containerd 1.6.16

Welcome to the v1.6.16 release of containerd!

The sixteenth patch release for containerd 1.6 includes various bug fixes and updates.

Notable Updates

• Fix push error propagation (#7990)
• Fix slice append error with HugepageLimits for Linux (#7995)
• Update default seccomp profile for PKU and CAP_SYS_NICE (#8001)
• Fix overlayfs error when upperdirlabel option is set (#8002)

See the changelog for complete list of changes

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

Contributors

• Akihiro Suda
• Derek McGowan
• Samuel Karp
• Sebastiaan van Stijn
• Phil Estes
• Craig Ingram
• Justin Chadwell
• Qasim Sarfraz
• Wei Fu
• bin liu
• cardy.tang
• rongfu.leng

Changes

30 commits

• [release/1.6] Prepare v1.6.16 (#8016)
  • d3c595aa3 Prepare release notes for v1.6.16
• [release/1.6 backport] Fix tx closed error when upperdirlabel specified (#8002)
  • 8c704036a Fix tx closed error when upperdirlabel specified
• [release/1.6 backport] assorted test-fixes (#8000)
  • 91a68edd7 cri: Fix TestUpdateOCILinuxResource for host w/o swap controller
  • 5594f706e Fix TestUpdateContainerResources_Memory* on cgroup v2 hosts
• [release/1.6 backport] seccomp updates (#8001)
  • 7037f5313 seccomp: add get_mempolicy, mbind, set_mempolicy, with CAP_SYS_NICE
  • d22919a1c seccomp: seccomp: add syscalls related to PKU in default policy
• [release/1.6 backport] Harden GITHUB_TOKEN permissions (#7999)
  • 8b8a21fe4 Harden GITHUB_TOKEN permissions
• [release/1.6 backport] assorted updates to Vagrantfile (#7996)
  • 8009948bb Vagrantfile: fix comments about SELinux
  • 550424f92 Vagrantfile: install-rootless-podman: remove setenforce 0
  • 2c32f8559 CI: update Fedora to 37
  • 556bb0cc8 Vagrantfile: explicitly specify rsync as the shared folder driver
  • edfac1834 fix install cni script
  • 91d5e53fb Vagrantfile: dump containerd log after critest
• [release/1.6 backport] Fix slice append error (#7995)
  • ab193eb20 pkg/cri: optimize slice initialization
  • e6cf5ec58 Fix slice append error
• [release/1.6] update to go1.18.10 (#7992)
  • 6a8a6531f [release/1.6] update to go1.18.10
• [release/1.6 backport] release/Dockerfile: set DEBIAN_FRONTEND=noninteractive (#7991)
  • d0dc7988a release/Dockerfile: set DEBIAN_FRONTEND=noninteractive
• [release/1.6 backport] pushWriter: correctly propagate errors (#7990)
  • 1584c2581 pushWriter: correctly propagate errors
• [release/1.6] mod: update github.com/pelletier/go-toml@v1.9.5 (#7942)
  • 545f22091 mod: update github.com/pelletier/go-toml@v1.9.5

Dependency Changes

• github.com/pelletier/go-toml v1.9.3 -> v1.9.5

Previous release can be found at v1.6.15

containerd 1.5.17

Welcome to the v1.5.17 release of containerd!

The seventeenth patch release for containerd 1.5 includes various fixes and updates.

Notable Updates

• Update shim to fail fast on dial error (#7953)
• Fix no CNI info for pod sandbox on restart (#7849)
• Fix push error propagation (#7998)

See the changelog for complete list of changes

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

Contributors

• Derek McGowan
• Akihiro Suda
• Wei Fu
• Danny Canter
• Justin Chadwell
• Kirtana Ashok
• Phil Estes
• Samuel Karp
• Sebastiaan van Stijn

