InTheForest/moby
1
0
Fork 0
mirror of https://github.com/moby/moby.git synced 2026-01-11 02:31:44 +00:00
Code Issues Packages Projects Releases Wiki Activity
55,463 Commits 21 Branches 532 Tags
master
Commit Graph

55463 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Paweł Gronowski
8802be9eca hack: Restore rootlesskit and tini installers 
Revert a part of 9e72c44dae

These are still used by packaging scripts.

Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com>
 2025-12-16 12:58:22 +01:00
Paweł Gronowski
fab17fc011 Merge pull request #51716 from vvoland/gha-work 
gha: Bump actions/upload-artifact to v6
 2025-12-16 11:29:24 +00:00
Rob Murray
25fbe6cd43 Merge pull request #51725 from robmry/max-api-1.53 
Update client MaxAPIVersion to 1.53
 2025-12-16 11:14:41 +00:00
Rob Murray
54a6ec374a Update client MaxAPIVersion to 1.53 
The daemon's MaxAPIVersion was updated in commit f6b1488.

Signed-off-by: Rob Murray <rob.murray@docker.com>
 2025-12-16 11:03:58 +00:00
Rob Murray
1e209e788b Continue to backfill empty PortBindings in API 1.53 
- introduced by commit 0ca7ac3 ("daemon: backfill empty PBs
  slices for backward compat")

Signed-off-by: Rob Murray <rob.murray@docker.com>
 2025-12-16 11:03:58 +00:00
Sebastiaan van Stijn
2cce7ff87f api/docs: move ImageHistoryResponseItem to definitions (API v1.25-v1.52) 
Similar to caaa9c9bb5, but applied to
existing API versions, so that it's easier to compare differences
between versions.

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-12-16 11:42:03 +01:00
Paweł Gronowski
b48be08eb5 project: Update branches/tags and patch releases 
Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com>
 2025-12-16 11:36:37 +01:00
Sebastiaan van Stijn
ec136d7ecc Merge pull request #51723 from vvoland/golangci-no-concurrency-limit 
ci: Remove concurrency setting from golangci-lint config
 2025-12-16 11:06:25 +01:00
Rob Murray
bdda339294 Merge pull request #51574 from 2003Aditya/TestAPINetworkInspectWithScope 
migrate TestAPINetworkInspectWithScope to integration test
 2025-12-15 20:53:15 +00:00
Paweł Gronowski
51d1974500 daemon/cluster/test: Use t.Context() 
Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com>
 2025-12-15 18:56:34 +01:00
Paweł Gronowski
6c5233e109 modernize: Use strings.CutSuffix 
Added in Go 1.20

Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com>
 2025-12-15 18:56:34 +01:00
Paweł Gronowski
71fd582aa2 modernize: Use strings.Builder instead of string concatenation 
Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com>
 2025-12-15 18:56:34 +01:00
Paweł Gronowski
62ed24a87c modernize: Use slices.Contains 
Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com>
 2025-12-15 18:56:34 +01:00
Paweł Gronowski
bce14ac5bc reflect: Use TypeFor instead of TypeOf 
Added in Go 1.22

Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com>
 2025-12-15 18:56:34 +01:00
Paweł Gronowski
3df05205f4 modernize: Use range int 
Added in Go 1.22

Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com>
 2025-12-15 18:56:34 +01:00
Paweł Gronowski
e548a31d28 modernize: Use min built-in 
Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com>
 2025-12-15 18:56:34 +01:00
Paweł Gronowski
39c19d9161 modernize: Use fmt.Appendf 
Added in Go 1.19

Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com>
 2025-12-15 18:56:33 +01:00
Paweł Gronowski
cdce8f4f92 modernize: Use maps.Copy instead of for loops 
Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com>
 2025-12-15 18:56:33 +01:00
Paweł Gronowski
ff33808a79 modernize: Use strings.Cut instead of strings.Index where possible 
Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com>
 2025-12-15 18:56:33 +01:00
Paweł Gronowski
a25907b485 modernize: Prefer strings.SplitSeq instead of Split 
Avoids extra allocations. Added in Go 1.24.

Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com>
 2025-12-15 18:56:33 +01:00
Paweł Gronowski
c9b0a21bb1 modernize: Use b.Loop (introduced in Go 1.24) 
Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com>
 2025-12-15 18:56:33 +01:00
Paweł Gronowski
37fdb6d775 ci: Remove concurrency setting from golangci-lint config 
Remove the hardcoded concurrency limit of 2 from the golangci-lint
configuration to allow the linter to match the machine CPU's core count.

Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com>
 2025-12-15 18:55:32 +01:00
Rob Murray
239a49d403 Merge pull request #51711 from robmry/nri-config-reload 
NRI: config reload
 2025-12-15 17:51:27 +00:00
Paweł Gronowski
f44b5abf0e api: deprecate /grpc and /session endpoints 
The /grpc and /session endpoints are now deprecated as the Engine has
been upgraded to properly support HTTP/2 and h2c requests, making these
specialized endpoints unnecessary.

These endpoints will be removed in the next major API version to
complete the cleanup.

Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com>
 2025-12-15 18:44:22 +01:00
Paweł Gronowski
5b60725eed Merge pull request #51719 from vvoland/api-uncut 
api: remove docs/v1.53.yaml
 2025-12-15 17:14:44 +00:00
Paweł Gronowski
a0bd623959 api: remove docs/v1.53.yaml 
The API is not cut yet

Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com>
 2025-12-15 17:24:53 +01:00
Rob Murray
425f23995d Merge pull request #51712 from robmry/nri-error-on-unsupported-adjustment 
NRI: error on unsupported adjustment
 2025-12-15 16:21:31 +00:00
Brian Goff
2ec5bdfaf6 Merge pull request #51666 from ndeloof/swagger 
simplify swagger generation
 2025-12-15 08:13:20 -08:00
Paweł Gronowski
82c35087d0 Merge pull request #51717 from vvoland/c8d-errs-log 
daemon/c8d: Log correct error extractOCIErrors
 2025-12-15 16:12:37 +00:00
Rob Murray
248d33664e Merge pull request #51713 from robmry/nri-info 
NRI: report config in "docker info"
 2025-12-15 15:44:56 +00:00
Paweł Gronowski
53c67be034 daemon/c8d: Log correct error extractOCIErrors 
When logging an unmarshal failure in the registry error handling code,
the function was incorrectly logging the uninitialized `derrs` variable
instead of the actual JSON unmarshal error `jerr`.

Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com>
 2025-12-15 15:56:44 +01:00
Rob Murray
98d196b714 NRI: error on unsupported adjustment 
Also error on eviction requests.

Signed-off-by: Rob Murray <rob.murray@docker.com>
 2025-12-15 14:08:02 +00:00
Rob Murray
ff553c5069 NRI: make config reloadable 
Signed-off-by: Rob Murray <rob.murray@docker.com>
 2025-12-15 13:59:09 +00:00
Paweł Gronowski
3f938c6091 gha: Bump actions/upload-artifact to v6 
Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com>
 2025-12-15 14:00:06 +01:00
Jan Scheffler
3fdde529e7 layer: Clean up init layer if initialization fails 
Add cleanup for the init layer directory if any operation fails after
driver.CreateReadWrite() succeeds in initMount(). Previously, failures
in driver.Get(), initFunc(), or driver.Put() would leave an orphaned
overlay2 directory.

Related to moby/moby#45939

Signed-off-by: Jan Scheffler <jan.scheffler@qodev.ai>
 2025-12-15 11:06:56 +00:00
Rob Murray
7c7a626e5d NRI: include in API Info response 
Signed-off-by: Rob Murray <rob.murray@docker.com>
 2025-12-15 10:36:05 +00:00
Rob Murray
f6b1488468 Bump API to v1.53 
Signed-off-by: Rob Murray <rob.murray@docker.com>
 2025-12-15 09:45:21 +00:00
Aditya Mishra
29d5098ffd migrate TestAPINetworkInspectWithScope to integration test 
Signed-off-by: Aditya Mishra <mishraaditya675@gmail.com>
 2025-12-13 23:24:31 +05:30
Jan Scheffler
d7a6250b91 layer: Clean up RW layer if mount metadata save fails 
Add cleanup for the RW layer directory if saveMount() fails after
driver.CreateReadWrite() succeeds. Previously, this failure path would
leave an orphaned overlay2 directory with no corresponding metadata.

