containerd 1.4.2 Welcome to the v1.4.2 release of containerd! The second patch release for `containerd` 1.4 includes multiple minor fixes and updates. ### Notable Updates * Fix bug limiting the number of layers by default [containerd/cri#1602](https://github.com/containerd/cri/pull/1602) * Fix selinux shared memory issue by relabeling /dev/shm [containerd/cri#1605](https://github.com/containerd/cri/pull/1605) * Fix unknown state preventing removal of containers [containerd/containerd#4656](https://github.com/containerd/containerd/pull/4656) * Fix nil pointer error when restoring checkpoint [containerd/containerd#4754](https://github.com/containerd/containerd/pull/4754) * Improve image pull performance when using HTTP 1.1 [containerd/containerd#4653](https://github.com/containerd/containerd/pull/4653) * Update default seccomp profile for pidfd [containerd/containerd#4730](https://github.com/containerd/containerd/pull/4730) * Update Go to 1.15 ### Windows * Fix integer overflow on Windows [containerd/containerd#4589](https://github.com/containerd/containerd/pull/4589) * Fix lcow snapshotter to read trailing tar data [containerd/containerd#4628](https://github.com/containerd/containerd/pull/4628) Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ### Contributors * Phil Estes * Mike Brown * Sebastiaan van Stijn * Wei Fu * Derek McGowan * Akihiro Suda * Amr Mahdi * Kevin Parsons * Maksym Pavlenko * Samuel Karp * Amit Barve * Antonio Ojea * Bowen Yan * Brian Goff * Davanum Srinivas * Giuseppe Capizzi * Jacob Blain Christen * Kohei Tokunaga * Michael Crosby * Samarth Shah * Tianon Gravi * Yohei Ueda * varsha teratipally * zhuangqh ### Changes <details><summary>49 commits</summary> <p> * [`b321d358e`](https://github.com/containerd/containerd/commit/b321d358e6eef9c82fa3f3bb8826dca3724c58c6) Merge pull request [#4768](https://github.com/containerd/containerd/pull/4768) from dmcgowan/prepare-1.4.2 * [`f2e4291b6`](https://github.com/containerd/containerd/commit/f2e4291b6c398b321fb74d6ea829b15c92508ecb) Prepare 1.4.2 release * [`76f3d1955`](https://github.com/containerd/containerd/commit/76f3d19551d7175a3cb11dd1b3f5f68be6ffaaa1) Update mailmap for 1.4.2 release * [`ca9950755`](https://github.com/containerd/containerd/commit/ca9950755257ad316709f4c819f239fa332fb6a6) Update cri version to pickup unknown state fix * [`21baf7109`](https://github.com/containerd/containerd/commit/21baf710932cf2de0a795992eeb3ffb4d13b1555) Merge pull request [#4767](https://github.com/containerd/containerd/pull/4767) from dmcgowan/update-1.4-cri * [`3458984bb`](https://github.com/containerd/containerd/commit/3458984bb80e6e25a8514ae290dc05155560bea5) Merge pull request [#4766](https://github.com/containerd/containerd/pull/4766) from dmcgowan/backport-4765 * [`0b97c6204`](https://github.com/containerd/containerd/commit/0b97c6204195cd4b764bd302c7eed90388f96d81) Update cri plugin * [`c0f1add3c`](https://github.com/containerd/containerd/commit/c0f1add3c95ce1c06c566488d85c20a77070ef12) Fix Windows service panic file to not be read-only * [`9c24574c9`](https://github.com/containerd/containerd/commit/9c24574c99643f94a050395637b328ce2d48e2c9) Merge pull request [#4763](https://github.com/containerd/containerd/pull/4763) from estesp/cp-tests-fix-1.4 * [`fbe18caa1`](https://github.com/containerd/containerd/commit/fbe18caa19f7b414dca8433455b5d4b4662c7d4c) Update btrfs vendor for chkptr fix for Go >= 1.14 * [`cbbf257ab`](https://github.com/containerd/containerd/commit/cbbf257abf285ca80d12f73e24f1a7bd97a1a065) Add Go test runs to GitHub Actions