containerd 1.7.17

Welcome to the v1.7.17 release of containerd!

The seventeenth patch release for containerd 1.7 contains various fixes and updates.

Highlights

• Use LOOP_CONFIGURE when creating loop devices (#10209)
• Update unpacker to fetch all provided content (#10233)
• Preserve CL_UNPRIVILEGED locked flags during remount of bind mounts (#10210)
• Update metadata snapshotter to lease on already exists (#10198)
• Handle unsupported config versions (#10165)
• Fix deadlock when writing to pipe blocks (containerd/ttrpc#168)

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

Contributors

• Stefan Berger
• Derek McGowan
• Austin Vazquez
• Alexandru Matei
• Maksym Pavlenko
• Akihiro Suda
• Bryant Biggs
• Kevin Parsons
• Kirtana Ashok
• Phil Estes
• Kazuyoshi Kato
• Kohei Tokunaga
• Swagat Bora

Changes

43 commits

• Prepare release notes for v1.7.17 (#10235)
  • 114b07b97 Prepare release notes for v1.7.17
• Use LOOP_CONFIGURE when creating loop devices (#10209)
  • 803aaa680 Remove internal LoopConfig struct
  • 7bd3be948 Swap internal ioctl implementation with golang.org/x/sys
  • a0739dc0e Use LOOP_CONFIGURE when creating loop devices
• Update unpacker to fetch all provided content (#10233)
  • 1573ea598 Update ctr image pull all platforms
  • 32b594f1b Update unpacker to always fetch all
• Update hcsshim tag to v0.11.5 (#10232)
  • 5a03a3aee Update hcsshim tag to v0.11.5
• Update ttrpc tag to 1.2.4 (#10221)
  • 9a1eda40f update ttrpc tag to 1.2.4
• Preserve CL_UNPRIVILEGED locked flags during remount of bind mounts (#10210)
  • ad85652fa Preserve CL_UNPRIVILEGED locked flags during remount of bind mounts
• Update instrumentation fuzzer with new flag (#10229)
  • 582f3f43d Update instrumentation fuzzer with new flag
• vendor: github.com/containerd/[email protected] (#10215)
  • a5d13689b vendor: github.com/containerd/[email protected]
• vendor: golang.org/x/[email protected] (#10211)
  • f853bc129 vendor: golang.org/x/[email protected]
  • 837972979 vendor: golang.org/x/[email protected]
  • 56aa87792 vendor: golang.org/x/[email protected]
  • 4e6335ebd vendor: golang.org/x/[email protected]
  • 1c6c745c6 vendor: golang.org/x/[email protected]
  • 1077d38c9 vendor: golang.org/x/[email protected]
• Update tooling to Go 1.21.10, 1.22.3 for net/http bug fixes (#10207)
  • c53b635f9 Update toolchain to Go 1.21.10 and 1.22.3
• vendor: golang.org/x/[email protected] (#10204)
  • 4b52104f0 vendor: golang.org/x/[email protected]
  • 2f65c83b0 vendor: golang.org/x/[email protected]
  • 8a76171f7 vendor: golang.org/x/[email protected]
  • d45778523 vendor: golang.org/x/[email protected], golang.org/x/[email protected]
  • 24038de8c vendor: golang.org/x/[email protected]
• Update metadata snapshotter to lease on already exists (#10198)
  • eb930375c Add lease test for metadata snapshotter
  • 9f6c61ab9 Update metadata snapshotter to lease on exists
• Update grpc and image-spec dependencies (#10180)
  • 24dd403ab Update image-spec to v1.1.0
  • 189b69e24 go.mod: github.com/opencontainers/image-spec v1.1.0-rc3
  • 388fb336b Update grpc to v1.59.0
• Handle unsupported config versions (#10165)
  • 00347b7fa Add check for unsupported config versions

