v2.1.2

Features

• add log-global-size-max option to limit the total output conmon processes. This is needed to fix CVE-2022-1708. See GHSA-fcm2-6c3h-pg6j for more details

v2.1.1

Bug fixes

• journald: print tag and name if both are specified

Misc

• drop some logs to debug level

v2.1.0

Bug Fixes

• logging: buffer partial messages to journald
• exit: close all fds >= 3
• fix: cgroup: Free memory_cgroup_file_path if open fails. Call g_free instead of free.
• Make libdl optional in meson definition

v2.0.32

Bug Fixes

• Avoid mainfd_std{in,out} sharing the same file descriptor.
• exit_command: unset subreaper attribute before running exit command

v2.0.31

Bug Fixes

• conmon: free userdata files before exec cleanup
• conmon: free userdata files before exec cleanup

Features

• logging: new mode -l passthrough
• ctr_logs: use container name or ID as SYSLOG_IDENTIFIER for journald

v2.0.30

Bug fixes

• Remove unreachable code path
• exit: report if the exit command was killed
• exit: fix race zombie reaper
• conn_sock: allow watchdog messages through the notify socket proxy
• seccomp: add support for seccomp notify

Misc

• Add seccomp to build dependency

v2.0.29

Bug Fixes

• Reset OOM score back to 0 for container runtime
• call functions registered with atexit on SIGTERM

v2.0.28

Bug Fixes

• conn_sock: fix potential segfault

Misc

• add tests running a runtime
• Add Podman integration test GitHub action

v2.0.27

Bug Fixes

close_fds: fix close of external fds
exec: don't fail on EBADFD

Misc

Add arm64 static build binary
Add CRI-O integration test GitHub action

v2.0.26

Bug fixes

conn_sock: do not fail on EAGAIN