Skip to content

[pull] main from containerd:main - #307

Open
pull[bot] wants to merge 1325 commits into
fahedouch:mainfrom
containerd:main
Open

[pull] main from containerd:main#307
pull[bot] wants to merge 1325 commits into
fahedouch:mainfrom
containerd:main

Conversation

@pull

@pull pull Bot commented May 10, 2025

Copy link
Copy Markdown

See Commits and Changes for more details.


Created by pull[bot] (v2.0.0-alpha.1)

Can you help keep this open source service alive? 💖 Please sponsor : )

@pull pull Bot added the ⤵️ pull label May 10, 2025
ChengyuZhu6 and others added 29 commits June 15, 2026 10:14
…ys-817d534481

build(deps): bump github.com/moby/sys/mount from 0.3.4 to 0.3.5 in the moby-sys group across 1 directory
fix(convertor): add overlaybd vsize option
fix: show Pid as `0` for stopped containers in `nerdctl container ins…
…iner inspect

Currently, when running `nerdctl container inspect` on a stopped
container, the following warning message is shown:

```bash
> sudo nerdctl ps -a --filter=name=nginx
CONTAINER ID    IMAGE                             COMMAND                   CREATED         STATUS                      PORTS    NAMES
4ce4cb9b1ed1    docker.io/library/nginx:latest    "/docker-entrypoint.…"    14 hours ago    Exited (0) 8 seconds ago             nginx

> sudo nerdctl container inspect nginx
WARN[0000] failed to inspect NetNS                       error="failed to Statfs \"/proc/1548927/ns/net\": no such file or directory" id=4ce4cb9b1ed12f65b02e0f4af8a753d0e9ad1d42d5b77dac206c396021d90ab0
...
```

This warning occurs because `/proc/<PID>/ns/net` is referenced using a
stale PID, but the process for a stopped container has already been
released.

`/proc/<PID>/ns/net` should not be referenced when the container is
stopped.

Therefore, this commit suppresses the warning message above when running
`nerdctl container inspect` on a stopped container.

Signed-off-by: Hayato Kiwata <dev@haytok.jp>
…d-container

fix: suppress warning message on a stopped container in nerdctl conta…
Bumps [github.com/pelletier/go-toml/v2](https://github.com/pelletier/go-toml) from 2.3.1 to 2.4.0.
- [Release notes](https://github.com/pelletier/go-toml/releases)
- [Commits](pelletier/go-toml@v2.3.1...v2.4.0)

---
updated-dependencies:
- dependency-name: github.com/pelletier/go-toml/v2
  dependency-version: 2.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
…etworks

fix(network): allow inspecting pseudo networks
Signed-off-by: immanuwell <pchpr.00@list.ru>
Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.3 to 7.0.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@df4cb1c...9c091bb)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [github.com/cyphar/filepath-securejoin](https://github.com/cyphar/filepath-securejoin) from 0.6.1 to 0.7.0.
- [Release notes](https://github.com/cyphar/filepath-securejoin/releases)
- [Changelog](https://github.com/cyphar/filepath-securejoin/blob/main/CHANGELOG.md)
- [Commits](cyphar/filepath-securejoin@v0.6.1...v0.7.0)

---
updated-dependencies:
- dependency-name: github.com/cyphar/filepath-securejoin
  dependency-version: 0.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps the docker group with 3 updates in the / directory: [github.com/docker/cli](https://github.com/docker/cli), [github.com/moby/moby/client](https://github.com/moby/moby) and [github.com/moby/moby/v2](https://github.com/moby/moby).


Updates `github.com/docker/cli` from 29.5.3+incompatible to 29.6.0+incompatible
- [Commits](docker/cli@v29.5.3...v29.6.0)

Updates `github.com/moby/moby/client` from 0.4.1 to 0.5.0
- [Release notes](https://github.com/moby/moby/releases)
- [Changelog](https://github.com/moby/moby/blob/v0.5.0/CHANGELOG.md)
- [Commits](moby/moby@v0.4.1...v0.5.0)

Updates `github.com/moby/moby/v2` from 2.0.0-beta.16 to 2.0.0-beta.18
- [Release notes](https://github.com/moby/moby/releases)
- [Commits](moby/moby@v2.0.0-beta.16...v2.0.0-beta.18)

---
updated-dependencies:
- dependency-name: github.com/docker/cli
  dependency-version: 29.6.0+incompatible
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: docker
- dependency-name: github.com/moby/moby/client
  dependency-version: 0.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: docker
- dependency-name: github.com/moby/moby/v2
  dependency-version: 2.0.0-beta.18
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: docker
...

