containerd 1.5.0-rc.3

Welcome to the v1.5.0-rc.3 release of containerd!
This is a pre-release of containerd

The sixth major release of containerd includes many stability improvements
and code organization changes to make contribution easier and make future
features cleaner to develop. This includes bringing CRI development into the
main containerd repository and switching to Go modules. This release also
brings support for the Node Resource Interface (NRI).

Highlights

Project Organization

• Merge containerd/cri codebase into containerd/containerd #4593
• Move to Go modules #4760
• Remove selinux build tag #4849
• Add json log format output option for daemon log #4803

Snapshots

• Add configurable overlayfs path #4505
• Separate overlay implementation from plugin #4506
• Native snapshotter configuration and plugin separation #4517
• Devmapper snapshotter configuration and plugin separation #4573
• AUFS snapshotter configuration and plugin separation #4533
• ZFS snapshotter configuration and plugin separation #4534
• Pass custom snapshot labels when creating snapshot #4630 #4635
• Add platform check for snapshotter support when unpacking #3927
• Handle loopback mounts #4902
• Support userxattr mount option for overlay in user namespace #5076
• ZFS snapshotter implementation of usage #5243

Distribution

• Improve registry response errors #4523
• Improve image pull performance over HTTP 1.1 #4653
• Registry configuration package #4138
• Add support for layers compressed with zstd #4809
• Allow arm64 to fallback to arm (v8, v7, v6, v5) 4932

Runtime

• Add annotations to containerd task update API #4647
• Add logging binary support when terminal is true #4502
• Runtime support on FreeBSD #5375

Windows

• Implement windowsDiff.Compare to allow outputting OCI images #4399
• Optimize WCOW snapshotter to commit writable layers as read-only parent layers #4415
• Optimize LCOW snapshotter use of scratch layers #4643

CRI

• Add NRI injection points cri#1552
• Add support for registry host directory configuration #4978
• Update privileged containers to use current capabilities instead of known capabilities #5017
• Add pod annotations to CNI call #5026
• Enable ocicrypt by default #5135
• Support PID NamespaceMode_TARGET #5203

Impactful Client Updates

This release has changes which may affect projects which import containerd.

Switch to Go modules

containerd and all containerd sub-repositories are now using Go modules. This
should help make importing easier for handling transitive dependencies. As of
this release, containerd still does not guarantee client library compatibility
for 1.x versions, although best effort is made to minimize impact from changes
to exported Go packages.

CRI plugin moved to main repository

With the CRI plugin moving into the main repository, imports under github.com/containerd/cri/
can now be found github.com/containerd/containerd/pkg/cri/.
There are no changes required for end users of CRI.

Library changes

oci

The WithAllCapabilities has been removed and replaced with WithAllCurrentCapabilities
and WithAllKnownCapabilities. WithAllKnownCapabilities has similar
functionality to the previous WithAllCapabilities with added support for newer
capabilities. WithAllCurrentCapabilities can be used to give privileged
containers the same set of permissions as the calling process, preventing errors
when privileged containers attempt to get more permissions than given to the
caller.

Configuration changes

New registry.config_path for CRI plugin

registry.config_path specifies a directory to look for registry hosts
configuration. When resolving an image name during pull operations, the CRI
plugin will look in the <registry.config_path>/<image hostname>/ directory
for host configuration. An optional hosts.toml file in that directory may be
used to configure which hosts will be used for the pull operation as well
host-specific configurations. Updates under that directory do not require
restarting the containerd daemon.

Enable registry.config_path in the containerd configuration file.

[plugins."io.containerd.grpc.v1.cri".registry]
   config_path = "/etc/containerd/certs.d"

Configure registry hosts, such as /etc/containerd/certs.d/docker.io/hosts.toml
for any image under the docker.io namespace (any image on Docker Hub).

server = "https://registry-1.docker.io"    # Exclude this to not use upstream

[host."https://public-mirror.example.com"]
  capabilities = ["pull"]                  # Requires less trust, won't resolve tag to digest from this host
[host."https://docker-mirror.internal"]
  capabilities = ["pull", "resolve"]
  ca = "docker-mirror.crt"                 # Or absolute path /etc/containerd/certs.d/docker.io/docker-mirror.crt

If no hosts.toml configuration exists in the host directory, it will fallback
to check certificate files based on Docker's certificate file
pattern (".crt" files for CA certificates and ".cert"/".key" files for client
certificates).

Deprecation of registry.mirrors and registry.configs in CRI plugin

Mirroring and TLS can now be configured using the new registry.config_path
option. Existing configurations may be migrated to new host directory
configuration. These fields are only deprecated with no planned removal,
however, these configurations cannot be used while registry.config_path is
defined.

Version 1 schema is deprecated

Version 2 of the containerd configuration toml is recommended format and the
default. Starting this version, a deprecation warning will be logged when
version 1 is used.

To check version, see the version value in the containerd toml configuration.

version=2

FreeBSD Runtime Support (Experimental)

This release includes changes that allow containerd to run on FreeBSD with a
compatible runtime, such as runj. This
support should be considered experimental and currently there are no official
binary releases for FreeBSD. The runtimes used by containerd are maintained
separately and have their own stability guarantees. The containerd project
strives to be compatible with any runtime which aims to implement containerd's
shim API and OCI runtime specification.

See the changelog for complete list of changes

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

Contributors

• Lantao Liu
• Mike Brown
• Phil Estes
• Sebastiaan van Stijn
• Derek McGowan
• Akihiro Suda
• Maksym Pavlenko
• Michael Crosby
• Wei Fu
• Davanum Srinivas
• Abhinandan Prativadi
• Stefan Berger
• Shengjing Zhu
• Xuean Yan
• Yanqiang Miao
• Samuel Karp
• Brian Goff
• Brandon Lum
• Kazuyoshi Kato
• Justin Terry
• Iceber Gu
• Paul "TBBle" Hampson
• Shiming Zhang
• Ian Campbell
• Kohei Tokunaga
• Daniel Canter
• Kevin Parsons
• Kir Kolyshkin
• Siddharth Yadav
• Antonio Ojea
• Tianon Gravi
• Tõnis Tiigi
• Jose Carlos Venegas Munoz
• Li Yuxuan
• heartlock
• Alakesh Haloi
• Jacob Blain Christen
• Jian Zeng
• Johannes M. Scheuermann
• Julien Balestra
• Kathryn Baldauf
• Rui Chen
• Tobias Klauser
• Xianglin Gao
• Zhoulin Xie
• Aditi Sharma
• Akshat Kumar
• Aldo Culquicondor
• Amr Mahdi
• Christopher M. Luciano
• Cory Bennett
• Crazykev
• Haiyan Meng
• Hajime Tazaki
• Ilya Dmitrichenko
• Martin Hickey
• Stephen J Day
• Tim Allclair
• Wade Lee
• Yu-Ju Hong
• pacoxu
• Aaron Crickenberger
• Avi Deitcher
• Benjamin Elder
• Boris Popovschi
• Byonggon Chun
• Claudiu Belu
• Daniel Nephin
• Ed Bartosh
• Evan Hazlett
• George Goh
• Hui Zhu
• James Jackson
• James Sturtevant
• Jintao Zhang
• Junior Santos
• Leonardo Taccari
• Lorenz Brun
• Mohammad Asif Siddiqui
• Peng Tao
• Thomas Hartland
• Vlad Ungureanu
• Yohei Ueda
• Zhenhao Zhang
• Zhiyu Li
• Aaron Lehmann
• Abhishek Kulkarni
• Ace-Tang
• AdamKorcz
• Alban Crequy
• Aleksa Sarai
• Alex Price
• Amit Barve
• Andrei Dobre
• Angela Li
• Antoine Huret
• Archana Shinde
• Ashray Jain
• Bingshen Wang
• Bowen Yan
• Brian Pursley
• Chethan Suresh
• Chris Fregly
• Ciprian Hacman
• Cong Liu
• Cyrill Troxler
• Darren Shepherd
• Dave Syer
• Deep Debroy
• Didier Durand
• Emmanuel Ramos
• Eric Ernst
• Erik Wilson
• Evan
• Fabiano Fidêncio
• Fabricio Voznika
• Filipe Brandenburger
• Fupan Li
• Gaurav Singh
• Georgi Sabev
• Giuseppe Capizzi
• Giuseppe Scrivano
• Gsealy Jiao
• Guangwen Feng
• Guanjun Gong
• Harshal Patil
• Hector Fernandez
• Henrik Schmidt
• HsuanChi (Austin) Kuo
• Hu Shuai
• Ivan Milchev
• Jakob
• Jamie Zhuang
• Jason Hall
• Jeremy Edwards
• Jeremy Williams
• Jess Frazelle
• Jian Qiu
• Joe Borg
• Jordan Hatcher
• Joris De Winne
• Jun Lin Chen
• Justin Cormack
• Kenta Tada
• Laszlo Janosi
• Li Ning
• Liu Hua
• Madhan Raj Mookkandy
• Madhav Jivrajani
• Maksim An
• Malepati Bala Siva Sai Akhil
• Mauricio Vásquez
• Michael Hamrah
• Morgan Bauer
• Moritz Johner
• Muhammad Kaisar Arkhan
• Nikhita Raghunath
• Nishchay Kumar
• Nitesh Konkar
• Odin Ugedal
• Pavel Tikhomirov
• Philip Marin
• Prashant Bhutani
• Qian Xiao
• Ricardo Aravena
• Robin Winkelewski
• Roy Yang
• Samarth Shah
• Sascha Grunert
• Shaobao Feng
• Shishir Mahajan
• Simon Kaegi
• Su Xiaolin
• Takumasa Sakao
• Teemu Kallio
• Thibaut Collet
• Tobias Bradtke
• Tyler Kellen
• Vishal Verma
• Wei Wei
• Yecheng Fu
• Yongkun Anfernee Gui
• Yue Zhang
• Yuxing Liu
• alexyadon
• blade
• chenxiaoyu
• duyanghao
• jiazhiguang
• kwgchi
• maodou
• maoyangLiu
• sarahnovotny
• shouhei
• songjiayang
• thxcode
• varsha teratipally
• yang yang
• zhangjianming
• zhangyadong
• zhuangqh

