What's Changed

• [release/0.9] Ignore ERROR_ACCESS_DENIED on Kill (#1252) by @gabriel-samfira in https://github.com/microsoft/hcsshim/pull/1262
• [release/0.9] Backport TTY support for Host Process Containers by @dcantah in https://github.com/microsoft/hcsshim/pull/1261
• [release/0.9] Wait for waitInitExit() to return #1249 by @gabriel-samfira in https://github.com/microsoft/hcsshim/pull/1264
• [release/0.9] Add ws2022 image/build to cri-containerd tests (#1160) by @dcantah in https://github.com/microsoft/hcsshim/pull/1274
• [release/0.9] Make kill noop on second run by @gabriel-samfira in https://github.com/microsoft/hcsshim/pull/1275
• [release/0.9] Add ErrInvalidHandle and fix list stats by @gabriel-samfira in https://github.com/microsoft/hcsshim/pull/1277

New Contributors

• @helsaawy made their first contribution in https://github.com/microsoft/hcsshim/pull/1264

Full Changelog: https://github.com/microsoft/hcsshim/compare/v0.9.1...v0.9.2

What's Changed

• [release/0.8] Support specifying a specific logrus log level for shim log output by @dcantah in https://github.com/microsoft/hcsshim/pull/1213
• [release/0.8] Add reconnect logic for stdio pipes by @dcantah in https://github.com/microsoft/hcsshim/pull/1214
• [release/0.8] go.mod: Bump ttrpc to 1.1.0 by @dcantah in https://github.com/microsoft/hcsshim/pull/1224

Full Changelog: https://github.com/microsoft/hcsshim/compare/v0.8.22...v0.8.23

What's Changed

• [release/0.9] Fix commandline double quoting for job containers by @dcantah in https://github.com/microsoft/hcsshim/pull/1226
• [release/0.9] go.mod: Bump ttrpc to 1.1.0 by @dcantah in https://github.com/microsoft/hcsshim/pull/1225
• [release/0.9] Add reconnect logic for stdio pipes by @dcantah in https://github.com/microsoft/hcsshim/pull/1227

Full Changelog: https://github.com/microsoft/hcsshim/compare/v0.9.0...v0.9.1

What's New

• The runhcs containerd shim now supports launching Host Process containers.
• LCOW layers can now be encrypted via dmverity.
• Process dumps can now be generated for WCOW and LCOW via an OCI annotation.
• LCOW container execs now run as whatever user the container was launched as, unless the spec was overridden with a different user.
• Shared memory is now configurable via an OCI annotation.
• WCOW supports extensible virtual disks as data disks.
• LCOW supports hugepage mounts if the kernel used is built with this support.

See the Changelog for the full list of changes!

Bug Fixes

• Fix duplicate "failed" in HCS error strings.
• Get rid of redundant logs in HCN version range checks.
• HNS v1 policy schemas now have correct omitEmpty fields.

See the Changelog for the full list of changes!

