Skip to content

[pull] main from containerd:main#272

Merged
pull[bot] merged 8 commits intomeonBot:mainfrom
containerd:main
Mar 18, 2026
Merged

[pull] main from containerd:main#272
pull[bot] merged 8 commits intomeonBot:mainfrom
containerd:main

Conversation

@pull
Copy link
Copy Markdown

@pull pull bot commented Mar 18, 2026

See Commits and Changes for more details.


Created by pull[bot] (v2.0.0-alpha.4)

Can you help keep this open source service alive? 💖 Please sponsor : )

vvoland and others added 8 commits March 13, 2026 10:20
Currently the tests fail on Linux:

```
--- FAIL: TestNewSocket (0.00s)
    --- FAIL: TestNewSocket/socket_in_nested_directory (0.00s)
        util_unix_test.go:42: NewSocket failed: mkdir failed for /tmp/shim-test-1791693890/a/b/test.sock: mkdir /tmp/shim-test-1791693890/a/b: permission denied
FAIL
FAIL	github.com/containerd/containerd/v2/pkg/shim	0.004s
FAIL
```

This is fixed by the next commit.

Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com>
NewSocket was using the same permission mode (0600) for both the socket
file and its parent directory.

Directories require the execute bit to be traversable, so creating a
directory with 0600 prevents any files from being created inside it.

Use 0700 for directory creation while keeping 0600 for socket files.

Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com>
The executable bit is needed only for the parent directory, not the
socket itself.

Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com>
Signed-off-by: Derek McGowan <derek@mcg.dev>
Signed-off-by: Derek McGowan <derek@mcg.dev>
Signed-off-by: Derek McGowan <derek@mcg.dev>
pkg/shim: Fix NewSocket directory permissions
Prepare release notes for v2.3.0-beta.0
@pull pull bot locked and limited conversation to collaborators Mar 18, 2026
@pull pull bot added the ⤵️ pull label Mar 18, 2026
@pull pull bot merged commit b0d7bba into meonBot:main Mar 18, 2026
2 checks passed
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants