CRI-O v1.26.2
The release notes have been generated for the commit range
v1.26.1…730cefa on Mon, 10 Apr 2023 15:54:44 UTC.
Downloads
Download one of our static release bundles via our Google Cloud Bucket:
To verify the artifact signatures via cosign, run:
> export COSIGN_EXPERIMENTAL=1
> cosign verify-blob cri-o.amd64.730cefa77b9cd164987c966fd9e365f27c386739.tar.gz \
--certificate-identity https://github.com/cri-o/cri-o/.github/workflows/test.yml@refs/tags/730cefa77b9cd164987c966fd9e365f27c386739 \
--certificate-oidc-issuer https://token.actions.githubusercontent.com \
--certificate-github-workflow-repository cri-o/cri-o \
--certificate-github-workflow-ref refs/tags/730cefa77b9cd164987c966fd9e365f27c386739 \
--signature cri-o.amd64.730cefa77b9cd164987c966fd9e365f27c386739.tar.gz.sig \
--certificate cri-o.amd64.730cefa77b9cd164987c966fd9e365f27c386739.tar.gz.cert
To verify the bill of materials (SBOM) in SPDX format using the bom tool, run:
> tar xfz cri-o.amd64.730cefa77b9cd164987c966fd9e365f27c386739.tar.gz
> bom validate -e cri-o.amd64.730cefa77b9cd164987c966fd9e365f27c386739.tar.gz.spdx -d cri-o
Changelog since v1.26.1
Changes by Kind
Dependency-Change
- ‘/dev’ is now mounted again without the ‘noexec’ flag. (#6582, @klihub)
- Build statically linked binary with go 1.20. (#6797, @saschagrunert)
- The NRI-related configuration and command line options have been updated to reflect the corresponding changes in NRI itself. In particular,
- remove ‘nri_config_file’ configuration file and ‘–nri-config-file’ command line options
- add ‘nri_plugin_config_dir’ configuration and ‘–nri-plugin-config-dir’ command line options to specify directory to scan for configuration of plugins pre-launched by the runtime
- add ‘nri_disable_connections’ configuration and ‘–nri-disable-connections’ command line options to disable connections from externally launched plugins
- add ‘nri_plugin_registration_timeout’ configuration and ‘–nri-plugin-registration-timeout’ command line options to allow overriding the default plugin registration timeout
- add ‘nri_plugin_request_timeout’ configuration and ‘–nri-plugin-request-timeout’ command line options to allow overriding the default plugin request handling timeout (#6648, @klihub)
- Update github.com/container-orchestrated-devices/container-device-interface to v0.5.4. (#6711, @klihub)
- Updated CNI plugins to v1.2.0. (#6541, @saschagrunert)
- Updated crun to v1.8.3 and runc to v1.5.1. (#6770, @saschagrunert)
Other
- Add HostNetworkDisableSELinux option to configuration,
allowing users to enable/disable selinux within a pod when it is running in the host network namespace. (#6579, @hasan4791)
Feature
- Add configuration option to control the irqbalance configuration restore process for high performance hooks dynamic IRQ pinning. (#6388, @jlojosnegros)
- CRI-O honors the per-volume mappings specified by the Kubelet (#6750, @giuseppe)
- Extended checkpoint archive metadata with time of checkpointing. (#6464, @adrianreber)
Documentation
- Added documentation to
tutorials
how to use Open Telemetry tracing in CRI-O. (#6576, @saschagrunert)
Bug or Regression
- Allow annotation “io.kubernetes.cri-o.umask” to set umask for crio container. (#6399, @QiWang19)
- Fix panic of server when EnablePodEvents is set to true (#6630, @haircommander)
- Fixed a bug when running kata containers, where exec sync requests (manually or automatically triggered via readiness/liveness probes)
overwrite the runtime
info.runtimeSpec.process.args
of the container status (for example via crictl inspect
). (#6730, @littlejawa)
Other (Cleanup or Flake)
- Updated crun to v1.8.1. (#6697, @saschagrunert)
Uncategorized
- Change metrics endpoint to gracefully shutdown, and move metric server fatal errors to just errors. (#6748, @rphillips)
- Update github.com/containers/image to v5.24.0 for sigstore features (#6634, @mrunalp)
Dependencies
