github/containerd
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases 2 Wiki Activity
14,218 Commits 3 Branches 2 Tags 112 MiB
fa5bf66fdf
Commit Graph

14218 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Sebastiaan van Stijn
dd0542f7c1
cmd: don't alias context package, and use cliContext for cli.Context 
Unfortunately, this is a rather large diff, but perhaps worth a one-time
"rip off the bandaid" for v2. This patch removes the use of "gocontext"
as alias for stdLib's "context", and uses "cliContext" for uses of
cli.context.

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2024-06-20 02:15:13 +02:00
Akhil Mohan
c25183ff19
use older version of OVMF package 
use ovmf 2022.02-3ubuntu0.22.04.2 so that the OVMF_CODE.fd which vagrant
looks for is still available

Signed-off-by: Akhil Mohan <akhilerm@gmail.com>
 2024-06-19 22:28:03 +05:30
Akhil Mohan
1bfdccee09
use vagrant from jammy in noble 
Signed-off-by: Akhil Mohan <akhilerm@gmail.com>
 2024-06-19 02:26:02 +05:30
Akhil Mohan
769e0c8c16
add debian sources for ubuntu-24 
Signed-off-by: Akhil Mohan <akhilerm@gmail.com>
 2024-06-19 00:07:28 +05:30
Akhil Mohan
624aa49d4b
increase xfs base image size to 300Mb 
from xfsprogs 5.19.0, minimum size of xfs volume has to be 300MB

Ref: https://git.kernel.org/pub/scm/fs/xfs/xfsprogs-dev.git/commit/?id=6e0ed3d19c54603f0f7d628ea04b550151d8a262
Signed-off-by: Akhil Mohan <akhilerm@gmail.com>
 2024-06-19 00:07:27 +05:30
Akhil Mohan
027414ee50
enable ubuntu 24 runners 
Signed-off-by: Akhil Mohan <akhilerm@gmail.com>
 2024-06-19 00:07:27 +05:30
Fu Wei
741c4bde51
Merge pull request #10350 from dmcgowan/gha-stale-permissions 
Reduce scope of permissions in stale workflow
 2024-06-18 05:50:28 +00:00
dependabot[bot]
9edde81067
build(deps): bump github.com/klauspost/compress from 1.17.8 to 1.17.9 
Bumps [github.com/klauspost/compress](https://github.com/klauspost/compress) from 1.17.8 to 1.17.9.
- [Release notes](https://github.com/klauspost/compress/releases)
- [Changelog](https://github.com/klauspost/compress/blob/master/.goreleaser.yml)
- [Commits](https://github.com/klauspost/compress/compare/v1.17.8...v1.17.9)

---
updated-dependencies:
- dependency-name: github.com/klauspost/compress
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-06-18 00:02:13 +00:00
dependabot[bot]
becb2b2d3a
build(deps): bump github.com/checkpoint-restore/checkpointctl 
Bumps [github.com/checkpoint-restore/checkpointctl](https://github.com/checkpoint-restore/checkpointctl) from 1.2.0 to 1.2.1.
- [Release notes](https://github.com/checkpoint-restore/checkpointctl/releases)
- [Commits](https://github.com/checkpoint-restore/checkpointctl/compare/v1.2.0...v1.2.1)

---
updated-dependencies:
- dependency-name: github.com/checkpoint-restore/checkpointctl
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-06-18 00:01:54 +00:00
dependabot[bot]
f6f655ccfe
build(deps): bump k8s.io/klog/v2 in the k8s group 
Bumps the k8s group with 1 update: [k8s.io/klog/v2](https://github.com/kubernetes/klog).


