Skip to content

[pull] main from containerd:main#56

Open
pull[bot] wants to merge 5251 commits intofahedouch:mainfrom
containerd:main
Open

[pull] main from containerd:main#56
pull[bot] wants to merge 5251 commits intofahedouch:mainfrom
containerd:main

Conversation

@pull
Copy link

@pull pull bot commented Aug 2, 2022

See Commits and Changes for more details.


Created by pull[bot]

Can you help keep this open source service alive? 💖 Please sponsor : )

fuweid and others added 30 commits November 25, 2025 04:06
ci: use GitHub source for erofs-utils to fix network flakiness
This change maps ctr --gpus requests to CDI device requests.
This is done by mapping --gpus ID to a nvidia.com/gpu=ID device
request.

This removes the dependence on the nvidia-container-cli and instead
uses existing CDI specifications for nvidia devices if available on
the system.

Signed-off-by: Evan Lezar <[email protected]>
Add tests for the WithTemporary mount activation used by `ctr images mount`.
Covers bind mount and overlay scenarios to catch regressions like #12549.

Signed-off-by: Jérôme Poulin <[email protected]>
The bind mount created for temporary activations was missing the
Options field, causing mount to fail with "no such device" because
the MS_BIND flag wasn't being set.

Fixes #12549

Signed-off-by: Jérôme Poulin <[email protected]>
.github: skip 5 critest cases for window-2022
Bumps [github.com/opencontainers/selinux](https://github.com/opencontainers/selinux) from 1.12.0 to 1.13.1.
- [Release notes](https://github.com/opencontainers/selinux/releases)
- [Commits](opencontainers/selinux@v1.12.0...v1.13.1)

---
updated-dependencies:
- dependency-name: github.com/opencontainers/selinux
  dependency-version: 1.13.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Signed-off-by: Akihiro Suda <[email protected]>
bump containerd/cgroups to fix hugetlb.events parse errors

Signed-off-by: Akhil Mohan <[email protected]>
Skip processing early if we get a nil adjustment from NRI.

Signed-off-by: Krisztian Litkey <[email protected]>
ci(release): set GO_VERSION in Dockerfile
…ithub/codeql-action-4.31.5

build(deps): bump github/codeql-action from 4.31.3 to 4.31.5
Bumps [actions/checkout](https://github.com/actions/checkout) from 5.0.1 to 6.0.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@93cb6ef...1af3b93)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
…ctions/checkout-6.0.0

build(deps): bump actions/checkout from 5.0.1 to 6.0.0
…b.com/opencontainers/selinux-1.13.1

build(deps): bump github.com/opencontainers/selinux from 1.12.0 to 1.13.1
Avoid using redundant loop devices to run mkfs for mount manager tests.
Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.43.0 to 0.45.0.
- [Commits](golang/crypto@v0.43.0...v0.45.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-version: 0.45.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>
v1.4.0 is the first release of the 1.4 release branch which is now
encouraged by the maintainers.

This update includes a fix for a regression introduced in CVE-2025-52881
mitigation patches where the `mode=` argument was incorrectly applied to
tmpfs mounts regardless of whether the target path existed.

Signed-off-by: Paweł Gronowski <[email protected]>
The otelgrpc.UnaryClientInterceptor and otelgrpc.StreamClientInterceptor
options were deprecated and removed in favor of NewClientHandler.

Signed-off-by: Sebastiaan van Stijn <[email protected]>
runc: Update runc binary to v1.4.0
…g.org/x/crypto-0.45.0

build(deps): bump golang.org/x/crypto from 0.43.0 to 0.45.0
core/runtime/v2: remove uses of otelgrpc.UnaryClientInterceptor
Map ctr --gpus requests to NVIDIA CDI device requests
Bumps [github.com/klauspost/compress](https://github.com/klauspost/compress) from 1.18.1 to 1.18.2.
- [Release notes](https://github.com/klauspost/compress/releases)
- [Commits](klauspost/compress@v1.18.1...v1.18.2)

---
updated-dependencies:
- dependency-name: github.com/klauspost/compress
  dependency-version: 1.18.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps [softprops/action-gh-release](https://github.com/softprops/action-gh-release) from 2.4.2 to 2.5.0.
- [Release notes](https://github.com/softprops/action-gh-release/releases)
- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md)
- [Commits](softprops/action-gh-release@5be0e66...a06a81a)

