Containerd - v1.7.0

* Prepare release notes for v1.7.0 ([#8242](https://github.com/containerd/containerd/pull/8242)) * RELEASES.md: describe the deprecated config properties ([#8241](https://github.com/containerd/containerd/pull/8241)) * Flag usage uses uppercase letters ([#8232](https://github.com/containerd/containerd/pull/8232)) * docs: link docs/managed-opt.md to client.Install ([#8240](https://github.com/containerd/containerd/pull/8240)) * Prepare release notes for v1.7.0-rc.3 ([#8233](https://github.com/containerd/containerd/pull/8233)) * Go 1.20.2 ([#8237](https://github.com/containerd/containerd/pull/8237)) * Update ttrpc to v1.2.1 ([#8236](https://github.com/containerd/containerd/pull/8236)) * sandbox: create sandbox with network namespace path ([#8149](https://github.com/containerd/containerd/pull/8149)) * labels: Add LabelDistributionSource ([#8224](https://github.com/containerd/containerd/pull/8224)) * archive: disable looking up usernames and groupnames on the host ([#8220](https://github.com/containerd/containerd/pull/8220)) * go.mod: go.opentelemetry.io/otel/* v1.14.0 ([#8222](https://github.com/containerd/containerd/pull/8222)) * metadata: add comments about `Image.CreatedAt` ([#8225](https://github.com/containerd/containerd/pull/8225)) * Add release notes for v1.7.0-rc.2 ([#8216](https://github.com/containerd/containerd/pull/8216)) * go.mod: {hcsshim, containerd/*, go-restful/v3, mergo, klauspost/compress, opencontainers/*} latest ([#8221](https://github.com/containerd/containerd/pull/8221)) * Bump k8s.io deps ([#8131](https://github.com/containerd/containerd/pull/8131)) * Update imgcrypt to v1.1.7 ([#8217](https://github.com/containerd/containerd/pull/8217)) * Add ArgsEscaped support for CRI ([#8198](https://github.com/containerd/containerd/pull/8198)) * Sandbox: Delete shim+shutdown sandbox on create failure ([#8204](https://github.com/containerd/containerd/pull/8204)) * [Feature] Transfer tag image ([#8205](https://github.com/containerd/containerd/pull/8205)) * docs: fix typo of shim.RunManager's function comment ([#8214](https://github.com/containerd/containerd/pull/8214)) * [cri] Implement CRI Pod and Container stats for Windows ([#7099](https://github.com/containerd/containerd/pull/7099)) * Sandbox: Fix/enhance error messages for Create ([#8203](https://github.com/containerd/containerd/pull/8203)) * epoch: fix unit test when SOURCE_DATE_EPOCH is set ([#8202](https://github.com/containerd/containerd/pull/8202)) * pkg/cri: add timeout to drain exec io ([#7832](https://github.com/containerd/containerd/pull/7832)) * Prepare release notes for v1.7.0-rc.1 ([#8192](https://github.com/containerd/containerd/pull/8192)) * Transfer export image ([#8191](https://github.com/containerd/containerd/pull/8191)) * Create config struct to take user input ([#8193](https://github.com/containerd/containerd/pull/8193)) * ctr/tasks: support remapped UID/GID ([#7864](https://github.com/containerd/containerd/pull/7864)) * Add experimental section to RELEASES.md ([#8119](https://github.com/containerd/containerd/pull/8119)) * Fix streaming manager deadlock on collection ([#8188](https://github.com/containerd/containerd/pull/8188)) * Update CRI guide link ([#8190](https://github.com/containerd/containerd/pull/8190)) * Add max shim version environment variable ([#8189](https://github.com/containerd/containerd/pull/8189)) * Update README with location of security audits ([#8187](https://github.com/containerd/containerd/pull/8187)) * docs: fix typos in historical/design/data-flow.md ([#8181](https://github.com/containerd/containerd/pull/8181)) * Increase CI workflow timeout on Windows. ([#8183](https://github.com/containerd/containerd/pull/8183)) * releases: mark 1.5 as EOL ([#8178](https://github.com/containerd/containerd/pull/8178)) * Add version to shim protocol ([#8177](https://github.com/containerd/containerd/pull/8177)) * Rework install-protobuf script and add new targets ([#8164](https://github.com/containerd/containerd/pull/8164)) * bump go-cni to v1.1.9 ([#8173](https://github.com/containerd/containerd/pull/8173)) * Treat sandboxes as root gc resources and scan referenced objects ([#8172](https://github.com/containerd/containerd/pull/8172)) * update CDI version to v0.5.4 ([#8152](https://github.com/containerd/containerd/pull/8152)) * Prepare release notes for v1.7.0-rc.0 ([#8162](https://github.com/containerd/containerd/pull/8162)) * pkg/nri: pull in latest NRI, update NRI configuration. ([#8140](https://github.com/containerd/containerd/pull/8140)) * [transfer]Config options followup ([#8165](https://github.com/containerd/containerd/pull/8165)) * Add configuration options to local transfer service ([#8062](https://github.com/containerd/containerd/pull/8062)) * docs: Show how to select GRPC for shims ([#8134](https://github.com/containerd/containerd/pull/8134)) * CRI: remove duplicated snapshotters code ([#8154](https://github.com/containerd/containerd/pull/8154)) * docs: add more comment to logging.LoggerFunc ([#8142](https://github.com/containerd/containerd/pull/8142)) * contrib/apparmor: remove code related to apparmor_parser version ([#8069](https://github.com/containerd/containerd/pull/8069)) * runtime/v2: Call onCloseWithShimLog for grpc shims ([#8120](https://github.com/containerd/containerd/pull/8120)) * Add Fields type alias to log package ([#8143](https://github.com/containerd/containerd/pull/8143)) * Migrate from k8s.gcr.io to registry.k8s.io ([#8125](https://github.com/containerd/containerd/pull/8125)) * sandbox: start sandbox with options ([#8129](https://github.com/containerd/containerd/pull/8129)) * Add macOS build note ([#8115](https://github.com/containerd/containerd/pull/8115)) * Fix concurrent writes for UpdateContainerStats ([#8130](https://github.com/containerd/containerd/pull/8130)) * dependency: bump go.etcd.io/bbolt to v1.3.7 ([#8128](https://github.com/containerd/containerd/pull/8128)) * runtime/v2: Log BootstrapParams ([#8124](https://github.com/containerd/containerd/pull/8124)) * Prepare release notes for v1.7.0 beta.4 ([#8110](https://github.com/containerd/containerd/pull/8110)) * Go 1.20.1 ([#8103](https://github.com/containerd/containerd/pull/8103)) * ctr version: add args check ([#8096](https://github.com/containerd/containerd/pull/8096)) * pkg/cri/config: fix Mirrors deprecation comment ([#8041](https://github.com/containerd/containerd/pull/8041)) * docs: fix function names in fuzzing test documentation ([#8044](https://github.com/containerd/containerd/pull/8044)) * fix: 'go routine' should be 'goroutine' ([#8051](https://github.com/containerd/containerd/pull/8051)) * Github Security Advisory [GHSA-hmfx-3pcx-653p](https://github.com/containerd/containerd/security/advisories/GHSA-hmfx-3pcx-653p) * Github Security Advisory [GHSA-259w-8hf6-59c2](https://github.com/containerd/containerd/security/advisories/GHSA-259w-8hf6-59c2) * pkg/cri/sbserver: experimental NRI integration for CRI. ([#7954](https://github.com/containerd/containerd/pull/7954)) * Clean up error strings that start with uppercase ([#8114](https://github.com/containerd/containerd/pull/8114)) * Clean up repeated package import ([#8113](https://github.com/containerd/containerd/pull/8113)) * Go 1.19.6 ([#8109](https://github.com/containerd/containerd/pull/8109)) * Initial GRPC shims support ([#8052](https://github.com/containerd/containerd/pull/8052)) * CRI: Pass sandbox annotations to _other platforms ([#8060](https://github.com/containerd/containerd/pull/8060)) * cmd/ctr/commands/images: support usage subcommand ([#8105](https://github.com/containerd/containerd/pull/8105)) * cni: pass in the cgroupPath capability argument ([#8067](https://github.com/containerd/containerd/pull/8067)) * Add fallback for windows platforms without osversion ([#8101](https://github.com/containerd/containerd/pull/8101)) * release: xx v1.2.1 ([#8104](https://github.com/containerd/containerd/pull/8104)) * [transfer] update imagestore interface to support multiple references ([#7964](https://github.com/containerd/containerd/pull/7964)) * [sandbox] Use options to pass PodSandboxConfig to shims ([#8100](https://github.com/containerd/containerd/pull/8100)) * Send container events with nil PodSandboxStatus ([#8047](https://github.com/containerd/containerd/pull/8047)) * test: add hostNetwork tests for both windows and linux ([#7984](https://github.com/containerd/containerd/pull/7984)) * loadConfig pre-inspection in advance ([#8097](https://github.com/containerd/containerd/pull/8097)) * contrib/apparmor: remove version-dependent rules ([#8068](https://github.com/containerd/containerd/pull/8068)) * *: introduce wrapper pkgs for blockio and rdt ([#8066](https://github.com/containerd/containerd/pull/8066)) * Extract CRI instrument into separate package ([#8093](https://github.com/containerd/containerd/pull/8093)) * CRI: Mirror generic toml runtime config under server ([#8091](https://github.com/containerd/containerd/pull/8091)) * go.mod: github.com/containerd/typeurl/v2 v2.1.0 ([#8092](https://github.com/containerd/containerd/pull/8092)) * Revert `apparmor_parser` regression ([#8086](https://github.com/containerd/containerd/pull/8086)) * [sandbox] refactor controller interface ([#7981](https://github.com/containerd/containerd/pull/7981)) * btrfs: depend on kernel UAPI instead of libbtrfs ([#7933](https://github.com/containerd/containerd/pull/7933)) * CI: skip some jobs when `repo != containerd/containerd` ([#8082](https://github.com/containerd/containerd/pull/8082)) * chore: clean up repeated package import ([#8078](https://github.com/containerd/containerd/pull/8078)) * fetch: Use data from descriptor when available. ([#8076](https://github.com/containerd/containerd/pull/8076)) * chore: use http constants instead of string ([#8077](https://github.com/containerd/containerd/pull/8077)) * Fix retry logic within devmapper device deactivation ([#8075](https://github.com/containerd/containerd/pull/8075)) * Clean CI yaml ([#8071](https://github.com/containerd/containerd/pull/8071)) * Add critest.exe in $PATH ([#8074](https://github.com/containerd/containerd/pull/8074)) * keep the uppercase letter for flag info ([#7976](https://github.com/containerd/containerd/pull/7976)) * go.mod: Bump hcsshim to v0.10.0-rc.5 ([#8049](https://github.com/containerd/containerd/pull/8049)) * Fix sandbox exit monitor ([#8045](https://github.com/containerd/containerd/pull/8045)) * Generate GRPC contracts for runtime APIs ([#7979](https://github.com/containerd/containerd/pull/7979)) * Make argument validation of `mount.UnmountRecursive` compatible to `mount.UnmountAll` ([#8035](https://github.com/containerd/containerd/pull/8035)) * Export remote snapshotter label handler ([#8036](https://github.com/containerd/containerd/pull/8036)) * Adding support to run install hcsshim from local clone ([#7989](https://github.com/containerd/containerd/pull/7989)) * go.mod: github.com/urfave/cli v1.22.12 ([#8040](https://github.com/containerd/containerd/pull/8040)) * cmd/ctr/commands: clean up the func IntToInt32Array in utils.go ([#8039](https://github.com/containerd/containerd/pull/8039)) * pkg/epoch: drop timezone ([#8037](https://github.com/containerd/containerd/pull/8037)) * go.mod: update