CRI-O v1.20.4

The release notes have been generated for the commit range v1.20.3…bce257b on Wed, 01 Sep 2021 05:01:20 UTC.

Downloads

Download one of our static release bundles via our Google Cloud Bucket:

Add clean_shutdown_file option to allow crio/crio wipe to verify crio had time to shutdown cleanly (#5229, @haircommander)
CNI plugins are now passed a K8S_POD_UID environment variable containing the pod UID this sandbox was started for. (#5029, @dcbw)

Add the config field internal_wipe which moves the responsibility of wiping containers after a reboot and images after an upgrade from the external binary crio wipe to the main crio server. This has a handful of advantages, the main one being crio is now better able to cleanup CNI resources after a reboot. (#5014, @haircommander)
ExecSync requests now don’t use conmon, instead calling the runtime directly, which reduces overhead. (#4954, @saschagrunert)
Fix a bug where CRI-O prematurely stopped pulling from a blocked registry, even if there was a mirror for that registry it was allowed to pull from. (#5034, @haircommander)
Fix a bug where a container exec process received a little less time than the timeout provided (#5094, @haircommander)
Fix a bug where container storage can get corrupted if the link directory is missing. (#5130, @haircommander)
Fix a performance regression with exec probes (#5164, @haircommander)
Fix potential panic when reopening a container’s log (#5214, @haircommander)
Fixed runtime panic if container storage layers lockfile parent directory got removed. (#5072, @saschagrunert)
Improve memory usage during container image layer extraction. (#5201, @saschagrunert)
Reuse connection when connecting to dbus, as well as reattempt the connection if it fails temporarily (#5058, @haircommander)

Fix a bug where an exec sync timeout would fail to cleanup the runtime exec process (#5000, @openshift-cherrypick-robot)
Fix an RSS regression with exec sync requests (#5270, @mrunalp)
Fix an issue where a container started with a terminal fails on exec sync calls (#5122, @openshift-cherrypick-robot)

Nothing has changed.