Updates `k8s.io/klog/v2` from 2.120.1 to 2.130.0
- [Release notes](https://github.com/kubernetes/klog/releases)
- [Changelog](https://github.com/kubernetes/klog/blob/main/RELEASE.md)
- [Commits](https://github.com/kubernetes/klog/compare/v2.120.1...v2.130.0)

---
updated-dependencies:
- dependency-name: k8s.io/klog/v2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: k8s
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-06-18 00:01:25 +00:00
Derek McGowan
531da99606
Reduce scope of permissions in stale workflow 
Signed-off-by: Derek McGowan <derek@mcg.dev>
 2024-06-17 12:04:15 -07:00
Maksym Pavlenko
e030f952ac
Merge pull request #10340 from containerd/dependabot/go_modules/k8s-e19d883663 
build(deps): bump the k8s group across 1 directory with 4 updates
 2024-06-17 17:49:28 +00:00
Derek McGowan
4770618c7b
Merge pull request #10349 from thaJeztah/less_logrus 
Remove some logrus imports
 2024-06-17 17:42:29 +00:00
Fu Wei
0975ec0908
Merge pull request #10342 from dmcgowan/add-mutex-fallback-host 
Adds a mutex to protect fallback host
 2024-06-17 13:13:57 +00:00
Sebastiaan van Stijn
ed64e6503a
core/mount: remove logrus import 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2024-06-17 12:40:18 +02:00
Sebastiaan van Stijn
ea8265fb1e
core/transfer/local: remove logrus import 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2024-06-17 12:37:14 +02:00
Sebastiaan van Stijn
75fd7a5a7f
pkg/shim: remove logrus imports 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2024-06-17 12:35:36 +02:00
Maksym Pavlenko
ab61734e3d
Merge pull request #10231 from jedevc/add-get-token-span 
auth: add span to FetchToken helpers
 2024-06-14 19:33:52 +00:00
Maksym Pavlenko
8f4a282ab3
Merge pull request #10337 from Kern--/proxy-capabilities 
Allow proxy plugins to have capabilities
 2024-06-14 19:24:32 +00:00
Amit Barve
fe5f85c7de Fix incorrect comment about ordering of parent layers 
The ParentIDs array in the Snapshot type is populated in the reverse order i.e the
immediate parent is at the 0th index and the oldest parent is at the last index. It can be
seen here:
https://github.com/containerd/containerd/blob/main/core/snapshots/storage/bolt.go#L492
When applying these layers, the parent layer at the last index should be applied first and
the parent layer at the 0th index should be applied last. However, the comment above the
Snapshot type says the exact opposite thing.  This commit fixes that comment.

Signed-off-by: Amit Barve <ambarve@microsoft.com>
 2024-06-14 11:48:06 -07:00
Derek McGowan
4d48204a3d
Merge pull request #10341 from thaJeztah/cleanup_traces 
pkg/tracing: remove direct use of logrus, and fix some linting issues
 2024-06-14 17:48:11 +00:00
Derek McGowan
38e2f00382
Adds a mutex to protect fallback host 
Race detector complains about concurrent access such as with Dispatch on
push.

Signed-off-by: Derek McGowan <derek@mcg.dev>
 2024-06-14 10:43:39 -07:00
Derek McGowan
27de5fea73
Merge pull request #10331 from dmcgowan/prepare-v2.0.0-rc.3 
Prepare v2.0.0-rc.3 release
 2024-06-14 06:21:27 -07:00
Sebastiaan van Stijn
587ee80f61
pkg/tracing: LogrusHook.Fire: micro-optimisation 
Check span.IsRecording first, as it's a more lightweight check than
span.SpanContext().IsValid()

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2024-06-14 12:12:22 +02:00
Sebastiaan van Stijn
ccf7938126
pkg/tracing: remove direct use of github.com/sirupsen/logrus 
While the hook is intended to be used with logrus, we don't need to have
the direct import; use the aliases provided by the containerd/log module
instead.

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2024-06-14 12:08:51 +02:00
Sebastiaan van Stijn
4203e2de8d
pkg/tracing/plugin: rename var that collided with import 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2024-06-14 11:57:27 +02:00
Sebastiaan van Stijn
e2e09b384a
pkg/tracing: rename func that shadowed builtin, rm makeSpanName 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2024-06-14 11:56:06 +02:00
Abel Feng
15887d7efc sandbox: add update api for controller 
Signed-off-by: Abel Feng <fshb1988@gmail.com>
 2024-06-14 02:31:51 +00:00
dependabot[bot]
e69ad94421
build(deps): bump the k8s group across 1 directory with 4 updates 
Bumps the k8s group with 4 updates in the / directory: [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery), [k8s.io/client-go](https://github.com/kubernetes/client-go), [k8s.io/component-base](https://github.com/kubernetes/component-base) and [k8s.io/kubelet](https://github.com/kubernetes/kubelet).


Updates `k8s.io/apimachinery` from 0.30.0 to 0.30.2
- [Commits](https://github.com/kubernetes/apimachinery/compare/v0.30.0...v0.30.2)

Updates `k8s.io/client-go` from 0.30.0 to 0.30.2
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](https://github.com/kubernetes/client-go/compare/v0.30.0...v0.30.2)

Updates `k8s.io/component-base` from 0.30.0 to 0.30.2
- [Commits](https://github.com/kubernetes/component-base/compare/v0.30.0...v0.30.2)

Updates `k8s.io/kubelet` from 0.30.0 to 0.30.2
- [Commits](https://github.com/kubernetes/kubelet/compare/v0.30.0...v0.30.2)

---
updated-dependencies:
- dependency-name: k8s.io/apimachinery
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: k8s
- dependency-name: k8s.io/client-go
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: k8s
- dependency-name: k8s.io/component-base
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: k8s
- dependency-name: k8s.io/kubelet
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: k8s
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-06-13 18:32:12 +00:00
Akihiro Suda
e49d3fd1bc
Merge pull request #10334 from thaJeztah/bump_runc_1.1.13 
update runc binary to v1.1.13
 2024-06-13 17:47:12 +00:00
harshitasao
0f76e35fd5 added the openssf scorecard badge 
Signed-off-by: harshitasao <harshitasao@gmail.com>
 2024-06-13 22:59:43 +05:30
Kern Walster
5b8dfbd111 Allow proxy plugins to have capabilities 
Signed-off-by: Kern Walster <walster@amazon.com>
 2024-06-13 17:13:57 +00:00
Mike Brown
98ebb3ecff
Merge pull request #9737 from everpeace/kep-3169-SupplementalGroupsPolicy 
KEP-3619: Fine-grained SupplementalGroups control
 2024-06-13 16:59:20 +00:00
Sebastiaan van Stijn
cc2cedae06
Revert "install-runc: pin Go to 1.21" 
Now that we're on runc v1.1.13, we no longer need to pin the
go version fo runc to go1.21

This reverts commit fef78c1024.

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2024-06-13 18:38:31 +02:00
Sebastiaan van Stijn
3c097352af
update runc binary to v1.1.13 
full diff: https://github.com/opencontainers/runc/compare/v1.1.12...v1.1.13

Release notes:

* If building with Go 1.22.x, make sure to use 1.22.4 or a later version.

* Support go 1.22.4+.
* runc list: fix race with runc delete.
* Fix set nofile rlimit error.
* libct/cg/fs: fix setting rt_period vs rt_runtime.
* Fix a debug msg for user ns in nsexec.
* script/*: fix gpg usage wrt keyboxd.
* CI fixes and misc backports.
* Fix codespell warnings.

* Silence security false positives from golang/net.
* libcontainer: allow containers to make apps think fips is enabled/disabled for testing.
* allow overriding VERSION value in Makefile.
* Vagrantfile.fedora: bump Fedora to 39.
* ci/cirrus: rm centos stream 8.

