containerd 1.2.0-beta.2 Welcome to the v1.2.0-beta.2 release of containerd! *This is a pre-release of containerd* After two major releases of containerd, we have brought back the beta releases to introduce a new runtime interface and new APIs. The 1.2 release will be fully backwards compatible and has no API breakage. The API additions included in this release are focused on making containerd more extensible and cover more user cases. ### New V2 Runtime A new v2 runtime has been added with a stable gRPC interface for managing containers through external shims. This allows runtime authors to easily integrate with containerd over a stable API. Various runtimes can be selected on a per container basis using the `WithRuntime` opt or to test via ctr `ctr run --runtime io.containerd.runc.v1`. [Documentation](https://github.com/containerd/containerd/blob/master/runtime/v2/README.md) ### New Proxy Plugins A new proxy plugin configuration has been added to allow external snapshotters be connected to containerd using gRPC. [Documentation](https://github.com/containerd/containerd/blob/master/PLUGINS.md) ### Managed /opt directory A new `Install` method on the containerd client allows users to publish host level binaries using standard container build tooling and container distribution tooling to download containerd related binaries on their systems. This can be used for v2 runtime authors to get their runtime shims on an existing containerd system. It can also be used to install `runc` and other related tools. ```bash > ctr content fetch docker.io/crosbymichael/runc:latest > ctr install docker.io/crosbymichael/runc:latest ``` [Documentation](https://github.com/containerd/containerd/blob/master/docs/managed-opt.md) ### Garbage Collection Add support for cleaning up leases and content ingests to garbage collections. Add expiration label to clean up temporary resources. ### API Changes Minor API additions ### Other Improvements Improved multi-arch image support using more precise matching and ranking Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ### Contributors * Michael Crosby * Lantao Liu * Derek McGowan * Phil Estes * Justin Terry * Akihiro Suda * Stephen J Day * Abhinandan Prativadi * Kenfe-Mickaël Laventure * Evan Hazlett * Sebastiaan van Stijn * Andrei Vagin * Kir Kolyshkin * Brian Goff * Darren Stahl * Ian Campbell * Wei Fu * Samuel Karp * Claudia Beresford * Felix Abecassis * John Howard * Lifubang * Luc Perkins * Mathieu Champlon * Mike Brown * Tõnis Tiigi * Vincent Demeester * Alban Crequy * Aleksa Sarai * Alexander Gerasiov * Andrew Osheroff * Arnaud Rebillout * Bin Du * Bingshen Wang * Danail Branekov * Daniel, Dao Quang Minh * Dave Henderson * Eric Ernst * Filipe Brandenburger * Frank Yang * Harshal Patil * Jie Zhang * Kevin Xu * Lu Jingxiao * Michael Fraenkel * Nikos Anastopoulos * Oliver Stenbom * Parav Pandit * Ricardo Aravena * Rolf Neugebauer * Sudeesh John * Tobias Klauser * Tom Godkin * Yu-Ju Hong * yanxuean ### Changes * ce243288e2 Merge pull request #2587 from dmcgowan/release-1.2.0-beta.2 * b30d032a6a Add 1.2.0 beta 2 release notes * ce1161f806 Merge pull request #2551 from crosbymichael/stdin-block * 68979c923a Merge pull request #2586 from dmcgowan/platform-filter-limit * 3d1082e06d Add a manifest filter limiting the number of matches * be42d777ff Merge pull request #2575 from crosbymichael/workdir * 8a58195aae Merge pull request #2585 from crosbymichael/low-ports * ac78a5b615 Remove and create workdir if state dir does not exist * 4b9b3e8fc9 Add WithAmbientCapabilities opt * 0a3f87ec2e Merge pull request #2584 from jterry75/windows_r2_exec_fix * e88ec1f1a6 Fix incorrect ID usage in Windows runtime v2 * bc1ff51411 Don't block on STDIN open * 6b00aaaf20 Merge pull request #2573 from lifubang/relativepathforrootfs * 68a5db67ad Merge pull request #2582 from lifubang/startd * 838c1e2acd Merge pull request #2581 from dmcgowan/platform-matching * 66f6dd8b3b add -detach flag for 'ctr t start' * 9edcfcc1cb Add platform match comparer interface * d7dc384a99 Merge pull request #2574 from fuweid/add_missing_icon * 56a51ac945 README.md: add missing banner * dc6ed04ff5 support relative rootfs path in ctr * 37a6a91bdf Merge pull request #2572 from estesp/move-website * ac18e60087 Merge pull request #2571 from dmcgowan/prepare-1.2.0-beta.1 * da1fba0050 Website no longer managed from this repo * 129dab31ba Add v1.2.0 beta 1 release notes * ef237f574a Merge pull request #2570 from jterry75/revendor_go-runc * 57979e1ed2 revendor go-runc to acb7c88c * 830363acac Merge pull request #2544 from kadisi/process_args * 248ff06850 Merge pull