Changelog

• Enable scratch space encryption via annotation by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1095
• Enforce security policy at unmount by @SeanTAllen in https://github.com/microsoft/hcsshim/pull/1162
• Make policy environment variable rules consts by @SeanTAllen in https://github.com/microsoft/hcsshim/pull/1164
• Remove unused variable by @SeanTAllen in https://github.com/microsoft/hcsshim/pull/1165
• Update naming in internal security policy tool by @SeanTAllen in https://github.com/microsoft/hcsshim/pull/1166
• Rename variable in SecurityPolicyEnforcer by @SeanTAllen in https://github.com/microsoft/hcsshim/pull/1168
• Rename EnforceStartContainerPolicy by @SeanTAllen in https://github.com/microsoft/hcsshim/pull/1169
• fix vmAccess param usage in AddSCSI by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1167
• Change internal data structure in SecurityPolicyEnforcer by @SeanTAllen in https://github.com/microsoft/hcsshim/pull/1171
• Update kernel driver annotation for accuracy by @katiewasnothere in https://github.com/microsoft/hcsshim/pull/1172
• Rework how working directories function for job containers by @dcantah in https://github.com/microsoft/hcsshim/pull/1137
• Add WCOW sandbox mount support by @dcantah in https://github.com/microsoft/hcsshim/pull/1087
• Add support for passing in a virtual function index to assign pci device by @katiewasnothere in https://github.com/microsoft/hcsshim/pull/1163
• Set PATHEXT for job containers to handle binaries with no extension by @dcantah in https://github.com/microsoft/hcsshim/pull/1174
• Add process dump functionality for WCOW/LCOW by @dcantah in https://github.com/microsoft/hcsshim/pull/1062
• Update json format for security policy by @SeanTAllen in https://github.com/microsoft/hcsshim/pull/1173
• Rework LCOW username setup/exec behavior by @dcantah in https://github.com/microsoft/hcsshim/pull/1178
• Refactor pod config generation in tests by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1180
• tests: Fix tests that used old pullRequiredLCOWImages func name by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1183
• Remove unused definitions in winapi by @dcantah in https://github.com/microsoft/hcsshim/pull/1181
• Also run tests on Windows Server 2022 GitHub Runner by @TBBle in https://github.com/microsoft/hcsshim/pull/1176
• tests: Fix ExecUser LCOW tests using old function signature by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1184
• Add unit tests for computeagent by @katiewasnothere in https://github.com/microsoft/hcsshim/pull/1182
• Bump github.com/containerd/containerd from 1.5.4 to 1.5.7 in /test by @dependabot in https://github.com/microsoft/hcsshim/pull/1185
• Bump github.com/containerd/containerd from 1.5.4 to 1.5.7 by @dependabot in https://github.com/microsoft/hcsshim/pull/1186
• Add compute agent store for ncproxy reconnect by @katiewasnothere in https://github.com/microsoft/hcsshim/pull/1097
• Update names of ncproxy proxy resources with test name included by @katiewasnothere in https://github.com/microsoft/hcsshim/pull/1189
• Merge Microsoft/opengcs and Microsoft/hcsshim by @dcantah in https://github.com/microsoft/hcsshim/pull/973
• Run late clone tests on 20H2+ builds only. by @ambarve in https://github.com/microsoft/hcsshim/pull/1028
• Fix bug with VSMB & SCSI mounts on the same host path by @ambarve in https://github.com/microsoft/hcsshim/pull/1021
• Support for storage space data disks by @ambarve in https://github.com/microsoft/hcsshim/pull/998
• Add option to set no direct map by default on wcow VSMB devices by @katiewasnothere in https://github.com/microsoft/hcsshim/pull/1030
• Read max 1MB data from panic.log by @ambarve in https://github.com/microsoft/hcsshim/pull/1029
• Change Makefile file type from crlf to lf by @katiewasnothere in https://github.com/microsoft/hcsshim/pull/1031
• support pod and container updates by @katiewasnothere in https://github.com/microsoft/hcsshim/pull/931
• Add new flags to integration tests to specify virtstack by @dcantah in https://github.com/microsoft/hcsshim/pull/1019
• Change VSMBNoDirectMap_WCOW_Hypervisor test to fix CI break by @dcantah in https://github.com/microsoft/hcsshim/pull/1033
• fix break in cpu groups test on machines with build < 20124 by @katiewasnothere in https://github.com/microsoft/hcsshim/pull/1036
• lf line endingify stray opengcs files by @dcantah in https://github.com/microsoft/hcsshim/pull/1032
• Remotevm UVM implementation by @dcantah in https://github.com/microsoft/hcsshim/pull/1023
