Commit Graph

138 Commits

Author SHA1 Message Date
Bruce Ashfield
d3acb1a378 docker/moby: use generic DOCKER_COMMIT in do_compile
do_compile() is shared and shouldn't have been using SRCREV_moby
as that is obviously only set in the moby recipe.

Switch to using a generic DOCKER_COMMIT variable and set it in
both docker_moby and docker-ce.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-12-07 16:40:04 -05:00
Bruce Ashfield
3f45dc8e69 docker: add seccomp to default packageconfig settings
Much of meta-virt requires seccomp to function properly, so we
update docker to match that common default.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-12-07 16:12:33 -05:00
Bruce Ashfield
9d84fcdc6d docker: add mobyproject:moby to CVE_PRODUCT
Add mobyproject:moby to CVE_PRODUCT to reflect where the source
is coming from for both docker recipes.

We keep the old 'docker' designation for compatibility.

It is unclear whether or not we should also be adding the cli
and libnetwork to the CVE_PRODUCT. But since they are on
different SRCREVs and not vendored, we keep them out for now.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-12-07 16:12:33 -05:00
Bruce Ashfield
11caf690da moby: update to v20.10.21
Bumping moby to version v20.10.21-4-g4ed81ac0e2, which comprises the following commits:

    f292bf0f4f distribution: Error when pulling OCI artifacts
    0211f9e44d [20.10] update to Go 1.18.8 to address CVE-2022-41716
    f99cb8297b integration: download busybox-w32 from GitHub Release
    3f9dc25f5c update containerd binary to v1.6.9
    87ccd38cea vendor: moby/term, Azure/go-ansiterm for golang.org/x/sys/windows compatibility
    e83e465ae2 [20.10] vendor: github.com/moby/buildkit eeb7b65ab7d651770a5ec52a06ea7c96eb97a249 (v0.8 branch)
    9c84417c1b skip TestImagePullStoredfDigestForOtherRepo() on Windows and rootless
    5b5b5c6f13 builder: add missing doc comment
    05e25f7892 builder: fix running git commands on Windows
    2f3bf18014 [20.10] vendor moby/buildkit v0.8.3-31-gc0149372
    6699afa549 registry: allow "allow-nondistributable-artifacts" for Docker Hub
    4b9902bad4 Validate digest in repo for pull by digest
    c0d1188c14 builder: make git config isolation opt-in
    9f5f3abcee builder: isolate git from local system
    10db4c2db7 builder: explicitly set CWD for all git commands
    8816c3c2aa builder: modernize TestCheckoutGit
    11bdbf40b9 [20.10] Update to go 1.18.7 to address CVE-2022-2879, CVE-2022-2880, CVE-2022-41715
    66ddb7f91c Fix live-restore w/ restart policies + volume refs
    c003392582 contrib: make dockerd-rootless-setuptool.sh more robust
    53313be0f3 docker-rootless-setuptools.sh: use context after install
    9c486bd267 swagger: update links to logo
    fa17fab895 vendor: github.com/containerd/console v1.0.2
    481bee51b5 vendor: github.com/armon/go-metrics v0.4.1
    39ba2873e8 vendor: github.com/google/btree v1.1.2
    c2755f40cd vendor: github.com/hasicorp/memberlist v0.4.0
    5ba3208ec7 Dockerfile: Update Dockerfile syntax, switch to bullseye, add missing libseccomp-dev, remove build pack
    6d6a236286 [20.10] Update uses of Image platform fields in OCI image-spec
    2570784169 [20.10] vendor: github.com/moby/buildkit 3a1eeca59a9263613d996ead67d53a4b7d45723d (v0.8 branch)
    fcd4df906b Update some tests for supplementary group permissions
    6a0186b357 Wrap local calls to the content and lease service
    3d4616f943 Update to go 1.18.6 to address CVE-2022-27664, CVE-2022-32190
    23c7d84b84 docs: api: adjust ContainerWaitResponse error as optional
    3e9e79d134 docs: api: document ImageSummary fields (api v1.39-v1.41)
    fdd438ae03 api: docs: improve documentation of ContainerConfig type (API v1.30-v1.41)
    97014a8db5 namesgenerator: remove Valentina Tereshkova
    e44d7f735e AdditionalGids must include effective group ID
    9e7662e4a7 [20.10] vendor: update containerd to latest of docker-20.10 branch
    7dac25a3a9 vendor: update tar-split to v0.11.2
    8bd86a0699 update containerd binary to v1.6.8
    6c8dd6a6f2 update runc to v1.1.4
    418c141e64 [20.10 backport] daemon: kill exec process on ctx cancel
    d127287d92 Allow different syscalls from kernels 5.12 -> 5.16
    57db169641 seccomp: add support for Landlock syscalls in default policy
    7ba8ca042c Update golang to 1.18.5
    f2a3c3bcef update golang to 1.18.4
    a99c9cd852 update golang to 1.18.3
    82939f536b update golang to 1.18.2
    ecd1aa081f update golang to 1.18.1
    7ba67d05a8 [20.10] vendor: update archive/tar for go 1.18
    0bc432241e update golang to 1.18.0
    bb95d09f9a staticcheck: ignore "SA1019: strings.Title is deprecated"
    a7299ae72c Dockerfile: update golangci-lint v1.44.0
    d97fd533cf integration-cli: SA5011: possible nil pointer dereference (staticcheck)
    e6aee04a88 client.NewClientWithOpts(): remove redundant type assertion (gosimple)
    0523323c28 daemon/logger/awslogs: suppress false positive on hardcoded creds (gosec)
    adeb29c64c client/request.go:157:8: SA1019: err.Temporary is deprecated (staticcheck)
    50361d91a6 registry: trimV1Address(): simplify trimming trailing slash
    ae3a9337dd golangci.yml: do not limit max reported issues
    9820255a1c golangci.yml: skip some tests
    d223f37300 golangci.yml: update regex for ignoring SA1019
    ec3bfba89d graphdriver: temporarily ignore unsafeptr: possible misuse of reflect.SliceHeader
    f2f387b131 daemon: var-declaration: should omit type bool (revive)
    2fb7c9fea7 daemon/config: error strings should not be capitalized
    fa6954cb98 reformat "nolint" comments
    45fa675a35 if-return: redundant if ...; err != nil check (revive)
    9e88f8435a daemon/splunk: ignore G402: TLS MinVersion too low for now
    2de90ebbe4 pkg/archive: RebaseArchiveEntries(): ignore G110
    14b475d091 daemon/stats: fix notRunningErr / notFoundErr detected as unused (false positive)
    db7b3f4737 unused: ignore false positives
    b6de0ca7c5 G601: Implicit memory aliasing in for loop
    e8b838e99f gosec: G601: Implicit memory aliasing in for loop
    2ddf6e598a gosimple: S1039: unnecessary use of fmt.Sprintf
    fadf8bbdff staticcheck: SA4001: &*x will be simplified to x. It will not copy x
    7573e32577 client: S1031: unnecessary nil check around range (gosimple)
    e738a57a6d daemon/logger/journald: fix linting errors
    34f6b94255 gosec: G404: Use of weak random number generator
    a6d7b61c8b update containerd binary to v1.6.7
    b4ba1ee22f update runc binary to v1.1.3
    da8828c4b3 api: swagger: fix invalid example value (API v1.39-v1.41)
    9501d91e19 api: swagger: document BuildCache fields (API v1.39-v1.41)
    61fdea902b api: swagger: document BuildCache fields.
    c77432c889 [20.10] Update golang to 1.17.13
    2833aa1e4b docs: api: add missing "platform" query-arg on create (v1.41)
    a8c28260ad api: swagger: add missing "platform" query-arg on create
    cfdc075b1c Fix file capabilities droping in Dockerfile
    2daa6bb6b3 Windows: Re-create custom NAT networks after restart if missing from HNS
    903cd53ce4 vendor: libnetwork 0dde5c895075df6e3630e76f750a447cf63f4789
    eccaf6d368 [20.10] update golang to 1.17.12
    ff7feeac37 vendor: github.com/containerd/continuity v0.3.0

Bumping libnetwork to version v0.7.0-dev.3-1841-gdcdf8f17, which comprises the following commits:

    5e08bdb1 Revert: Added API to set ephemeral port allocator range
    563fe8e2 README.md: repo was moved to https://github.com/moby/moby/tree/master/libnetwork
    bea0bcf5 libnetwork: skip firewalld management for rootless
    af0c46d8 Apply peformance tuning to new sandboxes also

Bumping docker-cli to version v20.10.21, which comprises the following commits:

    3e3677e47d docs: fix links to BuildKit backend
    20e3951aeb Remove "experimental" gates around "--platform" in bash completion
    75d7ce92a2 fixed the plugin command docker-runc
    a12c535f6e [20.10] vendor docker 03df974ae9e6c219862907efdd76ec2e77ec930b (v20.10.20)
    d18a3e9004 [20.10] vendor moby/buildkit v0.8.3-31-gc0149372
    932ca73874 [20.10] vendor: github.com/docker/docker v20.10.19
    7d51e65e72 [20.10] vendor: github.com/moby/buildkit 3a1eeca59a9263613d996ead67d53a4b7d45723d (v0.8 branch)
    1ea8d69d6f feat(docker): add context argument completion
    e82aa85741 [20.10] vendor: github.com/docker/docker v20.10.18
    e9176b36cc [20.10] vendor: github.com/containerd/continuity v0.3.0
    bc6ff39e42 docs/reference: run.md update confusing example name
    3fa7a8654f docs: update deprecation status for "overlay2.override_kernel_check"
    3e06ce8bfa [20.10] Update go 1.18.7 to address CVE-2022-2879, CVE-2022-2880, CVE-2022-41715
    93eead45ee Update to go 1.18.6 to address CVE-2022-27664, CVE-2022-32190
    45075ea08c [20.10] vendor: github.com/docker/docker v20.10.17
    c2dcaecf19 make compose plugin detection in bash completion work on Mac OS
    613b9362d0 Detect compose plugin
    b30d250320 Add completion for docker-compose plugin
    6b25bc3003 fix race condition in TestRemoveForce
    bdac0b38d9 Update golang to 1.18.5
    c70b01ec1f update golang to 1.18.4
    0389090aeb update golang to 1.18.3
    c904936d69 update golang to 1.18.2
    386d50c2e9 update golang to 1.18.1
    990186f2f6 update go to 1.18.0
    86bf1966e2 staticcheck: ignore SA1019: strings.Title is deprecated
    b3022b91d1 [20.10] Dockerfile.lint: use go install
    f14ba9f5d7 [20.10] Dockerfile: use syntax=docker/dockerfile:1
    c189c4dbea [20.10] vendor: github.com/json-iterator/go v1.1.12 for Go 1.18 compatibility
    0c46ffc1f9 [20.10] vendor: github.com/modern-go/reflect2 v1.0.2 for Go 1.18 compatibility
    6be9ce798e [20.10] vendor: github.com/google/gofuzz v1.0.0
    779ed309a8 lint: update golangci-lint to v1.45.2
    2f7e84be65 linting: fix incorrectly formatted errors (revive)
    e628209d9b linting: ignore some "G101: Potential hardcoded credentials" warnings
    80a3add604 cli/command/container: unnecessary use of fmt.Sprintf (gosimple)
    80fb0d575e [20.10] Update golang to 1.17.13
    d72bef2088 [20.10] update golang to 1.17.12
    7502d7e560 Fix dead external link
    308624c3b1 fix: remove asterisk from docker command suggestions
    de7d866b6a [20.10] update golang to 1.17.11
    240e4b5501 [20.10] vendor: golang.org/x/sys v0.0.0-20220412211240-33da011f77ad
    5d4776bd90 [20.10] update golang to 1.17.10
    49e9c2ae3d vendor: golang.org/x/sys  63515b42dcdf9544f4e6a02fd7632793fde2f72d (for Go 1.17)
    87a3ce2699 vendor: golang.org/x/sys d19ff857e887eacb631721f188c7d365c2331456
    1d8abed17d vendor: update x/sys to 134d130e
    31dad66f9a [20.10] update golang to 1.17.9
    80f673bf9e gofmt with go1.17
    3d4cc8e699 [20.10] update remaining files to go1.17.8
    30277a8f80 update go to 1.17.8
    cfef3a7dc1 docs: deprecated: add entry for "fluent-async-connect" log-opt
    53426025c3 [20.10] docs: reformat table for compatibility
    573a664639 Describe privileged mode in terms of capabilities
    cf0ab7ac4c [20.10] vendor: github.com/docker/distribution v2.8.1
    d05fd4ffc8 [20.10] vendor: github.com/opencontainers/image-spec v1.0.2
    870f138250 [20.10] vendor: github.com/docker/docker v20.10.14
    198d6b8724 [20.10] circleci: update buildx to v0.8.2
    55a14ec851 [20.10] update remaining Dockerfiles to go 1.16.15
    1f9a0df05a e2e: update docker-compose to 1.29.2
    4ae338b33a docs: reference: remove trailing space to fix yaml formatting
    6380142dd4 docs: fix (table) formatting, fix some broken links
    82f422fcf3 docs: build: fix minor markdown and syntax issues
    80fd77903b Update the list of log drivers
    c3d4d623c8 Fix CMD --ignored-param1 example
    2e82d11def docs: dockerd: fix broken link in blockquote area
    738a6ee1cc improve cp documentation with some illustration examples
    246d96bb6c docs: unify "docker create" and "docker run" reference
    2fd0f17057 docs: add missing documentation for --pull flag
    5fa500000a Fix incorrect pointer inputs to `json.Unmarshal`
    1e6a8ce2b7 Dockerfile: update xx to 1.1
    6f7a931a2d [20.10] use GO_LDFLAGS instead of LDFLAGS to prevent inheriting unrelated options
    91bab605f7 [20.10] vendor.conf: don't use git:// protocol
    a282e0c5d2 [20.10] update to go 1.16.15 to address CVE-2022-24921
    700364e304 Fix mistake with env var example in docker run docs
    62d27c32ff Update WORKDIR command information
    c0e952cf04 Fix the (dead) link for docs for Dockerfile syntax reference
    04104a04d3 Update dockerd.md
    b721998b7b Fixing typo (his --> its)
    4065e1246e format create.md table
    f1002eb9fb Fix typo
    e97c7b240e added missing closing parenthese
    aa78937634 Update stats.md add example json output
    40fe0573aa Update Ubuntu version number references in push.md
    c9737e1c37 docs/daemon: replace deprecated '-g' option for '--data-root'
    5c6723d080 Correct device syntax to --gpus
    fd5fc61ecd [20.10] Update Go to 1.16.14
    3624019d83 [20.10] update Go to 1.16.13
    f3ff8e6ad6 [20.10] vendor: compose-on-kubernetes v0.5.0 to remove github.com/golang/glog
    ee1ac1b319 fix innocuous data-race when config.Load called in parallel
    38dd744a11 [20.10] Update Go to 1.16.12
    4de40a825e Update Go to 1.16.11
    03fa8f92c8 Update Go to 1.16.10
    9989fdbc40 Update most links in docs to use https by default
    0e20c1fd21 Update Go to 1.16.9
    1c0927a041 Dockerfile: update tonistiigi/xx to 1.0.0-rc.2, add XX_VERSION arg
    82f9d5921b info: skip client-side warning about seccomp profile on API >= 1.42
    adb01ca79d docs: some minor touch-ups in checkpoint reference
    8260476a06 docs: remove trailing space to fix generated YAML format
    bce2e1f953 docs: create.md: typo fix
    44064f51c8 Fix typo in documentation - build.md
    292779add5 Add doc for BUILDKIT_PROGRESS env var
    f2e79b826c docs: use "console" code-hint for shell examples
    fa46b92361 docs: rewrite reference docs for --stop-signal and --stop-timeout
    400f81089a experimental: fix broken link to "checkpoint and restore" page
    c72057c8db docs: move checkpoint/restore doc from experimental into reference
    77db97d595 Use private network address for default-address-pools setting in daemon.json example
    cbf0d2b7b7 docs: fix some broken anchors
    d0014a86bc docs: fix description of restart-delay to mention max (1 minute)
    6c1c8b55aa docs: fix search results by filterd is-official
    44fdac11f5 Update Go to 1.16.8
    061051c24d docs: add missing redirect, and remove /go/experimental redirect
    2012fbf111 Update Go to 1.16.7
    42d1c02750 registry: ensure default auth config has address
    0b924e51fc Update to go1.16.6
    6288e8b1ac change TestNewAPIClientFromFlagsWithHttpProxyEnv to an e2e test
    1e9575e81a cli/config/configfile: various test cleanups
    c98e9c47ca Use designated test domains (RFC2606) in tests
    8437cfefae context: deprecate support for encrypted TLS private keys
    68a5ca859f cli/context: ignore linting warnings about RFC 1423 encryption
    8a64739631 Update Dockerfiles to latest syntax, remove "experimental"
    1d37fb3027 Deprecate Kubernetes context support
    0793f96394 Deprecate Kubernetes stack support
    b639ea8b89 Deprecate Kubernetes stack support

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>

docker-ce: update to v20.10.21

Bumping docker to version v20.10.21-4-g4ed81ac0e2, which comprises the following commits:

    f292bf0f4f distribution: Error when pulling OCI artifacts
    0211f9e44d [20.10] update to Go 1.18.8 to address CVE-2022-41716
    f99cb8297b integration: download busybox-w32 from GitHub Release
    3f9dc25f5c update containerd binary to v1.6.9
    87ccd38cea vendor: moby/term, Azure/go-ansiterm for golang.org/x/sys/windows compatibility
    e83e465ae2 [20.10] vendor: github.com/moby/buildkit eeb7b65ab7d651770a5ec52a06ea7c96eb97a249 (v0.8 branch)
    9c84417c1b skip TestImagePullStoredfDigestForOtherRepo() on Windows and rootless
    5b5b5c6f13 builder: add missing doc comment
    05e25f7892 builder: fix running git commands on Windows
    2f3bf18014 [20.10] vendor moby/buildkit v0.8.3-31-gc0149372
    6699afa549 registry: allow "allow-nondistributable-artifacts" for Docker Hub
    4b9902bad4 Validate digest in repo for pull by digest
    c0d1188c14 builder: make git config isolation opt-in
    9f5f3abcee builder: isolate git from local system
    10db4c2db7 builder: explicitly set CWD for all git commands
    8816c3c2aa builder: modernize TestCheckoutGit
    11bdbf40b9 [20.10] Update to go 1.18.7 to address CVE-2022-2879, CVE-2022-2880, CVE-2022-41715
    66ddb7f91c Fix live-restore w/ restart policies + volume refs
    c003392582 contrib: make dockerd-rootless-setuptool.sh more robust
    53313be0f3 docker-rootless-setuptools.sh: use context after install
    9c486bd267 swagger: update links to logo
    fa17fab895 vendor: github.com/containerd/console v1.0.2
    481bee51b5 vendor: github.com/armon/go-metrics v0.4.1
    39ba2873e8 vendor: github.com/google/btree v1.1.2
    c2755f40cd vendor: github.com/hasicorp/memberlist v0.4.0
    5ba3208ec7 Dockerfile: Update Dockerfile syntax, switch to bullseye, add missing libseccomp-dev, remove build pack
    6d6a236286 [20.10] Update uses of Image platform fields in OCI image-spec
    2570784169 [20.10] vendor: github.com/moby/buildkit 3a1eeca59a9263613d996ead67d53a4b7d45723d (v0.8 branch)
    fcd4df906b Update some tests for supplementary group permissions
    6a0186b357 Wrap local calls to the content and lease service
    3d4616f943 Update to go 1.18.6 to address CVE-2022-27664, CVE-2022-32190
    23c7d84b84 docs: api: adjust ContainerWaitResponse error as optional
    3e9e79d134 docs: api: document ImageSummary fields (api v1.39-v1.41)
    fdd438ae03 api: docs: improve documentation of ContainerConfig type (API v1.30-v1.41)
    97014a8db5 namesgenerator: remove Valentina Tereshkova
    e44d7f735e AdditionalGids must include effective group ID
    9e7662e4a7 [20.10] vendor: update containerd to latest of docker-20.10 branch
    7dac25a3a9 vendor: update tar-split to v0.11.2
    8bd86a0699 update containerd binary to v1.6.8
    6c8dd6a6f2 update runc to v1.1.4
    418c141e64 [20.10 backport] daemon: kill exec process on ctx cancel
    d127287d92 Allow different syscalls from kernels 5.12 -> 5.16
    57db169641 seccomp: add support for Landlock syscalls in default policy
    7ba8ca042c Update golang to 1.18.5
    f2a3c3bcef update golang to 1.18.4
    a99c9cd852 update golang to 1.18.3
    82939f536b update golang to 1.18.2
    ecd1aa081f update golang to 1.18.1
    7ba67d05a8 [20.10] vendor: update archive/tar for go 1.18
    0bc432241e update golang to 1.18.0
    bb95d09f9a staticcheck: ignore "SA1019: strings.Title is deprecated"
    a7299ae72c Dockerfile: update golangci-lint v1.44.0
    d97fd533cf integration-cli: SA5011: possible nil pointer dereference (staticcheck)
    e6aee04a88 client.NewClientWithOpts(): remove redundant type assertion (gosimple)
    0523323c28 daemon/logger/awslogs: suppress false positive on hardcoded creds (gosec)
    adeb29c64c client/request.go:157:8: SA1019: err.Temporary is deprecated (staticcheck)
    50361d91a6 registry: trimV1Address(): simplify trimming trailing slash
    ae3a9337dd golangci.yml: do not limit max reported issues
    9820255a1c golangci.yml: skip some tests
    d223f37300 golangci.yml: update regex for ignoring SA1019
    ec3bfba89d graphdriver: temporarily ignore unsafeptr: possible misuse of reflect.SliceHeader
    f2f387b131 daemon: var-declaration: should omit type bool (revive)
    2fb7c9fea7 daemon/config: error strings should not be capitalized
    fa6954cb98 reformat "nolint" comments
    45fa675a35 if-return: redundant if ...; err != nil check (revive)
    9e88f8435a daemon/splunk: ignore G402: TLS MinVersion too low for now
    2de90ebbe4 pkg/archive: RebaseArchiveEntries(): ignore G110
    14b475d091 daemon/stats: fix notRunningErr / notFoundErr detected as unused (false positive)
    db7b3f4737 unused: ignore false positives
    b6de0ca7c5 G601: Implicit memory aliasing in for loop
    e8b838e99f gosec: G601: Implicit memory aliasing in for loop
    2ddf6e598a gosimple: S1039: unnecessary use of fmt.Sprintf
    fadf8bbdff staticcheck: SA4001: &*x will be simplified to x. It will not copy x
    7573e32577 client: S1031: unnecessary nil check around range (gosimple)
    e738a57a6d daemon/logger/journald: fix linting errors
    34f6b94255 gosec: G404: Use of weak random number generator
    a6d7b61c8b update containerd binary to v1.6.7
    b4ba1ee22f update runc binary to v1.1.3
    da8828c4b3 api: swagger: fix invalid example value (API v1.39-v1.41)
    9501d91e19 api: swagger: document BuildCache fields (API v1.39-v1.41)
    61fdea902b api: swagger: document BuildCache fields.
    c77432c889 [20.10] Update golang to 1.17.13
    2833aa1e4b docs: api: add missing "platform" query-arg on create (v1.41)
    a8c28260ad api: swagger: add missing "platform" query-arg on create
    cfdc075b1c Fix file capabilities droping in Dockerfile
    2daa6bb6b3 Windows: Re-create custom NAT networks after restart if missing from HNS
    903cd53ce4 vendor: libnetwork 0dde5c895075df6e3630e76f750a447cf63f4789
    eccaf6d368 [20.10] update golang to 1.17.12
    ff7feeac37 vendor: github.com/containerd/continuity v0.3.0

Bumping libnetwork to version v0.7.0-dev.3-1841-gdcdf8f17, which comprises the following commits:

    5e08bdb1 Revert: Added API to set ephemeral port allocator range
    563fe8e2 README.md: repo was moved to https://github.com/moby/moby/tree/master/libnetwork
    bea0bcf5 libnetwork: skip firewalld management for rootless
    af0c46d8 Apply peformance tuning to new sandboxes also

Bumping docker-cli to version v20.10.21, which comprises the following commits:

    3e3677e47d docs: fix links to BuildKit backend
    20e3951aeb Remove "experimental" gates around "--platform" in bash completion
    75d7ce92a2 fixed the plugin command docker-runc
    a12c535f6e [20.10] vendor docker 03df974ae9e6c219862907efdd76ec2e77ec930b (v20.10.20)
    d18a3e9004 [20.10] vendor moby/buildkit v0.8.3-31-gc0149372
    932ca73874 [20.10] vendor: github.com/docker/docker v20.10.19
    7d51e65e72 [20.10] vendor: github.com/moby/buildkit 3a1eeca59a9263613d996ead67d53a4b7d45723d (v0.8 branch)
    1ea8d69d6f feat(docker): add context argument completion
    e82aa85741 [20.10] vendor: github.com/docker/docker v20.10.18
    e9176b36cc [20.10] vendor: github.com/containerd/continuity v0.3.0
    bc6ff39e42 docs/reference: run.md update confusing example name
    3fa7a8654f docs: update deprecation status for "overlay2.override_kernel_check"
    3e06ce8bfa [20.10] Update go 1.18.7 to address CVE-2022-2879, CVE-2022-2880, CVE-2022-41715
    93eead45ee Update to go 1.18.6 to address CVE-2022-27664, CVE-2022-32190
    45075ea08c [20.10] vendor: github.com/docker/docker v20.10.17
    c2dcaecf19 make compose plugin detection in bash completion work on Mac OS
    613b9362d0 Detect compose plugin
    b30d250320 Add completion for docker-compose plugin
    6b25bc3003 fix race condition in TestRemoveForce
    bdac0b38d9 Update golang to 1.18.5
    c70b01ec1f update golang to 1.18.4
    0389090aeb update golang to 1.18.3
    c904936d69 update golang to 1.18.2
    386d50c2e9 update golang to 1.18.1
    990186f2f6 update go to 1.18.0
    86bf1966e2 staticcheck: ignore SA1019: strings.Title is deprecated
    b3022b91d1 [20.10] Dockerfile.lint: use go install
    f14ba9f5d7 [20.10] Dockerfile: use syntax=docker/dockerfile:1
    c189c4dbea [20.10] vendor: github.com/json-iterator/go v1.1.12 for Go 1.18 compatibility
    0c46ffc1f9 [20.10] vendor: github.com/modern-go/reflect2 v1.0.2 for Go 1.18 compatibility
    6be9ce798e [20.10] vendor: github.com/google/gofuzz v1.0.0
    779ed309a8 lint: update golangci-lint to v1.45.2
    2f7e84be65 linting: fix incorrectly formatted errors (revive)
    e628209d9b linting: ignore some "G101: Potential hardcoded credentials" warnings
    80a3add604 cli/command/container: unnecessary use of fmt.Sprintf (gosimple)
    80fb0d575e [20.10] Update golang to 1.17.13
    d72bef2088 [20.10] update golang to 1.17.12
    7502d7e560 Fix dead external link

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>

containerd: update to v1.6.9

Bumping containerd to version v1.6.9-12-g6c41694da, which comprises the following commits:

    5af8d89ce overlayutils: Add fastpath for userxattr check
    303f608dd [release/1.6] update to Go 1.18.8 to address CVE-2022-41716
    3f9f9508d ctr export strictly match default platform
    df73acad5 [release/1.6] go.mod: Bump hcsshim to v0.9.5
    658490b78 ctr import: strictly match platform
    4907b4d72 Migrate away from GitHub actions set-output
    f1493f665 Prepare release notes for v1.6.9
    346412f5a adding support of CAP_BPF and CAP_PERFMON
    99578d1fc Update mailmap
    a956d8415 Add logging volume metrics to Containerd CRI plugin
    29e2dea50 fix pusher concurrent close channel
    8a9d69385 [release/1.6] Stats() shouldn't assume s.container is non-nil
    a9adc7938 cri: PodSandboxStatus should tolerate missing task
    b66eb726a migrate from k8s.gcr.io to registry.k8s.io
    5b40993a5 [release/1.6] upgrade containerd/continuity from v0.2.2 to v0.3.0
    f2376e659 Update container with sandbox metadata after NetNS is created
    06f82efef archive: validate digests before use
    28324c529 [release/1.6] Update go 1.18.7, addresses CVE-2022-2879, CVE-2022-2880, CVE-2022-41715
    0aeeb62cb [release/1.6] update golangci-lint to v1.19.0
    7db9d1f76 Fix linter warnings
    4dc932e62 [release/1.6] gofmt with go1.19
    7b8d679ad [release/1.6] integration: remove use of deprecated io/ioutil
    926b9c72f retry request on writer reset
    b9a35c6af Add integration tests with failpoint
    1f29fac48 Persist container and sandbox if resource cleanup fails, like teardownPodNetwork
    a85709c6c integration: simplify CNI-fp and add README.md
    d89a8d223 pkg/failpoint: add FreeBSD link and update pkg doc
    b0ce2965a integration: Add injected failpoint testing for RunPodSandbox
    a7f956d86 integration: CNI bridge wrapper with failpoint
    07c479471 pkg/failpoint: add DelegatedEval API
    4a5bc05aa runtime/v2/shim: return if error in load plugin
    71ee7de24 bin/ctr,integration: new runc-shim with failpoint
    3e2e77849 runtime/v2: manager supports server interceptor
    cb935bf49 pkg/failpoint: init failpoint package
    2fdfd564c make xattr EPERM non-fatal in createTarFile
    89e49609d remotes/docker/config: Skipping TLS verification for localhost
    b720be2ce remove stray .zuul.yaml
    6b30bc4b4 .zuul: remove the zuul because it is offline
    0f7e258ee Set grpc code for unimplemented cri-api methods
    fb753e5cd update intergration
    6ee5bb7ea bump cri-api
    ae8598615 ContainerStatus to return container resources
    d3c7e31c8 Update CRI-API
    5b44c5271 vendor: golang.org/x/crypto v0.0.0-20220315160706-3147a52a75dd
    3507d600b update runc binary to v1.1.4
    1efd8b947 ci: remove GOPROXY environment variable due to https://github.com/go-yaml/yaml/issues/887

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-12-07 16:12:33 -05:00
Jose Quaresma
2d0f7255a7 docker/proxy: don't use -linkshared unconditionally
The linkshared is not supported in some machines like riscv64 and
when supported we can use the GO_LINKSHARED instaed.
So export GO_LINKSHARED on the recipe to be available for Makefile.

This is currently only used in libnetwork for the proxy build, but
could be used in additional locations in the future.

Signed-off-by: Jose Quaresma <jose.quaresma@foundries.io>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-09-20 08:42:10 -04:00
Bruce Ashfield
7cea149bb0 docker: reproducibility add -trimpath to go -> $GO patches
With this, we build and package docker without QA warnings due to
references to TMPDIR.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-09-13 11:25:46 -04:00
Bruce Ashfield
f6bf30aca6 docker: ensure that sysvinit and systemd are exclusive
The sysvinit functionality conflicts with the docker daemon
settings required for the systemd docker.socket.

Ensure that the sysvinit capabilities are only enabled if
systemd is not present.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-08-25 22:55:48 -04:00
Bruce Ashfield
bd60f149dc docker-ce: update to 20.10.17
Bumping moby to version v20.10.17-2-g3949ff121e, which comprises the following commits:

    ff7feeac37 vendor: github.com/containerd/continuity v0.3.0
    6f3f2b6d08 update containerd binary to v1.6.6
    b3bcb15da8 update containerd binary to v1.6.5
    f55b030fa0 system: unbreak build for darwin
    63ab12cd3a Port pkg/system/mknod.go to FreeBSD
    081e538fbd vendor: libnetwork f6ccccb1c082a432c2a5814aaedaca56af33d9ea
    8e9d647c01 [20.10] update golang to 1.17.11
    87ead7fd2a vendor: hcsshim a11a2c44e8a4aa9d66314b1d759ef582df5ab5e8
    27f8322324 vendor: libnetwork 2dab5620d4462865c6151e573b3e7fa5d3b8458b
    829951ec19 docs: api: /containers/{id}/attach/ws: remove unsupported query-args < v1.42
    6cbe73bfc0 Rename Reservation to Reservations in the open API
    d9ed3d7e28 update runc binary to v1.1.2
    a15acb4bd6 [20.10] vendor: golang.org/x/sys v0.0.0-20220412211240-33da011f77ad
    5f2e0b79ad [20.10] update golang to 1.17.10

Bumping libnetwork to version v0.7.0-dev.3-1835-gf6ccccb1, which comprises the following commits:

    af0c46d8 Apply peformance tuning to new sandboxes also
    23ffb31f Set ExternalPortReserved for dummy proxy
    9b82e422 Bump hcsshim
    9db86fb7 Only check if route overlaps routes with scope: LINK

Bumping docker-cli to version v20.10.17, which comprises the following commits:

    7502d7e56 Fix dead external link
    308624c3b fix: remove asterisk from docker command suggestions
    de7d866b6 [20.10] update golang to 1.17.11
    240e4b550 [20.10] vendor: golang.org/x/sys v0.0.0-20220412211240-33da011f77ad
    5d4776bd9 [20.10] update golang to 1.17.10
    49e9c2ae3 vendor: golang.org/x/sys  63515b42dcdf9544f4e6a02fd7632793fde2f72d (for Go 1.17)
    87a3ce269 vendor: golang.org/x/sys d19ff857e887eacb631721f188c7d365c2331456
    1d8abed17 vendor: update x/sys to 134d130e
    31dad66f9 [20.10] update golang to 1.17.9
    80f673bf9 gofmt with go1.17
    3d4cc8e69 [20.10] update remaining files to go1.17.8
    30277a8f8 update go to 1.17.8
    cfef3a7dc docs: deprecated: add entry for "fluent-async-connect" log-opt
    53426025c [20.10] docs: reformat table for compatibility
    573a66463 Describe privileged mode in terms of capabilities
    cf0ab7ac4 [20.10] vendor: github.com/docker/distribution v2.8.1
    d05fd4ffc [20.10] vendor: github.com/opencontainers/image-spec v1.0.2
    870f13825 [20.10] vendor: github.com/docker/docker v20.10.14
    198d6b872 [20.10] circleci: update buildx to v0.8.2
    55a14ec85 [20.10] update remaining Dockerfiles to go 1.16.15
    1f9a0df05 e2e: update docker-compose to 1.29.2
    4ae338b33 docs: reference: remove trailing space to fix yaml formatting
    6380142dd docs: fix (table) formatting, fix some broken links
    82f422fcf docs: build: fix minor markdown and syntax issues
    80fd77903 Update the list of log drivers
    c3d4d623c Fix CMD --ignored-param1 example
    2e82d11de docs: dockerd: fix broken link in blockquote area
    738a6ee1c improve cp documentation with some illustration examples
    246d96bb6 docs: unify "docker create" and "docker run" reference
    2fd0f1705 docs: add missing documentation for --pull flag
    5fa500000 Fix incorrect pointer inputs to `json.Unmarshal`
    1e6a8ce2b Dockerfile: update xx to 1.1
    6f7a931a2 [20.10] use GO_LDFLAGS instead of LDFLAGS to prevent inheriting unrelated options
    91bab605f [20.10] vendor.conf: don't use git:// protocol
    a282e0c5d [20.10] update to go 1.16.15 to address CVE-2022-24921
    700364e30 Fix mistake with env var example in docker run docs
    62d27c32f Update WORKDIR command information
    c0e952cf0 Fix the (dead) link for docs for Dockerfile syntax reference
    04104a04d Update dockerd.md
    b721998b7 Fixing typo (his --> its)
    4065e1246 format create.md table
    f1002eb9f Fix typo
    e97c7b240 added missing closing parenthese
    aa7893763 Update stats.md add example json output
    40fe0573a Update Ubuntu version number references in push.md
    c9737e1c3 docs/daemon: replace deprecated '-g' option for '--data-root'
    5c6723d08 Correct device syntax to --gpus
    fd5fc61ec [20.10] Update Go to 1.16.14
    3624019d8 [20.10] update Go to 1.16.13
    f3ff8e6ad [20.10] vendor: compose-on-kubernetes v0.5.0 to remove github.com/golang/glog
    ee1ac1b31 fix innocuous data-race when config.Load called in parallel
    38dd744a1 [20.10] Update Go to 1.16.12
    4de40a825 Update Go to 1.16.11
    03fa8f92c Update Go to 1.16.10
    9989fdbc4 Update most links in docs to use https by default
    0e20c1fd2 Update Go to 1.16.9
    1c0927a04 Dockerfile: update tonistiigi/xx to 1.0.0-rc.2, add XX_VERSION arg
    82f9d5921 info: skip client-side warning about seccomp profile on API >= 1.42
    adb01ca79 docs: some minor touch-ups in checkpoint reference
    8260476a0 docs: remove trailing space to fix generated YAML format
    bce2e1f95 docs: create.md: typo fix
    44064f51c Fix typo in documentation - build.md
    292779add Add doc for BUILDKIT_PROGRESS env var
    f2e79b826 docs: use "console" code-hint for shell examples
    fa46b9236 docs: rewrite reference docs for --stop-signal and --stop-timeout
    400f81089 experimental: fix broken link to "checkpoint and restore" page
    c72057c8d docs: move checkpoint/restore doc from experimental into reference
    77db97d59 Use private network address for default-address-pools setting in daemon.json example
    cbf0d2b7b docs: fix some broken anchors
    d0014a86b docs: fix description of restart-delay to mention max (1 minute)
    6c1c8b55a docs: fix search results by filterd is-official
    44fdac11f Update Go to 1.16.8
    061051c24 docs: add missing redirect, and remove /go/experimental redirect
    2012fbf11 Update Go to 1.16.7
    42d1c0275 registry: ensure default auth config has address