github.com/containerd/nri. ([#8034](https://github.com/containerd/containerd/pull/8034)) * fix(docs): minor fix on the windows installation steps ([#8013](https://github.com/containerd/containerd/pull/8013)) * Add integration test to opentelemetry tracing on image pull ([#7847](https://github.com/containerd/containerd/pull/7847)) * Use mount.Target to specify subdirectory of rootfs mount ([#7840](https://github.com/containerd/containerd/pull/7840)) * cri: mkdir /etc/cni with 0755, not 0700 ([#8020](https://github.com/containerd/containerd/pull/8020)) * log/logtest: add `testcase` as debug field ([#8025](https://github.com/containerd/containerd/pull/8025)) * go.mod: github.com/containerd/cgroups/v3 v3.0.0 ([#8027](https://github.com/containerd/containerd/pull/8027)) * Update CNI plugins to 1.2.0 ([#7977](https://github.com/containerd/containerd/pull/7977)) * go.mod: go.opentelemetry.io/otel v1.12.0 ([#8026](https://github.com/containerd/containerd/pull/8026)) * Move PLEG events for pause container under podsandbox package ([#8007](https://github.com/containerd/containerd/pull/8007)) * runtime docs: Clarify delete cwd behavior ([#8012](https://github.com/containerd/containerd/pull/8012)) * release: Add "cri-containerd.DEPRECATED.txt" in the deprecated cri-containerd-* bundles ([#8019](https://github.com/containerd/containerd/pull/8019)) * RELEASES.md: update release status ([#8022](https://github.com/containerd/containerd/pull/8022)) * deflake: TestContainerPids ([#8023](https://github.com/containerd/containerd/pull/8023)) * release: Ubuntu 18.04 -> 20.04 (glibc 2.27 -> 2.31) ([#8021](https://github.com/containerd/containerd/pull/8021)) * Update the EOL date for 1.5 release ([#8015](https://github.com/containerd/containerd/pull/8015)) * Prepare release notes for v1.7.0-beta.3 ([#8014](https://github.com/containerd/containerd/pull/8014)) * Fix Memory Limit test ([#7959](https://github.com/containerd/containerd/pull/7959)) * Reused package errdefs for not supported error ([#8005](https://github.com/containerd/containerd/pull/8005)) * pkg/cri: optimize slice initialization ([#7994](https://github.com/containerd/containerd/pull/7994)) * go.mod: update goresctrl to v0.3.0 ([#7987](https://github.com/containerd/containerd/pull/7987)) * pushWriter: correctly propagate errors ([#7985](https://github.com/containerd/containerd/pull/7985)) * CI: test release.yml on every PR ([#7968](https://github.com/containerd/containerd/pull/7968)) * fix incorrect namespace of event when create/update namespace ([#7129](https://github.com/containerd/containerd/pull/7129)) * Backport changes to sandboxed CRI ([#7973](https://github.com/containerd/containerd/pull/7973)) * Fix syntax errors in the document ([#7970](https://github.com/containerd/containerd/pull/7970)) * release/Dockerfile: set DEBIAN_FRONTEND=noninteractive ([#7969](https://github.com/containerd/containerd/pull/7969)) * use local variable for rt when iterating collectors ([#7963](https://github.com/containerd/containerd/pull/7963)) * Add basic spec and mounts for Darwin ([#7960](https://github.com/containerd/containerd/pull/7960)) * go.mod: Bump hcsshim to v0.10.0-rc.4 ([#7810](https://github.com/containerd/containerd/pull/7810)) * Use specs Platform instead of generated API ([#7958](https://github.com/containerd/containerd/pull/7958)) * Make OCI options cross-platform ([#7928](https://github.com/containerd/containerd/pull/7928)) * update to go1.19.5, go1.18.10 ([#7948](https://github.com/containerd/containerd/pull/7948)) * fuzzing: improve archive fuzzer ([#7957](https://github.com/containerd/containerd/pull/7957)) * shim: enable debug logging for delete ([#7943](https://github.com/containerd/containerd/pull/7943)) * cri: Fix TestUpdateOCILinuxResource for host w/o swap controller ([#7946](https://github.com/containerd/containerd/pull/7946)) * ctr/run: flags --detach and --rm cannot be specified together ([#7929](https://github.com/containerd/containerd/pull/7929)) * Fix Flaky Windows CRI Integration test on TestContainerConsumedStats ([#7935](https://github.com/containerd/containerd/pull/7935)) * Refactor snapshotters metastore transaction ([#7917](https://github.com/containerd/containerd/pull/7917)) * mod: update github.com/pelletier/go-toml@v1.9.5 ([#7932](https://github.com/containerd/containerd/pull/7932)) * archive: improve TestSourceDateEpoch ([#7927](https://github.com/containerd/containerd/pull/7927)) * Add tracing plugin test ([#7883](https://github.com/containerd/containerd/pull/7883)) * docs/content-flow: update the description of the content labels ([#7925](https://github.com/containerd/containerd/pull/7925)) * Add cleanup package for context management during cleanup ([#7861](https://github.com/containerd/containerd/pull/7861)) * Fix race between stream registration and use ([#7886](https://github.com/containerd/containerd/pull/7886)) * Prepare release notes for v1.7.0-beta.2 ([#7903](https://github.com/containerd/containerd/pull/7903)) * Cirrus CI (Fedora 37, Rocky 8): enable cri-integration ([#7892](https://github.com/containerd/containerd/pull/7892)) * contrib/Dockerfile.test: add "integration", "cri-integration", "critest" stages ([#7891](https://github.com/containerd/containerd/pull/7891)) * docs: fix a typo in tracing documentation ([#7914](https://github.com/containerd/containerd/pull/7914)) * CI: Pass GITHUB_TOKEN to containerd/project-checks ([#7913](https://github.com/containerd/containerd/pull/7913)) * Enable dupword linter ([#7911](https://github.com/containerd/containerd/pull/7911)) * ctr: Add platform flag to 'oci spec' command ([#7905](https://github.com/containerd/containerd/pull/7905)) * Vagrantfile: fix disk resize error with VirtualBox ([#7907](https://github.com/containerd/containerd/pull/7907)) * Vagrantfile: fix comments about SELinux ([#7908](https://github.com/containerd/containerd/pull/7908)) * Use the const labels.LabelUncompressed ([#7906](https://github.com/containerd/containerd/pull/7906)) * [sandbox] Add sandbox store plugin type ([#7850](https://github.com/containerd/containerd/pull/7850)) * Fix TestUpdateContainerResources_Memory* on cgroup v2 hosts ([#7893](https://github.com/containerd/containerd/pull/7893)) * CRI: Comment cleanup/misc fixes ([#7904](https://github.com/containerd/containerd/pull/7904)) * Move snapshot event publishing into metadata store ([#5674](https://github.com/containerd/containerd/pull/5674)) * Vagrantfile: install-rootless-podman: remove `setenforce 0` ([#7887](https://github.com/containerd/containerd/pull/7887)) * reused package errdefs for error ([#7894](https://github.com/containerd/containerd/pull/7894)) * integration/images: switch away from Docker Hub to avoid rate limit ([#7888](https://github.com/containerd/containerd/pull/7888)) * Validate userns container config is consistent with sandbox userns config ([#7882](https://github.com/containerd/containerd/pull/7882)) * `ctr contents ls` sorts the labels of the content ([#7881](https://github.com/containerd/containerd/pull/7881)) * chore: use `go fix` to cleanup old +build buildtag ([#7879](https://github.com/containerd/containerd/pull/7879)) * cri: Shadow variables to avoid t.Parallel() issues ([#7880](https://github.com/containerd/containerd/pull/7880)) * Add support for user namespaces in stateless pods (KEP-127) ([#7679](https://github.com/containerd/containerd/pull/7679)) * Refactor metastore transaction ([#7529](https://github.com/containerd/containerd/pull/7529)) * oci: appendOSMounts(): remove unused error, and move ([#7874](https://github.com/containerd/containerd/pull/7874)) * add kube v1.26: remove v1alph2 cri support ([#7863](https://github.com/containerd/containerd/pull/7863)) * make runc 1.1 for oss_fuzz_build.sh ([#7875](https://github.com/containerd/containerd/pull/7875)) * CRI sbserver: Prevent server reuse after Shutdown ([#7872](https://github.com/containerd/containerd/pull/7872)) * Fix incorrect defer usage and refactor judgement ([#7521](https://github.com/containerd/containerd/pull/7521)) * oci: Add WithDomainname ([#7869](https://github.com/containerd/containerd/pull/7869)) * Reused errdefs define error ([#7871](https://github.com/containerd/containerd/pull/7871)) * fix `ctr tasks kill` does not remove cni network under windows ([#7866](https://github.com/containerd/containerd/pull/7866)) * add network plugin metrics ([#7858](https://github.com/containerd/containerd/pull/7858)) * Avoid using canceled context in unpacker cleanup ([#7859](https://github.com/containerd/containerd/pull/7859)) * image/label: print more characters of label keys ([#7618](https://github.com/containerd/containerd/pull/7618)) * prevent Server reuse after a Shutdown ([#7165](https://github.com/containerd/containerd/pull/7165)) * Check containerd's readiness before calling critest ([#7851](https://github.com/containerd/containerd/pull/7851)) * Fix grammatical errors in Readme ([#7837](https://github.com/containerd/containerd/pull/7837)) * Fix cpu architecture detection issue on linux/arm ([#7636](https://github.com/containerd/containerd/pull/7636)) * CRI: Fix no CNI info for pod sandbox on restart ([#7845](https://github.com/containerd/containerd/pull/7845)) * Enable checkRename test ([#7081](https://github.com/containerd/containerd/pull/7081)) * metastore: Add WithTransaction convenience method ([#7781](https://github.com/containerd/containerd/pull/7781)) * Prevent a race condition in testHook ([#7831](https://github.com/containerd/containerd/pull/7831)) * cri: fix `memory.memsw.limit_in_bytes: no such file or directory` ([#7836](https://github.com/containerd/containerd/pull/7836)) * go.mod: update fuzz-headers and fuzz-build ([#7824](https://github.com/containerd/containerd/pull/7824)) * Remove github.com/gogo/protobuf again ([#7825](https://github.com/containerd/containerd/pull/7825)) * CRI: Add host networking helper ([#7814](https://github.com/containerd/containerd/pull/7814)) * Support sandbox shutdown in shim runtimes ([#7792](https://github.com/containerd/containerd/pull/7792)) * move up to CRI-TOOLS v1.26.0 ([#7818](https://github.com/containerd/containerd/pull/7818)) * Minor fix when querying pod sandbox status ([#7812](https://github.com/containerd/containerd/pull/7812)) * nil check to avoid panic on upgrade ([#7809](https://github.com/containerd/containerd/pull/7809)) * Bump grpc to v1.51.0 ([#7709](https://github.com/containerd/containerd/pull/7709)) * fatal error: concurrent map iteration and map write ([#7805](https://github.com/containerd/containerd/pull/7805)) * Bump golangci-lint to v1.50.1 ([#7804](https://github.com/containerd/containerd/pull/7804)) * cri: make swapping disabled with memory limit ([#7783](https://github.com/containerd/containerd/pull/7783)) * add metrics for image pulling: error; in progress count; thoughput ([#7313](https://github.com/containerd/containerd/pull/7313)) * Prepare release notes for v1.7.0-beta.1 ([#7793](https://github.com/containerd/containerd/pull/7793)) * support fetching containerd from non public GCS buckets ([#7771](https://github.com/containerd/containerd/pull/7771)) * images: support specifying SourceDateEpoch via ctx ([#7651](https://github.com/containerd/containerd/pull/7651)) * fuzzing: improve archive fuzzer ([#7718](https://github.com/containerd/containerd/pull/7718)) * fix