This is the first stable release in the 1.0 branch, fixing a few medium
and high priority issues with runc 1.0.0, including a few that affect
Kubernetes' usage of libcontainer.
Bugfixes:
- Fixed occasional runc exec/run failure ("interrupted system call") on an
Azure volume. ([#3074](https://github.com/opencontainers/runc/pull/3074))
- Fixed "unable to find groups ... token too long" error with /etc/group
containing lines longer than 64K characters. ([#3079](https://github.com/opencontainers/runc/pull/3079))
- cgroup/systemd/v1: fix leaving cgroup frozen after Set if a parent cgroup is
frozen. This is a regression in 1.0.0, not affecting runc itself but some
of libcontainer users (e.g Kubernetes). ([#3085](https://github.com/opencontainers/runc/pull/3085))
- cgroupv2: bpf: Ignore inaccessible existing programs in case of
permission error when handling replacement of existing bpf cgroup
programs. This fixes a regression in 1.0.0, where some SELinux
policies would block runc from being able to run entirely. ([#3087](https://github.com/opencontainers/runc/pull/3087))
- cgroup/systemd/v2: don't freeze cgroup on Set. ([#3092](https://github.com/opencontainers/runc/pull/3092))
- cgroup/systemd/v1: avoid unnecessary freeze on Set. ([#3093](https://github.com/opencontainers/runc/pull/3093))
Add GO111MODULE=auto to GO_PKG_BUILD_VARS to allow the package to be
built in non-module mode.
Module-aware mode will be mandatory in the next golang release.
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
fix pull request #56 from hyird/master
containerd: bump to 7ad184331fa3e55e52b890ea95e65ba581ae3429
libnetwork: bump to 9fd385be8302dbe1071a3ce124891893ff27f90f
runc: bump to dc9208a3303feef5b3839f4323d9beb36df0a9dd