containerd 1.1.0 Welcome to the v1.1.0 release of containerd! `containerd` provides a daemon for managing running containers. 1.1 is the second major release for `containerd` with added support for CRI, the Kubernetes [Container Runtime Interface](https://github.com/kubernetes/community/blob/master/contributors/devel/container-runtime-interface.md). CRI is a new plugin which allows connecting the containerd daemon directly to a Kubernetes kubelet to be used as the container runtime. The CRI GRPC interface listens on the same socket as the containerd GRPC interface and runs in the same process. In addition to all of the stability and bug fixes backported to 1.0, 1.1 includes... - CRI plugin - ZFS, AUFS, and native snapshotter - Improvements to the `ctr` tool - Better support for multiple platforms - Cross namespace content sharing - Better mount cleanup - Support for disabling plugins - TCP debug address for remote debugging - Update to Go 1.10 - Improvements to the garbage collector CRI Plugin This release of `cri` is a native plugin of `containerd`. It is built into `containerd` v1.1 and CRI services are enabled by default. You can now use Kubernetes, with `containerd` directly, without having to use the intermediate `cri-containerd` daemon. The `cri-containerd` daemon is end-of-life. *Note: Please [drain your node](https://kubernetes.io/docs/tasks/administer-cluster/safely-drain-node/) before upgrading from older versions of `cri-containerd` to `containerd` v1.1.* You can [use a containerd config file to configure the `cri` plugin](https://github.com/containerd/cri/blob/v1.0/docs/config.md). Untrusted Workload Runtime To run an untrusted pod on a runtime for untrusted workload, such as [Kata Containers](https://katacontainers.io/) or [Clear Containers](https://clearlinux.org/containers), you can: 1. Configure a runtime for untrusted workload [with the config option `plugins.cri.containerd.untrusted_workload_runtime`](https://github.com/containerd/cri/blob/v1.0.0/docs/config.md). 2. Create an untrusted pod by setting the annotation `io.kubernetes.cri.untrusted-workload` to `"true"`, for example: ```yaml apiVersion: v1 kind: Pod metadata: name: nginx annotations: io.kubernetes.cri.untrusted-workload: "true" spec: containers: - name: nginx image: nginx ``` By default, `cri` will run pods with the default runtime. However, if a pod has the `io.kubernetes.cri.untrusted-workload` annotation, the `cri` plugin will run the pod with the runtime for untrusted workloads. Unless configured otherwise, the default runtime is set to [runc](https://github.com/opencontainers/runc). Container Runtime Interface v1alpha2 The supported CRI (Container Runtime Interface) version for Kubernetes v1.10 is now `v1alpha2.` This release of `containerd/cri` has been updated to use CRI `v1alpha2`, so **it only works with Kubernetes v1.10+.** New CRI features added in `v1alpha2` are all supported: * Container log rotation: Kubelet rotates container logs. * Shared pid namespace: Support sharing pid namespace inside a pod. Registry Mirror You can now setup registry configurations with the config option `plugins.cri.registry`. Currently only the `mirrors` option is supported. With it, you can specify registry mirrors and secure/insecure connections. ([doc](https://github.com/containerd/cri/blob/v1.0.0/docs/registry.md)) End-To-End Test In terms of testing, we've passed: * ALL CRI validation tests * ALL node e2e tests * ALL e2e tests The containerd test coverage on GCE is equivalent with Docker now. All the test results are public: https://k8s-testgrid.appspot.com/sig-node-containerd. Performance We significantly improved pod start latency and cpu/memory usage of `cri` plugin this release. The continuous benchmark result is published on http://node-perf-dash.k8s.io/. Job `ci-kubernetes-node-kubelet-benchmark` is for Docker 17.03, and `ci-cri-containerd-node-e2e-benchmark` is for containerd with `cri` plugin. All metrics of containerd are either better or comparable with Docker 17.03. Try It Out If you would like to try containerd, please download the binaries included on this release. If you are using Docker, this version of containerd will be used in the next major release of Docker. To set up containerd with Kubernetes... * For a production quality cluster on GCE brought up with `kube-up.sh`, see [here](https://github.com/containerd/cri/blob/v1.0.0/docs/kube-up.md). * For a multi-node cluster installer and bring up steps using ansible and kubeadm, see [here](https://github.com/containerd/cri/blob/v1.0.0/contrib/ansible/README.md). * For creating a cluster from scratch on Google Cloud, see [Kubernetes the Hard Way](https://github.com/kelseyhightower/kubernetes-the-hard-way). * For a custom installation from release tarball, see [here](https://github.com/containerd/cri/blob/v1.0.0/docs/installation.md). * To install using LinuxKit on a local VM, see [here](https://github.com/linuxkit/linuxkit/tree/master/projects/kubernetes). Support The [_support horizon_](https://github.com/containerd/containerd/blob/master/RELEASES.md#support-horizon) for containerd has been updated to include the 1.1 release. With the addition of the CRI plugin, we are expanding the support horizon for 1.1 to include the entire lifespan of Kubernetes 1.10. The containerd 1.1 release train will be considered an active branch with new patches until April 23, 2019 at the earliest, when 1.2 is released, or until Kubernetes 1.10 reaches end of life. The 1.1 containerd API is completely compatible with 1.0, any client using 1.0 can safely upgrade to 1.1 without any incompatibilies. The CRI interface included with the CRI plugin is only supported for Kubernetes 1.10. The CRI interface is still considered alpha and will only be supported for Kubernetes 1.10. The CRI plugin in containerd 1.1 will also only be supported for Kubernetes 1.10. Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. Contributors - Lantao Liu - Michael Crosby - Mike Brown - Phil Estes - Stephen J Day - Derek McGowan - Abhinandan Prativadi - Yanqiang Miao - Daniel Nephin - yanxuean - Akihiro Suda - Kenfe-Mickaël Laventure - Ian Campbell - Darren Stahl - yason - Kunal Kushwaha - Jess Valarezo - Brian Goff - Wei Chen - Sebastiaan van Stijn - Luke Chen - Jose Carlos Venegas Munoz - Hao Zhang - Christopher Jones - Xianglin Gao - Lucas Molas - Chris Aniszczyk - Justin Cormack - Christopher M. Luciano - mozhuli - Mohammad Asif Siddiqui - Micheal Waltz - Edgar Lee - Aaron Crickenberger - Yu-Ju Hong - Yongkun Anfernee Gui - YaoZengzeng - Wei Wei - weekface - Trevor Porter - Tom Godkin - Sarah Novotny - Ruediger Maass - Robin Winkelewski - Paul Knopf - Nitesh Konkar - Nikhita Raghunath - mozhulee - Michael Hamrah - Malepati Bala Siva Sai Akhil - Li Yi - Kir Kolyshkin - Jess Frazelle - Jamie Zhuang - Eli Uriegas - Dan Kohn - Daniel, Dao Quang Minh - Cody Roseborough - Christy Perez - Antoine Huret Changes since v1.0.0 * 209a7fc3e4 Merge pull request #2302 from dmcgowan/prepare-1.1 * 1155371c7a Prepare 1.1.0 release * d8aef117f9 Merge pull request #2304 from Random-Liu/update-cri * 9c9abec21c Update cri plugin to v1.0.0. * 321c52a0bc Merge pull request #2303 from juliengk/ctr_tasks_list * 9d247718d7 Update ctr tasks list usage for quiet flag * 1381f8fddc Merge pull request #2301 from HusterWan/zr/fix-misspell * 7fd6d5e2be fix words misspell * 2ac13a8757 Merge pull request #2300 from dmcgowan/remove-content-helper-defers * 3a6825e1a0 content: remove unnecessary defer in helpers * 0a978d0b82 Merge pull request #2296 from tophj-ibm/cleanup-loopback-devices * f1639bca4b testing: cleanup loopback devices on test skip * e9114e3257 Merge pull request #2294 from fermayo/fix-cli-help * 0a26b0fe43 ctr: fix --mount help message * f630d5f0a6 Merge pull request #2292 from dmcgowan/prepare-1.1.0-rc.2 * dc47f11963 Prepare 1.1.0-rc.2 * 35f0ff957d Merge pull request #2291 from dmcgowan/release-dependencies-changelog * 764d764f09 Merge pull request #2286 from dmcgowan/multiple-snapshot-links * 6c01529057 Clean up dependency output * e03eafa102 Merge pull request #2290 from Random-Liu/update-cri-plugin * 6da553e112 Update `cri` plugin to v1.0.0-rc.2. * f5e3e67dad gc: add support for multiple snapshot labels * 7f053943ca Merge pull request #2186 from stevvooe/update-grpc-110 * b1d2f1df1c Merge pull request #2283 from crosbymichael/image * d2c1b6a54e Merge pull request #2282 from crosbymichael/close * 367666091b Add NewImage to return a client Image impl * c47cbe7b57 Only close if conn exists * 9c238a64e9 Merge pull request #2281 from stevvooe/update-11-api * b5cbe7b590 vendor: update grpc to 1.10.1 * cf9986e865 api: update API capture for 1.1 release * 076cf7f16e Merge pull request #2278 from stevvooe/remove-google-rpc * 7610d9490e Merge pull request #2279 from estesp/update-gover-travis * b28aa0e071 Merge pull request #2276 from stevvooe/protect-the-token * 27a14f1a9d remotes/docker: protect secret with a mutex * 37765fbde5 Track Go 1.10 point releases in travis * caac3bca3e protobuf: remove generated google/rpc files * f1cea3fa7a Merge pull request #2277 from crosbymichael/update-validation * 9af8d56cdd Allow image and snapshotkey to be updated * 2bc17ef2cb Merge pull request #2275 from dmcgowan/prepare-1.1.0-rc.1 * dabc22f47c Prepare 1.1.0-rc.1 * 49139695aa Merge pull request #2274 from estesp/debug-travis * b769cce904 Fix tests using invalid ID * ad2548adb4 Merge pull request #2270 from Random-Liu/update-cri-plugin * 45407846f3 Test whether use of `exit` is hiding errors * 9d9d1bc13c Merge pull request #2269 from justincormack/WithPrivileged * 6c02c5cf0a Merge pull request #2272 from dmcgowan/fix-platform-pull-test * 9f3db59e0a Update multiplatform pull test * 903191072e Add --privileged option to ctr run * 062c3a00ef Add a WithPrivileged OCI constructor and the options needed to build it * 89d74986cc Update `cri` plugin to v1.0.0-rc.1. * d1b3ea4061 Merge pull request #2268 from justincormack/init-null-spec * 417c923d65 Merge pull request #2266 from eirinikos/update-license * 0ee2f35e43 Consistently add empty types where they are nil in spec * 8c2acf45fb Merge pull request #2265 from stevvooe/lockdown-api * c0c92f6b34 Edit Containerd license info so GitHub recognizes it * ebd96a19d3 api: lock down api for 1.1 release * 04efcc83a2 Merge pull request #2261 from AkihiroSuda/native-snapshotter * 83e35b3d3a enable native (formerly naive) snapshotter by default * bf5112e8ec Merge pull request #2259 from Random-Liu/cleanup-with-user * 1a9f9e65b9 Merge pull request #2258 from mlaventure/fix-stupid-typo * 00b600a605 Improve WithUser comments and code style. * c0f7fcd910 Merge pull request #2257 from Random-Liu/add-with-user * 81feacd393 Fix typo in CreateUnixSocket error