CI * [`19776b75b`](https://github.com/containerd/containerd/commit/19776b75b3ae4488b50c92f45caabf543e438b89) Adjust overlay tests to expect "index=off" * [`7eb852214`](https://github.com/containerd/containerd/commit/7eb8522146cfcd5f7d7e62eb1b3eff1d55ea65de) Allow oom adj test to run in environments with a score * [`036ede698`](https://github.com/containerd/containerd/commit/036ede698d050155a2b972f34c09b3a55070b0de) Import crypto for all snapshotters during testsuite * [`8d839c4b3`](https://github.com/containerd/containerd/commit/8d839c4b3b087662ba1e1f4b1ffd899b46a1c091) Merge pull request [#4751](https://github.com/containerd/containerd/pull/4751) from amrmahdi/amrh/cherry-pick-cc3785-1.4 * [`31bbc1f7d`](https://github.com/containerd/containerd/commit/31bbc1f7d4236ca1c6c96b359c8edd20fc5d8d7e) Merge pull request [#4754](https://github.com/containerd/containerd/pull/4754) from thaJeztah/1.4_restore_nil_pointer * [`5618423a0`](https://github.com/containerd/containerd/commit/5618423a0e3b5ea66d4a4edd49cff443b71dac8b) Add comments clarifying copyWithBuffer implementation * [`a2ebee357`](https://github.com/containerd/containerd/commit/a2ebee35788e0eb10343e87cf658625f89432e91) replicate io.Copy optimizations * [`9b2156aa8`](https://github.com/containerd/containerd/commit/9b2156aa854b9996d254835cb90e8c496404556c) Improve image pull performance from http 1.1 container registries * [`7fe3f1301`](https://github.com/containerd/containerd/commit/7fe3f1301e6020b0cde57eee9aadd423a13157d9) Merge pull request [#4749](https://github.com/containerd/containerd/pull/4749) from thaJeztah/1.4_backport_windows_int_overflow * [`56291a221`](https://github.com/containerd/containerd/commit/56291a2212c4723c73932a76a8cbc78ce0c14a61) bug fix:#3448 * [`16e51fc31`](https://github.com/containerd/containerd/commit/16e51fc3173a4eb066443571ee974f67ad24a4e5) Fix integer overflow on windows * [`957bcaa9f`](https://github.com/containerd/containerd/commit/957bcaa9fffe3dd85a766a215cca9a488351fe0a) Merge pull request [#4746](https://github.com/containerd/containerd/pull/4746) from estesp/cp-4745-1.4 * [`6ebd9a94a`](https://github.com/containerd/containerd/commit/6ebd9a94a47bf8a885b2a8441ccea4494dcd0d21) Update other actions for env/path CVE fix * [`49889957e`](https://github.com/containerd/containerd/commit/49889957e6e1e1519332beef349a08b9bc55ba93) Merge pull request [#4743](https://github.com/containerd/containerd/pull/4743) from estesp/fix-ci * [`0a3488c71`](https://github.com/containerd/containerd/commit/0a3488c712d699694f7b2c2458e7498f29d5e89a) Fix GH Actions CI deprecations * [`882e39618`](https://github.com/containerd/containerd/commit/882e39618d03e6c4375496e769a35751516482e0) Merge pull request [#4733](https://github.com/containerd/containerd/pull/4733) from thaJeztah/1.4_backport_update_seccomp_profile * [`da9705a64`](https://github.com/containerd/containerd/commit/da9705a64858c9022da9af58393dcc6d27a43459) Merge pull request [#4736](https://github.com/containerd/containerd/pull/4736) from AkihiroSuda/go-1.15.5-containerd-1.4 * [`cc3be9ae3`](https://github.com/containerd/containerd/commit/cc3be9ae3f350f8b335012f2da3df0c7310f02b2) Bump Golang 1.15.5 * [`ebffce3ad`](https://github.com/containerd/containerd/commit/ebffce3adf2361171c05a5746a07bc68d3db1b23) seccomp: add pidfd_getfd syscall (gated by CAP_SYS_PTRACE) * [`229f5ea4e`](https://github.com/containerd/containerd/commit/229f5ea4efdb36d3c94310fce827901f4b694ed9) seccomp: add pidfd_open and pidfd_send_signal * [`457dafa4c`](https://github.com/containerd/containerd/commit/457dafa4cbebfaaed0b7f318190b9aa5eff9d84c) Merge pull request [#4711](https://github.com/containerd/containerd/pull/4711) from AkihiroSuda/go115-1.4 * [`e45f41e3a`](https://github.com/containerd/containerd/commit/e45f41e3aed4e3dcb8f3f8e1db3ac09004214ec6) update to golang 1.15.2 * [`f8c187fcf`](https://github.com/containerd/containerd/commit/f8c187fcfcffd59a493c739884f54a379e8ed6e4) Merge pull request [#4696](https://github.com/containerd/containerd/pull/4696) from estesp/cp-4692-1.4 * [`695516287`](https://github.com/containerd/containerd/commit/6955162877bc7791d775bddc4c4f46f2afcd424c) Remove setuid gosu in favor of "sudo -E PATH=$PATH ..." * [`c562e8d2b`](https://github.com/containerd/containerd/commit/c562e8d2be6fa977c1fec5535cbdd4e5bbd34155) Merge pull request [#4690](https://github.com/containerd/containerd/pull/4690) from samuelkarp/backport1.4-critest * [`77931f801`](https://github.com/containerd/containerd/commit/77931f8014643bd1ab44deb9b35d34ec292ece3c) ci: run critest target for all runtimes * [`e46c29945`](https://github.com/containerd/containerd/commit/e46c29945502704da5b4246d37cee383368a5b2c) Merge pull request [#4689](https://github.com/containerd/containerd/pull/4689) from estesp/cp-4665 * [`c745d237e`](https://github.com/containerd/containerd/commit/c745d237e008cc434379a3ed4f45af9cb4775e9d) Revendor CRI to get disabled annotation config default * [`ded2577d6`](https://github.com/containerd/containerd/commit/ded2577d65aa8d4db2b9c090be0c8f2524fa7454) Merge pull request [#4660](https://github.com/containerd/containerd/pull/4660) from kevpar/1.4-update-hcsshim * [`8b8494ec0`](https://github.com/containerd/containerd/commit/8b8494ec012cc68c1acff09f2f528ed0a3400063) Merge pull request [#4661](https://github.com/containerd/containerd/pull/4661) from kevpar/1.4-lcow-tar * [`88e7f23bc`](https://github.com/containerd/containerd/commit/88e7f23bc6a20c409edc4b43a284959d5ef0db30) Read trailing data from tar reader * [`856a12fca`](https://github.com/containerd/containerd/commit/856a12fcabf6ab21b8c21d609a8a875643fe3d17) Update github.com/Microsoft/hcsshim to v0.8.10 * [`013411ac1`](https://github.com/containerd/containerd/commit/013411ac113d953287a79c6acf638f989ed8a7b8) Merge pull request [#4650](https://github.com/containerd/containerd/pull/4650) from estesp/cp-4645-1.4 * [`cc6f72a00`](https://github.com/containerd/containerd/commit/cc6f72a002fc0d1ae6fbab731a65775188644844) Check if a process exists before returning it * [`e44e8ebea`](https://github.com/containerd/containerd/commit/e44e8ebeaaa2d605f539dffa3788a53c92458c4d) Merge pull request [#4601](https://github.com/containerd/containerd/pull/4601) from estesp/cp-wincni-script * [`9a44af11d`](https://github.com/containerd/containerd/commit/9a44af11df0e1221bfd7f53561829ed52c7a205e) Windows CNI install script using lowercase "destdir" * [`a3a7b40be`](https://github.com/containerd/containerd/commit/a3a7b40bed2612b8bf7fe81bc8935dcd41910741) Merge pull request [#4568](https://github.com/containerd/containerd/pull/4568) from thaJeztah/1.4_backport_bitset_1.1.11 * [`ce7ba6691`](https://github.com/containerd/containerd/commit/ce7ba6691fee81d6ff18a8549f6218af2d383ce6) vendor: github.com/willf/bitset v1.1.11 </p> </details> ### Changes from containerd/btrfs <details><summary>5 commits</summary> <p> * [`404b914`](https://github.com/containerd/btrfs/commit/404b9149801e455c8076f615b06dc0abee0a977a) Merge pull request [#28](https://github.com/containerd/btrfs/pull/28) from estesp/githubactions * [`48eb88e`](https://github.com/containerd/btrfs/commit/48eb88e4fc0a1806012557496e50669afe671e30) Merge