Changes

3059 commits

• df0cc5bd1 Merge pull request #5437 from dmcgowan/revert-arm64-release-builds
• 15d9703d6 Remove ARM64 releases from release notes
• 5d2e8e86d Revert "Release artifacts for Linux ARM64"
• 7942ae68b Revert "Specify seccomp target arch for CC"
• 32005190c Merge pull request #5431 from AkihiroSuda/go113
• 4196fb2b1 Merge pull request #5427 from claudiubelu/tests/measure-consumed-stats
• 8d2ce532f Merge pull request #5428 from AkihiroSuda/fedora34
• 3187b6dc8 tests: Adds consumed memory stats test
• f0b425890 Merge pull request #5429 from cpuguy83/fix_libseccomp_cc
• 969ec8949 Specify seccomp target arch for CC
• 4dc758d0c Merge pull request #5433 from AkihiroSuda/deprecate-aufs
• c19b7b64d RELEASES.md: recommend alternatives for deprecated features
• 8a62aa1c3 Deprecate built-in aufs snapshotter
• 4e7915f80 CI: allow Go 1.13 for Docker/Moby compatibility
• feee16e0e Merge pull request #5403 from claudiubelu/cri-integration-images
• 8e589e873 Vagrantfile: update to Fedora 34
• 5847340a7 tests: Refactors container image usage
• b0fb8a5a0 Merge pull request #5400 from dmcgowan/prepare-1.5.0
• 9f43eade6 Prepare v1.5.0-rc.3 release notes
• 6b9d4281c Merge pull request #5329 from hakman/release-linux-arm64
• 04f73e3f8 Merge pull request #5421 from dims/use-the-multi-arch-versions-of-test-images
• e46a4b3c6 Merge pull request #5423 from dims/test-build-image-script
• 4c7b960cb prow needs some additional setup for docker buildx
• 2e4c1d4b7 Use the multi-arch version of the test images
• 56f1b3fef Merge pull request #5419 from dims/script-to-build-images
• 05a653373 Merge pull request #5420 from dims/integration-tests-needs-lsof
• 4e00c4b65 integration tests needs lsof
• 177273680 Add script to build test images
• ca6a41915 Merge pull request #5416 from dims/add-multi-arch-support-for-test-images-take-2
• 1b5d59dfe Add multi-arch support for test images
• 9cf44ee13 Merge pull request #5406 from dims/separate-jobs-for-build-and-test-for-openlab
• 78e529727 add integration tests
• 2b0e6cdd4 Separate jobs for build and test for openlab/arm64
• cdd075853 Release artifacts for Linux ARM64
• 3dad67eed Merge pull request #5203 from tghartland/5008-target-namespace
• cb64dc825 Merge pull request #5401 from Iceber/use-unbuffered-channel
• efcb18742 Add unit tests for PID NamespaceMode_TARGET validation
• b48f27df6 Support PID NamespaceMode_TARGET
• 909660ea9 process: use the unbuffered channel as the done signal
• 7b7a230dd Merge pull request #5399 from dmcgowan/update-cgroup-vendor
• 0f332dadd Update cgroups for regenerated protos
• 079fe6bca Merge pull request #5395 from mikebrow/cmd-check-improve-error-checking
• a3fe5c84c Merge pull request #5383 from wzshiming/clean/process-io
• c3f5a6a93 Merge pull request #5394 from dmcgowan/prepare-1.5.0-rc.2
• 391b123a5 adds quiet option for ref
• c4d30c173 Merge pull request #5379 from ktock/fix-push-race
• ab1654d0e Fix PushHandler cannot push image that contains duplicated blobs
• 00f8d32ef add not found debug out for check cmd; update usage
• 55734b1c5 Prepare 1.5.0-rc.2 release notes
• b1eb024d9 Merge pull request #5393 from dmcgowan/update-containerd-org-deps-1.5
• 81c4ac202 Merge pull request #5256 from kolyshkin/seccomp-enabled
• 3ef337ae3 Update containerd vendors to tags
• 56512cca7 Merge pull request #4741 from thaJeztah/kudo_sudo
• d2d0afac0 Merge pull request #5385 from thaJeztah/bump_kubernetes_1.20.6
• 3abfb23b2 Merge pull request #5388 from thaJeztah/update_golang
• fbe1e140f Update Go to 1.16.3
• c1d1edbad gha: use sudo -E in some places to prevent dropping env-vars
• 93a602a8b Merge pull request #5269 from thaJeztah/update_fifo
• 7966a6652 Cleanup code
• 5d79d3adb go.mod: update kubernetes to v1.20.6
• 1c03c377e go.mod: github.com/containerd/fifo v1.0.0
• bbbd85138 Merge pull request #4415 from TBBle/wcow_commit_layers
• 3aae93a34 Merge pull request #5382 from thaJeztah/bump_uuid
• 69a30ad58 Merge pull request #5378 from Iceber/check-flag
• 3e59ee09a Merge pull request #5377 from samuelkarp/freebsd-zfs
• 12a2a2108 go.mod: github.com/google/uuid v1.2.0
• 688c4684a Merge pull request #5380 from samuelkarp/snapshotters
• 3292ea586 pkg/seccomp: use sync.Once to speed up IsEnabled
• 00b5c99b1 pkg/seccomp: simplify IsEnabled, update doc
• 6dd29c25f go.mod: github.com/containerd/aufs
• 330a2a809 go.mod: github.com/containerd/zfs
• 9efd3e238 Merge pull request #5360 from kzys/namespace-delete
• 1e5cb4edc Merge pull request #5368 from mxpv/runtime_cleanup
• 34780d67a runtime/shim: check the namespace flag first
• c3dde8c4b freebsd: add zfs to the default plugins
• f0890f9b3 Merge pull request #5375 from samuelkarp/freebsd-runtime
• b431fe4fc freebsd: don't run shim delete in deleted dir
• 1f4192daf freebsd: exclude v1 runtimes
• cb1580937 metadata: improve deleting a non-empty namespace's error message
• dda530a75 Merge pull request #5370 from cpuguy83/remove_junit_processor
• 5bf84034d Remove junit test result processor
• b83d04f91 Add variable names to runtime's interface definitions
• 993b86399 Add shim start opts
• 6ef0d383e Merge pull request #5271 from cpuguy83/ci_output_junit
• cc393ea87 Merge pull request #5279 from wzshiming/fix/backoff
• fca0da46b Merge pull request #5364 from wzshiming/fix/list-pids-lock
• 9e576b889 Optimize backoff
• 88b09e671 Merge pull request #5359 from ktock/v1cfg
• 5b1bbb22b Merge pull request #5367 from ktock/cvt-openwriter
• 5c02688b5 converter: use OpenWriter helper function
• fcf3b275f Add lock for ListPids
• 4f1813123 Merge pull request #5286 from payall4u/optimize-cri-redirect-logs
• fdb76f55d Fix backword-compatibility issue of non-versioned config file
• ce5d42fa2 Merge pull request #5351 from mikebrow/resolver-debug-improvement
• d21fe4625 adds log for each failed host and status not found on host
• c02081fdc Merge pull request #5357 from thxCode/support_windows_debug
• 0867c99b1 Merge pull request #5355 from thaJeztah/bump_cni
• 8a4cbabc6 Reimport windows layers when comitting snapshots
• 10ecf83ac Merge pull request #5358 from AkihiroSuda/docs-rootless
• 2de38a926 fix(windows): create debug npipe failure
• 41fc516a2 docs/rootless.md: recommend "easy way" over "hard way"
• 864a3322b go.mod: github.com/containerd/go-cni v1.0.2
• 5c6ea7fdc Merge pull request #5293 from wzshiming/fix/eveny-error-message
• c381ea27b Merge pull request #5213 from thaJeztah/bump_typeurl
• 824b61075 Merge pull request #5350 from thaJeztah/tagged_go_winio
