Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[v0.18] cherry-picks for v0.18.2 #5601

Merged
merged 7 commits into from
Dec 16, 2024
Merged

Conversation

tonistiigi and others added 7 commits December 16, 2024 09:57
Signed-off-by: Tonis Tiigi <[email protected]>
(cherry picked from commit 9a2d75f)
Brings in support for Alpine 3.21 that has been embedded
into latest golang images.

Signed-off-by: Tonis Tiigi <[email protected]>
Calling marshal changes the internal state of the op, for example
addCap() helper adds capability constraints. These can race with
same map being read by another Marshal call. Locking the Marshal
function itself also makes sure that the cache is not recomputed
in this case.

Signed-off-by: Tonis Tiigi <[email protected]>
(cherry picked from commit 30413b5)
This is the third patch release of the 1.2.z release branch of runc. It
primarily fixes some minor regressions introduced in 1.2.0.

- Fixed a regression in use of securejoin.MkdirAll, where multiple
  runc processes racing to create the same mountpoint in a shared rootfs
  would result in spurious EEXIST errors. In particular, this regression
  caused issues with BuildKit.
- Fixed a regression in eBPF support for pre-5.6 kernels after upgrading
  Cilium's eBPF library version to 0.16 in runc.

full diff: opencontainers/runc@v1.2.2...v1.2.3
release notes: https://github.com/opencontainers/runc/releases/tag/v1.2.3

Signed-off-by: Sebastiaan van Stijn <[email protected]>
(cherry picked from commit 6638c88)
Checks for mkdir bug that was fixed in runc 1.2.3

Signed-off-by: Tonis Tiigi <[email protected]>
(cherry picked from commit ee0438b)
Signed-off-by: Tonis Tiigi <[email protected]>
(cherry picked from commit 8bf1d78)
Fixes bug that didn't allow named context replacement
for stages that were inherited from another stage.

This is a regression from Dockerfile 1.11 ONBUILD changes
where code was changed to call init() later to allow ONBUILD
rules to change the dependency list of a stage. Calling
this reinit caused the child stage to pick up the its state
from the parent stage in Dockerfile again.

Signed-off-by: Tonis Tiigi <[email protected]>
(cherry picked from commit 4c8bd43)

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot reviewed 5 out of 17 changed files in this pull request and generated no comments.

Files not reviewed (12)
  • Dockerfile: Language not supported
  • frontend/dockerfile/cmd/dockerfile-frontend/Dockerfile: Language not supported
  • hack/dockerfiles/archutil.Dockerfile: Language not supported
  • hack/dockerfiles/lint.Dockerfile: Language not supported
  • client/llb/definition.go: Evaluated as low risk
  • client/llb/diff.go: Evaluated as low risk
  • client/llb/merge.go: Evaluated as low risk
  • client/llb/llbbuild/llbbuild.go: Evaluated as low risk
  • client/llb/exec.go: Evaluated as low risk
  • client/llb/source.go: Evaluated as low risk
  • client/llb/fileop.go: Evaluated as low risk
  • frontend/dockerfile/dockerfile2llb/convert.go: Evaluated as low risk
@tonistiigi tonistiigi merged commit e4da654 into moby:v0.18 Dec 16, 2024
96 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants