6992 moderate openSUSE Leap 42.3 Update This update for Containerd, Docker and RunC provides several fixes and enhancements. Containerd: - Update containerd to the version needed for docker-v17.04.0-ce. (bsc#1034053) - Fix spurious messages filling journal. (bsc#1032769) - Set TasksMax=infinity to make sure runC doesn't start failing randomly. Docker: - Update to version 17.04.0-ce. (bsc#1034053) - Fix execids leaks due to bad error handling. (bsc#1037436) - Make Apparmor's pkg/aaparser work on read-only root. (bsc#1037607) - Improve Docker's systemd configuration. (bsc#1032287) - Check if the docker binary is available before attempting to use it. (bsc#1038476) - Build man pages for all architectures. (bsc#953182) - Fix DNS resolution when Docker host uses 127.0.0.1 as resolver. (bsc#1034063) - Enable Delegate=yes, since systemd will safely ignore lvalues it doesn't understand. - Update SUSE secrets patch to handle bsc#1030702. - Change lvm2 from Requires to Recommends: Docker usually uses a default storage driver, when it's not configured explicitly. This default driver then depends on the underlying system and gets chosen during installation. (bsc#1032644) - Disable libseccomp for Leap 42.1, SLE 12 and 12-SP1, because docker needs a higher version. Otherwise, we get the error "conditional filtering requires libseccomp version >= 2.2.1. (bsc#1028639, bsc#1028638) - Add a backport of fix to AppArmor lazy loading docker-exec case. - Fix systemd TasksMax default which could throttle docker. (bsc#1026827) - Enable pkcs11 For a comprehensive list of changes please refer to /usr/share/doc/packages/docker/CHANGELOG.md RunC: - Update version to the one required by docker-17.04.0-ce. (bsc#1034053) - Make sure to ignore cgroup v2 mountpoints. (bsc#1028113) This update was imported from the SUSE:SLE-12:Update update project. containerd-0.2.5+gitr639_422e31c-13.1.i586.rpm containerd-0.2.5+gitr639_422e31c-13.1.src.rpm containerd-ctr-0.2.5+gitr639_422e31c-13.1.i586.rpm containerd-ctr-debuginfo-0.2.5+gitr639_422e31c-13.1.i586.rpm containerd-debuginfo-0.2.5+gitr639_422e31c-13.1.i586.rpm containerd-debugsource-0.2.5+gitr639_422e31c-13.1.i586.rpm containerd-test-0.2.5+gitr639_422e31c-13.1.noarch.rpm go-1.7.5-27.1.i586.rpm go-1.7.5-27.1.src.rpm go-debuginfo-1.7.5-27.1.i586.rpm go-debugsource-1.7.5-27.1.i586.rpm go-doc-1.7.5-27.1.i586.rpm golang-github-cpuguy83-go-md2man-1.0.2+git20150617.e69ac41-9.1.i586.rpm golang-github-cpuguy83-go-md2man-1.0.2+git20150617.e69ac41-9.1.src.rpm docker-libnetwork-0.0.0+git20170119.7b2b1fe-2.1.i586.rpm docker-libnetwork-debuginfo-0.0.0+git20170119.7b2b1fe-2.1.i586.rpm golang-github-docker-libnetwork-0.0.0+git20170119.7b2b1fe-2.1.i586.rpm