Update module github.com/docker/docker to v20 #16

renovate · 2021-04-26T14:55:59Z

This PR contains the following updates:

Package	Type	Update	Change
github.com/docker/docker	require	major	`v1.13.1` -> `v20.10.7`

Release Notes

docker/docker

`v20.10.7`

Compare Source

20.10.7

Client

Suppress warnings for deprecated cgroups docker/cli#3099.
Prevent sending SIGURG signals to container on Linux and macOS. The Go runtime
(starting with Go 1.14) uses SIGURG signals internally as an interrupt to
support preemptable syscalls. In situations where the Docker CLI was attached
to a container, these interrupts were forwarded to the container. This fix
changes the Docker CLI to ignore SIGURG signals docker/cli#3107,
moby/moby#42421.

Builder

Update BuildKit to version v0.8.3-3-g244e8cde moby/moby#42448:
- Transform relative mountpoints for exec mounts in the executor to work around
  a breaking change in runc v1.0.0-rc94 and up. moby/buildkit#2137.
- Add retry on image push 5xx errors. moby/buildkit#2043.
- Fix build-cache not being invalidated when renaming a file that is copied using
  a COPY command with a wildcard. Note that this change invalidates
  existing build caches for copy commands that use a wildcard. moby/buildkit#2018.
- Fix build-cache not being invalidated when using mounts moby/buildkit#2076.
Fix build failures when FROM image is not cached when using legacy schema 1 images moby/moby#42382.

Logging

Update the hcsshim SDK to make daemon logs on Windows less verbose moby/moby#42292.

Rootless

Fix capabilities not being honored when an image was built on a daemon with
user-namespaces enabled moby/moby#42352.

Networking

Update libnetwork to fix publishing ports on environments with kernel boot
parameter ipv6.disable=1, and to fix a deadlock causing internal DNS lookups
to fail moby/moby#42413.

Contrib

Update rootlesskit to v0.14.2 to fix a timeout when starting the userland proxy
with the slirp4netns port driver moby/moby#42294.
Fix "Device or resource busy" errors when running docker-in-docker on a rootless
daemon moby/moby#42342.

Packaging

Update containerd to v1.4.6, runc v1.0.0-rc95 to address CVE-2021-30465
moby/moby#42398, moby/moby#42395,
ocker/containerd-packaging#234
Update containerd to v1.4.5, runc v1.0.0-rc94 moby/moby#42372,
moby/moby#42388, docker/containerd-packaging#232.
Update Docker Scan plugin packages (docker-scan-plugin) to v0.8 docker/docker-ce-packaging#545.

`v20.10.6`

Compare Source

release notes: https://docs.docker.com/engine/release-notes/[#20106](https://togithub.com/docker/docker/issues/20106)

`v20.10.5`

Compare Source

release notes: https://docs.docker.com/engine/release-notes/[#20105](https://togithub.com/docker/docker/issues/20105)

20.10.5 Client

Revert docker/cli#2960 to fix hanging in docker start --attach and remove spurious “Unsupported signal: . Discarding." messages docker/cli#2987

`v20.10.4`

Compare Source

release notes: https://docs.docker.com/engine/release-notes/[#20104](https://togithub.com/docker/docker/issues/20104)

20.10.4

Builder

Fix incorrect cache match for inline cache import with empty layers moby/moby#42061
Update BuildKit to v0.8.2 moby/moby#42061
- resolver: avoid error caching on token fetch
- fileop: fix checksum to contain indexes of inputs preventing certain cache misses
- Fix reference count issues on typed errors with mount references (fixing invalid mutable ref errors)
- git: set token only for main remote access allowing cloning submodules with different credentials
Ensure blobs get deleted in /var/lib/docker/buildkit/content/blobs/sha256 after pull. To clean up old state run builder prune moby/moby#42065
Fix parallel pull synchronization regression moby/moby#42049
Ensure libnetwork state files do not leak moby/moby#41972

Client

Fix a panic on docker login if no config file is present docker/cli#2959
Fix WARNING: Error loading config file: .dockercfg: $HOME is not defined docker/cli#2958

Runtime

docker info: silence unhandleable warnings moby/moby#41958
Avoid creating parent directories for XGlobalHeader moby/moby#42017
Use 0755 permissions when creating missing directories moby/moby#42017
Fallback to manifest list when no platform matches in image config moby/moby#42045 moby/moby#41873
Fix a daemon panic on setups with a custom default runtime configured moby/moby#41974
Fix a panic when daemon configuration is empty moby/moby#41976
Fix daemon panic when starting container with invalid device cgroup rule moby/moby#42001
Fix userns-remap option when username & UID match moby/moby#42013
static: update runc binary to v1.0.0-rc93 moby/moby#42014

