Commit Graph

55435 Commits

Author SHA1 Message Date
Sebastiaan van Stijn
5275f5f33c Merge pull request #51809 from GSotelo/fix/typo-in-comments
docs: fix typo in IPv6 constant comment
2026-01-05 17:52:32 +01:00
Sebastiaan van Stijn
5f38f0644c Merge pull request #51805 from thaJeztah/simplify_reflect
integration/container: TestStats: explicitly check zero-value
2026-01-05 17:49:10 +01:00
Paweł Gronowski
910430d0c3 Merge pull request #51785 from majiayu000/49594-fix-api-arch-description
docs: fix reversed descriptions of version.Arch and info.Architecture
2026-01-05 15:20:00 +00:00
Sebastiaan van Stijn
4c9fe4de6a Merge pull request #51807 from mismithhisler/use-afterFunc-stop-func
client: use stop function to deregister context.AfterFunc
2026-01-05 16:09:58 +01:00
gsotelo
32d34c472c docs: fix type in comment
Signed-off-by: gsotelo <gsotelo.se@gmail.com>
2026-01-05 15:27:23 +01:00
Paweł Gronowski
0da7c60458 Merge pull request #51804 from thaJeztah/no_shadow
daemon: minor cleanup and linting fixes
2026-01-05 14:19:12 +00:00
Sebastiaan van Stijn
d6eee94dd2 Merge pull request #51789 from majiayu000/45927-doc-healthcheck-timeout-kill
docs: document healthcheck timeout termination behavior
2026-01-05 15:13:32 +01:00
Sebastiaan van Stijn
a28aa590ca Merge pull request #51806 from thaJeztah/fix_err_typo
daemon/server/httputils: remove badParameterError
2026-01-05 15:07:05 +01:00
Michael Smithhisler
06704ef904 client: use stop function to deregister context.AfterFunc
Signed-off-by: Michael Smithhisler <smithhisler.mike@gmail.com>
2026-01-05 08:24:48 -05:00
Sebastiaan van Stijn
d85c1a258a daemon/server/httputils: remove badParameterError
The "param" field was only used to generate the error-message, and the
produced error-message was missing a space so we may as well just inline it.

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2026-01-05 13:51:59 +01:00
Rob Murray
9f92b72f2f Merge pull request #51553 from 2003Aditya/TestAPIImagesImportBadSrc
migrate TestAPIImageImportBadSrc to integration test
2026-01-05 12:41:58 +00:00
Sebastiaan van Stijn
e529aa7d7c integration/container: TestStats: explicitly check zero-value
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2026-01-05 13:40:04 +01:00
majiayu000
0fb55db037 docs: clarify healthcheck behavior
Signed-off-by: majiayu000 <1835304752@qq.com>
2026-01-05 19:48:15 +08:00
Sebastiaan van Stijn
dcb0149ee1 daemon: inline copyAttributes utilty
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2026-01-05 12:42:49 +01:00
Sebastiaan van Stijn
8a01dc2f90 daemon/cluster/executor/container: rename vars that shadowed
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2026-01-05 12:42:49 +01:00
Paweł Gronowski
92a240fd42 Merge pull request #51797 from lujinda/fix_shutdown_panic
fix: prevent potential panic in Shutdown when EventsService is nil
2026-01-02 14:54:41 +00:00
Paweł Gronowski
5b18361f07 Merge pull request #51783 from austinvazquez/run-golangci-lint-for-all-modules
ci: run golangci-lint for each Go module
2026-01-02 14:52:56 +00:00
jinda.ljd
5c637b7209 fix: prevent potential panic in Shutdown when EventsService is nil
Add nil check before calling EventsService.Close() to prevent panic
when daemon.EventsService is not initialized during shutdown.

Signed-off-by: jinda.ljd <jinda.ljd@alibaba-inc.com>
2025-12-30 20:19:09 +08:00
majiayu000
1b9f126ede docs: document healthcheck timeout termination behavior
Document that when a health check command exceeds its configured
timeout, the process is forcibly terminated. This clarifies the
behavior for users who need predictable handling of hung health
check commands.

Fixes #45927

Signed-off-by: majiayu000 <1835304752@qq.com>
2025-12-26 17:44:50 +08:00
majiayu000
1fd2395cd3 docs: fix reversed descriptions of version.Arch and info.Architecture
The API documentation had incorrect descriptions for these fields:

- `/version` endpoint's `Arch` field was described generically but actually
  returns the Go runtime's GOARCH value
- `/info` endpoint's `Architecture` field incorrectly stated it returns
  GOARCH, but it actually returns the OS-reported hardware architecture
  (equivalent to `uname -m`)

This commit corrects the descriptions to accurately reflect the
implementation.

Fixes #49594

Signed-off-by: majiayu000 <1835304752@qq.com>
2025-12-26 14:34:05 +08:00
Aditya Mishra
ae4c17fdb7 migrate TestAPIImageImportBadSrc to integration test
Signed-off-by: Aditya Mishra <mishraaditya675@gmail.com>
2025-12-26 00:40:48 +05:30
Austin Vazquez
c8aaeea285 ci: run golangci-lint for each Go module
Signed-off-by: Austin Vazquez <austin.vazquez@docker.com>
2025-12-23 14:58:53 -06:00
Sebastiaan van Stijn
3bd2edb375 Merge pull request #51784 from thaJeztah/api_less_reflect
api/types/network: remove use of "reflect" in test
2025-12-23 12:31:11 +01:00
Sebastiaan van Stijn
e09afad3cb api/types/network: remove use of "reflect" in test
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2025-12-23 11:26:32 +01:00
Rob Murray
800406d631 Merge pull request #51781 from thaJeztah/bump_wazero2
vendor: github.com/tetratelabs/wazero v1.11.0
2025-12-23 10:18:12 +00:00
Sebastiaan van Stijn
9176746aba vendor: github.com/tetratelabs/wazero v1.11.0
- Streamline build tags: remove tinygo, cgo
- Fix race condition in refCount initialization
- Simplify utimens. Use `syscall.UtimesNano` to avoid a macOS `go:linkname`.
- Change version policy to two versions.
- Update Wasm 2.0 spec tests.
- Use golang.org/x/sys

full diff: https://github.com/tetratelabs/wazero/compare/v1.10.1...v1.11.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2025-12-22 15:06:09 +01:00
Sebastiaan van Stijn
fba74ac758 Merge pull request #51776 from thaJeztah/bump_go_archive
vendor: github.com/moby/go-archive v0.2.0
2025-12-19 22:21:37 +01:00
Sebastiaan van Stijn
2a9eb66ddc vendor: github.com/moby/go-archive v0.2.0
- remove aliases for deprecated types and functions
- chrootarchive: remove redundant "init" mitigation for CVE-2019-14271
- xattr: Fix OS matching

full diff: https://github.com/moby/go-archive/compare/v0.1.0...v0.2.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2025-12-19 19:18:51 +01:00
Sebastiaan van Stijn
552580464d Merge pull request #51777 from thaJeztah/archive_rm_deprecated
remove uses of deprecated go-archive consts
2025-12-19 19:06:35 +01:00
Sebastiaan van Stijn
7239c72eca remove uses of deprecated go-archive consts
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2025-12-19 17:51:03 +01:00
Sebastiaan van Stijn
2142a4444c Merge pull request #51774 from thaJeztah/bump_x_deps
vendor: update golang.org/x/xxx dependencies
2025-12-19 17:12:51 +01:00
Sebastiaan van Stijn
356c3cffee Merge pull request #51772 from vvoland/work-build
hack: add nri_no_wasm build when building dockerd
2025-12-19 17:01:28 +01:00
Paweł Gronowski
3ccd05d817 Merge pull request #51682 from srstsavage/45297-allow-anonymous-read-only-volumes
Remove restriction on anonymous read-only volumes
2025-12-19 15:20:32 +00:00
Sebastiaan van Stijn
1a12717766 vendor: golang.org/x/oauth2 v0.34.0
x/oauth2: populate RetrieveError from DeviceAuth

Endpoints may return errors when attempting to request device
authorization. Currently, these error codes are ignored and an
otherwise empty RetrieveError returned. This change populates
the RetrieveError similar to the oauth2 token exchange.

full diff: https://github.com/golang/oauth2/compare/v0.30.0...v0.34.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2025-12-19 15:59:18 +01:00
Sebastiaan van Stijn
595d00cb49 vendor: golang.org/x/tools v0.40.0
full diff: https://github.com/golang/tools/compare/v0.39.0...v0.40.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2025-12-19 15:55:02 +01:00
Sebastiaan van Stijn
d9fa84260a vendor: golang.org/x/mod v0.31.0
full diff: https://github.com/golang/mod/compare/v0.30.0...v0.31.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2025-12-19 15:47:36 +01:00
Sebastiaan van Stijn
98ec249d2b vendor: golang.org/x/net v0.48.0
- trace: fix data race in RenderEvents
- http2, webdav, websocket: fix %q verb uses with wrong type
- http2: don't PING a responsive server when resetting a stream
- http2: support net/http.Transport.NewClientConn

full diff: https://github.com/golang/net/compare/v0.47.0...v0.48.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2025-12-19 15:46:10 +01:00
Sebastiaan van Stijn
e229e91247 vendor: golang.org/x/crypto v0.45.0
- x509roots/fallback: update bundle

full diff: https://github.com/golang/crypto/compare/v0.45.0...v0.46.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2025-12-19 15:42:52 +01:00
Sebastiaan van Stijn
1a4e4dafe9 vendor: golang.org/x/text v0.32.0
full diff: https://github.com/golang/text/compare/v0.31.0...v0.32.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2025-12-19 15:39:09 +01:00
Sebastiaan van Stijn
e0795ef3ab vendor: golang.org/x/tools v0.39.0
full diff: https://github.com/golang/tools/compare/v0.38.0...v0.39.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2025-12-19 15:36:54 +01:00
Sebastiaan van Stijn
48e96d4353 vendor: golang.org/x/sync v0.19.0
- errgroup: use consistent read for SetLimit panic

full diff: https://github.com/golang/sync/compare/v0.18.0...v0.19.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2025-12-19 15:33:45 +01:00
Sebastiaan van Stijn
dccdb1b618 vendor: golang.org/x/sys v0.39.0
- Revert "cpu: add HPDS, LOR, PAN detection for arm64"
- unix: add IOCTL_MEI_* constants
- unix: fix definition of Statvfs_t for netbsd-arm

full diff: https://github.com/golang/sys/compare/v0.38.0...v0.39.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2025-12-19 15:31:38 +01:00
Paweł Gronowski
fdb7b56814 Merge pull request #51769 from thaJeztah/bump_protobuf
vendor: google.golang.org/protobuf v1.36.11
2025-12-19 13:41:48 +00:00
Paweł Gronowski
7ddc5f609a hack: add nri_no_wasm build tag to static builds
Add the nri_no_wasm build tag to the BUILDFLAGS for static builds to
disable WASM plugins support in the NRI (Node Resource Interface)
component.

See: 1078130fa0/README.md (webassembly-support)

The NRI support is still minimal and disabling WASM plugins shaves off a
couple of MiB of the binary size.

Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com>
2025-12-19 14:36:15 +01:00
Austin Vazquez
4a72e05714 Merge pull request #51770 from vvoland/update-gha
gha: Bump actions/download-artifact to v7
2025-12-19 07:31:16 -06:00
Paweł Gronowski
1175dd348e daemon/volume/mounts: Fix tests on Windows
The test was failing on Windows because it used Unix-style paths and
relied on platform-specific filesystem behavior.

Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com>
2025-12-19 12:42:43 +01:00
Paweł Gronowski
6cbabb04b9 gha: Bump actions/download-artifact to v7
Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com>
2025-12-19 12:11:07 +01:00
Sebastiaan van Stijn
fae334b4c0 vendor: google.golang.org/protobuf v1.36.11
full diff: https://github.com/protocolbuffers/protobuf-go/compare/v1.36.10...v1.36.11

User-visible changes:
CL/726780: encoding/prototext: Support URL chars in type URLs in text-format.

Bug fixes:
CL/728680: internal/impl: check recursion limit in lazy decoding validation
CL/711015: reflect/protodesc: fix handling of import options in dynamic builds

Maintenance:
CL/728681: reflect/protodesc: add support for edition unstable
CL/727960: all: add EDITION_UNSTABLE support
CL/727940: types: regenerate using latest protobuf v33.2 release
CL/727140: internal/testprotos/lazy: convert .proto files to editions
CL/723440: cmd/protoc-gen-go: add missing annotations for few generated protobuf symbols.
CL/720980: internal/filedesc: remove duplicative Message.unmarshalOptions
CL/716360: internal/encoding/tag: use proto3 defaults if proto3
CL/716520: proto: un-flake TestHasExtensionNoAlloc
CL/713342: compiler/protogen: properly filter option dependencies in go-protobuf plugin.
CL/711200: proto: add test for oneofs containing messages with required fields
CL/710855: proto: add explicit test for a non-nil but empty byte slice

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2025-12-19 10:11:42 +01:00
Shane St Savage
beeacde4b2 Remove restriction on anonymous read-only volumes
Restriction on anonymouse read-only volumes is currently preventing
the use of pre-populated volumes that should be accessed in a read-only manner in a container
(e.g. an NFS volume containing data to be processed or served).

According to @neersighted the restriction may have originally been put
in place with the assumption that pre-populated volumes would be
exposed as a named volume by the volume driver.

In practice, NFS volumes are mounted using the docker `local` driver
by supplying driver opts. Example that fails when `readonly` is specified but works without:

```
docker run --rm -it \
 --mount 'readonly,type=volume,dst=/data/dest,volume-driver=local,volume-opt=type=nfs,volume-opt=device=:/export/some-share,"volume-opt=o=nfsvers=4,addr=some.server"' \
  debian
```

Fixes #45297

Signed-off-by: Shane St Savage <shane@axds.co>
2025-12-18 16:08:31 -08:00
Paweł Gronowski
ebf1c0d405 Merge pull request #51765 from vvoland/update-containerd-nowindows
Dockerfile: update containerd binary to v2.2.1 (static binaries and CI, on Linux)
2025-12-18 21:17:35 +00:00