containerd 1.5.0-rc.1

Welcome to the v1.5.0-rc.1 release of containerd!
This is a pre-release of containerd

The sixth major release of containerd includes many stability improvements
and code organization changes to make contribution easier and make future
features cleaner to develop. This includes bringing CRI development into the
main containerd repository and switching to Go modules. This release also
brings support for the Node Resource Interface (NRI).

Highlights

Project Organization

• Merge containerd/cri codebased into containerd/containerd #4593
• Move to Go modules #4760
• Remove selinux build tag #4849
• Add json log format output option for daemon log #4803

Snapshots

• Add configurable overlayfs path #4505
• Separate overlay implementation from plugin #4506
• Native snapshotter configuration and plugin separation #4517
• Devmapper snapshotter configuration and plugin separation #4573
• AUFS snapshotter configuration and plugin separation #4533
• ZFS snapshotter configuration and plugin separation #4534
• Pass custom snapshot labels when creating snapshot #4630 #4635
• Add platform check for snapshotter support when unpacking #3927
• Handle loopback mounts #4902
• Support userxattr mount option for overlay in user namespace #5076
• ZFS snapshotter implementation of usage #5243

Distribution

• Improve registry response errors #4523
• Improve image pull performance over HTTP 1.1 #4653
• Registry configuration package #4138
• Add support for layers compressed with zstd #4809
• Allow arm64 to fallback to arm (v8, v7, v6, v5) 4932

Runtime

• Add annotations to containerd task update API #4647
• Add logging binary support when terminal is true #4502

Windows

• Optimize LCOW snapshotter use of scratch layers #4643

CRI

• Add NRI injection points cri#1552
• Add support for registry host directory configuration #4978
• Update privileged containers to use current capabilities instead of known capabilities #5017
• Add pod annotations to CNI call #5026
• Enable ocicrypt by default #5135

Impactful Client Updates

This release has changes which may affect projects which import containerd.

Switch to Go modules

containerd and all containerd sub-repositories are now using Go modules. This
should help make importing easier for handling transitive dependencies. As of
this release, containerd still does not guarantee client library compatibility
for 1.x versions, although best effort is made to minimize impact from changes
to exported Go packages.

CRI plugin moved to main repository

With the CRI plugin moving into the main repository, imports under github.com/containerd/cri/
can now be found github.com/containerd/containerd/pkg/cri/.
There are no changes required for end users of CRI.

Library changes

oci

The WithAllCapabilities has been removed and replaced with WithAllCurrentCapabilities
and WithAllKnownCapabilities. WithAllKnownCapabilities has similar
functionality to the previous WithAllCapabilities with added support for newer
capabilities. WithAllCurrentCapabilities can be used to give privileged
containers the same set of permissions as the calling process, preventing errors
when privileged containers attempt to get more permissions than given to the
caller.

Configuration changes

New registry.config_path for CRI plugin

registry.config_path specifies a directory to look for registry hosts
configuration. When resolving an image name during pull operations, the CRI
plugin will look in the <registry.config_path>/<image hostname>/ directory
for host configuration. An optional hosts.toml file in that directory may be
used to configure which hosts will be used for the pull operation as well
host-specific configurations. Updates under that directory do not require
restarting the containerd daemon.

Enable registry.config_path in the containerd configuration file.

[plugins."io.containerd.grpc.v1.cri".registry]
   config_path = "/etc/containerd/certs.d"

Configure registry hosts, such as /etc/containerd/certs.d/docker.io/hosts.toml
for any image under the docker.io namespace (any image on Docker Hub).

server = "https://registry-1.docker.io"    # Exclude this to not use upstream

[host."https://public-mirror.example.com"]
  capabilities = ["pull"]                  # Requires less trust, won't resolve tag to digest from this host
[host."https://docker-mirror.internal"]
  capabilities = ["pull", "resolve"]
  ca = "docker-mirror.crt"                 # Or absolute path /etc/containerd/certs.d/docker.io/docker-mirror.crt

If no hosts.toml configuration exists in the host directory, it will fallback
to check certificate files based on Docker's certificate file
pattern (".crt" files for CA certificates and ".cert"/".key" files for client
certificates).

Deprecation of registry.mirrors and registry.configs in CRI plugin

Mirroring and TLS can now be configured using the new registry.config_path
option. Existing configurations may be migrated to new host directory
configuration. These fields are only deprecated with no planned removal,
however, these configurations cannot be used while registry.config_path is
defined.

Version 1 schema is deprecated

Version 2 of the containerd configuration toml is recommended format and the
default. Starting this version, a deprecation warning will be logged when
version 1 is used.

To check version, see the version value in the containerd toml configuration.

version=2

See the changelog for complete list of changes

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

Contributors

• Lantao Liu
• Mike Brown
• Phil Estes
• Sebastiaan van Stijn
• Derek McGowan
• Akihiro Suda
• Michael Crosby
• Maksym Pavlenko
• Wei Fu
• Abhinandan Prativadi
• Davanum Srinivas
• Shengjing Zhu
• Stefan Berger
• Xuean Yan
• Yanqiang Miao
• Brandon Lum
• Justin Terry
• Kazuyoshi Kato
• Brian Goff
• Samuel Karp
• Paul "TBBle" Hampson
• Ian Campbell
• Iceber Gu
• Kohei Tokunaga
• Daniel Canter
• Shiming Zhang
• Kevin Parsons
• Siddharth Yadav
• Antonio Ojea
• Tianon Gravi
• Tõnis Tiigi
• Jose Carlos Venegas Munoz
• Kir Kolyshkin
• Li Yuxuan
• heartlock
• Alakesh Haloi
• Jian Zeng
• Johannes M. Scheuermann
• Julien Balestra
• Kathryn Baldauf
• Rui Chen
• Tobias Klauser
• Xianglin Gao
• Zhoulin Xie
• Aditi Sharma
• Akshat Kumar
• Aldo Culquicondor
• Amr Mahdi
• Christopher M. Luciano
• Cory Bennett
• Crazykev
• Haiyan Meng
• Hajime Tazaki
• Ilya Dmitrichenko
• Jacob Blain Christen
• Martin Hickey
• Stephen J Day
• Tim Allclair
• Wade Lee
• Yu-Ju Hong
• pacoxu
• Aaron Crickenberger
• Avi Deitcher
• Benjamin Elder
• Boris Popovschi
• Byonggon Chun
• Daniel Nephin
• Ed Bartosh
• Evan Hazlett
• George Goh
• Hui Zhu
• James Jackson
• James Sturtevant
• Jintao Zhang
• Junior Santos
• Leonardo Taccari
• Lorenz Brun
• Mohammad Asif Siddiqui
• Peng Tao
• Vlad Ungureanu
• Yohei Ueda
• Zhenhao Zhang
• Aaron Lehmann
• Abhishek Kulkarni
• Ace-Tang
• AdamKorcz
• Alban Crequy
• Aleksa Sarai
• Alex Price
• Amit Barve
• Andrei Dobre
• Angela Li
• Antoine Huret
• Archana Shinde
• Ashray Jain
• Bingshen Wang
• Bowen Yan
• Brian Pursley
• Chethan Suresh
• Chris Fregly
• Cong Liu
• Cyrill Troxler
• Darren Shepherd
• Dave Syer
• Deep Debroy
• Didier Durand
• Emmanuel Ramos
• Eric Ernst
• Erik Wilson
• Evan
• Fabiano Fidêncio
• Fabricio Voznika
• Filipe Brandenburger
• Fupan Li
• Gaurav Singh
• Georgi Sabev
• Giuseppe Capizzi
• Giuseppe Scrivano
• Gsealy Jiao
• Guangwen Feng
• Guanjun Gong
• Harshal Patil
• Hector Fernandez
• Henrik Schmidt
• HsuanChi (Austin) Kuo
• Hu Shuai
• Ivan Milchev
• Jakob
• Jamie Zhuang
• Jason Hall
• Jeremy Edwards
• Jeremy Williams
• Jess Frazelle
• Jian Qiu
• Joe Borg
• Jordan Hatcher
• Joris De Winne
• Jun Lin Chen
• Justin Cormack
• Kenta Tada
• Laszlo Janosi
• Li Ning
• Liu Hua
• Madhan Raj Mookkandy
• Madhav Jivrajani
• Maksim An
• Malepati Bala Siva Sai Akhil
• Mauricio Vásquez
• Michael Hamrah
• Morgan Bauer
• Moritz Johner
• Muhammad Kaisar Arkhan
• Nikhita Raghunath
• Nishchay Kumar
• Nitesh Konkar
• Odin Ugedal
• Pavel Tikhomirov
• Philip Marin
• Prashant Bhutani
• Qian Xiao
• Ricardo Aravena
• Robin Winkelewski
• Roy Yang
• Samarth Shah
• Sascha Grunert
• Shaobao Feng
• Shishir Mahajan
• Simon Kaegi
• Su Xiaolin
• Takumasa Sakao
• Teemu Kallio
• Thibaut Collet
• Tobias Bradtke
• Tyler Kellen
• Vishal Verma
• Wei Wei
• Yecheng Fu
• Yongkun Anfernee Gui
• Yue Zhang
• Yuxing Liu
• Zhiyu Li
• alexyadon
• blade
• chenxiaoyu
• duyanghao
• jiazhiguang
• kwgchi
• maodou
• maoyangLiu
• sarahnovotny
• shouhei
• songjiayang
• varsha teratipally
• yang yang
• zhangjianming
• zhangyadong
• zhuangqh

