HostIPs field and update PodIPs field
    c2c001a243a Add FeatureGate PodHostIPs
    ce90eb2cc2f Fix validation to use field.Forbidden instead of Required
    7305c967101 QueueSet and controller part of borrowing by exempt PLs
    2069835094d Tolerate only the two allowed field changes
    3754d2da20f apf: allow admin to change the Exempt field only of the exempt pl
    f8e4e8abac8 apf: add validation to exempt for borrowing
    f78d6062eb8 Update generated code for APF borrowing by exempt
    a9d8cace1f5 Fix AutoUpdateAnnotationKey, NominalConcurrencyShares
    3d3240c8b43 apf: add API changes for borrowing by exempt pl
    b635f2a401f ValidatingAdmissionPolicy: Variable Composition (#118642)
    49d03468021 Pre-allocate webhook accessors arrays for mutating and validating webhooks
    037091284e2 fix unit test bug
    423f4dfc798 Add quantity library to CEL (#118803)
    a1a5f49bb9c remove statefulset label added to wrong branch
    1ae60c0ed16 use job completion index annotation as label
    131216fa8f2 chore: hashes keyID
    049614f884e ValidatingAdmissionPolicy controller for Type Checking (#117377)
    d25075f3424 update generated list of stable metrics
    c291e6355c4 feat: implements metrics for encryption config hot reload
    be2e5417ea2 allow api-approvers to approve directories touched by generation
    80ab8f0542f dra: handle scheduled pods in kube-controller-manager
    cffbb1f1b29 dra controller: enhance testing
    5cec6d798c3 dra: revamp event handlers in kube-controller-manager
    0bb419b1498 promote the following APF metrics to beta:
    39207dada25 Add integration test for node authorizer claim references
    4121c1fc79a auth: don't allow kubelet to from modify ResourceClaimStatuses
    c688478a28b Fix lifecycle generator to check the version correctly (#119268)
    ddc0d947900 dra API: ensure that pod status contains no duplicate resource claims
    052b06bdad3 Remove test Pods sharing a single local PV
    22d8ae1ba6e Enable NewVolumeManagerReconstruction
    9914909f5aa Define tcpProtocol in one place in the unit tests rather than many
    967ef293786 Remove/clarify two FIXME comments in the proxier unit test
    14375947869 Remove some stray references to the ProxyTerminatingEndpoints feature gate
    7e3b53042b1 Pass Job context down to firstPendingIndexes
    4835d9e1371 Belatedly clean up some "Endpoints" vs "EndpointSlice" distinctions in the unit tests
    4d8f569b037 Remove KUBECTL_EXPLAIN_OPENAPIV3 environment variable
    c5147c91b88 controlplane: kubernetes.default controller stop polling
    9f5b6db8be8 test: azure: check error for cloud detection.
    1db11c07ff2 node authorizer: limit kubelet access to ResourceClaim objects
    71ef0dafa72 add flag 'logging-format' to kube-proxy
    c550c17f7f0 accept int or string flush frequency
    148acc8632c enable arm64 support for GCE node configuration
    75186b1c32a Fix, deprecate apiserver_flowcontrol_request_concurrency_limit
    c52911e59ad docs: add comment describing `LoadConfigFromFile`
    5c18810f357 chore: update license date for configfile tests
    72aeb961322 test: add tests for `LoadConfigFromFile`
    b3373ae2738 refactor: make only `LoadConfigFromFile` public - `loadConfig` can be made public again when needed (not required now)
    8e284389a5d feat: make `loadConfig` and `loadConfigFile` public functions - so that users who import kube-scheduler libraries can use these functions to read kube scheduler config
    0599b3caa0f  change the QueueingHintFn to pass a logger
    39bb8f4bb1d Implement ConsistentListFromCache feature gate
    0695853a306 Improve naming and code comments
    08d40f53a7a dra: test with and without immediate ReservedFor
    98ba89d31d5 resourceclaim controller: avoid caching deleted pod unnecessarily
    28b6c906966 Move DeleteFunc logging to level 2
    761016482da Properly setup mutatingWebhookConfigurationManager{}
    747dbd9b6b7 run `./hack/verify-gofmt.sh`
    1eb60939fe5 Add smart reload for `MutatingWebhooks`
    aeefb762ece Properly handle parameter in `shareInformer.DeleteFunc`
    a01a8cb07e7 Fix webhook accessors caching pattern
    7d3d44af776 Add webhookAccessors smart reloads unit tests
    c6f36e8702a Fix deadlock issue
    99875b3fb73 Webhook Accessors Smart Recompilation
    7d064812bb4 kube-controller-manager: finish conversion to contextual logging
    d743c50bb9e kubelet: support batched prepare/unprepare in v1alpha3 DRA plugin API
    7a63997c8a1 Improve apiserver storage size metric to allow it's graduation
    610509fedd9 Update standard app protocols
    f1f2fa9da8a kube-apiserver/corerest: split apart generic code
    01c3a51a780 node: podresources: getallocatable: move to GA
    c1decb6763d Fix TestConditionalProgressRequester and TestWaitUntilFreshAndListTimeout flakes
    1b8ddf6b79a podgc controller: convert to contextual logging
    f924bf95df9 dynamic resource allocation: Improve code coverage of state checkpoint
    c635a7e7d83 node: devicemgr: topomgr: add logs
    d78671447f2 e2e: node: add test to check device-requiring pods are cleaned up
    5cf50105a2b e2e: node: devices: improve the node reboot test
    b926aba2689 e2e: node: devicemanager: update tests
    3bcf4220ece kubelet: devices: skip allocation for running pods
    ab3a0b78ea3 Match both old and new kubectl version for a while in e2e
    c143a875edb dra e2e: fix "reallocation works" flake
    6f1a29520fe scheduler/dra: reduce pod scheduling latency
    e01db325735 scheduler util: handle cache.DeletedFinalStateUnknown in As
    ef48efc736c scheduler dynamicresources: minor logging improvements
    363874e9b56 setcap: update to debian bookworm v1.0.0
    19869478c11 Migrate /pkg/controller/disruption to structured and contextual logging
    b81f07ac9a6 Add enj to apiserver options approver
    6d6595d0f6e Add jpbetz as approver of apiserver integration tests
    43b509de420 staging: Add endpointslice to publishing data.
    7c873327b67 Convert controller name to reconciler variable.
    29fad383dab move endpointslice reconciler to staging endpointslice repo
    c0030a4d27e Add support for watchlist to APF
    9759fc3c230 Fix the converts an empty string to nil.
    22c66784e03 staging: add endpointslice repo
    a34e06e74c7 kube-apiserver/corerest: structure Config
    75e3576523f kube-apiserver: rewire service controllers: kubernetesservice + IP repair
    f22aa42aa81 bump go.mod cadvisor to v0.47.3
    f855a23b455 topologymanager: promote TopologyManagerPolicyOptions feature to beta
    3267dd9d529 kubectl delete: Introduce new interactive flag for interactive deletion (#114530)
    23833b9c81c topologymanager: Increase TopologyManager test coverage by adding negative test cases around NUMA topology discovery
    998654e0443 topologymanager: fix TopologyManagerPolicyBetaOptions not being enabled by default
    fec25785ee6 dra: store generated ResourceClaims in cache
    ba810871ada dra e2e: check that not generating a ResourceClaim works
    0fc62d5ded0 dra: generated files
    444d23bd2f1 dra: generated name for ResourceClaim from template
    98461be8ffa Implement conditionalProgressRequester that allows requesting watch progress notification if watch cache is not fresh
    cd14e97ea80 Add a builder for ContainerAllocateResponse objects
    db2a1edbdd6 Generate empty cdi annotations
    f0e3c32fe56 Move CDI annotation code to utils package
    354b6c409f5 Rename updateReconstructedFromAPIServer
    1903f5aa2ad Rename volumesNeedDevicePath
    7cd60df4aa1 Update volumesInUse after attachability is confirmed
    0a2272dc68d Add uncertain state of volume attach-ability
    bf48165232f Remarks to syncJobCtx
    990339d4c3e Introduce syncJobContext to limit the number of function parameters
    94b782680c0 Update publishing-bot rules for release branches to Go 1.20.5
    f443c458afe move non-graceful node shutdown to GA
    645cb907320 migrated pkg/controller/endpointslicemirroring to contextual logging
    98c6e25c371 update name of pod index label
    09849b09cf4 migrated pkg/controller/endpointslice to contextual logging
    de076430957 Document address family of listening INET sockets
    08dd657a71c Implement metrics agreed on the KEP
    9b1c4c7b57f Implement KEP-3836
    cca66011067 Add reason to force detach metric
    e655931274f expended type checking.
    8fb5b6eb4c1 node-e2e: Add container lifecycle e2e tests for preStop hook
    47ef977ddd5 Direct reference to the packages
    7286d122fb7 Mark pods with restartable init containers as `UnschedulableAndUnresolvable`
    0a987079128 Sidecar: Update printPod to show restartable init container information
    ea1eb7f8f79 implement sidecar resource calculation
    03c22176877 Sidecar: Add e2e tests
    b94fa250c27 Sidecar: Implement lifecycle of the restartable init container
    c187b381173 Sidecar: Generated code
    5d26bcd468b Sidecar: API changes
    10dc1ca0846 Skip GracefulNodeShutdown on older systemd versions
    f7a1fb76f4f Only declare job as finished after removing all finalizers
    3f07fc3acc9 Remove long/golang version information making short the default
    3a5268502f3 Remove deprecated scheduler CLI flags
    68ed020b2a3 Split IptablesRulesTotal metric into two different metrics
    bc059817dc5 fix: Add "metav1.CauseType" to "field.ErrorType" map
    c0eb0caf4ac Support fine-gained rescheduling in ReservePlugin
    d7708e79d32 Use cmp diff
    278a8376e17 Fix: fiterror in permit plugin not handled perfectly
    14bd9bc127e CHANGELOG: Update directory for v1.28.0-alpha.4 release
    2fe38f93e53 feat: Append job creation timestamp to cronjob annotations (#118137)
    1acdb4ae86e [KMSv2] Mark KMS v1beta1 as deprecated with no further fixes (#119007)
    02c59710eaa Test the IptablesRulesTotal metric in TestSyncProxyRulesRepeated
    ecf0cee91ce update comment on feature flag
    3a02ecb3418 check test case param instead of feature flag in unit test code
    b10cc642b56 DRA controller: batch resource claims for Allocate
    be0db3f93d7 clean up the implementation around QueueingHintFn
    5175752df74 Issue 4230: remove readiness check for cache exclusion
    132d477cb7a use stopCh to avoid goroutine leak in tests
    20a25cbfcfb Add user specified image to CRI `ContainerConfig`
    65e818d4ecf Introduce apiserver_flowcontrol_current_executing_seats metric
    1bf2f6c9c05 feat(NodePorts): return Skip status in PreFilter
    dfc1838379f Migrated pkg/controller/volume|util|replicaset|nodeipam to contextual logging
    6c0387d0047 Migrated pkg/controller/endpoint to contextual logging
    3cf2822bc58 Migrated pkg/controller/garbagecollector to contextual logging
    921b7e6e8f7 remove equalReady and replace with k8 util function
    a647f9febbf default enabled pod index for test cases, add test case disabling it
    322da7c1aae fix gc metrics
    02efe09abe3 component-base/logs: improve handling of re-applying a configuration
    1240a29af9c Hide numberOfMissedSchedules as an algorithm internal number
    c733c57962f pkg/controlplane: wire core storage as RESTStorageProvider
    65b34221ebb kube-apiserver: remove IP repair plumbing from kubernetes service controller
    9dcc57ede62 Stop using deprecated API
    5e1777be529 Update debian-base to bookworm
    a514f40131c dra resourceclaim controller: delete generated claims when pod is done
    e8a0c42212d dra resourceclaim controller: remove reservation for completed pods
    7f5a02fc7e4 dra resourceclaim controller: enhance logging
    d1ba893ad8e dra resourceclaim controller: refactor isPodDone
    e2900da46aa Remove unnecessary utiliptables.Interface arg from local detectors
    7690c6e8121 Simplify getDualStackLocalDetectorTuple
    cefd50a753e Improve the single-stack LocalDetector behavior
    bfccfa7016b Add names to the getLocalDetector unit tests, use t.Run
    16e9cc42c1a e2e node: remove unused test/e2e_node/gcp
    932d0337b82 e2e: detect unexpected command line arguments
    68aee61d4f7 SPLIT: kube-apiserver/corerest: split out service IP setup logic
    443bf3b01b0 scheduler test: Use cmp.Diff instead of reflect.DeepEqual for pkg/scheduler/internal/cache
    dad3e4d2112 SPLIT: kube-apiserver/corerest: split constructor
    31943cc3f44 kubeadm: check the GV after the config migration
    b4f479d1f29 bump npd to v0.8.13
    a556feb7cbe run hack/update-vendor.sh to fix verify master
    4149933ed2e kube-apiserver: move "public IP matches IP family" check to option validation
    616c9599880 FIXUP: pkg/controlplane: move bootstrap controller to controllers/kubernetesservice
    c26e1ba10c3 [UT] increase coverage kubeadm/app/phases/dns
    b36fdd68b72 Test consistent List
    01b1174c114 kubeadm: fix "migrate config --allow-experimental-api" to print v1beta4 kubeadm configurations instead of v1beta3
    18f2e9055fc Add OIDC integration tests
    c68a6b07456 kubeadm: fix fuzzing for ExtraEnvs defined in the control plane component
    80b035a116a kubeadm: Support custom env in control plane component
    6b01ece5806 scheduler-perf: fix perfdash display problem
    29e5771aa4d scheduler-perf: shorten "Name" label in metrics
    e08bd3bc263 Simplify DeleteCollection
    7b62d000a4d MOVE: pkg/controlplane: move bootstrap controller to controllers/kubernetesservice
    2b03f04ce58 Initialize the AuditEvent with the AuditContext (#113611)
    c903c29c3b1 e2e: support admissionapi.LevelRestricted in test/e2e/framwork/pod
    19cb6d036ae kube-apiserver/corerest: remove redundant interface
    ede17eace45 test-e2e: Retrigger the RBD image post merge job
    a966d186083 Double-check the proxy configuration vs the available IP families
    36e458612a9 cmd/kube-apiserver: move back master count variable from generic controlplane
    1cfb932111e kubectl: Allow parallelizing diffing
    bcbc12cd79c Fix `should be able to create and delete a critical pod` test
    4517d3004ad bump kube-dns to v1.22.23
    985cf718a43 [Dual-stack] Fix generateAPIPodStatus() of kubelet handling Secondary IP hostIPs order may not be be consistent. If secondary IP is before primary one, current logic adds primary IP twice into PodIPs, which leads to error: "may specify no more than one IP for each IP family". In this case, the second IP shouldn't be added.
    f6a86bb2030 fix indent error
    c143710ecf1 upgrade npd image version to v0.8.13 for kubemark
    96694514a75 Remove csiDriver Conformance test
    bb0c3a08189 Remove proxyutil.IsProxyableIP / IsProxyableHostname
    59592ba4639 Add OIDC test server
    1f2bf32e95f Figure out single-stack/dual-stack support before creating the proxier
    8abfa89e82b Move proxy platformSetup call, and do LocalDetector setup from there
    ebb0fdd4f6f Don't explicitly filter config.NodePortAddresses by IP family
    a74b9fde3aa Don't pass around full node in proxy constructor, just pass PodCIDRs
    0537c1da563 kubeadm: move migrate / validate tests out of config_tests.go
    b01a4145b2c Install ecr-credential-provider during node e2e tests
    4e6aa5fb861 kube-proxy service health: add new return header with number of local endpoints
    a5df442be78 flowcontrol: copy object before passing it to client-go Create to avoid data race
    ea34d039256 integration testing: configure gRPC logging during init
    1c48b7ec144 Add servedVersions info in StorageVersion API
    d548983dbb2 Use table-driven table for TestPerPodSchedulingMetrics
    e0af0a5a455 add test case param for feature flag
    d68f5f0d921 fix tests
    44f1c4dd94d fix duplicate metrics issue
    84b3d9b7b7e remove legacy NetworkPolicy tests
    0eeca0987a6 fix tests
    04ea1d506b4 promote sli metrics to beta
    f96d83af668 Copy container logs for easier debugging
    dfc150ca182 e2e: node: podresources: cooldown the rate limit
    f7cf9effa33 fix kubelet podWorkers.SyncKnownPods() typo
    52ef833b6c2 Bump cadvisor version in tests to v0.47.2
    8266c4d934d Generalize watch storage tests
    d53762ec3a5 remove unnecessary comment in pkg/scheduler/framework.QueueingHintFn
    1b47e6433b8 dra delayed allocation: deallocate when a pod is done
    dbdd861ea36 chore: address review feedback
    72294e4eff0 scheduler test: Use cmp.Diff instead of reflect.DeepEqual for pkg/scheduler/internal/queue/
    f269acd12b2 Make QueueSet support exempt behavior; use it
    931456a1427 Simplify the node name for metrics - just use localhost
    3e5fafd57ab Drop docker.log and add cloud-init-output.log
    1c7e87cff27 client-go: add DNS resolver latency metrics (#115357)
    150f732c7ee [StructuredAuthenticationConfig] wire request context to claim resolver
    4a5a242a68d dra e2e: using logging for background activity
    f1700e4b95b Cache authz decisions within validating policy admission.
    60fb8f2fbc5 Exclude terminal pods from Daemonset e2e tests
    24f4785e3eb kubeadm: remove unused Kind and Resource functions from output API
    16fdd3e5eef apiserver: introduce larger buckets for flowcontrol request_wait_duration_seconds bucket
    90f82d05ce2 kubeadm: remove unused Kind and Resource functions from kubeadm internal API
    fd15c6791a4 kubeadm: restore and generalize the TestMigrateOldConfig test
    d616cf72a3b Add unit tests for parallel StatefulSet create & delete
    c6079843792 apiserver: introduce larger buckets for request_filter_duration_seconds metric
    ef265101648 Return Skip in PodTopologySpread#PreScore under specific conditions
    732775ee7d1 Paginate within DeleteCollection call.
    0d41d509d2d scheduler_perf: replace gomega.Eventually with wait.PollUntilContextTimeout
    cecebe8ea2f scheduler_perf: add TestScheduling integration test
    dfd646e0a89 scheduler_perf: fix namespace deletion
    d9c16a1cedd scheduler_perf: fix goroutine leak in runWorkload
    2e7f37353cb test/integration: avoid errors in fake PC controller during shutdown
    812556365b6 kubeadm: backdate generated CAs by 5 minutes
    44692a486f9 client-go: allow to set NotBefore in NewSelfSignedCACert()
    cfa2fa6d774 put feature gate in alphabetical order
    860aab842db fix a reference to the wrong variable name
    a75b00ea39d Better URL for scraping metrics from kubelet
    685b0c5efa1 Bump to latest node-problem-detector version with arm64
    cad338890df add test for apiservices.apiregistration.k8s.io discoverability in openapi/v3
    9e3b5b65838 update openapi
    ad2b4368e21 expose apiregistration.k8s.io into OpenAPIV3
    bb8766daaf6 feature flags should be ordered alphabetically
    7f4c187ab26 kubectl explain should work for both cluster and namespace resources and without a GET method
    a9afaa1eee9 add feature gate
    dfce076c6cf Update the template.pot file with latest message IDs.
    a4519665fe0 Skip terminal Pods with a deletion timestamp from the Daemonset sync (#118716)
    9c7166ff639 wait for eventhandlers to sync before run scheduler
    bde66bfb55c kubelet dra: restore skipping of unused resource claims
    874daa8b52c kubelet dra: fix checking of second pod which uses a claim
    6c587b43e92 Cleanup pods at the end in Pod conditions e2e node test
    56c5c8f7eef Revert "Make CA valid 1 hour in the past"
    ecd727e4c75 Fix PodGC test when PodDisruptionConditions disabled (#118805)
    bdbf07525fa test: remove exception comments in discovery tests
    6fd830a075f hack/tools: bump golangci-lint and consequently staticcheck
    1af54256969 hack: disable gomega.Consistently/Eventually check due to false positives
    f618e613322 e2e: replace gomega.HaveLen(0) with gomega.BeEmpty()
    e7df337ebad e2e: replace gomega.Equal(true/false) with gomega.BeTrue/BeFalse()
    8b33e8bdd1b e2e: fix gomega.Expect calls without assertions
    0ef1f2f2d89 Set AWS specific credential provider when running there
    b0f694f50ac CHANGELOG-1.27: Add note for AWS in-tree provider removal
    af1c9e49c49 Update schedule logic to properly calculate missed schedules
    0033f658085 increase the log level for the GetTargetNodeName error message
    08198fe22b5 Extend Large Create Timeout to 60 min
    9354e78289f no-op: split transformer interface
    21760534157 add completion index as pod label
    8083d0d22e2 pkg/controlplane/apiserver: remove temporary import restriction of cmd/kube-apiserver
    764da8a01dc FIXUP: cmd/kube-apiserver/app/options: split apart controlplane part
    1b3779baa0d MOVE: cmd/kube-apiserver/app/options: split apart controlplane part
    3df92362abd fix openapi/v3 non local apiservices aggregation
    4298953c26c kubeadm: remove unused Kind and Resource functions from v1beta4 API
    6e079545c48 cmd/kube-apiserver: move options completion into options package
    f04484fe775 kubeadm: add the --allow-experimental-api flag to "config" commands
    0774f779d5c kubeadm: add v1beta4 to the kubeadm API scheme
    38222014c61 kubelet pod-resources: add e2e for KubeletPodResourcesGet feature
    f7239e40959 Better back off delays and connection timeout to talk to containerd
    e4f93d8a82d ipallocator bug if ips has leading zeros
    89a9e480f9b fix: update deployment e2e tests
    41d961758ee update cri-api change in v1.27
    22258a263f4 Fix stable metric finder for NewDesc with custom import name
    13842746227 Update metric documentation
    45aa59946af Refactor FindAttachablePluginBySpec out of CSI code path
    07f38a3ec18 add test
    6f8d38406a7 feature(scheduler): implement ClusterEventWithHint to filter out useless events
    531d38e323c features: rename UserNamespacesStatelessPodsSupport
    556d713a4ad apis: drop check for volumes with user namespaces
    8ed23558b44 Do not set jm.syncJobBatchPeriod=0 if not needed
    17013d39604 Review remarks to improve HandlePodCleanups in kubelet
    e3ee9b9adc1 Fix the deletion of rejected pods
    c91c578795c scheduler_perf: skip expensive cleanup during benchmarks
    92a35f5bca9 Usse generics to simplify pkg/registry/flowcontrol/ensurer
    902c711fb49 Unset gated pod info timestamp in addToActiveQ
    56cb4c93918 [bug] Update DefaultObjectDescriber to handle interface params (#118190)
    1053d1bbcf5 CEL lib: Expose errors on authz decisions instead of raising them from check().
    406899360b5 Refactor shouldDelegateList/shouldListFromStorage to better explain decisions
    e4cf103c9b9 Test all cases for LIST request cache bypass
    7f532891c9c e2e tests: set all PSa labels instead of just enforcing
    a9af2de8fdd Refactor WithRequireLeader to make it part of the etcd store
    1bd3f072fa7 stop ignoring storage class selection errors
