Skip to content

@dmcgowan dmcgowan released this Mar 13, 2019

Welcome to the v1.2.5 release of containerd!

The fifth patch release for containerd 1.2 contains fixes
for image management, cgroup management and the
CRI plugin.
It also updates runc to include an improved fix for CVE-2019-5736
to reduce the increased memory-consumption introduced by the original
All these changes are noted below.

Notable Updates

  • Fix an issue that non-existent parent directory in image layers is created with permission
    0700. #3017
  • Fix an issue that snapshots of the base image can be deleted by mistake, when images
    built on top of it are deleted. #3087
  • Support for GC references to content from snapshot and container objects. #3080
  • cri: Fix a bug that pod can't get started when the same volume is defined
    differently in the image and the pod spec. cri#1059
  • cri: Fix a bug that causes container start failure after in-place upgrade containerd
    to 1.2.4+ or 1.1.6+. cri#1082
  • cgroups updated to dbea6f2bd41658b84b00417ceefa416b97 to fix issues for systemd 420 and
    non-existent cgroups. #3079
  • runc updated to 2b18fe1d885ee5083ef9f0838fee39b62d653e30 to include the improved
    fix for CVE-2019-5736. #3082
  • cri updated to a92c40017473cbe0239ce180125f12669757e44f. #3084

Please try out the release binaries and report any issues at


  • Michael Crosby
  • Phil Estes
  • Lantao Liu
  • Gábor Lipták
  • Derek McGowan
  • Cedric Clerget
  • Daniel, Dao Quang Minh
  • Sebastiaan van Stijn
  • Ashley Sykes
  • Brent Baude
  • Chris Mark
  • Georgia Panoutsakopoulou
  • Grant Seltzer Richman
  • JoeWrightss
  • MichaelKatsoulis
  • Wei Fu
  • Wei Zhang


  • bb71b10fd8 Merge pull request #3086 from Random-Liu/prepare-release-1-2-5
  • 6878e2b3fa Prepare v1.2.5 release.
  • 075e1ed4e0 Merge pull request #3092 from Random-Liu/update-cri-release-1.2
  • 12f76332e6 Update cri to a92c40017473cbe0239ce180125f12669757e44f.
  • 8f312e3586 Merge pull request #3091 from dmcgowan/release-1.2-update-mailmap
  • 68f0866dfc Update mailmap for cgroup authors
  • 96a0d28390 Merge pull request #3082 from thaJeztah/1.2_backport_bump_runc
  • 9ead3ca72a Merge pull request #3087 from fuweid/me-cherry-pick-2876
  • 88401ba68a bugfix: unpack should always set the snapshot gc label
  • c1f49fa74c Merge pull request #3084 from Random-Liu/update-cri-release-1.2
  • a5e6b940ea Update cri to 8e7ca12f411d65de58ca672e8e4a0c1464b4fe34.
  • 0b7e80e347 Merge pull request #3080 from dmcgowan/backport-1.2-gc-content-references
  • b7e7f1140f update runc to 2b18fe1d885ee5083ef9f0838fee39b62d653e30
  • 17a4289dee Add content gc ref labels from containers, images, and snapshots
  • f3ab47dd2b Merge pull request #3079 from crosbymichael/cherry-picks1.2
  • e8091eb546 Bump cgroups to dbea6f2bd41658b84b00417ceefa416b97
  • 96a8180618 Merge pull request #3077 from thaJeztah/1.2_bump_golang
  • aed4a5e96c Bump to Go 1.11.x
  • 782dd8988a Merge pull request #3038 from Random-Liu/cherrypick-#3018-release-1.2
  • 9899aca83f Unpack should set 0755 when the parent directory doesn't exist.

