hcsshim | Playwright Ecosystem Directory

Bot releases are visible (Hide)

hcsshim - v0.11.0

Published by kiashok about 1 year ago

Note: This is the first tag from release/0.11 branch and release/0.11 branch is based off of v0.10.0-rc.8 tag. Tags cut from release/0.11 branch is intended to be used on containerd release/1.7

What's Changed

Add test network agent for ncproxy dev work by @katiewasnothere in https://github.com/microsoft/hcsshim/pull/1067
Support restarting containerd in tests, add restart test case by @kevpar in https://github.com/microsoft/hcsshim/pull/1188
Export hcsshim annotations into its own package by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1201
Extend integrity protection of LCOW layers to SCSI devices by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1170
Remove block preventing us from making hardlinks to symlinks by @katiewasnothere in https://github.com/microsoft/hcsshim/pull/1187
Fix LayerData not being usable for ComputeStorage package by @dcantah in https://github.com/microsoft/hcsshim/pull/1203
tests: Add CRI tests for integrity protection of LCOW layers by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1193
Fix commandline double quoting for job containers by @dcantah in https://github.com/microsoft/hcsshim/pull/1207
Support updating cpugroup membership by @katiewasnothere in https://github.com/microsoft/hcsshim/pull/1202
Add reconnect logic for stdio pipes by @dcantah in https://github.com/microsoft/hcsshim/pull/1197
Add support for finding net adapters that were assigned with vpci by @katiewasnothere in https://github.com/microsoft/hcsshim/pull/1196
Support booting isolated SNP from a GuestStateFile rather than separate kernel/initrd. by @KenGordon in https://github.com/microsoft/hcsshim/pull/1206
Add tool to install modules in lcow and plumb through shim by @katiewasnothere in https://github.com/microsoft/hcsshim/pull/1195
Add retries when removing device mapper target by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1200
Handling of out-of-order whiteout files during tar expansion by @ambarve in https://github.com/microsoft/hcsshim/pull/1218
Fix permissions issues with sandbox mounts by @katiewasnothere in https://github.com/microsoft/hcsshim/pull/1211
Update readme to list accurate go version by @dcantah in https://github.com/microsoft/hcsshim/pull/1220
Pass disk handle for computestorage.FormatWritableLayerVhd on RS5 by @dcantah in https://github.com/microsoft/hcsshim/pull/1204
go.mod: Bump ttrpc to 1.1.0 by @dcantah in https://github.com/microsoft/hcsshim/pull/1223
Update the Type field name to PolicyType for SetPolicy by @netal in https://github.com/microsoft/hcsshim/pull/1194
Add DefaultContainerAnnotations runhcs option by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1210
security policy appended to container's environment variables by @svolos in https://github.com/microsoft/hcsshim/pull/1219
Add 21H2 definitions to osversion package by @dcantah in https://github.com/microsoft/hcsshim/pull/1205
Rework merkle tree implementation to use io.Reader instead of byte array by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1209
Time synchronization inside LCOW UVM by @ambarve in https://github.com/microsoft/hcsshim/pull/1119
Set default time zone for WCOW UVM by @dcantah in https://github.com/microsoft/hcsshim/pull/1192
Bump github.com/containerd/containerd from 1.5.7 to 1.5.8 by @dependabot in https://github.com/microsoft/hcsshim/pull/1231
Restructure location of various ncproxy apis by @katiewasnothere in https://github.com/microsoft/hcsshim/pull/1216
Fix ReadExt4SuperBlock function by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1229
Support assigning devices into LCOW by @katiewasnothere in https://github.com/microsoft/hcsshim/pull/1215
Add ws2022 image/build to cri-containerd tests by @dcantah in https://github.com/microsoft/hcsshim/pull/1160
Update ncproxy API and adjust hcn support by @katiewasnothere in https://github.com/microsoft/hcsshim/pull/1212
Add function to write hash device by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1235
Add conpty (pseudo console) package by @dcantah in https://github.com/microsoft/hcsshim/pull/1228
Revendor in /test and remove dead code by @dcantah in https://github.com/microsoft/hcsshim/pull/1244
Add E2E test for pulling images with unorderd tar by @ambarve in https://github.com/microsoft/hcsshim/pull/1238
Bump github.com/opencontainers/image-spec from 1.0.1 to 1.0.2 in /test by @dependabot in https://github.com/microsoft/hcsshim/pull/1247
Add new exec package for host process containers by @dcantah in https://github.com/microsoft/hcsshim/pull/1233
Swap to the internal/exec pkg for host process containers by @dcantah in https://github.com/microsoft/hcsshim/pull/1248
HCS fixes for HclEnabled and guest state file type. by @KenGordon in https://github.com/microsoft/hcsshim/pull/1250
Rename conpty.New to conpty.Create by @dcantah in https://github.com/microsoft/hcsshim/pull/1254
Ignore access denied on HcsTerminateProcess by @gabriel-samfira in https://github.com/microsoft/hcsshim/pull/1252
Change redundant conpty.ConPTY struct name by @dcantah in https://github.com/microsoft/hcsshim/pull/1259
Fix deferred os.Umask usage in loops by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1256
Rework TestPseudoConsolePowershell by @dcantah in https://github.com/microsoft/hcsshim/pull/1255
Add endpoint settings to add nic call by @katiewasnothere in https://github.com/microsoft/hcsshim/pull/1246
Wait for waitInitExit() to return by @gabriel-samfira in https://github.com/microsoft/hcsshim/pull/1249
Bump github.com/containerd/containerd from 1.5.8 to 1.5.9 in /test by @dependabot in https://github.com/microsoft/hcsshim/pull/1265
Bump github.com/containerd/containerd from 1.5.8 to 1.5.9 by @dependabot in https://github.com/microsoft/hcsshim/pull/1266
Make kill noop on second run by @gabriel-samfira in https://github.com/microsoft/hcsshim/pull/1269
Rework process dump cri-containerd tests by @dcantah in https://github.com/microsoft/hcsshim/pull/1267
Add ErrInvalidHandle and fix list stats by @gabriel-samfira in https://github.com/microsoft/hcsshim/pull/1276
Fix ReadDMVeritySuperBlock function by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1257
Update Go module version to 1.17 by @dcantah in https://github.com/microsoft/hcsshim/pull/1222
Add new service for querying compute systems' information by @katiewasnothere in https://github.com/microsoft/hcsshim/pull/1243
Fix Test_ExtendedTask_ProcessorInfo CRI test by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1283
Update ncproxy to include new ncproxy network and endpoint types by @katiewasnothere in https://github.com/microsoft/hcsshim/pull/1239
Add logging to layer retry code path by @dcantah in https://github.com/microsoft/hcsshim/pull/1281
Skip flaky TestPseudoConsolePowershell by @dcantah in https://github.com/microsoft/hcsshim/pull/1285
Fix checkptr error with > 1 process in job object by @dcantah in https://github.com/microsoft/hcsshim/pull/1284
Refactor code for security policy by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1279
shim: Don't shadow err return in createPod by @kevpar in https://github.com/microsoft/hcsshim/pull/1288
Bump github.com/opencontainers/runc from 1.0.2 to 1.0.3 by @dependabot in https://github.com/microsoft/hcsshim/pull/1241
Bug fix with runc container lifetime management by @helsaawy in https://github.com/microsoft/hcsshim/pull/1272
Shutdown hcsshim properly by @helsaawy in https://github.com/microsoft/hcsshim/pull/1289
Expand env variables for job containers to job mount path by @jsturtevant in https://github.com/microsoft/hcsshim/pull/1292
Enable gofmt in linter by @dcantah in https://github.com/microsoft/hcsshim/pull/1293
Delete shim workloads tasks in pod. by @helsaawy in https://github.com/microsoft/hcsshim/pull/1271
Add new guest request/resource packages by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1240
Fix Network Namespace Bug For Ctr by @dcantah in https://github.com/microsoft/hcsshim/pull/1270
Fix comment placement for layers.MountContainerLayers by @dcantah in https://github.com/microsoft/hcsshim/pull/1295
Cleanup 'getUserTokenInheritAnnotation' by @dcantah in https://github.com/microsoft/hcsshim/pull/1294
Fix bugs in network setup introduced by a refactor PR by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1299
