github/containerd
4
0
Fork 0
Code Issues Pull Requests Packages Projects Releases 2 Wiki Activity
12,912 Commits 3 Branches 4 Tags
dc7dba9c20f7210c38e8255487fc0ee12692149d
Commit Graph

696 Commits

Author SHA1 Message Date
Phil Estes
80d31d15ba Update fifo for typed errors 
Update containerd/fifo vendor.

Signed-off-by: Phil Estes <estesp@linux.vnet.ibm.com>
 2019-08-16 14:29:32 -04:00
Michael Crosby
d085d9b464 Remove encryption code from containerd core 
We are separating out the encryption code and have designed a few new
interfaces and APIs for processing content streams.  This keep the core
clean of encryption code but enables not only encryption but support of
multiple content types ( custom media types ).

Signed-off-by: Michael Crosby <crosbymichael@gmail.com>
 2019-08-09 15:01:16 +00:00
Justin Terry (VM)
4667ee47a5 Update Microsoft/go-winio v0.4.14 
Signed-off-by: Justin Terry (VM) <juterry@microsoft.com>
 2019-08-06 13:24:42 -07:00
Akihiro Suda
225cc7d5bd Merge pull request #3494 from jterry75/remove_v2 
Completely remove Windows v2 in-tree shim
 2019-08-07 02:19:12 +09:00
Justin Terry (VM)
4b5dfaee13 Completely remove Windows v2 in-tree shim 
Signed-off-by: Justin Terry (VM) <juterry@microsoft.com>
 2019-08-05 16:49:56 -07:00
Lantao Liu
c99961c6c0 Update cri to b213648c5b 
Signed-off-by: Lantao Liu <lantaol@google.com>
 2019-08-05 11:22:41 -07:00
Phil Estes
c90a3d4932 Merge pull request #3134 from stefanberger/encryption_code_plus_ctr.pr 
Add image encryption support and ctr support
 2019-07-17 15:47:12 -04:00
Stefan Berger
30c3443947 Add crypto dependencies/vendoring 
Signed-off-by: Stefan Berger <stefanb@linux.vnet.ibm.com>
 2019-07-17 15:19:28 -04:00
Michael Crosby
a1f3ebaec8 Update cgroups to c4b9ac5c7601384c965b9646fc51588 
Signed-off-by: Michael Crosby <crosbymichael@gmail.com>
 2019-07-17 15:09:45 +00:00
Ace-Tang
d3e1a51f85 vendor: bump go-runc 
bump go-runc to 9007c2405372fe28918845901a3276c0915689a1
in order to support get actually error log if checkpint fail, this
version get two new diff

Add common project content/checks:
8e51df4212
Fix Method of judging command execution
failure:4e99c72acd

Signed-off-by: Ace-Tang <aceapril@126.com>
 2019-07-03 21:57:10 +08:00
Eric Hotinger
9fda4a5fe6 Bumps the version of go-winio. 
This also refactors the lcow and windows
snapshotters to use go-winio's utility functions for checking the
filesystem type.

Signed-off-by: Eric Hotinger <ehotinger@gmail.com>
 2019-07-01 14:51:06 -07:00
Phil Estes
0e87608c2a Merge pull request #3371 from thaJeztah/bump_libseccomp 
bump libseccomp-golang v0.9.1
 2019-06-26 08:17:36 +08:00
Sebastiaan van Stijn
cb4a8f51a6 bump runc v1.0.0-rc8-32-gf4982d86 
full diff: https://github.com/opencontainers/runc/compare/v1.0.0-rc8...f4982d86f7fde0b6f953cc62ccc4022c519a10a9

possibly relevant changes included:

- opencontainers/runc#2074 Update dependency libseccomp-golang
  - fixes https://nvd.nist.gov/vuln/detail/CVE-2017-18367
- opencontainers/runc#2065 Fix cgroup hugetlb size prefix for kB
- opencontainers/runc#2042 libcontainer: intelrdt: add missing destroy handler in defer func
- opencontainers/runc#2042 main: not reopen /dev/stderr
- opencontainers/runc#2038 `r.destroy` can defer exec in `runner.run` method
- opencontainers/runc#2035 specconv: always set "type: bind" in case of MS_BIND
- opencontainers/runc#2035 Move systemd.Manager initialization into a function in that module
- opencontainers/runc#2034 Support for logging from children processes

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-06-25 13:03:23 +02:00
Sebastiaan van Stijn
bb41ef87f1 bump libseccomp-golang v0.9.1 
full diff: 32f571b700...689e3c1541

Release notes:

* Version 0.9.1 - May 21, 2019
- Minimum supported version of libseccomp bumped to v2.2.0 (fc0298087f)
- PowerPC and S390(x) architectures are unavailable below library version v2.3.0 and will return errors if used with incompatible libraries
- Use Libseccomp's `seccomp_version` API to retrieve library version
- Unconditionally set TSync attribute for filters, due to Go's heavily threaded nature
- Fix [CVE-2017-18367](https://nvd.nist.gov/vuln/detail/CVE-2017-18367) - Multiple syscall arguments were incorrectly combined with logical-OR, instead of logical-AND (06e7a29f36)
- Fix a failure to build on Debian-based distributions due to CGo code
- Fix unit test failures on 32-bit architectures
- Improve several errors to be more verbose about their causes
- Add support for SCMP_ACT_LOG (with libseccomp versions 2.4.x and higher), permitting syscalls but logging their execution
- Add support for SCMP_FLTATR_CTL_LOG (with libseccomp versions 2.4.x and higher), logging not-allowed actions when they are denied

