youki 0.0.5 -- "黄昏に緋を穿つ 紅蓮の弓矢"

✨ New Features

Double-fork was used when the container was created. This had a bug and has been fixed. Now the init process will work correctly.

• Implement basic foreground mode by @yihuaf in #1656
• Fixed container init process not re-parent to youki main process by @yihuaf in #1637
• Implement the container_clone using CLONE_PARENT by @yihuaf in #1610

We are moving forward with the realization of the musl build. Thanks, @krisnova.

• Introduce seccomp feature for libcontainer with musl by @krisnova in #1484

The title is correct. Great new feature. Thanks, @higuruchi.

• Support recursive mount attrs by using mount_setattr(2). by @higuruchi in #1398

This gives libcontainer great flexibility. This is a feature not found in other runtimes. The first to use it will probably be runwasi(containerd/runwasi#78).

• libcontainer: Make the workloads injectable by @utam0k in #1403

Now we support three wasm runtimes. Please see the documentation for more details.

• Add support for wasmtime by @Furisto in #1402

💪 Improvements

• buffer read and write by @wlsnx in #1581
• add cargo fmt to make lint by @lengrongfu in #1719
• Refactor youki delete to match runc/crun. by @yihuaf in #1654
• Add rust-toolchain file by @utam0k in #1557
• Update Rust 1.66 by @utam0k in #1444
• Update to rust 1.67 by @Furisto in #1516
• Update wasmtime v4.0.0 by @utam0k in #1452
• Fix clippy warning by @yihuaf in #1638
• Use saturating_sub instead of - for unsigned ints by @rumpl in #1530
• Fix formatting with cargo fmt --check by @rumpl in #1532
• libcontainer: make device creation interfaces public by @ipuustin in #1578
• Upgrade clap to v4 by @Overflow0xFFFF in #1443
• Automating Dependabot with GitHub Actions by @utam0k in #1481
• Add descriptors.json when creating checkpoint by @adrianreber in #1511
• Relax the version of some crates we dependent by @utam0k in #1500
• Sort out github actions by @utam0k in #1561
• fix the warns from cargo clippy by @utam0k in #1564
• Update runtime-tools by @utam0k in #1569
• Allow specification of syscall impl for devices by @Furisto in #1604
• feat Add container id validate by @lengrongfu in #1602
• fix typo in container_main_process.rs by @minatoaquaMK2 in #1641

🐛 Bug Fixes

• fix container delete error by @lengrongfu in #1649
• Fix github actions by @utam0k in #1588

📖 Documentation improvements

• fix: doc link by @lengrongfu in #1542
• fix: youki's image in doc by @shimatar0 in #1614

🧪 Test improvements and Misc Fixes

• add rrelatime mount test by @lengrongfu in #1642
• skip cgroup v2 test of oci-tools by @utam0k in #1406
• feat add rdiratime/rnodiratime recursive mount test by @lengrongfu in #1616
• feat add rdev/rnodev recursive mount test by @lengrongfu in #1615
• add rrw/rexec recursive mount test by @lengrongfu in #1611
• Fix CI rules not filtering integration test files properly by @lengrongfu in #1643
• ci: Fix test for podman by @utam0k in #1655
• fix(libcontainer): Run test_is_executable with a more common file by @Overflow0xFFFF in #1676
• add rsuid and rnosymfollow by @lengrongfu in #1685

🤝 New Contributors

• @Overflow0xFFFF made their first contribution in #1443
• @rumpl made their first contribution in #1532
• @lengrongfu made their first contribution in #1542
• @wlsnx made their first contribution in #1581
• @ipuustin made their first contribution in #1578
• @shimatar0 made their first contribution in #1614
• @minatoaquaMK2 made their first contribution in #1641
• @krisnova made their first contribution in #1484

😆 By the way...

The subtitle of the release respects runc's release note.
runc 1.1.5 -- "囚われた屈辱は　反撃の嚆矢だ"

https://en.wikipedia.org/wiki/Attack_on_Titan

Maybe just this time it is special.

Full Changelog: v0.0.4...v0.0.5