• 06dcac501 Merge pull request #5349 from thaJeztah/use_tagged_imgcrypt
• ee34caccb go.mod: github.com/Microsoft/go-winio v0.4.17
• d478676d3 go.mod: github.com/containerd/imgcrypt v1.1.1
• 1dd45d51c go.mod: github.com/containerd/typeurl v1.0.2
• f968359ec Merge pull request #5346 from dmcgowan/prepare-1.5.0-rc.1
• 2305f0504 Merge pull request #5307 from maoyangLiu/fix-url
• abd4be07a fix the 404 url
• 984aa330d Merge pull request #5316 from alakesh/stress-snapshotter-cli-option
• 978ebbef6 Prepare 1.5.0-rc.1 release
• 68ee827dc Merge pull request #5342 from mikebrow/improve-error-out-for-bad-config
• a20213a6e Merge pull request #5343 from thaJeztah/update_imgcrypt
• b7c813690 Merge pull request #5283 from alakesh/check-out-of-space
• ce116d4c5 go.mod: github.com/containerd/imgcrypt v1.1.1-0.20210412181126-0bed51b9522c
• 5dde642fd Merge pull request #5344 from thaJeztah/update_cni_plugins
• d33733f11 Merge pull request #5336 from mxpv/shim
• 0550c3233 containerd-stress: add snapshotter option for stress test to use
• 8a04bd052 address recent runtimes config confusion
• c4778fe1b go.mod: github.com/containernetworking/plugins v0.9.1
• 5ce35ac39 devmapper: log pool status when mkfs fails
• 054a3e281 Merge pull request #5335 from dims/drop-support-for-version-1
• 75097b8ca hcsshim seems to have been updated
• 9ad087947 Switch all our tests to version 2
• 2a2d77959 Merge pull request #5337 from mxpv/bolt
• 187affc9b Merge pull request #5338 from AkihiroSuda/console-102
• d4fbff113 Merge pull request #4399 from TBBle/wcow_compare_layers_to_tar
• 6bf77c5eb Merge pull request #5341 from containerd/revert-5303-cri-remove-deprecated-default-untrusted
• ff2cf56e5 Merge pull request #5339 from AkihiroSuda/crun-019
• e96d2a5d9 Revert "remove two very old no longer used runtime options"
• 14f357b90 CI: update crun to 0.19
• 294331060 go.mod: github.com/containerd/console v1.0.2
• 7e3fd8da2 Merge pull request #5298 from jsturtevant/issue-5297
• bb6c0c2de Add more bolt utils
• 0ad8c0a16 Decouple shim start from task creation
• 2486eb8ff Merge pull request #5326 from thaJeztah/bump_hcsshim
• c7504987e Implement windowsDiff.Compare via hcsshim/pkg/ociwclayer
• a64a76846 Replace inline applyWindowsLayer using hcsshim
• 149fa366f Don't tease the logger with a %-less format string
• b399e2ef6 Don't lose Compare failure if aborting diff upload fails
• 36bf3f0e8 go.mod: github.com/Microsoft/hcsshim v0.8.16
• 6636e3618 Merge pull request #5257 from dmcgowan/prepare-1.5.0-rc.0
• 8e1a8ecd8 Prepare v1.5.0-rc.0
• 45df696bf Fix return event publishing error
• 4bc8f692f optimize cri redirect logs
• d06414036 Merge pull request #5302 from mikebrow/toml-cri-defaults
• 01a39262e Merge pull request #5324 from thaJeztah/no_libcontainer_devices
• 9bc8d63c9 cri/server: use containerd/oci instead of libcontainer/devices
• dd16b006e merge in the move to the new options type
• 9144ce967 shows our runc.v2 default options in the containerd default config
• ceb08756a Merge pull request #5321 from thaJeztah/fix_oom_score_test
• 1645db33d Merge pull request #5305 from thaJeztah/update_klauspost_compress
• 7648ad289 Merge pull request #5300 from adisky/fix-toml
• 3d20fa930 fix TestSetOOMScoreBoundaries
• 4d4117415 Change CRI config runtime options type
• 21ebeef74 integration: use busybox:1.32.0 since latest is unavailable
• 1edab6072 Merge pull request #5253 from thaJeztah/refactor_oom
• 88880f0f2 Merge pull request #5304 from mikebrow/cri-registry-doc-updates
• b52727342 Merge pull request #5308 from AkihiroSuda/add-imgcrypt-bin
• a4bc81779 Merge pull request #5312 from AkihiroSuda/expose-WithoutRunMount
• f9bcf4a8a add section link
• d4be6aa8f rm mirror defaults; doc registry deprecations
• 7bb73da6b runtime/v2/shim: remove unused SetScore() and remove sys.OOMScoreMaxKillable
• 91e7d21ee sys: add AdjustOOMScore() utility
• 44240116a sys: add boundary checks to SetOOMScore()
• ace1912bb sys: use assert for error checks in OOM tests
• 6e7271522 sys: add missing pre-condition checks in tests
• badd60d3f sys: un-export runningPrivileged(), remove runningUnprivileged()
• 21a175860 go.mod github.com/klauspost/compress v1.11.13
• 8b00eafca Merge pull request #5318 from mikebrow/update-cri-tools-k8s-staging
• 58c5fd09e re-enable cri test
• da998c81e move to gcr.io/k8s-staging-cri-tools test images
• 8ba8533bd pkg/cri/opts.WithoutRunMount -> oci.WithoutRunMount
• 92ea98eda cri-cni-release: add imgcrypt binaries (v1.1.0)
• 85041ffe5 Merge pull request #5276 from aaronlehmann/tracker-false-positives
• 4c1fa5719 remotes/docker: Only return "already exists" on push when the upload was successful
• dc8af03ba Merge pull request #5303 from mikebrow/cri-remove-deprecated-default-untrusted
• 0186a329e remove two very old no longer used runtime options
• 3db5af9b6 Merge pull request #5315 from dmcgowan/disable-broken-cri-tools-critest
• 58a07754a Temporarily disable cri-tools critest
• ff05d499e Merge pull request #5272 from thaJeztah/sync_test_replaces
• 261c107ff Merge pull request #5278 from mxpv/toml
• 251e3d15d Merge pull request #5299 from estesp/refkey-with-name
• 7ae0a60fb Add OCI ref.name to unique key in remotes handler
• 5ada2f74a Keep host order as defined in TOML file
• d9ff8ebef support multi-arch images for windows via ctr
• 9a9bd0975 Merge pull request #5270 from kzys/remove-blockdev
• af1e2af72 ci: upload junit formatted test results
• 1c05317a4 Merge pull request #5291 from ktock/generic-diff
• 6866b36ab Add workaround to keep docker hosts structs private
• c54d92c79 image: use generic decompressor for calculating DiffID
• 1faca349e integration/client: rename package to "client"
• 6fc9e4500 synchronize replace rules in integration/client go.mod with main go.mod
• 9e19a2984 Fix hosts test on Windows
• 3f406d4af Cleanup vendor
• d56b49c13 Rewrite Docker hosts parser
• e1f51ba73 Use os.File#Seek() to get the size of a block device
• 1b05b605c Merge pull request #5145 from aojea/happyeyeballs
• effe226d9 Merge pull request #5258 from fuweid/checkpoint-on-pause-state
• ddd4298a1 Migrate current TOML code to github.com/pelletier/go-toml
• 499c2f7d4 Vendor github.com/pelletier/go-toml
• 75a0c2b7d Merge pull request #5264 from mxpv/tests
• ed8cf6077 Merge pull request #5267 from estesp/up-integ-timeout
• 7b17a29da Merge pull request #5262 from cpuguy83/ci_cross_compile
• 219f1395b Merge pull request #5268 from thaJeztah/no_klog
• 61c749036 integration/util: remove dependency on k8s.io/klog/v2