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-06-25 10:57:58 +02:00
Odin Ugedal
341c7c144f Update dependency containerd/cgroups 
Signed-off-by: Odin Ugedal <odin@ugedal.com>
 2019-06-19 21:19:00 +02:00
Michael Crosby
0b7abc02b2 ttrpc updates for interceptors, close, and metadata 
Signed-off-by: Michael Crosby <crosbymichael@gmail.com>
 2019-06-13 19:09:07 +00:00
Michael Crosby
42f24b57e4 Update ttrpc to a5bd8ce9e40bc7c065a11c6936f4d032ce 
Signed-off-by: Michael Crosby <crosbymichael@gmail.com>
 2019-06-04 15:14:06 +00:00
Georgi Sabev
a6a888cb5e Bump ttrpc 
Co-authored-by: Giuseppe Capizzi <gcapizzi@pivotal.io>
Signed-off-by: Georgi Sabev <georgethebeatle@gmail.com>
 2019-05-13 16:21:04 +01:00
Michael Crosby
bf5a424679 Merge pull request #3246 from thaJeztah/bump_ttrpc 
bump containerd/ttrpc 699c4e40d1e7416e08bf7019c7ce2e9beced4636
 2019-04-29 17:32:19 -04:00
Derek McGowan
a6cd37e5c2 Merge pull request #3243 from Random-Liu/update-cri 
Update cri to 2fc62db814.
 2019-04-29 11:31:19 -07:00
msg555
c7f067f278 Update vendor/ with new required vndr go.mod files 
Signed-off-by: msg555 <msg555@gmail.com>
 2019-04-28 18:20:43 -04:00
Sebastiaan van Stijn
8c5779c32b bump containerd/ttrpc 699c4e40d1e7416e08bf7019c7ce2e9beced4636 
full diff: f02858b145...699c4e40d1

- containerd/ttrpc#33 Fix returns error message
- containerd/ttrpc#35 Make onclose an option

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-04-27 15:30:18 -07:00
Lantao Liu
5d17ed2302 Update cri to 2fc62db814. 
Signed-off-by: Lantao Liu <lantaol@google.com>
 2019-04-26 10:54:51 -07:00
Sebastiaan van Stijn
e5aab17a0e bump opencontainers/selinux v1.2.2 
full diff: https://github.com/opencontainers/selinux/compare/v1.2.1...v1.2.2

- opencontainers/selinux#51 Older kernels do not support keyring labeling

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-04-25 22:43:05 -07:00
Sebastiaan van Stijn
dd85aea625 bump runc v1.0.0-rc8 
full diff: 029124da7a...425e105d5a

- opencontainers/runc#2043 Vendor in latest selinux code for keycreate errors

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-04-25 22:42:50 -07:00
Sebastiaan van Stijn
c79c7921c0 bump docker/go-units v0.4.0 
relevant changes:

- docker/go-units#19 make 1 second not to be plural seconds
- docker/go-units#20 Add `HumanSizeWithPrecision` function
- docker/go-units#21 change week display rule
- docker/go-units#22 Better human duration precision
- docker/go-units#23 Removes spaces before unit
- docker/go-units#27 Fix #26 - RAMInBytes Bug
- docker/go-units#33 Fix handling of unlimited (-1) ulimit values
- docker/go-units#34 Revert 46 minute threshold

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-04-23 17:07:58 +02:00
Sebastiaan van Stijn
06a3a480cc bump containerd/console 0650fd9eeb50bab4fc99dceb9f2e14cf58f36e7f 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-04-18 19:45:38 +02:00
Sebastiaan van Stijn
0fd02564a2 bump gocapability 
full diff: db04d3cc01...d98352740c

changes included:

  - syndtr/gocapability#14 capability: Deprecate NewPid and NewFile for NewPid2 and NewFile2
  - syndtr/gocapability#16 Fix capHeader.pid type

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-04-18 19:00:27 +02:00
John Howard
cc73dc3dbd Merge pull request #3217 from kevpar/etw-capture-state 
Enable dumping Goroutine stacks via ETW capture state
 2019-04-15 14:19:46 -07:00
Kevin Parsons
05dd66b2e6 Update go-winio in vendor.conf 
Signed-off-by: Kevin Parsons <kevpar@microsoft.com>
 2019-04-15 13:34:57 -07:00
Sebastiaan van Stijn
c9059c7673 bump mistifyio/go-zfs f784269be439d704d3dfa1906f45dd848fed2beb 
- mistifyio/go-zfs#72 Switch to google/uuid
  - removes the github.com/pborman/uuid dependency

