containerd 1.4.1 Welcome to the v1.4.1 release of containerd! The first patch release for `containerd` 1.4 includes a fix for v1 shims hanging on exit and exec when the log pipe fills up along with other minor changes. ### Notable Updates * Always consume shim logs to prevent logs in the shim from blocking [containerd/containerd#4546](https://github.com/containerd/containerd/pull/4546) * Fix error deleting v2 bundle directory when removing rootfs returns `ErrNotExist` [containerd/containerd#4472](https://github.com/containerd/containerd/pull/4472) * Fix metrics monitoring of v2 runtime tasks [containerd/containerd#4486](https://github.com/containerd/containerd/pull/4486) * Fix incorrect stat for Windows containers [containerd/containerd#4468](https://github.com/containerd/containerd/pull/4468) * Fix devmapper device deletion on rollback [containerd/containerd#4437](https://github.com/containerd/containerd/pull/4437) * Update seccomp default profile [containerd/containerd#4481](https://github.com/containerd/containerd/pull/4481) [#4491](https://github.com/containerd/containerd/pull/4491) [#4492](https://github.com/containerd/containerd/pull/4492) [#4493](https://github.com/containerd/containerd/pull/4493) Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ### Contributors * Sebastiaan van Stijn * Derek McGowan * Wei Fu * Brian Goff * Akihiro Suda * Antonio Ojea * Jintao Zhang * Phil Estes * Kazuyoshi Kato * Li Yuxuan * Mike Brown * Prashant Bhutani ### Changes <details><summary>36 commits</summary> <p> * [`c623d1b3`](https://github.com/containerd/containerd/commit/c623d1b36f09f8ef6536a057bd658b3aa8632828) Merge pull request [#4564](https://github.com/containerd/containerd/pull/4564) from dmcgowan/prepare-1.4.1 * [`97d690d2`](https://github.com/containerd/containerd/commit/97d690d20a975bf0ab83d02f94c09483c53cb07a) Prepare v1.4.1 release * [`910da2fb`](https://github.com/containerd/containerd/commit/910da2fba59dd9762ebb2682c7864712b90d6b84) Merge pull request [#4555](https://github.com/containerd/containerd/pull/4555) from thaJeztah/1.4_backport_bumpcni * [`ca3b91d8`](https://github.com/containerd/containerd/commit/ca3b91d858247ae5785c862b5b06254bb4aca2f6) Merge pull request [#4560](https://github.com/containerd/containerd/pull/4560) from dmcgowan/backport-4546 * [`42f38718`](https://github.com/containerd/containerd/commit/42f3871864a49f492d7a3f014ea3930c5f20b14d) Always consume shim logs * [`ea29a60a`](https://github.com/containerd/containerd/commit/ea29a60a9e55aa6b09bb27482988f7455498c63e) Merge pull request [#4558](https://github.com/containerd/containerd/pull/4558) from thaJeztah/1.4_backport_winstats * [`db931948`](https://github.com/containerd/containerd/commit/db931948050b536732cf024ebe7feacb2910ce1a) Merge pull request [#4557](https://github.com/containerd/containerd/pull/4557) from thaJeztah/1.4_backport_makefile_test_tags * [`9b5066aa`](https://github.com/containerd/containerd/commit/9b5066aa4d53344431b1819f0a7bdec18efbda32) Merge pull request [#4556](https://github.com/containerd/containerd/pull/4556) from thaJeztah/1.4_backport_fix_static_plugin * [`3bcce819`](https://github.com/containerd/containerd/commit/3bcce819915f040588a4c7db084bc5d7d566b28c) Merge pull request [#4554](https://github.com/containerd/containerd/pull/4554) from thaJeztah/1.4_backport_add_openat2_syscall * [`98a733e0`](https://github.com/containerd/containerd/commit/98a733e0bf6391329a33c1cbc72894cc5fcc0499) Merge pull request [#4552](https://github.com/containerd/containerd/pull/4552) from thaJeztah/1.4_backport_shim_exec_p_debug * [`f247618a`](https://github.com/containerd/containerd/commit/f247618a3663dfbd6d731647ad2fd48add96c4b8) Report correct stats for windows containers * [`cc5d1518`](https://github.com/containerd/containerd/commit/cc5d1518fa00f429be4c8d06845bef6348534e14) Update go list to respect build tags * [`086e859d`](https://github.com/containerd/containerd/commit/086e859d2172d524d9069e3a50871a62081eda09) BUILDING.md: fix description about static builds * [`16712ae4`](https://github.com/containerd/containerd/commit/16712ae4935cd5cddcf08fe08db19a456cbbab02) bump cni version to v0.8.0 * [`1575c88c`](https://github.com/containerd/containerd/commit/1575c88cc4a4750b74f47e699da0771e436ffb2a) seccomp: add `faccessat2` syscall. * [`8bd2bece`](https://github.com/containerd/containerd/commit/8bd2becea29c707a883053d484654c82bef72c65) seccomp: add `openat2` syscall. * [`4e3397e0`](https://github.com/containerd/containerd/commit/4e3397e05530bb3d15d8f8eda9b210deb9fd3e90) shimv1: downgrade poroccess missing log to debug * [`6b5fc7f2`](https://github.com/containerd/containerd/commit/6b5fc7f2044797cde2b8eea8fa59cf754e7b5d30) Merge pull request [#4542](https://github.com/containerd/containerd/pull/4542) from thaJeztah/1.4_backport_forward_signal_not_found * [`d118c90d`](https://github.com/containerd/containerd/commit/d118c90d35eaa7dd3f642ac2281c7d8a49f64580) Ignore SIGURG signals in signal forwarder * [`3ee6189f`](https://github.com/containerd/containerd/commit/3ee6189fef654bb36c5b5d23bde30d488c875ef3) Exit signal forward if process not found * [`1a367762`](https://github.com/containerd/containerd/commit/1a3677627dde29d376cc768c8c38368bd15e76f5) Merge pull request [#4512](https://github.com/containerd/containerd/pull/4512) from fuweid/14-cherry-pick-4486 * [`a1289d6b`](https://github.com/containerd/containerd/commit/a1289d6b81ef09e2ec6be12e3c1f04daca39c927) tasks: Monitor v2 tasks in initFunc as well * [`12f20c99`](https://github.com/containerd/containerd/commit/12f20c9963a4f74fb813a02e9e94d0246c7f3c1b) Merge pull request [#4503](https://github.com/containerd/containerd/pull/4503) from thaJeztah/1.4_backport_seccomp_updates * [`1f823f76`](https://github.com/containerd/containerd/commit/1f823f76d4734366570f8fb378ec707dc96d4607) seccomp: allow io-uring related system calls * [`3d28944b`](https://github.com/containerd/containerd/commit/3d28944befd7338b30725f93a0d8acd794bac883) seccomp: allow clock_settime when CAP_SYS_TIME is added * [`e5cc7d52`](https://github.com/containerd/containerd/commit/e5cc7d5276edb02033d6a7fd2c9d5ba9ac1a6022) seccomp: allow quotactl with CAP_SYS_ADMIN * [`20273a80`](https://github.com/containerd/containerd/commit/20273a803eee39adb7c0580a1d7fc5a673f9cf8c) seccomp: allow sync_file_range2 on supported architectures. * [`357d1002`](https://github.com/containerd/containerd/commit/357d10021a0a4f32f4fcb5ac51f59ff38a345bc3) seccomp: allow personality with UNAME26 bit set * [`0c9de662`](https://github.com/containerd/containerd/commit/0c9de6629d3eb02d1cacc500fe2069c0dca999d6) seccomp: allow syscall membarrier * [`caa46116`](https://github.com/containerd/containerd/commit/caa461167ca6f4d48d42fce8f090e378276acf5c) seccomp: allow adjtimex get time operation * [`2b80b7dc`](https://github.com/containerd/containerd/commit/2b80b7dc45670aeb26e0fcbdc64a3fa3b1366845) seccomp: allow add preadv2 and pwritev2 syscalls * [`e71eccbc`](https://github.com/containerd/containerd/commit/e71eccbca0f30297b1ac1c09cc5f1624a587ef36) seccomp: move the syslog syscall to be gated by CAP_SYS_ADMIN or CAP_SYSLOG * [`881db9b5`](https://github.com/containerd/containerd/commit/881db9b52d6e25ca446febbb141497e4983e1c34) Merge pull request [#4499](https://github.com/containerd/containerd/pull/4499) from fuweid/cherry-pick-4472 * [`feff914a`](https://github.com/containerd/containerd/commit/feff914af2269f04c15913798f1fa53d5ab645c3) runtime: ignore ErrNotExist when remove rootfs * [`94c8bd94`](https://github.com/containerd/containerd/commit/94c8bd94aae00b1129c3345a0ad34e128c440a6a) Merge pull request [#4496](https://github.com/containerd/containerd/pull/4496) from kzys/backport-1.4-4437 * [`23e0ea27`](https://github.com/containerd/containerd/commit/23e0ea27b7398d499d7e7781395a2b59e4c9f931) snapshots/devmapper: fix rollback </p> </details> ### Changes from containerd/go-cni <details><summary>4 commits</summary> <p> * [`8fbf363`](https://github.com/containerd/go-cni/commit/8fbf3637eb5f67bb16eaacd4ec23a82e4d33b3ec) Merge pull request [#56](https://github.com/containerd/go-cni/pull/56) from aojea/bumpcni * [`49657db`](https://github.com/containerd/go-cni/commit/49657db36187b0b87f11e6fca3476b712136c98d) bump containernetworking/cni dependency to 0.8.0 * [`1582593`](https://github.com/containerd/go-cni/commit/15825938bfd61f0f482fa19da2dd76aa7a389730) Merge pull request [#58](https://github.com/containerd/go-cni/pull/58) from fuweid/update-readme-usage * [`8ffba88`](https://github.com/containerd/go-cni/commit/8ffba88879e7e0c2e14193e35432f3261fa6f4bd) README.md: update Usage case </p> </details> ### Dependency Changes * **github.com/containerd/go-cni** v1.0.0 -> v1.0.1 * **github.com/containernetworking/cni** v0.7.1 -> v0.8.0 * **github.com/containernetworking/plugins** v0.7.6 -> v0.8.6 Previous release can be found at [v1.4.0](https://github.com/containerd/containerd/releases/tag/v1.4.0)