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-08-09 14:26:28 -04:00
Bruce Ashfield
dbe9ce60c2 docker-moby: update to 20.10.17
Bumping moby to version v20.10.17-2-g3949ff121e, which comprises the following commits:

    ff7feeac37 vendor: github.com/containerd/continuity v0.3.0
    6f3f2b6d08 update containerd binary to v1.6.6
    b3bcb15da8 update containerd binary to v1.6.5
    f55b030fa0 system: unbreak build for darwin
    63ab12cd3a Port pkg/system/mknod.go to FreeBSD
    081e538fbd vendor: libnetwork f6ccccb1c082a432c2a5814aaedaca56af33d9ea
    8e9d647c01 [20.10] update golang to 1.17.11
    87ead7fd2a vendor: hcsshim a11a2c44e8a4aa9d66314b1d759ef582df5ab5e8
    27f8322324 vendor: libnetwork 2dab5620d4462865c6151e573b3e7fa5d3b8458b
    829951ec19 docs: api: /containers/{id}/attach/ws: remove unsupported query-args < v1.42
    6cbe73bfc0 Rename Reservation to Reservations in the open API
    d9ed3d7e28 update runc binary to v1.1.2
    a15acb4bd6 [20.10] vendor: golang.org/x/sys v0.0.0-20220412211240-33da011f77ad
    5f2e0b79ad [20.10] update golang to 1.17.10

Bumping libnetwork to version v0.7.0-dev.3-1835-gf6ccccb1, which comprises the following commits:

    af0c46d8 Apply peformance tuning to new sandboxes also
    23ffb31f Set ExternalPortReserved for dummy proxy
    9b82e422 Bump hcsshim
    9db86fb7 Only check if route overlaps routes with scope: LINK

Bumping docker-cli to version v20.10.17, which comprises the following commits:

    7502d7e56 Fix dead external link
    308624c3b fix: remove asterisk from docker command suggestions
    de7d866b6 [20.10] update golang to 1.17.11
    240e4b550 [20.10] vendor: golang.org/x/sys v0.0.0-20220412211240-33da011f77ad
    5d4776bd9 [20.10] update golang to 1.17.10
    49e9c2ae3 vendor: golang.org/x/sys  63515b42dcdf9544f4e6a02fd7632793fde2f72d (for Go 1.17)
    87a3ce269 vendor: golang.org/x/sys d19ff857e887eacb631721f188c7d365c2331456
    1d8abed17 vendor: update x/sys to 134d130e
    31dad66f9 [20.10] update golang to 1.17.9
    80f673bf9 gofmt with go1.17
    3d4cc8e69 [20.10] update remaining files to go1.17.8
    30277a8f8 update go to 1.17.8
    cfef3a7dc docs: deprecated: add entry for "fluent-async-connect" log-opt
    53426025c [20.10] docs: reformat table for compatibility
    573a66463 Describe privileged mode in terms of capabilities
    cf0ab7ac4 [20.10] vendor: github.com/docker/distribution v2.8.1
    d05fd4ffc [20.10] vendor: github.com/opencontainers/image-spec v1.0.2
    870f13825 [20.10] vendor: github.com/docker/docker v20.10.14
    198d6b872 [20.10] circleci: update buildx to v0.8.2
    55a14ec85 [20.10] update remaining Dockerfiles to go 1.16.15
    1f9a0df05 e2e: update docker-compose to 1.29.2
    4ae338b33 docs: reference: remove trailing space to fix yaml formatting
    6380142dd docs: fix (table) formatting, fix some broken links
    82f422fcf docs: build: fix minor markdown and syntax issues
    80fd77903 Update the list of log drivers
    c3d4d623c Fix CMD --ignored-param1 example
    2e82d11de docs: dockerd: fix broken link in blockquote area
    738a6ee1c improve cp documentation with some illustration examples
    246d96bb6 docs: unify "docker create" and "docker run" reference
    2fd0f1705 docs: add missing documentation for --pull flag
    5fa500000 Fix incorrect pointer inputs to `json.Unmarshal`
    1e6a8ce2b Dockerfile: update xx to 1.1
    6f7a931a2 [20.10] use GO_LDFLAGS instead of LDFLAGS to prevent inheriting unrelated options
    91bab605f [20.10] vendor.conf: don't use git:// protocol
    a282e0c5d [20.10] update to go 1.16.15 to address CVE-2022-24921

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-08-09 14:26:28 -04:00
Bruce Ashfield
3cf7b71086 docker-ce: update to 20.10.16
Bumping moby to version v20.10.16, which comprises the following commits:

    a15acb4bd6 [20.10] vendor: golang.org/x/sys v0.0.0-20220412211240-33da011f77ad
    5f2e0b79ad [20.10] update golang to 1.17.10
    be7855fdbe vendor: update github.com/containerd/cgroups and github.com/cilium/ebpf
    414a9e24a7 update containerd binary to v1.6.4
    47b6a924b6 update containerd binary to v1.6.3
    6d7c2b2d26 update containerd binary to v1.6.2
    91708bf704 update containerd binary to v1.6.1
    53ae17008e Revert "[20.10] update containerd binary to 1.5.11"
    961b9a78d5 update runc binary to v1.1.1
    97972dac5f update runc binary to v1.1.0
    033a819714 [20.10] update golang to 1.17.9
    a80884126b Jenkinsfile: add workaround for CVE-2022-24765
    09d6fcdfec update to go 1.17.8 to address CVE-2022-24921
    5957684b2c Update Go to 1.17.7
    55b72c70ba Update Go to 1.17.6
    fdf3020bd5 Update Go to 1.17.5
    36e164ba80 Update Go to 1.17.4
    ecfba8f588 Update Go to 1.17.3
    4e14dcc125 Update Go to 1.17.2
    c32b5ece31 Update Go to 1.17.1
    7096508811 vendor: update archive/tar to match Go 1.17.0
    a1150245cc Update to Go 1.17.0, and gofmt with Go 1.17
    95cc7115fb hack/vendor.sh: allow go version to be specified with .0
    949c33b1c5 vendor: golang.org/x/sys  63515b42dcdf9544f4e6a02fd7632793fde2f72d (for Go 1.17)
    8392285876 vendor: golang.org/x/sys d19ff857e887eacb631721f188c7d365c2331456
    4e81bcf380 Makefile: update buildx to v0.8.2
    74e699c8d3 Makefile: update buildx version to v0.6.0
    bc3cc2e7ac Makefile: install buildx from binary release, instead of building
    492fac20af api: docs: fix indentation of HostConfig.SecurityOpt (v1.39-v1.41)
    3cba2682d8 api: docs: move ContainerWaitResponse to definitions (v1.39-v1.41)
    55e71450ae api: docs: move VolumeCreateOptions to definitions (v1.39-v1.41)
    c54362cd64 api: docs: move Volume examples inline (v1.39-v1.41)
    c60ff9b296 doc: server API Correct ImagesCreate - platform parameter added in 1.32
    7a45f7a8cc docs: cleanup swagger API with multiple examples (v1.25-v1.41)
    29bb9204bf api: docs: add IPAMConfig on IPAM (v1.41)
    77f6564369 api: docs: document MountPoint fields (v1.25-v1.41)
    51ea235ab8 api: docs: remove deprecated RootFS.BaseLayer (API v1.25-v1.41)
    3d6b4ae572 Correct type of Mounts in ContainerSummary in docs (v1.25-v1.40)
    6e8b9809b7 Correct type of Mounts in ContainerSummary in docs
    621a98dac0 api: docs: fix warning about comment indentation (API v1.40-v1.41)
    bb9ef98060 api: docs: update docs for /images/{name}/json (API v1.39-v1.41)
    88ca5cec4e daemon: fix error-message for minimum allowed kernel-memory limit
    3ea996abd7 docs: add missing KernelMemoryTCP to api v1.40 and v1.41
    b475bc95cd docs/api: add missing 400 response for POST /containers/{id}/wait
    ae07b3cc96 docs/api: update /containers/{id}/wait "condition" parameter (v1.30-v1.41)
    19555fa92d [20.10] vendor: github.com/docker/distribution v2.8.1
    32fe0bbb91 daemon: use RWMutex for stateCounter
    ed8fb00b65 errdefs: move GetHTTPErrorStatusCode to api/server/httpstatus
    3bd611d7a5 log error message when receiving an unexpected type error
    7dfe7a1752 [20.10] update containerd binary to 1.5.11
    af953d2f38 [20.10] vendor: containerd 7cfa023d95d37076d5ab035003d4839f4b6ba791
    5f9753ae73 client: remove containerd "platform" dependency
    4df345e65d client: remove unused Platform field from configWrapper
    dd38613d0c oci: inheritable capability set should be empty
    2825bf7123 Only check if route overlaps routes with scope: LINK
    f5c56eaca8 [20.10] bump swarmkit for config size increase
    ce3b6d1ae9 distribution: retry downloading schema config on retryable error

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-06-03 09:32:13 -04:00
Bruce Ashfield
ade7848788 docker/moby/libnetwork: update to -latest
Bumping libnetwork to version v0.7.0-dev.3-1830-g339b972b, which comprises the following commits:

    9db86fb7 Only check if route overlaps routes with scope: LINK
    7b9c2905 fix port forwarding with ipv6.disable=1

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-06-03 09:32:13 -04:00
Bruce Ashfield
ea4c3c3eba docker/moby: update to 20.10.16
Bumping moby to version v20.10.16, which comprises the following commits:

    a15acb4bd6 [20.10] vendor: golang.org/x/sys v0.0.0-20220412211240-33da011f77ad
    5f2e0b79ad [20.10] update golang to 1.17.10
    be7855fdbe vendor: update github.com/containerd/cgroups and github.com/cilium/ebpf
    414a9e24a7 update containerd binary to v1.6.4
    47b6a924b6 update containerd binary to v1.6.3
    6d7c2b2d26 update containerd binary to v1.6.2
    91708bf704 update containerd binary to v1.6.1
    53ae17008e Revert "[20.10] update containerd binary to 1.5.11"
    961b9a78d5 update runc binary to v1.1.1
    97972dac5f update runc binary to v1.1.0
    033a819714 [20.10] update golang to 1.17.9
    a80884126b Jenkinsfile: add workaround for CVE-2022-24765
    09d6fcdfec update to go 1.17.8 to address CVE-2022-24921
    5957684b2c Update Go to 1.17.7
    55b72c70ba Update Go to 1.17.6
    fdf3020bd5 Update Go to 1.17.5
    36e164ba80 Update Go to 1.17.4
    ecfba8f588 Update Go to 1.17.3
    4e14dcc125 Update Go to 1.17.2
    c32b5ece31 Update Go to 1.17.1
    7096508811 vendor: update archive/tar to match Go 1.17.0
    a1150245cc Update to Go 1.17.0, and gofmt with Go 1.17
    95cc7115fb hack/vendor.sh: allow go version to be specified with .0
    949c33b1c5 vendor: golang.org/x/sys  63515b42dcdf9544f4e6a02fd7632793fde2f72d (for Go 1.17)
    8392285876 vendor: golang.org/x/sys d19ff857e887eacb631721f188c7d365c2331456
    4e81bcf380 Makefile: update buildx to v0.8.2
    74e699c8d3 Makefile: update buildx version to v0.6.0
    bc3cc2e7ac Makefile: install buildx from binary release, instead of building
    492fac20af api: docs: fix indentation of HostConfig.SecurityOpt (v1.39-v1.41)
    3cba2682d8 api: docs: move ContainerWaitResponse to definitions (v1.39-v1.41)
    55e71450ae api: docs: move VolumeCreateOptions to definitions (v1.39-v1.41)
    c54362cd64 api: docs: move Volume examples inline (v1.39-v1.41)
    c60ff9b296 doc: server API Correct ImagesCreate - platform parameter added in 1.32
    7a45f7a8cc docs: cleanup swagger API with multiple examples (v1.25-v1.41)
    29bb9204bf api: docs: add IPAMConfig on IPAM (v1.41)
    77f6564369 api: docs: document MountPoint fields (v1.25-v1.41)
    51ea235ab8 api: docs: remove deprecated RootFS.BaseLayer (API v1.25-v1.41)
    3d6b4ae572 Correct type of Mounts in ContainerSummary in docs (v1.25-v1.40)
    6e8b9809b7 Correct type of Mounts in ContainerSummary in docs
    621a98dac0 api: docs: fix warning about comment indentation (API v1.40-v1.41)
    bb9ef98060 api: docs: update docs for /images/{name}/json (API v1.39-v1.41)
    88ca5cec4e daemon: fix error-message for minimum allowed kernel-memory limit
    3ea996abd7 docs: add missing KernelMemoryTCP to api v1.40 and v1.41
    b475bc95cd docs/api: add missing 400 response for POST /containers/{id}/wait
    ae07b3cc96 docs/api: update /containers/{id}/wait "condition" parameter (v1.30-v1.41)
    19555fa92d [20.10] vendor: github.com/docker/distribution v2.8.1
    32fe0bbb91 daemon: use RWMutex for stateCounter
    ed8fb00b65 errdefs: move GetHTTPErrorStatusCode to api/server/httpstatus
    3bd611d7a5 log error message when receiving an unexpected type error
    7dfe7a1752 [20.10] update containerd binary to 1.5.11
    af953d2f38 [20.10] vendor: containerd 7cfa023d95d37076d5ab035003d4839f4b6ba791
    5f9753ae73 client: remove containerd "platform" dependency
    4df345e65d client: remove unused Platform field from configWrapper
    dd38613d0c oci: inheritable capability set should be empty
    2825bf7123 Only check if route overlaps routes with scope: LINK
    f5c56eaca8 [20.10] bump swarmkit for config size increase
    ce3b6d1ae9 distribution: retry downloading schema config on retryable error

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-06-03 09:32:13 -04:00
Bruce Ashfield
e3087cd666 docker-ce: update to v20.10.12
Bumping docker to version v20.10.12-84-g906f57ff5b, which comprises the following commits:

    ce3b6d1ae9 distribution: retry downloading schema config on retryable error
    180f3b9cc7 update containerd binary to v1.5.10
    0fa0d70489 [20.10] update to go 1.16.15 to address CVE-2022-24921
    4679ffd01c docs: remove HostConfig.LxcConf field from API docs
    fbbe1fcfd8 api: remove HostConfig.LxcConf field
    a5a697143d docs: fixing /exec/{id}/resize response code in API documentation
    42b13c09a6 Added error codes for exec resize in API docs
    aa69e8ed3f Fixed exec resize success code in API docs
    ca5ba4890e Fix typo on the v1.41 changelog
    db214206e5 vendor: bump etcd v3.3.27
    df6a536193 vendor: github.com/coreos/etcd v3.3.25
    9502dec32f [20.10] Update Go to 1.16.14
    878b9de935 daemon/graphdriver/fuse-overlayfs: Init(): fix directory permissions (staticcheck)
    d1b3497bfa [20.10] vendor: github.com/docker/distribution v2.8.0
    f9344b45fe api/swagger: move DistributionInspect to definitions
    13cb9d9723 api/swagger: rename PluginPrivilegeItem to PluginPrivilege
    7f9760e10c api/swagger: fix up event-types and move to definitions
    e6739a2884 api/swagger: move DistributionInspect to definitions
    d445d24804 api/swagger: rename PluginPrivilegeItem to PluginPrivilege
    5e38ae84b2 api/swagger: fix up event-types and move to definitions
    012fdff916 Fix swagger docs to match the opencontainers image-spec
    13cbf7fbb7 Extract PluginPrivilegeItem as explicit type definition
    8fbcf0611b Use explicit object names for improved swagger based code generation
    b8bee972c4 Fix ContainerSummary swagger docs
    7092a6091c Add "changes" query parameter for /image/create to swagger docs
    adf1e470a1 Add RestartPolicy "no" to swagger docs
    b4b469eac2 Fix swagger docs to match the opencontainers image-spec
    2c38a2a635 Extract PluginPrivilegeItem as explicit type definition
    621bfddd6e Use explicit object names for improved swagger based code generation
    8a5240a8aa Fix ContainerSummary swagger docs
    751cf68e36 Add "changes" query parameter for /image/create to swagger docs
    a961b76aef Add RestartPolicy "no" to swagger docs
    ad21bcd94e Jenkinsfile: remove Windows RS1 as it reached end of support
    b2684c1857 Fix for lack of syncromization in daemon/update.go
    8268f70ebb daemon/logger: replace flaky TestFollowLogsHandleDecodeErr
    78d0b936b8 daemon/logger: refactor followLogs to write more unit tests
    39519221c2 daemon/logger: test followLogs' handleDecodeErr case
    ada1b01de1 daemon/logger: read the length header correctly
    829f071228 update containerd binary to v1.5.9
    3e5eea4192 update runc binary to v1.0.3
    bd42e17284 update containerd binary to v1.5.8
    3fd0b8d6eb Update containerd binary to v1.5.7
    3700adb70a Update containerd binary to v1.5.6
    0f37f2989b Dockerfile: update gotestsum to v1.7.0
    2716336abd Dockerfile: use "go install" to install utilities
    b35a1707e3 Dockerfile: use version for some utilities instead of commit-sha
    2a18825cdf Dockerfile: remove GOPROXY override (was for go < 1.14)
    0f925d5d3d remove deprecated "nokmem" build-tag for runc
    fb45fe614d info: remove "expected" check for tini version
    fd32c70031 update containerd binary to v1.5.5
    302114634c update containerd binary v1.4.8
    1cd13dcb6c Update containerd binary to v1.5.3
    5f09d5c76a update containerd binary to v1.5.2
    23f23c99ed update containerd binary to v1.5.1
    f036a34c5b update containerd binary to v1.5.0
    1dd37750a6 Revert "[20.10] update containerd binary to v1.4.5"
    b097d29705 Revert "[20.10] update containerd binary to v1.4.6"
    de656f9da4 Revert "[20.10] update containerd binary to v1.4.7"
    9e36f77577 Revert "[20.10] update containerd binary v1.4.8"
    eb2acf2fb3 Revert "[20.10] update containerd binary to v1.4.9"
    4e838e50ea Revert "[20.10] update containerd binary to v1.4.10"
    79fd9c1541 Revert "[20.10] update containerd binary to v1.4.11"
    13de46fd4b Revert "[20.10] update containerd binary to v1.4.12"
    aa92e697cb [20.10] update Go to 1.16.13
    f9df098e76 fluentd: Turn ForceStopAsyncSend true when async connect is used
    81fc02b7e1 vendor: github.com/fluent/fluent-logger-golang v1.8.0
    d6f3add5c6 vendor: github.com/fluent/fluent-logger-golang 1.6.1
    660b9962e4 daemon.WithCommonOptions() fix detection of user-namespaces
    a621bc007b [20.10] update Go to 1.16.12
    f4daf9dd08 [20.10] update Go to 1.16.11
    dc015972bb vendor: github.com/opencontainers/image-spec v1.0.2
    e0108db2bd [20.10] fix vendor validation
    d47de2a4c7 [20.10] update containerd binary to v1.4.12
    da9c983789 [20.10] vendor: github.com/moby/buildkit v0.8.3-4-gbc07b2b8
    c1f352c4b1 distribution: validate blob type
    c96ed28f2f vendor: update github.com/containerd/containerd
    7677aeafd7 TestBuildUserNamespaceValidateCapabilitiesAreV2: cleanup daemon storage
    34eb6fbe60 testutil: daemon.Cleanup(): cleanup more directories
    0e76a0a418 info: unset cgroup-related fields when CgroupDriver == none
    c7edd308ad [20.10] Update Go to 1.16.10
    b3456925ca vendor: update github.com/docker/distribution
    6611c72b65 cmd/dockerd: create panic.log file without readonly flag
    4b9a3dac46 Fix race in TestCreateServiceSecretFileMode, TestCreateServiceConfigFileMode
    acb4f263b3 Fix racey TestHealthKillContainer
    59d2a2c397 dockerd-rootless.sh: Fix variable not double quotes cause unexpected behavior
    2c6aa5aad9 Remove needless check
    3285c27503 Fix log statement 'failed to exit' timeout accuracy
    a4bcd4c64f docker daemon container stop refactor
    bed624fdc9 docker kill: fix bug where failed kills didnt fallback to unix kill
    80b7e8b5d7 buildkit: normalize build target and local platform
    c2b9a32875 vendor: Update go-winio to v0.4.20
    c580a02873 [20.10] Update Go to 1.16.9
    129a2000cf [20.10] update containerd binary to v1.4.11
    6835d15f55 [20.10] update containerd binary to v1.4.10
    5730c139f7 Bump swarmkit to get fix for rollback
    59f10e3435 quota: adjust build-tags to allow build without CGO
    fa78afebcf Update Go to 1.16.8
    567c01f6d1 seccomp: add support for "clone3" syscall in default policy
    07728cd2bd update runc binary to v1.0.2
    964768f200 cmd/dockerd: add the link of "the documentation"
    80f1169eca chrootarchive: don't create parent dirs outside of chroot
    93ac040bf0 Lock down docker root dir perms.
    b0c0b73798 bump up rootlesskit to v0.14.4
    decb56ac89 Update Go to 1.16.7

Bumping docker-cli to version v20.10.12-22-ga22408634, which comprises the following commits:

    a282e0c5d [20.10] update to go 1.16.15 to address CVE-2022-24921
    700364e30 Fix mistake with env var example in docker run docs
    62d27c32f Update WORKDIR command information
    c0e952cf0 Fix the (dead) link for docs for Dockerfile syntax reference
    04104a04d Update dockerd.md
    b721998b7 Fixing typo (his --> its)
    4065e1246 format create.md table
    f1002eb9f Fix typo
    e97c7b240 added missing closing parenthese
    aa7893763 Update stats.md add example json output
    40fe0573a Update Ubuntu version number references in push.md
    c9737e1c3 docs/daemon: replace deprecated '-g' option for '--data-root'
    5c6723d08 Correct device syntax to --gpus
    fd5fc61ec [20.10] Update Go to 1.16.14
    3624019d8 [20.10] update Go to 1.16.13
    f3ff8e6ad [20.10] vendor: compose-on-kubernetes v0.5.0 to remove github.com/golang/glog
    ee1ac1b31 fix innocuous data-race when config.Load called in parallel
    38dd744a1 [20.10] Update Go to 1.16.12
    4de40a825 Update Go to 1.16.11
    03fa8f92c Update Go to 1.16.10
    9989fdbc4 Update most links in docs to use https by default
    0e20c1fd2 Update Go to 1.16.9
    1c0927a04 Dockerfile: update tonistiigi/xx to 1.0.0-rc.2, add XX_VERSION arg
    82f9d5921 info: skip client-side warning about seccomp profile on API >= 1.42
    adb01ca79 docs: some minor touch-ups in checkpoint reference
    8260476a0 docs: remove trailing space to fix generated YAML format
    bce2e1f95 docs: create.md: typo fix
    44064f51c Fix typo in documentation - build.md
    292779add Add doc for BUILDKIT_PROGRESS env var
    f2e79b826 docs: use "console" code-hint for shell examples
    fa46b9236 docs: rewrite reference docs for --stop-signal and --stop-timeout
    400f81089 experimental: fix broken link to "checkpoint and restore" page
    c72057c8d docs: move checkpoint/restore doc from experimental into reference
    77db97d59 Use private network address for default-address-pools setting in daemon.json example
    cbf0d2b7b docs: fix some broken anchors
    d0014a86b docs: fix description of restart-delay to mention max (1 minute)
    6c1c8b55a docs: fix search results by filterd is-official
    44fdac11f Update Go to 1.16.8
    061051c24 docs: add missing redirect, and remove /go/experimental redirect
    2012fbf11 Update Go to 1.16.7
    42d1c0275 registry: ensure default auth config has address

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-03-21 17:31:28 -04:00
Bruce Ashfield
3988cc7e3a moby: update to v20.10.12
Bumping moby to version v20.10.12-84-g906f57ff5b, which comprises the following commits:

    ce3b6d1ae9 distribution: retry downloading schema config on retryable error
    180f3b9cc7 update containerd binary to v1.5.10
    0fa0d70489 [20.10] update to go 1.16.15 to address CVE-2022-24921
    4679ffd01c docs: remove HostConfig.LxcConf field from API docs
    fbbe1fcfd8 api: remove HostConfig.LxcConf field
    a5a697143d docs: fixing /exec/{id}/resize response code in API documentation
    42b13c09a6 Added error codes for exec resize in API docs
    aa69e8ed3f Fixed exec resize success code in API docs
    ca5ba4890e Fix typo on the v1.41 changelog
    db214206e5 vendor: bump etcd v3.3.27
    df6a536193 vendor: github.com/coreos/etcd v3.3.25
    9502dec32f [20.10] Update Go to 1.16.14
    878b9de935 daemon/graphdriver/fuse-overlayfs: Init(): fix directory permissions (staticcheck)
    d1b3497bfa [20.10] vendor: github.com/docker/distribution v2.8.0
    f9344b45fe api/swagger: move DistributionInspect to definitions
    13cb9d9723 api/swagger: rename PluginPrivilegeItem to PluginPrivilege
    7f9760e10c api/swagger: fix up event-types and move to definitions
    e6739a2884 api/swagger: move DistributionInspect to definitions
    d445d24804 api/swagger: rename PluginPrivilegeItem to PluginPrivilege
    5e38ae84b2 api/swagger: fix up event-types and move to definitions
    012fdff916 Fix swagger docs to match the opencontainers image-spec
    13cbf7fbb7 Extract PluginPrivilegeItem as explicit type definition
    8fbcf0611b Use explicit object names for improved swagger based code generation
    b8bee972c4 Fix ContainerSummary swagger docs
    7092a6091c Add "changes" query parameter for /image/create to swagger docs
    adf1e470a1 Add RestartPolicy "no" to swagger docs
    b4b469eac2 Fix swagger docs to match the opencontainers image-spec
    2c38a2a635 Extract PluginPrivilegeItem as explicit type definition
    621bfddd6e Use explicit object names for improved swagger based code generation
    8a5240a8aa Fix ContainerSummary swagger docs
    751cf68e36 Add "changes" query parameter for /image/create to swagger docs
    a961b76aef Add RestartPolicy "no" to swagger docs
    ad21bcd94e Jenkinsfile: remove Windows RS1 as it reached end of support
    b2684c1857 Fix for lack of syncromization in daemon/update.go
    8268f70ebb daemon/logger: replace flaky TestFollowLogsHandleDecodeErr
    78d0b936b8 daemon/logger: refactor followLogs to write more unit tests
    39519221c2 daemon/logger: test followLogs' handleDecodeErr case
    ada1b01de1 daemon/logger: read the length header correctly
    829f071228 update containerd binary to v1.5.9
    3e5eea4192 update runc binary to v1.0.3
    bd42e17284 update containerd binary to v1.5.8
    3fd0b8d6eb Update containerd binary to v1.5.7
    3700adb70a Update containerd binary to v1.5.6
    0f37f2989b Dockerfile: update gotestsum to v1.7.0
    2716336abd Dockerfile: use "go install" to install utilities
    b35a1707e3 Dockerfile: use version for some utilities instead of commit-sha
    2a18825cdf Dockerfile: remove GOPROXY override (was for go < 1.14)
    0f925d5d3d remove deprecated "nokmem" build-tag for runc
    fb45fe614d info: remove "expected" check for tini version
    fd32c70031 update containerd binary to v1.5.5
    302114634c update containerd binary v1.4.8
    1cd13dcb6c Update containerd binary to v1.5.3
    5f09d5c76a update containerd binary to v1.5.2
    23f23c99ed update containerd binary to v1.5.1
    f036a34c5b update containerd binary to v1.5.0
    1dd37750a6 Revert "[20.10] update containerd binary to v1.4.5"
    b097d29705 Revert "[20.10] update containerd binary to v1.4.6"
    de656f9da4 Revert "[20.10] update containerd binary to v1.4.7"
    9e36f77577 Revert "[20.10] update containerd binary v1.4.8"
    eb2acf2fb3 Revert "[20.10] update containerd binary to v1.4.9"
    4e838e50ea Revert "[20.10] update containerd binary to v1.4.10"
    79fd9c1541 Revert "[20.10] update containerd binary to v1.4.11"
    13de46fd4b Revert "[20.10] update containerd binary to v1.4.12"
    aa92e697cb [20.10] update Go to 1.16.13
    f9df098e76 fluentd: Turn ForceStopAsyncSend true when async connect is used
    81fc02b7e1 vendor: github.com/fluent/fluent-logger-golang v1.8.0
    d6f3add5c6 vendor: github.com/fluent/fluent-logger-golang 1.6.1
    660b9962e4 daemon.WithCommonOptions() fix detection of user-namespaces
    a621bc007b [20.10] update Go to 1.16.12
    f4daf9dd08 [20.10] update Go to 1.16.11
    dc015972bb vendor: github.com/opencontainers/image-spec v1.0.2
    e0108db2bd [20.10] fix vendor validation
    d47de2a4c7 [20.10] update containerd binary to v1.4.12
    da9c983789 [20.10] vendor: github.com/moby/buildkit v0.8.3-4-gbc07b2b8
    c1f352c4b1 distribution: validate blob type
    c96ed28f2f vendor: update github.com/containerd/containerd
    7677aeafd7 TestBuildUserNamespaceValidateCapabilitiesAreV2: cleanup daemon storage
    34eb6fbe60 testutil: daemon.Cleanup(): cleanup more directories
    0e76a0a418 info: unset cgroup-related fields when CgroupDriver == none
    b3456925ca vendor: update github.com/docker/distribution

Bumping docker-cli to version v20.10.12-22-ga22408634, which comprises the following commits:

    a282e0c5d [20.10] update to go 1.16.15 to address CVE-2022-24921
    700364e30 Fix mistake with env var example in docker run docs
    62d27c32f Update WORKDIR command information
    c0e952cf0 Fix the (dead) link for docs for Dockerfile syntax reference
    04104a04d Update dockerd.md
    b721998b7 Fixing typo (his --> its)
    4065e1246 format create.md table
    f1002eb9f Fix typo
    e97c7b240 added missing closing parenthese
    aa7893763 Update stats.md add example json output
    40fe0573a Update Ubuntu version number references in push.md
    c9737e1c3 docs/daemon: replace deprecated '-g' option for '--data-root'
    5c6723d08 Correct device syntax to --gpus
    fd5fc61ec [20.10] Update Go to 1.16.14
    3624019d8 [20.10] update Go to 1.16.13
    f3ff8e6ad [20.10] vendor: compose-on-kubernetes v0.5.0 to remove github.com/golang/glog
    ee1ac1b31 fix innocuous data-race when config.Load called in parallel
    38dd744a1 [20.10] Update Go to 1.16.12
    4de40a825 Update Go to 1.16.11
    03fa8f92c Update Go to 1.16.10
    0e20c1fd2 Update Go to 1.16.9

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-03-21 17:31:28 -04:00
Bruce Ashfield
98f88eed32 docker-moby: update to v20.10.10
Bumping moby to version v20.10.10-9-g7bd682c48c, which comprises the following commits:

    7677aeafd7 TestBuildUserNamespaceValidateCapabilitiesAreV2: cleanup daemon storage
    34eb6fbe60 testutil: daemon.Cleanup(): cleanup more directories
    c7edd308ad [20.10] Update Go to 1.16.10
    6611c72b65 cmd/dockerd: create panic.log file without readonly flag
    4b9a3dac46 Fix race in TestCreateServiceSecretFileMode, TestCreateServiceConfigFileMode
    acb4f263b3 Fix racey TestHealthKillContainer
    59d2a2c397 dockerd-rootless.sh: Fix variable not double quotes cause unexpected behavior
    2c6aa5aad9 Remove needless check
    3285c27503 Fix log statement 'failed to exit' timeout accuracy
    a4bcd4c64f docker daemon container stop refactor
    bed624fdc9 docker kill: fix bug where failed kills didnt fallback to unix kill
    80b7e8b5d7 buildkit: normalize build target and local platform
    c2b9a32875 vendor: Update go-winio to v0.4.20
    c580a02873 [20.10] Update Go to 1.16.9
    129a2000cf [20.10] update containerd binary to v1.4.11
    6835d15f55 [20.10] update containerd binary to v1.4.10
    5730c139f7 Bump swarmkit to get fix for rollback
    59f10e3435 quota: adjust build-tags to allow build without CGO
    fa78afebcf Update Go to 1.16.8
    567c01f6d1 seccomp: add support for "clone3" syscall in default policy
    07728cd2bd update runc binary to v1.0.2
    964768f200 cmd/dockerd: add the link of "the documentation"
    80f1169eca chrootarchive: don't create parent dirs outside of chroot
    93ac040bf0 Lock down docker root dir perms.
    b0c0b73798 bump up rootlesskit to v0.14.4
    decb56ac89 Update Go to 1.16.7

Bumping docker-cli to version v20.10.10, which comprises the following commits:

    9989fdbc4 Update most links in docs to use https by default
    0e20c1fd2 Update Go to 1.16.9
    1c0927a04 Dockerfile: update tonistiigi/xx to 1.0.0-rc.2, add XX_VERSION arg
    82f9d5921 info: skip client-side warning about seccomp profile on API >= 1.42
    adb01ca79 docs: some minor touch-ups in checkpoint reference
    8260476a0 docs: remove trailing space to fix generated YAML format
    bce2e1f95 docs: create.md: typo fix
    44064f51c Fix typo in documentation - build.md
    292779add Add doc for BUILDKIT_PROGRESS env var
    f2e79b826 docs: use "console" code-hint for shell examples
    fa46b9236 docs: rewrite reference docs for --stop-signal and --stop-timeout
    400f81089 experimental: fix broken link to "checkpoint and restore" page
    c72057c8d docs: move checkpoint/restore doc from experimental into reference
    77db97d59 Use private network address for default-address-pools setting in daemon.json example
    cbf0d2b7b docs: fix some broken anchors
    d0014a86b docs: fix description of restart-delay to mention max (1 minute)
    6c1c8b55a docs: fix search results by filterd is-official
    44fdac11f Update Go to 1.16.8
    061051c24 docs: add missing redirect, and remove /go/experimental redirect
    2012fbf11 Update Go to 1.16.7
    42d1c0275 registry: ensure default auth config has address

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-11-15 23:24:09 -05:00
Bruce Ashfield
0a7ae8bc50 global: convert github SRC_URIs to use https protocol
github is removing git:// access, and fetches will start experiencing
interruptions in service, and eventually will fail completely.

bitbake will also begin to warn on github src_uri's that don't use
https. So we convert the meta-virt instances to use protocol=https
(done using the oe-core contrib conversion script)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-11-02 09:57:03 -04:00
Bruce Ashfield
cbecee2492 docker-moby: add SRCREV_FORMAT
recipes that use multiple SCMs in the SRC_URI, must supply
SRCREV_FORMAT or SRCPV triggers an expansion error. While
this isn't fatal during the build, it can cause issues with
setscene (and possibly) other tasks failing, which then
leads to no sstate re-use, etc.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-10-19 23:20:39 -04:00
Bruce Ashfield
da57fa2aa4 docker-ce: add SRCREV_FORMAT
recipes that use multiple SCMs in the SRC_URI, must supply
SRCREV_FORMAT or SRCPV triggers an expansion error. While
this isn't fatal during the build, it can cause issues with
setscene (and possibly) other tasks failing, which then
leads to no sstate re-use, etc.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-10-19 23:18:11 -04:00
Bruce Ashfield
7b46286b34 virtual/containerd: don't rprovide virtual/
Similar to the oe-core commit:

   commit 93ac180d8c389f16964bce8bd5538d9389e970e6
   Author: Michael Opdenacker <michael.opdenacker@bootlin.com>
   Date:   Wed Sep 1 11:20:20 2021 +0200

       meta: stop using "virtual/" in RPROVIDES and RDEPENDS

       Fixes [YOCTO #14538]

       Recipes shouldn't use the "virtual/" string in RPROVIDES and RDEPENDS.

       That's confusing because "virtual/" has no special meaning in
       RPROVIDES and RDEPENDS (unlike in PROVIDES and DEPENDS).

       Instead, using "virtual-" instead of "virtual/"
       as already done in the glibc recipe.

We stop rproviding virtual/containerd to keep the namespace clean.
There aren't many users of this virtual provides, but we keep
it around (for now) to maintain compatibility.

At the same time we convert the RPROVIDES to virtual-containerd, to keep
it available and consistent with oe-core use virtual-libc, etc.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-09-06 10:57:17 -04:00
Bruce Ashfield
263e4d3d4e virtual/runc: don't rprovide virtual/
Similar to the oe-core commit:

   commit 93ac180d8c389f16964bce8bd5538d9389e970e6
   Author: Michael Opdenacker <michael.opdenacker@bootlin.com>
   Date:   Wed Sep 1 11:20:20 2021 +0200

       meta: stop using "virtual/" in RPROVIDES and RDEPENDS

       Fixes [YOCTO #14538]

       Recipes shouldn't use the "virtual/" string in RPROVIDES and RDEPENDS.

       That's confusing because "virtual/" has no special meaning in
       RPROVIDES and RDEPENDS (unlike in PROVIDES and DEPENDS).

       Instead, using "virtual-" instead of "virtual/"
       as already done in the glibc recipe.

We stop rproviding virtual/runc to keep the namespace clean.
There aren't many users of this virtual provides, but we keep
it around (for now) to maintain compatibility.

At the same time we convert the RPROVIDES to virtual-runc, to keep
it available and consistent with oe-core use virtual-libc, etc.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-09-06 10:57:17 -04:00
Bruce Ashfield
eae941e690 docker-ce: update to 20.10.8
Bumping docker-cli to version v20.10.8-2-g62eae52c2, which comprises the following commits:

    2012fbf11 Update Go to 1.16.7
    0b924e51f Update to go1.16.6
    6288e8b1a change TestNewAPIClientFromFlagsWithHttpProxyEnv to an e2e test
    1e9575e81 cli/config/configfile: various test cleanups
    c98e9c47c Use designated test domains (RFC2606) in tests
    8437cfefa context: deprecate support for encrypted TLS private keys
    68a5ca859 cli/context: ignore linting warnings about RFC 1423 encryption
    8a6473963 Update Dockerfiles to latest syntax, remove "experimental"
    1d37fb302 Deprecate Kubernetes context support
    0793f9639 Deprecate Kubernetes stack support
    b639ea8b8 Deprecate Kubernetes stack support

Bumping docker to version v20.10.8-2-gd24c6dc5cf, which comprises the following commits:

    decb56ac89 Update Go to 1.16.7
    e8fb8f7acd [20.10] update containerd binary to v1.4.9
    4cfeb27f78 update runc binary to v1.0.1
    067918a8c3 [20.10] update containerd binary v1.4.8

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-08-27 10:50:45 -04:00
Bruce Ashfield
3685e9c61f docker/moby: update to 20.10.8
Bumping docker-cli to version v20.10.8-2-g62eae52c2, which comprises the following commits:

    2012fbf11 Update Go to 1.16.7
    0b924e51f Update to go1.16.6
    6288e8b1a change TestNewAPIClientFromFlagsWithHttpProxyEnv to an e2e test
    1e9575e81 cli/config/configfile: various test cleanups
    c98e9c47c Use designated test domains (RFC2606) in tests
    8437cfefa context: deprecate support for encrypted TLS private keys
    68a5ca859 cli/context: ignore linting warnings about RFC 1423 encryption
    8a6473963 Update Dockerfiles to latest syntax, remove "experimental"
    1d37fb302 Deprecate Kubernetes context support
    0793f9639 Deprecate Kubernetes stack support
    b639ea8b8 Deprecate Kubernetes stack support

Bumping moby to version v20.10.8-2-gd24c6dc5cf, which comprises the following commits:

    decb56ac89 Update Go to 1.16.7
    e8fb8f7acd [20.10] update containerd binary to v1.4.9
    4cfeb27f78 update runc binary to v1.0.1
    067918a8c3 [20.10] update containerd binary v1.4.8

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-08-27 10:50:45 -04:00
Bruce Ashfield
d876cfc5bf global: overrides syntax conversion
OEcore/bitbake are moving to use the clearer ":" as an overrides
separator.

This is pass one of updating the meta-virt recipes to use that
syntax.

This has only been minimally build/runtime tested, more changes
will be required for missed overrides, or incorrect conversions

Note: A recent bitbake is required:

    commit 75fad23fc06c008a03414a1fc288a8614c6af9ca
    Author: Richard Purdie <richard.purdie@linuxfoundation.org>
    Date:   Sun Jul 18 12:59:15 2021 +0100

        bitbake: data_smart/parse: Allow ':' characters in variable/function names

        It is becomming increasingly clear we need to find a way to show what
        is/is not an override in our syntax. We need to do this in a way which
        is clear to users, readable and in a way we can transition to.

        The most effective way I've found to this is to use the ":" charater
        to directly replace "_" where an override is being specified. This
        includes "append", "prepend" and "remove" which are effectively special
        override directives.

        This patch simply adds the character to the parser so bitbake accepts
        the value but maps it back to "_" internally so there is no behaviour
        change.

        This change is simple enough it could potentially be backported to older
        version of bitbake meaning layers using the new syntax/markup could
        work with older releases. Even if other no other changes are accepted
        at this time and we don't backport, it does set us on a path where at
        some point in future we could
        require a more explict syntax.

        I've tested this patch by converting oe-core/meta-yocto to the new
        syntax for overrides (9000+ changes) and then seeing that builds
        continue to work with this patch.

        (Bitbake rev: 0dbbb4547cb2570d2ce607e9a53459df3c0ac284)

        Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-08-02 17:17:53 -04:00
Bruce Ashfield
c4fd021309 docker-ce: update to 20.10.7
Bumping docker to version v20.10.7-41-g013d6655bb, which comprises the following commits:

    067918a8c3 [20.10] update containerd binary v1.4.8
    b0da207af4 Bump go 1.16.6 (addresses CVE-2021-34558)
    abe8c4e80d updated vendored archive/tar to go1.16.5
    7c6645b32b update archive/tar patch for go 1.16
    55c363ef48 Bump go 1.16.5
    8b0913935c integration: ensurePlugin: disable go modules when building plugin
    09a7efb1f7 hack/ci/windows.ps1: disable go modules
    6793ff26d8 pkg/fileutils: TestMatches: remove cases no longer valid for go1.16
    ab9a92f79c Update test certificates
    1d4a06e610 hack: add script to regenerate certificates
    feaca9816a hack/vendor: add check for vendored archive/tar
    793340a33a [20.10] update containerd binary to v1.4.7
    7429792eed docker pull: warn when pulled single-arch image does not match --platform
    72b66d56a5 [20.10] vendor github.com/Microsoft/hcsshim 64a2b71405dacf76c95600f4c756a991ad09cf7c (moby branch)
    50c392c9ff API: fix 404 status description on container create
    025e3a7898 Update v1.41.yaml
    b9cf7b7db5 rootless: fix "x509: certificate signed by unknown authority" on openSUSE Tumbleweed
    869b50e10b rootless: disable overlay2 if running with SELinux
    44f95c7126 dockerd-rootless.sh: avoid /run/xtables.lock EACCES on SELinux hosts
    78bb0f445a Dockerfile: update go-swagger to fix validation on Go1.16
    618f6a79ab Run s390x tests on Ubuntu 20.04
    872cb16edb update runc binary to v1.0.0 GA
    4d42e18c05 vendor: swarmkit to fix deadlock in log broker
    89edb68e89 Fix possible overlapping IPs
    523f8b397c Jenkinsfile: skip ppc64le and s390x by default on pull requests
    a57fc0eb15 Fix setting swaplimit=true without checking
    6474dada20 vendor: github.com/moby/buildkit v0.8.3-3-g244e8cde
    895eaacdd4 vendor: github.com/moby/buildkit v0.8.3
    003e3c0551 pkg/signal: ignore SIGURG on all platforms
    95551168ac vendor: github.com/ishidawataru/sctp f2269e66cdee387bd321445d5d300893449805be
    d29a55c6c3 vendor: github.com/docker/libnetwork 64b7a4574d1426139437d20e81c0b6d391130ec8
    94c1890d39 builder-next: relax second cache key requirements for schema1
    2a0c446866 Use v2 capabilities in layer archives

Bumping docker-cli to version v20.10.7-20-ge9b8231d6a, which comprises the following commits:

    8a64739631 Update Dockerfiles to latest syntax, remove "experimental"
    260ba1a8a2 vendor: cpuguy83/go-md2man/v2 v2.0.1
    f63cb8b97e vendor: github.com/russross/blackfriday/v2 v2.1.0
    48e6b44379 Dockerfile: remove custom go build for windows/arm64
    644c003606 circleCI: update docker engine to 20.10.6
    0d17280a30 Jenkinsfile: update old engine version to 19.03
    eedfe50a99 Jenkinsfile: update labels to prevent running on cgroups v2
    f3dd1ee6c1 Fix minor wording
    c7cf60f657 docs: Fix wrong bridge driver option
    0168626037 vendor: github.com/docker/docker-credential-helpers v0.6.4
    e3a9a92b14 vendor: moby/term, Azure/go-ansiterm for golang.org/x/sys/windows compat
    ab733b5564 [20.10] vendor: github.com/docker/docker v20.10.7
    746c553574 docs: fix link to command-line reference
    2945ba4f7a Ignore SIGURG on Darwin too
    032e485e1c ForwardAllSignals: check if channel is closed, and remove warning
    88de81ff21 Fix `docker start` blocking on signal handling
    706ca7985b Revert "[20.10] Revert "Ignore SIGURG on Linux.""
    8264f5be8d docs: dockerd: fix broken link and markdown touch-ups

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-07-26 14:11:34 -04:00
Bruce Ashfield
ead79994b7 moby: update to 20.10.7
Bumping moby to version v20.10.7-41-g013d6655bb, which comprises the following commits:

    067918a8c3 [20.10] update containerd binary v1.4.8
    b0da207af4 Bump go 1.16.6 (addresses CVE-2021-34558)
    abe8c4e80d updated vendored archive/tar to go1.16.5
    7c6645b32b update archive/tar patch for go 1.16
    55c363ef48 Bump go 1.16.5
    8b0913935c integration: ensurePlugin: disable go modules when building plugin
    09a7efb1f7 hack/ci/windows.ps1: disable go modules
    6793ff26d8 pkg/fileutils: TestMatches: remove cases no longer valid for go1.16
    ab9a92f79c Update test certificates
    1d4a06e610 hack: add script to regenerate certificates
    feaca9816a hack/vendor: add check for vendored archive/tar
    793340a33a [20.10] update containerd binary to v1.4.7
    7429792eed docker pull: warn when pulled single-arch image does not match --platform
    72b66d56a5 [20.10] vendor github.com/Microsoft/hcsshim 64a2b71405dacf76c95600f4c756a991ad09cf7c (moby branch)
    50c392c9ff API: fix 404 status description on container create
    025e3a7898 Update v1.41.yaml
    b9cf7b7db5 rootless: fix "x509: certificate signed by unknown authority" on openSUSE Tumbleweed
    869b50e10b rootless: disable overlay2 if running with SELinux
    44f95c7126 dockerd-rootless.sh: avoid /run/xtables.lock EACCES on SELinux hosts
    78bb0f445a Dockerfile: update go-swagger to fix validation on Go1.16
    618f6a79ab Run s390x tests on Ubuntu 20.04
    872cb16edb update runc binary to v1.0.0 GA
    4d42e18c05 vendor: swarmkit to fix deadlock in log broker
    89edb68e89 Fix possible overlapping IPs
    523f8b397c Jenkinsfile: skip ppc64le and s390x by default on pull requests
    a57fc0eb15 Fix setting swaplimit=true without checking
    6474dada20 vendor: github.com/moby/buildkit v0.8.3-3-g244e8cde
    895eaacdd4 vendor: github.com/moby/buildkit v0.8.3
    003e3c0551 pkg/signal: ignore SIGURG on all platforms
    95551168ac vendor: github.com/ishidawataru/sctp f2269e66cdee387bd321445d5d300893449805be
    d29a55c6c3 vendor: github.com/docker/libnetwork 64b7a4574d1426139437d20e81c0b6d391130ec8
    94c1890d39 builder-next: relax second cache key requirements for schema1
    2a0c446866 Use v2 capabilities in layer archives

Bumping docker-cli to version v20.10.7-20-ge9b8231d6a, which comprises the following commits:

    8a64739631 Update Dockerfiles to latest syntax, remove "experimental"
    260ba1a8a2 vendor: cpuguy83/go-md2man/v2 v2.0.1
    f63cb8b97e vendor: github.com/russross/blackfriday/v2 v2.1.0
    48e6b44379 Dockerfile: remove custom go build for windows/arm64
    644c003606 circleCI: update docker engine to 20.10.6
    0d17280a30 Jenkinsfile: update old engine version to 19.03
    eedfe50a99 Jenkinsfile: update labels to prevent running on cgroups v2
    f3dd1ee6c1 Fix minor wording
    c7cf60f657 docs: Fix wrong bridge driver option
    0168626037 vendor: github.com/docker/docker-credential-helpers v0.6.4
    e3a9a92b14 vendor: moby/term, Azure/go-ansiterm for golang.org/x/sys/windows compat
    ab733b5564 [20.10] vendor: github.com/docker/docker v20.10.7
    746c553574 docs: fix link to command-line reference
    2945ba4f7a Ignore SIGURG on Darwin too
    032e485e1c ForwardAllSignals: check if channel is closed, and remove warning
    88de81ff21 Fix `docker start` blocking on signal handling
    706ca7985b Revert "[20.10] Revert "Ignore SIGURG on Linux.""
    8264f5be8d docs: dockerd: fix broken link and markdown touch-ups

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-07-26 14:11:34 -04:00
Leon Anavi
f82d5f11be docker: Fix for sysvinit
Fix for rare legacy systems which still use simultaneously both
sysvinit and systemd in DISTRO_FEATURES. This fix avoids issues
during do_rootfs with postinstall scriptlets of ['docker-ce'].

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-07-20 22:51:29 -04:00
Bruce Ashfield
e16ec7aebc docker-ce: upate to latest 20.10.x
docker:

   41cf01fa93 pkg/signal.CatchAll: ignore SIGURG on Linux
   56541eca9a [20.10] update containerd binary to v1.4.6
   fb179ff098 update runc binary to v1.0.0-rc95
   4c801fdb7d integration: remove KernelMemory tests
   6174e3cf22 Update runc binary to v1.0.0-rc94
   afbb1277a3 Swarm config: use absolute paths for mount destination strings
   94c1890d39 builder-next: relax second cache key requirements for schema1
   01f734cb4f [20.10] update containerd binary to v1.4.5
   21391bb7f7 hack/dind: fix cgroup v2 evacuation with `docker run --init`
   12b03bcb27 Error string match: do not match command path
   8a7f77cb2f dockerd-rootless.sh: use `command -v` instead of `which`
   9ca66776fa bump up rootlesskit to v0.14.2
   08b27e45d8 Dockerfile: update yamllint to v1.26.1 to fix build
   404ede5737 Bump hcsshim for error details fix

cli:

   f291a49ba Swap "LABEL maintainer" for the OCI pre-defined "org.opencontainers.image.authors"
   78fcd905c docs: Fix broken jump link
   12e2f94eb printServerWarningsLegacy: silence "No oom kill disable support" on cgroup v2
   00755d7db printServerWarningsLegacy: silence "No kernel memory limit support"
   8264f5be8 docs: dockerd: fix broken link and markdown touch-ups
   4fbdf3f36 docs: document log-opts for "dual logging" cache
   1ff45aac4 Update stop.md
   ed71df1b9 docs: cleanup / refactor cli doc
   ee20fa1ec docs: add reference for  "docker config" commands
   ffe40dc6b docs: update some examples for proxy configuration
   fbbf1be52 docs: remove experimental ipvlan docs, as they were migrated
   3de2cc6ef docs/reference/builder: update "syntax" section
   234036d10 docs/reference/builder: update example output, and some rephrasing
   0c442dc17 docs/reference/builder: remove outdated example Dockerfiles
   6b48c7867 docs/reference/builder: touch-up code-hints and some minor changes

network:

   56654e71 vendor: github.com/ishidawataru/sctp f2269e66cdee387bd321445d5d300893449805be
   7b9c2905 fix port forwarding with ipv6.disable=1
   c4ea04e0 enforce order of lock acquisitions on network/controller, fixes #2632

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-06-04 08:42:58 -04:00
Bruce Ashfield
cd38144a6b moby: update to latest 20.10
Updating to the lastest moby commits, which comprise the following
commits:

moby:

   41cf01fa93 pkg/signal.CatchAll: ignore SIGURG on Linux
   56541eca9a [20.10] update containerd binary to v1.4.6
   fb179ff098 update runc binary to v1.0.0-rc95
   4c801fdb7d integration: remove KernelMemory tests
   6174e3cf22 Update runc binary to v1.0.0-rc94
   afbb1277a3 Swarm config: use absolute paths for mount destination strings
   94c1890d39 builder-next: relax second cache key requirements for schema1
   01f734cb4f [20.10] update containerd binary to v1.4.5
   21391bb7f7 hack/dind: fix cgroup v2 evacuation with `docker run --init`
   12b03bcb27 Error string match: do not match command path
   9ca66776fa bump up rootlesskit to v0.14.2
   404ede5737 Bump hcsshim for error details fix

cli:

   f291a49ba Swap "LABEL maintainer" for the OCI pre-defined "org.opencontainers.image.authors"
   78fcd905c docs: Fix broken jump link
   12e2f94eb printServerWarningsLegacy: silence "No oom kill disable support" on cgroup v2
   00755d7db printServerWarningsLegacy: silence "No kernel memory limit support"
   8264f5be8 docs: dockerd: fix broken link and markdown touch-ups
   4fbdf3f36 docs: document log-opts for "dual logging" cache
   1ff45aac4 Update stop.md
   ed71df1b9 docs: cleanup / refactor cli doc
   ee20fa1ec docs: add reference for  "docker config" commands
   ffe40dc6b docs: update some examples for proxy configuration
   fbbf1be52 docs: remove experimental ipvlan docs, as they were migrated
   3de2cc6ef docs/reference/builder: update "syntax" section
   234036d10 docs/reference/builder: update example output, and some rephrasing
   0c442dc17 docs/reference/builder: remove outdated example Dockerfiles
   6b48c7867 docs/reference/builder: touch-up code-hints and some minor changes

network:

   56654e71 vendor: github.com/ishidawataru/sctp f2269e66cdee387bd321445d5d300893449805be
   7b9c2905 fix port forwarding with ipv6.disable=1
   c4ea04e0 enforce order of lock acquisitions on network/controller, fixes #2632

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-06-04 08:42:54 -04:00
Ralph Siemsen
903b3a1bde docker: add CVE_PRODUCT to recipes
Allows the yocto cve-checker to flag CVEs, which would otherwise go
unreported due to the package name not matching NIST NVD data.

Signed-off-by: Ralph Siemsen <ralph.siemsen@linaro.org>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-04-29 23:08:39 -04:00
Bruce Ashfield
31ab8a78b4 docker: introduce -clie package
By the docker-packaging repository and https://docs.docker.com/engine/install/centos/#installation-methods
docker is packaged by most distros with a split between the engine and the CLI.

We do the same here, by introducing the -cli package

But to keep existing use cases working, we also create a RDEPENDS between the main
docker package (the engine) and the cli, so existing "docker" package installs will
continue to work the same way. To have separate and non-redepending packages created
set the DOCKER_UNIFIED_PACKAGE variable to False

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-04-29 22:48:41 -04:00
Bruce Ashfield
9d98a04b26 docker: unify common parts of docker-ce and docker-moby recipes
Now that docker-ce is being built from the same repos as docker-moby,
the only unique things in the recipes are the SRCREVs.

We move the common packaging, compile/install routines and configuration
to the .inc files.

We also move the patches to the generic 'files' directory, so they
can be shared.

If we there are SRCREV bumps in the future that diverge moby and
docker, we'll hold patches in their named directorys and tweak
the compile/install routines as necessary.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-04-29 17:09:31 -04:00
Bruce Ashfield
cd5eead051 docker-moby; add _git suffix to recipe
For whatever reason, the -ce recipe has _git and the moby variant
doesn't. When in reality, the _git is more significant for moby
than for -ce.

Renaming the recipe to normalize the recipe naming.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-04-29 15:43:02 -04:00
Bruce Ashfield
614a254bf2 docker-ce: update to 20.10.6
Updating docker-ce to 20.10.6, we also restructure the recipe to build
as mentioned in: https://github.com/docker/docker-ce

This now makes the docker-ce recipe virtually identical to the moby
variant, with only SRCREV differences being signficant. The docker-ce
recipe will build the tags as identified by the docker-packaging
repository.

We keep this as a separate recipe for this update, so we can backport
the 20.10.6 change to older branches (for CVEs, etc), but the moby
and docker-ce recipes will (re)unify in following updates.

  root@qemux86-64:~# docker --version
  Docker version 20.10.6-ce, build 370c28948e
  root@qemux86-64:~# docker pull alpine
  Using default tag: latest
  latest: Pulling from library/alpine
  540db60ca938: Pull complete
  Digest:
  sha256:69e70a79f2d41ab5d637de98c1e0b055206ba40a8145e7bddb55ccc04e13cf8f
  Status: Downloaded newer image for alpine:latest
  docker.io/library/alpine:latest
  root@qemux86-64:~# docker run -it alpine /bin/sh
  [ 4099.428945] docker0: port 1(veth33cc29a) entered blocking state
  [ 4099.430548] docker0: port 1(veth33cc29a) entered disabled state
  [ 4099.434641] device veth33cc29a entered promiscuous mode
  [ 4100.219415] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation
  [ 4100.739037] eth0: renamed from vethe948f63
  [ 4100.746450] IPv6: ADDRCONF(NETDEV_CHANGE): veth33cc29a: link becomes ready
  [ 4100.748508] docker0: port 1(veth33cc29a) entered blocking state
  [ 4100.750150] docker0: port 1(veth33cc29a) entered forwarding state
  [ 4100.754370] IPv6: ADDRCONF(NETDEV_CHANGE): docker0: link becomes ready
  / # cat /etc/issue
  Welcome to Alpine Linux 3.13
  Kernel \r on an \m (\l)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-04-29 12:58:59 -04:00
Bruce Ashfield
bf4f56ab8a docker-moby: bump to 20.10-latest
Grabbing the following (minor) commits:

   8a7f77cb2f dockerd-rootless.sh: use `command -v` instead of `which`
   08b27e45d8 Dockerfile: update yamllint to v1.26.1 to fix build

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-04-28 12:06:51 -04:00
Bruce Ashfield
adc6207b5b docker-ce: bump to 20.10-latest
Bumping the SRCREV to pick up the following commits:

   3b8193b399 Upgrade Docker Scan plugin to v0.8.0
   9303aa4b6b Add John Howard to our alumni
   ba87f9abb5 dockerd-rootless.sh: use `command -v` instead of `which`
   efe9ca44fe Prepare tests for Windows containerd support
   ed269a15ff vendor: github.com/docker/swarmkit 5a5494a9a7b408b790533a5e4e1cb43ca1c32aad
   62761e5710 vendor: github.com/coreos/etcd v3.3.25
   07de8d8bea vendor: github.com/containerd/containerd 19ee068f93c91f7b9b2a858457f1af2cabc7bc06
   2ee09a228a vendor: github.com/gogo/protobuf v1.3.2
   ce1125b768 Remove needless check
   5c7fa82d85 Remove lowenna (aka jhowardmsft) from maintainters
   0d83bab69a bump up rootlesskit to v0.14.2
   fc17485819 Dockerfile: update yamllint to v1.26.1 to fix build
   03ac69b517 Error string match: do not match command path
   d1b9bc135d Update contrib/nuke-graph-directory.sh
   b39a1ca16b Fixes subvol delete on a non-btrfs volume
   618c440ae3 Bump hcsshim to get some fixes.
   a0fa96c25b Update stop.md

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-04-28 12:03:37 -04:00
Bruce Ashfield
2cc2bc1acf docker-ce: update to v20.10-beta
moby has moved on to the 20.10+ series, while docker-ce has
stayed behind a bit.

Master of docker-ce now has imports from moby and is getting
ready for release.

To keep our variants from diverging, we switch to master (for
now) and will track the new development.

We adapt some patches from the moby build to work for docker-ce,
in particular, we cannot use docker to build docker, so we
port the cli building from moby.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-04-15 17:10:26 -04:00
Bruce Ashfield
34087227ee docker/moby: update to 20.10.6
Bumping to the lastet 20.10 series. This includes the following
moby commits:

   255c79a1e8 Move cgroup v2 out of experimental
   f2c0b3688a Pin arm64 machines to a specific Ubuntu version
   29ff2af2d3 Fix flaky TestInspect
   60310e2409 Use docker media type for plugin layers
   8088859bab btrfs: Allow unprivileged user to delete subvolumes (kernel >= 4.18)
   d22dde8eb1 rootless: fix getCurrentOOMScoreAdj
   c1e7924f7c archive: do not use overlayWhiteoutConverter for UserNS
   22dc1597b9 overlay2: doesSupportNativeDiff: add fast path for userns
   daae27bfce overlay2: call d.naiveDiff.ApplyDiff when useNaiveDiff==true
   e974cb638c rootless: bind mount: fix "operation not permitted"
   7022b1e12e bump up rootlesskit to v0.14.1
   88470052e7 vendor: docker/libnetwork b3507428be5b458cb0e2b4086b13531fb0706e46
   d26ed2c33b fix assertPortList normalizing being too strict
   915b239519 builder: produce error when using unsupported Dockerfile option
   ef2351b416 integration-cli: rely less on "docker port" output format
   86d98f5711 integration: update getExternalAddress to prefer IPv4
   b41e2d4dc1 integration/container: wrap some long lines for readability
   407a61cdb2 hack: use GOPROXY for rootlesskit to workaround issue with old git on CentOS/RHEL 7
   a35e1f451e update rootlesskit to v0.14.0
   9780942e20 Remove cli test for duplicate --net/--network opts
   e1ee2823ec TestPushMultipleTags: Add support for 20.10 CLI
   969bde2009 jsonfile: more defensive reader implementation
   cb501700e8 Fix handling for json-file io.UnexpectedEOF
   2d39a44c1c overlayutils/userxattr.go: add "fast path" for kernel >= 5.11.0
   95d2b686be overlay2: support "userxattr" option (kernel 5.11)
   074270703c Use buster backports to build with libseccomp-2.4.4
   fed6ba2790 Include VPNkit binary for arm64
   2ab3cd8c9e update containerd binary to v1.4.4
   d3188dc164 Dockerfile: switch to "stable" dockerfile front-end
   98273a606a dockerd-rootless-setuptool.sh: create CLI context "rootless"
   a0670c6d3d pkg/archive: TestUntarParentPathPermissions requires root
   04d9b581e9 Update documentation links
   1015b5b438 dockerd-rootless.sh: prohibit running as root
   35f5f9e624 builder: fix incorrect cache match for inline cache with empty layers
   3ce37a6aa4 vendor: github.com/moby/buildkit v0.8.2
   5e8c1b4f7d dockerd-rootless.sh: add typo guard
   a24d92f95b check-config.sh: add NETFILTER_XT_MARK
   80019e1b0e builder: fix blobs releasing via leases after pull
   2a220f1f3d Update Swarmkit to pick up fixes to heartbeat period and stalled tasks
   da1a672102 builder: fix pull synchronization regression
   0e001154f9 Check the length of the correct variable #42039
   3beb2e4422 Move cpu variant checks into platform matcher
   0caf485abb Fallback to  manifest list when no platform match
   a6a88b3145 profiles: seccomp: update to Linux 5.11 syscall list
   e3750357a5 builder: ensure libnetwork state file do not leak
   ab5711e619 Fix builder inconsistent error on buggy platform
   df2a989769 Add shim config for custom runtimes for plugins
   d13e162a63 Handle long log messages correctly on SizedLogger
   34446d0343 replace json.Unmarshal with NewFromJSON in Create
   c00fb1383f docs: fix double "the" in existing API versions
   b7e6803ec4 swagger.yaml: Remove extra 'the' wrapped by newline
   420de4c569 contrib/check-config.sh: fix INET_XFRM_MODE_TRANSPORT
   8412078b1e contrib/check-config.sh: fix IOSCHED_CFQ CFQ_GROUP_IOSCHED
   bb0866f04e contrib/check-config.sh: fix MEMCG_SWAP_ENABLED
   db47bec3c7 contrib/check-config.sh: fix NF_NAT_NEEDED
   6bc47ca4b4 contrib/check-config.sh: fix NF_NAT_IPV4
   491642e696 contrib/check-config.sh: support for cgroupv2
   cda6988478 Fix Error in daemon_unix.go and docker_cli_run_unit_test.go
   1640d7b986 Fix daemon panic when starting container with invalid device cgroup rule
   6e3f2acdac docs: fix NanoCPUs casing
   ad777ff3bc api: fix NanoCPUs casing in swagger
   94d2467613 Fix userns-remap option when username & UID match
   acb8a48a3c update runc binary to v1.0.0-rc93
   5d442b1cb7 pkg/archive: Unpack() use 0755 permissions for missing directories
   5db18e0aba archive: avoid creating parent dirs for XGlobalHeader
   94feac18d2 Update rootlesskit to v0.13.1 to fix handling of IPv6 addresses
   cc377d27ac Update TestDaemonRestartWithLiveRestore: fix docker0 subnet missmatch Fix docker0 subnet missmatch when running from docker in docker (dind)
   fc07fecfb5 TestBuildUserNamespaceValidateCapabilitiesAreV2: verify build completed
   f7893961de TestBuildUserNamespaceValidateCapabilitiesAreV2: use correct image name
   d31b2141ae Jenkinsfile: add cgroup2
   5de9bc7e01 TestInspectOomKilledTrue: skip on cgroup v2
   ff49cb3e33 Dockerfile.simple: Fix compile docker binary error with btrfs
   49e706e14c Dockerfile.buildx: update buildx to v0.5.1
   0211909bde testing: update docker-py 4.4.1
   faf6442f80 integration: fix TestBuildUserNamespaceValidateCapabilitiesAreV2 not using frozen image
   f0e526f43e Make test work with rootless mode
   a287e76e15 pkg/archive: allow mknodding FIFO inside userns

And the following cli commits:

   dc017bdda bake: remove windows targets other than windows/amd64
   feb6f439e Makefile: have binary, cross, dynbinary targets not use docker for backwards compat
   8bc4062fc set default version from git
   84cc7d87c update readme with new examples
   c1c3d3b3a remove unused targets
   048a84614 update circleci cross target
   33dacda24 add windows/arm64 target
   fcc05e5ea update windows resources generation
   58061d25f dockerfile based binary building
   4c3b87d92 config.Load() remove unneeded locks
   019609872 vendor: github.com/theupdateframework/notary v0.7.0-21-gbf96a202
   6ebf76504 vendor: update notary to 5f1f4a34
   f508ce9db vendor: github.com/theupdateframework/notary v0.7.0
   2c0435431 docs: remove trailing spaces to prevent yamldocs using "compact" notation
   ff945151e docs: improve example for "remove all stopped containers"
   4571d90f2 config: print deprecation warning when falling back to ~/.dockercfg
   f33a69f6e [20.10] Revert "Ignore SIGURG on Linux."
   d6eeeb625 service rollback: always verify state
   3e157d529 docker service rollback: fix non-zero exit code in some cases
   1fdf84b8e fix --update-order and --rollback-order flags
   376b99c6d Rename bin/md2man to bin/go-md2man
   0de4e6e9a Fix reading context and dockerfile from stdin with BuildKit
   de40c2b17 Fix panic when failing to get DefaultAuthConfig
   d513e46bf cli/config: prevent warning if HOME is not set
   2b74b90ef Add docs and completion for docker node ls --filter node.label
   05343b36a fix docker-run man page table formatting
   f90db254d docs: Fix wrong variable name
   0dcfdde33 Removed format flag for inspect
   03cd1dc50 Added zsh completion for docker context subcommands
   42811a7eb docs: add redirect for old reference URL
   be966aa19 docs: fix typo in deprecated.md
   b22fe0fb1 deprecate blkio-weight options with cgroups v1
   4eb050071 Update bash completion for fluentd --log-options
   08c4fdfa7 Add bash completion for `dockerd --ip6tables`
   6aa1b37c8 Add bash completion for `docker run|create --pull`
   e82920d76 Remove duplicate word in push.md
   82123939f Add bash completion for jobs

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-04-15 13:08:41 -04:00
Bruce Ashfield
4faef1334f docker-ce: export GO111MODULE=off
With the latest go version bump in oe-core export GO111MODULE is
on by default. Our build is not setup to use go modules, so we
disable it and avoid configuration errors:

  no required module provides package ... : working directory is not part of a module

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-03-01 11:48:28 -05:00
Bruce Ashfield
dc1713bec3 docker-moby: export GO111MODULE=off
With the latest go version bump in oe-core export GO111MODULE is
on by default. Our build is not setup to use go modules, so we
disable it and avoid configuration errors:

  no required module provides package ... : working directory is not part of a module

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-03-01 11:37:40 -05:00
Bruce Ashfield
d2081b09b8 docker/moby: update to 20.10.3
Updating to the 20.x series for moby.

The following moby commits:

   519a55f491 TestCgroupNamespacesRunOlderClient: support cgroup v2
   b6a6a35684 docker info: adjust warning strings for cgroup v2
   25bd941ae4 docker info: silence unhandleable warnings
   58283298d7 rootless: set systemd KillMode to mixed
   46229ca1d8 Use golang.org/x/sys/execabs
   a7d4af84bd pull: Validate layer digest format
   611eb6ffb3 buildkit: Apply apparmor profile
   4afe620fac vendor buildkit 68bb095353c65bc3993fd534c26cf77fe05e61b1
   e908cc3901 Use real root with 0701 perms
   bfedd27259 Do not set DOCKER_TMP to be owned by remapped root
   edb62a3ace Ensure MkdirAllAndChown also sets perms
   1c0af18c6c vendor: opencontainers/selinux v1.8.0, and remove selinux build-tag and stubs
   4a175fd050 Cleanup container shutdown check and add test
   ab06bb3ec0 vendor: opencontainers/selinux v1.7.0
   f3d0f7054d cmd/dockerd: sd_notify STOPPING=1 when shutting down
   c923f6ac3b Fix off-by-one bug
   1c5806cf57 Move use of debian:buster frozen image to debian:bullseye
   af0665861b Fix a potential hang when starting after a non-clean shutdown
   7ba1af38b8 TESTING.md: note that integration-cli is deprecated
   a0fc7a4b46 TESTING.md: Fix path the test environment conditions
   f2f5106c92 Add a test for #41723
   b314e901d8 Add IsUserNamespaceInKernel() test environment condition
   58a4c03fed Add debian:bullseye to frozen images
   188a691db7 fuse-overlayfs: fix godoc
   295fb1c35e Fix jobs mode filter spelling
   78eafdd947 Vendor in Libnetwork changes
   7e600eaae0 daemon: improve log messages during startup / shutdown
   e8648fa19f plugin/manager_linux_test: Skip privileged tests when non-root
   c7e7426796 pkg/chrootarchive: Skip privileged tests when non-root
   6349b32e1b daemon/oci_linux_test: Skip privileged tests when non-root
   a02553670e vendor buildkit to v0.8.1
   5fd8d701ce Vendor in libnetwork changes
   9122cd1a75 docs: add API v1.41
   5458b0e435 Revert "Add multi-user.target to After="
   495d623ae5 Add fallback for pull by tag
   34682e536e vendor: BuildKit 950603da215ae03b843f3f66fbe86c4876a6f5a1
   15accb8376 vendor: remove vendored golang.org/x/tools, as it's not needed
   cd63cc846e mark ip6tables as experimental feature
   dd752ec87a Fix jobs-related bug in task conversion
   0a8c769268 update containerd binary to v1.4.3 (CVE-2020-15257)
   2680a0fe2c Networking: add regression test for networks endpoint with trailing slash
   f9b2989e97 Fix permissions on oci fixtures files
   703951197c update containerd binary to v1.4.2
   22e31dbd9a vendor libnetwork to fix mix up between IPv4 and IPv6
   ab09458e21 dockerd-rootless-setuptool.sh: show more helpful error messages
   776cadc7db vendor: gotest.tools v3.0.3
   aeddf93de0 Implement Unwrap to errors
   73571e4689 vendor: github.com/moby/buildkit v0.8.0-rc2
   1f88736871 vendor: github.com/containerd/containerd 0edc412565dcc6e3d6125ff9e4b009ad4b89c638
   8eebe32f5c vendor: github.com/containerd/cgroups 0b889c03f102012f1d93a97ddd3ef71cd6f4f510
   ba475d44a7 vendor: github.com/containerd/fifo 0724c46b320cf96bb172a0550c19a4b1fca4dacb
   37da117aba vendor: github.com/containerd/ttrpc v1.0.2
   1725a1493e vendor github.com/tonistiigi/fsutil 0834f99b7b85462efb69b4f571a4fa3ca7da5ac9
   fa592fa7b2 vendor: golang.org/x/crypto c1f2f97bffc9c53fc40a1a28a5b460094c0050d9
   c7f0b509cf vendor: github.com/moby/term bea5bbe245bf407372d477f1361d2ff042d2f556
   2630994b35 Bump libnetwork
   dbffbe8f9b builder-next: fix platform-specific behavior
   f4214ec847 vendor: github.com/Microsoft/go-winio v0.4.15 was tagged
   05c20a6e1c handleContainerExit: put a timeout on containerd DeleteTask
   beff0a5f2c integration-cli: remove TestBuildContChar
   39f9c1b5d1 builder-next: fix --cache-from panic
   8f464ae2ab builder-next: refactor to use flighcontrol and remove resolveOnce
   1b1eb094cc builder-next: simple refactor
   3756668adb builder-next: Refactor using buildkit's resolver pool
   de56a90929 vendor buildkit 6861f17f15364de0fe1fd1e6e8da07598a485123
   f7bcb02f67 seccomp: Add pidfd_getfd syscall
   5e3ffe6464 seccomp: Add pidfd_open and pidfd_send_signal
   2b41e84719 pkg/system: fix compile on darwin (macOS)
   b4b902b88f Jenkinsfile: remove e2e image stage
   6d243cdf27 testutil: remove remaining use of deprecated pkg/mount
   43d61d2bcf [DEL] remove useless assert
   6458f750e1 use containerd/cgroups to detect cgroups v2
   7ba05f2b2b Rewrite VolumesMountedAsShared/Slave as Integration tests
   7bb729e928 Break out non-Windows sys/mount usage into helper
   3e3f3d7168 Move tests using sys/mount to not build on Windows
   a158b53d86 Separate non-Windows mount code from common code
   080d9df63e Don't clear the exit code from the Finally block
   1bb3491601 builder: fix detection of experimental --stream option (deprecated)
   51f5b1279d Don't set image on containerd container.
   d99e8d2c3b Unhide containerd-namespace flags
   9ca3bb632e Store image manifests in containerd content store
   66459cc623 Added ip6tables config option
   c6accc67f2 bump up rootlesskit to v0.11.0
   dfc2d770e4 Update iptable.Exists API in integration-cli
   53727ce2f0 vendor: github.com/creack/pty v1.1.11
   dc3c382b34 replace pkg/symlink with github.com/moby/sys/symlink
   c208f03fbd pkg/devicemapper: fix invalid usage of reflect.SliceHeader
   6a5393636e opts: unify host-options, and use consts
   80a5df9c49 Added container ID to containerd task delete event messages
   053962af92 Move HostGatewayName const to opts, and change vars to consts
   e4cf1c7336 pull: use tag service for pulling tagged reference
   e766361271 pkg/mount: update deprecated wrappers
   32d506b394 vendor: moby/sys mountinfo/v0.4.0
   182795cff6 Do not call mount.RecursiveUnmount() on Windows
   1623e6b222 Vendor in Libnetwork changes
   ac84f1b55f registry.loginV2(): minor cleanup
   b102d4637c Fix windows log file rotation with readers
   bcc993b494 Fix logfile to open all files with custom openFile
   56ba96b6c1 Clean up some logfile implementation
   3148a46657 Fix various race conditions in loggerutils
   93bd2c1336 contrib: remove download-frozen-image-v1 script
   b90ef1237e registry: minor cleanup in search code
   3f7c62f6f6 registry: remove v1 code not related to searching
   0ba2d7c625 registry: remove TestSameAuthDataPostSave
   32eaf4690a registry: DefaultService.Auth(): skip parsing default registry
   7782d04141 registry: remove v1 authentication
   ab47fd2f72 registry: use consts for default registry
   1a1f5cc37b Pass through GOCACHE to test_env
   8cc0fd811e docs: fix builder-version swagger
   1b8826beee docker stats: fix 'panic: close of closed channel'
   6f0709e033 vendor: golang.org/x/sys eeed37f84f13f52d35e095e8023ba65671ff86a1
   4680836f80 vendor: github.com/containerd/console v1.0.1
   88c0271605 Don't set default platform on container create
   80c3199c18 vendor: github.com/spf13/cobra v1.1.1
   561b8014c0 testutil: set -500 OOM score for test daemons
   2b8e68ef06 dockerd: remove default -500 oom-score-adjust
   a6129c57e6 Bump vndr v0.1.2
   a38b96b8cd Temporarily disable CAP_PERFMON, CAP_BPF, and CAP_CHECKPOINT_RESTORE
   5338478546 Dockerfile: fix golang-ci-lint installer
   f14aea63c9 "Fix" checkpoint on v2 runtime
   654cad4d9d Also trim "~..." from AppArmor versions
   f6f294bd83 testing: Init plugin config when for tests
   4539e7f0eb seccomp: implement marshal/unmarshall for MinVersion
   6b538ffbca vendor: github.com/gofrs/flock v0.7.3
   cf7a5be0f2 daemon: don't adjust oom-score if score is 0
   8c31e4536a volume/local: add tests for size quota
   2e05db981b quota: move test helper functions to extra file
   6d593fe6cc volume/local: decouple presence of options from mounting
   c677e4cc87 quota: move quota package out of graphdriver
   6f1553625d projectquota: build types and unsupported stubs everywhere
   31ed121cb8 projectquota: sync next projectID across Control instances
   963e5afc04 Update documentation to reflect deprecation of "NewEnvClient"
   a692823413 seccomp: add test for unmarshal default profile
   97535c6c2b seccomp: remove dependency on pkg/parsers/kernel
   ee079e4692 pkg/aaparser: support parsing version like "3.0.0-beta1"
   a3256d2dd8 bump google.golang.org/api v0.8.0
   2971204e43 bump go.opencensus.io v0.22.3
   bbde240ce0 bump cloud.google.com/go v-0.44.3
   ef553e14a4 Fix gcplogs memory/connection leak
   c9bbf37f85 vendor: sirupsen/logrus v1.7.0
   2036b277a5 Add TARGETARCH var to frozen images stage
   c9c7756301 oci: add tests for loading seccomp profiles
   56e7bc4b78 seccomp: remove dependency on oci package
   dedf8528a5 Allow download-frozen-images to work without `go`
   b8aec34680 seccomp: add test for loading old JSON format
   5f5285a6e2 Sterner warnings for unathenticated tcp
   7afef854ed api: clarify "v" option behavior in the container remove endpoint
   7335167340 Remove redundant "os.IsNotExist" checks on os.RemoveAll()
   5a7b75f889 daemon/graphdriver/copy: use IoctlFileClone from golang.org/x/sys/unix
   6267800783 vendor: golang.org/x/sys aee5d888a86055dc6ab0342f9cdc7b53aaeaec62
   2502db66d0 pkg/system: make EnsureRemoveAll unix-specific
   88126e84a5 Force Download-File function to use TLS 1.2
   66a37b460c Windows: Enable more integration tests
   35c531db1a Revendor Microsoft/go-winio for 8gB file fix
   2dd9faaa16 Enable TestBuildWithHugeFile on Windows
   0d75b63987 seccomp: replace types with runtime-spec types
   0efee50b95 seccomp: move seccomp types from api into seccomp profile
   968133c86c vendor: opencontainers/go-digest v1.0.0
   7cdced6f4b vendor.conf: fix tar-split version comment
   9fb324f00b vendor: docker/libnetwork d0951081b35fa4216fc4f0064bf065beeb55a74b
   89bec2e267 Fix collecting the daemon under test logs
   82b5ff8026 Windows CI: Make sure that CI fails on any error
   1ed6589e39 vendor: github.com/syndtr/gocapability 42c35b4376354fd554efc7ad35e0b7f94e3a0ffb
   af3220884e vendor: github.com/containerd/containerd v1.4.1
   1371a629d5 update containerd binary to v1.4.1
   4ab96db4ab vendor: github.com/moby/term 7f0af18e79f2784809e9cef63d0df5aa2c79d76e
   2344b3a9e1 fix integration test case TestExternalGraphDriver failed in mips arch
   3d9120f744 Unify same fromStatT() implementation for FreeBSD and NetBSD
   41be7293f5 daemon/listeners: use pkg/errors
   6efa9e0575 Add support for NetBSD
   df7031b669 Memoize seccomp value for SysInfo
   b83dc8e5a2 Remove libseccomp-golang from vendor
   ccbb00c815 Remove dependency in dockerd on libseccomp
   dc72890470 Remove "mkimage.sh" and associated scripts
   5ca758199d replace pkg/locker with github.com/moby/locker
   13e0ba700a swagger: fix MemTotal units in SystemInfo endpoint
   16eb522928 vendor: containerd v1.4.0
   a8e7115fca Simplify seccomp logic
   65a33d02f6 Simplify getUser() to use libcontainer built-in functionality
   322c9e6866 add partial metadata to journald logs
   245f2d922a vendor: github.com/opencontainers/selinux v1.6.0
   fdd22e5628 vendor: github.com/gorilla/mux v1.8.0
   d1c2f953c5 Test: Add buffer to two channels to avoid blocking goroutine
   ea9886cec4 pkg/idtools: refactor to avoid string-splitting
   15292d7abf update containerd binary to v1.4.0
   a18139111d Add faccessat2 to default seccomp profile.
   010adeec55 Builder: print relative path if COPY/ADD source path was not found
   b8988c8475 Add openat2 to default seccomp profile.
   c255404a25 opts: simplify ValidateEnv to use os.LookupEnv
   c353c7cc71 vendor runc library to v1.0.0-rc92
   7ab5b00a9c vendor golang.org/x/sys v0.0.0-20200622214017-ed371f2e16b4
   2ee753a28f vendor golang.org/x/net v0.0.0-20200707034311-ab3426394381
   5eccaaceb5 vendor golang.org/x/crypto v0.0.0-20200622213623-75b288015ac9
   15d38650ee vendor containerd library to v1.4.0-rc.1
   cf169b45bb daemon.setupPathsAndSandboxOptions() skip resolving symlinks
   3ee1ab87b7 Update docker-py to 4.3.0
   906007f6c1 libcontainerd: use cancellable context for events
   60d7265803 Use IsServing to determine if c8d client is ready
   e3ab236309 Add solaris support to lstat
   7fd23345c9 Wait for container exit before forcing handler
   31d83961e9 Update tini v0.19.0
   afd9a6c2b2 builder/remotecontext: use lowercase for error
   725eced4e0 apparmor: permit signals from unconfined programs
   a7c279f203 Add more error message for ops when container limit use an device which not exist
   2a6325e310 Bump Golang 1.13.15
   2c7b48decd Update runc binary to v1.0.0-rc92
   a6b00ed9b9 Update authors and mailmap
   0f0c1c04c8 fix TestDaemonNoSpaceLeftOnDeviceError for mips64le
   43d13054c5 update containerd to v1.3.7
   8ccb46a521 Check for context error that is wrapped in url.Error
   ad30ef9113 Supplement the omission of pr#41145
   6302dbbf46 Disable manifest v2 schema 1 push
   9f28837c1d vendor protobuf v1.3.5
   c00d4907da vendor prometheus dependency.
   e58a00211d vendor bbolt v1.3.5
   9ad35b7e69 vendor runc 67169a9d43456ff0d5ae12b967acb8e366e2f181
   9424eccfcd vendor containerd 779ef60231a555f7eb9ba82b052d59b69ca2ef10
   51e3cd4761 statsV2: implement Failcnt
   0592aac95c vendor: update containerd/cgroups
   0ca7456e52 Add multi-user.target to After=
   bd0c2b3581 oci/deviceCgroup(): remove redundant variable
   3108ae6226 oci: correctly use user.GetExecUser interface
   c76f380bea Add ulimits support to services
   2b22a2e792 fix buildkit pull nil panic
   1fdb1033c4 Bump swarmkit to d6592ddefd8a5319aadff74c558b816b1a0b2590
   818bad6ef2 vendor: vishvananda/netns db3c7e526aae966c4ccfa6c8189b693d6ac5d202
   36b1920e56 vendor: docker/swarmkit 293aa2e66279a930999044cbf6d0e590baac16ff
   c458bca6dc Handle missing c8d task on stop
   afdf5483c9 vendor: update containerd/continuity efbc4488d8fe1bdc16bde3b2d2990d9b3a899165
   51c7992928 API: add "prune" events
   5bc41368d9 bump up rootlesskit to v0.10.0
   aa225972df Remove apt.dockerproject.org from test
   f2cc755f66 docs: API v1.39: move system version response to definitions
   e221931ccd docs: API v1.40: move system version response to definitions
   d4c4323e54 swagger: move system version response to definitions
   24f173a003 Replace service "Capabilities" w/ add/drop API
   9a6402d761 docs: API v1.39: fix type for BuildCache CreatedAt and LastUsedAt
   a305abb1d1 docs: API v1.40: fix type for BuildCache CreatedAt and LastUsedAt
   61b770a63d swagger: fix type for BuildCache CreatedAt and LastUsedAt
   b8ca7de823 Deprecate KernelMemory
   a8b2272ab3 swagger: sync updates to v1.39
   1e89ca40ba swagger: sync updates to v1.40
   baa321293f Revendor swarmkit
   441211986c docs: add example calculations to container stats API
   c8008bfbe9 fix address pool flags merge #40388
   8774804ca7 vendor: update buildkit to 4d1f260e8
   c161d6564d api/types: omit empty DefaultAddressPools
   d4b3e786ed docs: add mention of DefaultAddressPools to API history
   9c66a2f4e1 Bump Golang 1.13.14
   bf4a5982f0 testing: bump docker-py 4.2.2
   c6d860ace6 Fix log file rotation test.
   bf7fd015f7 Remove unused useShimV2()
   bc4f242e79 Bump Go 1.13.13
   0b14c2b67a cgroup v1: change the default runtime to io.containerd.runc.v2
   c9c9e0ab90 pkg/parsers: remove uses of mattn/go-shellwords
   818e0b2fcf pkg/parsers: add unit test for Darwin
   c88a830507 distribution/xfer: use "main" instead of "master" for progress channel
   3895dd585f Replace uses of blacklist/whitelist
   f63f73a4a8 Configure shims from runtime config
   6fd94aa933 Fix lint error on sprintf call for runtime string
   219e7e7ddc vendor: libnetwork 9e99af28df21367340c95a3863e31808d689c92a
   b42ac8d370 daemon/stats: use const for clockTicksPerSecond
   840a12ac90 Add DefaultAddressPools to docker info #40388
   2865478487 Revendor hcsshim to fix image import bug
   63382e5f3b docs: sync API v1.39 swagger formatting with current version
   01244e85e7 docs: sync API v1.40 swagger formatting with current version
   d4d62b658d swagger: add DeviceRequests to container create, inspect example
   89876e8165 swagger: move NetworkingConfig to definitions
   91ca3e7a8d update runc binary to v1.0.0-rc91
   85e3dddccd update containerd to v1.3.6
   d2e23405be Set minimum memory limit to 6M, to account for higher startup memory use
   228d74842f Upgrading the versions of images in Dockerfile.
   97708281eb info: improve "WARNING: Running in rootless-mode without cgroup"
   3258d565cf Fix status code for missing --volumes-from container
   0e915e5413 update containerd to v1.3.5
   3b80af727a fix typos and grammar in docs
   e3cff19dd1 Untangle CPU RT controller init
   afbeaf6f29 pkg/sysinfo: rm duplicates
   a9d22cad93 hack/install: build gotestsum without -buildmode=pie
   20570d91c8 Dockerfile.windows: fix gotestsum.installer installing wrong version
   441aff3a17 fix gotestsum.installer installing wrong version
   d0d99b04cf seccomp: allow 'rseq' syscall in default seccomp profile
   794aa20983 dockerd-rootless.sh: support containerd v1.4 shim socket path convention
   ab6b92b6b2 chrootarchive: fix "conversion from int to string yields a string of one rune"
   671459a989 Switch all Dockerfiles to use "buster" variant
   a8ae48d94f project: remove obviously outdated docs
   c66c5f4904 contrib: remove docker-machine-install-bundle.sh
   32b4590b23 contrib: remove REVIEWERS files
   45eb4e0d80 contrib: remove outdated vagrant docs
   6b6af2abd9 contrib: remove outdated "desktop-integration" examples
   6743320a12 dockerd-rootless.sh: allow specifying DOCKERD_ROOTLESS_ROOTLESSKIT_PORT_DRIVER
   c3acd082c7 TestUserNoEffectiveCapabilitiesNetBindService: conditionally set net.ipv4.ip_unprivileged_port_start
   ed89041433 test-integration: support cgroup2
   87a7fc1ced Enable client on netbsd and dragonfly
   87b8947580 TestDaemonDNSFallback: increase timeout to reduce flakiness
   3e2965831f vendor: golang.org/x/text v0.3.3
   5d97de47ec dockerd-rootless-setuptool.sh: use safer XRD on non-systemd hosts
   e07a88c95f fix code note when push all tags
   9b28939345 vendor: update buildkit to df35e9818
   66bb1c4644 pkg/sysinfo: use containerd/sys to detect UserNamespaces
   9ff990a2b9 pkg/chrootarchive: use containerd/sys to detect UserNamespaces
   f7d5d70e44 pkg/archive: use containerd/sys to detect UserNamespaces
   4534a7afc3 daemon: use containerd/sys to detect UserNamespaces
   79cfcba76c cgroup2: unshare cgroupns by default regardless to API version
   6fabb93f73 Make script pass shellcheck
   56de0489fc int-cli/TestRunInvalidCPUShares: fix for newer runc
   d378625554 info: add warnings about missing blkio cgroup support
   004fd7be92 Bump Golang 1.13.12
   96556854a7 Fixes #41010 skip empty lines
   687bdc7c71 API: swarm: move PidsLimit to TaskTemplate.Resources
   2befe194af hack: remove useless constants
   9b77370213 int/build/TestBuildWithEmptyLayers: prevent panic
   dae652e2e5 Add default sysctls to allow ping sockets and privileged ports with no capabilities
   a1afad3aab api/types: remove errdefs dependency
   f758d598c5 make install: install containerd-shim-runc-v2
   7ad0da7051 remove group name from identity mapping
   8cc8e26835 testing: bump docker-py 4.2.1
   9a78e916ad integration: Add TestDaemonDNSFallback
   83199187ef vendor libnetwork to 2e24aed516bd5c836e11378bb457dd612aa868ed
   b280ea114f hack: add more debugging to understand exit codepath
   a9569f5243 vendor: opencontainers/selinux v1.5.2
   a366fe41cb fix "stat.Rdev" invalid operation mismatched types on mips64el compile error the "stat.Rdev" variable and "s.Rdev" mismatched types on mips64el convert "stat.Rdev" type to uint64 explicitly
   a5324d6950 Better selection of DNS server
   288ed93dc5 daemon.allocateNetwork: include original error in logs
   84ef60cba2 allocateNetwork: don't assign unneeded variables
   b98b8df886 allocateNetwork: fix network sandbox not cleaned up on failure
   d5da7e5330 pkg/sysinfo/sysinfo_linux.go: fix some comments
   f02a53d6b9 pkg/sysinfo.applyPIDSCgroupInfo: optimize
   0c350e87a0 ldmode=pie is not supported for the mips arch reference: https://github.com/docker/cli/pull/2507 4c99c81326
   1192c7aee4 seccomp: remove the unused query_module(2)
   2a331a5ef7 rm_test: fix goroutine leak
   5ea5c02c88 Fix flakey test for log file rotate.
   0154dc7a23 Using test names instead of hardcoded ones in integration/image directory
   4cabad6bae Using test names instead of hardcoded ones in integration/container directory
   6bc112abde Fixed small documentation typo
   ebd025b63a Using test names instead of hardcoded ones in integration/build directory
   84748c7d4e API: split types for Resources Reservations and Limits
   a342010823 Dockerfile: bump CRIU 3.14
   90758fb028 Bump Golang 1.13.11
   aadc55c605 Dockerfile.windows: fix build of gotestsum
   1d9da1b233 Fix bug in gotestsum installer causing dependencies to not be downloaded
   a36db14ce0 plugin: remove Rlock in resolvePluginID to fix double Rlock
   f48b7d66f3 Fix filter on expose and publish
   c696b95269 add dockerd-rootless-setuptool.sh
   fdb71e410c registry: fix mtls config dir passing
   a430bc5d5f builder-next: fix layer access bug
   6a5e3547fb pkg/archive: escape ":" symbol in overlay lowerdir
   9871b6e30e Fix TestSwarmManagerAddress to not depend on "pretty" format
   17bb5f4b15 bump up rootlesskit to v0.9.5
   49f8a4224c SELinux: fix ENOTSUP errors not being detected when relabeling
   35bf4f87d9 Don't use ini() to set unpigz path
   5fd3496e7a vendor: gorilla/mux v1.7.4
   64bc9281de vendor: opencontainers/runtime-spec v1.0.2
   71411e486d vendor: update containerd c80284d4b5291a351bb471bcdabb5c1d95e7a583
   11feae7e59 vendor: containerd/ttrpc v1.0.1
   5ed85b0909 vendor: bump containerd/typeurl v1.0.1
   c86abee1a4 dockerd-rootless.sh: bump up slirp4netns requirement to v0.4.0
   5d3a9e4319 seccomp: Whitelist `clock_adjtime`
   dc0a400738 vendor: spf13/cobra v1.0.0
   69df2589cd vendor: spf13/pflag v1.0.5
   11a5b1887e vendor: moby/term 73f35e472e8f0a3f91347164138ce6bd73b756a9
   4ac17adcd3 vendor: golang.org/x/sys 85ca7c5b95cdf1e557abb38a283d1e61a5959c31
   de7f0120fd Dockerfile: mount install scripts instead of copying
   d1a3a17c67 Dockerfile: remove "INSTALL_BINARY_NAME" envs
   3989f91075 logfile: Check if log is closed on close error during rotate
   25fd814652 vendor: golang.org/x/sys 5c8b2ff67527cb88b770f693cebf3799036d8bc0
   d84ed625a7 vendor: add version comment for containerd/typeurl, ttrpc
   fa8199b453 vendor: add comment that containerd/console is v1.0.0
   7608e42da5 Fix curl progress flags
   08d3774304 vendor: Microsoft/hcsshim v0.8.9
   a8216806ce vendor: opencontainers/selinux v1.5.1
   e1e544c8c6 vendor: sirupsen/logrus v1.6.0
   6168b875a4 Dockerfile.buildx: bump to Go 1.13.10
   886c8385f5 containerd.installer: refactor
   3b261d7709 swagger: reformat, and wrap to ~80-chars
   f85bea4ee7 Make binary: install all containerd shims to bundles
   a4400d328c Makefile: remove empty targets, and slight refactor
   996be00fb9 vendor: sort imports to prevent vendoring race condition
   84d7b57eb7 Dockerfile: update syntax to 1.1.7-experimental
   8006a9d08c vendor konsorten/go-windows-terminal-sequences v1.0.3
   90f19fc375 cmd/dockerd: remove outdated "experimental" annotation
   07d60bc257 Replace errors.Cause() with errors.Is() / errors.As()
   b2af9e631c vendor: update moby/ipvs v1.0.1
   f6ac841633 bump up rootlesskit to v0.9.4
   841c1f3388 Remove blurb about fixed in go1.11 in patch file
   7260adfff9 vendor: add local copy of archive/tar
   5702a89db6 Use strings.Index instead of strings.Split
   964731e1d3 Improve error feedback when plugin does not implement desired interface
   4714ab5d6c cgroup2: use "systemd" cgroup driver by default when available
   8312004f41 remove uses of deprecated pkg/term
   41d4112e89 pkg/term: vendor moby/term and make pkg/term an alias
   701b39f5f0 pkg/term: deprecate package in favor of moby/term
   33ee7941d4 support `--privileged --cgroupns=private` on cgroup v1
   c3808634e7 vendor: update libnetwork 1a17fb36132631a95fe6bb055b91e24a516ad81d
   f337a8d21d Do not require "experimental" for metrics API
   f350b53241 cgroup2: implement `docker info`
   ed096538e8 extract logic for resolving image/plugin digest and platform
   2376ebd3f2 fix --cluster-store-opt deprecation annotation
   10c748cd39 imageWithDigestString: return image unmodified if there are no changes
   799bd475fb ServiceCreate/ServiceUpdate: refactor and fix potential NPE
   7400375526 daemon: remove distribution/uuid package
   fbaaca6351 update containerd to v1.3.4
   157c53c8e0 Add API support for PidsLimit on services
   a9d20916c3 swarm: fix API version detection
   cdc39fa29c integration/config: add check for removing non-existing config
   1a7ffe4fe4 integration/secret: add check for empty list not producing an error
   632cc7019a integration/config: remove check that was already done in TestConfigInspect
   26f2eddaa3 integration/config: combine TestConfigCreateWithLabels with TestConfigsCreateAndDelete
   3c4b258f21 integration/secret: don't string-match errors
   18cae89436 integration/config: don't string-match errors
   348f412d85 integration: sync minor changes between config and secret tests
   a45c89ecd1 integration/secret: fix TestSecretInspect not actually checking response
   25424cf772 integration/config: move functions to be in line with "secret" tests
   3c6f018f94 integration/secret: TestTemplatedSecret: simplify task code
   de78663181 integration/secret: rename variables that collided with imported package name
   dd67b4794e integration/config: TestTemplatedConfig: simplify task code
   ec78112edd integration/config: rename variables that collided with imported package name
   0cdf6ba9c8 vendor: update buildkit to ae7ff174
   eb14d936bf daemon: rename variables that collide with imported package names
   797ec8e913 daemon: rename all receivers to "daemon"
   5d040cbd16 daemon: fix capitalization of some functions
   eeef12f469 daemon: address some minor linting issues and nits
   ced91bee4b On startup, actually shutdown the container.
   e9d785ce3f enhance storage-opt validation logic in overlay2 driver
   f3c1eec99e add zombie check for container when killing it, alernative fix for  #40735.
   7cb13d4d85 Bump Golang 1.13.10
   e9348898d3 api docs: fix broken link on GitHub
   933a87236f Reduce allocations for logfile reader
   c44fb42377 swagger: clarify the meaning of Image field in ContainerInspect endpoint
   f2c432636b pkg/authorization: Fix test failures on macOS
   fe2aca0e39 Only check variant if set on image.
   1026f873a4 seccomp: allow syscall membarrier
   06ca1606e1 Fixed typo in inventor comments.
   d1304a8c74 Jenkinsfile: remove redundant DOCKER_EXPERIMENTAL
   5ca47f5179 rootless: graduate from experimental
   2b8ae08571 docs: add API versions v1.30 - v1.37
   381c192027 Revert "vendor: update go.etcd.io/bbolt v1.3.4"
   dc089c22ce vendor: pkg/errors v0.9.1
   e7183dbfe9 vendor: update go-events to fix alignment for 32bit systems
   bd8490c0de vendor: jmespath/go-jmespath v0.3.0
   e5ca303cff vendor: add version comments for some dependencies
   6ee9a1ad29 Bump Golang 1.13.9
   5ad981640f builder: fix concurrent map write
   7ac638f86a Add support to riscv64 to the build scripts
   3e3cd7b255 Pin busybox to fixed version and verify sha256
   97b742676b hack/ci/windows.ps1: build busybox from local Dockerfile
   8164f298f9 vendor jhowardmsft/busybox
   9688ca59b3 Rename newer build_shell target to build
   d7ba1f85ef Use containerd dist libs for plugin pull/pull
   85dc0fb7d5 pkg/mount: make standalone golint happy
   0d3b400ab5 LCOW: add "no_lcow" build tag to allow disabling lcow
   3802830989 cgroup2: implement `docker stats`
   745ed9686b pkg/idtools: fix use of bufio.Scanner.Err
   5b658a0348 daemon.overlaySupportsSelinux: simplify check
   3dd0262773 build Dockerfile allows arg for base build FROM
   f07f320651 vendor: update go.etcd.io/bbolt v1.3.4
   ec16053ccf Fix UsageInUsermode value on Windows
   1dbf34f3aa Bump swarmkit to ebe39a32e3ed4c3a3783a02c11cccf388818694c
   89fabf0f24 seccomp: add 64-bit time_t syscalls
   7a9cb29fb9 Accept platform spec on container create
   99beb2ca02 pkg/mount: deprecate
   39048cf656 Really switch to moby/sys/mount*
   59c0495409 pkg/mount: make it shallow
   75f7e435a2 vndr: vendor in github.com/moby/sys
   ea44be4b8f vendor: bump libnetwork ef149a924dfde2e506ea3cb3f617d7d0fa96b8ee
   8dd1490473 Support reading multiple bytes in escapeProxy
   5e1b246b9a test-integration: support more rootless tests
   f310bd29bd rootless: support forwarding signals from RootlessKit to dockerd
   745fa04e52 service: support --mount type=bind,bind-nonrecursive
   e26e1cc5c1 vendor: vishvananda/netlink v1.1.0
   6859bc7eee Move schema1 deprecation notice
   25d6047ec0 unit test on TestParseSignal failed within pkg/signal package on mips64el error log : signal_test.go:20: assertion failed: error is not nil: Invalid signal: SIGEMT signal_test.go:22: assertion failed: When "ParseSignal" function parse sigStr from SignalMap, it find the signal object with key ("SIG"+sigStr). But  EMT signal named "SIGEMT" in SignalMap structrue, so the real key is "SIGSIGEMT" , and cannot find the target signal. modify "SIGEMT" to "EMT" in SignalMap structrue.
   1d08ccd4ff vendor: update fsnotify v1.4.9
   93f3532f64 update VPNKit
   c239bbbcb2 Switch to s390x Ubuntu 18.04
   6c0eb9e849 fix linting in pkg/mount
   92e7f8f67c daemon: fail early if rootless && cgroupdriver == "systemd" && cgroup v1
   b890c20555 pkg/archive: use mount pkg
   83ed668688 pkg/mount.Mount: speedup (remove Mounted check)
   e36d222666 ci: update golangci-lint v1.23.8
   d949fddc6c containerd.installer: install containerd-shim-runc-v2
   5bf33adba2 hack: support $DOCKER_ROOTLESS for testing rootless
   5bd02b8a86 pkg/mount.RecursiveUnmount(): don't call Mounted()
   f8dbc31b78 pkg/system.EnsureRemoveAll: don't call Mounted
   2e0762ae44 Add TC for com.docker.network.host_ipv4 label
   18c22f5bc1 fix backingFs assignment
   bd2e288e56 pkg/system: remove unused CommandLineToArgv
   a48c6e3005 pkg/symlink: don't depend on pkg/system and pkg/longpath
   f2d49cb7ee pkg/system: fix minor linting issues
   dec7a1befb pkg/system: simplify IsAbs()
   079fb80657 pkg/system: replace more uses of "syscall"
   70a4d886cd builder: fixPermissionsWindows(): use golang.org/x/sys/windows
   3bba43b894 pkg/system: deprecate SetNamedSecurityInfo, GetSecurityDescriptorDacl
   1ea3a2b7f5 rootless: launch rootlesskit with --propagation=rslave
   e1710b42d3 vendor: bump libnetwork bf2bd42abc0a3734f12b5ec724e571434e42c669
   32e554e681 Remove "could not get checksum with tar-split" debug message
   05ec12b082 Fix `make shell`
   ed033adb2c Builder: Check remote when local img platform doesn't match
   a3292263a3 integration: use systemd when $DOCKER_SYSTEMD is set
   616e64b42f API: deprecate /info "ClusterStore" and "ClusterAdvertise" fields
   a5538c06f9 Add warning about deprecated "cluster" options to "docker info"
   abf2404642 hack/make.sh: remove extra empty lines
   3cf82748dd run shfmt
   eb484fcb67 validate: add shfmt
   3fbc41fe36 TestCgroupDriverSystemdMemoryLimit: fix failure
   9a82a9a8ea vendor containerd, BuildKit, protobuf, grpc, and golang.org/x
   fdf42f7a59 Update Windows ico
   fa67cff34b vendor: update opencontainers/selinux v1.3.3
   ce1ceeb257 Add stats options to not prime the stats
   21e5decbaa vendor: update gotest.tools v3.0.2
   c322af8019 test: add buffer to prevent goroutine leak
   669056f93d pkg/system.getxattr: handle changed size case
   f508db4833 Update CRIU to v3.13 "Silicon Willet"
   0ce3ab679c Add a TODO in the Dockerfile regarding nftables
   8c0f6142a8 Update DNS library
   83c0bedba9 daemon/cluster: add a missing Unlock
   34837febc4 plugin: fix a double RLock bug
   e6281b1b3f Revert "Don't die when daemon cannot read certs.d"
   33baa55353 vendor: update buildkit to d75ed2b68
   6fdbc50084 docs: add API versions v1.25 - v1.29, v1.38 - v1.40
   a6f99232f5 Always execute tests and skip in tests themselves
   12c7541f1f vendor: update opencontainers/selinux v1.3.1
   750f0d1648 Support configuration of log cacher.
   e2ceb83a53 Support reads for all log drivers.
   1bf1941ac9 vendor: golang.org/x/crypto 1d94cc7ab1c630336ab82ccb9c9cda72a875c382
   f7c4be86c6 fixed deprecation message
   3f7503f98a Update Golang 1.13.8
   af2a11f316 TestCatchAll, TestStopCatch: remove unneeded goroutine
   79b130ac31 Revert "Fix containerutility compilation on gcc-mingw-w64 8.3"
   5125f8b304 bump windows-container-utility aa1ba87e99b68e0113bd27ec26c60b88f9d4ccd9
   addc0c809f Fix go-swagger to work with Go 1.14
   ca4b51868a rootless: support `--exec-opt native.cgroupdriver=systemd`
   f282dde877 Fixes #33434 - API docs to specify using base64url
   9f94cfdc57 Vendor check to succeed even if copyright information is not found
   8a52139a0f Revert "Jenkinsfile: temporarily pin windows image to 10.0.17763.973"
   da6c1429d0 docker-py: skip flaky AttachContainerTest::test_attach_no_stream (again)
   1470697b67 Deprecate '--cluster-xx' options and add warning
   fa2417984b Jenkinsfile: temporarily pin windows image to 10.0.17763.973
   35d6c1870f enforce reserve internal labels.
   562880b276 Fix more goimports
   5a028d2736 docker-py: override default API version to run all tests
   7270d7eb94 fix goimports
   f800d5f786 Set the bip network value as the subnet
   008fc67974 Fluentd: add fluentd-request-ack option
   cc1f3c750e Fluentd: add fluentd-async option, deprecate fluentd-async-connect
   a1d4a081dd Fluentd: extract parsing config, and validate early
   8bd4aedb02 Fluentd: sort consts alphabetically
   ad13a2a4ba Fluentd: return "invalid parameter" for invalid config options
   9f0b3f5609 bump gotest.tools v3.0.1 for compatibility with Go 1.14
   cc993a9cbf Exec inspect field should be "ID" not "ExecID"
   e55bff541e TestLoginFailsWithBadCredentials: prepare for Go 1.14 changes
   6acfc42094 TestResumableRequestHeaderTooMuchFailures: prepare for Go 1.14 changes
   4a1900915a API: remove deprecated "filter" parameter for API v1.41 and up
   7418745001 new storage driver: fuse-overlayfs
   ed439e4a31 swagger: document "node.platform.(arch|os)" constraints
   544c766d97 Fix typos
   e75e6b0e31 Use condition variable to wake stats collector.
   486161a63a bump vndr v0.1.1
   27649ee44f update containerd binary to v1.3.3
   44a8e10bfc awslogs: Update aws-sdk-go to support IMDSv2
   1cb4a60950 testing: bump docker-py to 4.2.0
   82879e9a9c Add vpnkit back to binary targets
   f464c31668 Check tmpfs mounts before create anon volume
   5dffe74df2 Fix windows cross builds.
   b606c8e440 vendor: update golang.org/x/crypto 69ecbb4d6d5dab05e49161c6e77ea40a030884e1
   878db479be Update Golang 1.13.7 (CVE-2020-0601, CVE-2020-7919)
   fb155a1125 Fix leak related to service logs
   6d68080907 update runc library to v1.0.0-rc10 (CVE-2019-19921)
   cd43c1d1ac update runc binary to v1.0.0-rc10 (CVE-2019-19921)
   9bd1ae024a dockerd-rootless.sh: remove confusing code comment
   92e809a680 Support host.docker.internal in dockerd on Linux
   c90254c746 Add George Washington Carver to name generator
   ac1d8bc760 Add Mae Jemison to name generator
   4d249ae1f3 remove extra space in code comment in ping.go
   572cb55c0e hack/make/.go-autogen: fix LDFLAGS to accept values with spaces
   d68385b861 Update Golang 1.13.6
   e8122ed724 hack/make/.go-autogen: fix typo in LDFLAGS variable
   4c407caada Bump libnetwork to latest refpoint
   fa291552d5 vendor: bump prometheus/client_golang v1.3.0
   34a65cb3ba vendor: bump prometheus/client_golang v1.1.0
   b2db7c8bc9 vendor: bump prometheus/client_golang v0.9.4, docker/go-metrics v0.0.1
   12a83ac27e vendor: bump prometheus/procfs v0.0.8
   54dc6f355b vendor: bump prometheus/common v0.7.0
   9c99f8b9b3 vendor: bump prometheus/client_model v0.1.0
   5511f45767 Remove vim syntax files
   30d9fe30b1 Add swarm jobs
   bdad16b0ee Handle error case when fixed-cidr-ipv6 is empty
   94a8c8b3c0 vendor: update fsutil 0f039a052ca1da01626278199624b62aed9b3729
   67a0695e8b vendor: update containerd/continuity to 26c1120b8d4107d2471b93ad78ef7ce1fc84c4c4
   5c73cacefc vendor: bump beorn7/perks v1.0.1
   940a1292db vendor: bump google/shlex e7afc7fbc51079733e9468cdfd1efcd7d196cd1d
   5a5ef3f7f2 vendor: add "v0.8.7" comment to Microsoft/hcsshim vendor
   aacb2960c9 update .dockerignore to prevent '-unsupported' builds
   50f1e205e4 Dockerfile: use tmpfs for building registry, go-swagger
   95a4702943 Dockerfile: also build old registry on armhf
   339fb74cbc prevent panic if TINI_COMMIT isn't set during build
   d4f05c168d bump vndr v0.1.0 to support versioned import paths
   02bc2769fb Add myself as a curator
   25a1bf53d2 Fix containerutility compilation on gcc-mingw-w64 8.3
   bb0472bd23 Dockerfile: switch to iptables-legacy to match the host
   4e3ab9e9fb Dockerfile: switch golang image to "buster" variant, and update btrfs packages
   5dbfae6949 hack/make: ignore failure to stop apparmor
   07efe6a0a7 Bump swarmkit to 24fb4cfe8af56803640180c5592bf32da732ced2
   9ae7196775 swagger: add missing container Health docs
   1c16572fe6 registry: fix goimports
   79c877cfa7 swagger: restore bind options information
   8311d6ba9f API: omit classic swarm "SystemStatus" field if empty
   78c86927ab api/types: document classic swarm "Node" field
   b5c22f4fcf TestContainerInspectNode: document test as being for classic swarm
   234d5a78fe swagger: remove classic swarm "Node" field
   7e0afd4934 swagger: move ContainerState to definitions
   f2b25e498f docker-py: skip broken ImageCollectionTest::test_pull_multiple
   6bc45b09e7 docker-py: re-enable tests that were fixed in v4.1.0
   86ebbe16de remove host directory check
   491531c12b cgroup2: mark cpu-rt-{period,runtime} unimplemented
   19baeaca26 cgroup2: enable cgroup namespace by default
   409bbdc321 cgroup2: enable resource limitation
   612343618d cgroup2: use shim V2
   9177ac322a Fix output targets getting double nested.
   9608dc5470 Document `message` parameter to `/images/create`
   a218e9b7b0 Update Golang 1.13.5
   8d2e1ee546 Build and use gotestsum for running all tests
   d3c0261876 hack/validate/deprecate-integration-cli: add integration-cli/*_api_*.go
   1f0fdcc6f5 hack/validate: clean-up output, move golang-ci-lint to end
   cd094422a7 Jenkinsfile: force validate steps on master and backports
   545e81714b hack/validate: allow forcing validation
   9dde8f2b46 hack/validate/deprecate-integration-cli: don't exit on success
   e21019fa51 hack/validate/default: fix minor linting issue
   c8ecedbde9 Revert "hack: temporarily disable deprecate-integration-cli"
   658723badd rootless: fix proxying UDP packets
   ee5aa536d1 update vendor golang.org/x/sys to 6d18c012aee9febd81bbf9806760c8c4480e870d
   cbd37fbc9a integration-cli: re-enable TestRunAttachFailedNoLeak on RS3
   56c5668068 Testcase: Change time comparison logic.
   d135dc242e client.ImagePush(): default to ":latest" instead of "all tags"
   5bb4f4818b libcontainerd: move hcsshim import to windows-only file
   7f809e1080 Update containerd to v1.3.2
   35b9e6989f Make `--device` flag work in privileged mode
   03b3ec1dd5 make --device works at privileged mode
   b1ffda5cea builder/remotecontext: allow ssh:// urls for remote context
   04203d13fb api/server: build: refactor for better readability
   9709f6b95e api/server: build: use locally scoped variables
   20e3b5ba2c api/types: minor BuilderVersion refactor
   4138cd22ab Fix possible runtime panic in Lgetxattr
   b682cda946 docs/rootless.md: move to https://docs.docker.com/engine/security/rootless/
   3aba8652ca update curators
   3f3eb0ef10 Move Daniel to alumni
   2c1c5aabd7 Move Aaron to alumni
   db5c9e632f Move Mickaël to alumni list
   e6d514dbab Add Dockerfile to .dockerignore
   5f314c24fc Bind-mount context for Dockerfile build targets
   79a52bb1ba Add support for outputing binaries to custom dir
   675b414f56 Use -X ldflags to set dockerversion package vars
   ccb0b0a7cc binary targets do not need the dev environment
   e7718c41c3 Move Doug to alumni list
   446fe7f263 Make sure that layers are removed from layerdb after succefull layer removal
   b7f931e170 registry: normalize comment formatting
   cbc9de0abe image: normalize comment formatting
   a567ae3c31 client: normalize comment formatting
   2deeb6ad96 builder/remotecontext: normalize comment formatting
   d29f420424 libcontainerd: normalize comment formatting
   f4f56b1197 daemon: normalize comment formatting
   ec4bc83258 daemon/graphdriver: normalize comment formatting
   6625fa6103 daemon/cluster: normalize comment formatting
   ba6bbca89a daemon/logger: normalize comment formatting
   5331e6ab2d pkg/tailfile: normalize comment formatting
   b95fbe7630 pkg/signal: normalize comment formatting
   1d97da61a2 pkg/progress: normalize comment formatting
   e2addf46bf pkg/mount: normalize comment formatting
   0b155db389 pkg/jsonmessage: normalize comment formatting
   a45b3a92f6 pkg/idtools: normalize comment formatting
   14cad10cea pkg/containerfs: normalize comment formatting
   9de5d3da89 pkg/chrootarchive: normalize comment formatting
   ecb898dcb9 pkg/archive: normalize comment formatting
   0fb5630784 pkg/system: normalize comment formatting
   92ad849327 integration: normalize comment formatting
   c9b2a3cff5 api: normalize comment formatting
   580d3677c8 integration-cli: normalize comment formatting
   90aa0901da api/server/router: use consts for HTTP methods
   9aa55d97e5 bump containerd/go-runc a2952bc25f5116103a8b78f3817f6df759aa7def
   a7b6c3f0bf Bump hcsshim to b3f49c06ffaeef24d09c6c08ec8ec8425a
   6ee536b4a0 daemon: remove use of deprecated os.SEEK_END
   0cc7ad0a7d distribution: remove use of deprecated os.SEEK_END
   c530c9cbb0 TestRunAttachFailedNoLeak: Compare lowercase
   f22ff19668 builder: remove use of deprecated pkg/system constants
   f572df7c22 pkg/system: deprecate constants in favor of golang.org/x/sys/windows
   044b74e33b daemon: remove use of deprecated system.GetOSVersion()
   81f9edc7b0 pkg/parsers: remove use of deprecated system.GetOSVersion()
   33d8492ce4 pkg/system/windows: remove unnecessary conversions
   4cdb796b54 pkg/system/windows: remove obsolete comment
   5c6b913ff1 logger/gelf: Skip empty lines to comply with spec
   f4fa98f583 Use certs.d  from XDG_CONFIG_HOME  when in rootless mode
   2808762b27 Don't die when daemon cannot read certs.d
   bbf1edae4f Allow client consumers like traefik to compile on illumos
   517946eb47 Update containerd to v1.3.1
   1308a3a99f Move DefaultCapabilities() to caps package
   e226aea280 overlay[2]: rm fs checks
   83783af08e Disable tests missed by PR 40155
   447a840254 Windows: Use system specific parallelism value on containers restart
   36f6cc11a4 refactored integration/service/instead_test.go to ues unique resource names
   649e4c8889 Fix/improve overlay support check
   d5687079ad overlay: move supportsMultipleLowerDir to utils
   25c5a55261 Check for OS Type and skip within the test
   9cf349d0f8 bump libnetwork 90afbb01e1d8acacb505a092744ea42b9f167377
   f09dc2f4fc Fix docker crash when creating namespaces with UID in /etc/subuid and /etc/subgid
   0c9b232bf5 Remove unused GlobalFlags
   b96a0c7754 Add daemon options required by buildkit tests
   89c6febfc2 Dockerd won't start if a network with the default subnet prefix already exists in HNS.
   86594739b0 builder/remotecontext: use net/url instead of urlutil
   5a74a736a8 TestParseRemoteURL: use subtests
   21dfcc730b builder-next: clear temp leases on startup
   f632e2d8d3 vendor: update containerd to acdcf13d5eaf0dfe0eaeabe7194a82535549bc2b
   6186e9fe87 hack/make/.go-autogen: fix "generated code" comment not in correct format
   c511db70ed api/types: re-generate with new template
   3df4f86f21 swagger: fix "generated code" comment not in correct format
   f14c9d4df5 builder-next: track layers and graphdrivers with leases
   fe16d95dcd builder-next: update adapters to new buildkit interfaces
   fb1601d5ab vendor: update buildkit to leases support
   ce931f28ea Windows: Only set VERSION_QUAD if unset
   9a7e96b5b7 Rename "v1" to "statsV1"
   cf86eeaf96 Bump Golang 1.13.4
   d6a91ca71c Rename DCO check param in Jenkinsfile
   27552ceb15 bump containerd/cgroups 5fbad35c2a7e855762d3c60f2e474ffcad0d470a
   c057825cf5 Pass VERSION variable to binary build targets.
   e7d2d853f6 Make binary output targets use own build cmd
   a0a5ec4c6d Integration: skip TestInfoDebug on Windows
   d7bc994a08 awslogs & archive: prevent 2 goroutine leaks in test functions
   5791019028 hack/validate/vendor: simplify looking for license
   4be12ad3d0 hack/validate/vendor: shellcheck fixes
   9d4e81e8bf hack/validate/vendor: print diff for modified files
   5ce9df2a40 Update to runc v1.0.0-rc9
   6233217a31 integration/internal/container: fix a goroutine leak bug by adding 1 buffer
   49fbb9c985 registry: add a critical section to protect authTransport.modReq
   9f73396dab daemon: add grpc.WithBlock option
   7ef475fc16 pkg/homedir: clarify Get() docs wrt static linking
   9d12bc2573 pkg/system: make OSVersion an alias for hcsshim OSVersion
   0945a8807d integration-cli: goimports
   80e338a18d Revert "homedir: add cgo or osusergo buildtag constraints for unix"
   203ba72fc5 integration-cli: Fix `SA1019: httputil.ClientConn is deprecated`
   86b3703182 Deprecate pkg/system.GetOSVersion() in favor of hcsshim/osversion.Get()
   6b91ceff74 Use hcsshim osversion package for Windows versions
   a5341aaf32 bump Microsoft/hcsshim 2226e083fc390003ae5aa8325c3c92789afa0e7a
   3ddb4100a0 integration-cli: remove redundant logs from cp utils
   267a0294a7 integration-cli: cleanup: mark helpers as helpers, use assertion
   ab9c726fc4 integration-cli: TestContainersAPICreateMountsValidation: use subtests
   9ca5ffd5f7 integration-cli: TestContainersAPICreateMountsCreate: use subtests
   69c4a4f4a2 integration-cli: make TestServiceLogs less noisy
   ec4a34ae2f integration-cli: migrate some "info" tests to integration
   7eb804c934 make buildx: update to buildx v0.3.1
   b6ae3c2058 make buildx: use multi-stage to make tagged image smaller
   a602ecf8fb make buildx: clean-up comment and fix help-text
   9638d1a4fb make buildx: remove BUILDX_DOCKERFILE make var
   37fe68f5d6 make buildx: make version in Dockerfile leading
   365b3aee2d make buildx: fix Makefile version being ignored
   ce28a91cca make buildx: fix variable substitution and version
   c110283004 Jenkinsfile: use buildx on s390x and ppc64le
   39ad39d220 bump google.golang.org/grpc v1.23.1
   7c5fd83c22 Jenkinsfile: set repo and branch for DCO check as well
   9d726f1c18 Add GoDoc to fix linting validation
   1be272ef76 Windows: disable flaky test TestStartReturnCorrectExitCode
   18a97ee981 integration-cli: use subtests for TestSwarmNetworkCreateDup
   e7805653b8 Fix TEST_FILTER to work for both "integration" and "integration-cli"
   56230f4d37 testutil: no more "Creating a new daemon at"
   060e55d7dd integration-cli: mark some test-helpers as helpers
   ddb64c14e1 fixed typo, changed "perfectd to perfected"
   bbf82b2e53 testutil: daemon.Info() close client after request
   635584280b Bump Golang 1.13.3 (CVE-2019-17596)
   1741d669b3 daemon: suppress logs in unit tests
   9cb9c6eba4 bump golangci-lint v1.20.0
   a06d7f5a3e golangci-lint: include all enabled linters in config
   086b4541cf golangci-lint: disable default exclusion rules
   fe3c14d5ba golangci-lint: fix "golint" not ignoring generated files
   47502344b9 golangci-lint: update exclusion rules for todo's
   4840fd8953 pkg/mount: SA4011: ineffective break statement (staticcheck)
   af3bbcc00c aufs: SA4011: did you mean to break out of the outer loop? (staticcheck)
   6d9c219c54 daemon: S1033: unnecessary guard around call to delete (gosimple)
   cba180cac9 graphdriver/btrfs: SA4003: no value of type uint64 is less than 0 (staticcheck)
   04fcb6cfbf pkg/jsonmessage: fix SA1006: printf-style function with no arguments
   1f7beb8594 daemon/events/testutils: remove redundant variable
   5f47cef514 fix nolint comments for SA1019: filters.ToParamWithVersion is deprecated
   ec1fd4b1b0 distribution: SA4021: x = append(y) is equivalent to x = y (staticcheck)
   94647b5d86 graphdriver/aufs: SA4021: x = append(y) is equivalent to x = y (staticcheck)
   301a2fbeca builder/dockerfile/mockbackend_test.go: suppress SA9005 (staticcheck)
   05469b5fa2 daemon: add "isWindows" const
   1fab7c6457 bump Graylog2/go-gelf to 1550ee647df0510058c9d67a45c56f18911d80b8
   95ea6e7069 Export the LogT type and use it in the options
   bef73d8b07 Wait for c8d process exit instead of polling API
   58a6faab4c daemon/top_unix_test: cleanup test cases and use subtests
   2030daf2ee TestParseInitVersion: add some additional tests
   df7b8f458a daemon: Use short libnetwork ID in exec-root & update libnetwork
   f36042d259 Add support for sending down service Running and Desired task counts
   717575b585 daemon: make supportsSeccomp a const
   a33cf495f2 daemon: use constants for AppArmor profiles
   aa655a4d73 pkg/plugins: use constants for http methods
   5ba167ce8a pkg/authorization: use constants for http methods
   9c590ed5c5 daemon/logger/splunk: use constants for http methods
   984d5bc30c builder-next: use constants for http status codes
   3b84875216 builder-next: use constants for http methods
   63e62d13a0 registry: use constants for http status codes
   441b031bda registry: use constants for http methods
   d1817b6135 client: use constants for http status codes
   dabc7cdb56 client: use constants for http methods
   93100adb69 api/server: use constants for http methods
   a617809fe7 testutil: use constants for http methods
   23b6b5a9ae integration-cli: use constants for http methods
   9ed58987ce integration: use constants for http methods
   de10c7d013 client: reduce string-matching in tests
   e76dea157e docs/rootless.md: update
   e443512ce4 Use ocischema package instead of custom handler
   93edf327dc Dockerfile: align consecutive COPY lines
   8edbe5dec2 Dockerfile: order COPY lines by change frequency
   ee0ef6c535 Dockerfile: sort packages alphabetically
   1cfcce5e21 Dockerfile: use build-arg for vpnkit
   a42b4144bc Dockerfile: use spaces for indentation
   293c1a27a2 testutil/daemon: remove redundant d.cmd.Wait()
   c56bfdf10a testutil/daemon: always remove pidfile after daemon is stopped
   f6842327b0 testutil/daemon: print all arguments when failing to start daemon
   b843b1ffe3 testutil/daemon: store pidfile-path, and ignore errors when removing
   22662cac57 testutil/daemon: wrap errors
   2b3957d0b1 testutil/daemon: prefix all logs with daemon-id
   1fe7a9552c testutil/daemon: daemon.Cleanup(): unmount daemon root-dir as part of cleanup
   9407a57522 hack/make: don't attempt to unmount non-existing daemon root-dir
   3b49bd1d84 replaced call to deprecated grpc method WithDialer with WithContextDialer
   095ca77f48 Use build args to override binary commits in dockerfile
   1c82d11908 Fix trick for `make BINDDIR=. shell` and `COPY .`
   8a3e8ac017 TestDaemonEvents: use is.Contains() for easier debugging
   0e0ab58a96 integration-cli: in TestDaemonEvents* use ioutil.WriteFile
   24a419221d integration-cli: TestDaemonEvents*: don't rely on CLI output format
   6afe0f38f6 integration-cli: make testRequires() a Helper
   1be2cc2568 Makefile: force using buildkit if USE_BUILDX is not set
   93f9b902af go-swagger: fix panic
   e5bfaf19b1 Fix `make cross` target
   eda98ad00f Jenkinsfile: aarch64: use new labels to select agents
   a0d670e516 Jenkinsfile: aarch64: sync with latest changes
   14ea1f62eb Jenkinsfile: aarch64: don't restrict to packet workers only
   9d5361de3f Jenkinsfile: rename aarch64 to arm64
   58d57c76b5 Jenkinsfile: aarch64: split into stages, add "print info" unit-tests
   86e0c5a0d4 Jenkinsfile: aarch64: sync stage with other stages
   402c7b1b27 Jenkinsfile: aarch64: move stage inside parallel group
   48b06a2561 Tailor CI for ARM, skip legacy integration test.
   af86580000 Test to enable CI on aarch64.
   318e279fd8 integration-cli: TestDockerNetworkConnectLinkLocalIP return on failure
   7450f89f6c integration-cli: TestUserDefinedNetworkConnectDisconnectAlias return on failure
   8663d09334 devmapper: fix unit test
   d5f07220fc integration-cli: DockerSwarmSuite: show output on failures
   bef0aca449 Jenkinsfile: fix typo buidx -> buildx
   bb5650619e bump gorilla/mux v1.7.3
   38418287f7 bump olang/gddo 72a348e765d293ed6d1ded7b699591f14d6cd921
   e5dce0f8c5 bump creack/pty v1.1.9
   61a2b7ac94 bump gofrs/flock v0.7.1
   9bd1b1a8ec bump imdario/mergo v0.3.8
   7dee71e02f bump mattn/go-shellwords v1.0.6
   9fac44028e bump logrus v1.4.2
   82097c0f1f bump hashicorp/golang-lru v0.5.3
   bc5484d2dd bump moby/buildkit f7042823e340d38d1746aa675b83d1aca431cee3
   0b5dcdc5d7 bump containerd/fifo bda0ff6ed73c67bfb5e62bc9c697f146b7fd7f13
   56357b73da bump containerd/continuity f2a389ac0a02ce21c09edd7344677a601970f41c
   0af1099a81 bump containerd/cgroups c4b9ac5c7601384c965b9646fc515884e091ebb9
   1617be92d3 bump containerd/go-runc e029b79d8cda8374981c64eba71f28ec38e5526f
   12f9887c8e bump containerd v1.3.0
   6c94a50f41 update containerd binary v1.3.0
   c04ea1133d Jenkinsfile: Z/Power: use buildx
   833444c0d6 Use buildx as Makefile builder
   82c56755ea Buildkit-optimized dockerfile
   ac51b18339 Re-run vndr to fix master
   7019b60d0d Jenkinsfile: set repo and branch, to assist validate_diff()
   35ac4be5d5 add NewContainerOpts to libcontainerd.Create
   5a703ccb46 bump docker-py to 4.1.0
   85733620eb daemon/config: add MarshalJSON for future proofing
   fbdd437d29 daemon/config: fix filter type in BuildKit GC config
   6ca3ec88ae builder: remove legacy build's session handling
   c3a0a37446 Use newer x/sys/windows SecurityAttributes struct
   4e0836f01b bump golang.org/x/sys c990c680b611ac1aeb7d8f2af94a825f98d69720
   97aa82d2c7 integration-cli: prevent out of range in TestEventsContainerEvents
   48353e16fe Temporarily switch docker-py to "master"
   6756f5f378 API: update docs that /session left experimental in V1.39
   23457f05a9 Update mailmap and authors
   f60d6ee4bc testutil: update WithInitsignature to be a daemon.Option
   554d9cec25 testutil: update WithExperimental signature to be a daemon.Option
   ce2e8e37d0 testutil: update WithTestLogger to use daemon.Option as return type
   279ddb31ef testutil: update WithStorageDriver to use daemon.Option as return type
   404d87ec69 AppArmor: add missing rules for running in userns
   5c891ea9ca integration-cli: fix DockerNetworkSuite not being run
   f4c172e6b9 integration-cli: fix golint (copy/paste whoops)
   5aebd69857 testutil: fix WithExperimental also setting "init"
   8498ee7514 Fix pkg/pools staticcheck SA6002
   a07a1220ad jhowardmsft --> lowenna
   05a0621fd0 Re-group vendor.conf deps to reflect reality
   ac0ab114a2 bump runc vendor v1.0.0-rc8-92-g84373aaa
   bc9a7ec898 update runc to v1.0.0-rc8-92-g84373aaa (CVE-2019-16884)
   8eb23cde95 bump golang 1.13.1 (CVE-2019-16276)
   c4ec02b0af Update containerd to v1.2.10
   023b072288 homedir: add cgo or osusergo buildtag constraints for unix
   8107d44852 Fix Engine API version history typo
   e553a03627 AppArmor: remove rules for linkgraph.db SQLite database
   5175ed54e5 hack/ci/windows.ps1 update references to repositories that were moved
   83fd212f2c Dockerfile.windows: update references to repositories that were moved
   b323c6e9ae Jenkinsfile: update references to repositories that were moved
   8b7bbf180f builder entitlements configutation added.
   8988448729 Remove refs to jhowardmsft from .go code
   cb2a36a89c Add ability to handle index acknowledgment with splunk log driver
   0f0e3163b5 daemon/info: remove use of docker/go-connections
   f3d8b8ae74 Jenkinsfile: move integration step cleanup to amd64 where it was intended to be
   c21a3cf432 Add variant to image.Image and legacy builder
   77d3c68f97 Remove minsky and stallman
   ae0a878b86 testutil, integration: untangle image dependency
   a8608b5b67 homedir: remove idtools and libcontainer's user package dependencies
   a5f237c2b5 Use FILE_SHARE_DELETE for log files on Windows.
   51ca8081d8 testutil: use testing.TB instead of assert.TestingT
   0d4ffa3588 Remove some uses of testutil.HelperT
   d79cc1b67d testing: remove custom testingT interfaces
   3e4f6225da testutil: remove unneeded namer, testname interfaces
   074eca1d79 Use fewer modprobes
   9cd24ba605 logger: fix follow logs for max-file=1
   fd94bae0b8 awslogs: fix flaky TestLogBlocking unit test
   75477f0b3c bump libnetwork to 96bcc0dae898308ed659c5095526788a602f4726
   04d9e157b2 testutil/daemon: add NewDaemon without testingT
   a57fd5488d Fix base.Dial is deprecated: Use DialContext instead
   5b7347c312 integration-cli: run goimports
   7de4e13089 Disable TestPsListContainersFilterExited (Windows)
   4866207543 Zap a fixed folder, add build number to folder inside
   78d137dd23 integration-cli: add more debugging for TestSwarmClusterRotateUnlockKey
   ce61a1ed98 Adding ability to change max download attempts
   851b000641 integration-cli: enable golangci-lint
   6397dd4d31 integration-cli: fix golint issues
   f470698c2c Jenkinsfile: ensure all containers are cleaned up
   23ab331979 Removed deprecated CloseNotifier logic
   f1c1cd436a integration-cli: move each test suite to its own TestX testing function
   84928be605 hack: have integration-cli use gotestsum codepath
   41adef29f5 testutil/daemon: group options under type
   5f67568bfd Revert "Revert "hack: temporarily disable deprecate-integration-cli""
   6f0dfe44eb golangci-lint: suppress remaining deprecation errors for now (staticcheck)
   df7d719e4c golangci-lint: suppress Xattrs is deprecated: Use PAXRecords instead
   f41712c4be golangci-lint: enable misspell, tweak configuration
   c9553897f3 golangci-lint: enable gosec linter
   d1363f5a90 golangci-lint: set correct build-tags to lint journald if supported
   85b89c9e50 Replace gometalinter with golangci-lint
   e92e0d358a TestPollerEvent: fix filemode (staticcheck)
   5358c95a76 TestGraphdriverPluginV2: SA5001: should check returned error before deferring (staticcheck)
   fd65fed81b client/hijack: suppress SA1019: httputil.ErrPersistEOF is deprecated (staticcheck)
   90c372bb2c cmd/dockerd: explicitly ignore unchecked errors (errcheck)
   805452a59a pkg/devicemapper ignore SA4000 false positive (staticcheck)
   9faf565453 pkg/devicemapper: disable unused and varcheck linters
   4a3ee04351 oci: fix SA4009: argument e is overwritten before first use (staticcheck)
   bd7180fcf9 cluster/controllers/plugin: remove unused Controller.taskID (unused)
   101ff26eb5 misspell: fix some spelling issues
   e34c081354 builder-next: explicitely ignore unhandled errors (errcheck)
   4e621a34ac api/server: explicitly ignore unhandled errors (errcheck)
   6ff727b13c TestWalkValues: add missing error-check (errcheck)
   3926b5f09d structcheck: nolint for false positives
   9419024554 gosec: add ignore comments for reported issues that can be ignored
   9c701fdb6b logger/journald: U1000: field `mu` is unused (unused)
   323ac07901 pkg/containerfs: rename output variable to prevent shadowing (govet)
   d78b667af6 govet: suppress warning about Parent field that repeated json tag "parent"
   ac827a7fff builder-next/patchImageConfig: nitpicks
   21c2f0e656 distribution/xfer/download_test: rm unused field
   7b6201f032 daemon/logger/BenchmarkCopy: don't call t.Fatal from a goroutine
   33c205be4f TestTransfer*: don't call t.Fatal from a goroutine
   739b7b44aa pkg/term/windows: add missing build-tag
   4215492120 pkg/ioutils use sha256 instead of sha1 in tests
   27916165b6 TestUlimitOpt: fix composite literal uses unkeyed fields (govet)
   2c31edbbb6 unconvert: remove unnescessary conversions
   3a16c7246a pkg/signal: remove unnescessary conversion (unconvert)
   a46ad5e704 Builder: remove unused field
   a7942baf76 Use io.SeekStart instead of os.SEEK_SET
   04129678a6 jsonfilelog_test: check err from open before close
   7b0e0335bc Fix some inefassign warnings
   5c11740abb registry/newV1EndpointFromStr: rm dead code
   7b85ed613d plugin/setupNewPlugin: rm dead code
   d8f2b47432 TestDisplayJSONMessagesStreamInvalidJSON: fix error check
   365a63a573 daemon/graphdriver/copy: rm dead code
   58ac4bd938 daemon/checkpoint: rm extra checks
   3ef7f7c650 daemon/monitor: rm redundant if
   6392e765ac client: remove put()
   d584242236 client: suppress filters.ToParamWithVersion lint warning
   d8ec1ee57d builder/copy-unix: fix filepath.Walk args
   b5695b8663 pkg/term/term_linux_test: check returned error before deferring tty.Close() (staticcheck)
   0507c358d9 API: explicitely ignore unhandled errors
   744f1c261c Remove unused functions, variables, fields
   bca161d7cb runconfig/config_test.go: remove unused test-utilities
   d948306255 integration: remove unused constants and fields (unused)
   ad95c6315d volume/local fix file permissions
   4b13f69882 integration/network: remove unuset setupTest()
   4a37dcab48 Fix and re-enable TestDockerNetworkMacvlan/MultiSubnet
   6aadd436a9 integration-cli: TestBuildAddBadLinks, TestBuildAddBadLinksVolume: simplify check
   cbc3cfe101 integration-cli: TestAttachMultipleAndRestart: don't call t.Fatal from a goroutine
   a2f16b0ad3 integration-cli: S1025: the argument is already a string (gosimple)
   5bba06e082 integration-cli: SA5001: should check returned error before deferring reg.Close() (staticcheck)
   40b3edc81e integration-cli: fix TestPushMultipleTags
   43ea03002f integration-cli: remove unused types and fields
   7c40c0a922 integration-cli: remove unnescessary conversions (unconvert)
   417eac47a0 integration-cli: fix minor linting issues
   67e4d36e46 integration-cli: remove unused functions and enable disabled tests
   a0d58b2248 integration-cli: use raw strings for regexes (gosimple)
   fdc1b22030 integration-cli: fix incorrect permissions (staticcheck)
   b639f933e1 integration-cli: fix capitalization of variables and errors (golint)
   07ff4f1de8 goimports: fix imports
   56e690f340 cluster/executor: remove unused containerConfig.endpoint()
   c2532d56b0 volume Create: fix incorrect file permissions (staticcheck)
   f6f58f3858 daemon.getEndpointInNetwork() is only used on Windows
   e334eeeed8 TestMoveToSubdir: use sort.Strings() (gosimple)
   ab599b5cdc pkg/pools/pools.go: suppress SA6002: argument should be pointer-like  for now
   178af761b7 TestParseRelease: fix missing assert
   41cfcac7fc DriverBenchDiffApplyN: ignore empty branch (staticcheck)
   5ded7886c3 daemon/cluster: fix unused context (staticcheck)
   8695176d11 daemon/seccomp_linux.go: fix error-capitalization (golint)
   ac9ef840ef integration-cli: update TestCreateWithWorkdir for Hyper-V isolation
   0620990307 hack/test/unit: fix custom TESTFLAGS not working
   667c87ef4f profiles: Fix file permissions on json files
   1a96cf95ca Parse runtime name
   4ab1e808d1 Change version parsing to support alternate runtimes
   64b3d12686 Jenkinsfile: remove redundant -f Dockerfile
   e653943e8b run integration-cli stages on s390x and ppc64le if not a PR check
   039eb05ac8 skip win-RS1 on PRs unless the checkbox is checked
   647dfe99a5 distribution: modify warning logic when pulling v2 schema1 manifests
   b469933b06 integration-cli/requirements: Skip windows specific isolation requirements on non-windows
   88c554f950 DaemonCli: Move check into startMetricsServer
   a44d90cdd4 integration-cli: update comments referencing waitAndAssert()
   548623b758 Use unique names in integration/service/plugin_test.go
   32f1c65162 TestBuildSquashParent: fix non-standard comparisson
   dbde4786e4 integration-cli: fix some bashism's in Dockerfiles
   38e4ae3bca Bump Golang version 1.13.0
   961119db21 Dockerfile: set GO111MODULE=off
