summaryrefslogtreecommitdiff
path: root/hack/dockerfile
Commit message (Collapse)AuthorAgeFilesLines
...
* update containerd binary to v1.5.5Sebastiaan van Stijn2021-07-291-1/+1
| | | | | | | | | | | | | | | Welcome to the v1.5.5 release of containerd! The fifth patch release for containerd 1.5 updates runc to 1.0.1 and contains other minor updates. Notable Updates - Update runc binary to 1.0.1 - Update pull logic to try next mirror on non-404 response - Update pull authorization logic on redirect Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
* update containerd binary v1.4.8Sebastiaan van Stijn2021-07-191-1/+1
| | | | | | | | Update to containerd 1.4.8 to address [CVE-2021-32760][1]. [1]: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-32760 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
* update runc binary to v1.0.1Akihiro Suda2021-07-181-1/+1
| | | | Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
* Update containerd binary to v1.5.3Sebastiaan van Stijn2021-07-131-1/+1
| | | | | | | | | | | | | | | | | | | | full diff: https://github.com/containerd/containerd/compare/v1.5.2...v1.5.3 Welcome to the v1.5.3 release of containerd! The third patch release for containerd 1.5 updates runc to 1.0.0 and contains various other fixes. Notable Updates - Update runc binary to 1.0.0 - Send pod UID to CNI plugins as K8S_POD_UID - Fix invalid validation error checking - Fix error on image pull resume - Fix User Agent sent to registry authentication server - Fix symlink resolution for disk mounts on Windows Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
* hack: remove proxy.installerSebastiaan van Stijn2021-06-251-36/+0
| | | | | | It's no longer used Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
* update runc binary to v1.0.0 GAAkihiro Suda2021-06-221-1/+1
| | | | Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
* vendor: github.com/docker/libnetwork 64b7a4574d1426139437d20e81c0b6d391130ec8Sebastiaan van Stijn2021-05-251-1/+1
| | | | | | | | | | | | | | | | | | Update libnetwork to make `docker run -p 80:80` functional again on environments with kernel boot parameter `ipv6.disable=1`. full diff: https://github.com/docker/libnetwork/compare/b3507428be5b458cb0e2b4086b13531fb0706e46...64b7a4574d1426139437d20e81c0b6d391130ec8 - fix port forwarding with ipv6.disable=1 - fixes moby/moby/42288 Docker 20.10.6: all containers stopped and cannot start if ipv6 is disabled on host - fixes docker/libnetwork/2629 Network issue with IPv6 following update to version 20.10.6 - fixesdocker/for-linux/1233 Since 20.10.6 it's not possible to run docker on a machine with disabled IPv6 interfaces - vendor: github.com/ishidawataru/sctp f2269e66cdee387bd321445d5d300893449805be - Enforce order of lock acquisitions on network/controller, fixes #2632 - fixes docker/libnetwork/2632 Name resolution stuck due to deadlock between different network struct methods - fixes moby/moby/42032 Docker deamon get's stuck, can't serve DNS requests Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
* Merge pull request #42399 from thaJeztah/update_containerd_1.5.2Akihiro Suda2021-05-201-1/+1
|\
| * update containerd binary to v1.5.2Sebastiaan van Stijn2021-05-191-1/+1
| | | | | | | | | | | | | | | | | | full diff: https://github.com/containerd/containerd/compare/v1.5.1...v1.5.2 The second patch release for containerd 1.5 is a security release to update runc for CVE-2021-30465 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
* | update runc binary to v1.0.0-rc95Sebastiaan van Stijn2021-05-191-1/+1
|/ | | | | | | | | | | | | | | | full diff: https://github.com/opencontainers/runc/compare/v1.0.0-rc94...v1.0.0-rc95 Release notes: This release of runc contains a fix for CVE-2021-30465, and users are strongly recommended to update (especially if you are providing semi-limited access to spawn containers to untrusted users). Aside from this security fix, only a few other changes were made since v1.0.0-rc94 (the only user-visible change was the addition of support for defaultErrnoRet in seccomp profiles). Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
* Merge pull request #42383 from thaJeztah/containerd_1.5.1Akihiro Suda2021-05-181-1/+1
|\ | | | | update containerd binary to v1.5.1
| * update containerd binary to v1.5.1Sebastiaan van Stijn2021-05-171-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | full diff: https://github.com/containerd/containerd/compare/v1.5.0...v1.5.1 Notable Updates - Update runc to rc94 - Fix registry mirror authorization logic in CRI plugin - Fix regression in cri-cni-release to include cri tools Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
* | Update runc binary to v1.0.0-rc94Jintao Zhang2021-05-111-1/+1
|/ | | | Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>
* update containerd binary to v1.5.0Sebastiaan van Stijn2021-05-041-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Welcome to the v1.5.0 release of containerd! The sixth major release of containerd includes many stability improvements and code organization changes to make contribution easier and make future features cleaner to develop. This includes bringing CRI development into the main containerd repository and switching to Go modules. This release also brings support for the Node Resource Interface (NRI). Highlights -------------------------------------------------------------------------------- *Project Organization* - Merge containerd/cri codebase into containerd/containerd - Move to Go modules - Remove selinux build tag - Add json log format output option for daemon log *Snapshots* - Add configurable overlayfs path - Separate overlay implementation from plugin - Native snapshotter configuration and plugin separation - Devmapper snapshotter configuration and plugin separation - AUFS snapshotter configuration and plugin separation - ZFS snapshotter configuration and plugin separation - Pass custom snapshot labels when creating snapshot - Add platform check for snapshotter support when unpacking - Handle loopback mounts - Support userxattr mount option for overlay in user namespace - ZFS snapshotter implementation of usage *Distribution* - Improve registry response errors - Improve image pull performance over HTTP 1.1 - Registry configuration package - Add support for layers compressed with zstd - Allow arm64 to fallback to arm (v8, v7, v6, v5) *Runtime* - Add annotations to containerd task update API - Add logging binary support when terminal is true - Runtime support on FreeBSD *Windows* - Implement windowsDiff.Compare to allow outputting OCI images - Optimize WCOW snapshotter to commit writable layers as read-only parent layers - Optimize LCOW snapshotter use of scratch layers *CRI* - Add NRI injection points cri#1552 - Add support for registry host directory configuration - Update privileged containers to use current capabilities instead of known capabilities - Add pod annotations to CNI call - Enable ocicrypt by default - Support PID NamespaceMode_TARGET Impactful Client Updates -------------------------------------------------------------------------------- This release has changes which may affect projects which import containerd. *Switch to Go modules* containerd and all containerd sub-repositories are now using Go modules. This should help make importing easier for handling transitive dependencies. As of this release, containerd still does not guarantee client library compatibility for 1.x versions, although best effort is made to minimize impact from changes to exported Go packages. *CRI plugin moved to main repository* With the CRI plugin moving into the main repository, imports under github.com/containerd/cri/ can now be found github.com/containerd/containerd/pkg/cri/. There are no changes required for end users of CRI. *Library changes* oci The WithAllCapabilities has been removed and replaced with WithAllCurrentCapabilities and WithAllKnownCapabilities. WithAllKnownCapabilities has similar functionality to the previous WithAllCapabilities with added support for newer capabilities. WithAllCurrentCapabilities can be used to give privileged containers the same set of permissions as the calling process, preventing errors when privileged containers attempt to get more permissions than given to the caller. *Configuration changes* New registry.config_path for CRI plugin registry.config_path specifies a directory to look for registry hosts configuration. When resolving an image name during pull operations, the CRI plugin will look in the <registry.config_path>/<image hostname>/ directory for host configuration. An optional hosts.toml file in that directory may be used to configure which