This repository has been archived by the owner on Apr 3, 2023. It is now read-only.
-
Notifications
You must be signed in to change notification settings - Fork 51
/
Copy pathchangelog
5511 lines (4139 loc) · 198 KB
/
changelog
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
yandex-porto (5.3.15) unstable; urgency=low
[ Lev Pantyukhin ]
* portodshim: add README.md
[ Dmitry Yakunin ]
* portodshim: set limits on containers too
* ci: add example of using update_tar_bases.sh with script
[ Lev Pantyukhin ]
* portodshim: add default metadata labels and add nil checks in prepareContainerNetwork
* porto: enable image removing using ID
-- Lev Pantyukhin <[email protected]> Fri, 20 Jan 2023 12:23:10 +0300
yandex-porto (5.3.14) unstable; urgency=low
* docker: fix bug with new tag addition
-- Lev Pantyukhin <[email protected]> Thu, 12 Jan 2023 17:52:47 +0300
yandex-porto (5.3.13) unstable; urgency=low
[ Dmitry Yakunin ]
* docker: image storage restructurization
* memory: add config option to make a gap between max and high limits
[ Lev Pantyukhin ]
* Revert "storage: add logs to ImportArchive"
* storage: log time of waiting a slot for place load
* cgroup: log infinity loop in AttachAll
-- Lev Pantyukhin <[email protected]> Fri, 30 Dec 2022 14:18:00 +0300
yandex-porto (5.3.12) unstable; urgency=low
[ Dmitry Yakunin ]
* README: add g++
* cpu: fix jail usage calculation on node -> node + jail cpu_set switching
[ Lev Pantyukhin ]
-- Lev Pantyukhin <[email protected]> Wed, 23 Nov 2022 14:00:33 +0300
yandex-porto (5.3.11) unstable; urgency=low
* release-porto: fix
* portodshim: update porto in go.mod and go.sum
* portodshim: fix build
-- Dmitry Yakunin <[email protected]> Tue, 22 Nov 2022 10:29:35 +0300
yandex-porto (5.3.10) unstable; urgency=low
[ Dmitry Yakunin ]
* portodshim: fix ExecSync timeout and exit_code handling
[ Lev Pantyukhin ]
* portodshim: fix stderr with tty
* portodshim: add path skipping in prepareContainerMounts
* docker: fix image fullname for DockerImageNotFound
* container: recalculate cpu_guarantee_bound when cpu_guarantee is applying
* portodshim: refactor logs
* storage: fix Storage::List for DockertLayer without blobs directory
* docker: change porto_docker and images directory owner
* api: refactor golang api for cpu optimization
[ Dmitry Yakunin ]
-- Dmitry Yakunin <[email protected]> Mon, 21 Nov 2022 21:32:58 +0300
yandex-porto (5.3.9) unstable; urgency=low
[ Dmitry Yakunin ]
* release-porto: add sync_upstream subcommand
* api: go: add spec api methods
* portodshim: use UpdateSpec request to set command_argv
* api: change TDockerImage command and env fields to arrays
* portodshim: update porto in go.mod
[ Lev Pantyukhin ]
* portodshim: disable lumberjack logrotate
[ Dmitry Yakunin ]
* container: add SYS_NICE to bounding set if rt_priority is enabled in config
[ Lev Pantyukhin ]
* portodshim: change registry authentication to k8s secrets
[ Dmitry Yakunin ]
-- Dmitry Yakunin <[email protected]> Thu, 10 Nov 2022 23:22:31 +0300
yandex-porto (5.3.8) unstable; urgency=low
[ Lev Pantyukhin ]
* portodshim: disable logshim in Exec()
[ Dmitry Yakunin ]
-- Dmitry Yakunin <[email protected]> Thu, 03 Nov 2022 19:57:04 +0300
yandex-porto (5.3.7) unstable; urgency=low
[ Anton Suvorov ]
* portodshim: normalize container paths for volumes
* portodshim: use command_argv for porto
* portodshim: add logshim prototype
[ Dmitry Yakunin ]
* container: increase max label value size to 65536
* portodshim: always unlink volume from the root container
[ Anton Suvorov ]
* portodshim: resolve cmd absolute path in containers
* porodshim: implement ExecSync() API
[ Lev Pantyukhin ]
* storage: add logs to ImportArchive
* portodshim: add Exec() prototype
* portodshim: refactor mappers and streaming
[ Dmitry Yakunin ]
-- Dmitry Yakunin <[email protected]> Thu, 03 Nov 2022 19:15:51 +0300