Put Linux build tag on /internal/guest/transport/vsock.go by @dcantah in https://github.com/microsoft/hcsshim/pull/1301
Skip test for updating VM cpugroup membership for now by @katiewasnothere in https://github.com/microsoft/hcsshim/pull/1298
Linux GCS: Log disk info on ENOSPC errors by @dcantah in https://github.com/microsoft/hcsshim/pull/1297
Disable unsafe container options by @helsaawy in https://github.com/microsoft/hcsshim/pull/1260
Add local user account creation for host process containers by @dcantah in https://github.com/microsoft/hcsshim/pull/1286
all: fix typo by @cuishuang in https://github.com/microsoft/hcsshim/pull/1310
test: use T.TempDir to create temporary test directory by @Juneezee in https://github.com/microsoft/hcsshim/pull/1308
Replace winapi GetQueuedCompletionStatus bind with x/sys/windows by @dcantah in https://github.com/microsoft/hcsshim/pull/1307
fix lint issue by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1314
Bump github.com/containerd/containerd from 1.5.9 to 1.5.10 by @dependabot in https://github.com/microsoft/hcsshim/pull/1313
Working directory enforcement by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1305
Scrubbing env vars from logs by @helsaawy in https://github.com/microsoft/hcsshim/pull/1315
Add helper functions for generating security policy and setup CRI tests by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1309
Fix typo in error message by @SeanTAllen in https://github.com/microsoft/hcsshim/pull/1322
Revert to v2.5 schema GuestStateFileType to support release target OS by @KenGordon in https://github.com/microsoft/hcsshim/pull/1318
Fix WorkingDir missing in securityPolicyContainer by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1321
Scrubbing annotations from logs by @helsaawy in https://github.com/microsoft/hcsshim/pull/1324
Respect console size for host process containers by @dcantah in https://github.com/microsoft/hcsshim/pull/1326
Default to deny all security policy. by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1320
Scrubbing bugfix: incorrect return variable by @helsaawy in https://github.com/microsoft/hcsshim/pull/1332
Add new gcs hooks, add expected mounts to security policy by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1258
rootfs.vhd make target by @helsaawy in https://github.com/microsoft/hcsshim/pull/1333
Fix gcs init args wrapping when ConsolePipe is enabled by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1334
Fix up job object options for unit tests by @dcantah in https://github.com/microsoft/hcsshim/pull/1335
Go 1.17 is the minimum version in all cases by @TBBle in https://github.com/microsoft/hcsshim/pull/1337
Support for multiple SCSI controllers by @ambarve in https://github.com/microsoft/hcsshim/pull/1328
Fix dm-verity target naming format in linux guest by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1338
Add Go bindflt/silo definitions by @dcantah in https://github.com/microsoft/hcsshim/pull/1331
Adding build constraints by @helsaawy in https://github.com/microsoft/hcsshim/pull/1340
Run Protobuild on GitHub Actions by @kzys in https://github.com/microsoft/hcsshim/pull/1302
Pin go version for linter to 1.17.x by @dcantah in https://github.com/microsoft/hcsshim/pull/1346
Add tests for security policy enforcement by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1325
Fix working_dir negative test error expectation by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1348
Specify go_package in its full path by @kzys in https://github.com/microsoft/hcsshim/pull/1345
Add guest package for fetching attestation report via syscall by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1341
Swap to fmt.Errorf in jobobject package by @dcantah in https://github.com/microsoft/hcsshim/pull/1353
Add support for mount policy enforcement. by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1311
Removed shim publisher dependence on global flag/setting by @helsaawy in https://github.com/microsoft/hcsshim/pull/1343
Reorganizing makefile and adding info to rootfs by @helsaawy in https://github.com/microsoft/hcsshim/pull/1350
Use /internal/memory constants by @dcantah in https://github.com/microsoft/hcsshim/pull/1354
Linux GCS flags use 1 -, not 2 by @helsaawy in https://github.com/microsoft/hcsshim/pull/1358
Split out GCS test and build by @helsaawy in https://github.com/microsoft/hcsshim/pull/1361
Spelling fixes by @helsaawy in https://github.com/microsoft/hcsshim/pull/1365
Revert "Fix working_dir negative test error expectation (#1348)" by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1368
Change receivers for security policy enforcer where applicable by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1369
Allow multiple CreateContainer operations at the same time. by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1355
Port grantvmgroupaccess code from go-winio and extend functionality. by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1347
Fix for port conflict with docker daemon. by @ameyag in https://github.com/microsoft/hcsshim/pull/1370
Hold lock when updating DefaultMounts by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1367
Include CommandLine in CreateProcess errors by @jterry75 in https://github.com/microsoft/hcsshim/pull/1363
uvmboot functionality by @helsaawy in https://github.com/microsoft/hcsshim/pull/1359
Add ArgsEscaped exec test by @dcantah in https://github.com/microsoft/hcsshim/pull/1372
Random fixes broken out of base layer work by @TBBle in https://github.com/microsoft/hcsshim/pull/1374
Fix wrong word use by @dcantah in https://github.com/microsoft/hcsshim/pull/1377
Missing build constraint, doc.go by @helsaawy in https://github.com/microsoft/hcsshim/pull/1381
Adding more logfield entries by @helsaawy in https://github.com/microsoft/hcsshim/pull/1380
Tests for task and sandbox reset/restart by @helsaawy in https://github.com/microsoft/hcsshim/pull/1273
Features/bugfixes to support LCOW GCS tests by @helsaawy in https://github.com/microsoft/hcsshim/pull/1360
tests: add tests for wait-paths by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1384
Only pull appropriate images for testing by @helsaawy in https://github.com/microsoft/hcsshim/pull/1387
Change file path for restart tests to avoid permission issue by @helsaawy in https://github.com/microsoft/hcsshim/pull/1389
Fill in HyperV runtime spec field if shim options asks for it by @dcantah in https://github.com/microsoft/hcsshim/pull/1388
Log context integration changes by @helsaawy in https://github.com/microsoft/hcsshim/pull/1382
Bridge rpcProc string conversion by @helsaawy in https://github.com/microsoft/hcsshim/pull/1391
Unset text attribute for vendored files in gitattributes by @katiewasnothere in https://github.com/microsoft/hcsshim/pull/1393
testing bugs by @helsaawy in https://github.com/microsoft/hcsshim/pull/1394
Remove vsock consts by @dcantah in https://github.com/microsoft/hcsshim/pull/1396
Add _test suffix by @helsaawy in https://github.com/microsoft/hcsshim/pull/1395
wcow-process: Query Stats directly from shim by @dcantah in https://github.com/microsoft/hcsshim/pull/1362
Fix Hyper-V check in late clone spec comparisons by @dcantah in https://github.com/microsoft/hcsshim/pull/1400
Add secure hardware support for uvmboot by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1390
extra ` by @helsaawy in https://github.com/microsoft/hcsshim/pull/1401
Fix typo in comment by @SeanTAllen in https://github.com/microsoft/hcsshim/pull/1406
Don't use unsafe.Sizeof where encoding/binary.Size suffices by @edef1c in https://github.com/microsoft/hcsshim/pull/1404
Fix nil deref if no shim options were specified by @dcantah in https://github.com/microsoft/hcsshim/pull/1398
Pass span context in ociwclayer by @helsaawy in https://github.com/microsoft/hcsshim/pull/1402
Add handling of ENTRYPOINT and CMD when "command" is not in policy by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1304
fix unused commandArgs by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1411
Add security policy config to allow containers to run in privileged mode by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1366
Cleanup for shared container scratch by @ambarve in https://github.com/microsoft/hcsshim/pull/1414
Implement file binding support for host process containers by @dcantah in https://github.com/microsoft/hcsshim/pull/1344
