openSUSE Recommended Update: Recommended update for Docker, RunC, Containerd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:2368-1 Rating: moderate References: #1026827 #1028113 #1028638 #1028639 #1030702 #1032287 #1032644 #1032769 #1034053 #1034063 #1037436 #1037607 #1038476 #1038493 #953182 #964546 #996303 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that has 17 recommended fixes can now be installed. Description: This update for Containerd, Docker and RunC provides several fixes and enhancements. Containerd: - Update containerd to the version needed for docker-v17.04.0-ce. (bsc#1034053) - Fix spurious messages filling journal. (bsc#1032769) - Set TasksMax=infinity to make sure runC doesn't start failing randomly. Docker: - Update to version 17.04.0-ce. (bsc#1034053) - Fix execids leaks due to bad error handling. (bsc#1037436) - Make Apparmor's pkg/aaparser work on read-only root. (bsc#1037607) - Improve Docker's systemd configuration. (bsc#1032287) - Check if the docker binary is available before attempting to use it. (bsc#1038476) - Build man pages for all architectures. (bsc#953182) - Fix DNS resolution when Docker host uses 127.0.0.1 as resolver. (bsc#1034063) - Enable Delegate=yes, since systemd will safely ignore lvalues it doesn't understand. - Update SUSE secrets patch to handle bsc#1030702. - Change lvm2 from Requires to Recommends: Docker usually uses a default storage driver, when it's not configured explicitly. This default driver then depends on the underlying system and gets chosen during installation. (bsc#1032644) - Disable libseccomp for Leap 42.1, SLE 12 and 12-SP1, because docker needs a higher version. Otherwise, we get the error "conditional filtering requires libseccomp version >= 2.2.1. (bsc#1028639, bsc#1028638) - Add a backport of fix to AppArmor lazy loading docker-exec case. - Fix systemd TasksMax default which could throttle docker. (bsc#1026827) - Enable pkcs11 For a comprehensive list of changes please refer to /usr/share/doc/packages/docker/CHANGELOG.md RunC: - Update version to the one required by docker-17.04.0-ce. (bsc#1034053) - Make sure to ignore cgroup v2 mountpoints. (bsc#1028113) golang-packaging: - Remove duplicates when finding Requires. - Set correct modifier if no arguments are provided. - Handle extra_flags for build/test correctly. This update rebuilds and updates number of golang packages with the new version of golang-packaging: - golang-bitbucket-taruti-bigendian - golang-github-cpuguy83-go-md2man - golang-github-dchest-authcookie - golang-github-docker-libnetwork - golang-github-exercism-cli - golang-github-fitstar-falcore - golang-github-golang-geo - golang-github-golang-glog - golang-github-golang-protobuf - golang-github-gorilla-context - golang-github-gorilla-websocket - golang-github-hoisie-httplib - golang-github-hoisie-mustache - golang-github-hoisie-web - golang-github-jpoirier-cpu - golang-github-kr-pty - golang-github-kr-text - golang-github-petar-gollrb - golang-github-philio-gomysql - golang-github-russross-blackfriday - golang-github-shurcool-sanitized_anchor_name - golang-googlecode-couch-go - golang-googlecode-freetype-go - golang-googlecode-goconf - golang-googlecode-mango-doc - golang-google-golangorg-appengine - golang-gopkgin-check - golang-org-x-crypto - golang-org-x-debug - golang-org-x-image - golang-org-x-net - golang-org-x-net-context - golang-org-x-net-html - golang-org-x-net-websocket - golang-org-x-sync - golang-org-x-sys - golang-org-x-text - golang-org-x-time-rate - golang-org-x-tool Some packages of this update were imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-1008=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-1008=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): appengine-0.0.0+git20150702.e335b53-6.1 colcmp-1.5.2+git20161209.47a200a-11.1 containerd-0.2.5+gitr639_422e31c-13.1 containerd-ctr-0.2.5+gitr639_422e31c-13.1 containerd-ctr-debuginfo-0.2.5+gitr639_422e31c-13.1 containerd-debuginfo-0.2.5+gitr639_422e31c-13.1 containerd-debugsource-0.2.5+gitr639_422e31c-13.1 docker-libnetwork-0.0.0+git20170119.7b2b1fe-2.1 docker-libnetwork-debuginfo-0.0.0+git20170119.7b2b1fe-2.1 exercism-2.4.0+git20170324.41427fc-3.1 go-1.7.5-27.1 go-debuginfo-1.7.5-27.1 go-debugsource-1.7.5-27.1 go-doc-1.7.5-27.1 go-md2man-1.0.6+git20160904.a65d4d2-11.1 go-tools-1.4.2+git20161212.0a14ca4-6.1 golang-bitbucket-taruti-bigendian-0.0.0+hg20130320.25.37f0ed9bf940-3.1 golang-github-cpuguy83-go-md2man-1.0.6+git20160904.a65d4d2-11.1 golang-github-dchest-authcookie-0.0.0+git20120917.fbdef6e-3.1 golang-github-docker-libnetwork-0.0.0+git20170119.7b2b1fe-2.1 golang-github-docker-libnetwork-debugsource-0.0.0+git20170119.7b2b1fe-2.1 golang-github-exercism-cli-2.4.0+git20170324.41427fc-3.1 golang-github-fitstar-falcore-0.0.0+git20161013.63e3547-3.1 golang-github-golang-glog-0.0.0+git20141105.44145f0-7.1 golang-github-golang-protobuf-0.0.0+git20170217.69b215d-5.1 golang-github-jpoirier-cpu-0.0.0+git20141224.5b5a7ea-3.1 golang-github-kr-pty-0.0.0+git20160716.ce7fa45-3.1 golang-github-kr-text-0.0.0+git20160504.7cafcd8-3.1 golang-github-petar-gollrb-0.0.0+git20130427.53be0d3-3.1 golang-github-philio-gomysql-0.0.0+git20110531.e621cd9-3.1 golang-github-russross-blackfriday-1.4.0+git20151230.c8875c0-11.1 golang-github-shurcool-sanitized_anchor_name-0.0.0+git20151027.10ef21a-11.1 golang-google-golangorg-appengine-0.0.0+git20150702.e335b53-6.1 golang-googlecode-couch-go-0.0.0+hg20120329.80177d89e264-3.1 golang-googlecode-goconf-0.0.0+hg20120508.a4db5c465ed1-3.1 golang-googlecode-mango-doc-0.0.0+hg20141127.23dea2f59f66-2.1 golang-gopkgin-check-0.0.0+git20161122.aa8c435-3.1 golang-org-x-crypto-1.5.2+git20161212.9a6f0a0-2.1 golang-org-x-image-1.0.3+git20161212.88b0132-3.1 golang-org-x-net-1.5.2+git20161213.cfae461-11.1 golang-org-x-net-context-0.0.0+git20170424.da118f7-2.1 golang-org-x-net-html-0.0.0+git20170424.da118f7-2.1 golang-org-x-net-websocket-0.0.0+git20170424.da118f7-2.1 golang-org-x-sync-0.0.0+git20161206.450f422-2.1 golang-org-x-sys-0.0.0+git20161205.478fcf5-3.1 golang-org-x-text-1.5.2+git20161209.47a200a-11.1 golang-org-x-tools-1.4.2+git20161212.0a14ca4-6.1 gotext-1.5.2+git20161209.47a200a-11.1 h2i-1.5.2+git20161213.cfae461-11.1 mango-doc-0.0.0+hg20141127.23dea2f59f66-2.1 protoc-gen-go-0.0.0+git20170217.69b215d-5.1 runc-0.1.1+gitr2947_9c2d8d1-13.2 runc-debuginfo-0.1.1+gitr2947_9c2d8d1-13.2 runc-debugsource-0.1.1+gitr2947_9c2d8d1-13.2 - openSUSE Leap 42.3 (x86_64): docker-17.04.0_ce-33.11 docker-debuginfo-17.04.0_ce-33.11 docker-debugsource-17.04.0_ce-33.11 docker-distribution-debugsource-2.6.1-8.1 docker-distribution-registry-2.6.1-8.1 docker-distribution-registry-debuginfo-2.6.1-8.1 docker-test-17.04.0_ce-33.11 docker-test-debuginfo-17.04.0_ce-33.11 golang-org-x-debug-0.0.0+git20160621.fb50892-2.1 golang-org-x-debug-debugproxy-0.0.0+git20160621.fb50892-2.1 - openSUSE Leap 42.3 (noarch): containerd-test-0.2.5+gitr639_422e31c-13.1 docker-bash-completion-17.04.0_ce-33.11 docker-zsh-completion-17.04.0_ce-33.11 golang-github-golang-geo-0.0.0+git20170112.f819552-2.1 golang-github-gorilla-context-1.1-3.1 golang-github-gorilla-websocket-0.0.0+git20170718.a69d9f6-3.1 golang-github-hoisie-httplib-0.0.0+git20120409.3cbb2f7-3.1 golang-github-hoisie-mustache-0.0.0+git20160804.6375acf-3.1 golang-github-hoisie-web-0.0.0+git20160809.a498c02-5.1 golang-googlecode-freetype-go-0.0.0+git20170609.e2365df-3.1 golang-org-x-time-rate-0.0.0+git20161028.f51c127-2.1 golang-packaging-15.0.3-11.1 runc-test-0.1.1+gitr2947_9c2d8d1-13.2 - openSUSE Leap 42.2 (i586 x86_64): appengine-0.0.0+git20150702.e335b53-3.3.1 colcmp-1.5.2+git20161209.47a200a-6.5.1 containerd-0.2.5+gitr639_422e31c-10.3.1 containerd-ctr-0.2.5+gitr639_422e31c-10.3.1 containerd-ctr-debuginfo-0.2.5+gitr639_422e31c-10.3.1 containerd-debuginfo-0.2.5+gitr639_422e31c-10.3.1 containerd-debugsource-0.2.5+gitr639_422e31c-10.3.1 docker-libnetwork-0.0.0+git20170119.7b2b1fe-2.1 docker-libnetwork-debuginfo-0.0.0+git20170119.7b2b1fe-2.1 go-1.7.5-23.6.1 go-debuginfo-1.7.5-23.6.1 go-debugsource-1.7.5-23.6.1 go-doc-1.7.5-23.6.1 go-md2man-1.0.6+git20160904.a65d4d2-6.5.1 go-tools-1.4.2+git20161212.0a14ca4-3.3.1 golang-github-cpuguy83-go-md2man-1.0.6+git20160904.a65d4d2-6.5.1 golang-github-docker-libnetwork-0.0.0+git20170119.7b2b1fe-2.1 golang-github-docker-libnetwork-debugsource-0.0.0+git20170119.7b2b1fe-2.1 golang-github-golang-glog-0.0.0+git20141105.44145f0-4.3.1 golang-github-golang-protobuf-0.0.0+git20170217.69b215d-2.3.1 golang-github-russross-blackfriday-1.4.0+git20151230.c8875c0-6.5.1 golang-github-shurcool-sanitized_anchor_name-0.0.0+git20151027.10ef21a-6.5.1 golang-google-golangorg-appengine-0.0.0+git20150702.e335b53-3.3.1 golang-googlecode-mango-doc-0.0.0+hg20141127.23dea2f59f66-2.1 golang-org-x-crypto-1.5.2+git20161212.9a6f0a0-2.1 golang-org-x-net-1.5.2+git20161213.cfae461-6.5.1 golang-org-x-sync-0.0.0+git20161206.450f422-2.1 golang-org-x-text-1.5.2+git20161209.47a200a-6.5.1 golang-org-x-tools-1.4.2+git20161212.0a14ca4-3.3.1 gotext-1.5.2+git20161209.47a200a-6.5.1 h2i-1.5.2+git20161213.cfae461-6.5.1 mango-doc-0.0.0+hg20141127.23dea2f59f66-2.1 protoc-gen-go-0.0.0+git20170217.69b215d-2.3.1 runc-0.1.1+gitr2947_9c2d8d1-10.3.2 runc-debuginfo-0.1.1+gitr2947_9c2d8d1-10.3.2 runc-debugsource-0.1.1+gitr2947_9c2d8d1-10.3.2 - openSUSE Leap 42.2 (noarch): containerd-test-0.2.5+gitr639_422e31c-10.3.1 docker-bash-completion-17.04.0_ce-30.6.9 docker-zsh-completion-17.04.0_ce-30.6.9 golang-github-golang-geo-0.0.0+git20170112.f819552-2.1 golang-github-hoisie-web-0.0.0+git20160809.a498c02-2.3.1 golang-org-x-net-context-0.0.0+git20170424.da118f7-2.1 golang-org-x-net-html-0.0.0+git20170424.da118f7-2.1 golang-org-x-net-websocket-0.0.0+git20170424.da118f7-2.1 golang-org-x-time-rate-0.0.0+git20161028.f51c127-2.1 golang-packaging-15.0.3-8.3.1 runc-test-0.1.1+gitr2947_9c2d8d1-10.3.2 - openSUSE Leap 42.2 (x86_64): docker-17.04.0_ce-30.6.9 docker-debuginfo-17.04.0_ce-30.6.9 docker-debugsource-17.04.0_ce-30.6.9 docker-distribution-debugsource-2.6.1-5.3.1 docker-distribution-registry-2.6.1-5.3.1 docker-distribution-registry-debuginfo-2.6.1-5.3.1 docker-test-17.04.0_ce-30.6.9 docker-test-debuginfo-17.04.0_ce-30.6.9 golang-org-x-debug-0.0.0+git20160621.fb50892-2.1 golang-org-x-debug-debugproxy-0.0.0+git20160621.fb50892-2.1 References: https://bugzilla.suse.com/1026827 https://bugzilla.suse.com/1028113 https://bugzilla.suse.com/1028638 https://bugzilla.suse.com/1028639 https://bugzilla.suse.com/1030702 https://bugzilla.suse.com/1032287 https://bugzilla.suse.com/1032644 https://bugzilla.suse.com/1032769 https://bugzilla.suse.com/1034053 https://bugzilla.suse.com/1034063 https://bugzilla.suse.com/1037436 https://bugzilla.suse.com/1037607 https://bugzilla.suse.com/1038476 https://bugzilla.suse.com/1038493 https://bugzilla.suse.com/953182 https://bugzilla.suse.com/964546 https://bugzilla.suse.com/996303