Changes from containerd/cgroups

  • dbea6f2 Merge pull request #77 from crosbymichael/non-active
  • 4a9f0f7 Add SkipOpts for handling how subsystems are registered
  • 4dacf2b Check for non-active/supported cgroups
  • 39b18af Merge pull request #72 from gliptak/pids1
  • 2fd912c Add tests for pids
  • 1152b96 Merge pull request #73 from gliptak/gofmt1
  • afd5981 Gofmt cgroup_test
  • 65ce98b Merge pull request #69 from cclerget/master-weight-pointer
  • 0f372c6 Merge pull request #71 from JoeWrightss/patch-1
  • f48bd85 Fixs return error message
  • 10cd53e Merge pull request #70 from gliptak/patch-1
  • 64bade4 Take value instead of pointer value
  • b49c471 Correct ineffassign warning
  • 3bc6dde Merge pull request #68 from cclerget/master-net_prio-typo
  • 6b552a8 Fix net_prio typo
  • c0437c3 Merge pull request #67 from gpanouts/get-all-cgroup-tasks
  • a31a0ff Add functionality for retrieving all tasks of a cgroup
  • 82cb49f Merge pull request #63 from ChrsMark/lenient-subsystems-checking
  • 7d825b2 Add test for cgroups load when missing hierarchy in one subsystem
  • f6cbfb4 Change Load function in order to be more lenient on subsystems' checking
  • 965bb1d Merge pull request #66 from crosbymichael/systemdci
  • ab9ec0e Add go-systemd dep for CI testing
  • 0e94a83 Merge pull request #59 from gliptak/patch-1
  • 4479d11 Merge pull request #62 from estesp/fix-gofmt
  • 9beb998 Merge pull request #61 from gliptak/patch-3
  • 9a09e58 Fix gofmt of systemd.go
  • 84e6e6e Merge pull request #60 from gliptak/patch-2
  • e13f6cc Add GoReportCard badge to README
  • d124595 Add Go 1.11 to Travis
  • d961ab9 Correct typo
  • d240072 Merge pull request #57 from estesp/project-update
  • e4cf832 Add project references and use common project travis
  • 8baeff6 Merge pull request #56 from grantseltzer/patch-1
  • 9de57ff Add godoc badge to
  • 5017d4e Merge pull request #54 from WeiZhang555/bugfix
  • 13aaafd Bugfix: can't write to cpuset cgroup
  • 58556f5 Merge pull request #53 from baude/systemdslicedelegate
  • 15ed73c systemd-239+ no longer allows delegate slice
  • 3024bc7 Merge pull request #52 from Sykomaniac/bugfix/slice-name
  • 2596f33 Remove call to unitName
  • 2e2922e Merge pull request #51 from containerd/type
  • 0f3de2f Fix empty device type

Changes from containerd/cri

  • a92c4001 Merge pull request #1086 from Random-Liu/cherrypick-#1085-release-1.2
  • 616d154e Fix /etc/hostname backward compatibility issue for in-place upgrade.
  • 8e7ca12f Merge pull request #1081 from Random-Liu/cherrypick-#1056-release-1.2
  • 989fb1ab Add an OCI annotation for sandbox log directory.
  • 0eee55a2 Merge pull request #1074 from Random-Liu/cherrypick-#1072-release-1.2
  • 4d4f610e Use clean path for map and comparison.
  • 9c25ab5b Merge pull request #1067 from Random-Liu/cherrypick-#1055-release-1.2
  • eaf8efc5 Use the correct sandbox config.
  • afbdeacc Merge pull request #1050 from Random-Liu/update-containerd-release-1.2
  • 72fab7c8 Update containerd to 583472f.

Dependency Changes

Previous release can be found at v1.2.4

  • 5e610833b72089b37d0e615de9a92dfc043757c2 -> dbea6f2bd41658b84b00417ceefa416b979cbf10
  • da0c016c830b2ea97fd1d737c49a568a816bf964 -> a92c40017473cbe0239ce180125f12669757e44f
  • 6635b4f0c6af3810594d2770f662f34ddc15b40d -> 2b18fe1d885ee5083ef9f0838fee39b62d653e30
Assets 3