Changes

2947 commits

• f968359ec Merge pull request #5346 from dmcgowan/prepare-1.5.0-rc.1
• 2305f0504 Merge pull request #5307 from maoyangLiu/fix-url
• abd4be07a fix the 404 url
• 984aa330d Merge pull request #5316 from alakesh/stress-snapshotter-cli-option
• 978ebbef6 Prepare 1.5.0-rc.1 release
• 68ee827dc Merge pull request #5342 from mikebrow/improve-error-out-for-bad-config
• a20213a6e Merge pull request #5343 from thaJeztah/update_imgcrypt
• b7c813690 Merge pull request #5283 from alakesh/check-out-of-space
• ce116d4c5 go.mod: github.com/containerd/imgcrypt v1.1.1-0.20210412181126-0bed51b9522c
• 5dde642fd Merge pull request #5344 from thaJeztah/update_cni_plugins
• d33733f11 Merge pull request #5336 from mxpv/shim
• 0550c3233 containerd-stress: add snapshotter option for stress test to use
• 8a04bd052 address recent runtimes config confusion
• c4778fe1b go.mod: github.com/containernetworking/plugins v0.9.1
• 5ce35ac39 devmapper: log pool status when mkfs fails
• 054a3e281 Merge pull request #5335 from dims/drop-support-for-version-1
• 75097b8ca hcsshim seems to have been updated
• 9ad087947 Switch all our tests to version 2
• 2a2d77959 Merge pull request #5337 from mxpv/bolt
• 187affc9b Merge pull request #5338 from AkihiroSuda/console-102
• d4fbff113 Merge pull request #4399 from TBBle/wcow_compare_layers_to_tar
• 6bf77c5eb Merge pull request #5341 from containerd/revert-5303-cri-remove-deprecated-default-untrusted
• ff2cf56e5 Merge pull request #5339 from AkihiroSuda/crun-019
• e96d2a5d9 Revert "remove two very old no longer used runtime options"
• 14f357b90 CI: update crun to 0.19
• 294331060 go.mod: github.com/containerd/console v1.0.2
• 7e3fd8da2 Merge pull request #5298 from jsturtevant/issue-5297
• bb6c0c2de Add more bolt utils
• 0ad8c0a16 Decouple shim start from task creation
• 2486eb8ff Merge pull request #5326 from thaJeztah/bump_hcsshim
• c7504987e Implement windowsDiff.Compare via hcsshim/pkg/ociwclayer
• a64a76846 Replace inline applyWindowsLayer using hcsshim
• 149fa366f Don't tease the logger with a %-less format string
• b399e2ef6 Don't lose Compare failure if aborting diff upload fails
• 36bf3f0e8 go.mod: github.com/Microsoft/hcsshim v0.8.16
• 6636e3618 Merge pull request #5257 from dmcgowan/prepare-1.5.0-rc.0
• 8e1a8ecd8 Prepare v1.5.0-rc.0
• d06414036 Merge pull request #5302 from mikebrow/toml-cri-defaults
• 01a39262e Merge pull request #5324 from thaJeztah/no_libcontainer_devices
• 9bc8d63c9 cri/server: use containerd/oci instead of libcontainer/devices
• dd16b006e merge in the move to the new options type
• 9144ce967 shows our runc.v2 default options in the containerd default config
• ceb08756a Merge pull request #5321 from thaJeztah/fix_oom_score_test
• 1645db33d Merge pull request #5305 from thaJeztah/update_klauspost_compress
• 7648ad289 Merge pull request #5300 from adisky/fix-toml
• 3d20fa930 fix TestSetOOMScoreBoundaries
• 4d4117415 Change CRI config runtime options type
• 21ebeef74 integration: use busybox:1.32.0 since latest is unavailable
• 1edab6072 Merge pull request #5253 from thaJeztah/refactor_oom
• 88880f0f2 Merge pull request #5304 from mikebrow/cri-registry-doc-updates
• b52727342 Merge pull request #5308 from AkihiroSuda/add-imgcrypt-bin
• a4bc81779 Merge pull request #5312 from AkihiroSuda/expose-WithoutRunMount
• f9bcf4a8a add section link
• d4be6aa8f rm mirror defaults; doc registry deprecations
• 7bb73da6b runtime/v2/shim: remove unused SetScore() and remove sys.OOMScoreMaxKillable
• 91e7d21ee sys: add AdjustOOMScore() utility
• 44240116a sys: add boundary checks to SetOOMScore()
• ace1912bb sys: use assert for error checks in OOM tests
• 6e7271522 sys: add missing pre-condition checks in tests
• badd60d3f sys: un-export runningPrivileged(), remove runningUnprivileged()
• 21a175860 go.mod github.com/klauspost/compress v1.11.13
• 8b00eafca Merge pull request #5318 from mikebrow/update-cri-tools-k8s-staging
• 58c5fd09e re-enable cri test
• da998c81e move to gcr.io/k8s-staging-cri-tools test images
• 8ba8533bd pkg/cri/opts.WithoutRunMount -> oci.WithoutRunMount
• 92ea98eda cri-cni-release: add imgcrypt binaries (v1.1.0)
• 85041ffe5 Merge pull request #5276 from aaronlehmann/tracker-false-positives
• 4c1fa5719 remotes/docker: Only return "already exists" on push when the upload was successful
• dc8af03ba Merge pull request #5303 from mikebrow/cri-remove-deprecated-default-untrusted
• 0186a329e remove two very old no longer used runtime options
• 3db5af9b6 Merge pull request #5315 from dmcgowan/disable-broken-cri-tools-critest
• 58a07754a Temporarily disable cri-tools critest
• ff05d499e Merge pull request #5272 from thaJeztah/sync_test_replaces
• 261c107ff Merge pull request #5278 from mxpv/toml
• 251e3d15d Merge pull request #5299 from estesp/refkey-with-name
• 7ae0a60fb Add OCI ref.name to unique key in remotes handler
• 5ada2f74a Keep host order as defined in TOML file
• d9ff8ebef support multi-arch images for windows via ctr
• 9a9bd0975 Merge pull request #5270 from kzys/remove-blockdev
• 1c05317a4 Merge pull request #5291 from ktock/generic-diff
• 6866b36ab Add workaround to keep docker hosts structs private
• c54d92c79 image: use generic decompressor for calculating DiffID
• 1faca349e integration/client: rename package to "client"
• 6fc9e4500 synchronize replace rules in integration/client go.mod with main go.mod
• 9e19a2984 Fix hosts test on Windows
• 3f406d4af Cleanup vendor
• d56b49c13 Rewrite Docker hosts parser
• e1f51ba73 Use os.File#Seek() to get the size of a block device
• 1b05b605c Merge pull request #5145 from aojea/happyeyeballs