hosts will be used for the pull operation as well host-specific configurations. Updates under that directory do not require restarting the containerd daemon. Enable registry.config_path in the containerd configuration file. [plugins."io.containerd.grpc.v1.cri".registry] config_path = "/etc/containerd/certs.d" Configure registry hosts, such as /etc/containerd/certs.d/docker.io/hosts.toml for any image under the docker.io namespace (any image on Docker Hub). server = "https://registry-1.docker.io" [host."https://public-mirror.example.com"] capabilities = ["pull"] [host."https://docker-mirror.internal"] capabilities = ["pull", "resolve"] ca = "docker-mirror.crt" If no hosts.toml configuration exists in the host directory, it will fallback to check certificate files based on Docker's certificate file pattern (".crt" files for CA certificates and ".cert"/".key" files for client certificates). *Deprecation of registry.mirrors and registry.configs in CRI plugin* Mirroring and TLS can now be configured using the new registry.config_path option. Existing configurations may be migrated to new host directory configuration. These fields are only deprecated with no planned removal, however, these configurations cannot be used while registry.config_path is defined. *Version 1 schema is deprecated* Version 2 of the containerd configuration toml is recommended format and the default. Starting this version, a deprecation warning will be logged when version 1 is used. To check version, see the version value in the containerd toml configuration. version=2 FreeBSD Runtime Support (Experimental) -------------------------------------------------------------------------------- This release includes changes that allow containerd to run on FreeBSD with a compatible runtime, such as runj. This support should be considered experimental and currently there are no official binary releases for FreeBSD. The runtimes used by containerd are maintained separately and have their own stability guarantees. The containerd project strives to be compatible with any runtime which aims to implement containerd's shim API and OCI runtime specification. Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
* bump up rootlesskit to v0.14.2Akihiro Suda2021-04-191-2/+2
| | | | | | | | | Fix `Timed out proxy starting the userland proxy.` error with `DOCKERD_ROOTLESS_ROOTLESSKIT_PORT_DRIVER=slirp4netns`. (https://github.com/rootless-containers/rootlesskit/issues/250) Full changes: https://github.com/rootless-containers/rootlesskit/compare/v0.14.1...v0.14.2 Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
* validate/toml: switch to github.com/pelletier/go-tomlSebastiaan van Stijn2021-04-022-12/+9
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The github.com/BurntSushi/toml project is no longer maintained, and containerd is switching to this project instead, so start moving our code as well. This patch only changes the binary used during validation (tbh, we could probably remove this validation step, but leaving that for now). I manually verified that the hack/verify/toml still works by adding a commit that makes the MAINTAINERS file invalid; diff --git a/MAINTAINERS b/MAINTAINERS index b739e7e20c..81ababd8de 100644 --- a/MAINTAINERS +++ b/MAINTAINERS @@ -23,7 +23,7 @@ # a subsystem, they are responsible for doing so and holding the # subsystem maintainers accountable. If ownership is unclear, they are the de facto owners. - people = [ + people = "akihirosuda", "anusha", "coolljt0725", Running `hack/verify/toml` was able to detect the broken format; hack/validate/toml (27, 4): keys cannot contain , characterThese files are not valid TOML: - MAINTAINERS Please reformat the above files as valid TOML Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
* bump up rootlesskit to v0.14.1Akihiro Suda2021-03-301-2/+2
| | | | | | | | Fix `DOCKERD_ROOTLESS_ROOTLESSKIT_PORT_DRIVER=slirp4netns` regression. Full changes: https://github.com/rootless-containers/rootlesskit/compare/v0.14.0...v0.14.1 Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
* vendor: docker/libnetwork b3507428be5b458cb0e2b4086b13531fb0706e46Sebastiaan van Stijn2021-03-251-1/+1
