From f8a096be060b22ccd3d5f3ebe44108517fbf6c30 Mon Sep 17 00:00:00 2001 From: Giuseppe Scrivano Date: Mon, 27 Feb 2023 10:40:36 +0100 Subject: [PATCH] NEWS: tag 1.8.1 Signed-off-by: Giuseppe Scrivano --- NEWS | 14 ++++++++++++++ 1 file changed, 14 insertions(+) diff --git a/NEWS b/NEWS index db8b7b7530..da2d9d79d6 100644 --- a/NEWS +++ b/NEWS @@ -1,3 +1,17 @@ +* crun-1.8.1 + +- linux: idmapped mounts expect the same configuration as the user + namespace mappings. Before they were expecting the inverted + mapping. It is a breaking change, but the behavior was aligned to + what runc will do as well. +- krun: always allow /dev/kvm in the cgroup configuration. +- handlers: disable exec for handlers that do not support it. +- selinux: allow setting fscontext using a custom annotation. +- cgroup: reset systemd unit if start fails. +- cgroup: rmdir the entire systemd scope. It fixes a leak on cgroupv1. +- cgroup: always delete the cgroup on errors. On some errors it could + have been leaked before. + * crun-1.8 - linux: precreate devices on the host.