Skip to content

containerd 1.7.3
Compare
Choose a tag to compare
@github-actions github-actions released this 27 Jul 21:09
· 1929 commits to main since this release
v1.7.3
This tag was signed with the committer’s verified signature.
dmcgowan Derek McGowan
GPG key ID: F58C5D0A4405ACDB
Learn about vigilant mode.
7880925
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.

Welcome to the v1.7.3 release of containerd!

The third patch release for containerd 1.7 contains various fixes and updates.

Notable Updates

  • RunC: Update runc binary to v1.1.8 (#8843)
  • CRI: Fix additionalGids: it should fallback to imageConfig.User when securityContext.RunAsUser,RunAsUsername are empty (#8824)
  • CRI: write generated CNI config atomically (#8825)
  • Port-Forward: Correctly handle known errors (#8806)
  • Resolve docker.NewResolver race condition (#8799)
  • Fix net.ipv4.ping_group_range with userns (#8786)
  • Runtime/V2/RunC: handle early exits w/o big locks (#8712)
  • SecComp: always allow name_to_handle_at (#8753)
  • CRI: Windows Pod Stats: Add a check to skip stats for containers that are not running (#8654)
  • Task: don't close() io before cancel() (#8658)
  • Remove CNI conf_template deprecation (#8638)
  • Fix issue for HPC pod metrics (#8634)

See the changelog for complete list of changes

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

Contributors

  • Akihiro Suda
  • Phil Estes
  • Sebastiaan van Stijn
  • Wei Fu
  • Derek McGowan
  • Kazuyoshi Kato
  • Austin Vazquez
  • Samuel Karp
  • Shingo Omura
  • Jin Dong
  • Maksym Pavlenko
  • Aditi Sharma
  • Danny Canter
  • James Sturtevant
  • Laura Brehm
  • Rodrigo Campos
  • Akhil Mohan
  • Andrey Epifanov
  • Bjorn Neergaard
  • Cory Snider
  • Madhav Jivrajani
  • Mahamed Ali
  • Priyanka Saggu
  • Qasim Sarfraz
  • wangxiang
  • zounengren

Changes

63 commits

  • [release/1.7] Prepare release notes for v1.7.3 (#8871)
    • 4cb2f1515 [release/1.7] Add release notes for v1.7.3
  • [release/1.7] cri: memory.memsw.limit_in_bytes: no such file or directory (#8869)
    • b461ecacf cri: memory.memsw.limit_in_bytes: no such file or directory
  • [release/1.7] migrate to community owned bucket for node e2e tests (#8875)
    • 14328ae03 migrate to community owned bucket
  • [release/1.7 backport] update runc binary to v1.1.8 (#8843)
  • [release/1.7 backport] [CRI] fix additionalGids: it should fallback to imageConfig.User when securityContext.RunAsUser,RunAsUsername are empty (#8824)
    • 083f57160 capture desc variable in range variable just in case that it run in parallel mode
    • a9440ce6b Use t.TempDir instead of os.MkdirTemp
    • eea3440d8 use strings.Cut instead of strings.Split for parsing imageConfig.User
    • eace67180 fix userstr for dditionalGids on Linux
  • [release/1.7 backport] cri: write generated CNI config atomically (#8825)
    • 7353c0286 ctr: update WritePidFile to use atomicfile
    • ae7021300 shim: WritePidFile & WriteAddress use atomicfile
    • 186eb64b7 cri: write generated CNI config atomically on Unix
    • 64c3dcd8e atomicfile: new package for atomic file writes
  • [release/1.7 backport] Move logrus setup code to log package (#8831)
    • f7a20e17c Move logrus setup code to log package
  • [release/1.7 backport] Cirrus CI: configure apt-get to wait for locks (#8814)
    • 60a6db9c2 Cirrus CI: configure apt-get to wait for locks
  • [release/1.7 backport] Update Go to 1.20.6,1.19.11 (#8815)
  • [release/1.7 backport] update go to go1.20.5, go1.19.10 (#8716)
  • [release/1.7 backport] bugfix(port-forward): Correctly handle known errors (#8806)
    • 6b6b0c828 bugfix(port-forward): Correctly handle known errors
  • [release/1.7] Resolve docker.NewResolver race condition (#8799)
    • 898eca21e Change http.Header copy to builtin Clone
    • fa2efc406 Resolve docker.NewResolver race condition
  • [release/1.7] Fix net.ipv4.ping_group_range with userns (#8786)
    • 241514815 pkg/cri/server: Test net.ipv4.ping_group_range works with userns
    • 801e8c806 pkg/cri/server: Fix net.ipv4.ping_group_range with userns
  • [release/1.7 backport] vendor: github.com/containerd/zfs v1.1.0 (#8782)
    • d5639a5a8 vendor: github.com/containerd/zfs v1.1.0
  • [release/1.7 backport] ci: remove libseccomp-dev installation for nightly (#8772)
    • 15d65709e ci: remove libseccomp-dev installation for nightly
  • [release/1.7] go.mod: Update cgroups to 3.0.2 (#8769)
    • a08ae718c [release/1.7] go.mod: Update cgroups to 3.0.2
  • [release/1.7 backport] runtime/v2/runc: handle early exits w/o big locks (#8712)
    • 18c6503d9 runtime/v2/runc: handle early exits w/o big locks
  • [release/1.7 backport] integration/client: add timeout to TestShimOOMScore (#8750)
    • 3bf3996d9 integration/client: add timeout to TestShimOOMScore
  • [release/1.7 backport] Update ginkgo to match cri-tools' version (#8760)
    • c2c54af9d Update ginkgo to match cri-tools' version
  • [release/1.7 backport] seccomp: always allow name_to_handle_at (#8753)
    • 6281d46df seccomp: always allow name_to_handle_at
  • [release/1.7] Pinned image support (#8718)
  • [release/1.7] cherry-pick: No more nondistributable layers in MS registry (#8690)
    • dafbeb5b1 No more nondistributable layers in MS registry
  • [release/1.7] [cri] Windows Pod Stats: Add a check to skip stats for containers that are not running (#8654)
    • 58b6b99cd Add a check to skip stats for containers that are not running
  • [release/1.7 backport] task: don't close() io before cancel() (#8658)
    • e5b2a0131 task: don't close() io before cancel()
  • [release/1.7 backport] move to CRI-TOOLS v1.27.0 (#8656)
  • [release/1.7] Remove cni conf_template deprecation (#8638)
    • 0b2b96479 RELEASES.md: de-deprecation of CNI conf_template will be v1.7.3
    • a24267b28 Remove cni conf_template deprecation
  • [release/1.7] Fix issue for HPC pod metrics (#8634)