message * 45b0045593 Add oci.WithUser helper function. * 84a7b9c115 Merge pull request #2255 from mlaventure/unix-socket-toolong-error-msg * 3c3a676490 Return a better error message is unix socket path is too long. * 606be14859 Merge pull request #2238 from tklauser/runc-libapparmor-dep * ac5432a06b Merge pull request #2253 from stevvooe/report-zfs-correctly * 7722db0bc5 Merge pull request #2251 from stevvooe/report-aufs-correctly * ca4ccf4afc vendor: update zfs dependency * bea2304ca4 vendor: update aufs dependency * cbfc9223a9 Merge pull request #2241 from justincormack/ambient_seccomp * def3069a67 Merge pull request #2245 from darrenstahlmsft/CloseFail * a74903a307 Drop libapparmor dependency from runc build docs * 84f6fce240 Make hcsshim layerwriter close a fatal error * 9435aeeb30 The set of bounding capabilities is the largest group * 79963209f6 Merge pull request #2239 from estesp/fix-test-typeurl * dd1085c922 Fix typo in metadata test typeurl string * fec0a1ba89 Merge pull request #2237 from dmcgowan/fix-pull-uncompressed-label * bfa7e59cba Merge pull request #2236 from dmcgowan/update-releases-md * d608e3d9dc Fix label being put on snapshot instead of content * e0424e2c76 Add CRI API to releases file * 7833fb49fd Merge pull request #2225 from dmcgowan/prepare-1.1.0-rc0 * 92198a60c5 Prepare 1.1.0-rc.0 release * ea37521fda Merge pull request #2233 from Random-Liu/update-cri * 74e45c0392 Update cri validation test version. * 8958b489ba Update to cri v1.0.0-rc.0 * 2aa2aecbb3 Merge pull request #2229 from stevvooe/timeout-fifo-creation * ad6d02b881 Merge pull request #2221 from AkihiroSuda/content-small-blob * a76f230984 content/testsuite: include small blob test in standard suite * a0c1abba47 Merge pull request #2228 from stevvooe/allow-configuration-msg-size * acc71293c5 server: allow configuration default send/recv message sizes * 9754696ff5 linux/prox: timeout fifo creation * 8a7e17ef96 Merge pull request #2227 from stevvooe/include-aufs-default * ab8e05ac50 cmd/containerd: include aufs by default * 3e8e9d3ed7 Merge pull request #2223 from dmcgowan/with-lease-context * 7b323b1402 services/content: fix reading a blob which is smaller than the read buffer. * 382b313c51 Merge pull request #2222 from ijc/ignore-sockets-in-archiver * 43d0a5cb60 Pass in context to lease done function in client * 07dfb0368a Merge pull request #2220 from stevvooe/redundant-pkg-name * 804249cdcf Merge pull request #2214 from miaoyq/fixes-config-bug * 9b111bdc39 Add ignore socket test * 903ee88368 cmd/ctr/app: remove redundant package name * 2ec3382d2d Ignore sockets when creating a tar stream of a layer * 9304193b8c Merge pull request #2219 from dmcgowan/fix-lock-on-schema1-configs * 5304ef294b Add writer open helper to handle unavailable refs * d465f858a0 Fixes a default config bug of gc scheduler * 4c8bbb55b7 Merge pull request #2216 from crosbymichael/task-id * 9b9a0ac8ad Add task.ID() API * f5d7bfb56e Merge pull request #2213 from crosbymichael/runc * 3c1ef1a714 Merge pull request #2212 from dmcgowan/fix-overlay-cleanup-race * f117459c35 Bump runc to 69663f0bd4b60df09991c08812a60108003fa * ee84187a6a Merge pull request #2096 from stevvooe/include-zfs-by-default * a0b818e093 Merge pull request #2200 from jessvalarezo/multiarch-pulls * 94cf25f7db overlay: fix cleanup directory deletion race * f4113a903a containerd: include zfs plugin by default * b307df2723 Merge pull request #2207 from jessvalarezo/ctr-task-d-update * 1a930e502b Merge pull request #2175 from Random-Liu/plugin-cri-cli * 8fc382cba3 Merge pull request #2208 from jessvalarezo/windows-runtime-platform * ea6a10c412 Add cri subcommand and add ctr/command package * 9460f94c10 Update containerd/cri to 0c876040681ebe8a291fa2cebefdcc2796fa3fc8 * 54a46068a1 windows: define platform in runtime plugin init * e343006b8f ctr: allow for force kill when deleting task process * 6b0109942f Merge pull request #2206 from stevvooe/images-alias * 220a479292 Merge pull request #1833 from dmcgowan/snapshot-gc-3rd-phase * ae11d8c64b cmd/ctr/images: add `i` alias for images command * c3cf3d7822 allow content to be pulled for specific platform(s), all platforms * b3b95c0a2a Merge pull request #2154 from dmcgowan/shared-content-ingests * 3013762fc5 Merge pull request #2203 from Random-Liu/support-in-process-integration * 23ccbdd64f Merge pull request #2159 from AkihiroSuda/check-overlay * 1128b3d664 Add service plugin and support in process integration. * ba93435337 Temporary cri-containerd change * edf7f410fb Merge pull request #2199 from estesp/vndr-cgroups-fix-licenses * e38b2bbc3f Update cgroups vendor for license headers/bug fix * 44524909d1 Merge pull request #2197 from crosbymichael/deps * 179382028a Update containerd deps * 544717986d Merge pull request #2192 from kunalkushwaha/update-readme-ltag * 224ecf0d71 Adds note about applying license header * 856ea51c8b Merge pull request #2182 from AkihiroSuda/shimtest * 77a5804f6a Merge pull request #2178 from kunalkushwaha/file-header-ci-check * 5368984859 Merge pull request #2160 from ijc/ctr-run-unpack * db1630d0bb Merge pull request #2190 from stevvooe/vendor-update-btrfs * 23751c9ced vendor: update btrfs dependency * d086e56255 Merge pull request #2187 from crosbymichael/sigpipe * 1eabab31aa Handle SIGPIPE in shims * 5cc915c26c overlay: add Supported() checker * f040e6ab59 CI check for file-header added file-header check using github.com/kunalkushwaha/ltag * 2b6b99b4a1 Merge pull request #2184 from kunalkushwaha/oci-error * a1b511fb80 Merge pull request #2177 from crosbymichael/file-io * 142ecddd0d Merge pull request #2180 from AkihiroSuda/fix-ctr-c-create-unix * 05513284e7 ctr: add UNIX-specific flags to `ctr c create` * 125fdeff8a linux: fix runtime-root propagation * 6ed4e9e106 better image config parse error. compatible oci runtime version printed with parse error * 3491b9ea4a Copyright header added * e6a3dd3550 Merge pull request #2171 from ruediger-maass/resolver401 * fd6335f74d Merge pull request #2163 from AkihiroSuda/userns-mknod * c553882adc Refactor shim to support file logging * 949ddbabb5 Merge pull request #2168 from estesp/update-go-vers * b3a4e63c69 Merge pull request #2173 from AkihiroSuda/fix-shim-runtime-root * faf2781dd2 linux: propagate --runtime-root to shim properly * 373f1e5612 Adds handling of 401 for POST /v2/token without authentication * 6aa612dfc2 Update recommended versions to Go 1.10 * f334749967 Merge pull request #2165 from jessvalarezo/platforms-parse * c3971b187f Merge pull request #2164 from crosbymichael/density * ac8008437a update platforms Parse to return platform spec, decouple matcher * a2ef6952f2 Add density stress test * fd2e1f6dec Merge pull request #2162 from stevvooe/use-go1.10 * fffc111ba8 archive: fix logic for skipping mknod when running in userns * 25c403415a Merge pull request #2151 from Random-Liu/fix-load-task * 9cdd036393 build: bump to Go 1.10 * 4ac4fd0b6a Close io after task deletion to avoid race condition. * 0273e970a4 Merge pull request #2161 from IRCody/cio_panic * 0b86dfbc83 Merge pull request #2156 from Random-Liu/update-cri-containerd * 4c903c356b Update critools and run critest in parallel. * 4c5ebfee96 Fix panics in cio/io_unix.go * f48cc7d7fe ctr: unpack the image on run if necessary * ad04781e3e Update cri-containerd to 5bd99af7dbfc887d2c62af3949c8d01424c43f78 * 5bd99af7db Merge pull request #2097 from Random-Liu/vendor-cri-plugin * a1a67899f8 Shared content across namespaces * b3aeba7062 Allow test runners to wrap contexts * 9463fcbbe7 Merge pull request #2152 from cpuguy83/remove_useless_log * c520ac5f87 Remove erroneous log message * 3b4fcf771a Merge pull request #2112 from crosbymichael/temp-mounts * fc87dce767 Merge pull request #2149 from crosbymichael/reconnect * 7b653dc9ed Add client.Reconnect API * 255ad41cfc Merge pull request #2008 from thaJeztah/bump-golang-to-1.10 * b17bcb7284 Regenerate protos with Go 1.10, and make check conditional * 931000c041 Bump to Go 1.10 * 916cdb41a1 Merge pull request #2147 from darrenstahlmsft/RemoveServicing * 56ebee8368 Merge pull request #2146 from crosbymichael/pid-file * 243467aa96 Removing Windows servicing containers * d3a8055e2d Add --pid-file to `ctr` * 129167132c Merge pull request #2108 from kunalkushwaha/license-header * 5a86e83d83 Merge pull request #2142 from seemethere/update_continuity * b12c3215a0 Licence header added * 735114f500 Update continuity vendor to d8fb85 * fa91b905e9 Update vendors. * 809a99a39e Vendor cri plugin and add critest * 6a50dca196 Merge pull request #2141 from estesp/with-linuxns * e4e53bf486 Add --with-ns flag to ctr run/create * ea58933dbc Merge pull request #2132 from tophj-ibm/lower-mkfs-size * 1392ad2b54 Merge pull request #2139 from estesp/godoc-typo * 849fed09e3 Merge pull request #2137 from tophj-ibm/bump-go-version * 8043f26651 [contrib] bump golang * 18be82118d Clean up client Subscribe docs; remove a typo * 6e3701141b [testing] use smaller filesize on 4KB pagesize systems * aa82d17d1d Merge pull request #2079 from estesp/man-pages * 8f183b5ee9 Add basic manpages for ctr, containerd, containerd-config * b2ec177bb2 Call temp mounts and unmount in containerd server * bc974a7a32 Create temp mount location manager * 002cabade8 Merge pull request #2131 from AkihiroSuda/split-pkg-cmd-containerd-2 * d7280ce2fb cmd/containerd: split package for cli.App * af593cf5ab Merge pull request #2130 from justincormack/environmnet * eab5d87af1 Fix typo in variable name * dd920d99c8 Merge pull request #2125 from estesp/website-update * efb813f18b Merge pull request #2126 from dmcgowan/fix-2119 * a929f9c746 Add further updates for website refresh * ca3eb742fd Update continuity vendor * 2a2c8aafba Add test for consecutive directory removal * 43b655b557 Link Docker release notes for containerd version * 38ef0b6d3c Updates to containerd.io index page * 7022a19a4c Merge pull request #2024 from dnephin/replace-testify * 2cd6b83b9b Merge pull request #2123 from BooleanCat/master * 3279acca82 Check timestamps in snapshot storage test suite * 37aa41b164 Cleanup after migration * ef48a0268e Migrate to gotestyourself/assert * 1719a6e17a Vendor gotestyourself * 19e9e1642a Fix typo in docs * 5471ba9445 Merge pull request #2117 from dmcgowan/update-fetch-handlers * 944a9ade37 Update fetch handling * d3a7a92d30 Merge pull request #2118 from AkihiroSuda/narrower-interface * ee70879202 *: use narrower content interfaces * ee6ffdd91e Merge pull request #2116 from crosbymichael/bump-runc * 57011c5b89 Merge pull request #2114 from crosbymichael/stress-errors * 5ae204ff65 Merge pull request #2115 from justincormack/fallthrough * 73837b11db Update runc to a618ab5a0186905949ee463dbb762c3d23e * 35be3d5127 Remove a really confusing fallthrough * 80e6bbfc5d Merge pull request #2113 from cpuguy83/use_continuity_copy * e68bdbe9d9 Capture more error locations during stress tests * c776b6d8d9 Use continuity fs package * f12ba2407e Merge pull request #2111 from Random-Liu/fix-trace-level * 85a66da055 Merge pull request #2105 from Random-Liu/support-disable-plugins * f2c585a59a Fix trace level support. * eee592c3ac Support disable plugins. * 424c0fb59d Merge pull request #2075 from hinshun/converter-mediatypes * 0d9995e6e2 Merge pull request #2109 from crosbymichael/onclose * 95d4f53fbe Delete task on dead shim * e92c913ea5 Merge pull request #2106 from Random-Liu/add-trace-level-support * 87d15a5ffc Set OnClose shim function * 9745a4d448 Update ttrpc to d4528379866b0ce7e9d71f3eb96f0582fc * 050ff32dea Support trace level. * aa49e704e2 Merge pull request #2095 from dmcgowan/fix-whiteout-parent-directories * 1a4f609526 Merge pull request #2098 from dankohn/master * 48d27e4e74 Change name of LICENSE * ae3c72c853 Merge pull request #2099 from tkporter/master * 78bd07afef Merge pull request #1746 from AkihiroSuda/split-differ-interface * 13733b6a65 Merge pull request #2100 from kunalkushwaha/testsuite-typo-fix * 549ec7b9dd Merge pull request #2091 from crosbymichael/shim-size * 1d6047aa71 Testcase name corrected * d994d08664 Add time type conversion for 32bit Unix platforms * d778dd15d8 Fixes missing whiteout parent directories * 83cf371556 Merge pull request #2090 from AkihiroSuda/remove-wtf * 254807da5b Merge pull request #2092 from dnephin/fix-vendor-validation * 2125d8efc3 Fix vendor validation * 8ee29a17e6 Bump gc threshold to 40% * 36a2deb029 vendor: update BurntSushi/toml for MIT license * 44f6bc40d4 Merge pull request #2088 from stevvooe/update-toml * 85678e1885 vendor: update BurntSushi/toml for MIT license * 1fd2b5783a Add overlay options for making cleanup asynchronous * db78450e8b Remove grpclogger from log package * ea00fc793b Remove protobuf for mount in shim * ba61af665d Merge pull request #2086 from crosbymichael/bump-cgroups * 5915c9ab5e Bump cgroups to c0710c92e8b3a44681d1321dcfd1360fc5 * 7e1d8aafee Merge pull request #1957 from tophj-ibm/check-for-mounts-tests * 34e24997b2 Merge pull request #2081 from crosbymichael/debug * ec14a97f6f Merge pull request #2080 from crosbymichael/metrics * 6570c97942 Merge pull request #2084 from Random-Liu/simplify-mount-lookup * 1f5587247b Merge pull request #2082 from hinshun/refactor-client-push * d0779a6145 Simplify mount.Lookup. * e53cdc9a49 Refactor client push into helper function * d2f073c6f5 Add converter options to convert schema1 manifest to docker schema2 manifest * 55aa0b415b Don't enable debug endpoints in default config * 98b53e0dd3 Allow tcp debug address * 7615153271 Update prometheus client and go-metrics * fc1913a5a6 Add capability to build manpages from markdown * 14d402e289 Add overlay cleanup * f65cdc18a7 Use protobuf and runc setup scripts in .travis.yml * a8c5ff57e5 Cleanup loop devices after test failure * 051ac5dd63 running tests in a container * eed3b1c804 Merge pull request #2076 from stevvooe/content-testsuite-unique-seed * 3295bca5bf content/testsuite: pass context to hold lease * c517a005b5 content/testsuite: ensure unique content per test * 5f89502a24 Merge pull request #1790 from jessvalarezo/ctr-c-create * 0c07626faf Merge pull request #2073 from crosbymichael/revert-json * 2f06259a84 Revert "Add github.com/json-iterator/go to vendor" * d179c61231 Revert "Use jsoniteer for faster json encoding/decoding" * c6a7d10568 Merge pull request #2065 from dmcgowan/content-discard-over-truncate * b763777288 diff: rename differ to comparer * ec15fe95aa Merge pull request #2068 from crosbymichael/json * c024da2dec Fix vendor exclude * 4233b87b89 Use jsoniteer for faster json encoding/decoding * 43a9473a53 Add github.com/json-iterator/go to vendor * c71595f6e2 Merge pull request #2067 from crosbymichael/all-caps * a12f493bd3 Update copy to discard over truncate * 02d737f967 Add resume content test cases * 4e27c4d53d Add WithAllCapabilities as spec opt * 8f75d658d7 Add syndtr/gocapability to vendor * fc63a6cc3a Merge pull request #2066 from estesp/error-no-image * d4fb0709c9 Add error return for missing params in ctr images * 2c9ce2e693 ctr: add container create, config flag for spec * b580441f91 diff: resplit Applier from Differ * b268261446 Merge pull request #2059 from stevvooe/update-go-runc * 2448ae6976 Merge pull request #2054 from dmcgowan/fix-duplicate-tar-file * 7e4403540d Merge pull request #1969 from darrenstahlmsft/WindowsSnapshotter5 * f534a20173 vendor: update go-runc to reduce gc pressure * 3fcc52b091 Merge pull request #2055 from stevvooe/aggressive-memory-shim * 9dd56e002c Merge pull request #2056 from stevvooe/reduce-channel-size * 71e9f6dac2 cmd/containerd-shim, reaper: reduce channel allocation * 0e8f08476c cmd/containerd-shim: aggressive memory reclamation * dfadd8ce75 Fix duplicate directories entries on metadata change * 8d32d9edfc Merge pull request #2052 from darrenstahlmsft/PullDenied * f404331e90 ctr: print error when pull auth fails * 95a0b3af95 Refactor checking for compressed diff type * e6280a7c82 Enable integration tests on Windows using snapshotter and differ * acf2087db9 Error on no rootfs provided * e981cc6289 Do not create new layer for View * dcff993653 Update Windows runtime to use snapshotter and differ layers * a5a9f91832 Implement