Commit Graph

14512 Commits

Author SHA1 Message Date
Derek McGowan
73f57acb0d Update differ to handle zstd media types
The differ should be able to generate zstd compressed layers when
provided with the zstd media type.

Signed-off-by: Derek McGowan <derek@mcg.dev>
2024-11-27 16:35:58 +00:00
Derek McGowan
b4cab35e2b
Merge pull request #11053 from djdongjin/rocky-ci-fix-2.0
[release/2.0] Move rockylinux 9.4 to almalinux/9 in CI
2024-11-25 06:11:04 -08:00
Jin Dong
7dec6b4607 move rocky 9.4 to almalinux/9 in CI
Signed-off-by: Jin Dong <djdongjin95@gmail.com>
(cherry picked from commit 288001f68c5fd34cfbdc7284f14375a3762b8ff4)
Signed-off-by: Jin Dong <djdongjin95@gmail.com>
2024-11-25 13:16:08 +00:00
Fu Wei
952ad6b3a6
Merge pull request #11035 from k8s-infra-cherrypick-robot/cherry-pick-10906-to-release/2.0
[release/2.0] *: should align pipe's owner with init process
2024-11-20 15:46:56 -08:00
Wei Fu
cf07f28ee2 *: should align pipe's owner with init process
The containerd-shim creates pipes and passes them to the init container as
stdin, stdout, and stderr for logging purposes. By default, these pipes are
owned by the root user (UID/GID: 0/0). The init container can access them
directly through inheritance.

However, if the init container attempts to open any files pointing to these
pipes (e.g., /proc/1/fd/2, /dev/stderr), it will encounter a permission issue
since it is not the owner. To avoid this, we need to align the ownership of
the pipes with the init process.

Fixes: #10598

Signed-off-by: Wei Fu <fuweid89@gmail.com>
2024-11-20 18:01:26 +00:00
Derek McGowan
6e51f71621
Merge pull request #11031 from k8s-infra-cherrypick-robot/cherry-pick-10917-to-release/2.0
[release/2.0] fix: set the credentials even if not provided
2024-11-19 15:52:59 -08:00
Andrey Smirnov
9860888666 fix: set the credentials even if not provided
Fixes #10916

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2024-11-19 22:36:50 +00:00
Fu Wei
78795fa068
Merge pull request #10978 from austinvazquez/cherry-pick-pr-10972-to-2.0
[release/2.0] fsverity_test.go: fix nil pointer derefence, fix test fail, fix minor/major device numbers resolving
2024-11-19 10:43:47 -08:00
Akihiro Suda
376eb1d154
Merge pull request #11023 from austinvazquez/cherry-pick-runc-1.2.2-to-2.0
[release/2.0] update runc binary to 1.2.2
2024-11-19 14:32:26 +09:00
Austin Vazquez
9081e979f7
update runc binary to 1.2.2
Signed-off-by: Austin Vazquez <macedonv@amazon.com>
(cherry picked from commit 9a7bc5423ef5f477705802e45c0b06869764caca)
Signed-off-by: Austin Vazquez <macedonv@amazon.com>
2024-11-18 17:59:03 +00:00
Samuel Karp
30cbb03d49
Merge pull request #11009 from k8s-infra-cherrypick-robot/cherry-pick-11004-to-release/2.0
[release/2.0] Revert "Disable vagrant strict dependency checking"
2024-11-14 20:34:13 -08:00
Akhil Mohan
6399c936fa Revert "Disable vagrant strict dependency checking"
This reverts commit ae73e30130.

Signed-off-by: Akhil Mohan <akhilerm@gmail.com>
2024-11-15 03:41:44 +00:00
Fu Wei
da51d8ffd3
Merge pull request #11005 from k8s-infra-cherrypick-robot/cherry-pick-10981-to-release/2.0
[release/2.0] fsverity_linux.go: Fix fsverity.IsEnabled() for big endian systems
2024-11-14 15:48:50 -08:00
Alexey Lunev
a7f2b562f3 fsverity_linux.go: Fix fsverity.IsEnabled() for big endian systems
Signed-off-by: Alexey Lunev <cheembox573@gmail.com>
2024-11-14 17:34:00 +00:00
Phil Estes
abd8c4c39f
Merge pull request #10997 from dmcgowan/backport-2.0-typeurl
[release/2.0] bump github.com/containerd/typeurl/v2 from 2.2.2 to 2.2.3
2024-11-12 15:29:20 -07:00
dependabot[bot]
389e781ea1
build(deps): bump github.com/containerd/typeurl/v2 from 2.2.2 to 2.2.3
Bumps [github.com/containerd/typeurl/v2](https://github.com/containerd/typeurl) from 2.2.2 to 2.2.3.
- [Release notes](https://github.com/containerd/typeurl/releases)
- [Commits](https://github.com/containerd/typeurl/compare/v2.2.2...v2.2.3)

Signed-off-by: Derek McGowan <derek@mcg.dev>

---
updated-dependencies:
- dependency-name: github.com/containerd/typeurl/v2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
(cherry picked from commit 01c489141c37e27b71370ab26ab28347b17f4284)
Signed-off-by: Derek McGowan <derek@mcg.dev>
2024-11-12 13:18:55 -08:00
Alexey Lunev
30b929ece7
fsverity_test.go: fix major/minor device number resolving
Signed-off-by: Alexey Lunev <cheembox573@gmail.com>
(cherry picked from commit f9537ae126fc2be685cc32d5c98b4189a72e02e9)
Signed-off-by: Austin Vazquez <macedonv@amazon.com>
2024-11-09 10:27:46 -08:00
Alexey Lunev
10996a334b
fsverity_test.go: fix nil pointer dereference, fix test fail
Signed-off-by: Alexey Lunev <cheembox573@gmail.com>
(cherry picked from commit 8a8e50e6d7baf99ebe02e6ca04d9d842addcd36c)
Signed-off-by: Austin Vazquez <macedonv@amazon.com>
2024-11-09 10:27:26 -08:00
Maksym Pavlenko
e21cb92182
Merge pull request #10973 from k8s-infra-cherrypick-robot/cherry-pick-10970-to-release/2.0
[release/2.0] update to go1.23.3 / go1.22.9
2024-11-08 09:50:45 -08:00
Akhil Mohan
5b879f30c0 update to go1.23.3 / go1.22.9
- go1.23.3 (released 2024-11-06) includes fixes to the linker, the
runtime, and the net/http, os, and syscall packages. See the
Go 1.23.3 milestone on our issue tracker for details.

- go1.22.9 (released 2024-11-06) includes fixes to the linker. See
the Go 1.22.9 milestone on our issue tracker for details

Signed-off-by: Akhil Mohan <akhilerm@gmail.com>
2024-11-08 09:04:33 +00:00
Maksym Pavlenko
aedb61c92a
Merge pull request #10963 from austinvazquez/enable-latest-release-on-2.0
[release/2.0] ci: enable marking 2.0 releases as latest
2024-11-07 15:46:34 -08:00
Mike Brown
124b718018
Merge pull request #10968 from dims/Avoid-arch-info-in-the-sed/replace-when-building-cri-cni-containerd.tar.gz-2.0
[release/2.0] Avoid arch info in the sed/replace when building cri-cni-containerd.tar.gz
2024-11-07 13:39:43 -06:00
Davanum Srinivas
e99c2b55c3
Avoid arch info in the sed/replace when building cri-cni-containerd.tar.gz
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2024-11-07 11:36:03 -05:00
Austin Vazquez
458215f6cf
ci: enable marking 2.0 releases as latest
Signed-off-by: Austin Vazquez <macedonv@amazon.com>
2024-11-07 15:09:45 +00:00
Derek McGowan
207ad711ea
Merge pull request #10939 from dmcgowan/prepare-v2.0.0
Prepare release notes for v2.0.0
2024-11-05 18:34:06 +00:00
Derek McGowan
03ba4ce1f7
Update release notes for v2.0.0
Signed-off-by: Derek McGowan <derek@mcg.dev>
2024-11-04 23:56:27 -08:00
Derek McGowan
f2da3fd688
Update release docs for v2.0.0
Signed-off-by: Derek McGowan <derek@mcg.dev>
2024-11-04 23:56:27 -08:00
Samuel Karp
6369206870
Merge pull request #10954 from dmcgowan/update-typeurl-2.2.2
Update typeurl to v2.2.2
2024-11-05 07:10:43 +00:00
Derek McGowan
ff09b428e1
Update typeurl to v2.2.2
Fixes panic when typeurl is not found

Signed-off-by: Derek McGowan <derek@mcg.dev>
2024-11-04 22:29:24 -08:00
Derek McGowan
18caa33fdc
Merge pull request #10944 from containerd/dependabot/github_actions/softprops/action-gh-release-2.0.9
build(deps): bump softprops/action-gh-release from 2.0.8 to 2.0.9
2024-11-04 21:12:32 -08:00
Derek McGowan
545605d5b4
Merge pull request #10945 from containerd/dependabot/github_actions/google-github-actions/auth-2.1.7
build(deps): bump google-github-actions/auth from 2.1.6 to 2.1.7
2024-11-04 21:12:07 -08:00
Derek McGowan
71c274bb81
Merge pull request #10947 from containerd/dependabot/go_modules/github.com/containerd/nri-0.8.0
build(deps): bump github.com/containerd/nri from 0.7.0 to 0.8.0
2024-11-04 20:35:15 -08:00
Derek McGowan
e841240997
Merge pull request #10946 from containerd/dependabot/go_modules/github.com/containerd/typeurl/v2-2.2.1
build(deps): bump github.com/containerd/typeurl/v2 from 2.2.0 to 2.2.1
2024-11-04 20:34:10 -08:00
Derek McGowan
9fe6f7c067
Merge pull request #10943 from containerd/dependabot/github_actions/google-github-actions/upload-cloud-storage-2.2.1
build(deps): bump google-github-actions/upload-cloud-storage from 2.2.0 to 2.2.1
2024-11-05 03:20:17 +00:00
dependabot[bot]
a43e7c1e2c
build(deps): bump softprops/action-gh-release from 2.0.8 to 2.0.9
Bumps [softprops/action-gh-release](https://github.com/softprops/action-gh-release) from 2.0.8 to 2.0.9.
- [Release notes](https://github.com/softprops/action-gh-release/releases)
- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md)
- [Commits](c062e08bd5...e7a8f85e1c)

---
updated-dependencies:
- dependency-name: softprops/action-gh-release
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-11-05 03:20:13 +00:00
Akihiro Suda
3b976a156c
Merge pull request #10951 from AkihiroSuda/k8s-0.31.2
go.mod: k8s.io/* v0.31.2
2024-11-05 03:17:22 +00:00
dependabot[bot]
edf367cabd
build(deps): bump github.com/containerd/nri from 0.7.0 to 0.8.0
Bumps [github.com/containerd/nri](https://github.com/containerd/nri) from 0.7.0 to 0.8.0.
- [Release notes](https://github.com/containerd/nri/releases)
- [Changelog](https://github.com/containerd/nri/blob/main/RELEASES.md)
- [Commits](https://github.com/containerd/nri/compare/v0.7.0...v0.8.0)

---
updated-dependencies:
- dependency-name: github.com/containerd/nri
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-11-05 03:07:56 +00:00
dependabot[bot]
21f636751a
build(deps): bump github.com/containerd/typeurl/v2 from 2.2.0 to 2.2.1
Bumps [github.com/containerd/typeurl/v2](https://github.com/containerd/typeurl) from 2.2.0 to 2.2.1.
- [Release notes](https://github.com/containerd/typeurl/releases)
- [Commits](https://github.com/containerd/typeurl/compare/v2.2.0...v2.2.1)

---
updated-dependencies:
- dependency-name: github.com/containerd/typeurl/v2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-11-05 03:07:51 +00:00
Derek McGowan
37922afa33
Merge pull request #10942 from dmcgowan/update-platforms-v1-rc
Update platforms to v1.0.0-rc.0
2024-11-04 19:06:49 -08:00
dependabot[bot]
1edc2147fa
build(deps): bump google-github-actions/auth from 2.1.6 to 2.1.7
Bumps [google-github-actions/auth](https://github.com/google-github-actions/auth) from 2.1.6 to 2.1.7.
- [Release notes](https://github.com/google-github-actions/auth/releases)
- [Changelog](https://github.com/google-github-actions/auth/blob/main/CHANGELOG.md)
- [Commits](8254fb75a3...6fc4af4b14)

---
updated-dependencies:
- dependency-name: google-github-actions/auth
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-11-05 01:26:56 +00:00
Akihiro Suda
2d8fec45a4
go.mod: k8s.io/* v0.31.2
No code change.

k8s.io/cri-api was accidentally updated to a non-stable version
v0.32.0-alpha.0 in PR 10552.

Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
2024-11-05 10:06:10 +09:00
dependabot[bot]
bef201fe6b
build(deps): bump google-github-actions/upload-cloud-storage
Bumps [google-github-actions/upload-cloud-storage](https://github.com/google-github-actions/upload-cloud-storage) from 2.2.0 to 2.2.1.
- [Release notes](https://github.com/google-github-actions/upload-cloud-storage/releases)
- [Changelog](https://github.com/google-github-actions/upload-cloud-storage/blob/main/CHANGELOG.md)
- [Commits](e485962f2b...386ab77f37)

---
updated-dependencies:
- dependency-name: google-github-actions/upload-cloud-storage
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-11-05 00:55:30 +00:00
Derek McGowan
bd10a60965
Update platforms to v1.0.0-rc.0
Signed-off-by: Derek McGowan <derek@mcg.dev>
2024-11-04 16:51:16 -08:00
Derek McGowan
c4f797eaba
Merge pull request #10950 from dmcgowan/vagrant-fix-dep-failure
Disable vagrant strict dependency checking
2024-11-04 16:50:17 -08:00
Derek McGowan
ae73e30130
Disable vagrant strict dependency checking
Fixes broken vagrant builds

Signed-off-by: Derek McGowan <derek@mcg.dev>
2024-11-04 16:18:51 -08:00
Phil Estes
255d2a54d7
Merge pull request #10938 from dmcgowan/update-api-v1.8.0
Update containerd API to v1.8.0 release
2024-11-04 16:59:32 +00:00
Derek McGowan
33677d56dd
Update containerd API to v1.8.0 release
Signed-off-by: Derek McGowan <derek@mcg.dev>
2024-11-03 23:14:24 -08:00
Derek McGowan
cf36acf6b6
Merge pull request #10935 from dmcgowan/prepare-api-v1.8.0
Prepare release notes for api/v1.8.0
2024-11-04 05:25:19 +00:00
Akihiro Suda
c017828c02
Merge pull request #10877 from AkihiroSuda/runc-1.2.0
update runc binary to 1.2.1
2024-11-03 22:43:46 +00:00
Fu Wei
716445af3a
Merge pull request #10933 from dmcgowan/test-container-resilience
Make TestContainerPids more resilient
2024-11-03 20:58:24 +00:00