yandex-porto (5.3.6) unstable; urgency=low
[ Lev Pantyukhin ]
* debian: restart portodshim service after install
[ Stanislav Ivanichkin ]
* portodshim: pass network limits through annotations
[ Dmitry Yakunin ]
* portodshim: add registries config
* http: return status as errno in errors
* docker: allow to customize docker registry auth path
* test: fix label test
-- Dmitry Yakunin <[email protected]> Fri, 28 Oct 2022 23:27:57 +0300
yandex-porto (5.3.5) unstable; urgency=low
[ Lev Pantyukhin ]
* portodshim: increase max id length
* volume: restrict system path as volume path and change path to default at portodshim mount volumes
* portoctl: add Storage to volumes listing
[ Dmitry Yakunin ]
-- Dmitry Yakunin <[email protected]> Tue, 25 Oct 2022 12:41:21 +0300
yandex-porto (5.3.4) unstable; urgency=low
[ Lev Pantyukhin ]
* portodshim: fix pod or container id length
* docker: fix quotes at image command
[ Dmitry Yakunin ]
-- Dmitry Yakunin <[email protected]> Tue, 18 Oct 2022 00:15:01 +0300
yandex-porto (5.3.3) unstable; urgency=low
[ Lev Pantyukhin ]
* volume: allow bind file as volume
* test: add file binding case to mount test
* volume: allow non-directory path for file binding
* network: allow sysctl with netns
* volume: fix path for file binding
[ Dmitry Yakunin ]
* common: increase label max length to 4096
* volume: relax overlap check for bind volumes
[ Stanislav Ivanichkin ]
* allowed mount files
* check error on set label props
* Supported resolv_conf, sysctl properties
* fixed comment
[ Dmitry Yakunin ]
-- Dmitry Yakunin <[email protected]> Mon, 17 Oct 2022 16:33:20 +0300
yandex-porto (5.3.2) unstable; urgency=low
[ Dmitry Yakunin ]
* volume: allow system directories for root
[ Lev Pantyukhin ]
* quota: add vcheck call response
[ Stanislav Ivanichkin ]
* portodshim: added support Mounts spec at pod/container start * pass command args to container * pass env to container * fixed labels for Container * split CreateContaoner and RunPodSandbox funcs into few small funcs (prepareContainer*)
* allow run pods without net if cni wasn't initialized
* pass cpu/memory_limit to pod
* save imageName variable for reusing it
* don't use commnd's args from spec if command wasn't defined
* deleted main
* fixed logging * fixed loggind in PodSandboxStatus * pass exsisted logpath to io.kubernetes.container.logpath
* checking if a variable not nil in prepare* funcs
* checking if a variable not nil in prepare* funcs
* pass args to command even thought command wasn't in spec
[ Dmitry Yakunin ]
* docker: fix duplicate layers handling
* http: support redirect to the same host
-- Dmitry Yakunin <[email protected]> Thu, 13 Oct 2022 15:20:31 +0300
yandex-porto (5.3.1) unstable; urgency=low
[ Lev Pantyukhin ]
* portodshim: init commit
* portodshim: add draft of container manipulation methods
* portodshim: add draft of pod manipulation methods
* portodshim: add draft of image mapper
* portodshim: add image manipulation methods
* portodshim: add Statuses and Stats
* portodshim: add porto connection per request via GRPC interceptor and refactor modules
* portodshim: add volume with image to container and image parsing
* portodshim: add debug logs and other API version
* portodshim: labels and annotations
* portodshim: set labels at one request and fix container status
[ Stanislav Ivanichkin ]
* portodshim: temporary use tag as a RuntimeApiVersion
[ Lev Pantyukhin ]
* portodshim: add hostname and ip
* portodshim: add some stubs
[ Stanislav Ivanichkin ]
* portodshim: list containers only with namespace label
[ Lev Pantyukhin ]
* portodshim: add command and using kill instead of stop for containers
* portodshim: add metadata getting and simple filter in ListPodSandbox
* portodshim: add filtering to ListContainers, add system namespaces skipping and add labels/annotations in Stats
* portodshim: split name and id
* portodshim: add labels filtering
* portodshim: modify id length
* portodshim: add ListPodSandboxStats
* portodshim: add LogPath in ContainerStatus
* portodshim: remove porto.go and add remote module dependency
* portodshim: refactor image and runtime mapper with new go api
* portodshim: remove methods from struct PortodshimRuntimeMapper
* portodshim: remove methods from struct PortodshimImageMapper
[ Stanislav Ivanichkin ]
* portodshim: added cni support
[ Lev Pantyukhin ]
* debian: add portodshim package
* portodshim: add log rotate
[ Dmitry Yakunin ]
* portodshim: allow to work without cni configuration
* ci: add update_tar_bases script
* ci: update base tars with golang 1.19.2
* portodshim: set go cache to /tmp
* ci: use arc in sandbox_task
-- Dmitry Yakunin <[email protected]> Fri, 07 Oct 2022 17:33:46 +0300
yandex-porto (5.3.0) unstable; urgency=low
[ Lev Pantyukhin ]
* container: container doesn't start parents if client is portod
* property: add io_read_ops and io_write_ops as division of io_ops
* stream: fix checks in SetInside
[ Dmitry Yakunin ]
* network: use MeasuredMutex-es, better error handling
* docs: add kndrvt to the AUTHORS
[ Maxim Samoylov ]
* test: fix self-container test stability issue
* test: restart portod on each test case
* test: make tests compatible with focal
* test: make tests more stable
[ Lev Pantyukhin ]
* property: add net_snmp6 property
[ Dmitry Yakunin ]
* ci: disable precise build
[ Lev Pantyukhin ]
* api: add rpc.pb.go updating, split rpc package from porto package, resolve conflicts
* api: fix go module name
[ Dmitry Yakunin ]
* ci: disable trusty build
* all: add experimental docker images support
* build: disable go api building by default
* build: enable openssl by default
* ci: enable openssl
[ Lev Pantyukhin ]
* docker: fix docker pull for k8s.gcr.io
[ Stanislav Ivanichkin ]
* api: Allow set target property in LinkVolume call
[ Lev Pantyukhin ]
* storage: remove /usr/sbin/portoctl excluding during layer exporting
* docker: replace docker.io to registry-1.docker.io as registry
* docker: reverse order of image layers
[ Dmitry Yakunin ]
* task: fix typo
-- Dmitry Yakunin <[email protected]> Mon, 19 Sep 2022 12:55:45 +0300
yandex-porto (5.2.8) unstable; urgency=low
[ Lev Pantyukhin ]
* network: add ability to disable l3stat watchdog via period
* volume: modify InsecureUserPaths matching
* stream: set placed after checks in SetInside
[ Dmitry Yakunin ]
-- Dmitry Yakunin <[email protected]> Tue, 14 Jun 2022 14:53:53 +0300
yandex-porto (5.2.7) unstable; urgency=low
* portoctl: fix static build on focal
* filesystem: temporary disable portoctl binding into container
-- Dmitry Yakunin <[email protected]> Wed, 25 May 2022 23:48:54 +0300
yandex-porto (5.2.6) unstable; urgency=low
* build: make portoctl static
-- Dmitry Yakunin <[email protected]> Mon, 23 May 2022 12:05:42 +0300
yandex-porto (5.2.5) unstable; urgency=low
* test: add test for bind portoctl with root_readonly
* cpu: check nested jail in children
-- Dmitry Yakunin <[email protected]> Tue, 17 May 2022 19:50:04 +0300
yandex-porto (5.2.4) unstable; urgency=low
* filesystem: create portoctl file before remounting root to ro
-- Dmitry Yakunin <[email protected]> Mon, 16 May 2022 16:01:04 +0300
yandex-porto (5.2.3) unstable; urgency=low
* filesystem: bind portoctl read only
* util: fix StringMatch
-- Dmitry Yakunin <[email protected]> Mon, 16 May 2022 13:33:00 +0300
yandex-porto (5.2.2) unstable; urgency=low
[ Lev Pantyukhin ]
* volume: fix comment
* porto.md: fix typo
* portoctl: exec has command default value is /bin/bash
* porto: move fds closing before directory chanhing to cwd
* porto: change memory cgroup to container name in layer importing
[ Maxim Samoylov ]
* network: fix veth device leakage on failed ifup script
[ Dmitry Yakunin ]
* ci: reduce cores requirement
* property: add net_rx_overlimits property
[ Lev Pantyukhin ]
* porto: add portoctl binding with porto.socket
* config: change default value of insecure_user_paths config
* volume: remove write access check for layers
[ Dmitry Yakunin ]
* config: rework insecure_user_paths to list of allowed paths
[ Lev Pantyukhin ]
* property: add cpu_burst_usage and cpu_unconstrained_wait properties for portotop
[ Dmitry Yakunin ]
* cpu: fix dynamic jail change on container with cpuset enabled children
* property: fix build on aarch64
* cpu: fix endless loop in ApplySchedPolicy
-- Dmitry Yakunin <[email protected]> Tue, 10 May 2022 15:09:17 +0300
yandex-porto (5.2.1) unstable; urgency=low
[ Lev Pantyukhin ]
* property: refactor code
[ Dmitry Yakunin ]
* property: add memory lock policy property for container memory cgroup
-- Dmitry Yakunin <[email protected]> Mon, 21 Mar 2022 12:52:19 +0300
yandex-porto (5.2.0) unstable; urgency=low
[ Dmitry Yakunin ]
* portoctl: remove offensive comment
[ Lev Pantyukhin ]
* portoctl: decrease necessary arguments count of run command
* portoctl: add ability to use "=" in set command
[ Dmitry Yakunin ]
* cpu: add cpu_limit_scale config option
[ Lev Pantyukhin ]
* network: add sysctl net.ipv6.icmp.ratemask
[ Maxim Samoylov ]
* container: fixup nosmt peculiarities
[ Lev Pantyukhin ]
* api: add memory cgroup parameter into ImportLayer
* porto: add cgroup for import layer to python api, portoctl, and tests
* api: rename cgroup to memory cgroup in layer importing call
* test: fix import layer cgroup test
* porto: fix layer building from docker layers
* porto: remove merge flag in TStorage::SanitizeLayer
[ Dmitry Yakunin ]
* cpu: add proportional_cpu_shares config option
-- Dmitry Yakunin <[email protected]> Fri, 11 Mar 2022 23:43:42 +0300
yandex-porto (5.1.9) unstable; urgency=low
[ Lev Pantyukhin ]
* porto: add additional meta or running check in TContainer::StartParents
[ Maxim Samoylov ]
* network: introduce network_ifup_script invocation on L3 net setup
* container: introduce container cpu_policy nosmt
[ Dmitry Yakunin ]
* api: python: fix exception message in python3
* porto: add vcheck to check volume
* network: fix rx qdisc deleting
[ Anton Suvorov ]
* Fail network configuration if helper script fails
[ Lev Pantyukhin ]
* porto: CgroupCleanup with cgroupfs doesn't delete container cgroup children
[ Maxim Samoylov ]
* network: fix methods naming ambiguity
* client: allow recursive read-only connections
* portod: convert signalfd exit status to waitpid format
[ Dmitry Yakunin ]
* tests: fix security test
[ Maxim Samoylov ]
* test: add essential net-ifup testcase
[ Dmitry Yakunin ]
-- Dmitry Yakunin <[email protected]> Thu, 17 Feb 2022 11:05:42 +0300
yandex-porto (5.1.8) unstable; urgency=low
[ Dmitry Yakunin ]
* cpu_set: fix resetting jail on stopped container
* cpu_set: correctly set vacant cpus in jail
[ Lev Pantyukhin ]
* api: python: rename RemoveLayer param 'async' to 'asynchronous'
[ Dmitry Yakunin ]
* net: change default container qdisc to pfifo_fast
-- Dmitry Yakunin <[email protected]> Tue, 18 Jan 2022 00:04:09 +0300
yandex-porto (5.1.7) unstable; urgency=low
* Revert "property: add bind_socket property"
-- Dmitry Yakunin <[email protected]> Tue, 28 Dec 2021 18:28:04 +0300
yandex-porto (5.1.6) unstable; urgency=low
[ Alexander Kuznetsov ]
* porto: enable capabilities[SYS_ADMIN] in extra_properties
[ Dmitry Yakunin ]
-- Dmitry Yakunin <[email protected]> Mon, 20 Dec 2021 17:53:04 +0300
yandex-porto (5.1.5) unstable; urgency=low
[ Dmitry Yakunin ]
* Revert "blkio: fix disk resolving from client container"
* blkio: fix disk resolving from client chroot with leading dot
[ kndrvt ]
* portotop: fix sorting of values in cores
* git: add .idea to .gitignore
[ Dmitry Yakunin ]
* property: add bind_socket property
* porto: rework cpu_set jail
-- Dmitry Yakunin <[email protected]> Thu, 16 Dec 2021 12:03:02 +0300
yandex-porto (5.1.4) unstable; urgency=low
* blkio: fix disk resolving from client container
-- Dmitry Yakunin <[email protected]> Mon, 08 Nov 2021 14:41:23 +0300
yandex-porto (5.1.3) unstable; urgency=low
[ Alexander Kuznetsov ]
* portoctl-pull-sandbox: allow to use zst layers
* porto: add cpu_set = jail
* portoctl-pull-sandbox: print start command with enable_porto=isolate
* property: link memory with blkio for cgroup writeback
[ Dmitry Yakunin ]
-- Dmitry Yakunin <[email protected]> Mon, 25 Oct 2021 12:20:11 +0300
yandex-porto (5.1.2) unstable; urgency=low
[ Alexander Kuznetsov ]
* core: catch cores from child cgroups from container with cgroupfs=rw
[ Dmitry Yakunin ]
-- Dmitry Yakunin <[email protected]> Tue, 28 Sep 2021 15:52:56 +0300
yandex-porto (5.1.1) unstable; urgency=low
[ Alexander Kuznetsov ]
* property: fix restore for cgroupfs with virt_mode=os and EnableOsModeCgroupNs=true
* filesystem: mount RO net cgroups by default for cgroupns=rw
* porto: fix chown devices for userns after portod reload
[ Dmitry Yakunin ]
-- Dmitry Yakunin <[email protected]> Wed, 15 Sep 2021 14:32:04 +0300
yandex-porto (5.1.0) unstable; urgency=low
[ Alexander Kuznetsov ]
* property: add total_writeback to io_write property
* porto: fix copyright
* test: make selftest more stable
* network: enable extra routes by default for L3 network
* porto: do not create netns when virt_mode=fuse and net inherited
* porto: stop importLayer if client disconnected
* porto: add async RemoveLayer
* container: set memory.numa_balance_vmprot for containers with memory controller and chroot and cpuset='node ...'
[ Dmitry Yakunin ]
-- Dmitry Yakunin <[email protected]> Mon, 06 Sep 2021 16:15:44 +0300
yandex-porto (5.0.34) unstable; urgency=low
[ Alexander Kuznetsov ]
* network: fix shared ptr leak
-- max7255 <max7255@max7255-nix> Mon, 16 Aug 2021 17:52:07 +0300
yandex-porto (5.0.33) unstable; urgency=low
[ Alexander Kuznetsov ]
* test: fix security and disable pull-sandbox
[ Dmitry Yakunin ]
* network: allow tcp_fwmark_accept sysctl
-- Dmitry Yakunin <[email protected]> Fri, 13 Aug 2021 12:54:29 +0300
yandex-porto (5.0.32) unstable; urgency=low
[ Alexander Kuznetsov ]
* api: small fixes for async waiter
* api: fixes for async waiter
* test: make net_sched more stable
* test: make retriability test more stable
[ Dmitry Yakunin ]
* util/path: add Lchown and ChownRecursive (with filter) helpers
* container: more user namespace logic
* property: add resolv_conf to allowed extra properties
* volume: allow suid binaries in linked volumes
-- Dmitry Yakunin <[email protected]> Thu, 12 Aug 2021 12:50:00 +0300
yandex-porto (5.0.31) unstable; urgency=low
[ Alexander Kuznetsov ]
* ci: use more cores for tests
* network: take lock before delete qdisc from L3 device on host
* api: add AsyncWaiter for make async wait simpler
* portoctl: add portoctl sandbox-pull command for download typical base layers
* container: do not enable net_cls controller by default test: disable tests with tc classes
[ Dmitry Yakunin ]
-- Dmitry Yakunin <[email protected]> Fri, 30 Jul 2021 15:23:54 +0300
yandex-porto (5.0.30) unstable; urgency=low
[ Alexander Kuznetsov ]
* porto: rework extra_properties format
* network: enable tx burst like rx
* porto: check that cgroupns supported, before use
* api: remove unused option
* network: take lock in NetWatchDog only if needed
* network: add network high precision speed statistics
[ Dmitry Yakunin ]
-- Dmitry Yakunin <[email protected]> Tue, 20 Jul 2021 17:10:02 +0300
yandex-porto (5.0.29) unstable; urgency=low
[ Alexander Kuznetsov ]
* test: disable tests for net_classes.