• 4f7d1d74f Merge pull request #5260 from fuweid/limit-concurent-uploads-when-push
• f2d84035f Merge pull request #5266 from Ace-Tang/ace
• d9765f7bf Extend default timeout for nested VM integration run
• 5e94745f2 ctr: add --user for task exec
• f8c2f0475 remotes/ctr: allow to limit max concurrent uploads like downloads
• 80fa9fe32 Merge pull request #5135 from AkihiroSuda/default-config-crypt
• 4674ad7be Ignore some tests on darwin
• 55450e773 Run unit tests on CI for MacOS
• 311e326a1 Add CI job to cross compile all the things
• 10a498c7c Update go-winio to fix compile error on armv7
• 1a9c6f557 Revendor zfs to to fix integer overflow
• 548d984f2 Merge pull request #5132 from mikebrow/add-some-debug-out-for-dep-setups
• bcda849e7 Merge pull request #5133 from TBBle/correct-cleanup-of-windows-layers-in-test
• 1fd3d12f9 go mod tidy the client integration test module
• da7d96ba3 Clean up WCOW layers after tests in the correct order
• 9ad87b9ba adds critools-version
• 72b7f4bab task: allow checkpoint on pause state
• 31a0f92df Merge pull request #5234 from mxpv/http-dbg
• 181e2d421 Merge pull request #5250 from dmcgowan/cri-fix-reference-ordering
• 664088dd2 Merge pull request #5254 from voltbit/clarify-cri-registry-doc
• e4b9b1038 Make CRI registry docs more clear
• 2ad54a2cd Merge pull request #5255 from dmcgowan/bump-linux-integration-timeout
• 792336b09 Merge pull request #5245 from mxpv/oom
• ec4d7736d Increase timeout for linux integration tests
• eb7c7c71e Fix oom tests on non Linux
• d54225cce Merge pull request #5125 from Iceber/add-caller-info
• 717dde3c2 Merge pull request #5252 from thaJeztah/separate_userns
• 708299ca4 Move RunningInUserNS() to its own package
• 0886ceaea Fix reference ordering in CRI image store
• bf9db47e8 add caller info to the testHook
• edf648416 Merge pull request #5243 from AkihiroSuda/update-zfs-20210322
• 305b42583 use happy-eyeballs for port-forwarding
• 22ef69d77 Support HTTP debug in ctr
• 4e919ffab Merge pull request #5244 from pacoxu/fix/night-run
• 01765d097 night ci fix: add packages for ubuntu 20.04
• 8cdc1f13b go.mod: github.com/containerd/zfs v0.0.0-20210322090317-0e92c2247fb7
• 56f17a085 Merge pull request #5148 from wzshiming/fix/defer-cleanup
• 30e1e66e5 runtime/v2: Fix defer cleanup
• 6150170d9 Merge pull request #5235 from estesp/testimage-userns-ro
• 33776ada0 Use specific image for user namespaces tests
• a47feaf46 Merge pull request #4898 from timchenxiaoyu/makefile
• f7bd43c13 Merge pull request #5216 from estesp/testimage-429
• a7b456d2f Merge pull request #5233 from kzys/mkfs-error
• e0c94bb26 Merge pull request #4708 from kzys/enable-criu
• 0d569f8f4 Merge pull request #5229 from wzshiming/fix/log-cp-file
• 7704fe72d Specifically mention "mkfs.ext4" on the error from the command
• 2061227b5 Merge pull request #4949 from hs0210/work
• 1410220d8 Fix error log when copy file
• 86a7db486 Merge pull request #5227 from tonistiigi/grpc-stream-close
• fbf79545d Merge pull request #5230 from wzshiming/fix/log-kill-shim
• fe787efa2 Fix error log when kill shim
• 8d8c15ca5 contentproxy: ensure grpc stream is closed on commit
• 2d5f9bf87 Merge pull request #4990 from kzys/host-status
• 6e343f25e Switch test image to a non rate-limited manifest list
• 969b3d638 Merge pull request #5202 from wzshiming/fix/dgst-debug
• 63b605d8f Merge pull request #5210 from thaJeztah/bump_k8s
• 3f98a6d2d Merge pull request #5211 from pacoxu/pause/3.5
• 31c058735 Merge pull request #5218 from alakesh/runtime-v2-stress
• 92c1bbb25 Merge pull request #5222 from fuweid/follow-up-5174
• 9fdc96c09 runtime/v2: add comment for checkCopyShimLogError
• 24602e7a9 change default runtime for containerd-stress app
• 32a08f1a6 Merge pull request #4847 from cpuguy83/devices_by_dir
• b395f2f9a Merge pull request #5160 from MadhavJivrajani/master
• a0cc9b432 Merge pull request #5195 from fuweid/fix-5173
• 1a0973dde Merge pull request #5206 from Iceber/fix-new-container
• 5978fe807 Merge pull request #5212 from thaJeztah/gofmt_all_the_things
• 8731888ec Re-enable CRIU tests by not using overlayfs snapshotter
• b520428b5 Fix CRIU
• 4e76bcf06 gofmt -s -w all the things
• f201b78b9 Merge pull request #5205 from dmcgowan/prepare-v1.5.0-beta.4
• 767600899 Merge pull request #5207 from thaJeztah/bump_btrfs
• 569023fd5 go.mod: github.com/containerd/nri v0.0.0-20210316161719-dbaa18c31c14
• 0e1f59e89 go.mod: github.com/containerd/zfs v0.0.0-20210315114300-dde8f0fda960
• 1a28c2f7e Merge pull request #5200 from pacoxu/skip-error-check
• ffff68866 upgrade pause image to 3.5 for non-root
• 88d3881e1 go.mod: github.com/containerd/fifo v0.0.0-20210316144830-115abcc95a1d
• a22c43fa4 go.mod: github.com/containerd/aufs v0.0.0-20210316121734-20793ff83c97
• f6f861736 go.mod: github.com/containerd/btrfs v0.0.0-20210316141732-918d888fb676
• 460b35236 go.mod: kubernetes v1.20.4
• fef6bb8d3 Merge pull request #5204 from thaJeztah/overlayutils
• 5e484c961 runtime/v2/runc: fix the defer cleanup of the NewContainer
• e6086d9c0 Prepare release notes for v1.5.0-beta.4
• 34b7a5f09 Update mailmap
• 2755ead92 Merge pull request #4978 from cpuguy83/certs_dir
• ba8f9845e move overlay-checks to an overlayutils package
• 7776e5ef2 Support adding devices by dir
• a1138182d Merge pull request #5180 from dmcgowan/lint-enforce-comments
• fad66f94e Merge pull request #5174 from fuweid/fix-5130
• bd4f468c6 Merge pull request #5186 from cpuguy83/fix_docker_cert_loading
• 5461fa3a7 Merge pull request #5196 from Iceber/fix-rootfs
• d895118c7 runtime/v2/runc: fix leaking socket path
• a76cefd12 plugin status should be skip, not error
• 766e7953a Change dgst to digest in debug
• 4e8b2f309 rootfs: fix the error handling of the createInitLayer
• 6b410ba41 Merge pull request #5197 from Iceber/fix-ctr-command
• 06e6f45c3 Merge pull request #5198 from Iceber/fix-usage
• d3ad7f390 cmd/ctr: use e.g. in the command usage
• 231bbdc37 cmd/ctr: fix export command
• ecb881e5e add imgcrypt stream processors to the default config
• ac2726e12 cmd/containerd: deduplicate config*.go
• 9a7ca39cb defaults: add DefaultConfigDir
• 8f863afd3 Use net.IP.IsLoopback() to match loopback addresses
• eabd9b98b runtime: ignore file-already-closed error if dead shim
• e231b955d Merge pull request #5154 from estesp/zero-len
• 5b7f2657d Merge pull request #5184 from thaJeztah/fixate_buildtags
• f6a994273 Better error when handling a descriptor of size zero
• 92009ad7a Merge pull request #5164 from errordeveloper/master