Changes from containerd/imgcrypt

53 commits

• CHANGES: Updated CHANGES document for 1.1.8 release (containerd/imgcrypt#122)
  • 956b4d3 CHANGES: Updated CHANGES document for 1.1.8 release
• Synchronize enc-ctr with upstream ctr from containerd v1.6.23 and use containerd v1.6.23 in dependency (containerd/imgcrypt#120)
  • 9e8e1c1 ctr: Sync code with containerd v1.6.23 ctr
  • 7d2cca5 build(deps): bump containerd from 1.6.20 to 1.6.23
• Synchronize enc-ctr with upstream ctr from containerd v1.6.20 (containerd/imgcrypt#119)
  • 0f2559e ctr: Sync code with containerd v1.6.20 ctr
  • c48dd78 cmd: Copy IntToInt32Array into img package and use it
• Update to ocicrypt 1.1.8 and minimum go 1.20 (containerd/imgcrypt#118)
  • 6d48a4e build(deps): bump ocicrypt from 1.1.7 to 1.1.8
  • 1bc94a2 github: Use golangci-lint v1.54.1 and adjust config file
  • 9065f1d github: Test with go 1.21 and go 1.20
  • 74986f3 go.mod: Require go 1.20
• build(deps): bump google.golang.org/grpc from 1.47.0 to 1.53.0 (containerd/imgcrypt#117)
  • a2a8273 build(deps): bump google.golang.org/grpc from 1.47.0 to 1.53.0
• test: Test creating and running of container with key file missing (containerd/imgcrypt#116)
  • 286470a test: Test creating and running of container with key file missing
• Fix some issues in the test script (containerd/imgcrypt#115)
  • aa517cc test: Fix order of parameters and remove unnecessary key parameter
  • ec72311 test: Add comments to test case
  • 2959ec0 test: To be able to run testLocalKeys alone add missing env variable
• build(deps): upgrade github.com/containerd/containerd from 1.6.18 to … (containerd/imgcrypt#112)
  • a7f2760 build(deps): upgrade github.com/containerd/containerd from 1.6.18 to 1.6.20
• ci: Update golangci-lint to v1.52.2 (containerd/imgcrypt#113)
  • 002abac images: Change 'any' to 'anything' to avoid clash with built-in type 'any'
  • 5780ecc images: Replace unused function parameters with '_'
  • 7dc8592 ci: Update golangci-lint to v1.52.2
• build(deps): bump github.com/opencontainers/runc from 1.1.2 to 1.1.5 (containerd/imgcrypt#109)
  • 90e4f77 build(deps): bump github.com/opencontainers/runc from 1.1.2 to 1.1.5
• Abandon go 1.18 (end-of-life) and use 1.19 and 1.20 in tests (containerd/imgcrypt#110)
  • 8fc037f tests: Upgrade toml written by test case to version 2
  • 0b31beb ci: Run tests with go 1.19 and 1.20 (abandon 1.18)
  • 523674c build(deps): Update to minimum required go v1.19
• Update to golang.org/x/[email protected] and github.com/containers/[email protected] (containerd/imgcrypt#107)
  • 96a2314 build(deps): Upgrade to github.com/containers/[email protected]
  • 1c50555 bulid(deps): Update to golang.org/x/[email protected]
  • 9645d39 build(deps): Update to minimum required go v1.18
• build(deps): bump github.com/containerd/containerd from 1.6.12 to 1.6.18 (containerd/imgcrypt#106)
  • 8daaa45 build(deps): bump github.com/containerd/containerd from 1.6.12 to 1.6.18
• README: Fix a typo (containerd/imgcrypt#105)
  • 12e84f5 README: Fix a typo
• build(deps): bump github.com/containerd/containerd from 1.6.8 to 1.6.12 (containerd/imgcrypt#103)
  • 4e5a73e build(deps): bump github.com/containerd/containerd from 1.6.8 to 1.6.12
• Update golangci-lint to v1.50.1 (containerd/imgcrypt#101)
  • 16a071b Update golangci-lint to v1.50.1
• Remove references to package io/ioutil (containerd/imgcrypt#100)
  • 981a3fd Remove references to package io/ioutil
• Update GitHub actions CI workflow (containerd/imgcrypt#99)
  • 06827a1 Update containerd project checks package in CI
  • f6a39e1 Update GitHub actions packages in CI workflow
  • 6383351 Update GitHub actions CI workflow OS runner images
• CI/CD: Run CodeQL on PRs and once a month (containerd/imgcrypt#98)
  • b6e16db CI/CD: Run CodeQL on PRs and once a month

Changes from containerd/ttrpc

10 commits

• Bump google.golang.org/protobuf from 1.31.0 to 1.33.0 (containerd/ttrpc#166)
  • 272c857 Bump google.golang.org/protobuf from 1.31.0 to 1.33.0
• Fix deadlock when writing to pipe blocks (containerd/ttrpc#168)
  • 1b4f6f8 client: Fix deadlock when writing to pipe blocks
• Bump golang.org/x/net from 0.17.0 to 0.23.0 (containerd/ttrpc#167)
  • 13b8289 Bump golang.org/x/net from 0.17.0 to 0.23.0
• Update GitHub Actions CI to resolve deprecation warnings (containerd/ttrpc#161)
  • 589a593 Update GitHub Actions CI to resolve deprecation warnings
• Fix proto3 generation error (containerd/ttrpc#158)
  • 73b6a91 Add optional feature in protobuf compiler

Dependency Changes

• github.com/Microsoft/go-winio v0.6.1 -> v0.6.2
• github.com/Microsoft/hcsshim v0.11.4 -> v0.11.5
• github.com/containerd/imgcrypt v1.1.7 -> v1.1.8
• github.com/containerd/ttrpc v1.2.3 -> v1.2.4
• github.com/containers/ocicrypt v1.1.6 -> v1.1.10
• github.com/go-jose/go-jose/v3 v3.0.3 new
• github.com/google/uuid v1.3.0 -> v1.3.1
• github.com/opencontainers/image-spec 3a7f492d3f1b -> v1.1.0
• github.com/stefanberger/go-pkcs11uri 78d3cae3a980 -> 78284954bff6
• golang.org/x/crypto v0.14.0 -> v0.21.0
• golang.org/x/mod v0.11.0 -> v0.12.0
• golang.org/x/net v0.17.0 -> v0.23.0
• golang.org/x/oauth2 v0.10.0 -> v0.11.0
• golang.org/x/sys v0.13.0 -> v0.18.0
• golang.org/x/term v0.13.0 -> v0.18.0
• golang.org/x/text v0.13.0 -> v0.14.0
• google.golang.org/genproto 782d3b101e98 -> b8732ec3820d
• google.golang.org/genproto/googleapis/api 782d3b101e98 -> b8732ec3820d
• google.golang.org/genproto/googleapis/rpc cbb8c96f2d6d -> b8732ec3820d
• google.golang.org/grpc v1.58.3 -> v1.59.0

Previous release can be found at v1.7.16