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-04-14 13:31:22 +02:00
Sebastiaan van Stijn
2583d9e426 update gogo/googleapis v1.2.0 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-04-05 14:55:19 +02:00
Sebastiaan van Stijn
a98df70da1 update containerd/btrfs af5082808c833de0e79c1e72eea9fea239364877 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-04-05 14:55:16 +02:00
Sebastiaan van Stijn
aa8dccd220 update containerd/aufs f894a800659b6e11c1a13084abd1712f346e349c 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-04-05 14:55:13 +02:00
Sebastiaan van Stijn
ed61d7f680 bump containerd/zfs and dependencies 
temporarily adds both pborman/uuid and google/uuid,
pending mistifyio/go-zfs#72

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-04-05 14:55:10 +02:00
Sebastiaan van Stijn
d667628ca9 bump github.com/pkg/errors v0.8.1 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-04-05 14:55:08 +02:00
Sebastiaan van Stijn
1978c0b74b bump gotest.tools v2.3.0, google/go-cmp v0.2.0 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-04-05 14:55:02 +02:00
Lantao Liu
a733587496 Update cri to 6d353571e6. 
Signed-off-by: Lantao Liu <lantaol@google.com>
 2019-04-04 14:02:08 -07:00
Derek McGowan
4edc7336a2 Merge pull request #3169 from crosbymichael/runcbump 
Update runc to resolve selinux issues
 2019-04-04 10:38:57 -07:00
Michael Crosby
9bc231532d Merge pull request #3109 from bainsy88/issue_3076 
Add code to return errors from registries
 2019-04-04 13:23:37 -04:00
Michael Crosby
abfc89ce02 Update CRI to master 
Signed-off-by: Michael Crosby <crosbymichael@gmail.com>
 2019-04-04 10:43:40 -04:00
Michael Crosby
4730088cb5 Update runc to resolve selinux issues 
Signed-off-by: Michael Crosby <crosbymichael@gmail.com>
 2019-04-04 10:36:04 -04:00
Sebastiaan van Stijn
830b0294cc Update protobuf v1.2.0 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-04-03 23:27:16 +02:00
Sebastiaan van Stijn
7c1365b468 bump sirupsen/logrus v1.4.1 
Full diff: https://github.com/sirupsen/logrus/compare/v1.3.0...v1.4.1

Fixes:

- Remove dependency on golang.org/x/crypto
- Fix wrong method calls Logger.Print and Logger.Warningln
- Update Entry.Logf to not do string formatting unless the log level is enabled
- Fix infinite recursion on unknown Level.String()
- Fix race condition in getCaller
- Fix Entry.WithContext method to return a copy of the initial entry

New:

- Add DeferExitHandler, similar to RegisterExitHandler but prepending the handler to the list of handlers (semantically like defer)
- Add CallerPrettyfier to JSONFormatter and `TextFormatter`
- Add Entry.WithContext() and Entry.Context, to set a context on entries to be used e.g. in hooks
- Enhance TextFormatter to not print caller information when they are empty

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-04-03 22:23:53 +02:00
Akihiro Suda
3a80a801af Merge pull request #3139 from thaJeztah/bump_runc_v1.0.0-rc7 
update opencontainers/runc v1.0.0-rc7
 2019-03-29 12:32:50 +09:00
Sebastiaan van Stijn
2b8df8309e bump containerd/cgroups 4994991857f9b0ae8dc439551e8bebdbb4bf66c1 
full diff: dbea6f2bd4...4994991857

brings in https://github.com/containerd/cgroups/pull/79 Return ErrCgroupDeleted when no subsystems
fixes https://github.com/containerd/containerd/issues/3133 Custom cgroup path does not work in containerd 1.2.5

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-03-28 23:36:36 +01:00
Sebastiaan van Stijn
bc6ac08784 update opencontainers/runc v1.0.0-rc7 
full diff: 2b18fe1d88...v1.0.0-rc7

changes included:

- opencontainers/runc#2012 Need to setup labeling of kernel keyrings
- opencontainers/runc#2014 Add $RUNC_USE_SYSTEMD to run tests using systemd cgroup driver
- opencontainers/runc#2015 Use getenv not secure_getenv
  - fixes opencontainers/runc#2013 build fails with musl libc
- opencontainers/runc#2023 Fixes regression causing zombie runc:[1:CHILD] processes

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-03-28 21:42:17 +01:00
John Howard
e16e995939 Vendor Microsoft/hcsshim@8abdbb82 
Signed-off-by: John Howard <jhoward@microsoft.com>
 2019-03-25 11:11:37 -07:00
Justin Terry (VM)
4c9b5ef8ea Update vendor github.com/Microsoft/go-winio 
Signed-off-by: Justin Terry (VM) <juterry@microsoft.com>
 2019-03-21 14:12:41 -07:00
Jack Baines
908b771086 Add code to return message field of returned registry errors 
Docker registries return errors in a know format so this change now checks for these
errors and returns the message field. If the error is not in the expected format fall
back to the original behaviour.

https://github.com/containerd/containerd/issues/3076

Signed-off-by: Jack Baines <jack.baines@uk.ibm.com>
 2019-03-19 21:05:36 +00:00