Related to moby/moby#45939

Signed-off-by: Jan Scheffler <jan.scheffler@qodev.ai>
 2025-12-12 23:03:08 +00:00
Rob Murray
0c01da8ccc Merge pull request #51675 from robmry/nri-mounts 
NRI: allow plugins to add mounts
 2025-12-12 18:37:29 +00:00
Sebastiaan van Stijn
70aa2e2981 Merge pull request #51707 from thaJeztah/bump_runtime_tools 
vendor: github.com/opencontainers/runtime-tools v0.9.1-0.20251111083745-e5b454202754
 2025-12-12 17:10:01 +01:00
Rob Murray
10c0fc4de8 NRI: add TestNRIContainerCreateAddMount 
Signed-off-by: Rob Murray <rob.murray@docker.com>
 2025-12-12 14:28:49 +00:00
Rob Murray
a30301b28d NRI: allow plugins to add mounts 
Signed-off-by: Rob Murray <rob.murray@docker.com>
 2025-12-12 14:28:49 +00:00
Sebastiaan van Stijn
52f33797f3 vendor: github.com/opencontainers/runtime-tools v0.9.1-0.20251111083745-e5b454202754 
last commit before it updated to runtime-spec v1.3.0

full diff: 0ea5ed0382...e5b4542027

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-12-12 14:45:48 +01:00
Rob Murray
4384364748 Merge pull request #51702 from thaJeztah/bump_wazero 
vendor: github.com/tetratelabs/wazero v1.10.1
 2025-12-12 12:18:09 +00:00
Paweł Gronowski
0a0245a31a Merge pull request #51700 from jschfflr/45939-nil-check-tx-cleanup 
layer: Fix orphan creation in registerWithDescriptor
 2025-12-12 11:44:46 +00:00
Jan Scheffler
70004549fb layer: Fix orphan creation in registerWithDescriptor 
Start the metadata transaction before creating the overlay2 directory.
This ensures that if driver.Create() fails, we can properly cancel the
transaction. Previously, if StartTransaction() failed after driver.Create()
succeeded, the defer cleanup would not run (not registered yet), leaving
an orphaned overlay2 directory.

The fix reorders operations so that:
1. Transaction is started first (no filesystem changes yet)
2. Overlay2 directory is created second (transaction ready for cleanup)
3. Defer is registered after both succeed (tx is guaranteed non-nil)

If driver.Create() fails, the transaction is explicitly cancelled before
returning. The nil check for tx in the defer is no longer needed since
tx is guaranteed to exist when the defer runs.

Related to moby/moby#45939

Signed-off-by: Jan Scheffler <jan.scheffler@qodev.ai>
 2025-12-12 09:44:04 +00:00
Paweł Gronowski
95baac6740 Merge pull request #51697 from thaJeztah/bump_cni_plugins 
vendor: github.com/containernetworking/plugins v1.9.0
 2025-12-12 09:39:02 +00:00
Sebastiaan van Stijn
413b4afcba vendor: github.com/tetratelabs/wazero v1.10.1 
full diff: https://github.com/tetratelabs/wazero/compare/v0.9.0...v1.10.1

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-12-12 10:33:55 +01:00
Sebastiaan van Stijn
24bac4495e vendor: github.com/containernetworking/plugins v1.9.0 
no changes in vendored code

includes a fix for CVE-2025-67499

full diff: https://github.com/containernetworking/plugins/compare/v1.8.0...v1.9.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-12-12 10:27:12 +01:00