Changelog for cri-o-1.13.0-4.8.x86_64.rpm :

* Fri Dec 14 2018 Sascha Grunert - Update cri-o deprecated configuration and documentation to match upstream
* Fri Dec 07 2018 Richard Brown - Update cri-o to v1.13.0:
* Support kubernetes 1.13
* Wed Dec 05 2018 Michal Jura - Fix cri-o requirement for cri-o-kubeadm-criconfig
* Mon Nov 19 2018 Valentin Rothberg - Update cri-o to v1.12.1:
* Remove nodev from mounts
* vendor: update storage for a panic fix
* container_create: fix dev mounts and remove nodev from /dev mounts
* Use CurrentContainerStatus in list CRI calls
* oci: Add CurrentContainerStatus API
* conmon: fsync the log file
* Wed Nov 07 2018 Valentin Rothberg - Set NOFILE and NPROC limit to 1048576 to align with Docker/containerd and the upstream unit file. Fix bsc#1112980
* Fri Oct 19 2018 Valentin Rothberg - Update cri-o to v1.12.0:
* docs: tweak crio and crio.conf man pages
* config: provide a default runtime and deprecate the runtime option
* cri: Implement runtime handler support
*
*: implement default ulimits for containers
* Fix manpage to correctly state default storage driver
* crio.conf(5): update manpage to the latest state
* Remove sysctl parsing code from cri-o
* Add default_systcls option to crio.conf
* Image Volumes should be bind mounted as private
* Create LICENSE
* conmon: fix segfault when --log-level is not specified
* Add log-level option to conmon and crio.conf
* Remove \"--log-level debug\" from service file
* conmon: close extra files before exit
* Block use of /proc/acpi from inside containers
* conmon: do not use an empty env when running the exit command
* Mon Oct 08 2018 Jeff Kowalczyk - Add go-1.11-compat-backport.patch for go1.11 compatibility.
* Tested with golang(API) == 1.10 and golang(API) == 1.11, OK
* Upstream git master commit https://github.com/kubernetes-sigs/cri-o/commit/0bd30872028b5ed2d0eb7febb39f034b5f2da72a contains 1 hunk adding missing argument in format string of calls to: [#] github.com/kubernetes-incubator/cri-o/lib lib/container_server.go:309: Debugf call needs 1 arg but has 2 args lib/container_server.go:317: Debugf call needs 1 arg but has 2 args ... FAIL github.com/kubernetes-incubator/cri-o/lib [build failed] Calls in question: logrus.Debugf(\"loaded new pod sandbox %s\", sandboxID, err) logrus.Debugf(\"loaded new pod container %s\", containerID, err) require another argument to the string format (\": %v\" per upstream): logrus.Debugf(\"loaded new pod sandbox %s: %v\", sandboxID, err) logrus.Debugf(\"loaded new pod container %s: %v\", containerID, err) Patch contents not available in upstream cri-o released versions: cri-o-1.11.3 cri-o-1.11.4 cri-o-1.11.5 cri-o-1.11.6 Filed upstream issue requesting patch contents in released version: https://github.com/kubernetes-sigs/cri-o/issues/1827
* Tue Aug 21 2018 rbrownAATTsuse.com- cri-o-kubeadm-criconfig: correct conflicts with docker-kubic
* Tue Aug 21 2018 rbrownAATTsuse.com- cri-o-kubeadm-criconfig: Remove /etc/kubernetes/runtime.conf, replace with /etc/sysconfig/kublet
* Mon Aug 20 2018 vrothbergAATTsuse.com- Update crio.conf to be as close to the default one as possible:
* Extend crio.conf with all previously missing options; crio.conf(5) isn\'t mentioning all of them which soon will be fixed.
* Uncomment options to use /etc/containers/{registries,storage}.conf where appropriate.- Remove Fix-AppArmor-build.patch as the build issue is fixed with v1.11.2.- Update cri-o to v1.11.2:
* Fix AppArmor build
* Image Volumes should be bind mounted as private
* container_create: Set a minimum memory limit
* Add log-level option to conmon and crio.conf
* server/container_create: error out if capability is unknown
* Fri Aug 17 2018 vrothbergAATTsuse.com- Add \"docker.io\" to the registries list in the crio.conf to enable pulling of unqualified images by default.