sdNotify func when debug level ([#7798](https://github.com/containerd/containerd/pull/7798)) * Upgrade GitHub actions packages in release workflow ([#7794](https://github.com/containerd/containerd/pull/7794)) * Enable GitHub Actions local Linux CI runs ([#7796](https://github.com/containerd/containerd/pull/7796)) * integration: increase timeout in container_event_test.go ([#7791](https://github.com/containerd/containerd/pull/7791)) * digest: use github.com/minio/sha256-simd ([#7732](https://github.com/containerd/containerd/pull/7732)) * allow client to remove created tasks with PID 0 ([#7787](https://github.com/containerd/containerd/pull/7787)) * Add container event support to containerd ([#7073](https://github.com/containerd/containerd/pull/7073)) * docs: Authorizer.Authorize could return ErrUnexpectedStatus ([#7786](https://github.com/containerd/containerd/pull/7786)) * fix: check for tmpfs when evaluating if userxattr is needed ([#7772](https://github.com/containerd/containerd/pull/7772)) * Pass TOML configuration options for runtimes CRI is not aware of ([#7764](https://github.com/containerd/containerd/pull/7764)) * Cleanup build constraints ([#7776](https://github.com/containerd/containerd/pull/7776)) * There is no way to disable debug endpoint on Darwin ([#7775](https://github.com/containerd/containerd/pull/7775)) * CI: Vagrant: pin rockylinux/8 to v5.0.0 ([#7777](https://github.com/containerd/containerd/pull/7777)) * vendor: golang.org/x/net v0.4.0 ([#7774](https://github.com/containerd/containerd/pull/7774)) * Fix context when waiting sandbox ([#7773](https://github.com/containerd/containerd/pull/7773)) * Github Security Advisory [GHSA-2qjp-425j-52j9](https://github.com/containerd/containerd/security/advisories/GHSA-2qjp-425j-52j9) * update to go1.19.4, go1.18.9 ([#7765](https://github.com/containerd/containerd/pull/7765)) * Change PushContent to require only Provider ([#7763](https://github.com/containerd/containerd/pull/7763)) * sbserver bug fixing ([#7768](https://github.com/containerd/containerd/pull/7768)) * Add unit test to Opentelemetry tracing ([#7671](https://github.com/containerd/containerd/pull/7671)) * remove some (aliases for) deprecated functions ([#7525](https://github.com/containerd/containerd/pull/7525)) * Refactor ctr restore to allow for tty allocation ([#7673](https://github.com/containerd/containerd/pull/7673)) * fix panic when containerd-stress density --count 0 ([#7748](https://github.com/containerd/containerd/pull/7748)) * Unwrap proto errors in streaming client ([#7753](https://github.com/containerd/containerd/pull/7753)) * Fix process_vm_* syscall names in seccomp ([#7755](https://github.com/containerd/containerd/pull/7755)) * upgrade the ops.md output for current 1.7 version . ([#7747](https://github.com/containerd/containerd/pull/7747)) * docs: Add extra security instructions ([#7743](https://github.com/containerd/containerd/pull/7743)) * go.mod: re-vendor NRI from the official repo. ([#7744](https://github.com/containerd/containerd/pull/7744)) * [Sandbox API] CRI status cleanup ([#7731](https://github.com/containerd/containerd/pull/7731)) * Transfer service ([#7320](https://github.com/containerd/containerd/pull/7320)) * NRI: add support for NRI with extended scope. ([#6019](https://github.com/containerd/containerd/pull/6019)) * archive: set WithModTimeUpperBound when WithSourceDateEpoch is set ([#7710](https://github.com/containerd/containerd/pull/7710)) * Fix order of operations when setting lease labels ([#7702](https://github.com/containerd/containerd/pull/7702)) * Add ctr image prune command ([#7730](https://github.com/containerd/containerd/pull/7730)) * Check for nullptr before dereferencing ([#7708](https://github.com/containerd/containerd/pull/7708)) * use MaxConcurrentDownloads instead of MaxConcurrentUploadedLayers ([#7736](https://github.com/containerd/containerd/pull/7736)) * introspection: expose the daemon's PID and PIDNS ([#7694](https://github.com/containerd/containerd/pull/7694)) * reference/docker: synchronize fork with upstream distribution/distribution ([#7635](https://github.com/containerd/containerd/pull/7635)) * go.mod: golang_protobuf_extensions v1.0.4 - prevent incompatible versions ([#7721](https://github.com/containerd/containerd/pull/7721)) * Add ptrace readby and tracedby to default AppArmor profile ([#7714](https://github.com/containerd/containerd/pull/7714)) * Fix sandbox API when calling sandboxed shims ([#7684](https://github.com/containerd/containerd/pull/7684)) * make status more readable and update easy. ([#7669](https://github.com/containerd/containerd/pull/7669)) * integration/client: fix go.mod grouping, containerd to v1.7.0-beta.0, cgroups back to v1.0.4 ([#7720](https://github.com/containerd/containerd/pull/7720)) * Resolve warnings in Windows GitHub Actions periodic workflows ([#7706](https://github.com/containerd/containerd/pull/7706)) * Sandbox API: implement Controller.Status for SandboxAPI ([#7470](https://github.com/containerd/containerd/pull/7470)) * [port #5904 to sbserver] Setup pod network after creating the sandbox container ([#7426](https://github.com/containerd/containerd/pull/7426)) * fix for OSS-Fuzz infra changes ([#7677](https://github.com/containerd/containerd/pull/7677)) * runtime/v2/shim: clean up the use of containerdBinary ([#7499](https://github.com/containerd/containerd/pull/7499)) * Add process_vm read and write calls to default seccomp profile ([#7693](https://github.com/containerd/containerd/pull/7693)) * Resolve Scorecards GitHub Actions workflow warnings ([#7707](https://github.com/containerd/containerd/pull/7707)) * cri: add pod uid annotation ([#7697](https://github.com/containerd/containerd/pull/7697)) * Missed out `platform interface` when reused the conn for Client. ([#7699](https://github.com/containerd/containerd/pull/7699)) * overlayfs: remove duplicated tx rollback ([#7700](https://github.com/containerd/containerd/pull/7700)) * go.mod: update some dependencies ([#7704](https://github.com/containerd/containerd/pull/7704)) * update github.com/cpuguy83/go-md2man/v2 to v2.0.2 ([#7705](https://github.com/containerd/containerd/pull/7705)) * Fsnotify bump and change code ([#7703](https://github.com/containerd/containerd/pull/7703)) * fix build containerd in centos9 ([#7683](https://github.com/containerd/containerd/pull/7683)) * Bump urfave-cli to v1.22.10 ([#7701](https://github.com/containerd/containerd/pull/7701)) * can set up the network serially by CNI plugins ([#7685](https://github.com/containerd/containerd/pull/7685)) * Update cri-api dependency to v0.26.0-beta.0 ([#7656](https://github.com/containerd/containerd/pull/7656)) * overlay: Remove unused method param ([#7696](https://github.com/containerd/containerd/pull/7696)) * CI: update Fedora to 37 ([#7691](https://github.com/containerd/containerd/pull/7691)) * tx rollback when GetInfo return error ([#7678](https://github.com/containerd/containerd/pull/7678)) * Upgrade github.com/containerd/cgroups from v1 to v3 ([#7601](https://github.com/containerd/containerd/pull/7601)) * Remove OpenTelementry imports from remotes/docker package ([#7675](https://github.com/containerd/containerd/pull/7675)) * Expose Done and Err in Shutdown service ([#7686](https://github.com/containerd/containerd/pull/7686)) * gotestsum match go version 1.19 ([#7688](https://github.com/containerd/containerd/pull/7688)) * complement sub-command note for containerd-main ([#7670](https://github.com/containerd/containerd/pull/7670)) * keep the lower case letter for flag info ([#7668](https://github.com/containerd/containerd/pull/7668)) * bump critools into ca1571e6edd116b2c95f52e3dfa0b4779b74223a ([#7666](https://github.com/containerd/containerd/pull/7666)) * Fix broken link for CRI plugin in docs ([#7667](https://github.com/containerd/containerd/pull/7667)) * add option to resolve symlinks in WithLinuxDevice ([#7523](https://github.com/containerd/containerd/pull/7523)) * Bump k8s.io deps to v0.25.4 ([#7663](https://github.com/containerd/containerd/pull/7663)) * Release: add static binaries ([#7659](https://github.com/containerd/containerd/pull/7659)) * Bump OpenTelemetry contrib to v0.36.4 ([#7662](https://github.com/containerd/containerd/pull/7662)) * Fix slice append error (`spec.Linux.Resources.HugepageLimits`) ([#7661](https://github.com/containerd/containerd/pull/7661)) * Bump OpenTelemetry to v1.11.1 ([#7660](https://github.com/containerd/containerd/pull/7660)) * feature: add gc scheduler metrics collection count ([#5263](https://github.com/containerd/containerd/pull/5263)) * Add `--debug` args to all subcommands of `ctr pprof` ([#7629](https://github.com/containerd/containerd/pull/7629)) * Add a thin wrapper around otel Span object ([#7655](https://github.com/containerd/containerd/pull/7655)) * Bump grpc to v1.50.1 ([#7643](https://github.com/containerd/containerd/pull/7643)) * replace strings.Split(N) for strings.Cut() or alternatives ([#7631](https://github.com/containerd/containerd/pull/7631)) * add oci.WithCPURT ([#7642](https://github.com/containerd/containerd/pull/7642)) * Sandbox API: Add a new mode config for sandbox controller impls ([#7590](https://github.com/containerd/containerd/pull/7590)) * fuzzing: bump go-fuzz-headers ([#7625](https://github.com/containerd/containerd/pull/7625)) * Bump k8s.io deps to v0.25.3 ([#7637](https://github.com/containerd/containerd/pull/7637)) * Remove uses of deprecated go-digest.NewDigestFromHex, go-digest.Digest.Hex ([#7641](https://github.com/containerd/containerd/pull/7641)) * Extra documentation for content interfaces ([#7640](https://github.com/containerd/containerd/pull/7640)) * Fix shim socket permissions on Darwin ([#7638](https://github.com/containerd/containerd/pull/7638)) * s390x: build and package s390x bin in release assets ([#7614](https://github.com/containerd/containerd/pull/7614)) * Replace mount fork hack with CLONE_FS ([#7513](https://github.com/containerd/containerd/pull/7513)) * remotes: add `FetcherByDigest` for fetching blobs without foreknown descriptors (useful for general-purpose CAS) ([#7460](https://github.com/containerd/containerd/pull/7460)) * Fix "getCPUInfo for OS freebsd: not implemented" on FreeBSD/arm64 ([#7403](https://github.com/containerd/containerd/pull/7403)) * Support default hosts.toml configuration ([#7607](https://github.com/containerd/containerd/pull/7607)) * Add tracing spans in CRI image service and pull.go ([#7453](https://github.com/containerd/containerd/pull/7453)) * Fix missing closed fifo ([#7604](https://github.com/containerd/containerd/pull/7604)) * fix comments ([#7624](https://github.com/containerd/containerd/pull/7624)) * docs: add additional info in backport process ([#7626](https://github.com/containerd/containerd/pull/7626)) * go.mod: golang.org/x/*: use tagged versions ([#7621](https://github.com/containerd/containerd/pull/7621)) * Bump go version to 1.19.3 ([#7620](https://github.com/containerd/containerd/pull/7620)) * ctr export strictly matching ([#7615](https://github.com/containerd/containerd/pull/7615)) * Fix ctr crash when pulling with --http-dump and --http-trace simultaneously ([#7617](https://github.com/containerd/containerd/pull/7617)) * Harden GITHUB_TOKEN