containerd 1.6.7

Welcome to the v1.6.7 release of containerd!

The seventh patch release for containerd 1.6 contains various fixes,
includes a new version of runc and adds support for ppc64le and riscv64
(requires unreleased runc 1.2) builds.

Notable Updates

• Update runc to v1.1.3 (#7036)
• Seccomp: Allow clock_settime64 with CAP_SYS_TIME (#7172)
• Fix WWW-Authenticate parsing (#7131)
• Support RISC-V 64 and ppc64le builds (#7170)
• Windows: Update hcsshim to v0.9.4 to fix regression with HostProcess stats (#7200)
• Windows: Fix shim logs going to panic.log file (#7242)
• Allow ptrace(2) by default for kernels >= 4.8 (#7171)

See the changelog for complete list of changes

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

Contributors

• Phil Estes
• Daniel Canter
• Derek McGowan
• Akihiro Suda
• Kazuyoshi Kato
• Mike Brown
• Sebastiaan van Stijn
• Wei Fu
• Baoshuo
• Gabriel Adrian Samfira
• Henry Wang
• Iceber Gu
• Marvin Giessing

Changes

40 commits

• [release/1.6] Update release build timeout (#7250)
  • eccb82f6d Update release build timeout to 20 minutes
• Prepare releases notes for 1.6.7 (#7225)
  • 6a854d4b5 Update mailmap
  • 61612e1a2 Prepare release notes for 1.6.7
• [release/1.6] Update golang to 1.17.13 (#7244)
  • d199ee462 Update golang to 1.17.13
• [release/1.6] Backport: Change os.Stderr reassign for Windows service (#7242)
  • 0578d20c5 Change os.Stderr reassign for Windows service
• [release/1.6] Backport: bump macos runner version (#7230)
  • 12cae4961 Update Vagrant CI to macos-12
  • bc4091aae chore: bump macos runner version
• [release/1.6] Backport Windows HostProcess test improvements (#7227)
  • cb73bd050 Windows HostProcess container CRI stats test
  • ac388525a Add validations for Windows HostProcess CRI configs
• [release/1.6] go.mod: Bump hcsshim to v0.9.4 (#7200)
  • 0007f40fe [release/1.6] go.mod: Bump hcsshim to v0.9.4
• [release/1.6] Update Fedora version to 36 (#7217)
  • c9607e78c Update Fedora version to 36
• [release/1.6] Support RISC-V 64 (#7170)
  • 2952b66c0 CI: add riscv64 builds
  • 6b2dc9a37 release/Dockerfile: update Ubuntu to 22.04 for supporting riscv64
  • 745dc07c4 seccomp: support riscv64
  • c2f841f21 Create ppc64le release
• [release/1.6] allow ptrace(2) by default for kernel >= 4.8 (#7171)
  • f3da3e51f allow ptrace(2) by default for kernel >= 4.8
• [release/1.6] seccomp: allow clock_settime64 when CAP_SYS_TIME is added (#7172)
  • 86b55bd8d seccomp: allow clock_settime64 when CAP_SYS_TIME is added
• [release/1.6] update golang to 1.17.12 (#7160)
  • aa1101068 [release/1.6] update golang to 1.17.12
• [release/1.6] Fix WWW-Authenticate parsing (#7131)
  • 37dfc5c9d [release/1.6] Fix WWW-Authenticate parsing
• [release/1.6] Downgrade MinGW to version 10.2.0 (#7133)
  • fa2016d58 [release/1.6] Downgrade MinGW to version 10.2.0
• [release/1.6] ctr: fix label args used in NewContainer (#7051)
  • 99c56d217 ctr: fix label args used in NewContainer
• [release/1.6] Make building static binaries simpler (#7045)
  • 51de785f8 [release/1.6] Make building static binaries simpler
• [release/1.6] update runc binary to v1.1.3 (#7036)
  • 2ea4e6348 update runc binary to v1.1.3

Dependency Changes

• github.com/Microsoft/hcsshim v0.9.3 -> v0.9.4

Previous release can be found at v1.6.6