   d723643dc3 Jenkinsfile: add TESTDEBUG
   f007b0150a integration: improve package- and filename for junit.xml
   d2e00d62e2 integration: test2json: enable timestamps to fix zero-time test durations
   f3be6b346f integration: use gotestsum to generate junit.xml and go-test-report.json
   fcd65ebf49 Fix more signal handling issues in tests.
   5adaf52953 integration-cli: Skip TestAPIImagesSaveAndLoad on RS3 and older
   3262a69be6 integration: simplify parallel run destination
   0fabf3e41e integration-cli: remove unneeded fmt.Sprintf() in asserts
   a9aeda8343 Rename some references to docker.exe to dockerd.exe
   f2498e21c4 hack/make: remove autogen resources for Docker CLI
   b37c214e3c testutil: make testing packages public
   89dd10b06e archive: fix race condition in cmdStream
   a3f9cb5b63 TestDispatch: refactor to use subtests again, and fix linting (structcheck)
   a464a3d51f Dockerfile: remove GOMETALINTER_OPTS
   ead3f4e7c8 integration-cli: add daemon.StartNodeWithBusybox function
   8fc23588f1 integration-cli: swarm.RestartNode(); don't load busybox again
   422067ba7b Return "invalid parameter" when linking to non-existing container
   01332b54e0 Revert "hack: temporarily disable deprecate-integration-cli"
   ecf91f0d7f Move GOPATH out from under the GO source tree
   7663aebc12 pkg/parsers/kernel: gofmt hex value (preparation for Go 1.13+)
   61450a651b hack/ci/windows.ps1: fix Go version check (due to trailing .0)
   c18f793f40 Jenkinsfile: shorten stage names for consistency and to fit Jenkins UI
   231ed42cab integration-cli: remove TestingT
   d32e6bbde8 suite: put suite setup inside test run
   6c75c86240 Windows: skip flaky TestLogBlocking
   cc01289792 intgration-cli: fix formatting
   8eb9f3f90e integration-cli: fix pollCheck
   bad6f3bf73 integration-cli: have helper functions use testing.Helper()
   8bffe9524d remove per-test -timeout logic because it does not work
   beadc92e07 hack: temporarily disable deprecate-integration-cli
   7cd028f2d0 hack: update scripts
   7491db3e92 Update Jenkinsfile
   925e407c7b cleanup
   8b40da168b Setup tests
   fd0ed80ff2 internal/test/suite
   3aa4ff64aa vendor: remove vdemeester/shakers and go-check/check
   9843c2f12c remove rm-gocheck.go and templates
   649201dc44 remove waitAndAssert and type casts
   40f1950e8e fix remaining issues with checker.Not
   ac2f24e72a waitAndAssert -> poll.WaitOn
   42599f1cad prepare for eg on waitAndAssert
   318b1612e1 fix remaining compile issues
   64de5e8228 rm-gocheck: fix compile errors from converting check.CommentInterface to string
   7813dfe9d7 rm-gocheck: goimports
   3a24472c8e rm-gocheck: check.CommentInterface -> string
   6e5cf532af rm-gocheck: convert check.Commentf to string - other
   6135eec30a rm-gocheck: convert check.Commentf to string - with just one string
   a2024a5470 rm-gocheck: convert check.Commentf to string - with multiple args
   98f2638fe5 rm-gocheck: Contains -> strings.Contains
   4e2e486b23 rm-gocheck: Not(Contains) -> !strings.Contains
   f2c9e391fc rm-gocheck: Matches -> cmp.Regexp
   59e55dcdd0 rm-gocheck: run goimports to compile successfully
   eb67bb9fb5 rm-gocheck: comment out check.TestingT
   81d2a0c389 rm-gocheck: comment out check.Suite calls
   6a8a9738ec rm-gocheck: redress check.Suite calls
   d0fc8d082d rm-gocheck: True
   b17bb1e74a rm-gocheck: False
   64a161aa3e rm-gocheck: NotNil
   2743e2d8bc rm-gocheck: IsNil
   491ef7b901 rm-gocheck: HasLen -> assert.Equal + len()
   dd9d28669f rm-gocheck: DeepEquals -> assert.DeepEqual
   6dc7f4c167 rm-gocheck: Equals -> assert.Equal
   10208e4d60 rm-gocheck: Not(Matches) -> !cmp.Regexp
   0fa116fa8f rm-gocheck: Not(Equals) -> a != b
   74747b35e1 rm-gocheck: Not(IsNil) -> != nil
   230f7bcc02 rm-gocheck: normalize to use checker
   a7d144fb34 rm-gocheck: ErrorMatches -> assert.ErrorContains
   1d92789b4f rm-gocheck: check.C -> testing.T
   6ecff64d03 rm-gocheck: check.C -> testing.B for BenchmarkXXX
   1f69c62540 rm-gocheck: c.Assert(...) -> assert.Assert(c, ...)
   36e7001b99 rm-gocheck: redress multiline c.Assert calls
   5879446de9 rm-gocheck: normalize c.Check to c.Assert
   8f64611c83 add rm-gocheck.go script and eg templates
   931edfe5e9 prepare for rm-gocheck script
   e07a3f2917 integration-cli: fix tests that are silently succeeding when they should not compile
   e6c5563ae9 Fix Service TTY test so signal handlers work
   f874f8b6fd integration: TestInspect(): use swarm.RunningTasksCount
   e1636ad5fa hack/ci/windows.ps1: stop tailing logs after stopping the daemon
   b6f596c411 hack/ci/windows.ps1: add support for DOCKER_STORAGE_OPTS
   f4d41f1dfa seccomp: whitelist io-uring related system calls
   57ade2652a Narrow dependencies of pkg/system
   7eb522a235 hack/ci/windows.ps1 print all environment variables to check how Jenkins runs this script
   8e8c52c4ab hack/ci/windows.ps1: explicitly set exit code to result of tests
   9ef9a337f6 Update containerd to v1.2.9
   ebf12dbda0 Reimplement iteration over fileInfos in getOrphan.
   651d146fa4 Poule: remove random assign
   2816ec7b00 Remove unused router swapper
   7aeb3efcb4 Use unix.Uname instead of shelling out to uname on darwin/freebsd
   85bcc524ea Jenkinsfile hack for auto-cancellation.
   1fbadd76b7 Jenkinsfile: Windows: enabled debug-mode for daemon under test
   6ee61f5493 Jenkinsfile: create bundles for Windows stages
   492945c2d5 bump hashicorp/go-sockaddr v1.0.2
   720b66ee1f bump hashicorp/go-multierror v1.0.0, add errwrap v1.0.0
   bab58c1924 bump lib network to 92d1fbe1eb0883cf11d283cea8e658275146411d
   e128f17508 Rename variable for consistency
   6e5a304675 container.ConfigFilePath: use same signature on Windows
   2e0cafb01b awslogs: refactor create()
   ef2872132d awslogs: replace deprecated session.New() with session.NewSession()
   54d021ef8f awslogs: remove unused eventBuffer update
   02c9b0674f integration-cli: getContainerCount() fix trimming prefix
   e6fce00ec8 TestCase: use `icmd.RunCmd` instead `icmd.StartCmd`
   ce77a804b8 docker-py: skip flaky AttachContainerTest::test_attach_no_stream
   6751718196 Remove *_solaris.go files
   e20b7323fb rootless: harden slirp4netns with mount namespace and seccomp
   186e22d26e include IPv6 address of linked containers in /etc/hosts
   70d3677825 hack/make/binary-daemon: fix some linting issues
   52a53e2587 Fix docker inspect for dutimgVersion
   156ad54fb7 windows.ps1: fix leaked NdisAdapters not being cleaned up on RS1
   1250e42a43 daemon:containerStart() fix unhandled error for saveApparmorConfig
   e4605cc2a5 Add sigprocmask to default seccomp profile
   fa29ff2212 Fix compiling pkg/parsers/operatingsystem on unix
   ea65f0bca2 Fix getting the operating system on Darwin
   7b4b940470 /containers/{id}/json missing Platform
   9134130b39 Remove `SystemInfo()` error handling.
   8769255d1b bump containerd/ttrpc 92c8520ef9f86600c650dd540266a007bf03670f
   f1cd79976a bump google.golang.org/grpc v1.23.0
   31885181fc integration: windows.ps1: turn defender error into a warning
   7e8f7efdd1 fix build after merge of outdated PR
   ca1e7a3b4a Jenkinsfile: fix invalid expression in bundles script
   db2bc43017 Use correct `LOOP_CTL_GET_FREE` API in `pkg/loopback`
   556d26c07d pkg/term: refactor TestEscapeProxyRead
   d185ca78ec Replace libprotobuf-c0-dev with libprotobuf-c-dev
   a76ff632a4 Jenkinsfile: don't mark build failed when failing to create bundles
   8b65e058be Jenkinsfile: use wildcards for artifacts, and don't fail on missing ones
   917b0dcd3d hack/make: fix some linting issues reported by shellcheck
   dde1fd78c7 hack/make.sh remove "latest" symlink
   f8f6f7c2a0 cleanup: remove SetDead function
   4d09fab232 Update service networks documentation
   530f2d65c3 Explicity set Cgroup NS mode to "host" when running privileged
   96f6c81ab7 Change TestCgroupNamespacesRunPrivileged requirement
   1264a85303 Update containerd to v1.2.8
   2841b05b71 Use Klogctl from x/sys/unix to read Linux kernel log
   e551e5a73d Use UtimesNano from x/sys/unix to implement LUtimesNano
   919d08347a Use loopback types and constants from x/sys/unix to implement pkg/loopback without cgo
   27f1f2b5be builder-next: close progress on layer export error
   d495eeb365 builder-next: update mount signature
   52ed97c5c1 vendor: update buildkit to 588c73e1e4
   477bf1e413 Fix overlay2 busy error on mount
   ca3e230b77 Use new windows labels
   1a5dafb31e Improve readability of Windows connect error
   c266d8fe56 Fix testcase name
   bc8118b31f bump x/sys to fix riscv64 epoll
   ad70bf6866 Dockerfile: add python3-wheel back again (for yamllint)
   d3f64846a2 fix docker rmi stucking
   19a3ddf8bb mkimage-yum.sh: Fix install of additional packages
   2c2cd9b86a builder-next: close build context upload on cancel
   9c94e8260a Fix phrasing when referring to the freezer cgroup
   01d6a56699 Bump Golang 1.12.9
   9ea2cf320a builder-next: avoid double unmounting mountable
   9c5f3adbf5 add options.NoLchown option to createTar call
   b146b2382c Fixups for 39695 - edit comments, redundant lines
   a65dee30fc Move defer method to the top right after New is called
   e59b26087f vendor: update buildkit to v0.6.1
   8b6da9d82f Jenkinsfile: save docker-py artifacts
   4ddb40ee8a Jenkinsfile: build dynamic binary for docker-py, to match makefile
   5969bbee79 docker-py: output junit.xml for test-results
   535e29da05 docker-py: use --mount for bind-mounting docker.sock
   b04cbf1072 docker-py: run without tty to disable color output
   0b3d201892 docker-py: fix linting issues reported by shellcheck
   00ad0222ce Dockerfile: update CRIU to v3.12
   f3a3ea0d3c Fix flaky TestServiceWithDefaultAddressPoolInit
   683766613a Adjust tests for changes in Go 1.12.8 / 1.11.13
   73b0e4c589 Bump golang 1.12.8 (CVE-2019-9512, CVE-2019-9514)
   d6f7909c76 Jenkinsfile: run DCO check before everything else
   e2f5b78e78 Jenkinsfile: collect junit.xml for all architectures
   7f9328ad2e Jenkinsfile: send junit.xml in the stage that produced it
   f6226a2a56 fix some spelling mistakes
   eb30f0ad84 fix bundles filenames in Jenkinsfile
   ad29f9e471 rename powerpc bundles in Jenkinsfile
   a049ea1a93 rename z bundles in Jenkinsfile
   0cfc1ec2bd be more lenient on junit report gathering in Jenkinsfile
   4e2f39cf14 use environment for z jobs in Jenkinsfile
   3564b03fbc use environment for power jobs in Jenkinsfile
   bf70a5975d set timeouts in Jenkinsfile to 2 hrs
   bdc1c1a02a add z-master stage to Jenkinsfile
   c2f9d58375 add powerpc-master stage to Jenkinsfile
   e554fb23c8 Jenkinsfile: reduce time of integration tests by dividing tests into 3 parallel runs
   13df617d4c hack: unmount leftover daemon root folders
   251c8dca28 Jenkinsfile: move static and cross compilation to unit-validate stage
   2ff9ac4de5 Dockerfile: use DEBIAN_FRONTEND=noninteractive
   8660330173 Unit test for getOrphan
   6f5c377ddc docker-py: skip PullImageTest::test_pull_invalid_platform
   b283dff3ff Jenkinsfile: avoid errors from find
   e856b46cfb Jenkinsfile: remove "experimental" stage
   a43123cab1 Consistently use DOCKER_EXPERIMENTAL=1 instead or =y
   f8cde0b32d docker-py: deselect broken experimental tests
   1ea8b413d1 initBridgeDriver: minor cleanup and linting fixes
   4d5b6260bc Fix regression in handling of NotFound err during startup
   5858a99267 Builder: fix "COPY --from" to non-existing directory on Windows
   e554ab5589 Allow system.MkDirAll() to be used as drop-in for os.MkDirAll()
   6ae46aeabf make.ps1: Run-IntegrationTests(): set working directory for test suite
   35fe16b7eb Update Microsoft/go-winio v0.4.14
   e2b24490e4 Improve integration test detecetor
   13ea237234 devicemapper: remove unused errors
   5b2f8e9103 devicemapper: remove unused task.setRo()
   c60e53a274 vendor: update buildkit to f5a55a95
   1a2bd3cf7d builder-next: ensure timestamps set for metadata commands
   e665263b10 daemon: Remove btrfs_noversion build flag
   53cbf1797b daemon/ProcessEvent: make sure to cancel the contexts
   b5e5cac0f5 Set locale to fix yamlllint
   73c1dae86d zfs: fix incorrect permissions (staticcheck)
   58b0585cd2 fix client.HTTPClient() not returning a copy
   b0835dd088 Dockerfile: use --no-install-recommends for all stages
   ad28fec1c9 Jenkinsfile: move docker-py to separate stage
   1e8ede514e Jenkinsfile: inline experimental, power, z steps, and split Unit test
   f411be2072 Jenkinsfile: inline janky steps, and move validate to separate stage
   47ac8a97de Jenkinsfile: remove .git mount in stages that don't use it
   f814e04652 Jenkinsfile: consistent indentation and order of env-vars
   0634816c0c Jenkinsfile: remove unused GIT_SHA1 env-var
   efacee1cdd Jenkinsfile: move building e2e image to "unit-vendor" stage
   781e79d1fa Jenkinsfile: extract DOCKER_GRAPHDRIVER as environment variable
   c75d7e0e22 Jenkinsfile: use overlay2 for Power and s390x as well
   a2ad56dfad Jenkinsfile: run check-config.sh to print system configuration
   6523ced950 Jenkinsfile: remove ip_vs modprobe for unit/vendor stage
   f2e09afff4 Jenkinsfile: standardize cointainer names and fix s390x cleanup
   f51c139792 Jenkinsfile: combine "vendor" and "unit tests"
   be0e6e9d34 Jenkinsfile: use GIT_COMMIT from Git plugin instead of manually
   13064b155e Add support for setting a test filter
   355bcf6d48 Jenkinsfile: disable buildkit on power and s390x
   3897796548 Jenkinsfile: Add "info" step to all stages
   b04c769d65 Jenkinsfile: split some shell steps
   9f0e10fe24 Jenkinsfile: busybox is multi-arch
   337d03a5f0 Jenkinsfile: remove arch-specific suffixes from names
   a0bf935f9c Jenkinsfile: run "make clean" in cleanup step
   79713d8d07 Jenkinsfile: use sub-stages to describe steps
   f648964875 Jenkinsfile: set DOCKER_BUILDKIT globally
   a28f2a2338 Jenkinsfile: set APT_MIRROR globally
   61fd8b7384 Jenkinsfile: remove check for arch-specific Dockerfiles
   722d582c92 Jenkinsfile: remove build --rm, because it's the default
   a95f16ca28 Jenkinsfile: consistently indent with 4 spaces
   20a0e58a79 journald/read: fix/unify errors
   dd4bfe30a8 journald: fix for --tail 0
   b73fb8fd5d journald/read: avoid piling up open files
   f091febc94 journald/read: simplify/fix followJournal()
   981c01665b Call sd_journal_get_fd() earlier, only if needed
   79039720c8 journald/read: avoid being blocked on send
   ff3cd167ea journald/read: simplify walking backwards
   e8f6166791 journald/read: simplify code
   1ada3e85bf Small journal cleanup
   2cffe9be3d hack: fix mixed tabs/spaces for indentation
   060f387c0b Fix "no such file or directory" warning when unmounting IPC mount
   1ac0a66a64 projectquota: protect concurrent map access
   5f0231bca1 cast Dev and Rdev of Stat_t to uint64 for mips
   42f0a0db75 run unit tests and generate junit report
   abece9b562 Improvements to the test runners
   53e0c50126 Avoid a data race in container/health.go
   b1723b3721 Dockerfile: add back yamllint
   438c7eb606 Added information regarding our new Jenkins ci on moby/moby
   6f234db9fe bump libnetwork to 09cdcc8c0eab3946c2d70e8f6225b05baf1e90d1
   0595c01718 switch kr/pty to creack/pty v1.1.7
   b79adac339 Fix TestSwarmClusterRotateUnlockKey
   0ecd6ab30f ADDED changes to integrate with our new Jenkins ci
   a316b10dab Initialize nss libraries in Glibc so that the dynamic libraries are loaded in the host environment not in the chroot from untrusted files.
   f5cd8fdd44 hack: Remove inContainer check, it wasn't useful
   ccfaf1ed92 use overlay2 for janky and experimental checks
   9d98458fb7 remove DOCKER_EXECDRIVER from Jenkinsfile
   b0fe0dff7a Better logging for swarm tests
   1381956499 Add `FromClient` to test env execution
   790da6c223 Set TIMEOUT according to os/arch.
   d6cbeee470 Add extra permission check in removal test
   aac6e62209 added hack/ci/master as entry point for master codeline checks
   651e694508 Prevent panic on network attach
   c5bd6e3dc7 Dockerfile.windows: trim .0 from Go versions
   ed672bb523 Pin Dockerfile to -stretch variant
   4fa57a8191 Windows: fix Golang version checks for GO_VERSION build-arg
   eeaa0b30d4 Skip TestHealthKillContainer on Windows
   7f37d99ef5 integration-cli: remove redundant "testrequires"
   a557538770 TESTING.md: document GO_VERSION
   c6281bc438 Dockerfile: use GO_VERSION build-arg for overriding Go version
   f6b1f01de3 Remove hack MalformedHostHeaderOverride
   1de914695b Retry service updates on out of sequence errors
   8c9362857f integration-cli: increase healthcheck timeout
   becd29c665 integration: run build session tests on non-experimental
   a5c420ac54 Be more conservative for Windows in TestFrequency for Splunk
   096a7afd37 vendor: update swarmkit to 7dded76ec
   52e0dfef90 integration-cli: allow temporary no-leader error
   3df1095bbd integration-cli: allow temporary errors on leader switch
   0a1947cb9f spaces to tabs
   3d1850d10d integration-cli: also run Docker Hub search tests on Windows
   2ac55d5c9a TestSearchWithLimit: slight refactor and improve boundary checks
   85d6fb888c TestSearchStarsOptionWithWrongParameter: remove checks for deprecated flags
   b38c71bfe0 TestSearchCmdOptions: remove checks for deprecated flags
   a78b9a3726 TestSearchCmdOptions: remove cli-only checks
   1be7065e99 Revert "Remove TestSearchCmdOptions test"
   3c701e4db1 imporve hardcoded CC on cross compile
   af2e82d054 atomic: patch 64bit alignment on 32bit systems
   c222c5ac6f allow running of single integration test
   6aafe0fd9e WIP Move docker-py tests first again
   78405559cf Check for BRIDGE_VLAN_FILTERING in overlay section
   980f2813b4 docker-py: skip flaky tests
   3c15cea650 docker-py: use host-network for nested build of docker-py
   ba8f4c7994 docker-py: don't build --quiet is TESTDEBUG is set
   968345bc5c Makefile: Allow passing DOCKER_TEST_HOST and TESTDEBUG to container
   7bfe48cc00 Bump docker-py to 4.0.2, and run tests from upstream repository
   c8f43b5f6f Dockerfile: Use APT_MIRROR for security.debian.org as well
   9d1b4f5fc3 Add regression tests for invalid platform status codes
   4a516215e2 errdefs: convert containerd errors to the correct status code
   bd5c5373f1 Remove Codecov
   32f4fdfb5c errdefs: remove unneeded recursive calls
   0aa167d0df Update CONTRIBUTING.md to have an option to keep name anonymous if requested
   88578aa9e9 TestServiceWithDefaultAddressPoolInit
   cf315bedc5 Fix indentation in some description
   f8aef6a92f Move kill health test to integration
   da574f9343 do not stop health check before sending signal
   763454e1e4 Remove unused pkg/system.IsIoTCore()
   bad0b4e604 Remove skip evaluation of symlinks to data root on IoT Core
   316e16618f Integration: MACVlan add missing import comment and build-tag
   691eb14256 Integration: remove redundant kernel version check for MACVlan
   6a64a4deec integration: fix cleanup of raft data
   d470252e87 daemon: don't listen on the same address multiple times
   c096225e8e DockerSwarmSuite lock portIndex to work around race
   5d818213ff Fix Microsecond -> Milisecond.
   1acaf2aabe Sleep before restarting event processing
   15675e28f1 Don't log test initial test daemon ping failures
   f75f34249b Fix "Removing bundles/" not actually removing bundles
   92e6e7dd5f Cleanup "address" when connecting over a UNIX socket
   c7816c5323 Harden TestClientWithRequestTimeout
   9b5e78888d integration: organize bundle directory per test
   24ad2f486d Add (hidden) flags to set containerd namespaces
   54e30a62d3 Propagate GetContainer error from event processor
   7725b88edc Ensure parent dir exists for mount cleanup file
   4060a7026c Integration: exclude IPVlan test-suite on Windows
   93b28677bf Integration: IPVlan add missing import comment
   dae9bac675 Integration: remove "experimental" option for IPVLAN test-daemons
   1e4bd2623a Integration: remove unneeded platform check for IPVLAN tests
   34f4729bc0 rootless: allow exposing dockerd TCP socket easily
   dbb5da7fcd dockerd: update reload signal comment
   3afdc46314 fix swagger.yaml #39484
   7d9126e149 ContainerStats: return early on unsupported API versions
   65177a72c5 Use MemAvailable instead of MemFree to estimate actual available memory
   a1cdd4bfcc build: buildkit now honors daemon's DNS config
   f8a0f26843 DebugRequestMiddleware: Remove path handling
   73db8c77bf DebugRequestMiddleware: unconditionally scrub data field
   ebb542b3f8 TestMaskSecretKeys: use subtests
   18dac2cf32 TestMaskSecretKeys: add more test-cases
   aafdb63f21 Bump Golang 1.12.7
   2f9e62611e Enhance container detection on some corner cases.
   c887b09abc integration-cli: remove unused requirements utils
   27f432ca57 integration-cli: remove defaultSleepImage constant
   7204341950 integration-cli: remove ExecSupport check
   ee09f5a4af Don't try to load plugin without name
   34d5b8867f Add realChroot for non linux/windows
   b94218560e Skip TestServiceRemoveKeepsIngressNetwork
   402433a5e4 Improve select for daemon restart tests
   6ddd43b589 Make `ErrorResponse` implement `Error`
   8be39cd277 Remove cocky from names-generator
   c2479f6ebf Fixed the inconsistence and also a potential data race in pkg/ioutils/bytespipe.go: bp.closeErr is read/write 8 times; 7 out of 8 times it is protected by bp.mu.Lock(); 1 out of 8 times it is read without a Lock
   0bdcc60c4c builder-next: reset identitymapping if empty
   9eaab0425b Update modules to support riscv64
   14bd416d0e vendor: containerd to 7c1e88399
   0a3c9b935c bump vndr to f5ab8fc5f, and revendor
   c08d4da6e5 Send exec exit event on failures
   330bf32971 Update to using alpine 3.10
   344b093258 bump libnetwork. vishvananda/netlink 1.0, vishvananda/netns
   e01bf76964 bump libseccomp-golang v0.9.1
   b5f28865ef Handle blocked I/O of exec'd processes
   6f9cdd6c73 Improve description for cpu-rt-period,runtime daemon flags
   53430f5fc1 Add info OSVersion to API changelog.
   3e6a13ccb8 LCOW: fix using wrong shell for healthchecks
   25b451e01b bump gorilla/mux v1.7.2
   0d496e3d71 profiles/seccomp: improve profile conversion
   a9026e0e3f Revert "validate: temporarily disable deprecate-integration-cli as part of a revert"
   ba8a15694a Use functions from x/sys/unix to get number of CPUs on Linux
   1d792e6bba Update SECURITY.md to have an option to keep name anonymous if requested.
   3f1cdd5364 validate: temporarily disable deprecate-integration-cli as part of a revert
   d35f8f4329 Add deprecation message for schema1
   f923321aae Add test for keeping same daemon ID on upgrade
   53dad9f027 Remove v1 manifest code
   f695e98cb7 Revert "Remove the rest of v1 manifest support"
   0811297608 use gotest.tools assertions in docker_cli_push_test.go
   f23a51a860 Revert "Remove Schema1 integration test suite"
   0a9842a705 Create SECURITY.md for GitHub security policy page
   a77e147d32 For ipvlan tests check that the ipvlan module is enabled (instead of just ensuring the kernel version is greater than 4.2)
   d5669ec1c6 Update containerd to v1.2.7
   7410f1a859 pkg/archive: keep walkRoot clean if source is /
   a84a78e976 Fix more grpc list message sizes
   171538c190 daemon: fix docker cp when container source is /
   02f1eb89a4 add more tests
   6db9f1c3d6 Add test for copying entire container rootfs
   50c6a5fb07 Fix rate limiting for logger, increase refill rate
   a281289515 integration: get tests to compile again
   6f446d041b Bump Golang 1.12.6
   5c484890e0 vendor: update buildkit to c2427506
   07b3aac902 builder-next: userns remap support
   2f22247cad Enable integrations API tests for Windows CI
   35069de3fd Re-align proxy commit with libnetwork vendor
   dac5710b68 integration: change testGraphDriver signature to fix linting
   123e29f44a integration: change createAmbiguousNetworks signature to fix linting
   9f9b4290b9 integration: change container.Run signature to fix linting
   b4c46b0dac integration: change container.Create signature to fix linting
   caec45a37f integration: change network.CreateNoError signature to fix linting
   2df693e533 Entropy cannot be saved
   d363a1881e Adding OS version info to the nodes' `Info` struct
   cf104d85c3 stats: avoid cgo in collector
   230a55d337 copy: allow non-cgo build
   186cd7cf4a quota: add noncgo build tag
   213681b66a First step to implement full garbage collector for image layers
   915acffdb4 Harden TestPsListContainersFilterExited
   a4f828cb89 fix: fix lack of copyUIDGID in swagger.yaml
   293c74ba79 Windows: Don't attempt detach VHD for R/O layers
   8ff4ec98cf build: buildkit now also uses systemd's resolv.conf
   539e72f75b Fix typo retreive -> retrieve
   1ba4e69601 shellcheck
   a1ec8551ab Fix seccomp profile for clone syscall
   85bbbd4495 vendor: update buildkit to 37d53758
   b1e6536ceb Set DOCKER_BINDDIR mount options from env
   6104eb1ae2 build: fix panic when exporting to tar
   16e04da4cb Move cgroup info changes to API v1.40
   5020edca76 Revert "aufs: remove mntL"
   3029e765e2 Add chroot for tar packing operations
   d089b63937 Pass root to chroot to for chroot Untar
   a0903e1fa3 Increase max recv gRPC message size for nodes and secrets
   c4628d79d2 Stop sorting uid and gid ranges in id maps
   ca5aab19b4 rootless: update `docker info` docs
   153466ba0a info: report cgroup driver as "none" when running rootless
   e7fbe8e457 hack: remove integration-cli-on-swarm
   61815f6763 Windows CI - Corrected LOCALAPPDATA location
   c7d9599e3d Revert docker/swarmkit#2804
   57f06409b1 aufs: retry unmount on EBUSY
   8abf26dbfb Change docker socket location to /run/docker.sock
   14280fdc62 Fix to gofmt/goimports errors
   f787b235de Add support capabilities list on services
   72ceac6a74 graphdriver.Mounted(): ignore ENOENT
   67e25ec5ac Bump swarmkit vendoring
   70fa7b6a3f Network not deleted after stack is removed
   e2989c4d48 aufs: remove mntL
   4898f493d8 Update docs to remove restriction of tty resize
   32b5d296ea API: Move "x-nullable: true" from type PortBinding to type PortMap
   d5f6bdb027 API: Change type of RemotrAddrs to array of strings in operation SwarmJoin
   ebcef28834 Fix error handling for bind mount spec parser.
   a3fcd4b82a Add alias for hostname if hostname != container name which happens if user manually specify hostname
   21e662c774 Remove TestSearchCmdOptions test
   c030885e7a Windows: fix error-type for starting a running container
   4bd8964b23 Update TestRunWithDaemonDefaultSeccompProfile for ARM64
   75a59c6588 Enable DNS Lookups for CIFS Volumes
   ae431b10a9 aufs: retry auplink flush
   8fda12c607 aufs.Cleanup: optimize
   d58c434bff aufs: optimize lots of layers case
   5cd62852fa aufs: add lock around mount
   5873768dbe aufs: aufsMount: better errors for unix.Mount()
   4beee98026 aufs: use mount.Unmount
   f93750b2c4 aufs: remove extra locking
   af433dd200 layer: protect from same-name races
   b4e9b50765 layer/CreateRWLayerByGraphID: remove
   b4247b433e builder-next: support DOCKER_RAMDISK
   fa6f63e79b API: Set format of body parameter in operation PutContainerArchive to "binary"
   a66ddd8ab8 bump libnetwork 5ac07abef4eee176423fdc1b870d435258e2d381
   4f80a1953d int-cli/TestSearchCmdOptions: fail earlier
   d7de1a8b9f explicitly set filesystem type for mount to avoid 'invalid argument' error on arm
   b9f31912de bugfix: fetch the right device number which great than 255
   34cc5c24d0 dockerd-rootless.sh: use exec
   00c92a6719 bump up rootlesskit to v0.4.1
   20b11792e8 LCOW: Fix FROM scratch
   15419d7ba0 Consider WINDOWS_BASE_IMAGE_TAG override when setting Windows base image for tests
   91a57f3e7f builder-next: call stopprogress on download error
   a3cbd53ed2 vendor: update buildkit to f238f1ef
   28ad54d84f bump google.golang.org/grpc v1.20.1
   7bacd1d6dc Move CgroupnsMode feature to API v1.41
   771fc7e7f8 Bump API version to v1.41
   8c8457b0f2 client: do not fallback to GET if HEAD on _ping fail to connect
   6205fcf60d Correct copy paste mistage in pkg/mount/mountinfo_freebsd.go that caused compile errors.
   05250a4f00 layer: optimize layerStore mountL
   7546322e99 Ensure all integration daemon logging happens before test exit
   8a60a1e14a Switch swarmmode services to NanoCpu
   cfce0acd33 builder-next: fix gcr workaround token cache
   072400fc4b Make cgroup namespaces configurable
   256eb04d69 Start containers in their own cgroup namespaces
   680d0ba4ab Remove a network during task SHUTDOWN instead of REMOVE to make sure the LB sandbox is removed when a service is updated with a --network-rm option
   3a4c5b6a0d Bump Golang 1.12.5
   343413425c Update .DEREK.yml
   f73b5cb4e8 layer: protect mountedLayer.references
   595987fd08 Add log entries for daemon startup/shutdown
   20ea8942b8 Optimize test daemon startup
   31e8fcc678 Change Forbidden Error (403) to Conflict(409)
   c3b24944ca Dockerfile.e2e: fix DOCKER_GITCOMMIT handling
   74e3edc7d1 Updated mkimage-arch.sh * reset umask to 022 * introduced PKGREQUIRED * introduced PKGREMOVE   - to be able to remove linux etc on Parabola GNU/Linux * updated PKGIGNORE   - cryptsetup & device-mapper removed to not break the installation   - added not required packages * force link /etc/localtime * install pacman-mirrorlist
   a31a088665 Remove DiskQouta field.
   0deb18ab42 Dockerfile.e2e: copy test sources
   2467cb4eda Update AUTHORS and mailmap
   d6d2b30fd2 bump golang.org/x/crypto 88737f569e3a9c7ab309cdc09a07fe7fc87233c3
   5d51ac544b bump gogo/googleapis v1.2.0
   647f31b7d0 bump gogo/protobuf v1.2.1
   3d7d8a579f bump containerd/console 0650fd9eeb50bab4fc99dceb9f2e14cf58f36e7f
   25e6487fc2 bump containerd 3a3f0aac8819165839a41fee77a4f4ac8b103097
   447cbff50a bump containerd/continuity aaeac12a7ffcd198ae25440a9dff125c2e2703a7
   3e4723cf33 bump buildkit v0.5.0
   871acb1c86 Gracefully take care of the error case when a container retries to attach to a network, it is already connected to
   1ada1c8391 TestIpcModeOlderClient: skip if client < 1.40
   0d453115fe bump opencontainers/selinux v1.2.2
   4bc310c11b bump runc binary v1.0.0-rc8
   6df6fe6020 bump runc vendor v1.0.0-rc8
   b6d2d12e42 Updates daemon's remove link method to use more verbose error output.
   794e8111b6 add ApplyDiff to RWLayer
   63a66b0eb0 rootless: optional support for lxc-user-nic SUID binary
   3518383ed9 dockerd: fix rootless detection (alternative to #39024)
   83ac2b4c13 Skip TestImagesFilterMultiReference on API < v1.40
   05bd9958f2 Skip TestUUIDGeneration on API < v1.40
   d080a866cc Skip TestPingCacheHeaders on API < v1.40
   0e7b46aafe Skip TestBuildWithEmptyDockerfile on API < v1.40
   566eea13e6 Fix TestVolumesCreateAndList when running against a shared daemon
   2b5880c2eb Remove TestContainerAPICreateWithHostName
   c91c3776ea Skip TestNISDomainname on API < 1.40
   b73e3407e3 Dockerfile.e2e: builder: change output directory to simplify copy
   3ededb850f Dockerfile.e2e: move "contrib" to a separate build-stage
   e7784a6c7e Dockerfile.e2e: move dockercli to a separate build-stage
   045beed6c8 Dockerfile.e2e: use /build to be consistent with main Dockerfile
   63aefbfbca Dockerfile.e2e: re-order steps for caching
   5554bd1a7b Dockerfile.e2e: move frozen-images to a separate stage
   20262688df Dockerfile.e2e: use alpine 3.9
   e1f0f77bf4 Revendor go-winio
   b36455258f apparmor: allow readby and tracedby
   48fd0e921c Dockerfile.e2e fix TestBuildPreserveOwnership
   93886fcc5a Add "import" statement to generated API types
   1cfdb2ffb8 TestContainersAPICreateMountsCreate: minor optimization
   ec248fe61d pkg/mount/Make*: optimize
   a6773f69f2 daemon/mountVolumes(): eliminate MakeRPrivate call
   4e65b17ac4 daemon/mountVolumes: no need to specify fstype
   80fce834ad pkg/mount: Mount: minor optimization
   aa60541877 pkg/mount: MakeMount: minor optimization
   fca5ee3bd5 Support environment vars in Swarm plugins services
   eaad3ee3cf Make sure timers are stopped after use.
   bc709991b3 Use a regex to match labels
   28e93ed8ca Allow socket activation

And the following cli commits:

    3c87f01b1 Ignore SIGURG on Linux.
    48d30b5b3 Use golang.org/x/sys/execabs
    5941f4104 vendor docker, docker-credential-helpers and golang/sys for execabs package
    18f33b337 context: Add tarball e2e tests
    9ecc69d17 context: Ensure context name is valid on import
    6f49197ca context: Ensure import paths are valid
    5e430753f Fix link to docker build with squash experiment
    4d6bc775b Fix container creation time in test/builders
    47ecb13fe vendor: github.com/docker/docker v20.10.1
    a2b4d9c74 vendor: github.com/moby/buildkit v0.8.1
    fa3e0bcda Help link: remove color, add "bold" style, and white-space
    29bd82ba1 generate-man.sh: Only build md2man if it's not installed
    06c60dea9 Deprecation: add pulling from non-compliant registries to table
    aa91af81c Add deprecation note for non-compliant registries
    c54aec5c8 vendor: BuildKit v0.8.0
    aae8d2dfd vendor: github.com/docker/docker cf31b9622ae9de4b5fb7a1c9456460980ab80281
    345564319 docs: un-wrap line to prevent YAML docs from using "compact" formatting
    9f9c4b7f3 Remove k8s.io/kubernetes dependency
    40ec81a79 build: display [auth] output
    9a0a071d5 vendor: buildkit v0.8.0-rc2, docker
    4cab568ab vendor: github.com/moby/term bea5bbe245bf407372d477f1361d2ff042d2f556
    f8a406011 vendor: containerd 0edc412565dcc6e3d6125ff9e4b009ad4b89c638
    53471faac vendor: github.com/containerd/cgroups 0b889c03f102012f1d93a97ddd3ef71cd6f4f510
    2c694b323 vendor: github.com/opentracing/opentracing-go v1.2.0
    74d93d1fa vendor: github.com/tonistiigi/fsutil 0834f99b7b85462efb69b4f571a4fa3ca7da5ac9
    0e96d9256 vendor: golang.org/x/crypto c1f2f97bffc9c53fc40a1a28a5b460094c0050d9
    d7697f9c7 AdditionalHelpMessage set in command annotations, removed env var check
    0ec9e434e Additional help message is displayed in cyan
    2369d9d12 Do not display help link if env var “DOCKER_HIDE_HELP_GUIDES” is set
    dbd65f92c Display additional help message pointing to docs.docker.com guides. Will display when user types `docker help` or `docker --help`, but not for `docker run --help`.
    dc287b907 Long format for flag -w --workdir
    64776dd72 added ip6tables to daemon CLI and config file doc
    e3d93058f build: remove PersistentPreRunE hack for experimental --platform
    96e69c376 vendor: github.com/Microsoft/go-winio v0.4.15
    c318ec8a3 vendor: update docker/docker and moby/sys
    164954043 Always enable experimental features in bash completion
    ae5899e2b cli/command/container/stats.go: fix goimports
    c94f2d20b docs/builder: fix broken link
    3d84db96b Remove really outdated zsh-completion REVIEWERS file
    8258fc905 Add "--containerd-namespace" daemon flags in completion and docs
    184e5feb7 Use consistent formatting and sorted keys in all JSON examples for dockerd reference
    e08a44157 docs/builder: fix typo
    1f4beebd7 vendor: github.com/containerd/console v1.0.1
    32d8f358d vendor: github.com/moby/term 7f0af18e79f2784809e9cef63d0df5aa2c79d76e
    4b47aed2c vendor: github.com/creack/pty v1.1.11
    ef0ac7f7e vendor: github.com/docker/docker c2cc352355d4c26be60be8ea3a1acfddc20fdfd3
    7ab12bf96 vendor: github.com/fvbommel/sortorder v1.0.2
    f32731f90 GetDefaultAuthConfig: fix potential panic due to unhandled error
    6a02a51c9 docs: remove some references to obsolete docker versions
    715073668 Deprecation: add experimental docker build --stream option
    a40beedcc builder: print deprecation warning instead of failing for --stream
    5cd19d1fe opts: fix potential integer overflow CWE-190, CWE-681
    aa4cb2473 Replace deprecated instruction
    857f5856f handle sigterm on running a plugin
    b981f2454 vendor: cloud.google.com/go v0.44.3
    f5670e106 vendor: opencontainers/go-digest v1.0.0
    ceffcc527 vendor: github.com/gofrs/flock v0.7.3
    15c928eae vendor: docker/docker 73dc6a680cdd48f2f993f1a1b91aac1dd23d47c8
    b46ef4659 man-pages: fix missing manual title in heading
    74d45bbf6 vendor: github.com/spf13/cobra v1.1.1
    5355f2f63 Update man-page source MarkDown to work with go-md2man v2
    faac84e35 Deprecate Linux containers on Windows (LCOW) (experimental)
    8328ee196 Bump vndr v0.1.2
    ee4192364 docs: update 20.03 -> 20.10 in docker update docs
    6c0a3dfbf docs: update 20.03 -> 20.10 in deprecated.md
    06c1f784d Update version to 20.10-dev
    53e2110fa Wait on waitgroup instead of using time.Sleep
    7baac8c14 feat: allow ssh flag arguments
    3fe574b7e docs: fix broken links in build reference
    977d3ae04 Always enable experimental features
    e6ef3349f update docs usage output to match new format
    7f3717bd2 Replace tab with spaces in usage output
    d9c36c287 cli: print experimental message in usage output
    de8b696ed docs/deprecated: remove minor versions
    48822564b docs: deprecate CLI options for experimental CLI features
    c2225ad12 docs: add /go/experimental/ vanity URL
    0d11ef305 GH Actions: run CodeQL only on cron-job, not on pull requests
    3f19902ea Config-file: remove User-Agent from config.json when saving
    c8e3ddc76 Add CodeQL Analysis workflow (again)
    2d6b5e8ab vendor: sirupsen/logrus v1.7.0
    2484a3053 docs: fix generated YAML due to trailing whitespace
    54bbd782b docs: update URL for security landing page
    2b1138c11 Fix initializing client modifying custom HTTPHeaders
    bcb2a4c92 docs: fix "docker logs" example missing container name
    7ecf320e1 Fix make -f docker.Makefile without buildkit enabled
    eec671011 deprecate Dockerfile legacy 'ENV name value' syntax
    0eb3cfd26 Add test-case for env with, and without =
    a4a3d2f94 builder: add note about alternative syntax
    0a0037c6f builder: rephrase ENV section, remove examples for ENV key value without '='
    b4eb07904 Fix buildkit flags not being hidden without buildkit enabled
    e7203bf81 Fix 2 typos Consecutive occurrences of 'the'
    33ecbbdda vendor: github.com/containerd/containerd v1.4.1
    00b72960d vendor: docker/docker 7f7e4abb331a2973cfb3223710cc35a3e476b1b3
    bd8948761 Fix typo
    6065dccc9 Add docs and bash-completion for new Linux capabilities
    f19e31afe docs: add link to linux kernel source code for capabilities
    72a357858 docs: resize capabilities table
    5b035964c Bash-completion: add CAP_AUDIT_READ
    884a5ffbd docs: document CAP_AUDIT_READ
    4e58c2951 docs: document optional "CAP_" prefix for capabilities
    5bbdcd1c9 docs: sort list of capabilities alphabetically
    185d71262 Subcommand `docker manifest rm`
    b4db7e38b docs/build: add note about git subdirectories with BuildKit
    1e864920a Improve bash completion for ulimits
    57326f5e6 CircleCI: update to docker 19.03.12
    940907951 Support ulimits in docker stack deploy
    a9158bdc5 Add ulimits option to docker service create/update/inspect
    866e4b10a opts/UlimitOpt: sort lists by name
    23660be60 Service cap-add/cap-drop: add special "RESET" value
    7edc00d80 vendor: buildkit 4d1f260e8490ec438ab66e08bb105577aca0ce06
    ed339fa5c vendor: update prometheus deps to match docker/docker
    338e83837 vendor: github.com/golang/protobuf v1.3.5
    038cc46f8 vendor: github.com/containerd/cgroups 318312a373405e5e91134d8063d04d59768a1bff
    9968ccafe vendor: github.com/containerd/containerd v1.4.0-rc.1
    546809278 vendor: opencontainers/runc v1.0.0-rc92
    dbe2f594e vendor: golang.org/x/sys ed371f2e16b4b305ee99df548828de367527b76b
    e70e75605 vendor golang.org/x/net v0.0.0-20200707034311-ab3426394381
    1c3a97b0f vendor golang.org/x/crypto v0.0.0-20200622213623-75b288015ac9
    9f0658fb0 vendor: github.com/gorilla/mux v1.8.0
    47980a7e4 vendor: github.com/docker/docker f50a40e889fdaeebf14fce1d494f95e60092d21d
    0bb70223b vendor: github.com/docker/swarmkit d6592ddefd8a5319aadff74c558b816b1a0b2590
    95037299c Service cap-add/cap-drop: handle updates as "tri-state"
    190c64b41 Service cap-add/cap-drop: improve handling of combinations and special "ALL" value
    c6ec4e081 service: Add --cap-add & --cap-drop to service cmds
    0db61ff6d stack: Support cap_add and cap_drop on services
    01cd748eb Dockerfile: use experimental syntax and buildkit cache-mounts
    3aee35037 Makefile: use --mount instead of -v for docker socket
    ab72cc923 Dockerfile: use bash as default command, remove DOCKER_CLI_SHELL
    7c66213f8 Dockerfile: build gotestsum from source
    01d6d2e7a Dockerfile: refactor to use multi-stage build
    015cb9884 Complete capabilites with and without "CAP_" prefix.
    8df7a9364 man/docker-build.1:fix --memory-swamp and --network, removing = between long-form opts and values
    dace8fdc7 formatter: reduce minimum width for columns in table-view
    b951b5b8c formatter: minor refactor to reduce needless conversions
    83eda5313 opts: simplify ValidateEnv to use os.LookupEnv
    33510e0a6 vendor: bump github.com/fvbommel/sortorder v1.0.1
    0b8f46b06 Dockerfile: fix dynbinary inside dev container
    6703919c7 Replace vbom.ml/util with fvbommel/sortorder
    560ef7346 Update .dockerignore
    43bc71889 Dockerfiles: update shellcheck v0.7.1
    9a071a993 Return zero exit-code when force-removing non-existing containers
    288326da1   Fix Auto complete options available:
    231597527 Bump Golang 1.13.15
    0b7147a2a fix docs, completion and docker service
    9a41d99a8 Update authors and mailmap
    2fc608cea Fix order of processing of some xx-add/xx-rm service update flags
    86cbe2851 Replaces ADD with COPY in the COPY section
    3c0a167ed document deprecation of legacy `~/.dockercfg` config-file
    e531875ff support emulated version detection
    21da11c5f docker service inspect fails when TaskTemplate.Resources is nil
    097d57314 vendor: update docker/docker 0f41a77c6993ade605a639fb25994cfe5e1b3fe8
    293e239e1 vendor: update containerd/continuity efbc4488d8fe1bdc16bde3b2d2990d9b3a899165
    79b4d93c1 vendor: update tonistiigi/fsutil ae3a8d753069d0f76fbee396457e8b6cfd7cb8c3
    5dd9bd4c2 docs: remove docs for —-from=index
    074a8dcff deprecate `docker run --kernel-memory`
    04ab71457 Add shorthand for --tail option
    1f907fb7b Add DefaultAddressPools to docker info output #40388
    52ec986b5 vendor: docker/docker 78e6ffd279b627ebba046b9675ff4849091d9cc3
    c496fefe4 vendor: buildkit df35e9818d1f9066e616e03f4b8d727c97562e5b
    176380db8 Revert "Add CodeQL Analysis workflow"
    251861237 Replace mattn/go-shellwords with google/shlex
    1c79d16d8 added 'docker build --taget' to zsh completion
    cdfafe03e Bump Golang 1.13.14
    dc4f7fb37 Bump Golang 1.13.13
    75ab44af6 Fix ConfigFile.Save() replacing symlink with file
    0c2fe385b cli/formatter: reformat TestImageContext test cases
    d642de78f cli/command/formatter: remove deprecated compareMultipleValues() utility
    454c1927c Add CodeQL Analysis workflow
    77e78a2fe Move circle.yml to .circleci/config.yml
    05eebb8cc scripts/make.ps1: actually define the CommitSuffix parameter
    fde22be3e TestServiceUpdateResolveImageChanged: use subtests
    732d8b51a un-wrap some code
    47fce8f4b clean-up "resolve image" option logic
    55451d3c7 Add checks for dependencies that are not vendored. `make vendor` fails if any dependency is not vendored.
    6776f7cdc docs/builder: add note about handling of leading whitespace
    cce2f7fd9 refactor opts tests
    af62a0529 vendor: xeipuuv/gojsonschema v1.2.0
    c31efec9e vendor: mitchellh/mapstructure v1.3.2
    a6cfbd235 Added env-file flag to docker exec
    973713bc0 ReadKVEnvStrings/ReadKVStrings return nil if empty, and add tests
    1c31e193c command/container: skip some tests on macOS
    beb23c996 docs: update for cgroup v2 and rootless
    969580a88 config: ignore empty config file instead of printing warning
    d02173090 Handle errors on close in config file write.
    851eeb963 Add support for pids limit in stacks (swarm)
    395a6d560 Add support for --limit-pids on service create / update (swarm)
    c253918ea docs: fix example output for docker plugin ls
    668aea3f1 vendor: golang.org/x/text v0.3.3
    0f7260d1c Fix broken link
    1570025f0 Remove 'images' alias from 'image ls' command
    6248f2fb6 Don't filter out registries to logout from with config file contents
    458c2336c vendor: containerd c80284d4b5291a351bb471bcdabb5c1d95e7a583
    0d57a400b vendor: docker/docker aaf470eca7b588aa19e6681bff8bf08d17be1bf2
    89089fb41 config: remove redundant os.Stat()
    494f30a1a config: fix error message using incorrect filename
    bc5f10224 Added support for setting OS version in docker manifest annotate. Signed-off-by: Saswat Bhattacharya <sas.saswat@gmail.com>
    e1148e2c7 Add MOBY_DISABLE_PIGZ to dockerd environment variable docs
    ad301e741 Split up environment variable documentation between cli and dockerd
    2ab4b4d53 Don't loose additional metadata fields
    4840a8dfb list state `ready` for filtering in stack_ps.md
    a3af1f47d Use consistent name for errors
    e64d6d9ed vendor: gorilla/mux v1.7.4
    41255a431 CircleCI: update docker versions used in CI
    1cd69c41e Bump Golang 1.13.12
    a91880a3a Deprecate classic Swarm and overlay networks using external k/v stores
    d30970e3b ssh: avoid setting flags through hostname
    a968359e0 docs/extend: fix broken link and some markdown touch-ups
    1183a3e6e Explicit Z on logs timestamp examples
    ccd9d633b Set platform on container create API.
    8c986d3ff Bump docker/docker vendor
    98a3d6a48 docs: fix broken link in dockerd.md
    cb010db83 Fix bug with panic when DOCKER_CLI_EXPERIMENTAL environment variable is incorrect
    74919d056 Run e2e tests with different engine version on Jenkins Rewrite Jenkinsfile to new declarative syntax without parallel as the e2e framework is not tailored for than (container name clash, port clash,...)
    15d6565e4 Add a new Makefile variable to override DockerInDocker engine version we use to run e2e tests
    54f766d24 Partially revert cf663b526a34f3e7911e6e60138138c2023aa844 as it breaks the version negotiation with an older docker engine.
    459c6082f Removing CLI plugins API documentation from official documentation as it is now deprecated. Adding depreciation notice.
    1ecca982e Bump Golang 1.13.11
    eeafa4015 -buildmode=pie is not supported for the mips arch reference: 4c99c81326
    66dd9f29f vendor: beorn7/perks v1.0.1
    cf543e130 vendor: mitchellh/mapstructure v1.0.0
    4d948e468 docs: more Markdown touch-ups
    0c5f97ed7 compose: add build.extra_hosts to v3.9 schema
    bb7ef2cb3 Update some uses of errors.Cause() to errors.Is()
    466c50f93 vendor: k8s.io/klog v1.0.0-2-g4ad0115
    082a8bd89 vendor: pkg/errors v0.9.1
    84c0a0409 vendor: Microsoft/hcsshim v0.8.9
    f6541cfd8 vendor: moby/term 73f35e472e8f0a3f91347164138ce6bd73b756a9
    d10e2b9a6 vendor: golang.org/x/sys 85ca7c5b95cdf1e557abb38a283d1e61a5959c31
    719169db6 Replace deprecated Cobra command.SetOutput() with command.SetOut()
    bc938e4de docker info: add "context" to output
    181e60499 docker version: add "context" to output
    803b9071e docs: fix, and touch-up "docker context" docs
    df5cedfc8 vendor: spf13/cobra v1.0.0, go-md2man v2.0.0, blackfriday v2.0.1
    d07f44fb3 vendor: switch back to upstream spf13/pflag v1.0.5
    80a225647 Swarm init: use local IPNetSliceValue
    e23a1fca9 docs: update dockerd usage
    d096339f4 docs: update usage output for dockerd (19.03)
    9a58504d3 docs: fix order of flags in usage, and fix missing quote
    dbd2fa5c3 vendor: remove unused dependencies from vendor.conf
    24ade3c13 vendor: sirupsen/logrus v1.6.0
    ef414633d Update dead link and add missing info on COPY
    bc58d655c builder: fix broken link
    116c9a1f5 docs: fix links, and minor markdown touch-ups
    dbc61787a info: print Cgroup Version
    3dfe2ffc1 vendor: update kubernetes and dependencies v1.16.9
    8b32a3f9d vendor: sirupsen/logrus v1.5.0
    4f65b65e8 vendor konsorten/go-windows-terminal-sequences v1.0.3
    2e83f5685 vendor: update gotest.tools v3.0.2
    d2632cea7 plugin: make runplugin public
    9375644e3 Add jobs support to CLI
    0cd7c6aa0 service update: fix service create example
    84a07a997 Add container_iface_prefix option to documentation
    6a17919d3 vendor: github.com/docker/swarmkit ebe39a32e3ed4c3a3783a02c11cccf388818694c
    5adc9d236 vendor: github.com/containerd/ttrpc v1.0.0
    2cb9d26c2 vendor: github.com/containerd/console v1.0.0
    c08557768 vendor: github.com/containerd/cgroups 44306b6a1d46985d916b48b4199f93a378af314f
    9c21f28ac vendor: github.com/containerd/containerd 4d242818bf55542e5d7876ca276fea83029e803c
    2b910b69b vendor: github.com/tonistiigi/fsutil c2c7d7b0e1441705cd802e5699c0a10b1dfe39fd
    edf70dc30 vendor: golang.org/x/oauth2 bf48bf16ab8d622ce64ec6ce98d2c98f916b6303
    9a41e375b vendor: golang.org/x/time 555d28b269f0569763d25dbe1a237ae74c6bcc82
    37d184fe1 vendor: golang.org/x/crypto 2aa609cf4a9d7d1126360de73b55b6002f9e052a
    55d320db9 vendor: golang.org/x/sync cd5d95a43a6e21273425c7ae415d3df9ea832eeb
    7b9012ddd vendor: golang.org/x/sys d5e6a3e2c0ae16fc7480523ebcb7fd4dd3215489
    3aab460ee vendor: golang.org/x/net 0de0cce0169b09b364e001f108dc0399ea8630b3
    e32fe12ae vendor: golang.org/x/text v0.3.2
    bdce04e95 vendor: github.com/golang/protobuf v1.3.3
    f36dcfd67 vendor: github.com/gogo/protobuf v1.3.1
    d7c34b6a0 vendor: github.com/gogo/googleapis v1.3.2
    cdde30e03 vendor: google.golang.org/genproto 3f1135a288c9a07e340ae8ba4cc6c7065a3160e8
    a38db191b vendor: update google.golang.org/grpc v1.27.1
    0dc9d17a2 vendor: github.com/moby/buildkit ae7ff7174f73bcb4df89b97e1623b3fb0bfb0a0c
    d0a80bf44 update docker, replace  github.com/docker/pkg/term, github.com/docker/pkg/mount
    8a30653ed config: don't call homedir on init()
    c4798a9da yamldocs: add description to base command
    86257b0fc experimental/vlan-networks: markdown touch-ups
    e34c40751 docs/reference: explain "colon"
    e4fc8cfa2 docs/extend: reformat notes
    16730a2ab docs/builder: touch up markdown, and some minor rephrasing
    b73df4a23 docs/reference/run.md: touch-up markdown
    6ae5df423 reference docs: reformat notes
    8919c228b reference docs: fix broken links and markdown touch-ups
    f88ae7413 Add "host-gateway" to tests for extra_hosts / --add-host
    a4a07c643 calculateMemUsageUnixNoCache: subtract total_inactive_file, not cache
    3b256db4a Add script to regenerate test-certificate fixtures
    5661cc0de vendor: update go-events to fix alignment for 32bit systems
    b39739123 cli: perform feature detection lazily
    a88a1bea2 docker build: check experimental --platform on pre-run
    fa11032a3 opts: use constants instead of vars for defaults and un-export them
    ff2c1c085 Jenkinsfile: split e2e tests to separate stages
    eb93a865e improve "network prune" output to mention custom networks only
    687539013 Bump Golang 1.13.10
    6bd09229a CI: update notary test certificates
    19bcebd12 test: make sure environment vars are reset after tests
    650c71758 TestHistoryContext_CreatedSince: skip on non-UTC environments
    d063b835b Bump Golang 1.13.9
    7557c138d Adding missing title in builder.md
    83478fe7c try http for docker manifest --insecure
    94f513e48 Update deprecation policy to 1 stable release
    99443274b Include deprecation policy on deprecated features page
    f30bde6ad remove unneeded comment from reference files
    7c87175d8 Fix broken link in CONTRIBUTING
    824a9ce64 docs: update code-hints for compatibility with "rouge"
    f912deeec Fix whitespace that caused short-format in generated YAML
    e1b362847 Fix yamldocs generator to accomodate nested subcommands
    5115bfa04 Fix naming of reference docs files
    f64c1ff3c update shellcheck v0.7.0
    b1fd38fa7 Update Windows ico
    9d9568263 Replace 'numeric' with object in -q description
    67ebcd6dc Skip IPAddr validation for "host-gateway" string
    40aa02053 Add an exe extension to windows binary during cross build.
    4313c8b3c Update Golang 1.13.8
    2c0e93063 bump gotest.tools v3.0.1 for compatibility with Go 1.14
    5ef0fa10d gofmt compose loader test
    4cd4305b3 docs: add redirect for old location of daemon reference
    11869fa42 fix panic on single-character volumes
    1edb10fe3 vendor: bump golang.org/x/crypto  bac4c82f6975 (CVE-2020-9283)
    26d71f9e0 Bump version to 20.03.0-dev
    c485dab60 vendor: golang.org/x/crypto 1d94cc7ab1c630336ab82ccb9c9cda72a875c382
    aad9d2c95 Fix builder prune -a/--all flag description
    80b22064d Improve service tasks grouping on printing
    5e5ef9e0b Update Golang 1.12.17
    c84f95815 Remove deprecated docker search --automated and --stars flags
    1fefbdc29 Dockerfile.e2e: don't show progress, force TLS, and follow redirects
    491c819a9 deprecated: use of reserved namespaces for engine labels
    3493fe2af vendor: bump swarmkit 49e35619b18200845c9365c1e953440c28868002
    507e6b61c vendor: update containerd/continuity to 26c1120b8d4107d2471b93ad78ef7ce1fc84c4c4
    9a690c9ac vendor: update opencontainers/runc v1.0.0-rc10
    751f320ee vendor: bump google/shlex e7afc7fbc51079733e9468cdfd1efcd7d196cd1d
    0fe7190d0 vendor: update fsutil 0f039a052ca1da01626278199624b62aed9b3729
    48f97602f vendor: add comment that hcsshim is v0.8.7
    9b549401b vendor: update docker to 58c2615208962a458ed94f4b6262eb27e5e021cd
    6cb7e6fca vendor: add missing containerd/cgroups dependency
    7c5440695 update vndr v0.1.1
    58c76291c docs: update deprecation status of "filter" option
    73c9a44d5 docs: update deprecated status for --disable-legacy-registry
    74677110d docs: update deprecation status of "engine *" commands, and dab files
    f26e9a3a6 docs: service create: document os/arch constraints and more examples
    d4c0de271 docs: add status table to "deprecated.md"
    e8c2dba69 docs: mark deprecation of "docker engine" subcommands
    c7aca0849 docs: mark deprecation of "dab" files and top-level "deploy" subcommand
    b6875ad69 docs: sort "deprecated.md" by deprecation release
    672c00e1c docs: update some release-versions in "deprecated.md"
    c3092d940 docs: minor touch-ups in "deprecated.md"
    b059c93c9 docs: service create: document non-matching/exclude constraints
    abeb7babd docs: service create: use markdown table for constraints
    76852f82b Give an example for --reserve-memory
    07436dfe7 Remove a useless '\' and enhance a script in an example in the section 'Add entries ... (--add-host)'
    473a9d20c Add examples for configs
    74cc062d2 Syntax corrected
    17e651dc5 Add support for Kubernetes username/password auth
    2a08462de Revert "connhelper: add ssh multiplexing"
    29734b910 Revert "docs: document ssh multiplexing env"
    5ad1d4d4c docker run: specify cgroup namespace mode with --cgroupns
    27d9aa2d9 vendor: update golang.org/x/crypto 69ecbb4d6d5dab05e49161c6e77ea40a030884e1 (CVE-2020-7919)
    19fd390c3 Update Golang 1.12.16 (CVE-2020-0601, CVE-2020-7919)
    4f3bc1581 docs: document dockerignore update
    f7009ee12 docs: document build outputs
    73cd257d0 docs: document cache-from
    9e620e990 implement docker push -a/--all-tags
    3dfcfbb2b vendor: bump gopkg.in/yaml.v2 v2.2.8
    594be50a6 bump gotestsum v0.4.0
    3f83832be bump gotestsum v0.3.5
    97010520d bump mjibson/esc v0.2.0
    7904c23df bump vndr v0.1.0 to support versioned import paths
    8f5379b30 Update flag description for docker rm -v
    4006c42e1 Added transforms for compose overrides
    a955ed647 Add notice about port binding and overriding of UFW to docker run reference
    94443920b Fix: docker push --quiet suppressing errors and exit code
    6cf7970cd bump imdario/mergo v0.3.8
    e9b9a0014 completion: add `--max-download-attempts`
    348f24cae Add content trust tests for run command
    139af1f6d Add log-driver and options to service inspect "pretty" format
    84c6b08cf Update Golang 1.12.15
    b53ffd6c1 vendor: bump miekg/pkcs11 v1.0.3
    1d6445dc9 opts: fix formatting of comments
    e7f720b0a cli/config: fix formatting of comments
    73dcf50d5 cli/command: fix formatting of comments, and minor linting issues
    6e5528b65 e2e: fix formatting of comments
    c804b1083 Dockerfile.e2e: update compose v1.25.1, enable buildkit
    c2c7503d4 Convert ports before parsing.
    154a1f6df Reverse order of long-form ports
    4ecbef466 docs: document ssh multiplexing env
    c04dd6e24 connhelper: add ssh multiplexing
    3baa6d57f Refactor config and secret tests to table-driven
    9698b7a37 Default config/secret target to source name
    4c2d7b7f7 Detect single value advanced config/secret syntax
    627a4cf7c vendor: bump docker/docker a9507c6f76627fdc092edc542d5a7ef4a6df5eec
    ece71412c vendor: bump buildkit 4f4e03067523b2fc5ca2f17514a5e75ad63e02fb
    dff269b5e vendor: bump hcsshim b3f49c06ffaeef24d09c6c08ec8ec8425a0303e2
    b82206295 vendor: bump containerd acdcf13d5eaf0dfe0eaeabe7194a82535549bc2b
    ed8cacd6e vendor: bump runc v1.0.0-rc9
    013151ff7 vendor: bump google.golang.org/grpc v1.23.1
    268cc5df2 vendor: bump golang.org/x/sys 6d18c012aee9febd81bbf9806760c8c4480e870d
    2d6aec78a Change example networks
    ce4216894 docs: document from platform
    4beea5853 Bump Golang 1.12.14
    ef37a8a57 Fix "make build" (non-containerized) on macOS
    54ba28f40 docker info: list CLI plugins alphabetically
    aef6b04a7 Fix docker ps table headers with custom format and "split" or "join"
    69f216f6e Fix docker ps --format with templating functions
    b06272631 command/container: unify list tests in a single file
    6732347e5 bump containerd v1.3.0
    22a291f70 config: preserve ownership and permissions on configfile
    c07f50afa bump buildkit f7042823e340d38d1746aa675b83d1aca431cee3
    cf3f902df update runc to v1.0.0-rc8-92-g84373aaa (CVE-2019-16884)
    4b267469b bump hashicorp/golang-lru  v0.5.3
    b104da4a0 bump containerd/continuity f2a389ac0a02ce21c09edd7344677a601970f41c
    7e5451316 docs: add redirects for engine reference pages
    43b2f52d0 Remove "docker engine" subcommands
    f540eae7f Docs: add note about management commands targeting a manager
    e70d6bcb8 Add docs for proxy configuration in config.json
    dd87cd9fe bump github.com/dgrijalva/jwt-go v3.2.0, docker/licencing 7c3de6a4f59e9e70764ea6f6901cf17b88059789
    585ec4da9 docker cp: prevent NPE when failing to stat destination
    99ad13e37 Remove experimental "deploy" from "dab" files
    e1daa22ba Modify docs to specify working of device flag
    7f063899e Maintainers: remove Justin and Aaron
    2e2d2e16c Move Daniel to alumni
    046a13f99 Maintainers file: remove "docs maintainers" section
    819551220 Fixing some links and deleting an older page reference
    c888809bb Typo in documentation of volume create
    e692381d1 e2e: add new test package "global" with TestTLSVerify
    756ab2fb9 Add support for docker push --quiet
    26dbc3226 cp: allow trailing slash in non-existant destination
    22a5dad84 app-214 Load Client info in getter function
    7eb6a29c0 Bump compose-on-kubernetes from v0.4.25-alpha1 to v0.5.0-alpha1
    cb29ef6c6 Add interpolation type cast for max_replicas_per_node
    b7e06f284 Remove now obsolete gometalinter and use golangci-lint instead
    1e7774228 service: remove unused opts from newService() (unparam)
    640305f33 cli/command/stack/kubernetes: Using the variable on range scope `c` in function literal (scopelint)
    542f80241 cli/command/container: Using the variable on range scope `c` in function literal (scopelint)
    754fc6fe6 cli/command/stack/kubernetes: Using a reference for the variable on range scope `obj` (scopelint)
    c2b069f4d opts: Using the variable on range scope `tc` in function literal (scopelint)
    cd3dca37b cli/manifest: Using the variable on range scope `testcase` in function literal (scopelint)
    aafe3df8b cli/compose/template: Using the variable on range scope `tc` in function literal (scopelint)
    79dc83e78 cli/command/container: suppress dogsled warnings
    dd4d216af e2e: remove unnecessary trailing newline (whitespace)
    63e45e632 internal: remove unnecessary newlines (whitespace)
    612d83d6d cli: remove unnecessary newlines (whitespace)
    2ec424a2d cli/command: Using the variable on range scope `testcase` in function literal (scopelint)
    7c4b63b1c cli/command/trust: Using the variable on range scope `keyBytes` in function literal (scopelint)
    a269e17d7 cli/command/context: Using the variable on range scope `c` in function literal (scopelint)
    1736662be e2e/cli-plugins: Using the variable on range scope `args` in function literal (scopelint)
    96ec7299d cli/compose/loader: Using a reference for the variable on range scope `overrideService` (scopelint)
    54d48de21 templates: Using the variable on range scope `testCase` in function literal (scopelint)
    c828fa141 service/logs: Using the variable on range scope `testcase` in function literal (scopelint)
    5a2a9d9ca cli/config: Using the variable on range scope `tc` in function literal (scopelint)
    e74e2c774 cli/command/formatter: Error return value of `ContainerWrite` is not checked (errcheck)
    008f6a2da cli/command: Error return value of `cli.Apply` is not checked (errcheck)
    9275e2cb6 cli/command/formatter: Error return value of `ImageWrite` is not checked (errcheck)
    fe3cc6eb7 cli/context/store: SA5001: should check returned error before deferring f.Close() (staticcheck)
    709728e72 cli/command/image: SA1006: printf-style with no further arguments (staticcheck)
    ea64a1ceb cli/command/utils: SA1006: printf-style with no further arguments (staticcheck)
    f0614ca78 cli/command/trust: SA1006: printf-style with no further arguments (staticcheck)
    0e4bd30cf cli/command/image/build: G107: Potential HTTP request made with variable url (gosec)
    8d64c2af1 cli/command/service: SA1012: do not pass a nil Context (staticcheck)
    1850a0595 cli/command/secret: G101: Potential hardcoded credentials (gosec)
    34f595975 cli/compose/convert: driverObjectConfig - result 1 (error) is always nil (unparam)
    6205ef33b e2e/container: containerExistsWithStatus - t is unused (unparam)
    b83545ebb cli/command/image/build/context_test.go:244:38: `createTestTempDir` - `prefix` always receives `"builder-context-test"` (unparam)
    4be924a0a cli/command/registry/login_test.go:66:25: unnecessary conversion (unconvert)
    c23737916 cli/compose/convert/service_test.go:274:72: unnecessary conversion (unconvert)
    6047259e5 File is not `goimports`-ed (goimports)
    0153624a5 cli/command/trust/sign_test.go:119:70: unnecessary conversion (unconvert)
    f123e43c1 Disable unparam linter: e2e/image/push_test.go:299:27: `withNotaryPassphrase` - `pwd` always receives `"foo"` (unparam)
    7d823438b Disable unparam linter: cli/required.go:102:16: `pluralize` - `word` always receives `"argument"` (unparam)
    9118b2b2b compose/loader: define type for transformer-functions
    6eb0c9c61 disable unparam linter on these functions, as we need an error in these function signatures
    d640f44df cli/compose/convert: result 1 (error) is always nil (unparam)
    47741f81d cli/command/system/info.go:116:68: prettyPrintClientInfo - result 0 (error) is always nil (unparam)
    a3c7cb4f1 cli/command/stack/kubernetes/deploy_test.go:65:68: `checkOwnerReferences` - `stackName` always receives `"test"` (unparam)
    ab1aeedb2 cli/command/plugin/list_test.go:61:31: `TestList$1` - `filter` is unused (unparam)
    75c60c1af cli/command/image/build_session.go:133:45: getBuildSharedKey - result 1 (error) is always nil (unparam)
    28ac2f82c cli/command/image/build_buildkit.go:450:56: parseSSH - result 1 (error) is always nil (unparam)
    0ce2eae5a cli/command/image/build/context_test.go:252:71: `createTestTempFile` - `perm` always receives `0777` (`511`) (unparam)
    70bd64d03 cli/command/image/build/context_test.go:244:38: `createTestTempDir` - `dir` always receives `""` (unparam)
    e1c0c7979 unchecked errors
    584da3775 cli/command/container/attach.go:141:15: nilness: impossible condition: nil != nil (govet)
    b3d4c6aac opts/ulimit_test.go:11:13: composites: `*github.com/docker/cli/vendor/github.com/docker/go-units.Ulimit` composite literal uses unkeyed fields (govet)
    1bfe81318 cli/compose/types/types.go:106:2: structtag: struct field tag `yaml:",inline", json:"-"` not compatible with reflect.StructTag.Get: key:"value" pairs not separated by spaces (govet)
    5ceed3059 cli/registry/client/fetcher.go:106:9: nilness: impossible condition: nil != nil (govet)
    9afeb6f43 cli/command/container/start.go:157:20: nilness: nil dereference in type assertion (govet)
    85cfd4e51 cli/command/stack/kubernetes/list.go:32:47: nilness: tautological condition: non-nil != nil (govet)
    f5e838706 cli/command/trust/key_generate.go:112:9: nilness: impossible condition: nil != nil (govet)
    3a428202b SA1019: httputil.ErrPersistEOF is deprecated: No longer used.  (staticcheck)
    7da936047 cli/command/container/stats.go:211:21: SA1015: using time.Tick leaks the underlying ticker, consider using it only in endless functions, tests and the main package, and use time.NewTicker here (staticcheck)
    8018a850c cli/command/trust/inspect_pretty_test.go:399:24: SA4010: this result of append is never used, except maybe in other appends (staticcheck)
    296297190 opts/throttledevice.go:51:5: SA4003: unsigned values are never < 0 (staticcheck)
    2d0c10d77 kubernetes/conversion_test: use test-builders package
    270defa17 internal/test/builders: don't set EndpointSpec by default
    e4d3c360b Bump Compose on Kubernetes
    758d12e65 unused-for is a deprecated synonym
    56729bc0a Return empty string if image createdAt is zero
    568ea3a32 Refactor the `stack services` command to be uniform
    20424e2f5 Add test for ServiceStatus
    7405ac5c2 Services: use ServiceStatus on API v1.41 and up
    228e0f5e7 TestStackServicesErrors: use sub-tests, and return tasks
    962015b05 internal/builders: add GlobalService, ServiceStatus, NodeList()
    0a21de05d compose/loader: fix TestIsAbs not testing all combinations
    54411e5a9 cli/command/container: Using a reference for the variable on range scope `n` (scopelint)
    648199b32 cli/command/service: Using a reference for the variable on range scope `entry` (scopelint)
    167b3906f Update flag doc
    3e78cbc02 Gometalinter: raise deadline to 3 minutes
    7f6cd6433 bump docker/docker to a09e6e323e55e1a9b21df9c2c555f5668df3ac9b
    5e4c7eba4 bump Microsoft/hcsshim 2226e083fc390003ae5aa8325c3c92789afa0e7a
    937e65cac CircleCI: add some info steps, and re-group jobs
    46f3f9ac0 update Jenkins Build Status urls for README
    71e525f74 gometalinter: fix configuration
    87cf5b606 bump hashicorp/go-version v1.2.0
    ad4ca6f0d bump gofrs/flock v0.7.1
    9b9280465 bump logrus v1.4.2
    6a26d370a bump mattn/go-shellwords v1.0.6
    c07b1b275 bump creack/pty v1.1.9
    4b5ecc982 bump gorilla/mux v1.7.3
    474d522ee Update Golang 1.12.12 (CVE-2019-17596)
    79aa6cce1 TestFormatInfo: add extra test-case
    8f11fbc87 Fix lint issue
    415f60862 Add test case to cover non-empty auth entry
    86281a7b4 daemon: document --max-download-attempts option
    0076ee6cd Fix typo
    fc19fb6d9 Fix erroneous space indentation of shell script
    7b8c6a632 bump github.com/xeipuuv/gojsonpointer 02993c407bfbf5f6dae44c4f4b1cf6a39b5fc5bb
    937ce69b4 Adjusting glossary reference and clarrifying the start of a Dockerfile
    06f34ba50 bump github.com/xeipuuv/gojsonschema v1.1.0
    ba7ec36de Minor formatting changes and a typo fix.
    7a279af43 config: revert to using pkg/homedir
    cd9b39fc5 Add bash completion for `builder build` options
    7eecbb96a Annotate flags that are not supported by Buildkit
    37e9cabf1 Allow username/password in config file
    70a4eb2a4 vendor: update grpc to v1.23.0
    72bc29a2a vendor: update go-winio to v0.4.14
    38c02a928 vendor: align with engine at b6684a403c99aaf6be5b8ce0bef3c6650fcdcd12
    c3990f3ba build: remove --stream
    91cf8b04c vendor: Bump gopkg.in/yaml.v2
    86ae871e0 Add bash completion for `builder build`
    8743e36a4 bump golang 1.12.10 (CVE-2019-16276)
    ee76ac8f9 fix formatting issue of encoded urlSigned-off-by: Sam <samashah@microsoft.com>
    47f059db7 config: keep configDir empty when homedir errors
    031bd2d53 Adding experimental feature info
    0df5d6427 vendor: update buildkit to 10cef0c and fsutil 7f9f923
    c2626a827 cli/config: use os.UserHomeDir instead of github.com/docker/docker/pkg/homedir
    821f5ecf5 Add option remove `env_file` entry after merged
    131eefc54 Clarifying docker config rules
    b3a1681fd Add clarification when using USER UID:GI
    41aa20b6b Add riscv64 to manifest annotation and bash completion
    6ebcc211a Move filtering to __docker_complete_services, as suggested by @albers
    b85e1e2ef Fix substitution of comma to space character, suggested by @albers
    f55c5b656 Make service completion faster
    34447852b Sort services from stack from swarm
    5bc1f24df Add docker-compose schema v3.9
    bba0a4d5a Updating deprecated command example in search.md
    7634872a3 fix(pull_test): for quiet option
    2f7b364cb add rudimentary fish completions for docker network
    e25e077a2 restore support for env variables to configure proxy regression introduced by b34f34 close #39654
    265bee4d5 Update service_create.md
    a0dd6e025 Fix phrasing when referring to the freezer cgroup
    54428b1f3 bump miekg/pkcs11 v1.0.2
    d9856049e Bump golang 1.12.9
    de1523d22 Adjust tests for changes in Go 1.12.8 / 1.11.13
    bbd179f25 Bump golang 1.12.8 (CVE-2019-9512, CVE-2019-9514)
    778052b06 bump x/sys to fix riscv64 epoll
    893db86d6 e2e: enable buildkit
    ae58e356e Circle-CI: use progress=plain
    9a6519db7 Circle-CI: enable buildkit
    82e01807b Update dockerignore
    d1b6676df Update AUTHORS and mailmap
    f7ab2987c Explain -s flag on docker ps
    bc4ed69a2 TestSigProxyWithTTY: fix
    f290a8084 switch kr/pty to creack/pty v1.1.7
    b1a3c1aad Disable TLS for e2e docker-in-docker daemon
    e9ada56a8 builder.md: Correct copy/paste error
    0d3022c6d Dockerfile: use GO_VERSION build-arg for overriding Go version
    64f0ae425 bump docker-credential-helpers v0.6.3
    de01e7245 e2e: remove docker engine testing remnants
    1fdbd6181 docker ps: add State field to formatting
    988b9a0d9 docs: add info for events backlog and scope
    b06f9e959 Bump golang 1.12.7
    d6dd08d56 Detect Windows absolute paths on non-Windows CLI
    8b19c1d73 Update CircleCI Docker version to 18.09.3
    53fc63a93 Circle-CI: fix indentation in circle.yml
    08fd6dd63 e2e: use stable-dind image for testing
    f7b75eeb9 adding nvidia gpu access info Signed-off-by: Adrian Plata <adrian.plata@docker.com>
    efdf36fa8 Rollback config type interpolation on fields "parallelism" and "max_failure_ratio" were missing, as it uses the same type as update_config.
    c8e9233b9 Deprecate AuFS storage driver
    7cf1a8d4c Add test for --sig-proxy with a TTY
    ee2950492 Do not disable sig-proxy when using a TTY
    15d361fd7 Windows: skip permissions check on key
    4d7e6bf62 Fix advanced options for backward compatibility
    8b4e52f0b deprecate registry v2 schema 1
    81e3457c2 bump gorilla/mux v1.7.2
    1dc756e8d fix: docker login autocomplete for zsh
    459099e17 Bump golang 1.12.6
    f6a4c76fb bump docker-credential-helpers v0.6.2
    1877ed6aa bump compose-on-kubernetes v0.4.23
    17e043828 completion with container names on restart
    5f9350966 Fix detection of invalid context files when importing
    668a9ff8e vendor: update net and sys
    291e86289 Introduce .zip import for docker context
    bb8e89bb2 cli-plugins: add test names for easier debugging
    6ca878373 cli-plugins: add concept of experimental plugin, only enabled in experimental mode
    c455193d1 Push check for kubernetes requirement down into the endpoint
    520be05c4 Dynamically register kubernetes context store endpoint type.
    f820766f6 Export `DefaultContextStoreConfig()` and `ResolveDefaultContext()`
    1433e2742 Allow dynamically registered context endpoint to provide their defaults.
    4f14c4995 Add a helper to iterate over all endpoint types in a context store
    087c3f7d0 Support dynamic registration of context store endpoint types
    d5d693aa6 e2e: add a test for `context ls`
    d84e278aa fix a few typos
    33a9a6392 Revert "add a 10s timeout to the client object."
    909b85460 bump LK4D4/vndr v0.0.3 and revendor
    8635abd66 Use underlying `NewKubernetesConfig` directly from compose-on-kubernetes.
    1e5129f02 rename package import kubcontext → kubecontext
    41fe46413 add containerd/ttrpc f02858b1457c5ca3aaec3a0803eb0d59f96e41d6
    51de9a883 bump golang.org/x/crypto 88737f569e3a9c7ab309cdc09a07fe7fc87233c3
    4de6cb013 bump gogo/protobuf v1.2.1
    415cb3d90 bump gogo/googleapis v1.2.0
    4cb01169e bump containerd/console 0650fd9eeb50bab4fc99dceb9f2e14cf58f36e7f
    dbfeaae5e bump containerd/continuity aaeac12a7ffcd198ae25440a9dff125c2e2703a7
    8ea94a172 bump containerd aaeac12a7ffcd198ae25440a9dff125c2e2703a7
    a4f01d876 vendor: bump runc v1.0.0-rc8
    1ae6ec7f2 bump docker/docker 3998dffb806f3887f804b813069f59bc14a7f3c1
    529ef6e89 vendor buildkit to f238f1e
    c52e1f248 context: ClientOpts() now includes WithAPIVersionNegotiation if version is missing
    5331358d3 Fix PowerShell codehint for rouge
    93d76c5c9 bump google.golang.org/grpc v1.20.1
    ff44305c4 context: produce consistent output on `context create`.
    59defcb34 add a 10s timeout to the client object.
    e5c86dbcf Forcing the creation of tmp directory so that build doesn't fail when it already exists
    e6f73bc50 Bump version to 19.09.0-dev
    c1639e1e4 Add bash completion for `events --filter node`
    b55992afc Add bash completion for `context create --from`
    7f45a0e52 vendor buildkit to 646fc0af6d283397b9e47cd0a18779e9d0376e0e (v0.5.1)
    c32d1de57 Bump golang 1.12.5
    daca70d82 build: add --platform local
    8adcedd65 build: honor BUILDKIT_PROGRESS env config
    dcc414be3 CircleCI: store junit.xml as artifact
    50a45baba bash completion: add node type filter
    483c53ad9 Use single table for all ContainerImagePullPolicy tests
    ffba7659c Improve testing of never pull and always pull scenarios
    ec56136d6 Use closure for common pulling and tagging bevior in container creation
    965664d89 Improve flow pull behavior before container creation.
    a06b5db59 Update cli/command/container/create.go
    22cd41896 Adds flag modifying pull behavior for running and creating containers
    15130e304 Support GOARM and windows .exe in binary target
    af200f14e cli-plugins: fix when plugin does not use PersistentPreRun* hooks
    ffc168ed5 Update AUTHORS and mailmap
    7d0645c5f Use command.Cli instead of command.DockerCli
    40a6cf7c4 Include CLI plugins in help output on unknown flag.
    79a75da0f Hide experimental builtin commands in help output on unknown flag.
    d57175aa2 Move subtests of TestGlobalHelp into actual subtests
    1648d6c4a Add bash completion for `--security-opt systempaths=unconfined`
    bfa43d298 Remove deprecated storage drivers from bash completion
    70d8e0b86 Add ip and ip6 to advanced network syntax