| | | | | | | | | | | | | | | | | | | full diff: https://github.com/docker/libnetwork/compare/fa125a3512ee0f6187721c88582bf8c4378bd4d7...b3507428be5b458cb0e2b4086b13531fb0706e46 - fixed IPv6 iptables rules for enabled firewalld (libnetwork#2609) - fixes "Docker uses 'iptables' instead of 'ip6tables' for IPv6 NAT rule, crashes" - Fix regression in docker-proxy - introduced in "Fix IPv6 Port Forwarding for the Bridge Driver" (libnetwork#2604) - fixes/addresses: "IPv4 and IPv6 addresses are not bound by default anymore" (libnetwork#2607) - fixes/addresses "IPv6 is no longer proxied by default anymore" (moby#41858) - Use hostIP to decide on Portmapper version - fixes docker-proxy not being stopped correctly Port mapping of containers now contain separatet mappings for IPv4 and IPv6 addresses, when listening on "any" IP address. Various tests had to be updated to take multiple mappings into account. Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
* Merge pull request #42192 from tiborvass/rootlesskit_goproxyAkihiro Suda2021-03-241-0/+5
|\ | | | | hack: use GOPROXY for rootlesskit to workaround issue with old git on…
| * hack: use GOPROXY for rootlesskit to workaround issue with old git on ↵Tibor Vass2021-03-231-0/+5
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | CentOS/RHEL 7 Since rootlesskit removed vendor folder, building it has to rely on go mod. Dockerfile in docker-ce-packaging uses GOPROXY=direct, which makes "go mod" commands use git to fetch modules. "go mod" in Go versions before 1.14.1 are incompatible with older git versions, including the version of git that ships with CentOS/RHEL 7 (which have git 1.8), see golang/go#38373 This patch switches rootlesskit install script to set GOPROXY to https://proxy.golang.org so that git is not required for downloading modules. Once all our code has upgraded to Go 1.14+, this workaround should be removed. Signed-off-by: Tibor Vass <tibor@docker.com>
* | update rootlesskit to v0.14.0Sebastiaan van Stijn2021-03-221-2/+2
|/ | | | | | | | | | | | | | | | | | | | | | | | | | full diff: https://github.com/rootless-containers/rootlesskit/compare/v0.13.1...v0.14.0 v0.14.0 Changes (since v0.13.2) -------------------------------------- - CLI: improve --help output - API: support GET /info - Port API: support specifying IP version explicitly ("tcp4", "tcp6") - rootlesskit-docker-proxy: support libnetwork >= 20201216 convention - Allow vendoring with moby/sys/mountinfo@v0.1.3 as well as @v0.4.0 - Remove socat port driver - socat driver has been deprecated since v0.7.1 (Dec 2019) - New experimental flag: --ipv6 - Enables IPv6 routing (slirp4netns --enable-ipv6). Unrelated to port driver. v0.13.2 -------------------------------------- - Fix cleaning up crashed state dir - Update Go to 1.16 - Misc fixes Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
* update containerd binary to v1.4.4Sebastiaan van Stijn2021-03-081-1/+1
| | | | | | | | | | | | | | | | | | | | | | | full diff: https://github.com/containerd/containerd/compare/v1.4.3...v1.4.4 Release notes: The fourth patch release for `containerd` 1.4 contains a fix for CVE-2021-21334 along with various other minor issues. See [GHSA-36xw-fx78-c5r4](https://github.com/containerd/containerd/security/advisories/GHSA-36xw-fx78-c5r4) for more details related to CVE-2021-21334. Notable Updates - Fix container create in CRI to prevent possible environment variable leak between containers - Update shim server to return grpc NotFound error - Add bounds on max `oom_score_adj` value for shim's AdjustOOMScore - Update task manager to use fresh context when calling shim shutdown - Update Docker resolver to avoid possible concurrent map access panic - Update shim's log file open flags to avoid containerd hang on syscall open - Fix incorrect usage calculation Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
* Update rootlesskit to v0.13.1 to fix handling of IPv6 addressesSebastiaan van Stijn2021-02-151-5/+6
| | | | | | | | | | | | | | | | | | v0.13.1 - Refactor `ParsePortSpec` to handle IPv6 addresses, and improve validation v0.13.0 - `rootlesskit --pidns`: fix propagating exit status - Support cgroup2 evacuation, e.g., `systemd-run -p Delegate=yes --user -t rootlesskit --cgroupns --pidns --evacuate-cgroup2=evac --net=slirp4netns bash` v0.12.0 - Port forwarding API now supports setting `ChildIP` - The `vendor` directory is no longer included in this repo. Run `go mod vendor` if you need Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
