Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Update
runc
to 1.1.13 to pick up build support for Go 1.22.4+, in order to ensure we've resolved errors cloning processes into Linux namespaces for libcontainer (exec
driver) with new versions of Go and older but still supported versions of glibc.This changeset has two minor quirks:
Testing shows that the reported issues is already resolved on
main
by upgrading to Go 1.22.4 without this dependency bump, at least for glibc 2.31. Upgrading the dependency should make sure there isn't another glibc version where the problem will still appear.This version of
runc
refers to fields incilium/ebpf
which are not present in more recent versions of that library. So in order to build, we have to downgradecilium/ebpf
. Fortunately,runc
is the only consumer of that transitive dependency.Closes: #20212
Ref: https://hashicorp.atlassian.net/browse/NET-10078