Changes

14 commits

• [release/1.5] Prepare release notes for v1.5.17 (#8017)
  • 40a4d58de Prepare release notes for v1.5.17
• [release/1.5] integration/images: switch away from Docker Hub to avoid rate limit (#8009)
  • d44769ad6 integration/images: switch away from Docker Hub to avoid rate limit
• [release/1.5 backport] pushWriter: correctly propagate errors (#7998)
  • 1e848038d pushWriter: correctly propagate errors
• [release/1.5] update to go1.18.10 (#7993)
  • 464c2fb7a [release/1.5] update to go1.18.10
• [release/1.5] runtime: should fail fast if dial error on shim (#7953)
  • 7473711de runtime: should fail fast if dial error on shim
• [release/1.5] CRI: Fix no CNI info for pod sandbox on restart (#7849)
  • 23c2a863e CRI: Fix no CNI info for pod sandbox on restart
• [release/1.5] go.mod: Bump hcsshim to v0.8.25 (#7817)
  • 1c5d8d142 [release/1.5] Bump shim tag to v0.8.25

Dependency Changes

• github.com/Microsoft/hcsshim v0.8.24 -> v0.8.25

Previous release can be found at v1.5.16

containerd 1.6.15

Welcome to the v1.6.15 release of containerd!

The fifteenth patch release for containerd 1.6 fixes an issue with CNI in the CRI plugin

Notable Updates

• Fix no CNI info for pod sandbox on restart in CRI plugin (#7848)

See the changelog for complete list of changes

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

Contributors

• Derek McGowan
• Akihiro Suda
• Danny Canter
• Kevin Parsons
• Samuel Karp
• Wei Fu

Changes

8 commits

• [release/1.6] Prepare release notes for v1.6.15 (#7924)
  • 883899eae Prepare release notes for v1.6.15
• [release/1.6] CI: Pass GITHUB_TOKEN to containerd/project-checks (#7919)
  • b57367020 CI: Pass GITHUB_TOKEN to containerd/project-checks
• [release/1.6] integration/images: switch away from Docker Hub to avoid rate limit (#7900)
  • 0f4062c9b integration/images: switch away from Docker Hub to avoid rate limit
• [release/1.6] CRI: Fix no CNI info for pod sandbox on restart (#7848)
  • f16447e2d CRI: Fix no CNI info for pod sandbox on restart

Dependency Changes

This release has no dependency changes

Previous release can be found at v1.6.14

containerd 1.7.0-beta.2

Welcome to the v1.7.0-beta.2 release of containerd!
This is a pre-release of containerd

The eighth major release of containerd includes new functionality alongside many improvements.
This release is intended to be the last major release of containerd 1.x before 2.0.
Some functionality in this release may be considered experimental or unstable, but will become stable or default in 2.0.
This release still adheres to our backwards compability guarantees and users who do not use or enable new functionality should use this release with the same stability expectations.
The previous 1.6 release has also become a long term stable release for users who prefer releases with mostly stability improvements and wish to wait a few releases for new functionality.

This is a beta release and includes some functionality which is not yet complete. While most APIs are finalized before merge, they are subject to change until the official release.

Highlights

Sandbox API (experimental)

The sandbox API provides a new way of managing containerd's shim, providing more flexibility and functionality for multi-container environments such as Pods and VMs.
This API makes it easier to manage these groups of containers at a higher level and offers new extension points for shim implementations and clients.

• Sandbox API (#6703)
• CRI Sandbox API Implementation (#7228)

Transfer Service (experimental)

• Transfer Service (#7320)

The transfer service provides a simple interface to transfer artifact objects between any source and destination. This allows for
pull and push operations to be done in containerd whether requested from clients or plugins. It is experimental in this release
to allow for further plugin development and integration into existing plugins.

See the Transfer Docs

NRI (experimental)

• Extend NRI scope (nri#16)
• Support for updated NRI (#6019)

The Node Resource Interface is a common framework for plugging extensions into OCI-compatible container runtimes. It provides
basic mechanisms for plugins to track the state of containers and to make limited changes to their configuration.

This release introduces NRI v0.2.0 with an updated plugin interface to cover a wide range of use cases.