Fix nil deref in Windows layer setup by @dcantah in https://github.com/microsoft/hcsshim/pull/1418
Fix spelling in runhcs options by @dcantah in https://github.com/microsoft/hcsshim/pull/1415
Rename ExpectedMounts to WaitMountPoints by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1413
Remove vendor dir in /test by @dcantah in https://github.com/microsoft/hcsshim/pull/1417
Bump github.com/containerd/containerd from 1.5.10 to 1.5.13 by @dependabot in https://github.com/microsoft/hcsshim/pull/1421
Bump github.com/containerd/containerd from 1.5.10 to 1.5.13 in /test by @dependabot in https://github.com/microsoft/hcsshim/pull/1420
Remove /test/vendor.. again by @dcantah in https://github.com/microsoft/hcsshim/pull/1422
Change bind filter API used by @dcantah in https://github.com/microsoft/hcsshim/pull/1424
update docs for security policy tool by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1426
Adding Microsoft SECURITY.MD by @microsoft-github-policy-service in https://github.com/microsoft/hcsshim/pull/1407
Add Plan9 support when booting from VMGS by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1429
fix shared scratch scenario by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1435
Adds cri-integration job by @gabriel-samfira in https://github.com/microsoft/hcsshim/pull/1427
Remove log file from runc commands by @helsaawy in https://github.com/microsoft/hcsshim/pull/1436
Fix unsafe uses of unsafe.Pointer by @dcantah in https://github.com/microsoft/hcsshim/pull/1438
Fix up hostprocess integration tests by @dcantah in https://github.com/microsoft/hcsshim/pull/1434
downgrade mingw by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1440
Always set SECURITY_POLICY env var, even for open door policy. by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1397
Fixed securitypolicy unit tests: AllowElevated and struct references. by @douglasmaciver in https://github.com/microsoft/hcsshim/pull/1442
Fix policy enforcement to handle identical layers. by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1441
Correctly set silo field when opening job object by @dcantah in https://github.com/microsoft/hcsshim/pull/1437
Fix access denied when killing stopped container by @gabriel-samfira in https://github.com/microsoft/hcsshim/pull/1447
Add CI stage dependencies by @helsaawy in https://github.com/microsoft/hcsshim/pull/1453
Rework /internal/queue package by @dcantah in https://github.com/microsoft/hcsshim/pull/1449
linter: fix linting issues by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1457
Add vpmem mount capability to uvmboot by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1455
Backwards compat for hostprocess cntrs mounts by @dcantah in https://github.com/microsoft/hcsshim/pull/1458
Add annotations passthrough for host process containers by @dcantah in https://github.com/microsoft/hcsshim/pull/1423
Add IO tracking option for job objects by @dcantah in https://github.com/microsoft/hcsshim/pull/1459
Remove uneccessary use of silos in jobobject tests by @dcantah in https://github.com/microsoft/hcsshim/pull/1464
VPMem device unmap VHD, don't remove VPMem itself. by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1456
tests: run securitypolicy tests in github CI. by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1470
Add powershell to hostprocess container paths by @dcantah in https://github.com/microsoft/hcsshim/pull/1473
enforcement: fix use case when the same target has different hashes by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1469
Remove osversion usage in computestorage APIs by @dcantah in https://github.com/microsoft/hcsshim/pull/1463
Update to Go 1.18 by @dcantah in https://github.com/microsoft/hcsshim/pull/1479
Properly assign logrus entry for fallback queries by @dcantah in https://github.com/microsoft/hcsshim/pull/1478
Fix OpenJobObject definition by @dcantah in https://github.com/microsoft/hcsshim/pull/1481
test coverage for https://github.com/microsoft/hcsshim/pull/1456 by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1482
Fix golangci-lint issues by @dcantah in https://github.com/microsoft/hcsshim/pull/1480
Fix a race condition in add SCSI workflow by @ambarve in https://github.com/microsoft/hcsshim/pull/1483
Short circuit Properties calls if NULL handle by @dcantah in https://github.com/microsoft/hcsshim/pull/1484
securitypolicy: add security policy enforcer registration and defaults by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1476
Remove wait mounts functionality by @SeanTAllen in https://github.com/microsoft/hcsshim/pull/1474
Added LCOW functional tests and benchmarks for uVMs and containers. by @helsaawy in https://github.com/microsoft/hcsshim/pull/1351
fix unmarshaling of LCOWSecurityPolicyEnforcer by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1487
Linux/LCOW bugs by @helsaawy in https://github.com/microsoft/hcsshim/pull/1489
Call container.Terminate() on shutdown timeouts by @dcantah in https://github.com/microsoft/hcsshim/pull/1488
add test utility func that waits for particular container state by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1492
Add Tasks command to shimdiag by @dcantah in https://github.com/microsoft/hcsshim/pull/1486
Readonly option for hostprocess mounts by @dcantah in https://github.com/microsoft/hcsshim/pull/1462
Adding a Rego Policy Enforcer by @matajoh in https://github.com/microsoft/hcsshim/pull/1493
Add support for accepting Rego policy code. by @matajoh in https://github.com/microsoft/hcsshim/pull/1495
Fix nil pointer dereference in addSCSI by @ambarve in https://github.com/microsoft/hcsshim/pull/1497
Enable linting on test directory by @helsaawy in https://github.com/microsoft/hcsshim/pull/1491
Add step to check test/go.mod, updated test/go.mod by @helsaawy in https://github.com/microsoft/hcsshim/pull/1501
Add enforcement versioning to rego enforcer by @SeanTAllen in https://github.com/microsoft/hcsshim/pull/1496
Move rego only test fixtures into the rego tests file by @SeanTAllen in https://github.com/microsoft/hcsshim/pull/1502
Moving rego api test fixtures to a separate file by @matajoh in https://github.com/microsoft/hcsshim/pull/1503
Open Door fix for Rego policies by @matajoh in https://github.com/microsoft/hcsshim/pull/1504
Set HCSSHIM_UVM_REFERENCE_INFO env for workload containers by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1499
Update lcow driver installation path by @katiewasnothere in https://github.com/microsoft/hcsshim/pull/1383
Add new ctrdtaskapi package for shim task API support. by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1485
Remove unused open/closed door enforcement methods by @SeanTAllen in https://github.com/microsoft/hcsshim/pull/1507
Adding required environment variable rules logic. by @matajoh in https://github.com/microsoft/hcsshim/pull/1505
Fix seeding for generative policy tests by @SeanTAllen in https://github.com/microsoft/hcsshim/pull/1508
remove spelling linter by @helsaawy in https://github.com/microsoft/hcsshim/pull/1509
Adding the exec_in_container enforcement point by @matajoh in https://github.com/microsoft/hcsshim/pull/1506
Refactor of metadata operations. by @matajoh in https://github.com/microsoft/hcsshim/pull/1513
Update hcs errors to gov1.13 style by @helsaawy in https://github.com/microsoft/hcsshim/pull/1450
Use alpine and pause images from MSFT mirrors in tests by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1515
update security policy and uvm reference env var names by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1514
Linux GCS tests and benchmarks by @helsaawy in https://github.com/microsoft/hcsshim/pull/1352
Adding the exec_external enforcement point. by @matajoh in https://github.com/microsoft/hcsshim/pull/1512
Update dmverity-vhd tool to accept local images by @hgarvison in https://github.com/microsoft/hcsshim/pull/1494
rename SecurityPolicyEnv annotation to UVMSecurityPolicyEnv by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1517
Fix 'ProcessorCount' comment by @dcantah in https://github.com/microsoft/hcsshim/pull/1522
Add policy enforcement for shutting down a container by @matajoh in https://github.com/microsoft/hcsshim/pull/1518
Update policy enforcer overlay error message to be more descriptive by @SethHollandsworth in https://github.com/microsoft/hcsshim/pull/1524