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2024-06-13 18:38:25 +02:00
Derek McGowan
8c13ed1b8e
Prepare v2.0.0-rc.3 release 
Signed-off-by: Derek McGowan <derek@mcg.dev>
 2024-06-12 21:52:37 -07:00
Fu Wei
c75f6d404d
Merge pull request #10323 from siretart/debian/bug.1044768 
Allow running test in usernamespace
 2024-06-13 03:43:09 +00:00
Fu Wei
a60edaf24c
Merge pull request #10330 from AkihiroSuda/remove-pkg-seed 
Remove pkg/seed
 2024-06-13 01:25:59 +00:00
Akihiro Suda
86b8a88241
Remove pkg/seed 
Since Go 1.20, math/rand does not need explicit seeding:
https://go.dev/doc/go1.20#minor_library_changes

Go <= 1.19 is no longer supported due to EOL.

Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
 2024-06-13 08:50:28 +09:00
Maksym Pavlenko
e4c61fd33f
Merge pull request #10319 from containerd/dependabot/go_modules/golang-x-ba92570477 
build(deps): bump the golang-x group with 2 updates
 2024-06-12 17:45:20 +00:00
Fu Wei
0de7043c3a
Merge pull request #10322 from thaJeztah/bump_platforms 
vendor: github.com/containerd/platforms v0.2.1
 2024-06-12 14:47:28 +00:00
Reinhard Tartler
09d3e20d3a Allow running test in usernamespace 
Debian has started building packages with usernamespaces
to disable network access and similar isolation features. The
containerd package executes a unit test that fails in that
scenario, see https://bugs.debian.org/1070411

The code contains a conditional on whether it is running in
usernamepsace. This commit expands the unit test to cover
this behavior; it was previously untested.

The easiest way to reproduce this issue is to prefix the test
invocaiton with 'unshare -nr go test [...]'

Signed-off-by: Reinhard Tartler <siretart@gmail.com>
 2024-06-12 00:36:54 +00:00
Shingo Omura
8bcffa9446
KEP-3619: Fine grained SupplementalGroups control 
Signed-off-by: Shingo Omura <everpeace@gmail.com>
 2024-06-12 09:10:40 +09:00
Sebastiaan van Stijn
87dd4309db
vendor: github.com/containerd/platforms v0.2.1 
- Remove hcsshim import from repo
    - un-exports GetOsVersion
- Update windows matcher to not compare empty os version

full diff: https://github.com/containerd/platforms/compare/v0.2.0...v0.2.1

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2024-06-12 00:54:03 +02:00
Maksym Pavlenko
e840d1d9cc
Merge pull request #10286 from dmcgowan/update-tls-fallback-default-ports 
Allow fallback across default ports
 2024-06-11 17:11:42 +00:00
Maksym Pavlenko
9c4ca8676b
Merge pull request #10320 from containerd/dependabot/go_modules/github.com/checkpoint-restore/checkpointctl-1.2.0 
build(deps): bump github.com/checkpoint-restore/checkpointctl from 1.1.0 to 1.2.0
 2024-06-11 17:10:49 +00:00
Maksym Pavlenko
8247b5755a
Merge pull request #10321 from ktock/ctr-local-flag-deps 
ctr: return explicit errors for flags unsupported by transfer service
 2024-06-11 17:10:28 +00:00
Derek McGowan
3debabbccd
Merge pull request #10324 from ktock/golangci-lint-1.59.1 
CI:  bump up golangci-lint to v1.59.1
 2024-06-11 13:13:19 +00:00
Kohei Tokunaga
939135ae36
CI: golangci-lint v1.59.1 
Signed-off-by: Kohei Tokunaga <ktokunaga.mail@gmail.com>
 2024-06-11 20:17:35 +09:00
Kohei Tokunaga
df7f6ba5b9
ctr: return explicit errors for flags unsupported by transfer service 
ctr currently silently ignores several flags by default (without --local) and
the user can't know which flags are supported until they see the code.
This commit fixes ctr to return an explicit error when it finds an unsupported
flag.

Signed-off-by: Kohei Tokunaga <ktokunaga.mail@gmail.com>
 2024-06-11 12:08:47 +09:00