containerd 1.2.5 Welcome to the v1.2.5 release of containerd! The fifth patch release for `containerd` 1.2 contains fixes for image management, cgroup management and the CRI plugin. It also updates runc to include an improved fix for CVE-2019-5736 to reduce the increased memory-consumption introduced by the original patch. All these changes are noted below. ### Notable Updates * Fix an issue that non-existent parent directory in image layers is created with permission `0700`. [#3017](https://github.com/containerd/containerd/issues/3017) * Fix an issue that snapshots of the base image can be deleted by mistake, when images built on top of it are deleted. [#3087](https://github.com/containerd/containerd/pull/3087) * Support for GC references to content from snapshot and container objects. [#3080](https://github.com/containerd/containerd/pull/3080) * cri: Fix a bug that pod can't get started when the same volume is defined differently in the image and the pod spec. [cri#1059](https://github.com/containerd/cri/issues/1059) * cri: Fix a bug that causes container start failure after in-place upgrade containerd to 1.2.4+ or 1.1.6+. [cri#1082](https://github.com/containerd/cri/issues/1082) * cgroups updated to dbea6f2bd41658b84b00417ceefa416b97 to fix issues for systemd 420 and non-existent cgroups. [#3079](https://github.com/containerd/containerd/pull/3079) * runc updated to 2b18fe1d885ee5083ef9f0838fee39b62d653e30 to include the improved fix for CVE-2019-5736. [#3082](https://github.com/containerd/containerd/pull/3082) * cri updated to a92c40017473cbe0239ce180125f12669757e44f. [#3084](https://github.com/containerd/containerd/pull/3084) Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ### Contributors * Michael Crosby * Phil Estes * Lantao Liu * Gábor Lipták * Derek McGowan * Cedric Clerget * Daniel, Dao Quang Minh * Sebastiaan van Stijn * Ashley Sykes * Brent Baude * Chris Mark * Georgia Panoutsakopoulou * Grant Seltzer Richman * JoeWrightss * MichaelKatsoulis * Wei Fu * Wei Zhang ### Changes * [`bb71b10fd8`](https://github.com/containerd/containerd/commit/bb71b10fd8f58240ca47fbb579b9d1028eea7c84) Merge pull request [#3086](https://github.com/containerd/containerd/pull/3086) from Random-Liu/prepare-release-1-2-5 * [`6878e2b3fa`](https://github.com/containerd/containerd/commit/6878e2b3fad4f8124e0f32d18269c8074321b750) Prepare v1.2.5 release. * [`075e1ed4e0`](https://github.com/containerd/containerd/commit/075e1ed4e0bbe6219c8ebbe57deace356970f1c7) Merge pull request [#3092](https://github.com/containerd/containerd/pull/3092) from Random-Liu/update-cri-release-1.2 * [`12f76332e6`](https://github.com/containerd/containerd/commit/12f76332e6ce2156aeeff823e8c8e8981b8639eb) Update cri to a92c40017473cbe0239ce180125f12669757e44f. * [`8f312e3586`](https://github.com/containerd/containerd/commit/8f312e3586e99955500dce5802dc20dad5ce5a21) Merge pull request [#3091](https://github.com/containerd/containerd/pull/3091) from dmcgowan/release-1.2-update-mailmap * [`68f0866dfc`](https://github.com/containerd/containerd/commit/68f0866dfcd4d0cc51b14b623b6491676b21d41a) Update mailmap for cgroup authors * [`96a0d28390`](https://github.com/containerd/containerd/commit/96a0d2839022bd1ec79f95238b052ab96b35175b) Merge pull request [#3082](https://github.com/containerd/containerd/pull/3082) from thaJeztah/1.2_backport_bump_runc * [`9ead3ca72a`](https://github.com/containerd/containerd/commit/9ead3ca72a0b236d9ac3056543db49ebe746ac08) Merge pull request [#3087](https://github.com/containerd/containerd/pull/3087) from fuweid/me-cherry-pick-2876 * [`88401ba68a`](https://github.com/containerd/containerd/commit/88401ba68aff94dca57c9109b592213017cb277b) bugfix: unpack should always set the snapshot gc label * [`c1f49fa74c`](https://github.com/containerd/containerd/commit/c1f49fa74ca9443ecc213f8a5db9e52319be4bf9) Merge pull request [#3084](https://github.com/containerd/containerd/pull/3084) from Random-Liu/update-cri-release-1.2 * [`a5e6b940ea`](https://github.com/containerd/containerd/commit/a5e6b940ea979c001898ae0b85c92476da6cfde9) Update cri to 8e7ca12f411d65de58ca672e8e4a0c1464b4fe34. * [`0b7e80e347`](https://github.com/containerd/containerd/commit/0b7e80e347ab29a3866dc93a506fc66f41331805) Merge pull request [#3080](https://github.com/containerd/containerd/pull/3080) from dmcgowan/backport-1.2-gc-content-references * [`b7e7f1140f`](https://github.com/containerd/containerd/commit/b7e7f1140f9d6ae1e43620f867d00131448abd04) update runc to 2b18fe1d885ee5083ef9f0838fee39b62d653e30 * [`17a4289dee`](https://github.com/containerd/containerd/commit/17a4289deeebd5b84262485d3a29c5e3ca605973) Add content gc ref labels from containers, images, and snapshots * [`f3ab47dd2b`](https://github.com/containerd/containerd/commit/f3ab47dd2b703f5b33e4af1663f2230dc21e8eb3) Merge pull request [#3079](https://github.com/containerd/containerd/pull/3079) from crosbymichael/cherry-picks1.2 * [`e8091eb546`](https://github.com/containerd/containerd/commit/e8091eb5467bf8b23cbd99e4d7db831844e7fedd) Bump cgroups to dbea6f2bd41658b84b00417ceefa416b97 * [`96a8180618`](https://github.com/containerd/containerd/commit/96a818061881066ff798a340423559a1b2a5dd7d) Merge pull request [#3077](https://github.com/containerd/containerd/pull/3077) from thaJeztah/1.2_bump_golang * [`aed4a5e96c`](https://github.com/containerd/containerd/commit/aed4a5e96c8960b59e4325ad984015eb61ac8862) Bump to Go 1.11.x * [`782dd8988a`](https://github.com/containerd/containerd/commit/782dd8988a9aae5f61acb6b21902c716c8bf60b4) Merge pull request [#3038](https://github.com/containerd/containerd/pull/3038) from Random-Liu/cherrypick-#3018-release-1.2 * [`9899aca83f`](https://github.com/containerd/containerd/commit/9899aca83f3389766c04912ac72dbb35e80d7459) Unpack should set 0755 when the parent directory doesn't exist. ### Changes from containerd/cgroups * [`dbea6f2`](https://github.com/containerd/cgroups/commit/dbea6f2bd41658b84b00417ceefa416b979cbf10) Merge pull request [#77](https://github.com/containerd/cgroups/pull/77) from crosbymichael/non-active * [`4a9f0f7`](https://github.com/containerd/cgroups/commit/4a9f0f7346a74278d670e53b00ba011cd8647448) Add SkipOpts for handling how subsystems are registered * [`4dacf2b`](https://github.com/containerd/cgroups/commit/4dacf2bc1300b0d7dc1087b8e27712a597890ba3) Check for non-active/supported cgroups * [`39b18af`](https://github.com/containerd/cgroups/commit/39b18af02c4120960f517a3a4c2588fabb61d02c) Merge pull request [#72](https://github.com/containerd/cgroups/pull/72) from gliptak/pids1 * [`2fd912c`](https://github.com/containerd/cgroups/commit/2fd912c91be97dc5fb77b444aa2694e6538c662d) Add tests for pids * [`1152b96`](https://github.com/containerd/cgroups/commit/1152b960fcee041f50df15cdc67c29dbccf801ef) Merge pull request [#73](https://github.com/containerd/cgroups/pull/73) from gliptak/gofmt1 * [`afd5981`](https://github.com/containerd/cgroups/commit/afd5981a16647b45b6dba3a50a88418b576cc17d) Gofmt cgroup_test * [`65ce98b`](https://github.com/containerd/cgroups/commit/65ce98b3dfeb0a9a8fecd7e4ebffb24ad0bfe28f) Merge pull request [#69](https://github.com/containerd/cgroups/pull/69) from cclerget/master-weight-pointer * [`0f372c6`](https://github.com/containerd/cgroups/commit/0f372c6d4a65a49c72b0afbd1aee6214637958bf) Merge pull request [#71](https://github.com/containerd/cgroups/pull/71) from JoeWrightss/patch-1 * [`f48bd85`](https://github.com/containerd/cgroups/commit/f48bd85c9cbc306fada0cebc3a646a1f1fe99afe) Fixs return error message * [`10cd53e`](https://github.com/containerd/cgroups/commit/10cd53efd916e22b9bdea67223d287684f57f1f4) Merge