Logger

Honor labels-regex config even if labels is not set moby/moby#42046
Handle long log messages correctly preventing awslogs in non-blocking mode to split events bigger than 16kB mobymoby#41975

Rootless

Prevent the service hanging when stopping by setting systemd KillMode to mixed moby/moby#41956
dockerd-rootless.sh: add typo guard moby/moby#42070
Update rootlesskit to v0.13.1 to fix handling of IPv6 addresses moby/moby#42025
allow mknodding FIFO inside userns moby/moby#41957

Security

profiles: seccomp: update to Linux 5.11 syscall list moby/moby#41971

Swarm

Fix issue with heartbeat not persisting upon restart moby/moby#42060
Fix potential stalled tasks moby/moby#42060
Fix --update-order and --rollback-order flags when only --update-order or --rollback-order is provided docker/cli#2963
Fix docker service rollback returning a non-zero exit code in some situations docker/cli#2964
Fix inconsistent progress-bar direction on docker service rollback docker/cli#2964

`v20.10.3`

Compare Source

Release notes: https://docs.docker.com/engine/release-notes/[#20103](https://togithub.com/docker/docker/issues/20103)

20.10.3

Security

CVE-2021-21285 Prevent an invalid image from crashing docker daemon
CVE-2021-21284 Lock down file permissions to prevent remapped root from accessing docker state
Ensure AppArmor and SELinux profiles are applied when building with BuildKit

Client

Check contexts before importing them to reduce risk of extracted files escaping context store
Windows: prevent executing certain binaries from current directory docker/cli#2950

Configuration

📅 Schedule: At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box.

This PR has been generated by WhiteSource Renovate. View repository job log here.

renovate · 2021-04-26T14:56:01Z

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻️ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you check the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum

Command failed: docker run --rm --name=renovate_go --label=renovate_child -v "/mnt/renovate/gh/axetroy/dvs":"/mnt/renovate/gh/axetroy/dvs" -v "/tmp/renovate-cache":"/tmp/renovate-cache" -v "/tmp/renovate-cache/others/go":"/tmp/renovate-cache/others/go" -e GOPATH -e CGO_ENABLED -w "/mnt/renovate/gh/axetroy/dvs" docker.io/renovate/go:1.13.15 bash -l -c "git config --global url.\"https://**redacted**@github.com/\".insteadOf \"https://github.com/\" && go get -d ./... && go mod tidy && go mod vendor && go mod tidy && go mod tidy"
go: github.com/docker/docker/v20@v20.10.6: missing github.com/docker/docker/go.mod and .../v20/go.mod at revision v20.10.6

renovate · 2021-06-02T20:42:01Z

⚠ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you check the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum

Command failed: docker run --rm --name=renovate_go --label=renovate_child -v "/mnt/renovate/gh/axetroy/dvs":"/mnt/renovate/gh/axetroy/dvs" -v "/tmp/renovate-cache":"/tmp/renovate-cache" -v "/tmp/renovate-cache/others/go":"/tmp/renovate-cache/others/go" -e GOPATH -e CGO_ENABLED -w "/mnt/renovate/gh/axetroy/dvs" docker.io/renovate/go:1.16.4 bash -l -c "git config --global url.\"https://**redacted**@github.com/\".insteadOf \"https://github.com/\" && go get -d ./... && go mod tidy && go mod vendor && go mod tidy && go mod tidy"
go: github.com/docker/docker/v20@v20.10.7: missing github.com/docker/docker/go.mod and .../v20/go.mod at revision v20.10.7

Update module github.com/docker/docker to v20

cbb2fd7

renovate bot force-pushed the renovate/github.com-docker-docker-20.x branch from f8c503e to cbb2fd7 Compare June 2, 2021 20:41

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Update module github.com/docker/docker to v20 #16

Update module github.com/docker/docker to v20 #16

renovate bot commented Apr 26, 2021 •

edited

renovate bot commented Apr 26, 2021

renovate bot commented Jun 2, 2021

Update module github.com/docker/docker to v20 #16

Are you sure you want to change the base?

Update module github.com/docker/docker to v20 #16

Conversation

renovate bot commented Apr 26, 2021 • edited

Release Notes

20.10.7

Client

Builder

Logging

Rootless

Networking

Contrib

Packaging

20.10.5

Client

20.10.4

Builder

Client

Runtime

Logger

Rootless

Security

Swarm

20.10.3

Security

Client

Configuration

renovate bot commented Apr 26, 2021

⚠️ Artifact update problem

File name: go.sum

renovate bot commented Jun 2, 2021

⚠ Artifact update problem

File name: go.sum

renovate bot commented Apr 26, 2021 •

edited