search

containerd / nri

Node Resource Interface
Apache License 2.0
220 stars 58 forks source link

nri depends on 4 years old runc as a transitive dependency #14

Closed mathetake closed 2 years ago

mathetake commented 2 years ago

Ref: https://github.com/containerd/nri/blob/main/go.sum#L430

We found this out by adding google/go-containerregistry(https://github.com/google/go-containerregistry) in Istio project, and after digging into the dependency tree a bit, I realized that containerd/nri is the root cause of this fairly old transitive dependency. https://github.com/istio/istio/pull/33812#issuecomment-876823641

fuweid commented 2 years ago

NRI uses runc@v1.0.0-rc93 right now.

https://github.com/containerd/nri/blob/main/go.sum#L434.

Closing.