• effe226d9 Merge pull request #5258 from fuweid/checkpoint-on-pause-state
• ddd4298a1 Migrate current TOML code to github.com/pelletier/go-toml
• 499c2f7d4 Vendor github.com/pelletier/go-toml
• 75a0c2b7d Merge pull request #5264 from mxpv/tests
• ed8cf6077 Merge pull request #5267 from estesp/up-integ-timeout
• 7b17a29da Merge pull request #5262 from cpuguy83/ci_cross_compile
• 219f1395b Merge pull request #5268 from thaJeztah/no_klog
• 61c749036 integration/util: remove dependency on k8s.io/klog/v2
• 4f7d1d74f Merge pull request #5260 from fuweid/limit-concurent-uploads-when-push
• f2d84035f Merge pull request #5266 from Ace-Tang/ace
• d9765f7bf Extend default timeout for nested VM integration run
• 5e94745f2 ctr: add --user for task exec
• f8c2f0475 remotes/ctr: allow to limit max concurrent uploads like downloads
• 80fa9fe32 Merge pull request #5135 from AkihiroSuda/default-config-crypt
• 4674ad7be Ignore some tests on darwin
• 55450e773 Run unit tests on CI for MacOS
• 311e326a1 Add CI job to cross compile all the things
• 10a498c7c Update go-winio to fix compile error on armv7
• 1a9c6f557 Revendor zfs to to fix integer overflow
• 548d984f2 Merge pull request #5132 from mikebrow/add-some-debug-out-for-dep-setups
• bcda849e7 Merge pull request #5133 from TBBle/correct-cleanup-of-windows-layers-in-test
• 1fd3d12f9 go mod tidy the client integration test module
• da7d96ba3 Clean up WCOW layers after tests in the correct order
• 9ad87b9ba adds critools-version
• 72b7f4bab task: allow checkpoint on pause state
• 31a0f92df Merge pull request #5234 from mxpv/http-dbg
• 181e2d421 Merge pull request #5250 from dmcgowan/cri-fix-reference-ordering
• 664088dd2 Merge pull request #5254 from voltbit/clarify-cri-registry-doc
• e4b9b1038 Make CRI registry docs more clear
• 2ad54a2cd Merge pull request #5255 from dmcgowan/bump-linux-integration-timeout
• 792336b09 Merge pull request #5245 from mxpv/oom
• ec4d7736d Increase timeout for linux integration tests
• eb7c7c71e Fix oom tests on non Linux
• d54225cce Merge pull request #5125 from Iceber/add-caller-info
• 717dde3c2 Merge pull request #5252 from thaJeztah/separate_userns
• 708299ca4 Move RunningInUserNS() to its own package
• 0886ceaea Fix reference ordering in CRI image store
• bf9db47e8 add caller info to the testHook
• edf648416 Merge pull request #5243 from AkihiroSuda/update-zfs-20210322
• 305b42583 use happy-eyeballs for port-forwarding
• 22ef69d77 Support HTTP debug in ctr
• 4e919ffab Merge pull request #5244 from pacoxu/fix/night-run
• 01765d097 night ci fix: add packages for ubuntu 20.04
• 8cdc1f13b go.mod: github.com/containerd/zfs v0.0.0-20210322090317-0e92c2247fb7
• 56f17a085 Merge pull request #5148 from wzshiming/fix/defer-cleanup
• 30e1e66e5 runtime/v2: Fix defer cleanup
• 6150170d9 Merge pull request #5235 from estesp/testimage-userns-ro
• 33776ada0 Use specific image for user namespaces tests
• a47feaf46 Merge pull request #4898 from timchenxiaoyu/makefile
• f7bd43c13 Merge pull request #5216 from estesp/testimage-429
• a7b456d2f Merge pull request #5233 from kzys/mkfs-error
• e0c94bb26 Merge pull request #4708 from kzys/enable-criu
• 0d569f8f4 Merge pull request #5229 from wzshiming/fix/log-cp-file
• 7704fe72d Specifically mention "mkfs.ext4" on the error from the command
• 2061227b5 Merge pull request #4949 from hs0210/work
• 1410220d8 Fix error log when copy file
• 86a7db486 Merge pull request #5227 from tonistiigi/grpc-stream-close
• fbf79545d Merge pull request #5230 from wzshiming/fix/log-kill-shim
• fe787efa2 Fix error log when kill shim
• 8d8c15ca5 contentproxy: ensure grpc stream is closed on commit
• 2d5f9bf87 Merge pull request #4990 from kzys/host-status
• 6e343f25e Switch test image to a non rate-limited manifest list
• 969b3d638 Merge pull request #5202 from wzshiming/fix/dgst-debug
• 63b605d8f Merge pull request #5210 from thaJeztah/bump_k8s
• 3f98a6d2d Merge pull request #5211 from pacoxu/pause/3.5
• 31c058735 Merge pull request #5218 from alakesh/runtime-v2-stress
• 92c1bbb25 Merge pull request #5222 from fuweid/follow-up-5174
• 9fdc96c09 runtime/v2: add comment for checkCopyShimLogError
• 24602e7a9 change default runtime for containerd-stress app
• 32a08f1a6 Merge pull request #4847 from cpuguy83/devices_by_dir
• b395f2f9a Merge pull request #5160 from MadhavJivrajani/master
• a0cc9b432 Merge pull request #5195 from fuweid/fix-5173
• 1a0973dde Merge pull request #5206 from Iceber/fix-new-container
• 5978fe807 Merge pull request #5212 from thaJeztah/gofmt_all_the_things
• 8731888ec Re-enable CRIU tests by not using overlayfs snapshotter
• b520428b5 Fix CRIU
• 4e76bcf06 gofmt -s -w all the things
• f201b78b9 Merge pull request #5205 from dmcgowan/prepare-v1.5.0-beta.4
• 767600899 Merge pull request #5207 from thaJeztah/bump_btrfs
• 569023fd5 go.mod: github.com/containerd/nri v0.0.0-20210316161719-dbaa18c31c14
• 0e1f59e89 go.mod: github.com/containerd/zfs v0.0.0-20210315114300-dde8f0fda960
• 1a28c2f7e Merge pull request #5200 from pacoxu/skip-error-check
• ffff68866 upgrade pause image to 3.5 for non-root
• 88d3881e1 go.mod: github.com/containerd/fifo v0.0.0-20210316144830-115abcc95a1d
• a22c43fa4 go.mod: github.com/containerd/aufs v0.0.0-20210316121734-20793ff83c97
• f6f861736 go.mod: github.com/containerd/btrfs v0.0.0-20210316141732-918d888fb676
• 460b35236 go.mod: kubernetes v1.20.4
• fef6bb8d3 Merge pull request #5204 from thaJeztah/overlayutils
• 5e484c961 runtime/v2/runc: fix the defer cleanup of the NewContainer
• e6086d9c0 Prepare release notes for v1.5.0-beta.4
• 34b7a5f09 Update mailmap