    e5cbc51d29d e2e framework: allow setting all PSa labels at once
    edb59e9bc75 kubeadm: move token defaulting and related constants to token package
    ec70b2ec801 e2e dra: add "kubelet must skip NodePrepareResource if not used by any container"
    fdd992da865 upgrade image addon-manager/kube-addon-manager:v9.1.6 to v9.1.7
    420fbd11e44 ignore Histogram for prometheus client v1.16.0
    c98e72841b1 Add a connection backoff to talk to CRI impls
    409bc8ccc05 deps: Bump to cAdvisor v0.47.2
    f72c2c2b7d2 add process start to prometheus handler opts
    bbc7ca94a42 CHANGELOG: Update directory for v1.28.0-alpha.3 release
    ab75e48494c storage: stop using deprecated io/ioutil
    687ca0e0bb2 fix(script): handle wait_for_success failed condition
    eecac058718 kubeadm: add v1beta4 API boilerplate
    63e5b6bdb24 Parallel StatefulSet pod create & delete
    2fb472c83cd Refactor StatefulSet controller update logic
    784a309b917 Do not error in Job controller sync when there are pod failures
    f2e3157df0a Remove AdvancedAuditing feature gate.
    bbae445d172 fix metrics test with 1.16.0 prometheus client
    180c2332bf8 [UT] increase coverage ut for kubeadm/app/features
    564c236ce28 Do NOT prepull images for e2e-node jobs
    c84b5b0a99f Cleanup unnecessary renames of variable t
    c9b01dd9778 Fix race in logging expectations
    3dd1bac4dce Set small DefaultJobPodFailureBackOff in Job integration tests
    85d9339ef8f add KCM names into CCM cmd allowed import-restrictions
    3b55f20bd34 update vendor
    4e6a3fb9c10 deduplicate cloud provider controller names
    e5f5a9bfdbe use controller names for CLI FlagSets to show the names in help
    cd56748ec57 reference controllers correctly from CLI help
    9fd8f568fe0 introduce CCM controller aliases and unify controller names
    94792d85dea simplify TestValidateControllersOptions test
    97309511366 introduce KCM controller aliases and unify controller names
    ba1755132e1 support controller name aliases in GenericControllerManagerConfigurationOptions
    2596245f5a7 Replace deprecated sets.Int with sets.Set[int] in Job integration tests
    e5116a39c96 fix: kubectl expose fails for apps with same-port, different-protocol
    958c8fb6950 Make use of `k8s.io/utils/pointer.Duration`
    ede2ec22b68 kubeadm: drop older etcd versions from kubeadm support
    8cd65e9cee6 reorder hack/unwanted-dependencies.json map keys and arrays
    f44029705f9 exit 1 if status are not as expected(order)
    a1e0aa0e504 DRA Node E2E: add NodeAlphaFeature to fix CI
    74c5ff97f18 Lower the constants for the rate limiter in Job controller
    f54c15d4e80 Change the fieldpath in the deprecated plugin response
    471fd1ae8a1 deprecate RBD plugin from available in-tree drivers
    c51a422d787 Cleanup job controller handling of backoff
    fff5b35023b Adding review changs to update
    889ecf865b7 always execute condition for wait.PollUntilContextTimeout with immediate=true
    5aa5f1abc9c update prometheus/client_golang v1.14.0 to v1.16.0
    5bde9404a09 Remove unused error return value from internal function
    8636f9353a8 CHANGELOG: Update directory for v1.27.3 release
    763555814b5 CHANGELOG: Update directory for v1.26.6 release
    3bf93156d80 Update pending_eligible_endpoints.yaml to match APISnoop
    ff2a1f0167f CHANGELOG: Update directory for v1.25.11 release
    a29be0cfb00 update container runtime flags to use containerd instead of docker
    89adbc6e5b5 check for AWS environment before running sudo
    7f650acb3c1 CHANGELOG: Update directory for v1.24.15 release
    a83edd35c4a DRA Node E2E: relabel test suite to fix CI
    c27f9fdeb79 Add warnings for big number of completions and parallelism
    a86380c7813 Update CLI help text for grammar and consistency
    96e7d5f1f25 Bump iscsi test server image
    e0f273ffdaf use ingress-gce-glbc v1.23.1 image for CI
    e213448db12 Updated kubectl explain help output
    7bc449d7e0c add contextual logging to job-controller
    cfbc5dc54f8 mount-utils: fix linter warnings in tests
    8ced101db53 mount-utils: stop using ioutil in tests
    699d118d85f mount-utils: stop using ioutil
    b690450e846 mount-utils: don't reread mountinfo on newer kernels
    8c79a911331 mount-utils: isMountPointMatch: simplify and speedup
    404e844468b mount-utils: add isMountPointMatch test and benchmark
    4bb02392793 mount-utils: IsMountPoint: fix
    167252fb5e0 mount-utils: format with gofumpt
    55b690ee018 kmsv2: no-op refactor priming logic into its own function
    15003c609d0 kmsv2: refine probing logic to avoid slow starts
    d8150b81601 kmsv2: add a sanity check to confirm that new state is always valid
    8c06ca68d7d Details added in kubectl explain help
    4960207b317 DRA Node E2E: test NodePrepareResource timeout
    5c5f6e8fe2f DRA Node E2E: add NodePrepareResourceCalled API
    673d0aaa60c DRA Node E2E: add call blocking to the Kubelet plugin APIs
    a60314c47ef Make etcd component status consistent with health probes
    e1735b98637 Make CA valid 1 hour in the past
    5e048041e40 remove helper function for unused storage feature in pkg/proxy/util
    e1aef2ac917 Bump publishing bot rules for Go 1.19 branches
    9cb52a6872c Fix the flaky legacy_service_account_token_clean_up_test.
    4e20a8f52bc kill all processes in a container in the event of OOM
    0222e6d4ae3 Update kind details for DRA e2e
    75cf25c0e7f iscsi: use dbus from the host
    f7a5817bc65 e2e storage: terminate worker quietly on test completion
    22de2c27d1b scheduler: improve cache_test.go - Add test name to enhance test readability - Remove redundant test tables
    325205efb72 Migrated pkg/controller/endpoint to contextual logging
    be14b026e33 fix the integration test
    a7eb7ed5c6a refactor: simplify RunScorePlugins for readability + performance
    587f992a7b2 e2e: deflake a HPA CPU test by stabilizing cpu consumption
    672614b57e8 apf: refactor bootstrap ensure strategy
    910630fbea2 kubelet: mark '--azure-container-registry-config' flag as deprecated
    5e6ae25a33b Updates chairs, tech leads for sig cloud provider
    34368884783 move luxas as an emeritus approver of test/e2e/lifecycle
    e97d9803f2f add SataQiu as a test/e2e/lifecycle approver
    4977189c1b0 Fix ginkgo noColor deprecation warning
    e6bc945a61b Add startup probe in integration test
    ea1de7517ee CHANGELOG: Update directory for v1.28.0-alpha.2 release
    7ccc2317839 add test for authorizer type checking.
    54cae706786 Pass the mandatory parameters to support testing on ARM64
    fdc49f5257c Return deprecation warning for storageOS,PhotonPD,ScaleIO..etc
    151509fb74d Remove unreachable warning on volume name dup
    d73923c8ebf fix 'pod' in kubelet prober metrics
    0ddaa7f7c9f Fix warnings on "duplicate" env vars
    4820cc852a0 Minor fix on variable
    a6f5abfb81e Updating names from webhookconversion to conversionwebhook
    0fe84ff7cb1 Re-add the legacy wsstream package and deprecate it
    8f3109da791 Refactor wsstream library from apiserver to apimachinery
    6d4abd7e7b6 bump distroless-iptables to v0.2.5
    04fa4184ed3 add support for authorizer to type checking.
    e5a15c87e9d Ensure timeout test handlers don't complete before timing out.
    f2a64cb91d7 fix Cronjob status.lastSuccessfulTime not populated by a manually triggered job
    2f6b1d3c0fb Ensure Job sync invocations are batched by 1s periods
    ed429c4388a replace node-role.kubernetes.io/master taint with node-role.kubernetes.io/control-plane for gce kubelet flags
    b1da721bdd7 Update vendor with hack/update-vendor.sh
    88b69cdd0e6 Fix flaky persistent volumes e2e test
    d9e12db547e Bump images, versions and deps to use Go 1.20.5
    ea6495e8284 Remove StartupProbe on debug with pod copy
    ac15d697578 remove RetroactiveDefaultStorageClass feature gate checks
    6afb363ca17 test: remove RetroactiveDefaultStorageClass feature gate
    97a81a59f62 test: correct validation test error message
    42722ffef02 graduate RetroactiveDefaultStorageClass feature to GA in 1.28
    7f87ec9406a storage: Add MadhavJivrajani as reviewer
    7ac36bd0720 test/integration: use t.Log in TestAPIServiceWaitOnStart
    77cf37ee543 STRUCTURE: cmd/kube-apiserver: move admission construction back from controlplane
    7961812bed8 STRUCTURE: cmd/kube-apiserver: move OpenAPI construction back from controlplane
    43be9c3a0ac MOVE: cmd/kube-apiserver: move genericapiserver construction into controlplane package
    9be6e7bb339 STRUCTURE: cmd/kube-apiserver/app: stratify construction with options/config/server
    e6ed4c7934d CLEANUP: cmd/kube-apiserver/app: remove trivial funcs
    f7d4e90b5c4 MOVE: cmd/kube-apiserver/app.createAPIExtensionsConfig -> pkg/controlplane
    087fbc9304f Remove invalid merge key
    4962e6eacb9 Squash detectNodeIP and nodeIPTuple together
    b5db644422d Add merge map key validation to StorageVersions
    58162ffd63b DRA: add node tests
    b69b34bec64 Move a kube-proxy unit test to the correct file
    4bee9b2b352 structured logging in proxy/ipvs/ipset
    26801d6541a kube-proxy avoid race condition using LocalModeNodeCIDR
    4dbece1e203 e2e-framework: remove node-role.kubernetes.io/master taint from non-blocking-taints
    dddbecb47e2 prune's xml files to display only top level tests and failed sub-tests
    8b0a6ed6999 re-send the shutdown signal in case the dbus restart is not done
    4d0e25151db Fix SELinux contexts used in e2e tests
    010343562c6 dependencies: update github.com/dustin/go-humanize v1.0.1
    743e5525edb fix eviction failing test for nil feature gates assignment
    6d66fbc6b67 storage: Move cacher tests to reside with the cacher code
    70978e4af61 cacher: Move common testing utils to a single file
    bdfb96c57d3 chore: os.SEEK_END os.SEEK_SET and use b.Logf(...) instead of b.Log(fmt.Sprintf(...))
    7a80d7c839c add warning for duplicate  containers[*].ports with the same port, protocol, hostPort, and hostIP
    923db7bd8e0 chore: use strings.Contains instead
    e9e4acb1dde k8s.io/apiserver: remove skewed completion from EtcdOptions
    4d85a1f00cb storage: Implement TestWatchFromZero for cacher
    2e76ac31fd8 Replace os.Setenv with testing.T.Setenv in tests
    ac5ce5cbce7 Replace os.Setenv with testing.T.Setenv in tests
    b274a9bf7c4 remove csidriver endpoints from pending_eligible_endpoints.yaml
    5d4bf0b6f90 Promote CSIDriver e2e test to Conformance
    3085b57869a Do not copy bytes for cached serializations
    c009667c6c6 deprecate CephFS plugin from available in-tree drivers.
    1fcfd1d5090 pkg/util/iptables: use buf.String() instead of string(buf.Bytes())
    9eaa50cc829 Rename scheduler queue variables for consistency
    6195f96e56e minor fix comments in netpol so its easy to understand the tests for newcomers, remove one misleading comment (#118264)
    410b6023d6f scheduler: fix code style issues for pkg/scheduler
    71ab7dc791f Remarks
    70d3bb43e56 Adjust the algorithm for computing the pod finish time
    b994e639a6b Add mininumKubelet tag into ReadWriteOncePod test
    db9fcfeed29 Move cri/streaming to k8s.io/kubelet staging repository
    da4a8d831b9 kubectl: use bytes.Buffer.String
    8e4228a8c1f remove CSI-migration gate
    a5c4fbe9791 chore(fix): test jsonpath condition parsing errors
    9d3e55ec431 Support JSONPath condition without value
    f520f6fd06c Add Pod Termination e2e tests to test termination grace period seconds
    b4dfae25dee fix terminationGracePeriod blocked by preStop
    fd92acba5a8 chore: should use buf.String() instead of string(buf.Bytes())
    20866b3f85a dryrun: Don't reuse current object for conversion
    f351c6d1ecc k8s.io/apiserver: apply storage object count tracker implicitly
    45c9e066164 Fix errant debugging code in codegen
    a51be9786ba remove enabled by default beta resources that have been removed
    f4d326a1fcc verify: produce JUnit file also for pull-kubernetes-verify-strict-lint
    a4ea058cc75 feature(scheduler_perf): distinguish result in scheduler_scheduling_attempt_duration_seconds metric result
    322968e9b38 Update unwanted dependencies per CI instructions
    2111e79f56a Update gnostic references
    1993a4cb379 vendor
    0b4efddae01 verify: nicer failure message rendering in Prow
    dbbb21469f4 verify: pick relevant lines from verify-golangci-lint.sh as failure message
    d6168bb6587 Add ephemeralcontainer to imagepolicy securityaccount admission plugin
    70ff750c755 chore: io/ioutil deprecated
    1ce285ad3df Revert "removed the deprecated `azureFile` in-tree storage plugin"
    daa71159077 kubeadm: add deprecation message for UpgradeAddonsBeforeControlPlane feature gate
    a6c7f63b188 Set the node-ips annotation correctly with CloudDualStackNodeIPs
    d49c43abde5 kubeadm: add integration test to ensure that the supported etcd version is always available for the stable Kubernetes version
    6d23da045fc Migrated pkg/scheduler/framework/plugins/interpodaffinity to use contextual logging
    db2389ba9c8 kube-proxy: remove log warning about not using config file
    15aa00fc836 Remove unused `getSeccompProfilePath` helper function
    d0a64739e2c e2e dra: collect and check GRPC calls
    68901de8981 Enable optionals and add tests
    5c0b59891d6 Bump cel-go to v0.16.0
    5b3510c0b67 Fixing gmsa-webhook install steps for Windows GMSA full tests
    c539c739161 Changes to buckets and comments
    35d2431b3a8 informer: fix race against Run and SetTransform/SetWatchErrorHandler
    64269620597 Changes to histogram buckets
    c48c4c679ad Fix ginkgo deprecation warning
    5a14573258b clean: use info instead of error to log queue closed message when scheduler exit
    f2a5e247ebf add pacoxu to kubeadm approvers list
    705c6ff315b Review comments, added metric namespace, moved utility functions, and etc
    a8ef109aca0 CHANGELOG: Update directory for v1.28.0-alpha.1 release
    369e3faa4ff Moving Kubelet Credential Provider test to common so that it can be run both as Node and Cluster test
    2d8c820741d move pkg/util/ipset inside pkg/proxy/ipvs
    85e0d8c8b14 Revert "kubeadm: add --feature-gates flag for kubeadm upgrade node"
    f3ba9353363 Consistently use proxyutil as the name for pkg/proxy/util
    b3111170f8e remove Ephemeral Containers form list
    64c9070f8d0 add pod containers[*].port duplicate warning
    f9ae3e774d0 testutil: use contextual logging
    534f5edb53c Cleanup boilerpate.py
    d9e2583af16 test/e2e: replace deprecated ioutil
    4b4b3b71b78 clean up dead code
    4523a301c87 kubeadm: enable --feature-gates flag for kubeadm upgrade node
    074900e81bd scheduler: update the scheduler interface and cache methods to use contextual logging
    0951204298a kubeadm: Supports() return true for all alpha/beta/ga/deprecated
    c6aaa1eab04 kubeadm: lower the log level of EtcdSupportedVersion warning message as it is a kubeadm internal warning
    4e6d929580a deprecate csi migration for ceph rdb
    11a40406a1f Promote Ephemeral containers e2e test to Conformance
    bf116e85943 Optimize reflect checks further, save item type information
    12e3d9fcc4c Implement WithAlloc variants for EachListItem and ExtractList
    efc601302ad Extract List reflect optimization
    b8a3bd673dc Add WithAlloc interface and stub implementations with base benchmarks
    4aa5441de2e Move pkg/util/ipvs inside pkg/proxy/ipvs
    0535e742241 feature(schedule_one): use heap to find the highest score node
    532fe3c9653 Add kerthcet and sanposhiho as SIG scheduling approvers
    8df1a5e6dcb Webhook conversion metrics
    a045fedd025 Update google.golang.org/genproto
    455169bd66a e2e storage: add missing error checking for WaitForVolumeAttachmentTerminated
    d76043958fb Follow up from dynamic retryAfter
    510287d3444 Fix the git-repo test error caused by the correct use of loop variables
    926bc9bf8e5 Update podFailurePolicy comment from alpha-level to beta
    7d2e1888f8a Chore: fix the example about how to use PollUntilContextTimeout
    4d2ff08bfa1 e2e-framework: code cleanup for mismatched comments
    15678e4a67e Optimize usage message of commands which have subcommands.
    6a867eacd85 kubeadm: warning only for deprecated FG
    4dfc684b342 Set kube-proxy memory request to 50Mi
    5d18f471494 Improve clarity and guidance in provisioner waiting message
    7a6b4a9215e dra scheduler plugin test: fix loopvar bug and "reserve" expected data
    e31b2080f5a e2e framework retry on Service unavailable errors
    a50549cc906 e2e rc: if the pods are running but not ready the test will fail
    133eff3df49 implement LegacyServiceAccountTokenCleanUp alpha
    a6003ae1e11 fix unknown field error in rs e2e
    27057def059 Signature fix for registeropenapi
    4373ae05f34 Update vendor
    72e4c9a82ac kubeadm: add the "config validate" subcommand
    f4891842194 Delete CRDs created during field validation tests.
    2ea6896f90c Add warning log callback in client-go loading rules (#117233)
    485d1631cd3 Remove Azure file in-tree storage plugin
    2eed9b4143a Should get ENABLE_CLIENT_GO_WATCH_LIST_ALPHA when new reflector
    e2ed8f8c3ca style: correct the sentence
    08139044040 Fix: Restricted profile comply with PSS (#117543)
    c68f8586580 proxy/ipvs: github user name change: daman1807 -> aroradaman
    05b3beb7f02 Create e2e test for CSIDriver endpoints
    d459b4429f4 integration: remove special verbosity for garbagecollector and graph_builder
    931cc96b8d4 remote windows condition when #116693 is merged
    0bff705acd8 Preserve code blocks in templates.Normalizer (#118029)
    7470a94f5a9 add some log for debuging
    6232ac734a0 Merge duplicated Linux/Windows kube-proxy setup code
    08ce5805769 Add ProxyServer.platformSetup
    e0b7f31ce6e use standard base image in dra dev
    149f4878a70 Simplify DeferCleanup.
    dbb6d25f13b e2e: apply timeout for CSI Storage Capacity test only to node
    1c05cf1d516 kube-scheduler: NewFramework function to pass the context parameter
    1b206399f6a fix using stale binaries in local-up-cluster
    ece68cf8337 Fix update-vendor.sh logging
    cba8c1f5e2e Fixing windows memory allocation e2e tests after a refactor
    96d48de9b97 add OWNERS for cmd/prune-junit-xml
    86a258b13a2 kmsv2: ignore cache key expiration on reads
    89439b570fc test/e2e: use agnhost latest version in the manifest
    b30720fc9f0 Add test for starting kubelet with a CSI volume mounted
    ad9e264c3cc test/e2e: Use json.NewSerializerWithOptions in place of json/yaml newSerializers.
    048938f1d85 hpa: cleanup `currentReplicas` code
    0f5535ea259 registry/core/service: remove incorrect comments
    2db577a560c scheduler-perf: inject "benchmark" as name into JSON result filename
    0789bbe9f7a Update k8s.po
    b6364dddfe6 update webhook test to go 1.21
    d8db9640fab kubeadm: remove function pointer comparison in phase test
    2658a2b627f Make connection lost retryable in webhook
    ed26fcf5b87 cleanup useless null pointer check about nodeInfo.Node() from snapshot for in-tree plugins
    e21cf9a54e9 Setup e2e_node to support testing on ARM64
    ec8d94f2057 Grab logs from all the containers when DNS related tests fail
    182cd425d3b graduate LegacyServiceAccountTokenTracking to GA
    337728b0255 Improve backoff policy in reflector.
    0fe27a06f99 Cleanup the Job controller handling of terminating pods
    c74790e266a remove redundunt type conversion, unused variable...etc
    07c94553608 fix apiserver InstallAPIGroups slices out of range
    aa11cc69696 Mark grpc-gateway v1 as an unwanted dependency
    19ae2de19cb kubeadm: speedup init by 0s or 20s
    e4102d5e300 Test APIService safe handling at startup
    3be3997193a Fix waiting for CRD sync at server start
    71ec9df5b61 update image tags in manifests to reflect the version listed in the source
    a10ff53d8e6 Reword the event message to read better for a single secret
    b2eae2f92e9 Support podman for building release images
    6b4251c0fdf Remove statefulset from logcheck.conf
    3f1d8e7aeb4 Apply to use contextual logging for all loggers in statefulSet
    d9b941b7827 Remove undesired verbose fields from log
    bea71a3e4ee remove unused pv informer from expand_controller
    4c9887e3ebd Updating the nodeAffinity of gated pods having nil affinity should be allowed
    a0f14c1c5ea CHANGELOG: Update directory for v1.25.10 release
    bab8002fb38 CHANGELOG: Update directory for v1.24.14 release
    80b9c853613 belated cleanup of some kube-proxy stuff for old versions
    e553fe1fff0 CHANGELOG: Update directory for v1.27.2 release
    c9e4de90dbe CHANGELOG: Update directory for v1.26.5 release
    526d45416fb update err status code check in transformation metrics
    5a75a03a774 Improve warning message
    b76ef2e095f fix: move to `dl.k8s.io` from `kubernetes-release` bucket
    fc4fb004cf6 add reviewers and labels to yamlfmt
    93462377120 Update docker/containerd/runc versions and capture more logs
    885f3d7a7df Sort and limit to the describers the return (string, error)
    9e9a6cde4b8 test/integration/scheduler: fix data races
    b035c373db8 build latest sample-api-server for test/e2e
    bafae5c0764 rename err to lookupErr
    8b9cbe62025 fix false positive kubectl plugin unit tests
    b9950b5192d Drop zeitgeist from tools go.mod
    36f0caf7ecd remove GlusterFS references from test/e2e/* comments/descriptions
    d83c3ce7ca8 make rbd and iscsi test images in parity with the test code
    9de2846c72c remove glusterdynamic provisioner images reference from tests
    763e7923fb9 e2e: replace ubuntu-slim with agnhost in hpa cm noExporterDeployment
    261de704c25 kubeadm: fix a bug where the static pod changes detection logic is inconsistent with kubelet
    666be79d670 legacy names of volume plugins have been gone a LONG time
    8b4840aa374 clean up unsupport etcd version
    e0ebac6c9ca drop redundant NArg check when looping Args
    82c40e3697e drop redundant NArg check when looping Args
    829bcea7634 remove vestigial BUILD file
    0616d15712b Fix perf-test by increasing the error margin
    46ed70ecac5 Bump runc to v1.1.7
    51d79c4d6b0 e2e: use gomega.Expect instead of deprecated framework.Expect*
    1daf74d25c4 Initialize data if nil
    b81cfb9cb8c Update vendor
    15c5713015e managedfields: Remove gvk from SkipNonApplied
    b52e57c589a managedfields: Improve/strengthen version checking for Apply
    559d12fcce0 managedfields: Create NewFakeFieldManager