• 6f94b156f Merge pull request #5189 from TBBle/reduce-load-on-ratelimited-docker.io
• 42266dadc Merge pull request #5182 from thaJeztah/bump_go_runc
• bd2c0898a go.mod: github.com/containerd/go-runc v0.0.0-20201020171139-16b287bc67d0
• 143283931 Merge pull request #5185 from thaJeztah/update_imgcrypt
• 24a8b460e go.mod: github.com/containerd/zfs v0.0.0-20210313052028-2233970b74b1
• f0b6bcb77 go.mod: github.com/containerd/aufs v0.0.0-20210313051948-ffdde1490233
• 5cfc4a80d Enable some image-pull tests on Windows
• b375f9012 Use k8s.gcr.io/pause:3.4.1 in pull-only tests
• bcc02002a go mod tidy after containerd moved to hcsshim v0.8.15
• b0b6d9aa0 Add support for using a host registry dir in cri
• 1fd99e24a Fix docker style cert loading.
• fcab1fe53 go.mod: github.com/containerd/imgcrypt 7ed62a527887
• 55a9bbc03 Prevent runc inheriting BUILDTAGS from containerd
• 8cf669ce3 Fix unsupported files exporting functions for apparmor and seccomp
• 35eeb24a1 Fix exported comments enforcer in CI
• 9d5c1165a Merge pull request #5178 from estesp/go-1.16.2
• 031775ee5 Merge pull request #5179 from dims/document-the-runtime-public-method
• b446ed1ca Document the Runtime public method
• a2f5a9d43 Merge pull request #5101 from dims/drop-github.com/Microsoft/hcsshim/test
• 8cbef0fad Update to Go 1.16.2
• 437b7f71b ci: log the status of GitHub Actions' VM at the end
• 6a4aa1e2e Separate go module for client tests
• d8208e2e3 Merge pull request #5170 from dims/switch-zuul-merge-mode
• 481105834 Switch from merge-resolve(default) to merge mode for containerd-build-arm64
• 2205da64a clean up install-cni and install-critools
• 1b1bb4870 adds a new install-deps in the makefile; and some debug out
• ce8e8e890 Merge pull request #5036 from thaJeztah/split_runc_binary
• 381cbdd39 Merge pull request #5056 from estesp/go-1.16
• d1b778435 Use ErrUnexpectedStatus more consistently
• a11d78578 Include URL and method in ErrUnexpectedStatus
• 8634cd9df Merge pull request #5157 from AkihiroSuda/deflake-TestRestartMonitor
• c55492f8d Update to Go 1.16.1
• ee84e8575 deflake TestRestartMonitor
• 2b1e91367 Merge pull request #5156 from estesp/step-name
• c9c7665bb CI: Add a name for the vagrant up step
• 95513021e Merge pull request #5150 from thaJeztah/update_mountinfo
• d629a08eb go.mod: github.com/moby/sys/mountinfo v0.4.1
• 79a51cd16 move runc version to a separate file for easier consumption
• 8325ba5d3 Separate runc binary version from libcontainer version
• b89a63a23 Remove references to apparmor and selinux buildtags for runc
• 17ab5dd08 Merge pull request #5114 from alakesh/print-unpack-time
• ddf6594fb Merge pull request #5076 from AkihiroSuda/ovl-k511
• 9f5244f41 Print elapsed time for image unpack
• a5d17eb50 Merge pull request #5143 from kevpar/fix-lookpath
• 9ec277895 Merge pull request #4467 from cyphar/apparmor-update-profile
• c9afc4250 Fix error checking when resolving shim binary path
• 6d68490ef Merge pull request #5014 from Iceber/update-pause-version
• 185aaf207 Merge pull request #5141 from dims/create-symlink-to-avoid-duplicating-files-in-cloud-init
• f6a07f444 Merge pull request #5140 from mxpv/reader
• c193e121f Create symlink to avoid duplicate cloud init
• 571cc32df Add OpenReader to create ReaderAt interface
• 7738246cd Merge pull request #5111 from ctrlaltdel121/master
• da137a7a1 Merge pull request #5134 from AkihiroSuda/dump-apparmor
• 0580bd699 apparmor: add DumpDefaultProfile
• f37ae8fc3 move to v3.4.1 for the pause image
• a72fe7da2 Merge pull request #5106 from Iceber/update-building-readme
• 4514bc9c5 Merge pull request #5127 from dmcgowan/update-release-md
• aa8448a28 Update RELEASES.md to reflect latest releases
• 02334356d Merge pull request #5120 from dmcgowan/1.5-release-notes-update
• 9ba531c31 Prepare release notes for 1.5.0-beta.3
• 8e2072661 Merge pull request #5095 from dims/fix-pull-containerd-node-e2e-failure
• fa66f93c0 Merge pull request #5117 from Iceber/fix-container-status
• 92ab1a63b cri: fix container status
• 498eebe86 Merge pull request #5123 from fuweid/update-bug-report-template
• 34e838581 .github: update bug_report.md with hint and tip
• bb3fcf62f Merge pull request #5119 from mxpv/dm
• 15a4df0ba fix names and paths for containerd master
• 1dcfe7fa8 Merge pull request #5040 from estesp/http-trace
• 6762c6f2d Merge pull request #5115 from kevpar/update-hcsshim
• e1b4c0ad4 Remove flaky devmapper check
• 2f71f4f63 Merge pull request #5116 from fuweid/carry-4825
• 51a72f049 mark device faulty after parent fails to suspend
• 91ff31498 Merge pull request #5009 from thaJeztah/fix_install_scripts
• 164573897 script/setup: use git clone instead of go get -d
• 591caece0 cri: check fsnotify watcher when receiving cni conf dir events
• 46fd9e440 update BUILDMING.md
• 51992133a Allow HTTP tracing in push/pull via --trace flag
• 82dccdc49 Update github.com/Microsoft/hcsshim to v0.8.15
• 134f7a737 Merge pull request #5007 from fidencio/wip/allow-shimv2-to-also-be-loaded-from-an-arbitrary-path
• 52a602190 Merge pull request #5102 from dims/cleanup-k8s.io/kubernetes-update-aufs-zfs
• c3eecf4f7 Update to newest imgcrypt, aufs and zfs
• 54a63a3dd Merge pull request #5088 from Iceber/update-linuxkit-readme
• 1f801c02c Merge pull request #5099 from AkihiroSuda/cache-vagrant
• 4702af917 CI: cache ~/.vagrant.d/boxes
• 9ade247b3 overlay: support "userxattr" option (kernel 5.11)
• ba199129b update linuxkit readme
• 10bbd1a46 Merge pull request #5051 from wzshiming/fix/missing-close
• 46c974650 Merge pull request #5064 from Iceber/fix-redundant-slice
• 07a3ce3d7 Merge pull request #5080 from dmcgowan/prepare-1.5.0-beta.2
• 9884730e5 Merge pull request #5069 from AkihiroSuda/restart-fast
• 437955792 Merge pull request #5086 from eramos2/revise-docs
• 8dbe53a2a Merge pull request #5070 from yoheiueda/empty-masked
• c61f0cead Fix broken docs links (#5085)
• f7f6aabff oci: fix superfluous slice operations
• 224efa9da Fixed wording in docs, and broken link
• 2bc8c779c Merge pull request #5068 from AkihiroSuda/restart-test
• 119fe7046 Merge pull request #5071 from AkihiroSuda/restart-parallel
• 7738370db Merge pull request #5083 from AkihiroSuda/remove-dep-gocapability
• 7ee610edb drop dependency on github.com/syndtr/gocapability
• 982217335 cap: rename FromUint64 to FromBitmap
• 6ab6eaa79 restart: skip Sleep() for the first iteration of the reconcilation
• 36df282dc restart: add an integration test
