Releases: UiPath/containerd
Releases · UiPath/containerd
containerd 2.1.5
Welcome to the v2.1.5 release of containerd!
The fifth patch release for containerd 2.1 contains various fixes and updates.
Security Updates
-
containerd
-
runc
Highlights
Container Runtime Interface (CRI)
- Disable event subscriber during task cleanup (#12410)
- Add SystemdCgroup to default runtime options (#12253)
- Fix userns with container image VOLUME mounts that need copy (#12242)
Image Distribution
- Ensure errContentRangeIgnored error when range-get request is ignored (#12312)
Runtime
- Update runc binary to v1.3.3 (#12478)
Deprecations
- Postpone v2.2 deprecation items to v2.3 (#12431)
Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.
Contributors
- Phil Estes
- Akihiro Suda
- Derek McGowan
- Austin Vazquez
- Rodrigo Campos
- Maksym Pavlenko
- Wei Fu
- ningmingxiao
- Akhil Mohan
- Henry Wang
- Andrew Halaney
- Divya Rani
- Jose Fernandez
- Swagat Bora
- wheat2018
Changes
58 commits
- Prepare release notes for v2.1.5 (#12483)
- Update runc binary to v1.3.3 (#12478)
3d713d3d0runc: Update runc binary to v1.3.3
- Update GHA runners to use latest images for basic binaries build (#12470)
de4221cb7Update GHA runners to use latest images for basic binaries build
- ci: bump Go 1.24.9, 1.25.3 (#12467)
2045b1920ci: bump Go 1.24.9, 1.25.3
- Update GHA runners to use latest image for most jobs (#12468)
21ec7cc7dUpdate GHA runners to use latest image for most jobs
- CI: update Fedora to 43 (#12449)
893b5f92eCI: update Fedora to 43
- Postpone v2.2 deprecation items to v2.3 (#12431)
6374a8f9dPostpone v2.2 deprecation items to v2.3
- CI: skip ubuntu-24.04-arm on private repos (#12427)
98e0e73deCI: skip ubuntu-24.04-arm on private repos
- Disable event subscriber during task cleanup (#12410)
a3770cf83cri/server/podsandbox: disable event subscriber
- Fix lost container logs from quickly closing io (#12377)
7d9f09ba0bugfix:fix container logs lost because io close too quickly
- ci: bump Go 1.24.8 (#12360)
d1cab3cc5ci: bump Go 1.24.8
- Prevent goroutine hangs during ProgressTracker shutdown (#12336)
9b57a4d35Prevent goroutine hangs during ProgressTracker shutdown
- Ensure errContentRangeIgnored error when range-get request is ignored (#12312)
ca3de4fe7Ensure errContentRangeIgnored error when range-get request is ignored by registry
- Remove additional fuzzers from instrumentation repo (#12313)
dfffe3d9cRemove additional fuzzers from CI
- update release builds to 1.24.7 and add 1.25.1 to CI (#12258)
c54585ba7update release builds to 1.24.7 and add 1.25.1 to CI
- runc:Update runc binary to v1.3.1 (#12277)
f0a48ce38runc:Update runc binary to v1.3.1
- Add SystemdCgroup to default runtime options (#12253)
f13f8c431add SystemdCgroup to default runtime options
- install-runhcs-shim: fetch target commit instead of tags (#12256)
42bb71e1einstall-runhcs-shim: fetch target commit instead of tags
- Fix userns with container image VOLUME mounts that need copy (#12242)
- Fix overlayfs issues related to user namespace (#12222)
f40bfc46bcore/mount: Retry unmounting idmapped directories1f51d2deacore/mount: Test cleanup of DoPrepareIDMappedOverlay()8fbf8c503core/mount: Properly cleanup on doPrepareIDMappedOverlay errorsb9d678e15core/mount: Don't call nil function on errors583fe2d24core/mount: Only idmap once per overlayfs, not per layer
- Add documentation for cgroup_writable field (#12229)
4832b4d15Add documentation for cgroup_writable field
- fix: create bootstrap.json with 0644 permission (#12183)
3c174cf64fix: create bootstrap.json with 0644 permission
- ci: bump Go 1.23.12, 1.24.6 (#12186)
74b0505ebci: bump Go 1.23.12, 1.24.6
- sys: fix pidfd leak in UnshareAfterEnterUserns (#12179)
5ef6ea747sys: fix pidfd leak in UnshareAfterEnterUserns
Dependency Changes
This release has no dependency changes
Previous release can be found at v2.1.4
Which file should I download?
- `co...
containerd 2.1.0-beta.0
v2.1.0-beta.0
This tag was signed with the committer’s verified signature.
dmcgowan
Derek McGowan
Welcome to the v2.1.0-beta.0 release of containerd!
This is a pre-release of containerd
The 2.1 beta series is here, see the 2.1 milestone to track
ongoing efforts. Please try out the beta and report any issues!
The first minor release of containerd 2.x focuses on continued stability alongside
new features and improvements. This is the first time-based released for containerd.
Most the feature set and core functionality has long been stable and harderened in production
environments, so now we transition to a balance of timely delivery of new functionality
with the same high confidence in stability and performance.
Highlights
- Erofs snapshotter and differ (#10705)
- Fix race between serve and immediate shutdown on the server (containerd/ttrpc#175)
Container Runtime Interface (CRI)
- Add OCI/Image Volume Source support (#10579)
- Enable Writable cgroups for unprivileged containers (#11131)
- Fix recursive RLock() mutex acquisition (containerd/go-cni#126)
- Support CNI STATUS Verb (containerd/go-cni#123)
Image Distribution
- Add dial timeout field to hosts toml configuration (#11106)
Node Resource Interface (NRI)
- Expose Pod assigned IPs to NRI plugins (#10921)
Runtime
- Support multiple uid/gid mappings (#10722)
Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.
Contributors
- Akihiro Suda
- Derek McGowan
- Phil Estes
- Maksym Pavlenko
- Jin Dong
- Sebastiaan van Stijn
- Wei Fu
- Samuel Karp
- Austin Vazquez
- Kazuyoshi Kato
- Henry Wang
- Mike Brown
- Akhil Mohan
- Gao Xiang
- Archit Kulkarni
- Krisztian Litkey
- ningmingxiao
- Alexey Lunev
- Antonio Ojea
- Chris Henzie
- Davanum Srinivas
- Marat Radchenko
- Michael Zappa
- Paweł Gronowski
- Adrien Delorme
- Amit Barve
- Andrey Smirnov
- Divya
- Etienne Champetier
- Kirtana Ashok
- fengwei0328
- zounengren
- Adrian Reber
- Alfred Wingate
- Amal Thundiyil
- Athos Ribeiro
- Brian Goff
- ChengyuZhu6
- Chongyi Zheng
- Craig Ingram
- David Son
- Fupan Li
- Jing Xu
- Jonathan A. Sternberg
- Jose Fernandez
- Kaita Nakamura
- Lei Liu
- Mike Baynton
- Philip Laine
- Qiyuan Liang
- Sameer
- Shiming Zhang
- Vered Rosen
- alingse
- bo.jiang
- chriskery
- luchenhan
- mahmut
Changes
433 commits
b430e5ac3Merge commit from forkde1341c20validate uid/gid- Bump github.com/go-jose/go-jose/v4 from 4.0.4 to 4.0.5 (#11544)
- fix: repeat args from sub-func call (#11512)
b947e0566fix: repeat args from sub-func call
- build(deps): bump github.com/prometheus/client_golang from 1.20.5 to 1.21.1 (#11525)
75252f975build(deps): bump github.com/prometheus/client_golang
- integration: update TestUpgrade for 2.1 (#11519)
06daffb4dintegration: update TestUpgrade for 2.1
- config:fix config migrate lost timeout config (#11532)
531adbf06config:fix config migrate lost timeout config
- Add dial timeout field to hosts toml configuration (#11106)
c4982bffcAdd dial timeout field to hosts toml configuration
- Prepare release notes for v2.1.0-beta.0 (#11510)
- build(deps): bump the otel group with 8 updates (#11521)
94dd70f4fbuild(deps): bump the otel group with 8 updates
- client: Respect
client.WithTimeoutoption (#11508)ee574e76eclient: Respectclient.WithTimeoutoption
- build(deps): bump github.com/urfave/cli/v2 from 2.27.5 to 2.27.6 (#11523)
700b98415build(deps): bump github.com/urfave/cli/v2 from 2.27.5 to 2.27.6
- build(deps): bump the golang-x group with 3 updates (#11520)