Windows snapshotter and differ * 12eaf13f6f Merge pull request #2045 from Random-Liu/add-closer * d8f87a5a65 Add `Closer` in plugin. * d7efcbc083 Merge pull request #2036 from stevvooe/use-buffer-pools * ef485c80ec Merge pull request #2049 from dnephin/fix-errorf-return * 410db39d44 Merge pull request #2048 from crosbymichael/bump-runc * 1cd32fa68d Cleanup extra returns in tests * cee56a1226 Merge pull request #2047 from estesp/use-libcontainer-subreaper-api * f47f6af585 Remove unnecessary subreaper API from sys/ * 8dfbd59e60 Update runc to 9f9c96235cc97674e935002fc3d78361b69 * dc5964ccc2 Merge pull request #2037 from pauldotknopf/master * cd72819b53 archive, cio, cmd, linux: use buffer pools * 933979bd10 Merge pull request #2041 from estesp/trim-add-go-issue-link * b4c3cd7640 Add WithEnv and WithMount oci options * e78c77fd2b Add Golang issue link re: -trimpath to Makefile * e9432a7900 Merge pull request #2021 from kunalkushwaha/trimpath * 352178a56a Merge pull request #2035 from stevvooe/makefile-ordering * fe5da18f70 Makefile: ensure that `containerd-shim` gets added when installing * e5740ca612 Merge pull request #2007 from AkihiroSuda/cio-fifo-path * 4812f4be8f Merge pull request #2030 from Random-Liu/print-plugin-default-config * ad4f265497 trim code path in stack trace. * d5aa7655e2 Merge pull request #2032 from crosbymichael/stress-exec * 3d6fe5ad18 Print default plugin config. * 94602aea63 Add execs to stress tests * 823d3398ea Merge pull request #2023 from crosbymichael/exec-state * 2a730264aa Add Exec to process states * ba84c5fb38 Merge pull request #2019 from stevvooe/remove-log-modules * 5cab90d270 log: remove log "module" system * e1321c51a6 Merge pull request #2022 from denverdino/master * adfa9a2402 Fix NPE in dialer * 507a149488 cio: add WithFIFODir opt * acc6011ac1 Merge pull request #1960 from dmcgowan/images-removal-dirty * 80fc1f2d07 Merge pull request #2011 from darrenstahlmsft/ResolveErrors * 1338a4f022 Provide better error context on resolve failures * 8c4219dd77 Merge pull request #2014 from crosbymichael/issue-template * bd8ab7944d Add github issue template * aaf930eaf9 Merge pull request #2009 from crosbymichael/user-path * 901a906663 Merge pull request #2012 from darrenstahlmsft/HostVersion * baa5c8c13b Print host version in appveyor setup steps * 1f5ce14a82 Support getting uid/gid from rootfs path * 5b042945b0 Refactor get uid/gid from path * bbb5b2f15e Merge pull request #2001 from dmcgowan/fix-whiteout-rootpath * 384d46d8bd archive: check whiteout path before removal * d3292d9d2a Merge pull request #2002 from cpuguy83/fs_check_target_stat * 4a6e2975cf Merge pull request #1994 from AkihiroSuda/fix-user * 1645d8406d oci: simplify WithImageConfig * b99dc56817 oci: add TODO comments * 369d7c9545 oci: fix err variable scope * e0f8fb47bb copyFileInfo: do not err on chown if uid/gid match * 1167035be3 ctr: promote cOpts over opts, as oci.WithImageConfig requires snapshot * 90553efdef Merge pull request #1989 from crosbymichael/reaper * bf0236b457 Merge pull request #1991 from dnephin/fix-progress-panic * 0b449a4a51 Merge pull request #1982 from stevvooe/deletion-race-handling * c80ca4f4a2 services/tasks, linux: ignore shutdown tasks * 8db626e6ea Dont clear lines if the console width is unavailable * c4b1684528 Use a default width of 80 * 9f5182f394 Remove reaper from containerd daemon * c602b85f80 Merge pull request #1987 from schomatis/revert-1937-add-native-build-i-option * 5fd9904684 Revert "Add go build option '-i' only for native builds" * 45fbc3b3c2 Merge pull request #1975 from dnephin/add-unconvert-linter * 787e1a2b69 Merge pull request #1970 from dmcgowan/lease-add-on-writer * 723196b268 Merge pull request #1981 from stevvooe/update-ttrpc-closed * 87cb12de32 vendor: update ttrpc for shutdown fix * 29ddd3d5fb Merge pull request #1931 from dmcgowan/tar-diff-include-parent-dirs * 184bc25629 Add unconvert linter * 0d8b093361 metadata: add content lease on existing content * 50a6c62492 Merge pull request #1977 from dnephin/add-vendor-validation * 315084fa15 Add a vendor check to CI * b5204b77cd Merge pull request #1978 from mlaventure/ctr-no-pivot-root * 2fb85c6f01 Merge pull request #1979 from crosbymichael/badge * 0cc79a6ff6 Add no-pivot flag to ctr * f6f0e258f6 Add CCI badge for containerd * b509e78578 Merge pull request #1976 from dnephin/move-dco-validation-out-of-makefile * ebbcececa1 Remove DCO check from makefile, move to .travis.yml * 1df6287150 Merge pull request #1968 from dmcgowan/mount-temp-dir-error-cleanup * aa68494541 Merge pull request #1972 from weekface/master * 284860d9e3 Fix some wrong links * dfd7ee122f Clean up error logs and messages in temp mount * 632f78a530 Merge pull request #1967 from crosbymichael/grpc-timing * 89fa154efd Update metadata image store to be initialized once * 5a54862ae5 Update namespace empty check to use buckets * fd29dbe4c8 Enable grpc timing histograms * 002c0e2901 Merge pull request #1887 from yanxuean/unmount-remove * e892671e39 Merge pull request #1965 from crosbymichael/hold-state-lock * cb58bb885a solve incorrect unmount * 2b29a92a64 Hold shim lock during state * 8b6909f22f Merge pull request #1964 from stevvooe/remove-silly-makefile-stuff * 7688af6f5b Merge pull request #1963 from crosbymichael/cri-maintainers * 1c8911b1f1 Makefile: no need to calculate GOOS * ab7150f0ff Merge pull request #1959 from containerd/netlify-config * b12e5794b1 Force ruby version for docs build * c09086464e Merge pull request #1958 from crosbymichael/roadmap * 88685b0475 Update roadmap.md with issue labels and milestones * 121a0861cb Add cri-containerd reviewers * 18ed54e548 Add cri-containerd maintainers * 5b931ca703 Merge pull request #1941 from crosbymichael/reviewers * fea2c381b1 Add build config for jekyll + netlify * eeb5ea8cd4 Create CNAME * 1a0c7ee8a0 Merge pull request #1955 from containerd/fix-website * 00ad7fe408 Fix website rendering via gh-pages * a85b1f85b7 Merge pull request #1956 from dnephin/use-clockwork-for-testing-gc * 06edd193ef Small refactor of gc/scheduler to remove import of metadata * 4e755ad383 Merge pull request #1947 from jessvalarezo/ctr-snapshot-diff * 556c46d0a9 Merge pull request #1953 from jessvalarezo/diff-key-bug * 1d896a82c2 Merge pull request #1575 from Weichen81/arm-multi-arch * 5bc0c43c73 rootfs: remove upper snapshot after use * 625eb5e661 ctr: snapshots diff command * fdc9840e63 Revert "Emit unmodified change events for directories" * c9dd974c27 Add parent directories to tar * e479165a38 Merge pull request #1903 from darrenstahlmsft/ArchiveOpts * d8cf1f5120 Merge pull request #1945 from dmcgowan/nanosecond-time-and * 3fa104f843 Merge pull request #1930 from crosbymichael/proc-exists * 88d59d37fa Update nanosecond diff comparison * ab30079e1b Add @dnephin and @jessvalarezo as reviewers * 33bc250920 Add concept of a review to containerd * c6b8e57bad Only lock on map get for process state * 8e598fcb21 Check that process exists before it is returned * c07ede497d Merge pull request #1940 from schomatis/fix-io-testnewattach-race * 634a0e8008 Merge pull request #1939 from schomatis/update-getting-started-stdio * eda50b1fa6 Fix race condition in IO test (TestNewAttach) * f61f60e01e Update getting-started guide with the new stdio implementation * 3affaff67b Merge pull request #1937 from schomatis/add-native-build-i-option * 55b5e356de Added go build option '-i' only for native builds * cd05decbe2 Merge pull request #1936 from kolyshkin/netgo * cbc33018b3 ctr: Add a test file to test cpu getCpuVariant * 2517e13a5e ctr: Add Variant field to default test expected result * 3192b36ab9 ctr: Add variant to ARM's DefaultSpec string * a047abb1f6 ctr: Identify the platform.variant for ARM platforms * 4355ba2f83 ctr: Add helpers to database to check Linux and ARM arch * efc5df5773 BUILDING.md: add netgo for static build * 1a560540b9 Merge pull request #1811 from dnephin/trim-makefile * cc9216c1dd Remove go install from Makefile * a921fb65ad Merge pull request #1904 from dnephin/less-verbose-ci * 984824d489 Merge pull request #1926 from crosbymichael/ctr-help * 9bb2a6f769 Merge pull request #1900 from yanxuean/filter * 274ce69f93 Less verbose build output * 399e3c57c3 Change ctr help for mount from dest to dst * 71d1e55ca3 Merge pull request #1925 from dmcgowan/parent-directory-inclusion * d4317a1b0d Fix parent directories not included in tar * afbbe43745 Merge pull request #1895 from dnephin/refactor-cio * f33f49e30f Merge pull request #1924 from crosbymichael/fix-gauge * c195ebb3e2 Implement archive.Apply on Windows * 0b318b476a Fix gauge constant * 5956e152d5 Merge pull request #1923 from crosbymichael/stress-size * 0725b60402 Add binary sizes to stress test metrics * 00bc24fcea Merge pull request #1917 from dnephin/less-verbose-tests * 7c37625af4 Merge pull request #1914 from stevvooe/stabilize-snapshot-tree-output * 05537b0d82 Merge pull request #1922 from crosbymichael/bump-runc * a0f7bbb103 Update runc to 7f24b40cc5423969b4554ef04ba0b00e2 * fad72b6ae4 Merge pull request #1910 from crosbymichael/stress-json * 5971d369e0 Merge pull request #1916 from dnephin/fix-pull-after-failure * 10ef7f37c7 Merge pull request #1912 from clnperez/threshold-test * 49fffe8ec7 Less verbose tests * 9184908075 Fix image pull after a failure * 6ae0f5f7e2 Add error metric for stress tests * 224417aab7 add testcase for event.exchange and refactor * 9aeeefae55 cmd/ctr: stablize output of snapshot tree * f34d030178 Add unit test for cio * 1607a9e0ca check for threshold, not range * 652e078078 Add commit to stress metric * 4d55298aab Add prom timer to stress * 03bc5e974d Merge pull request #1906 from stevvooe/change-on-oom-failure * cb423f8360 Merge pull request #1907 from Random-Liu/fix-deadlock * 0eebf9051b Fix containerd deadlock. * af5d03e8e9 server: only warn on failed OOM score adjust * 7d4337e738 Reduce the number of IO constructors * c71bee7b8a Vendor go-winio * ca5f16c33e Move stress worker to new file * 9fcca96771 Add json output to stress test tool * a901091f7c Rename cio.Creation to cio.Creator * 3146019918 Refactor cio.DirectIO * f79ec5b55f Cleanup cio.FIFOSet interface * 6393165b09 Merge pull request #1894 from dnephin/cio-cancel-close * dc4533d386 Merge pull request #1901 from stevvooe/update-components * 57bf39194b RELEASES.md: update components for 1.0 release * 65665ab807 Always Cancel before Close * c2cedac2ec Merge pull request #1899 from YaoZengzeng/fix * 21c260398d add missing dependency in code example * 31dabf0c7d Merge pull request #1892 from estesp/fix-release-link * ad6e751ede Merge pull request #1891 from crosbymichael/new-panic * cf741bc51b Fix typo in release link * f78bad2cc7 Remove panic from newCommand * a6e68ca4d8 Merge pull request #1888 from