Added
- cloud.google.com/go/accessapproval: v1.5.0
- cloud.google.com/go/accesscontextmanager: v1.4.0
- cloud.google.com/go/apigateway: v1.4.0
- cloud.google.com/go/apigeeconnect: v1.4.0
- cloud.google.com/go/appengine: v1.5.0
- cloud.google.com/go/baremetalsolution: v0.4.0
- cloud.google.com/go/batch: v0.4.0
- cloud.google.com/go/beyondcorp: v0.3.0
- cloud.google.com/go/certificatemanager: v1.4.0
- cloud.google.com/go/channel: v1.9.0
- cloud.google.com/go/cloudbuild: v1.4.0
- cloud.google.com/go/clouddms: v1.4.0
- cloud.google.com/go/compute/metadata: v0.2.3
- cloud.google.com/go/contactcenterinsights: v1.4.0
- cloud.google.com/go/container: v1.7.0
- cloud.google.com/go/datafusion: v1.5.0
- cloud.google.com/go/dataplex: v1.4.0
- cloud.google.com/go/dataproc: v1.8.0
- cloud.google.com/go/deploy: v1.5.0
- cloud.google.com/go/dlp: v1.7.0
- cloud.google.com/go/essentialcontacts: v1.4.0
- cloud.google.com/go/eventarc: v1.8.0
- cloud.google.com/go/filestore: v1.4.0
- cloud.google.com/go/gkebackup: v0.3.0
- cloud.google.com/go/gkemulticloud: v0.4.0
- cloud.google.com/go/gsuiteaddons: v1.4.0
- cloud.google.com/go/iap: v1.5.0
- cloud.google.com/go/ids: v1.2.0
- cloud.google.com/go/iot: v1.4.0
- cloud.google.com/go/longrunning: v0.3.0
- cloud.google.com/go/managedidentities: v1.4.0
- cloud.google.com/go/maps: v0.1.0
- cloud.google.com/go/networkmanagement: v1.5.0
- cloud.google.com/go/optimization: v1.2.0
- cloud.google.com/go/orchestration: v1.4.0
- cloud.google.com/go/orgpolicy: v1.5.0
- cloud.google.com/go/policytroubleshooter: v1.4.0
- cloud.google.com/go/pubsublite: v1.5.0
- cloud.google.com/go/resourcemanager: v1.4.0
- cloud.google.com/go/resourcesettings: v1.4.0
- cloud.google.com/go/run: v0.3.0
- cloud.google.com/go/servicecontrol: v1.5.0
- cloud.google.com/go/servicemanagement: v1.5.0
- cloud.google.com/go/serviceusage: v1.4.0
- cloud.google.com/go/shell: v1.4.0
- cloud.google.com/go/storagetransfer: v1.6.0
- cloud.google.com/go/texttospeech: v1.5.0
- cloud.google.com/go/tpu: v1.4.0
- cloud.google.com/go/translate: v1.4.0
- cloud.google.com/go/video: v1.9.0
- cloud.google.com/go/vmmigration: v1.3.0
- cloud.google.com/go/vmwareengine: v0.1.0
- cloud.google.com/go/vpcaccess: v1.5.0
- cloud.google.com/go/websecurityscanner: v1.4.0
- github.com/AliyunContainerService/ack-ram-tool/pkg/credentials/alibabacloudsdkgo/helper: v0.2.0
- github.com/alibabacloud-go/alibabacloud-gateway-spi: v0.0.4
- github.com/alibabacloud-go/cr-20160607: v1.0.1
- github.com/alibabacloud-go/cr-20181201: v1.0.10
- github.com/alibabacloud-go/darabonba-openapi: v0.1.18
- github.com/alibabacloud-go/darabonba-string: v1.0.0
- github.com/alibabacloud-go/debug: 9472017
- github.com/alibabacloud-go/endpoint-util: v1.1.1
- github.com/alibabacloud-go/openapi-util: v0.0.11
- github.com/alibabacloud-go/tea-utils: v1.4.4
- github.com/alibabacloud-go/tea-xml: v1.1.2
- github.com/alibabacloud-go/tea: v1.1.18
- github.com/aliyun/credentials-go: v1.2.3
- github.com/arbovm/levenshtein: 48b4e1c
- github.com/clbanning/mxj/v2: v2.5.6
- github.com/containerd/btrfs/v2: v2.0.0
- github.com/containerd/cgroups/v3: v3.0.0
- github.com/containerd/typeurl/v2: v2.1.0
- github.com/decred/dcrd/dcrec/secp256k1/v4: 5444fa5
- github.com/dgryski/trifles: dd97f9a
- github.com/go-jose/go-jose/v3: v3.0.0
- github.com/goark/errs: v1.1.0
- github.com/goark/go-cvss: v1.3.0
- github.com/goccy/go-json: v0.9.7
- github.com/google/go-github/v47: v47.1.0
- github.com/google/go-github/v48: v48.2.0
- github.com/google/go-github/v50: v50.2.0
- github.com/google/renameio/v2: v2.0.0
- github.com/jellydator/ttlcache/v3: v3.0.0
- github.com/klauspost/cpuid/v2: v2.0.4
- github.com/lestrrat-go/backoff/v2: v2.0.8
- github.com/lestrrat-go/blackmagic: v1.0.0
- github.com/lestrrat-go/httpcc: v1.0.1
- github.com/lestrrat-go/iter: v1.0.1
- github.com/lestrrat-go/jwx: v1.2.25
- github.com/lestrrat-go/option: v1.0.0