pull request [#27](https://github.com/containerd/btrfs/pull/27) from fuweid/fix-checkptr-issue * [`4248200`](https://github.com/containerd/btrfs/commit/424820003972ebf0585fa20e4ef39e702e1ff095) Use GitHub Actions for CI * [`84ed5ce`](https://github.com/containerd/btrfs/commit/84ed5ce12fb8a233b5be3b5eb2122854ebea41d2) Add vendor explicity in project * [`d44cb8e`](https://github.com/containerd/btrfs/commit/d44cb8e80d3e3b8d924fa9db42cc666848679f58) fix: checkptr issue </p> </details> ### Changes from containerd/cri <details><summary>34 commits</summary> <p> * [`adc0b6a5`](https://github.com/containerd/cri/commit/adc0b6a578ed6f646bb24c1c639d65b70e14cccc) Merge pull request [#1600](https://github.com/containerd/cri/pull/1600) from zhuangqh/fix-unknown-state * [`9e81bf56`](https://github.com/containerd/cri/commit/9e81bf566b91195c4cdd64ebeda839efb952ec3d) Merge pull request [#1603](https://github.com/containerd/cri/pull/1603) from samuelkarp/runtimes * [`d3c90697`](https://github.com/containerd/cri/commit/d3c9069794e656520521ccd28706a0247707a817) Merge pull request [#1605](https://github.com/containerd/cri/pull/1605) from dweomer/backport/1.4/selinux-relabel-dev-shm * [`f7fce607`](https://github.com/containerd/cri/commit/f7fce6071dfa56025d1c5858d432da3f0a90aaee) Merge pull request [#1609](https://github.com/containerd/cri/pull/1609) from shahzzzam/add-annotation2 * [`1dc3b8a7`](https://github.com/containerd/cri/commit/1dc3b8a7396e110ac0f0bc48df9c7cb46399f400) Add manifest digest annotation for snapshotters * [`ba8ad15a`](https://github.com/containerd/cri/commit/ba8ad15aebfdf6218e6374dd24ffc5f5f5ed2cf5) Limit value size of additional annotation for avoiding unpack failure * [`500b2422`](https://github.com/containerd/cri/commit/500b242207d70209490785561a97949864a6b04b) Merge pull request [#1606](https://github.com/containerd/cri/pull/1606) from thaJeztah/1.4_update_k8s * [`08e545f0`](https://github.com/containerd/cri/commit/08e545f07a4af0fa2fdafd3f8aa5fd0603a546b5) [release/1.4] vendor: kubernetes v1.19.4 * [`b1ebe1c3`](https://github.com/containerd/cri/commit/b1ebe1c3f5fe1a1024ede053d88fd47d5a399cf4) Merge pull request [#1607](https://github.com/containerd/cri/pull/1607) from thaJeztah/1.4_fix_gha_setenv * [`bb8b690f`](https://github.com/containerd/cri/commit/bb8b690f4857c926b56c24be3f6c5cec9ebebe3c) gha: replace uses of deprecated "set-env", "add-path" * [`1ec7ede4`](https://github.com/containerd/cri/commit/1ec7ede44fc75ce0db01604f5951635b353f1767) [release/1.4 backport] selinux: relabel /dev/shm * [`e7a06009`](https://github.com/containerd/cri/commit/e7a0600972473d02c268e9f0ebb22f433528a1af) ci: run test-integration target for all runtimes * [`61363b3e`](https://github.com/containerd/cri/commit/61363b3e2c97ba2d389dc774d977fc906591a6fd) Merge pull request [#1602](https://github.com/containerd/cri/pull/1602) from estesp/disable-annotations-config * [`99015cca`](https://github.com/containerd/cri/commit/99015cca6155121ea0924e7e73d1b3022d919efb) Disable experimental feature in default config * [`7973126f`](https://github.com/containerd/cri/commit/7973126fbc933fd35284a799cc22bc97157bb825) fix: always set unknown to false when handling exit event * [`38a14dae`](https://github.com/containerd/cri/commit/38a14dae2a2db6619a9ecc088c36c39de67be414) Merge pull request [#1599](https://github.com/containerd/cri/pull/1599) from AkihiroSuda/update-readme-14 * [`a9661c2a`](https://github.com/containerd/cri/commit/a9661c2a4718883cdd7024c4c132d53114a89335) update README to clarify the current