request #2562 from crosbymichael/console * 4f644dbfd5 Copy io into and out of console * 07e2b63d69 Send stderr on windows Terminal * d6cd1e5379 Update console dep to c12b1e7919c14469339a5d38f2f8 * 53a8c946f5 Merge pull request #2538 from jterry75/runtime_v2_windows * 019b0c34de Introduce containerd-shim-runhcs-v1 on Windows * 1a96db4a2c Merge pull request #2559 from crosbymichael/exp-content * e5115c3919 Export content service New * 7dae56671d set args value of process if args is nil * 3f42445e38 Merge pull request #2557 from jhowardmsft/jjh/revendor * 2c4b7f6bd1 Fixup archive/tar_windows.go type * 8fe92ea5f3 Revendor Microsoft/hcsshim and go-winio * 5d8ed81e60 Merge pull request #2555 from dmcgowan/update-runc-vendor * 4ac20b5b9f Merge pull request #2553 from crosbymichael/release-notes * ddc53c9cd2 Update runc vendor * a1affdb4ff Merge pull request #2554 from crosbymichael/timeout * 97e73c9348 Add WithTime as client Opt * 7ec974458e Add release notes for v2 runtime and opts * 6f13ff3ea4 Merge pull request #2550 from dmcgowan/release-1.2.0-beta.0 * 5ab50846c0 Add v1.2.0 beta 0 release notes * 0ffb948270 Merge pull request #2549 from crosbymichael/default-devices * b67ea850af Add opt for default unix device permissions * a69a0b0192 Merge pull request #2548 from ijc/platforms-must-parse * c83f9773bc platforms: Add `MustParse` * 037fc5ed86 Merge pull request #2542 from crosbymichael/fetch-config * 0aedde55f1 Merge pull request #2543 from Random-Liu/update-cri-v1.11.1 * e9ad2d0481 Update cri to v1.11.1. * 65839a47a8 Merge pull request #2537 from crosbymichael/mutable * 9a4c61ccb5 Merge pull request #2502 from fuweid/bugfix_support_more_overlayfs_layers * 3be457d7d6 Move content.Fetch configuration to struct * b9eeaa1ce8 Merge pull request #2536 from jterry75/fix_log_pipe_windows * 8362d9aa48 switch shim log Windows client/server direction * cc6d261e1a Image and snapshot key are mutable * 2c85ae2828 Merge pull request #2535 from ijc/WithUserID-docs * e8c80f37e2 Merge pull request #2530 from dmcgowan/update-release-tool * 4a74731cd0 oci: Update docs for `oci.WithUserID` * 97473edb99 Merge pull request #2534 from cyphar/manpage-rename * 7aa132ffc7 docs: man: rename config.toml(5) to be more descriptive * 1ba4aa04b4 Merge pull request #2528 from crosbymichael/shim-debug * 6ba4ddfdda Add shim log pipe for log forwarding to the daemon * 67b54c6670 Support >= 128 layers in overlayfs snapshots * aeb322d87d Update release tool * 4fb92300fe Merge pull request #2526 from crosbymichael/managed-opt * 6bf15fa867 Merge pull request #2529 from crosbymichael/missing-gids * 99df1a9e11 Set gid 0 when no group is specified * dd97a11b6f Merge pull request #2523 from jterry75/windows_v2_tasks_service * 2742238909 Add docs for managed opts dir * 2783a19b10 Merge pull request #2518 from crosbymichael/install * 74b036491a Merge pull request #2524 from samuelkarp/time.Hour * 5a47c5ec1d Add lib support as an option * 1537f31381 Add install support for binary images * 9ca687be63 Merge pull request #2522 from jterry75/runc_typo * 9665a2650a *: replace 3600 seconds with 1 hour * 9936370fef Refactors the TasksService requires per platform * 9ff702b9a1 Fix a typo in runc-v1 shim * b8f4c7a9bd Merge pull request #2520 from dmcgowan/use-pause-multiplatform-test * d3887f6764 Merge pull request #2519 from jterry75/various_win_fixes * dcb905701c Adds retry support to Windows AnonDialer * 790c3a3663 Remove extra allocation in NewTask * 123de20b59 Merge pull request #2517 from estesp/fix-travis-script * 438b3cb694 Update multi-arch image tests * 9622369f0e Fix loss of CRI test failure status in CI * 6a252a7141 IO Windows remove unused wait group * efb04a3361 Merge pull request #2513 from dmcgowan/set-default-platform-withplatform * 9dc55ea1d2 Merge pull request #2514 from jterry75/runtime_v2_shim_command * d64d8a06d5 Use image constructor in client * 3629344e6e Ensure specifying an empty platform is treated as default * 9f13b74f4a Runtime v2 absolute shim path to executable * 875b92c507 Merge pull request #2512 from crosbymichael/gpupath * ed0e73422d Merge pull request #2468 from dmcgowan/set-platform-on-unpack * 4249f44d81 Merge pull request #2493 from dmcgowan/sync-lease-removal * d0ab8c8510 Merge pull request #2496 from dmcgowan/lease-content-uploads * e4f33dcfb5 Add nvidia Opts to lookup containerd binary or hook path * c55b9636f7 Merge pull request #2263 from alibaba/fix_no_gzip * 6647e75651 Merge pull request #2509 from crosbymichael/bundle-cleanup * 45d0df8fe3 Merge pull request #2510 from crosbymichael/gpucaps2 * 920dc79b4d Merge pull request #2504 from samuelkarp/ctr-t-metrics * 81e2859e8b Change gpu Capability type to string * ca71484793 Merge pull request #2480 from dmcgowan/proxy-plugin-doc * 578a236f30 Merge pull request #2506 from crosbymichael/gpucaps * 23fbdbaf13 Cleanup workdirs on manager load * e8f7c2af26 Merge pull request #2507 from flx42/fix-readme-runtime-v2 * 2ebfba575c Merge pull request #2479 from stevvooe/with-file-combinator * 9a34bb046a metrics: add optional json output * e22f19618c Remove reference to WithExit in README * 2a1bd7414b oci: introduce WithSpecFromFile combinator * 985920c513 Merge pull request #2505 from crosbymichael/cmdargs * dd0c04970d nvidia GPU support for caps and multiple uuids * 362405f7b5 Merge pull request #2495 from jterry75/runtime_v2_windows * af1b6a026e Review feedback. * 4b5403f9c9 Merge pull request #2 from crosbymichael/runtime-v2-windows * 13549f7a07 Abstract to SocketAddress * 2c87d120df ctr: add new metrics subcommand * e956441fe0 Add WithImageConfigArgs to replace CMD on image * c8017d0275 Merge pull request #2500 from crosbymichael/12deps * 5a0b040ab4 Update containerd dependencies for 1.2 * c09932fcb0 Merge pull request #2347 from crosbymichael/streamingapis * 400f16fc46 Add containers streaming API * 965cca6f75 Merge pull request #1 from crosbymichael/runtime-v2-windows * 9d72b4543b Handle windows signals * f15a1170d3 Add windows publisher * 1580ec59a5 Remove outdated plugin design doc * 3e657de3af Document plugins * dfc9991135 Add content ingests to lease and gc * d02728ff4a Merge pull request #2499 from crosbymichael/fast * b760cee65a Update lease service errors * d3e0c163f8 Adds runtime v2 support for Windows shim's * 710df57854 Fast path bundle cleanup on load * 26e2dd6754 Merge pull request #2425 from avagin/docker-fixes * 3289dc63e9 Merge pull request #2465 from fraenkel/lock_conn * d47bda91e9 Merge pull request #2490 from thaJeztah/logging_nanosecond_precision * 9a4d1c5f8d Use connection lock when creating services * da73b98b63 Set default log formatting to use RFC3339Nano with fixed width * a88b631961 Merge pull request #2471 from crosbymichael/fatal * 88ec4559b6 Merge pull request #2487 from thaJeztah/fix_compilation_issues_on_go1.11 * 65ef8310d9 Fix compilation failures on Go 1.11 * 92d147ebde Merge pull request #2485 from AkihiroSuda/fix-native-root-permission * 7461739b58 native: set '/' permission to 0755 * 0d52c71c80 Merge pull request #2474 from dmcgowan/lease-expiration * fc2fcf6b2a task: WithExit() doesn't have to overwrite existing options * 394784b3aa Merge pull request #2482 from crosbymichael/v2cr * 17ab11a236 Fixes for runtimev2 and checkpoint restore * 94e132fd07 Add sync option on lease removal * 49fb363811 Merge pull request #2458 from fuweid/bugfix_apply_hardlink_to_softlink * 77ffa366af Merge pull request #2476 from kolyshkin/osusergo * 2a8e28ae29 Merge pull request #2477 from crosbymichael/stress-runtime * 17ae673b5c Set runtime for stress tests * 48570b39c5 BUILDING.md: add osusergo for static build * 3b1534c47a bugfix: allow hardlink to softlink file * 9743ff21c9 Don't fatal on epoll wait * 94cfce62ba Merge pull request #2434 from crosbymichael/shimv2 * d53a96fbe4 Add comments for oci protos * 29b72d4ff0 Support lease filters * 00a99c0472 Add leases subcommand in ctr * 4c2ad9cefb Update CRI vendor * 8cf3fad8d4 Add leases manager interface * 026b7d922f Add README.md to runtime v2 * c77c89b3d1 Add lease expiration to garbage collection * 02579c8c3f Merge pull request #2415 from dmcgowan/proxy-plugins * 3a916a0f67 Update client Image to have configurable platform * fd31052d9c Add oom events to shim * dfde5ec316 Merge pull request #2418 from crosbymichael/hook-root * 9ca23811c3 Merge pull request #2424 from kinvolk/alban/systemd-run * e17969caad Merge pull request #2436 from thaJeztah/fix_gofmt * fb1084d9cc Merge pull request #2464 from tonistiigi/oci-export-platform * ed697290da Merge pull request #2463 from crosbymichael/temp-clean * 7e49c601a8 Add `shim start` for shim creation * da1b5470cd Runtime v2 * 6de11ab973 Merge pull request #2470 from dmcgowan/fix-checkprotos * d3cd5f1d01 Fix options ordering in proto api txt files * 82e7204a3c oci-exporter: do not filter current platform on export * cef05f19a7 Merge pull request #2461 from dmcgowan/seed_rand * 0105959c3d Don't prevent boot on temp cleanup * 8baeaff54b Merge pull request #2460 from stevvooe/runc-build-instructions * 1c6929cbd4 Remove use of crypto rand in tests * cce0a46c8a Seed random on ctr and containerd startup * a5e0916aa9 build: include instructions for runc build * 0c0c271b54 Update golang.org/x/sys * cb4bf2003f Merge pull request #2454 from