* Thu Aug 16 2018 rbrownAATTsuse.com- ExcludeArch i586 (does not build, nor makes sense for that arch)
* Tue Aug 14 2018 rbrownAATTsuse.com- Make crio default, docker as alternative runtime (boo#1104821)- Configure kubernetes CRI runtime with $runtime-kubeadm-criconfig packages
* Tue Aug 14 2018 rbrownAATTsuse.com- Use btrfs storage driver to be consistant with other supported runtimes
* Thu Aug 02 2018 vrothbergAATTsuse.com- Do not provide `/etc/crictl.yaml` anymore. Although being shipped by upstream this package belongs into the `cri-tools` package. bsc#1104598- add Fix-AppArmor-build.patch to temporarily fix apparmor builds- Update cri-o to v1.11.1:
* server: Don\'t make additional copy of config.json
* cri-tools: Use release-1.11 branch
* Tue Jul 10 2018 vrothbergAATTsuse.com- Update cri-o to v1.10.6:
* mask /proc/{acpi,keys}
* Mon Jul 02 2018 vrothbergAATTsuse.com- Update cri-o to v1.10.5:
* Reduce amount of logs being printed by default
* Update to latest ocicni
* Wed Jun 27 2018 vrothbergAATTsuse.com- Update cri-o to v1.10.4:
* network: Fix manage NetworkNS lifecycle
* sandbox_run: fix selinux relabel sharing
* container_create: more selinux relabel fixes
* container_create: correctly relabel mounts when asked
* Mon Jun 18 2018 vrothbergAATTsuse.com- Update cri-o to v1.10.3:
* container_portforward: add support for short pod IDs
* container_create: no privileged container if not privileged sandbox
* container_create: always mount sysfs as rw for privileged containers
* container_create: set rw for privileged containers
* conmon: on a flush error discard the iov buffer
* Fri Jun 15 2018 vrothbergAATTsuse.com- Update cri-o to v1.10.2:
* various improvements to conmon
* oci: avoid race on container stop
* image: Let size be calculated dynamically
* Add support for short IDs for exec and attach
* Make network namespace lifecycle management optional
* container_exec: Fix terminal setting for exec
* oci: Force kill the container process only if nothing else worked
* Add extra info to verbose requests to PodSandboxStatus
* Make conmon and crio share the same constants
* conmon: catch SIGTERM, SIGINT and SIQUIT
* Invalidate cache by building fresh one and replacing previous all at once
* Enable per pod PID namespace setting
* Make the /opt/cni mount rw
* conmon: add new option --version
* oci: Copy-edits for waitContainerStop chControl comment
* system container: add /var/tmp as RW
* container_status: expose LogPath as requested by the CRI
* container_create: only bind mount /etc/hosts if not provided by k8s
* kubernetes: Simplify and freshen the required-files table
* Report an warning when no stages are defined for a hook
* Mon Jun 11 2018 vrothbergAATTsuse.com- Use actual tag for v1.9.13. Upstream missed to set a tag and the last revision mistakenly set it to v1.9.14-dev instead of v1.9.13.
* Thu Jun 07 2018 vrothbergAATTsuse.com- Update cri-o to v1.9.13:
* runtime_status: report correct network status
* container_status: expose LogPath as requested by the CRI bsc#1095154
* Tue Jun 05 2018 dcassanyAATTsuse.com- Refactor %license usage to a simpler form
* Mon Jun 04 2018 dcassanyAATTsuse.com- Make use of %license macro
* Fri May 04 2018 ndasAATTsuse.de- use correct path for runc
* Thu Apr 12 2018 fcastelliAATTsuse.com- Put cri-o deamon under the podruntime slice. This the recommended deployment to allow fine resource control on Kubernetes. bsc#1086185
* Wed Apr 11 2018 vrothbergAATTsuse.com- Update cri-o to v1.9.11:
* oci: avoid race on container stop
* server/sandbox_stop: Pass context through StopAllPodSandboxes
* conmon: Add container ID to syslog
* Add logging support for base condition in debug
* Simplify filter block
* Specifying a filter with no filtering expressions is now idempotent
* Add methods for listing and fetching container stats
* Implement the stats for the image_fs_info command
* Return error for container exec
* Thu Mar 15 2018 vrothbergAATTsuse.com- Require cni and cni-plugins to enable container networking. feature#crio
* Thu Mar 15 2018 vrothbergAATTsuse.com- Update cri-o to v1.9.10:
* conmon: Avoid strlen in logging path
* conmon: Remove info logs
* container_exec: Fix terminal setting for exec
* Mon Mar 12 2018 vrothbergAATTsuse.com- Update cri-o to v1.9.9:
* sandbox_stop: Call CNI stop before stopping pod infra container
* Thu Mar 08 2018 vrothbergAATTsuse.com- Remove the crio-shutdown.service. It does not have any effect when shutting down crio and also isn\'t shipped on Fedora. - crio-shutdown.service
* Mon Mar 05 2018 vrothbergAATTsuse.com- crio.conf: update default socket to /var/run/crio/crio.sock as suggested by upstream.