• VHD with dm-verity by @SeanTAllen in https://github.com/microsoft/hcsshim/pull/985
• Add tests for LCOW shared scratch space work by @dcantah in https://github.com/microsoft/hcsshim/pull/955
• shim: Clean up delete invocation behavior by @kevpar in https://github.com/microsoft/hcsshim/pull/1041
• Remove internal GCS connection functionality by @dcantah in https://github.com/microsoft/hcsshim/pull/1038
• Add instructions to build containerd-shim and gcs binaries by @dcantah in https://github.com/microsoft/hcsshim/pull/1034
• Add DnsSettings to ncproxy CreateEndpointRequest by @dcantah in https://github.com/microsoft/hcsshim/pull/1026
• use requested stdio in call to exec in shim host by @katiewasnothere in https://github.com/microsoft/hcsshim/pull/1044
• Added Support for NestedIpSet type in SetPolicy and a new Network Policy called NetworkACL policy by @netal in https://github.com/microsoft/hcsshim/pull/1045
• Add DNSDomain to hns endpoint object by @dcantah in https://github.com/microsoft/hcsshim/pull/1047
• add logic to stack lcow layers on a single VPMEM device by @anmaxvl in https://github.com/microsoft/hcsshim/pull/930
• Read vhd verity footer by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1008
• fix wrong error logged when dm-verity footer read fails by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1054
• Get rid of redundant logs in HCN version range checks by @dcantah in https://github.com/microsoft/hcsshim/pull/1053
• Add containerd-shim plumbing for job containers by @dcantah in https://github.com/microsoft/hcsshim/pull/962
• Fix functional tests build and revendor by @katiewasnothere in https://github.com/microsoft/hcsshim/pull/1063
• Remove ERROR_PROC_NOT_FOUND from error checks by @kevpar in https://github.com/microsoft/hcsshim/pull/1064
• export annotations for use in test suite by @katiewasnothere in https://github.com/microsoft/hcsshim/pull/1061
• Support specifying a specific logrus log level for shim log output by @dcantah in https://github.com/microsoft/hcsshim/pull/1058
• Support registering and unregistering ncproxy as a Windows service by @dcantah in https://github.com/microsoft/hcsshim/pull/1046
• Bump containerd to 1.5.2 by @aledbf in https://github.com/microsoft/hcsshim/pull/1068
• Add missing 'functional' tag to test source by @TBBle in https://github.com/microsoft/hcsshim/pull/1069
• Add support to dump stacks for ncproxy when requested by @katiewasnothere in https://github.com/microsoft/hcsshim/pull/1070
• Fix lost span attribute for NameToGuid by @TBBle in https://github.com/microsoft/hcsshim/pull/1071
• Remove leftover generated HCS2 schema file by @TBBle in https://github.com/microsoft/hcsshim/pull/1074
• Add volume mount support for job containers by @dcantah in https://github.com/microsoft/hcsshim/pull/1057
• Gate CRI update container tests behind feature flag by @dcantah in https://github.com/microsoft/hcsshim/pull/1079
• Updating HNS v1 policy schemas with correct omitEmpty fields by @elweb9858 in https://github.com/microsoft/hcsshim/pull/1078
• Fix relative paths (with dot) not working for job containers by @dcantah in https://github.com/microsoft/hcsshim/pull/1081
• Add support for reading in device extension files for container create hcs document by @katiewasnothere in https://github.com/microsoft/hcsshim/pull/1060
• Bump github.com/containerd/containerd from 1.5.2 to 1.5.4 in /test by @dependabot in https://github.com/microsoft/hcsshim/pull/1082
• Bump github.com/containerd/containerd from 1.5.2 to 1.5.4 by @dependabot in https://github.com/microsoft/hcsshim/pull/1083
• Bump github.com/opencontainers/runc from 1.0.0-rc93 to 1.0.0-rc95 by @dependabot in https://github.com/microsoft/hcsshim/pull/1084
• tests: increase opengcs tests verbosity by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1088
• make container's shared memory configurable via annotation by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1052
• Support for extensible virtual disks as data disks by @ambarve in https://github.com/microsoft/hcsshim/pull/1039
• Minor bug fixes by @ambarve in https://github.com/microsoft/hcsshim/pull/1093
• Add support to encrypt SCSI scratch disks with dm-crypt by @AntonioND in https://github.com/microsoft/hcsshim/pull/1090
• Add basis for allowing the creation of configuration enforcement in gcs by @SeanTAllen in https://github.com/microsoft/hcsshim/pull/1094
