docker/docker-engine-openeuler.spec

Name: docker-engine
Version: 18.09.0
Release: 271
Epoch: 1
Summary: The open-source application container engine
Group: Tools/Docker

License: ASL 2.0
Source: %{name}.tar.gz

URL: https://mobyproject.org

%global is_systemd 1
%global debug_package %{nil}

# required packages for build
# most are already in the container (see contrib/builder/rpm/ARCH/generate.sh)
BuildRequires: pkgconfig(systemd) golang >= 1.8.3 btrfs-progs-devel device-mapper-devel glibc-static libseccomp-devel
BuildRequires: libselinux-devel libtool-ltdl-devel pkgconfig selinux-policy selinux-policy-devel sqlite-devel systemd-devel
BuildRequires: tar containerd docker-runc docker-proxy

# required packages on install
Requires: /bin/sh iptables tar xz device-mapper-libs >= 1.02.90-1 systemd-units

# conflicting packages
Provides: docker
Conflicts: docker-io
Conflicts: docker-engine-cs

%description
Docker is an open source project to build, ship and run any application as a
lightweight container.

Docker containers are both hardware-agnostic and platform-agnostic. This means
they can run anywhere, from your laptop to the largest EC2 compute instance and
everything in between - and they don't require you to use a particular
language, framework or packaging system. That makes them great building blocks
for deploying and scaling web apps, databases, and backend services without
depending on a particular stack or provider.

%prep
%autosetup -c -n %{name}

%build

./apply-patches

# build docker engine
WORKDIR=$(pwd)
GITCOMMIT=$(git rev-parse --short HEAD)
export VERSION=$(cat VERSION)
export DOCKER_GITCOMMIT=${GITCOMMIT}
export AUTO_GOPATH=1
export DOCKER_BUILDTAGS="pkcs11 seccomp selinux"
cd ${WORKDIR}/components/engine
./hack/make.sh dynbinary

# buid docker cli
cd ${WORKDIR}/components/cli
mkdir -p .gopath/src/github.com/docker
export GOPATH=`pwd`/.gopath
ln -sf `pwd` .gopath/src/github.com/docker/cli
ln -sf ${WORKDIR}/components/engine .gopath/src/github.com/docker/docker
cd .gopath/src/github.com/docker/cli
make dynbinary

# man is provided in docker --help and dockerd --help
# ./man/md2man-all.sh runs outside the build container (if at all), since we don't have go-md2man here
# ./man/md2man-all.sh -q

rm -rf .gopath
cd ${WORKDIR}

%check
./components/engine/bundles/dynbinary-daemon/dockerd -v
./components/cli/build/docker -v

%install
# install binary
install -d $RPM_BUILD_ROOT/%{_bindir}
install -p -m 755 components/engine/bundles/dynbinary-daemon/dockerd $RPM_BUILD_ROOT/%{_bindir}/dockerd

# install cli
install -p -m 755 components/cli/build/docker $RPM_BUILD_ROOT/%{_bindir}/docker

# install proxy
install -p -m 755 /usr/bin/docker-proxy $RPM_BUILD_ROOT/%{_bindir}/docker-proxy

# install containerd
install -p -m 755 /usr/bin/containerd $RPM_BUILD_ROOT/%{_bindir}/containerd
install -p -m 755 /usr/bin/containerd-shim $RPM_BUILD_ROOT/%{_bindir}/containerd-shim

# install runc
install -p -m 755 /usr/bin/runc  $RPM_BUILD_ROOT/%{_bindir}/runc

# install udev rules
install -d $RPM_BUILD_ROOT/%{_sysconfdir}/udev/rules.d
install -p -m 644 components/engine/contrib/udev/80-docker.rules $RPM_BUILD_ROOT/%{_sysconfdir}/udev/rules.d/80-docker.rules