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-02-05 18:54:49 -05:00
Bruce Ashfield
0441042812 docker-ce: update to v19.03.15-ce
The following docker-ce commits are in this bump:

   8ba93ae231 centos-8: work around CentOS repo bug preventing to enable PowerTools
   b61c54e644 CentOS 8: manually import GPG key
   7c5dfa21ab Bump VERSION to 19.03.15
   c48e2f23e4 context: Add tarball e2e tests
   51b4c45634 context: Ensure context name is valid on import
   6a4daa87e5 context: Ensure import paths are valid
   736dcbb76c pull: Validate layer digest format
   e0b182f9fd buildkit: Apply apparmor profile
   e2fc17e3cd vendor buildkit 396bfe20b590914cd77945ef0d70d976a0ed093c
   77ef9e3963 Use real root with 0701 perms
   bb9d1ea5f7 Do not set DOCKER_TMP to be owned by remapped root
   65f17f139b Ensure MkdirAllAndChown also sets perms
   bc73c89f8b docs: un-wrap line to prevent YAML docs from using "compact" formatting
   6cfdb61f0a Bump VERSION to 19.03.14

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-02-05 15:47:59 -05:00
Bruce Ashfield
cf5a9a95cc moby: update to v19.03.14
Incorporating the following moby commits:

   d3c5506330 update containerd binary to v1.3.9 (address CVE-2020-15257)
   1babdf81e7 update containerd binary to v1.3.8
   f80f6304e2 Bump libnetwork
   4b181db52b bump up rootlesskit to v0.11.0
   7487dca8a5 docs: fix builder-version swagger
   c7253a0e1a dockerd-rootless.sh: support containerd v1.4 shim socket path convention
   88eec2e811 Also trim "~..." from AppArmor versions
   ecd3baca25 pkg/aaparser: support parsing version like "3.0.0-beta1"
   74c0c5b7f1 Fix gcplogs memory/connection leak
   5f32bd9ced awslogs: Update aws-sdk-go to support IMDSv2
   8cf9d50fc0 [19.03] vendor: buildkit v0.6.4-32-gdf89d4dc
   a4e96a486f swagger: fix MemTotal units in SystemInfo endpoint
   9fe291827a Bump Golang 1.13.15
   a15a770e1b update containerd to v1.3.7
   9380ec7397 update containerd to v1.3.6
   80cef48453 update containerd to v1.3.5
   fc8f88dc14 update containerd to v1.3.4
   89a4208757 update containerd binary to v1.3.3
   490c45b756 Update containerd to v1.3.2
   56d897347d Update containerd to v1.3.1
   d4c63720e9 update containerd binary v1.3.0
   ec14dc44d1 Fix log file rotation test.
   a958fc3e65 Fix flakey test for log file rotate.
   89da709cb7 Check for context error that is wrapped in url.Error
   83baeafc3c oci: correctly use user.GetExecUser interface
   dae08c333e vendor: vishvananda/netns db3c7e526aae966c4ccfa6c8189b693d6ac5d202
   93cb737687 [19.03] vendor: vishvananda/netns 0a2b9b5464df8343199164a0321edf3313202f7e

and the following libnetwork commits:

  90990763 service_linux: Fix null dereference in findLBEndpointSandbox
  8565f0b1 log error instead if disabling IPv6 router advertisement failed

and finally, the following cli commits:

   01fc5a1ec3 Replace deprecated instruction
   3b3e295c4b docs: update 20.03 -> 20.10 in deprecated.md
   d1b44aa298 docs: fix broken links in build reference
   20bc15f618 docs/deprecated: remove minor versions
   3172219932 docs: deprecate CLI options for experimental CLI features
   f132c8ad4a docs: add /go/experimental/ vanity URL
   df5ca0c950 docs: fix generated YAML due to trailing whitespace
   5057d34272 docs: update URL for security landing page
   278f30b82b Add test-case for env with, and without =
   f526bcdb53 builder: add note about alternative syntax
   10973d6ddf builder: rephrase ENV section, remove examples for ENV key value without '='
   8c8fb03f15 docs: fix "docker logs" example missing container name
   c9a03ab5f4 Bash-completion: add CAP_AUDIT_READ
   ffa0e1d36e docs: document CAP_AUDIT_READ
   3d74f7ab48 docs: document optional "CAP_" prefix for capabilities
   0a207d5095 docs: sort list of capabilities alphabetically
   75411a2233 Complete capabilites with and without "CAP_" prefix.
   896eb7123a [19.03] vendor: stop using docker/engine fork for vendoring
   aebe8b0660 [19.03] vendor: buildkit v0.6.4-32-gdf89d4dc
   d6b05747dd [19.03] vendor: tonistiigi/fsutil v0.0.0-20191018213012-0f039a052ca1
   9a65c1c861 docs/build: add note about git subdirectories with BuildKit
   a6c15a5e60 Replace vbom.ml/util with fvbommel/sortorder
   36cdb166dc Bump Golang 1.13.15
   5c5486d910 Replaces ADD with COPY in the COPY section
   9152bf265e docs: remove docs for —-from=index
   e5e227672b Bump Golang 1.13.14

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2020-12-07 23:40:38 -05:00
Bruce Ashfield
35b9016006 docker-ce: update to v19.03.14
Incorporating the following docker-ce commits:

   6cfdb61f0a Bump VERSION to 19.03.14
   d62f3a4335 update containerd binary to v1.3.9 (address CVE-2020-15257)
   223df488a1 update containerd binary to v1.3.8
   f1d658df7c Bump libnetwork
   b42dd308b7 bump up rootlesskit to v0.11.0
   ddd056dcd3 docs: fix builder-version swagger
   406cc5ef47 Replace deprecated instruction
   a48b2a414f dockerd-rootless.sh: support containerd v1.4 shim socket path convention
   de76075442 docs: update 20.03 -> 20.10 in deprecated.md
   d8fa7ac2c1 Also trim "~..." from AppArmor versions
   0a1553c648 pkg/aaparser: support parsing version like "3.0.0-beta1"
   caae6f925a static: add containerd-shim-runc-v2
   94ab0479b0 To allow build for selective distros from top directory. e.g.- for rpm- RHEL_RELEASES= CENTOS_RELEASES= FEDORA_RELEASES=centos-8 make rpm for deb- RASPBIAN_VERSIONS= UBUNTU_VERSIONS= DEBIAN_VERSIONS=ubuntu-xenial make deb
   5b7be532be docs: fix broken links in build reference
   4afdfee131 Fix gcplogs memory/connection leak
   f9159f95b9 docs/deprecated: remove minor versions
   a7d8e5b15e docs: deprecate CLI options for experimental CLI features
   265d2d874b docs: add /go/experimental/ vanity URL
   45fe9c589c docs: fix generated YAML due to trailing whitespace
   d54dee5350 docs: update URL for security landing page
   8b51565ec3 Add test-case for env with, and without =
   4e0e5427b2 builder: add note about alternative syntax
   fb91a7f7e0 builder: rephrase ENV section, remove examples for ENV key value without '='
   4c5ada19a3 docs: fix "docker logs" example missing container name
   5fd841f066 awslogs: Update aws-sdk-go to support IMDSv2
   8ff047ef9d Bash-completion: add CAP_AUDIT_READ
   12b5d3b4cb docs: document CAP_AUDIT_READ
   532ea20102 docs: document optional "CAP_" prefix for capabilities
   a240747846 docs: sort list of capabilities alphabetically
   19498650c3 Bump VERSION to 19.03.13
   da428b1aec Complete capabilites with and without "CAP_" prefix.
   4056693640 [19.03] vendor: stop using docker/engine fork for vendoring
   f6cc6fa133 [19.03] vendor: buildkit v0.6.4-32-gdf89d4dc
   d61bf277b8 [19.03] vendor: tonistiigi/fsutil v0.0.0-20191018213012-0f039a052ca1
   4024535260 [19.03] vendor: buildkit v0.6.4-32-gdf89d4dc
   9a44f43fb9 swagger: fix MemTotal units in SystemInfo endpoint
   a75083ebf0 docs/build: add note about git subdirectories with BuildKit
   112d03e8ea plugins: update buildx to v0.4.2
   ef44b94189 buildx: use v0.4.1
   8a18415110 Bump buildx to master to check if it builds on the CI
   0100e1c0be Replace vbom.ml/util with fvbommel/sortorder
   53c69c574e Bump Golang 1.13.15
   87867aff90 Bump Golang 1.13.15
   76060cc4a0 Bump Golang 1.13.15
   8a905386a1 update containerd to v1.3.7
   0ffc8f1e55 update containerd to v1.3.6
   aff3f55db8 update containerd to v1.3.5
   61f6fac7a1 update containerd to v1.3.4
   c938231789 update containerd binary to v1.3.3
   ba94dd5a0d Update containerd to v1.3.2
   13106ca34e Update containerd to v1.3.1
   c5ad02b467 update containerd binary v1.3.0
   a0edb6a8cb Fix log file rotation test.
   b17b2f05b6 Fix flakey test for log file rotate.
   efe3cf2163 Replaces ADD with COPY in the COPY section
   5a861b676c Check for context error that is wrapped in url.Error
   a438db9875 docs: remove docs for —-from=index
   475484e351 Bump VERSION to 19.03.13-beta2
   3f7bf34392 oci: correctly use user.GetExecUser interface

And the following libnetwork commits:

  90990763 service_linux: Fix null dereference in findLBEndpointSandbox
  8565f0b1 log error instead if disabling IPv6 router advertisement failed

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2020-12-07 23:40:38 -05:00
Bruce Ashfield
43a5cc7f03 docker: add more kernel-module RRECOMMENDS
The kernel RRECOMMENDS, wasn't complete and in some minimal systems
we are missing modules to start dockerd.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2020-10-08 18:36:41 -04:00
Bruce Ashfield
68e4f545a6 docker-moby: update to 19.03 latest
Updating to the latest 19.03 commits:

   88820a4793 Merge pull request #41287 from thaJeztah/19.03_backport_bump_netns
   dae08c333e vendor: vishvananda/netns db3c7e526aae966c4ccfa6c8189b693d6ac5d202
   93cb737687 [19.03] vendor: vishvananda/netns 0a2b9b5464df8343199164a0321edf3313202f7e
   7d597ee2c9 Merge pull request #41273 from thaJeztah/19.03_backport_swagger_fixes
   22c458b67c Merge pull request #41274 from thaJeztah/19.03_backport_Double_RLock
   8b97280f11 Merge pull request #41279 from thaJeztah/19.03_bump_buildkit
   eda52d433e [19.03] vendor: moby/buildkit v0.6.4-28-gda1f4bf1
   168254fcfa Merge pull request #41277 from AkihiroSuda/rootlesskit-0.10.0-1903
   9dc455dffb bump up rootlesskit to v0.10.0
   c200868fa2 Merge pull request #41271 from thaJeztah/19.03_backport_remove_dockerproject_from_tests
   9eade7d03c docs: API v1.39: move system version response to definitions
   4685e9ef72 docs: API v1.40: move system version response to definitions
   d8f22d0307 swagger: move system version response to definitions
   32366de5f9 plugin: fix a double RLock bug
   ad0278f002 docs: API v1.39: fix type for BuildCache CreatedAt and LastUsedAt
   cb8b7a282d docs: API v1.40: fix type for BuildCache CreatedAt and LastUsedAt
   e1ae07b7a0 swagger: fix type for BuildCache CreatedAt and LastUsedAt
   d49278cc17 Merge pull request #41269 from thaJeztah/19.03_update_buildkit
   892c228219 Remove apt.dockerproject.org from test
   a7e309944b Merge pull request #41248 from thaJeztah/19.03_backport_swagger_updates
   765245d54b [19.03] vendor: moby/buildkit v0.6.4-26-ga1e4f48e
   2d4bfdc789 Merge pull request #41081 from thaJeztah/19.03_backport_fix_sandbox_cleanup
   b990b6c2b0 Merge pull request #41235 from thaJeztah/19.03_backport_bump_golang_1.13.14
   4d9397c268 swagger: sync updates to v1.39
   51bd95dc95 swagger: sync updates to v1.40
   d5ba93575c docs: sync API v1.40 swagger formatting with current version
   12b7746a84 docs: sync API v1.39 swagger formatting with current version
   0c6bdf5974 docs: add example calculations to container stats API
   630185b4ae swagger: add DeviceRequests to container create, inspect example
   d7423180e7 swagger: move NetworkingConfig to definitions
   c30ff6885e swagger: reformat, and wrap to ~80-chars
   7005841048 swagger: clarify the meaning of Image field in ContainerInspect endpoint
   1608292c09 Bump Golang 1.13.14
   1763b4e88b Bump Go 1.13.13
   5e8ab898c7 Merge pull request #41222 from thaJeztah/19.03_bump_buildkit
   23d47bd12e [19.03] vendor: moby/buildkit v0.6.4-20-g4cb720ef
   789bd1c67b Merge pull request #41192 from ameyag/19.03-hcsshim-vndr
   0eaa22b95d Merge pull request #41185 from thaJeztah/19.03_bump_buildkit
   9d6053eda2 Revendor hcsshim to fix image import bug
   589b07262c vendor: Microsoft/hcsshim v0.8.9
   e7c2b106ec [19.03] vendor: buildkit dc6afa0f755f6cbb7e85f0df4ff4b87ec280cb32 (v0.6.4-15-gdc6afa0f)
   a40b877fbb Merge pull request #41133 from roidelapluie/bsd2
   7dd9fdcfbe Enable client on netbsd and dragonfly
   9dc6525e61 Merge pull request #41124 from thaJeztah/19.03_bump_libnetwork
   b4ca19a992 vendor: docker/libnetwork 026aabaa659832804b01754aaadd2c0f420c68b6 (bump_19.03 branch)
   ae158b371c allocateNetwork: fix network sandbox not cleaned up on failure

And the following cli changes:

   80fd48bcb Merge pull request #2635 from thaJeztah/19.03_backport_bump_golang_1.13.14
   e5e227672 Bump Golang 1.13.14
   79a6c494e Merge pull request #2633 from thaJeztah/19.03_backport_bump_golang_1.13.13
   5e05ef345 Merge pull request #2631 from cpuguy83/19.03_handle_close_error_on_save
   64d25cc6e Bump Golang 1.13.13
   1b96aa29c Merge pull request #2629 from thaJeztah/19.03_backport_circleci_updates
   aaf117052 Handle errors on close in config file write.
   14010c88b config: preserve ownership and permissions on configfile
   3d64a5d4b Move circle.yml to .circleci/config.yml
   d0b656088 CircleCI: update docker versions used in CI
   b0a78cc1a Merge pull request #2623 from s0j/s0j_19.03_bump-crypto-readconsole
   ab8bd02fc vendor: golang.org/x/crypto 2aa609cf4a9d7d1126360de73b55b6002f9e052a
   18d6f8f6b Merge pull request #2620 from thaJeztah/19.03_backport_builder_comment_info
   7498d9cc4 docs/builder: add note about handling of leading whitespace
   cb59cafc3 Merge pull request #2609 from thaJeztah/19.03_backport_docs_fixes
   541f050e1 Merge pull request #2608 from thaJeztah/19.03_backport_vendor_bumps
   ac7723056 docs: fix example output for docker plugin ls
   9c9ff4369 list state `ready` for filtering in stack_ps.md
   e3b981c18 vendor konsorten/go-windows-terminal-sequences v1.0.3
   ec276f3a6 vendor: mitchellh/mapstructure v1.0.0
   c9125cc39 vendor: beorn7/perks v1.0.1
   0ed913b88 Merge pull request #2592 from thaJeztah/19.03_backport_logout_config_out_of_sync2
   5a12f90b4 Don't filter out registries to logout from with config file contents

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2020-08-17 20:49:34 +00:00
Bruce Ashfield
85b92e0b48 docker-ce: update to tip of 19.03
This update comprises the following commits:

   ff3fbc9d55 Merge pull request #655 from tiborvass/bump_19.03.13-beta2
   475484e351 Bump VERSION to 19.03.13-beta2
   321dc6b4bd Merge component 'engine' from git@github.com:moby/moby 19.03
   9b85caeb7c Merge pull request #41287 from thaJeztah/19.03_backport_bump_netns
   b82e19207e vendor: vishvananda/netns db3c7e526aae966c4ccfa6c8189b693d6ac5d202
   69223588df [19.03] vendor: vishvananda/netns 0a2b9b5464df8343199164a0321edf3313202f7e
   32c58830e3 Merge pull request #654 from tiborvass/bump_19.03.13-beta1
   f2cad45d0a Merge branch '19.03' of github.com:docker/docker-ce into 19.03
   a2fa6c7fb3 Merge component 'engine' from git@github.com:moby/moby 19.03
   1015e8af79 Merge component 'engine' from git@github.com:moby/moby 19.03
   1d7d9d001f Merge pull request #41273 from thaJeztah/19.03_backport_swagger_fixes
   3087b3114f Merge pull request #41274 from thaJeztah/19.03_backport_Double_RLock
   520fc10363 Merge pull request #41279 from thaJeztah/19.03_bump_buildkit
   120511a214 Merge pull request #642 from tiborvass/19.03-switch-to-moby
   a4f55cdbab [19.03] vendor: moby/buildkit v0.6.4-28-gda1f4bf1
   bee145aad2 Merge component 'engine' from git@github.com:docker/engine 19.03
   b768eabf04 Merge component 'engine' from git@github.com:docker/engine 19.03
   4e9725b988 Merge pull request #41277 from AkihiroSuda/rootlesskit-0.10.0-1903
   c13dfa3f39 bump up rootlesskit to v0.10.0
   b714998077 Merge pull request #41271 from thaJeztah/19.03_backport_remove_dockerproject_from_tests
   009eca42ef docs: API v1.39: move system version response to definitions
   4f25b9eed4 docs: API v1.40: move system version response to definitions
   0ea6312f6d swagger: move system version response to definitions
   9f4029e6dc plugin: fix a double RLock bug
   dff89f8092 docs: API v1.39: fix type for BuildCache CreatedAt and LastUsedAt
   95599eb2e6 docs: API v1.40: fix type for BuildCache CreatedAt and LastUsedAt
   81bd78b07a swagger: fix type for BuildCache CreatedAt and LastUsedAt
   d9cb8734cf Merge component 'engine' from git@github.com:docker/engine 19.03
   820098ff18 Merge pull request #41269 from thaJeztah/19.03_update_buildkit
   0994e492c5 Remove apt.dockerproject.org from test
   a49a4f288a Bump VERSION to 19.03.13-beta1
   a89cfd520d Merge component 'engine' from git@github.com:docker/engine 19.03
   dcaed39807 Upstream-commit: a7e309944b3bdefbca4186ce41a8374784133be2 Component: engine
   422fa1b13e [19.03] vendor: moby/buildkit v0.6.4-26-ga1e4f48e
   81dab2018b Merge component 'engine' from git@github.com:docker/engine 19.03
   1490b1df51 Merge pull request #41081 from thaJeztah/19.03_backport_fix_sandbox_cleanup
   c6c4809630 Merge component 'engine' from git@github.com:docker/engine 19.03
   9eea25a62f Merge pull request #41235 from thaJeztah/19.03_backport_bump_golang_1.13.14
   f224762af0 Merge component 'packaging' from git@github.com:docker/docker-ce-packaging 19.03
   0850d19f24 Merge pull request #485 from thaJeztah/19.03_backport_remove_eoan
   5ba0889c4a swagger: sync updates to v1.39
   7d189e5b0b swagger: sync updates to v1.40
   047a3b6ca8 docs: sync API v1.40 swagger formatting with current version
   d5a51018d4 docs: sync API v1.39 swagger formatting with current version
   69aae6c1db docs: add example calculations to container stats API
   bf77a77bab swagger: add DeviceRequests to container create, inspect example
   d43b66d55c swagger: move NetworkingConfig to definitions
   c210a26d28 swagger: reformat, and wrap to ~80-chars
   0d1edc403c swagger: clarify the meaning of Image field in ContainerInspect endpoint
   f3b514426e Merge component 'cli' from git@github.com:docker/cli 19.03
   07d59f4164 Merge pull request #2635 from thaJeztah/19.03_backport_bump_golang_1.13.14
   289eec988f Remove Ubuntu 19.10 "Eoan" (EOL: 2020-07-17)
   eeec8d3ba5 Remove Ubuntu 19.04 "Disco Dingo" (EOL: 2020-01-23)
   02ab061844 Remove Fedora 30 (EOL: 2020-05-26)
   391d22f0e0 Bump Golang 1.13.14
   a033b71571 Bump Go 1.13.13
   03ae74b5b7 Merge component 'packaging' from git@github.com:docker/docker-ce-packaging 19.03
   20042180c1 Bump Golang 1.13.14
   aaf10aa9c6 Merge pull request #482 from thaJeztah/19.03_backport_bump_golang_1.13.14
   fc9fece6e1 Merge component 'packaging' from git@github.com:docker/docker-ce-packaging 19.03
   d552a52dbb Bump Golang 1.13.14
   887f0eb7c6 Merge pull request #479 from thaJeztah/19.03_backport_bump_golang
   8a9e1bdc07 Merge component 'engine' from git@github.com:docker/engine 19.03
   ab25bbca2f Merge component 'cli' from git@github.com:docker/cli 19.03
   f56046026b Merge pull request #2633 from thaJeztah/19.03_backport_bump_golang_1.13.13
   bbdb18fa3a Merge pull request #41222 from thaJeztah/19.03_bump_buildkit
   a48c990d07 Merge component 'cli' from git@github.com:docker/cli 19.03
   e1e647a270 [19.03] vendor: moby/buildkit v0.6.4-20-g4cb720ef
   021a6048e6 Merge pull request #2631 from cpuguy83/19.03_handle_close_error_on_save
   a6c6dce3a6 Bump Golang 1.13.13
   a252aaae7a Merge component 'cli' from git@github.com:docker/cli 19.03
   f19d902423 Merge pull request #2629 from thaJeztah/19.03_backport_circleci_updates
   4e3a5637b4 Handle errors on close in config file write.
   19d2ee3b78 config: preserve ownership and permissions on configfile
   08fd87da44 Move circle.yml to .circleci/config.yml
   45b3865643 CircleCI: update docker versions used in CI
   c6012e45cc Update Golang 1.13.13
   3a19c4a1df Merge component 'engine' from git@github.com:docker/engine 19.03
   b636594b37 Merge pull request #41192 from ameyag/19.03-hcsshim-vndr
   177165b75d Merge component 'engine' from git@github.com:docker/engine 19.03
   d2e020dbd1 Merge component 'cli' from git@github.com:docker/cli 19.03
   d0a4b67aee Merge pull request #41185 from thaJeztah/19.03_bump_buildkit
   d4e6d9b301 Merge pull request #2623 from s0j/s0j_19.03_bump-crypto-readconsole
   06d576d294 Merge component 'cli' from git@github.com:docker/cli 19.03
   80e9882cdf vendor: golang.org/x/crypto 2aa609cf4a9d7d1126360de73b55b6002f9e052a
   e0c24158ad Merge pull request #2620 from thaJeztah/19.03_backport_builder_comment_info
   d7e86d9c77 Revendor hcsshim to fix image import bug
   14ab1c306d vendor: Microsoft/hcsshim v0.8.9
   03a47bb4c5 [19.03] vendor: buildkit dc6afa0f755f6cbb7e85f0df4ff4b87ec280cb32 (v0.6.4-15-gdc6afa0f)
   fd33ebfc36 Merge component 'engine' from git@github.com:docker/engine 19.03
   fb095d16b8 Merge pull request #41133 from roidelapluie/bsd2
   d0a8d03b7b docs/builder: add note about handling of leading whitespace
   b56ef36968 Merge component 'cli' from git@github.com:docker/cli 19.03
   d2a8fe0e12 Merge pull request #2609 from thaJeztah/19.03_backport_docs_fixes
   e453c06e79 Merge pull request #2608 from thaJeztah/19.03_backport_vendor_bumps
   dac7a0fe9a docs: fix example output for docker plugin ls
   8c8b82eeb3 list state `ready` for filtering in stack_ps.md
   055ee582e3 vendor konsorten/go-windows-terminal-sequences v1.0.3
   037e7383ec vendor: mitchellh/mapstructure v1.0.0
   2f446000e0 vendor: beorn7/perks v1.0.1
   8f8179e576 Enable client on netbsd and dragonfly
   5b2eac44f7 allocateNetwork: fix network sandbox not cleaned up on failure
   f620b6de75 components: use moby/moby instead of docker/engine

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2020-08-17 20:44:04 +00:00
Martin Jansa
87b9e054ff docker: move docker.init back to files directory to use it from docker-moby
* it was moved for some reason in:
  http://git.yoctoproject.org/cgit/cgit.cgi/meta-virtualization/commit/?id=929372946aeb85953d1ca6acc428d73fbac52a56

  but docker-moby uses it as well and now started to fail with:
  ERROR: docker-moby-19.03.12+git9dc6525e6118a25fab2be322d1914740ea842495-r0
  do_fetch: Fetcher failure: Unable to find file file://docker.init
  anywhere. ..

Signed-off-by: Martin Jansa <martin.jansa@lge.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2020-07-02 12:09:10 -04:00
Martin Jansa
70d832f37a docker-ce: remove unused docker-registry.service file
Signed-off-by: Martin Jansa <martin.jansa@lge.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2020-07-02 12:09:10 -04:00
Bruce Ashfield
929372946a docker-ce/docker-moby: fixup GO compiler calls
With oe-core commit c23f9e80492e4b [tcmode-default: use go-binary-native
by default], we must explictly call the proper cross go binary, versus
just the go-native variant.

These builds were working by luck, since the go compiler was capable of
building the target binaries previously (in its build-from-source
creation). We fixup the calls and we no longer see fpu build issues:

fatal error: gnu/stubs-soft.h: No such file or directory

    7 | # include <gnu/stubs-soft.h>
      |           ^~~~~~~~~~~~~~~~~~

This commit also moves the docker-ce patches from "files" to a named
directory to reduce confusion.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2020-07-01 12:43:16 -04:00
Bruce Ashfield
9726c5d164 docker/moby: update to v19.03.12
Updating moby to the latest 19.03 release, which comprises the
following commits:

moby:

   b4ca19a992 vendor: docker/libnetwork 026aabaa659832804b01754aaadd2c0f420c68b6 (bump_19.03 branch)
   5fce12cf25 int-cli/TestRunInvalidCPUShares: fix for newer runc
   058ea43c5c Bump Golang 1.13.12
   77e06fda0c vendor libnetwork to 153d0769a1181bf591a9637fd487a541ec7db1e6
   c104a50de4 integration: Add TestDaemonDNSFallback
   9482566a5c vendor libnetwork to 71d4d82a5ce50453b1121d95544f0a2ae95bef9b
   d4e12315cd hack: add more debugging to understand exit codepath
   4c24512241 Dockerfile: bump CRIU 3.14
   29796375c9 Bump Golang 1.13.11
   8f1ab4e612 Fix bug in gotestsum installer causing dependencies to not be downloaded
   0a3b2bda34 pkg/archive: escape ":" symbol in overlay lowerdir
   9057ddf37c dockerd-rootless.sh: bump up slirp4netns requirement to v0.4.0
   a76633684b vendor: update buildkit to a7d7b7f1
   706008a1da bump up rootlesskit to v0.9.5
   57f6c9a0ef SELinux: fix ENOTSUP errors not being detected when relabeling
   7d4dd91a52 logfile: Check if log is closed on close error during rotate
   edf2c49410 vendor: pkg/errors v0.9.1
   63841af153 [19.03] vendor: buildkit v0.6.4-5-g59e305aa
   946d0ff67e bump up rootlesskit to v0.9.4
   70e7d6fe4a Update CRIU to v3.13 "Silicon Willet"
   e4f239d68e [19.03] vendor: swarmkit 0b8364e7d08aa0e972241eb59ae981a67a587a0e
   e149ff62fe vendor: update go-events to fix alignment for 32bit systems
   a6beb24dc5 [19.03] update libnetwork b9bcf0c3fba9ef8897c9676c5b70ba0345b84b17
   282567a58d Bump Golang 1.13.10
   b66813eb45 api docs: fix broken link on GitHub
   9d8eccec8e Fix TEST_FILTER to work for both "integration" and "integration-cli"
   08a2fe0d56 [19.03] vendor buildkit b26cff2413cc6a466f8739262efa13bd126f8fc7
   5ba2bf37a8 Bump Golang 1.13.9
   f432a04243 Update Golang 1.13.8
   81458b3144 Update Golang 1.13.7 (CVE-2020-0601, CVE-2020-7919)
   6e1d159680 Update Golang 1.13.6
   4241093b63 Update Golang 1.13.5
   162fd8b856 Bump Golang 1.13.4
   05a1ebd0fd Bump Golang 1.13.3 (CVE-2019-17596)
   f8d4276a89 bump golang 1.13.1 (CVE-2019-16276)
   7df2d881f3 Bump Golang version 1.13.0
   fed832e224 Update to using alpine 3.10
   4581499848 Switch to s390x Ubuntu 18.04
   f34a5b5af0 builder: fix concurrent map write
   9f5a5da4cb docs: add API versions v1.30 - v1.37
   284bbde996 seccomp: add 64-bit time_t syscalls
   359edd8cbf [19.03] vendor: containerd 481103c8793316c118d9f795cde18060847c370e
   021258661b Update libnetwork and DNS library
   100d240d86 Move schema1 deprecation notice
   57d5105759 bump windows-container-utility aa1ba87e99b68e0113bd27ec26c60b88f9d4ccd9
   68db0c1739 Dockerfile: switch to iptables-legacy to match the host
   4aaf3ead97 Dockerfile: switch golang image to "buster" variant, and update btrfs packages
   a070874828 hack/make: ignore failure to stop apparmor
   237843a059 Dockerfile: align consecutive COPY lines
   400b2850ff Dockerfile: order COPY lines by change frequency
   ddfeaf32ff Dockerfile: sort packages alphabetically
   cb813faebf Dockerfile: use build-arg for vpnkit
   0499db23d1 Dockerfile: use spaces for indentation
   c77e7cb3d0 [19.03] Dockerfile: move CRIU_VERSION lower
   c6511ee4db bump vndr v0.1.1
   0fa8a0c575 bump vndr v0.1.0 to support versioned import paths
   f3009e2f51 Use build args to override binary commits in dockerfile
   92ca652fc9 Revert "dockerfile: update vndr to 85886e1a"
   fdad16840c go-swagger: fix panic
   075e057de5 Dockerfile: set GO111MODULE=off
   fe2a25a785 fix backingFs assignment
   e6c9e2736f Fix rate limiting for logger, increase refill rate
   911ecc3376 Set the bip network value as the subnet
   08420b1c95 AppArmor: add missing rules for running in userns
   fbb08f525f AppArmor: remove rules for linkgraph.db SQLite database
   1a830501b7 Use FILE_SHARE_DELETE for log files on Windows.
   dcae74c44a Fix docker crash when creating namespaces with UID in /etc/subuid and /etc/subgid
   4076c57b50 Fix more signal handling issues in tests.
   68e1150357 DaemonCli: Move check into startMetricsServer
   b813c398bb Add `FromClient` to test env execution

libnetwork

   8565f0b1 log error instead if disabling IPv6 router advertisement failed
   153d0769 bridge: disable IPv6 router advertisements
   fdaaa027 Resolver: fix error handling if we didn't receive a response
   b09f24d1 Fix NPE due to null value returned by ep.Iface()
   8068671f Fixes a panic in the DNS resolver
   536ae722 Dockerfile: update to Go 1.13.8
   dcd95280 Fix gofmt in preparation of Go 1.13 update
   f0b038ea regenerate protobufs with debian buster
   34c8de58 Dockerfile: switch to debian "buster"
   96600117 Dockerfile: update to Golang 1.12.17

libcli

   5a12f90b4 Don't filter out registries to logout from with config file contents
   6cb678f16 vendor: golang.org/x/text v0.3.3
   4515c5187 vendor: golang.org/x/text v0.3.2
   cfa1fd9ac Don't loose additional metadata fields
   31d338dd3 Bump Golang 1.13.12
   936d328da Use consistent name for errors
   2ee798198 ssh: avoid setting flags through hostname
   e90b6bcb6 Fix bug with panic when DOCKER_CLI_EXPERIMENTAL environment variable is incorrect
   97afb7295 docs/extend: fix broken link and some markdown touch-ups
   c280cdfd6 docs: fix broken link in dockerd.md
   0f59532a1 Run e2e tests with different engine version on Jenkins Rewrite Jenkinsfile to new declarative syntax without parallel as the e2e framework is not tailored for than (container name clash, port clash,...)
   95df3499b Add a new Makefile variable to override DockerInDocker engine version we use to run e2e tests
   2d1476c6f Partially revert cf663b526a34f3e7911e6e60138138c2023aa844 as it breaks the version negotiation with an older docker engine.
   936e9717e Bump Golang 1.13.11
   489c7e9cd docs: more Markdown touch-ups
   9a57ea886 Update some uses of errors.Cause() to errors.Is()
   345b0e79e vendor: pkg/errors v0.9.1
   62a9babca vendor: k8s.io/klog v1.0.0-2-g4ad0115
   dbc73eafc docs: fix, and touch-up "docker context" docs
   e06fc01c1 Update dead link and add missing info on COPY
   8434242c7 config: don't call homedir on init()
   65c37227a docs: update usage output for dockerd (19.03)
   55a5ab0f0 docs: fix order of flags in usage, and fix missing quote
   c150ba2b8 builder: fix broken link
   81909d70f docs: fix links, and minor markdown touch-ups
   cf663b526 cli: perform feature detection lazily
   c44c18e08 docker build: check experimental --platform on pre-run
   25f04876d app-214 Load Client info in getter function
   4ad65fc35 fix panic on single-character volumes
   83d4cb900 vendor: bump gopkg.in/yaml.v2 v2.2.8
   0cfe29431 service update: fix service create example
   2dc593f67 Add container_iface_prefix option to documentation
   4fe6b837b bump gotest.tools v3.0.1 for compatibility with Go 1.14
   a8454a4d9 update vndr v0.1.1
   950dcedd9 bump vndr v0.1.0 to support versioned import paths
   0d26cbf5b yamldocs: add description to base command
   d4e4fa3b4 experimental/vlan-networks: markdown touch-ups
   de12dbfb1 docs/reference: explain "colon"
   7ae77e51f docs/extend: reformat notes
   733ae82da docs/builder: touch up markdown, and some minor rephrasing
   9a1ba7d39 docs/reference/run.md: touch-up markdown
   6ba9a3e4c reference docs: reformat notes
   96eb0888f reference docs: fix broken links and markdown touch-ups
   2676c603f Adding missing title in builder.md
   365bae4f8 Add clarification when using USER UID:GI
   c38b26007 improve "network prune" output to mention custom networks only
   fd9eedce3 Add "host-gateway" to tests for extra_hosts / --add-host
   365118982 Skip IPAddr validation for "host-gateway" string
   a0f0ed1f5 vendor: update go-events to fix alignment for 32bit systems
   de6a5fa44 Bump Golang 1.13.10
   19ccd4f5d CI: update notary test certificates
   f8fc68f17 Bump Golang 1.13.9
   22cbf9161 Update deprecation policy to 1 stable release
   288cdec29 Include deprecation policy on deprecated features page
   ffffc1ed4 remove unneeded comment from reference files
   9fd323afd Fix whitespace that caused short-format in generated YAML
   c936ea969 Fix yamldocs generator to accomodate nested subcommands
   d484456c2 Fix naming of reference docs files
   6a02465f4 docs: update code-hints for compatibility with "rouge"
   6e07d210a Update Golang 1.13.8

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2020-07-01 12:43:16 -04:00