    45853e20ae5 openapi: Create client -> TypeConverter function
    45603efecb7 Create e2e test for PodEphemeralcontainers endpoints
    ebaf49dbd70 Export DefaultServerUrlFor utility function
    5519b89a28e Validate lock identity
    e3eb4bd0c56 updating dependencies.yaml for etcd v3.5.9 version
    c99cf53a108 e2e: deflake hpa e2e custom metrics tests
    247ea7fc780 use upstream etcd github path instead of redirecting one
    6616e1f2385 update etcd version in install.sh to 3.5.9
    0e456dcf866 Clarify localhost nodeport comments/errors
    a744a186b67 Rename GetNodeAddresses to GetNodeIPs, return net.IP
    2ca215fd994 Add NodePortAddresses.MatchAll()
    d6e488b998e Changing annotate PrintFlags from annotate to annotated
    d8e82b1417c e2e: use gomega.Expect instead of framework.ExpectEqual in windows/*
    8c6c1e53194 plugin_evaluation_total metric support preScore/score
    3680a5230c3 Bump docker/distribution to 2.8.2
    3ac74973610 Chore: cleanup in interpodaffinity
    073b4cf66ad test/e2e/dra: fix kind cluster creation
    3b69fa2fa54 dependencies: update github.com/mitchellh/go-wordwrap v1.0.1
    19ae103e829 emit warning on deprecated annotation volume.beta.kubernetes.io/storage-class
    517c5b75c5d Update unwanted deps
    d6d1dbdd82a Update kube-openapi, drop mapstructure
    a52dcd0d9f3 Add DelayCacheUntilActive option to start informers after leader election
    7c554ea1d91 Regenerate discovery fixtures
    2ab6fd3590b Capture discovery API output in test fixtures
    3867569ae27 codegen
    0819d342040 using parsers in applyDefaultImageTag
    7da7468a3fc cleanup: duplicate request_test TestRequestAbsPathPreservesTrailingSlash
    f0f92853ad8 Add api-machinery TL owners permissions for jpbetz
    e4dd6f68dc8 remove CSIStorageCapacity featuregate
    9ac657bb94e Make NodePortAddresses explicitly IP-family-specific
    f7bb9a9a0a7 Remove a mostly-unused variable in the ipvs proxy
    1ca8f84eede Scheduler: Pass the supported nodeSelectorOperators to the field.NotSupported
    d85b91f343b scheduler-perf: measure workload runtime and relabel workloads
    aa405c8aac6 Allow runtimes to provide additional context on CRI pull errors
    83fb5a50bc9 dependencies: bump k8s.io/utils
    daebf1c735d Simplify plugin resolution check function
    f562375c8a6 add changelog for kube-addon-manager v9.1.7
    be4c4a51ea2 Update pending_eligible_endpoints.yaml
    d34d4755ae2 Promote APIResources e2e test to Conformance
    6e2ea32fc89 feature(DynamicResources): return Skip in PreFilter
    a0133b7cc47 proxy/ipvs: added daman1807 as reviewer
    dcefc42b35a update vendor dependencies for the change
    ae749238786 etcd depdencies are updated to v3.5.9
    13cef6a7549 cleanup unused variables for v1beta2 component config
    815578295ae Revert "support short name for flowschema and prioritylevelconfiguration"
    72202f9a007 Revert "add shortnames for mutatingwebhookconfigurations and validatingwebhookconfigurations"
    45836971f27 cli: replace intstr.FromInt with intstr.FromInt32
    8580c116d5c fix: use dl.k8s.io, not kubernetes-release bucket
    ef9f8d7c0c8 kubeadm: Remove leading zeros from etcd member ID in log messages
    ff4c6916ec7 kubeadm: Fix log message when etcd member is added as learner
    196e2f041b1 Update the cgroups v2 toleration in local-up-cluster
    7248b9263f0 Fix comments on InformerFor
    6ac1bae2815 test: Improve debug output of init container tests
    1f16d711857 kubelet: Rename PodManager DeletePod to RemovePod
    166256f73e8 kubelet: Reduce the interface pod.Manager consumers accept
    8bd94dfa762 kubelet: Organize and document kubelet pod-related members
    bb568844b67 kubelet: Separate the MirrorClient from the PodManager
    80b1aca580b kubelet: Remove dispatchWork and inline calls to UpdatePod
    e7207c85467 kubelet: Merge orphaned mirror pod names into GetPodsAndMirrorPods
    f8086f2dac1 kubelet: Convert IsMirrorOf to a function
    02960a8253e kubelet: Remove unused mirrorPodFunc in eviction
    1168b118750 Stabilize local-up-cluster in our CI
    3dc4eea8896 proxy/service_health: release read lock early
    655f2f74010 replace build to build.sh
    cc1251123ba use wait to avoid blocking the SIGTERM handler
    808098c4c69 proxy/ipvs: healthzServer for instantiating the proxier
    4b50c4bb016 Update --image-gc-low-threshold option's description
    3da79e2850d OpenAPI V3 invalid document checks
    cbe825b2b6c ginkgo update to v2.9.4 and gomega to 1.27.6
    feb63fb0285 e2e_kubeadm: stop using deprecated framework.ExpectEqual
    7681135f1b1 etcd: Build image 3.5.9-0
    7a4787ade10 openconsensus update to v0.24.0
    82d1e356de4 deps: go-gcfg update to the v1.2.3
    f03b5cdc083 update containerd/ttrpc to v1.2.2
    dd49af86b7b [UT] add ut for pkg/client/conditions
    f7948c6e2e4 use kubectl v1.27.1 in cluster addon manager
    eb1483fe64d user --prune-allowlist in kube-addons.sh
    20602c819be e2e framework: remove dependency on k8s.io/kubernetes/pkg/api/v1/pod
    2e2afc7fd27 Job: Use generic Set in validation
    1ffe3f467e8 lavalamp is taking a long break
    1ea17254bf0 hack/tools: bump logcheck to v0.5.0
    3fa55d469c7 fix a bug where the AttachedVolume is not printed correctly in the log
    8c82855467b When expecting pods count only active ones
    de882f5193b Job: Replace deprecated pointer utils with supported ones
    8f11f5bb2b5 DRA: use containerd 1.7 in kind image
    123845da886 Log a warning if a ImagePullSecrets does not exist
    3f3e1d507d0 add new metrics for the internal client-go transport generator
    e7c679c362c cidrset, multicidrset: directly use getIndexForIP method
    fe728996ca8 scheduler test: call frameworkruntime.WithLogger function for contextual logging
    b4563925678 Migrated `pkg/scheduler/framework/runtime` to use contextual logging
    bfb4f8b7071 etcd version monitor build go version update to 1.19.9
    0ae902fca4c update golang version of etcd build to 1.19.9
    3b634de6ffc test/e2e/dra: update README
    5fdeaa8e42c update for feedback
    6f23c774085 QueryParamVerifier falls back on invalid v3 document
    d5f4b9634c6 DRA: fix image build on Mac
    569695b0226 e2e/network: setting --max-time for curl
    5fd5768ef32 kubeadm: Make etcd member removal idempotent
    164113bc1c3 fix a bug where the KubeletConfiguration is not printed correctly in the log
    a5575425b03 add no resources found message to rollout-status command (#117884)
    c0611b6bb33 Return Skip in InterPodAffinity#PreScore under specific conditions
    11f1d241654 unit tests: Fixes kubelet util unit tests for Windows
    3a394bbeada fix:translations zh_CN LC_MESSAGES k8s.po error
    4634073d0b9 Use getter function for plugin subcommand resolution
    2c03afac4c8 apimachinery/util: stop using deprecated io/ioutil
    e3d5feb76c4 fix HPA plain metric calculate
    6607834207a Use the same report files as before
    9150e6b55a1 s/of referencedFrom/from referenceFrom/
    4bbf611773d Retool validation for pod HostNetwork ports
    ec3379a717e Do hostNet Pod-ports -> hostPorts in Pod defaults
    ef796dca9bb Simpler openapi gen - subprojects do themselves
    93b2845bec7 Codegen: subprojects openapi
    4909dbd0d7f Deprecate generate*groups.sh -> kube_codegen.sh
    c3971002c9d MinimizeIPTablesRestore to GA
    8f229057484 [refactor] refactoring flags and options in Expose cmd
    82e3fa0930e fix fd leaks and failed file removing for main pkg and cmd
    5289a7b029f fix fd leaks and failed file removing for test directory
    b94c6daa0b7 fix fd leaks and failed file removing for pkg kubectl and pod-security-admission
    982d2966cd3 fix fd leaks and failed file removing for pkg controller-manager and apiserver
    73aeed8766c fix fd leaks and failed file removing for pkg client-go
    f49cc5eb113 add remove_file in client-go util directory
    c8737346db4 Export GOMAXPROCS environment variable
    e865b30abd0 update serial number to a valid non-zero number in ca certificate (#117791)
    308ab380d7c Add unit testcases of refMap.
    23ac0fdaa52 APF: Dynamically compute retry-after based on history
    99ebc8d9f82 Tweak annotating kubemark nodes on startup
    aab02d52f4d Fix make etcd image failed
    91570a36614 promote ServiceNodePortStaticSubrange to beta
    e79daae6823 Chore: clearify need update test cases
    fb4d0150b96 Convert apiextensions-apiserver to new codegen
    29913a89735 Convert code-generator/examples to new codegen
    643bf1b0362 Convert kube-aggregator to new codegen
    1e0b7aab756 Convert metrics to new codegen
    e368f1b25bf Convert sample-controller to new codegen
    d0e5adb58bc Add a new way for subprojects to do codegen
    05b3449346e kubeadm: Add etcd client unit tests
    fc1b2287798 kubeadm: Use internal etcd client through an interface
    e740f8340ee Introduce CEL EnvSets for managing safe rollout of new CEL features, libraries and expression variables
    235c261196e Job: Fix a misspelling
    b4560f9e573 kubeadm: fix a bug where file copy(backup) could not be executed correctly on Windows platform during upgrade
    f2de1a00b8f storage/etcd: skip SendInitialEvents if the request is backward compatible
    bbf5c03dd80 Add NodeLogQuery e2e tests
    ddb8c8a38b4 remove ServiceInternalTrafficPolicy e2e feature tag
    16fecf3e761 Refactor APF handler in preparation for dynamic retryAfter
    d3237b72587 unittests: Fixes unit tests for Windows (part 7)
    ccb4ca89549 record podUID in refMap in watchBasedManager
    e4340f0d9bd Job: Use generic Set in controller
    22d0aa1d04a remove DevicePlugins featuregate
    27cdddeaf16 update Feature:KubeletCredentialProviders] e2e test name
    2ebc0cc0257 remove unwantedReferences
    57969c1b52c Fix etcd3 config changed
    4e24237f3bc e2e services: retry if healthcheck nodeport is not avaioable
    e560df770e3 respect local GOPROXY setting in build/common.sh
    c56839c0a1e etcd: Update version to 3.5.8
    64f2fe2357d kubeadm: fix crictl pull using wrong flag, use -i and -r
    936265e8707 Add podUID in AddReference and DeleteReference
    cd51c1803e2 Add new partial/full sync time metrics for iptables kube-proxy
    a862a5f2d24 Use the right executable ss/netstat in log message
    ae08fe1e199 ProbeTerminationGracePeriod promote to GA
    2cb215e1091 Add all describers to the exported DefaultObjectDescriber
    5ea40d14fd9 Added e2e_node test for sigkilled pods exit code and exit reason check
    3e57a0bd138 Add go.work and go.work.sum to .gitignore
    008576da073 Improve and simplify maintenance of APF bootstrap objects
    194ac957ad3 make resize of hollow objects more verbose in start-kubemark
    c3e77bf21cd Update podFailurePolicy comments from alpha-level to beta
    4fa7e444805 Remove gcp cloud-provider checks for kubelet version >= 1.7.2
    1c45bacfb0e mount-utils: fix flaky test 'TestFormat'
    6a5cf99aad1 pkg/proxy: human-readable messages
    c2c8b8d1783 pkg/proxy: using generic sets
    359bcec0e09 benchmark test to evaluate the overhead of podMatchesScopeFunc
    edd032e22b7 Fix incorrect calculation for ResourceQuota with PriorityClass as its scope
    e807a6aec57 Disable NewVolumeManagerReconstruction feature gate
    0c9f55588c5 Simplify creation of default KubeProxyConfiguration
    ec2cc36404e e2e: disable jig.ExternalIPs
    b849ff57b85 e2e reasonable grace termination period timeout
    791573ddb60 promote ProxyTerminatingEndpoints to GA
    b249b4ca9bb Promote ExpandedDNSConfig feature to the GA stage
    5aca41af50f [local-up-cluster] Use the kubectl we built
    8524d21bf48 Bump Ginkgo Poll Progress parameters to a sane level
    034528a9f04 scheduler perf: add DynamicResourceAllocation test cases
    1c52fb38759 Update publishing-bot rules for release branches to Go 1.19.9
    19f7cb23c8c e2e agnhost functionality to RST TCP connections
    63b69dd50ce Add support for CRI `ErrSignatureValidationFailed`
    859359ad6ae Fix strict linting
    a7035f54595 Pass Context to StartTestServer
    2d866ec2fc8 Teardown only scheduler in integration tests
    8969fdd2f51 QueryParamVerifierV3 resilient to minimal OpenAPI V3 documents
    cede96336a8 Depend on k8s.io/utils cpuset
    9f46cbc6fa4 Update k8s.io/utils version to v0.0.0-20230313181309-38a27ef9d749
    10a869fc752 Remove duplicated config fields from ProxyServer
    1f7c07f3553 scheduler: remove deprecated v1beta2 KubeSchedulerConfiguration
    a3848714f55 dependencies: update gh/Azure/go-autorest to latest version
    17c17da97b6 e2e_node: move getSampleDevicePluginPod to device_plugin_test.go
    c53cc4fe0db Update distroless-iptables to v0.2.4
    c4575c34382 Fix up detect-local-mode validation
    3734fe7ab1d Remove some useless error checks
    19885264f3d [go] Bump images, dependencies and versions to go 1.20.4
    d82684e691d Add check to skip PodTopologySpread PreFilter if no constraints are specified
    d22b9310e6e Allow override of prerelease/buildID portions of version at runtime
    36b760a9317 upgrade etcd deps to v3.5.8
    7c5573d326d Fix cmd, integration, and conformance tests
    69eccd41b89 endpointslice: reduce visibility of vars/funcs
    933b665c18c Upgrades spf13/cobra to 1.7.0
    3653b21e6ba Move glusterfs 1.25 deprecation notice to the deprecation section.
    9d19c207d22 fix: fixes flake in TestKMSv2Healthz
    561548e86c4 unit tests: Fixes kuberuntime unittests for Windows
    5f489a33277 feat: rename PodHasNetwork to PodReadyToStartContainers
    a40810a2d9d Add comment about removing the feature gate
    e51e5962d5a Use early return pattern to avoid nested conditions
    e1e38148bb2 Add DisruptionTarget condition when preempting for critical pod
    7be3f8e43f7 Remove old metric scheduler_goroutines
    e7396e35513 remove ability to re-enable serving deprecated versions of the runtimeclasses kind
    d96f83f02f9 windows-tests: Update connectivity check util function
    e496085bd34 Kube-proxy/ipvs: accept access to healthCheckNodePort on LbIP
    d257d5dfdc4 Trigger re-sync on any change to providerID
    40de26dcff8 KEP-3325: Promote SelfSubjectReview to GA
    d9524379210 Fix flaky HPA e2e tests by not failing on context cancelled (#117669)
    5fff8cae749 dependencies: klog v2.100.1
    d55b67b3490 Clean up brace whitespace in **/validation_test.go
    2ad2c15c9ca Update copyright year to 2023
    b464d084278 Remove custom fake svc lister in favor of regular indexer
    b899ae48477 remove genericfeatures.DryRun in 1.28
    c6bdde8051c Create e2e test for APIResources endpoints
    ab9c8eb1e8d Removing WindowsHostProcessContainers feature-gate
    077cc20f8af fixup patcher test to include field manager
    ad5cda4d219 remove checks for fieldmanager from handlers
    4721ec7519c include apiextensions types in apiextensions generated openapi
    08e756342c2 fix scale not being given gvk in CRD openapi schemas
    ffb9c076d77 add OpenAPIV3 config to tests and server options
    c2177dca5f6 add error for attempting to initialize field manager with nil typeconverter
    94909af68ae supply deduced typeconverter to apiserver tests
    302daa889c5 Throw error if OpenAPIV3 config is not provided
    1b766839677 filter out directives before taking patch value as-is
    6de6cd0a658 add integration test for nested $patch in SMP
    e00a9c3a0b1 add subtests
    ffeec1f4d44 Update compatibility data test
    ec997d5433a Generated files for NetworkPolicyStatus removal
    bff8a6cd9f3 Remove withdrawn feature NetworkPolicyStatus
    0fcf42f3211 Move test double queue to test file and unexport
    208af2d1d83 Localize SpyWorkQueue to cloud-provider for now
    a15013ec8b1 Document RetryError properly
    73bc9861d25 Improve error logging in processNextServiceItem
    18e978a89df Improve RetryError GoDocs
    de34540248a Update kube-openapi to fix race
    d0677f528c0 Add json tag
    69bc6855568 node: podresources: graduate to GA
    04ad946e8fb kubelet dra: lock before getting claimInfo CDIDevices and annotations fields
    aaa30439bdd reduce util pkg for testing in tempdir.
    4c83aae2cc7 kubeadm: replace intstr.FromInt with intstr.FromInt32
    026e7c7cb37 registry: replace intstr.FromInt with intstr.FromInt32
    0ee9f1b7a75 kubelet: replace intstr.FromInt with intstr.FromInt32
    1c4b97ea272 network: replace intstr.FromInt with intstr.FromInt32
    5bfe738af2e apps: replace intstr.FromInt with intstr.FromInt32
    94410ee8078 api-machinery: replace intstr.FromInt with intstr.FromInt32
    4911e9de4a7 api: replace intstr.FromInt with intstr.FromInt32
    79266560383 kubelet: Implement support for Windows podAndContainerStatsFromCRI
    14952cef5b7 kubelet: Move Linux stats to a Linux specific file
    fc8b4657c18 Add tests
    ea4ce5dc28e Alias api/errors instead of stdlib errors
    a179203bdba Support specifying custom LB retry period from cloud provider
    da922f0af67 Remove ability to re-enable serving deprecated discoveryv1beta1 APIs
    e28f3de6568 Revert "proxy startup-time config handling cleanup"
    d94c733ee2b Use absolute path instead requestURI in openapiv3 discovery (#117495)
    34d3c7520be update Deps gopkg.in/warnings.v0	v0.1.1 to v0.1.2
    944a4cd3114 Remove ability to re-enable serving deprecated autoscalingapiv2beta APIs
    671a3f43fdf Correct the changelog for GlusterFS removal in 1.26.
    859690d72a4 Added support for image credential provider for windows and arm64 on gce
    28c573358b0 test for init container restarts
    d727df1741e node: device-plugin: e2e: Additional test cases
    3dbb741c976 node: device-plugin: add node reboot test scenario
    a26f4d855d5 node: device-plugin: e2e: Capture pod admission failure
    96975737033 node: device-mgr: e2e: adapt to sample device plugin refactoring
    282a6a80b92 node: device-mgr: e2e: Update the e2e test to reproduce issue:109595
    d509e79837d node: device-mgr: e2e: Implement End to end test
    dc1a5926321 node: device-mgr: Handle recovery by checking if healthy devices exist
    53c9103a1de Set ENABLE_AUTH_PROVIDER_GCP to true in gce tests
    2572a430344 kubeadm: fix unit test failure on node with multiple cri endpoints
    f81b49d8739 Remove ability to re-enable serving deprecated eventv1beta1 APIs
    48d01d6d9b0 Remove ability to re-enable serving deprecated batchapiv1beta1 APIs
    c6f4bee98dd kubeadm: add deprecated FG UpgradeAddonsBeforeControlPlane
    4d9261c7567 Fix LocationOfOrigin shows up unexpectedly
    76fe41a996e chore: update cgroups and ttrpc versions
    0dbeff4b6e6 remove GA feature gates in 1.28 about network
    4e7b6e8ba49 remove DelegateFSGroupToCSIDriver featuregate
    fc0d2cd32f5 added init containers tests to simplify the sidecar KEP large PR
    258c4c4251e Remove duplicated config fields from ProxyServer
    9d4f10f5d28 Fix up detect-local-mode validation
    5ece6541b80 proxy/ipvs: don't bind nodeips to the dummy device
    5310305098a proxy/ipvs: add a GetAllLocalAddressesExcept() function
    f24d1d2c950 use go 1.19.x for etcd version monitor compilation
    91ee58050f8 wait: fix PollUntilContextTimeout godoc comment
    b3e0bc88640 scheduler_perf: let the test decide which informers are needed
    969d28b12b7 scheduler_perf: refactor common code
    91df71be549 correct etcd base image reference in the doc
    6b40cd8cd37 update test/conformance/image version to v1.4.2
    6c8be35fa86 update the etcd base image to v1.4.2
    1eca720dcc7 Refactor some watchcache tests
    7f370d651dd Migrated `pkg/scheduler/framework/plugins/podtopologyspread` to contextual logging
    54e6f609ceb Migrated `pkg/scheduler/framework/plugins/noderesources` to contextual logging
    152c1a02723 Chore: Replace re-initialized variables with create new ones
    37a9260d5c5 Migrate pkg/scheduler/framework/plugins/defaultpreemption/default_preemption.go to use contextual logging
    eeb13993832 Migrated `pkg/scheduler/framework/preemption` to use contextual logging
    550d4c00746 scheduler_perf: support test case selection via labels
    79de8879cbe OWNERS_ALIASES: add self to sig-node-reviewers
    217196c59fa Add ROX storage tests (#114628)
    6a4cf352b8b remove tracking annotation from validation and webhooks
    2af662b05fe Refactors discovery content-type and helper functions
    170d5ef9fa0 code cleanup for kubeadm
    902c4ecc90f Add jpbetz to approvers of apiextensions-apiserver
    0a582431593 node: device-plugin: e2e: Add test case for kubelet restart
    09100804722 node: device-plugin: e2e: Provide sleep intervals via constants
    4a0f7c791fe node: device-plugin: e2e: Update test description to make it explicit
    fd459beeff6 node: device-plugin: e2e: Isolate test to pod restart scenario
    5ab4ba62052 node: device-plugin: e2e: Annotate device check with error message
    5c4f397361f node: device-plugins: e2e: s/devLen/expectedSampleDevsAmount
    0aa6a5726a6 node: device-plugins: e2e: Refactor parse log to return string and error
    8ed861889aa feat(NodeVolumeLimits): return Skip in PreFilter
    28519e240ed Fix scheduler performance regression after adding plugin metrics
    c96188a38b5 remove seccomp profile path
    96eaed9980d cluster/gce: update cloud-controller-manager to use go-runner
    0d27d3cfffc cluster/gce: update cloud-provider-gcp image to latest tagged version
    4cdfe600e04 Fix image pull error type `ErrRegistryUnavailable`
    6da128bdb3e dependencies: go.uber.org/atomic v1.10.0
    87230578802 dependencies: update go.uber.org/multierr v1.11.0
    f7ce6f834a1 Chore: add ipfamilies tweak functions
    78b8af9fed3 scheduler_perf: update throughputCollector
    a325fdbbe5d update Deps gopkg.in/natefinch/lumberjack.v2 v2.0.0 to v2.2.1
    da3e7e37816 stop watcher when error occurs
    018564b8cfc change the seccompProfile field description to match the imlpementation
    6d8a0100f70 Fix typo in kubectl api-resources help text for --categories flag
    3c45b61b643 [KCCM]:  have providerID trigger re-sync, but not be required for nodes
    a4f98e4c1e8 Update staging/src/k8s.io/apiserver/pkg/cel/common/values.go
    e115d5234c2 Fix bug where CEL listOfString.join() results in unexpected error
    3229deda37b register missing metrics
    24e68b3c6ac use client-go metrics not only rest_client
    2bd42061b6e Remove support for EndpointsLeases and ConfigMapsLeases lock from leader election
    3f247e59edf Refactor cacher.ListerWatcher code structure
    892ebf2d253 Ensure version "*" is passed instead of "" for all authz checks (#116937)