See the NRI Docs

Platform Support

• Linux containers on FreeBSD (#7000)

Runtime Features

• Add support for CDI device injection (#6654)
• Support for cgroups blockio (#5490)
• Add restart policy for enhanced restart manager (#6744)

Road to 2.0

Refactoring

There are multiple places in the code today which are being targeted for refactoring to make long term support easier and to provide more extension points.

The CRI plugin is the most complex containerd plugin with a wide range of functionality. A major effort in this release and before 2.0 involves moving functionality
out of the single CRI plugin into smaller-scoped containerd plugins, such that they can be used and tested independenty. The new sandbox and distribution interfaces provide one example of this,
but it also being done for image and network management.

The version of ttrpc has been updated this release to support streaming, allowing existing grpc services to use ttrpc.
Services are being refactored to allow ttrpc implementations, which can be served via shim and accessed using the new sandbox management capability.

• Remove gogoproto.customtype (#6699)

• Remove enumvalue_customname, goproto_enum_prefix and enum_customname (#6708)

• Remove all gogoproto extensions (#6829)

• Migrate off from github.com/gogo/protobuf (#6841)

• ttrpc streaming (ttrpc#107)

• Add unpack interface for client (#6749)

• Add collectible resources to metadata gc (#6804)

Configuration

Existing CRI configurations will be supported until 2.0.
Any functionality split out of CRI will have their configuration migrated to new plugins.
Deprecated configuration versions and configurations for deprecated features will be removed in 2.0.

Deprecation

The 2.0 release will remove any feature deprecated in 1.x. Features deprecated in this release include.

• Docker Schema 1 Image Deprecation (#6884)

CRI Updates

• Support image pull progress timeout (#6150)
• Fix CRI plugin to setup pod network after creating the sandbox container (#5904)
• Pass all TOML runtime configuration options from CRI to the runtime (#7764)
• Support for user namespaces in stateless pods (KEP-127) (experimental) (#7679)
• Add network plugin metrics (#7858)
• CRI v1alpha2 is deprecated and will be removed from containerd in containerd v2.0; if you are using the CRI API please move up to CRI v1; Kubernetes supports CRI v1 since Kubernetes 1.23 (#7863)

Other

• Support shallow content copy by adding reader option to local content reader at (#7414)
• Add NoSameOwner option when unpacking tars (#7386)
• Add FetcherByDigest for fetching blobs without fetching a manifest (#7460)
• Update default seccomp profile to block socket calls to AF_VSOCK (#7510)
• Replace fork on mount logic with CLONE_FS (#7513)
• Add support for default registry host configuration (#7607)
• Use github.com/minio/sha256-simd for more efficient sha256 calculation (#7732)