* test: make oom and security tests more stable
* stream: return error if inode of fd changed
* stream: return error if client process changed and we try to open it's fd
[ Dmitry Yakunin ]
* property: fix error message
[ Alexander Kuznetsov ]
* core: disable write access to portod core container
* portotop: add containers filter
* ci: recreate pbuilder focal layer
* porto: link portoctl and portoctl-top with pthread
[ amich ]
* container: report invalid state name on kill
[ Alexander Kuznetsov ]
* porto: add cgroupfs property
* portoctl: fix ip='veth auto'
* filesystem: chmod cgroupfs with 777 if cgroupfs=rw Signed-off-by: Alexander Kuznetsov [email protected] Link: https://st.yandex-team.ru/PORTO-870
[ Dmitry Yakunin ]
* build: remove pedantic flag, treat warnings as errors, fix all warnings
* cred: use common mapping for userns
* property: add userns
[ Alexander Kuznetsov ]
* porto: add extra_properties option to config
[ Dmitry Yakunin ]
-- Dmitry Yakunin <[email protected]> Thu, 01 Jul 2021 18:09:18 +0300
yandex-porto (5.0.28) unstable; urgency=low
[ Alexander Kuznetsov ]
* test: make security and net-sched more stable
* stream: check client start time in OpenOutside to prevent pid reusing
* porto: check that inode of std stream do not changed between set and start container
* test: make tests more stable
* porto: add owner_containers property
[ Dmitry Yakunin ]
-- Dmitry Yakunin <[email protected]> Wed, 09 Jun 2021 17:23:57 +0300
yandex-porto (5.0.27) unstable; urgency=low
[ Alexander Kuznetsov ]
* network: copy shared ptr of HostNetwork when update host network stats
[ Oleg Senin ]
* test-net-sched: add test for RetransSegs
[ Alexander Kuznetsov ]
* porto: store more logs
* client: not root user that non-matching owner can not manipulate containers even if client is member of "<client username>-containers" groups
* client: not root user that non-matching owner can not manipulate containers even if client is member of "porto-containers" groups
* network: do not store HostPeerIndex. Use link index from veth device for setup rx limits
[ Maxim Samoylov ]
* porto: fix some portability issues
[ Alexander Kuznetsov ]
* stream: add more logs at error in OpenOutside. Temporarily make an error not strict
[ Dmitry Yakunin ]
-- Dmitry Yakunin <[email protected]> Mon, 07 Jun 2021 13:13:00 +0300
yandex-porto (5.0.26) unstable; urgency=low
[ Dmitry Yakunin ]
* fix porto.md
[ Alexander Kuznetsov ]
* ci: split tests into 8 parts
* portotop: add options to show only cpu/memory/net/io/porto stat columns
* task: do not close porto socket pair on configure child
[ Oleg Senin ]
* network: add stats from /proc/net/snmp
[ Dmitry Yakunin ]
-- Dmitry Yakunin <[email protected]> Thu, 27 May 2021 10:16:16 +0300
yandex-porto (5.0.25) unstable; urgency=low
[ Alexander Kuznetsov ]
* man: add extra_routes
[ Dmitry Yakunin ]
* debian: service: set TimeoutStartSec to 360
[ Alexander Kuznetsov ]
* network: fix net_rx_limit to work on running container
* porto: resolve client container by cgroup v2 if enabled
* porto: do not Identify Client on request. Identify once at connecting
* test: split tests into 4 parts
* task: do not Abort on error in ConfigureChild
* porto: close unused fds before open std streams inside
* porto: identify client by pid and inode of /proc/pid
[ Dmitry Yakunin ]
-- Dmitry Yakunin <[email protected]> Fri, 21 May 2021 13:12:53 +0300
yandex-porto (5.0.24) unstable; urgency=low
[ Alexander Kuznetsov ]
* porto: join into parent user ns on start
* porto: do not disconnect clients on request processing on upgrade/reload
* porto: fix some compiller warnings
* porto: kill imports after timeout on reload
[ Dmitry Yakunin ]
-- Dmitry Yakunin <[email protected]> Wed, 12 May 2021 00:21:04 +0300
yandex-porto (5.0.23) unstable; urgency=low
[ Alexander Kuznetsov ]
