v0.8.0

Changelog

• Add support for ID-mapped layers (#1392)
• Support systemd socket activation (#1378)

Full changelog: v0.7.0...v0.8.0

These binaries were compiled with Ubuntu 20.04, using glibc 2.31.

v0.7.0

Changelog

• Update Go version to 1.21.12 in CI (#1296)
• Fix bug in creating SOCI index with containerd content store (#1244)
• Allow images to be lazily loaded from an insecure localhost (#1289)
• Add config option skip_check_snapshotter_supported to skip an expensive check for if overlayfs is supported on the system, providing daemon startup time improvements (#1279)
• Fix re-auth for ECR credentials when token expires (#1196)
• Revert "Disable xattrs by default" due to a bug where containers fail to start if the image has a layer with xattrs disabled and a volume mount is present in said layer (#1315)
  • This optimization was enabled by default in v0.6.0 and v0.6.1. If using these versions and seeing a failed to list xattrs on /some/dir/ - operation not supported when running a container, please rebuild your SOCI index with the new SOCI CLI version and re-push the SOCI index
  • While the optimization is once again disabled by default, it can still be enabled by specifying --optimizations xattr in the CLI create call

Full Changelog: v0.6.1...v0.7.0

These binaries were compiled with Ubuntu 20.04, using glibc 2.31.

v0.6.1

Changelog

• Update golang.org/x/net to v0.25.0 to address CVE-2024-24788

Full Changelog: v0.6.0...v0.6.1

These binaries were compiled with Ubuntu 20.04, using glibc 2.31.

v0.6.0

Changelog

• Add concurrency limits when setting up layers (#1061)
• Reduce snapshotter overhead (#1080, #1066, #1021, #1133)
• Fix file descriptor leak when unpacking remote content (#1037)
• Fix max concurrent uploads on SOCI push (#1119)
• Skip registry calls when content has completed fetching (#1147)

Note: Our previous release erroneously had a trailing ./ before the binary names. This is fixed and moving forward it shouldn’t be an issue. (#1095)

Full Changelog: v0.5.0...v0.6.0

These binaries were compiled with Ubuntu 20.04, using glibc 2.31.

v0.5.0

Changelog

• Add support for CRI V1 API for Kubernetes 1.26+ compatibility (#843)
• Add TOC validation on first read (#813)
• Add support for file xattrs (#853)
• Add FUSE trace logs when running the snapshotter with --log-level trace (#864)
• Add example soci-snapshotter-grpc TOML file (#871)
• Add support for re-authentication on 403 Forbidden (#945)
• Add pretty-print to soci index info (#941)
• Refactor HTTP client for better performance and K8s/CRI credential support (#977)
• Fix broken snapshotter state on daemon SIGINT (#881)
• Fix soci index info erroring when using containerd content store (#986)
• Fix --address flag to allow paths starting with unix:// (#934)
• Fix containerd socket address when using containerd as content store (#987)
• Fix bug where loading a layer without a zTOC might fetch all subsequent layers (#1025)
• Fix bug where reading files failed if filename contained ./ prefixes in TAR (#964)
• Fix potential race condition in nodes (#833)
• Fix bug where zTOC was held in memory for longer than necessary (#975)
• Remove soci run and soci image rpull from CLI (#912, #998)
• Remove HTTP query values from logs (#930)
• Remove test dependency on docker-compose (#993)

Full Changelog: v0.4.1...v0.5.0

v0.4.1

Changelog

• [release/0.4] Set fuse.Attr.Blocks to # of 512-byte blocks (#955)
  • SOCI will no longer misinterpret non-sparse files as being sparse.
• [release/0.4] Bump go-fuse to v2.4.1 (#956)
  • Update go-fuse to address bug which caused cp/mv/install on sparse files to hang.

Full Changelog: v0.4.0...v0.4.1

Note: Artifacts have been updated to resolve issue identified in #1007.

v0.4.0

Changelog

• Add Kubernetes support (#711, #726)
• Add support for containerd content store (#694)
• Add support for making timeouts and retries configurable when fetching SOCI artifacts and spans (#618)
• Add more verbose logging around cache operations (#788)
• Fix potential label size mismatch bug causing fallback to default snapshotter (#693)
• Fix OAuth credentials refresh bug (#763)
• Fix potential file descriptor leak (#792)
• Fix missing execute permission on container’s root dir (#666)

Full Changelog: v0.3.0...v0.4.0

Note: We initially released binaries with a different naming convention from our previous releases. To stay consistent, we uploaded new binaries with the original naming convention. We did not remove the inconsistently-named binaries to avoid breaking any changes, but both versions are identical. In the future, we will continue using the original naming convention. If you are unsure, download the 0.4.0 binary, NOT the v0.4.0 one.

v0.3.0

Changelog

• Support uncompressed image layers (#603)
• Skip indexing layers with unrecognized compression (#601)

Full Changelog: https://github.com/awslabs/soci-snapshotter/commits/v0.3.0

v0.2.0

Changelog

• Add soci --version to get the CLI version (#478)
• Remove annotations from subject to preven registries from rejecting certain SOCI indices (#514)
• Add static build options (#476, #623)
• Fix 30s pause in background fetcher during image pull for some images (#550)
• Support docker auth in soci push (#600)
• Skip saving uncompressed layers to disk temporarily during zTOC build (#598)

v0.1.0

Initial release.