• 2755ead92 Merge pull request #4978 from cpuguy83/certs_dir
• ba8f9845e move overlay-checks to an overlayutils package
• 7776e5ef2 Support adding devices by dir
• a1138182d Merge pull request #5180 from dmcgowan/lint-enforce-comments
• fad66f94e Merge pull request #5174 from fuweid/fix-5130
• bd4f468c6 Merge pull request #5186 from cpuguy83/fix_docker_cert_loading
• 5461fa3a7 Merge pull request #5196 from Iceber/fix-rootfs
• d895118c7 runtime/v2/runc: fix leaking socket path
• a76cefd12 plugin status should be skip, not error
• 766e7953a Change dgst to digest in debug
• 4e8b2f309 rootfs: fix the error handling of the createInitLayer
• 6b410ba41 Merge pull request #5197 from Iceber/fix-ctr-command
• 06e6f45c3 Merge pull request #5198 from Iceber/fix-usage
• d3ad7f390 cmd/ctr: use e.g. in the command usage
• 231bbdc37 cmd/ctr: fix export command
• ecb881e5e add imgcrypt stream processors to the default config
• ac2726e12 cmd/containerd: deduplicate config*.go
• 9a7ca39cb defaults: add DefaultConfigDir
• 8f863afd3 Use net.IP.IsLoopback() to match loopback addresses
• eabd9b98b runtime: ignore file-already-closed error if dead shim
• e231b955d Merge pull request #5154 from estesp/zero-len
• 5b7f2657d Merge pull request #5184 from thaJeztah/fixate_buildtags
• f6a994273 Better error when handling a descriptor of size zero
• 92009ad7a Merge pull request #5164 from errordeveloper/master
• 6f94b156f Merge pull request #5189 from TBBle/reduce-load-on-ratelimited-docker.io
• 42266dadc Merge pull request #5182 from thaJeztah/bump_go_runc
• bd2c0898a go.mod: github.com/containerd/go-runc v0.0.0-20201020171139-16b287bc67d0
• 143283931 Merge pull request #5185 from thaJeztah/update_imgcrypt
• 24a8b460e go.mod: github.com/containerd/zfs v0.0.0-20210313052028-2233970b74b1
• f0b6bcb77 go.mod: github.com/containerd/aufs v0.0.0-20210313051948-ffdde1490233
• 5cfc4a80d Enable some image-pull tests on Windows
• b375f9012 Use k8s.gcr.io/pause:3.4.1 in pull-only tests
• bcc02002a go mod tidy after containerd moved to hcsshim v0.8.15
• b0b6d9aa0 Add support for using a host registry dir in cri
• 1fd99e24a Fix docker style cert loading.
• fcab1fe53 go.mod: github.com/containerd/imgcrypt 7ed62a527887
• 55a9bbc03 Prevent runc inheriting BUILDTAGS from containerd
• 8cf669ce3 Fix unsupported files exporting functions for apparmor and seccomp
• 35eeb24a1 Fix exported comments enforcer in CI
• 9d5c1165a Merge pull request #5178 from estesp/go-1.16.2
• 031775ee5 Merge pull request #5179 from dims/document-the-runtime-public-method
• b446ed1ca Document the Runtime public method
• a2f5a9d43 Merge pull request #5101 from dims/drop-github.com/Microsoft/hcsshim/test
• 8cbef0fad Update to Go 1.16.2
• 437b7f71b ci: log the status of GitHub Actions' VM at the end
• 6a4aa1e2e Separate go module for client tests
• d8208e2e3 Merge pull request #5170 from dims/switch-zuul-merge-mode
• 481105834 Switch from merge-resolve(default) to merge mode for containerd-build-arm64
• 2205da64a clean up install-cni and install-critools
• 1b1bb4870 adds a new install-deps in the makefile; and some debug out
• ce8e8e890 Merge pull request #5036 from thaJeztah/split_runc_binary
• 381cbdd39 Merge pull request #5056 from estesp/go-1.16
• d1b778435 Use ErrUnexpectedStatus more consistently
• a11d78578 Include URL and method in ErrUnexpectedStatus
• 8634cd9df Merge pull request #5157 from AkihiroSuda/deflake-TestRestartMonitor
• c55492f8d Update to Go 1.16.1
• ee84e8575 deflake TestRestartMonitor
• 2b1e91367 Merge pull request #5156 from estesp/step-name
• c9c7665bb CI: Add a name for the vagrant up step
• 95513021e Merge pull request #5150 from thaJeztah/update_mountinfo
• d629a08eb go.mod: github.com/moby/sys/mountinfo v0.4.1
• 79a51cd16 move runc version to a separate file for easier consumption
• 8325ba5d3 Separate runc binary version from libcontainer version
• b89a63a23 Remove references to apparmor and selinux buildtags for runc
• 17ab5dd08 Merge pull request #5114 from alakesh/print-unpack-time
• ddf6594fb Merge pull request #5076 from AkihiroSuda/ovl-k511
• 9f5244f41 Print elapsed time for image unpack
• a5d17eb50 Merge pull request #5143 from kevpar/fix-lookpath
• 9ec277895 Merge pull request #4467 from cyphar/apparmor-update-profile
• c9afc4250 Fix error checking when resolving shim binary path
• 6d68490ef Merge pull request #5014 from Iceber/update-pause-version
• 185aaf207 Merge pull request #5141 from dims/create-symlink-to-avoid-duplicating-files-in-cloud-init
• f6a07f444 Merge pull request #5140 from mxpv/reader
• c193e121f Create symlink to avoid duplicate cloud init
• 571cc32df Add OpenReader to create ReaderAt interface
• 7738246cd Merge pull request #5111 from ctrlaltdel121/master
• da137a7a1 Merge pull request #5134 from AkihiroSuda/dump-apparmor
• 0580bd699 apparmor: add DumpDefaultProfile
• f37ae8fc3 move to v3.4.1 for the pause image
• a72fe7da2 Merge pull request #5106 from Iceber/update-building-readme
• 4514bc9c5 Merge pull request #5127 from dmcgowan/update-release-md
• aa8448a28 Update RELEASES.md to reflect latest releases
• 02334356d Merge pull request #5120 from dmcgowan/1.5-release-notes-update
• 9ba531c31 Prepare release notes for 1.5.0-beta.3
• 8e2072661 Merge pull request #5095 from dims/fix-pull-containerd-node-e2e-failure
• fa66f93c0 Merge pull request #5117 from Iceber/fix-container-status
• 92ab1a63b cri: fix container status
• 498eebe86 Merge pull request #5123 from fuweid/update-bug-report-template
• 34e838581 .github: update bug_report.md with hint and tip
• bb3fcf62f Merge pull request #5119 from mxpv/dm
• 15a4df0ba fix names and paths for containerd master
• 1dcfe7fa8 Merge pull request #5040 from estesp/http-trace
• 6762c6f2d Merge pull request #5115 from kevpar/update-hcsshim
• e1b4c0ad4 Remove flaky devmapper check
• 2f71f4f63 Merge pull request #5116 from fuweid/carry-4825
• 51a72f049 mark device faulty after parent fails to suspend
• 91ff31498 Merge pull request #5009 from thaJeztah/fix_install_scripts
• 164573897 script/setup: use git clone instead of go get -d
• 591caece0 cri: check fsnotify watcher when receiving cni conf dir events
• 46fd9e440 update BUILDMING.md
• 51992133a Allow HTTP tracing in push/pull via --trace flag
• 82dccdc49 Update github.com/Microsoft/hcsshim to v0.8.15
• 134f7a737 Merge pull request #5007 from fidencio/wip/allow-shimv2-to-also-be-loaded-from-an-arbitrary-path
• 52a602190 Merge pull request #5102 from dims/cleanup-k8s.io/kubernetes-update-aufs-zfs
• c3eecf4f7 Update to newest imgcrypt, aufs and zfs
• 54a63a3dd Merge pull request #5088 from Iceber/update-linuxkit-readme
• 1f801c02c Merge pull request #5099 from AkihiroSuda/cache-vagrant
• 4702af917 CI: cache ~/.vagrant.d/boxes
• 9ade247b3 overlay: support "userxattr" option (kernel 5.11)
• ba199129b update linuxkit readme
• 10bbd1a46 Merge pull request #5051 from wzshiming/fix/missing-close
• 46c974650 Merge pull request #5064 from Iceber/fix-redundant-slice
• 07a3ce3d7 Merge pull request #5080 from dmcgowan/prepare-1.5.0-beta.2
• 9884730e5 Merge pull request #5069 from AkihiroSuda/restart-fast
• 437955792 Merge pull request #5086 from eramos2/revise-docs
• 8dbe53a2a Merge pull request #5070 from yoheiueda/empty-masked
• c61f0cead Fix broken docs links (containerd#5085)
• f7f6aabff oci: fix superfluous slice operations
• 224efa9da Fixed wording in docs, and broken link
• 2bc8c779c Merge pull request #5068 from AkihiroSuda/restart-test
• 119fe7046 Merge pull request #5071 from AkihiroSuda/restart-parallel
• 7738370db Merge pull request #5083 from AkihiroSuda/remove-dep-gocapability
• 7ee610edb drop dependency on github.com/syndtr/gocapability
• 982217335 cap: rename FromUint64 to FromBitmap
• 6ab6eaa79 restart: skip Sleep() for the first iteration of the reconcilation
• 36df282dc restart: add an integration test
• b23dc1131 restart: parallelize reconcile()
• f38a79703 Prepare release notes for 1.5.0-beta.2
• 07f1df454 cri: set default masked/readonly paths to empty paths
• af4c55fa4 Merge pull request #5078 from AkihiroSuda/fix-5077
• b4ef1e9dc CI: fix "ls: cannot access '/etc/cni/net.d': Permission denied"
• 757be0a09 Merge pull request #5017 from AkihiroSuda/parse-cap
• 9173d3e92 Merge pull request #5021 from wzshiming/fix/signal_repeatedly
• 08d765af9 Merge pull request #5028 from Iceber/runtime-spec
• 096e99fe7 Merge pull request #5057 from estesp/moar-time
• 13f904cde Tune test timeouts for GH Actions
• e58be59cb Merge pull request #5054 from jterry75/fix_env_windows
• 06e4e0956 cri: append envs from image config to empty slice to avoid env lost
• c32ccdf8b Merge pull request #5024 from yadzhang/deepcopy-imageconfig
• d30a6c005 Merge pull request #5045 from wzshiming/fix/file-not-closed
• 5e4acc043 Fix file is not closed
• 05ef2fe2f Fix missing close
• 746cef0bc Merge pull request #5044 from wzshiming/fix/empty-error-warpping
• 08318b1ab cri: append envs from image config to empty slice to avoid env lost
• 59db8a10e Fix empty error warpping
• a98c83c2d Merge pull request #5033 from chrisfregly/master
• 80e1d98f6 fix: issue containerd#5032
• 0cc399138 Merge pull request #4912 from dcantah/dcantah/wcow-sandbox-size
• dc6f5ef3b Fix repeated sending signal
• 41e3057cc Merge pull request #5025 from jeremyje/win20h2
• 88d97362b Merge pull request #5027 from kevpar/config-check
• 2adb2ea64 Merge pull request #4973 from lorenz/move-netns-into-statedir
• 36d0bc1f2 Allow moving netns directory into StateDir
• e288feacf Merge pull request #5026 from crosbymichael/cni-anno
• 51f985cb1 oci: move cap UT to _linux_test.go
• d08aa4b68 oci: fix the file mode of the device
• a2d1a8a86 oci.WithPrivileged: set the current caps, not the known caps
• 5f051c1d7 Improve error detection when loading config
• e874e2597 [cri] add pod annotations to CNI call
• 1c81071d3 Add references to Windows 20H2 test images.
• ddcc431c1 Merge pull request #5016 from thaJeztah/bump_cgroups
• 6be7c9f4e go.mod: containerd/cgroups 8a68de5
• cfa842c27 Merge pull request #5003 from dmcgowan/prepare-1.5.0-beta.1
• a2973c70a Prepare release notes for 1.5.0-beta.1
• b3f240206 Merge pull request #5002 from crosbymichael/anno-image-name
• e908be5b5 Merge pull request #5001 from kzys/no-lint-upgrade
• d05f7bdf0 Merge pull request #5011 from thaJeztah/setup_go_v2
• 25e42e702 Merge pull request #5004 from thaJeztah/bump_golang
• 129c67dc8 GHA: use setup-go@v2
• d80dbdae6 v2, util: Take the full binary path when starting the shimv2 process
• ec7d905f4 Update to go 1.15.8
• 5f2d02adc Merge pull request #4717 from thaJeztah/reduce_libcontainer_use
• ccbeb550b Merge pull request #4991 from kzys/no-auto-clear
• e9e3b1d6f Merge pull request #5000 from kzys/fix-assert-check
• 07db46ee2 lint: update nolint syntax for golangci-lint
• b14ccd205 ci/gha: upgrade golangci-lint from v1.29.0 to v1.36.0
• aa5e55ad9 Merge pull request #4980 from thaJeztah/prevent_cio_npe
• e178af2d3 Merge pull request #4999 from thaJeztah/retry_fedora
• 05a2e280a mount: make setupLoop() work with with Autoclear
• 2ac33d79f test: fix assert.Check's argumets to show its parameters correctly
• f101c8ac6 ci/gha/fedora: retry vagrant up
• 04d061fa6 update runc to v1.0.0-rc93
• 54cc3483f pkg/cri/server: don't import libcontainer/configs