thaJeztah/update-grpc * ce3e32680d Bump gRPC to v1.7.4 * 1eea02c23b Merge pull request #1886 from stevvooe/remove-hints * c98a067619 Merge pull request #1890 from thaJeztah/bump-runtime-spec-1.0.1 * 83bbb9a11a Merge pull request #1885 from stevvooe/lockdown-1.0-api * 8b1fd0875a Bump runtime-spec and image-spec to 1.0.1 * 0eec9c078a Fix missing libcontainer syscall file * ebf80ab943 remotes: remove unused hints * c5fe021d5e api: lock down 1.0 API descriptors Dependency Changes Previous release can be found at [v1.0.0](https://github.com/containerd/containerd/releases/tag/v1.0.0) * **github.com/BurntSushi/toml** v0.2.0-21-g9906417 -> a368813c5e648fee92e5f6c30e3944ff9d5e8895 * **github.com/Microsoft/go-winio** v0.4.4 -> v0.4.5 * **github.com/blang/semver** v3.1.0 **_new_** * **github.com/containerd/aufs** a7fbd554da7a9eafbe5a460a421313a9fd18d988 **_new_** * **github.com/containerd/btrfs** cc52c4dea2ce11a44e6639e561bb5c2af9ada9e3 -> 2e1aa0ddf94f91fa282b6ed87c23bf0d64911244 * **github.com/containerd/cgroups** 29da22c6171a4316169f9205ab6c49f59b5b852f -> fe281dd265766145e943a034aa41086474ea6130 * **github.com/containerd/console** 84eeaae905fa414d03e07bcd6c8d3f19e7cf180e -> cb7008ab3d8359b78c5f464cb7cf160107ad5925 * **github.com/containerd/continuity** cf279e6ac893682272b4479d4c67fd3abf878b4e -> 3e8f2ea4b190484acb976a5b378d373429639a1a * **github.com/containerd/cri** v1.0.0 **_new_** * **github.com/containerd/fifo** fbfb6a11ec671efbe94ad1c12c2e98773f19e1e6 -> 3d5202aec260678c48179c56f40e6f38a095738c * **github.com/containerd/go-cni** f2d7272f12d045b16ed924f50e91f9f9cecc55a7 **_new_** * **github.com/containerd/go-runc** ed1cbe1fc31f5fb2359d3a54b6330d1a097858b7 -> bcb223a061a3dd7de1a89c0b402a60f4dd9bd307 * **github.com/containerd/zfs** 9a0b8b8b5982014b729cd34eb7cd7a11062aa6ec **_new_** * **github.com/containernetworking/cni** v0.6.0 **_new_** * **github.com/containernetworking/plugins** v0.7.0 **_new_** * **github.com/docker/distribution** b38e5838b7b2f2ad48e06ec4b500011976080621 **_new_** * **github.com/docker/docker** 86f080cff0914e9694068ed78d503701667c4c00 **_new_** * **github.com/docker/go-metrics** 8fd5772bf1584597834c6f7961a530f06cbfbb87 -> 4ea375f7759c82740c893fc030bc37088d2ec098 * **github.com/docker/spdystream** 449fdfce4d962303d702fec724ef0ad181c92528 **_new_** * **github.com/emicklei/go-restful** ff4f55a206334ef123e4f79bbf348980da81ca46 **_new_** * **github.com/ghodss/yaml** 73d445a93680fa1a78ae23a5839bad48f32ba1ee **_new_** * **github.com/gogo/googleapis** 08a7655d27152912db7aaf4f983275eaf8d128ef **_new_** * **github.com/gogo/protobuf** v0.5 -> v1.0.0 * **github.com/golang/glog** 44145f04b68cf362d9c4df2182967c2275eaefed **_new_** * **github.com/google/go-cmp** v0.1.0 **_new_** * **github.com/google/gofuzz** 44d81051d367757e1c7c6a5a86423ece9afcf63c **_new_** * **github.com/gotestyourself/gotestyourself** 44dbf532bbf5767611f6f2a61bded572e337010a **_new_** * **github.com/hashicorp/errwrap** 7554cd9344cec97297fa6649b055a8c98c2a1e55 **_new_** * **github.com/hashicorp/go-multierror** ed905158d87462226a13fe39ddf685ea65f1c11f **_new_** * **github.com/json-iterator/go** 1.0.4 **_new_** * **github.com/mistifyio/go-zfs** 166add352731e515512690329794ee593f1aaff2 **_new_** * **github.com/opencontainers/image-spec** v1.0.0 -> v1.0.1 * **github.com/opencontainers/runc** 74a17296470088de3805e138d3d87c62e613dfc4 -> 69663f0bd4b60df09991c08812a60108003fa340 * **github.com/opencontainers/runtime-spec** v1.0.0 -> v1.0.1 * **github.com/opencontainers/runtime-tools** 6073aff4ac61897f75895123f7e24135204a404d **_new_** * **github.com/opencontainers/selinux** 4a2974bf1ee960774ffd517717f1f45325af0206 **_new_** * **github.com/pborman/uuid** c65b2f87fee37d1c7854c9164a450713c28d50cd **_new_** * **github.com/prometheus/client_golang** v0.8.0 -> f4fb1b73fb099f396a7f0036bf86aa8def4ed823 * **github.com/prometheus/client_model** fa8ad6fec33561be4280a8f0514318c79d7f6cb6 -> 99fa1f4be8e564e8a6b613da7fa6f46c9edafc6c * **github.com/prometheus/common** 195bde7883f7c39ea62b0d92ab7359b5327065cb -> 89604d197083d4781071d3c65855d24ecfb0a563 * **github.com/prometheus/procfs** fcdb11ccb4389efb1b210b7ffb623ab71c5fdd60 -> cb4147076ac75738c9a7d279075a253c0cc5acbd * **github.com/seccomp/libseccomp-golang** 32f571b70023028bd57d9288c20efbcb237f3ce0 **_new_** * **github.com/spf13/pflag** v1.0.0 **_new_** * **github.com/stevvooe/ttrpc** 76e68349ad9ab4d03d764c713826d31216715e4f -> d4528379866b0ce7e9d71f3eb96f0582fc374577 * **github.com/syndtr/gocapability** db04d3cc01c8b54962a58ec7e491717d06cfcc16 **_new_** * **github.com/tchap/go-patricia** 5ad6cdb7538b0097d5598c7e57f0a24072adf7dc **_new_** * **golang.org/x/crypto** 49796115aa4b964c318aad4f3084fdb41e9aa067 **_new_** * **golang.org/x/time** f51c12702a4d776e4c1fa9b0fabab841babae631 **_new_** * **google.golang.org/grpc** v1.7.2 -> v1.10.1 * **gopkg.in/inf.v0** 3887ee99ecf07df5b447e9b00d9c0b2adaa9f3e4 **_new_** * **gopkg.in/yaml.v2** 53feefa2559fb8dfa8d81baad31be332c97d6c77 **_new_** * **k8s.io/api** 7e796de92438aede7cb5d6bcf6c10f4fa65db560 **_new_** * **k8s.io/apimachinery** fcb9a12f7875d01f8390b28faedc37dcf2e713b9 **_new_** * **k8s.io/apiserver** 4a8377c547bbff4576a35b5b5bf4026d9b5aa763 **_new_** * **k8s.io/client-go** b9a0cf870f239c4a4ecfd3feb075a50e7cbe1473 **_new_** * **k8s.io/kubernetes** v1.10.0 **_new_** * **k8s.io/utils** 258e2a2fa64568210fbd6267cf1d8fd87c3cb86e **_new_**