- github.com/minio/sha256-simd: v1.0.0
- github.com/moby/patternmatcher: v0.5.0
- github.com/mozillazg/docker-credential-acr-helper: v0.3.0
- github.com/pjbgf/sha1cd: v0.2.3
- github.com/skeema/knownhosts: v1.1.0
- github.com/tjfoc/gmsm: v1.3.2
Changed
Removed
- github.com/DATA-DOG/go-sqlmock: v1.5.0
- github.com/Masterminds/sprig/v3: v3.2.2
- github.com/Masterminds/squirrel: v1.5.3
- github.com/Masterminds/vcs: v1.13.3
- github.com/OpenPeeDeeP/depguard: v1.0.1
- github.com/ReneKroon/ttlcache/v2: v2.11.0
- github.com/StackExchange/wmi: 5d04971
- github.com/blendle/zapdriver: v1.3.1
- github.com/bombsimon/wsl/v3: v3.0.0
- github.com/distribution/distribution/v3: ffbd94c
- github.com/go-critic/go-critic: v0.4.1
- github.com/go-lintpack/lintpack: v0.5.2
- github.com/go-toolsmith/astcast: v1.0.0
- github.com/go-toolsmith/astcopy: v1.0.0
- github.com/go-toolsmith/astequal: v1.0.0
- github.com/go-toolsmith/astfmt: v1.0.0
- github.com/go-toolsmith/astinfo: 9809ff7
- github.com/go-toolsmith/astp: v1.0.0
- github.com/go-toolsmith/pkgload: v1.0.0
- github.com/go-toolsmith/strparse: v1.0.0
- github.com/go-toolsmith/typep: v1.0.0
- github.com/go-xmlfmt/xmlfmt: d5b6f63
- github.com/gofrs/flock: v0.8.1
- github.com/golangci/check: cfe4005
- github.com/golangci/dupl: 3e9179a
- github.com/golangci/errcheck: ef45e06
- github.com/golangci/go-misc: 927a3d8
- github.com/golangci/goconst: 041c5f2
- github.com/golangci/gocyclo: 2becd97
- github.com/golangci/gofmt: 244bba7
- github.com/golangci/golangci-lint: v1.25.0
- github.com/golangci/ineffassign: 42439a7
- github.com/golangci/lint-1: 297bf36
- github.com/golangci/maligned: b1d8939
- github.com/golangci/misspell: 950f5d1
- github.com/golangci/prealloc: 215b22d
- github.com/golangci/revgrep: d9c87f5
- github.com/golangci/unconvert: 28b1c44
- github.com/gomodule/redigo: v1.8.2
- github.com/google/go-github/v33: v33.0.0
- github.com/google/go-github/v39: v39.2.0
- github.com/google/go-github/v42: v42.0.0
- github.com/gostaticanalysis/analysisutil: 4088753
- github.com/gosuri/uitable: v0.0.4
- github.com/jingyugao/rowserrcheck: 72ab760
- github.com/jirfag/go-printf-func-name: 45db996
- github.com/jmoiron/sqlx: v1.3.5
- github.com/klauspost/cpuid: v1.2.0
- github.com/lann/builder: 47ae307
- github.com/lann/ps: 62de8c4
- github.com/logrusorgru/aurora: a7b3b31
- github.com/maratori/testpackage: v1.0.1
- github.com/matoous/godox: 5d6d842
- github.com/mattn/goveralls: v0.0.2
- github.com/mitchellh/go-ps: 621e559
- github.com/mozilla/tls-observatory: a3c1b6c
- github.com/nakabonne/nestif: v0.3.0
- github.com/nbutton23/zxcvbn-go: ae427f1
- github.com/phayes/checkstyle: bfd46e6
- github.com/phayes/freeport: 74d24b5
- github.com/prashantv/gostub: v1.1.0
- github.com/quasilyte/go-consistent: c6f3937
- github.com/rubenv/sql-migrate: v1.1.2
- github.com/ryancurrah/gomodguard: v1.0.2
- github.com/sclevine/agouti: v3.0.0+incompatible
- github.com/securego/gosec: 79fbf3a
- github.com/shirou/gopsutil: e4ec7b2
- github.com/shirou/w32: bb4de01
- github.com/shopspring/decimal: v1.2.0
- github.com/shurcooL/go-goon: 37c2f52
- github.com/shurcooL/go: 9e1955d
- github.com/sourcegraph/go-diff: v0.5.1
- github.com/spiegel-im-spiegel/errs: v1.0.5
- github.com/spiegel-im-spiegel/go-cvss: v1.0.0
- github.com/tetafro/godot: v0.2.5
- github.com/timakin/bodyclose: f7f2e9b
- github.com/tommy-muehle/go-mnd: e6f9a99
- github.com/tv42/httpunix: 2ba4b9c
- github.com/ultraware/funlen: v0.0.2
- github.com/ultraware/whitespace: v0.0.4
- github.com/urfave/negroni: v1.0.0
- github.com/uudashr/gocognit: v1.0.1
- github.com/valyala/bytebufferpool: v1.0.0
- github.com/valyala/fasthttp: v1.2.0
- github.com/valyala/quicktemplate: v1.2.0
- github.com/valyala/tcplisten: ceec8f9
- knative.dev/pkg: 1f7514a
- mvdan.cc/interfacer: c200402
- mvdan.cc/lint: adc824a
- mvdan.cc/unparam: d517963
- sourcegraph.com/sqs/pbtypes: d3ebe8f