• 99cb62f23 [cri] add image-name annotation
• ccde82da2 Merge pull request #4987 from Random-Liu/fix-auth-config-conversion
• b5bf1fd5d Fix deprecated registry auth conversion.
• 40542305b Merge pull request #4994 from kzys/kill-before-buf
• 310e59073 test: stop containerd before accessing the stdout
• f07e1811e Merge pull request #4988 from Iceber/fix-runc-v2-service
• b458583b7 runtime: fix shutdown runc v2 service
• a39478ab9 Merge pull request #4986 from kzys/devmapper-log
• db6075fc2 snapshot/devmapper: log actual values to investigate containerd#4965
• 49c5c1487 Merge pull request #4906 from payall4u/bugfix/fix-open-shim-fifo
• 7a468a3f3 cio.copyIO: refactor to use cio.Close() (windows)
• 219fa3d0a cio.copyIO: fix pipes potentially not being closed (Windows)
• baf6c1d5e cio: openFifos() use named return variables to use in defer()
• 6a2d3990d cio: FIFOSet.Close() check if FIFOSet is nill to prevent NPE
• 957fa3379 change flag from RDONLY to RDWR and close the fifo correct
• d8572b6ca apparmor: handle signal mediation
• 19ee068f9 Merge pull request #4974 from adisky/update-protobuf
• 1423e9199 Update gogo/protobuf to v1.3.2
• cb6f66504 Merge pull request #4975 from thaJeztah/mod_tidy
• 6c69cd55f Makefile: run "go mod tidy" when vendoring
• c28533c7a Merge pull request #4972 from crosbymichael/exec-sync
• 591d7e2fb remove exec sync debug contents from logs
• c28e42441 Merge pull request #4922 from kinvolk/alban_pod_annotations
• 28e4fb25f cri: add annotations for pod name and namespace
• 20346607b Merge pull request #4701 from kzys/content-store-filter
• f615c58dc Merge pull request #4682 from fuweid/cri-handle-exit-event-separate
• 3299c5560 Merge pull request #4967 from dmcgowan/cleanup-root
• 9108373cb Merge pull request #4968 from dmcgowan/add-prune-references
• e56de6309 cri: handle sandbox/container exit event separately
• 9aca94c5b Add prune command to remove layer references
• 643bb9b66 Merge pull request #4958 from AkihiroSuda/crun-017
• aae24ecbc Merge pull request #4963 from zhsj/move-runtimeopt
• 9e78a001b Merge pull request #4964 from zhsj/cgo
• 074873c68 Add cgo tag to btrfs plugin
• 5142c3842 Merge pull request #4960 from AkihiroSuda/eol-12
• 0cd8309c8 Merge pull request #4959 from AkihiroSuda/go1.15.7
• 2818fdeba Move runtimeoptions out of cri package
• d49e1d239 RELEASES.md: v1.2 reached EOL on October 15, 2020
• 45265febd Bump Golang 1.15.7
• 80243b866 CI: update crun to 0.17
• 0bbbc59b9 Merge pull request #4957 from thaJeztah/update_seccomp_profile
• 809635b60 Merge pull request #4759 from anmaxvl/anmaxvl/windows-logging-driver
• 5a66c2ae5 Merge pull request #4881 from AkihiroSuda/converter
• 5ca3ac65c add Image content converter
• 9b9de47eb Merge pull request #4824 from dcantah/dcantah/reuse-scratch
• 392b2857a Merge pull request #4848 from katiewasnothere/ctr_image_chainid
• e1445dff1 profiles: seccomp: update to Linux 5.11 syscall list
• ddb5e1651 Enhance logging driver and ctr tasks to support windows
• 83f8d6126 Merge pull request #4925 from dmcgowan/prepare-1.5.0-beta.0
• c4bff3d17 Merge pull request #4943 from AkihiroSuda/platforms-literallyonly
• 7d6d52646 Add release notes for v1.5.0-beta.0
• c35b4cfed Merge pull request #4955 from adisky/fix-doc
• d09bf1886 Clean Up Doc and fix some broken links
• 1230bd630 Merge pull request #4952 from crosbymichael/label-etc-files
• 9c3f17139 Merge pull request #4953 from ImJasonH/cpuinfo
• 363f2c392 Derive cpuinfo as needed, instead of at init-time
• a73103923 [cri] label etc files for selinux containers
• 1d26595cf Add unit test for func in remotes/docker/pusher.go
• ff1451cab Scratch size customization and UVM scratch creation for WCOW snapshotter
• e22ce0fa0 platforms: add subarchless version of Only()
• 66fec3bbb Merge pull request #4932 from tianon/arm64-fallback
• cb76f534f Merge pull request #4865 from yukiisbored/yuki_is_bored/openbsd-support
• 3e5acb9d9 Add scratch space re-use functionality to LCOW snapshotter
• 4073aaa7a Allow arm64 to fallback to arm (v8, v7, v6, v5)
• 124fc14a4 Merge pull request #4926 from dims/update-k8s-to-latest-v1.20.x
• 14df541a4 Add a new flag to images pull for printing out the pulled image's chainID
• 32506bd45 Merge pull request #4934 from dims/bump-golang-1.15.6
• b72534967 Bump Golang 1.15.6
• 378c11924 Bump k8s deps to v1.20.1
• abc0041a0 Merge pull request #4918 from liusdu/sig_bus
• 38604a76c Merge pull request #4933 from TBBle/fix-resolver-header-map-panic
• 7dffdfa56 Move documentation and helper directories out of root
• 785ac3ab7 Ensure request.header is never nil
• 550b4949c Merge pull request #4700 from mikebrow/cri-security-profile-update
• 3b6a38680 Merge pull request #4528 from tianon/platforms-compare
• e62d03b61 Merge pull request #4578 from thaJeztah/use_moby_sys
• 9db6aa625 Merge pull request #4302 from songjiayang/update-docker-resolver
• 86277395c signal: do not print message when dealing with SIG_PIPE
• a4f4a4311 Merge pull request #4916 from stefanberger/streamproc_env_vars
• 5fa5f15de Add amd64->386 fallback
• 6bf565045 Merge pull request #4923 from fuweid/fix-wrong-context
• 1917ca5f7 Allow passing environent variables to StreamProcessors
• 04df60d10 Merge pull request #4858 from samuelkarp/freebsd-native-snapshotter
• 846cb963c runtime/v2: should use defer ctx to cleanup
• 75c264622 Merge pull request #4902 from mxpv/losetup
• d7ec6e9e8 Merge pull request #4917 from AkihiroSuda/demote-introspection-log-level
• 2374178c9 pkg/cri/server: optimizations in unmountRecursive()
• 757291920 mount: remove remaining uses of mount.Self()
• 474abe572 mount: remove unused mount.PID()