Changes from containerd/zfs

49 commits

  • gofumpt and update status badges (#75)
  • go.mod: github.com/mistifyio/go-zfs/v3 v3.0.1 (#73)
    • d3485b9 go.mod: github.com/mistifyio/go-zfs/v3 v3.0.1
  • gha: fix golangci-lint, and upgrade to v1.52.2 (#74)
    • 23c831a remove pre-go1.17 build-tags, and fix missing build-tags in plugin
    • e5acd95 gha: fix golangci-lint, upgrade to v1.52.2
  • Bump github.com/containerd/containerd from 1.6.12 to 1.6.18 (#72)
    • 00b96c2 Bump github.com/containerd/containerd from 1.6.12 to 1.6.18
  • Bump github.com/containerd/containerd from 1.6.9 to 1.6.12 (#69)
    • a099def Bump github.com/containerd/containerd from 1.6.9 to 1.6.12
  • Add CodeQL analysis workflow (#67)
    • fee1db7 Add CodeQL analysis workflow
  • Update GitHub actions CI workflow (#66)
    • b8b7ab2 Update GitHub actions CI workflow
  • Upgrade compiler to Go 1.19 and update dependencies (#68)
  • Remove references to io/ioutil package (#65)
    • d700762 Remove references to io/ioutil package
  • Update go.mod and move to supported Go version (#62)
    • f52906e Update Go version to supported version
    • 79ca2cb Update containerd depedency to latest
  • go.mod: github.com/mistifyio/go-zfs v3.0.0 (#59)
    • 2e3db29 go.mod: github.com/mistifyio/go-zfs v3.0.0
  • go.mod: github.com/mistifyio/go-zfs/v3 v3.0.0-20220217145925-d014733a5309 (#58)
    • d904e63 go.mod: github.com/mistifyio/go-zfs/v3 v3.0.0-20220217145925-d014733a5309
  • Update vendoring to containerd 1.6.x (#57)
    • e021180 Update vendoring to containerd 1.6.x
  • Bump github.com/containerd/containerd from 1.5.8 to 1.5.9 (#55)
    • fc0c9a9 Bump github.com/containerd/containerd from 1.5.8 to 1.5.9
  • Bump github.com/containerd/containerd from 1.5.5 to 1.5.8 (#54)
    • 5d2f28c Bump github.com/containerd/containerd from 1.5.5 to 1.5.8
  • follow-up-#52: fix the order of cause in fmt.Errorf (#53)
    • b3f193d follow-up-#52: fix the order of cause in fmt.Errorf
  • replace pkg/errors (#52)
  • Bump github.com/containerd/containerd from 1.5.2 to 1.5.4 (#51)
    • fd6afa5 Bump github.com/containerd/containerd from 1.5.2 to 1.5.4
  • Bump containerd to 1.5.2 (#50)
  • Rename branches from master to main (#49)
    • 35c6af7 Rename branches from master to main
  • sync up with containerd 1.5 GA (#47)
    • 3d5efef vendor sync up with containerd 1.5 ga
  • README.md: fix CI badge (#46)

Dependency Changes

  • github.com/containerd/cgroups/v3 v3.0.1 -> v3.0.2
  • github.com/containerd/zfs v1.0.0 -> v1.1.0
  • github.com/mistifyio/go-zfs/v3 v3.0.1 new

Previous release can be found at v1.7.2

Assets 48