See the changelog for complete list of changes

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

Contributors

• Kazuyoshi Kato
• Derek McGowan
• Phil Estes
• Maksym Pavlenko
• Wei Fu
• Akihiro Suda
• Sebastiaan van Stijn
• Samuel Karp
• Mike Brown
• Krisztian Litkey
• Daniel Canter
• yanggang
• Danny Canter
• Ye Sijun
• Adam Korcz
• Ed Bartosh
• Luca Comellini
• Stefan Berger
• Gabriel Adrian Samfira
• Iceber Gu
• Nashwan Azhari
• Paul "TBBle" Hampson
• xin.li
• Rodrigo Campos
• ruiwen-zhao
• zounengren
• Austin Vazquez
• Brian Goff
• Shengjing Zhu
• Gavin Inglis
• Henry Wang
• Justin Terry
• Kevin Parsons
• Paco Xu
• Swagat Bora
• wanglei
• Akhil Mohan
• lengrongfu
• Michael Crosby
• Qiutong Song
• Shiming Zhang
• Antonio Ojea
• James Jenkins
• Michael Zappa
• Tobias Klauser
• Tony Fang
• guodong
• pigletfly
• Amit Barve
• Cameron Sparr
• Changwei Ge
• Craig Ingram
• Eng Zer Jun
• Eric Lin
• James Sturtevant
• Jess
• Jonny Stoten
• Juan Hoyos
• Junyu Liu
• Kang.Zhang
• Mikko Ylinen
• Paul Cacheux
• Paul S. Schweigert
• Qasim Sarfraz
• Qian Zhang
• Vincent Batts
• Yasin Turan
• bin liu
• dependabot[bot]
• Abirdcfly
• Aditi Sharma
• Aman Sharma
• Anastassios Nanos
• Andrew G. Morgan
• Andrey Klimentyev
• Antti Kervinen
• Aviral Takkar
• Baoshuo
• Benjamin Elder
• Chao Dai
• Chuanying Du
• Claudiu Belu
• Cory Snider
• Danielle Lancashire
• Dat Nguyen
• Davanum Srinivas
• Dave
• David Leadbeater
• David Porter
• Dmitry Shurupov
• Eric Ernst
• Ethan Lowman
• Fabian Hoffman
• Fabian Hoffmann
• Fahed Dorgaa
• Gabriela Cervantes
• Gijs Peskens
• Hamza El-Saawy
• Hsing-Yu (David) Chen
• Ikko Ashimine
• Jeff Widman
• Jeff Zvier
• Jeremi Piotrowski
• Jin Dong
• Jordan Karaze
• Joseph Sheng
• Joyce Brum
• Jukka Rissanen
• Kate
• Kathryn Baldauf
• Kirtana Ashok
• Kohei Tokunaga
• Kyle L Frisbie
• LongtaoZhang
• Manuel Alejandro de Brito Fontes
• Marc Schwind
• Mark Rossetti
• Mark Zhang
• Marvin Giessing
• Mathis Michel
• Merlin Ran
• Nabeel Rana
• Nguyen Phan Huy
• Nikita Rybak
• Nobel Barakat
• Oleg Atamanenko
• Oleg Zhurakivskyy
• Oliver Radwell
• Quan Tian
• Roy Yang
• Serge Logvinov
• Shane Jennings
• Shaun Lawrie
• Shinichi Morimoto
• SilverSoldier
• Sophie Liu
• Su Fei
• Taeho Nam
• Takumasa Sakao
• Tiger Kaovilai
• Tom Godkin
• Tomoya.Fujita
• Tõnis Tiigi
• Xinlin Ma
• Yakul Garg
• Zhang Tianyang
• Zhongming Chang
• Zhuchen Wang
• austinvazquez
• cardy.tang
• chaunceyjiang
• dabaooline
• guiyong.ou
• huoqifeng
• jianfei.zhang
• ningmingxiao
• shi yixue
• shuaichang
• songjiang han
• wen chen
• wusong
• xiaoyang zhu
• yanghesong
• yaozhenxiu
• zhang he

Changes

1379 commits

• Prepare release notes for v1.7.0-beta.2 (#7903)
• Cirrus CI (Fedora 37, Ro...

containerd 1.6.14

Welcome to the v1.6.14 release of containerd!

The fourteenth patch release for containerd 1.6 fixes a regression in the CRI plugin related to swap

Notable Updates

• Fix memory.memsw.limit_in_bytes: no such file or directory error in CRI plugin (#7838)

See the changelog for complete list of changes

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

Contributors

• Phil Estes
• Derek McGowan
• Akihiro Suda
• Cameron Sparr
• Akhil Mohan
• Kazuyoshi Kato
• Sebastiaan van Stijn
• Serge Logvinov
• Wang Bing
• Wei Fu
• cathaysia
• shi yixue
• wusong

Changes

6 commits

• Prepare release notes for v1.6.14 (#7841)
  • 1347d7c87 Prepare release notes for v1.6.14
• [release/1.6] cri: fix memory.memsw.limit_in_bytes: no such file or directory (#7838)
  • 53c733e0b cri: fix memory.memsw.limit_in_bytes: no such file or directory
• Revert "[release/1.6] support fetching containerd from non public GCS buckets" (#7830)
  • e8b22c100 Revert "[release/1.6] support fetching containerd from non public GCS buckets"