Add enforcement of sending signals to arbitrary processes in a container by @matajoh in https://github.com/microsoft/hcsshim/pull/1525
fix wrong parameters passed to EnforceExecExternalProcessPolicy by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1523
Switch to go-winio/tools/mkwinsyscall by @helsaawy in https://github.com/microsoft/hcsshim/pull/1409
fix release.yml push trigger expecting a map. by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1527
fix release.yml trigger for real now by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1529
Add pod startup security policy fragment injection by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1521
Device mounting and unmounting updates by @matajoh in https://github.com/microsoft/hcsshim/pull/1526
fix create-scratch and other runhcs subucommands by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1528
Changes to support ipv6 in ncproxy by @katiewasnothere in https://github.com/microsoft/hcsshim/pull/1452
Ignoring unneeded fields in JSON policy marshalling. by @matajoh in https://github.com/microsoft/hcsshim/pull/1530
Vendor go generate binaries, update CI by @helsaawy in https://github.com/microsoft/hcsshim/pull/1433
set confidential UVM options during UVM start by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1533
Add policy enforcement of mounting and unmounting plan9 devices by @matajoh in https://github.com/microsoft/hcsshim/pull/1531
Add t.Helper calls, test helpers linter by @helsaawy in https://github.com/microsoft/hcsshim/pull/1534
Add policy enforcement for overlay unmounting by @matajoh in https://github.com/microsoft/hcsshim/pull/1535
Add support for generating guest crash dumps by @ambarve in https://github.com/microsoft/hcsshim/pull/1516
Adding GetProperties policy enforcement point. by @matajoh in https://github.com/microsoft/hcsshim/pull/1542
Lint ./ext4 directory by @helsaawy in https://github.com/microsoft/hcsshim/pull/1537
Adding DumpStacks policy enforcement point. by @matajoh in https://github.com/microsoft/hcsshim/pull/1543
remove pod startup fragment functionality by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1544
Add enforcement of logging from the GCS runtime by @SeanTAllen in https://github.com/microsoft/hcsshim/pull/1545
Adding policy fragments. by @matajoh in https://github.com/microsoft/hcsshim/pull/1539
Pass ipv6 address information to Linux GCS by @helsaawy in https://github.com/microsoft/hcsshim/pull/1552
Change the default policy stance to "allow" and fix logging by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1553
Update LCOW boot file paths used in tests by @helsaawy in https://github.com/microsoft/hcsshim/pull/1551
Drop unmatched environment variables. by @matajoh in https://github.com/microsoft/hcsshim/pull/1550
fix: wrong assignment after enforcing a policy by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1559
rego and hardening: add enforcement and hardening for encrypted scratch by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1538
uVM timeout handling and logging improvement by @helsaawy in https://github.com/microsoft/hcsshim/pull/1561
race condition with exitCh in (*UtilityVM).Start() by @helsaawy in https://github.com/microsoft/hcsshim/pull/1562
test/functional: Add flag for container layer paths, remove containerd dependence by @helsaawy in https://github.com/microsoft/hcsshim/pull/1536
[CI] update actions version by @helsaawy in https://github.com/microsoft/hcsshim/pull/1564
[test]logging and tracing to stdout by @helsaawy in https://github.com/microsoft/hcsshim/pull/1563
[test]Add feature for CRI extensions by @helsaawy in https://github.com/microsoft/hcsshim/pull/1565
test: CRI initialization by @helsaawy in https://github.com/microsoft/hcsshim/pull/1566
Adding some missing policy elements from the templates. by @matajoh in https://github.com/microsoft/hcsshim/pull/1571
Set up dependabot by @slonopotamus in https://github.com/microsoft/hcsshim/pull/1319
Bump github.com/stretchr/testify from 1.8.0 to 1.8.1 in /test by @dependabot in https://github.com/microsoft/hcsshim/pull/1582
Reduce dependabot update schedule by @helsaawy in https://github.com/microsoft/hcsshim/pull/1588
Bump actions/download-artifact from 2 to 3 by @dependabot in https://github.com/microsoft/hcsshim/pull/1577
Bump go.opencensus.io from 0.23.0 to 0.24.0 in /test by @dependabot in https://github.com/microsoft/hcsshim/pull/1578
Bump github.com/google/go-containerregistry from 0.11.0 to 0.12.1 in /test by @dependabot in https://github.com/microsoft/hcsshim/pull/1589
Upgrade test module to go1.18 by @helsaawy in https://github.com/microsoft/hcsshim/pull/1593
Bump github.com/BurntSushi/toml from 0.4.1 to 1.2.1 by @dependabot in https://github.com/microsoft/hcsshim/pull/1590
Bump github.com/cenkalti/backoff/v4 from 4.1.3 to 4.2.0 by @dependabot in https://github.com/microsoft/hcsshim/pull/1583
Bump golang.org/x/sys from 0.1.0 to 0.2.0 in /test by @dependabot in https://github.com/microsoft/hcsshim/pull/1596
plumb AMD certs to workload containers by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1549
Prevent operations on exited HCS objects. by @helsaawy in https://github.com/microsoft/hcsshim/pull/1567
Add ability in policy to allow/disallow access to stdio by @matajoh in https://github.com/microsoft/hcsshim/pull/1594
Remove blocking on container exit for every new exec created by @kiashok in https://github.com/microsoft/hcsshim/pull/1601
Updating dependencies by @helsaawy in https://github.com/microsoft/hcsshim/pull/1607
policy: do not set policy to open door if none is provided by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1572
wcow: support graceful termination of servercore containers by @kiashok in https://github.com/microsoft/hcsshim/pull/1416
Add 20H2 container image to test constants by @helsaawy in https://github.com/microsoft/hcsshim/pull/1611
Remove goversioninfo from tools.go by @helsaawy in https://github.com/microsoft/hcsshim/pull/1616
Adding a simulator + regopolicyinterpreter. by @matajoh in https://github.com/microsoft/hcsshim/pull/1558
adding tarball support for generating root layer hashes by @SethHollandsworth in https://github.com/microsoft/hcsshim/pull/1600
Add logic to cleanup the oci bundle root dir on container delete by @katiewasnothere in https://github.com/microsoft/hcsshim/pull/1597
Retain pause.exe as entrypoint for default pause images by @kiashok in https://github.com/microsoft/hcsshim/pull/1615
Add missing AllowElevated policy check when creating a container by @SeanTAllen in https://github.com/microsoft/hcsshim/pull/1624
rego enforcer: trim whitespaces from fragment namespace name by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1627
Make LCOWPrivileged annotation more resilient to change by @SeanTAllen in https://github.com/microsoft/hcsshim/pull/1628
fix snp-report: fake-report flag is now correctly parsed by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1626
API Data and Framework Versioning. by @matajoh in https://github.com/microsoft/hcsshim/pull/1622
rego: fix slightly incorrect sandbox and hugepage mounts enforcement by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1625
Fragment COSE Sign1 support. by @KenGordon in https://github.com/microsoft/hcsshim/pull/1575
Bump github.com/containerd/cgroups from 1.0.3 to 1.1.0 in /test by @dependabot in https://github.com/microsoft/hcsshim/pull/1631
Bump github.com/google/go-containerregistry from 0.12.1 to 0.13.0 in /test by @dependabot in https://github.com/microsoft/hcsshim/pull/1632
Bump google.golang.org/grpc from 1.51.0 to 1.52.3 in /test by @dependabot in https://github.com/microsoft/hcsshim/pull/1633
Bump golang.org/x/sys from 0.3.0 to 0.4.0 in /test by @dependabot in https://github.com/microsoft/hcsshim/pull/1612
Bump github.com/containerd/cgroups from 1.0.3 to 1.1.0 by @dependabot in https://github.com/microsoft/hcsshim/pull/1630
Bump github.com/google/go-containerregistry from 0.12.1 to 0.13.0 by @dependabot in https://github.com/microsoft/hcsshim/pull/1629
internal/tools/securitypolicy: switch to github.com/pelletier/go-toml by @thaJeztah in https://github.com/microsoft/hcsshim/pull/1620
Add retry to install mingw by @helsaawy in https://github.com/microsoft/hcsshim/pull/1636
test: Add CRI benchmarks for container operations by @helsaawy in https://github.com/microsoft/hcsshim/pull/1569
