CRI-O v1.25.1
The release notes have been generated for the commit range
v1.25.0…dc1f843 on Mon, 09 Jan 2023 21:31:19 UTC.
Downloads
Download one of our static release bundles via our Google Cloud Bucket:
To verify the artifact signatures via cosign, run:
> export COSIGN_EXPERIMENTAL=1
> cosign verify-blob cri-o.amd64.dc1f8431ddba3a2769a33722abebd15d683813fc.tar.gz \
--signature cri-o.amd64.dc1f8431ddba3a2769a33722abebd15d683813fc.tar.gz.sig \
--certificate cri-o.amd64.dc1f8431ddba3a2769a33722abebd15d683813fc.tar.gz.cert
To verify the bill of materials (SBOM) in SPDX format using the bom tool, run:
> tar xfz cri-o.amd64.dc1f8431ddba3a2769a33722abebd15d683813fc.tar.gz
> bom validate -e cri-o.amd64.dc1f8431ddba3a2769a33722abebd15d683813fc.tar.gz.spdx -d cri-o
Changelog since v1.25.0
Changes by Kind
Dependency-Change
- Added support for conmon-rs v0.4.0. (#6359, @saschagrunert)
Feature
- Allow
crio.runtime.runtimes configuration to be updated on reload. (#6270, @haircommander)
Bug or Regression
- Fixed bug to restore
/var/lib/containers/storage/overlay/backingFsBlockDev on XFS file systems. (#6387, @saschagrunert)
Uncategorized
- Add an option “add_inheritable_capabilities” which adds added capabilities to the inheritable list as well. As of CRI-O 1.24.0, CRI-O drops the inheritable capabilities to fix CVE-2022-27652 . However, this can cause regressions in workloads that attempt to pass capabilities to non-root users through inheritable capabilities. (#6249, @openshift-cherrypick-robot)
- CRI-O now logs the stage of container or pod creation under system load. This allows users to find why their creation requests are stalling. (#6238, @openshift-cherrypick-robot)
- Fix a bug where
conmon_cgroup and monitor_path became out of sync (#6276, @openshift-cherrypick-robot)
- Fix a bug where static pods cannot be created because they’ve already been created. (#6241, @openshift-cherrypick-robot)
- Fix a bug where updating
default_runtime would cause the runc entry in the runtimes table to be deleted (#6264, @openshift-cherrypick-robot)
- Fix some inconsistencies in the help text (#6229, @openshift-cherrypick-robot)
Dependencies
Added
- cloud.google.com/go/aiplatform: v1.24.0
- cloud.google.com/go/analytics: v0.12.0
- cloud.google.com/go/area120: v0.6.0
- cloud.google.com/go/artifactregistry: v1.7.0
- cloud.google.com/go/asset: v1.7.0
- cloud.google.com/go/assuredworkloads: v1.6.0
- cloud.google.com/go/automl: v1.6.0
- cloud.google.com/go/billing: v1.5.0
- cloud.google.com/go/binaryauthorization: v1.2.0
- cloud.google.com/go/cloudtasks: v1.6.0
- cloud.google.com/go/datacatalog: v1.6.0
- cloud.google.com/go/dataflow: v0.7.0
- cloud.google.com/go/dataform: v0.4.0
- cloud.google.com/go/datalabeling: v0.6.0
- cloud.google.com/go/dataqna: v0.6.0
- cloud.google.com/go/datastream: v1.3.0
- cloud.google.com/go/dialogflow: v1.16.1
- cloud.google.com/go/documentai: v1.8.0
- cloud.google.com/go/domains: v0.7.0
- cloud.google.com/go/edgecontainer: v0.1.0
- cloud.google.com/go/functions: v1.7.0
- cloud.google.com/go/gaming: v1.6.0
- cloud.google.com/go/gkeconnect: v0.6.0
- cloud.google.com/go/gkehub: v0.10.0
- cloud.google.com/go/language: v1.6.0
- cloud.google.com/go/lifesciences: v0.6.0
- cloud.google.com/go/mediatranslation: v0.6.0
- cloud.google.com/go/memcache: v1.5.0
- cloud.google.com/go/metastore: v1.6.0
- cloud.google.com/go/networkconnectivity: v1.5.0
- cloud.google.com/go/networksecurity: v0.6.0
- cloud.google.com/go/notebooks: v1.3.0
- cloud.google.com/go/osconfig: v1.8.0
- cloud.google.com/go/oslogin: v1.5.0
- cloud.google.com/go/phishingprotection: v0.6.0
- cloud.google.com/go/privatecatalog: v0.6.0
- cloud.google.com/go/recaptchaenterprise/v2: v2.2.0
- cloud.google.com/go/recommendationengine: v0.6.0
- cloud.google.com/go/recommender: v1.6.0
- cloud.google.com/go/redis: v1.8.0
- cloud.google.com/go/retail: v1.9.0
- cloud.google.com/go/scheduler: v1.5.0
- cloud.google.com/go/secretmanager: v1.6.0
- cloud.google.com/go/securitycenter: v1.14.0
- cloud.google.com/go/servicedirectory: v1.5.0
- cloud.google.com/go/speech: v1.7.0
- cloud.google.com/go/talent: v1.2.0
- cloud.google.com/go/videointelligence: v1.7.0
- cloud.google.com/go/vision/v2: v2.3.0
- cloud.google.com/go/webrisk: v1.5.0
- cloud.google.com/go/workflows: v1.7.0
- github.com/AdamKorcz/go-118-fuzz-build: e1f97a0
- github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream: v1.4.3
- github.com/aws/aws-sdk-go-v2/internal/v4a: v1.0.5
- github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding: v1.9.3
- github.com/aws/aws-sdk-go-v2/service/internal/checksum: v1.1.9
- github.com/aws/aws-sdk-go-v2/service/internal/s3shared: v1.13.8
- github.com/aws/aws-sdk-go-v2/service/s3: v1.27.1
- github.com/aws/aws-sdk-go-v2/service/ssooidc: v1.13.6
- github.com/bwesterb/go-ristretto: v1.2.0
- github.com/checkpoint-restore/go-criu/v6: v6.3.0
- github.com/cloudflare/circl: v1.1.0
- github.com/jellydator/ttlcache/v2: v2.11.1
- github.com/jhump/gopoet: v0.1.0
- github.com/jhump/goprotoc: v0.5.0
- github.com/mistifyio/go-zfs/v3: v3.0.0
- github.com/moby/sys/sequential: b22ba8a
- github.com/tchap/go-patricia/v2: v2.3.1
- github.com/vmihailenco/msgpack/v5: v5.3.5
- github.com/vmihailenco/tagparser/v2: v2.0.0
Changed
Removed
- 4d63.com/gochecknoglobals: v0.1.0
- github.com/Antonboom/errname: v0.1.5
- github.com/Antonboom/nilnil: v0.1.0
- github.com/DataDog/zstd: v1.4.5
- github.com/Djarvur/go-err113: aea10b5
- github.com/alexkohler/prealloc: v1.0.0
- github.com/ashanbrown/forbidigo: v1.2.0
- github.com/ashanbrown/makezero: b626158
- github.com/bkielbasa/cyclop: v1.2.0
- github.com/blizzy78/varnamelen: v0.3.0
- github.com/breml/bidichk: v0.1.1
- github.com/butuzov/ireturn: v0.1.1
- github.com/charithe/durationcheck: v0.0.9
- github.com/chavacava/garif: e8a0a40
- github.com/daixiang0/gci: v0.2.9
- github.com/denis-tingajkin/go-header: v0.4.2
- github.com/docker/libnetwork: 5a177b7
- github.com/dtylman/scp: f3000a3
- github.com/esimonov/ifshort: v1.0.3
- github.com/ettle/strcase: v0.1.1
- github.com/facebookgo/ensure: 63f1cf6
- github.com/facebookgo/stack: 7517733
- github.com/facebookgo/subset: c811ad8
- github.com/fanliao/go-promise: 1890db3
- github.com/fatih/structtag: v1.2.0
- github.com/fzipp/gocyclo: v0.3.1
- github.com/gobuffalo/fizz: v1.10.0
- github.com/gobuffalo/genny/v2: v2.0.5
- github.com/gobuffalo/github_flavored_markdown: v1.1.0
- github.com/gobuffalo/helpers: v0.6.1
- github.com/gobuffalo/nulls: v0.2.0
- github.com/gobuffalo/plush/v4: v4.0.0
- github.com/gobuffalo/pop/v5: v5.3.1
- github.com/gobuffalo/tags/v3: v3.1.0
- github.com/gobuffalo/validate/v3: v3.1.0
- github.com/gookit/color: v1.4.2
- github.com/gorhill/cronexpr: 88b0669
- github.com/gostaticanalysis/comment: v1.4.2
- github.com/gostaticanalysis/forcetypeassert: 01d4955
- github.com/gostaticanalysis/nilerr: v0.1.1
- github.com/gostaticanalysis/testutil: v0.4.0
- github.com/hugelgupf/socketpair: 05d35a9
- github.com/insomniacslk/dhcp: 3c283ff
- github.com/jackc/chunkreader/v2: v2.0.1
- github.com/jackc/chunkreader: v1.0.0
- github.com/jackc/pgconn: v1.6.0
- github.com/jackc/pgio: v1.0.0
- github.com/jackc/pgmock: 13a1b77
- github.com/jackc/pgpassfile: v1.0.0
- github.com/jackc/pgproto3/v2: v2.0.2
- github.com/jackc/pgproto3: v1.1.0
- github.com/jackc/pgservicefile: 3430c54
- github.com/jackc/pgtype: v1.3.0
- github.com/jackc/pgx/v4: v4.6.0
- github.com/jackc/pgx: v3.6.2+incompatible
- github.com/jackc/puddle: v1.1.0
- github.com/jgautheron/goconst: v1.5.1
- github.com/josharian/txtarfs: 0702f00
- github.com/jsimonetti/rtnetlink: d2c2404
- github.com/julz/importas: 841f0c0
- github.com/k0kubun/colorstring: 9440f19
- github.com/kballard/go-shellquote: 95032a8
- github.com/kulti/thelper: v0.4.0
- github.com/kunwardeep/paralleltest: v1.0.3
- github.com/kyoh86/exportloopref: v0.1.8
- github.com/labstack/echo/v4: v4.3.0
- github.com/labstack/gommon: v0.3.0
- github.com/ldez/gomoddirectives: v0.2.2
- github.com/ldez/tagliatelle: v0.2.0
- github.com/luna-duclos/instrumentedsql: v1.1.3
- github.com/markbates/errx: v1.1.0
- github.com/mbilski/exhaustivestruct: v1.2.0
- github.com/mdlayher/ethernet: 0394541
- github.com/mdlayher/netlink: v1.1.1
- github.com/mdlayher/raw: 50f2db8
- github.com/mgechev/dots: e955255
- github.com/mgechev/revive: v1.1.2
- github.com/microcosm-cc/bluemonday: v1.0.2
- github.com/moby/vpnkit: v0.5.0
- github.com/moricho/tparallel: v0.2.1
- github.com/mozilla/scribe: fb71baf
- github.com/mreiferson/go-httpclient: 31f0106
- github.com/nishanths/exhaustive: v0.2.3
- github.com/polyfloyd/go-errorlint: 910bb79
- github.com/poy/onpar: ee068f8
- github.com/quasilyte/go-ruleguard/dsl: v0.3.10
- github.com/quasilyte/go-ruleguard/rules: 545e0d2
- github.com/quasilyte/go-ruleguard: v0.3.13
- github.com/quasilyte/regex/syntax: 30656e2
- github.com/rs/xid: v1.2.1
- github.com/rs/zerolog: v1.15.0
- github.com/ryanrolds/sqlclosecheck: v0.3.0
- github.com/sanposhiho/wastedassign/v2: v2.0.6
- github.com/sclevine/agouti: v3.0.0+incompatible
- github.com/securego/gosec/v2: v2.9.1
- github.com/shazow/go-diff: b6b7b67
- github.com/sivchari/tenv: v1.4.7
- github.com/sonatard/noctx: v0.0.1
- github.com/songgao/water: 2b4b6d7
- github.com/sourcegraph/annotate: f4cad6c
- github.com/sourcegraph/syntaxhighlight: bd320f5
- github.com/ssgreg/nlreturn/v2: v2.2.1
- github.com/sylvia7788/contextcheck: v1.0.4
- github.com/tdakkota/asciicheck: e657995
- github.com/tenntenn/modver: v1.0.1
- github.com/tenntenn/text/transform: 7eef512
- github.com/tomarrell/wrapcheck/v2: v2.4.0
- github.com/tommy-muehle/go-mnd/v2: v2.4.0
- github.com/u-root/uio: 8295801
- github.com/valyala/fasttemplate: v1.2.1
- github.com/viki-org/dnscache: c70c1f2
- github.com/vmihailenco/msgpack/v4: v4.3.12
- github.com/vmihailenco/tagparser: v0.1.1
- github.com/xo/terminfo: ca9a967
- github.com/yeya24/promlinter: v0.1.0
- github.com/yudai/gojsondiff: v1.0.0
- github.com/yudai/golcs: ecda9a5
- github.com/yudai/pp: v2.0.1+incompatible
- github.com/zenazn/goji: v0.9.0
- github.com/ziutek/mymysql: v1.5.4
- github.com/zmap/rc2: 24b9757
- github.com/zmap/zcertificate: 0e3d58b
- go.mozilla.org/mozlog: 4bb1313
- goji.io/v3: v3.0.0
- gopkg.in/inconshreveable/log15.v2: 67afb5e
- mvdan.cc/gofumpt: v0.1.1