github/containerd
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases 2 Wiki Activity
14,085 Commits 3 Branches 2 Tags 112 MiB
ca6a8a56a5
Commit Graph

14085 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
dependabot[bot]
c097022a5a
build(deps): bump github.com/containernetworking/cni from 1.2.1 to 1.2.2 
Bumps [github.com/containernetworking/cni](https://github.com/containernetworking/cni) from 1.2.1 to 1.2.2.
- [Release notes](https://github.com/containernetworking/cni/releases)
- [Commits](https://github.com/containernetworking/cni/compare/v1.2.1...v1.2.2)

---
updated-dependencies:
- dependency-name: github.com/containernetworking/cni
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-06-25 21:42:38 +00:00
dependabot[bot]
14b053fb48
build(deps): bump github.com/containerd/go-cni from 1.1.9 to 1.1.10 
Bumps [github.com/containerd/go-cni](https://github.com/containerd/go-cni) from 1.1.9 to 1.1.10.
- [Release notes](https://github.com/containerd/go-cni/releases)
- [Commits](https://github.com/containerd/go-cni/compare/v1.1.9...v1.1.10)

---
updated-dependencies:
- dependency-name: github.com/containerd/go-cni
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-06-25 21:41:45 +00:00
Derek McGowan
8f9607eed5
Use the transactor interface in metadata 
The boltdb instance in metadata is only used for getting transactions
and can also be overriden via the context to have a wider control of the
transaction boundary. Using the transactor interface allows callers of
metadata to have more control of the transaction lifecycle.

Since boltdb must be fsync'ed on commit, operations which perform many
database operations can be costly and slow. While providing transactor
via context can be used to group together operations, it does not
provide a way to manage the commit fsyncs more globally.

Signed-off-by: Derek McGowan <derek@mcg.dev>
 2024-06-25 14:24:49 -07:00
Phil Estes
7ec5b967b3
Merge pull request #10356 from containerd/dependabot/go_modules/github.com/containernetworking/plugins-1.5.1 
build(deps): bump github.com/containernetworking/plugins from 1.4.1 to 1.5.1
 2024-06-25 20:57:13 +00:00
dependabot[bot]
2cf8237a13
build(deps): bump k8s.io/klog/v2 in the k8s group 
Bumps the k8s group with 1 update: [k8s.io/klog/v2](https://github.com/kubernetes/klog).


Updates `k8s.io/klog/v2` from 2.130.0 to 2.130.1
- [Release notes](https://github.com/kubernetes/klog/releases)
- [Changelog](https://github.com/kubernetes/klog/blob/main/RELEASE.md)
- [Commits](https://github.com/kubernetes/klog/compare/v2.130.0...v2.130.1)

---
updated-dependencies:
- dependency-name: k8s.io/klog/v2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: k8s
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-06-24 23:34:45 +00:00
dependabot[bot]
a2f9101aad
build(deps): bump github.com/containernetworking/plugins 
Bumps [github.com/containernetworking/plugins](https://github.com/containernetworking/plugins) from 1.4.1 to 1.5.1.
- [Release notes](https://github.com/containernetworking/plugins/releases)
- [Commits](https://github.com/containernetworking/plugins/compare/v1.4.1...v1.5.1)

---
updated-dependencies:
- dependency-name: github.com/containernetworking/plugins
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-06-24 19:03:57 +00:00
Maksym Pavlenko
c7f7fa5390
Merge pull request #10352 from containerd/dependabot/go_modules/github.com/containernetworking/cni-1.2.1 
build(deps): bump github.com/containernetworking/cni from 1.2.0 to 1.2.1
 2024-06-24 18:15:53 +00:00
dependabot[bot]
2304cd9d5c
build(deps): bump google.golang.org/protobuf from 1.34.1 to 1.34.2 
Bumps google.golang.org/protobuf from 1.34.1 to 1.34.2.