Changes from containerd/cgroups

21 commits

• ParseCgroupFile: fix wrong comment about unified hierarchy ; add ParseCgroupFileUnified to get the unified path (#232)
  • dd81920 add ParseCgroupFileUnified to get the unified path
  • dae6735 ParseCgroupFile: fix wrong comment about unified hierarchy
• Bump go version to 1.17 in go.mod (#230)
  • e5baf6b Bump go version to 1.17 in go.mod
• make cmd/ a separate module (as it's only for testing) (#226)
  • 66f3f56 make cmd/ a separate module (as it's only for testing)
• feat(v2): add Update method for v2.Manager (#225)
  • 0592512 feat(v2): add Update method for v2.Manager
• feat: add memory.min param (#211)
  • 8276db2 feat: add memory.min param
• modified the dereference null pointer value. (#218)
  • a76c4fb modified the dereference null pointer value.
• update readme for cpu cgroup demo (#217)
  • f39d7da update readme for cpu cgroup demo
• Fix systemd full path (#221)
  • aa8003c Fix systemd full path
• Update Go version and fedora base (#223)
  • d7918f2 Update Go version and fedora base
• Fix panic in NewSystemd on nil values (#219)
  • 65478b8 Fix panic in NewSystemd on nil values

Dependency Changes

• github.com/containerd/cgroups v1.0.3 -> v1.0.4

Previous release can be found at v1.6.13

containerd 1.6.13

Welcome to the v1.6.13 release of containerd!

The thirteenth patch release for containerd 1.6 contains various fixes and updates.

Notable Updates

• Update overlay snapshotter to check for tmpfs when evaluating usage of userxattr (#7788)
• Update hcsschim to v0.9.6 to fix resource leak on exec (#7808)
• Make swapping disabled with memory limit in CRI plugin (#7815)
• Allow clients to remove created tasks with PID 0 (#7816)
• Fix concurrent map iteration and map write in CRI port forwarding (#7819)
• Check for nil HugepageLimits to avoid panic in CRI plugin (#7820)

See the changelog for complete list of changes

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

Contributors

• Derek McGowan
• Akhil Mohan
• Phil Estes
• Kazuyoshi Kato
• Maksym Pavlenko
• Akihiro Suda
• Gavin Inglis
• Kirtana Ashok
• Mike Brown
• Qasim Sarfraz
• Shinichi Morimoto
• chaunceyjiang
• mathis-m

Changes

25 commits

• [release/1.6] Prepare release notes for v1.6.13 (#7821)
  • Prepare release notes for v1.6.13
• [release/1.6] support fetching containerd from non public GCS buckets (#7823)
  • disable tracing while handling token
  • support fetching containerd from non public GCS buckets
• [release/1.6] nil check to avoid panic on upgrade (#7820)
  • nil check to avoid panic on upgrade
• [release/1.6] concurrent map iteration and map write (#7819)
  • fatal error: concurrent map iteration and map write
• [release/1.6] allow client to remove created tasks with PID 0 (#7816)
  • allow client to remove created tasks with PID 0
• [release/1.6] cri: make swapping disabled with memory limit (#7815)
  • cri: make swapping disabled with memory limit
• [release/1.6] go.mod: Bump hcsshim to v0.9.6 (#7808)
  • Bump hcsshim to v0.9.6
• [release/1.6] Cherry pick GitHub actions workflow updates 1.6 (#7713)
  • update codeql-action to v2
  • Upgrade actions/upload-artifact from v2 to v3
  • Move up actions versions to prep for deprecation
  • CI: update GHA instances from Ubuntu 18.04 to 20.04
  • Use global env variable to specify Go version on CI
  • Rework permission handling in scripts
  • fix pool_device_test.go
• [release/1.6] fix: check for tmpfs when evaluating if userxattr should be used (#7788)
  • fix: check for tmpfs when evaluating if userxattr should be used