    73d9a9cfa06 kubelet/kuberuntime: Fix flaky test 'TestGeneratePodSandboxConfig'
    e3d84aa93cd kubeadm: add the experimental (alpha) feature gate UpgradeAddonsAfterControlPlane that supports upgrade coredns and kube-proxy addons after all the control plane instances have been upgraded
    78e6cb1cccb intstr: add FromInt32, deprecate FromInt
    88e2c344390 Enable a bunch of generic storage tests for watchcache.
    860329c04b5 drop v1.25.0 API testdata
    440d5910f7d Chore: add app protocol tweak function
    06993afdd6a Chore: cleanup whitespaces
    3d8f7233da9 Chore: remove impossible and redunant cases
    4a6bc66e40f updating microsft/go-winio package to latest version
    60d25c3ed77 improve remotecommand testing fuzzing the data stream
    d76f5dae67c Add a comment to roleRef to document that it is immutable
    959c90c1d9a Chore: add deletion timestamp tweak function
    4169d7d0283 golangci-lint: allow exceptions for Go naming convention
    4f8eba2a0be Chore: add finalizers tweak function
    28db34a231f Chore: add load balancer tweak function
    1c465c51e80 Chore: add service port tweak function
    0cc7369196b Chore: add LBIngress tweak function
    23c242770fe Chore: add etp tweak function
    2f6bc661dc3 Chore: rewrite newService function
    f9bab9a60b0 add --concurrent-cron-job-syncs flag
    bc00f5c071f Update cri-tools to v1.27.0
    c3384191ea6 remove validation GCE-ism
    28ac914bc54 Remove repeated info
    e0d5c4aa93e Move info where its most relevant
    0a508ad8067 Update `kubectl edit` documentation
    d0412928961 Add v1.27.0 API testdata
    7514d8b3339 add shortnames for mutatingwebhookconfigurations and validatingwebhookconfigurations
    95fea2f2bff add test case for merging a patch against empty list
    3469bb05db7 kubeadm: fix unit test panic for TestNewResetData
    ed37e6986b6 uncomment exit trap to cleanup tmpdir
    63d44fdde58 retain KUBE_GOPATH on recursive kube::golang
    4d736a0435e cleanup update-mocks.sh
    726992f9db9 call kube::golang::setup_env before setting up worktree
    17db22d0558 Fix potential mutex usage bug
    39e52449f9f remove nodes resource from CoreDNS RBAC manifest
    7a14c5ad6dd ensure we can remove _output
    11f3ef1ed7d drop linux/arm build warning, now that 1.27 is released, this is covered by the release notes
    104c208d0fb add Authentication tracking request/error counts and latency metrics
    65f3454c1d9 fix undefined convertion
    8efeb5afcfd Dependencies Update google.golang.org/protobuf v1.28.1 to v1.30.0
    6f90c536330 Dependencies Update golang.org/x/tools v0.7.0 to v0.8.0
    5c584269a79 avoid volume copy in checkAttachableInlineVolume
    2bbd07c0192 remove defunct interactive tutorial
    1d15354ccb5 update gofuzz dependency
    2cd23c8b17c Update go-logr dependencies
    062f146d325 Replace the deprecated ioutil method in the pkg/credentialprovider directory
    be6709044ad  etcd: Build image 3.5.8-0
    6db4cbfde7b cacher: do not popExpiredWatchers when the cacher hasn't dispatched any event
    eab66a687b2 cacher avoid double locking (#117410)
    a02e94ae2b4 e2e: fix flaky test 'should contain OpenAPI V3 for Aggregated APIServer'
    0c54d9af6f2 Fix stomping os env in kubectl e2e tests
    766f6c3ad41 Include stderr in cred provider plugin errors
    eaba1703b1b enhancemanet: reduce calculation calls
    a8b808ee6ca Replace the deprecated ioutil methods in the test directory
    a959785f964 dependencies: udpate coredns/caddy to v1.1.1
    0297329795e Refactor watch bookmark tests to allow sharing between etcd3 and watchcache
    45e836a968a Generalize few watch tests from cacher
    f3b9e0ddc9b Replace os.Setenv with testing.T.Setenv in tests
    7cbbf47f5ea Cleanup environment in tests that call os.Unsetenv
    d38ac7e7c6b Replace os.Setenv with testing.T.Setenv in tests
    e8d3a4a105c Cleanup environment in tests that call os.Unsetenv
    2181eea4843 Replace os.Setenv with testing.T.Setenv in tests
    cf125a35611 Replace os.Setenv with testing.T.Setenv in tests
    b9ef1603223 Cleanup environment in tests that call os.Unsetenv
    240fccd7668 Replace os.Setenv with testing.T.Setenv in tests
    89467ad3e9b Replace os.Setenv with testing.T.Setenv in tests
    fc643d2e40c Replace os.Setenv with testing.T.Setenv in tests
    29b6c54d158 dependencies: update github.com/cenkalti/backoff/v4 to v4.2.1
    0a8343352b4 Document gomega.Equal() instead of gomega.BeEqual()
    d231d6022b0 Remove endpoints (old leader election) related RBAC from kube-controller-manager ClusterRole
    e340325024d Fix nil pointer in test AfterEach for volumeperf.go
    453f81d1cae kubelet: pass context to VolumeManager.WaitFor*
    4de0d2c6f8f use generic set in storage/validation
    3ac77335303 Add `saschagrunert` to `sig-node-reviewers`
    7fb88eec73c support fieldSelector spec.hostNetwork
    4d73864026c Dependencies Update golang.org/x/timet 90d013bbcef8  to v0.3.0
    ff9ebfa90de e2e framework: control k/k/pkg imports
    ee99ca25ee6 Remove unnecessary if judgments
    1359ebcc5b0 fix doc mismatch
    a6339e2702f proxy/conntrack: using common conntrack cleaning function in proxiers
    399f09dde05 proxy/conntrack: common function for cleaning stale conntrack entries
    efb05630946 proxy/conntrack: moved pkg/util/conntrack -> pkg/proxy/conntrack
    37ea51fd567 Improve the performance of map usage
    9c0153aef9e KCCM: add providerID predicate to service controller
    d3c103edce7 Re-work logic in shouldSyncUpdatedNode
    dc4f6f9da6a e2e framework: remove last dependency to k/k/pkg/util
    40521fe3601 e2e framework: remove last dependency to k/k/pkg/kubelet
    030debc1990 changelog: fix formatting issue with v1.27 change log
    4e8c5364bc6 CHANGELOG: Update directory for v1.27.1 release
    1b93abb9bac Move kubelet config API to e2e_node
    4e928c96b5e skip checks when topologyPolicyName is PolicyNone
    71a989e5e9c Fix CHANGELOG-1.27 correct
    06dc3d00fcc e2e/apimachinery: Add an e2e test for the API Streaming feature
    8d19c0002bb Add node check to vSphere cloud provider
    3b7c14e8cfb Remove unnecessary int type conversion
    36e6e759182 dependencies: udpate seccomp/libseccomp-golang to v0.10.0
    5bce18c98ec dependencies: update go-semver to v0.3.1
    d7270f4ba72 dependencies: update go-oidc to v2.2.1
    b0d89a7807e dependencies: update github.com/gofrs/uuid v4.4.0
    1595d7f52d7 dependencies: update go-systemd to v22.5.0
    9cfdf989eda dependencies: update gh/fvbommel/v1.1.0
    6b70710b0d1 dependencies: xlab/treeprint v1.2.0
    6320b6843a2 dependencies: update netns to v0.0.4
    9e2bb40e158 fix typo annotation key notes.
    becf73a82b1 add invaild scope test case
    c4e1b01416e replace spew methods with dump methods
    a96358ac0fa Remove some useless error checks
    867be8fc3e2 get rid of e2e/framework -> k/k/pkg/kubelet dependency
    2bb35e08f4b Clarify kubelet/kube-proxy iptables rule skew constraints
    6d13cad2cf5 dependencies: update gh/Azure/auto-test/{adal,validation}
    432a3016a49 Revert "Merge pull request #113151 from ncdc/refactor-crd-conversion"
    9c5a66e2080 Revert "CR conversion: protect from converter input edits"
    ed0124855aa add log includes pod preemption details
    0979d554435 unit tests: Skip flaky tests on Windows (part 2)
    2d06fad5163 dependencies: azure-sdk-for-go to v55->v68
    625c3025057 change pv recycler scrub cmd to find -delete
    c042837a761 truncate the precision at a millisecond for image pull event message
    804d9f47c9f kube-aggregator: correctly use client-go TLS cache with custom dialer
    db5d74935ee optimize evict sandbox logic
    ccf7ddacfce replace ioutil with os, update doc
    5668399a87c Codegen: use openapi-gen via k8s.io/code-generator
    b23ab389b4f Add SIG ownership to controller/nodelifecycle
    375e3cf869b CHANGELOG: Update directory for v1.24.13 release
    f7295ac5e08 CHANGELOG: Update directory for v1.25.9 release
    d567d61aa56 Fix a data race in TopologyCache
    a62563f1305 Fix TopologyAwareHint not working when zone label is added after Node creation
    83a1774df2b CHANGELOG: Update directory for v1.26.4 release
    a7a8cd6e5de Codegen: subprojects: nuke existing files
    bc302fa4144 Replace uses of ObjectReflectDiff with cmp.Diff
    9627c50ef37 Replace uses of ObjectGoPrintDiff with cmp.Diff
    29c0b73d640 Replace uses of diff.ObjectDiff with cmp.Diff
    dd7af241c11 Replace diff.ObjectDiff with cmp.Equal
    97bab44cae3 Replace apimachinery diff.StringDiff with cmp
    4f6714ef42d apiserver/etcd: add request and request_error metrics (#117222)
    d09842e0adf node-lifecycle-controller: improve monitorNodeHealth test-coverage (#116687)
    be101a748dd Remove some unused winkernel arguments/fields/functions
    8a790ac2e1b Remove unused ProxyServer.EventClient field
    9754386c764 Remove write-only ProxyServer fields
    b4c384ebfb2 vendor: bump runc to 1.1.6
    c69689659a6 Add `--concurrent-job-syncs` flag to kube-controller-manager
    4438208511e api: encode NamespacedName with lower case in JSON
    476e407ffd2 cacher: prevent a potential deadlock
    7cdffe37c1d update container storage interface spec to v1.8.0
    10a8ec5b2cc use case-insensitive header keys for http probes
    a6173fad88a Delete duplicate code in schedule.go
    5588e8a4cd0 hack/logcheck.conf: remove certificate controller exception
    277c03fc799 remove these unrelated openapi files (#117051)
    9a468563070 remove reuse buf todo (#117033)
    5da386745af Kubectl convert - warn users with NotRegisteredError and Fail on all other errors (#117002)
    0eec63fd687 fix the mistake in the release note
    02d8fc28faa fix: add the bug as a known issue o on the v1.26 release note
    75f17eb38fc optimize watch-cache getlist (#116327)
    9c15d75f234 Migrated `pod-security-admission` to contextual logging (#114471)
    2bed67d0f1c Revert "Optimization on running prePreEnqueuePlugins before adding pods into activeQ"
    73eb7c09309 Codegen: easier to read logs for subproject output
    bbbb695060a Codegen: subproject: chdir to the project dir
    893ec0ca453 Codegen: simpler k8s.io/code-generator/examples
    af29cca6ced Codegen: new tools will not become part of 'all'
    5f7345deaac Codegen subprojects: consolidate generate-*groups
    95e614b3717 Codegen subprojects: deprecate "all" in scripts
    a94ed5b8ac8 Codegen metrics: include v1beta2
    8b68e063e14 Codegen subprojects: regen defaulters when needed
    5200f4b0d36 Codegen subprojects: reify 'all' into explicit
    201653aa870 Trivial change to reduce diffs
    901dea73073 Fix azure disk e2e after migration
    d212041d513 hack/local-up-cluster.sh: Remove old dynamic certs
    ed5dd38dcdc CHANGELOG: Update directory for v1.27.0 release
    464edfe6f6e test/integration: create nodes directly with kubernetes.io/hostname label
    9204e6b286e remove unused constant `expansionFailed` in expansion test.
    4491ba89171 rename variable delete to avoid collision to builtin variable
    d04d7ffa6ec kubelet: Mark new terminal pods as non-finished in pod worker
    0020631985e test: Add node e2e to restart kubelet while pod is terminating
    aa73f06e569 scheduler perf: allow creating 0 items
    49bbf7c2681 scheduler_perf: fix race condition
    a869a898257 scheduler perf: remove cleanup func
    b039a2ff2c7 Add new contribex leads to sig-contribex-approvers
    9363afc6502 Fixing broken tests
    d102a6fea51 HPA Controller - Update Owners
    8d18ae6fc24 Use the generic Set in scheduler
    b04ca79445e Add unit tests showing the effect of unlimited containers when calculating pod limits.
    1dec97436c8 Fix typo at job_test.go
    046bb892566 supported version of etcd 3.5.7-0 for Kubernetes v1.27.0-rc.0
    f138d29bf2d watchcache: currentCapacity acquires read lock
    c77ad3116f4 kubelet: fix setup of emptyDir with sizeLimit (fsquota)
    ea74a2d877d cpumanager: fix typo in godoc
    1cce3b3e2f5 wait: fix incorrect suggested method
    d3ae6c2df3c Specify KUBE_ROOT for test-e2e-node/AWS to work
    d9bd22115ff Alias deprecated genericclioptions.IOStreams with new one
    26b35ce36ae Remove endpoint related RBAC from scheduler cluster role
    7fa3d54ea5b unittests: Fixes server journal unit test on Windows
    08a324bf512 cluster/addons: set metrics-resolution to 15s
    eba18d503cc cluster/addons: bump metrics-server to v0.6.3
    88e055059cd component-base: avoid data race in log format registry
    a2fb32870f3 test/integration/auth: fix data race
    1dde8ef026e test/integration/framework: avoid race around grpclog.SetLoggerV2
    f91518b81a5 Add genericiooptions in allowed list of genericclioptions
    b4e4db336f6 More migrations from genericclioptions to genericiooptions
    5e1c6cd0d4f pkg/registry/flowcontrol: avoid race condition during Create
    934516791c6 Swap assert.Equal parameters oders to follow convention
    2d06601b81c RBD:  e2e containers base image has been udpated to F38
    0518dffd259 iscsi: e2e containers base image has been udpated to F38
    8d9386fc402 Remove genericclioptions.IOStreams struct
    c3497b30aca More migrations from genericclioptions to genericiooptions
    00c30941260 Migrate genericclioptions.IOStreams usage to genericiooptions
    51a7751a496 Move genericclioptions.IOStreams into genericiooptions.IOStreams
    e450ed98122 CVE-2023-27561: Bump runc go module v1.1.4 -> v1.1.5
    3d3686b9cf0 Return error for localhost seccomp type with no localhost profile defined
    e1bcfd47da9 Sort unmounted volumes message in volume manager
    79b3126f00a skip clear quota if FSQuotaMonitoring is disabled
    0a37f09c32b Fix directory mismatch for `volume.SetVolumeOwnership()`
    731068288e1 correct storage class selection message
    cc8cd88a94d remove duplicate validation for csi
    978da1e8f13 remove GA feature-gates
    bda73bd1129 Refactor remote runners
    e389d140ae6 fix as suggested
    457bb58ebbf kubectl events: Support fully qualified names for --for flag
    1893f639d03 test: Fix flake in node e2e mirror pod tests
    ffcf3ee6f87 feature(pkg/api): warning for Pod with null labelSelector in PodAffinity and TopologySpread
    70369bfe299 remove GAed KubeletCredentialProviders
    5662566e03a Set GOMAXPROCS explicitly
    56755b8ffdb fix doc mismatch
    8e36e948ce6 verifyVolumeNoStatusUpdateNeeded may cause flake and so only keep the last ones
    dac85fe2d3f [KMSv2] cleanup comments in v2 proto api
    feba08a6947 Create local copy to avoid potential race condition
    29503fd8d45 openapi: Make file client more easy to re-use
    ed48dcd2d71 kubelet: Ensure pods that have not started track a pendingUpdate
    db92cc13880 ftr(etcd): add benchmarks
    05f4e497f1d Deflake TestGetListNonRecursive
    906f0607efc Clean up kms test
    d3f6cb717f7 update conformance yaml
    7bfcfc4d5de docs: fix storage e2e test README
    f7765eb0d42 Add damemi to emeritus SIG scheduling approvers
    bbbd366cf39 Move damemi to sig-scheduling reviewers
    397cc73dc9b delete unused functions in pkg/controller directory
    47f8d42a6ba Add CecileRobertMichon to sig-cluster-lifecycle-leads
    449f847630e [KMSv2] update ci script and add readme
    86e1f4b9d10 e2e node: bump all nodes ready timeout
    beb329f4bfa Do not look at VPC-related resources outside the cluster's network
    8d92cfb1316 Added conversions to/from NamespacedName
    df0a2538205 generate ReportingInstance and ReportingController in Event
    e9b384f5a75 fix typo
    f638e2849fb replaced spew.Sprintf with a util pretty print function
    838ed7feb53 Improve the performance of map usage
    f6fa250e304 Add API approvers
    03be789851d Fix sample-controller docs after moving to context-based cancellation
    99ad88a2611 Remove unnecessary int type conversion
    f2fe1fff655 [KMSv2] add tests for generate transformer
    479fcf0b13f kmsv2: validate encrypt response at DEK generation time
    8d644fbc725 return skip in volumerestrictions
    ade63dd7647 cronjob: add ut for namespace terminating cause no extra log
    9a776cbf212 kubelet pod-resources: e2e node test add failure description ExpectNoError
    1031977b7d8 kubelet PodResources API: follow-up review comments
    ec9515a828e Add structured alternatives to strings in client-go/tools/cache
    2b01f63b115 move check for noop managed field timestamp updates
    07ebb22db92 added known issue for 1.27 release
    80480f8e215 combine conditional checks
    7a6d58001b7 handle event errors caused due to terminating namespaces
    af95a76bb21 cri-api: fix comment lines about PROPAGATION_PRIVATE
    daa1d287e4d fix GetPodVolumeClaims in comments
    c14068c2023 deflake: Add retry with timeout to wait for final conditions
    fbf33e32e61 Fix memory leak in kubelet volume_manager populator processedPods
    27f84b755e1 Migrated the volumezone scheduler plugin to use contextual logging
    ddc13e983b5 Chore: add selector labels tweak function
    4cab11f26f0 Chore: add persistent volume claim retention policy tweak function
    ba9dfe686fd Chore: add persistent volume claim template tweak function
    f97d3cf7486 Chore: add rolling update max unavailable type tweak function
    1b17b4fa799 Chore: add rolling update partition type tweak function
    f3ffeae426f Chore: add update strategy type tweak function
    5e0161b3de8 Chore: add labels tweak function
    ec34891782c Chore: add annotation tweak function
    b907d5af49f Chore: add finalizers tweak function
    18ba7c0e433 Chore: add ordinal start tweak function
    3eb34d8b6ce Chore: add min ready seconds tweak function
    2161d095fa1 Chore: add template restart policy tweak function
    4418a9f5906 Chore: add replicas tweak function
    7fc08e0ce70 Chore: add pod management policy tweak function
    77c7d6efcf6 Chore: add basic make function for stateful set
    4a667a1026c fix: remove case sensitive checking of probe headers
    81a0ea3da3c return name when error occurred in csi-translation
    a2cf4e73459 use describe node to print node events as well
    e5674903178 fix: remove last ip when apiserver was shut down
    f59ac6e6524 [WinProxy] Adding additional validations to queried endpoint list iteration.
    db5590a194b Remove sig-network-driver-approvers alias
    fc8892d26d7 Add more labels (esp. area/kube-proxy) to sig-network OWNERS
    2f3800e1007 Make pkg/util/iptables and pkg/util/ipvs owned by sig-network
    10b36075df6 Cleanup: use Set instead of map in endpointSlice utils
    eb60dce33b0 deprecate ExperimentalHostUserNamespaceDefaulting
    94f2d351644 Wire bootstrap token authn secret lister only when it is enabled
    d71aea434e5 docs(readme): add go report and latest release badges
    a780544f58c add log for kubemark start
    d25572c3892 kubelet: HandlePodCleanups takes an extra sync to restart pods
    41ed0e12341 Add an image for kubectl
    1c7155e7ff6 Move hollow_proxy.go from pkg/kubemark to pkg/proxy/kubemark
    8d3a498c879 don't ignore UID impersonation in webhook clients
    364b66ddd65 admission ApplyTo: take in clients
    630af564be3 Update cri-tools to v1.26.1
    1aeec10efb7 DRA: get rid of unneeded loops over pod containers
    017bb93887f certificate controller: use contextual logging
    c94a9a14d8d update gofmt
    8cbe9fe543e trigger update event when service ipFamilies changes.
    b430464df06 gce: podresources:  don't disable on windows
    6b4ffdb9f75 node: re-implement Localendpoint on windows
    195fc2f5162 kubelet: podresources: rename variable
    d6d19a290de Simplify statefulset fuzzer
    376bda41c74 undeprecate kubelet --provider-id flag
    8bb328680c0 upgrade cluster-autoscaler v1.26.1 to fix ci warnings
    c94bcabd7e2 [fix][typing] startResourceClaimController errrorf message has typos
    31e1df9ae6c Bump Konnectivity to 0.1.2
    aadb87bdcdb kubelet: Do not mutate pods in the pod manager
    13192176002 Remove vestigal err check from CEL admission controller.
    a6ffbb41f8e Squashed commit of the following:
    bbf2b968c89 skip pod resource check when request is zero
    64ecb161d47 Codegen: git grep returns non-zero if no match
    241d46d1dd5 Codegen: deepcopy needs to run before swagger
    3405853e6d0 Codegen: clean up stray ls-files use
    3dd0c416639 support short name for flowschema and prioritylevelconfiguration
    e2b10505162 add some buff for pod initial restart count that is not zero
    efee9b4866d cleanup: promote ProbeTerminationGracePeriod to conformance tests
    b0eeeacfc0c fix: the volume is not detached after the pod and PVC objects are deleted
    4d3f92d5f75 Update toplogy keyset initialization
    a890724f9ef cronjob: return immediately when failed to create job for the namespace is terminating
    37aff025ff8 cleanup: remove Clear for fake job controller
    b7cdbca2374 Add more tests that should exist but don't for some reason
    67d7f09eb82 hack/OWNERS: add pohly as reviewer and approver
    5dca1be0160 Add tests
    bab2c18c246 Add jsonpath support for explain
    77692f1b1c5 fix linting
    fabf1cba947 Add warning about TLS 1.3 cipher suites
    6ad156d80ee Cleanup: modify some sentences about statefulset
    13354d3da4d Add note about TLS 1.3 cipher suites
    c50c19d13af remove unused not api functions in the pkg/apis directory
    b1e3326eaee Fix gorestful typos in the APIServerHandler.Director docstring
    a3b44b574fb cluster/gce: Fetch image from image family
    26f0325734c fix typo in volume util
    0311a4e8e6d Fixed typo
    9b9f22f06b5 Fix unknown field error in deployment lifecycle e2e
    6f19e8656f5 Apply suggestions from code review
    1134134e727 kubelet/cm/containermap: Improving test coverage
    87f094c5e88 Replaces path.Operation with filepath.Operation (part 2)
    5111bced373 fix test cases that may be incorrect
    9a3c4aa2dc9 initial e2e tests for ValidatingAdmissionPolicy
    bd778449f4d versioning of CRI API
    34d980e7709 i18n: Fix bug where package-level variables are not translated.
    ad2d23eb9ff Add test for cmd/kubeadm/app/phases/upgrade/compute.go
    fd4adba9acd add sig/storage label for pkg/controller/volume package PR
    2557b35202f controller: add non-exist node test case
    95fe0a158c2 Fix strategic merge patch $deleteFromPrimitiveList bug
    76c8765bda5 ensure etc-host file permission is 644 whatever umask is
    73883c71574 Remove default annotations from copied storage class
    f16f9100e57 cleanup: delete unused AuditDynamicOptions in apiserver
    583ea17efd6 Add parameter to set SecurityContext for containers in tests