# add init scripts
install -d $RPM_BUILD_ROOT/etc/sysconfig
install -d $RPM_BUILD_ROOT/%{_initddir}
install -p -m 644 components/engine/contrib/init/sysvinit-redhat/docker.sysconfig $RPM_BUILD_ROOT/etc/sysconfig/docker 
install -p -m 644 components/engine/contrib/init/sysvinit-redhat/docker-network $RPM_BUILD_ROOT/etc/sysconfig/docker-network
install -p -m 644 components/engine/contrib/init/sysvinit-redhat/docker-storage $RPM_BUILD_ROOT/etc/sysconfig/docker-storage

install -d $RPM_BUILD_ROOT/%{_unitdir}
install -p -m 644 components/engine/contrib/init/systemd/docker.service $RPM_BUILD_ROOT/%{_unitdir}/docker.service
# add bash, zsh, and fish completions
install -d $RPM_BUILD_ROOT/usr/share/bash-completion/completions
install -d $RPM_BUILD_ROOT/usr/share/zsh/vendor-completions
install -d $RPM_BUILD_ROOT/usr/share/fish/vendor_completions.d
install -p -m 644 components/cli/contrib/completion/bash/docker $RPM_BUILD_ROOT/usr/share/bash-completion/completions/docker
install -p -m 644 components/cli/contrib/completion/zsh/_docker $RPM_BUILD_ROOT/usr/share/zsh/vendor-completions/_docker
install -p -m 644 components/cli/contrib/completion/fish/docker.fish $RPM_BUILD_ROOT/usr/share/fish/vendor_completions.d/docker.fish

# install manpages
# install -d %{buildroot}%{_mandir}/man1
# install -p -m 644 components/cli/man/man1/*.1 $RPM_BUILD_ROOT/%{_mandir}/man1
# install -d %{buildroot}%{_mandir}/man5
# install -p -m 644 components/cli/man/man5/*.5 $RPM_BUILD_ROOT/%{_mandir}/man5
# install -d %{buildroot}%{_mandir}/man8
# install -p -m 644 components/cli/man/man8/*.8 $RPM_BUILD_ROOT/%{_mandir}/man8

# add vimfiles
install -d $RPM_BUILD_ROOT/usr/share/vim/vimfiles/doc
install -d $RPM_BUILD_ROOT/usr/share/vim/vimfiles/ftdetect
install -d $RPM_BUILD_ROOT/usr/share/vim/vimfiles/syntax
install -p -m 644 components/engine/contrib/syntax/vim/doc/dockerfile.txt $RPM_BUILD_ROOT/usr/share/vim/vimfiles/doc/dockerfile.txt
install -p -m 644 components/engine/contrib/syntax/vim/ftdetect/dockerfile.vim $RPM_BUILD_ROOT/usr/share/vim/vimfiles/ftdetect/dockerfile.vim
install -p -m 644 components/engine/contrib/syntax/vim/syntax/dockerfile.vim $RPM_BUILD_ROOT/usr/share/vim/vimfiles/syntax/dockerfile.vim

# add nano
install -d $RPM_BUILD_ROOT/usr/share/nano
install -p -m 644 components/engine/contrib/syntax/nano/Dockerfile.nanorc $RPM_BUILD_ROOT/usr/share/nano/Dockerfile.nanorc

# list files owned by the package here
%files
%doc components/engine/AUTHORS components/engine/CHANGELOG.md components/engine/CONTRIBUTING.md components/engine/LICENSE components/engine/MAINTAINERS components/engine/NOTICE components/engine/README.md
/%{_bindir}/docker
/%{_bindir}/dockerd
/%{_bindir}/containerd
/%{_bindir}/docker-proxy
/%{_bindir}/containerd-shim
/%{_bindir}/runc
/%{_sysconfdir}/udev/rules.d/80-docker.rules
%if 0%{?is_systemd}
/%{_unitdir}/docker.service
%else
/%{_initddir}/docker
%endif
/usr/share/bash-completion/completions/docker
/usr/share/zsh/vendor-completions/_docker
/usr/share/fish/vendor_completions.d/docker.fish
%doc

