runc 1.1.11 -- "Happy New Year!"
This is the eleventh patch release in the 1.1.z release branch of runc.
It primarily fixes a few issues with runc's handling of containers that
are configured to join existing user namespaces, as well as improvements
to cgroupv2 support.
- Fix several issues with userns path handling. (#4122, #4124, #4134, #4144)
- Support memory.peak and memory.swap.peak in cgroups v2.
AddswapOnlyUsage
inMemoryStats
. This field reports swap-only usage.
For cgroupv1,Usage
andFailcnt
are set by subtracting memory usage
from memory+swap usage. For cgroupv2,Usage
,Limit
, andMaxUsage
are set. (#4000, #4010, #4131) - build(deps): bump github.com/cyphar/filepath-securejoin. (#4140)
Static Linking Notices
The runc
binary distributed with this release are statically linked with
the following GNU LGPL-2.1 licensed libraries, with runc
acting
as a "work that uses the Library":
The versions of these libraries were not modified from their upstream versions,
but in order to comply with the LGPL-2.1 (§6(a)), we have attached the
complete source code for those libraries which (when combined with the attached
runc source code) may be used to exercise your rights under the LGPL-2.1.
However we strongly suggest that you make use of your distribution's packages
or download them from the authoritative upstream sources, especially since
these libraries are related to the security of your containers.
Thanks to all of the contributors who made this release possible:
- Aleksa Sarai cyphar@cyphar.com
- Heran Yang heran55@126.com
- Kir Kolyshkin kolyshkin@gmail.com
- lfbzhm lifubang@acmcoder.com
- Mrunal Patel mrunalp@gmail.com
Signed-off-by: Aleksa Sarai cyphar@cyphar.com