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-11-06 16:21:12 +00:00
Bruce Ashfield
2c49b125b5 docker-distribution: update to 2.8.3
Bumping distribution to version v2.8.3-2-gd607c6cc, which comprises the following commits:

    6b9f48f3 docs: remove blank line
    a4fa6992 Add v2.8.3 release notes
    5e6b1b5c Do not close HTTP request body in HTTP handler
    29b00e8b digestset: deprecate package in favor of go-digest/digestset
    d1ab2430 [release/2.8] vendor: github.com/opencontainers/go-digest v1.0.0
    3dda0677 deprecate reference package, migrate to github.com/distribution/reference
    3c6f7788 update to go1.20.8
    31f5cd48 Handle rand deprecations in go 1.20
    29b8ba0b Update to go 1.20
    3316b198 Update to golang 1.19.10
    444d053e update golangci-lint to v1.52
    b800af44 ignore SA1019: ac.(*accessController).rootCerts.Subjects has been deprecated
    0a98a00d Ignore SA1019: SplitHostname is deprecated.
    2ec0471b Dont parse errors as JSON unless Content-Type is set to JSON
    cb121c3f Set Content-Type header in registry client ReadFrom
    b57133cc referene: fix formatting of "deprecated" comment.
    2c4bf1a6 replace deprecated function
    110cb753 Enable build tags in 2.8
    2d62a402 s3: add interface assertion
    2548973b Enable Go build tags
    ab7178cc Pass BUILDTAGS argument to go build