golang-github-docker-libnetwork-0.0.0+git20170119.7b2b1fe-2.1.src.rpm golang-github-docker-libnetwork-debugsource-0.0.0+git20170119.7b2b1fe-2.1.i586.rpm golang-github-russross-blackfriday-1.2.0+git20150720.8cec3a8-9.1.i586.rpm golang-github-russross-blackfriday-1.2.0+git20150720.8cec3a8-9.1.src.rpm golang-github-shurcool-sanitized_anchor_name-0.0.0+git20150514.11a20b7-9.1.i586.rpm golang-github-shurcool-sanitized_anchor_name-0.0.0+git20150514.11a20b7-9.1.src.rpm golang-org-x-net-1.4.2+git20150629.d9558e5-9.1.i586.rpm golang-org-x-net-1.4.2+git20150629.d9558e5-9.1.src.rpm golang-org-x-text-1.4.2+git20150710.7c0e16d-9.1.i586.rpm golang-org-x-text-1.4.2+git20150710.7c0e16d-9.1.src.rpm golang-packaging-15.0.3-11.1.noarch.rpm golang-packaging-15.0.3-11.1.src.rpm runc-0.1.1+gitr2947_9c2d8d1-13.1.i586.rpm runc-0.1.1+gitr2947_9c2d8d1-13.1.src.rpm runc-debuginfo-0.1.1+gitr2947_9c2d8d1-13.1.i586.rpm runc-debugsource-0.1.1+gitr2947_9c2d8d1-13.1.i586.rpm runc-test-0.1.1+gitr2947_9c2d8d1-13.1.noarch.rpm containerd-0.2.5+gitr639_422e31c-13.1.x86_64.rpm containerd-ctr-0.2.5+gitr639_422e31c-13.1.x86_64.rpm containerd-ctr-debuginfo-0.2.5+gitr639_422e31c-13.1.x86_64.rpm containerd-debuginfo-0.2.5+gitr639_422e31c-13.1.x86_64.rpm containerd-debugsource-0.2.5+gitr639_422e31c-13.1.x86_64.rpm docker-distribution-2.6.1-8.1.src.rpm docker-distribution-debugsource-2.6.1-8.1.x86_64.rpm docker-distribution-registry-2.6.1-8.1.x86_64.rpm docker-distribution-registry-debuginfo-2.6.1-8.1.x86_64.rpm docker-17.04.0_ce-33.7.src.rpm docker-17.04.0_ce-33.7.x86_64.rpm docker-bash-completion-17.04.0_ce-33.7.noarch.rpm docker-debuginfo-17.04.0_ce-33.7.x86_64.rpm docker-debugsource-17.04.0_ce-33.7.x86_64.rpm docker-test-17.04.0_ce-33.7.x86_64.rpm docker-test-debuginfo-17.04.0_ce-33.7.x86_64.rpm docker-zsh-completion-17.04.0_ce-33.7.noarch.rpm go-1.7.5-27.1.x86_64.rpm go-debuginfo-1.7.5-27.1.x86_64.rpm go-debugsource-1.7.5-27.1.x86_64.rpm go-doc-1.7.5-27.1.x86_64.rpm golang-github-cpuguy83-go-md2man-1.0.2+git20150617.e69ac41-9.1.x86_64.rpm docker-libnetwork-0.0.0+git20170119.7b2b1fe-2.1.x86_64.rpm docker-libnetwork-debuginfo-0.0.0+git20170119.7b2b1fe-2.1.x86_64.rpm golang-github-docker-libnetwork-0.0.0+git20170119.7b2b1fe-2.1.x86_64.rpm golang-github-docker-libnetwork-debugsource-0.0.0+git20170119.7b2b1fe-2.1.x86_64.rpm golang-github-russross-blackfriday-1.2.0+git20150720.8cec3a8-9.1.x86_64.rpm golang-github-shurcool-sanitized_anchor_name-0.0.0+git20150514.11a20b7-9.1.x86_64.rpm golang-org-x-net-1.4.2+git20150629.d9558e5-9.1.x86_64.rpm golang-org-x-text-1.4.2+git20150710.7c0e16d-9.1.x86_64.rpm runc-0.1.1+gitr2947_9c2d8d1-13.1.x86_64.rpm runc-debuginfo-0.1.1+gitr2947_9c2d8d1-13.1.x86_64.rpm runc-debugsource-0.1.1+gitr2947_9c2d8d1-13.1.x86_64.rpm