15321 Commits

Author SHA1 Message Date
99df502341 Merge pull request #11981 from cpuguy83/remote_readerat
Implement io.ReaderAt on docker fetch reader
2025-06-23 22:40:24 +00:00
9300d03899 Merge pull request #11885 from ningmingxiao/fix_nerdctl_unknown
bugfix:close container io when runtime create failed
2025-06-22 01:00:09 +00:00
5dc23ca673 Merge pull request #11987 from containerd/dependabot/github_actions/softprops/action-gh-release-2.3.2
build(deps): bump softprops/action-gh-release from 2.2.2 to 2.3.2
2025-06-20 18:20:21 +00:00
c3303ab3af Merge pull request #11990 from containerd/dependabot/go_modules/github.com/urfave/cli/v2-2.27.7
build(deps): bump github.com/urfave/cli/v2 from 2.27.6 to 2.27.7
2025-06-20 18:19:51 +00:00
0fc76bf503 Merge pull request #11989 from containerd/dependabot/go_modules/github.com/grpc-ecosystem/go-grpc-middleware/providers/prometheus-1.1.0
build(deps): bump github.com/grpc-ecosystem/go-grpc-middleware/providers/prometheus from 1.0.1 to 1.1.0
2025-06-20 18:19:33 +00:00
39533c949b Merge pull request #11986 from containerd/dependabot/github_actions/github/codeql-action-3.29.0
build(deps): bump github/codeql-action from 3.28.18 to 3.29.0
2025-06-20 03:28:47 +00:00
e61e7cba1a Merge pull request #11964 from containerd/dependabot/go_modules/golang-x-6abdd2e072
build(deps): bump the golang-x group with 2 updates
2025-06-20 00:00:38 +00:00
5e1f8ff486 Merge pull request #11992 from azr/fix-multipart-fetch-missing-content-len
Fix multipart fetch issue when the server does not return content length
2025-06-19 20:25:02 +00:00
cb53f381e4 fix when multipart fetching and the server does not return content length
Signed-off-by: Adrien Delorme <azr@users.noreply.github.com>
2025-06-19 17:45:01 +02:00
7d394c9e2c Merge pull request #11998 from dmcgowan/avoid-unconditional-range-fetch
Fix fetch always adding range to requests
2025-06-19 22:03:46 +08:00
d3516916aa Fix fetch always adding range to requests
Add condition for adding range header to avoid unnecessary header when
parallel pull is not being used. Some registries do not properly handle
the range header.

Signed-off-by: Derek McGowan <derek@mcg.dev>
2025-06-18 22:22:54 -07:00
aea4e685e6 build(deps): bump github.com/urfave/cli/v2 from 2.27.6 to 2.27.7
Bumps [github.com/urfave/cli/v2](https://github.com/urfave/cli) from 2.27.6 to 2.27.7.
- [Release notes](https://github.com/urfave/cli/releases)
- [Changelog](https://github.com/urfave/cli/blob/main/docs/CHANGELOG.md)
- [Commits](https://github.com/urfave/cli/compare/v2.27.6...v2.27.7)

---
updated-dependencies:
- dependency-name: github.com/urfave/cli/v2
  dependency-version: 2.27.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-06-19 02:49:53 +00:00
6c110c1f4c Merge pull request #11985 from containerd/dependabot/go_modules/go.etcd.io/bbolt-1.4.1
build(deps): bump go.etcd.io/bbolt from 1.4.0 to 1.4.1
2025-06-19 02:01:57 +00:00
aa29e5fe61 Merge pull request #11988 from containerd/dependabot/github_actions/actions/attest-build-provenance-2.4.0
build(deps): bump actions/attest-build-provenance from 2.3.0 to 2.4.0
2025-06-18 21:33:56 +00:00
589bb1fd72 Merge pull request #11991 from containerd/dependabot/github_actions/docker/setup-buildx-action-3.11.0
build(deps): bump docker/setup-buildx-action from 3.10.0 to 3.11.0
2025-06-18 21:33:35 +00:00
0df6d1e6bf build(deps): bump docker/setup-buildx-action from 3.10.0 to 3.11.0
Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 3.10.0 to 3.11.0.
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](b5ca514318...18ce135bb5)

---
updated-dependencies:
- dependency-name: docker/setup-buildx-action
  dependency-version: 3.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-06-17 01:37:44 +00:00
4593023f16 build(deps): bump github.com/grpc-ecosystem/go-grpc-middleware/providers/prometheus
Bumps [github.com/grpc-ecosystem/go-grpc-middleware/providers/prometheus](https://github.com/grpc-ecosystem/go-grpc-middleware) from 1.0.1 to 1.1.0.
- [Release notes](https://github.com/grpc-ecosystem/go-grpc-middleware/releases)
- [Commits](https://github.com/grpc-ecosystem/go-grpc-middleware/compare/providers/prometheus/v1.0.1...v1.1.0)