hairyhenderson/use-math-rand-instead-of-crypto-rand * 9a97ab34ce Switching from crypto/rand to math/rand to avoid blocking * b382b6fe0b Merge pull request #2450 from Random-Liu/support-host-in-resolver * c8a8a49584 Support specifying host in resolver. * 01d309e8f2 Merge pull request #2448 from rn/btrfs * 651920405e test: Increase btrfs loopback device size to 128MB * b41633746e Merge pull request #2443 from thaJeztah/mask_acpi * fe64b06a6d Add /proc/keys to masked paths * 8b42adeddc Add /proc/acpi to masked paths * e01779a0da Merge pull request #2442 from thaJeztah/bump_containerd_console * 77a26427c3 update containerd/console to fix race: lock Cond before Signal * 5900361791 Merge pull request #2420 from sudeeshjohn/master * 5a4f007e48 Fix the formatting directives error during compilation * 0b0b41298a Merge pull request #2437 from thaJeztah/remove_go_version_check * 383d750d4f Workaround for gofmt change in Go 1.11 * 108c9cd4cf Remove Go version check in travis * 39b6ba826a Merge pull request #2431 from masters-of-cats/plugins-list-subcommand * 4e64dcce85 Merge pull request #2432 from crosbymichael/ttrpc2 * 6a83168157 Update ttrpc to 94dde388801693c54f88a6596f713b51a8 * 3cf3881fa4 Introduce plugins/list subcommand * a044b047e8 Merge pull request #2430 from Random-Liu/update-cri-to-v1.11.0 * f530a3c267 Update cri to v1.11.0. * e51ddf43e9 Merge pull request #2428 from crosbymichael/ttrpc * 8c709ac43a update typeurl * 08150bfe76 Update ttrpc for containerd repo * 6ef65b74e1 Document how to use systemd-run * ca204317ed Merge pull request #2422 from crosbymichael/ctr-delete * 08f7ee9828 Merge pull request #2423 from crosbymichael/shim-procs * fdceb13b14 Add cio.Load for loading io set * 68e144c637 Set shim max procs via env var * 1ac546b3c4 Merge pull request #2411 from flx42/move-containerflags * e239f65590 Handle abs path for rootfs in oci hook * f15c3be348 Merge pull request #2417 from dmcgowan/update-arm64-normalize * db3c5afc6d Normalize arm64 to an empty variant * 47a128d455 Merge pull request #2414 from dmcgowan/platform-arm-normalization * 995310cda9 Merge pull request #2408 from estesp/carry-2363 * 7049671465 Add support for proxy plugins in configuration * 37ab93e2c8 Fix arm platform matching * 7ff2748f9c Merge pull request #2410 from tonistiigi/mlist-error * 5dd22a20af Move ContainerFlags to "commands" package * 53fe31d6de images: provide better error for manifest list match error * 3c5b0dcf27 Update architecture.md * c1e1f3d6d9 Merge pull request #2397 from harche/doc_fix * ef449aa38e Docs: Fix incomplete instructions for building using docker * 0158a6fb34 Merge pull request #2393 from vdemeester/gotestyourself-with-tools * 832b05ae67 Update tests to use gotest.tools angel * 3830180ce5 Replace gotestyourself by gotest.tools * 35887db096 Merge pull request #2370 from dmcgowan/update-maintainers-rules * 046536cfb1 fixbug: blob for schemav1 could be uncompressed * 7ba62b147d Update adding maintainer section * 63522d9eaa Merge pull request #2390 from AkihiroSuda/fix-schema1 * 356b0d5964 Merge pull request #2388 from ehazlett/proc-interface * df34eefa12 Merge pull request #2330 from crosbymichael/hpc * a435f2886c separate proc interfaces into standalone package * 703c25e452 fix schema1 fetchBlob() * 00d4910633 Merge pull request #2387 from ehazlett/runtime-shim * 821c8eaa91 runtime/linux/shim -> runtime/shim * 437e90aa5e Merge pull request #2386 from northtyphoon/bindu/acr-push-location * 9b865d86a9 docker/pusher: handle location string containing path and query * 081b2d6330 Merge pull request #2384 from crosbymichael/bump-console * 0cfca1e633 Bump console for windows tty handling * 0d7fd3f7ad Merge pull request #2383 from AkihiroSuda/vendor-cri-20180605 * 135a4d9104 update cri vendor * 84bebdd91d Merge pull request #2379 from dmcgowan/fix-direct-io-terminal-setting * b867977c01 Merge pull request #2380 from dmcgowan/ignore-zero-msg-size-configs * 993d4b8fc5 Ignore zero max message size in grpc config * 6b9be1bfc3 Fix creation of DirectIO overwriting fifo config * 5b1f69be8a Merge pull request #2135 from AkihiroSuda/oci-content-store * e1428ef054 Merge pull request #2378 from thaJeztah/update_microsoft_vendors * 55118c5469 Update go-winio and hcsshim * d88de4a34f content: change Writer/ReaderAt to take OCI * e4ad710ce8 Merge pull request #2375 from AkihiroSuda/update-cri-20180531 * 17a54d02c4 update cri vendor * 1e8b09cfc6 Merge pull request #2353 from ehazlett/process-runtime * c7083eed5d Merge pull request #2369 from dmcgowan/update-grpc * 6653917ef9 vendor update * cae94b930d linux -> runtime/linux * 8d768689fa cri vendor bump * 55afe3359a