Fix SCSI mount error handling by @ambarve in https://github.com/microsoft/hcsshim/pull/1642
fix: treat VMGS file as template when launching multiple UVMs by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1646
Redact environment variable values in policy error output by @SeanTAllen in https://github.com/microsoft/hcsshim/pull/1649
Adding a default error message. by @matajoh in https://github.com/microsoft/hcsshim/pull/1647
policy: add plan9 mount type handling when generating policy by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1650
Bump golang.org/x/sys from 0.4.0 to 0.5.0 in /test by @dependabot in https://github.com/microsoft/hcsshim/pull/1654
Bump google.golang.org/grpc from 1.52.3 to 1.53.0 in /test by @dependabot in https://github.com/microsoft/hcsshim/pull/1656
Bump golang.org/x/sys from 0.1.0 to 0.5.0 by @dependabot in https://github.com/microsoft/hcsshim/pull/1655
Fix unintended data modification when redacted environment variables by @SeanTAllen in https://github.com/microsoft/hcsshim/pull/1657
Fix false positive error messages on exec_external policy denial by @SeanTAllen in https://github.com/microsoft/hcsshim/pull/1658
dmverity: fix padding by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1659
fix: temp file leak during hash computation by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1641
Provide error message when allow_stdio_access creates and undecideable error by @SeanTAllen in https://github.com/microsoft/hcsshim/pull/1662
Make a couple tests match the naming convention around them by @SeanTAllen in https://github.com/microsoft/hcsshim/pull/1664
Update selectContainerFromConstraints to work on a container list by @SeanTAllen in https://github.com/microsoft/hcsshim/pull/1645
Bump golang.org/x/net from 0.5.0 to 0.7.0 in /test by @dependabot in https://github.com/microsoft/hcsshim/pull/1666
Provide error message when the lack of required environment variable causes policy denial by @SeanTAllen in https://github.com/microsoft/hcsshim/pull/1661
tests: rego policy exec in container tests by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1635
Fix compilation error caused by "PRs crossing in the night" by @SeanTAllen in https://github.com/microsoft/hcsshim/pull/1668
Adding support and policy enforcement for NoNewPrivileges. by @matajoh in https://github.com/microsoft/hcsshim/pull/1652
Bump golang.org/x/net from 0.1.0 to 0.7.0 by @dependabot in https://github.com/microsoft/hcsshim/pull/1667
Format encrypted scratch disk as xfs rather than ext4fs by @KenGordon in https://github.com/microsoft/hcsshim/pull/1665
Wait longer before trying to install mingw after failing to install by @SeanTAllen in https://github.com/microsoft/hcsshim/pull/1670
osversion: implement stringer interface, deprecate ToString() by @thaJeztah in https://github.com/microsoft/hcsshim/pull/1547
Bump actions/upload-artifact from 2 to 3 by @dependabot in https://github.com/microsoft/hcsshim/pull/1677
Bump actions/checkout from 2 to 3 by @dependabot in https://github.com/microsoft/hcsshim/pull/1676
Bump github.com/opencontainers/runtime-tools from 0.0.0-20181011054405-1d69bd0f9c39 to 0.9.0 in /test by @dependabot in https://github.com/microsoft/hcsshim/pull/1674
Use gotestsum to get test summary by @helsaawy in https://github.com/microsoft/hcsshim/pull/1678
simplify zeroDevice to just zero first block by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1672
Base layer manipulation by @gabriel-samfira in https://github.com/microsoft/hcsshim/pull/1637
Adding policy enforcement for User. by @matajoh in https://github.com/microsoft/hcsshim/pull/1669
Bump golang.org/x/sys from 0.5.0 to 0.6.0 in /test by @dependabot in https://github.com/microsoft/hcsshim/pull/1685
Fix silly error whereby a chain was required although unnecessary. by @KenGordon in https://github.com/microsoft/hcsshim/pull/1682
github-ci: use go1.19.x by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1689
Bump github.com/containerd/ttrpc from 1.1.0 to 1.2.1 in /test by @dependabot in https://github.com/microsoft/hcsshim/pull/1693
tests: rego exec in uvm cri integration tests by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1648
Fix graceful termination test errors by @kiashok in https://github.com/microsoft/hcsshim/pull/1687
Logging (JSON) formatting; span export by @helsaawy in https://github.com/microsoft/hcsshim/pull/1364
Bump actions/setup-go from 3 to 4 by @dependabot in https://github.com/microsoft/hcsshim/pull/1696
Fix "no matches" test that can somewhat easily match by @SeanTAllen in https://github.com/microsoft/hcsshim/pull/1684
Update dependencies by @helsaawy in https://github.com/microsoft/hcsshim/pull/1697
tests: add tests for concurrent pod startup by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1639
Bump github.com/google/go-containerregistry from 0.13.0 to 0.14.0 in /test by @dependabot in https://github.com/microsoft/hcsshim/pull/1700
Bump github.com/google/go-containerregistry from 0.13.0 to 0.14.0 by @dependabot in https://github.com/microsoft/hcsshim/pull/1701
Adding policy for Linux capabilities. by @matajoh in https://github.com/microsoft/hcsshim/pull/1683
NCProxy: attach to host and macpool by @helsaawy in https://github.com/microsoft/hcsshim/pull/1591
Update golangci linter and clean go mod cache by @katiewasnothere in https://github.com/microsoft/hcsshim/pull/1707
Seccomp profile policy enforcement. by @matajoh in https://github.com/microsoft/hcsshim/pull/1705
upgrade runc dependency by @helsaawy in https://github.com/microsoft/hcsshim/pull/1714
Clarifying SVN vs. Version. by @matajoh in https://github.com/microsoft/hcsshim/pull/1715
sev-snp: add SEV device when security policy is present by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1679
tests: Add rego cri-integration tests for plan9 mount policy. by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1651
con-con: write policy, reference info and cert to container's rootfs by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1708
Moving to structured JSON policy decisions. by @matajoh in https://github.com/microsoft/hcsshim/pull/1718
hack: add blanket retries on device-mapper failures with SCSI by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1720
negative rego cri-integration tests by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1719
tests: fix error assertion and container layer sha256 by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1725
Create new test packages that reference internal packages by @katiewasnothere in https://github.com/microsoft/hcsshim/pull/1704
Make sure that security context files are readable by all by @jumaffre in https://github.com/microsoft/hcsshim/pull/1729
Switch from filepath.EvalSymlinks to fs.ResolvePath by @helsaawy in https://github.com/microsoft/hcsshim/pull/1644
Policy decision truncation. by @matajoh in https://github.com/microsoft/hcsshim/pull/1731
Fixing the errors for missing enforcement points by @matajoh in https://github.com/microsoft/hcsshim/pull/1735
tests: write seccomp profile to a temporary file by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1736
Add code to format disk as ext4 in guest by @katiewasnothere in https://github.com/microsoft/hcsshim/pull/1717
Adding padding to base64 encoded policy decisions by @matajoh in https://github.com/microsoft/hcsshim/pull/1738
fix: bug potentially not removing RW device. by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1737
Consolidate dependabot updates by @helsaawy in https://github.com/microsoft/hcsshim/pull/1748
[bug] Consolidate dependabot updates by @helsaawy in https://github.com/microsoft/hcsshim/pull/1749
Remove UVM/container cloning functionality by @kevpar in https://github.com/microsoft/hcsshim/pull/1740
gcs: Add SCSIDevice type with remove operation by @kevpar in https://github.com/microsoft/hcsshim/pull/1741
Remove dependence on GetScsiUvmPath function by @kevpar in https://github.com/microsoft/hcsshim/pull/1742
Rework layer handling to return a ResourceCloser by @kevpar in https://github.com/microsoft/hcsshim/pull/1743
Remove godeps from makefile by @helsaawy in https://github.com/microsoft/hcsshim/pull/1750
slice bounds and nil VM access fix by @helsaawy in https://github.com/microsoft/hcsshim/pull/1754
[release/0.11] Add support for platform compatibility check for windows + fix integration test failures by @kiashok in https://github.com/microsoft/hcsshim/pull/1878