---
updated-dependencies:
- dependency-name: github.com/grpc-ecosystem/go-grpc-middleware/providers/prometheus
  dependency-version: 1.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-06-17 01:33:11 +00:00
1f288492cb build(deps): bump actions/attest-build-provenance from 2.3.0 to 2.4.0
Bumps [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance) from 2.3.0 to 2.4.0.
- [Release notes](https://github.com/actions/attest-build-provenance/releases)
- [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md)
- [Commits](db473fddc0...e8998f9491)

---
updated-dependencies:
- dependency-name: actions/attest-build-provenance
  dependency-version: 2.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-06-17 01:23:47 +00:00
0779c0a6de build(deps): bump softprops/action-gh-release from 2.2.2 to 2.3.2
Bumps [softprops/action-gh-release](https://github.com/softprops/action-gh-release) from 2.2.2 to 2.3.2.
- [Release notes](https://github.com/softprops/action-gh-release/releases)
- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md)
- [Commits](da05d55257...72f2c25fcb)

---
updated-dependencies:
- dependency-name: softprops/action-gh-release
  dependency-version: 2.3.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-06-17 01:23:43 +00:00
9b7f24610b build(deps): bump github/codeql-action from 3.28.18 to 3.29.0
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.28.18 to 3.29.0.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](ff0a06e83c...ce28f5bb42)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 3.29.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-06-17 01:23:39 +00:00
b7bda5d6e5 build(deps): bump go.etcd.io/bbolt from 1.4.0 to 1.4.1
Bumps [go.etcd.io/bbolt](https://github.com/etcd-io/bbolt) from 1.4.0 to 1.4.1.
- [Release notes](https://github.com/etcd-io/bbolt/releases)
- [Commits](https://github.com/etcd-io/bbolt/compare/v1.4.0...v1.4.1)

---
updated-dependencies:
- dependency-name: go.etcd.io/bbolt
  dependency-version: 1.4.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-06-17 01:19:41 +00:00
7c97cd331a build(deps): bump the golang-x group with 2 updates
Bumps the golang-x group with 2 updates: [golang.org/x/mod](https://github.com/golang/mod) and [golang.org/x/sync](https://github.com/golang/sync).


Updates `golang.org/x/mod` from 0.24.0 to 0.25.0
- [Commits](https://github.com/golang/mod/compare/v0.24.0...v0.25.0)

Updates `golang.org/x/sync` from 0.14.0 to 0.15.0
- [Commits](https://github.com/golang/sync/compare/v0.14.0...v0.15.0)

---
updated-dependencies:
- dependency-name: golang.org/x/mod
  dependency-version: 0.25.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang-x
- dependency-name: golang.org/x/sync
  dependency-version: 0.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang-x
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-06-16 23:44:02 +00:00
e6708bddfb bugfix:close container io when runtime create failed
Signed-off-by: ningmingxiao <ning.mingxiao@zte.com.cn>
2025-06-15 11:35:25 +08:00
4bf1705a88 Implement io.ReaderAt on docker fetch reader
I was working on treating a remote as a content provider and ran into
the stream backing the fetch only implementing io.Seeker.
I shimmed an io.ReaderAt implementation by calling seek under the hood,
but this is of course not a faithful io.ReaderAt implementation.

This just implements a correct io.ReaderAt implementation directly.

Signed-off-by: Brian Goff <cpuguy83@gmail.com>
2025-06-13 21:40:18 +00:00
2af24b5629 Merge pull request #11669 from dmcgowan/fix-fetcher-error-encoding
Update fetcher errors to include full registry error
2025-06-12 21:18:11 +00:00
3d6b2fa5b9 Merge pull request #11976 from dmcgowan/fix-transfer-errors
Fix registry errors with transfer service
2025-06-12 04:20:54 +00:00
af068ff863 Update fetcher errors to include full registry error
Currently the registry error does not include details or allow the
caller access to the original error body.

Signed-off-by: Derek McGowan <derek@mcg.dev>
2025-06-11 18:40:51 -07:00
6e1f0203ee Register remote errors for clients to access registry errors
Currently the error is not encoded and only the error message can be
retrieved on the client. With this change, clients can access the
unexpected error type even over grpc.

Signed-off-by: Derek McGowan <derek@mcg.dev>
2025-06-11 18:00:24 -07:00
697d776768 Decode grpc errors in the transfer client proxy
Signed-off-by: Derek McGowan <derek@mcg.dev>
2025-06-11 18:00:01 -07:00
ed94994d90 Merge pull request #11483 from yylt/wait
fix wait leak on shim when containerd restart
2025-06-12 00:02:41 +00:00
9de26f3150 [e2e] add case for shim wait interface
Signed-off-by: yang yang <yang8518296@163.com>
2025-06-10 23:05:44 +08:00
49664dab53 Add context in Process Wait interface
Signed-off-by: yang yang <yang8518296@163.com>
2025-06-10 23:05:29 +08:00
c3588a4074 Merge pull request #11961 from austinvazquez/update-go-06052025-in-ci
ci: bump golang 1.24.4 in build and release
2025-06-10 03:16:02 +00:00
415df38927 ci: bump Go 1.24.4 in CI
Signed-off-by: Austin Vazquez <austin.vazquez.dev@gmail.com>
2025-06-09 08:50:26 -06:00
1de895276b Merge pull request #11928 from containerd/dependabot/github_actions/ossf/scorecard-action-2.4.2
build(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.2
2025-06-09 02:40:35 +00:00
e54c86409c Merge pull request #11845 from containerd/dependabot/github_actions/lycheeverse/lychee-action-2.4.1
build(deps): bump lycheeverse/lychee-action from 2.4.0 to 2.4.1
2025-06-09 02:13:06 +00:00
4d7381e47c Merge pull request #11927 from dmcgowan/enhance-transfer-unpack-selection
Update transfer supported platforms logic
2025-06-09 02:11:51 +00:00
4bcd549f74 Merge pull request #11946 from thaJeztah/oci_privileged_no_var
pkg/oci: don't use var for WithPrivileged
2025-06-09 02:00:28 +00:00
d123295973 Merge pull request #11886 from ningmingxiao/err_log
shim-v2:improve shim error message
2025-06-09 01:52:12 +00:00
cd0f2cc23a Merge pull request #11945 from thaJeztah/oci_no_vars_for_funcs
pkg/oci: don't use vars for WithAllKnownCapabilities, WithAllCurrentCapabilities
2025-06-08 06:19:37 +00:00
eeb9065242 Merge pull request #11916 from fuweid/fix-11871
*: properly shutdown non-groupable shims to prevent resource leaks
2025-06-08 00:16:29 +00:00
a6c250ed77 Merge pull request #11938 from thaJeztah/oci_linting
pkg/oci: fix minor linting issues
2025-06-06 22:21:33 +00:00
3e4d108551 Merge pull request #11947 from kiashok/update-windows-ci
Enable CIs to run on WS2022 and WS2025
2025-06-06 17:21:24 +00:00
2f1948a503 Enable CIs to run on WS2022 and WS2025
Signed-off-by: Kirtana Ashok <kiashok@microsoft.com>
2025-06-05 15:25:03 -07:00
41209bd1c2 Merge pull request #11900 from containerd/dependabot/go_modules/google.golang.org/grpc-1.72.2
build(deps): bump google.golang.org/grpc from 1.72.0 to 1.72.2
2025-06-05 17:11:21 +00:00
0bf07cd5c6 Merge pull request #11939 from thaJeztah/oci_rm_go116
pkg/oci: remove compatibility code for go1.16 and older
2025-06-04 15:02:30 +00:00
0325f61e10 Merge pull request #11941 from thaJeztah/oci_test_cleans
pkg/oci: cleanup some tests
2025-06-04 15:02:16 +00:00
8de612020e pkg/oci: don't use var for WithPrivileged
This variable was introduced in 062c3a00ef,
which didn't describe it as intentional to be able to override the option.

Based on the above, I assume the use of a variable was purely convenience,
the there's no intent for packages to be able to override them, so this
patch changes these to be a regular function.

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2025-06-04 16:35:13 +02:00
d72c21450f pkg/oci: don't use vars for WithAllKnownCapabilities, WithAllCurrentCapabilities
These were introduced in c818a6b13d, refactored
in 808b223536 and bdd84abf05,
and moved in a2d1a8a865, but none provided
a motivation for using a variable / alias for these.

Based on the above, I assume the use of a variable was purely convenience,
the there's no intent for packages to be able to override them, so this
patch changes these to be a regular function.

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2025-06-04 16:10:41 +02:00
ac3c3ad5da pkg/oci: cleanup some tests
- Use testify for asserting
- Fix various unhandled errors
- Use native t.TempDir() for temporary files

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2025-06-04 13:42:09 +02:00