Update grpc timeout and logger * 80bbaff07a Merge pull request #2361 from masters-of-cats/no-new-keyring * 7f800e0a7b Merge pull request #2364 from dmcgowan/fix-http-seeker-unsupported-range * 7132ca2775 Implements WithNoNewKeyring * 59740d8985 Fix invalid length bug with some registries * cecf576819 Merge pull request #2362 from crosbymichael/cont-bump * d2fc059229 Update grpc to 1.12 * 024a4210c7 Update continuity to d3c23511c1bf5851696cba83143d9 * e9434a10bc Merge pull request #2341 from dmcgowan/move-client-content-snapshot * 195aec232e Merge pull request #2357 from dmcgowan/add-evan-reviewer * 05406125be Merge pull request #2354 from cpuguy83/bump_continuity * c9ea816cda Merge pull request #2351 from crosbymichael/pkg * 7e5a91fa51 Bump continuity to fix copy files > 2^32 bytes * a4e4af1959 Add Evan Hazlett as a reviewer * 8e97da0958 Move server to services pkg * c87ed12da5 Move restart pkg to runtime * d8ad141851 Remove debug package * 009ba4d797 Move testutils to pkg * 927517de36 Move dialer to pkg * ae4b78d1cc Move progress into pkg * d1435e6e4d Merge pull request #2350 from crosbymichael/reaper * 8ea01cc56a Merge pull request #2336 from crosbymichael/spec-alias * 0bafe236b4 Move reaper under shim package * cff5e75df8 Merge pull request #2343 from crosbymichael/platform * 62e22a9fe7 Type alias spec in oci package * 80272bb691 Merge pull request #2345 from estesp/banner-moved * 34c032d98f Reference new location for images * 3f0fe90410 Merge pull request #2344 from lucperkins/lperkins/revert-markdown-file-paths * e5e63539a6 Return Markdown files to /docs directory * dc2e115f8b Merge pull request #2318 from crosbymichael/restart * 2b565da7ec Add restart monitor * e63768ea09 Merge pull request #2331 from dmcgowan/fix-image-remove-race * ceae112f7d Rename Runtime to PlatformRuntime * 257d74f837 Merge pull request #2342 from lucperkins/lperkins/hugo-migration * d1503dc9ce Migrate website to Hugo * b511c397c3 Merge pull request #2317 from cmingxu/master * fcc66f5685 Merge pull request #2337 from AkihiroSuda/fix-vendorconf-runcmd-mismatch * b1e202c327 fix RUNC.md vs vendor.conf mismatch * 7c80d0ae11 Rename remote content to proxy content * b949697a9c Add nvidia gpu support via libnvidia-container * d791232cd3 Fix typo, should be register instead of regster * 6e64091322 Move client content store to proxy package * 48b0a022ef Rename remote snapshotter to proxy * 0d1807a43d Move client snapshotter to separate package * 544557289a Add oci-hook command to containerd * a15e7a0be0 Merge pull request #2332 from dmcgowan/fix-missing-return-in-client-pull * f0b3d5a2c5 Move image creation after unpack * 2bc9f49ffd Retry image creation after update not found * 28caf9027e Add recursive apply layer function * 70d629fc1d Add missing return statement on pull unpack * 6eee2a0785 Merge pull request #2324 from kolyshkin/mountinfo * 8eec9259e6 mount/mountinfo_linux: parser speed up * f701b3b960 Fix race in ctr pull * e017143dde Merge pull request #2328 from crosbymichael/client-clean * 8ee52bfca9 Move import/export code to separate client file * e22c827cf5 Merge pull request #2323 from stevvooe/ping-snapshots-from-cli * fc1d936f2c Merge pull request #2326 from cloudfoundry-incubator/pr-oom-score * 544b985ff2 Don't fail on setting -ve oom score when rootless * 08b43d9200 Merge pull request #2325 from cloudfoundry-incubator/pr-tempdir * fc8bce59b9 Use user-specific temp directory if set * 40c3acd36c Merge pull request #2322 from darrenstahlmsft/revendorHcsshim * ed72059fac cmd/snapshots: add gc.root to created snapshots * 07d8716004 Update hcsshim to v0.6.10 * cfba048bec Merge pull request #2319 from ijc/update-go-digest * 623407a399 Re-vndr with newest vndr * 388c73052a Bump to latest go-digest. * 4219f7ba3a Merge pull request #2307 from avagin/tty * 29c76b13d6 travis: update criu to 3.7 * 566389ade4 test: Check C/R for containers with TTYs * 60daa414db Allow to checkpoint and restore a container with console * 0846d6f8e9 vendor: update go-runc * cddd791c1c Merge pull request #2315 from crosbymichael/logio * 1c263a7d5e Add LogFile as a cio IO option * c73794f8dc Merge pull request #2314 from ehazlett/runc-shim-debug * 530849fed4 enable runc debug in shim * a70e26c64f Merge pull request #2310 from ehazlett/directio-with-terminal * 6b4355d242 add NewDirectIOWithTerminal; add test for pty * 1a5e0df98f Merge pull request #2305 from kolyshkin/context * e073a48c7b Merge pull request #2309 from crosbymichael/events-closed * 090687916d Correctly handle reading from events channel * bbe14f0a2e Switch from x/net/context to context * 9d0d4b806c context pkg: untangle * f337075620 Bump golang.org/x/net ### Changes from containerd/cgroups * 5e61083 Merge pull request #50 from jingxiaolu/master * 0d1587c Add interface AddTask to control groups. So that we can set tasks when we need. * 07683a6 Merge pull request #45 from anastop/master * 15ef4c3 Add Update method for the cpuset controller * c755602 Merge pull request #41 from estesp/update-travis-go * 0a357bb Update Go versions for travis * 5539584 Fix incorrect use of OCI runtime specs-go cgroup dev types * bf7d89f Merge pull request #40 from containerd/license * f1d9380 Add license to files * 78a98a6 Merge pull request #39 from paravmellanox/master * ccd26c4 Add support for rdma cgroup ### Changes from containerd/console * c12b1e7 Merge pull request #29 from crosbymichael/win * 7a61819 Update read write on windows console * 8894ab3 Revert "Fix reading from and writing to console on windows" * b3d113c Use stdout for windows console * 4d8a41f Merge pull request #27 from gerasiov/master * 5d1b48d console_linux: Fix race: lock Cond before Signal. * 9a57d21 Merge pull request #28 from crosbymichael/travis * 058dd74 Update travis file for 1.10 * 9290d21 Merge pull request #25 from mat007/support-read-write-windows * a7ba593 Fix reading from and writing to console on windows * 6fe6f36 Fix some typos in comments ### Changes from containerd/continuity * d3c2351 Merge pull request #113 from darstahl/ResolveRoot * a60600a Merge pull request #117 from dmcgowan/fix-create-file-reader-creation * 7d784df Fix bug in multiple calls to file applier * 2d3749b Merge pull request #116 from dmcgowan/random-file-test * a3fa14c Update TestCopyWithLargeFile * 7333bda Merge pull request #114 from cpuguy83/fix_copy_file_range_usage * afba265 Fix copy_file_range usage for files > 2GB * 5633c24 Stop resolving symlink in containWithRoot * 7a71e24 Fix vet failure * 8100e75 Resolve context root to follow symlinks as root directories * c6cef34 Merge pull request #106 from cpuguy83/export_copy_file * a88ec15 Merge pull request #108 from tklauser/xattr-sys-unix * d59f454 Export `copyFile` * 6268e28 sysx: use xattr functions from x/sys/unix ### Changes from containerd/cri * f3687c5 Merge pull request #875 from Random-Liu/cherry-pick-#874 * 5a3085e Update containerd to b9eeaa1ce83dd9970605ddbd0b35d4d3fa5f87bd. * 350e93c Merge pull request #870 from Random-Liu/cherrypick-#869 * f7e4290 Support netd in GCE bootstrap. * 5f0852e Merge pull request #866 from Random-Liu/cherrypick-#857 * 35d4b19 Merge pull request #867 from Random-Liu/cherrypick-lint-fix * 119d0e3 Cherrypick the lint fix. * c037404 sandbox: separate host accessing workload and privileged * d00d37b Merge pull request #860 from Random-Liu/cherrypick-#858 * db752fa Serve streaming on localhost by default to match k8s 1.11 default. * d22dfea Merge pull request #854 from yanxuean/b1.11 * 778d783 support no_pivot option for runc * 9aa7e2e Merge pull request #845 from Random-Liu/cherrypick-#843-to-1.11 * 5aed7a4 Merge pull request #847 from Random-Liu/cherrypick-#838 * d46857c Set 0022 umask for `hack/release.sh`. * 32ed43b Use `--no-overwrite-dir` in installation doc. * 409d647 Add missing vendor back. * 1226165 Update containerd to b382b6fe0bdbf7604c0a4f5c2089c0b159ad58b2. * 55f0cf5 Remove `pkg/containerd/resolver` package. * e350858 Add registry auth config, and use docker resolver in containerd. * 5ad95b2 Merge pull request #833 from Random-Liu/update-containerd-k8s * 88c5165 Update containerd and k8s. * bc99f7a Merge pull request #832 from Random-Liu/remove-crictl-on-gce * f580374 Remove crictl on GCE for all cases. * c68b605 Merge pull request #831 from Random-Liu/fix-link * fd71c9f Fix another link. * 47b8d30 Merge pull request #828 from yujuhong/fix-gce-link * 0e42438 Merge pull request #829 from Random-Liu/local-stream-server * f6ab733 Set stream server to serve on localhost on GCE. * e23c0e7 Fix link to GCE getting started guide * 4eb4a29 Merge pull request #825 from abhi/cni_config * 8609710 vendoring latest go-cni with fixes * 263b0b9 Change to keep in sync with latest cni config * 07020db Merge pull request #820 from filbranden/usercap1 * 01d77d4 Update github.com/opencontainers/runtime-tools to v0.6.0 * 441a57a Merge pull request #821 from Random-Liu/fix-snapshotter-panic * 9cb82aa Merge pull request #823 from Random-Liu/update-crictl * cfa88fc Merge pull request #824 from Random-Liu/make-max-log-size-configurable * b5d053f Make max container log line size configurable through cloud init. * bdddbed Update crictl to v1.11.0. * b60e456 Fix snapshotter nil panic. * e3d57d2 Merge pull request #761 from Random-Liu/add-log-max-size * ad29370 Merge pull request #816 from Random-Liu/fix-double-dev-shm-mount * 53f1ab4 Fix double /dev/shm mount. * bf551b9 Add integration test. * 405f57f Add max_container_log_size * b39546c Merge pull request #815 from Random-Liu/support-cmd-for-sandbox-container * 46d621e Support `Cmd` for sandbox container. * b7aac63 Merge pull request #811 from Random-Liu/fix-volume-ownership * 7e0cbbe Merge pull request #810 from Random-Liu/revert-#804 * c557763 Fix empty volume ownership. * c921653 Revert "Use pod ip instead of localhost in pod netns for portforward." * d7abb5b Merge pull request #807 from Random-Liu/log-task-exit-event * 5a1105c Merge pull request #808 from Random-Liu/erase-ambient-caps * 96cfcce Merge pull request #804 from Random-Liu/use-pod-ip-for-portforward * dd886bc Use pod ip instead of localhost in pod netns for portforward. * b367f30 Erase ambient capabilities. * de84f9c Merge pull request #806 from Random-Liu/update-kubernetes * e4e2585 Log task exit event. * 2b48f87 Update kubernetes to v1.11.0-beta.2 * dfae95e Merge pull request #802 from Random-Liu/remove-unused-files * db028fd Merge pull request #803 from Random-Liu/select-ipv4-first * 83e6b65 Select ipv4 first if there is one. * ccc5f39 Remove unused files. * 8bcb9a9 Merge pull request #801 from Random-Liu/fix-ctr-timeout * 0faff1c Fix ctr cri timeout. * ecf8d99 Merge pull request #799 from AkihiroSuda/oci-content-store * 0972490 vendor containerd (#2135) * 0a5c05b Merge pull request #776 from Random-Liu/disable-streaming * 578b34f Merge pull request #794 from Random-Liu/panic-for-cri-start-failure * b870ee7 Generate fatal error when cri plugin fail to start. * b68fb07 Merge pull request #793 from Random-Liu/port-containerd-fix-#2364 * 0fae42b Port docker resolver fix #2364. * 8bb978e Merge pull request #785 from ehazlett/containerd-vendor-bump * d7d2212 vendor bump * 40b6083 Merge pull request #789 from Random-Liu/configurable-containerd-build * 1892b30 Make DEPLOY_PATH configurable. * 52460eb Merge pull request #788 from BSWANG/patch-1 * 7bd86a2 Update cni.template * 574f949 Merge pull request #786 from fuweid/remove_useless_check * e28b77c Remove useless error-check in createImageReference * 24a9642 Merge pull request #784 from cpuguy83/bump_continuity * fb6bc66 Bump continuity to fix copy files > 2^32 bytes * 450eb09 Merge pull request #782 from Random-Liu/update-containerd * 60b0d08 Use containerd.WithPullUnpack. * 4f00103 Disable restart plugin on GCE. * 80188e2 Update containerd to d1435e6e4dcffd99e0da396ff771b5bbe0d93f5e. * a4ff7e9 Merge pull request #781 from Random-Liu/fix-container-runtime-monitor * ebed87f Fix kube-container-runtime-monitor. * bafc794 Merge pull request #758 from Random-Liu/use-crictl-in-kube-up * 927d374 Merge pull request #779 from Random-Liu/logo-fix * b4631cf Use crictl installed in kube-up.sh * 6c7ec48 Another logo fix. * 6f43d49 Disable TLS streaming to work with new kubelet streaming proxy. * 8566a89 Merge pull request #775 from mikebrow/readme-pub-imgs * e10a249 use public logos for a while vs remote github logos that are not in this repo * 9f8e581 Merge pull request #647 from mikebrow/boiler-support-for-no-year * 8d60547 Merge pull request #769 from raravena80/patch-1 * 6790819 Merge pull request #768 from Random-Liu/upgrade-crictl * f79e017 Minor typo * 9763489 Upgrade cri-tools to v1.0.0-beta.1 * 66388ae Merge pull request #766 from Random-Liu/fix-workingset-memory * 5d29598 Fix workingset memory calculation. * 7a6369d Merge pull request #763 from Random-Liu/fix-ro-sysfs * a5d1332 Explicitly set `rw` for privileged container. * 5f4035a Merge pull request #754 from kolyshkin/mount * daeab40 os.Unmount: do not consult mountinfo, drop flags * 6bbbec5 Merge pull request #755 from Random-Liu/always-mount-sysfs-rw * 03bac61 Merge pull request #756 from Random-Liu/update-cri-tools * 2f370f6 Update cri-tools to fix `crictl logs` output. * 279fa85 Always mount sysfs as `rw`. * 8fec046 Merge pull request #751 from Random-Liu/fix-official-release * e0d7078 Fix tarball ownership and containerd binary path for containerd. * 825563b Merge pull request #750 from Random-Liu/download-from-official-release * e22ebf4 Down containerd binaries from official release. * c3574e4 makes copyright year optional ### Changes from containerd/go-cni * 5882530 Merge pull request #26 from abhi/master * 1695039 Minor cleanup with concurrency and locking * 47457ea Merge pull request #24 from containerd/cni-opts * d6ba409 Same Opt API for Load and New * 18e77c5 Merge pull request #23 from abhi/master * 83a302e Updating Readme based on new APIs * 25573b2 Merge pull request #22 from abhi/badge * ca0948e Merge pull request #21 from abhi/travis * 9e927d3 Adding build badge * e93f297 Updating travis ### Changes from containerd/go-runc * acb7c88 Merge pull request #46 from jterry75/fix_pipe_close * f146bed Reorder pipe close to be write/read * 808e844 Merge pull request #45 from jterry75/io_windows * cc5515f Make console.go +build !windows * d4cf276 Break apart NewPipeIO to windows/unix * edcf3de Merge pull request #44 from containerd/env * 523ee98 Pass env down to runc command * 14606eb Merge pull request #43 from AkihiroSuda/rootless * 0194529 add support for --rootless * 74719bd Merge pull request #42 from Random-Liu/expose-parsePSOutput * fdf39b3 Expose parsePSOutput. * 301f7c1 Merge pull request #41 from masters-of-cats/master * 07e192d Use user-specific temp directory if set * f271fa2 Merge pull request #40 from avagin/tty * 400dfa3 Add ConsoleSocket to RestoreOpts ### Changes from containerd/ttrpc * 94dde38 Merge pull request #27 from containerd/ctx * 01ed7d8 Add context to Serve * fa6c681 Merge pull request #25 from containerd/repochange * 0690b20 Add apache license to files * 4b957e7 Update imports and references for containerd * 530a70d Merge pull request #24 from elboulangero/master * 87ac4c6 Log with sirupse/logrus to avoid a circular dependency to containerd #6 ### Changes from containerd/typeurl * a93fcdb Merge pull request #5 from estesp/add-license-headers * b425f6b Add Apache license headers with ltag * dac9cd9 Add go versions to travis * 2e95e46 Fix marshal tests with local type ### Dependency Changes Previous release can be found at [v1.1.0](https://github.com/containerd/containerd/releases/tag/v1.1.0) * **github.com/Microsoft/go-winio** v0.4.5 -> v0.4.10 * **github.com/Microsoft/hcsshim** v0.6.7 -> 44c060121b68e8bdc40b411beba551f3b4ee9e55 * **github.com/containerd/cgroups** fe281dd265766145e943a034aa41086474ea6130 -> 5e610833b72089b37d0e615de9a92dfc043757c2 * **github.com/containerd/console** cb7008ab3d8359b78c5f464cb7cf160107ad5925 -> c12b1e7919c14469339a5d38f2f8ed9b64a9de23 * **github.com/containerd/continuity** 3e8f2ea4b190484acb976a5b378d373429639a1a -> d3c23511c1bf5851696cba83143d9cbcd666869b * **github.com/containerd/cri** v1.0.0 -> v1.11.1 * **github.com/containerd/go-cni** f2d7272f12d045b16ed924f50e91f9f9cecc55a7 -> 5882530828ecf62032409b298a3e8b19e08b6534 * **github.com/containerd/go-runc** bcb223a061a3dd7de1a89c0b402a60f4dd9bd307 -> acb7c88cac264acca9b5eae187a117f4d77a1292 * **github.com/containerd/ttrpc** d4528379866b0ce7e9d71f3eb96f0582fc374577 -> 94dde388801693c54f88a6596f713b51a8b30b2d * **github.com/containerd/typeurl** f6943554a7e7e88b3c14aad190bf05932da84788 -> a93fcdb778cd272c6e9b3028b2f42d813e785d40 * **github.com/golang/protobuf** 1643683e1b54a9e88ad26d98f81400c8c9d9f4f9 -> v1.1.0 * **github.com/json-iterator/go** 1.0.4 -> f2b4162afba35581b6d4a50d3b8f34e33c144682 * **github.com/modern-go/concurrent** 1.0.3 **_new_** * **github.com/modern-go/reflect2** 05fbef0ca5da472bbf96c9322b84a53edc03c9fd **_new_** * **github.com/opencontainers/go-digest** 21dfd564fd89c944783d00d069f33e3e7123c448 -> c9281466c8b2f606084ac71339773efd177436e7 * **github.com/opencontainers/runc** 69663f0bd4b60df09991c08812a60108003fa340 -> 20aff4f0488c6d4b8df4d85b4f63f1f704c11abd * **github.com/opencontainers/runtime-spec** v1.0.1 -> d810dbc60d8c5aeeb3d054bd1132fab2121968ce * **github.com/opencontainers/runtime-tools** 6073aff4ac61897f75895123f7e24135204a404d -> v0.6.0 * **github.com/xeipuuv/gojsonpointer** 4e3ac2762d5f479393488629ee9370b50873b3a6 **_new_** * **github.com/xeipuuv/gojsonreference** bd5ef7bd5415a7ac448318e64f11a24cd21e594b **_new_** * **github.com/xeipuuv/gojsonschema** 1d523034197ff1f222f6429836dd36a2457a1874 **_new_** * **golang.org/x/net** 7dcfb8076726a3fdd9353b6b8a1f1b6be6811bd6 -> b3756b4b77d7b13260a0a2ec658753cf48922eac * **golang.org/x/sys** 314a259e304ff91bd6985da2a7149bbf91237993 -> 1b2967e3c290b7c545b3db0deeda16e9be4f98a2 * **google.golang.org/grpc** v1.10.1 -> v1.12.0 * **gotest.tools** v2.1.0 **_new_** * **k8s.io/api** 7e796de92438aede7cb5d6bcf6c10f4fa65db560 -> 9e5ffd1f1320950b238cfce291b926411f0af722 * **k8s.io/apimachinery** fcb9a12f7875d01f8390b28faedc37dcf2e713b9 -> ed135c5b96450fd24e5e981c708114fbbd950697 * **k8s.io/apiserver** 4a8377c547bbff4576a35b5b5bf4026d9b5aa763 -> a90e3a95c2e91b944bfca8225c4e0d12e42a9eb5 * **k8s.io/client-go** b9a0cf870f239c4a4ecfd3feb075a50e7cbe1473 -> 03bfb9bdcfe5482795b999f39ca3ed9ad42ce5bb * **k8s.io/kubernetes** v1.10.0 -> v1.11.0 * **k8s.io/utils** 258e2a2fa64568210fbd6267cf1d8fd87c3cb86e -> 733eca437aa39379e4bcc25e726439dfca40fcff