containerd 1.3.1 Welcome to the v1.3.1 release of containerd! The first patch release for `containerd` 1.3 includes a fix for a hang on pull when there is a registry error and important vendor updates. ### Notable Updates * Fix deadlock on image pull and unpack after a registry error [containerd/containerd#3816](https://github.com/containerd/containerd/issues/3816). * Update the runc vendor to v1.0.0-rc9 which includes an additional mitigation for [CVE-2019-16884](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16884). - More details on the runc CVE in [opencontainers/runc#2128](https://github.com/opencontainers/runc/issues/2128), and the additional mitigations in [opencontainers/runc#2130](https://github.com/opencontainers/runc/pull/2130). * Add local-fs.target to service file to fix corrupt image after unexpected host reboot. Reported in [containerd/containerd#3671](https://github.com/containerd/containerd/issues/3671), and fixed by [containerd/containerd#3745](https://github.com/containerd/containerd/pull/3745). * Fix large output of processes with TTY getting occasionally truncated. Reported in [containerd/containerd#3738](https://github.com/containerd/containerd/issues/3738) and fixed by [containerd/containerd#3754](https://github.com/containerd/containerd/pull/3754). * Fix direct unpack when running in user namespace. Reported in [containerd/containerd#3762](https://github.com/containerd/containerd/issues/3762), and fixed by [containerd/containerd#3779](https://github.com/containerd/containerd/pull/3779). * Update Golang runtime to 1.12.13, which includes security fixes to the `crypto/dsa` package made in Go 1.12.11 ([CVE-2019-17596](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-17596)), and fixes to the go command, `runtime`, `syscall` and `net` packages (Go 1.12.12). * Add Windows process shim installer [containerd/containerd#3792](https://github.com/containerd/containerd/pull/3792) * CRI fixes: - Fix shim delete error code to avoid unnecessary retries in the CRI plugin. Discovered in [containerd/cri#1309](https://github.com/containerd/cri/issues/1309), and fixed by [containerd/containerd#3733](https://github.com/containerd/containerd/pull/3733) and [containerd/containerd#3740](https://github.com/containerd/containerd/pull/3740). Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ### Contributors * Michael Crosby * Sebastiaan van Stijn * Derek McGowan * Phil Estes * Lantao Liu * Wei Fu * Akihiro Suda * Ameya Gawde * Eli Uriegas * Maksym Pavlenko ### Changes * [`c7a4f874b3`](https://github.com/containerd/containerd/commit/c7a4f874b3267c499484aae602d1257b12d69e40) Merge pull request [#3812](https://github.com/containerd/containerd/pull/3812) from thaJeztah/release_1.3.1 * [`b87c7aa46a`](https://github.com/containerd/containerd/commit/b87c7aa46a6174da5be4c95681ffb7ce63ddcd8a) Update 1.3.1 release notes * [`d512382924`](https://github.com/containerd/containerd/commit/d512382924ff24c78b1177b74ecb27873e586655) Prepare v1.3.1 release * [`89d3753aa3`](https://github.com/containerd/containerd/commit/89d3753aa358760cd29a80d9c53cedf1f487df33) Merge pull request [#3834](https://github.com/containerd/containerd/pull/3834) from Random-Liu/cherrypick-#3825-1.3 * [`a18acaf2cf`](https://github.com/containerd/containerd/commit/a18acaf2cfdcaff92c673c3ae4c01cbd582af945) Avoid deadlock in unpacker. * [`b5ede206a4`](https://github.com/containerd/containerd/commit/b5ede206a4e359b4e80dc8d809bc39b2635e0e08) Merge pull request [#3822](https://github.com/containerd/containerd/pull/3822) from fuweid/cherry-pick-3819-1.3 * [`780b5d5fc2`](https://github.com/containerd/containerd/commit/780b5d5fc2a436d40e3df88da08caf071f1b2b3a) Merge pull request [#3807](https://github.com/containerd/containerd/pull/3807) from thaJeztah/1.3_backport_limit_travis_release * [`e19c621d0d`](https://github.com/containerd/containerd/commit/e19c621d0d41f98f15987181bf4b078cf56ef94d) snapshots: return error if readSnapshot fails * [`54658b8831`](https://github.com/containerd/containerd/commit/54658b8831a7382bc79bf0b11ca591951c56aa6b) Merge pull request [#3808](https://github.com/containerd/containerd/pull/3808) from thaJeztah/1.3_backport_bump_golang_1.12.13 * [`f7e59ae1a3`](https://github.com/containerd/containerd/commit/f7e59ae1a315f040b52e3aa1de25b185dc6aea31) Update to Golang 1.12.13 * [`9488dd85ee`](https://github.com/containerd/containerd/commit/9488dd85eea3076311d6153dba37a26144594c8c) Revert "[release/1.3] pin travis to go 1.12.12" * [`e70ee589e4`](https://github.com/containerd/containerd/commit/e70ee589e4665e2dce3ac3926a1c455606bbaf75) Limit travis release