New Contributors

@KenGordon made their first contribution in https://github.com/microsoft/hcsshim/pull/1206
@svolos made their first contribution in https://github.com/microsoft/hcsshim/pull/1219
@gabriel-samfira made their first contribution in https://github.com/microsoft/hcsshim/pull/1252
@cuishuang made their first contribution in https://github.com/microsoft/hcsshim/pull/1310
@Juneezee made their first contribution in https://github.com/microsoft/hcsshim/pull/1308
@kzys made their first contribution in https://github.com/microsoft/hcsshim/pull/1302
@edef1c made their first contribution in https://github.com/microsoft/hcsshim/pull/1404
@microsoft-github-policy-service made their first contribution in https://github.com/microsoft/hcsshim/pull/1407
@douglasmaciver made their first contribution in https://github.com/microsoft/hcsshim/pull/1442
@matajoh made their first contribution in https://github.com/microsoft/hcsshim/pull/1493
@hgarvison made their first contribution in https://github.com/microsoft/hcsshim/pull/1494
@SethHollandsworth made their first contribution in https://github.com/microsoft/hcsshim/pull/1524
@jumaffre made their first contribution in https://github.com/microsoft/hcsshim/pull/1729

Full Changelog: https://github.com/microsoft/hcsshim/compare/v0.9.0...v0.11.0

hcsshim - v0.12.0-rc.0

Published by kiashok about 1 year ago

What's Changed

tests: rego get_properties functional test by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1803
cimfs: Add Offline registry API wrappers and export constants by @ambarve in https://github.com/microsoft/hcsshim/pull/1842
Add support for nodenetsvc v0 and readme to test network agent by @katiewasnothere in https://github.com/microsoft/hcsshim/pull/1824
Allow tar2ext4 to convert slashes by @helsaawy in https://github.com/microsoft/hcsshim/pull/1847
Bump github.com/opencontainers/runc from 1.1.7 to 1.1.8 by @dependabot in https://github.com/microsoft/hcsshim/pull/1845
disable fail fast on windows tests by @helsaawy in https://github.com/microsoft/hcsshim/pull/1851
Bump github.com/opencontainers/runtime-spec from 1.1.0-rc.3 to 1.1.0 by @dependabot in https://github.com/microsoft/hcsshim/pull/1852
Use RtlGetVersion instead of GetVersion by @ambarve in https://github.com/microsoft/hcsshim/pull/1846
Add exec benchmarks by @helsaawy in https://github.com/microsoft/hcsshim/pull/1855
Bump google.golang.org/grpc from 1.56.2 to 1.57.0 in /test by @dependabot in https://github.com/microsoft/hcsshim/pull/1859
Fall back on json encoding from protojson by @helsaawy in https://github.com/microsoft/hcsshim/pull/1864
[ci] Update testing jobs by @helsaawy in https://github.com/microsoft/hcsshim/pull/1854
Bump github.com/google/go-containerregistry from 0.15.2 to 0.16.1 in /test by @dependabot in https://github.com/microsoft/hcsshim/pull/1869
Bump golang.org/x/sys from 0.10.0 to 0.11.0 in /test by @dependabot in https://github.com/microsoft/hcsshim/pull/1868
Bump google.golang.org/grpc from 1.56.2 to 1.57.0 by @dependabot in https://github.com/microsoft/hcsshim/pull/1856
retry device mapper and cryptsetup errors by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1721
computestorage: Fix incorrect syscall in DestroyLayer by @kevpar in https://github.com/microsoft/hcsshim/pull/1872
cimfs: Add helpers for retrieving partition information from a vhdx by @ambarve in https://github.com/microsoft/hcsshim/pull/1850
Add more go vet checks by @helsaawy in https://github.com/microsoft/hcsshim/pull/1849
Allow setting HclEnabled to false by @darracott in https://github.com/microsoft/hcsshim/pull/1862
Fix SVN reference in policy readme by @BryceDFisher in https://github.com/microsoft/hcsshim/pull/1877

New Contributors

@darracott made their first contribution in https://github.com/microsoft/hcsshim/pull/1862
@BryceDFisher made their first contribution in https://github.com/microsoft/hcsshim/pull/1877

Full Changelog: https://github.com/microsoft/hcsshim/compare/v0.10.0...v0.12.0-rc.0

hcsshim - [Deprecated] v0.10.0

Published by kiashok about 1 year ago

Note:

We are deprecating the v0.10.* versioning and moving to hcsshim/release/0.11 branch for containerd/1.7 hcsshim tags and using v0.12.0-rc.* versioning for tags cut from hcsshim/main for use on containerd/main

What's Changed

Updated containerd1.7; google.golang.org/protobuf by @helsaawy in https://github.com/microsoft/hcsshim/pull/1706
[ci]Remove Verify-GoModules.ps1 by @helsaawy in https://github.com/microsoft/hcsshim/pull/1836
[deps]Omni-bus dependency upgrade by @helsaawy in https://github.com/microsoft/hcsshim/pull/1837
Replace deprecated github.com/golang/mock by @helsaawy in https://github.com/microsoft/hcsshim/pull/1839
Replace cosesign1 and didx509 resolver with by @MahatiC in https://github.com/microsoft/hcsshim/pull/1805
cimfs support: Add cimfs writer by @ambarve in https://github.com/microsoft/hcsshim/pull/927
Create tools package to isolate dependencies by @helsaawy in https://github.com/microsoft/hcsshim/pull/1840
make sure to close files in dmverity-vhd tool by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1770
use protojson when formatting for logs by @helsaawy in https://github.com/microsoft/hcsshim/pull/1844
policy: extend default networking mounts for standalone containers by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1826

New Contributors

@MahatiC made their first contribution in https://github.com/microsoft/hcsshim/pull/1805

Full Changelog: https://github.com/microsoft/hcsshim/compare/v0.10.0-rc.9...v0.10.0

hcsshim - v0.9.10

Published by kiashok about 1 year ago

What's Changed

[release/0.9] Add support for platform compatibility check for windows + add windows builds by @kiashok in https://github.com/microsoft/hcsshim/pull/1843

Full Changelog: https://github.com/microsoft/hcsshim/compare/v0.9.8...v0.9.10

hcsshim - v0.10.0-rc.9

Published by kiashok over 1 year ago

What's Changed

Allow patch dependabot updates by @helsaawy in https://github.com/microsoft/hcsshim/pull/1756
omnibus dependency updates by @helsaawy in https://github.com/microsoft/hcsshim/pull/1767
Checkout appropriate containerd ref by @helsaawy in https://github.com/microsoft/hcsshim/pull/1752
gcs: Support routing container stdio to sidecar by @ashishsachdeva in https://github.com/microsoft/hcsshim/pull/1728
Bump github.com/docker/distribution from 2.8.1+incompatible to 2.8.2+incompatible in /test by @dependabot in https://github.com/microsoft/hcsshim/pull/1771
Bump github.com/docker/distribution from 2.8.1+incompatible to 2.8.2+incompatible by @dependabot in https://github.com/microsoft/hcsshim/pull/1772
Enable guest agent unit tests in the CI by @katiewasnothere in https://github.com/microsoft/hcsshim/pull/1773
formalize ignored (test) dependency updates by @helsaawy in https://github.com/microsoft/hcsshim/pull/1769
Rewrite SCSI support in new package by @kevpar in https://github.com/microsoft/hcsshim/pull/1744
Support flexible LCOW layer parsing and partitioned layers by @kevpar in https://github.com/microsoft/hcsshim/pull/1745
[deps] weekly update by @helsaawy in https://github.com/microsoft/hcsshim/pull/1779
Guest agent support for partitions on SCSI devices by @katiewasnothere in https://github.com/microsoft/hcsshim/pull/1747
SCSI ensure filesystem by @katiewasnothere in https://github.com/microsoft/hcsshim/pull/1757
Update containerd-shim-runhcs-v1 tests by @helsaawy in https://github.com/microsoft/hcsshim/pull/1783
[deps] combine and tidy \test by @helsaawy in https://github.com/microsoft/hcsshim/pull/1790
update tar2ext4 package by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1785
Bump github.com/containerd/ttrpc from 1.1.1 to 1.1.2 by @dependabot in https://github.com/microsoft/hcsshim/pull/1791
Use gh cli to download releases by @helsaawy in https://github.com/microsoft/hcsshim/pull/1792
Add test for support of NFS mount by @ambarve in https://github.com/microsoft/hcsshim/pull/1726
[gcs.test] update scratch space cleanup order by @helsaawy in https://github.com/microsoft/hcsshim/pull/1794
[func.test]update lcow layer processing by @helsaawy in https://github.com/microsoft/hcsshim/pull/1795
tests: fix uvm resources update tests by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1796
tests: add rego e2e tests for dump_stacks and get_properties by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1793
Minor fixes to SCSI mount operation by @ambarve in https://github.com/microsoft/hcsshim/pull/1798
[ci] Enable caching for proto and integration jobs by @helsaawy in https://github.com/microsoft/hcsshim/pull/1755
[ci] Fix integration test failure by @helsaawy in https://github.com/microsoft/hcsshim/pull/1799
Bump github.com/sirupsen/logrus from 1.9.2 to 1.9.3 by @dependabot in https://github.com/microsoft/hcsshim/pull/1800
Version control and vendor mockgen by @helsaawy in https://github.com/microsoft/hcsshim/pull/1802
Revert image name change in the ArgsEscaped test by @ambarve in https://github.com/microsoft/hcsshim/pull/1804
Add support for NetworkConfigProxy v0 and v1 api by @katiewasnothere in https://github.com/microsoft/hcsshim/pull/1797
Support v0 and v1 nodenetsvc api for ncproxy by @katiewasnothere in https://github.com/microsoft/hcsshim/pull/1806
Add deprecated option to all types and fields for ncproxy v0 apis by @katiewasnothere in https://github.com/microsoft/hcsshim/pull/1809
When fetching the pid counts for the container the state can be invalid sometimes by @jsturtevant in https://github.com/microsoft/hcsshim/pull/1807
skip failing test, use gotestsum by @helsaawy in https://github.com/microsoft/hcsshim/pull/1820
Bump golang.org/x/sys from 0.8.0 to 0.9.0 by @dependabot in https://github.com/microsoft/hcsshim/pull/1818
Bump golang.org/x/sync from 0.2.0 to 0.3.0 by @dependabot in https://github.com/microsoft/hcsshim/pull/1817
Bump github.com/lestrrat-go/jwx from 1.2.25 to 1.2.26 by @dependabot in https://github.com/microsoft/hcsshim/pull/1812
Add support for platform compatibility check for windows by @kiashok in https://github.com/microsoft/hcsshim/pull/1821

New Contributors

@ashishsachdeva made their first contribution in https://github.com/microsoft/hcsshim/pull/1728

Full Changelog: https://github.com/microsoft/hcsshim/compare/v0.10.0-rc.8...v0.10.0-rc.9

hcsshim - v0.10.0-rc.8

Published by kiashok over 1 year ago

What's Changed

Adding policy enforcement for User. by @matajoh in https://github.com/microsoft/hcsshim/pull/1669
Bump golang.org/x/sys from 0.5.0 to 0.6.0 in /test by @dependabot in https://github.com/microsoft/hcsshim/pull/1685
Fix silly error whereby a chain was required although unnecessary. by @KenGordon in https://github.com/microsoft/hcsshim/pull/1682
github-ci: use go1.19.x by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1689
Bump github.com/containerd/ttrpc from 1.1.0 to 1.2.1 in /test by @dependabot in https://github.com/microsoft/hcsshim/pull/1693
tests: rego exec in uvm cri integration tests by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1648
Fix graceful termination test errors by @kiashok in https://github.com/microsoft/hcsshim/pull/1687
Logging (JSON) formatting; span export by @helsaawy in https://github.com/microsoft/hcsshim/pull/1364
Bump actions/setup-go from 3 to 4 by @dependabot in https://github.com/microsoft/hcsshim/pull/1696
Fix "no matches" test that can somewhat easily match by @SeanTAllen in https://github.com/microsoft/hcsshim/pull/1684
Update dependencies by @helsaawy in https://github.com/microsoft/hcsshim/pull/1697
tests: add tests for concurrent pod startup by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1639
Bump github.com/google/go-containerregistry from 0.13.0 to 0.14.0 in /test by @dependabot in https://github.com/microsoft/hcsshim/pull/1700
Bump github.com/google/go-containerregistry from 0.13.0 to 0.14.0 by @dependabot in https://github.com/microsoft/hcsshim/pull/1701
Adding policy for Linux capabilities. by @matajoh in https://github.com/microsoft/hcsshim/pull/1683
NCProxy: attach to host and macpool by @helsaawy in https://github.com/microsoft/hcsshim/pull/1591
Update golangci linter and clean go mod cache by @katiewasnothere in https://github.com/microsoft/hcsshim/pull/1707
Seccomp profile policy enforcement. by @matajoh in https://github.com/microsoft/hcsshim/pull/1705
upgrade runc dependency by @helsaawy in https://github.com/microsoft/hcsshim/pull/1714
Clarifying SVN vs. Version. by @matajoh in https://github.com/microsoft/hcsshim/pull/1715
sev-snp: add SEV device when security policy is present by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1679
tests: Add rego cri-integration tests for plan9 mount policy. by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1651
con-con: write policy, reference info and cert to container's rootfs by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1708
Moving to structured JSON policy decisions. by @matajoh in https://github.com/microsoft/hcsshim/pull/1718
hack: add blanket retries on device-mapper failures with SCSI by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1720
negative rego cri-integration tests by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1719
tests: fix error assertion and container layer sha256 by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1725
Create new test packages that reference internal packages by @katiewasnothere in https://github.com/microsoft/hcsshim/pull/1704
Make sure that security context files are readable by all by @jumaffre in https://github.com/microsoft/hcsshim/pull/1729
Switch from filepath.EvalSymlinks to fs.ResolvePath by @helsaawy in https://github.com/microsoft/hcsshim/pull/1644
Policy decision truncation. by @matajoh in https://github.com/microsoft/hcsshim/pull/1731
Fixing the errors for missing enforcement points by @matajoh in https://github.com/microsoft/hcsshim/pull/1735
tests: write seccomp profile to a temporary file by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1736
Add code to format disk as ext4 in guest by @katiewasnothere in https://github.com/microsoft/hcsshim/pull/1717
Adding padding to base64 encoded policy decisions by @matajoh in https://github.com/microsoft/hcsshim/pull/1738
fix: bug potentially not removing RW device. by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1737
Consolidate dependabot updates by @helsaawy in https://github.com/microsoft/hcsshim/pull/1748
[bug] Consolidate dependabot updates by @helsaawy in https://github.com/microsoft/hcsshim/pull/1749
Remove UVM/container cloning functionality by @kevpar in https://github.com/microsoft/hcsshim/pull/1740
gcs: Add SCSIDevice type with remove operation by @kevpar in https://github.com/microsoft/hcsshim/pull/1741
Remove dependence on GetScsiUvmPath function by @kevpar in https://github.com/microsoft/hcsshim/pull/1742
Rework layer handling to return a ResourceCloser by @kevpar in https://github.com/microsoft/hcsshim/pull/1743
Remove godeps from makefile by @helsaawy in https://github.com/microsoft/hcsshim/pull/1750
slice bounds and nil VM access fix by @helsaawy in https://github.com/microsoft/hcsshim/pull/1754