• Add retry around wclayer operations for process isolated containers by @dcantah in https://github.com/microsoft/hcsshim/pull/1091
• Fix build break in functional tests by @katiewasnothere in https://github.com/microsoft/hcsshim/pull/1098
• Fix incorrect casing in error message by @SeanTAllen in https://github.com/microsoft/hcsshim/pull/1103
• chore: Cleanup guest pmem package by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1096
• Skip setting security policy when it's empty by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1099
• Fix incorrect variable casing by @SeanTAllen in https://github.com/microsoft/hcsshim/pull/1106
• Fix variable naming by @SeanTAllen in https://github.com/microsoft/hcsshim/pull/1105
• tests: fix VPMem layer packing tests by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1109
• Support for Kernel Boot Options - LCOW by @ninzavivek in https://github.com/microsoft/hcsshim/pull/1108
• Add network stats to the enable getting stats directly by @jsturtevant in https://github.com/microsoft/hcsshim/pull/1102
• Add sleep before layer operation retries by @dcantah in https://github.com/microsoft/hcsshim/pull/1122
• Add GetCachedSupportedFeatures method to hcn package by @dcantah in https://github.com/microsoft/hcsshim/pull/1123
• Check if stdio pipes are nil for job containers/fix windows.Close usage by @dcantah in https://github.com/microsoft/hcsshim/pull/1115
• Add security policy enforcement of command line options when starting containers by @SeanTAllen in https://github.com/microsoft/hcsshim/pull/1116
• Fix spelling error by @SeanTAllen in https://github.com/microsoft/hcsshim/pull/1127
• Update ncproxy compute agent cache map by @katiewasnothere in https://github.com/microsoft/hcsshim/pull/1126
• Make ncproxy a urfave/cli app by @dcantah in https://github.com/microsoft/hcsshim/pull/1121
• Bugfix for UnicodeString constructor by @ambarve in https://github.com/microsoft/hcsshim/pull/1138
• Fix duplicate "failed" in HCS errors by @thaJeztah in https://github.com/microsoft/hcsshim/pull/1139
• Add extra info about DCO check to README by @dcantah in https://github.com/microsoft/hcsshim/pull/1140
• Update test package go modules by @katiewasnothere in https://github.com/microsoft/hcsshim/pull/1141
• Fixup logic for sandbox and container cleanup on failure by @katiewasnothere in https://github.com/microsoft/hcsshim/pull/1142
• Add stylecheck linter to golangci-lint CI runs by @dcantah in https://github.com/microsoft/hcsshim/pull/1125
• Enable dm-verity for multi-mapped LCOW layers by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1089
• add RecommendedVHDSizeGB constant by @praenubilus in https://github.com/microsoft/hcsshim/pull/1145
• Add more messages when guest relays and init process finish by @anmaxvl in https://github.com/microsoft/hcsshim/pull/1104
• Job container path touchups + rework tests by @dcantah in https://github.com/microsoft/hcsshim/pull/1117
• Update test modules with hcsshim changes by @katiewasnothere in https://github.com/microsoft/hcsshim/pull/1150
• Add ci step to validate that modules have been vendored in by @katiewasnothere in https://github.com/microsoft/hcsshim/pull/1112
• Hugepage support for LCOW by @ninzavivek in https://github.com/microsoft/hcsshim/pull/1118
• Update test modules with up to date hcsshim code by @katiewasnothere in https://github.com/microsoft/hcsshim/pull/1151
• Add security policy enforcement of environment variables by @SeanTAllen in https://github.com/microsoft/hcsshim/pull/1146
• Add note about test directory go mod vendor steps to README by @dcantah in https://github.com/microsoft/hcsshim/pull/1156
• Update script to verify go modules to match hashes of all files by @katiewasnothere in https://github.com/microsoft/hcsshim/pull/1157
• Add unit tests to ncproxy by @katiewasnothere in https://github.com/microsoft/hcsshim/pull/1143
• Switch JSON policy schema from using arrays to maps by @SeanTAllen in https://github.com/microsoft/hcsshim/pull/1154
• Add new internal cmd package request struct to remove shimdiag package import by @katiewasnothere in https://github.com/microsoft/hcsshim/pull/1153
• Add additional information to the error message when validating modules by @katiewasnothere in https://github.com/microsoft/hcsshim/pull/1159
• Update securitypolicy tool to support multiple registries by @SeanTAllen in https://github.com/microsoft/hcsshim/pull/1161
• Add security policy enforcement for SCSI devices by @SeanTAllen in https://github.com/microsoft/hcsshim/pull/1158