pull request [#70](https://github.com/containerd/cgroups/pull/70) from gliptak/patch-1 * [`64bade4`](https://github.com/containerd/cgroups/commit/64bade4cea6c438ee51a7a12528225946b42c6ca) Take value instead of pointer value * [`b49c471`](https://github.com/containerd/cgroups/commit/b49c4713f3824e81bfa67faddcdde1414171b54e) Correct ineffassign warning * [`3bc6dde`](https://github.com/containerd/cgroups/commit/3bc6dde829bc2dc8d4097ce8ad5acc275de3df06) Merge pull request [#68](https://github.com/containerd/cgroups/pull/68) from cclerget/master-net_prio-typo * [`6b552a8`](https://github.com/containerd/cgroups/commit/6b552a86e60e31903d3f8f3f494eda71f562cc54) Fix net_prio typo * [`c0437c3`](https://github.com/containerd/cgroups/commit/c0437c3dd5958f74d7f54e9f5def749850b9d6a1) Merge pull request [#67](https://github.com/containerd/cgroups/pull/67) from gpanouts/get-all-cgroup-tasks * [`a31a0ff`](https://github.com/containerd/cgroups/commit/a31a0ff985237eddf30d9fe30a3643c7da4ae912) Add functionality for retrieving all tasks of a cgroup * [`82cb49f`](https://github.com/containerd/cgroups/commit/82cb49fc1779971dfef4ad696f1453f6f44987b1) Merge pull request [#63](https://github.com/containerd/cgroups/pull/63) from ChrsMark/lenient-subsystems-checking * [`7d825b2`](https://github.com/containerd/cgroups/commit/7d825b29aecc02bb1e9bede427f8ed62bbc3030d) Add test for cgroups load when missing hierarchy in one subsystem * [`f6cbfb4`](https://github.com/containerd/cgroups/commit/f6cbfb45aec6a2590c7e7f4b84a080602b3e642d) Change Load function in order to be more lenient on subsystems' checking * [`965bb1d`](https://github.com/containerd/cgroups/commit/965bb1da4db7c8ce2690108c5a081562ce7493cb) Merge pull request [#66](https://github.com/containerd/cgroups/pull/66) from crosbymichael/systemdci * [`ab9ec0e`](https://github.com/containerd/cgroups/commit/ab9ec0e4abde2c2cb999719ff43af2d3b5830f75) Add go-systemd dep for CI testing * [`0e94a83`](https://github.com/containerd/cgroups/commit/0e94a83b6eb6cf4bc05d7f91ec1eaad57a77d3b6) Merge pull request [#59](https://github.com/containerd/cgroups/pull/59) from gliptak/patch-1 * [`4479d11`](https://github.com/containerd/cgroups/commit/4479d118c89b5500a08cce7a78bbe822229c1e65) Merge pull request [#62](https://github.com/containerd/cgroups/pull/62) from estesp/fix-gofmt * [`9beb998`](https://github.com/containerd/cgroups/commit/9beb998c23f510b1e6670ad7791807eb9aff6741) Merge pull request [#61](https://github.com/containerd/cgroups/pull/61) from gliptak/patch-3 * [`9a09e58`](https://github.com/containerd/cgroups/commit/9a09e5899acc95fabcc620d6489fec674e6dddfa) Fix gofmt of systemd.go * [`84e6e6e`](https://github.com/containerd/cgroups/commit/84e6e6ed2afdf661cd9dbf47c6f3412b546bc67f) Merge pull request [#60](https://github.com/containerd/cgroups/pull/60) from gliptak/patch-2 * [`e13f6cc`](https://github.com/containerd/cgroups/commit/e13f6cc3b9637c36e6a8af393b561127498f4be5) Add GoReportCard badge to README * [`d124595`](https://github.com/containerd/cgroups/commit/d124595ee85c245e7c1443fe402adf7ce4f7f6a4) Add Go 1.11 to Travis * [`d961ab9`](https://github.com/containerd/cgroups/commit/d961ab930c38eb8bedcded479f1708b2ef4984c5) Correct typo * [`d240072`](https://github.com/containerd/cgroups/commit/d2400726cfa7904fb79e3b896ec0e6ae500a76bd) Merge pull request [#57](https://github.com/containerd/cgroups/pull/57) from estesp/project-update * [`e4cf832`](https://github.com/containerd/cgroups/commit/e4cf832b95deb7ce898ece716307abc35cbd0a09) Add project references and use common project travis * [`8baeff6`](https://github.com/containerd/cgroups/commit/8baeff6b9d069acde48ef1bedec7e0f8ba684f05) Merge pull request [#56](https://github.com/containerd/cgroups/pull/56) from grantseltzer/patch-1 * [`9de57ff`](https://github.com/containerd/cgroups/commit/9de57ffeb46f6179333d7939436d92dcb5631e5f) Add godoc badge to README.md * [`5017d4e`](https://github.com/containerd/cgroups/commit/5017d4e9a9cf2d4381db99eacd9baf84b95bfb14) Merge pull request [#54](https://github.com/containerd/cgroups/pull/54) from WeiZhang555/bugfix * [`13aaafd`](https://github.com/containerd/cgroups/commit/13aaafdc37e772059d3234ec762303537f440c5b) Bugfix: can't write to cpuset cgroup * [`58556f5`](https://github.com/containerd/cgroups/commit/58556f5ad8448d99a6f7bea69ea4bdb7747cfeb0) Merge pull request [#53](https://github.com/containerd/cgroups/pull/53) from baude/systemdslicedelegate * [`15ed73c`](https://github.com/containerd/cgroups/commit/15ed73c1c075e6590ecf56170acedcba0da8167e) systemd-239+ no longer allows delegate slice * [`3024bc7`](https://github.com/containerd/cgroups/commit/3024bc7cc0c88af4b32d38a14444f38e65ab169f) Merge pull request [#52](https://github.com/containerd/cgroups/pull/52) from Sykomaniac/bugfix/slice-name * [`2596f33`](https://github.com/containerd/cgroups/commit/2596f332e449ea374f0f24a977437116714ce7ef) Remove call to unitName * [`2e2922e`](https://github.com/containerd/cgroups/commit/2e2922e146ed53ccf4481c245187b6afe244fded) Merge pull request [#51](https://github.com/containerd/cgroups/pull/51) from containerd/type * [`0f3de2f`](https://github.com/containerd/cgroups/commit/0f3de2f77d3b76b3871242fbab2a6116179229af) Fix empty device type ### Changes from containerd/cri * [`a92c4001`](https://github.com/containerd/cri/commit/a92c40017473cbe0239ce180125f12669757e44f) Merge pull request [#1086](https://github.com/containerd/cri/pull/1086) from Random-Liu/cherrypick-#1085-release-1.2 * [`616d154e`](https://github.com/containerd/cri/commit/616d154eb0b6a4a290eb2b593e3a35e135373c9c) Fix /etc/hostname backward compatibility issue for in-place upgrade. * [`8e7ca12f`](https://github.com/containerd/cri/commit/8e7ca12f411d65de58ca672e8e4a0c1464b4fe34) Merge pull request [#1081](https://github.com/containerd/cri/pull/1081) from Random-Liu/cherrypick-#1056-release-1.2 * [`989fb1ab`](https://github.com/containerd/cri/commit/989fb1abe9a3b89199683ac4f19ed01b9403d584) Add an OCI annotation for sandbox log directory. * [`0eee55a2`](https://github.com/containerd/cri/commit/0eee55a2ba8d006cb4da963ce92c78f5f9615cbd) Merge pull request [#1074](https://github.com/containerd/cri/pull/1074) from Random-Liu/cherrypick-#1072-release-1.2 * [`4d4f610e`](https://github.com/containerd/cri/commit/4d4f610e65945ec1a6cec078413fc1545c3a55c5) Use clean path for map and comparison. * [`9c25ab5b`](https://github.com/containerd/cri/commit/9c25ab5b9937f2f54b17286d376825f3082ee0c2) Merge pull request [#1067](https://github.com/containerd/cri/pull/1067) from Random-Liu/cherrypick-#1055-release-1.2 * [`eaf8efc5`](https://github.com/containerd/cri/commit/eaf8efc51e72abd68d979a26dbb1e26541eb4752) Use the correct sandbox config. * [`afbdeacc`](https://github.com/containerd/cri/commit/afbdeaccd5e695b91a28e423ada14b480f4b6bd3) Merge pull request [#1050](https://github.com/containerd/cri/pull/1050) from Random-Liu/update-containerd-release-1.2 * [`72fab7c8`](https://github.com/containerd/cri/commit/72fab7c85337cc88110f9bc64ab91a057dc17c00) Update containerd to 583472f67a3d7c258f874347339688de05802790. ### Dependency Changes Previous release can be found at [v1.2.4](https://github.com/containerd/containerd/releases/tag/v1.2.4) * **github.com/containerd/cgroups** 5e610833b72089b37d0e615de9a92dfc043757c2 -> dbea6f2bd41658b84b00417ceefa416b979cbf10 * **github.com/containerd/cri** da0c016c830b2ea97fd1d737c49a568a816bf964 -> a92c40017473cbe0239ce180125f12669757e44f * **github.com/opencontainers/runc** 6635b4f0c6af3810594d2770f662f34ddc15b40d -> 2b18fe1d885ee5083ef9f0838fee39b62d653e30