atomicwriter v0.1.0

This is the initial release of the github.com/moby/sys/atomicwriter module,
which was migreated from the github.com/docker/docker/pkg/reexec package
at commit moby@d7b743b8569e253b61ea8d70e75146ff35d50417.

user v0.4.0

This release merges the github.com/moby/moby/pkg/idtools package
functionality. The package was previously trimmed down and is simplified
further to better fit moby/sys.

Now the package interface will just expand with:

• MkdirAllAndChown with WithOnlyNew as a MkdirOpt
• MkdirAndChown also supporting the opts
• IdentityMapping its functions RootPair, ToHost, ToContainer, Empty

Note that the Identity type is gone since SID was not used in the
package or by any of the functions. It is more common to just pass the
uid and gid.

What's Changed

• Merge functionality from github.com/moby/moby/pkg/idtools into user #182
• Makefile: fix error from test #172
• Add go fix to CI, rm old build tags #148
• Add Go 1.23, drop 1.21, bump golangci-lint #147
• ci: fix not honoring PACKAGES setting in gha Windows runners #157
• ci: checkout first, disable go caching #160
• ci: add unparam linter #158
• ci: Update macOS runner image to macOS 13 #167
• ci: add codespell #159
• ci: add codecov #180

Full Changelog: user/v0.3.0...user/v0.4.0

reexec v0.1.0

What's Changed

This is the initial release of the github.com/moby/sys/reexec module, which
is a fork of the github.com/docker/docker/pkg/reexec package at commit
moby@cc1d50a63daa725dfb8d43bba7c259107fbb9f74.

capability v0.4.0

Added

• New separate API for ambient (GetAmbient, SetAmbient, ResetAmbient)
  and bound (GetBound, DropBound) capabilities, modelled after libcap. (#176)

Fixed

• Apply now returns an error if called for non-zero pid. Before this change,
  it could silently change some capabilities of the current process, instead of
  the one identified by the pid. (#168, #174)
• Fixed tests that change capabilities to be run in a separate process. (#173)
• Other improvements in tests. (#169, #170)

Changed

• Use raw syscalls (which are slightly faster). (#176)
• Most tests are now limited to testing the public API of the package. (#162)
• Simplify parsing /proc/pid/status, add a test case. (#162)
• Optimize the number of syscall to set ambient capabilities in Apply
  by clearing them first; add a test case. (#163, #164)
• Better documentation for Apply, NewFile, NewFile2, NewPid, NewPid2. (#175)

Removed

• .golangci.yml and .codespellrc are no longer part of the package. (#158)

For the complete list of changes, see capability/CHANGELOG.md.

---

Thanks to all of the contributors who made this release possible:

• Kir Kolyshkin (@kolyshkin)
• lifubang (@lifubang)
• Sebastiaan van Stijn (@thaJeztah)
• Tianon Gravi (@tianon)

capability v0.3.0

Added

• Added ListKnown and ListSupported functions. (#153)
• LastCap is now available on non-Linux platforms (where it returns an error). (#152)

Changed

• List is now deprecated in favor of ListKnown and ListSupported. (#153)

Fixed

• Various documentation improvements. (#151)
• Fix "generated code" comment. (#153)

For the complete list of changes, see capability/CHANGELOG.md.

capability v0.2.0

What's Changed

This is the initial release of the github.com/moby/sys/capability module, which
is a fork of https://github.com/syndtr/gocapability at commit gocapability@42c35b4376354fd5.
This fork had a temporary home at https://github.com/kolyshkin/capability and was moved here
in #149.

For the complete list of changes since the fork, see CHANGELOG.md.

userns v0.1.0

What's Changed

This is the first release of the github.com/moby/sys/userns module which
was previously integrated in the github.com/moby/sys/user module in commit
86870e7 (user v0.2.0). The userns code was migrated from libcontainer (runc)
at commit runc@3778ae6.

Code was originally added through runc@c0ad40c, and located in the
libcontainer/system package; history of this code from before it was moved
can be found through 3 and 4.

user v0.3.0

What's Changed

• remove userns package that was added in v0.2.0
• downgrade minimum go version to v1.17
• retract v0.2.0

Breaking changes

This release removes the userns package, which was added in v0.2.0, and
now retracted. Commit 86870e7 integrated the userns package into the
github.com/moby/sys/user module, which was included in the v0.2.0 version
of the module.

After further discussion with maintainers, this was not a good choice,
as the package has no direct relation with "user" operations (other than
their name).

For that reason, the userns package was move to its own module and can
now be found in the github.com/moby/sys/userns module.

This release retracts the previous (v0.2.0) release and removes the userns
package, effectively reverting the module to v0.1.0.

Full Changelog: user/v0.2.0...user/v0.3.0

user v0.2.0

⚠️ this release was retracted

After further discussion with maintainers, it was decided to move the
userns package to a separate module as it has no direct relation with
"user" operations (other than having "user" in its name).

Refer to the user v0.3.0 and userns v0.1.0 release notes for details.

What's Changed

• user: require go1.21 or higher

• integrate libcontainer/userns into moby/sys/user

  This release integrates the userns package from libcontainer (runc) at commit;
  3778ae603c706494fd1e2c2faf83b406e38d687d.

  Code was originally added through runc@c0ad40c, and located in the
  libcontainer/system package; history of this code from before it was moved
  can be found through 3 and 4.

Full Changelog: user/v0.1.0...user/v0.2.0

mount v0.3.4

What's Changed

• mount: rm unneeded errorlint annotation
• mount: fix Go 1.20 errorlint warning
• update minimum supported go version to go1.17
• bump golang.org/x/sys to v0.1.0
• bump github.com/moby/sys/mountinfo v0.7.2

Full Changelog: mount/v0.3.3...mount/v0.3.4