New Contributors

@jumaffre made their first contribution in https://github.com/microsoft/hcsshim/pull/1729

Full Changelog: https://github.com/microsoft/hcsshim/compare/v0.10.0-rc.7...v0.10.0-rc.8

hcsshim - v0.9.8

Published by kiashok over 1 year ago

What's Changed

[release/0.9] Fix graceful termination test errors (#1687) by @kiashok in https://github.com/microsoft/hcsshim/pull/1695

Full Changelog: https://github.com/microsoft/hcsshim/compare/v0.9.7...v0.9.8

hcsshim - v0.10.0-rc.7

Published by helsaawy over 1 year ago

What's Changed

Provide error message when allow_stdio_access creates and undecideable error by @SeanTAllen in https://github.com/microsoft/hcsshim/pull/1662
Make a couple tests match the naming convention around them by @SeanTAllen in https://github.com/microsoft/hcsshim/pull/1664
Update selectContainerFromConstraints to work on a container list by @SeanTAllen in https://github.com/microsoft/hcsshim/pull/1645
Bump golang.org/x/net from 0.5.0 to 0.7.0 in /test by @dependabot in https://github.com/microsoft/hcsshim/pull/1666
Provide error message when the lack of required environment variable causes policy denial by @SeanTAllen in https://github.com/microsoft/hcsshim/pull/1661
tests: rego policy exec in container tests by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1635
Fix compilation error caused by "PRs crossing in the night" by @SeanTAllen in https://github.com/microsoft/hcsshim/pull/1668
Adding support and policy enforcement for NoNewPrivileges. by @matajoh in https://github.com/microsoft/hcsshim/pull/1652
Bump golang.org/x/net from 0.1.0 to 0.7.0 by @dependabot in https://github.com/microsoft/hcsshim/pull/1667
Format encrypted scratch disk as xfs rather than ext4fs by @KenGordon in https://github.com/microsoft/hcsshim/pull/1665
Wait longer before trying to install mingw after failing to install by @SeanTAllen in https://github.com/microsoft/hcsshim/pull/1670
osversion: implement stringer interface, deprecate ToString() by @thaJeztah in https://github.com/microsoft/hcsshim/pull/1547
Bump actions/upload-artifact from 2 to 3 by @dependabot in https://github.com/microsoft/hcsshim/pull/1677
Bump actions/checkout from 2 to 3 by @dependabot in https://github.com/microsoft/hcsshim/pull/1676
Bump github.com/opencontainers/runtime-tools from 0.0.0-20181011054405-1d69bd0f9c39 to 0.9.0 in /test by @dependabot in https://github.com/microsoft/hcsshim/pull/1674
Use gotestsum to get test summary by @helsaawy in https://github.com/microsoft/hcsshim/pull/1678
simplify zeroDevice to just zero first block by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1672
Base layer manipulation by @gabriel-samfira in https://github.com/microsoft/hcsshim/pull/1637

Full Changelog: https://github.com/microsoft/hcsshim/compare/v0.10.0-rc.6...v0.10.0-rc.7

hcsshim - v0.9.7

Published by kiashok over 1 year ago

What's Changed

[release/0.9] Retain pause.exe as entrypoint for default pause images by @kiashok in https://github.com/microsoft/hcsshim/pull/1634
[release/0.9] wcow: support graceful termination of servercore containers (#1416) by @kiashok in https://github.com/microsoft/hcsshim/pull/1640

Full Changelog: https://github.com/microsoft/hcsshim/compare/v0.9.6...v0.9.7

hcsshim - v0.10.0-rc.6

Published by github-actions[bot] over 1 year ago

hcsshim - v0.10.0-rc.5

Published by kiashok over 1 year ago

What's Changed

Add logic to cleanup the oci bundle root dir on container delete by @katiewasnothere in https://github.com/microsoft/hcsshim/pull/1597
Retain pause.exe as entrypoint for default pause images by @kiashok in https://github.com/microsoft/hcsshim/pull/1615
Add missing AllowElevated policy check when creating a container by @SeanTAllen in https://github.com/microsoft/hcsshim/pull/1624
rego enforcer: trim whitespaces from fragment namespace name by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1627
Make LCOWPrivileged annotation more resilient to change by @SeanTAllen in https://github.com/microsoft/hcsshim/pull/1628
fix snp-report: fake-report flag is now correctly parsed by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1626
API Data and Framework Versioning. by @matajoh in https://github.com/microsoft/hcsshim/pull/1622
rego: fix slightly incorrect sandbox and hugepage mounts enforcement by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1625
Fragment COSE Sign1 support. by @KenGordon in https://github.com/microsoft/hcsshim/pull/1575
Bump github.com/containerd/cgroups from 1.0.3 to 1.1.0 in /test by @dependabot in https://github.com/microsoft/hcsshim/pull/1631
Bump github.com/google/go-containerregistry from 0.12.1 to 0.13.0 in /test by @dependabot in https://github.com/microsoft/hcsshim/pull/1632
Bump google.golang.org/grpc from 1.51.0 to 1.52.3 in /test by @dependabot in https://github.com/microsoft/hcsshim/pull/1633
Bump golang.org/x/sys from 0.3.0 to 0.4.0 in /test by @dependabot in https://github.com/microsoft/hcsshim/pull/1612
Bump github.com/containerd/cgroups from 1.0.3 to 1.1.0 by @dependabot in https://github.com/microsoft/hcsshim/pull/1630
Bump github.com/google/go-containerregistry from 0.12.1 to 0.13.0 by @dependabot in https://github.com/microsoft/hcsshim/pull/1629
internal/tools/securitypolicy: switch to github.com/pelletier/go-toml by @thaJeztah in https://github.com/microsoft/hcsshim/pull/1620
Add retry to install mingw by @helsaawy in https://github.com/microsoft/hcsshim/pull/1636
test: Add CRI benchmarks for container operations by @helsaawy in https://github.com/microsoft/hcsshim/pull/1569

Full Changelog: https://github.com/microsoft/hcsshim/compare/v0.10.0-rc.4...v0.10.0-rc.5

hcsshim - v0.10.0-rc.4

Published by kiashok almost 2 years ago

What's Changed

Updating dependencies by @helsaawy in https://github.com/microsoft/hcsshim/pull/1607
policy: do not set policy to open door if none is provided by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1572
wcow: support graceful termination of servercore containers by @kiashok in https://github.com/microsoft/hcsshim/pull/1416
Add 20H2 container image to test constants by @helsaawy in https://github.com/microsoft/hcsshim/pull/1611
Remove goversioninfo from tools.go by @helsaawy in https://github.com/microsoft/hcsshim/pull/1616
Adding a simulator + regopolicyinterpreter. by @matajoh in https://github.com/microsoft/hcsshim/pull/1558
adding tarball support for generating root layer hashes by @SethHollandsworth in https://github.com/microsoft/hcsshim/pull/1600

Full Changelog: https://github.com/microsoft/hcsshim/compare/v0.10.0-rc.3...v0.10.0-rc.4

hcsshim - v0.8.25

Published by kiashok almost 2 years ago

What's Changed

[release/0.8] Remove blocking wait on container exit for every exec created by @kiashok in https://github.com/microsoft/hcsshim/pull/1605

Full Changelog: https://github.com/microsoft/hcsshim/compare/v0.8.24...v0.8.25

hcsshim - v0.10.0-rc.3

Published by kiashok almost 2 years ago

What's Changed

Prevent operations on exited HCS objects. by @helsaawy in https://github.com/microsoft/hcsshim/pull/1567
Add ability in policy to allow/disallow access to stdio by @matajoh in https://github.com/microsoft/hcsshim/pull/1594
Remove blocking on container exit for every new exec created by @kiashok in https://github.com/microsoft/hcsshim/pull/1601

Full Changelog: https://github.com/microsoft/hcsshim/compare/v0.10.0-rc.2...v0.10.0-rc.3

hcsshim - v0.9.6

Published by kiashok almost 2 years ago