* quota: set FS_XFLAG_PROJINHERIT only for dirs
[ Dmitry Yakunin ]
-- Dmitry Yakunin <[email protected]> Fri, 23 Apr 2021 18:31:35 +0300
yandex-porto (5.0.22) unstable; urgency=low
[ Dmitry Yakunin ]
* release: add pypi target
[ Anton Suvorov ]
* do not reload portod if running under hostmanager
[ Dmitry Yakunin ]
-- Dmitry Yakunin <[email protected]> Wed, 21 Apr 2021 17:49:00 +0300
yandex-porto (5.0.21) unstable; urgency=low
[ Alexander Kuznetsov ]
* porto: do not remove CAP_NET_ADMIN in chroot if ip_limit is set
[ Dmitry Yakunin ]
-- Dmitry Yakunin <[email protected]> Fri, 16 Apr 2021 11:54:18 +0300
yandex-porto (5.0.20) unstable; urgency=low
[ Alexander Kuznetsov ]
* volume: do not ignore mkdir error on LinkVolume
* property: fix GetProperty for virt_mode=fuse
* ci: take more cores and ram in sandbox tasks for tests
[ Nikita Vetoshkin ]
* minor: fix misprint in error message
[ Alexander Kuznetsov ]
* porto: fix vulnerability and add test do not use wildcards on exports
[ Dmitry Yakunin ]
-- Dmitry Yakunin <[email protected]> Mon, 12 Apr 2021 13:20:22 +0300
yandex-porto (5.0.19) unstable; urgency=low
* UNRELEASED
-- Dmitry Yakunin <[email protected]> Fri, 02 Apr 2021 17:22:42 +0300
yandex-porto (5.0.18) unstable; urgency=low
* UNRELEASED
-- Dmitry Yakunin <[email protected]> Fri, 02 Apr 2021 17:22:34 +0300
yandex-porto (5.0.17) unstable; urgency=low
[ Alexander Kuznetsov ]
* client: print info for read only connections
* network: not allow '..' in net namespace path
* filesystem: leave to host mount ns, if cannot chdir in container ns
* container: add test for cpuset.mems and fix bug
* porto: default devices='/dev/fuse rw' for virt_mode=fuse
* porto: print /proc/pid/status and /proc/pid/stack for busy tasks if we cannot remove cgroups
* error: more errors for ImportLayer with verbose=true. show PortodUpgraded error if porto upgraded on request if EnablePortodShutdownError for client == true
* test: add timeouts for tests
* string: fix typo. int must be double
* network: set rx limit for mtn as tx limit on host peer
[ Dmitry Yakunin ]
-- Dmitry Yakunin <[email protected]> Fri, 02 Apr 2021 17:22:28 +0300
yandex-porto (5.0.16) unstable; urgency=low
[ Alexander Kuznetsov ]
* ci: build porto on branch for all platforms
* fix: at the start, we could change global errno when changing the local errno
[ Dmitry Yakunin ]
-- Dmitry Yakunin <[email protected]> Wed, 03 Mar 2021 11:05:27 +0300
yandex-porto (5.0.15) unstable; urgency=low
[ Alexander Kuznetsov ]
* ci: fix build for precise
* task: start task in user namespace with direct mapping if userns_mode equal true
[ Dmitry Yakunin ]
-- Dmitry Yakunin <[email protected]> Tue, 02 Mar 2021 18:59:31 +0300
yandex-porto (5.0.14) unstable; urgency=low
[ Alexander Kuznetsov ]
* test: wait oom-s for more time
* stream: do not block when open fifo pipe for read
* task: add more logs at container start. Add stat for start timeouts
* portoctl: add more randomness to ip = auto
* statistics: reset porto_stats on portod clearstat [stat]
[ Dmitry Yakunin ]
-- Dmitry Yakunin <[email protected]> Wed, 24 Feb 2021 15:39:58 +0300
yandex-porto (5.0.13) unstable; urgency=low
[ Alexander Kuznetsov ]
* cgroups: remove backward compatibility for perf_event cgroup
* container: do not load cgroup2 and perf_event controllers for virt_mode=job container
* Commit af911e87ac2871478417ddab7ebdf05dbf2c9922 upstream Commit af14b341c6ec73c3b5faefb567ffcbe1aa021870 upstream
[ Dmitry Yakunin ]
-- Dmitry Yakunin <[email protected]> Fri, 29 Jan 2021 10:59:43 +0300
yandex-porto (5.0.12) unstable; urgency=low
[ Alexander Kuznetsov ]
* property: check that Net is not nullptr before use
[ Roman Anufriev ]
* python_api: pass container instead of path to _ListVolumes from ListVolumes
[ Alexander Kuznetsov ]
* portoctl: enable ip='dev auto [prj_id] for net='L3 ...'