Dependency Changes

• github.com/Microsoft/hcsshim v0.9.5 -> v0.9.6

Previous release can be found at v1.6.12

containerd 1.7.0-beta.1

Welcome to the v1.7.0-beta.1 release of containerd!
This is a pre-release of containerd

The eighth major release of containerd includes new functionality alongside many improvements.
This release is intended to be the last major release of containerd 1.x before 2.0.
Some functionality in this release may be considered experimental or unstable, but will become stable or default in 2.0.
This release still adheres to our backwards compability guarantees and users who do not use or enable new functionality should use this release with the same stability expectations.
The previous 1.6 release has also become a long term stable release for users who prefer releases with mostly stability improvements and wish to wait a few releases for new functionality.

This is a beta release and includes some functionality which is not yet complete. While most APIs are finalized before merge, they are subject to change until the official release.

Highlights

Sandbox API (experimental)

The sandbox API provides a new way of managing containerd's shim, providing more flexibility and functionality for multi-container environments such as Pods and VMs.
This API makes it easier to manage these groups of containers at a higher level and offers new extension points for shim implementations and clients.

• Sandbox API (#6703)
• CRI Sandbox API Implementation (#7228)

Transfer Service (experimental)

• Transfer Service (#7320)

The transfer service provides a simple interface to transfer artifact objects between any source and destination. This allows for
pull and push operations to be done in containerd whether requested from clients or plugins. It is experimental in this release
to allow for further plugin development and integration into existing plugins.

See the Transfer Docs

NRI (experimental)

• Extend NRI scope (nri#16)
• Support for updated NRI (#6019)

The Node Resource Interface is a common framework for plugging extensions into OCI-compatible container runtimes. It provides
basic mechanisms for plugins to track the state of containers and to make limited changes to their configuration.

This release introduces NRI v0.2.0 with an updated plugin interface to cover a wide range of use cases.

See the NRI Docs

Platform Support

• Linux containers on FreeBSD (#7000)

Runtime Features

• Add support for CDI device injection (#6654)
• Support for cgroups blockio (#5490)
• Add restart policy for enhanced restart manager (#6744)

Road to 2.0

Refactoring

There are multiple places in the code today which are being targeted for refactoring to make long term support easier and to provide more extension points.

The CRI plugin is the most complex containerd plugin with a wide range of functionality. A major effort in this release and before 2.0 involves moving functionality
out of the single CRI plugin into smaller-scoped containerd plugins, such that they can be used and tested independenty. The new sandbox and distribution interfaces provide one example of this,
but it also being done for image and network management.

The version of ttrpc has been updated this release to support streaming, allowing existing grpc services to use ttrpc.
Services are being refactored to allow ttrpc implementations, which can be served via shim and accessed using the new sandbox management capability.

• Remove gogoproto.customtype (#6699)

• Remove enumvalue_customname, goproto_enum_prefix and enum_customname (#6708)

• Remove all gogoproto extensions (#6829)

• Migrate off from github.com/gogo/protobuf (#6841)

• ttrpc streaming (ttrpc#107)

• Add unpack interface for client (#6749)

• Add collectible resources to metadata gc (#6804)

Configuration

Existing CRI configurations will be supported until 2.0.
Any functionality split out of CRI will have their configuration migrated to new plugins.
Deprecated configuration versions and configurations for deprecated features will be removed in 2.0.

Deprecation

The 2.0 release will remove any feature deprecated in 1.x. Features deprecated in this release include.

• Docker Schema 1 Image Deprecation (#6884)

CRI Updates

• Support image pull progress timeout (#6150)
• Fix CRI plugin to setup pod network after creating the sandbox container (#5904)
• Pass all TOML runtime configuration options from CRI to the runtime (#7764)

Other

• Support shallow content copy by adding reader option to local content reader at (#7414)
• Add NoSameOwner option when unpacking tars (#7386)
• Add FetcherByDigest for fetching blobs without fetching a manifest (#7460)
• Update default seccomp profile to block socket calls to AF_VSOCK (#7510)
• Replace fork on mount logic with CLONE_FS (#7513)
• Add support for default registry host configuration (#7607)
• Use github.com/minio/sha256-simd for more efficient sha256 calculation (#7732)

See the changelog for complete list of changes

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

Contributors

• Kazuyoshi Kato
• Derek McGowan
• Phil Estes
• Maksym Pavlenko
• Wei Fu
• Akihiro Suda
• Sebastiaan van Stijn
• Samuel Karp
• Mike Brown
• Krisztian Litkey
• Daniel Canter
• Ye Sijun
• yanggang
• Adam Korcz
• Ed Bartosh
• Stefan Berger
• Gabriel Adrian Samfira
• Nashwan Azhari
• Paul "TBBle" Hampson
• Luca Comellini
• ruiwen-zhao
• xin.li
• Austin Vazquez
• Brian Goff
• Shengjing Zhu
• zounengren
• Danny Canter
• Gavin Inglis
• Henry Wang
• Iceber Gu
• Justin Terry
• Swagat Bora
• wanglei
• Akhil Mohan
• Kevin Parsons
• lengrongfu
• Michael Crosby
• Paco Xu
• Qiutong Song
• Shiming Zhang
• James Jenkins
• Michael Zappa
• Tobias Klauser
• guodong
• pigletfly
• Amit Barve
• Antonio Ojea
• Cameron Sparr
• Craig Ingram
• Eng Zer Jun
• Eric Lin
• James Sturtevant
• Jess
• Jonny Stoten
• Juan Hoyos
• Kang.Zhang
• Mikko Ylinen
• Paul Cacheux
• Paul S. Schweigert
• Vincent Batts
• Yasin Turan
• bin liu
• cosmoer
• dependabot[bot]
• Abirdcfly
• Aditi Sharma
• Aman Sharma
• Anastassios Nanos
• Andrew G. Morgan
• Andrey Klimentyev
• Antti Kervinen
• Aviral Takkar
• Baoshuo
• Benjamin Elder
• Chao Dai
• Chuanying Du
• Claudiu Belu
• Cory Snider
• Danielle Lancashire
• Dat Nguyen
• Davanum Srinivas
• Dave
• David Porter
• Dmitry Shurupov
• Eric Ernst
• Ethan Lowman
• Fabian Hoffman
• Fabian Hoffmann
• Fahed Dorgaa
• Gabriela Cervantes
• Gijs Peskens
• Hamza El-Saawy
• Hsing-Yu (David) Chen
• Ikko Ashimine
• Jeff Widman
• Jeff Zvier
• Jeremi Piotrowski
• Jin Dong
• Jordan Karaze
• Joseph Sheng
• Joyce Brum
• Jukka Rissanen
• Kate
• Kathryn Baldauf
• Kirtana Ashok
• Kohei Tokunaga
• Kyle L Frisbie
• LongtaoZhang
• Manuel Alejandro de Brito Fontes
• Marc Schwind
• Mark Rossetti
• Marvin Giessing
• Mathis Michel
• Merlin Ran
• Nabeel Rana
• Nguyen Phan Huy
• Nikita Rybak
• Nobel Barakat
• Oleg Atamanenko
• Oleg Zhurakivskyy
• Oliver Radwell
• Qasim Sarfraz
• Quan Tian
• Rodrigo Campos
• Roy Yang
• Serge Logvinov
• Shane Jennings
• Shaun Lawrie
• Shinichi Morimoto
• SilverSoldier
• Sophie Liu
• Su Fei
• Taeho Nam
• Takumasa Sakao
• Tiger Kaovilai
• Tom Godkin
• Tomoya.Fujita
• Tony Fang
• Tõnis Tiigi
• Xinlin Ma
• Yakul Garg
• Zhang Tianyang
• Zhongming Chang
• Zhuchen Wang
• austinvazquez
• calvin0327
• cardy.tang
• dabaooline
• guiyong.ou
• huoqifeng
• jianfei.zhang
• ningmingxiao
• shi yixue
• shuaichang
• songjiang han
• wusong
• xiaoyang zhu
• yanghesong
• yaozhenxiu
• zhang he