%config(noreplace,missingok) /etc/sysconfig/docker
%config(noreplace,missingok) /etc/sysconfig/docker-storage
%config(noreplace,missingok) /etc/sysconfig/docker-network

/usr/share/vim/vimfiles/doc/dockerfile.txt
/usr/share/vim/vimfiles/ftdetect/dockerfile.vim
/usr/share/vim/vimfiles/syntax/dockerfile.vim
/usr/share/nano/Dockerfile.nanorc

%post
if ! getent group docker > /dev/null; then
    groupadd --system docker
fi
%if 0%{?is_systemd}
#%systemd_post docker
systemctl enable docker
systemctl start docker
%else
# This adds the proper /etc/rc*.d links for the script
/sbin/chkconfig --add docker
%endif
if ! getent group docker > /dev/null; then
    groupadd --system docker
fi

%preun
%if 0%{?is_systemd}
%systemd_preun docker
%else
if [ $1 -eq 0 ] ; then
    /sbin/service docker stop >/dev/null 2>&1
    /sbin/chkconfig --del docker
fi
%endif

%postun
%if 0%{?is_systemd}
%systemd_postun_with_restart docker
%else
if [ "$1" -ge "1" ] ; then
    /sbin/service docker condrestart >/dev/null 2>&1 || :
fi
%endif

%changelog
* Fri Dec 06 2024 zhongjiawei<zhongjiawei1@huawei.com> - 1:18.09.0-271
- Type:CVE
- CVE:CVE-2024-36623
- SUG:NA
- DESC:fix CVE-2024-36623

* Mon Dec 02 2024 zhongjiawei<zhongjiawei1@huawei.com> - 1:18.09.0-270
- Type:CVE
- CVE:CVE-2024-36621
- SUG:NA
- DESC:fix missing lock in ensurelayer

* Sat Aug 31 2024 zhongjiawei<zhongjiawei1@huawei.com> - 1:18.09.0-269
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:try to reconnect when containerd grpc return unexpected EOF

* Fri Aug 02 2024 zhongjiawei<zhongjiawei1@huawei.com> - 1:18.09.0-268
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add clone3 seccomp whitelist for arm64

* Fri Jul 26 2024 zhongjiawei<zhongjiawei1@huawei.com> - 18.09.0-267
- Type:CVE
- CVE:CVE-2024-41110
- SUG:NA
- DESC:fix CVE-2024-41110

* Mon Jul 15 2024 chenjiankun<chenjiankun1@huawei.com> - 18.09.0-266
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Ignore SIGURG on Linux

* Wed May 08 2024 chenjiankun<chenjiankun1@huawei.com> - 18.09.0-265
- Type:CVE
- CVE:CVE-2024-32473
- SUG:NA
- DESC:fix CVE-2024-32473

* Mon Apr 01 2024 zhongjiawei<zhongjiawei1@huawei.com> - 18.09.0-264
- Type:CVE
- CVE:CVE-2024-29018
- SUG:NA
- DESC:fix CVE-2024-29018

* Tue Mar 19 2024 chenjiankun<chenjiankun1@huawei.com> - 18.09.0-263
- Type:CVE
- CVE:CVE-2024-24557
- SUG:NA
- DESC:fix CVE-2024-24557

* Tue Jan 02 2024 chenjiankun<chenjiankun1@huawei.com> - 18.09.0-262
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync patches from upstream

* Wed Oct 25 2023 zhongjiawei<zhongjiawei1@huawei.com> - 18.09.0-261
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync two patches

* Mon Aug 28 2023 chenjiankun<chenjiankun1@huawei.com> - 18.09.0-259
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove useless mount point dir

* Fri Jul 28 2023 jingxiaolu<lujingxiao@huawei.com> - 18.09.0-258
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:define a dummy hostname to use for local connections

* Wed Jul 12 2023 zhongjiawei<zhongjiawei1@huawei.com> - 18.09.0-257
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove invalid libcgroup dependencies

