Skip to content

Conversation

@leodido
Copy link
Contributor

@leodido leodido commented Nov 11, 2025

Problem

The v0.13.0 release fails to build due to runc library dependency issues introduced by Dependabot PRs #260 and #261.

Root Cause

Newer versions of runc (v1.2+, v1.3+) cannot be used as library dependencies due to internal package accessibility issues:

undefined: userns.GetUserNamespaceMappings
undefined: userns.IsSameMapping

These functions are in runc's internal packages which aren't accessible when runc is used as a dependency in GoReleaser builds.

Solution

Revert to v0.12.0 dependency versions:

  • github.com/containerd/containerd: v1.7.29 → v1.7.26
  • github.com/opencontainers/runc: v1.2.8 → v1.1.10

These versions:

  • ✅ Build successfully in CI
  • ✅ Work as library dependencies
  • ✅ Allow v0.13.0 release to proceed

Testing

Tested with multiple release candidates:

  • v0.13.0-rc1: Failed with runc v1.2.8
  • v0.13.0-rc2: Failed with runc v1.3.3
  • v0.13.0-rc3: Failed with runc v1.1.15
  • v0.13.0-rc4: Will test with v0.12.0 dependencies (this PR)

Next Steps

After this PR is merged:

  1. Create v0.13.0-rc4 tag to verify release build
  2. If successful, create final v0.13.0 tag
  3. Address dependency upgrades in future release by either:
    • Removing runc dependency from leeway
    • Finding alternative to specconv
    • Waiting for runc upstream to fix library dependency issues

Related

Revert containerd and runc to v0.12.0 versions to fix release build:
- github.com/containerd/containerd: v1.7.29 → v1.7.26
- github.com/opencontainers/runc: v1.2.8 → v1.1.10

The newer versions (runc v1.2+, v1.3+) cannot be used as library
dependencies due to internal package accessibility issues:
  undefined: userns.GetUserNamespaceMappings
  undefined: userns.IsSameMapping

These versions build successfully and will allow v0.13.0 to release.
The dependency upgrades will be addressed in a future release after
either removing the runc dependency or waiting for upstream fixes.

Tested with v0.13.0-rc1, rc2, rc3 - all failed with newer runc versions.

Co-authored-by: Ona <no-reply@ona.com>
@leodido leodido self-assigned this Nov 11, 2025
Copy link

@kylos101 kylos101 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I see, we're just reverting to what was being used, before automation did the go.mod bump.

Ref to what we were using:

leeway/go.mod

Line 26 in f0e565a

github.com/opencontainers/runc v1.1.10

@leodido leodido requested review from csweichel and iQQBot November 11, 2025 17:45
@leodido leodido merged commit 2b160b2 into main Nov 11, 2025
7 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants