Sebastiaan van Stijn
446d4138ed
vendor: github.com/moby/sys/capability v0.4.0
...
full diff: https://github.com/moby/sys/compare/capability/v0.3.0...capability/v0.4.0
Added
* New separate API for ambient ([GetAmbient], [SetAmbient], [ResetAmbient])
and bound ([GetBound], [DropBound]) capabilities, modelled after libcap.
Fixed
* [Apply] now returns an error if called for non-zero `pid`. Before this change,
it could silently change some capabilities of the current process, instead of
the one identified by the `pid`.
* Fixed tests that change capabilities to be run in a separate process.
* Other improvements in tests.
Changed
* Use raw syscalls (which are slightly faster).
* Most tests are now limited to testing the public API of the package.
* Simplify parsing /proc/*pid*/status, add a test case.
* Optimize the number of syscall to set ambient capabilities in Apply
by clearing them first; add a test case.
* Better documentation for [Apply], [NewFile], [NewFile2], [NewPid], [NewPid2].
Removed
* `.golangci.yml` and `.codespellrc` are no longer part of the package.
<!-- Doc links (please keep sorted). -->
[Apply]: https://pkg.go.dev/github.com/moby/sys/capability#Capabilities.Apply
[DropBound]: https://pkg.go.dev/github.com/moby/sys/capability#DropBound
[GetAmbient]: https://pkg.go.dev/github.com/moby/sys/capability#GetAmbient
[GetBound]: https://pkg.go.dev/github.com/moby/sys/capability#GetBound
[LastCap]: https://pkg.go.dev/github.com/moby/sys/capability#LastCap
[ListKnown]: https://pkg.go.dev/github.com/moby/sys/capability#ListKnown
[ListSupported]: https://pkg.go.dev/github.com/moby/sys/capability#ListSupported
[List]: https://pkg.go.dev/github.com/moby/sys/capability#List
[NewFile2]: https://pkg.go.dev/github.com/moby/sys/capability#NewFile2
[NewFile]: https://pkg.go.dev/github.com/moby/sys/capability#NewFile
[NewPid2]: https://pkg.go.dev/github.com/moby/sys/capability#NewPid2
[NewPid]: https://pkg.go.dev/github.com/moby/sys/capability#NewPid
[ResetAmbient]: https://pkg.go.dev/github.com/moby/sys/capability#ResetAmbient
[SetAmbient]: https://pkg.go.dev/github.com/moby/sys/capability#SetAmbient
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-11-19 11:37:18 +01:00
Laura Brehm
13754f6776
deps: update `go-jose/go-jose` to `v4`
...
See: https://github.com/go-jose/go-jose
Signed-off-by: Laura Brehm <laurabrehm@hey.com>
2024-11-05 14:12:16 +00:00
Sebastiaan van Stijn
5f1311ae8d
vendor: github.com/docker/docker 6ac445c42bad (master, v28.0-dev)
...
full diff: 36a3bd0904...6ac445c42b
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-11-01 14:10:15 +01:00
Sebastiaan van Stijn
10c5a57927
vendor: go.opentelemetry.io/contrib/instrumentation/xxx v0.53.0
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-11-01 14:10:09 +01:00
Sebastiaan van Stijn
5e40d288c7
vendor: go.opentelemetry.io/otel v1.28.0
...
aligning all related packages to v1.28.0 as well
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-11-01 14:08:45 +01:00
Sebastiaan van Stijn
9ba73a1a05
vendor: github.com/grpc-ecosystem/grpc-gateway/v2 v2.20.0
...
full diff: https://github.com/grpc-ecosystem/grpc-gateway/compare/v2.16.0...v2.20.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-11-01 14:04:41 +01:00
Sebastiaan van Stijn
f3cf1b4213
vendor: go.etcd.io/etcd/raft/v3 v3.5.16
...
no changes in vendored code
full diff: https://github.com/etcd-io/etcd/compare/v3.5.6...v3.5.16
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-11-01 13:54:25 +01:00
Sebastiaan van Stijn
cae19e3928
vendor: github.com/AdaLogics/go-fuzz-headers v0.0.0-20240806141605-e8a1dd7889d6
...
no changes in vendored code
full diff: ced1acdcaa...e8a1dd7889
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-11-01 13:46:38 +01:00
Sebastiaan van Stijn
074d1028b5
vendor: update prometheus dependencies
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-11-01 13:44:05 +01:00
Sebastiaan van Stijn
1dbcce2057
vendor: google.golang.org/grpc v1.67.1
...
full diff:
- https://github.com/grpc/grpc-go/compare/v1.66.2...v1.67.1
- ef581f9131...5fefd90f89
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-11-01 13:39:15 +01:00
Sebastiaan van Stijn
1bba009944
vendor: google.golang.org/protobuf v1.35.1
...
full diff: https://github.com/protocolbuffers/protobuf-go/compare/v1.34.1...v1.35.1
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-11-01 13:31:29 +01:00
Sebastiaan van Stijn
e3942d46a0
vendor: github.com/klauspost/compress v1.17.11
...
full diff: https://github.com/klauspost/compress/compare/v1.17.9...v1.17.11
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-11-01 13:28:47 +01:00
Sebastiaan van Stijn
97ff1b7c0a
vendor: github.com/go-logr/logr v1.4.2
...
full diff: https://github.com/go-logr/logr/compare/v1.4.1...v1.4.2
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-11-01 13:25:17 +01:00
Sebastiaan van Stijn
4c85feb4dd
vendor: github.com/cenkalti/backoff/v4 v4.3.0
...
full diff: https://github.com/cenkalti/backoff/compare/v4.2.1...v4.3.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-11-01 13:23:39 +01:00
Sebastiaan van Stijn
3b48a57b04
vendor: github.com/Azure/go-ansiterm v0.0.0-20230124172434-306776ec8161
...
documentation changes only, no changes in vendored code
full diff: d185dfc1b5...306776ec81
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-11-01 13:20:48 +01:00
Sebastiaan van Stijn
36e6c42977
vendor: golang.org/x/net v0.30.0
...
full diff: https://github.com/golang/net/compare/v0.29.0...v0.30.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-11-01 13:17:57 +01:00
Sebastiaan van Stijn
84bfa52a6c
vendor: golang.org/x/crypto v0.28.0
...
no changes in vendored code
full diff: https://github.com/golang/crypto/compare/v0.27.0...v0.28.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-11-01 13:16:26 +01:00
Sebastiaan van Stijn
7a94f592ed
vendor: golang.org/x/text v0.19.0
...
no changes in vendored code
full diff: https://github.com/golang/text/compare/v0.18.0...v0.19.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-11-01 13:14:25 +01:00
Sebastiaan van Stijn
ef197f7314
vendor: golang.org/x/term v0.25.0
...
no changes in vendored code
full diff: https://github.com/golang/term/compare/v0.24.0...v0.25.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-11-01 13:12:59 +01:00
Sebastiaan van Stijn
02b92c699d
vendor: golang.org/x/sys v0.26.0
...
full diff: https://github.com/golang/sys/compare/v0.25.0...v0.26.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-11-01 13:11:15 +01:00
Sebastiaan van Stijn
9b525bc9d1
vendor: github.com/docker/docker 36a3bd090489 (master, v28.0-dev)
...
full diff: 164cae56ed...36a3bd0904
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-10-18 17:48:05 +02:00
Sebastiaan van Stijn
cbbb917323
vendor: github.com/moby/swarmkit/v2 v2.0.0-20241017191044-e8ecf83ee08e
...
- add Unwrap error to custom error types
- removes dependency on github.com/rexray/gocsi
- fix CSI plugin load issue
full diff: ea1a7cec35...e8ecf83ee0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-10-17 23:01:19 +02:00
Sebastiaan van Stijn
b6d27ff60e
vendor: google.golang.org/grpc v1.66.2
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-10-12 21:52:41 +02:00
Sebastiaan van Stijn
200225f530
vendor: google.golang.org/protobuf v1.34.1
...
full diff: https://github.com/protocolbuffers/protobuf-go/compare/v1.33.0...v1.34.1
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-10-12 21:49:59 +02:00
Sebastiaan van Stijn
9599251d07
vendor: github.com/cespare/xxhash/v2 v2.3.0
...
full diff: https://github.com/cespare/xxhash/compare/v2.2.0...v2.3.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-10-12 21:48:45 +02:00
Sebastiaan van Stijn
ea8aa2a419
vendor: golang.org/x/net v0.29.0
...
no changes in vendored code
full diff: https://github.com/golang/net/compare/v0.28.0...v0.29.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-10-12 21:47:34 +02:00
Sebastiaan van Stijn
61867feecf
vendor: golang.org/x/crypto v0.27.0
...
no changes in vendored code
full diff: https://github.com/golang/crypto/compare/v0.26.0...v0.27.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-10-12 21:46:59 +02:00
Sebastiaan van Stijn
843ae6d7e2
vendor: golang.org/x/term v0.24.0
...
full diff: https://github.com/golang/term/compare/v0.23.0...v0.24.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-10-12 21:46:04 +02:00
Sebastiaan van Stijn
bea4ee6588
vendor: golang.org/x/text v0.18.0
...
no changes in vendored code
full diff: https://github.com/golang/text/compare/v0.17.0...v0.18.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-10-12 21:43:36 +02:00
Sebastiaan van Stijn
a88ee33f71
vendor: golang.org/x/sys v0.25.0
...
full diff: https://github.com/golang/sys/compare/v0.24.0...v0.25.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-10-12 21:42:42 +02:00
Sebastiaan van Stijn
462e08219d
cli/container: use github.com/moby/sys/capability for completions
...
We used a hard-coded list of capabilities that we copied from containerd,
but the new "capability" package allows use to have a maintained list
of capabilities.
There's likely still some improvements to be made;
First of all, the capability package could provide a function to get the list
of strings.
On the completion-side, we need to consider what format is most convenient;
currently we use the canonical name (uppercase and "CAP_" prefix), however,
tab-completion is case-sensitive by default, so requires the user to type
uppercase letters to filter the list of options.
Bash completion provides a `completion-ignore-case on` option to make completion
case-insensitive (https://askubuntu.com/a/87066 ), but it looks to be a global
option; the current cobra.CompletionOptions also don't provide this as an option
to be used in the generated completion-script.
Fish completion has `smartcase` (by default?) which matches any case if
all of the input is lowercase.
Zsh does not have a dedicated option, but allows setting matching-rules
(see https://superuser.com/a/1092328 ).
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-10-01 14:01:02 +02:00
Sebastiaan van Stijn
b12ac897fb
vendor: github.com/docker/docker 164cae56ed95 (master, v-next)
...
full diff: 2269acc7a3...164cae56ed
Co-authored-by: Paweł Gronowski <pawel.gronowski@docker.com>
Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com>
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-09-24 16:30:30 +02:00
Sebastiaan van Stijn
dccb8bfa5d
vendor: google.golang.org/grpc v1.62.0
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-09-12 18:38:40 +02:00
Sebastiaan van Stijn
8cdf90cd93
vendor: tags.cncf.io/container-device-interface v0.8.0
...
Breaking change: The .ToOCI() functions in the specs-go package have been
removed. This removes the dependency on the OCI runtime specification from
the CDI specification definition itself.
What's Changed
- Add workflow to mark prs and issues as stale
- Remove the ToOCI functions from the specs-go package
- docs: add a pointer to community meetings in our docs.
- Bump spec version to v0.8.0
- Update spec version in README
Full diff: https://github.com/cncf-tags/container-device-interface/compare/v0.7.2...v0.8.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-09-12 18:36:26 +02:00
Sebastiaan van Stijn
a5f15bee7a
vendor: golang.org/x/net v0.28.0
...
full diff: https://github.com/golang/net/compare/v0.25.0...v0.28.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-09-12 18:33:40 +02:00
Sebastiaan van Stijn
b93fc39639
vendor: golang.org/x/crypto v0.26.0
...
full diff: https://github.com/golang/crypto/compare/v0.23.0...v0.26.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-09-12 18:32:05 +02:00
Sebastiaan van Stijn
3a63df265f
vendor: golang.org/x/text v0.17.0
...
full diff: https://github.com/golang/text/compare/v0.15.0...v0.17.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-09-12 18:31:04 +02:00
Sebastiaan van Stijn
c6e5341934
vendor: golang.org/x/term v0.23.0
...
full diff: https://github.com/golang/term/compare/v0.20.0...v0.23.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-09-12 18:29:52 +02:00
Sebastiaan van Stijn
5f9fe33b6b
vendor: golang.org/x/time v0.6.0
...
full diff: https://github.com/golang/time/compare/v0.3.0...v0.6.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-09-12 18:26:45 +02:00
Sebastiaan van Stijn
7074e5011f
vendor: golang.org/x/sync v0.8.0
...
full diff: https://github.com/golang/sync/compare/v0.7.0...v0.8.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-09-12 18:24:38 +02:00
Sebastiaan van Stijn
958fff82f1
vendor: golang.org/x/sys v0.24.0
...
full diff: https://github.com/golang/sys/compare/v0.22.0...v0.24.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-09-12 18:24:02 +02:00
Sebastiaan van Stijn
fb264ffc08
vendor: dario.cat/mergo v1.0.1
...
- fix: overwriteWithEmptyValue is forced to true when merging an object
involving maps
- fix: WithoutDereference should respect non-nil struct pointers
full diff: https://github.com/darccio/mergo/compare/v1.0.0...v1.0.1
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-09-12 18:18:47 +02:00
Sebastiaan van Stijn
1b8180a405
vendor.mod: put github.com/pkg/browser in the right group
...
commit fcfdd7b91f
introduced github.com/pkg/browser
as a direct dependency, but it ended up in the group for indirect dependencies.
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-09-05 14:36:51 +02:00
Laura Brehm
fcfdd7b91f
auth: add support for oauth device-code login
...
This commit adds support for the oauth [device-code](https://auth0.com/docs/get-started/authentication-and-authorization-flow/device-authorization-flow )
login flow when authenticating against the official registry.
This is achieved by adding `cli/internal/oauth`, which contains code to manage
interacting with the Docker OAuth tenant (`login.docker.com`), including launching
the device-code flow, refreshing access using the refresh-token, and logging out.
The `OAuthManager` introduced here is also made available through the `command.Cli`
interface method `OAuthManager()`.
In order to maintain compatibility with any clients manually accessing
the credentials through `~/.docker/config.json` or via credential
helpers, the added `OAuthManager` uses the retrieved access token to
automatically generate a PAT with Hub, and store that in the
credentials.
Signed-off-by: Laura Brehm <laurabrehm@hey.com>
2024-08-14 19:48:04 +01:00
Sebastiaan van Stijn
6440816c7c
vendor: github.com/docker/docker 2269acc7a31d (master, v-next)
...
removes (indirect) dependencie on the moby/sys/user/userns package, which
was retracted and moved to moby/sys/userns
- full diff: f3cf9359bd...2269acc7a3
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-08-08 13:37:58 +02:00
Paweł Gronowski
b8a53ee340
vendor: github.com/docker/docker master (f3cf9359bdf6)
...
full diff: 2b1097f080...f3cf9359bd
Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com>
2024-08-08 11:44:02 +02:00
Sebastiaan van Stijn
40a5b297b6
vendor: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.21.0
...
commit 89db01ef97
added these tracing modules
as dependency, but did not require the otlptracehttp module. This module
was added later through f0a29af0f3
as indirect
dependency for docker/docker. The otlptracehttp and otlptracegrpc modules
have no dependency between each-other, but similar to their otlpmetric
cousins, are preferred to be on the same version.
This patch aligns their versions. No changes in vendored code;
full diff: https://github.com/open-telemetry/opentelemetry-go/compare/exporters/otlp/otlptrace/otlptracehttp/v1.19.0...exporters/otlp/otlptrace/otlptracehttp/v1.21.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-07-31 22:28:36 +02:00
Sebastiaan van Stijn
f0a29af0f3
vendor: docker/docker 2b1097f08088 (removes containerd dependency)
...
full diff: aae044039c...2b1097f080
The userns package in libcontainer was integrated into the moby/sys/user
module at commit 3778ae603c706494fd1e2c2faf83b406e38d687d.
The userns package is used in many places, and currently either depends
on runc/libcontainer, or on containerd, both of which have a complex
dependency tree. This patch is part of a series of patches to unify the
implementations, and to migrate toward that implementation to simplify
the dependency tree.
[3778ae603c706494fd1e2c2faf83b406e38d687d]: 3778ae603c
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-07-25 14:57:30 +02:00
Sebastiaan van Stijn
b34e8e4dff
vendor: github.com/moby/sys/sequential v0.6.0
...
full diff: https://github.com/moby/sys/compare/sequential/v0.5.0...sequential/v0.6.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-07-25 14:56:13 +02:00
Sebastiaan van Stijn
ea37ac9bac
vendor: github.com/moby/sys/symlink v0.3.0
...
full diff: https://github.com/moby/sys/compare/symlink/v0.2.0...symlink/v0.3.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-07-25 14:55:23 +02:00