Skip to content

[pull] main from containerd:main#307

Open
pull[bot] wants to merge 809 commits intofahedouch:mainfrom
containerd:main
Open

[pull] main from containerd:main#307
pull[bot] wants to merge 809 commits intofahedouch:mainfrom
containerd:main

Conversation

@pull
Copy link
Copy Markdown

@pull pull bot commented May 10, 2025

See Commits and Changes for more details.


Created by pull[bot] (v2.0.0-alpha.1)

Can you help keep this open source service alive? 💖 Please sponsor : )

@pull pull bot added the ⤵️ pull label May 10, 2025
elezar and others added 29 commits December 2, 2025 11:38
This change switches to using CDI to handle the --gpus flag.
This removes the custom implementation that invoked the nvidia-container-cli
directly. This mechanism does not align with existing implementations.

Signed-off-by: Evan Lezar <elezar@nvidia.com>
Signed-off-by: Park jungtae <jtpark1957@gmail.com>
Signed-off-by: Park jungtae <jtpark1957@gmail.com>
Signed-off-by: Park jungtae <jtpark1957@gmail.com>
Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.0 to 6.0.1.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@1af3b93...8e8c483)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 6.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Add remote snapshot annotations and transfer unpack config
for stargz, soci, and fuse-overlayfs snapshotter plugins.

Signed-off-by: ChengyuZhu6 <hudson@cyzhu.com>
Add version detection to automatically select Transfer service (2.0+)
or legacy resolver methods (< 2.0) for better compatibility.

Signed-off-by: ChengyuZhu6 <hudson@cyzhu.com>
…tions/checkout-6.0.1

build(deps): bump actions/checkout from 6.0.0 to 6.0.1
fix: Improve namespace validation logic for update, inspect command
…_square

Signed-off-by: Hayato Kiwata <haytok@amazon.co.jp>
docs/command-reference.md: fix nerdctl namespace anchors without blue…
Bumps the docker group with 1 update: [github.com/docker/cli](https://github.com/docker/cli).


Updates `github.com/docker/cli` from 29.1.1+incompatible to 29.1.2+incompatible
- [Commits](docker/cli@v29.1.1...v29.1.2)

---
updated-dependencies:
- dependency-name: github.com/docker/cli
  dependency-version: 29.1.2+incompatible
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: docker
...

Signed-off-by: dependabot[bot] <support@github.com>
…-fd300ea992

build(deps): bump github.com/docker/cli from 29.1.1+incompatible to 29.1.2+incompatible in the docker group
Bumps [github.com/containerd/nydus-snapshotter](https://github.com/containerd/nydus-snapshotter) from 0.15.7 to 0.15.8.
- [Release notes](https://github.com/containerd/nydus-snapshotter/releases)
- [Commits](containerd/nydus-snapshotter@v0.15.7...v0.15.8)

---
updated-dependencies:
- dependency-name: github.com/containerd/nydus-snapshotter
  dependency-version: 0.15.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [github.com/spf13/cobra](https://github.com/spf13/cobra) from 1.10.1 to 1.10.2.
- [Release notes](https://github.com/spf13/cobra/releases)
- [Commits](spf13/cobra@v1.10.1...v1.10.2)

---
updated-dependencies:
- dependency-name: github.com/spf13/cobra
  dependency-version: 1.10.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps tonistiigi/xx from 1.8.0 to 1.9.0.

---
updated-dependencies:
- dependency-name: tonistiigi/xx
  dependency-version: 1.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
…/xx-1.9.0

build(deps): bump tonistiigi/xx from 1.8.0 to 1.9.0
….com/spf13/cobra-1.10.2

build(deps): bump github.com/spf13/cobra from 1.10.1 to 1.10.2
Updates tests to use nerdtest.Setup and the Tigron testing framework
as per issue #4613.

Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
In the current implementation, nerdctl compose command ignores tmpfs
configurations specified in the long syntax within the volumes section of
compose.yml [1].

[1] https://docs.docker.com/reference/compose-file/services/#long-syntax-6

> - `type`: The mount type. Either `volume`, `bind`, `tmpfs`, `image`, `npipe`, or `cluster`
> - `target`: The path in the container where the volume is mounted.
> - `read_only`: Flag to set the volume as read-only.
> - `tmpfs`: Configures additional tmpfs options:
>   - `size`: The size for the tmpfs mount in bytes (either numeric or as bytes unit).
>   - `mode`: The file mode for the tmpfs mount as Unix permission bits as an octal number. Introduced in Docker Compose version [2.14.0](https://docs.docker.com/compose/releases/release-notes/#2260).

This behavior has been reported in issue#4556.

Therefore, this commit modifies so that when tmpfs is specified using the
long syntax in the volumes section, tmpfs is created within the container.

Signed-off-by: Hayato Kiwata <haytok@amazon.co.jp>
Refactor container_list_test.go to use Tigron
….com/containerd/nydus-snapshotter-0.15.8

build(deps): bump github.com/containerd/nydus-snapshotter from 0.15.7 to 0.15.8
Updates tests to use nerdtest.Setup and the Tigron testing framework
as per issue #4613. Replaced base.Cmd with helpers.Command and
base.Assert with test.Expects. Also updated TestExecStdin to use
cmd.Feed instead of WithStdin.

Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
Refactor container_exec_test.go to use Tigron
Bumps [github.com/containerd/nydus-snapshotter](https://github.com/containerd/nydus-snapshotter) from 0.15.8 to 0.15.9.
- [Release notes](https://github.com/containerd/nydus-snapshotter/releases)
- [Commits](containerd/nydus-snapshotter@v0.15.8...v0.15.9)

---
updated-dependencies:
- dependency-name: github.com/containerd/nydus-snapshotter
  dependency-version: 0.15.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [github.com/containernetworking/plugins](https://github.com/containernetworking/plugins) from 1.8.0 to 1.9.0.
- [Release notes](https://github.com/containernetworking/plugins/releases)
- [Commits](containernetworking/plugins@v1.8.0...v1.9.0)

---
updated-dependencies:
- dependency-name: github.com/containernetworking/plugins
  dependency-version: 1.9.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
….com/containernetworking/plugins-1.9.0

build(deps): bump github.com/containernetworking/plugins from 1.8.0 to 1.9.0
….com/containerd/nydus-snapshotter-0.15.9

build(deps): bump github.com/containerd/nydus-snapshotter from 0.15.8 to 0.15.9
Bumps the golang-x group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.45.0` | `0.46.0` |
| [golang.org/x/net](https://github.com/golang/net) | `0.47.0` | `0.48.0` |
| [golang.org/x/sync](https://github.com/golang/sync) | `0.18.0` | `0.19.0` |
| [golang.org/x/sys](https://github.com/golang/sys) | `0.38.0` | `0.39.0` |
| [golang.org/x/term](https://github.com/golang/term) | `0.37.0` | `0.38.0` |
| [golang.org/x/text](https://github.com/golang/text) | `0.31.0` | `0.32.0` |


Updates `golang.org/x/crypto` from 0.45.0 to 0.46.0
- [Commits](golang/crypto@v0.45.0...v0.46.0)

Updates `golang.org/x/net` from 0.47.0 to 0.48.0
- [Commits](golang/net@v0.47.0...v0.48.0)

Updates `golang.org/x/sync` from 0.18.0 to 0.19.0
- [Commits](golang/sync@v0.18.0...v0.19.0)

Updates `golang.org/x/sys` from 0.38.0 to 0.39.0
- [Commits](golang/sys@v0.38.0...v0.39.0)

Updates `golang.org/x/term` from 0.37.0 to 0.38.0
- [Commits](golang/term@v0.37.0...v0.38.0)

Updates `golang.org/x/text` from 0.31.0 to 0.32.0
- [Release notes](https://github.com/golang/text/releases)
- [Commits](golang/text@v0.31.0...v0.32.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-version: 0.46.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang-x
- dependency-name: golang.org/x/net
  dependency-version: 0.48.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang-x
- dependency-name: golang.org/x/sync
  dependency-version: 0.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang-x
- dependency-name: golang.org/x/sys
  dependency-version: 0.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang-x
- dependency-name: golang.org/x/term
  dependency-version: 0.38.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang-x
- dependency-name: golang.org/x/text
  dependency-version: 0.32.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang-x
...

Signed-off-by: dependabot[bot] <support@github.com>
must108 and others added 30 commits March 9, 2026 02:59
Signed-off-by: Mustaeen Ahmed <contact@mustaeen.dev>

Resolve test issues

Add progress bar

Signed-off-by: Mustaeen Ahmed <contact@mustaeen.dev>

Revert changes on container_logs_test.go

Signed-off-by: Mustaeen Ahmed <contact@mustaeen.dev>

Add progress bar
…cker/login-action-4.0.0

build(deps): bump docker/login-action from 3.7.0 to 4.0.0
Revert "CI: temporarily disable release check for PRs"
…cker/setup-qemu-action-4.0.0

build(deps): bump docker/setup-qemu-action from 3.7.0 to 4.0.0
Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 3.12.0 to 4.0.0.
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](docker/setup-buildx-action@8d2750c...4d04d5d)

---
updated-dependencies:
- dependency-name: docker/setup-buildx-action
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [docker/metadata-action](https://github.com/docker/metadata-action) from 5.10.0 to 6.0.0.
- [Release notes](https://github.com/docker/metadata-action/releases)
- [Commits](docker/metadata-action@c299e40...030e881)

---
updated-dependencies:
- dependency-name: docker/metadata-action
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
…cker/setup-buildx-action-4.0.0

build(deps): bump docker/setup-buildx-action from 3.12.0 to 4.0.0
…cker/build-push-action-7.0.0

build(deps): bump docker/build-push-action from 6.19.2 to 7.0.0
Bumps [github.com/containerd/containerd/v2](https://github.com/containerd/containerd) from 2.2.1 to 2.2.2.
- [Release notes](https://github.com/containerd/containerd/releases)
- [Changelog](https://github.com/containerd/containerd/blob/main/RELEASES.md)
- [Commits](containerd/containerd@v2.2.1...v2.2.2)

---
updated-dependencies:
- dependency-name: github.com/containerd/containerd/v2
  dependency-version: 2.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
….com/containerd/containerd/v2-2.2.2

build(deps): bump github.com/containerd/containerd/v2 from 2.2.1 to 2.2.2
…cker/metadata-action-6.0.0

build(deps): bump docker/metadata-action from 5.10.0 to 6.0.0
Fix issue 4793

Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
Dockerfile: runc: omit libpathrs
feature: show progress output during conversion
Bumps [github.com/containernetworking/plugins](https://github.com/containernetworking/plugins) from 1.9.0 to 1.9.1.
- [Release notes](https://github.com/containernetworking/plugins/releases)
- [Commits](containernetworking/plugins@v1.9.0...v1.9.1)

---
updated-dependencies:
- dependency-name: github.com/containernetworking/plugins
  dependency-version: 1.9.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: juannio <juaniorosas.99@gmail.com>
Signed-off-by: Matt Van Horn <455140+mvanhorn@users.noreply.github.com>
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.78.0 to 1.79.3.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.78.0...v1.79.3)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-version: 1.79.3
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
Bumps [actions/cache](https://github.com/actions/cache) from 5.0.3 to 5.0.4.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](actions/cache@cdf6c1f...6682284)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-version: 5.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
….golang.org/grpc-1.79.3

build(deps): bump google.golang.org/grpc from 1.78.0 to 1.79.3
…tions/cache-5.0.4

build(deps): bump actions/cache from 5.0.3 to 5.0.4
….com/containernetworking/plugins-1.9.1

build(deps): bump github.com/containernetworking/plugins from 1.9.0 to 1.9.1
… is removed

In the current implementation, when a container is started with the -p
option, a `sleep infinity` process is launched to reserve host ports.

The PID of this process is stored in
`/run/nerdctl/<namespace>/<container ID>/port-reserver.pid`.

When the container is removed, the following file and directory are
expected to be cleaned up.

- /run/nerdctl/<namespace>/<container ID>/port-reserver.pid
- /run/nerdctl/<namespace>/<container ID>/

However, currently they are not removed as shown below:

```
$ sudo nerdctl run -d --name nginx -p 81:80 nginx
ca1552d394cd8efcc5adcff9434deb4f3ead569d168f6e31bea1ae965db8b919

$ ls /run/nerdctl/default/ca1552d394cd8efcc5adcff9434deb4f3ead569d168f6e31bea1ae965db8b919
port-reserver.pid

$ sudo nerdctl rm -f nginx
nginx

$ ls /run/nerdctl/default/ca1552d394cd8efcc5adcff9434deb4f3ead569d168f6e31bea1ae965db8b919
port-reserver.pid
```

Therefore, this commit ensures that they are removed when the container is
removed.

Signed-off-by: Hayato Kiwata <dev@haytok.jp>
fix: clean up port-reserver.pid and the parent dir when the container…
…l-tests

test: refactor compose_pull_linux_test.go to use nerdtest/tigron
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.