Signed-off-by: dependabot[bot] <support@github.com>
…tions/checkout-7.0.0

build(deps): bump actions/checkout from 6.0.3 to 7.0.0
….com/cyphar/filepath-securejoin-0.7.0

build(deps): bump github.com/cyphar/filepath-securejoin from 0.6.1 to 0.7.0
…-9f8b0aae82

build(deps): bump the docker group across 1 directory with 3 updates
….com/pelletier/go-toml/v2-2.4.0

build(deps): bump github.com/pelletier/go-toml/v2 from 2.3.1 to 2.4.0
fix: remove duplicated defaults from help output
Failing since the release of go1.27rc1

```
level=warning msg="[runner] Can't run linter goanalysis_metalinter: inspect: failed to load package context: could not load export data: internal error in importing \"context\" (cannot decode \"context\", export data version 4 is greater than maximum supported version 2); please report an issue"
level=error msg="Running error: can't run linter goanalysis_metalinter\ninspect: failed to load package context: could not load export data: internal error in importing \"context\" (cannot decode \"context\", export data version 4 is greater than maximum supported version 2); please report an issue"
make[1]: *** [Makefile:142: lint-go] Error 3
make[1]: Leaving directory '/home/runner/work/nerdctl/nerdctl'
make: *** [Makefile:148: lint-go-all] Error 2
```

Workaround for issue 4979

Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
These tests have been failing on Docker since ubuntu-24.04 image 20260615.205.1.

Workaround for issue 4978

Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
CI: docker: skip TestRunSeccompCapSysPtrace and TestUpdateRestartPolicy
Workaround for issue 4838

Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
Bumps [github.com/containerd/containerd/v2](https://github.com/containerd/containerd) from 2.3.1 to 2.3.2.
- [Release notes](https://github.com/containerd/containerd/releases)
- [Changelog](https://github.com/containerd/containerd/blob/main/RELEASES.md)
- [Commits](containerd/containerd@v2.3.1...v2.3.2)

---
updated-dependencies:
- dependency-name: github.com/containerd/containerd/v2
  dependency-version: 2.3.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
…laky

tests: mark TestIPFSAddrWithKubo flaky
….com/containerd/containerd/v2-2.3.2

build(deps): bump github.com/containerd/containerd/v2 from 2.3.1 to 2.3.2
update containerd (2.3.2)
Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
AkihiroSuda and others added 30 commits July 29, 2026 17:28
….golang.org/grpc-1.82.1

build(deps): bump google.golang.org/grpc from 1.82.0 to 1.82.1
Bumps [docker/login-action](https://github.com/docker/login-action) from 4.5.1 to 4.6.0.
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](docker/login-action@abd2ef4...dbcb813)

---
updated-dependencies:
- dependency-name: docker/login-action
  dependency-version: 4.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps the docker group with 2 updates in the / directory: [github.com/moby/moby/client](https://github.com/moby/moby) and [github.com/moby/moby/v2](https://github.com/moby/moby).


Updates `github.com/moby/moby/client` from 0.5.0 to 0.5.1
- [Release notes](https://github.com/moby/moby/releases)
- [Changelog](https://github.com/moby/moby/blob/v0.5.1/CHANGELOG.md)
- [Commits](moby/moby@v0.5.0...v0.5.1)

Updates `github.com/moby/moby/v2` from 2.0.0-beta.18 to 2.0.0-beta.19
- [Release notes](https://github.com/moby/moby/releases)
- [Commits](moby/moby@v2.0.0-beta.18...v2.0.0-beta.19)

---
updated-dependencies:
- dependency-name: github.com/moby/moby/client
  dependency-version: 0.5.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: docker
- dependency-name: github.com/moby/moby/v2
  dependency-version: 2.0.0-beta.19
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: docker
...

Signed-off-by: dependabot[bot] <support@github.com>
…l.in/yaml/v3-3.0.5

build(deps): bump go.yaml.in/yaml/v3 from 3.0.4 to 3.0.5
…test-to-tigron

test: convert compose run linux test to Tigron framework
…-91d47db486

build(deps): bump the docker group across 1 directory with 2 updates
Bumps [github.com/docker/go-connections](https://github.com/docker/go-connections) from 0.8.0 to 0.8.1.
- [Commits](docker/go-connections@v0.8.0...v0.8.1)

---
updated-dependencies:
- dependency-name: github.com/docker/go-connections
  dependency-version: 0.8.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
`nerdctl image ls myapp`, where myapp is a bare repository name (no tag
or digest), returned nothing unless myapp happened to have a `:latest`
tag - unlike `docker image ls myapp`, which lists every tag of the
repository.

referenceutil.Parse normalizes a bare repository name by unconditionally
applying distribution/reference's TagNameOnly, which appends an implicit
":latest" tag. listOptions then built an exact-match filter from that
normalized reference (`name==docker.io/library/myapp:latest`), so any
image tagged anything other than "latest" was silently excluded.