---
updated-dependencies:
- dependency-name: softprops/action-gh-release
  dependency-version: 2.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.31.5 to 4.31.6.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@fdbfb4d...fe4161a)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.31.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
…ithub/codeql-action-4.31.6

build(deps): bump github/codeql-action from 4.31.5 to 4.31.6
fuweid and others added 30 commits January 21, 2026 15:21
erofs-differ: use same UUID append style in tar index mode as tar conversion mode
Signed-off-by: Adrien Delorme <[email protected]>
The CRI ImageId field was added in kubernetes/kubernetes#123508 to provide a unique image identifier on the node, separate from ImageRef which contains the manifest list digest for multi-arch images.

Previously, ImageId was not populated, leaving it empty in the CRI response. This change populates ImageId with the platform-specific image config digest (stored in container.ImageRef during container creation).

The ImageRef field continues to return the manifest list digest for backwards compatibility.

Signed-off-by: Avinesh Singh <[email protected]>
Fix go mod replace and sync with latest api changes
buf will generate the protobuf text file which can be used for viewing
all protobuf changes in one file and quickly diffing changes.

Signed-off-by: Derek McGowan <[email protected]>
Generate api/next.txtpb and name module
…cri-field

cri: populate ImageId field in container status
.github: re-enable windows image pull/list tests
Signed-off-by: Akihiro Suda <[email protected]>
Change the mkfs.erofs command logging to Debug level in both
ConvertTarErofs and GenerateTarIndexAndAppendTar. This keeps
Info level quiet as intended per project conventions while
still making the commands visible for debugging.

Signed-off-by: Aadhar Agarwal <[email protected]>
…ogs-fix

erofs: Log mkfs command at Debug level
…no-such-device

Fix ctr image mount failing with no such device
Signed-off-by: Akhil Mohan <[email protected]>
image volume e2e tests in k/k uses containerd version
to trigger tests for some features. ref: https://github.com/kubernetes/kubernetes/blob/bfafa32d90958a8fe7a2ce09ed553fdfef4edd98/test/e2e_node/image_volume.go#L64

The current CI builds have only the SHA as the version since
the tags are not present. setting fetch-depth makes sure the tags
are present and will be used while testing.

Signed-off-by: Akhil Mohan <[email protected]>
ci: set fetch-depth for containerd to 0 for version parsing
The Fedora mirror can be flaky, causing 'Connection reset by peer'
errors during the Vagrant box download. This change downloads the
box file using curl with retry options before adding it to Vagrant:

- --retry 5: Retry up to 5 times on transient failures
- --retry-delay 5: Wait 5 seconds between retries
- --retry-all-errors: Retry on all errors including connection resets
- --connect-timeout 30: Fail if can't connect within 30 seconds
- --max-time 600: 10 minute max for the entire download

Signed-off-by: Aadhar Agarwal <[email protected]>
Bumps [github.com/coreos/go-systemd/v22](https://github.com/coreos/go-systemd) from 22.6.0 to 22.7.0.
- [Release notes](https://github.com/coreos/go-systemd/releases)
- [Commits](coreos/go-systemd@v22.6.0...v22.7.0)

---
updated-dependencies:
- dependency-name: github.com/coreos/go-systemd/v22
  dependency-version: 22.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
…integration

ci: add retry logic for Fedora Vagrant box download
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.31.10 to 4.32.1.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@cdefb33...6bc82e0)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.32.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps [actions/cache](https://github.com/actions/cache) from 5.0.2 to 5.0.3.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](actions/cache@8b402f5...cdf6c1f)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-version: 5.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
…s-container-host-user

pkg/sys: Create user namespace as the container's initial user namesp…
…b.com/coreos/go-systemd/v22-22.7.0

build(deps): bump github.com/coreos/go-systemd/v22 from 22.6.0 to 22.7.0
…ctions/cache-5.0.3

build(deps): bump actions/cache from 5.0.2 to 5.0.3
…ithub/codeql-action-4.32.1

build(deps): bump github/codeql-action from 4.31.10 to 4.32.1
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.