status of this repo * [`c8dba73e`](https://github.com/containerd/cri/commit/c8dba73eaefb1b9e91df0cb5f23dc3b275d85827) Merge pull request [#1589](https://github.com/containerd/cri/pull/1589) from thaJeztah/1.4_backport_containerd_v1.4.1 * [`f58f7c33`](https://github.com/containerd/cri/commit/f58f7c33da8935b51146d20224e633bbd0f0d9e1) Merge pull request [#1588](https://github.com/containerd/cri/pull/1588) from thaJeztah/1.4_backport_masked * [`f212f1ef`](https://github.com/containerd/cri/commit/f212f1ef8b6610d312a1023108e6e4f2f018bd48) Merge pull request [#1586](https://github.com/containerd/cri/pull/1586) from thaJeztah/1.4_backport_bump_kubernetes * [`1056dc91`](https://github.com/containerd/cri/commit/1056dc918b4909f1a9f4a139200ba647b14ce990) vendor: containerd/containerd v1.4.1 * [`1debf36e`](https://github.com/containerd/cri/commit/1debf36ecdffb78f6edbb6472e27343dcf56bff1) Set masked and readonly paths based on default Unix spec * [`c3756574`](https://github.com/containerd/cri/commit/c375657437f63f1e2104fb9d0583eb7b02abd8ab) Update to latest kubernetes v1.19.2 * [`26815e22`](https://github.com/containerd/cri/commit/26815e2205a13b8d4aa565d9ed245e8e5620abe7) Merge pull request [#1581](https://github.com/containerd/cri/pull/1581) from thaJeztah/1.4_backport_python * [`e44db998`](https://github.com/containerd/cri/commit/e44db998cdf0a6a38a8f934154c4f40c5ac7ad9d) Make script work for both python2.7 and 3.6 * [`4cb63f23`](https://github.com/containerd/cri/commit/4cb63f230fede634712dc2d591cc82335cdeda41) Merge pull request [#1579](https://github.com/containerd/cri/pull/1579) from thaJeztah/1.4_backport_bitset_1.1.11 * [`535f55a2`](https://github.com/containerd/cri/commit/535f55a25a6bf08382da21690341b652290c1a70) vendor: github.com/willf/bitset v1.1.11 * [`a462784d`](https://github.com/containerd/cri/commit/a462784da94e111cc8eef5907c0051114502443a) Merge pull request [#1574](https://github.com/containerd/cri/pull/1574) from mikebrow/cherrypick-#1573-release-1.4 * [`fc99eac0`](https://github.com/containerd/cri/commit/fc99eac04c659894c08bf8b573e9644e29e89de4) update cni config version * [`5736d0e6`](https://github.com/containerd/cri/commit/5736d0e6a7b7742ecbb6729aef83a3c25f303e8d) Merge pull request [#1560](https://github.com/containerd/cri/pull/1560) from mikebrow/cherrypick-#1556-release-1.4 * [`d716c78a`](https://github.com/containerd/cri/commit/d716c78af92bfe17c89aef847ad0a1387b37662a) bump cni dependencies * [`bb0ca842`](https://github.com/containerd/cri/commit/bb0ca842e99aa67a3ae0de5a9179810d73954b3e) Merge pull request [#1559](https://github.com/containerd/cri/pull/1559) from mikebrow/prepare-1.4 * [`b0cc0799`](https://github.com/containerd/cri/commit/b0cc07999aa5d37880f4781f7ac26c118899768a) vendor containerd 1.4 release * [`a40d6392`](https://github.com/containerd/cri/commit/a40d639285668db58aa73a4150b1aefca4c05440) update support table for 1.4 </p> </details> ### Dependency Changes * **github.com/Microsoft/hcsshim** v0.8.9 -> v0.8.10 * **github.com/containerd/btrfs** 153935315f4a -> 404b9149801e * **github.com/containerd/cri** 4e6644c8cf7f -> adc0b6a578ed * **github.com/willf/bitset** d5bec3311243 -> v1.1.11 * **k8s.io/api** v0.19.0-rc.4 -> v0.19.4 * **k8s.io/apimachinery** v0.19.0-rc.4 -> v0.19.4 * **k8s.io/apiserver** v0.19.0-rc.4 -> v0.19.4 * **k8s.io/client-go** v0.19.0-rc.4 -> v0.19.4 * **k8s.io/utils** 2df71ebbae66 -> d5654de09c73 * **sigs.k8s.io/structured-merge-diff/v4** v4.0.1 **_new_** Previous release can be found at [v1.4.1](https://github.com/containerd/containerd/releases/tag/v1.4.1)