Extract the filter-construction logic into a small nameFilterFor helper.
When the argument named an explicit tag or digest, keep matching it
exactly. When it was a bare repository name, build a
`name~=^<repo>:` regex filter instead (escaping the repository name with
regexp.QuoteMeta), so it matches any tag under that repository. This
mirrors the `~=` regex-filter pattern already used elsewhere in the
codebase for similar purposes, e.g. pkg/idutil/imagewalker/imagewalker.go
and pkg/idutil/containerwalker/containerwalker.go.

Added TestNameFilterFor covering a bare repository name (now matches any
tag), an explicit tag, an explicit ":latest" tag, a digest, and a bare
name with a domain that needs regex-escaping. Verified this test fails
without the fix, reproducing the exact reported behaviour
(name==docker.io/library/myapp:latest instead of a repo-wide match).

Fixes #5113

Signed-off-by: ankit090701 <ankitanku090701@gmail.com>
…cker/login-action-4.6.0

build(deps): bump docker/login-action from 4.5.1 to 4.6.0
fix: suppress spurious hostsstore NotFound warning on container removal
….com/docker/go-connections-0.8.1

build(deps): bump github.com/docker/go-connections from 0.8.0 to 0.8.1
feat(network): support --aux-address on network create
…-matches-all-tags

fix: image ls with a bare repository name should match all tags
pkg/identifiers had no test coverage, though ValidateDockerCompat gates
container, volume, and network names across the codebase. Add table-driven
tests for the accepted charset, the Docker-compatible two-character minimum,
leading-separator and invalid-character rejection, and the empty case,
asserting both the message and the wrapped errdefs.ErrInvalidArgument.

Signed-off-by: Nikolaus Schuetz <nikolauspschuetz@gmail.com>
…atedockercompat

pkg/identifiers: add tests for ValidateDockerCompat
events: rename Status field to Action to match Docker v29
Signed-off-by: ningmingxiao <ning.mingxiao@zte.com.cn>
Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
Signed-off-by: ningmingxiao <ning.mingxiao@zte.com.cn>
Make the default `nerdctl images` output match Docker v29: a collapsed
view with IMAGE, ID, DISK USAGE, CONTENT SIZE and EXTRA columns, an
"In Use" (U) indicator, and <untagged> for dangling images.
Multi-platform images are collapsed into a single row with aggregated
disk and content size. Like Docker, the "In Use" legend is only printed
when the output is a terminal, so piped and redirected output stays
clean, and rows are ordered by image reference with untagged images
last rather than by creation time.

In-use is resolved by image target digest, the way Docker matches
containers to images, so every reference to a used target is flagged,
not only the one the container was created from.

The new view is used only for the bare command. Passing --format,
--quiet, --no-trunc, --digests or --names falls back to the legacy table
(REPOSITORY, TAG, IMAGE ID, CREATED, PLATFORM, SIZE, BLOB SIZE), so
existing scripts and templates keep working, including their
creation-time ordering. This mirrors Docker's own shouldUseTree
fallback.

Since the default output now matches Docker, the images tests also run
against the Docker target; only the nerdctl-specific --names subtest
stays gated. Tests that assert on the default `images` output for
untagged images (image prune/remove and build-without-tag) are updated
to expect <untagged>.

The expanded per-platform `--tree` view is left for a follow-up.

Closes #5027

Signed-off-by: Eugene Kalinin <e.v.kalinin@gmail.com>
Bumps the docker group with 2 updates: [github.com/docker/cli](https://github.com/docker/cli) and [github.com/moby/moby/v2](https://github.com/moby/moby).


Updates `github.com/docker/cli` from 29.6.2+incompatible to 29.7.1+incompatible
- [Commits](docker/cli@v29.6.2...v29.7.1)

Updates `github.com/moby/moby/v2` from 2.0.0-beta.19 to 2.0.0-beta.21
- [Release notes](https://github.com/moby/moby/releases)
- [Commits](moby/moby@v2.0.0-beta.19...v2.0.0-beta.21)

---
updated-dependencies:
- dependency-name: github.com/docker/cli
  dependency-version: 29.7.1+incompatible
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: docker
- dependency-name: github.com/moby/moby/v2
  dependency-version: 2.0.0-beta.21
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: docker
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [github.com/compose-spec/compose-go/v2](https://github.com/compose-spec/compose-go) from 2.13.0 to 2.14.0.
- [Release notes](https://github.com/compose-spec/compose-go/releases)
- [Commits](compose-spec/compose-go@v2.13.0...v2.14.0)

---
updated-dependencies:
- dependency-name: github.com/compose-spec/compose-go/v2
  dependency-version: 2.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
….com/compose-spec/compose-go/v2-2.14.0

build(deps): bump github.com/compose-spec/compose-go/v2 from 2.13.0 to 2.14.0
…-195c575c6f

build(deps): bump the docker group with 2 updates
feature: support to print snapshot info for container
feat(image): adopt Docker v29 output for images list
Signed-off-by: Subota Ivan <73706465+subotac@users.noreply.github.com>
feature: support to print snapshot info for image
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.