* Tue Jun 27 2023 chenjiankun<chenjiankun1@huawei.com> - 18.09.0-256
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:repalce unix.Rmdir with os.RemoveAll when remove mount point dir

* Tue Jun 27 2023 chenjiankun<chenjiankun1@huawei.com> - 18.09.0-255
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix blockThreshold full bug

* Thu Jun 08 2023 zhongjiawei<zhongjiawei1@huawei.com> - 18.09.0-254
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:thinpool full because docker daemon restart when docker pull

* Thu Apr 06 2023 zhongjiawei<zhongjiawei1@huawei.com> - 18.09.0-253
- Type:CVE
- CVE:CVE-2023-28840,CVE-2023-28841,CVE-2023-28842
- SUG:NA
- DESC:fix CVE-2023-28840,CVE-2023-28841,CVE-2023-28842

* Wed Mar 29 2023 zhongjiawei<zhongjiawei1@huawei.com>- 18.09.0-252
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync some patches

* Wed Mar 15 2023 zhongjiawei<zhongjiawei1@huawei.com>- 18.09.0-251
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:try http for docker manifest insecure

* Wed Mar 14 2023 chenjiankun<chenjiankun1@huawei.com>- 18.09.0-250
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix container missing after restarting dockerd twice

* Fri Feb 17 2023 chenjiankun<chenjiankun1@huawei.com>- 18.09.0-249
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:set freezer.state to Thawed to increase freeze chances

* Thu Dec 01 2022 zhongjiawei<zhongjiawei1@huawei.com> - 18.09.0-248
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:do not stop health check before sending signal

* Thu Nov 24 2022 chenjiankun<chenjiankun1@huawei.com> - 18.09.0-247
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:using VERSION-vendor to record version

* Tue Nov 22 2022 chenjiankun<chenjiankun1@huawei.com> - 18.09.0-246
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix dockerd core when release network

* Tue Nov 22 2022 chenjiankun<chenjiankun1@huawei.com> - 18.09.0-245
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:cleanup netns file when stop docker daemon

* Sat Oct 15 2022 DCCooper <1866858@gmail.com> - 18.09.0-244
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:change runc original install location (/usr/local/bin --> /usr/bin) to fix compile problem

* Wed Sep 21 2022 chenjiankun <chenjiankun1@huawei.com> - 18.09.0-243
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add epoch for easy upgrade

* Thu Sep 15 2022 chenjiankun <chenjiankun1@huawei.com> - 18.09.0-242
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:ensure layer digest folder removed if ls.driver.Remove fails

* Thu Sep 15 2022 chenjiankun <chenjiankun1@huawei.com> - 18.09.0-241
- Type:CVE
- CVE:CVE-2022-36109
- SUG:NA
- DESC:fix CVE-2022-36109

* Thu Sep 15 2022 chenjiankun <chenjiankun1@huawei.com> - 18.09.0-240
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Add an ExitPid field for State struct to record exit process id

* Thu Sep 15 2022 chenjiankun <chenjiankun1@huawei.com> - 18.09.0-239
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix terminal abnormal after docker run

* Thu Jun 28 2022 chenjiankun <chenjiankun1@huawei.com> - 18.09.0-238
- Type:CVE
- CVE:CVE-2021-41092
- SUG:NA
- DESC:fix CVE-2021-41092

* Thu Jun 28 2022 chenjiankun <chenjiankun1@huawei.com> - 18.09.0-237
- Type:CVE
- CVE:CVE-2021-41091
- SUG:NA
- DESC:fix CVE-2021-41091

* Thu Jun 28 2022 chenjiankun <chenjiankun1@huawei.com> - 18.09.0-236
- Type:CVE
- CVE:CVE-2021-41089
- SUG:NA
- DESC:fix CVE-2021-41089

* Thu Jun 28 2022 chenjiankun <chenjiankun1@huawei.com> - 18.09.0-235
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:close channel in write side to avoid panic in docker stats

* Thu Jun 28 2022 chenjiankun <chenjiankun1@huawei.com> - 18.09.0-234
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix status inconsistent after restart container

* Thu Jun 16 2022 duyiwei <duyiwei@kylinos.cn> - 18.09.0-233
- Type:bugfix
- CVE:CVE-2022-24769
- SUG:NA
- DESC:fix CVE-2022-24769

* Fri Mar 11 2022 chenjiankun<chenjiankun1@huawei.com> - 18.09.0-232
- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix "Up 292 years" in status in docker ps -a

* Fri Mar 11 2022 chenjiankun<chenjiankun1@huawei.com> - 18.09.0-231
- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix "endpoint with name container_xx already exists in network none" error

* Fri Mar 11 2022 chenjiankun<chenjiankun1@huawei.com> - 18.09.0-230
- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix container exited after docker restart when processEvent hang

* Fri Mar 11 2022 chenjiankun<chenjiankun1@huawei.com> - 18.09.0-229
- Type:bugfix
- ID:NA
- SUG:NA
- DESC:change log level when containerd return "container not found" err

* Fri Mar 11 2022 chenjiankun<chenjiankun1@huawei.com> - 18.09.0-228
- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add log for easy debug in exit event handler

* Fri Mar 11 2022 chenjiankun<chenjiankun1@huawei.com> - 18.09.0-227
- Type:bugfix
- ID:NA
- SUG:NA
- DESC:adding logs for debugging in docker stop

* Fri Mar 11 2022 chenjiankun<chenjiankun1@huawei.com> - 18.09.0-226
- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add info log for pulling image

* Wed Mar 10 2022 chenjiankun<chenjiankun1@huawei.com> - 18.09.0-225
- Type:bugfix
- ID:NA
- SUG:NA
- DESC:do not check result of issueDiscard

* Wed Mar 10 2022 chenjiankun<chenjiankun1@huawei.com> - 18.09.0-224
- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix bug where failed kills didnt fallback to unix kill

* Wed Mar 10 2022 chenjiankun<chenjiankun1@huawei.com> - 18.09.0-223
- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix time Ticker leak

* Wed Mar 10 2022 chenjiankun<chenjiankun1@huawei.com> - 18.09.0-222
- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add timeout for IO.Wait

* Wed Mar 10 2022 chenjiankun<chenjiankun1@huawei.com> - 18.09.0-221
- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix dangling unpigz

* Sat Mar 9 2022 chenjiankun<chenjiankun1@huawei.com> - 18.09.0-220
- Type:bugfix
- ID:NA
- SUG:NA
- DESC:check db file size before start containerd

* Sat Mar 9 2022 chenjiankun<chenjiankun1@huawei.com> - 18.09.0-219
- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix ProcessEvent block when CloseStreams block

* Sat Mar 9 2022 chenjiankun<chenjiankun1@huawei.com> - 18.09.0-218
- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix runc data and dm left when periodically kill containerd

* Sat Mar 9 2022 chenjiankun<chenjiankun1@huawei.com> - 18.09.0-217
- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix race condition in cmdStream

* Sat Mar 9 2022 chenjiankun<chenjiankun1@huawei.com> - 18.09.0-216
- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Unexport testcase.Cleanup to fix Go 1.14

* Tue Mar 8 2022 chenjiankun<chenjiankun1@huawei.com> - 18.09.0-215
- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Don't fail on two concurrent reference.store.AddDigest calls

* Tue Mar 8 2022 chenjiankun<chenjiankun1@huawei.com> - 18.09.0-214
- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix for lack of synchronization in daemon/update.go

* Tue Mar 8 2022 chenjiankun<chenjiankun1@huawei.com> - 18.09.0-213
- Type:bugfix
- ID:NA
- SUG:NA
- DESC:rollback if docker restart when doing BlkDiscard

* Tue Mar 8 2022 chenjiankun<chenjiankun1@huawei.com> - 18.09.0-212
- Type:bugfix
- ID:NA
- SUG:NA
- DESC:use info level for create stop command