Full changelog: https://github.com/microsoft/hcsshim/compare/v0.8.22...v0.9.0

Dependencies

• Revert containerd/containerd dependency to 1.4.9 to avoid some circular dependency issues in Kubernetes. See https://github.com/kubernetes/kubernetes/issues/104827

Packages

• Adjusted behavior in the github.com/microsoft/hcsshim/hcn package where logs were being generated on every invocation of any of the hcn.XSupported methods or hcn.GetSupportedFeatures. There's now only one log printed on the first invocation of any of the methods.
• Add a new GetCachedSupportedFeatures to the github.com/microsoft/hcsshim/hcn package. This optimizes for scenarios where multiple calls are made to check if certain features are supported by caching the very first result from HCN.
• Add a new GetHNSEndpointStats function to the github.com/microsoft/hcsshim/ package. This allows statistics about the hns endpoint to be queried.

Bug Fixes/Misc.

• Add a best effort fix to remedy some errors seen during container layer setup on RS5 (Windows Server 2019). See https://github.com/microsoft/hcsshim/issues/919

Packages

• Fixed an issue in the github.com/Microsoft/hcsshim package where IsAlreadyStopped and IsNotExist would erroneously return true for ERROR_PROC_NOT_FOUND (#1065).

Shim

• Fix behavior when the shim is invoked with the "delete" command line argument. Previously we would try and delete the bundle directory ourselves as well as shutdown a sandbox container for a pod in the delete path. This unveiled an issue where if delete was called on an application container in a pod, it would bring down the whole pod.

Shim

• Fix an issue where a goroutine could be leaked if using the binary cmd option (Thanks @hex0punk!)
• Optimize osversion.Build() and Get() to only get invoked once and cache the result. (Thanks @thaJeztah!)
• Fixed a bug in the tar2ext4 code to correctly handle unordered tars not starting with a root folder. (Thanks @estebanreyl!)
• Add support for assigning a Utility VM to a cpu group at creation time of the VM on supported builds.
• Support passing in propagation flags for SCSI mounts for LCOW.
• Close individual stdio IO relay pipes when the relay is finished. This fixes some unwanted behavior if the shim's IO relay is severed on the write end.

Hns/Hcn

• Add the definition for VmEndpointRequest
• Add Ipv6 flag to HCN OutBoundNatPolicySetting
• Add proxy exceptions to L4WFP Proxy Policy
• Fix the supported version range for HNS Ipv6 Dual Stack support (HNS 11.10+).
• Add support for the TierAclPolicy.

Internal

• Move around HCS schema and resource path definitions to all be collocated under the hcs package.
• Add a new ttrpc service to facilitate talking to other virt stacks to launch hypervisor isolated containers.
• Revert grpc and genproto libraries to a prior version to avoid a panic in ttrpc.
• Add new vm package to abstract away direct HCS interactions to assist in talking to other virtstacks.
• Change from a hcsshim:: prefix to hcs:: in the internal/hcs packages logging to make log messages clearer in where the logs are originating from.
• Add a utility function to execute a command in a Utility VM for the cri-containerd test suite.

Shim

• add implementation of network configuration proxy (ncproxy)
• support modifying device IOV settings for ncproxy
• add implementation of job containers (host process containers)
• remove "extra info" from error logs
• fix issue in tar2ext4 when a file is listed before its parent directory

Repository

• switch CI to Github Actions
• switch from deprecated gometalinter to golangci/golangci-lint-action in CI

Shim

• Added support for containerd logging binaries
• Stats calls no longer return an error when the container does not exist or when querying stats fails due to permissions
• Resolve mount source path before passing it to HCS (fixes containerd/containerd#4915)
• When the shim is called with delete action, it will look for and log panic.log in the bundle directory

Packages

• Added pkg/ociwclayer package with support for working with Windows container layers

New Features

• shim: Add ability to share files from the host into a Utility VM

Misc.

• Convert to LF line endings everywhere

New Features

• shim: Add ability to update the cpu limits for a UVM.
• shim: Add ability to assign a UVM to a cpu group after start.

Bug fixes

• shim: Fix nil pointer dereference when creating a task with no shim options were passed.

New Features

• hcn package: Updated L4WfpProxyPolicy struct to include specifying an inbound and outbound port.
• computestorage package: Added helper functions to make setting up a container/uvm layer easier.
• shim - Add UVM call to update cpu limits for the vm.

Bug Fixes

• shim: Fix panic that would occur for LCOW if no network namespace was specified.