permissions for OSSF Scorecard ([#7599](https://github.com/containerd/containerd/pull/7599)) * overlayutils: Add fastpath for userxattr check ([#7611](https://github.com/containerd/containerd/pull/7611)) * Add sequence diagram for shim runtime v2 ([#7606](https://github.com/containerd/containerd/pull/7606)) * Sandbox API: Move remote impls to /sandbox/proxy ([#7600](https://github.com/containerd/containerd/pull/7600)) * fuzzing: improve archive fuzzer ([#7588](https://github.com/containerd/containerd/pull/7588)) * Retry client connection in waitForStart ([#7537](https://github.com/containerd/containerd/pull/7537)) * Add Workflow for running critest with Hyper-V Containers on Windows. ([#7025](https://github.com/containerd/containerd/pull/7025)) * Add release notes for v1.7.0-beta.0 ([#7575](https://github.com/containerd/containerd/pull/7575)) * Cleanup sandbox interfaces ([#7576](https://github.com/containerd/containerd/pull/7576)) * Update GitHub actions release workflow set output ([#7581](https://github.com/containerd/containerd/pull/7581)) * Fix LogURI generation-related tests on Windows. ([#7569](https://github.com/containerd/containerd/pull/7569)) * maintenance: Remove WithWindowsNetworkNamespace from pkg/cri ([#7577](https://github.com/containerd/containerd/pull/7577)) * CRI: implement Controller.Delete for SandboxAPI ([#7457](https://github.com/containerd/containerd/pull/7457)) * Configure CDI registry only on start ([#7419](https://github.com/containerd/containerd/pull/7419)) * update codeql-action to v2 ([#7568](https://github.com/containerd/containerd/pull/7568)) * Add logging related metrics to Containerd CRI plugin ([#7546](https://github.com/containerd/containerd/pull/7546)) * sys: optimize and refactor MkdirAllWithACL() ([#7531](https://github.com/containerd/containerd/pull/7531)) * fix install cni script ([#7484](https://github.com/containerd/containerd/pull/7484)) * Update 1.5 release support timeframe ([#7560](https://github.com/containerd/containerd/pull/7560)) * bump go-fuzz-headers ([#7503](https://github.com/containerd/containerd/pull/7503)) * Add long term stable release branches ([#7454](https://github.com/containerd/containerd/pull/7454)) * fix pusher concurrent close channel ([#7473](https://github.com/containerd/containerd/pull/7473)) * Make tests on GitHub less noisy ([#7530](https://github.com/containerd/containerd/pull/7530)) * containerd should not print error log that failed to init a tracing processor while the tracing plugin is not loaded ([#7541](https://github.com/containerd/containerd/pull/7541)) * Update required Go version in BUILDING.md ([#7544](https://github.com/containerd/containerd/pull/7544)) * go.mod: matttproud/golang_protobuf_extensions v1.0.2 (use tag) ([#7522](https://github.com/containerd/containerd/pull/7522)) * Use `go env` to determine GOPATH in Makefile. ([#7542](https://github.com/containerd/containerd/pull/7542)) * clean-up "nolint" comments, remove unused ones, update golangci-lint ([#7349](https://github.com/containerd/containerd/pull/7349)) * Don't unmount on Darwin when deleting bundle ([#7534](https://github.com/containerd/containerd/pull/7534)) * Add timeouts to all CI jobs ([#7538](https://github.com/containerd/containerd/pull/7538)) * Vagrantfile: explicitly specify rsync as the shared folder driver ([#7539](https://github.com/containerd/containerd/pull/7539)) * sys: remove unused IsAbs() (windows) ([#7527](https://github.com/containerd/containerd/pull/7527)) * cri: PodSandboxStatus should tolerate missing task ([#7535](https://github.com/containerd/containerd/pull/7535)) * CI: update GHA instances from Ubuntu 18.04 to 20.04 ([#7489](https://github.com/containerd/containerd/pull/7489)) * fix the --no-pivot flag being ignored by `ctr tasks start` ([#7519](https://github.com/containerd/containerd/pull/7519)) * Update the default seccomp to block socket calls to AF_VSOCK ([#7510](https://github.com/containerd/containerd/pull/7510)) * cmd/containerd: use golang.org/x/sys/windows.SetStdHandle() ([#7511](https://github.com/containerd/containerd/pull/7511)) * Stats() shouldn't assume s.container is non-nil ([#7517](https://github.com/containerd/containerd/pull/7517)) * Move up actions versions to prep for NodeJS 12 deprecation ([#7516](https://github.com/containerd/containerd/pull/7516)) * cmd/containerd: use golang.org/x/sys Service.SetRecoveryActions() ([#7512](https://github.com/containerd/containerd/pull/7512)) * Updates oci image config to support upstream ArgsEscaped ([#7483](https://github.com/containerd/containerd/pull/7483)) * cmd/containerd: replace deprecated windows.IsAnInteractiveSession() ([#7497](https://github.com/containerd/containerd/pull/7497)) * Update container with sandbox metadata after NetNS is created ([#7481](https://github.com/containerd/containerd/pull/7481)) * archive: add WithSourceDateEpoch() for whiteouts ([#7478](https://github.com/containerd/containerd/pull/7478)) * TestTaskResize must use a terminal ([#7492](https://github.com/containerd/containerd/pull/7492)) * diff/apply.readCounter: check negative size ([#7494](https://github.com/containerd/containerd/pull/7494)) * Add new ctr option for discarding unpacked layers ([#7425](https://github.com/containerd/containerd/pull/7425)) * archive: windows: chtimes(): remove redundant conversion ([#7491](https://github.com/containerd/containerd/pull/7491)) * archive: validate digests before use ([#7488](https://github.com/containerd/containerd/pull/7488)) * vendor: github.com/opencontainers/selinux v1.10.2 ([#7482](https://github.com/containerd/containerd/pull/7482)) * fuzzing: create structured tar bytes in archive fuzzer ([#7477](https://github.com/containerd/containerd/pull/7477)) * Update to go 1.19.2 to address CVE-2022-2879, CVE-2022-2880, CVE-2022-41715 ([#7474](https://github.com/containerd/containerd/pull/7474)) * use raw link to containerd.service config ([#7463](https://github.com/containerd/containerd/pull/7463)) * cri doc: Update kata containers reference ([#7466](https://github.com/containerd/containerd/pull/7466)) * Setup pod network after creating the sandbox container ([#5904](https://github.com/containerd/containerd/pull/5904)) * Swap to net.ErrClosed checks for services ([#7446](https://github.com/containerd/containerd/pull/7446)) * go.mod: Bump go-winio to v0.6.0 ([#7443](https://github.com/containerd/containerd/pull/7443)) * fix retry when writer is reset on push ([#6995](https://github.com/containerd/containerd/pull/6995)) * CI: Output a summary using GITHUB_SUMMARY ([#7192](https://github.com/containerd/containerd/pull/7192)) * Fix missing close ([#7430](https://github.com/containerd/containerd/pull/7430)) * Add test flag for skipping shim cgroup test ([#7424](https://github.com/containerd/containerd/pull/7424)) * Refactor CRI fuzzers ([#7405](https://github.com/containerd/containerd/pull/7405)) * Fix LogURIGenerator on Windows ([#7351](https://github.com/containerd/containerd/pull/7351)) * Set grpc code for unimplemented cri-api methods ([#7417](https://github.com/containerd/containerd/pull/7417)) * Add reader option to local content reader at ([#7414](https://github.com/containerd/containerd/pull/7414)) * Sandbox API: implement Controller.Wait and Controller.Stop ([#7401](https://github.com/containerd/containerd/pull/7401)) * remove stray .zuul.yaml ([#7416](https://github.com/containerd/containerd/pull/7416)) * reference CDI configuration details ([#7408](https://github.com/containerd/containerd/pull/7408)) * cri-integration: propagate ENABLE_CRI_SANDBOXES ([#7413](https://github.com/containerd/containerd/pull/7413)) * Enable OpenSSF Scorecard Github Action ([#7404](https://github.com/containerd/containerd/pull/7404)) * Add ext2 fs support to devmapper snapshotter ([#7402](https://github.com/containerd/containerd/pull/7402)) * Fuzzing: Instrument with new sanitizers ([#7396](https://github.com/containerd/containerd/pull/7396)) * Upgrade fuzzing-related packages to reduce dependencies ([#7397](https://github.com/containerd/containerd/pull/7397)) * remotes/docker/config: Skipping TLS verification for localhost ([#7393](https://github.com/containerd/containerd/pull/7393)) * Replace github.com/emicklei/go-restful package, versions <2.16.0 ([#7395](https://github.com/containerd/containerd/pull/7395)) * Add NoSameOwner option when unpacking tars ([#7386](https://github.com/containerd/containerd/pull/7386)) * ctr: add privileged-without-host-devices for run command ([#7328](https://github.com/containerd/containerd/pull/7328)) * chore: matching the casing of other flags for ctr's pull command ([#7341](https://github.com/containerd/containerd/pull/7341)) * windows: Add runhcs-wcow-hypervisor runtimeclass to the default config ([#6901](https://github.com/containerd/containerd/pull/6901)) * Fix missing close ([#7370](https://github.com/containerd/containerd/pull/7370)) * CRI: update cdi version to v0.5.1 ([#7374](https://github.com/containerd/containerd/pull/7374)) * Update to go 1.19.1, 1.18.6 to address CVE-2022-27664, CVE-2022-32190 ([#7372](https://github.com/containerd/containerd/pull/7372)) * vendor: golang.org/x/net v0.0.0-20220906165146-f3363e06e74c ([#7373](https://github.com/containerd/containerd/pull/7373)) * Remove unused variable from images action ([#7371](https://github.com/containerd/containerd/pull/7371)) * feature: use client default namespace ([#7291](https://github.com/containerd/containerd/pull/7291)) * integration: TestUpdateContainerResources_MemoryLimit: remove TODO comment ([#7367](https://github.com/containerd/containerd/pull/7367)) * feature: upgrade registry.k8s.io/pause version ([#7359](https://github.com/containerd/containerd/pull/7359)) * metrics/cgroups/v1: Remove unused event parameter ([#7361](https://github.com/containerd/containerd/pull/7361)) * .zuul: remove the zuul because it is offline ([#7369](https://github.com/containerd/containerd/pull/7369)) * Update golangci-lint timeout to match config ([#7356](https://github.com/containerd/containerd/pull/7356)) * delete redundent import alias and and type conversion ([#7345](https://github.com/containerd/containerd/pull/7345)) * Make checkContainerTimestamps less strict on Windows ([#7350](https://github.com/containerd/containerd/pull/7350)) * Make oss-fuzz mandatory ([#7346](https://github.com/containerd/containerd/pull/7346)) * Add kubernetes v1.25 supported version as v1.24 ([#7326](https://github.com/containerd/containerd/pull/7326)) * sys: move ForceRemoveAll to integration/client ([#7335](https://github.com/containerd/containerd/pull/7335)) * chore: remove duplicate word in comments ([#7338](https://github.com/containerd/containerd/pull/7338)) * Use ioctl helpers from x/sys/unix ([#7342](https://github.com/containerd/containerd/pull/7342)) * archive: replace tarName() with filepath.ToSlash() ([#7344](https://github.com/containerd/containerd/pull/7344)) * mount: remove unused ErrNotImplementOnWindows ([#7339](https://github.com/containerd/containerd/pull/7339)) * replace sys Sequential funcs with moby/sys/sequential ([#7334](https://github.com/containerd/containerd/pull/7334)) * Clarify containerd 1.5.0+ for k8s 1.20,1.21 ([#7324](https://github.com/containerd/containerd/pull/7324)) * update runc