github/containerd
4
0
Fork 0
Code Issues Pull Requests Packages Projects Releases 2 Wiki Activity
9,214 Commits 3 Branches 4 Tags
09d78bb6b9e8b173f44f5ba3abaee0de416b0ee0
Commit Graph

582 Commits

Author SHA1 Message Date
Sebastiaan van Stijn
cb4a8f51a6 bump runc v1.0.0-rc8-32-gf4982d86 
full diff: https://github.com/opencontainers/runc/compare/v1.0.0-rc8...f4982d86f7fde0b6f953cc62ccc4022c519a10a9

possibly relevant changes included:

- opencontainers/runc#2074 Update dependency libseccomp-golang
  - fixes https://nvd.nist.gov/vuln/detail/CVE-2017-18367
- opencontainers/runc#2065 Fix cgroup hugetlb size prefix for kB
- opencontainers/runc#2042 libcontainer: intelrdt: add missing destroy handler in defer func
- opencontainers/runc#2042 main: not reopen /dev/stderr
- opencontainers/runc#2038 `r.destroy` can defer exec in `runner.run` method
- opencontainers/runc#2035 specconv: always set "type: bind" in case of MS_BIND
- opencontainers/runc#2035 Move systemd.Manager initialization into a function in that module
- opencontainers/runc#2034 Support for logging from children processes

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-06-25 13:03:23 +02:00
Sebastiaan van Stijn
bb41ef87f1 bump libseccomp-golang v0.9.1 
full diff: 32f571b700...689e3c1541

Release notes:

* Version 0.9.1 - May 21, 2019
- Minimum supported version of libseccomp bumped to v2.2.0 (fc0298087f)
- PowerPC and S390(x) architectures are unavailable below library version v2.3.0 and will return errors if used with incompatible libraries
- Use Libseccomp's `seccomp_version` API to retrieve library version
- Unconditionally set TSync attribute for filters, due to Go's heavily threaded nature
- Fix [CVE-2017-18367](https://nvd.nist.gov/vuln/detail/CVE-2017-18367) - Multiple syscall arguments were incorrectly combined with logical-OR, instead of logical-AND (06e7a29f36)
- Fix a failure to build on Debian-based distributions due to CGo code
- Fix unit test failures on 32-bit architectures
- Improve several errors to be more verbose about their causes
- Add support for SCMP_ACT_LOG (with libseccomp versions 2.4.x and higher), permitting syscalls but logging their execution
- Add support for SCMP_FLTATR_CTL_LOG (with libseccomp versions 2.4.x and higher), logging not-allowed actions when they are denied

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-06-25 10:57:58 +02:00
Odin Ugedal
341c7c144f Update dependency containerd/cgroups 
Signed-off-by: Odin Ugedal <odin@ugedal.com>
 2019-06-19 21:19:00 +02:00
Michael Crosby
0b7abc02b2 ttrpc updates for interceptors, close, and metadata 
Signed-off-by: Michael Crosby <crosbymichael@gmail.com>
 2019-06-13 19:09:07 +00:00
CarlosEDP
fb6b0ae4c6 Update x/sys, x/net and bbolt modules to support Risc-V 
Signed-off-by: CarlosEDP <me@carlosedp.com>
 2019-06-07 17:54:32 -03:00
Michael Crosby
42f24b57e4 Update ttrpc to a5bd8ce9e40bc7c065a11c6936f4d032ce 
Signed-off-by: Michael Crosby <crosbymichael@gmail.com>
 2019-06-04 15:14:06 +00:00
Derek McGowan
25daa7355c Merge pull request #3192 from thaJeztah/bump_grpc_1.19.1 
bump google.golang.org/grpc v1.20.1
 2019-05-22 11:58:52 -07:00
Georgi Sabev
a6a888cb5e Bump ttrpc 
Co-authored-by: Giuseppe Capizzi <gcapizzi@pivotal.io>
Signed-off-by: Georgi Sabev <georgethebeatle@gmail.com>
 2019-05-13 16:21:04 +01:00
Sebastiaan van Stijn
2ed8e60fa1 bump google.golang.org/grpc v1.20.1 
full diff: https://github.com/grpc/grpc-go/compare/v1.12.2...v1.20.1

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-05-05 12:39:23 -07:00
Sebastiaan van Stijn
d1c59513d8 bump google.golang.org/grpc v1.12.2 
full diff: https://github.com/grpc/grpc-go/compare/v1.12.0...v1.12.2

- grpc/grpc-go#2074 transport/server: fix race between writing status and header
  - fix grpc/grpc-go#1972 Possible race sending headers from server while receiving message over size limit
- grpc/grpc-go#2074 transport: account for user configured small io write buffer
  - fix grpc/grpc-go#2089 Server abruptly terminates connections if write buffer is small enough

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-05-05 12:38:25 -07:00
Michael Crosby
bf5a424679 Merge pull request #3246 from thaJeztah/bump_ttrpc 
bump containerd/ttrpc 699c4e40d1e7416e08bf7019c7ce2e9beced4636
 2019-04-29 17:32:19 -04:00
Derek McGowan
a6cd37e5c2 Merge pull request #3243 from Random-Liu/update-cri 
Update cri to 2fc62db814.
 2019-04-29 11:31:19 -07:00
msg555
c7f067f278 Update vendor/ with new required vndr go.mod files 
Signed-off-by: msg555 <msg555@gmail.com>
 2019-04-28 18:20:43 -04:00
Sebastiaan van Stijn
8c5779c32b bump containerd/ttrpc 699c4e40d1e7416e08bf7019c7ce2e9beced4636 
full diff: f02858b145...699c4e40d1

- containerd/ttrpc#33 Fix returns error message
- containerd/ttrpc#35 Make onclose an option

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-04-27 15:30:18 -07:00
Lantao Liu
5d17ed2302 Update cri to 2fc62db814. 
Signed-off-by: Lantao Liu <lantaol@google.com>
 2019-04-26 10:54:51 -07:00
Sebastiaan van Stijn
e5aab17a0e bump opencontainers/selinux v1.2.2 
full diff: https://github.com/opencontainers/selinux/compare/v1.2.1...v1.2.2

- opencontainers/selinux#51 Older kernels do not support keyring labeling

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-04-25 22:43:05 -07:00
Sebastiaan van Stijn
dd85aea625 bump runc v1.0.0-rc8 
full diff: 029124da7a...425e105d5a

- opencontainers/runc#2043 Vendor in latest selinux code for keycreate errors

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-04-25 22:42:50 -07:00
Sebastiaan van Stijn
c79c7921c0 bump docker/go-units v0.4.0 
relevant changes:

- docker/go-units#19 make 1 second not to be plural seconds
- docker/go-units#20 Add `HumanSizeWithPrecision` function
- docker/go-units#21 change week display rule
- docker/go-units#22 Better human duration precision
- docker/go-units#23 Removes spaces before unit
- docker/go-units#27 Fix #26 - RAMInBytes Bug
- docker/go-units#33 Fix handling of unlimited (-1) ulimit values
- docker/go-units#34 Revert 46 minute threshold

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-04-23 17:07:58 +02:00
Michael Crosby
a91e04356d Merge pull request #3223 from thaJeztah/bump_gocapability 
Bump syndtr/gocapability d983527, containerd/console
 2019-04-18 15:26:34 -04:00
Sebastiaan van Stijn
06a3a480cc bump containerd/console 0650fd9eeb50bab4fc99dceb9f2e14cf58f36e7f 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-04-18 19:45:38 +02:00
Sebastiaan van Stijn
a333dbcfb4 Update x/crypto to 88737f569e3a9c7ab309cdc09a07fe7fc87233c3 
full diff: 49796115aa...88737f569e

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-04-18 19:01:11 +02:00
Sebastiaan van Stijn
0fd02564a2 bump gocapability 
full diff: db04d3cc01...d98352740c

changes included:

  - syndtr/gocapability#14 capability: Deprecate NewPid and NewFile for NewPid2 and NewFile2
  - syndtr/gocapability#16 Fix capHeader.pid type

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-04-18 19:00:27 +02:00
John Howard
cc73dc3dbd Merge pull request #3217 from kevpar/etw-capture-state 
Enable dumping Goroutine stacks via ETW capture state
 2019-04-15 14:19:46 -07:00
Kevin Parsons
05dd66b2e6 Update go-winio in vendor.conf 
Signed-off-by: Kevin Parsons <kevpar@microsoft.com>
 2019-04-15 13:34:57 -07:00
Sebastiaan van Stijn
c9059c7673 bump mistifyio/go-zfs f784269be439d704d3dfa1906f45dd848fed2beb 
- mistifyio/go-zfs#72 Switch to google/uuid
  - removes the github.com/pborman/uuid dependency

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-04-14 13:31:22 +02:00
Sebastiaan van Stijn
2583d9e426 update gogo/googleapis v1.2.0 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-04-05 14:55:19 +02:00
Sebastiaan van Stijn
a98df70da1 update containerd/btrfs af5082808c833de0e79c1e72eea9fea239364877 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-04-05 14:55:16 +02:00
Sebastiaan van Stijn
aa8dccd220 update containerd/aufs f894a800659b6e11c1a13084abd1712f346e349c 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-04-05 14:55:13 +02:00
Sebastiaan van Stijn
ed61d7f680 bump containerd/zfs and dependencies 
temporarily adds both pborman/uuid and google/uuid,
pending mistifyio/go-zfs#72

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-04-05 14:55:10 +02:00
Sebastiaan van Stijn
d667628ca9 bump github.com/pkg/errors v0.8.1 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-04-05 14:55:08 +02:00
Sebastiaan van Stijn
1978c0b74b bump gotest.tools v2.3.0, google/go-cmp v0.2.0 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-04-05 14:55:02 +02:00
Lantao Liu
a733587496 Update cri to 6d353571e6. 
Signed-off-by: Lantao Liu <lantaol@google.com>
 2019-04-04 14:02:08 -07:00
Derek McGowan
4edc7336a2 Merge pull request #3169 from crosbymichael/runcbump 
Update runc to resolve selinux issues
 2019-04-04 10:38:57 -07:00
Michael Crosby
9bc231532d Merge pull request #3109 from bainsy88/issue_3076 
Add code to return errors from registries
 2019-04-04 13:23:37 -04:00
Michael Crosby
abfc89ce02 Update CRI to master 
Signed-off-by: Michael Crosby <crosbymichael@gmail.com>
 2019-04-04 10:43:40 -04:00
Michael Crosby
4730088cb5 Update runc to resolve selinux issues 
Signed-off-by: Michael Crosby <crosbymichael@gmail.com>
 2019-04-04 10:36:04 -04:00
Sebastiaan van Stijn
830b0294cc Update protobuf v1.2.0 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-04-03 23:27:16 +02:00
Sebastiaan van Stijn
7c1365b468 bump sirupsen/logrus v1.4.1 
Full diff: https://github.com/sirupsen/logrus/compare/v1.3.0...v1.4.1

Fixes:

- Remove dependency on golang.org/x/crypto
- Fix wrong method calls Logger.Print and Logger.Warningln
- Update Entry.Logf to not do string formatting unless the log level is enabled
- Fix infinite recursion on unknown Level.String()
- Fix race condition in getCaller
- Fix Entry.WithContext method to return a copy of the initial entry

New:

- Add DeferExitHandler, similar to RegisterExitHandler but prepending the handler to the list of handlers (semantically like defer)
- Add CallerPrettyfier to JSONFormatter and `TextFormatter`
- Add Entry.WithContext() and Entry.Context, to set a context on entries to be used e.g. in hooks
- Enhance TextFormatter to not print caller information when they are empty

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-04-03 22:23:53 +02:00
Akihiro Suda
3a80a801af Merge pull request #3139 from thaJeztah/bump_runc_v1.0.0-rc7 
update opencontainers/runc v1.0.0-rc7
 2019-03-29 12:32:50 +09:00
Sebastiaan van Stijn
2b8df8309e bump containerd/cgroups 4994991857f9b0ae8dc439551e8bebdbb4bf66c1 
full diff: dbea6f2bd4...4994991857

brings in https://github.com/containerd/cgroups/pull/79 Return ErrCgroupDeleted when no subsystems
fixes https://github.com/containerd/containerd/issues/3133 Custom cgroup path does not work in containerd 1.2.5

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-03-28 23:36:36 +01:00
Sebastiaan van Stijn
bc6ac08784 update opencontainers/runc v1.0.0-rc7 
full diff: 2b18fe1d88...v1.0.0-rc7

changes included:

- opencontainers/runc#2012 Need to setup labeling of kernel keyrings
- opencontainers/runc#2014 Add $RUNC_USE_SYSTEMD to run tests using systemd cgroup driver
- opencontainers/runc#2015 Use getenv not secure_getenv
  - fixes opencontainers/runc#2013 build fails with musl libc
- opencontainers/runc#2023 Fixes regression causing zombie runc:[1:CHILD] processes

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-03-28 21:42:17 +01:00
John Howard
e16e995939 Vendor Microsoft/hcsshim@8abdbb82 
Signed-off-by: John Howard <jhoward@microsoft.com>
 2019-03-25 11:11:37 -07:00
Justin Terry (VM)
4c9b5ef8ea Update vendor github.com/Microsoft/go-winio 
Signed-off-by: Justin Terry (VM) <juterry@microsoft.com>
 2019-03-21 14:12:41 -07:00
Jack Baines
908b771086 Add code to return message field of returned registry errors 
Docker registries return errors in a know format so this change now checks for these
errors and returns the message field. If the error is not in the expected format fall
back to the original behaviour.

https://github.com/containerd/containerd/issues/3076

Signed-off-by: Jack Baines <jack.baines@uk.ibm.com>
 2019-03-19 21:05:36 +00:00
Sebastiaan van Stijn
b8d40b3535 update runc to 2b18fe1d885ee5083ef9f0838fee39b62d653e30 
This includes an improved fix for CVE-2019-5736 to reduce the
increased memory-consumption introduced by the original patch,
RHEL 7.6 getting into a loop due to a kernel bug in those kernels,
and improve compatibility with older kernels.

changes included:

- opencontainers/runc#1973 Vendor opencontainers/runtime-spec 29686dbc
- opencontainers/runc#1978 Remove detection for scope properties, which have always been broken
- opencontainers/runc#1963 Vendor in go-criu and use it for CRIU's RPC definition
- opencontainers/runc#1995 exec: expose --preserve-fds
- opencontainers/runc#2000 fix preserve-fds flag may cause runc hang
- opencontainers/runc#1968 Create bind mount mountpoints during restore
- opencontainers/runc#1984 nsenter: cloned_binary: "memfd" cleanups

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-03-07 21:30:26 +01:00
Derek McGowan
aa328dfc55 Merge pull request #3041 from thaJeztah/bump_da_bolt 
Update go.etcd.io/bbolt to v1.3.2
 2019-03-07 09:28:26 -08:00
Shengjing Zhu
1745951bad Vendor golang.org/x/sys d455e41777fca6e8a5a79e34a14b8368bc11d9ba 
Signed-off-by: Shengjing Zhu <zhsj@debian.org>
 2019-03-03 21:35:46 +08:00
Michael Crosby
d2bec5422a Bump cgroups to dbea6f2bd41658b84b00417ceefa416b97 
This fixes issues for systemd 420 and non-existant cgroups.

Signed-off-by: Michael Crosby <crosbymichael@gmail.com>
 2019-02-26 15:48:10 -05:00
John Howard
d83e4e9b3b Vendor Microsoft/go-winio@v0.4.12 
Signed-off-by: John Howard <jhoward@microsoft.com>
 2019-02-21 14:16:51 -08:00
Sebastiaan van Stijn
cbc032ed34 Update go.etcd.io/bbolt to v1.3.2 
Relevant changes:

- ectd-io/bbolt#139 update the freelist readIDs
- etcd-io/bbolt#140 add getFreePageIDs
- etcd-io/bbolt#141 use segregated hashmap to boost the freelist allocate and release performance

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-02-21 22:02:08 +01:00