85c04ab0ebuild(deps): bump the golang-x group with 3 updates
- add k8s 1.32 to support table and as tested containerd supported branches at the time of release (#11534)
5bbd3ed1badd k8s 1.32 and as tested containerd supported branches at the time of release
- build(deps): bump google.golang.org/grpc from 1.70.0 to 1.71.0 (#11524)
c37e48b07build(deps): bump google.golang.org/grpc from 1.70.0 to 1.71.0
- Support container restore through CRI/Kubernetes (#10365)
9e6beafd5Support container restore through CRI/Kubernetes
- build(deps): bump actions/attest-build-provenance from 2.2.2 to 2.2.3 (#11526)
d7de182ddbuild(deps): bump actions/attest-build-provenance from 2.2.2 to 2.2.3
- build(deps): bump github/codeql-action from 3.28.10 to 3.28.11 (#11527)
9f885ea4fbuild(deps): bump github/codeql-action from 3.28.10 to 3.28.11
- build(deps): bump containerd/project-checks from 1.2.1 to 1.2.2 (#11528)
88faaac97build(deps): bump containerd/project-checks from 1.2.1 to 1.2.2
- add name in package version (#11518)
405a952c6add name in package version
- update to go1.23.7 / go1.24.1 (#11513)
4f090fe77update to go1.23.7 / go1.24.1
- Don't produce unnecessary logs when encountering attestations (#11327)
- perf(applyNaive): avoid walking the tree for each file in the same directory (#11337)
d8063c30dperf(applyNaive): ...
containerd 2.0.4
Welcome to the v2.0.4 release of containerd!
The fourth patch release for containerd 2.0 includes various bug fixes and updates.
Highlights
- Fix integer overflow in User ID handling (GHSA-265r-hfxg-fhmg)
- Respect
client.WithTimeoutoption on connect (#11536) - Update image type checks to avoid unnecessary logs for attestations (#11537)
Node Resource Interface (NRI)
- Fix incorrect runtime name being passed to NRI (#11529)
Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.
Contributors
- Derek McGowan
- Akihiro Suda
- Paweł Gronowski
- Akhil Mohan
- Phil Estes
- Samuel Karp
- Craig Ingram
- ningmingxiao
Changes
19 commits
1a43cb6a1Merge commit from fork07a0b5419(cherry picked from commit de1341c)- Prepare release notes for v2.0.4 (#11541)
06a886a8ePrepare release notes for v2.0.4
- Respect
client.WithTimeoutoption on connect (#11536)6b5efba83client: Respectclient.WithTimeoutoption
- Update image type checks to avoid unnecessary logs for attestations (#11537)
- Fix incorrect runtime name being passed to NRI (#11529)
4f037050cadd name in package version
- update build to go1.23.7, test go1.24.1 (#11514)
e5ad0d0a0update build to go1.23.7, test go1.24.1
- docs: include note about unprivileged sysctls (#11506)
a39f1146bdocs: include note about unprivileged sysctls
- e2e: use the shim bundled with containerd artifact (#11503)
81b3384a0e2e: use the shim bundled with containerd artifact
- build(deps): bump containerd/project-checks from 1.1.0 to 1.2.1 (#11497)
7215a7d2cbuild(deps): bump containerd/project-checks from 1.1.0 to 1.2.1
Dependency Changes
This release has no dependency changes
Previous release can be found at v2.0.3
Which file should I download?
containerd-<VERSION>-<OS>-<ARCH>.tar.gz: ✅Recommended. Dynamically linked with glibc 2.31 (Ubuntu 20.04).containerd-static-<VERSION>-<OS>-<ARCH>.tar.gz: Statically linked. Expected to be used on non-glibc Linux distributions. Not position-independent.
In addition to containerd, typically you will have to install runc
and CNI plugins from their official sites too.
See also the Getting Started documentation.