• f6a0ec7c0 mount.CleanupTempMounts() use github.com/moby/sys/mountinfo
• 43578a9d6 mount: mount.PID(), mount.Self(): change signature to return pointers
• fb464b94d mount: replace mountinfo handling with moby/sys/mountinfo
• a9cc2a772 introspection: demote log level
• 7c6d710bc Merge pull request #4911 from dims/reduce-clutter-of-log-entries-during-process-exec
• 092f9e607 Merge pull request #4909 from fenggw-fnst/work
• 1f5b84f27 [CRI] Reduce clutter of log entries during process execution
• 3e7bb721d Fix typo in comment
• 18ad79d32 Merge pull request #4907 from mxpv/headers
• b236a9337 Merge pull request #4896 from AkihiroSuda/export-skip-non-distributable
• c1b01eabc Add copyright header to proto files
• eb1649225 Refactor loseup test
• 5d1955ac2 Merge pull request #4899 from zhsj/cri-install-doc
• c5fa0298c Address loop dev PR comments containerd#4178
• b7026236f snapshot/devmapper: use losetup in mount package
• 9e4207016 mount: handle loopback mount
• 380b52652 Bring OpenBSD support
• d64917403 standard makefile,fix not work no macos
• 91dc69ee4 docs: point cri release tarball to github release page
• 602af6f67 Merge pull request #4895 from AkihiroSuda/remove-redundant-secreport
• e2e2c5737 export: add --skip-non-distributable
• d50de11ce ISSUE_TEMPLATE: remove redundant "report a security issue" button
• 9067796ce Merge pull request #4891 from tianon/generic-arm-vector
• 9072b0914 Refactor platforms.Only with a "platformVector" helper
• 7a2720f5e Merge pull request #4879 from tianon/platforms-only-test
• 9d98f882b Merge pull request #4859 from dcantah/update-hcsshim-winio
• cf62a557a Merge pull request #4882 from AkihiroSuda/issue-question-guide
• 9a7bb7e40 add guidance about GitHub Discussions
• 66a3f2cbc Add platforms.Only test
• 178e9a101 Merge pull request #4866 from zhsj/doc-fix
• ac5ca3a41 Merge pull request #4841 from AdamKorcz/fuzz1
• b624486c8 native: support for FreeBSD
• d6baafa75 mount: basic support for FreeBSD
• 5988bfc1e docs: Various typo found by codespell
• b4c604692 docs: Move autocomplete distribution section next to install section
• 1cc3c7f4a docs: Remove appveyor badge
• 454e54033 docs: Tweak installing btrfs dependency on Debian/Ubuntu
• 13917b03d docs: Update command in BUILDING after moving to go modules
• dc207b654 Merge pull request #4860 from masters-of-cats/pr-process-not-found-err
• 3698bc4ff Added 2 fuzzers
• a551492e9 Update hcsshim and go-winio vendoring
• 7451dd1ed Return GRPC not found error instead of plain one
• ce7024558 Merge pull request #4863 from crosbymichael/log-dir
• 070b69844 Merge pull request #4845 from skaegi/oom_score-max
• 2e442ea48 [cri] ensure log dir is created
• 3cd1c832e Merge pull request #4796 from jsj/jsj/4572
• a5f9613b8 Merge pull request #3927 from katiewasnothere/snapshotter_check
• 318e34b98 Merge pull request #4855 from tonistiigi/push-concurrent-access
• 7fa02f3af Merge pull request #4854 from tonistiigi/fix-push-auth
• 4dfec7fa0 pusher: add missing authentication support for requests
• bf323c5bd docker: avoid concurrent map access panic
• e922d5553 Merge pull request #4849 from AkihiroSuda/remove-selinux-tag
• 0c0ff6efc Merge pull request #4850 from wangmaodou/update-runc-doc
• b197a66f4 docs: update RUNC.md
• 7e6e4c466 remove "selinux" build tag
• da2fd657a Add bounds on max oom_score_adj value for AdjustOOMScore
• 23315f864 Merge pull request #4840 from AkihiroSuda/with-container-labels-2
• a9cc80192 Merge pull request #4821 from mxpv/tests
• d1ced4f8a Merge pull request #4833 from AkihiroSuda/restart-with-log-uri
• 5d147bdc4 Merge pull request #4842 from AkihiroSuda/expose-fs-user-util
• 8a57d70a5 oci: expose getUserFromPath and getGIDFromPath
• 041eb3ac3 container_opts.go: add WithAdditionalContainerLabels
• ca292da14 Requested Changes
• 09241fd21 Mention built-in CRI support in README
• 0356d5d4b restart: allow passing existing log URI object
• 004214808 Merge pull request #4831 from AkihiroSuda/expose-contents-showprogress
• c9c1f5cc5 Merge pull request #4832 from AkihiroSuda/expose-apparmor-loaddefault
• fad0ca261 Merge pull request #4822 from samuelkarp/freebsd
• 7b04b3cbb contrib/apparmor: expose LoadDefaultProfile
• 419ad7372 ctr/commands/contents: expose ShowProgress
• 4bcfbfe66 ci: add cross-compile for FreeBSD
• f8992f451 add optional check that snapshotter supports the image platform when unpacking
• da6860986 Fix devmapper test
• 5a26a0369 Enable devmapper tests on CI
• 2b87d4554 Add retries when deleting a devmapper device
• 7b0149ac4 Merge pull request #4820 from AkihiroSuda/additional-pull-opts
• b45920918 Compile for FreeBSD
• 51f9eafd1 vendor: update continuity for FreeBSD support
• 1febce4ca ctr: FetchConfig: allow setting additional []containerd.RemoteOpt
• 1e624fa3d Merge pull request #4815 from AkihiroSuda/remove-apparmor-tag
• 0a9147f3a remove "apparmor" build tag
• 6467c3374 refactor based on comments
• 46e1dc5a9 Merge pull request #4809 from giuseppe/zstd-support
• 73a301c7a Merge pull request #4772 from gaurav1086/ValidatePluginConfig_fix_range_iterator_issue
• efad13faa Merge pull request #4811 from AkihiroSuda/expose-apparmor
• 9f97514f9 Merge pull request #4803 from ungureanuvladvictor/vladu/json-logging
• 55eda46b2 expose hostSupportsAppArmor()
• 30802fac7 compression: add support for the zstd algorithm
• 9c398e1cb Merge pull request #4395 from TBBle/use_gowinio_for_reading_tarballs
• 071a18550 cri/config: fix range iterator issue in ValidatePluginConfig
• b4727eafb adding code to support seccomp apparmor securityprofile
• f1295043e vendor commit for cri api changes
