Skip to content
containerd 1.3.1

Welcome to the v1.3.1 release of containerd!

The first patch release for `containerd` 1.3 includes a fix for a hang on pull
when there is a registry error and important vendor updates.

### Notable Updates

* Fix deadlock on image pull and unpack after a registry error [containerd/containerd#3816](https://github.com/containerd/containerd/issues/3816).
* Update the runc vendor to v1.0.0-rc9 which includes an additional mitigation for [CVE-2019-16884](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16884).
    - More details on the runc CVE in [opencontainers/runc#2128](https://github.com/opencontainers/runc/issues/2128), and the additional mitigations in [opencontainers/runc#2130](https://github.com/opencontainers/runc/pull/2130).
* Add local-fs.target to service file to fix corrupt image after unexpected host reboot. Reported in [containerd/containerd#3671](https://github.com/containerd/containerd/issues/3671), and fixed by [containerd/containerd#3745](https://github.com/containerd/containerd/pull/3745).
* Fix large output of processes with TTY getting occasionally truncated. Reported in [containerd/containerd#3738](https://github.com/containerd/containerd/issues/3738) and fixed by [containerd/containerd#3754](https://github.com/containerd/containerd/pull/3754).
* Fix direct unpack when running in user namespace. Reported in [containerd/containerd#3762](https://github.com/containerd/containerd/issues/3762), and fixed by [containerd/containerd#3779](https://github.com/containerd/containerd/pull/3779).
* Update Golang runtime to 1.12.13, which includes security fixes to the `crypto/dsa` package made in Go 1.12.11 ([CVE-2019-17596](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-17596)), and fixes to the go command, `runtime`, `syscall` and `net` packages (Go 1.12.12).
* Add Windows process shim installer [containerd/containerd#3792](https://github.com/containerd/containerd/pull/3792)

* CRI fixes:
    - Fix shim delete error code to avoid unnecessary retries in the CRI plugin. Discovered in [containerd/cri#1309](https://github.com/containerd/cri/issues/1309), and fixed by [containerd/containerd#3733](https://github.com/containerd/containerd/pull/3733) and [containerd/containerd#3740](https://github.com/containerd/containerd/pull/3740).

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

### Contributors

* Michael Crosby
* Sebastiaan van Stijn
* Derek McGowan
* Phil Estes
* Lantao Liu
* Wei Fu
* Akihiro Suda
* Ameya Gawde
* Eli Uriegas
* Maksym Pavlenko

### Changes

* [`c7a4f874b3`](https://github.com/containerd/containerd/commit/c7a4f874b3267c499484aae602d1257b12d69e40) Merge pull request  [#3812](https://github.com/containerd/containerd/pull/3812) from thaJeztah/release_1.3.1
* [`b87c7aa46a`](https://github.com/containerd/containerd/commit/b87c7aa46a6174da5be4c95681ffb7ce63ddcd8a) Update 1.3.1 release notes
* [`d512382924`](https://github.com/containerd/containerd/commit/d512382924ff24c78b1177b74ecb27873e586655) Prepare v1.3.1 release
* [`89d3753aa3`](https://github.com/containerd/containerd/commit/89d3753aa358760cd29a80d9c53cedf1f487df33) Merge pull request  [#3834](https://github.com/containerd/containerd/pull/3834) from Random-Liu/cherrypick-#3825-1.3
* [`a18acaf2cf`](https://github.com/containerd/containerd/commit/a18acaf2cfdcaff92c673c3ae4c01cbd582af945) Avoid deadlock in unpacker.
* [`b5ede206a4`](https://github.com/containerd/containerd/commit/b5ede206a4e359b4e80dc8d809bc39b2635e0e08) Merge pull request  [#3822](https://github.com/containerd/containerd/pull/3822) from fuweid/cherry-pick-3819-1.3
* [`780b5d5fc2`](https://github.com/containerd/containerd/commit/780b5d5fc2a436d40e3df88da08caf071f1b2b3a) Merge pull request  [#3807](https://github.com/containerd/containerd/pull/3807) from thaJeztah/1.3_backport_limit_travis_release
* [`e19c621d0d`](https://github.com/containerd/containerd/commit/e19c621d0d41f98f15987181bf4b078cf56ef94d) snapshots: return error if readSnapshot fails
* [`54658b8831`](https://github.com/containerd/containerd/commit/54658b8831a7382bc79bf0b11ca591951c56aa6b) Merge pull request  [#3808](https://github.com/containerd/containerd/pull/3808) from thaJeztah/1.3_backport_bump_golang_1.12.13
* [`f7e59ae1a3`](https://github.com/containerd/containerd/commit/f7e59ae1a315f040b52e3aa1de25b185dc6aea31) Update to Golang 1.12.13
* [`9488dd85ee`](https://github.com/containerd/containerd/commit/9488dd85eea3076311d6153dba37a26144594c8c) Revert "[release/1.3] pin travis to go 1.12.12"
* [`e70ee589e4`](https://github.com/containerd/containerd/commit/e70ee589e4665e2dce3ac3926a1c455606bbaf75) Limit travis release script to a single build
* [`0aeaac0331`](https://github.com/containerd/containerd/commit/0aeaac0331b9cea06f6e68456b0aed764b2b4afb) Merge pull request  [#3792](https://github.com/containerd/containerd/pull/3792) from ameyag/windows-shim-backport
* [`067be94641`](https://github.com/containerd/containerd/commit/067be94641892210fa7aa99c59ea77fe13312c2b) windows process shim installer
* [`d6f0c29b1b`](https://github.com/containerd/containerd/commit/d6f0c29b1b0c50e99197a5c9d4441566c075293e) Merge pull request  [#3779](https://github.com/containerd/containerd/pull/3779) from AkihiroSuda/disable-mknod00-in-userns-1.3
* [`f3c48daf71`](https://github.com/containerd/containerd/commit/f3c48daf71838b745f9fc5ae4f9f316de4b4aaf5) apply: use naive applier when running in UserNS
* [`7af311b420`](https://github.com/containerd/containerd/commit/7af311b4200b464a79c340b4e3a2799f8906ee8d) Merge pull request  [#3769](https://github.com/containerd/containerd/pull/3769) from thaJeztah/1.3_backport_bump_golang_1.12.x
* [`c345050705`](https://github.com/containerd/containerd/commit/c345050705454e7087a5aa43db18bcca72a94d5a) Merge pull request  [#3772](https://github.com/containerd/containerd/pull/3772) from estesp/update-vndr-1.3
* [`033612194b`](https://github.com/containerd/containerd/commit/033612194b3ddc7514f2e2d425443ea98351cebb) Catch up vndr with state of vendor/ dir
* [`7f6f2c7d4f`](https://github.com/containerd/containerd/commit/7f6f2c7d4fbcae8d95b4561107400e0d77701a29) [release/1.3] pin travis to go 1.12.12
* [`23b0ca70fe`](https://github.com/containerd/containerd/commit/23b0ca70feadeda6b9f1f7072e71687c660590ca) Update Golang 1.12.12 (CVE-2019-17596)
* [`aa98dc6e4d`](https://github.com/containerd/containerd/commit/aa98dc6e4dd1c4bd3cbc19a3c48cdb0fdc571d66) Merge pull request  [#3754](https://github.com/containerd/containerd/pull/3754) from estesp/cp-1.3-3743
* [`0f6aab184a`](https://github.com/containerd/containerd/commit/0f6aab184af34eea54526733012a4ad971d131aa) Handle large output in v2 shim with TTY
* [`7aaa8fc685`](https://github.com/containerd/containerd/commit/7aaa8fc685620941861aecbd000c2cfbc7ad2728) Merge pull request  [#3751](https://github.com/containerd/containerd/pull/3751) from AkihiroSuda/native-copydir-allow-xattr-errors-1.3
* [`1c3929e594`](https://github.com/containerd/containerd/commit/1c3929e594c4c70ff31b6e96e853d3cc94d2233f) Merge pull request  [#3748](https://github.com/containerd/containerd/pull/3748) from seemethere/fix_man_1_3
* [`f6a32a79e1`](https://github.com/containerd/containerd/commit/f6a32a79e1e698a29086c2ecff99b272af5b4ab3) snapshots/native: ignore xattr errors during CopyDir
* [`3866900d62`](https://github.com/containerd/containerd/commit/3866900d6207efac854d88343cecd57031e812cf) Merge pull request  [#3745](https://github.com/containerd/containerd/pull/3745) from crosbymichael/localfs3
* [`ffb05aeb1f`](https://github.com/containerd/containerd/commit/ffb05aeb1f61910dd20a0f0fa9a70c059e0a7051) build: Fix manpage generation
* [`d168e8ebeb`](https://github.com/containerd/containerd/commit/d168e8ebeb463df7e8bbca2f6bcccb51615dba3c) Add local-fs.target to service file
* [`0b43a3115a`](https://github.com/containerd/containerd/commit/0b43a3115a4354c18262d1c10766e2b32c91a596) Merge pull request  [#3740](https://github.com/containerd/containerd/pull/3740) from estesp/cp-1.3-3736
* [`b3e9ded8ce`](https://github.com/containerd/containerd/commit/b3e9ded8ce8211ae39e80320fce1eb64ed706aa0) Fix delete error code on the containerd daemon side.
* [`ea86733a56`](https://github.com/containerd/containerd/commit/ea86733a56606b876739e2f7ccee3f699f84686d) Merge pull request  [#3733](https://github.com/containerd/containerd/pull/3733) from Random-Liu/cherrypick-#3730-release-1.3
* [`6746ae3e0a`](https://github.com/containerd/containerd/commit/6746ae3e0a4c4fbd33c230542b0e7dfb1108b99c) Fix shim delete error code.
* [`efd38f483c`](https://github.com/containerd/containerd/commit/efd38f483c96edb0e16d4a8d25857e0479430b53) Merge pull request  [#3724](https://github.com/containerd/containerd/pull/3724) from thaJeztah/1.3_backport_bump_runc_1.0.0-rc9
* [`6cbad87819`](https://github.com/containerd/containerd/commit/6cbad87819a5308d68fad09fcb43e3d89e506ee6) bump runc v1.0.0-rc9
* [`dfc256fcc7`](https://github.com/containerd/containerd/commit/dfc256fcc75590c3209bfd627871d7885d94d1c4) Bump runc to 1b8a1eeec3f337ab5d94f28980

### Dependency Changes

Previous release can be found at [v1.3.0](https://github.com/containerd/containerd/releases/tag/v1.3.0)

* **github.com/opencontainers/runc**  3e425f80a8c931f88e6d94a8c831b9d5aa481657 -> d736ef14f0288d6993a1845745d6756cfc9ddd5a