---
updated-dependencies:
- dependency-name: google.golang.org/protobuf
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-06-24 17:55:57 +00:00
Maksym Pavlenko
73422722f2
Merge pull request #10351 from containerd/dependabot/go_modules/k8s-1b02c00507 
build(deps): bump k8s.io/klog/v2 from 2.120.1 to 2.130.0 in the k8s group
 2024-06-24 17:13:18 +00:00
Derek McGowan
7310674902
Merge pull request #10217 from akhilerm/ubuntu-24 
ci: enable ubuntu-24 runners
 2024-06-24 15:41:13 +00:00
Phil Estes
14981b4bc0
Merge pull request #10366 from thaJeztah/api_update_deps 
api: update github.com/containerd/ttrpc v1.2.5 to be aligned with containerd
 2024-06-21 13:34:55 +00:00
dependabot[bot]
469f950260
build(deps): bump github.com/containernetworking/cni from 1.2.0 to 1.2.1 
Bumps [github.com/containernetworking/cni](https://github.com/containernetworking/cni) from 1.2.0 to 1.2.1.
- [Release notes](https://github.com/containernetworking/cni/releases)
- [Commits](https://github.com/containernetworking/cni/compare/v1.2.0...v1.2.1)

---
updated-dependencies:
- dependency-name: github.com/containernetworking/cni
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-06-21 02:03:58 +00:00
Akihiro Suda
9a94e9e78a
Merge pull request #10372 from thaJeztah/bump_ttrpc_1.2.5 
vendor: github.com/containerd/ttrpc v1.2.5
 2024-06-21 01:23:47 +00:00
Henry Wang
243b803a19 Add pprof to runc-shim 
Signed-off-by: Henry Wang <henwang@amazon.com>
 2024-06-20 23:12:31 +00:00
Derek McGowan
8b5c218e5a
Merge pull request #10369 from thaJeztah/cmd_no_alias 
cmd: don't alias context package, and use cliContext for cli.Context
 2024-06-20 20:42:29 +00:00
Maksym Pavlenko
d7836cf9d8
Merge pull request #10370 from dmcgowan/metadata-godoc 
Cleanup metadata godoc
 2024-06-20 20:24:05 +00:00
Sebastiaan van Stijn
b323e9eec6
vendor: github.com/containerd/ttrpc v1.2.5 
full diff: https://github.com/containerd/ttrpc/compare/v1.2.4...v1.2.5

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2024-06-20 16:57:02 +02:00
Sebastiaan van Stijn
cb38b1e2be
api: update github.com/containerd/ttrpc v1.2.5 
Update the dependency and the indirect golang.org/x/net version to align
with containerd itself, and to prevent a vulnerability being detected.

We should keep the versions <= versions used by containerd 1.7 to prevent
forcing users of containerd 1.7 in combination with the latest version
of the API module from having to update all their dependencies, but
this update should likely be fine (and aligns with 1.7).

Before this:

    Scanning your code and 254 packages across 15 dependent modules for known vulnerabilities...

    === Symbol Results ===

    Vulnerability #1: GO-2024-2687
        HTTP/2 CONTINUATION flood in net/http
      More info: https://pkg.go.dev/vuln/GO-2024-2687
      Module: golang.org/x/net
        Found in: golang.org/x/net@v0.21.0
        Fixed in: golang.org/x/net@v0.23.0
        Example traces found:
          #1: events/task_fieldpath.pb.go:85:20: events.TaskIO.Field calls fmt.Sprint, which eventually calls http2.ConnectionError.Error
          #2: events/task_fieldpath.pb.go:85:20: events.TaskIO.Field calls fmt.Sprint, which eventually calls http2.ErrCode.String
          #3: events/task_fieldpath.pb.go:85:20: events.TaskIO.Field calls fmt.Sprint, which eventually calls http2.FrameHeader.String
          #4: events/task_fieldpath.pb.go:85:20: events.TaskIO.Field calls fmt.Sprint, which eventually calls http2.FrameType.String
          #5: events/task_fieldpath.pb.go:85:20: events.TaskIO.Field calls fmt.Sprint, which eventually calls http2.Setting.String
          #6: events/task_fieldpath.pb.go:85:20: events.TaskIO.Field calls fmt.Sprint, which eventually calls http2.SettingID.String
          #7: events/task_fieldpath.pb.go:85:20: events.TaskIO.Field calls fmt.Sprint, which eventually calls http2.StreamError.Error
          #8: services/content/v1/content_ttrpc.pb.go:272:35: content.ttrpccontentClient.Write calls ttrpc.Client.NewStream, which eventually calls http2.chunkWriter.Write
          #9: events/task_fieldpath.pb.go:85:20: events.TaskIO.Field calls fmt.Sprint, which eventually calls http2.connError.Error
          #10: events/task_fieldpath.pb.go:85:20: events.TaskIO.Field calls fmt.Sprint, which eventually calls http2.duplicatePseudoHeaderError.Error
          #11: events/task_fieldpath.pb.go:85:20: events.TaskIO.Field calls fmt.Sprint, which eventually calls http2.headerFieldNameError.Error
          #12: events/task_fieldpath.pb.go:85:20: events.TaskIO.Field calls fmt.Sprint, which eventually calls http2.headerFieldValueError.Error
          #13: events/task_fieldpath.pb.go:85:20: events.TaskIO.Field calls fmt.Sprint, which eventually calls http2.pseudoHeaderError.Error
          #14: events/task_fieldpath.pb.go:85:20: events.TaskIO.Field calls fmt.Sprint, which eventually calls http2.writeData.String

    Your code is affected by 1 vulnerability from 1 module.
    This scan also found 0 vulnerabilities in packages you import and 3
    vulnerabilities in modules you require, but your code doesn't appear to call
    these vulnerabilities.
    Use '-show verbose' for more details.

After this:

    govulncheck ./...
    Scanning your code and 251 packages across 13 dependent modules for known vulnerabilities...

    === Symbol Results ===

    No vulnerabilities found.

    Your code is affected by 0 vulnerabilities.
    This scan also found 0 vulnerabilities in packages you import and 3
    vulnerabilities in modules you require, but your code doesn't appear to call
    these vulnerabilities.
    Use '-show verbose' for more details.

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2024-06-20 16:53:50 +02:00
Derek McGowan
2f1bf791b9
Cleanup metadata godoc 
The godoc should properly show the formatting of the database
structure and sections explaining it.

Signed-off-by: Derek McGowan <derek@mcg.dev>
 2024-06-19 20:16:57 -07:00
Akhil Mohan
9077968119
update release runners to ubuntu 24.04 
update all runners except the binary building job to ubuntu-24.04

Signed-off-by: Akhil Mohan <akhilerm@gmail.com>
 2024-06-20 07:07:18 +05:30
Sebastiaan van Stijn
dd0542f7c1
cmd: don't alias context package, and use cliContext for cli.Context 
Unfortunately, this is a rather large diff, but perhaps worth a one-time
"rip off the bandaid" for v2. This patch removes the use of "gocontext"
as alias for stdLib's "context", and uses "cliContext" for uses of
cli.context.

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2024-06-20 02:15:13 +02:00
Akhil Mohan
c25183ff19
use older version of OVMF package 
use ovmf 2022.02-3ubuntu0.22.04.2 so that the OVMF_CODE.fd which vagrant
looks for is still available

Signed-off-by: Akhil Mohan <akhilerm@gmail.com>
 2024-06-19 22:28:03 +05:30
Akhil Mohan
1bfdccee09
use vagrant from jammy in noble 
Signed-off-by: Akhil Mohan <akhilerm@gmail.com>
 2024-06-19 02:26:02 +05:30
Akhil Mohan
769e0c8c16
add debian sources for ubuntu-24 
Signed-off-by: Akhil Mohan <akhilerm@gmail.com>
 2024-06-19 00:07:28 +05:30
Akhil Mohan
624aa49d4b
increase xfs base image size to 300Mb 
from xfsprogs 5.19.0, minimum size of xfs volume has to be 300MB