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-11-06 16:21:12 +00:00
Bruce Ashfield
9e8a6af947 moby: update to v24.0.6-tip
Bumping moby to version v24.0.6-36-gf9b8a35ac4, which comprises the following commits:

    58c1c7b8dc Limit OOMScoreAdj when running in UserNS ("Rootful-in-Rootless")
    f87492689e update to go1.20.10
    3715eaf078 update to go1.20.9
    31f49bd685 Make one-shot stats faster
    37796c7029 Revert "daemon/logger/etwlogs: rewrite to use go-winio/pkg/etw"
    51dc5fb58f integration/internal/swarm: rename max/min as it collides with go1.21 builtin
    4e11c149d1 pkg/tailfile: rename max/min as it collides with go1.21 builtin
    0b97ecddb0 pkg/plugins: rename max/min as it collides with go1.21 builtin
    710c748801 pkg/sysinfo: rename max/min as it collides with go1.21 builtin
    b340a777c0 pkg/archive: rename max/min as it collides with go1.21 builtin
    e996dffe56 daemon: rename max/min as it collides with go1.21 builtin
    334719141c api/types/versions: rename max/min as it collides with go1.21 builtin
    0702941de6 restartmanager: rename max/min as it collides with go1.21 builtin
    bed0c789dd daemon/cluster: format code with gofumpt
    30fe6540a5 libcontainerd/windows: Don't reap on failure
    1320e79bd8 libcontainer/windows: Remove unneeded var declaration
    a1ba69a82b libcontainer/windows: Fix process not being killed after stdio attach failure
    1f3ea9841e update containerd binary to v1.7.6
    58224457c3 ipam: Replace ChildSubnet with parent Subnet when its mask is bigger
    df983b7990 daemon: fix under what conditions container's mac-address is applied
    f014c349a0 update to go1.20.8
    e2ab5f72eb 24.0: Update buildkit to fix source policy order
    8216da20af more robust dockerd-rootless-setuptools.sh
    c35376c455 volume/local: Don't unmount, restore mounted status
    5d4cc0b5b5 integration/liveRestore: Check volume content

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-11-06 16:21:12 +00:00
Bruce Ashfield
c431b46959 crun: update to v1.9.2
Bumping crun to version 1.9.2-12-g8af8ee2, which comprises the following commits:

    bdb95d6 features: export intelRDT status
    e2f9853 update: support update of Intel RDT
    05bc600 libcrun: support update of Intel RDT
    41ae2a2 libcrun: plug Intel RDT support
    52d5faa libcrun: add Intel RDT support functions
    a7a1af9 container: fix early return
    122f8ae linux: open mounts before setgroups if in a userns
    64105d9 Use overlay and single nix derivation
    35274d3 NEWS: tag 1.9.2
    8f6b76f tests, podman: enable more tests
    255268d Reset the inherited cpu affinity after moving to cgroup
    745b6d9 tests, podman: run tests on overlay
    f42e279 tests, podman: get more information on the environment
    379b17c tests, podman: avoid deprecated options
    bd251c9 rpm: do not special case krun man
    fe4e15d build: install krun.1 only if krun is enabled
    0cabf0c rpm: fix manpage installation
    67ee730 Packit: notify @containers/packit-build team on failed tasks
    1f2769e linux: fix fallback mechanism in a userns
    a0b7e18 NEWS: tag 1.9.1
    bb4e975 utils: partially rewrite improve error message patch
    14afa8a utils: fix ignore ENOTSUP when chmod a symlink
    0acb237 oci-validation,test: lock tap to @16.3.8
    bbb1c87 tests: install device-mapper-devel
    75dd83c podman, test: disable more tests failing in the CI
    98db1d2 utils: improve error message for ensure_dir
    57262a2 utils: ignore ENOTSUP when chmod a symlink
    523eed3 linux: add new fallback when mount fails with EBUSY
    2239c50 linux: teach MS_MOVE to do_mount
    c9a1a12 Add man page for krun
    8645d1a Fix CentOS 7 Build by Checking if FSOPEN_CLOEXEC exists
    a538ac4 NEWS: tag 1.9
    1e2f0c4 fix: correctly handle unknow signal string
    41fa779 crun delete: call systemd's reset-failed
    76b80ae fix random errors

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-11-06 16:21:12 +00:00
Bruce Ashfield
8933a2cf4c cri-tools: update to v1.28.0-tip
Bumping cri-tools to version v1.26.0-353-gf8733ddf, which comprises the following commits:

    f570bc09 Bump golang.org/x/net from 0.16.0 to 0.17.0
    75c136c8 Validate sandbox and container metadata
    4f3475f5 Bump github.com/onsi/ginkgo/v2 from 2.12.1 to 2.13.0
    93bc1bf2 Bump golang.org/x/net from 0.15.0 to 0.16.0
    57d7848c Switch to `github.com/distribution/reference`
    f61309ae Bump github.com/docker/distribution
    6a1c7883 Bump github.com/onsi/gomega from 1.27.10 to 1.28.0
    024268e7 Bump github.com/onsi/ginkgo/v2 from 2.12.0 to 2.12.1
    04fb3af1 Verify required checkpoint parameters are set
    544d4792 Remove duplicated import "k8s.io/cri-api/pkg/apis"
    dbd6c086 Enable staticcheck linter with SA1019 to find deprecated methods
    06bb4c99 Use executor.StreamWithContext instead of deprecated executor.Stream
    092eddc1 Address deprecation of Strings.Title
    9059543c Remove unnecessary rand.Seed
    52fcfd43 Address deprecated io/ioutils
    833ab93c Address deprecated call cli.NewExitError of urfave/cli package
    3e036cfa Bump github.com/onsi/ginkgo/v2 from 2.11.0 to 2.12.0
    b84b1817 Bump actions/checkout from 3 to 4
    4b5c3fe1 Update version compatibility between Kubernetes and cri-tools
    7458ab35 Bump golang.org/x/net from 0.14.0 to 0.15.0
    aa049113 Bump github.com/docker/docker
    71beb1da Fix containerd tests

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-11-06 16:21:12 +00:00
Bruce Ashfield
82d2ac74cb cri-o: update to 1.29.0
Bumping cri-o to version v1.27.0-662-gf8ccf314a, which comprises the following commits:

