Containerd - v1.7.2

* [release/1.7] Prepare release notes for v1.7.2 ([#8629](https://github.com/containerd/containerd/pull/8629)) * [`0e41daaea`](https://github.com/containerd/containerd/commit/0e41daaeabefcf7c61034024b4507ceee139761b) [release/1.7] Prepare release notes for v1.7.2 * [1.7 backport] Fix panic when remote differ returns empty result ([#8631](https://github.com/containerd/containerd/pull/8631)) * [`e134b6393`](https://github.com/containerd/containerd/commit/e134b639396ab07513fecfa221fc4ad8634b2154) Fix panic when remote differ returns empty result * [release/1.7 backport] Mount snapshots on Windows ([#8616](https://github.com/containerd/containerd/pull/8616)) * [`313c226b8`](https://github.com/containerd/containerd/commit/313c226b8b9c30995b90d9a6535b2972707afbd4) Update continuity to a tagged version * [`8dd16285a`](https://github.com/containerd/containerd/commit/8dd16285a0558c56255f7d88a509d0e8d930efe3) UnmountAll is a no-op for missing mount points * [`acff3eefa`](https://github.com/containerd/containerd/commit/acff3eefa69b6d0238062396fb91df5cfb699603) Improve error messages and remove check * [`b4dd3bf4e`](https://github.com/containerd/containerd/commit/b4dd3bf4e291b6be928de1be272740c6a9f2dd3e) Make ReadOnly() available on all platforms * [`08d8baf3f`](https://github.com/containerd/containerd/commit/08d8baf3f4d82d5917e8acc94e50d25b4d7d6500) Increase integration test tmieout to 20m * [`1f0dbd011`](https://github.com/containerd/containerd/commit/1f0dbd011ae5b635039646f29bba2e0b288d95ca) Remove bind code path in mount() * [`8f37b1c63`](https://github.com/containerd/containerd/commit/8f37b1c63712aefeef8e3c357e85ebde8f670ba8) Remove "bind" code path from diff * [`9139208b3`](https://github.com/containerd/containerd/commit/9139208b319828e0cafe8110743fa455dc3b75f1) Properly mount base layers * [`e61e7b312`](https://github.com/containerd/containerd/commit/e61e7b31263ca717d2ff00b37abdc83ff0f5346f) Skip parent layer options on bind mounts * [`e4307926f`](https://github.com/containerd/containerd/commit/e4307926f327e35cc5fcd012ac4854cf85cbee07) Add ReadOnly() function * [`0277b9b01`](https://github.com/containerd/containerd/commit/0277b9b01a4992ba315f379ca599bf080dd6495b) Remove escalated privileges * [`d5c18dfb7`](https://github.com/containerd/containerd/commit/d5c18dfb7ed449e0232ccafcc6f4cb9a2473221d) Use DefaultSnapshotter * [`853179366`](https://github.com/containerd/containerd/commit/853179366b2aa7bebd17903faa0ada9dcf9297cc) use t.Fatal if we cannot enable process privileges * [`5b3ee413f`](https://github.com/containerd/containerd/commit/5b3ee413f49fac47017cfacf09176e9701052096) Update continuity * [`375172604`](https://github.com/containerd/containerd/commit/375172604df61e312810efbb7fc0080df5a0ab2c) Fix go.mod, simplify boolean logic, add logging * [`600abd137`](https://github.com/containerd/containerd/commit/600abd13791fcc6b3dd23c7f78f8c8c796340e33) Ignore ERROR_NOT_FOUND error when removing mount * [`df7295dcd`](https://github.com/containerd/containerd/commit/df7295dcdf00839423109ac65b1dc9429f632e00) Update continuity, go-winio and hcsshim * [`0db78c482`](https://github.com/containerd/containerd/commit/0db78c48269f54b9335183b2b0d7b6138253e9e5) Remove unused function * [`219058766`](https://github.com/containerd/containerd/commit/2190587661ded992f2b0a55a08e3201b93e0b5a2) Grant needed privileges for snapshotter tests * [`96fbe5bc8`](https://github.com/containerd/containerd/commit/96fbe5bc882658780ca36499a0e0a79d095b83e8) Fix layer comparison and enable read-only checks * [`279e0d3c9`](https://github.com/containerd/containerd/commit/279e0d3c9ab199458387b670c19301a94dac8032) Use bind filer for mounts * [`93e94da40`](https://github.com/containerd/containerd/commit/93e94da4084f3fbe2d89f3145a8e56c8c24dc458) Enable TestSnapshotterClient on Windows * [`3a3da693a`](https://github.com/containerd/containerd/commit/3a3da693aee68afdc84ca42c0191cee88ee9c21f) Run Windows snapshotter through the test suite * [`e7b62322f`](https://github.com/containerd/containerd/commit/e7b62322f9218387e6f715442b2235c9feec2e01) Fix