* update runc binary to v1.0.0-rc93Sebastiaan van Stijn2021-02-111-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | full diff: https://github.com/opencontainers/runc/compare/v1.0.0-rc92...v1.0.0-rc93 release notes: https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc93 Release notes for runc v1.0.0-rc93 ------------------------------------------------- This is the last feature-rich RC release and we are in a feature-freeze until 1.0. 1.0.0~rc94 will be released in a few weeks with minimal bug fixes only, and 1.0.0 will be released soon afterwards. - runc's cgroupv2 support is no longer considered experimental. It is now believed to be fully ready for production deployments. In addition, runc's cgroup code has been improved: - The systemd cgroup driver has been improved to be more resilient and handle more systemd properties correctly. - We now make use of openat2(2) when possible to improve the security of cgroup operations (in future runc will be wholesale ported to libpathrs to get this protection in all codepaths). - runc's mountinfo parsing code has been reworked significantly, making container startup times significantly faster and less wasteful in general. - runc now has special handling for seccomp profiles to avoid making new syscalls unusable for glibc. This is done by installing a custom prefix to all seccomp filters which returns -ENOSYS for syscalls that are newer than any syscall in the profile (meaning they have a larger syscall number). This should not cause any regressions (because previously users would simply get -EPERM rather than -ENOSYS, and the rule applied above is the most conservative rule possible) but please report any regressions you find as a result of this change -- in particular, programs which have special fallback code that is only run in the case of -EPERM. - runc now supports the following new runtime-spec features: - The umask of a container can now be specified. - The new Linux 5.9 capabilities (CAP_PERFMON, CAP_BPF, and CAP_CHECKPOINT_RESTORE) are now supported. - The "unified" cgroup configuration option, which allows users to explicitly specify the limits based on the cgroup file names rather than abstracting them through OCI configuration. This is currently limited in scope to cgroupv2. - Various rootless containers improvements: - runc will no longer cause conflicts if a user specifies a custom device which conflicts with a user-configured device -- the user device takes precedence. - runc no longer panics if /sys/fs/cgroup is missing in rootless mode. - runc --root is now always treated as local to the current working directory. - The --no-pivot-root hardening was improved to handle nested mounts properly (please note that we still strongly recommend that users do not use --no-pivot-root -- it is still an insecure option). - A large number of code cleanliness and other various cleanups, including fairly large changes to our tests and CI to make them all run more efficiently. For packagers the following changes have been made which will have impact on your packaging of runc: - The "selinux" and "apparmor" buildtags have been removed, and now all runc builds will have SELinux and AppArmor support enabled. Note that "seccomp" is still optional (though we very highly recommend you enable it). - make install DESTDIR= now functions correctly. Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
* Vendor in Libnetwork changesArko Dasgupta2020-12-151-1/+1
| | | | | | Brings in https://github.com/moby/libnetwork/pull/2604 Signed-off-by: Arko Dasgupta <arko.dasgupta@docker.com>
* Vendor in libnetwork changesArko Dasgupta2020-12-111-1/+1
| | | | | | | | | Vendor in IP6Tables fixes https://github.com/moby/libnetwork/pull/2600 https://github.com/moby/libnetwork/pull/2603 Signed-off-by: Arko Dasgupta <arko.dasgupta@docker.com>
* update containerd binary to v1.4.3 (CVE-2020-15257)Sebastiaan van Stijn2020-11-301-1/+1
| | | | | | | | | | | | | | | full diff: https://github.com/containerd/containerd/compare/v1.4.2...v1.4.3 Release notes: Welcome to the v1.4.3 release of containerd! The third patch release for containerd 1.4 is a security release to address CVE-2020-15257. See GHSA-36xw-fx78-c5r4 for more details: https://github.com/containerd/containerd/security/advisories/GHSA-36xw-fx78-c5r4 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