• b23dc1131 restart: parallelize reconcile()
• f38a79703 Prepare release notes for 1.5.0-beta.2
• 07f1df454 cri: set default masked/readonly paths to empty paths
• af4c55fa4 Merge pull request #5078 from AkihiroSuda/fix-5077
• b4ef1e9dc CI: fix "ls: cannot access '/etc/cni/net.d': Permission denied"
• 757be0a09 Merge pull request #5017 from AkihiroSuda/parse-cap
• 9173d3e92 Merge pull request #5021 from wzshiming/fix/signal_repeatedly
• 08d765af9 Merge pull request #5028 from Iceber/runtime-spec
• 096e99fe7 Merge pull request #5057 from estesp/moar-time
• 13f904cde Tune test timeouts for GH Actions
• e58be59cb Merge pull request #5054 from jterry75/fix_env_windows
• 06e4e0956 cri: append envs from image config to empty slice to avoid env lost
• c32ccdf8b Merge pull request #5024 from yadzhang/deepcopy-imageconfig
• d30a6c005 Merge pull request #5045 from wzshiming/fix/file-not-closed
• 5e4acc043 Fix file is not closed
• 05ef2fe2f Fix missing close
• 746cef0bc Merge pull request #5044 from wzshiming/fix/empty-error-warpping
• 08318b1ab cri: append envs from image config to empty slice to avoid env lost
• 59db8a10e Fix empty error warpping
• a98c83c2d Merge pull request #5033 from chrisfregly/master
• 80e1d98f6 fix: issue #5032
• 0cc399138 Merge pull request #4912 from dcantah/dcantah/wcow-sandbox-size
• dc6f5ef3b Fix repeated sending signal
• 41e3057cc Merge pull request #5025 from jeremyje/win20h2
• 88d97362b Merge pull request #5027 from kevpar/config-check
• 2adb2ea64 Merge pull request #4973 from lorenz/move-netns-into-statedir
• 36d0bc1f2 Allow moving netns directory into StateDir
• e288feacf Merge pull request #5026 from crosbymichael/cni-anno
• 51f985cb1 oci: move cap UT to _linux_test.go
• d08aa4b68 oci: fix the file mode of the device
• a2d1a8a86 oci.WithPrivileged: set the current caps, not the known caps
• 5f051c1d7 Improve error detection when loading config
• e874e2597 [cri] add pod annotations to CNI call
• 1c81071d3 Add references to Windows 20H2 test images.
• ddcc431c1 Merge pull request #5016 from thaJeztah/bump_cgroups
• 6be7c9f4e go.mod: containerd/cgroups 8a68de5
• cfa842c27 Merge pull request #5003 from dmcgowan/prepare-1.5.0-beta.1
• a2973c70a Prepare release notes for 1.5.0-beta.1
• b3f240206 Merge pull request #5002 from crosbymichael/anno-image-name
• e908be5b5 Merge pull request #5001 from kzys/no-lint-upgrade
• d05f7bdf0 Merge pull request #5011 from thaJeztah/setup_go_v2
• 25e42e702 Merge pull request #5004 from thaJeztah/bump_golang
• 129c67dc8 GHA: use setup-go@v2
• d80dbdae6 v2, util: Take the full binary path when starting the shimv2 process
• ec7d905f4 Update to go 1.15.8
• 5f2d02adc Merge pull request #4717 from thaJeztah/reduce_libcontainer_use
• ccbeb550b Merge pull request #4991 from kzys/no-auto-clear
• e9e3b1d6f Merge pull request #5000 from kzys/fix-assert-check
• 07db46ee2 lint: update nolint syntax for golangci-lint
• b14ccd205 ci/gha: upgrade golangci-lint from v1.29.0 to v1.36.0
• aa5e55ad9 Merge pull request #4980 from thaJeztah/prevent_cio_npe
• e178af2d3 Merge pull request #4999 from thaJeztah/retry_fedora
• 05a2e280a mount: make setupLoop() work with with Autoclear
• 2ac33d79f test: fix assert.Check's argumets to show its parameters correctly
• f101c8ac6 ci/gha/fedora: retry vagrant up
• 04d061fa6 update runc to v1.0.0-rc93
• 54cc3483f pkg/cri/server: don't import libcontainer/configs
• 99cb62f23 [cri] add image-name annotation
• ccde82da2 Merge pull request #4987 from Random-Liu/fix-auth-config-conversion
• b5bf1fd5d Fix deprecated registry auth conversion.
• 40542305b Merge pull request #4994 from kzys/kill-before-buf
• 310e59073 test: stop containerd before accessing the stdout
• f07e1811e Merge pull request #4988 from Iceber/fix-runc-v2-service
• b458583b7 runtime: fix shutdown runc v2 service
• a39478ab9 Merge pull request #4986 from kzys/devmapper-log
• db6075fc2 snapshot/devmapper: log actual values to investigate #4965
• 49c5c1487 Merge pull request #4906 from payall4u/bugfix/fix-open-shim-fifo
• 7a468a3f3 cio.copyIO: refactor to use cio.Close() (windows)
• 219fa3d0a cio.copyIO: fix pipes potentially not being closed (Windows)
• baf6c1d5e cio: openFifos() use named return variables to use in defer()
• 6a2d3990d cio: FIFOSet.Close() check if FIFOSet is nill to prevent NPE
• 957fa3379 change flag from RDONLY to RDWR and close the fifo correct
• d8572b6ca apparmor: handle signal mediation
• 19ee068f9 Merge pull request #4974 from adisky/update-protobuf
• 1423e9199 Update gogo/protobuf to v1.3.2
• cb6f66504 Merge pull request #4975 from thaJeztah/mod_tidy
• 6c69cd55f Makefile: run "go mod tidy" when vendoring
• c28533c7a Merge pull request #4972 from crosbymichael/exec-sync
• 591d7e2fb remove exec sync debug contents from logs
• c28e42441 Merge pull request #4922 from kinvolk/alban_pod_annotations
• 28e4fb25f cri: add annotations for pod name and namespace
• 20346607b Merge pull request #4701 from kzys/content-store-filter
• f615c58dc Merge pull request #4682 from fuweid/cri-handle-exit-event-separate
• 3299c5560 Merge pull request #4967 from dmcgowan/cleanup-root
• 9108373cb Merge pull request #4968 from dmcgowan/add-prune-references
• e56de6309 cri: handle sandbox/container exit event separately
• 9aca94c5b Add prune command to remove layer references
• 643bb9b66 Merge pull request #4958 from AkihiroSuda/crun-017
• aae24ecbc Merge pull request #4963 from zhsj/move-runtimeopt
• 9e78a001b Merge pull request #4964 from zhsj/cgo
• 074873c68 Add cgo tag to btrfs plugin
• 5142c3842 Merge pull request #4960 from AkihiroSuda/eol-12
• 0cd8309c8 Merge pull request #4959 from AkihiroSuda/go1.15.7
• 2818fdeba Move runtimeoptions out of cri package
• d49e1d239 RELEASES.md: v1.2 reached EOL on October 15, 2020
• 45265febd Bump Golang 1.15.7
• 80243b866 CI: update crun to 0.17
• 0bbbc59b9 Merge pull request #4957 from thaJeztah/update_seccomp_profile
• 809635b60 Merge pull request #4759 from anmaxvl/anmaxvl/windows-logging-driver
• 5a66c2ae5 Merge pull request #4881 from AkihiroSuda/converter
• 5ca3ac65c add Image content converter
• 9b9de47eb Merge pull request #4824 from dcantah/dcantah/reuse-scratch
• 392b2857a Merge pull request #4848 from katiewasnothere/ctr_image_chainid
• e1445dff1 profiles: seccomp: update to Linux 5.11 syscall list
• ddb5e1651 Enhance logging driver and ctr tasks to support windows
• 83f8d6126 Merge pull request #4925 from dmcgowan/prepare-1.5.0-beta.0