binary to v1.1.4 ([#7315](https://github.com/containerd/containerd/pull/7315)) * Upgrade github.com/klauspost/compress from v1.11.13 to v1.15.9 ([#7325](https://github.com/containerd/containerd/pull/7325)) * Update k8s.io/cri-api to v0.25.0 ([#7287](https://github.com/containerd/containerd/pull/7287)) * script/setup: handle cnidir with SUDO ([#7322](https://github.com/containerd/containerd/pull/7322)) * ContainerStatus to return container resources ([#6517](https://github.com/containerd/containerd/pull/6517)) * migrate from k8s.gcr.io to registry.k8s.io ([#7038](https://github.com/containerd/containerd/pull/7038)) * Do not rename test files on-the-fly to share functions ([#7309](https://github.com/containerd/containerd/pull/7309)) * ctr import: strictly match platform ([#6906](https://github.com/containerd/containerd/pull/6906)) * Revert "Downgrade MinGW to version 10.2.0" ([#7308](https://github.com/containerd/containerd/pull/7308)) * Follow up #7254 (Switch to Go 1.19) ([#7286](https://github.com/containerd/containerd/pull/7286)) * Upgrade containerd/cgroups to remove github.com/cilium/ebpf's fuzzer ([#7304](https://github.com/containerd/containerd/pull/7304)) * Adding support of CAP_BPF and CAP_PERFMON ([#7301](https://github.com/containerd/containerd/pull/7301)) * go.mod: Bump hcsshim to v0.10.0-rc.1 ([#7284](https://github.com/containerd/containerd/pull/7284)) * Don't fail test when GOOGLE_APPLICATION_CREDENTIALS is unset ([#7306](https://github.com/containerd/containerd/pull/7306)) * ci: remove GOPROXY environment variable due to https://github.com/go-yaml/yaml/issues/887 ([#7293](https://github.com/containerd/containerd/pull/7293)) * Runtime cleanup (Shim manager and task service) ([#7280](https://github.com/containerd/containerd/pull/7280)) * containerd-stress: add support for running through CRI ([#6931](https://github.com/containerd/containerd/pull/6931)) * Switch to Go 1.19 ([#7254](https://github.com/containerd/containerd/pull/7254)) * Vagrantfile: dump containerd log after critest ([#7265](https://github.com/containerd/containerd/pull/7265)) * oci: skip checking group id for WithAppendAdditionalGroups ([#7257](https://github.com/containerd/containerd/pull/7257)) * release workflow: increase timeout to 30 minutes & remove Go setup action ([#7259](https://github.com/containerd/containerd/pull/7259)) * release: rollback Ubuntu to 18.04 (except for riscv64) ([#7258](https://github.com/containerd/containerd/pull/7258)) * Initial sandbox API CRI integration (implement Controller.Start) ([#7228](https://github.com/containerd/containerd/pull/7228)) * Use environment variable to specify Go version on CI ([#7251](https://github.com/containerd/containerd/pull/7251)) * Update golang to 1.18.5, 1.17.13 ([#7243](https://github.com/containerd/containerd/pull/7243)) * Change os.Stderr reassign for Windows service ([#7023](https://github.com/containerd/containerd/pull/7023)) * script/setup: fix protobuf for aarch64 ([#7237](https://github.com/containerd/containerd/pull/7237)) * Fix cleanup in critest ([#7232](https://github.com/containerd/containerd/pull/7232)) * fix: support simultaneous create diff for same parent snapshot ([#7204](https://github.com/containerd/containerd/pull/7204)) * Windows HostProcess container CRI stats test ([#7223](https://github.com/containerd/containerd/pull/7223)) * Regenerate protos with updated protoc-gen-go ([#7226](https://github.com/containerd/containerd/pull/7226)) * test: error strings should not be capitalized ([#7195](https://github.com/containerd/containerd/pull/7195)) * Add extra context to error when push unauthorized ([#7220](https://github.com/containerd/containerd/pull/7220)) * replace with selinux label ([#7207](https://github.com/containerd/containerd/pull/7207)) * Use `httputil.DumpRequestOut` for dumping client req ([#7221](https://github.com/containerd/containerd/pull/7221)) * Fix CRI image pull timeout test for ppc64le ([#7215](https://github.com/containerd/containerd/pull/7215)) * test: introduce failpoint control to runc-shimv2 and cni ([#7069](https://github.com/containerd/containerd/pull/7069)) * chore: bump macos runner version ([#7206](https://github.com/containerd/containerd/pull/7206)) * Use image lists form integration/client tests ([#7210](https://github.com/containerd/containerd/pull/7210)) * go.mod: Bump hcsshim to v0.9.4 ([#7212](https://github.com/containerd/containerd/pull/7212)) * Drop deprecated `ioutil` ([#7203](https://github.com/containerd/containerd/pull/7203)) * Make getServicesOpts a helper ([#7201](https://github.com/containerd/containerd/pull/7201)) * adds an env var commented out for sandboxed mode ([#7183](https://github.com/containerd/containerd/pull/7183)) * cri_stats: handle missing cpu stats ([#7198](https://github.com/containerd/containerd/pull/7198)) * using ContextDialer instead ([#7189](https://github.com/containerd/containerd/pull/7189)) * test: Add ability to switch between cgroupv1 or cgroupv2 for node e2e ([#7173](https://github.com/containerd/containerd/pull/7173)) * code cleanup ([#7182](https://github.com/containerd/containerd/pull/7182)) * Update k8s.io/cri-api to v0.25.0-alpha2 ([#7114](https://github.com/containerd/containerd/pull/7114)) * Refactor usageNanoCores be to used for all OSes ([#7186](https://github.com/containerd/containerd/pull/7186)) * adds support for using env file for systemd boot ([#7191](https://github.com/containerd/containerd/pull/7191)) * go.mod: github.com/stretchr/testify v1.8.0 ([#7185](https://github.com/containerd/containerd/pull/7185)) * ctr: support --user for run/create ([#7145](https://github.com/containerd/containerd/pull/7145)) * docs: Fix sample config.toml syntax ([#7174](https://github.com/containerd/containerd/pull/7174)) * seccomp: seccomp: add syscalls related to PKU in default policy ([#7163](https://github.com/containerd/containerd/pull/7163)) * Update and align golangci-lint version ([#7168](https://github.com/containerd/containerd/pull/7168)) * adds a comment explaining how to disable experimental sbserver ([#7169](https://github.com/containerd/containerd/pull/7169)) * ci: workaround Cirrus CI's INVALID_ARGUMENT ([#7177](https://github.com/containerd/containerd/pull/7177)) * Update install-protobuf script to install protobuf on Darwin ([#7153](https://github.com/containerd/containerd/pull/7153)) * Fork CRI server for Sandbox API integration work ([#7164](https://github.com/containerd/containerd/pull/7164)) * seccomp: add get_mempolicy, mbind, set_mempolicy, with CAP_SYS_NICE ([#7167](https://github.com/containerd/containerd/pull/7167)) * cri doc: fix formatting for CDI options ([#7158](https://github.com/containerd/containerd/pull/7158)) * update golang to 1.18.4, 1.17.12 ([#7159](https://github.com/containerd/containerd/pull/7159)) * Fix out of date comments for CRI store packages ([#7152](https://github.com/containerd/containerd/pull/7152)) * update some devmapper docs ([#7124](https://github.com/containerd/containerd/pull/7124)) * seccomp: allow clock_settime64 when CAP_SYS_TIME is added ([#7149](https://github.com/containerd/containerd/pull/7149)) * Copy fuzzers from github.com/cncf/cncf-fuzzing ([#7123](https://github.com/containerd/containerd/pull/7123)) * fix can't edit object by using ctr content edit command ([#6847](https://github.com/containerd/containerd/pull/6847)) * integration/client: fix typo in export_test.go ([#7130](https://github.com/containerd/containerd/pull/7130)) * Fix WWW-Authenticate parsing ([#7126](https://github.com/containerd/containerd/pull/7126)) * LCOW differ return ErrNotImplemented for wrong mount type ([#7112](https://github.com/containerd/containerd/pull/7112)) * Update go-restful/v3 to latest release ([#7117](https://github.com/containerd/containerd/pull/7117)) * pkg/cri: use marshal wrapper for version convertor ([#7108](https://github.com/containerd/containerd/pull/7108)) * Remove hacks around contrib/fuzz ([#7087](https://github.com/containerd/containerd/pull/7087)) * Fix missing closed HTTP Body ([#7107](https://github.com/containerd/containerd/pull/7107)) * Cleanup metadata tests ([#7105](https://github.com/containerd/containerd/pull/7105)) * Downgrade MinGW to version 10.2.0 ([#7106](https://github.com/containerd/containerd/pull/7106)) * ctr: Fix `ctr c create` fails to parse arguments ([#7098](https://github.com/containerd/containerd/pull/7098)) * Fix Documentation Issue ([#7103](https://github.com/containerd/containerd/pull/7103)) * refactor: reduce duplicate code ([#7100](https://github.com/containerd/containerd/pull/7100)) * make xattr EPERM non-fatal in createTarFile ([#7094](https://github.com/containerd/containerd/pull/7094)) * Move metadata plugin registration to seperate package ([#7096](https://github.com/containerd/containerd/pull/7096)) * fix: missing sudo for devmapper doc ([#7092](https://github.com/containerd/containerd/pull/7092)) * Ensure Windows Periodic workflow errors out while still uploading results. ([#7085](https://github.com/containerd/containerd/pull/7085)) * Add snapshotter key to snapshot events ([#7084](https://github.com/containerd/containerd/pull/7084)) * add WithAdditionalGIDs test ([#7072](https://github.com/containerd/containerd/pull/7072)) * Forward ctr snapshotter flags on Windows ([#7086](https://github.com/containerd/containerd/pull/7086)) * add WithAppendAdditionalGroups helper ([#7070](https://github.com/containerd/containerd/pull/7070)) * Make CI Fuzz less noisy ([#7065](https://github.com/containerd/containerd/pull/7065)) * ctr: add --hostname flag to create, run ([#7082](https://github.com/containerd/containerd/pull/7082)) * improve content-flow ([#7077](https://github.com/containerd/containerd/pull/7077)) * Make CI Fuzz optional ([#7067](https://github.com/containerd/containerd/pull/7067)) * Use Go 1.18's testing.F on simple fuzzers ([#7056](https://github.com/containerd/containerd/pull/7056)) * Downgrade MinGW in Windows setup scripts. ([#7062](https://github.com/containerd/containerd/pull/7062)) * Make test path a constant ([#7057](https://github.com/containerd/containerd/pull/7057)) * Run fuzzers in CI ([#7052](https://github.com/containerd/containerd/pull/7052)) * CRI: Improve the /dev/shm mount options in Sandbox. ([#6913](https://github.com/containerd/containerd/pull/6913)) * fix:userattr-unmount unexpected timeout ([#7008](https://github.com/containerd/containerd/pull/7008)) * Port (some) unit tests to FreeBSD ([#7042](https://github.com/containerd/containerd/pull/7042)) * Bump Golang and MinGW versions in Windows setup script. ([#6888](https://github.com/containerd/containerd/pull/6888)) * Windows snapshotter touch ups and new functionality ([#6918](https://github.com/containerd/containerd/pull/6918)) * Improve naming consistencies in comments in snapshotter.go ([#7032](https://github.com/containerd/containerd/pull/7032)) * Make building static binaries simpler ([#7022](https://github.com/containerd/containerd/pull/7022)) * Allow CRI on Darwin ([#7033](https://github.com/containerd/containerd/pull/7033)) * update runc binary to v1.1.3 ([#7034](https://github.com/containerd/containerd/pull/7034)) * Linux containers on FreeBSD ([#7000](https://github.com/containerd/containerd/pull/7000)) * go.mod: github.com/moby/sys/mountinfo v0.6.2 ([#7026](https://github.com/containerd/containerd/pull/7026)) * fix minor spelling mistake: lablel -> label ([#7031](https://github.com/containerd/containerd/pull/7031)) * go.mod: github.com/containerd/cgroups v1.0.4 ([#7027](https://github.com/containerd/containerd/pull/7027)) * go.mod: github.com/containerd/continuity v0.3.0 ([#7028](https://github.com/containerd/containerd/pull/7028)) * Correct spelling mistake ("sanbdox" to "sandbox") ([#7029](https://github.com/containerd/containerd/pull/7029)) * Github Security Advisory [GHSA-5ffw-gxpp-mxpf](https://github.com/containerd/containerd/security/advisories/GHSA-5ffw-gxpp-mxpf) * Bump grpc to v1.47.0 ([#7018](https://github.com/containerd/containerd/pull/7018)) * Bump k8s.io deps to v0.24.1 ([#7017](https://github.com/containerd/containerd/pull/7017)) * Support runtime level snapshotter for issue 6657 ([#6899](https://github.com/containerd/containerd/pull/6899)) * update golang to 1.18.3, 1.17.11 ([#7012](https://github.com/containerd/containerd/pull/7012)) * Fix containerd-stress duration flag ([#7004](https://github.com/containerd/containerd/pull/7004)) * update go-cni/for cni update fixing plugins that don't respond with version ([#7009](https://github.com/containerd/containerd/pull/7009)) * Add validations for Windows HostProcess CRI configs ([#6996](https://github.com/containerd/containerd/pull/6996)) * Move docker reference logic to reference/docker package ([#7007](https://github.com/containerd/containerd/pull/7007)) * promote pause image to 3.7 (sync with kube v1.24) ([#7003](https://github.com/containerd/containerd/pull/7003)) * Makefile: use urfave_cli_no_docs for binaries that don't need it ([#6998](https://github.com/containerd/containerd/pull/6998)) * CRI: cleanup cri/store package ([#6993](https://github.com/containerd/containerd/pull/6993)) * Use t.Run for /pkg/cri tests ([#7001](https://github.com/containerd/containerd/pull/7001)) * vendor: github.com/urfave/cli v1.22.9 and fix "verify-vendor" script ([#6997](https://github.com/containerd/containerd/pull/6997)) * sandbox: replace github.com/pkg/errors with native errors ([#6937](https://github.com/containerd/containerd/pull/6937)) * build: Fix references to check-protos target in Makefile ([#6983](https://github.com/containerd/containerd/pull/6983)) * ctr: fix label args used in NewContainer ([#6954](https://github.com/containerd/containerd/pull/6954)) * ctr sandbox: handle sandbox config ([#6959](https://github.com/containerd/containerd/pull/6959)) * Fix broken oss-fuzz build ([#6975](https://github.com/containerd/containerd/pull/6975)) * archive: add human-readable hint to Lchown error ([#6982](https://github.com/containerd/containerd/pull/6982)) * Fix tx closed error when upperdirlabel specified ([#6978](https://github.com/containerd/containerd/pull/6978)) * config: improve config v1 deprecation message ([#6972](https://github.com/containerd/containerd/pull/6972)) * Fix Windows install powershell script ([#6969](https://github.com/containerd/containerd/pull/6969)) * fix comments on metadata schema and update namespace doc ([#6955](https://github.com/containerd/containerd/pull/6955)) * adjust format in comment ([#6956](https://github.com/containerd/containerd/pull/6956)) * Restore decompression benchmarks ([#6957](https://github.com/containerd/containerd/pull/6957)) * cmd/ctr/commands/content: fix typo in fetch command usage ([#6960](https://github.com/containerd/containerd/pull/6960)) * fix some confusing typos ([#6950](https://github.com/containerd/containerd/pull/6950)) * update doc url about k8s ([#6952](https://github.com/containerd/containerd/pull/6952)) * Separate windows-2019 and windows-2022 test results ([#6946](https://github.com/containerd/containerd/pull/6946)) * shim: fix debug flag not working ([#6910](https://github.com/containerd/containerd/pull/6910)) * Reverts removal of parallel run from critest ([#6938](https://github.com/containerd/containerd/pull/6938)) * Bump OpenTelemetry dependencies ([#6932](https://github.com/containerd/containerd/pull/6932)) * update runc binary and vendor to v1.1.2 ([#6934](https://github.com/containerd/containerd/pull/6934)) * oci: WithDefaultUnixDevices(): remove tun/tap from the default devices ([#6923](https://github.com/containerd/containerd/pull/6923)) * update golang to 1.18.2, 1.17.10 ([#6926](https://github.com/containerd/containerd/pull/6926)) * CI: update Fedora to 36 ([#6925](https://github.com/containerd/containerd/pull/6925)) * Add `Wait` to `binaryProcessor` ([#6916](https://github.com/containerd/containerd/pull/6916)) * go.mod: Bump k8s deps to v0.24.0 ([#6905](https://github.com/containerd/containerd/pull/6905)) * (Vagrant CI) Enable git commands due to git CVE fix ([#6915](https://github.com/containerd/containerd/pull/6915)) * Pass explicit JUnit outfile to critest.exe in Windows workflow. ([#6912](https://github.com/containerd/containerd/pull/6912)) * Update critools to v1.24 ([#6894](https://github.com/containerd/containerd/pull/6894)) * devmapper docs: small fixes ([#6904](https://github.com/containerd/containerd/pull/6904)) * move report dir option to end of line for vagrant cri tests ([#6900](https://github.com/containerd/containerd/pull/6900)) * Update Kubernetes version matrix in release docs ([#6892](https://github.com/containerd/containerd/pull/6892)) * Share container images between TestRestartMonitor and TestRestartMonitorWithOnFailurePolicy ([#6889](https://github.com/containerd/containerd/pull/6889)) * containerd 1.6.4 k8s 1.24 readme announce ([#6890](https://github.com/containerd/containerd/pull/6890)) * Cleanup leaked shim process ([#6866](https://github.com/containerd/containerd/pull/6866)) * Add collectible resources to metadata gc ([#6804](https://github.com/containerd/containerd/pull/6804)) * Update k8 docurl in file ([#6881](https://github.com/containerd/containerd/pull/6881)) * Support RISC-V 64 ([#6882](https://github.com/containerd/containerd/pull/6882)) * docs: minor fixes in snapshots.Snapshotter comments ([#6885](https://github.com/containerd/containerd/pull/6885)) * Officially deprecate Schema 1 ([#6884](https://github.com/containerd/containerd/pull/6884)) * Make Cirrus CI tests more stable ([#6880](https://github.com/containerd/containerd/pull/6880)) * docs: Adding windows installation steps to getting-started.md ([#6875](https://github.com/containerd/containerd/pull/6875)) * Add ctr support for CPUMax and CPUShares ([#6809](https://github.com/containerd/containerd/pull/6809)) * Support for cgroups blockio ([#5490](https://github.com/containerd/containerd/pull/5490)) * Fix comment for metadata/db.go ([#6871](https://github.com/containerd/containerd/pull/6871)) * Remove github.com/gogo/protobuf and github.com/golang/protobuf from containerd's direct dependencies ([#6867](https://github.com/containerd/containerd/pull/6867)) * Update go-cni to v1.1.5 ([#6868](https://github.com/containerd/containerd/pull/6868)) * Bump opencontainers/selinux from 1.10.0 to 1.10.1 ([#6865](https://github.com/containerd/containerd/pull/6865)) * Upgrade google.golang.org/grpc and google.golang.org/protobuf ([#6864](https://github.com/containerd/containerd/pull/6864)) * Don't use "uname -a" as Cirrus CI's cache key ([#6863](https://github.com/containerd/containerd/pull/6863)) * remove duplicate ([#6856](https://github.com/containerd/containerd/pull/6856)) * Create ppc64le release ([#6858](https://github.com/containerd/containerd/pull/6858)) * Move Vagrant-based tests from GitHub Actions to Cirrus CI ([#6854](https://github.com/containerd/containerd/pull/6854)) * feature: support image pull progress timeout ([#6150](https://github.com/containerd/containerd/pull/6150)) * Add unpack interface to be used by client ([#6749](https://github.com/containerd/containerd/pull/6749)) * Fix undefined error in use of errors package ([#6855](https://github.com/containerd/containerd/pull/6855)) * Migrate off from github.com/gogo/protobuf ([#6841](https://github.com/containerd/containerd/pull/6841)) * images/image.go: typo ([#6851](https://github.com/containerd/containerd/pull/6851)) * Add flag to allow oci.WithAllDevicesAllowed on PrivilegedWithoutHostDevices ([#5686](https://github.com/containerd/containerd/pull/5686)) * integration: Adds Windows equivalent for TestSandboxRemoveWithoutIPLeakage ([#6180](https://github.com/containerd/containerd/pull/6180)) * fix incorrect syntax in comments ([#6845](https://github.com/containerd/containerd/pull/6845)) * cri: close fifos when container is deleted ([#6842](https://github.com/containerd/containerd/pull/6842)) * diff: hide types.Any from clients ([#6832](https://github.com/containerd/containerd/pull/6832)) * Add Container-Optimized OS into Adopters ([#6838](https://github.com/containerd/containerd/pull/6838)) * Prepare for google.golang.org/protobuf ([#6835](https://github.com/containerd/containerd/pull/6835)) * fix the restart desired to running when task not found ([#6833](https://github.com/containerd/containerd/pull/6833)) * Remove all gogoproto extensions ([#6829](https://github.com/containerd/containerd/pull/6829)) * fix nil pointer panic for monitor ([#6830](https://github.com/containerd/containerd/pull/6830)) * remotes/docker: log registry URLs as info instead of debug ([#5681](https://github.com/containerd/containerd/pull/5681)) * Rename runtime/v2/task to api/runtime ([#6827](https://github.com/containerd/containerd/pull/6827)) * Fix protoc-gen-go-fieldpath ([#6828](https://github.com/containerd/containerd/pull/6828)) * Consolidate gogo/protobuf dependencies under our own protobuf package ([#6826](https://github.com/containerd/containerd/pull/6826)) * Add restart policy for enhanced restart manager ([#6744](https://github.com/containerd/containerd/pull/6744)) * Remove gogoproto.stdtime ([#6821](https://github.com/containerd/containerd/pull/6821)) * Set timeout when collecting metrics from shim's Stat ([#6781](https://github.com/containerd/containerd/pull/6781)) * Fuzz filter package with Go 1.18's fuzzer ([#6819](https://github.com/containerd/containerd/pull/6819)) * allow ptrace(2) by default for kernel >= 4.8 ([#6810](https://github.com/containerd/containerd/pull/6810)) * Build bin/gen-manpages instead of using "go run" ([#6820](https://github.com/containerd/containerd/pull/6820)) * update golang to 1.18.1, 1.17.9 ([#6822](https://github.com/containerd/containerd/pull/6822)) * Sandbox API ([#6703](https://github.com/containerd/containerd/pull/6703)) * Move lease manager plugin to separate package ([#6811](https://github.com/containerd/containerd/pull/6811)) * fix pool_device_test ([#6807](https://github.com/containerd/containerd/pull/6807)) * check for duplicate nspath possibilities ([#6806](https://github.com/containerd/containerd/pull/6806)) * Do not append []string{""} to command to preserve Docker compatibility ([#6805](https://github.com/containerd/containerd/pull/6805)) * tracing: fix panic on startup when configured ([#6789](https://github.com/containerd/containerd/pull/6789)) * Optimize loading performance for cri recover ([#6680](https://github.com/containerd/containerd/pull/6680)) * Change architecture path in README.md ([#6798](https://github.com/containerd/containerd/pull/6798)) * make consistent for checkpoint path ([#6792](https://github.com/containerd/containerd/pull/6792)) * metrics/cgroups: fix deadlock issue in Add during Collect ([#6788](https://github.com/containerd/containerd/pull/6788)) * ADOPTERS: Update AKS Info ([#6794](https://github.com/containerd/containerd/pull/6794)) * Pin upload-cloud-storage action to 0.8.0 in Windows workflow. ([#6790](https://github.com/containerd/containerd/pull/6790)) * docs: add Deckhouse to the list of adopters ([#6785](https://github.com/containerd/containerd/pull/6785)) * Add `docs/snapshotters`; simplify `docs/cri` ([#6778](https://github.com/containerd/containerd/pull/6778)) * Turn paths from cmdline into absolute paths ([#6672](https://github.com/containerd/containerd/pull/6672)) * CRI: add support for CDI device injection ([#6654](https://github.com/containerd/containerd/pull/6654)) * Disable writing freelist to make the file robust against data corruptions ([#6761](https://github.com/containerd/containerd/pull/6761)) * mv design docs/historical/design ([#6777](https://github.com/containerd/containerd/pull/6777)) * CRI: improve image pulling performance ([#6702](https://github.com/containerd/containerd/pull/6702)) * docs: remove runtime v1; migrate config v1 to v2 ([#6776](https://github.com/containerd/containerd/pull/6776)) * Skip flaky test on Windows ([#6779](https://github.com/containerd/containerd/pull/6779)) * docs/getting-started.md: typo ([#6775](https://github.com/containerd/containerd/pull/6775)) * Add no_tracing tag ([#6750](https://github.com/containerd/containerd/pull/6750)) * Move historical docs to `docs/historical` ([#6754](https://github.com/containerd/containerd/pull/6754)) * Run go mod tidy in integration tests ([#6768](https://github.com/containerd/containerd/pull/6768)) * go.mod: move indirects, and update integration go.mod to 1.18 ([#6765](https://github.com/containerd/containerd/pull/6765)) * Drop gotest.tools ([#6762](https://github.com/containerd/containerd/pull/6762)) * Use t.Setenv instead of os.Setenv ([#6760](https://github.com/containerd/containerd/pull/6760)) * Upgrade to Go 1.18 ([#6709](https://github.com/containerd/containerd/pull/6709)) * Adding multi-arch support for the configure.sh script ([#6751](https://github.com/containerd/containerd/pull/6751)) * docs/getting-started.md: massive update ([#6758](https://github.com/containerd/containerd/pull/6758)) * Remove unmaintained contrib/linuxkit ([#6755](https://github.com/containerd/containerd/pull/6755)) * [Windows CI] Address some timeout issues ([#6757](https://github.com/containerd/containerd/pull/6757)) * BUILDING.md: update supported Go versions ([#6756](https://github.com/containerd/containerd/pull/6756)) * update runc to 1.1.1 ([#6753](https://github.com/containerd/containerd/pull/6753)) * CI: add Rocky Linux 8 ([#6747](https://github.com/containerd/containerd/pull/6747)) * CI: bump up crun to 1.4.4 ([#6748](https://github.com/containerd/containerd/pull/6748)) * added make help for cri integration ([#6743](https://github.com/containerd/containerd/pull/6743)) * Update README.md cncf landscape url ([#6740](https://github.com/containerd/containerd/pull/6740)) * Fix error message in TestNewBinaryIO ([#6738](https://github.com/containerd/containerd/pull/6738)) * Use typeurl.Any instead of github.com/gogo/protobuf/types.Any ([#6706](https://github.com/containerd/containerd/pull/6706)) * Use cgroups.AddProc() for cgroups v1 ([#5738](https://github.com/containerd/containerd/pull/5738)) * fix: ctr images mount with snapshotter option can't get snapshotter ([#6713](https://github.com/containerd/containerd/pull/6713)) * cgroup2: monitor OOMKill instead of OOM to prevent missing container events ([#6323](https://github.com/containerd/containerd/pull/6323)) * moving up to go-cni v1.1.4 ([#6721](https://github.com/containerd/containerd/pull/6721)) * native: fix deadlock from leaving transactions open ([#6722](https://github.com/containerd/containerd/pull/6722)) * go.mod: remove replace, and update github.com/gogo/googleapis v1.4.1 ([#5390](https://github.com/containerd/containerd/pull/5390)) * Github Security Advisory [GHSA-c9cp-9c75-9v8c](https://github.com/containerd/containerd/security/advisories/GHSA-c9cp-9c75-9v8c) * runtime: deprecate runc --criu / -criu-path option ([#6496](https://github.com/containerd/containerd/pull/6496)) * Bug fix for mount path handling ([#6651](https://github.com/containerd/containerd/pull/6651)) * Upgrade containerd/imgcrypt and opencontainers/image-spec ([#6711](https://github.com/containerd/containerd/pull/6711)) * Remove enumvalue_customname, goproto_enum_prefix and enum_customname ([#6708](https://github.com/containerd/containerd/pull/6708)) * Remove gogoproto.customtype ([#6699](https://github.com/containerd/containerd/pull/6699)) * Skip tty critest testcase on Windows Server 2022 ([#6698](https://github.com/containerd/containerd/pull/6698)) * Build with Go 1.18 ([#6605](https://github.com/containerd/containerd/pull/6605)) * Update prometheus client vendor ([#6690](https://github.com/containerd/containerd/pull/6690)) * vendor: golang.org/x/crypto v0.0.0-20220315160706-3147a52a75dd ([#6687](https://github.com/containerd/containerd/pull/6687)) * Make the temp mount as ready only in container WithVolumes ([#6593](https://github.com/containerd/containerd/pull/6593)) * fix: `ctr run --cni` get failed ([#6670](https://github.com/containerd/containerd/pull/6670)) * test: use `T.TempDir` to create temporary test directory ([#6681](https://github.com/containerd/containerd/pull/6681)) * Make OpenLab's CI jobs blocking ([#6679](https://github.com/containerd/containerd/pull/6679)) * document log level and format ([#6683](https://github.com/containerd/containerd/pull/6683)) * Add shared content label to namespaces ([#6660](https://github.com/containerd/containerd/pull/6660)) * Add protoc-gen-go-fieldpath ([#6562](https://github.com/containerd/containerd/pull/6562)) * Enable gosec linter for golangci-lint ([#6669](https://github.com/containerd/containerd/pull/6669)) * Make mkfs.xfs available on OpenLab's CI environment ([#6668](https://github.com/containerd/containerd/pull/6668)) * ctr: improve error relative shim path error msg ([#6519](https://github.com/containerd/containerd/pull/6519)) * typo fixes under cmd. ([#6674](https://github.com/containerd/containerd/pull/6674)) * Handle CRI Device.HostPath on Windows ([#6618](https://github.com/containerd/containerd/pull/6618)) * Upgrade golangci-lint and its GitHub Action ([#6666](https://github.com/containerd/containerd/pull/6666)) * Don't build a second copy of containerd-shim-runhcs-v1.exe ([#6661](https://github.com/containerd/containerd/pull/6661)) * Update TestNormalize to only test Windows platform ([#6569](https://github.com/containerd/containerd/pull/6569)) * Fix link in getting-started.md ([#6663](https://github.com/containerd/containerd/pull/6663)) * Fuzzing: refactor metadata fuzzers ([#6423](https://github.com/containerd/containerd/pull/6423)) * Two xfs file systems with same UUID can not be mounted on the same sy… ([#6650](https://github.com/containerd/containerd/pull/6650)) * [Windows] Fix deadline exceeded in daemon restart ([#6635](https://github.com/containerd/containerd/pull/6635)) * Use temp file for export/import test ([#6658](https://github.com/containerd/containerd/pull/6658)) * strip path-info from `-v` (version) output, and implement -v flag for containerd-shim ([#6495](https://github.com/containerd/containerd/pull/6495)) * Improve unexpected response error handling in resolver ([#6617](https://github.com/containerd/containerd/pull/6617)) * Use the latest tag for azure images ([#6601](https://github.com/containerd/containerd/pull/6601)) * Run CRI integration tests in GitHub Actions (Windows) ([#6626](https://github.com/containerd/containerd/pull/6626)) * cri: fix integration test on cgroupsv2 system ([#6595](https://github.com/containerd/containerd/pull/6595)) * Use version 2 configuration format in docs/PLUGINS.md ([#6613](https://github.com/containerd/containerd/pull/6613)) * update to go 1.16.15, 1.17.8 to address CVE-2022-24921 ([#6619](https://github.com/containerd/containerd/pull/6619)) * Update status of 1.4 release ([#6614](https://github.com/containerd/containerd/pull/6614)) * Update TestContainerSymlinkVolumes to use windows path ([#6568](https://github.com/containerd/containerd/pull/6568)) * Add --user support for ctr run Windows ([#6603](https://github.com/containerd/containerd/pull/6603)) * Update releases ([#6608](https://github.com/containerd/containerd/pull/6608)) * Github Security Advisory [GHSA-crp2-qrr5-8pq7](https://github.com/containerd/containerd/security/advisories/GHSA-crp2-qrr5-8pq7) * Adds support for Windows ArgsEscaped images ([#6479](https://github.com/containerd/containerd/pull/6479)) * Do not use weak import ([#6558](https://github.com/containerd/containerd/pull/6558)) * cri: relax test for system without hugetlb ([#6596](https://github.com/containerd/containerd/pull/6596)) * Use containerd/protobuild instead of stevvooe/protobuild ([#6578](https://github.com/containerd/containerd/pull/6578)) * integration: remove duplicated util pkg ([#6597](https://github.com/containerd/containerd/pull/6597)) * go.mod: update to github.com/tchap/go-patricia/v2 v2.3.1 ([#6591](https://github.com/containerd/containerd/pull/6591)) * Update Go version recommendation in getting started ([#6585](https://github.com/containerd/containerd/pull/6585)) * go.mod: update to github.com/emicklei/go-restful/v3 v3.7.3 ([#6337](https://github.com/containerd/containerd/pull/6337)) * fix Implicit memory aliasing in for loop ([#6331](https://github.com/containerd/containerd/pull/6331)) * Fix build with gccgo ([#6579](https://github.com/containerd/containerd/pull/6579)) * Replace golang.org/x/net/context with std library ([#6580](https://github.com/containerd/containerd/pull/6580)) * containerd-shim-runc-v1: return init pid when clean dead shim ([#6571](https://github.com/containerd/containerd/pull/6571)) * Use Windows matcher when on Windows platform in all code paths ([#6491](https://github.com/containerd/containerd/pull/6491)) * containerd-shim-runc-v2: return init pid when clean dead shim ([#6452](https://github.com/containerd/containerd/pull/6452)) * [Windows][Integration] Enable TestRestartMonitor ([#6515](https://github.com/containerd/containerd/pull/6515)) * go.mod: fsnotify v1.5.1, moby/sys/mountinfo v0.6.0, moby/sys/signal v0.7.0 ([#6554](https://github.com/containerd/containerd/pull/6554))

* Upgrade GitHub actions CI workflow ([#249](https://github.com/containerd/cgroups/pull/249)) * Upgrade Go compiler to 1.19 ([#248](https://github.com/containerd/cgroups/pull/248)) * Don't use ioutil ([#246](https://github.com/containerd/cgroups/pull/246)) * Check that cgroup is empty before deleting ([#228](https://github.com/containerd/cgroups/pull/228)) * Support cgroup.AddThread in cgroupv2 manager ([#243](https://github.com/containerd/cgroups/pull/243)) * Support to handle more than 4 fields in cpuacct.stat ([#231](https://github.com/containerd/cgroups/pull/231)) * typo shoulld -> should ([#236](https://github.com/containerd/cgroups/pull/236)) * Upgrade github.com/cilium/ebpf from v0.4.0 to v0.9.1 ([#241](https://github.com/containerd/cgroups/pull/241)) * go.mod: github.com/stretchr/testify v1.8.0 ([#240](https://github.com/containerd/cgroups/pull/240)) * .github: use ubuntu-22.04 to test cgroupv2 ([#237](https://github.com/containerd/cgroups/pull/237)) * feat(v2): Support cgroup.MoveTo in cgroupv2 manager ([#235](https://github.com/containerd/cgroups/pull/235)) * Update README to include usage examples of v2 client ([#233](https://github.com/containerd/cgroups/pull/233)) * ParseCgroupFile: fix wrong comment about unified hierarchy ; add ParseCgroupFileUnified to get the unified path ([#232](https://github.com/containerd/cgroups/pull/232)) * Bump go version to 1.17 in go.mod ([#230](https://github.com/containerd/cgroups/pull/230)) * make cmd/ a separate module (as it's only for testing) ([#226](https://github.com/containerd/cgroups/pull/226)) * feat(v2): add Update method for v2.Manager ([#225](https://github.com/containerd/cgroups/pull/225)) * feat: add memory.min param ([#211](https://github.com/containerd/cgroups/pull/211)) * modified the dereference null pointer value. ([#218](https://github.com/containerd/cgroups/pull/218)) * update readme for cpu cgroup demo ([#217](https://github.com/containerd/cgroups/pull/217)) * Fix systemd full path ([#221](https://github.com/containerd/cgroups/pull/221)) * Update Go version and fedora base ([#223](https://github.com/containerd/cgroups/pull/223)) * Fix panic in NewSystemd on nil values ([#219](https://github.com/containerd/cgroups/pull/219))

* go.mod: update dependencies (take 2) ([#204](https://github.com/containerd/continuity/pull/204)) * Revert "go.mod: update dependencies" ([#205](https://github.com/containerd/continuity/pull/205)) * Various small fix-ups ([#202](https://github.com/containerd/continuity/pull/202)) * update authors and mailmap ([#201](https://github.com/containerd/continuity/pull/201)) * move cmd/continuity to its own go module ([#200](https://github.com/containerd/continuity/pull/200)) * CI: resolve Go path before sudoing ; Remove deprecated io/ioutil (except ioutil.ReadDir) ([#198](https://github.com/containerd/continuity/pull/198)) * fs.CopyDir: support sockets and pipes ([#197](https://github.com/containerd/continuity/pull/197)) * Fix wrapping errors ([#196](https://github.com/containerd/continuity/pull/196))

* Update Go vers, x/sys vendor ([#51](https://github.com/containerd/fifo/pull/51)) * chore: cleanup old buildtags by `go fix` ([#49](https://github.com/containerd/fifo/pull/49)) * Return nil when openFifo returns nil ([#47](https://github.com/containerd/fifo/pull/47)) * Resolve golangci-lint-action package warnings ([#48](https://github.com/containerd/fifo/pull/48)) * Remove references to io/ioutil package ([#45](https://github.com/containerd/fifo/pull/45)) * Update GitHub actions CI workflow ([#46](https://github.com/containerd/fifo/pull/46)) * go.mod: github.com/stretchr/testify v1.8.0, golang.org/x/sys v0.0.0-20220715151400-c0bba94af5f8, go 1.18 ([#44](https://github.com/containerd/fifo/pull/44)) * fifo_test: Add 2 tests for closing after reading ([#42](https://github.com/containerd/fifo/pull/42)) * replace pkg/errors ([#41](https://github.com/containerd/fifo/pull/41)) * fifo.Close(): prevent possible panic if fifo is nil ([#32](https://github.com/containerd/fifo/pull/32)) * Update branch name in GitHub Actions ([#40](https://github.com/containerd/fifo/pull/40))

* Add Go 1.20 support ([#111](https://github.com/containerd/go-cni/pull/111)) * opts: add cgroupPath capability ([#110](https://github.com/containerd/go-cni/pull/110)) * go.mod: github.com/containernetworking/cni v1.1.2 ([#109](https://github.com/containerd/go-cni/pull/109)) * Remove references to io/ioutil package ([#106](https://github.com/containerd/go-cni/pull/106)) * Update golangci/golangci-lint package ([#108](https://github.com/containerd/go-cni/pull/108)) * Update GitHub actions CI workflow ([#107](https://github.com/containerd/go-cni/pull/107)) * Add support for Windows default conf paths ([#103](https://github.com/containerd/go-cni/pull/103)) * go.mod: github.com/stretchr/testify v1.8.0 ([#104](https://github.com/containerd/go-cni/pull/104)) * go.mod: update libcni to v1.1.1 ([#101](https://github.com/containerd/go-cni/pull/101)) * add in some serial setup tests; a little make cleanup ([#100](https://github.com/containerd/go-cni/pull/100)) * Re-introduce serial network setup ([#99](https://github.com/containerd/go-cni/pull/99)) * bump github.com/containernetworking/cni v1.1.0 ([#98](https://github.com/containerd/go-cni/pull/98)) * Revert "Update loopback version to support check" ([#96](https://github.com/containerd/go-cni/pull/96)) * Use revive instead of golint ([#92](https://github.com/containerd/go-cni/pull/92)) * Bump go verion to 1.17 ([#91](https://github.com/containerd/go-cni/pull/91)) * moving up to latest CNI plugin release ([#90](https://github.com/containerd/go-cni/pull/90)) * Fix Loopback Version ([#88](https://github.com/containerd/go-cni/pull/88)) * Update comment for capabilities ([#89](https://github.com/containerd/go-cni/pull/89)) * Add integration test for linux and update go version from 1.16 to 1.17 ([#84](https://github.com/containerd/go-cni/pull/84))

* CHANGES: Updated CHANGES document for 1.1.7 release ([#97](https://github.com/containerd/imgcrypt/pull/97)) * Update to ocicrypt 1.1.6 and add support for zstd type of compressed layers ([#96](https://github.com/containerd/imgcrypt/pull/96)) * build(deps): Update to containerd 1.6.8 ([#92](https://github.com/containerd/imgcrypt/pull/92)) * tests: Add -traditional to OpenSSL command line when OSSL v3 is used ([#90](https://github.com/containerd/imgcrypt/pull/90)) * chore: fix readme typo ([#87](https://github.com/containerd/imgcrypt/pull/87)) * Update to min golang 1.18 ([#88](https://github.com/containerd/imgcrypt/pull/88)) * CHANGES: Updated CHANGES document for 1.1.6 release ([#85](https://github.com/containerd/imgcrypt/pull/85)) * build(deps): bump github.com/containerd/containerd from 1.6.1 to 1.6.6 ([#83](https://github.com/containerd/imgcrypt/pull/83)) * CI: Upgrade to golangci-lint v1.46.2 ([#84](https://github.com/containerd/imgcrypt/pull/84)) * CICD: Rename master branch to main ([#79](https://github.com/containerd/imgcrypt/pull/79)) * Rename any to pbAny ([#78](https://github.com/containerd/imgcrypt/pull/78)) * Use reflect to support diff.ApplyConfig with/without gogo's types.Any ([#75](https://github.com/containerd/imgcrypt/pull/75)) * Upgrade golangci-lint-action and golangci-lint ([#76](https://github.com/containerd/imgcrypt/pull/76)) * CHANGES: Updated CHANGES document for 1.1.4 release ([#74](https://github.com/containerd/imgcrypt/pull/74)) * Bump github.com/containerd/containerd from 1.5.10 to 1.6.1 ([#73](https://github.com/containerd/imgcrypt/pull/73)) * images: prepare for typeurl.Any ([#72](https://github.com/containerd/imgcrypt/pull/72)) * Bump ocicrypt to 1.1.3 ([#71](https://github.com/containerd/imgcrypt/pull/71)) * Bump github.com/containerd/containerd from 1.5.8 to 1.5.9 ([#67](https://github.com/containerd/imgcrypt/pull/67))

* Add Go 1.20 support to CI ([#30](https://github.com/containerd/nri/pull/30)) * Add CodeQL Security scan workflow ([#31](https://github.com/containerd/nri/pull/31)) * fixes: sort final adjusted mount slice. ([#29](https://github.com/containerd/nri/pull/29)) * fixes: fix resource adjustment to properly ignore unset/unadjusted fields. ([#28](https://github.com/containerd/nri/pull/28)) * adaptation: fix mount and device adjustment. ([#27](https://github.com/containerd/nri/pull/27)) * Make plugin timeouts configurable, adjust default socket path. ([#26](https://github.com/containerd/nri/pull/26)) * pkg/adaptation: eliminate configuration file. ([#24](https://github.com/containerd/nri/pull/24)) * stub: fix a potential plugin crash. ([#25](https://github.com/containerd/nri/pull/25)) * adaptation: fix a panic for unsolicited updates. ([#23](https://github.com/containerd/nri/pull/23)) * pkg/adaptaton: log errors with %v not %w. ([#22](https://github.com/containerd/nri/pull/22)) * chore: cleanup old buildtags by `go fix` ([#21](https://github.com/containerd/nri/pull/21)) * add back project info ([#20](https://github.com/containerd/nri/pull/20)) * Extend scope to enable common pluggable runtime extensions. ([#16](https://github.com/containerd/nri/pull/16)) * Update GitHub actions CI workflow ([#19](https://github.com/containerd/nri/pull/19)) * replace pkg/errors ([#17](https://github.com/containerd/nri/pull/17)) * Update the examples in README.md ([#15](https://github.com/containerd/nri/pull/15)) * Rename branch from master to main ([#12](https://github.com/containerd/nri/pull/12)) * Update to containerd 1.5.1 ([#11](https://github.com/containerd/nri/pull/11))

* Rework deadline assertion logging to be more clear ([#132](https://github.com/containerd/ttrpc/pull/132)) * Fix server shutdown logic ([#130](https://github.com/containerd/ttrpc/pull/130)) * Bump golang.org/x/sys from 0.0.0-20210124154548-22da62e12c0c to 0.1.0 ([#133](https://github.com/containerd/ttrpc/pull/133)) * Make checkServerShutdown verbose ([#128](https://github.com/containerd/ttrpc/pull/128)) * server: Fix connection issues when receiving ECONNRESET ([#123](https://github.com/containerd/ttrpc/pull/123)) * README: protobuild is in containerd org now ([#125](https://github.com/containerd/ttrpc/pull/125)) * stream: fix the map of streams leak ([#120](https://github.com/containerd/ttrpc/pull/120)) * Regenerated pb.go files to fix mismatches ([#122](https://github.com/containerd/ttrpc/pull/122)) * build: Fix references to check-protos target in Makefile ([#118](https://github.com/containerd/ttrpc/pull/118)) * Add service prefix option to generator ([#116](https://github.com/containerd/ttrpc/pull/116)) * doc: ttrpc supports stream ([#121](https://github.com/containerd/ttrpc/pull/121)) * *: remove codecov ([#114](https://github.com/containerd/ttrpc/pull/114)) * Only generate a Go file if the file has some services ([#112](https://github.com/containerd/ttrpc/pull/112)) * *.go: organize errors to one spot ([#113](https://github.com/containerd/ttrpc/pull/113)) * PROTOCOL: slight markdown touchup ([#111](https://github.com/containerd/ttrpc/pull/111)) * Introduce streaming ([#107](https://github.com/containerd/ttrpc/pull/107)) * Update checkout and lint actions ([#109](https://github.com/containerd/ttrpc/pull/109)) * Add Makefile and update protobuf ([#106](https://github.com/containerd/ttrpc/pull/106)) * Add ttrpc protocol definition ([#102](https://github.com/containerd/ttrpc/pull/102)) * Enable Codecov again ([#105](https://github.com/containerd/ttrpc/pull/105)) * Use CR+LF instead of LF regardless of OS ([#103](https://github.com/containerd/ttrpc/pull/103)) * Log the error's underyling errno if there is ([#104](https://github.com/containerd/ttrpc/pull/104)) * Use google.golang.org/protobuf instead of github.com/gogo/protobuf ([#99](https://github.com/containerd/ttrpc/pull/99)) * Wrap correct error on unix.GetsockoptUcred failure ([#100](https://github.com/containerd/ttrpc/pull/100)) * Update CI project checks to use containerd project action ([#101](https://github.com/containerd/ttrpc/pull/101))