script to a single build * [`0aeaac0331`](https://github.com/containerd/containerd/commit/0aeaac0331b9cea06f6e68456b0aed764b2b4afb) Merge pull request [#3792](https://github.com/containerd/containerd/pull/3792) from ameyag/windows-shim-backport * [`067be94641`](https://github.com/containerd/containerd/commit/067be94641892210fa7aa99c59ea77fe13312c2b) windows process shim installer * [`d6f0c29b1b`](https://github.com/containerd/containerd/commit/d6f0c29b1b0c50e99197a5c9d4441566c075293e) Merge pull request [#3779](https://github.com/containerd/containerd/pull/3779) from AkihiroSuda/disable-mknod00-in-userns-1.3 * [`f3c48daf71`](https://github.com/containerd/containerd/commit/f3c48daf71838b745f9fc5ae4f9f316de4b4aaf5) apply: use naive applier when running in UserNS * [`7af311b420`](https://github.com/containerd/containerd/commit/7af311b4200b464a79c340b4e3a2799f8906ee8d) Merge pull request [#3769](https://github.com/containerd/containerd/pull/3769) from thaJeztah/1.3_backport_bump_golang_1.12.x * [`c345050705`](https://github.com/containerd/containerd/commit/c345050705454e7087a5aa43db18bcca72a94d5a) Merge pull request [#3772](https://github.com/containerd/containerd/pull/3772) from estesp/update-vndr-1.3 * [`033612194b`](https://github.com/containerd/containerd/commit/033612194b3ddc7514f2e2d425443ea98351cebb) Catch up vndr with state of vendor/ dir * [`7f6f2c7d4f`](https://github.com/containerd/containerd/commit/7f6f2c7d4fbcae8d95b4561107400e0d77701a29) [release/1.3] pin travis to go 1.12.12 * [`23b0ca70fe`](https://github.com/containerd/containerd/commit/23b0ca70feadeda6b9f1f7072e71687c660590ca) Update Golang 1.12.12 (CVE-2019-17596) * [`aa98dc6e4d`](https://github.com/containerd/containerd/commit/aa98dc6e4dd1c4bd3cbc19a3c48cdb0fdc571d66) Merge pull request [#3754](https://github.com/containerd/containerd/pull/3754) from estesp/cp-1.3-3743 * [`0f6aab184a`](https://github.com/containerd/containerd/commit/0f6aab184af34eea54526733012a4ad971d131aa) Handle large output in v2 shim with TTY * [`7aaa8fc685`](https://github.com/containerd/containerd/commit/7aaa8fc685620941861aecbd000c2cfbc7ad2728) Merge pull request [#3751](https://github.com/containerd/containerd/pull/3751) from AkihiroSuda/native-copydir-allow-xattr-errors-1.3 * [`1c3929e594`](https://github.com/containerd/containerd/commit/1c3929e594c4c70ff31b6e96e853d3cc94d2233f) Merge pull request [#3748](https://github.com/containerd/containerd/pull/3748) from seemethere/fix_man_1_3 * [`f6a32a79e1`](https://github.com/containerd/containerd/commit/f6a32a79e1e698a29086c2ecff99b272af5b4ab3) snapshots/native: ignore xattr errors during CopyDir * [`3866900d62`](https://github.com/containerd/containerd/commit/3866900d6207efac854d88343cecd57031e812cf) Merge pull request [#3745](https://github.com/containerd/containerd/pull/3745) from crosbymichael/localfs3 * [`ffb05aeb1f`](https://github.com/containerd/containerd/commit/ffb05aeb1f61910dd20a0f0fa9a70c059e0a7051) build: Fix manpage generation * [`d168e8ebeb`](https://github.com/containerd/containerd/commit/d168e8ebeb463df7e8bbca2f6bcccb51615dba3c) Add local-fs.target to service file * [`0b43a3115a`](https://github.com/containerd/containerd/commit/0b43a3115a4354c18262d1c10766e2b32c91a596) Merge pull request [#3740](https://github.com/containerd/containerd/pull/3740) from estesp/cp-1.3-3736 * [`b3e9ded8ce`](https://github.com/containerd/containerd/commit/b3e9ded8ce8211ae39e80320fce1eb64ed706aa0) Fix delete error code on the containerd daemon side. * [`ea86733a56`](https://github.com/containerd/containerd/commit/ea86733a56606b876739e2f7ccee3f699f84686d) Merge pull request [#3733](https://github.com/containerd/containerd/pull/3733) from Random-Liu/cherrypick-#3730-release-1.3 * [`6746ae3e0a`](https://github.com/containerd/containerd/commit/6746ae3e0a4c4fbd33c230542b0e7dfb1108b99c) Fix shim delete error code. * [`efd38f483c`](https://github.com/containerd/containerd/commit/efd38f483c96edb0e16d4a8d25857e0479430b53) Merge pull request [#3724](https://github.com/containerd/containerd/pull/3724) from thaJeztah/1.3_backport_bump_runc_1.0.0-rc9 * [`6cbad87819`](https://github.com/containerd/containerd/commit/6cbad87819a5308d68fad09fcb43e3d89e506ee6) bump runc v1.0.0-rc9 * [`dfc256fcc7`](https://github.com/containerd/containerd/commit/dfc256fcc75590c3209bfd627871d7885d94d1c4) Bump runc to 1b8a1eeec3f337ab5d94f28980 ### Dependency Changes Previous release can be found at [v1.3.0](https://github.com/containerd/containerd/releases/tag/v1.3.0) * **github.com/opencontainers/runc** 3e425f80a8c931f88e6d94a8c831b9d5aa481657 -> d736ef14f0288d6993a1845745d6756cfc9ddd5a