-
Notifications
You must be signed in to change notification settings - Fork 425
[18.09 backport] Bump containerd v1.2.6, runc v1.0.0-rc8 #194
[18.09 backport] Bump containerd v1.2.6, runc v1.0.0-rc8 #194
Conversation
ping @dmcgowan @tonistiigi PTAL |
This runc commit causes a regression on selinux systems. moby#39109 |
@seemethere FYI |
@seemethere; I meant: fyi about the regression in runc 😅 |
Ha I realized right after I approved. 😂 |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM
opencontainers/selinux#51 (comment) Dan says it's an issue container-selinux and it should be fixed. |
@cpuguy83 LGTY? |
Added the runc binary bump from moby#39143 |
I can't verify that container-selinux fixes this since it doesn't appear to be updated yet. |
Ok, seemns the updated contaner-selinux is out and does resolve my issue with the updated runc. |
let me rebase this one to trigger CI |
Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com> (cherry picked from commit 8092cfb) Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com> (cherry picked from commit d43a41d) Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
full diff: opencontainers/runc@029124d...425e105 - opencontainers/runc#2043 Vendor in latest selinux code for keycreate errors Signed-off-by: Sebastiaan van Stijn <github@gone.nl> (cherry picked from commit 4bc310c) Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
f6622cc
to
1a1bf23
Compare
rebased; will open a follow-up for containerd v1.2.7 separately |
Seeing these a lot; oddly, here, it fails on Experimental, but succeeds on Janky https://jenkins.dockerproject.org/job/Docker-PRs-experimental/45700/console Possibly a race condition?
Difference in environment: Experimental:
Janky:
|
backport for the 18.09 branch of: