Release 1.1.0

[kolyshkin]

Release milestone: https://github.com/opencontainers/runc/milestone/12.

For proposed changelog, see #3320

[AkihiroSuda]

Proposed release date: Sep 13 2021 (which is dangerously close).

I think we should release RC1 by Sep 13, and GA by the end of the month.

[cyphar]

For the record, the milestone date isn't set in stone -- I set them based on a ~3 month release timeline. We can delay it if there's critical stuff we want to get in (or we can remove things from the 1.1 milestone that can wait).

[kolyshkin]

I agree with @AkihiroSuda -- let's try to merge most PRs we want to merge and have an rc1 out by Sep 13.

[cyphar]

I've reviewed and merged the smaller ones. #2576 and #3131 are the two big ones that I'll need to take a long look at. #3068 seems to be still waiting on rhatdan's opinion on the naming of the option (I threw in my 2c for what it's worth).

[kolyshkin]

OK, we only have 3 PRs left, and I hope we can do an 1.1.0-rc1 this week.

• Open bind mount sources from the host userns #2576
• run create/run/exec: refuse bad cgroup #3223
• runc exec --cgroup #3059

[kolyshkin]

OK, only two PRs left, each with a single LGTM

• Open bind mount sources from the host userns #2576
• run create/run/exec: refuse bad cgroup #3223 (changed to warn not error on non-empty cgroup)

PTAL @opencontainers/runc-maintainers 🙏🏻

[cyphar]

• Support recursive mount attrs ("rro", "rnosuid", "rnodev", ...) #3272
• release: correctly handle binary signing for "make releaseall" #3309

Is all we need, both with a single LGTM. I will set up the 1.1-rc1 PR after they're merged.

[kolyshkin]

Assembled a changelog based on PRs with 1.1 milestone

[cyphar]

@kolyshkin Did you want me to take anything from this changelog into #3320?

[kolyshkin]

@kolyshkin Did you want me to take anything from this changelog into #3320?

Nope; I have already cross-checked it against #3320 and left some suggestions, so this one is now obsoleted; I'll remove it.

[cyphar]

Great, thanks. Will send the 1.1-rc1 PR in a little bit.

[kolyshkin]

OK I am testing this in kubernetes and cadvisor.

• deps: update runc to 1.1.0-rc.1 google/cadvisor#3031
• [WIP] update runc to 1.1.0-rc.1 kubernetes/kubernetes#107016

In particular, it seems that changes to cgroups start to pay off, I was able to simplify some of the kubelet/cm code.

[thaJeztah]

(binary-only) updates in containerd and moby:

• update runc to v1.1.0 moby/moby#43083
• update runc to v1.1.0 containerd/containerd#6375

[kolyshkin]

Also cri-o:

• deps: bump runc/libcontainer 1.0.3 -> 1.1.2 cri-o/cri-o#5506