Ref: https://git.kernel.org/pub/scm/fs/xfs/xfsprogs-dev.git/commit/?id=6e0ed3d19c54603f0f7d628ea04b550151d8a262
Signed-off-by: Akhil Mohan <akhilerm@gmail.com>
 2024-06-19 00:07:27 +05:30
Akhil Mohan
027414ee50
enable ubuntu 24 runners 
Signed-off-by: Akhil Mohan <akhilerm@gmail.com>
 2024-06-19 00:07:27 +05:30
Fu Wei
741c4bde51
Merge pull request #10350 from dmcgowan/gha-stale-permissions 
Reduce scope of permissions in stale workflow
 2024-06-18 05:50:28 +00:00
dependabot[bot]
9edde81067
build(deps): bump github.com/klauspost/compress from 1.17.8 to 1.17.9 
Bumps [github.com/klauspost/compress](https://github.com/klauspost/compress) from 1.17.8 to 1.17.9.
- [Release notes](https://github.com/klauspost/compress/releases)
- [Changelog](https://github.com/klauspost/compress/blob/master/.goreleaser.yml)
- [Commits](https://github.com/klauspost/compress/compare/v1.17.8...v1.17.9)

---
updated-dependencies:
- dependency-name: github.com/klauspost/compress
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-06-18 00:02:13 +00:00
dependabot[bot]
becb2b2d3a
build(deps): bump github.com/checkpoint-restore/checkpointctl 
Bumps [github.com/checkpoint-restore/checkpointctl](https://github.com/checkpoint-restore/checkpointctl) from 1.2.0 to 1.2.1.
- [Release notes](https://github.com/checkpoint-restore/checkpointctl/releases)
- [Commits](https://github.com/checkpoint-restore/checkpointctl/compare/v1.2.0...v1.2.1)

---
updated-dependencies:
- dependency-name: github.com/checkpoint-restore/checkpointctl
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-06-18 00:01:54 +00:00
dependabot[bot]
f6f655ccfe
build(deps): bump k8s.io/klog/v2 in the k8s group 
Bumps the k8s group with 1 update: [k8s.io/klog/v2](https://github.com/kubernetes/klog).


Updates `k8s.io/klog/v2` from 2.120.1 to 2.130.0
- [Release notes](https://github.com/kubernetes/klog/releases)
- [Changelog](https://github.com/kubernetes/klog/blob/main/RELEASE.md)
- [Commits](https://github.com/kubernetes/klog/compare/v2.120.1...v2.130.0)

---
updated-dependencies:
- dependency-name: k8s.io/klog/v2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: k8s
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-06-18 00:01:25 +00:00
Derek McGowan
531da99606
Reduce scope of permissions in stale workflow 
Signed-off-by: Derek McGowan <derek@mcg.dev>
 2024-06-17 12:04:15 -07:00
Maksym Pavlenko
e030f952ac
Merge pull request #10340 from containerd/dependabot/go_modules/k8s-e19d883663 
build(deps): bump the k8s group across 1 directory with 4 updates
 2024-06-17 17:49:28 +00:00
Derek McGowan
4770618c7b
Merge pull request #10349 from thaJeztah/less_logrus 
Remove some logrus imports
 2024-06-17 17:42:29 +00:00
Fu Wei
0975ec0908
Merge pull request #10342 from dmcgowan/add-mutex-fallback-host 
Adds a mutex to protect fallback host
 2024-06-17 13:13:57 +00:00
Sebastiaan van Stijn
ed64e6503a
core/mount: remove logrus import 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2024-06-17 12:40:18 +02:00
Sebastiaan van Stijn
ea8265fb1e
core/transfer/local: remove logrus import 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2024-06-17 12:37:14 +02:00
Sebastiaan van Stijn
75fd7a5a7f
pkg/shim: remove logrus imports 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2024-06-17 12:35:36 +02:00
Maksym Pavlenko
ab61734e3d
Merge pull request #10231 from jedevc/add-get-token-span 
auth: add span to FetchToken helpers
 2024-06-14 19:33:52 +00:00
Maksym Pavlenko
8f4a282ab3
Merge pull request #10337 from Kern--/proxy-capabilities 
Allow proxy plugins to have capabilities
 2024-06-14 19:24:32 +00:00
Derek McGowan
4d48204a3d
Merge pull request #10341 from thaJeztah/cleanup_traces 
pkg/tracing: remove direct use of logrus, and fix some linting issues
 2024-06-14 17:48:11 +00:00
Derek McGowan
38e2f00382
Adds a mutex to protect fallback host 
Race detector complains about concurrent access such as with Dispatch on
push.

