Re: Update golang-github-appc-cni to 1.0 (was Re: singularity-container: CVE-2021-33622)
Hi,
Am Mon, Feb 21, 2022 at 12:05:48AM +0800 schrieb Shengjing Zhu:
> OK, I'll try to work on updating it and all reverse deps next week.
> The new version has breaking changes by removing old interfaces.
> The two main consumers(containerd and podman) have new
> versions(containerd 1.6, podman 4.0) which work with it.
> Though you may notice I have a patch by keeping the old interface in
> app-cni repo, I think it just makes the rev-deps building... The logic
> in the code may have serious bugs. So it may just cheat the release
> team's britney and let it go to testing. But if containerd and podman
> is about to update, then I'd like to take the risk to "cheat". (that's
> why I wrote that patch at that time...)
>From my naive perspective we most probably want last versions of
containerd and podman anyway and we are early in the release cycle. So
breaking unstable for a limited time span might be tolerable, IMHO.
Thanks a lot for looking at this
Andreas.
--
http://fam-tille.de
Reply to: