Commit Graph

886 Commits

Author SHA1 Message Date
Bruce Ashfield
ee055b339d containerd: update to 1.7.2
Bumping containerd to version v1.7.2-13-ga766dc550, which comprises the following commits:

    dafbeb5b1 No more nondistributable layers in MS registry
    e5b2a0131 task: don't `close()` io before `cancel()`
    a6a15afe3 move to CRI-TOOLS v1.27.0
    58b6b99cd Add a check to skip stats for containers that are not running
    0b2b96479 RELEASES.md: de-deprecation of CNI conf_template will be v1.7.3
    a24267b28 Remove cni conf_template deprecation
    89415fe36 Fix issue for HPC pod metrics
    e134b6393 Fix panic when remote differ returns empty result
    0e41daaea [release/1.7] Prepare release notes for v1.7.2
    99582fb1a fix: cio.Cancel() should close the pipes
    eeda70fb0 remotes/docker: ResolverOptions: fix deprecation comments
    313c226b8 Update continuity to a tagged version
    e21c8beee Post cherry-pick fixes
    246240f71 Move PLEG event back to CRI
    16f3726dd Generate sandbox exit events from CRI
    0c8cfb1a7 Move pod sandbox recovery to podsandbox/ package
    91d9f5c64 Publish sandbox events
    4b77683b4 Add sandbox events protos
    8dd16285a UnmountAll is a no-op for missing mount points
    acff3eefa Improve error messages and remove check
    b4dd3bf4e Make ReadOnly() available on all platforms
    08d8baf3f Increase integration test tmieout to 20m
    1f0dbd011 Remove bind code path in mount()
    8f37b1c63 Remove "bind" code path from diff
    9139208b3 Properly mount base layers
    e61e7b312 Skip parent layer options on bind mounts
    e4307926f Add ReadOnly() function
    0277b9b01 Remove escalated privileges
    d5c18dfb7 Use DefaultSnapshotter
    853179366 use t.Fatal if we cannot enable process privileges
    5b3ee413f Update continuity
    375172604 Fix go.mod, simplify boolean logic, add logging
    600abd137 Ignore ERROR_NOT_FOUND error when removing mount
    df7295dcd Update continuity, go-winio and hcsshim
    0db78c482 Remove unused function
    219058766 Grant needed privileges for snapshotter tests
    96fbe5bc8 Fix layer comparison and enable read-only checks
    279e0d3c9 Use bind filer for mounts
    93e94da40 Enable TestSnapshotterClient on Windows
    3a3da693a Run Windows snapshotter through the test suite
    e7b62322f Fix misspelling of 'Native' as 'Naive'
    e1f999a18 Add paired 'mount' log for 'unmount'
    5788d6e52 Don't use all-upper-case filenames in snapshot tests
    3cdcb2f10 Skip tests that do not apply to WCOW on Windows
    b0968b8bb Ensure mounts are unmounted before leaving the test
    b57424851 Unify testutil.Unmount on Windows and Unix
    b9a8aad45 Implement Windows mounting for bind and windows-layer mounts
    1a64ee183 Implement WCOW parentless active snapshots and view snapshots
    7851b0a9f CRI: Make stats respect sandbox's platform
    8d7c340ca [sbserver] handle missing cpu stats
    d08b2a088 [sbserver] Refactor usageNanoCores be to used for all OSes
    2c38cad77 notify readiness when registered plugins are ready
    08de6e7b8 Update volume-ownership image with latest hashes
    6a5e54c15 Get CDI devices from CRI Config.CDIDevices field

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-07-25 14:54:20 -04:00
Renato Caldas
680f56d9e4 cri-o: drop unneeded dependency on virtual-containerd
Signed-off-by: Renato Caldas <renato@calgera.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-07-11 19:11:34 +00:00
Renato Caldas
7e6f503083 crun: fix compilation with musl
Requires either libargp or argp-standalone.

Signed-off-by: Renato Caldas <renato@calgera.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-07-11 19:11:30 +00:00
Chen Qi
3ce3ef9486 kubernetes: do not strip binaries at build
Yocto/OE has its own way to control binary stripping. So don't do
it in the go build process. Otherwise, we'll get empty dbg packages.

Setting DBG=1 solves this problem, as stated in comments in the Makefile.
"""
  # Note: Specify DBG=1 for building unstripped binaries, which allows you to use code debugging
  # tools like delve. When DBG is unspecified, it defaults to "-s -w" which strips debug
  # information.
"""

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-07-05 23:46:19 -04:00
Chen Qi
4bc2f6e550 containerd: fix HOMEPAGE
The previous HOMEPAGE has been archived. Use the active one.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-06-26 18:50:56 -04:00
Martin Jansa
c2e8199d87 netavark, xen: *.patch: add Upstream-Status to all patches
There is new patch-status QA check in oe-core:
https://git.openembedded.org/openembedded-core/commit/?id=76a685bfcf927593eac67157762a53259089ea8a

This is temporary work around just to hide _many_ warnings from
optional patch-status (if you add it to WARN_QA).

This just added
Upstream-Status: Pending
everywhere without actually investigating what's the proper status.

This is just to hide current QA warnings and to catch new .patch files being
added without Upstream-Status, but the number of Pending patches is now:

Patches in Pending state: 15 (11%)

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-06-22 14:41:45 -04:00
Bruce Ashfield
49fdcebf5b moby: update to v24.0.2
Bumping moby to version v24.0.2-56-gd7aa1e14e5, which comprises the following commits:

    5652c59647 testing: temporarily pin docker-py tests to use "bullseye"
    789a8755b8 run `getent` with a noop stdin
    f7298b326e vendor: github.com/sirupsen/logrus v1.9.3
    1c18ad6ca6 vendor: github.com/rootless-containers/rootlesskit v1.1.1
    ae4a10df67 update RootlessKit to v1.1.1
    24c882c3e0 update go to go1.20.5
    b3133d7471 contrib/check-config: move xt_bpf check to overlay section
    8c552012ae contrib/check-config: check for xt_bpf
    61d547fd06 Dockerfile: Move dockercli to base-dev
    e5fbc3f75a hack/cli.sh: Quiet origin cleanup
    1a078977e1 Dockerfile/shell: Install buildx cli plugin
    c4198e6053 Dockerfile: Use separate cli for shell and integration-cli
    647ba03224 builder-next: Set moby exporter as default
    961fe27408 c8d/handlers: Handle error in walkPresentChildren
    087cf6f238 c8d/load: Don't unpack pseudo images
    0b9d68f59d c8d/load: Use walkImageManifests
    cbf0779bfc c8d/list: Use walkImageManifests
    0139309fef c8d: Add walkImageManifests and ImageManifest wrapper
    e1c7956764 Dockerfile: use COPY --link for source code as well
    75afe3201b containerd: add c8d version and storage-driver to User-Agent
    8018ee4689 dockerversion: DockerUserAgent(): allow custom versions to be passed
    ed376a603f dockerversion: remove insertUpstreamUserAgent()
    1d45ea52f4 dockerversion: simplify escapeStr()
    a27b0381a6 dockerversion: add a basic unit-test
    1fc19772e0 Make sure the image is unpacked for the current snapshotter
    4217d9ea0a Dockerfile: use COPY --link to copy artifacts from build-stages
    4c6b8e737f added alias validation
    e370f224ae fixing consistent aliases for OCI spec imports
    ac1a867282 vendor: github.com/mistifyio/go-zfs/v3 v3.0.1
    2949fee1d3 containerd: set user-agent when pushing/pulling images
    f9c68e5fbc libn: fix resolver restore w/ chatty 'iptables -C'
    3452a76589 libnetwork: fix sandbox restore
    fec801a103 libnetwork: log why osl sandbox restore failed
    d9e39914a7 Fix npe in exec resize when exec errored
    042f0799db libn/d/overlay: support encryption on any port
    ec8ec9056c builder/remotecontext: deprecate CachableSource, NewCachableSource
    7a4ea19803 libcontainerd: work around exec start bug in c8d
    ae6e9333c0 vendor: github.com/moby/buildkit v0.11.7-0.20230525183624-798ad6b0ce9f
    0d9acd24fe c8d/inspect: Fill `Created` time if available
    04eccf8165 vendor: github.com/containerd/go-runc v1.1.0
    d64bab35ee daemon: lock in snapshotter setting at daemon init
    329d671aef Dockerfile: temporarily skip CRIU stage
    4cc2081119 integration: Add TestImageInspectEmptyTagsAndDigests
    27df42255c hack: Rename .ensure-emptyfs to .build-empty-images
    9ee7d30aef hack/ensure-emptyfs: Create dangling image
    8a4b7c5af8 Add testenv.UsingSnapshotter utility
    a753ca64e2 hack/make/.binary: don't use "netgo" when building Windows binaries
    5276c2b6e0 c8d/pull: Use same progress action as distribution
    baf1fd1c3f libnetwork: check for netns leaks from prior tests
    992dc33fc5 libnetwork/osl: restore the right thread's netns
    ef1545ed4a libnetwork: leave global logger alone in tests
    876f5eda51 libnetwork: make resolver tests less confusing
    47a3dad256 c8d/list: Show layerless images
    0869b089e4 libnetwork: just forward the external DNS response
    3467ba6451 reorder load funcs to match newServiceConfig()'s order
    f9b886c01b add mirror to daemon reload test for insecure registries
    07140c0eca build: use daemon id as worker id for the graph driver controller
    d5ad186d49 ci(bin-image): distribute build across runners
    4d924c35f7 api/server: allow empty body for POST /commit again
    68b7ba0d03 api/inspect: Fix nil RepoTags and RepoDigests
    5ea7b8d091 fix: `docker pull` with platform checks wrong image tag

Bumping docker-cli to version v24.0.2-9-g0823df7da, which comprises the following commits:

    11af1189d docs: add "--detach-keys" example to docker run reference
    f118c05e8 docs: move "--detach-keys" example to examples section
    f66f7ed7f cli/command: fix GoDoc referencing wrong const
    2814c01b0 Dockerfile.vendor: update GOPROXY to use default with fallback
    32f66cbe5 vendor: github.com/docker/docker v24.0.2
    dc4707edb [24.0] vendor: github.com/docker/docker v24.0.1
    298e67926 docs: fix example for proxies in daemon.json
    9175ffa9b man: remove devicemapper from examples
    beb0330a7 Correct "ps --no-trunc" example output
    405be9063 docs: remove AuFS from glossary
    7a269817b docs: remove Docker Toolbox from glossary
    41ef7c45c docs: remove boot2docker and docker-machine from glossary
    c184a61da docs/deprecated: remove "disabled by default" for AuFS, overlay
    e7a60449f docs: remove aufs and legacy overlay
    77541afea contrib/completion: remove aufs, legacy overlay
    e67a7acd0 docs/deprecated: remove .patch release from deprecation status
    fb6ae356c vendor: github.com/docker/docker v24.0.0-rc.3

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-06-21 01:56:06 +00:00
Bruce Ashfield
6385f57723 oci-image-spec: update to 1.1.0-rc3
Bumping image-spec to version v1.1.0-rc3-14-g9615142, which comprises the following commits:

    32036d8 Apply version change from #1050
    f3f0906 Specify the content of the scratch blob
    29a1380 Remove special guidance around wasm
    2720969 Update descriptor.go
    a68ca3e Remove artifact media type reference
    428b1e5 releases: use +dev as in-development suffix
    2f691e8 version: bump HEAD back to -dev
    085b884 version: bump for release of v1.1.0-rc.3
    fd45b6b Add scratch descriptor and scope layer limits
    63b8bd0 Remove artifact manifest
    23c4647 Define image manifest artifactType and guidance
    5751791 Add Tianon as maintainer
    f4fc83a Fix unused variable linting error
    d09d13d Update Jon Johnson's email
    4136bec descriptor schema: add missing data and artifactType definitions
    729a03e manifest, specs-go/: provide guidance on SCRATCH config descriptor
    31de013 manifest schema: add tests for the subject field
    7a9efbd manifest schema: add the missing `subject` field
    f2f1956 descriptor: clarify artifactType field must have compliant values
    98f35df Update image spec and conversion to clarify groups
    336b02c Require IANA mediaType for image config.mediaType and layers.mediaType
    1f60184 Add Go 1.20 support
    f99b121 Remove filtersApplied from image-spec
    b5998ba specs-go/v1/*.go: align the deprecation style
    6687119 Chore: fix go.mod - split direct/indirect dependencies
    867ce74 ArtifactType is optional, omit when empty
    ccb86b9 mention deprecation in media-types.md
    9b4e6c0 even fewer words
    2cdbef2 Deprecate non-distributable layers
    265874e Note an exception to the platform.os recommendation for wasi
    59780aa Add ArgsEscaped field to image config
    3625ee3 doc: fix example in artifact.md
    94f2431 version: bump main back to -dev
    19a74bc version: release v1.1.0-rc2
    0a97fe7 docs: Added artifact.md to docs and spec.md
    c91663b Update RELEASES.md
    0e7e0dd docs: Update release process docs with checklist
    5d055a4 version: switch back to -dev
    4728b6e version: bump for 1.1.0-rc1 release
    a7ac485 Rename refers field to subject (#950)
    4c15674 Use go install and full path to commands
    ce50f1f Bump from Go 1.16 to 1.17
    ca2e500 Embed Platform in Image
    a865bc0 Fix whitespace consistency in config.md
    da33ef0 Remove io/ioutil references
    ed7e07b Add artifact to spec.md
    bc9c4bd Update schema for mediaType validation (#933)
    b04b320 Working Group Proposal for Reference Types
    ba36edd Add regclient to implementations
    293f064 Reverting json schema to well known value
    ba3f174 Add maintainer nomination template
    08825b8 Pinning version of golangci-lint to support 1.16
    9747134 Move inactive maintainers to emeritus
    0bd8a03 Add Brandon as maintainer
    c7ca3ac Update URLs to https
    874a191 Add Sajay as maintainer
    6ffdc78 Move inactive maintainers to emeritus
    d6ce48a Add mediaType fields into example manifest & image index JSON references
    0895292 implementations: point to krustlet/oci-distribution

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-06-15 17:42:32 -04:00
Bruce Ashfield
c8d2b7f738 oci-runtime-spec: update to 1.1.0-rc.2
Bumping runtime-spec to version v1.1.0-rc.2-22-g720792f, which comprises the following commits:

    1beaf68 CODEOWNER: Add Toru Komatsu(@utam0) to sync with MAINTAINERS
    d46c8b2 schema: fix definition for ioPriority
    504f70e Add I/O Priority Configuration for Process Group in Linux Containers
    05563ea features: update Example
    d89ef1e glossary: s/features document/Features structure/g
    39bd2ef MAINTAINERS: add Toru Komatsu (utam0k)
    f66aad4 Update ociVersion in config-linux.md example
    206251f releases: use +dev as in-development suffix
    8947849 spec: add scheduler entity
    4ee185a version: v1.1.0-rc.2-dev
    a5b4da4 version: release v1.1.0-rc.2
    54f948c ChangeLog: Document changes since v1.1.0-rc.1
    6152be4 schema: remove duplicate keys
    9d7c878 Clarify I/O throttling differences between cgroup v1 and v2
    b6980b0 schema: fix schema for timeOffsets
    689874f Add `features.md` to formalize the `runc features` JSON
    167ffb4 Add Go 1.20 support to CI
    15d2a5a Switch Go linting to use golangci-lint
    c9b5d0e Remove references to deprecated io/ioutil package
    77c37f1 Update config-linux.md fix time_namespaces url error.
    6c638b1 config: clarify Linux mount options
    72efacb runtime: remove `When serialized in JSON, the format MUST adhere to the following pattern`
    c42f9ae version: v1.1.0-rc.1-dev
    3e013c2 version: release v1.1.0-rc.1
    f790b68 ChangeLog: Document changes since v1.0.2
    36bb632 Add support for time namespace
    f225699 config: change prestart hook spec to match reality
    4bcd065 seccomp: Add flag SECCOMP_FILTER_FLAG_WAIT_KILLABLE_RECV
    d931d4b config-linux: add CFS bandwidth burst
    6be797c CODEOWNERS: sync with MAINTAINERS
    9e658bc config-linux: add memory.checkBeforeUpdate
    3565df5 config-linux: Clarify where device nodes can be created
    1924f6b GOVERNANCE: correct the Charter URL
    744912b add domainname spec entity
    0da1600 fix rfc link
    b57ada5 maintainer updates as per #1101
    9d1130d IDMapping field for mount point
    fc985aa config-linux: update type of LinuxCPU.Idle to *int64
    bc545ec schema: add cpu idle
    1fef707 Update Windows CPU comments
    e78a3c3 Add available `LinuxSeccompFlag`s
    600a8bd cgroup ownership: clarify that some files may not exist
    b8dbce9 update idle type of LinuxCPU from *int64 to int64
    9d363b3 config-linux: add idle option for container cgroup
    b05eb53 typo: seccompFD -> seccompFd
    a650533 config-linux: add support for rsvd hugetlb cgroup
    84251a4 specs-go: export LinuxBlockIODevice
    3f30167 schema: make with golang 1.16
    34a7544 schema: update README.md

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-06-15 17:42:32 -04:00
Bruce Ashfield
de3a655dc0 crun: update to v1.8.5
Bumping crun to version 1.8.5-30-g7da99fb, which comprises the following commits:

    ef224f9 docs: remove module.wasm.image/variant=compat annotation
    38f29c2 ci, wasmedge: use --platform wasi/wasm
    62e68e2 ci,wasmedge: use latest instead of rawhide
    5c9dbca libcrun: return with no-op when io_priority is NULL
    755b47a lua: added luarocks packing
    1d5748e src: define symbol for /proc/self/timens_offsets
    c56e556 src: replace /proc/sys/kernel/cap_last_cap with symbol
    db9274f src: define PROC_SELF_CGROUP and use it
    1eeba46 src: quote more strings
    8ca1f68 build: add check for atomic_bool
    e542666 build: add explicit check for atomic_int
    43fc74c src: uniform the quoting style
    3839e6e src: add missing quotes
    0ca1f0b container: do proper cleanup on errors
    ee3e6f6 tests: add tests for ioprio
    63a4f97 src: fix macro check
    e6306b8 tests: reorder includes
    edfd0c9 container: support io_priority from the OCI specs
    478f047 libocispec: sync
    b6f80f7 NEWS: tag 1.8.5
    a1f9b7d tests: update ubuntu to lunar
    026f249 tests: update containerd
    6494b69 cgroup: set the memory limit on the system scope
    4d2d5b3 cgroup: move code to an utility function
    c56c3c4 cgroups: fix creating cgroup under "domain threaded"
    bbee4bc More informative error message for the case where dlopen fails
    1ad17f8 Refactor: Restore serial settings for incorrect serial
    087db89 scheduler: use definition from OCI
    0135eb1 libocispec: update
    76ed8df criu: fix memory leak
    7a45ba8 ci: temporarily disable cri-o tests
    a717db7 criu: fix segfault if CRIU_JOIN_NS_SUPPORT is defined
    3f972e1 github: try not loading kernel modules
    bca0b3b linux: check the PID is valid before kill(2)
    62b149b tests: skip slow cri-o tests
    7bbacf9 fix clang-format
    c0eb006 src: make clang-format
    6639649 lua: fix typo
    906142d linux: do not precreate devs with euid > 0
    f40d974 Improve whitespace in generated `crun spec`
    ed25b47 tests/test_exec: don't fail on PIDs < 10000
    909ae4d tests: abstract tests/init to get_init_path()
    df8ee48 criu: check if the criu_join_ns_add function exists
    5a8fa99 NEWS: tag 1.8.4
    898ffb5 tests: fix idmap mount test
    a2ac2b9 tests: install irqbalance
    6b33ec5 tests: drop cri-o tests instead of deleting file
    6824924 cgroup: workaround cpu quota/period issue with v1
    fc276e6 cgroup: fix set quota to -1
    58b394a build(deps): bump lumaxis/shellcheck-problem-matchers from 1 to 2
    bf79b09 src: wire the runtime spec time namespace
    bfa4f48 linux: create PID namespace as part of the last step
    4320b5d libocispec: sync
    39bf623 criu: drop loading unused functions
    59f2beb NEWS: tag 1.8.3
    ae18930 update: initialize the rt_scheduler only on cgroupv1

crun/rspec: update to 1.1.0-rc.2

    1beaf68 CODEOWNER: Add Toru Komatsu(@utam0) to sync with MAINTAINERS
    d46c8b2 schema: fix definition for ioPriority
    504f70e Add I/O Priority Configuration for Process Group in Linux Containers
    05563ea features: update Example
    d89ef1e glossary: s/features document/Features structure/g
    39bd2ef MAINTAINERS: add Toru Komatsu (utam0k)
    f66aad4 Update ociVersion in config-linux.md example
    206251f releases: use +dev as in-development suffix
    8947849 spec: add scheduler entity
    4ee185a version: v1.1.0-rc.2-dev
    a5b4da4 version: release v1.1.0-rc.2
    54f948c ChangeLog: Document changes since v1.1.0-rc.1
    6152be4 schema: remove duplicate keys
    9d7c878 Clarify I/O throttling differences between cgroup v1 and v2
    b6980b0 schema: fix schema for timeOffsets
    689874f Add `features.md` to formalize the `runc features` JSON
    167ffb4 Add Go 1.20 support to CI
    15d2a5a Switch Go linting to use golangci-lint
    c9b5d0e Remove references to deprecated io/ioutil package
    77c37f1 Update config-linux.md fix time_namespaces url error.
    6c638b1 config: clarify Linux mount options
    72efacb runtime: remove `When serialized in JSON, the format MUST adhere to the following pattern`
    c42f9ae version: v1.1.0-rc.1-dev
    3e013c2 version: release v1.1.0-rc.1
    f790b68 ChangeLog: Document changes since v1.0.2
    36bb632 Add support for time namespace
    f225699 config: change prestart hook spec to match reality
    d931d4b config-linux: add CFS bandwidth burst
    9e658bc config-linux: add memory.checkBeforeUpdate
    3565df5 config-linux: Clarify where device nodes can be created
    a650533 config-linux: add support for rsvd hugetlb cgroup

crun/ispec: update to 1.1.0-rc.3

    32036d8 Apply version change from #1050
    f3f0906 Specify the content of the scratch blob
    29a1380 Remove special guidance around wasm
    2720969 Update descriptor.go
    a68ca3e Remove artifact media type reference
    428b1e5 releases: use +dev as in-development suffix
    2f691e8 version: bump HEAD back to -dev
    085b884 version: bump for release of v1.1.0-rc.3
    fd45b6b Add scratch descriptor and scope layer limits
    63b8bd0 Remove artifact manifest
    23c4647 Define image manifest artifactType and guidance
    5751791 Add Tianon as maintainer
    f4fc83a Fix unused variable linting error
    d09d13d Update Jon Johnson's email
    4136bec descriptor schema: add missing data and artifactType definitions
    729a03e manifest, specs-go/: provide guidance on SCRATCH config descriptor
    31de013 manifest schema: add tests for the subject field
    7a9efbd manifest schema: add the missing `subject` field
    f2f1956 descriptor: clarify artifactType field must have compliant values
    98f35df Update image spec and conversion to clarify groups
    336b02c Require IANA mediaType for image config.mediaType and layers.mediaType
    1f60184 Add Go 1.20 support
    f99b121 Remove filtersApplied from image-spec
    b5998ba specs-go/v1/*.go: align the deprecation style
    6687119 Chore: fix go.mod - split direct/indirect dependencies
    ccb86b9 mention deprecation in media-types.md
    9b4e6c0 even fewer words
    2cdbef2 Deprecate non-distributable layers
    265874e Note an exception to the platform.os recommendation for wasi
    0a97fe7 docs: Added artifact.md to docs and spec.md
    293f064 Reverting json schema to well known value

crun/libocispec: update to -tip

    b085839 runtime-spec: update
    553cfb4 image-spec: update
    384a230 runtime-spec: update
    2c9fb39 libocispec: write _present tags together
    dc7412b image-spec: update
    2e11380 runtime-spec: update
    e7b7344 rust: sync runtime-spec and image-spec
    df3036c runtime-spec: sync
    8a0ee41 image-spec: sync
    70826dc clean: remove unwanted diff file
    4d1d608 add redefine for stdin stdout stderr when using musl
    02f231b Move header files under ocispec/

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-06-15 17:42:31 -04:00
Bruce Ashfield
703feb3116 umoci: update to 0.4.7-tip
Bumping umoci to version v0.4.7-150-g33ec006, which comprises the following commits:

    150b9e0 build(deps): bump github.com/stretchr/testify from 1.8.3 to 1.8.4
    1c365a2 build(deps): bump github.com/stretchr/testify from 1.8.2 to 1.8.3
    6e6027c build(deps): bump golang.org/x/sys from 0.7.0 to 0.8.0
    b267d7b test: move 'go test' output to stderr for coverage binary
    947f407 build(deps): bump github.com/opencontainers/runc from 1.1.6 to 1.1.7
    e9394e8 CHANGELOG: update to include changes from v0.4.7
    08672f5 vendor: bump several deps
    b4f2258 go.mod: update Go version to go1.18
    b285980 build(deps): bump github.com/vbatts/go-mtree from 0.5.2 to 0.5.3
    61c566b build(deps): bump google.golang.org/protobuf from 1.28.1 to 1.30.0
    a0bb45f build(deps): bump actions/setup-go from 3 to 4
    bdfd50b build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.2
    37c828e gha: ci: make ci-image cache expire weekly
    3e7ddbd dockerfile: update to leap 15.4
    44a127b Makefile: pull image details from Dockerfile
    c99bc38 dockerfile: fetch oci-*-tools with go install
    701c194 test: update to gomtree 0.5.2
    ac5e249 test: (raw-)config: only use export in sub-shell
    c8183de oci: config: strip "-dev" from runtime-spec version
    b1c2cdf oci: config: correctly handle runtime-spec versions
    de9ad94 make: add -buildvcs=false to builds
    6d52935 gha: bump Go version for validate to Go 1.20.x
    3544ece build(deps): bump github.com/stretchr/testify from 1.8.0 to 1.8.1

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-06-15 17:42:31 -04:00
Bruce Ashfield
e215f05c27 skopeo: restructure recipe to fix buildpaths warnings
Like many of the other go recipes, the method of symlinking vendor
packages ends up recording the path in the binary. -trimpath can't
fix those embedded paths, so we switch skopeo to be link the other
recipes and position our source in a way that doesn't require the
symlinking, and hence no QA warning.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-06-15 17:42:31 -04:00
Bruce Ashfield
05e51d92d5 skopeo: update to 1.12.0
Note: this has trimpath issues, and needs to be re-worked to not use
symlinked vendor directories.

Bumping skopeo to version v1.12.0-25-gcf502780, which comprises the following commits:

    c06aa5c6 Update module github.com/stretchr/testify to v1.8.3
    ac75f71f Update dependency containers/automation_images to v20230517
    21b1dfee Update module github.com/sirupsen/logrus to v1.9.2
    ead979a9 Update module github.com/docker/distribution to v2.8.2+incompatible
    12b24fce Trigger an update of the ostree_ext container image
    44ed4cea Update c/image with https://github.com/containers/image/pull/1944
    9213943e Update module github.com/containers/common to v0.53.0
    2825ffd9 Update module golang.org/x/term to v0.8.0
    86eea6ce Update dependency containers/automation_images to v20230426
    03e18aa9 Update golang.org/x/exp digest to 47ecfdc
    7b587697 Emphasize the semantics of --preserve-digests a tiny bit
    1e6b333f Improve the static build documentation a tiny bit
    95e8cce2 Bump to v1.12.1-dev
    a5529097 Release 1.12.0
    5f0314f3 Update module github.com/containers/common to v0.52.0
    66157589 Update module github.com/containers/storage to v1.46.1
    7c66b740 Add (make tools) to install (for now only) golangci-lint, use it in Cirrus
    d4bd787e Use golangci-lint instead of golint
    c538340e Finally, eliminate hack/make.sh
    f8f5a25f Actually fail if (go vet) fails
    aebab492 Speed up validate-git-marks by about a factor of three
    4298692d Don't use hack/make.sh for validate-git-marks
    7e35ad54 Test all files by validate-git-marks
    789257f7 Simplify the package list of (go vet)
    bee51e5e Don't use hack/make.sh for validate-gofmt
    85fef036 Run gofmt on all files, not just the changed ones
    82268ea8 Don't use hack/make.sh for validate-lint
    694b1565 Lint many more files in validate-lint
    43090b29 Don't use hack/make.sh for validate-vet
    225f239a Remove no-longer-necessary module options
    98b01af0 Fix Makefile dependencies
    835d71a3 Remove some outright unused code from hack/make*
    30ecd8f0 Cross-link the top-level and subcommand option lists
    4be583c8 Fix error handling of signature.NewEphemeralGPGSigningMechanism
    e8414097 chore(deps): update dependency containers/automation_images to v20230405
    4f5e8214 Avoid use of a deprecated capability.NewPid
    ca0f8418 fix(deps): update module github.com/spf13/cobra to v1.7.0
    b0d339f0 fix(deps): update module github.com/containers/image/v5 to v5.25.0
    03ca2871 fix(deps): update module golang.org/x/term to v0.7.0
    4ca2058d Use multiple fingerprint function Allow comma separated fingerprint list
    c54f2025 Review comments (to be squashed later
    9b1f1fa1 Rename argument. Only use any with public key file. Double check fingerprint is in public key file.
    3097b7a4 Verify signatures from a trust store
    bfe82593 Update c/image from the main branch
    468ac655 Update module github.com/containers/common to v0.51.2
    7481aae6 Update dependency containers/automation_images to v20230330
    454f8559 systemtests: Fix 040-local-registry-auth about XDG_RUNTIME_DIR
    bbdcb79c [CI:BUILD] Packit: trigger builds on commit to main branch
    cd4f2ee5 [skip-ci] Update actions/stale action to v8
    b2ede999 Make the installation instructions more prominent in README.md
    8ea5fd44 Update dependency containers/automation_images to v20230320
    aa9862a7 Update module github.com/containers/common to v0.51.1
    0ad54d6d Cirrus: Update CI VM images
    20447df1 bump golang.org/x/net to v0.8.0
    3481a5b9 Update module golang.org/x/term to v0.6.0
    bcc0d54e Simplify inspectOptions.writeOutput a bit more
    c345785d Factor out the output of data in (skopeo inspect)
    2a6a944c Use io.WriteString
    9a02c1eb Update module github.com/stretchr/testify to v1.8.2
    f1c03ef1 Update module github.com/containers/storage to v1.45.4
    64daedca Update golang.org/x/exp digest to 5e25df0
    c07f2098 Fix formatting of inspect examples
    313f142c Use common library reporter
    4beb3f0a Fix some warnings
    1c3d49f0 Fix tabelating output in (skopeo inspect --format)
    fb0be613 Corrected typo in skopeo-sync and updated description
    2ef9cf69 Replace gopkg.in/check.v1 by github.com/stretchr/testify/suite/
    0ba164f0 Update c/image after https://github.com/containers/image/pull/1842
    012e1144 [CI:BUILD] Packit: initial enablement
    5435c808 Renovate: c/common rule moved to defaults
    643a2359 Update c/image after https://github.com/containers/image/pull/1816
    2c6e15b5 Run codespell on codebase
    df708d16 [CI:DOCS] Disable dependabot
    2acac8a6 Update module golang.org/x/term to v0.5.0
    f9e2c676 Update golang.org/x/exp digest to 46f607a
    47c7902e Remove unnecessary blank lines
    c1a57ca1 Pre-allocate an array
    2a7b1327 Simplify a condition
    e7ab33e6 Rename a variable to avoid an underscore
    e90c381a Add missing comment punctuation
    70c06b4a Fix, or remove, comments using lint syntax
    9137ac56 Simplify an increment
    efc6e837 Reformat import statements
    a8b9e4e3 Use %w when wrapping errors
    99215e40 Remove a duplicate word
    afa031e8 Use net/netip.Addr instead of net.IP
    891ba3d4 s/interface{}/any/g
    f2b3a9c0 Use golang.org/x/exp
    f1a6d427 Use strings.Cut
    22955d05 go mod tidy -go=1.18
    007f01c6 [CI:BUILD] enable debuginfo for el8 copr builds
    036bf598 [CI:BUILD] copr: fix el8 build and enable debuginfo
    f9406bb0 Cirrus: Use human-readable CI VM Images
    b41b85ab Update module gopkg.in/yaml.v2 to v3
    d2fbec35 Add unit tests for tlsVerifyConfig's yaml.Unmarshaler
    9e24a195 [CI:DOCS] Fix up language in README

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-06-15 17:42:31 -04:00
Bruce Ashfield
28eda60a52 moby: update to v24.0.0
Bumping moby to version v24.0.0-2-g821e4ec4c7, which comprises the following commits:

    5ea7b8d091 fix: `docker pull` with platform checks wrong image tag
    907f037141 update containerd binary to v1.7.1
    8bbfa32741 c8d: The authorizer needs to be set even if AuthConfig is empty
    8587a1c617 c8d/builder: implement cache
    9717369913 c8d: implement classic builder
    233c49438b c8d: Don't create authorizer for empty AuthConfig
    2b7424512a c8d/authorizer: Default to docker.io
    f77a3274b4 [chore] clean up reexec.Init() calls
    c76bb6a3a3 ci: bin-image workflow
    71846e82c1 bin-image bake target
    ecbc27aa22 vendor: github.com/docker/distribution v2.8.2
    1235338836 c8d: implement missing image delete logic
    763d2b7996 c8d: fix image history for dangling images
    86770904be c8d: fix missing image history
    bfffb0974e pkg/aaparser: deprecate GetVersion, as it's no longer used
    e28bc0d271 profiles/apparmor: remove use of aaparser.GetVersion()
    d169a57306 contrib/apparmor: remove remaining version-conditionals (< 2.9) from template
    63640838ba daemon: handleContainerExit(): add execDuration in attributes
    012dd239ce docs/api: version-history: also mention /system/df for VirtualSize
    a87313497b vendor: github.com/containerd/containerd v1.6.21
    5f36d4af15 api: synchronize api/swagger.yaml with docs/api/v1.43.yaml
    2b6761fd3e d/graphdriver/copy: support src fs w/o xattr support
    3e6092f5b2 pkg/jsonmessage: touch-up GoDoc
    05cb0e5a7d pkg/jsonmessage: JSONProgress.String(), JSONProgress.now(): simplify
    4cadee65b3 pkg/jsonmessage: JSONMessage.Display(): remove special case for 401 errors
    66cf0e3f55 client: slightly improve ContainerDiff tests
    dbb48e4b29 api/types/container: create type for changes endpoint
    b7e8868235 update go to go1.20.4
    bf3c156654 vendor: github.com/moby/term v0.5.0
    c1d420ec60 vendor: github.com/moby/term v0.0.0-20221205130635-1aeaba878587
    0df38c3e2b vendor: github.com/opencontainers/runtime-spec v1.1.0-rc.2
    167fa429f0 daemon: Daemon.CreateImageFromContainer(): remove intermediate vars
    bf5ae17c16 api/server/router/container: containerRouter.postCommit: inline struct
    9613da63dc c8d: commit: generateCommitImageConfig: don't merge image config
    e510abbc8c daemon/containerd: containerConfigToOciImageConfig: add ArgsEscaped
    3eebf4d162 container: split security options to a SecurityOptions struct
    8142051a3b libnetwork/osl: unify stubs for NeighOption
    0ea41eaa51 libnetwork/osl: unify stubs for IfaceOption
    021e89d702 libnetwork/osl: rename var that collided with import
    3a4158e4fa libnetwork: add missing stub for getInitializers()
    939a4eb5c9 libnetwork: fix stubs
    17feabcba0 libnetwork: overlayutils: remove redundant init()
    44a6587608 c8d: delete dangling image on pull
    1e9ebfb00c libnetwork: inline sendKey() into SetExternalKey()
    9d8fcb3296 libnetwork: setKey(): remove intermediate buffer
    a813d7e961 libnetwork: don't register "libnetwork-setkey" re-exec on non-unix
    881fff1a2f libnetwork: processSetKeyReexec: don't use logrus.Fatal()
    e974599593 libnetwork: processSetKeyReexec() remove defer()
    1845a915b0 c8d/import: Don't gc unnamed images
    0ffd3225d2 vendor: github.com/opencontainers/runc v1.1.7
    2d0e899819 update runc binary to v1.1.7
    56fbbde2ed libnetwork/resolvconf: fix some minor (linting) issues
    820975595c libnetwork/resolvconf: improve tests for Build
    93c7b25ccd libnetwork/resolvconf: refactor tests for readability
    43378636d0 libnetwork/resolvconf: allow tests to be run on unix
    73c637ad60 libnetwork/resolvconf: use t.TempDir(), change t.Fatal to t.Error
    fc1e698914 libnetwork/resolvconf: fix TestGet() testing wrong path
    55d18b7db9 libnetwork/resolvconf: use []byte for hash instead of string
    630fc3839e libnetwork/resolvconf: simplify hashData() and improve performance
    12bf850c84 cmd/dockerd: gracefully shut down the API server
    520aa08d42 c8d/prune: Logging fixes
    52af6d957e c8d/prune: Remove gc.ref labels from configs of deleted images
    993ca8c6de cmd/dockerd/trap: log to logrus directly
    0f3c5d3893 cmd/dockerd/trap: don't force exit after cleanup
    a1e1038736 Use the image service instead of the reference store for tagging
    9fe5ac6614 c8d: Handle nil container.ImageManifest
    16d5d4b6e1 cmd/dockerd: ignore SIGPIPE using signal.Ignore
    2d31697d82 daemon: set docker0 subpool as the IPAM pool
    d8b784a15e daemon/cluster: inline filters
    da8e07edb5 volume/service: inline filters in tests
    c0c4a16053 testutil: inline filters in tests
    b6154189e8 integration: inline filters in tests
    1bc0d7080a integration-cli: inline filters in tests
    5bc0832766 daemon: inline filters in tests
    081b5e3d4e client: inline filters in tests
    aca8dde362 integration/TestKillContainer: Bigger timeout on Windows
    391f9635cc c8d/list: Initialize capacity instead of length
    4ec063fade pkg/sysinfo: omit Getpid call in numCPU
    f66684fdeb fix some comments
    c399963243 libn/d/overlay: make VNI matcher IPv6-compatible
    7d9bb170b7 libn/d/overlay: test the VNI BPF matcher on IPv4
    4876c09b2a build(deps): bump github.com/creack/pty from v1.1.11 to v1.1.18
    8df3db4b97 c8d: add support for removing images by shortID
    117ceac82b daemon/prune: Use errdefs for invalid "until" value
    e502c69140 builder: use typed error for invalid "until" value
    9791756284 overlay2: remove deprecated overlay2.override_kernel_check option
    54a125f677 builder-next/prune: Handle "until" filter timestamps
    38e791fb2f vendor: update buildkit to v0.11.6
    005150ed69 check-config.sh: do not check for RT_GROUP_SCHED
    f72548956f remove deprecated legacy "overlay" storage-driver
    4ecb587eff daemon: skip TestGetInspectData when using containerd snapshotters
    a82c434447 daemon: setupFakeDaemon(): add fakeImageService
    1261fe69a3 API: deprecate VirtualSize field for /images/json and /images/{id}/json
    eb7738221c Add no-new-privileges to SecurityOptions returned by /info
    e7980275c0 c8d: align "Size" and "VirtualSize" for images
    1e1efe1f61 libnet/d/overlay: clean up iptables rules on network delete
    9a9dfb1d0d api/server: getImagesJSON(): don't check version in a loop
    3903f16cd6 daemon: remove deprecated AuFS storage driver
    890959eea8 builder-next: fix buildkit version
    bc37e3f830 Fix returning errors from snapshotter.Prepare
    f846349824 c8d/list: Implement `until` filter
    d89590eab9 c8d: Implement prune
    e6ac640d2e vendor: github.com/opencontainers/runc v1.1.6
    f531e3cf69 vendor: golang.org/x/net v0.8.0
    3886faced8 vendor: golang.org/x/text v0.8.0
    d0efca893b update runc binary to v1.1.6
    7fe0f73838 Fix argument quoting bugs in dockerd-rootless.sh
    9cb5da400c images/Children: Return error
    edf802956e c8d/list: Implement `label` and `label!` filter
    03fc3aad12 daemon: touch-up flag description for --seccomp-profile
    5a922dc162 daemon: deprecate --oom-score-adjust for the daemon
    f696a1b3b3 Fix error checking when pulling from an insecure registry
    c957ad0067 libnetwork: clean up inDelete network atomically
    e5dbd28afd Added timeout to validate job in github actions
    106c694993 Dockerfile: update xx to 1.2.1
    a5d46a15f5 split GetRepository from ImageService
    893d28469f vendor: github.com/ishidawataru/sctp v0.0.0-20230406120618-7ff4192f6ff2
    f66374f6a8 golangci-lint: enable importas linter to force consistent aliases
    81e62af94a use consistent alias for containerd's errdefs package
    f691b13450 daemon: move code related to stats together
    5c78cbd3be pkg/platform: deprecate OSType in favor or runtime.GOOS
    cf9a76fe8f pkg/platform: un-export consts that are only for internal use
    790dd8cc92 pkg/platform: use const for OSType, improve GoDoc
    87019144f6 pkg/platform: replace use of deprecated syscall.Syscall
    7ca38d64d2 pkg/platform: move package doc to platform-agnostic file
    9434919f76 pkg/platform: rename files for consistency
    be4abf9d6e Vendor containerd 1.6.x with the readonly mount fix
    41a230758c c8d: Set the process user on exec
    70229b55ec vendor: github.com/moby/swarmkit/v2 v2.0.0-20230406225228-75e92ce14ff7
    3f09316e3b vendor: re-vendor to add missing file
    8ed900263e libnetwork/overlay: remove host mode
    1d46597c8b libnetwork/overlay: remove KVObject implementation
    f32f09e78f libnetwork/overlay: don't lock network when accessing subnet vni
    b67446a8fa libnetwork: remove local store from overlay driver
    8aa1060c34 libnetwork/overlay: remove live-restore support
    e3708a89cc libnetwork/overlay: remove vni allocation
    e251837445 libnetwork/overlay: remove Serf-based clustering
    644e3d4cdb libnetwork/netlabel: remove dead code
    f8b5fe5724 libnetwork/netutils: remove dead code
    c8d2c6ea77 libnetwork: remove unused props from windows overlay driver
    0fa873c0fe libnetwork: remove global store from overlay driver
    00037cd44b libnetwork: remove ovrouter cmd
    e0f36f9d8b ImageService: Pass ctx to Children
    bea751beb7 c8d: Implement Children by comparing diff ids
    ba47cdcc0b c8d/list: Implement `reference` filter
    4aa2876c75 docker-rootless-setuptools.sh: improve readability of messages
    4d04068184 libn/d/overlay: only program xt_bpf rules
    f6cc8e3512 update go to go1.20.3
    465cbccdaf c8d: use the container's configured snapshotter where possible
    c8f8d11ac4 awslogs: fix non-blocking log drop bug
    1b178dffa3 Send an event when an image is deleted
    36d28b73fc Send an event when an image is tagged
    750218c5e5 d/config: fix default-network-opts in daemon.json
    36935bd869 libcontainerd: close stdin sync if possible
    3beda17773 integration-cli: rename vars that collided with imports
    92e38b6e27 c8d/list: Ignore attestation manifests
    773a9d85a1 c8d: Send event when an image is exported
    00545ef4d6 c8d: Send event when an image is imported
    e59f7fba6a pkg/fileutils: remove aliases for deprecated functions and types
    6b9968e8b1 client: deprecate NewClient properly
    027f70562e c8d/push: Rename jobs to avoid shadowing type
    e1dd9c0396 c8d/push: Ignore :port when comparing source repository
    4a34c501c1 c8d/push: Parse source labels with multiple sources
    cb788bea9c c8d/push: Add distribution source labels only on success
    013e44ec5d c8d/push: Log error if releasing the lease failed
    c9012c798e c8d/push: Sync mountableBlobs access
    f6b50d52d4 libnetwork/netutils: drop ElectInterfaceAddresses
    61a0e79ad6 vendor: github.com/containerd/containerd v1.6.20
    b8e963595e libnetwork: sbState: rename ExtDNS2 back to ExtDNS
    0233029d5a vendor: opencontainers/image-spec v1.1.0-rc2.0.20221005185240-3a7f492d3f1b
    c733cf223d vendor: github.com/containerd/ttrpc v1.1.1
    a0ef2ac59c c8d: push: addressing some nits
    a75354c045 c8d: Implement push
    e7393d0fc5 images/push: Accept reference
    15b9176d53 Add the events services to the containerd image service
    77be7b777c update runc binary to v1.1.5
    a17029ba49 vendor: github.com/opencontainers/runc v1.1.5
    24804e67f5 c8d/commit: Use manifest digest for dangling image
    845b328734 Skip Buildkit digest tests
    4c459ddabd c8d: add support for `docker diff`
    e85c69e1b7 Update `github.com/containerd/containerd` to the HEAD of `release/1.6` and vendor
    f09b1022aa c8d/inspect: Handle dangling images
    9e3a6ccf69 libn/i/setmatrix: make generic and constructorless
    713c9280ca Move buildkit client opts to new package
    4f511bd06e Add akerouanton as curator
    bb2c5617d6 Add laurazard as curator
    988d26afe4 vendor: github.com/moby/buildkit v0.11.5
    6caaa8cadc Prefer loading `docker-init` from an appropriate "libexec" directory
    bae49ff278 libnet/d/windows: log EnableInternalDNS val after setting it
    4f48a4ea2a Update delve version
    0fa7a4e3b4 client: Add buildkit ClientOpts
    965eda3b9a libnet/d/overlay: insert the input-drop rule
    66dfc0169f dockerversion: DockerUserAgent(): use sync.Once to construct User-Agent
    72dc7a0f7b vendor: github.com/moby/swarmkit/v2 v2.0.0-20230315203717-e28e8ba9bc83
    c7ccc68b15 Silence GRPC logs unless our log level is debug
    be34e93f20 integration-cli: Enable TestExecStartFails on Windows
    cb76638699 registry/search: pass User-Agent through headers
    88992de283 StartWithLogFile: Fix d.cmd race
    fed1c96e10 TestDaemonRestartKillContainers: Fix loop capture
    f5050d4ef2 ci: disable testing mergeop and diffop with the dockerd worker
    0ac3bf837b builder-next: disable mergeop and diffop
    c14463d1e4 ci: enable BuildKit tests with containerd integration worker
    105b9834fb libnet/d/overlay: add BPF-powered VNI matcher
    44cf27b5fc libnet/d/overlay: extract VNI match rule builder
    142f46cac1 libn/d/overlay: enforce encryption on sandbox init
    0ac02ba342 vendor: github.com/opencontainers/runtime-spec v1.1.0-rc.1
    ab131642a1 vendor: github.com/opencontainers/runc v1.1.4
    b98c05dc50 vendor: github.com/klauspost/compress v1.16.3
    664c0d3201 vendor: github.com/godbus/dbus/v5 v5.1.0
    3e4ce10342 vendor: github.com/coreos/go-systemd/v22 v22.5.0
    0a2e3f14e7 vendor: github.com/opencontainers/selinux v1.11.0
    bc1dec71c5 vendor: github.com/imdario/mergo v0.3.13
    9752e43644 vendor: golang.org/x/sys v0.6.0
    d4fd582fb2 libnet/d/overlay: document some encryption code
    58504620c5 api/types/container: IpcMode: use common function for container-mode
    6f0e28d024 api/types/container: PidMode: fix validation for empty container name/ID
    53c813961e api/types/container: fix .Container() returning a name, when it shouldn't
    c76331e13f api/types/container: put "valid" field as first check in tests
    2d49080056 pkg/sysinfo: move MemInfo and ReadMemInfo to a separate package
    a050db4a6f libnetwork/d/overlay: handle peer ops directly
    09d39c023c libnetwork/i/setmatrix: devirtualize
    3b569cc686 daemon/graphdriver/windows: cleanup errors
    bbeaeee3c7 daemon/graphdriver/windows: remove some intermediate variables
    9db5dc9a46 daemon/graphdriver/windows: use strings.EqualFold()
    d742188e3b daemon/graphdriver/windows: remove fileFlagSequentialScan const
    3a8c97be45 daemon/graphdriver/windows: rename vars that collided with imports
    605e8f53b1 daemon/graphdriver/windows: InitFilter() don't use idtools.MkdirAllAndChown()
    34303ccd55 libnetwork/i/setmatrix: un-embed the mutex
    127cd9def1 integration/plugin: fix duplicate import
    2987393768 integration/volume: fix duplicate import
    146df5fbd3 Fix pruning anon volume created from image config
    058a31e479 volumes: fix error-handling when removing volumes with swarm enabled
    a2c29e9128 update containerd binary to v1.7.0
    7531f05c7c integration/volumes: TestVolumesRemove: add coverage for force/no-force
    7b3acdff5d registry: return concrete service type
    3991faf464 Move filtered registry search out of image service
    06619763a2 remove GetLayerByID from ImageService interface
    02dec48bab update to go1.20.2
    37a9d6aabe Fix listener parsering regression when no addr set
    3bbffe96e1 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230309194213-a745a8755ce3
    af677245fb c8d/builder: Store untagged images as dangling
    8f716ca06a builder/overrides: Add consts for attribute key names
    e807ae4f2e vendor: github.com/containerd/cgroups/v3 v3.0.1
    44d0522848 c8d/inspect: Add digested reference to details
    a8f5c524a0 libcontainerd: Upgrade to typeurl/v2
    45ee4d7c78 c8d: Compute container's layer size
    4026148ef1 Dockerfile: Update shfmt to 3.6.0
    a0741cacef contrib/dockerize-disk.sh: Fix indentation
    088aff1620 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230302163403-80a528a86877
    f8b468fda2 builder-next: enable more cache backends
    bba77163ff c8d: Make build and buildx work
    b0b3c62a84 vendor: github.com/moby/buildkit v0.11.4
    117cdb28ce regenerate AUTHORS
    608a122aef integration: Extract StopContainerWindowsPollTimeout const
    74dbb721aa TestLogs: Increase stop check poll timeout on Windows
    a34060cdb4 Resolve and store manifest when creating container
    168ca2dcc8 Introduce support for docker commit
    22f303e422 layer: NewStoreFromOptions(): include driver-name in error message
    f52e935f36 reference: add test-coverage for digested references
    f71439d527 reference: don't string-match errors in tests, and fix error format
    669940065f reference: use t.TempDir() for tests
    520dc12c0e reference: rename variables that collided with type / import
    c477cda59f c8d/list: Support dangling filter
    3e4c4df664 builder/exporter: Remove commented unused const
    324290a5eb vendor: buildkit v0.11.4-0.20230228113103-218e934edfba
    6588b3eef0 builder: Remove buildkit's build information
    4ea1c9f8e5 `docker image ls`: handle multi-platform images
    a9e7360775 daemon/config: remove AuthzMiddleware field
    47e9caede7 libcontainerd/client: Rename `cp` to `checkpoint`
    0c751f904f libcontainerd/client: Fix checkpoint not being set
    be39be87f6 api/server: delete Wait method
    91c2b12205 Make default options for newly created networks configurable
    19ad4ac03d registry: acquire mutex in IsInsecureRegistry
    ef6f5367dc vendor: github.com/containerd/containerd v1.6.19
    5997ad8512 vendor: github.com/Microsoft/hcsshim v0.9.7
    0a6a726d26 api/server: drop unused Config struct
    248745004a api: Remove <none> in Repo(Tags|Digests) for >= 1.43
    0ffaa6c785 daemon: add annotations to container HostConfig
    3c59ef247f libnet/ipam: use netip types internally
    01dbe23b6f libnet/ipam: simplify the data model
    8273db28f3 libnet/ipam: inline parsePoolRequest function
    9a8b45c133 libnet/ipam: drop vestiges of custom addrSpaces
    18ac200efe libnet/ipam: get rid of superfluous closure
    88f6b637a0 libnet/networkdb: fix nil-dereference panic in test
    f8791db4be c8d/list: Fix Repo(Digests|Tags) for untagged images
    cd779dae46 Upgrade to Go 1.20.1
    d4e7a87b96 Upgrade to Go 1.20
    3606d6a7cd Upgrade to golangci-lint v1.51.2
    2f9e3cca3d api: Move Repo(Digests|Tags) <none> fallback from daemon
    8657c87c8c c8d/tag: Don't create a separate error variable
    9f6649b248 AUTHORS: regenerate
    50d7164978 docs/api: add v1.43 OpenAPI definitions
    bb21e0f191 Close DecompressStream after layer is downloaded
    d6c4e17411 Upgrade containerd/fifo to v1.1.0
    782a369f92 c8d/pull: Add CRI-compatible annotation of pulled content
    a770153af0 chore: use http constants to replace numbers
    9104cd5441 vendor: github.com/moby/buildkit v0.11.3
    b0eed5ade6 daemon: allow shimv2 runtimes to be configured
    4a886a3e8f dependency: bump go.etcd.io/bbolt to v1.3.7
    e40c4c997e update containerd binary to v1.7.0-beta.4
    f8cfd3a61f libnetwork: devirtualize Resolver type
    faaa4fdf18 libnetwork: forward unknown PTR queries externally
    8f5a9a741b libnetwork: fail loudly on resolver iptables setup
    25b51cad3d libnetwork: replace ad-hoc semaphore implementation
    a1f7c644be libnetwork: use dns.Client for forwarded requests
    e6258e6590 libnetwork: reply SERVFAIL if DNS forwarding fails
    9cf8c4f689 libnetwork: extract DNS client exchange to method
    854ec3ffb3 libnetwork: extract dialExtDNS to method
    51cdd7ceac libnetwork: truncate DNS msgs using library method
    860e83e52f libnetwork: get rid of truncation red herring
    8a35fb0d1c libnetwork: refactor ServeDNS for readability
    0bd30e90bb libnetwork: reply SERVFAIL on resolve error
    92aa6e6282 libnetwork: extract fn for external DNS forwarding
    78792eae68 libnetwork: add regression test for issue 44575
    94feb31516 update to go1.19.6
    b62445871e libnet/ipam: fix racy, flaky unit test
    81f9f90e47 Do not log connection info before the connection exists
    c4c54683a9 Revert "apparmor: Check if apparmor_parser is available"
    174802e15f vendor: github.com/containerd/containerd v1.6.18
    a4e3c67e44 api/s/r/swarm: log backend errors at Debug level
    e66995d840 d/l/awslogs: fix ineffective Add in test
    713e02e03e daemon: handle EISDIR error from runtime
    97921915a8 distribution/xfer: fix download fencepost bug
    0c68b655f6 Fix loop-closure bugs in tests
    dea3f2b417 Migrate away from things deprecated in Go 1.20
    a36286cf89 vendor: golang.org/x/net v0.7.0
    c7de76569e vendor: golang.org/x/text v0.7.0
    a53b44a266 vendor: golang.org/x/sys v0.5.0
    c53e22af19 add new maintainers!
    046cc9e776 libnetwork: check DNS loopback with user DNS opts
    d31fa84c7c libnet/networkdb: use atomics for stats counters
    3539452ef0 libnetwork/networkdb: make go test -race ./libnetwork/networkdb pass
    5287b2ddbf libnet/ipam: stop eagerly stringifying debug logs
    2e19a4d56b contrib/apparmor: remove version-conditionals (< 2.9) from template
    7008a51449 profiles/apparmor: remove version-conditional constraints (< 2.8.96)
    eaeaa7b7fd vendor: update buildkit to latest v0.11
    335907d187 builder: define GetRemotes for the worker
    80f8432b52 ci: fix branch filter pattern in buildkit workflow
    62be425bcc api: Extract parsing reference from repo and tag
    afc6e3fa46 c8d/import: Use danglingImageName instead of hardcoded
    b3a8b6b198 api/tag: Reject digested target references
    eaa56afda9 daemon/c8d: Implement TagImageWithReference
    1ca85e835c daemon/imageService: Remove TagImageWithReference
    7b6f71dced daemon: Pass ctx to image tagging operations
    22776f8fdb ci: enhance tests distribution
    e304e82b66 ci: update gotestlist to 0.3.1
    ab3fa46502 apparmor: Check if apparmor_parser is available
    0137446248 Implement run using the containerd snapshotter
    e564932792 gha: switch buildkit back to upstream for testing
    91725ddc92 libnet/d/ipvlan: gracefully migrate from older dbs
    21677816a0 Dockerfile: configure code dir as "safe" directory
    3bcb350711 graphdriver/overlay2: usingMetacopy ENOTSUP is non-fatal
    521c2b25c2 docs: fix JSON format error
    af32603ae3 daemon/c8d: Implement save and load
    043dbc05df github: apply patch for CNI test that was incorrectly skipped
    666334bd48 vendor: update buildkit to v0.11.2
    85169a04cf vendor: github.com/tonistiigi/fsutil v0.0.0-20221114235510-0127568185cf
    cf83842304 Dockerfile: Make it easier to use ctr in shell container
    0e4d3feb94 daemon: identify container exits by ProcessID
    843fcc96f7 libc8d/remote: name task fifos after task ID
    719b08313f libc8d/local: set task id to container id
    d634ae9b60 Wait longer for exit events on Windows
    7950abcc46 libnetwork: delete CHANGELOG.md
    31f4ec92f6 update containerd binary to v1.7.0-beta.3
    c41c8c2f86 vendor: github.com/containerd/containerd v1.6.16
    22098745e7 vendor: github.com/pelletier/go-toml v1.9.5
    a264f2dc55 libnetwork/ipam: skip Destroy()ing bitseq.Handle values
    6f08fe20e9 libnetwork/bit{seq,map}: delete CheckConsistency()
    a08a254df3 libnetwork: drop DatastoreConfig discovery type
    28edc8e2d6 libnet: convert to new-style driver registration
    5595311209 libnetwork/drvregistry: split up the registries
    d478e13639 libnet: un-plumb datastores from IPAM inits
    27cca19c9a libnetwork/drvregistry: drop unused args
    befff0e13f libnetwork: remove more datastore scope plumbing
    142b522946 libnetwork/config: remove vestiges of global scope
    52d9883812 libnetwork: drop (*Controller).ReloadConfiguration
    9900c7a348 client: improve error messaging on crash
    e8011d7872 libnw/ipamutils: make local defaults immutable
    540d1e0561 libnw: untangle IPAM allocator from global state
    48ad9e19e4 libnetwork/netutils: drop ElectInterfaceAddresses
    cc19eba579 daemon: let libnetwork assign default bridge IPAM
    a654cbfd2f Use GetBoolOrDefault to remove duplicated invalidFilter usages
    0d68591c8e api/types/filters: Add GetBoolOrDefault
    390532cbc6 libnetwork/windows/overlay: drop unused variables
    b3e6aa9316 libnetwork/netutils: clean up GenerateIfaceName
    3775939303 libnetwork/netutils: refactor GenerateRandomName
    1776f72c96 c8d/progress: Update progress when finished
    54f0b0ec4b c8d: Implement image history
    c0eb207b76 libnetwork/bitseq: refactor JSON marshaling
    89ae725d23 libnetwork/bitseq: make mutex an unexported field
    94ef26428b libnetwork/bitseq: refactor in terms of bitmap
    143c092187 libnetwork/bitmap: optimize binary serialization
    c4d7294b5c libnetwork/bitmap: remove datastore concerns
    ad03a09451 libnetwork/bitmap: dup from package bitseq
    cd2e7fafd4 libnetwork/bitseq: add marshal/unmarshal tests
    b3c5352386 rootless: support `--ipc=host`
    67aa86f1e0 hack: check if cross-compiling before setting ARM target name
    25f95b0000 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230119195359-904c221ac281
    170a1c4709 hack: display build cmd when DOCKER_DEBUG set
    877baae03e hack: remove unnecessary vars in make.sh script
    b80f16157e hack: remove ORIG_BUILDFLAGS var
    0c008cc4f8 hack: remove -installsuffix build flag
    d2d6ef431f Dockerfile: prefer ld for building against arm64
    518be73a5c Dockerfile: smoke tests for static builds
    f676dab8dc Dockerfile: use clang to build dockerd/docker-proxy
    f49c88f1c4 Disable chrootarchive.init() on Windows
    9b5c21309b images: Pass context to commit related operations
    596c8960b2 c8d: Fix resolving truncated id to a descriptor
    65c6ba1fc4 vendor: golang.org/x/net v0.5.0
    ff14f8ef16 Add GetLibHome stub for non-linux OS
    824dc51341 vendor: golang.org/x/text v0.6.0
    e66e6bb28a vendor: golang.org/x/sys v0.4.0
    dcfe23a038 fix blockThreshold full bug
    0b83fd3217 ioutils: add regression test for bytespipe deadlock
    71fa3b1337 Dockerfile: fix PKG_CONFIG for xx
    945704208a hack: name for target ARM architecture not specified
    94639eb66f hack: typo in displayed platform name
    ffd75c2e0c libnetwork: Support IPv6 in arrangeUserFilterRule() (redux)
    17723691e5 Revert "libnetwork: Support IPv6 in arrangeUserFilterRule()"
    833096ce42 homedir: fallback to user.Current().homeDir if XDG_DATA_HOME/XDG_CONFIG_HOME and HOME are unset
    af6b5d55db vendor: github.com/moby/ipvs v1.1.0
    f53feeea8b vendor: github.com/vishvananda/netns v0.0.2
    8be470eea8 libnetwork: don't embed mutex in network
    c71555f030 libnetwork: return concrete-typed *Endpoint
    581f005aad libnetwork: don't embed mutex in endpoint
    0e91d2e0e9 libnetwork: return concrete-typed *Sandbox
    0425baf883 libnetwork: don't embed mutex in sandbox
    f96b9bf761 libnetwork: return concrete-typed *Controller
    ae09fe3da7 libnetwork: don't embed mutex in controller
    bb5cae2c94 vendor: github.com/vishvananda/netns v0.0.1
    102090916e libnetwork: addRedirectRules without reexec
    582dd705c1 libnetwork: fwmarker without reexec
    d6cc02d301 libnetwork: drop (resolver).resolverKey field
    50a4951ddc libnetwork: setup DNS resolver without reexec
    4733127a04 libnetwork: set default VLAN without reexec
    7037c48e58 libnetwork: set IPv6 without reexec
    0246332954 libnetwork: create netns without reexec
    ef161d4aeb libnetwork: Clean up sysfs-based operations
    9032e6779d c8d/resolver: Fallback to http for insecure registries
    c83fce86d4 c8d/resolver: Use hosts from daemon configuration
    3a3f98b32b c8d/pull: Don't unpack manually
    4a8c4110e3 produce progress events polling ctrd's content.Store
    566a2e4c79 libnetwork: Remove iptables nat rule when hairpin is disabled
    d7deec1993 daemon/c8d: Implement import
    a254dad2e5 api/import: Guard from Digested instead of Canonical reference
    28327f10a2 daemon/import: Extract common logic to api
    8dbc5df952 daemon/config: inform the user when the input JSON contains invalid UTF-8
    155e8d7d78 update to go1.19.5
    d42495033e daemon/config: support alternate (common) unicode encodings using a BOM
    8d1e56e210 CONTRIBUTING.md: drop reference to the Derek GitHub bot
    0867d3173c cmd/dockerd: use default SIGQUIT behaviour
    1dcf7d5b03 daemon/config: clean up tests to use common helper
    1e1d326b50 plugins: Move GlobalSpecPaths into LocalRegistry
    805aea501a docs: api: synchronise versioned API docs (v1.39 - v1.41)
    92cbd1c69e docs: api: synchronise versioned API docs (v1.42)
    4f81f9d5ea builder/dockerfile: use example.com for tests
    65aa43bf66 libnetwork: use example.com for tests and examples
    dc30785947 ci: update buildkit to fix integration tests
    cba3edbc37 daemon/config: group JSON preprocessing steps
    bb19265ba8 daemon/config: ignore UTF-8 BOM in config JSON
    2d397beb00 libnetwork: Support IPv6 in arrangeUserFilterRule()
    6ab12ec8f4 rootless: move ./rootless to ./pkg/rootless
    c1bd5e9144 Use user paths for plugin discovery in rootless mode
    bffe6d5670 vendor: github.com/containerd/containerd v1.6.15
    89fb8b32f6 graphdriver/btrfs: needs kernel headers >= 4.12, not >= 4.7
    c12d7b6d21 upgrade to aws sdk go v2
    aa80c33360 Dockerfile.*: drop libbtrfs
    c9d632e485 PACKAGERS: update Btrfs graphdriver dependencies
    d3778d65fa graphdriver/btrfs: use free wrapper consistently
    3208dcabdc graphdriver/btrfs: use kernel UAPI headers
    1449c82484 graphdriver/btrfs: drop version information
    fdcab58ccf Remove reference to "requireRegistryMatch"
    deb4910c5b integration-cli: Fix hanging TestLogsFollowGoroutines*
    1616a09b61 add support for image inspect with containerd-integration
    bbe6e9e8d1 hack/make: Don't add -buildmode=pie with -race
    7e7b0622a6 hack: restore copy_binaries func
    b37d34307d Clear conntrack entries for published UDP ports
    1fdfd45995 Updated outdated docker contributing guidelines link
    01fd23b625 Fix volume CreatedAt being altered on initialization
    d131147a5c use errors.Is() to handle image store errors
    83280d44d0 docs: contributing docs update for cross comp
    e8a82ed24d Dockerfile: add "all" stage to build binaries and extra tools
    113e95ec02 ci: add extra steps to check artifacts
    b565b496ba Dockerfile: rename dev stages
    27ba1766e7 ci: use GITHUB_REF and GITHUB_SHA to set version and commit
    0b3af098e1 bake: define additional vars
    9bcf5bed05 bake: define DESTDIR
    491467b0b9 hack: update buildmode pie condition
    347a5f68da hack: do not set buildmode pie for statically linked binary
    e37985f590 hack: use PKG_CONFIG var when checking libdevmapper
    84ea9ee0f9 IAmStatic not used anymore
    04c90b8cf5 hack: remove containerutility script
    8086f40123 Dockerfile: use TARGETPLATFORM to build Docker
    722d477bc6 client: defaultHTTPClient(): don't ignore transport errors
    31ee158394 client: defaultHTTPClient() accept URL
    1de3966b84 image: store: rename vars that collided with types or shadowed vars
    2910163df1 daemon/images: imageKey() accept string
    040b5bbc52 image: store.restore(): use more structured logs
    456ea1bb1d image: deprecate IDFromDigest()
    a5ebd28797 daemon/graphdriver/devicemapper: simplify Udev log, and update link
    155e39187c daemon/logger/gcplogs: remove ensureHomeIfIAmStatic workaround
    5fed968b1d api: can marshal and unmarshal when args.fields is empty
    ad8804885c Update delve version
    e7d75c8db7 api/types/container: fix validation for UTSMode, UsernsMode, PidMode
    018347f802 integration-cli: remove waitInspectWithArgs()
    61c434c030 integration-cli: remove inspectMountPointJSON()
    ffbbe3d103 daemon/graphdriver/btrfs: workaround field rename in btrfs-progs 6.1
    0eb7b49a17 daemon: remove some intermediate vars, use struct-literals
    288cf20f98 daemon: rename some vars that collided with imports
    c5d4b6b311 restartmanager: remove RestartManager interface
    efb97da0da restartmanager: add SetPolicy() to the RestartManager interface
    d68b68fc43 restartmanager: RestartManager.Cancel(): remove unused error return
    42f1be8030 daemon: translateContainerdStartErr(): rename to setExitCodeFromError()
    83dd99177f daemon: translateContainerdStartErr(): use exit code 128 as default
    46dae0b8bb daemon: translateContainerdStartErr(): use early return for errors
    4e750caf96 daemon: translateContainerdStartErr(): extract detecting wrong cmd
    a756fa60ef daemon: translateContainerdStartErr(): use const/enum for exit-statuses
    2cf09c5446 daemon: translateContainerdStartErr(): remove unused cmd argument
    087369aeeb daemon: containerStart(): rename return variable
    940730093b integration-cli: remove cli.Build(), cli.Inspect()
    bc0885f364 integration-cli: remove WaitRestart(), un-export WaitForInspectResult()
    1bd486666b api/types/container: use strings.Cut() and DRY
    ab5e69c442 api/types/container: rewrite tests to use subtests and asserts
    e155cb4fee hostconfig: move unit tests to api/types/container
    12df6024db cmd/docker-proxy: add "-v / --version" flag
    c42b304f62 gha: update buildkit to fix integration tests
    799cc143c9 Always use iptables -C to look for rules
    205e5278c6 Merge iptables.probe() into iptables.detectIptables()
    0787ea8b26 libnetwork: improve logs for DNS failures
    a959487597 libnetwork/netlabel: remove Key(), Value(), and KeyValue() utils
    9015cb7111 libnetwork: controller: rename vars that collided or shadowed
    96cfb076ce libnetwork/netlabel: make consts actual consts
    36151bd1d7 libnetwork/drivers/bridge: remove "ioctl" fallback code for legacy kernels
    6a91e09218 pkg/parsers: use strings.Cut(), and cleanup error-messages
    3f935d0e2c daemon/graphdriver/zfs: use strings.Cut, and refactor
    f95e9b68d6 daemon: use strings.Cut() and cleanup error messages
    46f7c92c9a libnetwork: use strings.Cut() and minor refactor
    87ca9490b0 libnetwork/datastore: rename var that collided with import
    ff447f4fd5 runconfig/opts: use strings.Cut()
    bffb35612c plugin: use strings.Cut()
    01365cbd74 libcontainerd/local: use strings.Cut()
    6059d38f21 pkg/parsers/operatingsystem: don't use strings.SplitN()
    451b8579ef pkg/parsers/kernel: use strings.Cut() and minor refactor
    774cd9a26c opts: use strings.Cut() and refactor parseDaemonHost()
    d3cd746067 integration-cli: use strings.Cut()
    38b0c47f37 integration-cli: links: use gotest.tools compare and assert.Check
    ebda2fa2b5 integration/internal: use strings.Cut() and minor refactor
    39f59c3289 daemon/links: use strings.Cut()
    ad7f1a8dcc daemon/logger: use strings.Cut()
    32c4c15f15 daemon/events: use strings.Cut()
    5008409b5c cmd/dockerd: use strings.Cut()
    19cd5ff164 client: use strings.Cut()
    64adea1ce1 volume: use strings.Cut() and minor refactor
    19db33afc9 pkg/tarsum: use strings.Cut() and minor refactor
    59880cb855 builder/dockerfile: use strings.Cut()
    604a2d67b5 builder/remotecontext/git: use strings.Cut()
    380a2dfc3a api/types: use strings.Cut()
    7841ce781c api/types/time: use strings.Cut()
    ba9bcf92f6 api/types/filters: use strings.Cut()
    6db4af7bd5 graphdriver: windows: use strings.Cut()
    c545473920 daemon/cluster: use strings.Cut()
    ec878a3d89 pkg/sysinfo: unify ReadMemInfo implementation
    09ea6744fe pkg/sysinfo: remove github.com/docker/go-units dependency
    6a516acb2e pkg/system: move memory-info types to pkg/systeminfo
    6919b9879b pkg/sysinfo: unify NumCPU implementation
    c63ea32a17 pkg/ioutils: TempDir: move to pkg/longpath
    3314f4ef09 pkg/ioutils: unify TempDir implementation
    2e67c85c13 pkg/longpath: fix package GoDoc
    c4c53659f1 integration-cli: remove uses of ioutils.TempDir
    2e67c827bb errdefs: FromStatusCode() don't log "FIXME" debug message
    83d7ae76e8 vendor: github.com/containerd/containerd v1.6.14
    72ea8cfb43 registry: use http.NewServeMux for tests instead of gorilla/mux
    54512f2184 pkg/stringid: optimize performance
    d20ddb6807 update containerd binary to v1.7.0-beta.1
    35cbdc9661 vendor: github.com/containerd/containerd v1.6.13
    9300aca2a6 vendor: github.com/Microsoft/hcsshim v0.9.6
    19f3448c21 Dockerfile: delve cross build with TARGETPLATFORM
    ed95e1a9ff Dockerfile: swagger cross build with TARGETPLATFORM
    879b023706 Dockerfile: containerutility cross build with TARGETPLATFORM
    8d9a357a67 Dockerfile: registry cross build with TARGETPLATFORM
    a4bc2922c2 Dockerfile: dockercli cross build with TARGETPLATFORM
    420591c4a2 Dockerfile: rootlesskit cross build with TARGETPLATFORM
    f0307892ea Dockerfile: tini cross build with TARGETPLATFORM
    5e19d7ec54 Dockerfile: runc cross build with TARGETPLATFORM
    81d704d15d Dockerfile: containerd cross build with TARGETPLATFORM
    b19c11621a Dockerfile: DOCKER_STATIC arg
    69c9dfd6d5 Dockerfile: add dummy stage
    6cba7d22e9 Dockerfile: add cross compilation helper
    0007490b21 vendor: github.com/moby/swarmkit/v2 v2.0.0-20221215132206-0da442b2780f
    e19dff9285 daemon/config: remove deprecated RootDeprecated field
    32b299f63e daemon/config: rename CommonTLSOptions to TLSOptions
    ef7ab7bde8 cli: remove cli/config package, integrate into cmd/dockerd
    6a90113e68 cli: move cobra customizations into cmd/dockerd
    3d58b43efe cli: remove unused Errors type
    25c3421802 hack: introduce validate/no-module
    a449f77774 hack: replace go-mod-prepare.sh with wrapper script
    388fe4aea8 daemon: drop side effect from registerLinks()
    0141c6db81 daemon: don't checkpoint container until registered
    00157a42d3 daemon: fix GetContainer() returning (nil, nil)
    7b13076f56 daemon: CreateNetwork: remove redundant error check
    389dacd6e2 vendor: github.com/tinylib/msgp v1.1.6
    24496fe097 vendor: github.com/philhofer/fwd v1.1.2
    8fb71ce208 manage image inspect data in backend
    a8eb15eafb ImageService.ImageHistory(): pass context
    0426c76142 List images with multiple since/before filters
    e214503789 image/store: Use errdefs for errors
    28382c58ec container: ViewDB: use logrus.WithError()
    6549a270e9 container: ViewDB: return typed system errors
    94dea2018e container: ViewDB: GetByPrefix() return typed errors
    da4d627e79 container: ViewDB: use errdefs for non-existing containers
    ddaba6d576 daemon: filterByNameIDMatches() fix error handling
    8c9a240597 container: use const for null-terminator
    200edf8030 libcontainerd/remote: remove stray import comment
    12c76d4a15 vendor: github.com/containerd/containerd v1.6.12
    4bbc37687e vendor: golang.org/x/net v0.4.0
    18f85467e7 docs: add 401 to possible status codes of /auth
    d331bc3b03 vendor: github.com/containerd/containerd v1.6.11
    52bc1ad744 update to go1.19.4
    f577f31f50 Add Bjorn Neergaard to maintainers
    9da935629e Better not pretend to be an active currator
    383e23fd61 Add Kevin Alvarez ("crazy-max") to curators
    521b8c02cc builder: handle host-gateway with extra hosts
    381fa4afca ci(buildkit): update buildkit ref to fix issue with alpine image
    a6a539497a distribution: checkSupportedMediaType: allow additional media-types
    57b229012a seccomp: block socket calls to AF_VSOCK in default profile
    eaa74497b8 libnetwork: use go-immutable-radix instead of radix
    93fa093122 testing: move fuzzers over from OSS-Fuzz
    3d97f1e22d client/list: Handle SharedSize
    e1c3305015 AUTHORS: regenerate
    672383bc56 .mailmap: cleanup and additions
    b94d1604a9 hack/generate-authors.sh: refactor and simplify
    6326ad1729 vendor.mod: remove outdated comment about replaced module
    0f0fce5dcc libnetwork/netutils: FindAvailableNetwork(): simplify reading of resolv.conf
    0cbe6524db libnetwork/drivers/overlay: getBridgeNamePrefix() simplify reading of resolv.conf
    0ef0dab2f7 libnetwork: sandbox.rebuildDNS() make updating sandbox more atomic
    806b4fbcad libnetwork: sandbox.rebuildDNS() move variables closer to where they're used
    d178a71b7c libnetwork: sandbox.rebuildDNS() simplify reading of resolv.conf
    05b3356631 libnetwork: sandbox.setupDNS() don't parse host resolv.conf if not needed
    08d5e3d0fa libnetwork: sandbox.setupDNS() simplify reading of resolv.conf
    a44f547343 registry: session: remove unused id
    fb77973201 pkg/system: move CheckSystemDriveAndRemoveDriveLetter to pkg/archive
    c4872b4519 pkg/system: CheckSystemDriveAndRemoveDriveLetter: fix error format
    ad371893f2 pkg/system: move GetLongPathName to integration-cli
    9f3e5eead5 pkg/system: deprecate DefaultPathEnv, move to oci
    dec81e489f daemon/disk_usage: Use context aware singleflight
    f7e59cbccc Jenkinsfile: Fix dev image build fox ppc64le/s390x archs
    85fddc0081 distribution: remove unused RequireSchema2
    8feeaecb84 use ad-hoc libtrust key
    e854b2a459 distribution: use ad-hoc trustkey for tests
    5cdd6ab7cd daemon/config: remove TrustKeyPath, and local utilities
    1981706196 daemon: remove migrateTrustKeyID()
    c1756e1b63 update containerd binary to v1.7.0-beta.0
    c1a9e82d3e vendor: google.golang.org/grpc v1.50.1
    bade242ddd Makefile: always use buildx
    426e3926ef ci: define timeout for jobs
    dc52e08bb5 vendor: github.com/prometheus/client_golang v1.14.0
    b2fe29ba79 vendor: github.com/go-logr/logr v1.2.3
    7c1b7842c6 vendor: golang.org/x/crypto v0.2.0
    efe17dbdb4 vendor: golang.org/x/net v0.2.0
    0588a83380 vendor: github.com/opencontainers/runc v1.1.3
    38adf7a694 vendor: github.com/klauspost/compress v1.15.12
    e1058e6bc3 go.mod: golang_protobuf_extensions v1.0.4 - prevent incompatible versions
    62344f515c layer: layerStore.registerWithDescriptor: rename var to prevent shadowing
    e5e6480694 Add Sam Thibault (sam-thibault) as curator
    4769809555 api/server/backend/build: sanitizeRepoAndTags() check for digest
    64f9ea1cf5 vendor: github.com/moby/swarmkit/v2 v2.0.0-20221123162438-b17f02f0a054
    a5898e3a2d vendor: github.com/prometheus/client_golang v1.13.0
    2cc6a86fd3 vendor: github.com/aws/aws-sdk-go v1.37.0
    8f1bc3a3b7 vendor: google.golang.org/grpc v1.48.0
    b0e20e1b3c vendor: go.uber.org/zap v1.21.0
    066fb6c69e vendor: go.uber.org/multierr v1.8.0
    b41580d66e vendor: go.uber.org/atomic v1.9.0
    341c9e77a8 vendor: github.com/jmespath/go-jmespath v0.4.0
    9a8b46518b vendor: google.golang.org/genproto v0.0.0-20220706185917-7780775163c4
    1e48b64538 vendor: github.com/fernet/fernet-go v0.0.0-20211208181803-9f70042a33ee
    4113a88523 vendor: google.golang.org/protobuf v1.28.1
    26c4429f7e vendor: github.com/spf13/cobra v1.6.1
    8a46a2a364 Dockerfile: remove hardcoded platforms for vpnkit stage
    4f17d17009 ignorefiles: cleanup
    61f266f660 vendor: github.com/moby/term v0.0.0-20221120202655-abb19827d345
    af8e955e8f hack/go-mod-prepare.sh: find root robustly; make steps transparent
    30b0cb0cd4 vendor.mod: add comment about replaced dependency
    62a4a45a72 vendor.mod: remove replace for github.com/rexray/gocsi
    a2d758acc9 vendor: github.com/armon/go-radix v1.0.1-0.20221118154546-54df44f2176c
    9f004830a5 hack/validate/vendor: clean up license validation step
    dbd76848ca hack/validate/vendor: split tidy from vendor
    72568286ab hack/vendor.sh: allow running tidy & vendor separately
    40069797ef hack: remove obsolete sources for go-autogen
    07ba3e35d3 Add additional loggig in case of error of renaming runtimes-old and removing it
    d591710f82 Handle docker start inside overlayfs
    ca807edac0 update github.com/tc-hib/go-winres v0.3.0 to fix schema version in manifest
    25dc760162 Dockerfile: variant support in frozen-images stage
    882ddf4b16 update gotestsum to v1.8.2
    b529870558 daemon/config: use strings.Cut(), fix panic in BuilderGCFilter
    7ca03c1a79 rootlesskit.installer: s/vendor.conf/vendor.mod/
    a2cea992c2 libnetwork/iptables: Fix test panic when execute only one test
    a6cb8efd81 vendor: golang.org/x/oauth2 v0.1.0
    9d7bd47cb6 vendor: golang.org/x/crypto v0.1.0
    d9fb730148 update RootlessKit to v1.1.0
    08516af897 vendor: github.com/rootless-containers/rootlesskit v1.1.0
    be18f92bf4 hack/validate: drop changelog-related steps
    ec1bb21649 cleanup: drop historical CHANGELOG.md
    e8ad01594a cleanup: drop .DEREK.yml
    4e5c3b82cb vendor: github.com/containerd/containerd v1.6.10
    a5979a2106 update containerd binary to v1.6.10
    06e4b7d1f8 vendor: github.com/moby/buildkit v0.10.6
    40908fca45 fix vendor.mod: add hashicorp/go-multierror as direct dependency
    81ccfd44e4 Fix grammar in README.md
    6a02afa56f ci(actions): bump outdated actions on Linux
    0557569947 ci(actions): migrate to file-based commands
    79f9ffd401 vendor: golang.org/x/net v0.1.0
    71fa64a272 vendor: golang.org/x/time v0.1.0
    4965f19626 vendor: golang.org/x/sync v0.1.0
    4bb95eef6f vendor: golang.org/x/sys v0.1.0
    67b9f120d5 pkg/archive: switch back to os/exec
    b7d242f094 builder/remotecontext/gitutils: switch back to os/exec
    6a15f40803 libnetwork_test: improve OptionBoltdbWithRandomDBFile
    a0f9caec99 libnetwork_test: stop controllers at end of test
    010077ba0f libnet/d/bridge: fix race condition in test case
    7b2308980c libnet/d/bridge: fix bridgeInterface.addresses()
    c2a087a9f7 libnet/d/bridge: use fresh PortAllocator in tests
    1b64f2e28b libnetwork: stop caching global netlink handle
    d0096bba21 libnetwork_test: overhaul TestParallel
    32ace57479 libnetwork_test: isolate tests from each other
    0411336b49 libnetwork_test: pass controller into createTestNetwork
    9a0953a0a0 libnet/testutils: spawn goroutines in test OS ctxs
    07be7b087d libnetwork_test: remove in-container special case
    e2a89b7ad1 libnet/d/bridge: configure store when opts missing
    8a20564847 libnet/datastore: stop sharing defaultScopes singleton
    8404507b9b libnet/osl: stop assuming caller thread is clean
    0f7c9cd27e Remove uses of deprecated go-digest.NewDigestFromHex, go-digest.Digest.Hex
    6174d00c03 replace distribution/digestset with opencontainers/go-digest/digestset
    bbb1b82232 go.mod: github.com/miekg/dns v1.1.43
    d43bc26717 vendor: gotest.tools/v3 v3.4.0
    57ba2df970 vendor: github.com/google/go-cmp v0.5.9 to remove golang.org/x/xerrors dep
    f39b83e232 libnetwork: fix TestParallel "bad file descriptor"
    fe6706a2ce libnetwork: make tests less dependent on others
    cea8e9b583 libcontainerd/supervisor: use pkg/pidfile for reading and writing pidfile
    14da1bfe40 cmd/dockerd: adjust error message for pidfile changes
    7493debe26 pkg/pidfile: implement Read()
    7d3e1ad943 pkg/pidfile: Write(): don't automatically create parent directories
    81945da0ac pkg/pidfile: Write(): take pid as argument
    735e250326 pkg/process: Alive(): fix PID 0, -1, negative values
    55d15e9d05 pkg/pidfile, pkg/process: use single implementation for process alive
    9d5e754caa move pkg/system: process to a separate package
    0040fb93d6 pkg/system: IsProcessZombie() skip conversion to string, use bytes instead
    970ad4e3c7 pkg/system: IsProcessZombie() ignore "os.ErrNotExist" errors
    8d6da1e100 pkg/system: IsProcessAlive() remove redundant type-cast
    2006d9f7d1 cmd/dockerd: Rewrite shutdownDaemon to use context timeout
    66a0289081 builder: Don't store context in struct
    a181a825c8 daemon/start: Revert passing ctx to ctr.Start
    def549c8f6 imageservice: Add context to various methods
    57c2545cd5 vendor: github.com/moby/swarmkit/v2 v2.0.0-20221102165002-6341884e5fc9
    1bef9e3fbf Fix containerd task deletion after failed start
    be1829f63d daemon/logger: fix godoc
    407e3a4552 distribution: Error when pulling OCI artifacts
    4386e3f7c0 pkg/parsers/kernel: un-export Utsname
    775dcab7a2 pkg/parsers/kernel: remove duplicate Package godoc
    8d0dc69027 implement docker system df
    952e1e62c5 Sort entries in pkg/namesgenerator
    5bc17c3e54 Remove long-deprecated "arm" fallback
    3d71555a47 Remove errant "runtime.GOARCH" from debug message
    f9d4589976 Update to Go 1.19.3 to address CVE-2022-41716
    1e88fe578e pkg/idtools: remove execCmd() utility
    3d73d32499 api/types/filters: add output to example
    c207947508 integration-cli: DockerPluginSuite: use gotest.tools compare utilities
    346a438da8 opts: TestParseLink(): add test-case for legacy format
    ad4073edc1 daemon: fix docs for config-default constants
    dcd6c1d2e2 container: make path resolution fns Windows-only
    2bdc7fb0a1 daemon: archive in a dedicated mount namespace
    7d23c50599 integration: test more copy edge-cases
    6750d1bac8 daemon: drop Windows-only code from archive_unix.go
    4fd91c3f37 daemon: refactor isOnlineFSOperationPermitted
    84cbe29d5b daemon: dupe the archive implementation
    60ee6f739f Add reusable chroot and unshare utilities
    317d3d10b8 Revert "Use real chroot if daemon is running in a user namespace"
    5de229644f pkg/chrootarchive: stop reexec'ing before chroot
    f2f884a92f pkg/archive: create whiteout temp dir under dest
    1f32e3c95d Add integration test for #38995, #43390
    6c0aa5b00a Fix the max-concurrent-downloads and max-concurrent-uploads configs documentation
    22529b81f8 libnetwork: drop InitOSContext()
    7fc29c1435 libnetwork/osl: clean up Linux InvokeFunc()
    d1e3705c1a libnet/d/overlay: restore thread netns
    3e2f0c7a39 libnetwork: fixup thread locking in Linux tests
    afa41b16ea libnetwork/testutils: restore netns on teardown
    04dc007c76 vendor: github.com/containerd/containerd v1.6.9
    ac79a02ace update containerd binary to v1.6.9
    4f1d1422de integration: download busybox-w32 from GitHub Release
    4fdc1bb1fb builder/remotecontext/git: allow building on go1.18
    4f43cb660a skip TestImagePullStoredfDigestForOtherRepo() on Windows and rootless
    27530efedb Validate digest in repo for pull by digest
    92eca900b0 Revert "testutil/registry: remove unused WithStdout(), WithStErr() opts"
    201fdf67ac gha: update buildkit to v0.10.5-6-ge27c8e24 to skip some tests
    0760c6f4e1 gha: buildkit: make checks more readable
    cfa2f9a2f2 gha: buildkit: remove "skip-integration-tests" from matrix
    67d010bd2c builder: add missing doc comment
    94672c89cc builder: fix running git commands on Windows
    61acc9939f builder: make git config isolation opt-in
    72119f5d9b builder: isolate git from local system
    0f7b0897cc builder: explicitly set CWD for all git commands
    8deb92d653 builder: modernize TestCheckoutGit
    0fc17c42af vendor: github.com/moby/buildkit v0.10.5
    51fe170224 daemon: NewDaemon() fix import colliding with local variable
    27bd49f4bf daemon: NewDaemon(): replace system.MkdirAll for os.Mkdir where possible
    19c5d21e6f daemon: getPluginExecRoot(): pass config
    17fb29c9e8 daemon: NewDaemon(): check system requirements early
    7ff0f654fb daemon: add TEST_INTEGRATION_USE_SNAPSHOTTER for CI
    0a004fd361 daemon: NewDaemon(): log message if containerd snapshotter is enabled
    4fa853f5de pkg/fileutils: ReadSymlinkedDirectory: preserve underlying error
    24e371c812 pkg/fileutils: improve tests
    d4d242ba76 pkg/chrootarchive: gofumpt test files
    dee3f716b3 pkg/chrootarchive: replace system.MkdirAll for os.Mkdir
    8a8202fcdc pkg/chrootarchive: TestChrootTarUntar fix copy/paste mistake
    0955c88c2e pkg/chrootarchive: use t.TempDir()
    30e5333ce3 registry: allow "allow-nondistributable-artifacts" for Docker Hub
    69f72417f4 pkg/idtools: remove CanAccess(), and move to daemon
    ee34a8ac29 pkg/idtools: setPermissions() accept Identity as argument
    bca90530fa pkg/idtools: simplify if-statement
    d68fa0382d pkg/idtools: don't use system.Stat() on unix
    43d6eb7173 pkg/pidfile: remove PIDFile type, rename New() to Write()
    dd8983f96c pkg/pidfile: reduce cyclomatic complexity, and small optimisation
    4917bcc039 pkg/pidfile: don't ignore all errors when reading file
    3ce2a7d026 pkg/pidfile: pkg/pidfile: use strconv instead of fmt.Sprintf(), and unconvert
    a9fa147a92 daemon/logger/etwlogs: rewrite to use go-winio/pkg/etw
    f058afc861 pkg/system: synchronize mkdirall() with latest os.MkDirAll()
    2e66c0b6f0 pkg/system: create SecurityAttribute only once (Windows)
    55ceb5047c pkg/system: update volumePath regex to allow returning earlier
    cfef1b11e5 pkg/system: compile volume-path regex once, and update GoDoc
    264706f804 hack: allow pkg/ to import internal/ packages
    3246db3755 fix force remove for cluster volumes
    624daf8d9e Change restart delay for Windows service to 15s
    3c585e6567 cmd/dockerd: use golang.org/x/sys Service.SetRecoveryActions()
    34f459423a Replace overlay2 mount reexec with in-proc impl
    6176ab5901 cmd/dockerd: use golang.org/x/sys/windows.SetStdHandle()
    ffcddc908e cmd/dockerd: replace deprecated windows.IsAnInteractiveSession()
    75bdbf02a6 daemon/graphdriver/windows: Remove() don't use defer() in a loop
    90431d1857 daemon/graphdriver/windows: use go-winio.GetFileSystemType()
    e35700eb50 daemon/graphdriver/overlay2: remove deprecated overrideKernelCheck
    b43a7ac530 integration/plugin: remove deprecated overlay2.override_kernel_check
    de705907a5 client: remove solaris build-tag, simplify and gofumpt
    6fd2d4e772 integration: remove uses of pkg/system.Stat()
    0242fef89c integration-cli: remove uses of pkg/system.Stat()
    402e0b58ca testutil: use filepath.WalkDir instead of filepath.Walk
    3db11af44b libnetwork/drivers/overlay: use filepath.WalkDir instead of filepath.Walk
    0ee5518e76 oci: use filepath.WalkDir instead of filepath.Walk
    ec000ce555 pkg/archive: use filepath.WalkDir instead of filepath.Walk
    f595434abc daemon/graphdriver/devmapper: use filepath.WalkDir instead of filepath.Walk
    8f1bc0bccc daemon/graphdriver/btrfs: use filepath.WalkDir instead of filepath.Walk
    1870d5f4aa builder: use filepath.WalkDir instead of filepath.Walk
    d33428f0bf pkg/system: remove solaris left-over
    a35bcd01c5 pkg/pidfile: replace uses of windows.Close() with windows.CloseHandle()
    89de943401 pkg/pidfile: windows: replace magic consts for golang.org/x/sys consts
    11cceea58a pkg/idtools: cleanup errors
    8d5b17e939 pkg/idtools: don't use system.MkdirAll() where not needed
    2e74e307d0 pkg/idtools: format code with gofumpt
    0fc13104e7 pkg/idtools: CanAccess(): reorder checks to allow early return
    c7c02eea81 pkg/loopback: use ioctl helpers from x/sys/unix
    6742f74e0e vendor: golang.org/x/sys v0.0.0-20221006211917-84dc82d7e875
    1ffdac4502 layer: gofumpt
    c3a5641132 layer: use strconv instead of fmt.Sprintf()
    1fccb39316 pkg/idtools: remove unused CanAccess() stub for Windows
    3b9b5842b3 pkg/idtools: mkdirAs(): move var and comment to where it's used
    838fc976c8 integration(-cli): remove some redundant formatting
    07b2e4cb79 client: use strconv instead of fmt.Sprintf()
    145817a9cf libnetwork: use strconv instead of fmt.Sprintf()
    56e64270f3 daemon: use strconv instead of fmt.Sprintf()
    533ecb44b1 daemon/logger: use strconv instead of fmt.Sprintf()
    7fbf321c2a daemon/graphdriver: use strconv instead of fmt.Sprintf
    27aea4956c pkg/idtools: mkdirAs() be more explicit about ignored args on Windows
    a19ee75bd1 pkg/system: fix missing assertions and use sub-tests for ChTimes
    a9c5a40087 pkg/system: rename some tests to be more descriptive
    ab7bc6b7d2 pkg/system: use t.TempDir(), remove some test-utils
    7bd051eeec pkg/system: windows: setCTime(): remove redundant conversion
    0b8444aa0c pkg/system: rename maxTime and re-use, define unixEpochTime, update GoDoc
    2c9684e35c pkg/system: add note about maxTime
    247f90c82e pkg/system: move maxTime init() back to Chtimes code
    4347080b46 pkg/system: remove Umask() utility
    76ce3fd9c9 remove aliases for deprecated pkg/pubsub
    89a9d7d650 fix typo
    c1729f876c remove aliases for deprecated pkg/fsutils
    ce2abb82c0 remove aliases for deprecated pkg/urlutil
    a5e1baf3ab vendor: github.com/opencontainers/selinux v1.10.2
    1f22b15030 Lock OS threads when exec'ing with Pdeathsig
    ab677c41ea pkg/system: unconvert
    07b1aa822c pkg/system: move GetExitCode() to pkg/idtools, and un-export
    5b6b42162b pkg/fsutils: deprecate in favor of containerd/continuity/fs
    26659d5eb8 pkg/directory: remove unused MoveToSubdir() utility
    bd6217bb74 pkg/directory: minor refactor of Size()
    0a861e68df pkg/directory: Size(): add back type-casts to account for platform differences
    618f26ccbc Volume prune: only prune anonymous volumes by default
    7b4e4c08b5 Update to go 1.19.2 to address CVE-2022-2879, CVE-2022-2880, CVE-2022-41715
    271243d382 docs: swagger: update description for default builder version
    c523d6d25c libnetwork: remove some outdated comments
    6f435e0bb9 Update awslogs driver batching documentation.
    60ace31be0 libnetwork: sandbox.updateDNS(): use const for file permissions
    f0be4d126d libnetwork: use object-literal for some structs
    50a7c67363 libnetwork: fix some whitespace formatting
    481185fb8a libnetwork/osl: fix GoDoc formatting
    4c0e0979b4 Fix live-restore w/ restart policies + volume refs
    3c69b9f2c5 replace pkg/fileutils Matching funcs with github.com/moby/patternmatcher
    0249afc523 migrate pkg/pubsub to github.com/moby/pubsub
    0440ca07ba pkg/fileutils: remove gotest.tools as dependency, use t.TempDir()
    f73d72bfdc pkg: replace some README's with GoDoc package descriptions
    b44b3193d0 oci.DevicesFromPath() switch to use containerd implementation
    c3a6de9ec8 logger/journald: unlock OS threads
    e2114731e7 contrib: make dockerd-rootless-setuptool.sh more robust
    8a2e1245d4 runconfig, oci, image, layer, distribution: fix empty-lines (revive)
    f63dea4337 cmd/dockerd: fix empty-lines (revive)
    cd51c9fafb client: fix empty-lines (revive)
    f71fe8476a api/server: fix empty-lines (revive)
    b04f1416f6 opts: fix empty-lines (revive)
    ddb42f3ad2 daemon: fix empty-lines (revive)
    05042ce472 daemon/images: fix empty-lines (revive)
    0695a910c6 daemon/logger: fix empty-lines (revive)
    9d9cca49b4 daemon/graphdriver: fix empty-lines (revive)
    0c7b930952 daemon/cluster: fix empty-lines (revive)
    4eb9b5f20e plugin: fix empty-lines (revive)
    188724a597 volume: fix empty-lines (revive)
    e9f1b83a4a testutil: fix empty-lines (revive)
    786e6d80ba integration: fix empty-lines (revive)
    ecb4ed172b builder: fix empty-lines (revive)
    dc0c2340b8 integration-cli: fix empty-lines (revive)
    31441778fa api/types: fix empty-lines (revive)
    412c650e05 pkg/*: fix "empty-lines" (revive)
    8cd244a318 daemon: replace ErrExtractPointNotDirectory with errdefs
    c78af57e21 daemon: replace ErrVolumeReadonly with errdefs
    0f1eeed5c2 daemon: replace ErrRootFSReadOnly with errdefs
    e31e9180cd integration-cli: remove isCpCannotCopyReadOnly utility
    3564d03b0f daemon: remove getPortMapInfo alias
    ee5d8f43e1 pkg/signal: remove stubs for deprecated package
    4a8b3b8bc5 api/types: remove aliases for deprecated Volume and VolumeUsageData
    18ca7546f6 pkg/system: remove stubs for deprecated sequential functions
    1e13247d6d pkg/idtools: mkdirAs(): fix infinite loops and repeated "chown"
    7f3602f1c9 swagger: update links to logo
    5dff494b87 test(pkg/archive): add TestImpliedDirectoryPermissions
    cd381aea56 libnetwork: fix empty-lines (revive)
    267108e113 libnetwork/config: rename ParseConfigOptions() to New()
    4831ff9f27 refactor(pkg/archive): factor out createImpliedDirectories helper
    09cc2f9d0e libnetwork/config: inline LoadDefaultScopes()
    528428919e libnetwork/config: merge DaemonCfg into Config
    571baffd59 libnetwork: remove old integration tests
    46f4a45769 libnetwork/config: remove ParseConfig()
    7d574f5ac6 libnetwork/config: inline ProcessOptions
    a8a8bd1e42 libnetwork/config: remove "Experimental" and "Debug" options
    2f1c382a6d golangci-lint: update to v1.49.0
    a5be811269 chore(integration): delete outdated TODO comment
    6ca4eda960 daemon: clean up vestiges of ContainerFS
    9ce2b30b81 pkg/containerfs: drop ContainerFS type alias
    e332c41e9d pkg/containerfs: alias ContainerFS to string
    95824f2b5f pkg/containerfs: simplify ContainerFS type
    be4f4644a8 pkg/containerfs: drop Driver abstraction
    7014c0d65d pkg/containerfs: drop PathDriver abstraction
    e37a2d1879 pkg/containerfs: delete Archiver, Driver
    a7c8fdc55b pkg/containerfs: make ResolveScopedPath a free fn
    fd16e003fb pkg/containerfs: Remove NewLocalDriver()
    4d48c00f94 pkg/containerfs: Trim away Driver interface part 1
    489e7b61bf vendor: github.com/moby/sys/sequential v0.5.0
    323ab8ef97 vendor: github.com/github.com/coreos/go-systemd v22.4.0
    0af7b4961a client: TestNewClientWithOpsFromEnv(): use sub-tests
    1a3d8019d1 Remove the OS check when creating a container
    3e1601a980 vendor: gotest.tools v3.3.0
    49de15cdcc libnetwork/resolvconf: removed unused GetIfChanged() and GetLastModified()
    55fd77f724 set ReadHeaderTimeout to address G112: Potential Slowloris Attack (gosec)
    6d59619d6e ci: reduce cache throttling limits
    511a909ae6 container: remove ViewDB and View interfaces, use concrete types
    419c47a80a Jenkinsfile: use Ubuntu 20.04 for DCO stage
    5e50d002f1 ci: fix branch filter pattern
    8596486743 Jenkinsfile: remove unit-validate stage
    cd54f31984 Jenkinsfile: remove report bundles creation in unit-validate
    a354970eaa Jenkinsfile: remove validation steps moved to GHA
    85fa72c599 chore: update supported go version to 1.18+
    c0fa14e8af vendor: github.com/armon/go-metrics v0.4.1
    1d7ceb2fee vendor: github.com/google/btree v1.1.2
    2597a71623 client: ignore kernel-memory on API >= 1.42
    9b428a3d33 integration-cli: remove TestDockerSuite func
    7b9877bd8a ci(test): report summary output
    8ad8c6d887 fix debian sysvinit script fails to restart docker daemon when stopped
    7602edfd06 ci: reusable dco workflow
    5a98363a92 ci(test): dynamic validate matrix
    9b71a46899 Revert "validation: temporarily allows changes in integration-cli"
    3cb933db9d Update uses of Image platform fields in OCI image-spec
    a73d78f8d5 ci(test): validate job matrix
    c7e77dba7f Update some tests for supplementary group permissions
    f6b695d2fb use consistent alias for gotest.tools/v3/assert/cmp
    9f8bd80487 Jenkinsfile: remove steps moved to GitHub Actions
    36688496ca ci: fix .windows workflow name
    807c849431 ci(test): send coverage to codecov
    4c8af0e2f9 ci(test): upload reports
    60864229b8 integration-cli: TestPluginInstallImage broken on GitHub Runner
    b8bf60c590 integration-cli: TestEventsOOM* broken on GitHub Runner
    df731c745a integration: TestNetworkLoopbackNat is broken on GitHub Runner
    2e04be3fb9 ci: gha test workflow for integration and unit test
    4dd86a0b33 containerd-integration: prefer error over panic where possible
    ff81dc3544 api/server/backend/build: remove Tagger and NewTagger
    779a5b3029 ImageService.GetImage(): pass context
    1eadbdd9fa Update to go 1.19.1 to address CVE-2022-27664, CVE-2022-32190
    58413c15cb update to golang 1.19
    9dab00a76e daemon/images: manifestMatchesPlatform() punch through context
    518179f63e vendor: golang.org/x/net v0.0.0-20220906165146-f3363e06e74c
    cba36a064d Update to go 1.18.6 to address CVE-2022-27664, CVE-2022-32190
    878906630b Wrap local calls to the content and lease service
    0f052eb4f5 namesgenerator: remove Valentina Tereshkova
    609d87003a pkg/archive: strip "write" bits again on Windows
    cddaa84777 pkg/archive: remove backward compat hack for go < 1.9
    306b8c89e8 linting: host:port in url should be constructed with net.JoinHostPort
    31fb92c609 linting: gosec: fix or suppress G112, G114 in test code
    561a010161 linting: suppress false positive for G404 (gosec)
    a33d1f9a7c libnetwork/diagnostic: EnableDiagnostic(): use net.JoinHostPort
    de4af86e98 daemon: set containerd default snapshotter if none is configured
    13f99eb65f vendor: github.com/docker/go-units v0.5.0
    1557892c37 api: swagger: add errorDetail to CreateImageInfo
    d983fa0ebe api: docs: add errorDetail to CreateImageInfo (v1.42)
    8b36298d7f pkg/archive: remove tests for CanonicalTarNameForPath
    d59758450b pkg/archive: make CanonicalTarNameForPath and alias for filepath.ToSlash
    509f19f611 replace pkg/system Sequential funcs with moby/sys/sequential
    a4d081cc17 ci: move buildkit tests to a dedicated workflow
    5cfc9c374c validate: address SC2155 (shellcheck)
    b9fd2cf605 validate: format vendor script with shfmt
    6cef06b940 validate: add yamllint validation
    91bb776bb8 validate: yamllint: ignore "truthy value should be one of" warnings
    cc2134ea83 validate: yamllint: set locale in config file
    f679d8c821 validate: yamllint: use "parsable" output
    5f114b65b4 validate: yamllint rename config-file
    1d7cd76ee9 Dockerfile: update yamllint to v1.27.1
    5e0599cb6e pkg/jsonmessage: export "Stream" interface
    2640aec0d7 pkg/system: make IsAbs() platform-agnostic
    65fdd10d4e ci(windows): move windows-2019 to another workflow
    8e8d9a3650 ci: fix broken workflow
    8b748bd326 daemon: stop health checks before deleting task
    d0731af939 Unskip TestHealthCheckProcessKilled on Windows
    f7277806c8 vendor: github.com/klauspost/compress v1.15.9
    d52ffce38f update containerd binary to v1.6.8
    bd98bf38e9 update runc to v1.1.4
    5dcaad0dd3 Upgrades buildx to 0.9.1
    c500d8824d vendor: github.com/moby/buildkit v0.10.4
    6217f8001e gha: temporarily pin BuildKit integration test version
    a09f8dbe6e daemon: Maintain container exec-inspect invariant
    15b8e4a490 integration: synchronize TestWaitConditions
    18e322bc7c Lock container when deleting its root directory
    6a2f385aea Share logic to create-or-replace a container
    4bafaa00aa Refactor libcontainerd to minimize c8d RPCs
    57d2d6ef62 Update container OOMKilled flag immediately
    b75246202a Stop locking container exec store while starting
    92d2e12a4d daemon: getInspectData(): reduce cyclomatic complexity
    313a7d716d daemon: getInspectData(): skip graphdriver data for snapshotters
    74b84d00b3 integration-cli: add utility to check if snapshotters are enabled
    0cbb92bcc5 daemon: capture output of killed health checks
    549d24b437 libnetwork/drivers/ipvlan: fix missing IpvlanFlag field in config JSON
    ba138d6201 daemon: don't set ignoreImagesArgsEscaped, managed  where not needed
    e14924570c client: remove deprecated WithDialer() option
    7f0cf432e9 client: remove redundant pluginPermissionDenied
    c3f0cd7457 client: remove deprecated IsErrUnauthorized, IsErrNotImplemented
    23b8fcc74d ci: print Windows daemon event log timestamps
    4b84a33217 daemon: kill exec process on ctx cancel
    774e25de13 info: add driver-type
    d8d990f2e3 daemon: make the snapshotter configurable
    e6ee27a541 Allow containerd shim refs in default-runtime
    7b7d1132e8 seccomp: allow "bpf", "perf_event_open", gated by CAP_BPF, CAP_PERFMON
    360238e9e1 vendor: github.com/hasicorp/memberlist v0.4.0
    b58de39ca7 daemon: complete the "--graph" / "-g" deprecation
    d2276ff3f2 daemon: remove daemon.graphdriver
    c6eab4077a daemon: info: fillDriverInfo() get driver-name from ImageService
    8dd14509d7 ImageService: rename GraphDriverName to StorageDriver
    ca52e0a244 vendor: github.com/containerd/containerd v1.6.8
    f27b74f0f7 Makefile: update buildx to v0.9.0
    327c8fc52f daemon/config: use initialized config in more tests
    2d7d81bc46 cmd/dockerd: use initialized config in tests
    b28e66cf4f daemon/config: New(): initialize config with platform-specific defaults
    9d74c7ab99 daemon: Mount(): use container's driver information for error-message
    239d9c5eda daemon: restore(): remove fallback for legacy containers
    6ccda5a041 daemon: restore(): remove platform-check (was used for LCOW)
    9a849cc83a introduce GetImageOpts to manage image inspect data in backend
    a4b28e23cf integration-cli: Correct emptyfs id under c8d
    502d3a1fcb containerd/load: Load all platforms
    8925f735a1 daemon/config: fix GoDoc for StockRuntimeName
    226e07144e cmd/dockerd: initContainerd() use early return
    6560e0b136 cmd/dockerd: initContainerD(): clean-up some logs
    b6b0b0a05f libcontainerd/supervisor: don't write log-level to config file
    bff3e85625 libcontainerd/supervisor: store location of config-file
    7a9791f096 libcontainerd/supervisor: store location of pidFile
    89ab14a115 libcontainerd/supervisor: make supervisor adjust OOM score for containerd
    1d2a669445 libcontainerd/supervisor: use correct logger
    2d511f28f2 libcontainerd/supervisor: platformCleanup(): use canonical socket address
    7b0bd43a27 libcontainerd/supervisor: remove unused remote.rootDir
    6b7e19ff42 libcontainerd/supervisor: remove unused RWMutex
    37a241768d cmd/dockerd: fix some minor issues in Windows implementation
    df965f51bf pkg/idtools: remove deprecated NewIdentityMapping, UIDS() and GIDS()
    9861dd069b vendor: github.com/moby/swarmkit/v2 v2.0.0-20220721174824-48dd89375d0a
    7797480eb0 daemon, builder: rename variables that collided with imports
    acd0aa7d38 api/server/router/image: address some linter warnings
    e05f614267 vendor buildkit 8e2d9b9 (v0.10 branch)
    4e46d9f963 update containerd binary to v1.6.7
    7376bf948b vendor: github.com/containerd/containerd v1.6.7
    30295c1750 api: swagger: fix invalid example value (API v1.39-v1.41)
    9031de6a9b fix minor code unreachability error
    5c96365c94 containerd: Unpack loaded images
    50fb999bb1 add image load/save support
    43956c1bfc api: swagger: document BuildCache fields (API v1.39-v1.41)
    5371c889a8 api: swagger: document BuildCache fields (API v1.42)
    e0db8207f3 api: add BuildCache.Parents for API >= v1.42
    ebf339628a api: deprecate BuildCache.Parent in API >= v1.42
    e0286d7f4e api/types: add missing GoDoc for BuildCache fields.
    dc2b34af6a api: swagger: document BuildCache fields.
    d4579a983e containerd/pull: Use authorization
    340711db3d api: add types/volume.ListOptions for a more consistent API
    f1d71f7cc3 Update golang to 1.18.5
    051e604adc libcontainerd/supervisor: simplify logic for disabling CRI plugin
    d4d5e0ae0c libcontainerd/supervisor: remove unused options
    0f5ac7761d api: api/server/router/build: fix API errors
    69f077f1aa vendor: github.com/Microsoft/hcsshim v0.9.4
    982f09f837 docs: api: add missing "platform" query-arg on create (v1.42)
    1000e4ee7d docs: api: add missing "platform" query-arg on create (v1.41)
    3dae8e9fc2 api: swagger: add missing "platform" query-arg on create
    7ca66e3cfc api: add registry.EncodeAuthConfig
    7819811835 api: add registry.DecodeAuthConfig, registry.DecodeAuthConfigBody
    e3a7a1c6ae client: linting: fix "invalid auth header" error
    360d38adb1 daemon/containerd: use types/registry.AuthConfig
    2b7416ef34 testutil, integration: use types/registry.AuthConfig
    d817f4dcee registry: use types/registry.AuthConfig
    55d1a56826 plugin: use types/registry.AuthConfig
    04c339a12b distribution: use types/registry.AuthConfig
    a02abca49a daemon: use types/registry.AuthConfig
    39f3adc079 daemon/images: use types/registry.AuthConfig
    05eacf92fe daemon/cluster: use types/registry.AuthConfig
    eaf1a604f2 client: use types/registry.AuthConfig
    d8a43399a8 api/server/router: use types/registry.AuthConfig
    818ee96219 api/types: move AuthConfig to registry types
    857cb260c7 api: add const for 'X-Registry-Auth'
    26c65447df Implement ImageDelete for containerd
    f4c0ec8ffc integration-cli: Make service process live forever
    547da0d575 daemon: support other containerd runtimes (MVP)
    31f654a704 Fix file capabilities droping in Dockerfile
    ba2ff69894 libcontainerd: switch generated containerd.toml to v2 (v1 is deprecated)
    ef5b279887 logger/journald: implement --follow correctly
    e278d3f185 logger/*: fix reading w/ non-monotonic timestamps
    342b44bf20 logger/journald: rewrite reader w/o cursors
    3e8405aa82 logger/journald: refactor cgo out of business logic
    7ff4b64319 logger/journald: simplify control flow
    f7fe2c2290 logger/journald: follow the thread-safety rules
    12744335c0 logger/journald: simplify build constraints
    0e0b300a1c Fix `make BIND_DIR=. DOCKER_SYSTEMD=1 shell`
    a61f7abf5a integration-cli: Enable TestGetContainersAttachWebsocket for Windows
    1213881712 libnetwork: refactor networkdb test implementation
    6cc644abef integration-cli: Remove unnecessary Windows-only code
    7bdc0a6291 compute image's shared size
    a1bc0a6d79 daemon/containerd: add more TODO's for image list, and reformat
    f499c6b9ec Test: wait for network changes in TestNetworkDBNodeJoinLeaveIteration
    669fbed1ac daemon/containerd: validate image filters
    4d3b32bf3d add support for since, before, labels images filters
    0e9a66d35a logger/journald: remove journald_compat (for systemd < 209)
    75577fe7a8 logger/journald: fix SA4011: ineffective break statement
    a290f5d04c state/Wait: Fix race when reading exit status
    5571d5139b integration: TestWaitRestartedContainer
    498803bec9 daemon/restart: Don't mutate AutoRemove when restarting
    c492105b8f integration: Add TestContainerWithAutoRemoveCanBeRestarted
    67c36d5d6e Windows: Re-create custom NAT networks after restart if missing from HNS
    a46ce37d25 compute image VirtualSize
    9c8b0b6050 daemon/containerd: split methods to separate files
    e4cd1933c6 daemon/containerd: ImageService: rename receiver
    91bd9a6642 daemon/containerd: change alias for oci-specs to match existing code
    b529fe0995 daemon/images: fix some linting issues
    b94f7157ca daemon/images: rename images.go to image_list.go for consistency
    046b3fc5dd daemon/images: move SquashImage to its own file
    6e0e5d7a31 daemon/images: rename variables that collided with imports
    2527e6dd09 daemon/containerd: ImageService: remove unused LookupImage()
    7b510fda0c daemon: ImageService: remove unused Map() method
    ff3d2eb589 Add Cory Snider (corhere) as maintainer
    9464898b47 libnetwork: skip firewalld management for rootless
    7d74269c0d Create the containerd image service
    4f08346686 fix formatting of "nolint" tags for go1.19
    34b8670b1a update golang to 1.18.4
    68bf777ece daemon: remove deprecated fields and flags for cluster-advertise
    494dadb8a3 api/types: remove deprecated fields for cluster-advertise
    f02cdb50be api/types/volume: remove deprecated types
    efb1f141a4 api/types/container: remove deprecated types
    10829dd222 daemon: NewDaemon(): fail early on non-supported platforms
    1de20b2012 API: bump version to 1.43
    264b41fb9e docs: add API v1.42
    e258d66f17 profiles: seccomp: add syscalls related to PKU in default policy
    9cd67df5b2 timestamp: clarify doc for ParseTimestamp
    ee230d8fdd client: errors: remove dead code
    52c1a2fae8 gofmt GoDoc comments with go1.19
    e4e819b49c pkg/parsers/operatingsystem: fix stray import
    6668801d40 gofmt files
    5b0eb69635 Extract ImageService interface from the image service
    98ce26624b maintainers: Add Paweł Gronowski as curator
    4336271b57 maintainers: Add Bruno Sousa as curator
    ab6b40e5a9 Add github issue forms
    b1a6d5388d libnetwork: macvlan: reduce use of const for driver name
    aca80d1cda libnetwork: ipvlan: reduce use of const for driver name
    dddb4d25d2 libnetwork: macvlan: cleanup parseNetworkGenericOptions
    1992190162 libnetwork: macvlan: make configuration.fromOptions a constructor
    99bde59229 libnetwork: ipvlan: cleanup parseNetworkGenericOptions
    1a1a885423 libnetwork: ipvlan: make configuration.fromOptions a constructor
    4e39cdd9bb libnetwork: ipvlan: move validation into parseNetworkOptions()
    9f0cb20d9f libnetwork: macvlan: move validation into parseNetworkOptions()
    b768d69c04 libnetwork: macvlan: processIPAM(): simplify
    5d13b38479 libnetwork: macvlan: processIPAM(): remove unused arg and error return
    798021af9f libnetwork: macvlan: set network ID as part of parseNetworkOptions
    35cba9b1c9 libnetwork: ipvlan: processIPAM(): simplify
    8d067bbdb4 libnetwork: ipvlan: processIPAM(): remove unused arg and error return
    a893540b66 libnetwork: ipvlan: set network ID as part of parseNetworkOptions
    afeb4c7a6e libnetwork: macvlan: use single ipSubnet type
    d3e3d43482 libnetwork: ipvlan: use single ipSubnet type
    9fba1514d2 libnetwork: macvlan: clean up some consts
    aec4853498 libnetwork: ipvlan: clean up some consts
    33121d3d45 introduce Containerd-snapshotter feature flag
    2293de1c82 update runc binary to v1.1.3
    af7236f85a Check ipt options before looking for ip6t
    25345f2c04 AdditionalGids must include effective group ID
    7b153b9e28 api: set default "Builder-Version" to "2" (BuildKit) on Linux
    70dc392bfa Use hashicorp/go-memdb instead of truncindex
    8d5eebcc6e vendor: github.com/bsphere/le_go v0.0.0-20200109081728-fc06dab2caa8

Bumping docker-cli to version v24.0.0, which comprises the following commits:

    fb6ae356c vendor: github.com/docker/docker v24.0.0-rc.3
    de93c9b26 vendor: github.com/docker/distribution v2.8.2
    cafdcf283 cli-plugins/manager: fix deprecation comment of Metadata.Experimental
    3768143c2 Update tag docs to clarify name
    52ac1a974 docs: update description for docker -H flag
    58f37f630 vendor: github.com/docker/docker v24.0.0-rc.2
    4f97f5599 vendor: github.com/docker/docker v24.0.0-rc.1.0.20230505222407-8d9a40a82034
    0428418d6 vendor: github.com/containerd/containerd v1.6.21
    05bf6fff2 vendor: github.com/opencontainers/runc v1.1.7
    44fce0706 vendor: github.com/mattn/go-runewidth v0.0.14
    fd0621d0f update go to go1.20.4
    155f7d9e2 cli/command/system: add utilities for printing
    1e89037d7 cli/command/system: prettyInfo: accept Streams
    8cfefc6ea cli/command/system: prettyPrintServerInfo: accept Streams
    ba7a200f0 cli/command/system: prettyPrintClientInfo: accept Streams
    73938cd61 cli/command/system: printSwarmInfo(): accept io.Writer
    2d0ea86b0 cli/command/system: use io.Writer for printing warnings
    be6f4cd56 cli/command/system: prettyPrintServerInfo: refactor printing "runtimes"
    1d70f7cdb cli/command/system: prettyPrintServerInfo: rename var that collided with import
    416e55bed github.com/docker/cli/cli/command/system: add BenchmarkPrettyPrintInfo
    f233becf9 vendor: github.com/moby/term v0.5.0
    bd2c26328 vendor: github.com/docker/docker v24.0.0-rc.1
    f02301ab5 remove uses of deprecated VirtualSize field
    eeaaf5d01 e2e: Update alpine to 3.17.2
    4569378ca e2e: Match notary server version with the main Dockerfile
    ec5504a83 test/e2e: Use "frozen" tag to reference test images
    41b6ec07c e2e: Skip tests with platform-specific digests on other platforms
    962e22c31 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230406225228-75e92ce14ff7
    72192c75c vendor: github.com/moby/buildkit v0.11.6
    c177e2060 vendor: github.com/creack/pty v1.1.18
    e693e7f3b Docs freshness updates
    1c1fca4eb docs: update deprecation status of "overlay" and "AuFS"
    c180202ce cli/command: remove deprecated Stream types
    4e19b8128 docs: update deprecation status for overlay2.override_kernel_check
    0dec5d20a volumes: prune: add --all / -a option
    ff7f76af7 Handle empty DOCKER_BUILDKIT like unset
    271b9667e Swarm: allow additional properties in `build`
    e2bfd2199 cli/compose: add schema 3.11 (no changes with 3.10 yet)
    6c4c3c23c build(deps): bump docker/bake-action from 2 to 3
    8ef8f4131 man/dockerd.8: assorted formatting fixes
    e3cb324ed man/dockerd.8: escape asterisks and underscores
    a4bcabc7d vendor: github.com/docker/docker v24.0.0-beta.2
    0286e36bb vendor: github.com/opencontainers/runc v1.1.6
    1f1a6c5a8 vendor: golang.org/x/net v0.8.0
    6e2163a71 vendor: golang.org/x/text v0.8.0
    551d519b5 vendor: golang.org/x/term v0.6.0
    c97c3211b docs: deprecation: OOM-score adjust for the daemon
    88be16cb5 cli/command/container: implement `docker run --annotation`
    6f415d240 docs: update deprecation status of BuildKit "buildInfo" for v24.0.0
    da3871fd8 cli/command/system: printServerWarnings: use client API version from info
    be307c579 cli/command/system: prettyPrintServerInfo: move out collecting username
    71fde20e1 cli/command/system: prettyPrintServerInfo: simplify username
    375b17a31 docker info: don't print "registry" (IndexServerAddress)
    b87ed3435 cli/command: deprecate EncodeAuthToBase64
    5d856a5d9 cli/command/container: pullImage: use DisplayJSONMessagesToStream utility
    b9b98aee5 cli/command/container/create: pullImage(): use RetrieveAuthTokenFromImage
    a27acd62b cli/command/container/create: pullImage() remove intermediate vars
    e0b47cc2c cli/command/image: imagePullPrivileged: remove intermediate variables
    372bb56ad cli/command: replace EncodeAuthToBase64 for registry.EncodeAuthConfig
    534bfc230 cli/command/registry: remove intermediate var that collided
    5e76d41bf cli/command: ConfigureAuth: fix links to related tickets
    68d791e56 cli/command: ConfigureAuth: trim whitespace both for username and password
    d0ec8fa5c cli/command: ConfigureAuth: fix terminal state not being restored on error
    c846428cb docs: update dockerd usage output for new proxy-options
    c730a8eb9 docs/reference: dockerd: remove default oom-score-adjust
    c20974361 docs/reference: dockerd: update seccomp flag description
    32bc91200 docs/reference: dockerd: use table for env-vars
    370174800 docs/reference: use table for proxy env-vars
    879e0804a docs/reference: reformat env-vars table, and simplify
    4a863df57 docs/reference: remove mention of DOCKER_NOWARN_KERNEL_VERSION
    c388fe4de cli: make cobra templates a const
    341c843ac ci: remove fetch depth 0 for validate jobs
    25ed7847e ci: add validation for generated markdown
    04df70025 docs: deprecated: fix version (23.1.0 -> 24.0.0)
    5bd359132 cli/command: fix documentation for ResolveAuthConfig
    8ee771114 docker info: include Client Version and "platform name"
    3347d7b5a cli/command/system: add newClientVersion() utility
    3124e779c cli/command/system: clientVersion: make all fields "omitempty"
    9202bef4a cli/command/system: add platformInfo type, and fix "omitempty"
    5d37acdde cli/command/system:remove versionInfo.ServerOK() utility
    5d33b7276 docs: update engine versions in some examples
    23bd746c4 fix docker version --format=json not outputting json format
    80640bca7 cli/command/system: make default version template a const
    46234b82e fix docker info --format=json not outputting json format
    1aaa179d9 cli/command/formatter: export JSONFormat const
    37e02ff21 docker ps: print warning if both --format and --quiet are set
    f52290559 docker ps: always use --quiet, also combined with --format
    f36e4b094 cli/command/container: rename vars that collided
    c25b8f803 vendor: github.com/spf13/cobra v1.7.0
    ca1d0eb90 Update version to v24.0.0-dev
    08a794dc0 docs: regenerate markdown docs
    37f234fbe scripts/docs/generate-md.sh: fix location of generate code
    591bead14 update go to go1.20.3
    683e4bf0c Fix plugin completion parsing for plugins using `ShellCompDirectiveFilterFileExt`
    808032652 cli/streams: minor refactoring and docs touch-ups
    66a1c3bab cli/config/configfile: remove deprecated StackOrchestrator field
    328fac3a6 cli/context/docker: remove deprecated Endpoint.TLSPassword
    aace828bb cli/flags: remove deprecated CommonOptions, NewCommonOptions
    8b418be6d cli/context/store: remove deprecated error-utilities
    3405eb1f4 cli/command/formatter: remove deprecated KubernetesEndpoint
    817897f89 cli/command: fix deprecation comments for Stream types
    89583b92b improve plugins listing performance
    fc560038e vendor: github.com/docker/docker v24.0.0-beta.1
    e14f5fc1a revert "improve plugins discovery performance"
    05cffcbed vendor: github.com/docker/docker 7c93e4a09be1 (v24.0.0-dev)
    a36a54d3c vendor: github.com/containerd/containerd v1.6.20
    f4b22fb6c vendor: github.com/opencontainers/image-spec v1.1.0-rc2.0.20221005185240-3a7f492d3f1b
    eb392ff4c cp: Do not block transfer on writing to terminal
    7189716d5 replace uses of deprecated api/types.AuthConfig
    bfa79fd75 vendor: github.com/docker/docker master (v24.0.0-dev)
    e86d2f411 vendor: github.com/moby/buildkit v0.11.5
    cd9c6a4c0 vendor: github.com/klauspost/compress v1.16.3
    5843fbd5f vendor: github.com/imdario/mergo v0.3.13
    149d28963 vendor: golang.org/x/sys v0.6.0
    6dca335d0 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230315203717-e28e8ba9bc83
    4389c966f vendor: github.com/opencontainers/runc v1.1.5
    a79828287 update to go1.20.2
    b8747b0f9 update golangci-lint to v1.52.2
    399ded9b9 internal/test: FakeCli: remove name for unused arg (revive)
    20a70cb53 internal/test/notary: remove name for unused arg (revive)
    90380d957 cli/connhelper/commandconn: remove name for unused arg (revive)
    dd6ede210 cli/config/configfile: mockNativeStore: remove name for unused arg (revive)
    7c8680c69 cli/compose/schema: remove name for unused arg (revive)
    6355bcee6 cli/compose/convert: fakeClient: remove name for unused arg (revive)
    607f290f6 cli/command/volume: remove name for unused arg (revive)
    546cf6d98 cli/command/trust: fakeClient: remove name for unused arg (revive)
    b32b28041 cli/command/task: fakeClient: remove name for unused arg (revive)
    40a51d554 cli/command/swarm: fakeClient: remove name for unused arg (revive)
    b0d0b0efc cli/command/stack: fakeClient: remove name for unused arg (revive)
    c69640d8c cli/command/service: fakeClient: remove name for unused arg (revive)
    5254081fd cli/command/registry: fakeClient: remove name for unused arg (revive)
    da3416c02 cli/command/plugin: fakeClient: remove name for unused arg (revive)
    625988c3a cli/command/node: fakeClient: remove name for unused arg (revive)
    92d9e3bf6 cli/command/network: fakeClient: remove name for unused arg (revive)
    316c4992c cli/command/image: fakeClient: remove name for unused arg (revive)
    ae5a86bb8 cli/command/image/build: remove name for unused arg (revive)
    38ef40ee7 cli/command/idresolver: fakeClient: remove name for unused arg (revive)
    45b5676ac cli/command/container: fakeClient: remove name for unused arg (revive)
    5563c5a91 cli/command/checkpoint: fakeClient: remove name for unused arg (revive)
    9dd012aa5 cli/command/secret: fakeClient: include context in fake client (revive)
    66c66bdce cli/command/config: fakeClient: include context in fake client (revive)
    ac024a4d8 internal/test/network: FakeClient: embed interface to remove boilerplating
    a2d532819 cli/trust: remove name for unused args (revive)
    f5fad186c opts: NormalizeCapability(): fix redefinition of the built-in function (revive)
    9252fae83 cli/registry/client: AuthorizeRequest(): remove name for unused arg (revive)
    92506afd4 cli/command/service/progress: remove name for unused parameter (revive)
    c3d7f167b cli/command: RunPrune(): remove name for unused "all" parameter (revive)
    b4aff3a14 cli/command/completion: NoComplete(): remove unused argument (revive)
    f08252c10 cli/command/stack: deprecate now obsolete wrappers
    78c474539 cli/command/context: remove redundant if ...; err != nil check (revive)
    be97731f1 cli/command/container: fix redefinition of the built-in function close (revive)
    b9a1b0928 cp: Make gocyclo happy
    90b7bc36d cp: Reduce number of progress updates
    efd011b79 cp: reduce branching in progress printer
    e4436853e gha: align stray go 1.19.4 version
    9335690a6 Fix grammar in docs by adding omitted word
    ccae6e929 cp: Improve tty flashing on progress updates
    f27927d93 cp: do not emit progress if stderr is not a term
    a39958846 vendor: github.com/docker/docker v23.0.2
    c39c711a1 load plugin command stubs when required
    62f2358b9 improve plugins discovery performance
    bebdb6fa2 ci: enhanced build workflow
    bec5d37e9 don't use null values in the bake definition
    b201ce5ef e2e: update notary certificates
    c6c33380d e2e: increase tests certificates duration (10 years)
    d234a81de bake target to generate certs for e2e tets
    3ce95c7af Dockerfile: build binary if no target specified
    b854eff30 Dockerfile: align go version
    0ba820ed0 cli/trust: remove special handling for "plugin" Class
    a3d56e7d0 cli/command: remove deprecated ElectAuthServer()
    742881fc5 cli/command: fix imports formatting
    e3fa7280a cli/command: ElectAuthServer: fix deprecation comment
    db827d583 cli/command/volume: suppress err output in tests
    aa0aa4a6d Add bash completion for available plugins
    8805f8ea2 build(deps): bump actions/setup-go from 3 to 4
    e60c748c1 vendor: github.com/moby/buildkit v0.11.4
    6c8cc226f vendor: google.golang.org/grpc v1.50.1
    d213548bd vendor: golang.org/x/net v0.7.0
    3a0d492d1 vendor: golang.org/x/term v0.5.0
    f40bbf4f7 vendor: golang.org/x/time v0.3.0
    a85537d34 vendor: golang.org/x/text v0.7.0
    3e9c6e84c vendor: golang.org/x/sys v0.5.0
    ca8783ef4 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230309194213-a745a8755ce3
    33806760a vendor: github.com/containerd/containerd v1.6.19
    71e495aa5 vendor: github.com/docker/docker v23.0.1
    74c4ed417 Dockerfile: update buildx to v0.10.4
    23da1cec6 update to go1.19.7
    012b77952 stack: Change unexpected environment variable error
    a47058bbd stack/loader: Ignore cmd.exe special env variables
    25ebf0ec9 connhelper: Allow socket path when using SSH
    973333448 Don't automatically request size if `--size` was explicitly set to `false`
    8bc1aacea docs: Deprecate buildkit's build information
    89687d5b3 formatter: Consider empty RepoTags and RepoDigests as dangling
    a1953e19b test/cli: Use empty array as empty output of images/json
    e636747a1 docs: drop dated comments about graphdrivers
    dac79b19a Dockerfile: update buildx to v0.10.3 release notes: https://github.com/docker/buildx/releases/tag/v0.10.3
    c2487c299 context: avoid corrupt file writes
    e921e103a update to go1.19.6
    d2f726d5a changed the container name in docker stats page
    de9b47ae6 Fix styling of arguments
    0f3959868 ci: fix branch filter pattern
    4254cd19b MAINTAINERS: add myself as curator
    bbebebaed vendor: github.com/docker/docker v23.0.0
    5195db1ff vendor: github.com/containerd/containerd v1.6.16
    9b5ceb52b cli/command/container: exit 126 on EISDIR error
    56051b84b Fix bad ThrottleDevice path
    74973adaa cli/command: embed "Streams" interface in "Cli"
    2753057c4 contrib/completion: bash `nounset` mode fixes

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-06-07 16:40:22 -04:00
Bruce Ashfield
d38fffa859 moby: update to v23.0.6
Bumping moby to version v23.0.6-2-gcb3fd005d4, which comprises the following commits:

    e94c22cc39 vendor: github.com/docker/distribution v2.8.2
    e73310d8c9 update runc binary to v1.1.7
    3f0402cb68 update runc binary to v1.1.6
    edadebe177 update containerd binary to v1.6.21
    14661fc010 vendor: github.com/containerd/containerd v1.6.21
    e00f6efb20 Vendor containerd 1.6.x with the readonly mount fix
    bd4620f6ee vendor: github.com/containerd/containerd v1.6.20
    d06cf03729 vendor: re-vendor to add missing file
    cf7742ea7c vendor: opencontainers/image-spec v1.1.0-rc2.0.20221005185240-3a7f492d3f1b
    382e9ebbf6 vendor: github.com/containerd/ttrpc v1.1.1
    e0843f264d Update `github.com/containerd/containerd` to the HEAD of `release/1.6` and vendor
    94fcd2d2ef d/graphdriver/copy: support src fs w/o xattr support
    70dbd2c870 [23.0] update go to go1.19.9
    fe0a414613 Use the image service instead of the reference store for tagging
    40ec0eb9fe vendor: github.com/opencontainers/runc v1.1.5
    227d3f39a3 daemon: set docker0 subpool as the IPAM pool
    c82be35412 libnetwork: clean up inDelete network atomically
    ccccb7a170 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230315203717-e28e8ba9bc83
    8a6bec6e16 Silence GRPC logs unless our log level is debug
    844fd50c67 Added timeout to validate job in github actions
    8cec683574 Dockerfile: update xx to 1.2.1
    7ff53c3c78 Update delve version
    4d57ee692d TestLogs: Increase stop check poll timeout on Windows
    838d5ea058 chore: use http constants to replace numbers
    61d084593c client: deprecate NewClient properly
    28b694d32d awslogs: fix non-blocking log drop bug
    3731ce10d4 Fix argument quoting bugs in dockerd-rootless.sh
    23774ada04 vendor: github.com/moby/buildkit v0.10.7-0.20230412161310-d52b2d584242
    9277e64444 vendor: github.com/ishidawataru/sctp v0.0.0-20230406120618-7ff4192f6ff2
    09fbbd5677 docker-rootless-setuptools.sh: improve readability of messages
    d3e52936c3 [23.0] update go to go1.19.8
    a0a597cbbe [23.0] fix vendor.mod: add hashicorp/go-multierror as direct dependency
    063d3a6f1a daemon: let libnetwork assign default bridge IPAM
    389e18081d update containerd binary to v1.6.20
    348544e6e8 libnet/d/windows: log EnableInternalDNS val after setting it
    3923e302a4 update runc binary to v1.1.5
    f3946c14fe integration-cli: Enable TestExecStartFails on Windows
    b87f7f18b8 libnet/d/overlay: insert the input-drop rule
    c6bf3071fe StartWithLogFile: Fix d.cmd race
    7f49ca259b TestDaemonRestartKillContainers: Fix loop capture
    98cbcb8003 libnet/d/overlay: add BPF-powered VNI matcher
    5c5fac2374 libnet/d/overlay: extract VNI match rule builder
    c492a22287 libn/d/overlay: enforce encryption on sandbox init
    018edb0284 libnet/d/overlay: document some encryption code

Bumping libnetwork to version v0.7.0-dev.3-1872-g3f004841, which comprises the following commits:

    dbbf124d Clean up inDelete network atomically
    d4d07f4a d/windows: log EnableInternalDNS val after setting it
    91f0d508 update maintainers
    c5aa85f9 drivers/overlay: insert the input-drop rule
    bef66946 drivers/overlay: appease the old deprecated linter
    a94fe95b drivers/overlay: add BPF-powered VNI matcher
    e0376b6c drivers/overlay: extract VNI match rule builder
    f1945d37 drivers/overlay: enforce encryption on sandbox init
    97442407 drivers/overlay: document some encryption code

Bumping docker-cli to version v23.0.6-8-g44a7d9537, which comprises the following commits:

    a98af2b39 vendor: github.com/docker/distribution v2.8.2
    6f353c800 cli-plugins/manager: fix deprecation comment of Metadata.Experimental
    63b205048 Update tag docs to clarify name
    c76773b19 docs: update description for docker -H flag
    c769f2079 [23.0] update go to go1.19.9
    802f17488 [23.0] vendor: github.com/docker/docker v23.0.5
    498743aed [23.0] vendor: github.com/moby/swarmkit/v2 v2.0.0-20230315203717-e28e8ba9bc83
    fde09d1d8 [23.0] vendor: github.com/opencontainers/runc v1.1.5
    3cda7c30c [23.0] vendor: github.com/docker/docker v23.0.4
    6c0f9022c Docs freshness updates
    17357a778 build(deps): bump docker/bake-action from 2 to 3
    2cf68537d ci: remove fetch depth 0 for validate jobs
    4a4291708 ci: add validation for generated markdown
    f914316a9 fix docker version --format=json not outputting json format
    9dfe5a29e cli/command/system: make default version template a const
    2c1fde223 fix docker info --format=json not outputting json format
    99124087e cli/command/formatter: export JSONFormat const
    86e79b55e volumes: prune: add --all / -a option
    ada43812d cli/command/volume: suppress err output in tests
    c648e0b06 Handle empty DOCKER_BUILDKIT like unset
    b6cd3c85b docs: update dockerd usage output for new proxy-options
    aa85421ff docs/reference: dockerd: remove default oom-score-adjust
    6bc4bf4f0 docs/reference: dockerd: update seccomp flag description
    8a35f92ff docs/reference: dockerd: use table for env-vars
    2cb152c41 docs/reference: use table for proxy env-vars
    623da1997 docs/reference: reformat env-vars table, and simplify
    e76242fff docs/reference: remove mention of DOCKER_NOWARN_KERNEL_VERSION
    4b4d7e2b4 cli/command: fix documentation for ResolveAuthConfig
    e67e5559d docs: deprecated: fix version (23.1.0 -> 24.0.0)
    a8e3b4b85 docs: update engine versions in some examples
    f88c159c7 [23.0] vendor: github.com/docker/docker v23.0.3
    6c052fcda vendor: github.com/docker/docker v23.0.2
    079e80889 vendor: golang.org/x/net v0.7.0
    ff448ff45 vendor: golang.org/x/term v0.5.0
    476933b68 vendor: golang.org/x/time v0.3.0
    6131fe9e4 vendor: golang.org/x/text v0.7.0
    bbc791ed7 vendor: golang.org/x/sys v0.5.0
    dd6f77bba vendor: github.com/moby/swarmkit/v2 v2.0.0-20230309194213-a745a8755ce3
    cb338ec97 vendor: github.com/containerd/containerd v1.6.19
    ffafb38e3 vendor: github.com/docker/docker v23.0.1
    a763e5114 Fix plugin completion parsing for plugins using `ShellCompDirectiveFilterFileExt`
    3c7de6454 Fix grammar in docs by adding omitted word
    3d0d576af ci: enhanced build workflow
    2609bd23f docs: regenerate markdown docs
    5fd2c0850 scripts/docs/generate-md.sh: fix location of generate code
    5cd7710a0 update go to go1.19.8
    209e9c0c1 cp: Do not block transfer on writing to terminal
    ce68ce7ae cp: Make gocyclo happy
    c28cb35c4 cp: Reduce number of progress updates
    948dfa91c cp: reduce branching in progress printer
    f813c9639 cp: Improve tty flashing on progress updates
    97d91f13a cp: do not emit progress if stderr is not a term
    6efc4eacc cli/command: fix deprecation comments for Stream types
    c7cdab58d improve plugins listing performance
    d93d78588 load plugin command stubs when required
    8e38271f2 gha: align stray go 1.19.4 version
    f6643207a don't use null values in the bake definition
    f381e0842 Dockerfile: align go version

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-06-07 16:40:22 -04:00
Bruce Ashfield
55de27c51a containerd: update to 1.7.1
Bumping containerd to version v1.7.1-4-g835383b17, which comprises the following commits:

    6a5e54c15 Get CDI devices from CRI Config.CDIDevices field
    9e60300ea snapshots/testsuite: Rename: fix fuse-overlayfs incompatibility
    7b288e2d7 Update ttrpc to v1.2.2
    27a0d957b Prepare release notes for v1.7.1
    0e0532eb2 bump typeurl to v2.1.1
    35e86f96c [transfer] avoid setting limiters when max is 0
    f7233811f Update transfer configuration
    4510eac00 Fix image pulling with Transfer service
    aaa65e8c1 Update hcsshim tag to v0.10.0-rc.8
    95ef67e19 Fix umarshal metrics for CRI server
    3ef5b689a runtime/shim: fix the nil checkpoint options
    021bba28b update go to go1.20.4, go1.19.9
    6b3ae0129 Remove entry for container from container store on error
    c0e128624 skip TestContainerStartWithAbsRuntimePath if the runtime is v1
    aa3c63c15 integration: add container start test using abs runtime path
    d2d9eedb1 WithRuntimePath uses the TaskInfo.RuntimePath field
    fae4b6223 update runc binary to v1.1.7
    571715a9d cri: Vendor v0.27.1
    a6d336c1f Fix argsEscaped tests
    1bbf98e53 oci: partially restore comment on read-only mounts for uid/gid uses
    8f6e86fec go.mod: add comment explaining go-fuzz-headers replace rule
    1ece0cb50 go.mod: remove replace for github.com/opencontainers/runtime-tools
    e9f962187 go.mod: integration: use non-pre-release of containerd
    84393b005 go.mod: integration: move indirect dependencies to the right group
    dec2595af update runc binary to v1.1.6
    7de8629be cri: Throw an error if idmap mounts is requested
    75ac7e0d8 cri: Vendor v0.27.0-beta.0 for mounts uid/gid mappings
    54d12b872 oci: Use WithReadonlyTempMount when adding users/groups
    624327651 update go to go1.20.3, go1.19.8
    1d6641b7c export: add test for WithSkipDockerManifest
    0e0d84f6b archive: consistently respect value of WithSkipDockerManifest
    9b4935d86 Update sbserver to add noexec nodev and nosuid to /etc/resolv.conf mount bind.
    5e953cfa6 Test to ensure nosuid,nodev,noexec are set on /etc/reolv.conf mount.
    0aad93f08 Add noexec nodev and nosuid to sandbox /etc/resolv.conf mount bind.
    1a64f1b43 ctr/tasks: fix unmarshal the task metrics for cgroups v1
    17c52a26d Keep linux mounts for linux sandboxes on Windows/Darwin
    d81fc15af update runc binary to v1.1.5
    755efbe64 go.mod: github.com/opencontainers/runc v1.1.5

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-06-07 16:40:22 -04:00
Bruce Ashfield
c772a5c230 cri-tools: update to v1.27.0
We refresh one patch for context, but otherwise no changes.

Bumping cri-tools to version v1.26.0-186-ge73a7139, which comprises the following commits:

    00212a72 Bump github.com/docker/docker
    f0bf767c Bump github.com/sirupsen/logrus from 1.9.0 to 1.9.1
    c6ca9164 Bump github.com/onsi/ginkgo/v2 from 2.9.4 to 2.9.5
    8c87ebfb Bump github.com/docker/distribution
    b4fdcd33 Add validation when container OOMKilled
    43675ad1 Bump github.com/docker/docker
    3a32265d Bump github.com/onsi/ginkgo/v2 from 2.9.2 to 2.9.4
    dd924127 Bump golang.org/x/net from 0.9.0 to 0.10.0
    557024a5 Fix build flakiness
    b2bee82a Bump github.com/urfave/cli/v2 from 2.25.1 to 2.25.3
    801d6985 Bump golang.org/x/term from 0.7.0 to 0.8.0
    f2e40682 Bump github.com/moby/term
    dadffe3e test rm{,i,p} subcommands help message
    13dbe21f Add CrictlExpect() to test framework
    c714ecd6 Display help when running 'crictl rmi'
    4eb6a64b Do not display help when deleting all pods/containers
    ce6ad257 Bump github.com/opencontainers/runc from 1.1.6 to 1.1.7
    c2c53b77 Bump github.com/docker/docker
    deb3bf67 Download release notes tool binary directly
    ae7a5eb7 Allow setting CGO_ENABLED
    464d6452 Allow overriding GOFLAGS
    e64d6e37 Allow providing (additional) custom GO_LDFLAGS
    664ef74f Allow setting custom version but use git by default
    a2ab0b20 Bump github.com/docker/docker
    80bff8b3 Disable dependency gathering for release notes
    74092cb9 Vendor Kubernetes v1.27.0
    5c6a90bc Update CI badges
    5c9d2ee0 Bump github.com/opencontainers/runc from 1.1.5 to 1.1.6
    c953d28b golangci-lint: bump to 1.52.2 and fix errors
    8d781b8f bump to go 1.20
    554b1637 vendor: bump to kube 1.27.0
    0497653a Improve text formatting
    87cd4d48 Bump golang.org/x/net from 0.8.0 to 0.9.0
    e2dc71a2 Bump golang.org/x/term from 0.6.0 to 0.7.0
    b8009174 Bump github.com/docker/docker
    1f393c4e Bump github.com/onsi/gomega from 1.27.5 to 1.27.6
    1dbda3f7 Bump github.com/opencontainers/runc from 1.1.4 to 1.1.5

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-06-07 16:40:22 -04:00
Bruce Ashfield
ea6911aea4 cri-o: update to 1.27.0
Bumping cri-o to version v1.27.0-14-g81ac4cea5, which comprises the following commits:

    69a6d6fc2 Fix events generated by Evented PLEG
    86cae21ec cgmgr: set sched_load_balance to disabled on sandbox cgroup
    47d6d6c82 test/pod.bats: update to current setup
    2b7f614e0 cgmgr: create cgroups for systemd cgroup driver for dropped infra pods
    b415e72d6 Fix vendoring
    6df1f0711 Update c/common to v0.53.0
    cd9636049 Download more dependencies instead of vendoring
    230e28acb Stop vendoring release notes tool
    a2b280af4 build(deps): bump k8s.io/release from 0.15.0 to 0.15.1
    cc00b5a62 version: bump to 1.27.0
    f5ce04e04 bump cri-tools to 1.27.0
    bc45b9021 Fix restore tests
    8d6b49db2 build(deps): bump github.com/containers/podman/v4 from 4.4.2 to 4.5.0
    a28b1e760 Add unit test for crictl info with verbose
    875c3a2b1 Add basic crictl info config with sandboxImage
    070668a35 Bump crun to v1.8.4
    48bc2bd8d contrib/test/ci: cache runc and crun setup unconditionally
    48cf728dd config: mark seccomp-use-default-when-empty as deprecated
    a2961f8c3 Bump runc to v1.1.6
    efaea1060 high perf hooks: move cpu-quota disable handling to container creation
    566aa128a high perf hooks: remove test for cpu load balancing
    65d25545e high perf hooks: update cpu load balancing to be cgroup based
    cc50b438b test: add cpu load balancing test
    cf77d5383 build(deps): bump github.com/onsi/gomega from 1.27.2 to 1.27.6
    acd4d30ba Bump Kubernetes to v1.27.0
    0087d0ee7 Don't use KUBE-MARK-MASQ in hostport rules
    c1c52191d Update template.go
    4bc36eabd contrib/test: don't cache the cri-o content
    6fcbca13f Don't print `Dependencies` if `crio version` it not verbose
    4073764a8 Update nixpkgs
    9aa7afcec Update golangci-lint and config
    cb70d29b9 internal: fix the release version for release notes
    3890a7222 internal/storage.runtimeService.createContainerOrPodSandbox(): read ID maps
    b325ad692 Set umask for crio container
    28f910952 build(deps): bump github.com/docker/docker
    53431c68a runtimeVM: fix Exec(sync) overwriting the initial spec args
    400793fab vendor: use go-github to fetch the latest tag from github
    e9a932f04 Update bom and use binary directly
    4edb9e8ea Fixed signature check for commit-based downloads
    a86fbb63e Fixed issues found by shellcheck
    0c029c62e Fixed signature check
    9e5b533a3 Fixed version substitution
    bbe4b04a5 Generate proper signature check
    683e4f858 test: run irqbalance tests serially to avoid race condition
    e07246fc1 Update crun to v1.8.3 and runc to v1.5.1
    fd35a25b1 OCPBUGS-10970: Fix the interrupt mask width when encoding
    934765cf6 Update zeitgeist to v0.4.1
    5e512d6ef create the metrics endpoint with correct shutdown logic
    2b7efa752 build(deps): bump github.com/urfave/cli/v2 from 2.24.4 to 2.25.1
    604e7bb6b Remove `scripts/node_e2e_installer`
    f1e9c0e8c server: wire support for userns volumes
    973c51a7b vendor: bump cri-api
    a8bd24c60 test: add irqbalance dependency to CI
    ed7bbaf28 contrib/test/ci: disable failing sig-network test for v1.27 release
    2184981ea Remove SELinux policy download
    e57047253 Add spdx signature and cert to release notes
    d7cf40b7e oci: Enable checkpointing of file locks
    d719028aa build(deps): bump golang.org/x/sys from 0.5.0 to 0.6.0
    c4c583014 go.mod: update CDI dependency to 0.5.4.
    11cbc5fd7 build(deps): bump go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc
    44d878e93 test: add irqbalance dependency
    f74da33a7 build(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc
    4bb2e930e Fix get script
    f556f5a58 build(deps): bump sigstore/cosign-installer from 2 to 3
    244982179 Bump crun to v1.8.1
    246c59139 go.mod: update github.com/containerd/nri to 0.3.0.
    be2cc0eb5 build(deps): bump cachix/install-nix-action from 19 to 20
    11c9401a8 build(deps): bump github.com/onsi/gomega from 1.27.1 to 1.27.2
    cd8346082 Pin nix version to fix static builds
    f112d497d Add new parameter hostnetwork-disable-selinux
    96906a86c [CI] Fix validate-completion
    ab8fc4f7d build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.2
    dde09588c build(deps): bump github.com/containers/storage from 1.45.3 to 1.45.4
    b769f0dbb build(deps): bump github.com/containers/podman/v4 from 4.4.1 to 4.4.2
    9f9fc8a19 build(deps): bump github.com/containerd/containerd
    1a488f516 test: Avoid parallel execution
    b74d76c79 test: add integration test for irqbalance
    e15854938 highperfhooks: add option to configure irqbalance restore
    3f9d21c7e Fix cgroup leak for systemd cgroup driver
    7af09fa0a unit-test: call UpdateContainerResources when nri enabled
    828ad0200 nri: add protection against nil dereference
    97b03c338 build(deps): bump github.com/containerd/fifo from 1.0.0 to 1.1.0
    b267ed784 highperfhooks: add logs in the irqbalance restore
    3774df887 highperfhooks: test: use ExpectWithOffset
    e21dd08e9 highperfhook: use internal/.log, not logrus
    9ee51c429 docs-validation: try String() for struct field values.
    ab3b401b0 internal/oci: don't crash when getting unset Spec.
    fa2abd239 test: update NRI BATS test.
    1d0ca6fd1 completions, docs: update completions and man pages.
    f5afa87ce config,criocli: update NRI deps, configuration.
    7cfdaebb6 Update to c/image 5.24.2
    a78a7d470 build(deps): bump github.com/onsi/gomega from 1.27.0 to 1.27.1
    38455da55 build(deps): bump github.com/psampaz/go-mod-outdated from 0.8.0 to 0.9.0
    221a7d0f9 build(deps): bump github.com/onsi/ginkgo/v2 from 2.8.1 to 2.8.3
    95f5c57aa build(deps): bump cachix/install-nix-action from 18 to 19
    1f909bc5e test/*: add test for checking the /etc folder permission
    ef164da82 server: fix the permission issue for `/etc`
    7b812d0ab build(deps): bump github.com/containers/buildah from 1.29.0 to 1.29.1
    7c21bc7d7 build(deps): bump github.com/onsi/gomega from 1.26.0 to 1.27.0
    a091d6c8f build(deps): bump github.com/urfave/cli/v2 from 2.24.3 to 2.24.4
    25b06a987 Remove `zeitgeist` from golang dependencies
    ba4d53c14 Bump golang dependencies
    9216a817a Revert "main: shutdown server only once"
    d573f0406 Drop `ENABLE_POD_EVENTS` var from e2e installer script
    79a6d4fec Fix roadmap links
    b59e59572 test: use container_sleep for idempotent test
    169908b5a Update github.com/containers/image to v5.24.0
    62173e974 main: shutdown server only once
    2f2d152d8 Bump the CRIO commit to the latest main
    10a6096f9 Add documentation about how to use tracing
    66b6bb3bc Switch to go 1.20 for CI jobs
    49cbab56a dependencies: bump conmon to v2.1.6
    679bbbf20 Closes #5653 Return ContainerResources in ContainerStatusResponse Signed-off-by: T K Chandra Hasan <t.k.chandra.hasan@ibm.com>
    0e7fdcaf0 Update opencontainers/runtime-tools to a6a073817ab0.
    4cf3d3774 runtimeVM: ignore missing shim path for deleted containers
    c80ae0acd runtimeVM: notify server that the container exited
    5d23b6a02 contrib/test/ci/*: refactor CI to build a cache image
    7600cb4e3 contrib/test/ci: adds time information to tasks
    1fb1771bd go.mod: update github.com/containerd/nri.
    905bd1b37 Take MaskedPaths and ReadonlyPaths from checkpointed container
    cd406494f build(deps): bump google.golang.org/grpc from 1.52.0 to 1.52.3
    9a2dae755 Fix unit tests
    1edf19505 build(deps): bump k8s.io/klog/v2 from 2.80.1 to 2.90.0
    193ae758c build(deps): bump github.com/onsi/gomega from 1.25.0 to 1.26.0
    a6a95fe96 Add container stats to the ListPodSandboxStats response
    8b3fca69a contrib/cni: provide more context around file selection
    f648ff47f build(deps): bump github.com/urfave/cli/v2 from 2.23.7 to 2.24.1
    72e54a7de Add additional metadata to inspect and checkpoint
    a9d845a6b Update to latest version of checkpointctl
    7a8f62f1b Removed pod checkpointing support
    f291de93a Make storage unmount less strict
    f3ed08a35 build(deps): bump k8s.io/release from 0.14.0 to 0.15.0
    1226a601c packit: install wget before build
    8e42d5360 build(deps): bump github.com/containers/ocicrypt from 1.1.6 to 1.1.7
    d85a8b3cf Update OTEL dependencies
    42c00941b Update CNI plugins to v1.2.0
    437d7bbf9 GOVERNANCE: add org member tier
    8fc1e91d3 CoC: replace with CNCF one
    0059f24a6 mention MAINTAINERS file in GOVERNANCE
    dbf1ee997 Add MAINTAINERS.md document
    700fe6590 README: add roadmap
    35cce86f8 add a public roadmap
    ae9712231 update GOVERNANCE.md file
    5ef5271b3 build(deps): bump mvdan.cc/sh/v3 from 3.5.1 to 3.6.0
    34a7052a8 build(deps): bump helm.sh/helm/v3 from 3.10.0 to 3.10.3
    1cc037f57 build(deps): bump github.com/onsi/gomega from 1.24.1 to 1.25.0
    ff3aa8105 build(deps): bump sigs.k8s.io/release-sdk from 0.9.3 to 0.9.7
    f57e36946 build(deps): bump github.com/sigstore/cosign from 1.11.1 to 1.12.0
    ae60a2bb6 Update vendor of opencontainers/runtime-tools
    47922035d Allow cross building from non-linux
    dfc43f7ba Inject release-notes branch from GitHub actions
    6d35f54d7 build(deps): bump google.golang.org/grpc from 1.51.0 to 1.52.0
    faeaceddb ci-verify: Run get-scripts only on main branch
    752bf4d69 Update critest parameters
    89029ed43 hostport: use generic Set
    dcc7437db server: update streaming interface to take context
    1135dbad5 ci: bump cri-o.spec file to 1.26
    5ae6ba51d static: bump go version
    9e1b732a9 bump to cri-tools 1.26.0
    2d0457814 server: add support for new CRI calls
    9f1c91349 server/streaming: add context to methods
    eb4719b55 vendor: bump kube to 1.26.0
    815a426e8 Enable upstream CI to test node e2e with evented pleg feature
    404afb004 Bump e2e-installer script with the latest commit
    a410ce6e8 mocks: update with new c/storage mocks
    43ed06ee4 vendor: bump storage to v1.44.1-0.20230101110555-a747b27fe4ca
    fadc73bc7 job get script: fix conflist path
    666a9e91c fix inconsistent documentation for default value of
    b78350830 build(deps): bump actions/stale from 6 to 7
    79b1b5937 Pass tracer to conmon-rs client

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-06-07 16:40:21 -04:00
Bruce Ashfield
4aa2aadb01 runc-docker: update to 1.1.7
Bumping runc to version v1.1.7-2-gb6109acd, which comprises the following commits:

    f0ecf30b VERSION: back to development
    860f061b VERSION: release 1.1.7
    c1063b1c runc.keyring: add Akihiro Suda
    b0fae8c4 scripts: keyring validate: print some more information
    79a52b43 libct/cg/sd: use systemd version when generating dev props
    6a806d4d runc.keyring: add Kolyshkin
    b6f686f2 keyring: add Aleksa's <cyphar@cyphar.com> signing key
    63355bf8 keyring: add Aleksa's <asarai@suse.com> signing key
    3bdb63bf keyring: verify runc.keyring has legitimate maintainer keys
    853d5e38 scripts: release: add verification checks for signing keys
    bd1d5370 release: add runc.keyring file and script
    7cd72cc3 VERSION: go back to development
    0f48801a VERSION: release 1.1.6
    e4ce94e2 libct/cg: add misc controller to v1 drivers
    10cfd816 libctr/cgroups: don't take init's cgroup into account
    d30d240b tests/int: test for CAP_DAC_OVERRIDE
    840b9539 Fix runc run "permission denied" when rootless
    165d2323 tests/int: add a "update cpuset cpus range via v2 unified map" test
    26a58fdb cgroups: cpuset: fix byte order while parsing cpuset range to bits
    8d9d1d25 libct/int: make TestFdLeaks more robust
    b66d6d56 libct/int: wording nits
    ddbb6d41 libc/int: add/use runContainerOk wrapper
    3531cc2d ci: add call to check-config.sh
    ed9a0e1d ci/gha: bump actions/cache to v3
    7683e508 ci/gha: switch to Go 1.19.x for validate
    568d4407 ci/gha: bump golangci-lint to 1.48
    1f9e36c0 libct: fixes for godoc 1.19
    50f06554 ci: bump golangci-lint to 1.46
    77472ef6 libct: fix staticcheck warning
    9994fe3f libct: suppress strings.Title deprecation warning
    403ea1f0 ci/gha: convert lint-extra from a job to a step
    d2c83bdf ci/gha: switch to Go 1.18.x for validate
    03a631df ci: switch to golangci-lint 1.45
    e5a5522a Add supported Go releases (1.19, 1.20)
    3ce12483 Dockerfile: fix build wrt new git
    bac06cf6 ci/gha: remove stable: when installing Go
    e74040e0 build(deps): bump actions/setup-go from 2 to 3
    55462355 Require Go 1.17, bump x/sys and x/net
    3ce9c1e2 tests: Fix weird error on centos-9
    abd6adde ci: bump shfmt to 3.5.1, simplify CI setup
    1a4bf049 man/*sh: fix shellcheck warnings, add to shellcheck
    9201794a script/check-config.sh: fix remaining shellcheck warnings
    8b976428 shfmt: add more files
    b0fbd2f8 script/check-config.sh: fix SC2166 warnings
    7f8cb3d6 script/check-config.sh: fix wrap_color usage
    f6562f19 [1.1] libct/cg/dev: skip flaky test of CentOS 7
    12f2f03f [1.1] runc run: refuse a non-empty cgroup for systemd driver
    e618ec36 libct/cg/sd: reset-failed and retry startUnit on UnitExists
    931b9bf3 libct/cg/sd: ignore UnitExists only for Apply(-1)
    b46ac860 libct/cg/sd: refactor startUnit
    822623b6 CHANGELOG.md: move 1.1.5 CVEs to Security section
    54cfb25d Makefile: add verify-changelog as release dependency
    7b3ac330 verify-changelog: allow non-ASCII
    37e586ab CHANGELOG: fix a typo
    de0c2277 [1.1] CHANGELOG: fix 1.1.5 git compare link
    1fe2ec53 tests/int/mounts: only check non-shadowed mounts
    9b8ebe4d tests/int/mount: fix issues with ro cgroup test
    17a2d451 VERSION: back to development

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-06-07 16:40:21 -04:00
Bruce Ashfield
b3fd5097ab runc-opencontainers: update to 1.1.7
Bumping runc to version v1.1.7-2-gb6109acd, which comprises the following commits:

    f0ecf30b VERSION: back to development
    860f061b VERSION: release 1.1.7
    c1063b1c runc.keyring: add Akihiro Suda
    b0fae8c4 scripts: keyring validate: print some more information
    79a52b43 libct/cg/sd: use systemd version when generating dev props
    6a806d4d runc.keyring: add Kolyshkin
    b6f686f2 keyring: add Aleksa's <cyphar@cyphar.com> signing key
    63355bf8 keyring: add Aleksa's <asarai@suse.com> signing key
    3bdb63bf keyring: verify runc.keyring has legitimate maintainer keys
    853d5e38 scripts: release: add verification checks for signing keys
    bd1d5370 release: add runc.keyring file and script
    7cd72cc3 VERSION: go back to development
    0f48801a VERSION: release 1.1.6
    e4ce94e2 libct/cg: add misc controller to v1 drivers
    10cfd816 libctr/cgroups: don't take init's cgroup into account
    d30d240b tests/int: test for CAP_DAC_OVERRIDE
    840b9539 Fix runc run "permission denied" when rootless
    165d2323 tests/int: add a "update cpuset cpus range via v2 unified map" test
    26a58fdb cgroups: cpuset: fix byte order while parsing cpuset range to bits
    8d9d1d25 libct/int: make TestFdLeaks more robust
    b66d6d56 libct/int: wording nits
    ddbb6d41 libc/int: add/use runContainerOk wrapper
    3531cc2d ci: add call to check-config.sh
    ed9a0e1d ci/gha: bump actions/cache to v3
    7683e508 ci/gha: switch to Go 1.19.x for validate
    568d4407 ci/gha: bump golangci-lint to 1.48
    1f9e36c0 libct: fixes for godoc 1.19
    50f06554 ci: bump golangci-lint to 1.46
    77472ef6 libct: fix staticcheck warning
    9994fe3f libct: suppress strings.Title deprecation warning
    403ea1f0 ci/gha: convert lint-extra from a job to a step
    d2c83bdf ci/gha: switch to Go 1.18.x for validate
    03a631df ci: switch to golangci-lint 1.45
    e5a5522a Add supported Go releases (1.19, 1.20)
    3ce12483 Dockerfile: fix build wrt new git
    bac06cf6 ci/gha: remove stable: when installing Go
    e74040e0 build(deps): bump actions/setup-go from 2 to 3
    55462355 Require Go 1.17, bump x/sys and x/net
    3ce9c1e2 tests: Fix weird error on centos-9
    abd6adde ci: bump shfmt to 3.5.1, simplify CI setup
    1a4bf049 man/*sh: fix shellcheck warnings, add to shellcheck
    9201794a script/check-config.sh: fix remaining shellcheck warnings
    8b976428 shfmt: add more files
    b0fbd2f8 script/check-config.sh: fix SC2166 warnings
    7f8cb3d6 script/check-config.sh: fix wrap_color usage
    f6562f19 [1.1] libct/cg/dev: skip flaky test of CentOS 7
    12f2f03f [1.1] runc run: refuse a non-empty cgroup for systemd driver
    e618ec36 libct/cg/sd: reset-failed and retry startUnit on UnitExists
    931b9bf3 libct/cg/sd: ignore UnitExists only for Apply(-1)
    b46ac860 libct/cg/sd: refactor startUnit
    822623b6 CHANGELOG.md: move 1.1.5 CVEs to Security section
    54cfb25d Makefile: add verify-changelog as release dependency
    7b3ac330 verify-changelog: allow non-ASCII
    37e586ab CHANGELOG: fix a typo
    de0c2277 [1.1] CHANGELOG: fix 1.1.5 git compare link
    1fe2ec53 tests/int/mounts: only check non-shadowed mounts
    9b8ebe4d tests/int/mount: fix issues with ro cgroup test
    17a2d451 VERSION: back to development

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-06-07 16:40:21 -04:00
Bruce Ashfield
86d7836cd4 podman: update to 4.5.0
This version introduces envsubt in the install stage, so we add
gettext-native to our build dependencies.

Bumping libpod to version v4.5.0-14-gc926b12c5, which comprises the following commits:

    bc2f0115d [v4.5] system tests: fix race in kube-play read-only
    696c2d40d api: fix parsing filters
    1fa2eb53b Support systemd optional prefix '-' for devices.
    74634a46c *: migrate image registry to registry.k8s.io
    0fb11cccd Makefile: include `release-artifacts` target
    4d2cf293e [CI:BUILD] Packit: Initial Enablement
    da927a75c Bump to v4.5.1-dev
    75e3c1257 Release v4.5.0
    32a6892b6 [CI:DOCS] Final release notes for v4.5.0
    5de2a13e0 Quadlet - do not set log-driver by default
    c5e704c82 Return title fields as a list
    bf6f58b02 Bump to v4.5.0-dev
    f3c365887 Bump to v4.5.0-RC2
    15c302533 Final release notes for v4.5.0-RC2
    af7c25811 test/e2e: remove unnecessary SkipIfNetavark() calls
    80652cacf test/e2e: deduplicated network test
    b526839a4 docs: update podman-network-create.1
    ed99a979c network create: add --interface-name
    676486a85 test/system/252-quadlet.bats: fix flake
    1bf5bdc68 Read kube_generate_type from containers.conf
    11ac0d03e Debian setup: workaround for runc /dev/char/10:200 bug
    38c217a0b pkg/rootless: use catatonit from /usr/libexec/podman
    bab95de9a rootless: make sure we only use a single pause process
    3b2b1441e Use atomic config writing strategy for podman machine config files
    67307603b Add remaining release notes for v4.5.0-RC2
    d53871cf1 GHA: Use version instead of SHA for actions
    25bc7d161 chore(deps): update dependency containers/automation_images to v20230405
    944accffa build: pass env by reference
    7edf73dfd test: retrofit error message
    b624ad757 test/system: expect 12 char for short id
    260bc3ec4 vendor: bump containers/(storage, common, buildah, image)
    c5a0d8646 [skip-ci] Update actions/upload-artifact action to v3
    d3cf8ccf8 [skip-ci] Update actions/stale action to v8
    21fbd5c1a [skip-ci] Update actions/setup-go action to v4
    f3971e412 [skip-ci] Update github/issue-labeler action to v2.6
    c4e79fc16 Fix up codespell errors
    a5dd5c20e Capitalize all uid,gid and id words that are not options in docs
    352a41e3a build(deps): bump golang.org/x/tools from 0.7.0 to 0.8.0 in /test/tools
    13135f924 Properly remove the service container during kube down
    f6a50311c quadlet: add `UserNS` option key
    29aac4dfe [CI:DOCS] Release notes for 4.5.0 Part 1
    358b46225 "podman pull by digest and list --all" test: untag instead of rmi
    f417861e0 build(deps): bump golang.org/x/text from 0.8.0 to 0.9.0
    43e6bc9d9 Add renovate.json configuration
    cf6f13704 CI: postbuild step: skip under nightly treadmill
    db9785ba5 The `--ulimit` option accepts the name with an `RLIMIT_` prefix both upper and lower case
    dc9a65e34 test/e2e: use custom network config dir where needed
    35165df37 chore: replace `github.com/ghodss/yaml` with `sigs.k8s.io/yaml`
    b858c7e7f update completion scripts for cobra v1.7.0
    e4aad8f0f libpod.storageService.CreateContainerStorage(): retrieve ID maps
    d0ffb8792 Fix invalid pod name and hostname during kube generate
    761eca9e7 e2e tests: fix racy flakes
    56e7b511e Cirrus: Enable labeling of EC2 VMs
    74f9fd8e6 Cirrus: Fix aarch64 clone_script 404 errors
    ce8a3a0c1 e2e: GinkgoParallelNode() -> ...Process()
    45b1099ef build(deps): bump github.com/spf13/cobra from 1.6.1 to 1.7.0
    34a5c7f15 build(deps): bump golang.org/x/sys from 0.6.0 to 0.7.0
    10d2e9fde [CI:DOCS] --creds and registries
    9b7fd3936 Copr: fix build deps for /usr/bin/envsubst
    80f9f8077 Don't error when removing non-existant env vars
    ecce01e61 e2e: healthcheck on stopped container: fix flake
    cb7b8fb31 test/apiv2/80-kube.at
    e1be7d141 test/apiv2/80-kube.at
    1f3ae8a4f system service: do not close Body
    bb70d60f1 rm `hack/release.sh`
    704901d11 build(deps): bump github.com/onsi/gomega from 1.27.5 to 1.27.6
    243ca7c28 add `quadlet -version` flag
    7eb78f8a7 add version/rawversion package
    53b16ccd2 quadlet: use `Flag` suffix for variables
    443f8d89c quadlet: implement `Tmpfs` option
    91ca15e96 Bump to v4.5.0-dev
    3e48017d8 Bump to 4.5.0-rc1
    b7175a366 Update release notes from 4.4 branch
    2051e54e0 rootless netns: recover from invalid netns
    99ace1908 System tests: unverbosify a flake log
    68dbddd97 Add support for secret exists
    78e7ade0d Fix Win install task failures with large PR bodies
    21febcb5c docs: add `starting` to `HealthCheckResults.Status`
    d7051d745 Add support for cgroup_config from containers.conf
    4d56292e7 libpod: mount safely subpaths
    4f9019406 Support Deployment generation with kube generate
    8b6a7c182 Use secret.items to create volume mounts if present
    359f40869 [CI:DOCS] fix typo in --systemd option
    266cc7882 rootless: drop preexec hook error message
    3c9ce3e52 Edit the docker wrapper to use the install prefix
    5643058c8 Update podman-for-windows.md
    d79519e70 Quadlet: RemapUsers documentation fixes
    7f8d5e565 speed up image listing
    f0cfbbe2c vendor containers/common@e27c30ee9b
    70abb4ae5 fix volume-plugin-test flake
    b3e8791f6 Document building Podman remote on Windows hosts
    c40eaa242 test/e2e: gpg keep stdout/err attached
    f131eaa74 auto-update: stop+start instead of restart sytemd units
    b7a8e1285 [CI:DOCS] Improve basic tutorial
    be7827c7e Update docs/source/markdown/podman-network.1.md
    c335ff241 Add debug to --wait test
    81e5bffc3 fix slirp4netns resolv.conf ip with a userns
    11e5c2d0f Quadlet: add support for keep-id with mapping values
    b5df38c23 Quadlet E2E test - run quadlet as user generator
    cdb5b3e99 sqlite: do not `Ping()` after connecting
    da96ff6cc Quadlet - treat paths starting with systemd specifiers as absolute
    dd8ee49f6 Update docs/source/markdown/podman-kube-play.1.md.in
    d85c8d7e8 system tests: use CONTAINERS_CONF_OVERRIDE
    51d068ecc implement podman machine set for hyperv
    46b826a90 [CI:DOCS] Add network subnets info to network man page
    dd8574022 CI: retry the golangci install
    92e0efc5d system tests: fix racey sdnotify test
    518eafaa3 hyperv: lookup machine on local filesystem first
    4c72fc26b fix os.IsNotExist() CI check
    7daab31f1 Ensure that SQLite state handles name-ID collisions
    64ba82601 macos pkginstaller: do not fail when podman-mac-helper fails
    4f3cbf15c podman-mac-helper: install: do not error if already installed
    ade46ae6a build(deps): bump github.com/onsi/gomega from 1.27.4 to 1.27.5
    e061cb968 Fix a race around SQLite DB config validation
    c5fc44582 add CONTAINERS_CONF_OVERRIDE
    5f86fae71 vendor containers/common@main
    6825740fc docs: minor grammar fix in `--volume` description
    b31d9e15f sqlite: do not use shared cache
    9be4a525f test: podman checkpoint/restore the latest container
    5185e7e39 stats compat API: return "id" lowercase
    5f274e45f Run make codespell
    3925cd653 Drop SQLite max connections
    0fbc32515 sqlite: set connection attributes on open
    9f0e0e833 Fix database locked errors with SQLite
    cf5df5b80 quadlet tests: skip on RHEL8 rootless
    cb24d6c3d Kube Play Doc: Document the support for K8S Secret
    6b2101bc7 New ulimit test: bump up minimum nfiles
    5447e88b4 logformatter: hide --db-backend, and friendlyize quadlet
    5382997e0 Quadlet - add support for relative path in Volume key in .container file
    3e405a2fd Add service ctr cleanup to PlayKubeDown
    956341543 fix --health-on-failure=restart in transient unit
    26d5df77d Quadlet Doc: Suggest the kill operation for HealthOnFailure
    5d1342fc5 Quadlet - Add support for health checks configuration in .container files
    3ef707def Makefile: allow specifying /lib dir location
    a5abbdf1f Fix option --opts -> --opt
    0dac214f5 basic hypverv machine implementation
    94f905a50 Fix SQLite DB schema migration code
    46d165040 Add support for oom_score_adj value from containers.conf
    6046832f3 Use default_ulimits field in containers.conf
    e2d49fb65 CI: test and confirm DESIRED_DATABASE
    1ea62f32f build(deps): bump github.com/openshift/imagebuilder
    526dfb893 logformatter: futureproof output filename
    e21cf2d8d Vendor in latest containers/(storage, common, image)
    686bdcc29 build(deps): bump google.golang.org/protobuf from 1.29.0 to 1.30.0
    ba141adce test/system/255-auto-update.bats: add debug logs
    c2a24abc0 Revert "Revert "pasta: Use two connections instead of three in TCP range forward tests""
    3a59af219 Add information for secret inspect
    87e93a7b6 Add format to podman volume ls
    b424f8fb0 Add format to podman volume inspect
    2555c8034 Add format to podman secret ls
    1c4bd4a73 Add format to podman system df
    71bcd9891 Add format to podman machine info
    581611844 Add format table to podman image inspect man page
    e92955245 Cirrus: Store podman machine benchmark data
    b3035b9d6 Update Cirrus display names, and fix get-ci-vm script
    6142c16a9 Ensure SQLite places uses the runroot in transient mode
    2ec11b16a Fix various integration test issues with SQLite state
    0f8530b1e Remove test for pod/container name global uniqueness
    6e0f11da5 Improve handling of existing container names in SQLite
    39fd9aa08 Add SQLite job to CI
    7ed1c7fd9 buildah treadmill: also run rootless tests
    2b4a27719 build(deps): bump github.com/vbatts/git-validation in /test/tools
    3c51b61d7 auto update: return restart error
    ea2a0767a fix: Document removing anonymous volumes
    408e764b9 events: no duplicates when streaming during a log rotation
    82f2f8258 Add search --cert-dir, --creds
    bae07b6ea podman-mac-helper: exit 1 on error
    7d8d3e810 system service --log-level=trace: support hijack
    eed389508 test/system: fix wait_for_port() to wait for bind
    2d1f4a8bf cgroupns: private cgroupns on cgroupv1 breaks --systemd
    01fd5bcc3 libpod: remove error stutter
    4562e61d2 podman events: unhide --stream
    7a7af735a test/system/255-auto-update.bats: multiple services
    40d0d233e 255-auto-update.bats: turn off rollback where needed
    a9d70e9fe Use append() to add elements to a slice
    1c08f2eda Revert "pasta: Use two connections instead of three in TCP range forward tests"
    ad8a96ab9 Support running nested SELinux container separation
    159936a11 bud tests: rootless remote: use correct socket path
    6f9f395b3 build(deps): bump github.com/vbauerster/mpb/v8 from 8.2.1 to 8.3.0
    bad41f67e compat: /auth: parse server address correctly
    6363fb08f docs: fix cmd `set DOCKER_HOST` suggestion
    fb4f6f95c test: reenable idmap test
    b5a99e081 Must use mountlabel when creating builtin volumes
    8d952c01d podman.spec.rpkg: distro conditionals for modulesloaddir
    9294b7350 build(deps): bump google.golang.org/protobuf from 1.28.1 to 1.29.0
    21651706e podman inspect list network when using --net=host or none
    f928cf54a pasta: Re-enable "Local forwarder, IPv4" test, accept NXDOMAIN as response
    829e910cd build(deps): bump golang.org/x/tools from 0.6.0 to 0.7.0 in /test/tools
    cc7a1e614 CI: Switch to c20230307t192532z-f37f36d12 images
    799c20177 Cirrus: Run system & integration tests in parallel
    c03cb5718 Update checkpointctl v0.1.0
    cb3cda55f Quadlet: add support for setting --ip and --ip6
    af7a759e9 build(deps): bump golang.org/x/net from 0.7.0 to 0.8.0
    5d039ce22 build(deps): bump golang.org/x/sys from 0.5.0 to 0.6.0
    34ff27b81 libpod: avoid nil pointer dereference in (*Container).Cleanup
    25dd4d653 [CI:DOCS] Add image not found info to troubleshooting
    0498ce3a5 cmd: do not require userns for "version"
    2860d55c9 cmd: drop special handling for "scp"
    da04469f0 cmd: clarify meaning of ParentNSRequired
    0ab4b2614 Fix package restore
    0d219486f [CI:DOCS] Fix docs/version-check always requesting updates
    e77f370f8 sqlite: add a hidden --db-backend flag
    cca65db01 fix: update the default machine value when the previously set default machine is deleted
    9ac0d4f1a podman machine: Adjust Chrony makestep config
    2c67ff5d4 sqlite: add container short ID to network aliases
    38acab832 sqlite: remove dead code
    2342d1a31 sqlite: addContainer: add named volume only once
    86d12520e sqlite: implement RewriteVolumeConfig
    df88f546b sqlite: LookupVolume: fix partial name match
    01359457c sqlite: LookupVolume: wrap error
    69ff04f73 sqlite: fix type rewriting container config
    e87014e44 sqlite: return correct error on pod-name conflict
    84b5c6c71 sqlite: RewritePodConfig: update error message
    51cf2dd36 test/system/255-auto-update.bats: wait 10 for update to finish
    b727f30ac auto-update test: wait for service to be ready
    76056c670 Vendor in latest containers/(common, storage, image)
    20a42d0e4 play kube: Add --wait option
    6babef598 Cirrus: Fix git config permission denied
    ccc5aa59a Quadlet: Add support for the Mount key in .container files
    6f09dbc2d build(deps): bump github.com/onsi/gomega from 1.27.1 to 1.27.2
    77861d6af fix "podman logs --since --follow" flake
    6d352dc0b Clarify that replicas are ignored in kubernetes deployment
    42540a667 Revert "Skip all pasta tests"
    e804ddc5a CI: Switch to c20230223t153813z-f37f36d12 images
    070572245 Fix user socket path
    1e516e657 pkginstaller: bump Qemu to version 7.2.0
    0f92e19e8 Cirrus: Fix bud tests failing to apply patches
    1ef8a860c build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.2
    b00874c16 build(deps): bump github.com/coreos/stream-metadata-go
    9d93486d2 Vendor in latest containers/storage
    d838c08b3 buildah-bud tests: don't sudo when rootless is desired
    1f6f81f5d Temporarily disable version-check
    5a08ddaec CI: new rootless buildah-bud tests (cron only)
    5d2d609be sqlite: fix volume lookups with partial names
    495314a16 sqlite: fix container lookups with partial IDs
    efe7aeb1d sqlite: fix LookupPod
    19c2f37ba sqlite: fix pod create/rm
    e32bea937 sqlite: LookupContainer: update error message
    565bb5645 sqlite: AddContainerExitCode: allow to replace
    4b3b94473 system: add warning when running rootless on cgroupv1
    1b1cdfa35 sqlite: fix AllContainers with state
    21fcc9070 sqlite: fix "UPDATE TABLE" typos
    3f96b0ef2 sqlite: SaveVolume: fix syntax error updating the volumes table
    7c11f7e17 sqlite: exit code: allow -1
    e74f7bcaf sqlite: fix typo when removing exec sessions
    560805ac4 sqlite: AllContainers: fix inner join
    8c64c4370 sqlite: move migration after table creation
    eeabe975e sqlite: implement pod methods
    0d75854c5 Quadlet - use the default runtime
    49d560e1b docs: context is not optional for build
    03aaa8d35 Fix an incorrect comment on NewSqliteState
    eb228f264 Add support for containers.conf database setting
    59a54f32d Add support for volume operations to SQLite state
    c0b92bdbc Implement exec session handling in SQL database
    627a5b73b Various fixes from code review
    c4fe0af2a Remove `--namespace` flag from Podman root
    89d0ccd19 Get E2E tests to pass
    97499a70a Implement network disconnect for SQLite state
    939a4ccef Implement Network Connect/Modify for SQLite state
    8ab18d848 Fix various lint issues
    b4c4f9c93 Some further work on SQLite state
    5c2a0670f Remove concept of Namespaces from BoltDB
    1b968c607 Add initial SQLite-backed state implementation
    93e7cc119 Cirrus: Support runc testing on debian VMs
    81f116c59 Skip all pasta tests
    642e9ddb8 Skip buildah-bud test
    10382d0bc Skip buildx test with VFS podman storage driver
    dd51b62b7 Skip 'podman kube --network' test for rootless CGv1
    197529f08 Skip tests which fail with CGv1 & runc
    5b4f248a8 Skip rootless CGv1 quadlet tests due to issue
    e19922d09 Makefile: Define SHELL
    43eb35a77 Machine refactor for QEMU/AppleHV
    e838ad86b machine refactoring preparations for hyperv
    b4471c6ed [CI:BUILD] spec.rpkg: trim dependency list
    12153da83 Logs follow-until tests: loosen checks
    7d17ec07f [CI:DOCS] Windows/Mac docs link update
    7f5fc04b4 Doc update for docker network options via CLI
    4b4b423b6 compat API: network create return 409 for duplicate
    40f21da0c Apply suggestions to man page
    adacd3b12 vendor c/common@852ca05a1f
    6a3757b73 Quadlet: Add support for LogDriver key in container and kube units
    ebb45b5bd machine refactoring preparations for hyperv
    af8d649da libpod: always use direct mapping
    9dc730d9f netavark: only use aardvark ip as nameserver
    e9942c61d build(deps): bump github.com/container-orchestrated-devices/container-device-interface
    79a05ca2b podman logs passthrough driver support --cgroups=split
    d7e96536e journald logs: simplify entry parsing
    1590c7bf4 podman logs: read journald with passthrough
    5754df806 make docs: sanity check for broken man pages
    5056bd45f build(deps): bump github.com/vbauerster/mpb/v8 from 8.1.6 to 8.2.0
    5fcd2c3fa build(deps): bump github.com/onsi/gomega from 1.27.0 to 1.27.1
    2659a3228 kube: rm secret on down, print secret on play
    9ce589a4a Fix spacing typo that triggered OCD & indent units in podman-systemd.unit(5)
    ad866fecb Update remote_client.md
    e74f60dee [CI:DOCS] Add restriction to option README
    975b096bc Revert "CI: Temporarily disable all AWS EC2-based tasks"
    22a207d45 build(deps): bump github.com/onsi/gomega from 1.26.0 to 1.27.0
    c95978f60 kube play: only enforce passthrough in Quadlet
    21cddd723 journald: remove initializeJournal()
    6dd797844 auto-update: support pods
    9622d25be Emergency fix for man pages: check for broken includes
    c81fbd5d0 System tests: assert(): friendlier failure messages
    761da776a Cirrus: Fix version-check to only run on `main` job
    7f8bc6f51 CI: Temporarily disable all AWS EC2-based tasks
    6f5ca7318 build(deps): bump github.com/containerd/containerd from 1.6.16 to 1.6.18
    6ca857feb volume,container: chroot to source before exporting content
    94d4b5278 Support sysctl configs via podman kube play
    510e44359 [CI:BUILD] copr: podman.spec.rpkg cleanups
    a4677405c quadlet system tests: add useful defaults, logging
    96af9e4e0 libpod: support relative positions for idmaps
    c7ee65596 Experimental workaround for cdn03.quay.io flake
    86e55d0ec system tests: prevent leading tabs
    9abe8c785 Introduce podman machine os apply
    828708bac create: add support for --group-entry
    33a918711 fix != filter in volume prune
    4c5b79120 Allow specification of podman --remote build -f -
    3d8936642 Quadlet use crun specified in containers.conf
    9f84b9b52 build(deps): bump golang.org/x/net from 0.6.0 to 0.7.0
    86a4c6b65 Vendor c/image after https://github.com/containers/image/pull/1847
    c0f983db8 Don't set hostPort when generating a service
    3a9d14d4e man page --format xref: tighten the autocompletion check
    0999991b2 add support for limiting tmpfs size for systemd-specific mnts
    9a1f47887 build(deps): bump golang.org/x/text from 0.6.0 to 0.7.0
    35d16ea02 Add ulimit annotation to kube gen & play
    34d412e13 man page xref: validate displayed man page names
    7c54d1423 quadlet: add ExecStop
    d2ac85f7a install sigproxy before start/attach
    191e4ce40 build(deps): bump golang.org/x/tools from 0.5.0 to 0.6.0 in /test/tools
    a5ca73225 Fix typos
    45fb353f4 Cirrus: Make benchmarks .env file easier to load
    a7db3e8d2 Cirrus: Omit functions in env. file
    1541ce56c kube play: set service container as main PID when possible
    08e13867a Fix typos. Improve language.
    9cba0474b events + container inspect test: RHEL fixes
    5a9074dab Add ctrName to network alias during kube play
    586515976 Run codespell on codebase
    c7619c8ae podman image scp: added identity for ssh.Exec
    fb54be2e1 [CI:DOCS] Clarify nomap constrains
    433413549 [CI:DOCS] man-page checker: include --format (Go templates)
    e308ba021 Vendor c/image after https://github.com/containers/image/pull/1816
    ec4ab08c8 [CI:DOCS] Cleanup some man pages to display options with line breaks
    5ed217409 [CI:DOCS] Add tables to podman-systemd.unit man page
    3de409ad6 github: remove prefix from bugs/features
    d6dd17fdf Quadlet: Add support for the Secret key in Container group
    08d28bfc2 [CI:DOCS] OWNERS: add @ygalblum and @alexlarsson
    47df0ca25 build(deps): bump golang.org/x/term from 0.4.0 to 0.5.0
    ded44be16 build(deps): bump github.com/vbauerster/mpb/v8 from 8.1.4 to 8.1.6
    42c7c59dd Sort quadlet keys to make it easier to read
    43b357068 e2e: fix some tests on remote
    83367a6b3 kube play: do not teardown unconditionally on error
    ac71fa01c Fix typos in comments
    6b6458916 Resolve symlink path for qemu directory if possible
    90eb834e7 #17363 Fix contradicting documentation podman-commit
    1916da596 Fix a potential UID/GID collision in unit tests
    93c35a703 golangci-lint: show all errors at once
    77e4b1939 update golangci-lint to version 1.51.1
    1fd0ce71d [CI:DOCS] events: document journald identifiers
    f1352521f Quadlet: exit 0 when there are no files to process
    ced934284 network ls: handle removed container
    315215020 e2e: adapt play kube test on remote rootless
    4e8906c5e docs/podman-systemd.unit: Explicitely mention network & kube units
    c4f338eec docs/podman-systemd.unit: Update example to work out of the box
    50f72fe7b [CI:BUILD] Cirrus: Fix GraphQL ownerRepository:null error
    83a0e97ab Add missing return after errors
    84c674fee Revert "Cirrus: Emergency fix to un-stuck PRs"
    af0f10a22 pasta: Fix ICMPv6 Echo test, skip it for the moment
    859579b6b pasta: Fix ICMP Echo Request (IPv4) test
    e33f4e0bc pasta: Use two connections instead of three in TCP range forward tests
    acaab3fa7 Add SELinux label types support to quadlet
    928d589b7 Add quadlet support for rootfs= containers
    6b3073f53 Cirrus: Emergency fix to un-stuck PRs
    8441f01be Move clean-binaries before podman-remote in podman-remote-docs target
    aa0d4b266 oci: bind mount /sys with --userns=(auto|pod:)
    e6904f6f8 Cleanup podman-systemd.unit file
    3c3526e53 Install podman-systemd.unit  man page, make quadlet discoverable
    de63ad704 libpod: allow userns=keep-id for root
    9e7f1bea4 system-reset: use CleanCacheMount to clear build cache
    5ca35d6de vendor: bump buildah to v1.29.1-0.20230201192322-e56eb25575c7
    3ce07b556 system tests: fix noexistent labels test in the remote
    a909e2f2d Expose Podman named pipe in Inspect output
    2bb4c7cdd libpod: support idmap for --rootfs
    ed1f76917 test: adapt test to work on cgroupv1
    ed18cdd6e Bump to v4.5.0-dev
    b6d91ebfb Update main to reflect v4.4.0 release
    be47eeb85 Update from /github.com/vbauerster/mpb/v7 to /v8
    8aa377698 hack/perf: cleanup after benchmarks
    cb5a9e9f4 hack/perf/bz-2162111.sh: use custom network
    a1436d8fb Update bug_report.yaml
    02bcf0bac Handle filetype field in kubernetes.yaml files
    1a786ea53 hack/perf/bz-2162111.sh: measure stop
    bd8937c50 make hack/markdown-preprocess parallel-safe
    68371ff55 system tests: fix volume exec/noexec test
    f69efb6ee system tests: minor fix for RHEL8 incompatibility
    cf7afed05 Cirrus: Use versionable IMAGE_SUFFIX
    cbb45a6d4 utils: new conversion method
    0e949bfd3 libpod: use GraphRoot for overlay upper dir
    427d69cc3 vendor: update containers/storage
    d10860a32 Do not mount /dev/tty into rootless containers
    5c059e3ed build(deps): bump go.etcd.io/bbolt from 1.3.6 to 1.3.7
    9272cabd3 e2e: fix run_staticip_test about no_proxy
    2e397120d docs: specify order preference for FROM
    15594e92e Fixes port collision issue on use of --publish-all
    952049fe5 Support for Windows paths in the source position of the volume mounts
    0e3524b8b e2e tests: fix incorrect os.User.Name
    7c60a784c Log data that we failed to unmarshal
    61db1d5aa [CI:DOCS] hack/perf: add script for BZ 216111
    29b346dea container rm: save once for exec removal and state change
    8f2a40d81 [DOCS:CI] podman-events: document verbose create events
    7e80edd3a e2e: Avoid hard-coding included in quadlet test
    2682d3ad9 e2e: Avoid hard-coding ImageCacheDir
    387f0ea2f Making gvproxy.exe optional for building Windows installer
    74c090973 Add gvproxy to Windows packages
    ab8e49d74 Add comment to clarify error handling intention
    12d70446f fix #17244: use /etc/timezone where `timedatectl` is missing on Linux
    063e273e9 Fix usage of absolute windows paths with --image-path
    b0b166b5b Match VT device paths to be blocked from mounting exactly
    553e53d44 Fix default handling of pids-limit
    069edc3ad Add (podman {image,manifest} push --sign-by-sigstore=param-file.yaml)
    e51991030 journald: podman logs only show logs for current user
    2ab90f2ed journald: podman events only show events for current user
    21b82bb68 e2e: Remove the cache with "podman unshare rm" when a rootless user
    9db657f40 Clean up more language for inclusiveness
    814f7c569 e2e: Remove some directories at SynchronizedAfterSuite
    497be102a fix: don't output "ago" when container is currently up and running
    b28519fd9 fix: running check error when podman is default in wsl
    a745d99a8 fix CI: test fail due to merge
    f3d8f6c49 Bump Bulidah to v1.29.0
    38d5319f1 e2e: reduce dependency on /tmp for e2e tests
    0ffce8181 Bump cirrus image with easier dependency management
    e62e42bfa quadlet: Add device support for .volume files
    70e8f6243 remote,build: error if containerignore is symlink
    c74bdae35 DB: make loading container states optional
    6132c4d54 ps: do not sync container
    958c94094 Set runAsNonRoot=true in gen kube
    7aef3301d WSL refactoring
    08186d7dd kube-play: add support for HostIPC in pod.Spec
    8850db961 Allow --device-cgroup-rule to be passed in by docker API

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-06-07 16:40:21 -04:00
Bruce Ashfield
da0cfbb0b4 kubernetes: update to v1.27.1
Bumping kubernetes to version v1.27.1-89-g2555e0f90e8, which comprises the following commits:

    2eccb77b2c5 OpenAPI V3 invalid document checks
    642ea896178 update for feedback
    0457fbc83b3 QueryParamVerifier falls back on invalid v3 document
    4cd33af1419 QueryParamVerifierV3 resilient to minimal OpenAPI V3 documents
    ce458add6f1 kubeadm: fix a bug where file copy(backup) could not be executed correctly on Windows platform during upgrade
    3a56c1e954b Fix CHANGELOG-1.27 correct
    fa86f2dce30 benchmark test to evaluate the overhead of podMatchesScopeFunc
    4a2e6971f7d Fix incorrect calculation for ResourceQuota with PriorityClass as its scope
    c041924dd10 Update podFailurePolicy comments from alpha-level to beta
    7f9b3cb8540 Disable NewVolumeManagerReconstruction feature gate
    3324649c1c6 releng/go: Update images, dependencies and version to Go 1.20.4
    ae2f576d0b7 Bump konnectivity-client to v0.1.2
    8af1ce5863d Kube-proxy/ipvs: accept access to healthCheckNodePort on LbIP
    940b6892a1e node: device-plugin: e2e: Additional test cases
    4cf566e32e9 node: device-plugin: add node reboot test scenario
    d67481c4784 node: device-plugin: e2e: Capture pod admission failure
    6f5e29e26c4 node: device-mgr: e2e: adapt to sample device plugin refactoring
    367e3d7c471 node: device-mgr: e2e: Update the e2e test to reproduce issue:109595
    d241f58d8c8 node: device-mgr: e2e: Implement End to end test
    aac4c15e624 node: device-mgr: Handle recovery by checking if healthy devices exist
    b157e1741fb node: device-plugin: e2e: Add test case for kubelet restart
    5278e9c02cd node: device-plugin: e2e: Provide sleep intervals via constants
    b3c58acde98 node: device-plugin: e2e: Update test description to make it explicit
    0cd0fe70aa1 node: device-plugin: e2e: Isolate test to pod restart scenario
    ed8d4e1d6a5 node: device-plugin: e2e: Annotate device check with error message
    4899dc75dde node: device-plugins: e2e: s/devLen/expectedSampleDevsAmount
    c81ec1ae5b0 node: device-plugins: e2e: Refactor parse log to return string and error
    86904a7c580 Update kube-openapi to fix race
    ee1d7eb5d82 Use absolute path instead requestURI in openapiv3 discovery
    bbca939c661 proxy/ipvs: don't bind nodeips to the dummy device
    ca1e563141a proxy/ipvs: add a GetAllLocalAddressesExcept() function
    3ce0c108fe9 Refactors discovery content-type and helper functions
    574829867a9 Fix scheduler performance regression after adding plugin metrics
    192e9dae316 Update staging/src/k8s.io/apiserver/pkg/cel/common/values.go
    8d0ac2f6f8f Fix bug where CEL listOfString.join() results in unexpected error
    57e67a91e39 Fix directory mismatch for `volume.SetVolumeOwnership()`
    d0514936f3a Fix stomping os env in kubectl e2e tests
    7a6640798a7 KCCM: add providerID predicate to service controller
    8221a54e1ee Re-work logic in shouldSyncUpdatedNode
    a9d07f4e9ef add log includes pod preemption details
    9ef90afb4fb verifyVolumeNoStatusUpdateNeeded may cause flake and so only keep the last ones
    b598ea5c392 deflake: Add retry with timeout to wait for final conditions
    2eb94fa835a kubelet: Mark new terminal pods as non-finished in pod worker
    ae07535c855 test: Add node e2e to restart kubelet while pod is terminating
    861e1935e2a kubelet: Ensure pods that have not started track a pendingUpdate
    ae92fd28072 changelog: fix formatting issue with v1.27 change log
    95feac5269b Update CHANGELOG/CHANGELOG-1.27.md for v1.27.1
    4c9411232e1 Release commit for Kubernetes v1.27.1
    2c81ecc2e29 use case-insensitive header keys for http probes
    1601bb75401 fix: add the bug as a known issue o on the v1.26 release note
    fddf859d6a5 kube-aggregator: correctly use client-go TLS cache with custom dialer
    845ba3e3a23 Revert "Optimization on running prePreEnqueuePlugins before adding pods into activeQ"
    a1f97a35fcb Revert "Merge pull request #113151 from ncdc/refactor-crd-conversion"
    1da781e29b3 Revert "CR conversion: protect from converter input edits"
    f564f7a3559 api: encode NamespacedName with lower case in JSON
    e827a4b61f5 Do not look at VPC-related resources outside the cluster's network
    d662e339aa5 kubelet: Do not mutate pods in the pod manager
    d977e7e0dbf Fix azure disk e2e after migration
    e599722bc59 vendor: bump runc to 1.1.6
    25b061d8202 CVE-2023-27561: Bump runc go module v1.1.4 -> v1.1.5
    854c72766bb fix: the volume is not detached after the pod and PVC objects are deleted
    398e38784e7 Update CHANGELOG/CHANGELOG-1.27.md for v1.27.0
    1b4df30b3cd Release commit for Kubernetes v1.27.0
    2b6072ba00c Update CHANGELOG/CHANGELOG-1.27.md for v1.27.0-rc.1
    ad18954259e CHANGELOG: Update directory for v1.27.0-rc.1 release
    80bc6ffd0df Release commit for Kubernetes v1.27.0-rc.1
    951f8dcc965 Return error for localhost seccomp type with no localhost profile defined
    4e0bc2397da Update publishing-bot rules for release branches to Go 1.19.8
    1972dd10058 Do not log entire pod struct while attaching the volume
    b19c362bf52 Update distroless-iptables to v0.2.3
    2a69edb43de [go] Bump images, dependencies and versions to go 1.20.3
    b5dd5f1f3a7 Investigate and fix the handling of Succeeded pods in DaemonSet
    873127e3b04 Export WebhookHandler struct because some CCMs use Run directly
    735bbc135c3 Clean up formatting
    27ad623b3d1 Skip vendor directory when removing generated files
    63b5ca69f1f .*: update vendor dir and cleanup
    1ad7cacba59 publishing-bot rules for the new release-1.27 branch
    b83600de01e fix  nil pointer dereference panic for deprecated metrics
    5469c198e5d kmsv2: validate encrypt response at DEK generation time
    0e9dd5c51d8 Call function that validates in-place vpa resize policy

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-06-07 16:40:21 -04:00
Chen Qi
668871ce79 docker-moby: fix docker run on NFS
For now, a simple `docker run -it alpine' fails on NFS.
This regression was introduced by a commit[1] which makes
DirCopy error out if failing to copy xattr.

As the vfs storage driver is supposed to just work on
any filesystem[2], we need to allow its failure on copying
extended attributes as the support for xattr depends on
filesystem.

[1] 31f654a704
[2] https://docs.docker.com/storage/storagedriver/select-storage-driver/

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-05-17 11:35:04 -04:00
Peter Kjellerstedt
8c599baea9 netavark: Rewrite the recipe
The previous version of the recipe was generated by cargo-bitbake, which
expects that future updates to the recipe will also be done by
cargo-bitbake and therefore formats it to accomodate this.

Since we have now switched to the more commonly used (and supported)
cargo-update-recipe-crates bbclass for updating the crate URIs, the
recipe can be rewritten to better conform to common recipe standards.
This also folds netavark.inc into it as there is no longer any need
to keep it separate.

Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-05-08 18:42:14 -04:00
Peter Kjellerstedt
d903219b9e netavark: Add checksums for the crate URIs
Use the cargo-update-recipe-crates bbclass to update the crate URIs
including adding checksums for them, as they are now required by the
crate fetcher.

Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-05-08 18:42:14 -04:00
Peter Kjellerstedt
498a53037e netavark: Move the crate URIs to a separate .inc file
As a preparation for switching to using the cargo-update-recipe-crates
bbclass to update the crate URIs, move the existing crate URIs to the
netavark-crates.inc file that it expects.

Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-05-08 18:42:14 -04:00
Peter Kjellerstedt
508517af3e aardvark-dns: Rewrite the recipe
The previous version of the recipe was generated by cargo-bitbake, which
expects that future updates to the recipe will also be done by
cargo-bitbake and therefore formats it to accomodate this.

Since we have now switched to the more commonly used (and supported)
cargo-update-recipe-crates bbclass for updating the crate URIs, the
recipe can be rewritten to better conform to common recipe standards.
This also folds aardvark-dns.inc into it as there is no longer any need
to keep it separate.

Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-05-08 18:42:14 -04:00
Peter Kjellerstedt
57704b2216 aardvark-dns: Add checksums for the crate URIs
Use the cargo-update-recipe-crates bbclass to update the crate URIs
including adding checksums for them, as they are now required by the
crate fetcher.

Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-05-08 18:42:14 -04:00
Peter Kjellerstedt
cd6d4550a6 aardvark-dns: Move the crate URIs to a separate .inc file
As a preparation for switching to using the cargo-update-recipe-crates
bbclass to update the crate URIs, move the existing crate URIs to the
aardvark-dns-crates.inc file that it expects.

Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-05-08 18:42:14 -04:00
Martin Jansa
cd816688c5 k3s, kubernetes, nagios-nrpe: fix Upstream-Status formatting
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-05-08 18:41:38 -04:00
Martin Jansa
d1b6bf580e lxcfs: fix build with newer linux-libc-headers
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-05-08 18:41:38 -04:00
Bruce Ashfield
3f692e3fe1 docker: start depreciation of docker-ce
docker-ce and docker-moby are now exactly the same. To allow layers
which bbappend or otherwise consume docker-ce, we merge the two recipes
and leave a warning in docker-ce that it will be removed in the future.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-05-03 12:17:06 -04:00
Martin Jansa
fff79433b6 aardvark-dns, netavark: add seccomp to REQUIRED_DISTRO_FEATURES
* because of runtime dependency on slirp4netns

* fixes:
ERROR: Nothing RPROVIDES 'slirp4netns' (but meta-virtualization/recipes-containers/aardvark-dns/aardvark-dns_1.2.0.bb RDEPENDS on or otherwise requires it)
slirp4netns was skipped: missing required distro feature 'seccomp' (not in DISTRO_FEATURES)
NOTE: Runtime target 'slirp4netns' is unbuildable, removing...
Missing or unbuildable dependency chain was: ['slirp4netns']
NOTE: Runtime target 'aardvark-dns' is unbuildable, removing...
Missing or unbuildable dependency chain was: ['aardvark-dns', 'slirp4netns']
NOTE: Runtime target 'netavark-dev' is unbuildable, removing...
Missing or unbuildable dependency chain was: ['netavark-dev', 'aardvark-dns', 'slirp4netns']
NOTE: Runtime target 'netavark' is unbuildable, removing...
Missing or unbuildable dependency chain was: ['netavark', 'aardvark-dns', 'slirp4netns']
NOTE: Runtime target 'aardvark-dns-dev' is unbuildable, removing...
Missing or unbuildable dependency chain was: ['aardvark-dns-dev', 'slirp4netns']

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-04-12 13:10:11 -04:00
Martin Jansa
31e8dc838b crun: fix REQUIRED_DISTRO_FEATURES
* features_check was inherit twice and REQUIRED_DISTRO_FEATURES
  was set twice as well but both with ?= so the 2nd one was ignored

* seccomp was added in:
  commit b8f2edd39a
  Author: Bruce Ashfield <bruce.ashfield@gmail.com>
  Date:   Wed Jun 30 11:22:42 2021 -0400
  Subject: crun: add seccomp distro features check

  but there was already systemd from:

  commit 144d1ae897
  Author: Bruce Ashfield <bruce.ashfield@gmail.com>
  Date:   Fri Apr 23 10:32:24 2021 -0400
  Subject: crun: use REQUIRED_DISTRO_FEATURES to indicate systemd dependency

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-04-12 13:10:11 -04:00
Martin Jansa
f964138a21 buildah: add seccomp and ipv6 to REQUIRED_DISTRO_FEATURES
* because it rdepends on podman with the same restriction

* BTW: .gitignore has:
  build*/
  which gets triggered for buildah as well:
  meta-virtualization $ git add ./recipes-containers/buildah/buildah_git.bb
  The following paths are ignored by one of your .gitignore files:
  recipes-containers/buildah

  I've adjusted it to /build*/ only.

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-04-12 13:10:11 -04:00
Bruce Ashfield
d74219e96b skopeo: update to 1.11.2
Bumping skopeo to version v1.11.2-1-gd79588e6, which comprises the following commits:

    d79588e6 Bump to v1.11.3-dev
    dc1e14f7 Release 1.11.2
    902506dd bump golang.org/x/net to v0.7.0
    b2884205 [release-1.11] Bump to v1.11.2-dev
    fb1ade6d [release-1.11] Bump to v1.11.1
    40dd6507 Update to c/image 5.24.1

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-04-05 22:59:52 -04:00
Bruce Ashfield
d51e06f053 skopeo: update to 1.11.0-tip
Bumping skopeo to version v1.11.0-102-g1e70fee2, which comprises the following commits:

    ca0f8418 fix(deps): update module github.com/spf13/cobra to v1.7.0

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-04-05 22:59:52 -04:00
Bruce Ashfield
486c9bdb00 podman-tui: update to v0.9.0
We drop our btrfs patch, as it is now part of the upstream.

Bumping podman-tui to version v0.9.0-37-g24bdb2a, which comprises the following commits:

    449d8f4 golangci-lint system package
    b0d20b2 Bump actions/stale from 7 to 8
    613d18f ui/styles - applying golint
    7839523 ui/infobar - applying golint
    745a331 ui/help - applying golint
    4c27c3d ui/volumes code improvement and golint
    02740c1 adding container attach command to container page/view
    6b5beb4 fix container create error without health options
    705bc34 Bump actions/setup-go from 3 to 4
    cf4509e Add container health options to the container create dialog
    d79883e Add packit configurtion to build RPM as part of PR tests
    ba02fb5 Update unit tests and github workflow for running the tests
    4e3889f fix container create error when volume is selected
    0af3e47 update github workflow golang version to 1.18.8
    f572f48 Golangci-lint update to v1.51.1
    c2932fc fix vendor + codepsell
    1e35d9a Bump golang.org/x/crypto from 0.6.0 to 0.7.0
    bb17bbc unit tests fix
    1328668 Bump to v0.10.0-dev
    8ad97a1 Bump to v0.9.0
    28f800c Bump github.com/onsi/ginkgo/v2 from 2.8.4 to 2.9.0
    f18b55b Bump to podman v4.2.2
    064a53b Bump github.com/onsi/gomega from 1.27.1 to 1.27.2
    c3c1cb3 Bump github.com/containers/common
    28ca42e Bump github.com/containers/podman/v4 from 4.4.0-rc1 to 4.4.2
    88e898f Bump github.com/onsi/ginkgo/v2 from 2.8.3 to 2.8.4
    df84886 Bump github.com/containers/storage from 1.45.3 to 1.45.4
    370a785 New feature - container healthcheck
    3d18e6a Bump to v0.9.0-dev
    073a500 Bump to v0.8.0
    fe2fafb Bump github.com/onsi/gomega from 1.24.1 to 1.27.1
    4a78fc7 Bump github.com/onsi/ginkgo/v2 from 2.6.0 to 2.8.3
    6d03623 Bump podman/v4 to 4.4.2
    fa3ea79 Bump github.com/gdamore/tcell/v2
    a6d175a Bump golang.org/x/net from 0.6.0 to 0.7.0
    0d6726c Bump github.com/containerd/containerd from 1.6.12 to 1.6.18
    5cf21f8 Bump github.com/docker/docker
    80431f0 Bump golang.org/x/crypto from 0.5.0 to 0.6.0

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-04-05 22:59:52 -04:00
Bruce Ashfield
6912464b10 nerdctl: update to v1.3.0
Bumping nerdctl to version v1.3.0-2-g1525035, which comprises the following commits:

    0973d30 bump: buildkit to v0.11.3, fuse-overlayfs to v1.10, kubo to v0.18.1
    813a575 build(deps): bump golang.org/x/term from 0.6.0 to 0.7.0
    8a5e2fe build(deps): bump github.com/docker/cli
    129a757 build(deps): bump github.com/docker/docker
    6b866e0 build(deps): bump github.com/spf13/cobra from 1.6.1 to 1.7.0
    a5f95e4 build(deps): bump golang.org/x/sys from 0.6.0 to 0.7.0
    e2fabe3 build(deps): bump github.com/ipfs/go-cid from 0.4.0 to 0.4.1
    bd6d908 pkg/mountutil: improve error messages
    ffc1577 use digest instead of a tag while signing
    29a9cc1 Add manugupt1's GPG key
    28aa476 build(deps): bump github.com/opencontainers/runc from 1.1.4 to 1.1.5
    ae18699 build(deps): bump github.com/docker/docker
    7300210 build(deps): bump github.com/docker/cli
    050016d build(deps): bump github.com/compose-spec/compose-go
    815d91b Support quiet in push cmd
    1fa35ba Refactor image sign and verify logic
    5fc6f2e build(deps): bump github.com/compose-spec/compose-go
    5482743 build(deps): bump actions/checkout from 3.4.0 to 3.5.0
    b6f9cfa Fix nerdctl help show the hidden commands
    512bc74 set container state error
    3c23201 build(deps): bump github.com/mattn/go-isatty from 0.0.17 to 0.0.18
    8bc1d42 rootlessutil: always claim non-rootless on non-Linux.
    89a78b4 Refactor run command networking options for Windows support.
    ade009b Fix the top command on Windows
    cbead58 Add support for showing image size on inspect
    75c7914 build(deps): bump github.com/ipfs/go-cid from 0.3.2 to 0.4.0
    ab2beab Completely skip syslog-related tests on Windows.
    dde73be test: rootless: main: use v2 config
    0586121 Upgrade cosign to 2.0.0 in tests
    3effa44 Add unit test for exposing devices to Windows containers
    5501d46 Add MAINTAINERS_GUIDE.md
    d12122a build(deps): bump actions/checkout from 3.3.0 to 3.4.0
    2d0c580 build(deps): bump github.com/compose-spec/compose-go
    f42f125 build(deps): bump actions/setup-go from 3 to 4
    b455f38 build(deps): bump github.com/containerd/nydus-snapshotter
    1780943 build(deps): bump github.com/klauspost/compress from 1.16.0 to 1.16.3
    874894d build(deps): bump github.com/fatih/color from 1.14.1 to 1.15.0
    9a6810b update containerd (1.7.0)
    02c83a1 build(deps): bump github.com/containerd/nydus-snapshotter
    6e58c63 build(deps): bump github.com/containerd/containerd
    ff6ec3c build(deps): bump github.com/containerd/containerd
    ee64917 Drop dependency on ctr/commands
    52d5787 Drop dependency on ctr/commands/content
    74fc0b1 Drop dependency on ctr/commands/tasks
    23f9c6e remote snapshotters: migrate to containerd-based label management
    d5f917f build(deps): bump github.com/containerd/containerd
    2eb25f1 Port Windows device support from containerd
    4d02668 build(deps): bump golang.org/x/crypto from 0.6.0 to 0.7.0
    fcb42d6 Add notation signing and verification
    361c987 build(deps): bump golang.org/x/net from 0.7.0 to 0.8.0
    df08a17 handle container deps removal with postsop hooks
    b2ac061 build(deps): bump github.com/containerd/containerd
    00ea98e Update naming of filter containers function && `container list` handler
    b50f0b6 build(deps): bump github.com/compose-spec/compose-go
    5e6000d build(deps): bump github.com/containerd/nydus-snapshotter
    ad6ed08 Fix `operation not permitted` with systemd-homed
    c93f4c8 build(deps): bump github.com/containerd/go-cni
    54cb1c4 build(deps): bump github.com/containerd/nydus-snapshotter
    52532dc update containerd (1.6.19)
    5108bb4 update Kubo (0.18.1)
    dd87b58 update Nydus (2.1.4)
    760d136 update BuildKit (0.11.3)
    8c8630e build(deps): bump github.com/klauspost/compress from 1.15.15 to 1.16.0
    2905b88 build(deps): bump github.com/containerd/containerd
    f386373 add network in use check to `compose down`
    a30e765 feat: resolve special ip host-gateway
    ca5f02f cmd/compose: add support for profiles
    73b8ebd build(deps): bump github.com/opencontainers/runtime-spec
    11dc28d build(deps): bump github.com/vishvananda/netns
    c03d691 update system prune flag `--all` confirm tooltip
    cf18cc4 build(deps): bump github.com/containerd/nydus-snapshotter
    dab24b5 Refactor system prune command flag process
    84bec01 refactor(container-list): separate main logic out of printing logic
    5b481ea Update command-reference system/image prune --all optional
    ef06dcb refactor(container): refactor cp flag
    795c75c func Save shouldn't create file from options.Output
    a303ab1 fix: `options.Stdout` should be used instead of `os.Stdout`
    01cdaf9 Make system prune all flag optional
    754f134 Fix unsupported restart policy message
    7c78c80 make confirm logic in `volume prune` be consistent with other Prune
    0996732 Fix rmi err checking containers with deleted image
    d688365 build(deps): bump github.com/compose-spec/compose-go
    195da3d CI: test compilation with an old release of Go
    57165af update Go (1.20)
    e30503c Add TestRunAddGroup_CVE_2023_25173
    6b9fc94 build(deps): bump github.com/containerd/containerd
    fa9f627 Build containerd and runc for specific arch with xx
    484c853 `types.KillOptions` > `types.ContainerKillOptions` to be consistent
    abb1da2 Fix the rename command on Windows
    12cdfe6 build(deps): bump github.com/compose-spec/compose-go
    efed3ae Fix images output check bug
    0e13baa make prune to remove dangling images only
    5e60bfb build(deps): bump golang.org/x/net from 0.6.0 to 0.7.0
    ba8545f Retag commonimage before loading to ensure it does not fail.
    3ad3e1e build(deps): bump github.com/docker/docker
    ec78af9 build(deps): bump github.com/docker/cli
    8aed73e Refactor container prune and rename command flagging process
    8fadc65 test for MergeEnvFileAndOSEnv
    587e627 Split rootless driver tests by network driver and portdriver.
    371ec29 build(deps): bump golang.org/x/crypto from 0.5.0 to 0.6.0
    cd1e43e build(deps): bump github.com/containerd/go-cni from 1.1.7 to 1.1.8
    2e05e06 build(deps): bump golang.org/x/net from 0.5.0 to 0.6.0
    b584d31 Add more comments to imgutil pull
    67df79e test for volume create command
    50b4289 build(deps): bump golang.org/x/term from 0.4.0 to 0.5.0
    402a1a8 accept Ctrl-C in cri log viewer
    8db1886 Cache go artifacts that are not tested within docker
    84e4cad Combine image filter logic to imgutil
    6a5e423 Combine image options types
    ff5f333 Optimize id walkers and muti error handling
    faae24a build(deps): bump golang.org/x/sys from 0.4.0 to 0.5.0
    d0e36b6 refactor image prune flag
    3eedefa refactor: container list flagging process
    1802fe3 build(deps): bump github.com/docker/cli
    c078dea Refactor (un)pause in nerdctl and compose
    1e5120b build(deps): bump github.com/docker/docker
    d8d409b build(deps): bump github.com/containerd/nydus-snapshotter
    f60251b build(deps): bump docker/build-push-action from 3.3.0 to 4.0.0
    47c094a docs: fix internal links to other Markdown docs.
    efa2c28 Mark `cri` log viewer as experimental
    34e5711 typo: Encoode -> Encode
    6240ed7 go.mod: github.com/containerd/accelerated-container-image v0.6.0
    9dae8e5 compose: show detailed errors again
    2220c08 update gotestsum (1.9.0)
    6b48134 update Kubo (0.18.0)
    3e649f0 update Nydus (2.1.3)
    0767970 update BuildKit (0.11.2)
    b9d9dfb Update CNI plugins (1.2.0)
    bdb97a3 update containerd (1.6.16)
    1ba5b93 go.mod: github.com/containerd/containerd v1.7.0-beta.3
    2ab87da refactor: extract main logic of image.List
    af317f0 refactor: move unpackedImageSize to imgutil
    ab92b4f ipfs: move to `net/http`-based implementation instead of binary-based one
    143a1a1 refactor: container wait flagging process
    aee0d8a refactor image save flag
    0f254af build: propagate SOURCE_DATE_EPOCH from the client env
    65eeaec refactor: system events flagging process
    72f447f [Refactor] Refactor the (container) pause command flagging process
    5d35581 [Refactor] Refactor the new client outside pkg/cmd.
    efe04d9 refactor restart flag
    6db805f Update readme for dangling image support
    c59b88b Bump github.com/klauspost/compress from 1.15.14 to 1.15.15
    ca0af1b Bump github.com/docker/cli
    0823d99 Deduplicate client and option creation in inspect
    90baad8 Move client create out of pkg/cmd in inspect cmds
    318ec06 refactor container top
    ea9ac34 Fix: inspect multiple networks stops at first inspect fail
    609c264 Bump github.com/docker/docker
    9c61793 Bump github.com/fatih/color from 1.13.0 to 1.14.1
    d50d490 Bump golangci/golangci-lint-action from 3.3.1 to 3.4.0
    8d9d83d refactor exec flag
    801320a [Refactor] Refactor the container start command flagging process
    192ed67 cmd/nerdctl: use canonical filenames (e.g., run.go -> container_run.go)
    b5c4ca7 mv pkg/cmd/info/info.go pkg/cmd/system/info.go
    32d796f [Refactor] Refactor the IPFS command flagging process
    105aacb refactor: container stop flagging process
    fb20478 refactor: container logs flagging process
    9470efa refactor: pass an io.Writer to image.List
    00cc517 refactor commit flag
    71d7b8b [Refactor] Move the function reconfig for container from cmd to pkg/containerutil.
    85d2283 refactor image remove command flag
    1316fd2 [Refactor] Reorder the method argument ordering in pkg/cmd
    a09ce88 refactor: move stopContainer to containerutil
    0dcf6ab add comment for api types
    8cb887a [Refactor] Move generateSharingPIDOpts from cmd to pkg/containerutil
    7eae969 Bump github.com/compose-spec/compose-go from 1.8.2 to 1.9.0
    0088e84 cmd/nerdctl: withBindMountHostIPC: slight refactor
    eab7e67 [Refactor] Move withBindMountHostProcfs from cmd to pkg/containerutil
    eec294d refactor: move updateContainerStoppedLabel to containerutil
    7ad50eb Add Windows HyperV container mode
    a108460 Move command reference to a separate doc
    0517682 refactor: consolidate main logic of volume.List into volume.Volumes
    caf406f refactor image info flag
    eada6de refactor image pull flag
    b829764 refactor: image tag flagging process
    1089061 Increase CI timeout
    b726a3a Refactor the network command flagging process
    572d790 Bump github.com/containernetworking/plugins from 1.1.1 to 1.2.0
    76fb67f Refactor container inspect
    287e0af [Refactor] Move getContainerNetNSPath from cmd to pkg/containerutil
    9db3857 [Refactor] Refactor the namespace command flagging process
    ad635da add support logs for namespace k8s.io
    0c46a70 [refactor] Adjust code style for apparmor command
    0b37d72 [refactor] Adjust the code style in `pkg/cmd/volume/*`
    fad078a refactor: login flagging process
    efb501c [Refactor] Move exit_coder from cmd to pkg/exit_coder
    5de2d33 Bump docker/build-push-action from 3.2.0 to 3.3.0
    393e207 Refactor nerdctl rm
    2581da9 [Refactor] Refactor the image_* command flagging process
    e49e9be [Refactor] Refactor the kill command flagging process.
    1d7c743 Refactor network list
    a91f502 Bump docker/metadata-action from 4.2.0 to 4.3.0
    cd5892f go.mod: github.com/docker/docker v23.0.0-rc.2+incompatible
    4f33d57 CI: ensure that ./pkg/... is decoupled from the CLI packages
    23af1bb nerdctl system prune: drop Go dependency on BuildKit
    b083a6e update BuildKit (0.11.0)
    422e826 tests: rmiAll: prune content blobs
    6f1c8eb pkg/cmd: Ls -> List
    361099e mv pkg/cmd/load/load.go pkg/cmd/image/load.go
    99ba431 mv pkg/cmd/build pkg/cmd/builder
    ba01a64 Add nerdctl builder build command
    907fb61 Fix rename command readme
    391bb6a Add ability to run Hostprocess containers
    3de4c8c Bump docker/metadata-action from 4.1.1 to 4.2.0
    f54251c [Refactor] Refactor all the GlobalCommandOptions from pointer to value reference
    4c1097b [Refactor] Refactor the images command flagging process
    6dbeba5 Use current console when attaching a tty container
    bf00c2a ipfs: allow configuring ipfs daemon address
    b07417f [Refactor] Refactor the compose command flagging process
    0c5328c Refactor the volume flagging process
    efaf3d6 [Refactor] Refactor the load command flagging process
    b9ce2af [Refactor] Refactor the build subcommand flagging process
    c2024be Fix the container will be created when `nerdctl run -d --rm`
    dc374a5 [refactor] Add global flag process helper function
    c246de7 Bump github.com/compose-spec/compose-go from 1.8.1 to 1.8.2
    cd82f2e Bump github.com/containerd/nydus-snapshotter from 0.4.1 to 0.5.0
    1488291 Bump actions/checkout from 3.2.0 to 3.3.0
    a18765b Bump golang.org/x/crypto from 0.4.0 to 0.5.0
    a9d28ac Bump golang.org/x/text from 0.5.0 to 0.6.0
    47eb362 Bump github.com/containerd/containerd from 1.7.0-beta.1 to 1.7.0-beta.2
    88cabdd CI: Pass GITHUB_TOKEN to containerd/project-checks
    156cf0e Bump github.com/klauspost/compress from 1.15.13 to 1.15.14
    49d28f0 Add a prefix to apparmor command options to avoid conflict
    30b09eb [Refactor] Move the Config Struct from cmd/main.go to pkg/config
    c79d835 Refactor the volume ls command flagging process
    e5b76f4 run: Add cgroup-parent flag
    5a21b84 tests: Use AssertOk for deferred cleanup
    6081141 [Refactor] Move containerd client helper from cmd to pkg/clientutil
    606261d Refactor the apparmor flagging process
    9d79e98 Filter dangling images using image filters.
    52b2fa0 [Refactor]: Move fmtutil from cmd to pkg/formatter
    3dc21df Bump github.com/mattn/go-isatty from 0.0.16 to 0.0.17
    426208f feat: add `--remove-orphans` flag to `compose down`
    0258743 Make nerdctl save work with image ids
    17800d1 run: Consolidate namespace options
    359521e run: Add --uts flag
    c7487db fix can't save image by image id
    8038d41 retain custom hosts outside markedRegion
    0c495fc setPlatformOptions: Change signature
    4e33afe Refactor restart flag process in update command
    d210d08 add update restart policy
    5d0d3cc remove processed TODO
    b7c39f7 Bump github.com/containerd/nydus-snapshotter from 0.4.0 to 0.4.1
    858b7be Bump github.com/klauspost/compress from 1.15.12 to 1.15.13
    5726ecd Disable default hostname when network is set to container mode
    5546d6d IPFS: use ipfs binary instead of library
    ace02c1 Bump github.com/compose-spec/compose-go from 1.8.0 to 1.8.1
    181e5a3 SetInterspersed(false) for compose run
    38d03da Add compose create command
    ae7796c Fix and make compose start work with compose create
    a0a4006 Clean test duplication
    9463f3a Fix a bug that goroutine refers loop variable
    c67b102 Support NewTerminal & Detached mode
    162602b Add RequireExecutable to testutil
    07e3c37 Bump github.com/docker/cli
    43a7150 Minor format change to pkg/composer/up.go
    2d51277 Fix compose dependency order
    06f9af8 Bump github.com/containerd/containerd from 1.7.0-beta.0 to 1.7.0-beta.1
    44b6a6c Bump github.com/klauspost/compress from 1.15.12 to 1.15.13
    385e1fd Add compose start command
    73777ec tentative defalke testRunWithJsonFileLogDriver*
    0575de8 feat: use buildkit API for clean up build cache
    2e13172 MAINTAINERS: add Jin Dong(djdongjin) as a REVIEWER
    894abcf feat: support for multi-arch image build support
    53c7293 Bump actions/checkout from 3.1.0 to 3.2.0
    e541997 Make titles Bold in nerdctl output
    af06549 go.mod: github.com/ipfs/go-merkledag v0.8.1
    dea3ad9 go.mod: accelerated-container-image v0.5.3-0.20221209054854-fbdabc5a08b6
    f04c7c0 Fix timeout arg bug
    e771508 Fix: Delete the used network in other namespace
    e833819 Bump github.com/ipfs/interface-go-ipfs-core from 0.7.0 to 0.8.0
    8fab27b Fix: Deleting multiple networks stops at first delete fail
    276be12 build: improve error message
    94116f6 CI: add gotestsum with --rerun-fails=2
    e2dbab5 Upgrade indirect dependancy go-libp2p-core to v0.20.1
    6d03d64 pkg/idutil/netwalker: fix nil pointer dereference
    9271dcd Add compose port
    f0a5c61 Add compose top
    e772c36 update fuse-overlayfs (1.10)
    b44116e update containerd (1.6.12)
    3442558 Add compose pause and unpause
    b669481 docs: minimum oom-score-adj for rootless containerd
    3bdb39f Bump golang.org/x/crypto from 0.3.0 to 0.4.0
    e213a7a Bump golang.org/x/net from 0.3.0 to 0.4.0
    09fa4f5 Bump golang.org/x/net from 0.2.0 to 0.3.0
    a48a342 Improve compose exec test
    40c44ca Fix env flag in compose exec
    677c433 fix: multi-image files load output
    4404583 Add unit tests for default network creation.
    f530136 Add usage output to commands without arguments
    368ca30 deflake TestNetworkRemoveById
    84ed0d6 Add compose exec command
    69cdf19 Bump golang.org/x/text from 0.4.0 to 0.5.0
    70a864d Bump golang.org/x/sys from 0.2.0 to 0.3.0
    41cdacf Make `netutil.CNIEnv` stateless.
    6baa5f6 Prevent double-creation of nerdctl default network.
    fab8702 Add filter by image support by reference
    16dc40f Change run to AssertOK in network test
    4525c82 deflake network tests
    01ca115 Moved NetworkWalker to another package
    9165474 Export NetworkConfig struct
    98054c2 Add the option to remove a network by id
    2b6b614 Remove unnecessary lock
    aa82640 Improve compose test
    2600e0f Bump github.com/compose-spec/compose-go from 1.7.1 to 1.8.0
    1ca5e90 doctoc docs/faq.md
    51c570b docs: explain how to get rootless containerd socket address
    6da1acb allow container network_mode in compose
    a5ce077 Add json format support in compose ps
    12e4f61 fix network rm: no running tasks
    9013bdc Deflake TestCompletion
    9a184ed Bump github.com/containerd/nydus-snapshotter from 0.3.3 to 0.4.0
    b2735d1 Refactor the logging driver process function
    74aff28 go.mod: add a comment about indirect dependency on btcsuite/btcd/btcec
    150547f Add an extra validation when remove the network
    ff9775b update Kubo (0.17.0)
    a388cf0 update containerd-fuse-overlayfs (1.0.5)
    f13819e update Nydus (2.1.1)
    f9df0c8 update containerd (1.6.10)
    b6f90fc update RootlessKit (1.1.0)
    977336b MAINTAINERS: add Manu Gupta (manugupt1) as a REVIEWER
    f1f33d8 MAINTAINERS: promote Ye Sijun (junnplus) from a REVIEWER to a COMMITTER
    1767349 MAINTAINERS: add Hanchin Hsieh (yuchanns) as a REVIEWER
    e830a44 Bump github.com/Masterminds/semver/v3 from 3.1.1 to 3.2.0
    a4099c7 Bump github.com/compose-spec/compose-go from 1.7.0 to 1.7.1
    8523663 default network creation behavior
    daa99c3 Refactor remove containers in compose
    3c5b069 Add support for filtering images by labels.
    f07b3f5 Add compose images command
    5fea9dc Add yaml linter
    72f74f5 Fix block issue for `stats -a` command when there is dead container
    b318c01 Add compose rm command
    579a0e3 binfmt: support /proc/sys/fs/binfmt_misc/rosetta
    0c7f619 Resolve flaky TestRunWithLogBinary
    671be9a Add project name log in some tests
    fa8caf9 Add compose restart command
    6251c46 Add support to overlaybd convert
    5b69fad Bump github.com/tidwall/gjson from 1.14.3 to 1.14.4
    cdb5320 MAINTAINERS: promote Zheao Li from a REVIEWER to a COMMITTER
    5fb66b8 Ensure compose down is called in tests
    1ea5ab8 Reorder internalLabels
    4779fa7 Delete setPlatformContainerOptions()
    6596486 Simplify internalLabels
    4f87ff0 fix stats collect bool var
    e367097 Use service label to check orphan container
    e65ac4d relax "containerIP assignment is not supported in rootless mode" error
    38f4bcb Copy host env to container for env/envfile option
    e7674c8 Deny rm image action when this image is used by running container
    bf0aacf Update command use
    bef23b9 go.mod: unfork hashicorp/golang-lru
    dd0ff4b restrict the oom_score_adj value when running in a userNS
    b532478 Support for ephemeral ports
    2d91967 add-golint-revive
    292d849 Bump golang.org/x/crypto from 0.2.0 to 0.3.0
    cfa27df Fix keyless mode in compose up|run
    9a0621f Add cosign in compose run, up, pull, push
    229dad2 fix-blkio-weight-panic
    47e26a7 golangci lint add unconvert check
    7e8a1cf update-golangci-lint 1.50.1
    c2523f0 Add more flags for image conversion
    89243da Bump github.com/multiformats/go-multiaddr from 0.7.0 to 0.8.0
    9148a60 Bump golangci/golangci-lint-action from 3.3.0 to 3.3.1
    b0434b5 Enable image convert to customize zstd compression level
    65981f1 Let  calculate the number of unique images
    f23d8c9 Refactor stop containers
    63ff756 Fix `--time` argument for `nerdctl restart` command
    a03f8ae update BuildKit (0.10.6)
    af44dbb update stargz-snapshotter (0.13.0)
    48e9c0f Refactor `nerdctl logs` functionality to pkg/logging.
    005ad3c Enable 'nerdctl/log-uri' label passing on Windows.
    287d7a2 Bump containerd dependency in go.mod.
    f9a7eb4 Bump github.com/containerd/nydus-snapshotter from 0.3.2 to 0.3.3
    805e63c Remove compose stop from unimplemented
    e6c5c90 Add more specific description about restart and kill command
    cf3430f Bump github.com/ipfs/go-ipfs-files from 0.1.1 to 0.2.0
    086e4eb Small fix on bridge ipam
    8cb1679 Bump github.com/compose-spec/compose-go from 1.6.0 to 1.7.0
    9593367 Improve the documenation of 'compose build --progress'
    41d5019 Bump github.com/containerd/nydus-snapshotter from 0.3.1 to 0.3.2
    d43b1f1 Bump github.com/coreos/go-systemd/v22 from 22.4.0 to 22.5.0
    cbae86b Update getRestart doc in compose
    09f9ed6 Remove DockerIncompatible
    85cf730 switch master to main
    5836776 removes the obsolete //+build lines with go1.18
    a92afb0 CI: support main branch
    e688de7 Add a dangling image prefix when tag name is not specified.
    bc69897 containerd-rootless-setuptool.sh: fix CONTAINERD_SNAPSHOTTER isn't recognized
    a9936f3 Bump github.com/docker/cli
    55b8629 Bump github.com/spf13/cobra from 1.6.0 to 1.6.1
    0d14fbe Bump github.com/containerd/nydus-snapshotter from 0.3.0 to 0.3.1
    91517ae Bump github.com/docker/docker
    e46eb50 Add support for converting nydus images to `nerdctl image convert`
    3df677d Bump golangci/golangci-lint-action from 3.2.0 to 3.3.0
    ec8e352 Support `nerdctl build` custom outputs alias of type local
    a13e1f0 Add '--mode' to 'network inspect' in README
    8c59b2b Bump github.com/containerd/nydus-snapshotter from 0.3.0-rc.3 to 0.3.0
    b004a8e Dockerfile: demo: enable bash completions
    d2e5dc8 Dockerfile: demo: configure BuildKit to use containerd worker
    132dc09 release note: clarify the compatible containerd versions
    6fb9de5 update Kubo (0.16.0)
    29f718d update stargz-snapshotter (0.12.1)
    6c80673 update BuildKit (0.10.5)
    3e367ab update imgcrypt (1.1.7)
    98eac1e Bump github.com/docker/cli
    666fece Add more examples of Kubernetes (Kind) + IPFS
    1f839b2 Bump github.com/docker/docker
    f83a913 Support --pid=container:xxx for `nerdctl run` cmd
    6d5e5a2 Bump golang.org/x/text from 0.3.8 to 0.4.0
    490ca8c Bump docker/metadata-action from 4.1.0 to 4.1.1
    6c3a519 Bump github.com/containerd/stargz-snapshotter/ipfs from 0.12.0 to 0.12.1
    ef50c08 Bump github.com/containerd/stargz-snapshotter from 0.12.0 to 0.12.1
    0a8e2c7 Bump github.com/containerd/imgcrypt from 1.1.6 to 1.1.7
    174119d Bump containerd/project-checks from 1.0.2 to 1.1.0
    5fce296 Bump github.com/docker/docker
    a446c9a Bump github.com/docker/cli
    a9dda52 Support build args without explicit value
    b4036f6 Support `log-path` opt for json-file logging driver
    ac6c767 Bump docker/login-action from 2.0.0 to 2.1.0
    32f541e Bump docker/metadata-action from 4.0.1 to 4.1.0
    b963a6e Bump docker/build-push-action from 3.1.1 to 3.2.0
    82f806a Use sys/windows to lock file
    1708238 Bump github.com/spf13/cobra from 1.5.0 to 1.6.0
    0ede9c8 Bump golang.org/x/text from 0.3.7 to 0.3.8
    bfc44ae Bump gotest.tools/v3 from 3.3.0 to 3.4.0
    adca3e4 Support argument `--mac-address` for nerdctl run command
    02ad394 Bump actions/checkout from 3.0.2 to 3.1.0
    ea90e56 follow-up TestLoadStdinFromPipe
    0bcedac Fix nerdctl load stdin for pipes.
    a83d5b7 Drop dependency on github.com/docker/docker/registry
    184a45e Makefile: Set VERSION & REVISION only if unset
    ca696e5 Bump github.com/Microsoft/go-winio from 0.5.2 to 0.6.0
    5ec1a8f Bump github.com/compose-spec/compose-go from 1.5.1 to 1.6.0
    0a5016d Support `syslog` driver for nerdctl
    21c6c89 fix flag conflicts
    3e1b10d Add `nerdctl compose version` command
    2308828 Create an anonymous volume when --mount is specified.
    82b9f41 Fix typo: builctl -> buildctl
    80bb6cb Bump github.com/coreos/go-systemd/v22 from 22.3.2 to 22.4.0
    3603055 Update images usage to contain positional arguments
    971d9cb Bump github.com/compose-spec/compose-go from 1.5.0 to 1.5.1
    5e93fa5 Change login and logout msg from Docker registry to container registry
    0273c00 Implements logURI to support 3rd party ctrd shim logger
    6de0662 Bump github.com/docker/cli
    e953d09 Bump github.com/docker/docker
    17a58aa Bump github.com/multiformats/go-multiaddr from 0.6.0 to 0.7.0
    70bea8c Bump up buildg to v0.4.1
    0b21ba7 Bump github.com/containerd/nydus-snapshotter
    42f8a10 ServerAddress: Refactor logic and preserve debug logging
    e53cde0 Fix crun incompatibility `cannot set swap limit without the memory limit`
    ba373e5 cmd/nerdctl: simplify --help
    37c045d update bypass4netns (0.3.0)
    3d6e51a typo
    1bbae54 Randomize container names in compose run
    7418f35 Bump github.com/docker/go-units from 0.4.0 to 0.5.0
    e28ca33 update bypass4netns (0.2.3)
    c8ab6c3 update Kubo (0.15.0)
    6b7a2d6 update BuildKit (0.10.4)
    aeb3342 update runc (1.1.4)
    7828a38 README.md: `nerdctl compose run` is now implemented
    b5c027b Add tests and docs for compose run command
    3296c14 Implement StdinOpen and Tty options in `compose`
    fbd8ba0 Add compose run command template
    0691b36 Support filter argument for `nerdctl ps` command
    fdaaf34 replace use of deprecated sys.RunningInUserNS
    3616607 remove dep between detach and cid in compose run
    8c3cf4a golangci-lint: remove deprecated linters
    fb57539 feat: add an experimental config in toml
    ed70c23 Support filter argument for nerdctl volume ls command
    4929d19 Support filter argument for `nerdctl images` command
    e62f44c Bump github.com/containerd/nydus-snapshotter
    488921c Bump github.com/compose-spec/compose-go from 1.4.0 to 1.5.0
    5bff48b run: add a new privileged-without-host-devices option
    0d3beee Bump github.com/tidwall/gjson from 1.14.2 to 1.14.3
    5dc9863 pkg/testutil: remove unused GolangImage
    df84d82 update Go (1.19)
    2d477e3 go fmt (1.19)
    44063b9 go mod tidy (1.19)
    b36c69f update containerd (1.6.8)
    24c851c Bump github.com/mattn/go-isatty from 0.0.14 to 0.0.16
    e70f7d7 exclude default bridge network in `network prune`
    b3d3958 Make the ServerAddress optional for the main docker registry.
    3245439 Bump github.com/containerd/nydus-snapshotter
    d347673 nit: remove unused variable and unreqd variable
    b71febc fix stats output
    4c2140d upgrade containerd to main
    b1893b2 Bump github.com/tidwall/gjson from 1.14.1 to 1.14.2
    20e319e Bump docker/build-push-action from 3.1.0 to 3.1.1
    2a7a712 Add ability to show sizes in volume ls as well
    013ebdc Bump github.com/containerd/nydus-snapshotter

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-04-05 16:03:56 -04:00
Bruce Ashfield
379c743852 lxc: update to 5.0.2-tip
Bumping lxc to version lxc-5.0.2-1-g727adc052, which comprises the following commits:

    727adc052 drop broken lxc-test-fuzzers
    d57173681 Release LXC 5.0.2

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-04-05 16:03:56 -04:00
Bruce Ashfield
46fb24baad k3s: update to v1.25.8
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-04-05 16:03:56 -04:00
Bruce Ashfield
71f56e0486 cobra: update to 1.6.0
Bumping cobra to version v1.6.0-32-g4dd4b25, which comprises the following commits:

    4dd4b25 Update main image to better handle dark background (#1883)
    45360a5 Allow sourcing zsh completion script (#1917)
    c8a20a1 Document suggested layout for subcommands (#1930)
    b197a24 Update projects_using_cobra.md (#1932)
    9e6b58a update copyright year (#1927)
    fb36524 ci: test Golang 1.20 (#1925)
    c7300f0 ci: deprecate go 1.16 (#1926)
    567ea8e Add support for PowerShell 7.2+ (#1916)
    3daa4b9 Add keeporder to shell completion (#1903)
    a516d41 Removes stale bot from GitHub action (#1908)
    e839bb3 build(deps): bump golangci/golangci-lint-action from 3.3.1 to 3.4.0 (#1902)
    87ebcd8 Update shell_completions.md (#1907)
    8b8ee87 Improve MarkFlagsMutuallyExclusive example in User Guide (#1904)
    d022c0f Add documentation about disabling completion descriptions (#1901)
    4fa4fdf build(deps): bump github.com/inconshreveable/mousetrap (#1872)
    b4f979a completions: do not detect arguments with dash as 2nd char as flag (#1817)
    bf11ab6 fix: func name in doc strings (#1885)
    fdffa5a Update badge route (#1884)
    f25a3c6 fix: conflict import name with variable (#1879)
    9235920 ci: deprecate go 1.15 (#1866)
    a6f198b Update kubescape org (#1874)
    7bb1440 build(deps): bump golangci/golangci-lint-action from 3.2.0 to 3.3.1 (#1851)
    6200c8e Makefile: add target richtest (#1865)
    c6b9971 fix: force ForEach-Object to return array in pwsh completion (#1850)
    4305498 Update stale.yml (#1863)
    ad6db7f Create unit test illustrating unknown flag bug (#1854)
    6b0bd30 fix: don't remove flag value that matches subcommand name (#1781)
    cc7e235 Add Sia to projects using Cobra (#1844)
    10cf7be Check for group presence after full initialization (#1839)
    4b9d00d Replace deprecated ExactValidArgs with MatchAll in user_guide and shell_completions example (#1836)
    badcce1 style(bash-v2): various cleanups (#1702)
    1424b7b Add Constellation to projects using cobra. (#1829)
    8607918 feat: make InitDefaultCompletionCmd public (#1467)
    2169adb Add groups for commands in help (#1003)
    212ea40 Include --help and --version flag in completion (#1813)
    d4040ad Allow user to add completion for powershell alias (#1621)
    23fc5e0 ci: add minimum GitHub token permissions for workflows (#1792)
    93d1913 Add OnFinalize method (#1788)
    07034fe build(deps): bump actions/stale from 5 to 6 (#1815)
    3dc9761 Add allero to list of projects using cobra (#1819)
    7039e1f Add '--version' flag to Help output (#1707)
    fce8d8a Expose ValidateRequiredFlags and ValidateFlagGroups (#1760)
    a281c8b Document option to hide the default completion cmd (#1779)
    459fc5f ci: add workflow_dispatch (#1387)
    6d978a9 add missing license headers (#1809)
    4065a33 ci: use action/setup-go's cache (#1783)
    7e289f4 Adjustments to documentation (#1656)
    fe08012 Rename Powershell completion tests (#1803)
    d689184 Support for case-insensitive command names (#1802)
    70e53f6 Deprecate ExactValidArgs() and test combinations of args validators (#1643)
    2e8ba6f Use correct stale action `exempt-` yaml keys (#1800)
    0580724 With go 1.18, we must use go install for a binary (#1726)
    2a7647f Clarify SetContext documentation (#1748)
    7045405 ci: test on Golang 1.19 (#1782)
    22b6179 fix: show flags that shadow parent persistent flag in child help (#1776)
    dbf85f6 Update gopkg.in/yaml.v2 to gopkg.in/yaml.v3 (#1766)
    f911c0b fix(bash-v2): activeHelp length check syntax (#1762)
    7790bf9 fix: correct command path in see_also for YAML doc (#1771)
    6bf8cd8 build(deps): bump github.com/inconshreveable/mousetrap (#1774)
    965924a docs: add zitadel to the list (#1772)
    162534f doc: Add Okteto for projects using Cobra (#1759)
    a0aadc6 Spelling for GitHub CLI (#1744)
    69083f8 Add Cilium to projects using Cobra (#1745)
    bba9331 doc: Add CloudQuery for projects using Cobra (#1742)
    3d38d18 Add KubeVirt as a project using cobra (#1741)
    06b06a9 Bump golangci/golangci-lint-action from 3.1.0 to 3.2.0 (#1697)
    5f2ec3c Update shell completion to respect flag groups (#1659)
    b9ca594 use errors.Is() to check for errors (#1730)
    ea94a3d undefined or nil Args default to ArbitraryArgs (#1612)
    7c9831d Fix handling of descriptions for bash v3 (#1735)
    ed7bb9d Add unit test for fish completion (#1515)
    f464d6c Add Active Help support (#1482)
    7dc8b00 Bump actions/setup-go from 2 to 3 (#1660)
    87ea180 Modify brew prefix path in macOS system (#1719)
    ca8e3c2 Add Pulumi as a project using cobra (#1720)
    37d481d fix: Don't complete _command on zsh (#1690)
    5b11656 perf(bash-v2): read directly to COMPREPLY on descriptionless short circuit (#1700)
    ffa8860 Change links from http:// to https:// (#1695)
    e1ded5c fix(bash-v2): skip empty completions when filtering descriptions (#1691)
    8afe9d1 Bump github.com/cpuguy83/go-md2man/v2 from 2.0.1 to 2.0.2 (#1688)
    25f5bb5 Prefer ReplaceAll instead of Replace(..., -1) (#1530)
    9e88759 perf(bash-v2): speed up filtering menu-complete descriptions (#1692)
    fb80311 perf(bash-v2): speed up filtering entries with descriptions (#1689)
    95d7df1 perf(bash-v2): short-circuit descriptionless candidate lists (#1686)
    f17e5a2 style(bash): out is not an array variable, do not refer to it as such (#1684)
    09d6ba6 perf(bash-v2): standard completion optimizations (#1683)
    4f0facb style(bash-v2): out is not an array variable, do not refer to it as such (#1681)
    2722a75 perf(bash-v2): use backslash escape string expansion for tab (#1682)
    d8184d3 Fix typo sh completion docs (#1678)
    b9460cc Bump codelytv/pr-size-labeler from 1.8.0 to 1.8.1 (#1661)
    89d7b83 Add Polygon Edge as a project using Cobra (#1672)
    68b6b24 Add ability to mark flags as required or exclusive as a group (#1654)
    bf6cb58 Wrap printf tab with quotes (#1665)
    9d15fe6 Update stale-bot (#1609)
    5271cf4 ci/test: RICHGO_FORCE_COLOR (#1647)
    ab42c93 Adds size labeler GitHub action (#1610)
    52e6099 Bump actions/checkout from 2 to 3 (#1619)
    5414d3d Bump golangci/golangci-lint-action from 2 to 3.1.0 (#1615)
    cf0df73 Bump actions/labeler from 3 to 4 (#1620)
    3723151 Bump actions/cache from 2 to 3 (#1640)
    1568491 Bump actions/stale from 1 to 5 (#1618)
    d622355 Changed branch name in the cobra generator link to 'main' (#1645)
    03c3eb7 Add Kubescape to projects (#1642)
    3a1795b Fix Command.Context comment (#1639)
    f848943 Add Command.SetContext (#1551)
    5d066b7 Introduce FixedCompletions (#1574)
    94e552d Add backwards-compatibility tests for legacyArgs() (#1547)
    8cc7be2 feat: Add how to load completions in your current zsh session (#1608)
    65b1195 ci: test on Golang 1.18 (#1635)
    37463cf Remove CHANGELOG.md as it isn't updated (#1634)
    81d27c8 fix some typos (#1625)
    5b2b9e9 Removes viper dependency by removing cobra/ CLI tool (#1604)
    9369465 labeler: fix syntax
    e1b831e Updates labeler for new labels (#1613)
    8267283 Add MAINTAINERS file (alphabetical order) (#1545)
    6d2dc43 Add Pixie to projects. (#1581)
    a599632 Fix install command (#1576)
    7cabfeb Update Go Doc link and badge (#1593)
    e04ec72 Bump license year to 2022 in golden files (#1575)
    cb9d7b1 Bump github.com/spf13/viper from 1.10.0 to 1.10.1 (#1567)
    178edbb Bump github.com/spf13/viper from 1.9.0 to 1.10.0 (#1561)
    9054739 Remove __complete cmd for program without subcmds (#1563)
    19c9c74 Always include the os package import when generating the root command (#1557)
    01e05b8 Bump github.com/spf13/viper from 1.8.1 to 1.9.0 (#1554)
    36bff0a fix root.go.golden (#1552)
    1854bb5 Fix some typos (mostly found by codespell) (#1514)
    ff2c55e chore(ci): use golangci-lint-action (#1477)
    1beb476 fix: Duplicate error message from cobra init boilerplates (#1463)
    6f84ef4 Provide option to hide default 'completion' cmd (#1541)
    ee75a2b Remove trailing spaces from bash completion command description (#1520)
    25bab5a Fix invalid shell completion when used with ~/.cobra.yaml (#1510)
    3fed3ef Support different bash completion options (#1509)
    507caf5 completions: fix mixed tab/spaces indentation (#1473)
    c7a4421 fix: typo in {bash,zsh}_completions.go (#1459)
    c3573e2 Completion: Capitalize short desc, and remove extra space from long (#1455)
    dd40ab0 feat: improve completions help formatting (#1444)
    d298d79 Update shell_completions.md to have automatically rootcmd (#1372)
    6f19fa9 fix: unbound variables in bash completion (#1321)
    d65ba12 github: add dependabot configuration file (#1427)
    45e521e enable composing PositionalArgs (#896)
    9e1d6f1 args_test: add helper functions  (#1426)
    62a72cd fix(diff): use arg '--strip-trailing-cr' (#949)
    442031e Allow specifying licenses using their SPDX identifier (#1159)
    78969f9 Remove "Lesser" from header for GPL-2.0 template (#880)
    3c84bf8 Small correction in User Guide (#1009)
    3ba5f15 Projects using cobra update (#1454)
    bfacc59 Addressing typos identified by @marckhouzam
    2682562 Simplifying goGet function
    cf87fc4 Updating generator documentation and links
    c97b7ec Update documentation to reflect the module aware generator
    9388e79 Cobra generator now works within Go modules
    c9edb78 Change generator default license to none
    dcf42b2 Change generator to require opting in to viper.
    c0dd5cd Removing unused imports when not using Viper
    f09e947 readme: remove ToC, since it's now shown by GitHub (#1429)
    d2c0cb3 DisableFlagParsing must disable flag completion (#1161)
    c1973d3 Update projects-using markdown with Tanzu (#1501)
    4fd30b6 ci: test golang 1.16.x and 1.17.x too (#1425)
    2a52778 go.mod: cpuguy83/go-md2man/v2 v2.0.1 (#1460)
    56060d1 Add Meroxa CLI (#1377)
    de187e8 Fix flag completion (#1438)
    07861c8 Fix documentation (#1434)
    5738d6b Add install instructions for zsh on Mac OS (#1417)
    5d46ac9 custom comp: do not complete flags after args when interspersed is false (#1308)
    3c8a19e fix RegisterFlagCompletionFunc concurrent map writes error (#1423)
    2dea4f2 Bump to viper 1.8.1 (#1433)
    b361960 Bash completion V2 with completion descriptions (#1146)
    d0f318d ci: deprecate Travis CI
    8eaca5f drop mitchellh/go-homedir (#853)
    ace6b14 readme: split 'Getting Started' into 'user_guide.md'
    701fa6c chore(deps): update viper
    9a43267 fix home directory config not loading (#1282)
    4590150 Correcting misspelled words (#1349)
    c2e21bd Fix multiple fish completion issues (#1249)
    95d23d2 Fix zsh for DirectiveNoSpace and DirectiveNoFileComp (#1213)
    2d94892 Custom completion handle multiple shorhand flags together (#1258)
    6d00909 Pass context to completion (#1265)
    7223a99 powershell completion fix no file comp directive (#1363)
    06e4b59 Allow fish comp to support trailing empty lines (#1284)
    3ed6a39 ci/MSYS2: go install @latest (#1366)
    eb3b639 Bash completion variable leak fixes (#1352)
    b55fa79 Add PR labeler with pull_request_target (#1338)
    b312f0a Create 'completion' command automatically (#1192)
    ded486a Fix trailing whitespace in the powershell completion script (#1342)
    893ebf6 Fix typo
    be1efc8 Update CHANGELOG.md for v1.1.3
    7f95502 Update CHANGELOG.md for v1.1.2
    07445ea Copyedit shell-completion related documentation
    b73b344 ci: add GitHub Actions workflow 'Test' (#1339)
    652c755 Use golangci-lint (#1044)
    1d71ff0 Deprecate Go < 1.14 (#1323)
    1135bde Update gopkg.in/yaml.v2 to v2.4.0
    9df156e Cobra User Contract (#1292)
    ff416ad Revert "Add the ability to specify a filePostpender in GenMarkdownTreeCustom (#1270)" (#1317)
    23a6174 Add the ability to specify a filePostpender in GenMarkdownTreeCustom (#1270)
    4384b91 Bump license year to 2021 in golden files (#1309)
    a4ab3fa powershell completion with custom comp (#1208)
    471c9ac Add the new Twitch CLI to to projects_using_cobra.md (#1301)
    7df62f7 fix typos (#1274)
    39b5a91 README.md Readability Improvements (#1228)
    08c51e5 Add ORY Hydra & Kratos to projects_using_cobra.md (#1273)
    86f8bfd fix manpage building with new go-md2man (#1255)
    f32f4ef Don't use yaml.v2 2.3.0 which has a breaking change (#1259)
    142dfb1 Add example for making persistent flags required (#1135)
    723d0c3 Add tendermint and cosmos-sdk to the list of projects using cobra (#855)
    b97b5ea fix: fish output redirection (#1247)
    f64bfa1 Fix zsh completion not working on the first time in a shell session (#1237)
    40d34bc Fix stderr printing functions (#894)
    0bc8bfb Remove secondary go mod to prevent broken `go get` (#1233)
    7f8e83d Modifying "snake-case" to "kebab-case" for clarity. (#1196)
    8a39cb2 Bug fix in README (#1199)
    2a8d0f3 Adding Kool to list of projects using cobra (#1224)
    6c06523 add arduino-cli to projects using cobra (#1117)
    8a63648 Handle linebreaks in custom completions. (#1162)
    50258f1 Complete subcommands when TraverseChildren is set (#1171)
    02a0d2f doc: GenMarkdown skip Synopsis on empty long cmd (#1207)
    9ed1d71 bugfix/cli: Temporary fix for go get on cobra cli (#1200)
    8cfa4b4 Add documentation for Use (#1188)
    81e0311 modules: add a secondary go.mod to segregate CLI dependencies (#1139)
    5cdf8e2 Fix typo (#1187)
    a0b86e5 Correct a typo in doc/util.go (#1184)
    a738b60 Add CONTRIBUTING.md (#1183)
    96dc555 Update projects_using_cobra.md (#1147)
    0e27f22 Add slack badge to point to cobra slack channel (#1181)
    c6fe2d4 Improve zsh completion documentation (#1169)
    19e41cf Adding werf to projects using cobra (#1163)
    b95db64 Add golangci-lint in project using cobra (#1150)
    884edc5 update viper and pflag (#1012)
    675ae5f Fish does not accept - or : in vars (#1122)
    5d52907 Update README.md (#1154)
    207dc47 Close #1152 by upgrading yaml.v2 to v2.3.0 (#1153)
    2c5a0d3 Extend Go completions and revamp zsh comp (#1070) (#1070)
    0431872 Add completion for help command (#1136)
    ed7b60e YAML documentation contains "Usage" (#1037)
    1d3ac91 Update projects_using_cobra.md (#1113)
    94a87a7 disable periodic labeler (#1112)
    5155946 Ignore required flags when DisableFlagParsing (#1095)
    aa5badd Metal Stack CLI is using cobra as well (#1094)
    a7aaa7c replace labeler action with periodic-labeler (#1097)
    f8fdd17 Complete command names even if ValidArgs present (#1088)
    e392f32 Man pages won't have auto gen tag when option is disabled (#1104)
    41fd44e Fix cobra init cmd help documentation (#1108)
    44d55fb Fix cobra command README (#1106)
    11ba63f Add Helm as project using Cobra (#1103)
    090d94f Move projects using Cobra (#1090)
    8c638d3 Fixed typo. (#1087)
    a684a6d Fish completion using Go completion (#1048)
    7fead4b Remove/replace SetOutput on Command - deprecated (#1078)
    4741428 Add Github CLI to list of projects using Cobra (#1034)
    b84ef40 Rename BashCompDirectives to ShellCompDirectives (#1082)
    b80aeb1 Add support for custom completions in Go (#1035)
    138b98f add support for autolabel stale PR (#1075)
    d88d9a0 Add Labeler Actions (#1074)
    bbffa3a rm circle ci badge (#1073)
    f628835 Replace deprecated SetOutput func with SetOut and SetErr in test (#1053)
    6607e6b Partial Revert of #922 (#1068)
    95f2f73 Add short version flag -v when not otherwise set (#996)
    39cf99f leverage makefile to run build tasks (#976)
    3c26245 Correct documentation for InOrStdin (#929)
    0da0687 Add support for context.Context
    21cab29 fix: undefined er (#1039)
    89c7ffb Bump year on golden files (#1010)
    bf26895 Fix regression when calling *_custom_func (#1001)
    447f182 format tpl/main.go templates (#980)
    0d9d2d4 Revert change so help is printed on stdout again (#1004)
    b04b5bf substitute wrong word in md_docs (#998)
    77e4d5a Update md2man to v2.0.0 (#977)
    8a4b46f update viper to v1.4.0 (#953)
    c022f6f Update README.md (#944)
    48e6ac4 update doc w/ newer cmd/root.go example (#973)
    3745fcd add goreportcard to readme (#971)
    19cf35e fix: ensure that testproject is removed even after a failure (#948)
    606aa57  Used goimports to fix import order (#912)
    4f2877d clean(travis): remove shellcheck from before_install (#947)
    b80588d fix undefined cfgFile in documentation (#924)
    993cc53 Adjustments per PR review feedback from @bogem
    d851963 Correct all complaints from goimports
    51f06c7 Correct all complaints from golint
    9334a46 Return an error in the case of unrunnable subcommand
    9552679 Add idiomatic handling of go error in distinct main func
    af29f95 Add ignore of cobra posix binary and all of intellij generated files
    1c9c46d Update Generator Docs to reflect changes brought in #817 (#904)
    2d7544e fix missing newline in cmd/add (#905)
    9a31ddf Add Linkerd to list of projects using Cobra (#892)
    21f39ca bash: fix shellcheck errors (#889)
    f2b07da fixing linter issues
    b635726 considering stderr in UsageString
    e35034f Add tests
    cb27ce1 Deprecate and maintain backwards compatibility
    618bc00 Allow for explicit output to err/stderr
    0ea93dd Fixed linter issues
    4a716d1 Extending redirection to stdout, stderr, stdin
    5f23f55 Update README.md
    9eb9f5c Add gardenctl to projects build using Cobra
    2411ac5 remove unused struct fields
    984374f clean up testproject files after test executes
    11aa612 test add
    303a3e5 vgo - strip out unused methods
    0bb1506 remove commented field in struct
    2fea75b vgo - add command working
    3c42f84 fix duplicated dir
    221bae3 depricate package name flag
    b8ad19a reorder some operations
    732e4db vgo - trim some uneeded data from struct
    c7ac101 vgo - fixing up the add op to work with vgo
    3741457 add CommandTemplate
    50665e9 vgo - update golden templates
    642c3c7 vgo - compare generated files against golden files
    e993d53 vgo - take named directory or current wd
    04af6ae vgo - add todo
    c3b51f3 simplify test
    4c22a20 vgo - remove unused methods
    73b5215 vgo - fix format
    44c2d48 fix calling to createLicenseFile
    91dbcb7 remove commented code
    5b1685f vgo - generate license
    abab9aa vgo - add Create method to Project struct
    69420a9 vgo - create directory
    17dc9f8 fixing up templates more
    26d210e vgo - fixing up the root template
    c356c64 add .idea/* to gitignore
    80ea290 vgo-support - re-working code generator
    d658160 Add markdown file explaining support for PowerShell
    21ccc7b Add basic PowerShell completions
    e2c45ac Started working on Unified API for the various shell completions:
    601d830 typo in zsh-completions.md
    edbb671 zsh-completions: implemented argument completion.
    d262154 zsh-completion: tidy up function and variable names
    8822449 zsh-completion: added escapinng of single quotes in flag description.
    66a9880 zsh-completion: test to verify that we're always running on root cmd.
    7b62c7d zsh-completion: --version and --help still doesn't work correctly
    7ce08e2 zsh-completion: completion should always parse the root command!
    91e80cc zsh-completion: remove bad test
    0d9a33d zsh-completion: remove temporary file
    50f3859 zsh-completion: added support for filename globbing.
    bda855a zsh-completions: fixed zsh completion markdown file name.
    dd577bd zsh-completion: added zsh-completion documentation.
    461a39d zsh-completion: removed forgotten function.
    df12a0a zsh-completion: two fixes for identifying flag usage:
    e9ee8f0 zsh-completion: removed the _dep_ files.
    ec4b8c9 zsh-completions: revised flags completion rendering + new features:
    e8018e8 zsh-completion template refactoring:
    2662787 zsh-completion: added support for subcommand description.
    f0508c8 zsh-completion ignores hidden commands and flags :)
    a15d099 zsh-completion fixed reference to cmd name
    7e2436b First try at better zsh completions:
    67fc483 added variable to allow configuration of mousetrap message duration (#809)
    5755ecf [TrivialPatches] Typos in README.md, fix and update CI, update projects list... (#840)
    ba1052d Fix two word flags (#807)
    7547e83 Run tests against go 1.11 and drop 1.9 (#737)
    d2d81d9 Fix too many underscore for __custom_func (#794)
    fe5e611 doc: obey SOURCE_DATE_EPOCH with manpage generation (#735)
    f619abc Added ExactValidArgs (#765)
    40172f1 Remove unneeded imports from README.md example (#767)
    8d114be README: Remove Unneeded Newline (#746)
    99dc123 Replace Giant Swarm 'swarm' with 'gsctl' (#738)
    6fd8e29 Qualify custom bash func name (#730)
    ff0d02e fix typo in doc/man_docs.go (#732)
    7c4570c #716 - Removed useless libraries in readme (#717)
    a114f31 fix test build breakage with go1.11 (#712)
    1e58aa3 Include a basic example #465 (#631)
    ef82de7 Fixed code sample for bash completion (#687)
    0ab5b6b doc: hide hidden parent flags (#686)
    7ee208b support completions for command aliases (#669)
    6154259 remove dot after the abs path (#672)
    cd30c2a typo: fix incorrect (#668)
    4dab30c Add support for ignoring parse errors (#662)
    a1f051b Update the Travis and CircleCI Go versions (#651)
    c439c4f Terminate the stripping of flags when -- is found (#649)
    c6c44e6 Update the bash completion example for kubectl (#645)
    6644d46 Prefix bash functions with root command name (#643)
    a1e4933 Bash completion aliases (#638)
    1a618fb Do not add a space after a single flag completion (#625)
    be77323 Try out CircleCI. (#630)
    fd32f09 Fix generated bash completion for Bash 3 (OSX) (#520)
    9395926 Add Execute func example in README.md (#629)
    c2bbfaa Add usage example for required flags (#627)
    eb58983 Add `CalledAs` method to cobra.Command (w/ tests) (#567)
    9979838 Fix attemptd assignment to non-variable in bash 3 (#628)
    3a7eb14 fix grammatical error in command.go (#626)
    f91529f Fix a couple typos (#621)
    0c34d16 cmd: Fix #612 (#614)
    b95ab73 Remove trailing whitespace in rootcmd (#606)
    ccaecb1 Ensure that '--version' flag works properly for root command (#595)
    c156af3 Explain OnInitialize better in the GoDoc (#594)
    de2d9c4 Add alibaba/pouch in README.md (#593)
    3a5f27b doc: Add a necessary blank line after SEE ALSO (#592)
    45a52e2 doc: Remove one additional blank line after Synopsis (#591)
    8678368 Add documentation for '--version' flag to README (#590)
    b1ec2ce Add support for --version flag (#584)
    1be1d28 Make rootCmd private
    fb02817 Fix README example to be consistent with others (#585)
    19e54c4 Update error message for missing required flags (#580)
    34ceca5 Disable flags in UseLine (#552)
    d6948b7 Fix minor typo (#579)
    2da4a54 Improve tests in doc/
    d6a4305 Edit ResetFlags and ResetCommands descriptions
    65c8acb Improve tests
    099c5ae Add dots in comments of args.go
    18eefcd Add tests for args.go
    f634327 Fix typo (#573)
    b3426bb Remove confusing duplicate Execute from README (#554)
    7b2c5ac Create new buffer if not present yet (#549)
    7cd9cc6 add test for c.Name() if c.Use gets changed (#548)
    40f1880 Delete name field from Command (#547)
    845c905 Fix typo
    4d6af28 enforce required flags (#502)
    5020481 Grammar addition (#543)
    83b1f03 Add a TraverseChildren option to allow for flags on each command in the hierarchy (#299)
    419e0f8 doc: add ReST doc generation (#537)
    bc69223 Fix dead link in README for cobra generator
    e8e7fe0 Shorten README
    d5bde60 cmd: Fix text of custom license
    0dacccf Improve consistency of flags when using SetGlobalNormalizationFunc (#522)
    e5f66de Support default value of $GOPATH (#532)
    b787445 Use func (c *Command) consistently (#530)
    4de692c adding a GenZshCompletionFile function to mirror bash_completion (#529)
    3c0b56b correct spelling mistake (#524)
    2df9a53 Fix MinimumArgs
    cb74738 Retab README.md
    1723331 Update documentation
    8bcacfe Add more examples of Args field
    4a7b7e6 *following
    cb731b8 Specify that parent's name is a variable for clarity. #514
    b26b538 Fix remaining reproducibility in TestGoldenAddCmd
    3da102d cmd: Fix golden tests if user has config at $HOME
    99838a5 cmd: Small fixes
    d7ba195 Add basic zsh completion (command hierarchy only)
    9e024b6 cmd: Refine formatting of included licenses
    a1b7d3c cmd: Add a blank line between copyright and license
    75c6acf cmd: Add "-u" to output unified diff in golden tests
    cb9cf94 Restore the use of cobra.OnInitialize in cobra executable
    d4c40bb travis: Update Go versions
    750ba8a Fix reproducibility in TestGolden{Add,Init}Cmd
    161584f Fix minor typos: "Know" → "Known"
    34594c7 Fix TestGlobalNormFuncPropagation() on gccgo
    90fc11b Update README.md
    f20b4e9 Refactor TakesArgs to use an interface for arg validation.
    d89c499 Allow commands to explicitly state if they do, or do not take arbitrary arguments
    715f41b cmd: Ignore hidden files in isEmpty
    d994347 Delete tab in the long description of help
    c46add8 Add ability to disable mousetrap
    8c6fa02 Fix InitDefaultHelpCmd when custom help command is set
    4d647c8 Print err instead of home
    6471e3d Rename main func to initConfig
    f9d3497 Fix RootCmd var name
    d638dcb Improve readability of README
    e458bb7 Reword `become unexpected errors` to `encounter errors`
    31694f1 Add missing 'and' in comment
    99b5d83 Show messages if deprecated flags are used
    b4dbd37 cmd: Fix tests
    defa97f cmd: Fix output root.go of init with --viper=false
    d7cfb13 Update README.md
    99ff933 cmd: Add possibility to specify the target package
    84f4716 Make BenchmarkBashCompletion more honest
    66da711 __ltrim_colon_completions is not always available on macOS (#459)
    8d4ce35 Update README.md
    e606913 Fix typos
    4a1a7b0 cmd: Don't print errors from execute to prevent duplication of errors
    c446db2 cmd: Delete projectBase flag
    7918bf6 Add explanation for viper.BindPflag in README.md
    ca57f0f doc: Ad help flag and cmd when generating docs
    52ae6a1 Make initHelpCmd public (#436)
    ca5710c Fix link to cobra lib in README.md
    4ba54a0 Edit installation command in README.md (#451)
    fb1f399 Add benchmark for GenBashCompletion
    de6b168 Simplify bash_completions.go
    4cdb38c cmd: Use correct HasPrefix function for paths
    e9078fc cmd: Make more accurate error when there is no $GOPATH
    fa9ac85 cmd: Make detailed error when project not in $GOPATH
    51b7cf5 Fix tests so they give correct args (#445)
    b536627 cmd: Fix some gometalinter complaints
    d941496 cmd: Fix error message from go-homedir
    a28055b cmd: Fix minor bugs in init command (#446)
    90687e7 Update pflag link in README (#444)
    7d22e77 Fix incorrect merge of pflag.CommandLine to cmd.Flags()
    3454e0e cmd: Fix package name when adding command
    4673102 Updating bash_completions to clarify markdown (#442)
    1362f95 Clean README.md (#441)
    347767f Partial revert of 4d2c4af 'Improve template mechanism' (#439)
    eceb483 Divide fields of Command for readability
    90d2fd8 Group fields of Command
    1251aef Rename Docker to Moby in README.md
    e97db2b cmd: Fix tests
    4db577d Fix docs for Command
    6bfe2ba doc: Add docs
    3dc7f13 cmd: Fix docs
    d236d29 cmd: Make tmpl local variable
    c0bd07d Use cobra create instead of cobra init in README.md (#396)
    4d2c4af Improve template mechanisms
    d83a1d7 Add comment for InitDefaultHelpFlag
    fe69f2e Make initHelpFlag public
    db6b9a8 cmd: Fix incorrect initialzation by `cobra init .`
    7bd35d3 cmd: Fix incorrect cmd dir
    7bb5276 cmd: Fix panic if cmd ends on dash or underscore
    efbe9b0 cmd: Use Fatalf instead of Fatal
    76a9a66 cmd: Add tests
    d20925b cmd: Small correctives
    84cba62 cmd: Make detection of $HOME work on all systems
    6bcf163 cmd: Validate cmd names
    903e5b7 cmd: Fix trimSrcPath doc
    66cfd1f cmd: Reuse template in helpers
    0dd1c42 cmd: Add more docs
    32756eb cmd: Rewrite
    4061f41 Use pflag.ShorthandLookup
    8f0203b Update README.md
    69f86e6 Update README.md
    6f647b1 Update .travis.yml
    bc8a58f docs: Update README.md
    7b1b6e8 cmd: Edit license texts
    e2f2121 cmd: Use 'this program' instead of appName in licenses
    3d7bff8 Revert "Get rid of flagErrorBuf (#417)"
    6dd9084 doc: Use w.Write instead of fmt in yaml_docs
    97af803 doc: Cleanup md_docs
    de484ee doc: Refactor man docs
    ea3c5be Add TestHelpFlagInHelp
    867d414 Initialize help flag in initHelpCmd
    6ed17b5 cmd: Add more possible matches for bsd licenses
    c68a90d Add built-in licenses info to README
    164be37 cmd: Add AGPL license
    1efd892 cmd: Add LGPL license
    6d4267f cmd: Delete redundant symbols from helpers_test.go and licenses.go
    78a8032 cmd: Move some license functions from helpers.go to licenses.go
    28fe9aa cmd: Fix GPL 3 License header
    47029cc cmd: Delete extra whitespace from GPL 3 License header
    f4f10f6 Simplify stripFlags
    63121c8 Delete Parse from Go projects that uses cobra
    9890b7b Simplify stripFlags function
    aea9481 Fix typo at docstring for HasHelpSubCommands (#309)
    a4f017e Add rclone to list of users (#334)
    c4f4d75 Use go get so missing dependencies are fetched (#406)
    681a777 Delete checkHelpFunc
    10f6b9d Make `go path bin` clearer in README
    0a4540b Refactor licenses to many files (#323)
    f58a8d6 Add TestSortedFlags
    e135867 Make parentsPflags more flexible
    3e61377 Use AddFlagSet instead of self-written function
    458d797 Add merging of CommandLine flags to Root command
    37a4355 Fix tests
    3d89ed4 Add only missing persistent flags of parents in mergePersistentFlags
    6202b59 Refactor flags mechanisms
    a3cd8ab Use os.Getenv("HOME") instead of "$HOME" for windows compatibility (#337)
    b655df6 Get rid of flagErrorBuf (#417)
    f95d58b Fix #401 (#402)
    b6cb395 Fix typo in docstring (#360)
    0a0df1e Use valid exit code value in `os.Exit` call (#405)
    9350054 Keep only one newline between Aliases and Flags in help (#410)
    5deb57b Fixed completion of dash parameters arguments (#415)
    7aeaa2c Avoid storing pointer to nil (#411)
    6421115 doc: Fix govet complaints (#408)
    7be4bed remove help command before adding it (#399)
    16c014f Add "docker" to readme
    0960ff7 Rename IsHelpCommand to IsAdditionalHelpTopicCommand (#398)
    24bb44a Fix SilenceUsage and SilenceErrors in readme (#397)
    fcd0c5a Some fixes related to help command (#394)
    92ea23a Fix subcommand locations with NoOptDefValue flags (#391)
    ee40558 Update the Travis Go versions
    b5d8e8f cache command name (#390)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-04-05 16:03:56 -04:00
Bruce Ashfield
9094997ac9 go-digest: update to 1.0.0-tip
Update the LICENSE file to adjust to:

  commit b22736afcd4ef34cfbdb8f0009a03566e620d1e4
  Author: Ian Campbell <ijc@docker.com>
  Date:   Mon Apr 30 18:26:12 2018 +0100

      Rename LICENSE.code → LICENSE

      This allows automated tooling (such as license compatibilty checkers) to find
      it.

      Fixes #37.

      Signed-off-by: Ian Campbell <ijc@docker.com>

Bumping go-digest to version v1.0.0-25-g65fac7b, which comprises the following commits:

    c014774 Bump actions/setup-go from 3 to 4
    c68b67b Bump actions/setup-go from 2 to 3
    58786ae Bump actions/checkout from 2 to 3
    ad52b00 Add CODEOWNERS, remove .pullapprove.yml
    e0313d7 build: add latest versions of go to test matrix
    084376b make sure the standard algorithms are registered
    f0839fe chore(ci): setup dependabot for github-actions
    bf89259 Add blake3 to github actions tests
    a63e545 Add BLAKE3 support
    b9e02e0 Implement dynamic hash registration
    41930e4 Remove travis.yml
    ab23730 Add GH Actions
    fd8c156 TestParseDigest: add tests for some potential corner-cases
    43cccb7 Add release notes for v1.0.0
    17eb78b Add copyright to digestset files
    132fb47 Enable static checks
    ecd7b3c digestset: refine some words on unit test
    5dd3cbe digest: migrate to opencontainers/go-digest
    e0bfa0f digest: remove stuttering ParseDigest function
    1cbb645 Typo fixes in comments
    6ac142d Validate digest length on parsing
    45599b9 Add remove and list functions to digest set
    96bf78c Refactor specification of supported digests
    77570c9 Add digest set implementation
    45398c0 MAINTAINERS: add 2, remove 5
    f65ba7f MAINTAINERS: remove Brandon Philips @philips
    264d27f *: add OCI copyright
    9d15c98 README: spit paragraphs to new lines
    51d31fa Update pull approve configuration
    ac2cd61 Update Aaron's e-mail address
    232efbd travis: update list of go versions
    ed218d0 add go.mod
    f35593a MAINTAINERS: fix jonboulle's email
    be46cde updating CoC link and security link
    21d40dc Bump Go versions and use '.x' to always get latest patch versions
    b22736a Rename LICENSE.code → LICENSE
    4ca1301 disallow upper characters (/A-F/) in hex-encoded portion
    678a95e digest: allow validation of urlsafe base64 encoding
    55f6758 digest: update package methods to reflect changes
    5ab10f5 digest: allow separators in algorithm field
    d1caf20 doc: tweak wording around algorithms
    b74b840 *: clarify we only deal with hex-encoded digests
    b6234c3 *: add LICENSE headers to Go files
    0c91155 README: update security email

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-04-05 16:03:56 -04:00
Bruce Ashfield
712a36da05 docker-compose: update to v2.17.2
Bumping compose to version v2.17.2-8-g02ad467f, which comprises the following commits:

    a4c324b8 build(deps): bump github.com/docker/cli
    087fae98 build(deps): bump github.com/docker/docker
    c5317496 workaround race condition in ContainerList
    72a61c06 add dry-run support to run command
    b24af42b ci: bump compose-go to v1.13.2
    3b85cd2f test: fix e2e commands on Windows
    45a852f4 test: generate valid Compose project names from Cucumber specs
    cd17c8a9 test: update error message
    36625ed2 test: fix race in e2e build test
    a6ffdf61 ci: upgrade to Go 1.20.2 & bump deps
    9ab5d8c4 build(deps): bump github.com/moby/buildkit from 0.11.4 to 0.11.5
    d637cc3a watch involves up --build after change has been detected
    16d5354d watch: add note about goroutine-safety & test
    7aaea283 watch: data race / segfault fixes
    6bedc196 update -p project name flag documentation
    a11515e0 introduce `ignore` attribute for watch triggers
    6c1f06e4 Run classic builder with BuildConfig, not buildx.Options
    88b0d17f use `build` as common API for build scenarios
    9e19bc84 use progress to show copy status
    105a7c5b watch: add file delete/rename handling
    f7a13aee build(deps): bump github.com/docker/buildx from 0.10.3 to 0.10.4
    bfeb1dc2 Fix concurrent map read/write when recreating containers
    0b41df98 build(deps): bump github.com/moby/buildkit from 0.11.3 to 0.11.4
    643557d5 build and push binaries images when a PR is merged or a tag pushed
    200f47e5 Add support for `additional_contexts` in `build` service config
    e0aaccf4 introduce dockerfile_inline
    754c0688 one off container name use configured Separator for naming
    e492330d collect built image IDs
    bbe1b77a progress writer uses dockercli.Err stream
    fc4d2dfd Remove "-s" from LDFLAGS
    85ddfde5 use go 1.20 -cover support
    6a0398d7 pad can be negative on small terminal
    4434cea5 add dry-run support for push command
    3f7d3c26 add dry-run support for pull command
    9cc1613b adopt http://no-color.org/
    167c6a89 add dry-run support to restart command
    3cfbac66 restart only needed services by checking depends_on relations
    a3bed265 update compose-go
    ae26426c Report error if project name is empty after normalization
    4ea44797 only consider containers with config_hash labels (i.e, created by compose)
    89633748 build(deps): bump github.com/containerd/containerd from 1.6.18 to 1.6.19
    33aa6ace build(deps): bump go.opentelemetry.io/otel from 1.13.0 to 1.14.0
    e31b95c1 test: tweak pause test to try and prevent failures in Windows CI
    7bb60d09 build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.2
    da1ca578 watch: ignore ephemeral files & minor output tweaks
    18af72af bump golang/x/net to v0.7.0 (CVE-2022-41723)
    e831ea82 add support for `restart` for `depends_on`
    1edc64ef build(deps): bump github.com/containerd/containerd from 1.6.17 to 1.6.18
    f3e543fd apply config options for pseudo-subcommands
    9732608e build(deps): bump github.com/docker/buildx from 0.10.2 to 0.10.3
    24ff0982 compact TUI to monitor layers download progress
    593c4263 ci: bump to Go 1.20.1 and latest deps
    313b82e9 ignore services without a build section
    5e3e2171 sort service --hash output by service name
    9ac0392b introduce --timeout on `up`
    0612b34c introduce --no-deps on restart
    92e0cd40 also restart dependent services after a service has been restarted
    282a29e6 build(deps): bump go.uber.org/goleak from 1.1.12 to 1.2.1
    256ec499 exclude unstable labels from config hash
    9765f171 store exec details to offer better dry-run status on ExecStart
    b19df5c9 add support for `excludes` and `rebuild`
    7a42ba7e use CGO to enable fsevent on OSX
    5b043c4d ci: don't use `-race` on Windows
    15f7104c ci: use CGO for tests to enable race detector
    eb1c7989 support dry-run for rm command
    78b94047 support dry-run for stop command
    25be264e support dry-run for exec command
    7532f769 build(deps): bump go.opentelemetry.io/otel from 1.12.0 to 1.13.0
    70ab9f8f bump docker engine and cli version to 23.0.0 with buildkit(v0.11.2) and buildx (v0.10.2)
    93bffd9a prevent assignment to entry in nil map
    52478f0c wait on service containers as dependencies to be deterministic
    b5f0a4ee use containers we expect to start for wait condition
    0f5b5ccb detect replacement container is created and inform printer so it attach and don't stop
    a2d36b6c bump golang to 1.20
    30772342 ci: Replace deprecated command with environment file
    fdc17381 add log when copying files/directories between host and containers (both way)
    2336d9fe support dry-run for cp command
    1640f155 initial support for `sync`
    e63cbfba use tilt watcher to track filesystem changes
    25576289 adjust code and dependencies
    7d6ee74e cleanup deprecated ioutil functions (#5919)
    c08e0771 watch: optimization to help avoid inotify nodes for large file trees (#5769)
    cf314623 tests: make test fixtures responsible for tearing themselves down (#5512)
    1b71e3ef lint: fix local-prefixes for goimports (#5453)
    4d822676 ci: add exportloopref linter and upgrade to golangci-lint v1.43.0 (#5281)
    6fc0b6ff build: ensure file handles properly closed (#5298)
    ab84b6ac Fix local go_lintfix errors (#5191)
    7161778c watch: use WalkDir to speed up file listing (#4684)
    1f5bfe88 test: clean up test loggers a bit (#4580)
    f79c75ab test: fix lint errors on Darwin (macOS) (#4247)
    e62993a8 test: enable unused check, remove dead code (#4208)
    28251e8b watch: improve error messages when you run out of inotify instances (#3960)
    c7ba7d9d dockerignore: convert ignore patterns to absolute paths [ch9237] (#3743)
    8b393223 watch: fix a dumb errcheck (#3622)
    b3615d64 watch: increase the windows watch i/o buffer (#3620)
    1a1d1707 change org name from windmilleng to tilt-dev (#3346)
    fd3e0bbe watch: use the recursive watcher on windows (#3306)
    d2d4d052 Revert "watch: fix inotify tests on windows" (#3147)
    dda0362b watch: fix inotify tests on windows (#3140)
    ddc88ec4 circleci: run make shorttest on windows. flag off a large swath of broken tests (#3132)
    92c6a65a tilt: enable errcheck on tests (#2877)
    00b3caec  ci: enable staticcheck, fix problems that were surfaced (#2809)
    17087447 logger: move to pkg (#2031)
    ec781687 watch: add retry counts to fsync (#2023)
    b22dde9f dockerignore: improve MatchesEntireDir (#1865)
    a31350ed watch: move more of the directory-skipping logic into the interface (#1864)
    d744c97f watch: add a simple check when there are no exclusions (#1863)
    37647bc6 watch: skip setup if nothing is being watched (#1861)
    21e5d564 watch: FileEvents must always be absolute (#1841)
    390d5cf1 watch: add tests for ignores and number of watches (#1838)
    7f6e189d watch: change the watcher interface to better match how we actually use it (#1835)
    b5ccea7b watch: record num watches in expvars (#1795)
    47551895 makefile: fix goimports -local (#1763)
    5e0f1eec watch: fix spurious errors while watching (#1726)
    f82e2de5 watch: don't watch each individual file (#1613)
    9c7f7bc0 live_update: error if syncing from outside of docker context (#1396)
    6defe7ca watch: tfw you have a test that asserts broken file-watch behavior 😢 (#1354)
    0482f927 watch: add watch function that traverses up directory structure recursively (#1013)
    e8a34c8d watch: remove inotify-specific bits of watcher_linux (#890)
    9e261c18 watch: fix a bug when a file and its ancestor both have direct watches (#863)
    1fd7ca54 testing: update internal/watch to use the tempdir fixture (#862)
    139edc40 cleanup: wrap errors properly (#772)
    38b3f3b6 watch: use `sinceWhen` and `HistoryDone` to avoid spurious events (#557)
    c5bce8bd watch: fix a spurious error (#344)
    c8a358a4 watch: try a slightly different ignore strategy (#174)
    a6701652 watch: fix more data races on darwin (#166)
    4562b0bf watch: a new strategy for handling spurious events, hoping to fix race conditions (#163)
    4801d2b1 watch: fix a flaky test by ignoring spurious events correctly (#162)
    3850a341 watch: fix a segfault on linux (#148)
    664e6f6f watch: stop skipping tests (#145)
    d4f074b3 watch: simplify the fileEvent interface to only contain paths (#144)
    a3b012d8 add errcheck (#93)
    a755c84e tilt: copy watch code from tesseract
    ef34a38a Add remote buildx driver
    41e05634 rename `convert` to `config` to align with compose v1 UX
    c0b4dd86 build(deps): bump go.opentelemetry.io/otel from 1.11.2 to 1.12.0
    6754c6b6 add dry-run support of pause and unpause commands
    982a8ccb support dry-run for kill command
    790712fa update tty and plain text writers to support dry run mode
    6fae6a41 Update emacs ignore patterns (#5903)
    dd5ea044 ignore: add Go umask files to ephemeral set (#5740)
    12de97b8 filewatch: use apiserver FileWatch model in EngineState (#4277)
    62b5f78f Add .kate-swp files to ignore pattern (#3380)
    3f526c5c change org name from windmilleng to tilt-dev (#3346)
    12916b75 tilt: ignore a few more vim swap files (#2190)
    e3948f6b ignore: auto-ignore jetbrains .idea file (#2065)
    91a2bdd6 model: move to pkg (#2024)
    ce61e7bf ignore: improve the ephemeral temp file patterns [ch2663] (#1925)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-04-05 16:03:56 -04:00
Bruce Ashfield
a77ed260c4 docker-ce: update to v23.0.2
Bumping docker to version v23.0.2, which comprises the following commits:

    c6bf3071fe StartWithLogFile: Fix d.cmd race
    7f49ca259b TestDaemonRestartKillContainers: Fix loop capture
    1363b3e372 ci: disable testing mergeop and diffop with the dockerd worker
    d43958b50b builder-next: disable mergeop and diffop
    fd80ca60da Fix pruning anon volume created from image config
    ae0cc08cab Dockerfile: Update shfmt to 3.6.0
    42751cc892 contrib/dockerize-disk.sh: Fix indentation
    6c65a9a07f volumes: fix error-handling when removing volumes with swarm enabled
    e3c642d1ea integration/volumes: TestVolumesRemove: add coverage for force/no-force
    c48f7fd12c [23.0] update to go1.19.7
    f3416271a3 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230309194213-a745a8755ce3
    3bd2fc8d62 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230302163403-80a528a86877
    a79be4cf31 vendor: github.com/moby/buildkit v0.10.7-0.20230306143919-70f2ad56d3e5
    6ac39568ee libnet/ipam: fix racy, flaky unit test
    7158f76b8b vendor: github.com/containerd/containerd v1.6.19
    67990f983b vendor: github.com/Microsoft/hcsshim v0.9.7
    3125aa0aef [23.0] update containerd binary to v1.6.19
    b1d9012969 Wait longer for exit events on Windows
    2337258d28 libnet/networkdb: fix nil-dereference panic in test

Bumping libnetwork to version v0.7.0-dev.3-1861-g25ec449c, which comprises the following commits:

    91f0d508 update maintainers
    615c9801 libnetwork/overlay:fix join sandbox deadlock
    047ac186 Cleanup servicebindings only on Windows
    6f36306d Delay network deletion until after lb cleanup
    a9c349a6 Log HNS policylist removal failures

Bumping docker-cli to version v23.0.2, which comprises the following commits:

    f6643207a don't use null values in the bake definition
    f381e0842 Dockerfile: align go version
    d3a36fc38 e2e: update notary certificates
    59bb07f2e e2e: increase tests certificates duration (10 years)
    80f27987f bake target to generate certs for e2e tets
    a43c9f344 Don't automatically request size if `--size` was explicitly set to `false`
    114e17ac4 cli/command: fix imports formatting
    e2c402118 cli/command: ElectAuthServer: fix deprecation comment
    d07453890 Add bash completion for available plugins
    90a72a589 Dockerfile: update buildx to v0.10.4
    4c63110a9 update to go1.19.7
    b61b5a987 stack: Change unexpected environment variable error
    84fe451ec stack/loader: Ignore cmd.exe special env variables
    95066ff3a Dockerfile: update buildx to v0.10.3 release notes: https://github.com/docker/buildx/releases/tag/v0.10.3
    0dbf70fad docs: Deprecate buildkit's build information
    5af8077ee formatter: Consider empty RepoTags and RepoDigests as dangling
    57a502772 context: avoid corrupt file writes
    14ac8db96 test/cli: Use empty array as empty output of images/json
    1810e922a docs: drop dated comments about graphdrivers
    5051d82a1 update to go1.19.6
    7f4e3ead7 changed the container name in docker stats page

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-04-05 16:03:56 -04:00
Bruce Ashfield
3516cca605 moby: update to v23.0.2
Bumping moby to version v23.0.2, which comprises the following commits:

    c6bf3071fe StartWithLogFile: Fix d.cmd race
    7f49ca259b TestDaemonRestartKillContainers: Fix loop capture
    1363b3e372 ci: disable testing mergeop and diffop with the dockerd worker
    d43958b50b builder-next: disable mergeop and diffop
    fd80ca60da Fix pruning anon volume created from image config
    ae0cc08cab Dockerfile: Update shfmt to 3.6.0
    42751cc892 contrib/dockerize-disk.sh: Fix indentation
    6c65a9a07f volumes: fix error-handling when removing volumes with swarm enabled
    e3c642d1ea integration/volumes: TestVolumesRemove: add coverage for force/no-force
    c48f7fd12c [23.0] update to go1.19.7
    f3416271a3 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230309194213-a745a8755ce3
    3bd2fc8d62 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230302163403-80a528a86877
    a79be4cf31 vendor: github.com/moby/buildkit v0.10.7-0.20230306143919-70f2ad56d3e5
    6ac39568ee libnet/ipam: fix racy, flaky unit test
    7158f76b8b vendor: github.com/containerd/containerd v1.6.19
    67990f983b vendor: github.com/Microsoft/hcsshim v0.9.7
    3125aa0aef [23.0] update containerd binary to v1.6.19
    b1d9012969 Wait longer for exit events on Windows
    2337258d28 libnet/networkdb: fix nil-dereference panic in test

Bumping libnetwork to version v0.7.0-dev.3-1861-g25ec449c, which comprises the following commits:

    91f0d508 update maintainers
    615c9801 libnetwork/overlay:fix join sandbox deadlock
    047ac186 Cleanup servicebindings only on Windows
    6f36306d Delay network deletion until after lb cleanup
    a9c349a6 Log HNS policylist removal failures

docker-moby/cli: update to -tip

    f6643207a don't use null values in the bake definition
    f381e0842 Dockerfile: align go version
    d3a36fc38 e2e: update notary certificates
    59bb07f2e e2e: increase tests certificates duration (10 years)
    80f27987f bake target to generate certs for e2e tets
    a43c9f344 Don't automatically request size if `--size` was explicitly set to `false`
    114e17ac4 cli/command: fix imports formatting
    e2c402118 cli/command: ElectAuthServer: fix deprecation comment
    d07453890 Add bash completion for available plugins
    90a72a589 Dockerfile: update buildx to v0.10.4
    4c63110a9 update to go1.19.7
    b61b5a987 stack: Change unexpected environment variable error
    84fe451ec stack/loader: Ignore cmd.exe special env variables
    95066ff3a Dockerfile: update buildx to v0.10.3 release notes: https://github.com/docker/buildx/releases/tag/v0.10.3
    0dbf70fad docs: Deprecate buildkit's build information
    5af8077ee formatter: Consider empty RepoTags and RepoDigests as dangling
    57a502772 context: avoid corrupt file writes
    14ac8db96 test/cli: Use empty array as empty output of images/json
    1810e922a docs: drop dated comments about graphdrivers
    5051d82a1 update to go1.19.6
    7f4e3ead7 changed the container name in docker stats page

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-04-05 16:03:55 -04:00
Bruce Ashfield
874647c061 crun: update to v1.8.3
Bumping crun to version 1.8.3-5-gd2ff390, which comprises the following commits:

    59f2beb NEWS: tag 1.8.3
    ae18930 update: initialize the rt_scheduler only on cgroupv1
    5855e70 [1.8.2][CentOS 7] Missing `#include <linux/sched.h>`
    a4393f2 docs: add a tryout example with podman
    bf70c97 NEWS: tag 1.8.2
    ba6c957 cgroup: cgroupfs attempt new sibling cgroup
    74dc9b4 cgroup: libcrun_get_current_unified_cgroup can return relative path
    b7b5265 cgroup: drop duplicated variable
    11bdc13 linux: set label for pre-created devices
    4b04b01 linux: refactor code in a new function
    770ad48 linux: extend fsopen_mount to specify label
    7578a1a wasm, wasmedge: add current directory to preopen paths
    90dd7b7 test_mount: fix incorrect comment
    51aba04 linux: readonlyPaths should inherit flags from parent mount
    5ad1507 lua: add Lua bindings
    5d54a85 scheduler: use sched_setattr
    6a132c3 libcrun_container_create(): fix memory leak
    6ba6a00 container: add custom annotation to specify the scheduler
    5bdd930 cgroup: systemd initialize rt limits
    8b18fc7 cgroup: add new function openat_with_alias
    e914059 libcrun: add alias argument to function
    a4aebb9 libcrun: new function write_cgroup_file_or_alias
    d36c1a2 test: remove irqbalance tests
    56a2550 cgroup: fallback to blkio.bfq files
    34950dc crio: skip test
    710d8dd libcrun: chown tty to the exec user
    e067714 python: fix create() referencing container_run()
    11d1baf build(deps): bump actions/upload-artifact from 2 to 3

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-04-05 16:03:55 -04:00
Bruce Ashfield
ef43344fb3 cri-tools: update to v1.26.1
We adjust our install routine to find the binaries in architecture
and OS target specific directories, but otherwise the build is
unchanged.

Bumping cri-tools to version v1.26.0-122-g4daea449, which comprises the following commits:

    1dbda3f7 Bump github.com/opencontainers/runc from 1.1.4 to 1.1.5
    6f1de233 Bump github.com/docker/docker
    d55f85f2 update release support details in the README
    3e40ab7e Bump github.com/onsi/gomega from 1.27.4 to 1.27.5
    13c94c7a Update Ubuntu 18.04 to 20.04
    8de6b6d7 Bump github.com/urfave/cli/v2 from 2.25.0 to 2.25.1
    8db31a76 Bump github.com/onsi/ginkgo/v2 from 2.9.1 to 2.9.2
    3c0741e5 Bump github.com/golang/glog from 1.1.0 to 1.1.1
    4d45340a feat: add riscv64
    53e4c3ba Bump github.com/onsi/gomega from 1.27.3 to 1.27.4
    e13ad25e Bump github.com/onsi/ginkgo/v2 from 2.9.0 to 2.9.1
    21e62dde Bump github.com/onsi/gomega from 1.27.2 to 1.27.3
    02317f82 Bump github.com/golang/protobuf from 1.5.2 to 1.5.3
    9d847e2c Bump golang.org/x/net from 0.7.0 to 0.8.0
    bfdb44b5 Bump github.com/urfave/cli/v2 from 2.24.4 to 2.25.0
    060929a6 Bump github.com/golang/glog from 1.0.0 to 1.1.0
    c020f31f Bump golang.org/x/term from 0.5.0 to 0.6.0
    47b33362 Bump github.com/onsi/ginkgo/v2 from 2.8.4 to 2.9.0
    f8cb6925 Bump github.com/onsi/gomega from 1.27.1 to 1.27.2
    578b38a1 Bump github.com/onsi/ginkgo/v2 from 2.8.3 to 2.8.4
    ce2c55c0 Bump github.com/onsi/gomega from 1.26.0 to 1.27.1
    f7333f20 Run GitHub actions by `push` only on `master` and tags
    64f3f275 Bump github.com/onsi/ginkgo/v2 from 2.8.1 to 2.8.3
    8f27b574 Bump github.com/urfave/cli/v2 from 2.24.3 to 2.24.4
    b27232f2 Bump golang.org/x/net from 0.6.0 to 0.7.0
    61a85a93 Bump github.com/onsi/ginkgo/v2 from 2.8.0 to 2.8.1
    c61a79e9 fix crictl config list display error
    595572a6 crictl code and args optimization.
    85c6f21d Bump github.com/docker/docker
    63a1d5a6 crictl config add list flag
    b4ffa89f Bump golang.org/x/net from 0.5.0 to 0.6.0
    3c35861c Bump github.com/opencontainers/selinux from 1.10.2 to 1.11.0
    753c9a88 Makefile support cross compilation, build_bin_path optimization
    fda6d7f8 crictl stats add name row
    be5f634b Bump golang.org/x/term from 0.4.0 to 0.5.0
    82c3e8ae Bump golang.org/x/sys from 0.4.0 to 0.5.0
    6fc9e4af Bump github.com/urfave/cli/v2 from 2.24.2 to 2.24.3
    01796ae5 Bump github.com/docker/docker
    dd20ea16 Bump github.com/onsi/ginkgo/v2 from 2.7.1 to 2.8.0
    ef8a0d68 Bump github.com/urfave/cli/v2 from 2.24.1 to 2.24.2
    0b81ff2a Bump github.com/onsi/ginkgo/v2 from 2.7.0 to 2.7.1
    a4c976aa Makefile: pass in a custom variable GOARCH
    f6ec8fec Bump github.com/onsi/gomega from 1.25.0 to 1.26.0
    5923662b Bump github.com/urfave/cli/v2 from 2.23.7 to 2.24.1
    a8ddf64a Bump github.com/docker/docker
    1e27c2c4 Bump github.com/onsi/gomega from 1.24.2 to 1.25.0
    edf14e37 Update docs version to match latest release
    850c8469 Bump other OTEL deps
    6d46b592 Bump go.opentelemetry.io/otel/trace from 1.10.0 to 1.11.2
    5364af0f fix: formatting
    6f078ed6 fix(docs): add a note about other supported platforms
    c2573905 Pass `nil` as tracer provider
    8ac43a45 fix: add tip on latest version
    8dee7ff5 Update ginkgo and gomega
    92edf29e Switch to `registry.k8s.io`
    aa036b5a Increase defualt timeout on Windows
    5886c7df Add support for calling Windows pod stats
    64e8f6b8 Bump golang.org/x/net from 0.4.0 to 0.5.0
    3a981a98 Switch away from Docker Hub to avoid rate limits
    b3262be7 Bump github.com/docker/docker
    5046b65b Add haircommander to reviewers
    4e387743 set LTS v1.6.12 into matrix to replace old v1.5 entry
    baefda37 gh actions: remove dockershim tests
    24cc748b plumb context through CRI
    86befea9 bump to go 1.19
    a7154756 vendor: bump kube to 1.26
    f9764647 Bump github.com/urfave/cli/v2 from 2.23.5 to 2.23.7
    6220423b Bump golang.org/x/net from 0.3.0 to 0.4.0
    d6d8005f Bump golang.org/x/net from 0.2.0 to 0.3.0
    f4cf7b6e Bump golang.org/x/term from 0.2.0 to 0.3.0
    c37655ee Bump golang.org/x/sys from 0.2.0 to 0.3.0
    9962fb03 add missing CPU count
    7493f666 Add detach key sequence support
    ca1571e6 critest: ensure server is running before portforward
    b6fb4b1d Bump github.com/urfave/cli/v2 from 2.23.4 to 2.23.5
    fa370cc5 Bump golang.org/x/net from 0.1.0 to 0.2.0
    f1998865 Bump golang.org/x/term from 0.1.0 to 0.2.0
    5c48eb26 Bump github.com/urfave/cli/v2 from 2.23.0 to 2.23.4
    6b420011 Bump golang.org/x/sys from 0.1.0 to 0.2.0
    6f8965f4 Bump github.com/onsi/gomega from 1.23.0 to 1.24.0
    913089a4 Bump github.com/urfave/cli/v2 from 2.20.3 to 2.23.0
    622b04f1 Bump github.com/onsi/gomega from 1.22.1 to 1.23.0
    5acd3285 Bump github.com/docker/docker
    c4b3e806 Bump github.com/urfave/cli/v2 from 2.20.2 to 2.20.3
    0b1abed2 Bump github.com/onsi/ginkgo/v2 from 2.3.1 to 2.4.0
    91521036 specify one supplementalGroup instead of two to make test code simpler
    2649f53e added a validation test case For SupplementalGroups with the predefined groups in the container image
    d965134b fix copyright section in image-predefined-group's Dockerfile
    59137ff5 images/image-predefined-groups: don't specify group in USER
    f1cb7aff Bump github.com/docker/docker
    72d1ed12 add test image for testing SupplementalGroups with predefined groups in the container image
    0fd7a1b4 Bump github.com/urfave/cli/v2 from 2.19.2 to 2.20.2
    ac1c0c5b Bump github.com/docker/docker
    44965774 Bump github.com/onsi/gomega from 1.21.1 to 1.22.1
    78d5c955 Bump github.com/onsi/ginkgo/v2 from 2.3.0 to 2.3.1
    11c282fd Bump github.com/onsi/ginkgo/v2 from 2.2.0 to 2.3.0
    6e9a4670 Bump github.com/urfave/cli/v2 from 2.17.1 to 2.19.2
    93332157 Bump github.com/onsi/gomega from 1.20.2 to 1.21.1
    4b984ddc Implement password input on the command line
    4507e46c Add recurring working areas to CONTRIBUTING
    fd4bb370 Bump github.com/urfave/cli/v2 from 2.16.3 to 2.17.1
    49249cbc Bump github.com/opencontainers/selinux from 1.10.1 to 1.10.2
    adac6827 Cleanup owners
    eb69454a Bump github.com/onsi/ginkgo/v2 from 2.1.6 to 2.2.0
    373e7090 Bump github.com/urfave/cli/v2 from 2.16.2 to 2.16.3
    6f5588ba Bump github.com/docker/docker
    30d32dab Bump github.com/urfave/cli/v2 from 2.14.1 to 2.16.2
    fd1c34d3 Bump github.com/urfave/cli/v2 from 2.14.0 to 2.14.1
    46197a85 Bump github.com/urfave/cli/v2 from 2.11.2 to 2.14.0
    a07c04ee Print deleted digest when repo tags empty
    d3e8a304 Bump github.com/docker/go-units from 0.4.0 to 0.5.0
    5bf099af Bump github.com/onsi/gomega from 1.20.1 to 1.20.2
    74915650 Bump github.com/onsi/ginkgo/v2 from 2.1.5 to 2.1.6
    9bad5cb3 Ensure benchmarks are skipped during validation tests.
    fd16071d Bump github.com/onsi/ginkgo/v2 from 2.1.4 to 2.1.5
    c148f5b2 Bump github.com/onsi/gomega from 1.20.0 to 1.20.1
    778b8ed9 vendor: github.com/moby/term v0.0.0-20220808134915-39b0c02b01ae
    5168c419 cmd/crictl: replace deprecated pkg/term
    0e31acb9 Update version references in docs and go.mod
    3efdd0f4 Bump github.com/opencontainers/runc from 1.1.3 to 1.1.4
    7abda56b Bump Kubernetes to v1.25.0
    1151eb16 Bump github.com/urfave/cli/v2 from 2.11.1 to 2.11.2
    a685ed61 No truncate PodID in ps command if --no-trunc exists
    7cf65e12 Migrate to native ginkgo v2

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-04-05 16:03:55 -04:00
Bruce Ashfield
6ae8646348 cri-o: update to 1.26.2
Bumping cri-o to version v1.26.2-10-gc0557b868, which comprises the following commits:

    6ee82e547 Update crun to v1.8.3 and runc to v1.5.1
    4bea0d45b create the metrics endpoint with correct shutdown logic
    778169257 Update CNI plugins to v1.2.0
    8f943a9cc Add spdx signature and cert to release notes
    ab5daed67 Fix release notes build for release-1.26 branch
    fc032744b version: bump to v1.26.2
    141c69ac6 build(deps): bump sigstore/cosign-installer from 2 to 3
    46e4d5286 Bump crun to v1.8.1
    12cc52830 Pin nix version to fix static builds
    2c3c8c7d8 unit-test: call UpdateContainerResources when nri enabled
    d3504291c nri: add protection against nil dereference
    8438fdf40 docs-validation: try String() for struct field values.
    b997d9a61 internal/oci: don't crash when getting unset Spec.
    96c12e147 test: update NRI BATS test.
    d19c65049 completions, docs: update completions and man pages.
    3c1bb518c config,criocli: update NRI deps, configuration.
    9831dddef Fix cgroup leak for systemd cgroup driver
    0c32aa50d Update to c/image 5.24.2
    0015d0477 test/*: add test for checking the /etc folder permission
    b1113fa78 server: fix the permission issue for `/etc`
    7f60e0419 Update github.com/containers/image to v5.24.0
    1f0b14da9 Update opencontainers/runtime-tools to a6a073817ab0.
    0841fe69a Add container stats to the ListPodSandboxStats response
    3facc028e Make storage unmount less strict
    b93180c99 Inject release-notes branch from GitHub actions
    5ce93c60e ci-verify: Run get-scripts only on main branch
    d8c6707bd version: bump to 1.26.1
    741be35fa vendor: bump storage to v1.44.1-0.20230101110555-a747b27fe4ca
    f49c3b608 Update critest parameters
    1b1b95af8 hostport: use generic Set
    1e66eb86e server: update streaming interface to take context
    2adc326f6 ci: bump cri-o.spec file to 1.26
    ae0a0d5f9 static: bump go version
    8f8228b77 bump to cri-tools 1.26.0
    fff07d82f server: add support for new CRI calls
    cac6a729e server/streaming: add context to methods
    ec5beb231 vendor: bump kube to 1.26.0
    8ffb14733 mocks: update with new c/storage mocks
    48d0bf4ca job get script: fix conflist path
    7705f9942 bump to v1.26.0
    d06cae7c9 contrib/cni: use cniVersion 0.3.1 for ipv4 only bridge config
    5526fae33 bundle: use ipv4 only config because of gh action limitation
    1b8b28433 Support evented PLEG in CRI-O
    5783c3254 Bump cri-api to support evented pleg
    29ce5a7b2 get script: fix conflist path
    f317b267d Fix-6080: Update the CNI version to 1.0.0
    54b7b5fc0 test, Makefile: hook NRI tests into localintegration.
    ab73c1dcd test/nri: add a test client with basic NRI tests.
    36305e7bd server: hook NRI into request processing.
    773e6e005 nri: add experimental NRI adaptation interface.
    907f4edf5 config,cli: add support for NRI configuration.
    a6430c8c8 Add test for conmonrs cgroup with no infra container
    b6f92b04f Add test for default conmon cgroup type
    f323d022c Fix applying cgroup for conmonrs when pinned
    6c62954e8 Remove cri wrapper package
    093d680dd server/metrics: Update seccomp notifier metrics to reduce cardinality
    fe2458341 ci: make golangci-lint happy
    da96d6be4 Support checkpointing infra less containers
    4a541607e build(deps): bump github.com/onsi/ginkgo/v2 from 2.5.0 to 2.6.1
    ebe73f411 build(deps): bump google.golang.org/grpc from 1.50.1 to 1.51.0
    7d8f2328f Merge log and metrics interceptor
    cb8aa99d7 ResourceStore: delete entries after they're used
    1b42a3d4c Use containerd v1.7.0-beta.0
    41dca27cb server: fail if HOME variable has a newline
    c1d7c54fa systemd: use on-failure as restart policy
    88782d59c contrib/test/ci: fix SELinux permission issue on RHEL9
    8132ef511 ci: update system-packages.yml to install gpgme-devel on fedora
    ac319a568 OWNERS: move vrothberg to emeritus approvers
    c095c4781 build(deps): bump github.com/urfave/cli/v2 from 2.23.5 to 2.23.7
    7150ba10b contrib/test/ci: fix the when condition for CentOS Stream 9
    0ffec79a4 contrib/test/ci: enable crb repo for CentOS Stream 9
    905e8485a Update security process
    3232ffe2a Downgrade cgroupfs test to Ubuntu 20.04
    7d848b3c1 Fix GitHub actions CI
    b6b4f8235 Add Reddit to ADOPTERS.md
    189e9f7eb Disable typecheck linter
    b9d94374b Bump golang dependencies
    5e71e4f9c contrib/test: set env variables for integration tests
    22249fcf9 build(deps): bump sigs.k8s.io/bom from 0.3.0 to 0.4.1
    a67e7776c Port remaining logrus with internal/log
    14547d489 Pass ctx so that more tracing spans could be created
    19bc7330f internal/log: add a function to start new tracing span
    834b60336 Setup logrus hook to attach logs to traces
    ef3bed00b Remove CRI v1alpha2 support
    c9316ec2a Update golangci-lint and config
    3b631242b Add seccomp notifier feature
    e3416bda9 build(deps): bump cachix/cachix-action from 11 to 12
    71252c17b Disable checkpoint image check as early as possible
    658a11552 Correctly extend $PATH before calling conmon during restore
    a93201a8e Use correct key for tracing hostname field
    923f665ca Add docs that `tracing-sampling-rate-per-million` set to 1000000 refers to always sample
    999ba7f59 Fix CI
    1e8229d45 build(deps): bump github.com/urfave/cli/v2 from 2.19.2 to 2.20.2
    3327991b0 build(deps): bump cachix/cachix-action from 10 to 11
    0ce9fb039 build(deps): bump google.golang.org/grpc from 1.50.0 to 1.50.1
    1f8221f07 build(deps): bump cachix/install-nix-action from 17 to 18
    376f7e9df Update dependencies
    316830590 Add logs to OpenTelemetry traces
    e56855dc7 docs: updated kubernetes tutorial
    53e631663 Update conmon-rs to latest `main`
    8bf89f341 Minor Checkpoint/Restore improvements
    62d77513b Track type of all bind mounts during checkpointing
    331f30bfb build(deps): bump google.golang.org/grpc from 1.49.0 to 1.50.0
    997032dec .github/CODEOWNERS: drop runcom
    a7a279c84 build(deps): bump sigs.k8s.io/zeitgeist from 0.3.2 to 0.3.5
    fb66985f1 config: avoid segfault when workloads.resources is nil
    0244fee08 support checkpointing to oci image
    ae5d39c74 Fix lint CI on `main`
    eabfdb404 [#5240] update supported OS versions
    26614cad9 build(deps): bump github.com/urfave/cli/v2 from 2.15.0 to 2.17.1
    f7c9c2754 build(deps): bump github.com/Microsoft/go-winio from 0.5.2 to 0.6.0
    42bb61393 fix: give loopback a name
    9ee3457ff test/README: Update url for kata containers
    f1be99faa images/os/Dockerfile: Delete this, it's dead code
    570a4c1b9 config: translate monitor fields when printing config
    32e6520ff Update config readme
    5d20c76fb Allow complete Runtimes config to change
    88cc2f9b9 build(deps): bump k8s.io/klog/v2 from 2.70.1 to 2.80.1
    28861ed60 build(deps): bump actions/stale from 5 to 6
    88c1f772f build(deps): bump github.com/opencontainers/image-spec
    b6755fc94 build(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc
    c9ba93e08 build(deps): bump github.com/containers/podman/v4 from 4.2.0 to 4.2.1
    2a876f1a7 build(deps): bump github.com/containers/buildah from 1.27.0 to 1.28.0
    db20b31e1 Do not use deprecated SetNames
    4ea5eeddf build(deps): bump github.com/container-orchestrated-devices/container-device-interface
    481683497 config: do not remove runc if different default runtime
    f24ea6702 workloads: fix whitespace
    b3f877a64 template: fix whitespace and comments in runtimes table
    b7b56c202 contrib/test: set LOG_DIR to debug kubernetes issues
    0b0e16b1c Update conmon-rs
    8e1a561e8 Bump conmon-rs code to latest `main`
    506e0cbef contrib/test: drop userns integration tests
    9db3e8e64 Add basic integration tests for runtime reload
    877b5fbdc Add notes on runtime reload support to documentation
    a3fb007fb Reload runtime configs on reload
    29bff1526 Invert conditional check in ValidateDefaultRuntime
    2ba6ee2ed Move default runtime validation to its own function
    018657b37 use cri-tools version from dependencies.yaml
    406f367cb use AddInheritableCapabilities
    9070d982d config: add field AddInheritableCapabilities
    9d5fbfd90 resourcestore: add test for stages
    40d41e3fb server: update stages according to progress with resource creation
    bce2bc388 resource store: return stage when a watcher is requested
    a8e2fc166 resource store: introduce stages
    1955be644 Add conmon-rs e2e to ansible playbook
    24304da5e server: return already created ID for duplicated requests
    6b627cbc0 cli: fix some inconsistencies in the help text
    0cdd90155 Update vendored files
    14926effc go.mod: update goresctrl to v0.3.0
    53182dd9b build(deps): bump github.com/urfave/cli/v2 from 2.11.2 to 2.15.0
    3b6b98872 Add scripts to run node e2e tests using custom cri-o builds
    6d66ea7e6 Fix integration CI runs
    7a0b131f5 build(deps): bump sigs.k8s.io/zeitgeist from 0.3.1 to 0.3.2
    388032759 metrics: close listener on shutdown
    ee5d97254 cgmgr: use NewSystemd from createSandboxCgroup
    aede1956a contrib/test/ci: add rhel9 variant-specific changes
    8ec499266 removes async
    b2a72cbd8 migrates tests to run on GCP
    76ec212ea Update build instructions for RHEL 8 distribution

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-04-05 16:03:55 -04:00
Bruce Ashfield
27460610d6 containerd: update to 1.7.0
Bumping containerd to version v1.7.0-11-g6ea9bc57f, which comprises the following commits:

    d81fc15af update runc binary to v1.1.5
    755efbe64 go.mod: github.com/opencontainers/runc v1.1.5
    90591db47 Defer uid lookups on Darwin
    b7d87b190 Add `WithReadonlyTempMount` to create readonly temporary mounts
    1c1b6bcb2 CRI: Don't always close netConfMonitor channel
    cf2e454bf Sandbox: Correct/add some fields to Status()
    ce68e8e0d Sandbox: Cleanup shim on Start failure
    e13a9165e Prepare release notes for v1.7.0
    625217d5f RELEASES.md: describe the deprecated config properties
    703e2ba4b docs: link docs/managed-opt.md to client.Install
    f2bb9c9b0 Go 1.20.2
    56354c7de Update ttrpc to v1.2.1
    5144ba9c4 sandbox: create sandbox with network namespace path
    dd3eedf3c labels: Add LabelDistributionSource
    5c9c630c3 use uppercase letters for flag usage
    0efc498d3 Prepare release notes for v1.7.0-rc.3
    ff4acdc42 metadata: add comments about Image.CreatedAt
    6d46bb410 go.mod: go.opentelemetry.io/otel/* v1.14.0
    d26587c72 archive: disable looking up usernames and groupnames on the host
    535ef5054 go.mod: github.com/stretchr/testify v1.8.2
    2b4f830ed go.mod: github.com/opencontainers/selinux v1.11.0
    6bfc82daf go.mod: github.com/opencontainers/runtime-spec v1.1.0-rc.1
    7c70185ae go.mod: github.com/klauspost/compress v1.16.0
    8e67b2731 go.mod: github.com/imdario/mergo v0.3.13
    6afec5558 go.mod: github.com/emicklei/go-restful/v3 v3.10.1
    c4f928f88 go.mod: github.com/containerd/ttrpc v1.2.0
    5630d6a84 go.mod: github.com/containerd/fifo v1.1.0
    6d9513231 go.mod: github.com/containerd/cgroups/v3 v3.0.1
    da1ffdd75 go.mod: github.com/Microsoft/hcsshim v0.10.0-rc.7
    60738e31d Update imgcrypt to v1.1.7
    8a4d409b9 Add release notes for v1.7.0-rc.2
    d602c9aec docs: fix typo of shim.RunManager's function comment
    f70657650 feat: tag image using Transfer api
    f7eb86ef3 Sandbox: Delete shim+shutdown sandbox on create failure
    6b4b6956e Sandbox: Fix/enhance error messages for Create
    8ce3e4e15 epoch: fix unit test when SOURCE_DATE_EPOCH is set
    32ed559c8 Add Windows Sandbox Stats (sbserver)
    08aa576a9 Add Windows Sandbox Stats
    8137e41c4 Add ArgsEscaped support for CRI
    5946c1051 *: fix code style issue
    98cb6d7eb cri/sbserver: ignore the NOT_FOUND error in exec cleanup
    01671e9fc cri: add config ut for invalid drain io timeout value
    55e25f164 integration: add testcase to drain exec IO in time
    ffebcb122 cri: disable drain-exec-IO if it is empty timeout
    791f137a5 *: update drainExecSyncIO docs and validate the timeout
    13bf5565e [transfer] update export to use image store references
    e2283edef [transfer] update export API types
    f6491b004 feat: export images using Transfer api
    b9d7eae1a feat(api): add fields to ImageExportStream
    3c18decea *: add DrainExecSyncIOTimeout config and disable as by default
    a9cbddd65 *: fix typo and skip exec-io-drain-testcase in win
    b91f42a14 ctr/tasks: support remapped UID/GID
    2e96ba95e Create config struct to take user input
    f25ec98d0 Fix linting error `sets.String is deprecated`
    8145b15f0 Bump k8s.io deps
    04dfd6275 pkg/cri/sbserver: add timeout to drain exec io
    82c0f4ff8 pkg/cri/server: add timeout to drain exec io
    43d36a254 Add experimental section to RELEASES.md
    cd84f752c Prepare release notes for v1.7.0-rc.1
    ae42f836f Update mailmap
    4522ad886 Update CRI guide link
    57fb2d30f Add max shim version environment variable
    5c6e9f83d Fix streaming manager deadlock on collection
    acf6e9411 Update README with location of security audits
    30883d831 Increase CI workflow timeout on Windows.
    af7477e43 docs: fix typos in historical/design/data-flow.md
    6b589a89f releases: mark 1.5 as EOL
    dba6f9db1 Add version to shim protocol
    36ae2f6b9 bump go-cni to v1.1.9
    cf46d3c6f Treat sandboxes as root gc resources and scan referenced objects
    35d42b47f Add Linux arm64 arch to install-protobuf script
    727f8530c Prepare release notes for v1.7.0-rc.0
    2e9aaf094 docs: update instructions for enabling NRI.
    310be5ce6 pkg/nri: update NRI configuration.
    8a47c6910 Add a leading space after the comment sign
    f53417921 Add unit test to getSupportedPlatform
    a6ad9e04e Rewrite install-protobuf script
    3769b4840 Rewrite install-protobuf script
    47305392c Add configuration options to local transfer service
    bd0a2a927 CRI: remove duplicated snapshotters code
    49abbe4f2 fix failing TestCDIInjections
    30e4a1409 update CDI version to v0.5.4
    4728800ab runtime/v2: Get rid of last logrus.Fields usage
    4278fbbc7 runtime/v2: Call onCloseWithShimLog for grpc shims
    06e085c8b Add Fields type alias to log package
    0ecdd341d docs: add more comment to logging.LoggerFunc
    ea83632a8 docs: Show how to select GRPC for shims
    369339897 Migrate from k8s.gcr.io to registry.k8s.io
    a48dbefc1 Fix concurrent writes for UpdateContainerStats
    dc27cc0a2 Add macOS build notes
    56274749c sandbox: start sandbox with options
    2716fd041 dependency: bump go.etcd.io/bbolt to v1.3.7
    979a74412 runtime/v2: Log BootstrapParams
    4baa1876b contrib/apparmor: remove code related to apparmor_parser version
    0ced6ac64 Prepare release notes for v1.7.0-beta.4
    90d004ae8 Go 1.20.1
    281f89a9d go.mod: go 1.19
    d8b68e3cc Stop using math/rand.Read and rand.Seed (deprecated in Go 1.20)
    a9ac5f9cb lint: remove `//nolint:dupword` that are no longer needed
    9b510e9a8 lint: silence "SA1019: tar.TypeRegA has been deprecated... (staticheck)"
    8bf975b4f lint: silence "type `HostFileConfig` is unused (unused)"
    4b9fd6ba5 golangci-lint v1.51.1
    ac31c9a53 Clean up repeated package import
    39bac0dbe error strings should not be capitalized
    9a9cfe85e Go 1.19.6
    0166783c7 cni: pass in the cgroupPath capability argument
    d14758b60 go.mod: bump to go-cni main
    e855a5998 cmd/ctr/commands/images: support usage subcommand
    9c82e929f release: xx v1.2.1
    844252164 Add fallback for windows platforms without osversion
    081601f52 Update imagestore interface to support multiple references
    646bc3a94 CRI: Create DefaultCRIAnnotations helper
    5aab634e1 CRI: Pass sandbox annotations to _other platforms
    2b24af8d1 Use options to pass PodSandboxConfig to shims
    ebbcb57a4 pkg/cri/sbserver: experimental NRI integration for CRI.
    8a1dca0f4 pkg/cri: split out NRI API from pkg/cri/server.
    a8bb1ad2a loadConfig pre-inspection in advance
    36e7dbdcb ctr version: add args check, prohibit incoming args
    750d18ace Extract CRI instrument package
    60d04b0b0 pkg: rename {blockio,rdt}_default.go -> nonlinux.go
    b61988670 go.mod: github.com/containerd/typeurl/v2 v2.1.0
    74b371b98 CRI: Mirror generic toml runtime config under server
    8ef298d86 Add transport credentials GRPC opt
    77fc0948c Use switch when creating TTRPC/GRPC client
    a82e37a5a Add shim bootstrap params
    fc2e761e2 Initial GRPC client support
    9e5c207e4 Wire up client bridges
    4b1ebef3c Add Sandbox service GRPC bridge
    47cb5f64b Add Task Service GRPC bridge
    51a8db233 Send container events with nil PodSandboxStatus
    27c8f4085 Move PLEG event generation back to sbserver to avoid missing pod sandbox status
    7cf556075 test: add hostNetwork tests for both windows and linux
    d33a43cc2 pkg/apparmor: clarify Godoc
    a3265102d Revert "Don't check for apparmor_parser to be present"
    c990e3f2e contrib/apparmor: remove version-dependent rules
    fe0116ec2 CI: skip some jobs when `repo != containerd/containerd`
    3eda46af1 oci: fix additional GIDs
    ef2560d16 oci: fix loop iterator aliasing
    52f82acb7 btrfs: depend on kernel UAPI instead of libbtrfs
    62df35df6 *: introduce wrapper pkgs for blockio and rdt
    6cdc221f5 'go routine' should be 'goroutine'
    b0e97c0f9 Use multierror for cleanup error
    34314717b Remove sandox store and controller service type
    a788f6c79 Move local sandbox controller under plugins package
    2717685da Refactor sandbox controller interface
    0b33a45fa cri: fix Mirrors deprecation comment
    5bc3fea62 update fuzz function names in docs with golang naming convention
    904a87d26 docs: fix function names in fuzzing test documentation
    9e4acc028 importer: stream oci-layout and manifest.json

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-04-05 16:03:55 -04:00