* Mon Mar 05 2018 vrothbergAATTsuse.com- Update cri-o to v1.9.8:
* system_containers: Update mounts
* execsync: Set terminal to true when we pass -t to conmon
* Make network namespace pinning optional
* Add context to net ns symlink removal errors
* Make the /opt/cni mount rw
* sandbox_stop: close/remove the netns _after_ stopping the containers
* sandbox net: set netns closed after actaully closing it
* Mon Mar 05 2018 vrothbergAATTsuse.com- Configuration files should generally be tagged as %config(noreplace) in order to keep the modified config files and to avoid losing data when the package is being updated.
* Sat Mar 03 2018 vrothbergAATTsuse.com- Remove empty filter rule from cri-o-rpmlintrc, which was mistakenly masking a few warnings, some of which have been fixed, others need to be filtered. conmon and pause are not compiled with -fpie anymore to align with what upstream does; linking fails when done properly.
* Fri Mar 02 2018 fcastelliAATTsuse.com- Update minimum version of the Go compiler required
* Fri Mar 02 2018 fcastelliAATTsuse.com- Add missing runtime dependencies: socat, iptables, iproute
* Wed Feb 28 2018 vrothbergAATTsuse.com- Change the installation path of conmon and pause from /usr/lib/crio to /usr/lib/crio/bin in order to align with upstream requirements.- Update crio.conf to the reflect the new path of conmon and set the correct path of CNI plugins (i.e., /usr/lib/cni).
* Tue Feb 20 2018 vrothbergAATTsuse.com- Update cri-o to v1.9.6:
* vendor: update c/image to handle text/plain from registries Fixes cases where text/plain s1 schemes are mistakenly converted to MIME.
* Sun Feb 18 2018 jengelhAATTinai.de- Let description say what the package really does.
* Fri Feb 16 2018 vrothbergAATTsuse.com- Update cri-o to v1.9.5:
* system container: add /var/tmp as RW
* container_create: correctly set user
* imageService: cache information about images
* image: Add lock around image cache access
* Fri Feb 16 2018 vrothbergAATTsuse.com- Cleanup version-update related changelogs to only keep log entries of changes that are visible and important to the user, and the project.
* Mon Feb 12 2018 vrothbergAATTsuse.com- Add requirements to libcontainers-{common,image,storage}.- Run spec-cleaner on cri-o.spec.
* Mon Feb 12 2018 vrothbergAATTsuse.com- Update cri-o to v1.9.3:
* Be more diligent about cleaning up failed-to-create containers
* Use crictl instead of crioctl in image integration tests
* Handle truncated IDs in imageService.ResolveNames()
* Switch to ImageServer.UntagImage in RemoveImage handler
* Return image references from the storage package
* storage: API fixups
* Fri Feb 09 2018 vrothbergAATTsuse.com- Use golang-packaging macro for binary stripping.- Use -buildmode=pie for compilation.- The update to 1.9.0+ removes the crioctl binary. The crictl binary from cri-tools should be used instead.- Update cri-o to v1.9.2:
* sandbox: fix sandbox logPath when crio restarts
* Adapt to recent containers/image API updates
* container_create: only bind mount /etc/hosts if not provided by k8s
* container_attach: Ensure ctl file is closed
* lib,oci: drop stateLock when possible
* container_exec: fix terminal true process json
* container_create: fix apparmor from container config
* container_create: correctly set image and kube envs
* oci: do not append conmon env to container process
* container_exec: use process file with runc exec
* drop crioctl source code
* conmon: Add support for partial/newline log tags
* image_pull: fix image resolver
* Add /proc/scsi to masked paths
* replace crioctl with crictl
* replace crioctl in e2e with crictl
* Move crio default sock to /var/run/crio/crio.sock
* container_create: set the seccomp profile in the container object
* Mon Feb 05 2018 vrothbergAATTsuse.com- Fix libostree-devel %if condition for TW, Leap 15+ and SLES 15+.
* Thu Feb 01 2018 vrothbergAATTsuse.com- Use `%fdupes %buildroot/%_prefix` since `fdupes %buildroot` is not allowedv because you cannot make hardlinks between certain partitions.
* Wed Jan 31 2018 vrothbergAATTsuse.com- Source the cri-o-rpmlintrc the spec file.
* Tue Jan 30 2018 vrothbergAATTsuse.com- Add cri-o package: CRI-O is meant to provide an integration path between OCI conformant runtimes and the kubelet. Specifically, it implements the Kubelet Container Runtime Interface (CRI) using OCI conformant runtimes. The scope of CRI-O is tied to the scope of the CRI.