• e98d7f8ea Merge pull request #4808 from dmcgowan/update-continuity
• 41da96d67 Update continuity
• b6bb48180 Merge pull request #4794 from kzys/lock-since
• f12b68cc8 Allow configuration of different log formats: text, json
• cb8253eea Merge pull request #4791 from crosbymichael/base-runtime-opts
• 59a0667cf Merge pull request #4799 from jiazhiguang/master
• 0f041dc1b ADOPTERS.md: Add the Inclavare-Containers container runtime
• c95d71cf6 content: include the staleness of the lock when tryLock() fails
• 9561d9389 Merge pull request #4776 from didier-durand/README_typo
• 78f31afb4 Reorder to separate generic from windows-specific code
• 3e47cdf70 Use go-winio tar-application code instead of our own
• 05647251a Update microsoft/go-winio to v0.4.15
• 3d358c9df [cri] don't clear base security settings
• 7126310a0 Merge pull request #4784 from fuweid/fix-4769
• 774cb16a4 Merge pull request #4739 from kzys/handle-scheme
• fbf1a72de Merge pull request #4760 from zhsj/gomod
• b9092fae1 Merge pull request #4643 from dcantah/feedback-lcow-snapshotter
• faec5d4ff runtime: should not send duplicate task exit event
• a91c298d1 Optimize Windows and LCOW snapshotters to only create scratch layer on the final snapshot
• 4a4bb851f Merge pull request from GHSA-36xw-fx78-c5r4
• 7e46676e7 Go mod vendor
• fc946ca82 Revert urfave/cli version bump
• c129310ec Don't fail fast in integration matrix test
• 56eca84ae Remove reference of GO111MODULE=off
• 56672b961 Change to GOPATH before go get
• 819ac05f3 Fix hcsshim commit detection
• 553a36915 Fix reference to vendor.conf in scripts
• 089d2183b Replace vndr in Makefile
• 6a2df5fce Revert gogo/googleapis version bump
• de059b11b Revert protobuf and grpc version bump
• 89a1fea39 Go mod tidy
• 9aafdbdb4 Convert vendor.conf to go.mod with go mod init
• 7ccd0646e Merge pull request #4781 from ekrecker/patch-2
• aa2c930a3 Merge pull request #4778 from AkihiroSuda/remove-unused-hack-utils.sh
• 3b54a06ee Merge pull request #4779 from AkihiroSuda/fedora33
• e58adfd71 Merge pull request #4777 from AkihiroSuda/crun-016
• b69f36aa1 Fix some typos and grammars
• 602b2c666 remove unused hack/utils.sh
• efc4d9909 Vagrantfile: update to Fedora 33
• a67dbdee7 CI: update crun to 0.16
• 75a03e4ce Fixing 1 typo in README
• ddb47a39f Merge pull request #4764 from zhsj/cleanup-systemd
• cb2dcb04f Merge pull request #4765 from kevpar/panic-file
• 834499052 Remove duplicate systemd units file
• b2420ebcd Fix Windows service panic file to not be read-only
• ebc0ddb28 Merge pull request #4761 from zhsj/fix-cri-proto
• 625da6b3e Merge pull request #4719 from estesp/fix-shm-relabel-test
• fe767f95c Fix package name in cri runtimeoptions protobuf
• af963cc2c Merge pull request #4757 from kevpar/backport-doc
• 7d135f4da Update backports documentation
• fd01744a0 Handle an image ref with scheme
• 85d9fe3e8 Adjust overlay tests to expect "index=off"
• 027ee569a Import crypto for all snapshotters during testsuite
• af2fb4eb7 Allow oom adj test to run in environments with a score
• c11472d31 Add Go test runs to GitHub Actions CI
• 0d4734655 Merge pull request #4647 from katiewasnothere/task_update_annotations_upstream
• 2837fb35a Merge pull request #4715 from thaJeztah/remove_libcontainer_apparmor
• 25e4774ad Merge pull request #4589 from cpuguy83/windows_int_overflow
• 618c8bd77 Merge pull request #4745 from estesp/fix-actions-cve
• 159fb2e7e Update other actions for env/path CVE fix
• 340ab572d Merge pull request #4707 from kzys/lcow-arm
• 0edc41256 Merge pull request #4742 from thaJeztah/bump_kubernetes_1.19.4
• 85b1cf128 vendor: kubernetes v1.19.4
• 8efb17cc9 Merge pull request #4705 from dweomer/selinx-relabel-dev-shm-but-not-with-hostipc
• bd7c6ca6f Fix integer overflow on windows
• cc3785c81 Merge pull request #4653 from amrmahdi/amrh/optimize-content-transfer
• 1c98aa532 Merge pull request #4735 from AkihiroSuda/go-1.15.5
• af0a20a4d Bump Golang 1.15.5
• 0ec47b334 Merge pull request #4730 from thaJeztah/update_seccomp_profile
• 0a1104bcf seccomp: add pidfd_getfd syscall (gated by CAP_SYS_PTRACE)
• 2dbbd10fd seccomp: add pidfd_open and pidfd_send_signal
• eba94a15c pkg/cri/server: remove dependency on libcontainer/apparmor, libcontainer/utils
• a1e7dd939 cri: selinuxrelabel=false for /dev/shm w/ host ipc
• fca788718 Merge pull request #4726 from estesp/update-btrfs
• 126b35ca4 containerd-shim: use path-based unix socket
• bd908acab Use path based unix socket for shims
• e74ace9ad content: support filters on local.store#Walk()
• 6fb56aa58 Update btrfs vendor for chkptr fix for Go >= 1.14
• 78ac7bac8 Merge pull request #4725 from kzys/fix-links-in-docs
• f1ea895fb Merge pull request #4713 from AkihiroSuda/remove-hack-unused
• 03cc4cedc docs: fix broken links
• 4dc698d09 Merge pull request #4723 from lining2020/ctr-error-hint
• 1309384af Merge pull request #4724 from tonistiigi/pusher-error
• 97cee75da ctr: fix the incorrect image unmount error hint
• f601887a3 docker: don’t hide pusher response error
• 687fcd73e Merge pull request #4722 from kzys/cri-docs
• a05fa4214 Move CRI plugin's docs from docs/ to docs/cri/
• 521263ce2 Merge pull request #4721 from thaJeztah/longer_timeout
• 0299fca49 ga: Linux Integration: extend timeout to 20 minutes
• 1e7a6906b Merge pull request #4698 from dweomer/test-selinux-enforcing
• 5f74840a9 Merge pull request #4709 from AkihiroSuda/ctr-apparmor
• 677aaad83 Merge pull request #4718 from thaJeztah/remove_sudo_remnants
• 6dc35dfda Merge pull request #4716 from thaJeztah/faster_golang_ci
• 1edeea766 install-runc: remove unused USESUDO variable
• [72dd30feb](containerd@72dd30febaac0bb2e...