* Mon Mar 7 2022 chenjiankun<chenjiankun1@huawei.com> - 18.09.0-211
- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix unittest case error

* Mon Mar 7 2022 chenjiankun<chenjiankun1@huawei.com> - 18.09.0-210
- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix docker kill command block

* Thu Mar 4 2022 chenjiankun<chenjiankun1@huawei.com> - 18.09.0-209
- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix hijack hang

* Thu Mar 3 2022 chenjiankun<chenjiankun1@huawei.com> - 18.09.0-208
- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix container status not consistent with its shim process status

* Thu Mar 3 2022 chenjiankun<chenjiankun1@huawei.com> - 18.09.0-207
- Type:bugfix
- ID:NA
- SUG:NA
- DESC:sync from internal

* Tue Oct 12 2021 xiadanni<xiadanni1@huawei.com> - 18.09.0-206
- Type:bugfix
- ID:NA
- SUG:NA
- DESC:update seccomp whitelist to Linux 5.10 syscall list

* Tue Sep 14 2021 xiadanni<xiadanni1@huawei.com> - 18.09.0-205
- Type:bugfix
- ID:NA
- SUG:NA
- DESC:bump version again for runc fix systemd cgroup

* Mon Aug 09 2021 xiadanni<xiadanni1@huawei.com> - 18.09.0-204
- Type:bugfix 
- ID:NA
- SUG:NA
- DESC:runc fix systemd cgroup after memory type changed

* Thu May 6 2021 chenjiankun<chenjiankun1@huawei.com> - 18.09.0-203
- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove go-md2man build require

* Thu Mar 18 2021 xiadanni<xiadanni1@huawei.com> - 18.09.0-202
- Type:bugfix
- ID:NA
- SUG:NA
- DESC:prevent an invalid image from crashing docker daemon(CVE-2021-21285)

* Wed Feb 24 2021 xiadanni<xiadanni1@huawei.com> - 18.09.0-201
- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix Access to remapped root allows privilege escalation to real root (CVE-2021-21284)

* Wed Feb 9 2021 xiadanni<xiadanni1@huawei.com> - 18.09.0-200
- Type:bugfix
- ID:NA
- SUG:NA
- DESC:sync bugfix and bump version to 200, bugfix include
       1. fix execCommands leak in health-check.
       2. check containerd pid before kill it.

* Mon Jan 18 2021 jingrui<jingrui@huawei.com> - 18.09.0-105
- Type:bugfix
- ID:NA
- SUG:NA
- DESC:sync bugfix include
  1. fix image cleanup failed.
  2. cleanup load tmp files.
  3. kill residual container process.
  4. resume suspend dm device.
  5. dont kill containerd during dockerd starting.
  6. handle exit event for restore failed container.
  7. wait io with timeout when start failed.
  8. support hostname mirror registry.
  9. mask unused proc files.

* Tue Dec 8 2020 xiadanni<xiadanni1@huawei.com> - 18.09.0-104
- Type:bugfix
- ID:NA
- SUG:NA
- DESC:runc don't deny all devices when update cgroup resource

* Thu Dec 3 2020 xiadanni<xiadanni1@huawei.com> - 18.09.0-103
- Type:bugfix
- ID:NA
- SUG:restart
- DESC:containerd fix CVE-2020-15257

* Fri Nov 27 2020 liuzekun<liuzekun@huawei.com> - 18.09.0-102
- Type:bugfix
- ID:NA
- CVE:NA
- SUG:restart
- DESC:
1.delete stale containerd object on start failure
2.remove redundant word item
3.delete event is not need to process
4.stat process exit file when kill process dire
5.sync cli vendor
6.fix CVE-2020-13401
7.do not add w to LDFLAGS
8.add files in proc for mask
9.fix docker load files leak
10.do not sync if BYPAAS_SYNC is false
11.fix panic on single character volumes
12.fix stats memory usage display error
13.add more messages for ops when device not found
14.mask proc pin_memory