New Features

• shim: Add option to scale Windows container CPU limit based on UVM CPUs via toml override.
• shim: Add SetJobCompartmentId binding and expose CompartmentId on hns Namespace object.
• shim: Added support for GMSA in HCS schema v2 hypervisor-isolated Windows containers.
• shim: Add new diagnostic function to execute a command on the host system.
• shim: Add a high level job object wrapper.
• hcn package: Updating the supported version ranges for the Network L4proxy policy
• computestorage package: Add computestorage.dll bindings. Allows finer grained control over Windows layer creation.

Bug Fixes/Misc.

• shim: Improve logging for LCOW layer operations
• shim: Add registry key for WCOW to deal with containment for a GNS.dll change in 20H1 container images.
• shim: Force disable VSMB direct map when the volume does not support it. This fixes an issue seen on certain versions of Windows where instead of falling back to non-direct map when FileIdInfo is not supported, VSMB will just return errors when files are accessed on the share.
• shim: Revendor go-winio at d1ffc52c73318019ce58aaa5282588c52df029b7
• shim: Remove support for automanaged vhd functionality

Highlights

• shim: Added support for GMSA in HCS schema v2 process-isolated Windows containers.
• shim: Added support for assigning host devices into process-isolated Windows containers.
• shim: Correctly calculate cap for UVM CPU count when there are multiple processor groups on the host.
• shim: Switched to connect directly to the GCS for hypervisor-isolated Windows containers. This should improve reliability and allow future innovations.
• shim: Removed code that blocked processor weight/maximum to be set for processor QoS for process-isolated Windows containers. Previously there was an OS issue preventing this from working, but that has been fixed.
• hcsshim package: Fixed an issue that could cause Windows container layers to have incorrect modification timestamps. This could lead to a case impacting container start time due to directory timestamps not matching the expected value. #830.

New Features

• Added version support for IPv6 Dual stack in HNS.
• Updated HNS session affinity version check for load balancing.

Bug Fixes

• Fixed a bug when an LCOW container used SCSI for layers. If a second container was started that shared a layer with an existing container, it would fail to start.

New Features

• Add support for uvm processor and memory override via toml
• Added assigned device support
• Add Nvidia gpu support for LCOW
• Add shim implementation to support SDN routes
• Allow mounting VHD's inside multiple WCOW/LCOW containers

Bug Fixes/Misc.

• Fix crashes when cleaning up resources for process isolated containers
• Remove cgo dependency
• Fix read-only VSMB mount bug that would cause container activation to fail
• Fix issue with repeated calls to GrantVmAccess causing an 'Incorrect Parameter' error
• Remove kubernetes/kubernetes dependency and have tests directory have its own go.mod

This is the v0.8.7 release of hcsshim for Docker

hcsshim v1

• Improves internal wait patterns reducing HCS syscall overhead.
• Changes the syscall interface to properly contain call context.
• Improves error handling for process/container based patterns.

hcn

• Adds outbound NAT policies.
• Improves failure cases when a namespace is not found.
• Fixes the L4ProxyPolicySetting CompartmentID field.
• Added NatFlags to PortMappings.

This is the v0.8.7 release of containerd-shim-runhcs-v1.exe for containerd

There are significant changes since the last official release of hcsshim.

The most important change is that we are officially deprecating runhcs.exe as the containerd runtime of choice and have removed the v1 runtime bindings for it from containerd. It is now expected that for containerd on Windows you use Runtime V2 shim implemented in the cmd/containerd-shim-runhcs-v1 section of the repo.

containerd-shim-runhcs-v1.exe

With the move to containerd the containerd-shim-runhcs-v1.exe binary now replaces all OS level interaction with the gRPC interface implemented by the Runtime V2 interface as defined by containerd. This allows us to fully implement Windows process and Hyper-V containers on RS1+ with support for Windows v2 containers as well as LCOW on RS5+ releases of Windows.

The implementation is as follows for your HOST OS version of Windows:

The main difference with Windows v2 containers and LCOW v2 is the ability of the shim to support true Kubernetes pod's. On Windows this means a shared network namespace for process containers in the pod. For Windows hypervisor (including LCOW) containers it additionally means shared processor, memory, and storage for all containers in the pod within a single UtilityVM. This single UtilityVM provides higher performance and density while also providing greater lifetime guarantees for the set.

Bug Fixes

• Plan9 case sensitivity can only be set if the source Windows directory supports it
• Shrink the size of the create-scratch utility VM (256MB/1 VPMem device)
• Fix race in endoperation logging