Signed-off-by: Derek McGowan <derek@mcg.dev>
 2024-06-14 10:43:39 -07:00
Derek McGowan
27de5fea73
Merge pull request #10331 from dmcgowan/prepare-v2.0.0-rc.3 
Prepare v2.0.0-rc.3 release
 2024-06-14 06:21:27 -07:00
Sebastiaan van Stijn
587ee80f61
pkg/tracing: LogrusHook.Fire: micro-optimisation 
Check span.IsRecording first, as it's a more lightweight check than
span.SpanContext().IsValid()

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2024-06-14 12:12:22 +02:00
Sebastiaan van Stijn
ccf7938126
pkg/tracing: remove direct use of github.com/sirupsen/logrus 
While the hook is intended to be used with logrus, we don't need to have
the direct import; use the aliases provided by the containerd/log module
instead.

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2024-06-14 12:08:51 +02:00
Sebastiaan van Stijn
4203e2de8d
pkg/tracing/plugin: rename var that collided with import 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2024-06-14 11:57:27 +02:00
Sebastiaan van Stijn
e2e09b384a
pkg/tracing: rename func that shadowed builtin, rm makeSpanName 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2024-06-14 11:56:06 +02:00
Abel Feng
15887d7efc sandbox: add update api for controller 
Signed-off-by: Abel Feng <fshb1988@gmail.com>
 2024-06-14 02:31:51 +00:00
dependabot[bot]
e69ad94421
build(deps): bump the k8s group across 1 directory with 4 updates 
Bumps the k8s group with 4 updates in the / directory: [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery), [k8s.io/client-go](https://github.com/kubernetes/client-go), [k8s.io/component-base](https://github.com/kubernetes/component-base) and [k8s.io/kubelet](https://github.com/kubernetes/kubelet).


Updates `k8s.io/apimachinery` from 0.30.0 to 0.30.2
- [Commits](https://github.com/kubernetes/apimachinery/compare/v0.30.0...v0.30.2)

Updates `k8s.io/client-go` from 0.30.0 to 0.30.2
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](https://github.com/kubernetes/client-go/compare/v0.30.0...v0.30.2)

Updates `k8s.io/component-base` from 0.30.0 to 0.30.2
- [Commits](https://github.com/kubernetes/component-base/compare/v0.30.0...v0.30.2)

Updates `k8s.io/kubelet` from 0.30.0 to 0.30.2
- [Commits](https://github.com/kubernetes/kubelet/compare/v0.30.0...v0.30.2)

---
updated-dependencies:
- dependency-name: k8s.io/apimachinery
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: k8s
- dependency-name: k8s.io/client-go
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: k8s
- dependency-name: k8s.io/component-base
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: k8s
- dependency-name: k8s.io/kubelet
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: k8s
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-06-13 18:32:12 +00:00
Akihiro Suda
e49d3fd1bc
Merge pull request #10334 from thaJeztah/bump_runc_1.1.13 
update runc binary to v1.1.13
 2024-06-13 17:47:12 +00:00
Kern Walster
5b8dfbd111 Allow proxy plugins to have capabilities 
Signed-off-by: Kern Walster <walster@amazon.com>
 2024-06-13 17:13:57 +00:00