* rpc: change max_respawns in spec from uint64 to int64
* spec: return error in TContaner when we can not lock it or can not find
[ Dmitry Yakunin ]
-- Dmitry Yakunin <[email protected]> Wed, 27 Jan 2021 12:52:56 +0300
yandex-porto (5.0.11) unstable; urgency=low
[ Alexander Kuznetsov ]
* spec: do not pass error on creating container test: check fatals after tests
* test: split tests into 8 parts
* spec: lock container before undo in CreateFromSpec, lock container before Dump in ListContainersBy,
* ci: update tarball resources test: split tests into 8 parts
* ci: use pbuilder tarballs with installed packages for build porto
* filesystem: mount /sys/fs/cgroup/systemd if cgroupns enabled and container without cap_sys_admin
* volumes: make critical section smaller on creating volume
[ Dmitry Yakunin ]
-- Dmitry Yakunin <[email protected]> Wed, 13 Jan 2021 19:22:24 +0300
yandex-porto (5.0.10) unstable; urgency=low
[ Alexander Kuznetsov ]
* ci: update pbuilder tarballs
* ci: use base tarballs with TTL=INF
* ci: increase memory for test task
* network: pass ESRCH on getting container sockets
* test: change the division of tests
* test: remove empty tests
* porto: do not remove /run/portod.stat
* porto: add statistics for time of lock operations
* network: add extra_routes option for net=L3
[ Dmitry Yakunin ]
-- Dmitry Yakunin <[email protected]> Wed, 16 Dec 2020 19:03:52 +0300
yandex-porto (5.0.9) unstable; urgency=low
[ Dmitry Yakunin ]
* build: add actual release-porto script
[ Alexander Kuznetsov ]
* portoctl: add portoctl enter command, for start shell in container with virt_mode=job
* tests: enable skipped tests
* network: fix segfault on updating netstat stats
* ci: enable testing on xenial-5.4 env test: build porto kernel module only in fuzzer test
[ Dmitry Yakunin ]
-- Dmitry Yakunin <[email protected]> Wed, 09 Dec 2020 17:39:22 +0300
yandex-porto (5.0.8) unstable; urgency=low
[ Alexander Kuznetsov ]
* porto: enter cgroup namespace only if EnableCgroupNs=true
* test: change the division of tests
* test: split net-sched test into 2 parts
* test: make tests more stable
* ci: build porto in pbuilder_build_deb_package sandbox task
* porto: fix porto stat
* network: add statistics from /proc/net/netstat
* test: make 2 attempts on test in test-parts
* property: add cpu_limit/guarantee_bound
[ Dmitry Yakunin ]
-- Dmitry Yakunin <[email protected]> Tue, 01 Dec 2020 15:14:43 +0300
yandex-porto (5.0.7) unstable; urgency=low
[ Alexander Kuznetsov ]
* portoctl: add option for drop cap_sys_admin for base container in 'portoctl build' task
* porto: add virt_mode=docker for run docker daemon in porto container
-- max7255 <max7255@max7255-nix> Fri, 13 Nov 2020 15:20:24 +0300
yandex-porto (5.0.6) unstable; urgency=low
[ Alexander Kuznetsov ]
* container: save and load creation time in kv storage
* test: split tests into 8 parts
* test: fix parts test
* test: restart porto before test
* test: sleep 1 second after start command and before usage tests
* property: print salt and md5sum for env_secret
* test: fix flaky tests
* logrotate: store more logs
* test: encode string before hashing
-- max7255 <max7255@max7255-nix> Thu, 05 Nov 2020 19:36:03 +0300
yandex-porto (5.0.5) unstable; urgency=low
[ Alexander Kuznetsov ]
* ci: fix sandbox task
* porto: take args in thread factory by values
* porto: add statistics for fatal signals
* portod: fix portod dump
* network: catch drops/Overruns stat from qdisc
-- max7255 <max7255@max7255-nix> Wed, 30 Sep 2020 13:35:53 +0300
yandex-porto (5.0.4) unstable; urgency=low
[ Alexander Kuznetsov ]
* porto: flag for setting volume auto path as root or cwd in CreateFromSpec
* porto: add statistics for top time of currently running requests
* spec: dont link created volume with container by default in CreateFromSpec
* portotop: fix bug on scrolling
* man: Add space_limit_mb and slot_space_limit_mb description clarification
* porto: non strict finding client container when enabled cgroup namespaces
* porto: add libnl-idiag, pandoc for building