github.com/opencontainers/runtime-tools@v0.9.0/CHANGELOG.md (about) 1 # v0.9.0 2 3 ## Additions 4 * Windows: Typos and incorrect defaults (#683). 5 * validation: Add apparmor profile test(#684). 6 * generate: add oci-version option (#681). 7 * validation: Add SELinux Check (#682). 8 * generate: add process-cap-add and process-cap-drop option (#675). 9 * generate: Add generate option (#672). 10 * Initialize Config Windows Network for Windows Namespace (#666). 11 12 ## Minor fixes and documentation 13 * validation-tests: fix several tests (#687). 14 * adding security and CoC links (#686). 15 * Simplified code (#685). 16 * Godeps: update hashicorp/go-multierror (#678). 17 * fix up vm parameters (#676). 18 * generate: fix capabilities add/drop option (#674). 19 * update to golang 1.11 (#670). 20 21 22 # v0.8.0 23 24 ## Additions 25 * generate: Add generate.New support for Windows (#667). 26 * validation: add resource validation after delete (#654). 27 * mountinfo: parse empty strings in source (#652). 28 29 ## Minor fixes and documentation 30 * readme: fix wrong filepath (#665). 31 * Makefile: add generate to gotest (#656). 32 * MAINTAINERS: remove philips (#659). 33 * Vendor in windows runtime-spec changes (#663). 34 * /proc should be mounted with nosuid, noexec, nodev to match the host (#664). 35 * validation: mounts: fix condition of source & type check (#660). 36 * Fix TAP output with multiple RuntimeInsideValidate (#658). 37 * fix some misspells (#649). 38 39 40 # v0.7.0 41 ## Additions 42 43 * validation: use t.Fail when checking for main test errors (#645). 44 * travis: add go 1.10 (#647). 45 * validation: add more test cases for read-only paths tests (#644). 46 * validation: add more test cases for masked paths tests (#643). 47 * validation: test cgroups with different input values (#637). 48 * validation: add more test cases for private & slave propagations (#650). 49 * runtimetest: correctly check for a readable directory (#625). 50 * validation: add minor checks for ptmx and kill signal (#642). 51 * validation: add a new test for NSPathMatchTypeError (#636). 52 * validation: add test for NSProcInPath (#628). 53 * validation: test validation test with an empty hostname (#640). 54 * validation: add cgroup devices validation (#633). 55 * check the status of the state passed to hooks over stdin (#608). 56 * validation: fix nil deferences in cpu & blkio cgroups tests (#638). 57 58 ## Minor fixes and documentation 59 60 * validation: fix nil dereference when handling multierror in hooks_stdin (#641). 61 * fix generate test in calling generate.New (#648). 62 * README: fix broken links to documentation (#646). 63 * validation/kill_no_effect: fix bug(#635). 64 65 66 # v0.6.0 67 68 ## Additions 69 70 * add test case for KillNonCreateRunHaveNoEffect (#607). 71 * Add cgroupsPath validation (#631). 72 * validation: create: don't skip errors on state (#626). 73 * validation: add tests for NSNewNSWithoutPath & NSInheritWithoutType (#620). 74 * specerror: Add NewRFCError and NewRFCErrorOrPanic (#627). 75 * implement specerror (#604, #602, #591, #587, #580, #583, #584, #586). 76 * generate: Move Generator.spec to Generator.Config (#266). 77 * Respect the host platform (#194). 78 * runtimetest: Make TAP output more granular (#308). 79 * generate: add process-username option and fix it's validation (#614). 80 * validation: add process_user validation (#611). 81 * add hooks stdin test (#589). 82 * runtimetest: count correctly TAP tests (#594). 83 * contrib/rootfs-builder: Support timestamps and xz compression (#598). 84 * Add system validation (#592). 85 * validation: run CLI with correct argument order (#600). 86 * validation: Add system validation (#590). 87 * validate: CheckLinux is platform dependent (#560). 88 * validation: Add error judgment to SetConfig (#585). 89 * validate: allow non-linux compatibility (#588). 90 91 ## Minor fixes and documentation 92 93 * cgroups_v1: Correction parameters (#629). 94 * travis: fix fetch issue of golint (#630). 95 * validation: add more values for rlimits test (#623). 96 * doc: add developer guidelines (#621). 97 * bash: add os (#622). 98 * docs/command-line-interface: Require complete runtime coverage (#615). 99 * validation/test-yaml: Drop this local experiment (#616). 100 * validation: LinuxUIDMapping: fix tests (#597). 101 * Fix error messages in validation cgroup tests (#605). 102 * contrib/rootfs-builder: Use $(cat rootfs-files) (#606). 103 * validate: mv deviceValid to validate_linux (#603). 104 * Validate_linux: Modify the returned error (#601). 105 * runtimetest: fix root readonly check (#599). 106 * runtimetest: fix uid_map parsing (#596). 107 * Fix condition in BlockIO test (#595). 108 * generate/seccomp: platform independent values (#561). 109 110 # v0.5.0 111 ## Additions 112 113 * validation: add tests when prestart/poststart/poststop hooks fail (#569). 114 * validate_test: add TestCheckMandatoryFields (#554). 115 * validation: add lifecycle validation (#558). 116 * validation: add 'state' test; using WaitingForStatus in insideValidation (#562). 117 * Relax LGTM requirement (#559, #566). 118 * validation: Fixes #556 (#557). 119 120 ## Minor fixes and documentation 121 122 * validate_test: Complement test (#568). 123 * man: Modify the legal value of the rootfs-propagation (#548). 124 * generate: don't overwrite hook which has a same path (#571). 125 * validation: nil config support in lifecycle validate (#567). 126 * runtimetest: cmd/runtimetest/main: Run validateDefaultDevices even with process unset (#553). 127 * validation: Remove runc 'create' exit timing crutches (#563). 128 * validation/util/container: Use ExitError for stderr (#564). 129 130 # v0.4.0 131 132 ## Additions 133 134 * specerror: Redefine error code as int64 (#501). 135 * validate: Improve the test of the configuration file (#504, #534, #537, #541). 136 * runtimetest: Add rootfs propagation test (#511). 137 * runtimetest: Add posixValidations (#510). 138 * runtimetest: Add host platform validation (#507). 139 * Makefile: Add version file (#417). 140 * validation: Complete Container Inside Test (#521). 141 * generate: Support json value for hooks (#525). 142 * generate: Support adding additional mounts for container (#279). 143 * generate: Support blkio related options (#235). 144 * cmd/runtimetest/main: Use TAP diagnostics for errors (#439). 145 * generate: Add linux-intelRdt-l3CacheSchema option (#529). 146 * filepath/clean: Add Windows support (#539). 147 * validate: Add validation when host-specific is set (#495). 148 * runtimetest: Add validation of cgroups (#93). 149 * generate: Generator solaris application container configuration (#532). 150 * generate: Add interface to remove mounts. (#544). 151 * validation/linux_cgroups_*: Generate TAP output (and outside-validation cleanup) (#542). 152 * generate: Windows-specific container configuration generate (#528). 153 * runtimetest: Add validateSeccomp (#514). 154 * validation: Add mount validation (#547). 155 * ...: Transition from tap Diagnostic(...) to YAML(...) (#533). 156 157 ## Minor fixes and documentation 158 159 * runtimetest: Fix error return (#505). 160 * runtimetest: Move validateRlimits to defaultValidations (#506). 161 * runtimetest: Make validateRlimits silent on Windows (#509). 162 * runtimetest: Raise ConfigInRootBundleDir for missing config.json (#508). 163 * generate: Change process-tty to process-terminal (#517). 164 * generate: Fixed seccompSet (#513). 165 * runtimetest: Remove debug info (#518). 166 * generate: Fix error return (#520). 167 * validate: Fix nil deference (#522). 168 * generate: Fix DropProcessCapability... (#519). 169 * runtimetest: Fix nil dereference (#523). 170 * man: Small fixs (#526). 171 * validation: Fix idmappings test (#530). 172 * generate: Solve conflicting options problem (#441). 173 * generate: Use non-null validation instead of initialization (#540). 174 * validate: Modify the non-conforming validation (#538). 175 * validate: Fix id mappings (#531). 176 * validate: Remove duplicate verification (#535). 177 * generate: AddMounts should be AddMount you are only adding a single Mount (#545). 178 * generate: Recursive propagation flags should be legal to use (#543). 179 * generate: Modify the function return value (#546). 180 * generate: Hooks should be passed in as rspec.Hook, not as a string. (#549). 181 182 # v0.3.0 183 184 ## Additions 185 186 * cmd/runtimetest: Adopt `DevicesAvailable` RFC code (#502). 187 * cmd/runtimetest: Adopt `DefaultRuntimeLinuxSymlinks`, `DefaultDevices`, 188 `LinuxProcOomScoreAdjSet`, `MountsInOrder`, `SpecVersionInSemVer`, 189 `PosixHooksPathAbs`, `ProcCwdAbs`, `ProcArgsOneEntryRequired`, 190 `PosixProcRlimitsErrorOnDup`, `MountsDestAbs`, `MountsDestOnWindowsNotNested`, 191 `PlatformSpecConfOnWindowsSet`, `MaskedPathsAbs`, `ReadonlyPathsAbs` 192 RFC codes (#500). 193 * specerror: Turn all the RFC 2119 key words described in runtime-spec 194 to RFC codes (#498, #497, #481, #458). 195 * specerror: Add SplitLevel helper, Implement `--compliance-level` (#492). 196 * generate: generate smoke test (#491). 197 * travis: Add go 1.9 version (#487). 198 * rootfs-{arch}.tar.gz: Add per-arch tarballs (#479). 199 * generate: Add `--linux-device-cgroup-add` and 200 `--linux-device-cgroup-remove` (#446). 201 * filepath: Add a stand-alone package for explicit-OS path logic (#445). 202 203 ## Minor fixes and documentation 204 205 * cmd/runtimetest: Fix nil reference (#494). 206 * man: Fix typo (#493). 207 * generate: Correct rootfs default, allow unset "type" fields 208 in resource devices whitelist (#491). 209 * validate: Fix compile issue (#490). 210 * bash: Fix command (#489). 211 * validate: Fix cap valiadtion (#488). 212 * generate: Fix rootfs-propagation (#484). 213 214 # v0.2.0 215 216 ## Additions 217 218 * cmd/oci-runtime-tool/generate: Add specific cap-add and -drop 219 commands (#358). 220 * validate: Ensure `root.path` is a GUID on non-Hyper-V Windows 221 (#472). 222 * validate: Check `process.rlimits[].type` on Solaris (#461, #480). 223 * validate: Check configuration against JSON Schema (#197, #473, #474, 224 #475, #476). 225 226 ## Minor fixes and documentation 227 228 * validate: Avoid "0 errors occurred" failure (#462). 229 * validate: Remove empty string from valid seccomp actions (#468). 230 * validate: Require 0 or unset `major`/`minor` when 231 `linux.devices[].type` is `p` (#460). 232 * generate: Fix cap add/drop and initialize in privileged mode (#464). 233 * generate: Do not validate caps when being dropped (#466, #469, 234 #472). 235 * completions/bash/oci-runtime-tool: Fix broken cap completion (#467). 236 * rootfs.tar.gz: Bump to BusyBox 1.25.1 (#478)