* update containerd binary to v1.4.2Sebastiaan van Stijn2020-11-261-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | NOTE: the Dockerfile currently uses a single version of Golang for all stages. This means that currently, all binaries are built with Go 1.13.x, including the containerd binary; upstream containerd switched to use Go 1.15. full diff: https://github.com/containerd/containerd/compare/v1.4.1...v1.4.2 Release notes: Welcome to the v1.4.2 release of containerd! ------------------------------------------------------ The second patch release for containerd 1.4 includes multiple minor fixes and updates. Notable Updates - Fix bug limiting the number of layers by default containerd/cri#1602 - Fix selinux shared memory issue by relabeling /dev/shm containerd/cri#1605 - Fix unknown state preventing removal of containers containerd/containerd#4656 - Fix nil pointer error when restoring checkpoint containerd/containerd#4754 - Improve image pull performance when using HTTP 1.1 containerd/containerd#4653 - Update default seccomp profile for pidfd containerd/containerd#4730 - Update Go to 1.15 Windows - Fix integer overflow on Windows containerd/containerd#4589 - Fix lcow snapshotter to read trailing tar data containerd/containerd#4628 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
* vendor libnetwork to fix mix up between IPv4 and IPv6Tibor Vass2020-11-241-1/+1
| | | | Signed-off-by: Tibor Vass <tibor@docker.com>
* Bump libnetworkAmeya Gawde2020-11-171-1/+1
| | | | Signed-off-by: Ameya Gawde <agawde@mirantis.com>
* Merge pull request #41634 from AkihiroSuda/rootlesskit-0.11.0Tianon Gravi2020-11-051-2/+2
|\ | | | | bump up rootlesskit to v0.11.0
| * bump up rootlesskit to v0.11.0Akihiro Suda2020-11-051-2/+2
| | | | | | | | | | | | | | | | | | Important fix: Lock state dir for preventing automatic clean-up by systemd-tmpfiles (https://github.com/rootless-containers/rootlesskit/pull/188) Full changes:https://github.com/rootless-containers/rootlesskit/compare/v0.10.0...v0.11.0 Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
* | Vendor in Libnetwork changesArko Dasgupta2020-10-291-1/+1
|/ | | | | | Bring in changes from https://github.com/moby/libnetwork/pull/2572 to moby Signed-off-by: Arko Dasgupta <arko.dasgupta@docker.com>
* Bump vndr v0.1.2Sebastiaan van Stijn2020-10-161-1/+1
| | | | | | | | | full diff: https://github.com/lk4d4/vndr/compare/v0.1.1...v0.1.2 - cleanVCS: prevent panic - Consider '.syso' as a Go file for vendoring Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
* Dockerfile: fix golang-ci-lint installerSebastiaan van Stijn2020-10-161-13/+4
| | | | | | | | | | | | | We were using "go get", whith would try to fetch some dependencies that are not in the version we're installing, go get -d github.com/golangci/golangci-lint/cmd/golangci-lint Causing the build to fail; package 4d63.com/gochecknoglobals/checknoglobals: unrecognized import path "4d63.com/gochecknoglobals/checknoglobals" (parse https://4d63.com/gochecknoglobals/checknoglobals?go-get=1: no go-import meta tags ()) Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
* vendor: docker/libnetwork d0951081b35fa4216fc4f0064bf065beeb55a74bSebastiaan van Stijn2020-09-181-1/+1
| | | | | | | | | | | full diff: https://github.com/docker/libnetwork/compare/9e99af28df21367340c95a3863e31808d689c92a...d0951081b35fa4216fc4f0064bf065beeb55a74b - docker/libnetwork#2560 types: remove some dead code - docker/libnetwork#2562 client/mflag: remove use of docker/docker/pkg/homedir - docker/libnetwork#2576 Skip redundant kernel version checks - docker/libnetwork#2583 vendor: update docker to 7ca355652fe0e2f7401d424d65a81dc248360127 and reduce dependency graph Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
* Merge pull request #41450 from thaJeztah/containerd_1.4.1Brian Goff2020-09-171-1/+1
|\ | | | | update containerd vendor and binary to v1.4.1
| * update containerd binary to v1.4.1Sebastiaan van Stijn2020-09-161-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | full diff: https://github.com/containerd/containerd/compare/v1.4.0...v1.4.1 Welcome to the v1.4.1 release of containerd! The first patch release for `containerd` 1.4 includes a fix for v1 shims hanging on exit and exec when the log pipe fills up along with other minor changes. Notable Updates: * Always consume shim logs to prevent logs in the shim from blocking * Fix error deleting v2 bundle directory when removing rootfs returns `ErrNotExist` * Fix metrics monitoring of v2 runtime tasks * Fix incorrect stat for Windows containers * Fix devmapper device deletion on rollback * Update seccomp default profile Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
* | Windows CI: Make sure that CI fails on any errorOlli Janatuinen2020-09-171-1/+1
|/ | | | | | | - If unit tests fails - If intergration tests fails Signed-off-by: Olli Janatuinen <olli.janatuinen@gmail.com>
* update containerd binary to v1.4.0Akihiro Suda2020-08-191-1/+1
| | | | | | release note: https://github.com/containerd/containerd/releases/tag/v1.4.0 Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
* Update tini v0.19.0Sebastiaan van Stijn2020-08-111-1/+1
| | | | | | | | | | | | full diff: https://github.com/krallin/tini/compare/v0.18.0...v0.19.0 Release notes: - mipsel build - include checksums in releases - ppc64le alias for the ppc64el build Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
* Update runc binary to v1.0.0-rc92Jintao Zhang2020-08-061-1/+1
| | | | Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>
* update containerd to v1.3.7Akihiro Suda2020-08-041-1/+1
| | | | | | Release note: https://github.com/containerd/containerd/releases/tag/v1.3.7 Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
* bump up rootlesskit to v0.10.0Akihiro Suda2020-07-281-2/+2
| | | | | | | | Fix port forwarder resource leak (https://github.com/rootless-containers/rootlesskit/issues/153). Changes: https://github.com/rootless-containers/rootlesskit/compare/v0.9.5...v0.10.0 Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
* vendor: libnetwork 9e99af28df21367340c95a3863e31808d689c92aSebastiaan van Stijn2020-07-081-1/+1
| | | | | | | | | | | | | | | | full diff: https://github.com/docker/libnetwork/compare/2e24aed516bd5c836e11378bb457dd612aa868ed...9e99af28df21367340c95a3863e31808d689c92a - docker/libnetwork#2548 Add docker interfaces to firewalld docker zone - fixes docker/for-linux#957 DNS Not Resolving under Network [CentOS8] - fixes docker/libnetwork#2496 Port Forwarding does not work on RHEL 8 with Firewalld running with FirewallBackend=nftables - store.getNetworksFromStore() remove unused error return - docker/libnetwork#2554 Fix 'failed to get network during CreateEndpoint' - fixes/addresses docker/for-linux#888 failed to get network during CreateEndpoint - docker/libnetwork#2558 [master] bridge: disable IPv6 router advertisements - docker/libnetwork#2563 log error instead if disabling IPv6 router advertisement failed - fixes docker/for-linux#1033 Shouldn't be fatal: Unable to disable IPv6 router advertisement: open /proc/sys/net/ipv6/conf/docker0/accept_ra: read-only file system Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
* update runc binary to v1.0.0-rc91Akihiro Suda2020-07-021-1/+1
| | | | | | | | release note: https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc91 vendored library isn't updated in this commit (waiting for containerd to vendor runc rc91) Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
* update containerd to v1.3.6Jintao Zhang2020-07-021-1/+1
| | | | Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>
* Merge pull request #41151 from thaJeztah/fix_gotestsum_install_againBrian Goff2020-06-291-3/+1
|\
| * hack/install: build gotestsum without -buildmode=pieSebastiaan van Stijn2020-06-261-1/+1
| | | | | | | | | | | | No need for this binary as it's only used in tests. Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
| * fix gotestsum.installer installing wrong versionSebastiaan van Stijn2020-06-261-3/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | When using go modules, `go build` will always fetch the latest version of the package, so ignores the version we previously `go get`'d. Instead of running `go get` and `go build` separately, this patch uses `go get` (without the `-d` option) to do it all in one step. Given that this binary is only used for testing, and only used inside the Dockerfile, we should consider inlining this step in the Dockerfile itself, but keeping that separate for now. Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
View Lorry Controller Status