• c4bff3d17 Merge pull request #4943 from AkihiroSuda/platforms-literallyonly
• 7d6d52646 Add release notes for v1.5.0-beta.0
• c35b4cfed Merge pull request #4955 from adisky/fix-doc
• d09bf1886 Clean Up Doc and fix some broken links
• 1230bd630 Merge pull request #4952 from crosbymichael/label-etc-files
• 9c3f17139 Merge pull request #4953 from ImJasonH/cpuinfo
• 363f2c392 Derive cpuinfo as needed, instead of at init-time
• a73103923 [cri] label etc files for selinux containers
• 1d26595cf Add unit test for func in remotes/docker/pusher.go
• ff1451cab Scratch size customization and UVM scratch creation for WCOW snapshotter
• e22ce0fa0 platforms: add subarchless version of Only()
• 66fec3bbb Merge pull request #4932 from tianon/arm64-fallback
• cb76f534f Merge pull request #4865 from yukiisbored/yuki_is_bored/openbsd-support
• 3e5acb9d9 Add scratch space re-use functionality to LCOW snapshotter
• 4073aaa7a Allow arm64 to fallback to arm (v8, v7, v6, v5)
• 124fc14a4 Merge pull request #4926 from dims/update-k8s-to-latest-v1.20.x
• 14df541a4 Add a new flag to images pull for printing out the pulled image's chainID
• 32506bd45 Merge pull request #4934 from dims/bump-golang-1.15.6
• b72534967 Bump Golang 1.15.6
• 378c11924 Bump k8s deps to v1.20.1
• abc0041a0 Merge pull request #4918 from liusdu/sig_bus
• 38604a76c Merge pull request #4933 from TBBle/fix-resolver-header-map-panic
• 7dffdfa56 Move documentation and helper directories out of root
• 785ac3ab7 Ensure request.header is never nil
• 550b4949c Merge pull request #4700 from mikebrow/cri-security-profile-update
• 3b6a38680 Merge pull request #4528 from tianon/platforms-compare
• e62d03b61 Merge pull request #4578 from thaJeztah/use_moby_sys
• 9db6aa625 Merge pull request #4302 from songjiayang/update-docker-resolver
• 86277395c signal: do not print message when dealing with SIG_PIPE
• a4f4a4311 Merge pull request #4916 from stefanberger/streamproc_env_vars
• 5fa5f15de Add amd64->386 fallback
• 6bf565045 Merge pull request #4923 from fuweid/fix-wrong-context
• 1917ca5f7 Allow passing environent variables to StreamProcessors
• 04df60d10 Merge pull request #4858 from samuelkarp/freebsd-native-snapshotter
• 846cb963c runtime/v2: should use defer ctx to cleanup
• 75c264622 Merge pull request #4902 from mxpv/losetup
• d7ec6e9e8 Merge pull request #4917 from AkihiroSuda/demote-introspection-log-level
• 2374178c9 pkg/cri/server: optimizations in unmountRecursive()
• 757291920 mount: remove remaining uses of mount.Self()
• 474abe572 mount: remove unused mount.PID()
• f6a0ec7c0 mount.CleanupTempMounts() use github.com/moby/sys/mountinfo
• 43578a9d6 mount: mount.PID(), mount.Self(): change signature to return pointers
• fb464b94d mount: replace mountinfo handling with moby/sys/mountinfo
• a9cc2a772 introspection: demote log level
• 7c6d710bc Merge pull request #4911 from dims/reduce-clutter-of-log-entries-during-process-exec
• 092f9e607 Merge pull request #4909 from fenggw-fnst/work
• 1f5b84f27 [CRI] Reduce clutter of log entries during process execution
• 3e7bb721d Fix typo in comment
• 18ad79d32 Merge pull request #4907 from mxpv/headers
• b236a9337 Merge pull request #4896 from AkihiroSuda/export-skip-non-distributable
• c1b01eabc Add copyright header to proto files
• eb1649225 Refactor loseup test
• 5d1955ac2 Merge pull request #4899 from zhsj/cri-install-doc
• c5fa0298c Address loop dev PR comments #4178
• b7026236f snapshot/devmapper: use losetup in mount package
• 9e4207016 mount: handle loopback mount
• 380b52652 Bring OpenBSD support
• d64917403 standard makefile,fix not work no macos
• 91dc69ee4 docs: point cri release tarball to github release page
• 602af6f67 Merge pull request #4895 from AkihiroSuda/remove-redundant-secreport
• e2e2c5737 export: add --skip-non-distributable
• d50de11ce ISSUE_TEMPLATE: remove redundant "report a security issue" button
• 9067796ce Merge pull request #4891 from tianon/generic-arm-vector
• 9072b0914 Refactor platforms.Only with a "platformVector" helper
• 7a2720f5e Merge pull request #4879 from tianon/platforms-only-test
• 9d98f882b Merge pull request #4859 from dcantah/update-hcsshim-winio
• cf62a557a Merge pull request #4882 from AkihiroSuda/issue-question-guide
• 9a7bb7e40 add guidance about GitHub Discussions
• 66a3f2cbc Add platforms.Only test
• 178e9a101 Merge pull request #4866 from zhsj/doc-fix
• ac5ca3a41 Merge pull request #4841 from AdamKorcz/fuzz1
• b624486c8 native: support for FreeBSD
• d6baafa75 mount: basic support for FreeBSD
• 5988bfc1e docs: Various typo found by codespell
• b4c604692 docs: Move autocomplete distribution section next to install section
• 1cc3c7f4a docs: Remove appveyor badge
• 454e54033 docs: Tweak installing btrfs dependency on Debian/Ubuntu
• 13917b03d docs: Update command in BUILDING after moving to go modules
• dc207b654 Merge pull request #4860 from masters-of-cats/pr-process-not-found-err
• 3698bc4ff Added 2 fuzzers
• a551492e9 Update hcsshim and go-winio vendoring
• 7451dd1ed Return GRPC not found error instead of plain one
• ce7024558 Merge pull request #4863 from crosbymichael/log-dir
• 070b69844 Merge pull request #4845 from skaegi/oom_score-max
• 2e442ea48 [cri] ensure log dir is created
• 3cd1c832e Merge pull request #4796 from jsj/jsj/4572
• a5f9613b8 Merge pull request #3927 from katiewasnothere/snapshotter_check
• 318e34b98 Merge pull request #4855 from tonistiigi/push-concurrent-access
• 7fa02f3af Merge pull request #4854 from tonistiigi/fix-push-auth
• 4dfec7fa0 pusher: add missing authentication support for requests
• bf323c5bd docker: avoid concurrent map access panic
• e922d5553 Merge pull request #4849 from AkihiroSuda/remove-selinux-tag
• 0c0ff6efc Merge pull request #4850 from wangmaodou/update-runc-doc
• b197a66f4 docs: update RUNC.md
• 7e6e4c466 remove "selinux" build tag
• da2fd657a Add bounds on max oom_score_adj value for AdjustOOMScore
• 23315f864 Merge pull request #4840 from AkihiroSuda/with-container-labels-2
• a9cc80192 Merge pull request #4821 from mxpv/tests
• d1ced4f8a Merge pull request #4833 from AkihiroSuda/restart-with-log-uri
• 5d147bdc4 Merge pull request #4842 from AkihiroSuda/expose-fs-user-util
• 8a57d70a5 oci: expose getUserFromPath and getGIDFromPath
• 041eb3ac3 container_opts.go: add WithAdditionalContainerLabels
• ca292da14 Requested Changes
• 09241fd21 Mention built-in CRI support in README
• 0356d5d4b restart: allow passing existing log URI object
• 004214808 Merge pull request #4831 from AkihiroSud...