misspelling of 'Native' as 'Naive' * [`e1f999a18`](https://github.com/containerd/containerd/commit/e1f999a1827242a31fa85cbb4a44ee31eeebfb30) Add paired 'mount' log for 'unmount' * [`5788d6e52`](https://github.com/containerd/containerd/commit/5788d6e520cef08aaf2d15ceaf5c4c6b1ce735e6) Don't use all-upper-case filenames in snapshot tests * [`3cdcb2f10`](https://github.com/containerd/containerd/commit/3cdcb2f1088eab8d18075b0549ae59688bf15792) Skip tests that do not apply to WCOW on Windows * [`b0968b8bb`](https://github.com/containerd/containerd/commit/b0968b8bb920c99d341cb212bde9a4d15c050dfc) Ensure mounts are unmounted before leaving the test * [`b57424851`](https://github.com/containerd/containerd/commit/b57424851cc56745d677ee41e0d5a02dde29bc41) Unify testutil.Unmount on Windows and Unix * [`b9a8aad45`](https://github.com/containerd/containerd/commit/b9a8aad45149c40c8b5c327657a5320de29231c5) Implement Windows mounting for bind and windows-layer mounts * [`1a64ee183`](https://github.com/containerd/containerd/commit/1a64ee1835544d37903f667415c821526200ed8b) Implement WCOW parentless active snapshots and view snapshots * [release/1.7] fix: cio.Cancel() should close the pipes ([#8624](https://github.com/containerd/containerd/pull/8624)) * [`99582fb1a`](https://github.com/containerd/containerd/commit/99582fb1a32e9d051585219d11146afb07805abf) fix: cio.Cancel() should close the pipes * [release/1.7 backport] remotes/docker: ResolverOptions: fix deprecation comments ([#8621](https://github.com/containerd/containerd/pull/8621)) * [`eeda70fb0`](https://github.com/containerd/containerd/commit/eeda70fb04814f240c7e5d0f59a6369b1fdae69e) remotes/docker: ResolverOptions: fix deprecation comments * [release/1.7] Publish sandbox events ([#8613](https://github.com/containerd/containerd/pull/8613)) * [`e21c8beee`](https://github.com/containerd/containerd/commit/e21c8beee6c07fd289af2cf0011e0aa8156882e4) Post cherry-pick fixes * [`246240f71`](https://github.com/containerd/containerd/commit/246240f71ce2adcfc5b161343f21a72fa32c1273) Move PLEG event back to CRI * [`16f3726dd`](https://github.com/containerd/containerd/commit/16f3726dd61ba8fa71d04957681b53a14cc5b055) Generate sandbox exit events from CRI * [`0c8cfb1a7`](https://github.com/containerd/containerd/commit/0c8cfb1a7c0f852842016ad0805bf8a121ede970) Move pod sandbox recovery to podsandbox/ package * [`91d9f5c64`](https://github.com/containerd/containerd/commit/91d9f5c643c4bc6d44964c161a56eb04201fc885) Publish sandbox events * [`4b77683b4`](https://github.com/containerd/containerd/commit/4b77683b46182fcdf756509767660389d2eb7169) Add sandbox events protos * [release/1.7] notify readiness when registered plugins are ready ([#8584](https://github.com/containerd/containerd/pull/8584)) * [`2c38cad77`](https://github.com/containerd/containerd/commit/2c38cad77cdb2644ebf8f56a2e3f094344ef0f41) notify readiness when registered plugins are ready * [release/1.7] Backport CRI sandbox server stats changes ([#8604](https://github.com/containerd/containerd/pull/8604)) * [`7851b0a9f`](https://github.com/containerd/containerd/commit/7851b0a9f27c6a2223538abe05bf23edbd790fca) CRI: Make stats respect sandbox's platform * [`8d7c340ca`](https://github.com/containerd/containerd/commit/8d7c340ca8cb83fda1f02e443a1fdebd04df4bd5) [sbserver] handle missing cpu stats * [`d08b2a088`](https://github.com/containerd/containerd/commit/d08b2a088c4446ee9bb3af6b431f7969d6a8c07e) [sbserver] Refactor usageNanoCores be to used for all OSes * [release/1.7] Cherry-pick: Update volume-ownership image with latest hashes ([#8574](https://github.com/containerd/containerd/pull/8574)) * [`08de6e7b8`](https://github.com/containerd/containerd/commit/08de6e7b8c80e8815002eecc778c422764e87e13) Update volume-ownership image with latest hashes * [release/1.7] CDI: Use CRI Config.CDIDevices field for CDI injection ([#8519](https://github.com/containerd/containerd/pull/8519)) * [`6a5e54c15`](https://github.com/containerd/containerd/commit/6a5e54c15a38b90fbfa2c6a8ce9ef1fb26037c7c) Get CDI devices from CRI Config.CDIDevices field * [release/1.7 backport] snapshots/testsuite: Rename: fix fuse-overlayfs incompatibility ([#8510](https://github.com/containerd/containerd/pull/8510)) * [`9e60300ea`](https://github.com/containerd/containerd/commit/9e60300ea0b1635d8d7798fc99c824cab82926f3) snapshots/testsuite: Rename: fix fuse-overlayfs incompatibility

* Fall back to Copyfile when Clonefile detects a cross-device request ([#225](https://github.com/containerd/continuity/pull/225)) * [`7df79f5`](https://github.com/containerd/continuity/commit/7df79f562b5757ce7953302d8b80017a60dfaedf) Fall back to Copyfile when Clonefile detects a cross-device request * Support darwin clonefile ([#223](https://github.com/containerd/continuity/pull/223)) * [`30cf84d`](https://github.com/containerd/continuity/commit/30cf84dfb5e0d30120e388e2e2481adad18ea27a) Add support for Darwin clonefile * [`ebdd069`](https://github.com/containerd/continuity/commit/ebdd069b5520106abe138eee143fb310df314afd) Add copy benchmark * Update golang.org/x/sys to v0.1.0 ([#222](https://github.com/containerd/continuity/pull/222)) * [`2db84b9`](https://github.com/containerd/continuity/commit/2db84b9393154fccd9c968665b00255c688a7d00) Update golang.org/x/sys to v0.1.0 * Enable tests for all platforms ([#220](https://github.com/containerd/continuity/pull/220)) * [`b449cd0`](https://github.com/containerd/continuity/commit/b449cd0f764c0dc97ed496c2d3b5f8d673c6b7a6) Fix tests on Windows * [`eb05879`](https://github.com/containerd/continuity/commit/eb058795cb5ebba43e2a0a33f540bbc2c37945c4) Fix Darwin tests * [`9cd17be`](https://github.com/containerd/continuity/commit/9cd17bee62e96e79fd579ef64d86b86ec6ac6cc8) Enable tests for all platforms * Add more Windows metadata files ([#219](https://github.com/containerd/continuity/pull/219)) * [`cdfbe61`](https://github.com/containerd/continuity/commit/cdfbe61803aad33055dce1b557b2bdf323860244) Add more Windows metadata files * atomicWriteFile: file defer close ([#213](https://github.com/containerd/continuity/pull/213)) * [`9eb2a49`](https://github.com/containerd/continuity/commit/9eb2a492babfeb69786473a95a5de4bbc249c71d) atomicWriteFile: file defer close * Update GitHub Actions runner images ([#216](https://github.com/containerd/continuity/pull/216)) * [`ad9c903`](https://github.com/containerd/continuity/commit/ad9c9033bc0d70f0c8ec837cd7cc5a237aa53503) Update GitHub Actions runner images * Add CodeQL security scan workflow ([#215](https://github.com/containerd/continuity/pull/215)) * [`c8de034`](https://github.com/containerd/continuity/commit/c8de034f336e5434007cf541f850a2289463dae9) Add CodeQL security scan workflow * Add Go 1.20 support to CI ([#214](https://github.com/containerd/continuity/pull/214)) * [`be62cc1`](https://github.com/containerd/continuity/commit/be62cc19f81856e329418bf36084ba7dade19af6) Add Go 1.20 support to CI * Add paths to windows metadataFiles ([#212](https://github.com/containerd/continuity/pull/212)) * [`68f7b34`](https://github.com/containerd/continuity/commit/68f7b34f5e115fe81b09971f79bf59897805e99c) Add paths to windows metadataFiles * Remove references to io/ioutil package ([#211](https://github.com/containerd/continuity/pull/211)) * [`e22f001`](https://github.com/containerd/continuity/commit/e22f0013e31f7d7acfdfdfe03c3fc216cd7814c7) Remove references to io/ioutil package * Update GitHub actions CI workflow ([#210](https://github.com/containerd/continuity/pull/210)) * [`1c3fa33`](https://github.com/containerd/continuity/commit/1c3fa33439810d944467f2cf3a4b61be3b048296) Update GitHub actions CI workflow * format code with gofumpt ([#209](https://github.com/containerd/continuity/pull/209)) * [`f5d245e`](https://github.com/containerd/continuity/commit/f5d245e404beb0f7e0403288f4bf0bff7b1c26b4) format code with gofumpt * Correctly ignore error wrapping `ErrNotSupported` ([#207](https://github.com/containerd/continuity/pull/207)) * [`1ee38b5`](https://github.com/containerd/continuity/commit/1ee38b500a97d2b2eaac33a002dabf7b25886c22) Correctly ignore error wrapping ErrNotSupported