containerd 1.6.25

Welcome to the v1.6.25 release of containerd!

The twenty-fifth patch release for containerd 1.6 contains various fixes and updates.

Notable Updates

• Check whether content did not needs to be pushed to remote registry and cross-repo mounted or already existed (#9111)
• Soft deprecate log package (#9105)
• Always try to establish tls connection when tls configured (#9189)
• CRI: stop recommending disable_cgroup (#9169)
• Allow for images with artifacts layers to pull (#9150)
• Require plugins to succeed after registering readiness (#9166)
• Avoid potential deadlock in create handler in containerd-shim-runc-v2 (#9210)
• Add handling for missing basic auth credentials (#9236)
• Add a new image label if it is docker schema 1 (#9267)
• Fix ambiguous tls fallback (#9300)
• Expose usage of deprecated features (#9329)
• Fix shimv1 leak issue (#9345)
• Go version update to 1.20.10(#9264)
• Update runc to v1.1.10 (#9360)
• CRI: fix using the pinned label to pin image (#9382)

See the changelog for complete list of changes

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

Contributors

• Samuel Karp
• Derek McGowan
• Sebastiaan van Stijn
• Phil Estes
• Wei Fu
• Kazuyoshi Kato
• Akhil Mohan
• Akihiro Suda
• Chen Yiyang
• Fabian Hoffmann
• Iceber Gu
• Mike Brown
• Paweł Gronowski
• Austin Vazquez
• Fahed Dorgaa
• James Sturtevant
• Kern Walster
• Marat Radchenko
• Qiutong Song
• Tony Fouchard
• ruiwen-zhao

Changes

82 commits

• [release/1.6] Prepare release notes for v1.6.25 (#9394)
  • 723d26ab2 Prepare release notes for v1.6.25
  • 1f865eba1 update mailmap
• [release/1.6] cri: fix using the pinned label to pin image (#9382)
  • b49815300 cri: fix update of pinned label for images
  • 751b0c186 cri: fix using the pinned label to pin image
• [Release/1.6] vendor: golang.org/x/net v0.17.0 (#9387)
  • fb5568608 vendor: golang.org/x/net v0.17.0
  • 61ad86f6f vendor: golang.org/x/text v0.13.0
  • 4b431c844 vendor: golang.org/x/sys v0.13.0
• [Release/1.6] CVE-2022-1996 fix for go-restful (#9385)
  • 62d402275 Remove CVE-2022-1996 from containerd binary upgrading go-restful to 2.16.0
• [release/1.6] Enhance container image unpack client logs (#9380)
  • 3e68bf65a Enhance container image unpack client logs
• [release/1.6] update github.com/containerd/nri v0.1.1 (#9107)
  • 0dd65c826 [release/1.6] update github.com/containerd/nri v0.1.1
• [release/1.6 backport] update runc binary to v1.1.10 (#9360)
  • c73be2446 update runc binary to v1.1.10
• [release/1.6] Expose usage of cri-api v1alpha2 (#9357)
  • 746bcf2eb Expose usage of cri-api v1alpha2
• [release/1.6] fix: shimv1 leak issue (#9345)
  • 8b51a95fb fix: shimv1 leak issue
• [release/1.6] update to go1.20.10, test go1.21.3 (#9264)
  • 6741f819b [release/1.6] update to go1.20.10, test go1.21.3
  • 49615a0e9 [release/1.6] update to go1.20.9, test go1.21.2
• [release/1.6] cri: add deprecation warnings for mirrors, auths, and configs (#9355)
  • b68204e53 cri: add deprecation warning for configs
  • ae8c58319 cri: add deprecation warning for auths
  • 455edcad2 cri: add deprecation warning for mirrors
  • 878823f4d cri: add ability to emit deprecation warnings
• [release/1.6] deprecation: new package for deprecations (#9329)
  • 477b7d6a1 ctr: new deprecations command
  • 24068b813 dynamic: record deprecation for dynamic plugins
  • 218c7a1df server: add ability to record config deprecations
  • dfb9e1deb pull: record deprecation warning for schema 1
  • 90b42da6f introspection: add support for deprecations
  • 0b6766b37 api/introspection: deprecation warnings in server
  • de3cb4c18 warning: new service for deprecations
  • da1b4419b deprecation: new package for deprecations
• [release/1.6] integration: deflake TestIssue9103 (#9353)
  • bca8a3f65 integration: deflake TestIssue9103
• [release/1.6] ci: Use Vagrant on ubuntu-latest-4-cores (#9332)
  • 0985f7a43 ci: Use Vagrant on ubuntu-latest-4-cores
• [release/1.6] Fix ambiguous tls fallback (#9300)
  • 5dd64301c Check scheme and host of request on push redirect
  • 51df21d09 Avoid TLS fallback when protocol is not ambiguous
• [release/1.6] Add a new image label if it is docker schema 1 (#9267)
  • 8108f0d03 Add a new image label if it is docker schema 1
• [release/1.6 backport] fix protobuf aarch64 (#9284)
  • 5376afb3d fix protobuf aarch64
• [release/1.6] remotes: add handling for missing basic auth credentials (#9236)
  • e529741d3 remotes: add handling for missing basic auth credentials
  • ca45b92f4 Add ErrUnexpectedStatus to resolver
  • 77c0175b4 Improve ErrUnexpectedStatus default string
• [release/1.6] Update x/net to 0.13 (#9130)
  • 275fc594d Bump x/net to 0.13
• [release/1.6] Require plugins to succeed after registering readiness (#9166)
  • 5223bf39a Require plugins to succeed after registering readiness
  • 8f5eba314 cri: call RegisterReadiness after NewCRIService
• [release/1.6 backport] containerd-shim-runc-v2: avoid potential deadlock in create handler (#9210)
  • 7b61862e7 *: add runc-fp as runc wrapper to inject failpoint
  • 5238a6470 containerd-shim-runc-v2: avoid potential deadlock in create handler
  • 65e908ee1 containerd-shim-runc-v2: remove unnecessary s.getContainer()
  • 1dd9acecb Uncopypaste parsing of OCI Bundle spec file
  • 71c89ddf2 [release/1.6]: Vagrantfile: install failpoint binaries
• [release/1.6] cri: stop recommending disable_cgroup (#9169)
  • 7a0c8b6b7 cri: stop recommending disable_cgroup
• [release/1.6] Allow for images with artifacts to pull (#9150)
  • 8066dd81c Allow for images with artifacts to pull
• [release 1.6] remotes/docker: Fix MountedFrom prefixed with target repository (#9192)
  • 2fffc344a remotes/docker: Fix MountedFrom prefixed with target repository
• [release/1.6] remotes: always try to establish tls connection when tls configured (#9189)
  • 6b5912220 remotes: always try to establish tls connection when tls configured
• [release/1.6] Build binaries with 1.21.1 (#9180)
  • 37c758de1 Build binaries with 1.21.1
• [release/1.6 backport] alias log package to github.com/containerd/log v0.1.0 (#9105)
  • f1591cc9b alias log package to github.com/containerd/log v0.1.0
  • f68d2d93b vendor: golang.org/x/sys v0.7.0
  • f305fb233 vendor: github.com/stretchr/testify v1.8.4
  • 4e24a30af vendor: github.com/sirupsen/logrus v1.9.3
• [release/1.6] remotes/docker: Add MountedFrom and Exists push status (#9111)
  • b66c818ba remotes/docker: Add MountedFrom and Exists push status

Changes from containerd/log

9 commits

• Update golangci to 1.49 (#1)
  • 89c9a54 Update golangci to 1.49
  • cf26711 Update description in README
  • f9f250c Add project details
  • fb7fe3d Add github CI flow
  • 7e13034 Add go module
  • 16a3c76 Rename log import from logtest
  • 698c398 Add README
  • 87c83c4 Add license file

Changes from containerd/nri

3 commits

• [release/0.1 backport] remove containerd as dependency (#58)
  • 4275101 Task: fix typo in godoc
  • f6acbf1 remove containerd as dependency

Dependency Changes

• github.com/containerd/log v0.1.0 new
• github.com/containerd/nri v0.1.0 -> v0.1.1
• github.com/emicklei/go-restful v2.9.5 -> v2.16.0
• github.com/sirupsen/logrus v1.9.0 -> v1.9.3
• github.com/stretchr/testify v1.8.1 -> v1.8.4
• golang.org/x/crypto 3147a52a75dd -> v0.14.0
• golang.org/x/net v0.8.0 -> v0.17.0
• golang.org/x/sys v0.6.0 -> v0.13.0
• golang.org/x/term v0.6.0 -> v0.13.0
• golang.org/x/text v0.8.0 -> v0.13.0

Previous release can be found at v1.6.24