    3b7ab35ff build(deps): bump crate-ci/typos from 1.16.17 to 1.16.18
    f7d3228a7 Avoid an unnecessary c/storage lookup in ListImages
    96e6aa9b5 Inline getImageCacheItem into ListImages
    e4f2b888d Split imageIsBeingPulled from ListImages
    c7188518d Simplify ListImages more
    1cfe3c8bb Simplify appendCachedResult
    ae597ba16 Remove the "filter" parameter to ListImages
    e0750462f Turn ListImages(filter) into ImageStatus
    50ce23e89 Simplify storageImageStatus a bit
    2cb166512 Simplify ImageStatus a bit
    1b0e82a22 Split storageImageStatus from ImageStatus
    ad8be44cc Simplify error handling in ImageStatus
    203612b23 Move the ImageResult -> ImageStatusResponse conversion out of the loop
    97329e4fa build(deps): bump ossf/scorecard-action from 2.2.0 to 2.3.0
    013a0998c Update release-notes to v0.16.1
    dc44bac35 Fix quoting issue in usage help text
    f22040da2 crio: add support for --imagestore
    1d0e5d074 build(deps): bump crate-ci/typos from 1.16.15 to 1.16.17
    bb4ab8110 Run GitHub actions in `update-nixpkgs-*` branches
    45a6e70e7 Update nixpkgs
    8ec74c5fa contrib/test: pin the latest release of runc
    2505851e0 Update crun to 1.9.2
    f3e53a058 test: Add test for image pinning behavior
    12cabc651 internal/storage: compute Pinned field from recently loaded image
    0fd641c6d build(deps): bump crate-ci/typos from 1.16.14 to 1.16.15
    347194d3f build(deps): bump crate-ci/typos from 1.16.13 to 1.16.14
    f532cbd89 Add nixpkgs update cron
    8fa9260fc build(deps): bump crate-ci/typos from 1.16.12 to 1.16.13
    72280f09c Update install.md removed spaces (markdown lint error)
    fe9ed4e3a storage: add support to split filesystem using imagestore
    544db3209 RFC: Use RuntimeContainerMetadata for passing container data
    c9309ebb6 Add a layer name in one step
    4f5a2e95c Microoptimize reference creation
    3a77cc956 Eliminate the now unused imageAuthFile and isPauseImage parameters
    61d86923c Simplify createContainerOrPodSandbox again
    a936e6861 Simplify CreatePodSandbox
    39095cbb4 CHANGE: Simplify CreateContainer image lookup
    a09320639 Eliminate the clearly dead part of the just copy&pasted code
    a7f841955 Blindly copy the image handling code from createContainerOrPodSandbox into callers
    6cabaaee1 Remove an imageID parameter to CreatePodSandbox
    2b4652c52 Fix/Add error handling
    8e1e1e672 update containers storage to 1.50.2
    5d8538318 build(deps): bump DavidAnson/markdownlint-cli2-action from 12 to 13
    6c1574efc Fix nix `dirty` build
    d951faa32 Make the release branch fast forward a cronjob
    5dee42bcf build(deps): bump crate-ci/typos from 1.16.11 to 1.16.12
    91b83b10c Fix release notes job
    096f803a3 Bump golang dependencies
    7d86c2e25 docs: fix CI failure
    f182fb411 Bump version to 1.29.0
    51bae7a96 Remove the IsFullIdentifier check from Server.pullImage again
    7eb248b1a Don't silently modify the caller's SystemContext
    2d72e13e6 Fix a VERY misleading comment.
    472d2c5f9 Remove an unnecessary check
    23d7c35d5 Remove an unnecessary parse call
    6f9a7173f Remove an unnecessary check
    8c3e301da Optimize handling of full image IDs
    5f45d232a Remove the ErrCannotParseImageID special case
    335d4b0f3 Fix a VERY misleading comment
    b489507c9 Remove a completely unused ErrImageMultiplyTagged
    98f171147 Make Server.pullImage responsible for rejecting image IDs
    e292f17c0 docs: Update the containers/image branch name
    6005b03f2 contrib/test/ci: remove the redundant golang setup file
    059a7b5f8 Add conmon-rs binary to bundle
    4ac3aeef2 internal/storage: address unpredictable behavior of image names
    61a0b7c79 config/server: add functions to check IDMap support in runtime
    9ce778351 Remove golang-go from debian installation
    3d450274e Pause container during checkpointing
    e069cc827 contrib/test: fix golang version extraction for CI
    0774b644d build(deps): bump actions/checkout from 3 to 4
    d6f4c7100 Adopters.md: fix linting issue
    d805d28fd Add new adopter
    940de5009 build(deps): bump crate-ci/typos from 1.16.10 to 1.16.11
    ac9c6fbfe Don't vendor main Kubernetes repo any more
    4a1e406b0 Mention Roadmap GitHub Project in README.md
    bacc5e638 build(deps): bump crate-ci/typos from 1.16.9 to 1.16.10
    9cbd8d555 build(deps): bump cachix/install-nix-action from 22 to 23
    798a8d701 build(deps): bump actions/checkout from 3 to 4
    758e3d8c3 cgmgr: reorder setting of sched_load_balance for pod cgroup
    0e6b13e08 build(deps): bump crate-ci/typos from 1.16.8 to 1.16.9
    ff434ba27 build(deps): bump github.com/containers/podman/v4 from 4.6.1 to 4.6.2
    0002792fa build(deps): bump DavidAnson/markdownlint-cli2-action from 11 to 12
    3aa18aff3 Switch to go 1.21
    5b9f7f96d Add dependabot group for OTEL deps
    d7ad3fcbf build(deps): bump github.com/containers/buildah from 1.31.2 to 1.31.3
    85c3d9db1 Bump conmon and crun dependencies
    5ab387fe5 build(deps): bump github.com/containers/common from 0.55.3 to 0.55.4
    a4f2d8071 server: remove deprecated functionality
    28ae1f81a Fix bundle e2e tests
    a9afa0442 Add ppc64le binaries to release notes
    c8f8ca498 Add Kubernetes package test for static binary bundle
    734e1538c build(deps): bump github.com/google/uuid from 1.3.0 to 1.3.1
    873c0f420 Policy: Allow backport of independent features
    bebd421b5 Configure systemd install path based on OS
    ec4bbac12 feat(cmdrunner): add support for context
    59f9b823d move shmSetup in server/sandbox to internal/factory/sandbox
    d1946b30a blockio: add blockio_reload option
    ce1cdfa54 main: create parent crio dir before creating clean.shutdown.supported

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-11-06 16:21:12 +00:00
Bruce Ashfield
022ec69e9b containerd: update to 1.7.7
Bumping containerd to version v1.7.7-5-g5e21abb18, which comprises the following commits:

    d0a1fedb5 *: add runc-fp as runc wrapper to inject failpoint
    04491240a containerd-shim-runc-v2: avoid potential deadlock in create handler
    6982a0df5 containerd-shim-runc-v2: remove unnecessary `s.getContainer()`
    0e2320398 Uncopypaste parsing of OCI Bundle spec file
    a34fa5681 Prepare release notes for v1.7.7
    6ca0aebf0 Allow for images with artifacts to pull
    7df492a95 remotes/docker: Fix MountedFrom prefixed with target repository
    7779ce64e remotes: always try to establish tls connection when tls configured
    b3db314a5 Bump x/net to 0.13
    a83c66813 Require plugins to succeed after registering readiness
    171d76849 cri: call RegisterReadiness after NewCRIService
    6013b5e03 cri: stop recommending disable_cgroup
    3d27bc738 Handle unexpected shim kill events
    4ffa3ed29 Build binaries with 1.21.1
    5756f6064 [release/1.7] vendor: github.com/Microsoft/hcsshim v0.11.1
    09633b539 deprecate logs package, but disable linter (for transitioning)
    cb201519f alias log package to github.com/containerd/log v0.1.0
    a5024e6dd vendor: github.com/stretchr/testify v1.8.4
    7bd976af3 vendor: github.com/sirupsen/logrus v1.9.3
    3ca015e55 nri: update mock plugin handlers
    4cd208c1f vendor: update github.com/containerd/nri@v0.4.0
    8cd2d33c2 [release/1.7] remotes/docker: Add MountedFrom and Exists push status
    3e09c65b2 Prepare release notes for v1.7.6
    5ebf05d97 push: inherit distribution sources from parent
    d206896dd content: add InfoProvider interface
    423693d7b [release/1.7] update to go1.20.8
    c7a35ccdc Fix transfer service dependencies:
    38d4e506d Invoke Stable ABI compatibility function in windows platform matcher
    ddffc7c9a Update hcsshim tag to v0.11.0
    b449440a4 CRI: Support Linux usernames for !linux platforms

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-11-06 16:21:12 +00:00
Mingli Yu
5cec30aae4 umoci: Remove the buildpath issue
Pass -trimpath to the build to fix the below build path issue:
  WARNING: umoci-v0.4.7+git-r0 do_package_qa: QA Issue: File /usr/sbin/umoci in package umoci contains reference to TMPDIR [buildpaths]

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-11-06 16:21:12 +00:00
Bruce Ashfield
01da1f2a29 buildah: update to 1.32.0
The new version has an internally stripped binary, so we inhibit the
QA warning.

Bumping buildah to version v1.31.0-159-g4f3d7b0b6, which comprises the following commits:

    5151ccff5 .cirrus.yml: run tests relative to the release-1.32 branch
    2326d4929 Tag v1.32.0
    e90b3502b GetTmpDir is not using ImageCopyTmpdir correctly
    ccac7ca0b Run codespell on code
    6be719454 Bump vendor containers/(common, storage, image)
    9545744e8 Cirrus: Remove multi-arch buildah image builds
    206cda149 fix(deps): update module github.com/containerd/containerd to v1.7.6
    0191bc671 Split GetTempDir from internal/util
    6e6827b27 Move most of internal/parse to internal/volumes
    292b429f6 copier: remove libimage dependency via util package
    4f3abf936 Add some docs for `build --cw`, `commit --cw`, and `mkcw`
    e89fac6c9 Add `buildah mkcw`, add `--cw` to `buildah commit` and `buildah build`
    cc619c28d Make sure that pathnames picked up from the environment are absolute
    4ee5f020a fix(deps): update module github.com/cyphar/filepath-securejoin to v0.2.4
    fd72bbee2 fix(deps): update module github.com/docker/docker to v24.0.6+incompatible
    754568580 Don't try to look up names when committing images
    d5b02e551 fix(deps): update module golang.org/x/crypto to v0.13.0
    3fc5274d3 docs: use valid github repo
    f94689199 fix(deps): update module golang.org/x/sys to v0.12.0
    6ec6f046f vendor containers/common@12405381ff
    df1bc3834 push: --force-compression should be true with --compression-format
    9c5cde533 Update module github.com/containerd/containerd to v1.7.5
    3ebeaa2dd [skip-ci] Update tim-actions/commit-message-checker-with-regex action to v0.3.2
    cc9f15f09 docs: add reference to oci-hooks
    3454d5b29 Support passing of ULimits as -1 to mean max
    f330c77be GHA: Attempt to fix discussion_lock workflow
    4942cc908 Fixing the owner of the storage.conf.
    f4e43f0e8 pkg/chrootuser: Ignore comments when parsing /etc/group on FreeBSD
    2b57cef2b Use buildah repo rather then podman repo
    a8bbc9f5f GHA: Closed issue/PR comment-lock test
    82069390f fix(deps): update module github.com/containers/storage to v1.49.0
    4c4ff3128 chore(deps): update dependency containers/automation_images to v20230816
    af3891258 Replace troff code with markdown in buildah-{copy,add}.1.md
    e997a966f [CI:BUILD] rpm: spdx compatible license field
    a3f2aa3c7 executor: build-arg warnings must honor global args
    f6fb75d9d fix(deps): update module github.com/containers/ocicrypt to v1.1.8
    5643a7fa8 chroot: `setSeccomp` add support for `ArchPARISC(64)` and `ArchRISCV64`
    8428dee36 make,cross: restore loong64
    e3cd4d790 Clear CommonBuildOpts when loading Builder status
    d68d9a237 buildah/push/manifest-push: add support for --force-compression
    3445a775a vendor: bump c/common to v0.55.1-0.20230811093040-524b4d5c12f9
    2d6e43071 chore(deps): update dependency containers/automation_images to v20230809
    065b95599 [CI:BUILD] RPM: fix buildtags
    3964ca9d6 fix(deps): update module github.com/opencontainers/runc to v1.1.9
    591b5390d chore(deps): update dependency ubuntu to v22
    204c5a1ce chore(deps): update dependency containers/automation_images to v20230807
    9ab3b526d [CI:BUILD] Packit: add fedora-eln targets
    ed2a501c9 [CI:BUILD] RPM: build docs with vendored go-md2man
    5bdb8c70d packit: Build PRs into default packit COPRs
    fc7329d7c Update install.md
    f6c4ead1b Update install.md changes current Debian stable version name
    2254ca208 fix(deps): update module golang.org/x/term to v0.11.0
    248f5a2b3 fix(deps): update module golang.org/x/crypto to v0.12.0
    ae36f6542 tests: fix layer-label tests
    f888b3d84 buildah: add --layer-label for setting labels on layers
    239b2a877 Cirrus: container/rootless env. var. passthrough
    65c1c9327 Cirrus: Remove duplicate env. var. definitions
    978be7796 fix(deps): update github.com/containers/storage digest to c3da76f
    62d405771 Add a missing .Close() call on an ImageSource
    e588986fa Create only a reference when that's all we need
    fe947ed9c Add a missing .Close() call on an ImageDestination
    597d30880 CI:BUILD] RPM: define gobuild macro for rhel/centos stream
    b9ac8d5e0 manifest/push: add support for --add-compression
    d27a82356 manifest/inspect: add support for tls-verify and authfile
    071f851da vendor: bump c/common to v0.55.1-0.20230727095721-647ed1d4d79a
    512273587 vendor: bump c/image to v5.26.1-0.20230726142307-8c387a14f4ac
    3d8616537 fix(deps): update module github.com/containerd/containerd to v1.7.3
    c20d0164f fix(deps): update module github.com/onsi/gomega to v1.27.10
    2e7dcc143 fix(deps): update module github.com/docker/docker to v24.0.5+incompatible
    6a236937a fix(deps): update module github.com/containers/image/v5 to v5.26.1
    d78f6c2a2 fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0
    dbc71b7cc Update vendor of containers/(storage,image,common)
    331fac670 fix(deps): update module github.com/opencontainers/runc to v1.1.8
    9cc5d5e8c [CI:BUILD] Packit: remove pre-sync action
    09a1cd698 fix(deps): update module github.com/containers/common to v0.55.2
    11cec8523 [CI:BUILD] Packit: downstream task script needs GOPATH
    70cb4c7e0 Vendor in containers/(common, image, storage)
    173ac7dc9 fix(deps): update module golang.org/x/term to v0.10.0
    8b84d9b8a [CI:BUILD] Packit: fix pre-sync action for downstream tasks
    97b84029a contrib/buildahimage: set config correctly for rootless build user
    cba7b9fae fix(deps): update module github.com/opencontainers/image-spec to v1.1.0-rc4
    e00845797 Bump to v1.32.0-dev
    f704a67a1 Update debian install instructions
    4c72c25a2 pkg/overlay: add limited support for FreeBSD

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-11-06 16:21:12 +00:00
Patrick Wicki
7e17ee02a3 catatonit: update to version 0.2.0
Main change is the relicense from GPL-3 to GPL-2, which will allow
catatonit (and hence podman) to be used in deployments where the license
previously posed an issue.

Contains the following commits:

        7f0c9bb version: release catatonit 0.2.0
        fe191ef license: switch to GPLv2-or-later

Signed-off-by: Patrick Wicki <patrick.wicki@siemens.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-11-06 16:21:12 +00:00