github/containerd
4
0
Fork 0
Code Issues Pull Requests Packages Projects Releases 2 Wiki Activity
Files
a3265102d9318fac00c2425f46b2d532bacc3afb
containerd/pkg
History
Bjorn Neergaard a3265102d9 Revert "Don't check for apparmor_parser to be present" 
This reverts commit 1acca8bba3.

As stated in the Godoc, this function is intended to check for presence
of `apparmor_parser`. Changing this regressed the public API of
containerd, and directly contradicts the way that this function is
consumed inside of containerd itself:
* fdfdc9bfc0/pkg/apparmor/apparmor.go (L20)
* fdfdc9bfc0/pkg/cri/sbserver/helpers_linux.go (L85)
* fdfdc9bfc0/pkg/cri/server/helpers_linux.go (L144)

This has lead to a number of painful regressions and attempted fixes in
Moby:
* https://github.com/moby/moby/issues/44900
* https://github.com/moby/moby/pull/44902
* https://github.com/moby/moby/issues/44970

While reverting this late into the life of 1.6 and at the start of the
life of 1.7 is likely painful, I think this is ultimately the best path
to take, as containerd is subject to the same failure to start
containers with an AppArmor kernel when `apparmor_parser` is missing as
Moby.

Signed-off-by: Bjorn Neergaard <bneergaard@mirantis.com>
2023-02-10 10:05:56 -07:00
..
apparmor
Revert "Don't check for apparmor_parser to be present"
2023-02-10 10:05:56 -07:00
atomic
use containerd/project header test
2020-04-22 19:35:37 -05:00
cap
Enable dupword linter
2023-01-03 12:47:16 -08:00
cleanup
Add cleanup package for context management during cleanup
2023-01-03 12:30:26 -08:00
cri
Clean up repeated package import
2023-02-10 16:21:55 +08:00
dialer
chore: use go fix to cleanup old +build buildtag
2022-12-29 14:25:14 +08:00
epoch
pkg/epoch: drop timezone
2023-01-31 23:26:02 +09:00
failpoint
Run gofmt 1.19
2022-08-04 18:18:33 -07:00
hasher
digest: use github.com/minio/sha256-simd
2022-12-08 18:50:00 +09:00
ioutil
Run gofmt 1.19
2022-08-04 18:18:33 -07:00
kmutex
CRI: improve image pulling performance
2022-04-06 07:14:18 +08:00
netns
Merge pull request #7879 from fuweid/clean-build-tags
2022-12-30 00:22:03 -08:00
nri
chore: use go fix to cleanup old +build buildtag
2022-12-29 14:25:14 +08:00
oom
chore: use go fix to cleanup old +build buildtag
2022-12-29 14:25:14 +08:00
os
Move WithMounts to specs
2023-01-11 13:03:59 -08:00
process
Use mount.Target to specify subdirectory of rootfs mount
2023-01-27 09:51:58 +08:00
progress
update golangci-lint to v1.49.0
2022-10-12 14:41:01 +02:00
registrar
feat: replace github.com/pkg/errors to errors
2022-01-07 10:27:03 +08:00
runtimeoptions/v1
Update runtime options to include bytes blob
2022-12-07 10:55:06 -08:00
schedcore
add runc shim support for sched core
2021-10-08 16:18:09 +00:00
seccomp
chore: use go fix to cleanup old +build buildtag
2022-12-29 14:25:14 +08:00
seed
chore: use go fix to cleanup old +build buildtag
2022-12-29 14:25:14 +08:00
seutil
seutil: Fix setting the "container_kvm_t" label
2021-12-14 00:09:17 +01:00
shutdown
Expose Done and Err in Shutdown service
2022-11-16 22:03:44 -08:00
snapshotters
Export remote snapshotter label handler
2023-02-01 23:03:23 +09:00
stdio
Add logging binary support when terminal is true
2020-08-25 17:28:29 -07:00
streaming
Add streaming service
2022-11-30 12:55:56 -08:00
testutil
chore: use go fix to cleanup old +build buildtag
2022-12-29 14:25:14 +08:00
timeout
feat: use rwmutex instead
2021-11-16 11:06:40 +08:00
transfer
Unwrap proto errors in streaming client
2022-12-02 22:30:54 -08:00
truncindex
CRI: Move truncindex to pkg
2022-05-26 13:02:45 -07:00
ttrpcutil
using ContextDialer instead
2022-07-20 22:53:42 +08:00
unpack
Use cleanup.Background instead of context.Background for cleanup
2023-01-04 11:22:24 -08:00
userns
chore: use go fix to cleanup old +build buildtag
2022-12-29 14:25:14 +08:00