Changes

1256 commits

• Prepare release notes for v1.7.0-beta.1 (#7793)
  • Prepare release notes for v1.7.0-beta.1
• support fetching containerd from non public GCS buckets (#7771)
  • disable tracing while handling token
  • support fetching containerd from non public GCS buckets
• images: support specifying SourceDateEpoch via ctx (#7651)
  • images: support specifying SourceDateEpoch via ctx
  • epoch: propagate SOURCE_DATE_EPOCH via ctx
• fuzzing: improve archive fuzzer (#7718)
  • fuzzing: improve archive fuzzer
• fix sdNotify func when debug level ([#7798](https://github.com/conta...

containerd 1.6.12

Welcome to the v1.6.12 release of containerd!

The twelfth patch release for containerd 1.6 contains a fix for CVE-2022-23471.

Notable Updates

• Fix goroutine leak during Exec in CRI plugin (GHSA-2qjp-425j-52j9)

See the changelog for complete list of changes

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

Contributors

• Derek McGowan
• Danny Canter
• Phil Estes
• Sebastiaan van Stijn

Changes

5 commits

• Github Security Advisory GHSA-2qjp-425j-52j9
  • Prepare release notes for v1.6.12
  • CRI stream server: Fix goroutine leak in Exec
• [release/1.6] update to go1.18.9 (#7766)
  • [release/1.6] update to go1.18.9

Dependency Changes

This release has no dependency changes

Previous release can be found at v1.6.11

containerd 1.5.16

Welcome to the v1.5.16 release of containerd!

The sixteenth patch release for containerd 1.5 contains a fix for CVE-2022-23471.

Notable Updates

• Fix goroutine leak during Exec in CRI plugin (GHSA-2qjp-425j-52j9)

See the changelog for complete list of changes

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

Contributors

• Derek McGowan
• Danny Canter
• Phil Estes
• Sebastiaan van Stijn

Changes

5 commits

• Github Security Advisory GHSA-2qjp-425j-52j9
  • Prepare release notes for v1.5.16
  • CRI stream server: Fix goroutine leak in Exec
• [release/1.5] update to go1.18.9 (#7767)
  • [release/1.5] update to go1.18.9

Dependency Changes

This release has no dependency changes

Previous release can be found at v1.5.15

containerd 1.6.11

Welcome to the v1.6.11 release of containerd!

The eleventh patch release for containerd 1.6 contains a various fixes and updates.

Notable Updates

• Add pod UID annotation in CRI plugin (#7735)
• Fix nil pointer deference for Windows containers in CRI plugin (#7737)
• Fix lease labels unexpectedly overwriting expiration (#7745)
• Fix for simultaneous diff creation using the same parent snapshot (#7756)

See the changelog for complete list of changes

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

Contributors

• Derek McGowan
• Wei Fu
• Austin Vazquez
• Kirtana Ashok
• Maksym Pavlenko
• Phil Estes
• Qasim Sarfraz
• Sebastiaan van Stijn
• cosmoer

Changes

12 commits

• Prepare release notes for v1.6.11 (#7760)
  • Prepare release notes for v1.6.11
• [release/1.6] fix: support simultaneous create diff for same parent snapshot (#7756)
  • fix: support simultaneous create diff for same parent snapshot
• [release/1.6] cherry-pick: Fix order of operations when setting lease labels (#7745)
  • Fix order of operations when setting lease labels
• [release/1.6] Added nullptr checks to pkg/cri/server and sbserver (#7737)
  • Added nullptr checks to pkg/cri/server and sbserver
• [release/1.6] cri: add pod uid annotation (#7735)
  • cri: add pod uid annotation
• [release/1.6] go.mod: use golang_protobuf_extensions v1.0.4 to prevent incompatible versions (#7723)
  • [release/1.6] go.mod: use golang_protobuf_extensions v1.0.4

Dependency Changes

This release has no dependency changes

Previous release can be found at v1.6.10