From f6c318097bd5a33ebc83c6166593fab2d13b6faf Mon Sep 17 00:00:00 2001 From: Cesar Talledo Date: Fri, 31 Jul 2026 14:45:06 -0700 Subject: [PATCH 1/3] [sysbox-runc] Updating submodule. Signed-off-by: Cesar Talledo --- sysbox-runc | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/sysbox-runc b/sysbox-runc index 42f6b75d..081856cc 160000 --- a/sysbox-runc +++ b/sysbox-runc @@ -1 +1 @@ -Subproject commit 42f6b75d55aaf55c666370d302e94d941239244e +Subproject commit 081856cc5d17e7095f066b08d0eca6bb0b515c47 From 393e23c7964f7e02c07fcf0fd3e3c670265a0076 Mon Sep 17 00:00:00 2001 From: Cesar Talledo Date: Fri, 31 Jul 2026 13:52:11 -0700 Subject: [PATCH 2/3] tests: install libc6-dev for fileDac build in mount capability test Same issue as procSys.bats's capability test: compiling fileDac.c failed with "fatal error: sys/types.h: No such file or directory" since libc6-dev is only a recommended (not hard) dependency of gcc on this Ubuntu image. Signed-off-by: Cesar Talledo --- tests/syscall/mount/mount.bats | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/tests/syscall/mount/mount.bats b/tests/syscall/mount/mount.bats index dce1d9ba..b14bbda6 100644 --- a/tests/syscall/mount/mount.bats +++ b/tests/syscall/mount/mount.bats @@ -157,7 +157,7 @@ function teardown() { local syscont=$(docker_run --rm -v ${SYSBOX_ROOT}/tests/scr/capRaise:/mnt/capRaise ${CTR_IMG_REPO}/ubuntu:latest tail -f /dev/null) # install required software inside the inner container - docker exec "$syscont" bash -c "apt-get update && apt-get install -y make gcc libcap-dev libcap2-bin" + docker exec "$syscont" bash -c "apt-get update && apt-get install -y make gcc libc6-dev libcap-dev libcap2-bin" [ "$status" -eq 0 ] # add a regular user in the inner container From 82881aaaf2ce22ad0ff81487f458162908cb933f Mon Sep 17 00:00:00 2001 From: Cesar Talledo Date: Tue, 28 Jul 2026 14:36:42 -0700 Subject: [PATCH 3/3] Release v0.7.1 Signed-off-by: Cesar Talledo --- CHANGELOG.md | 11 +++++++++++ VERSION | 2 +- 2 files changed, 12 insertions(+), 1 deletion(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 23916f62..388a212b 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,6 +1,17 @@ # Changelog All notable changes to this project will be documented in this file. +## [0.7.1] - 2026-07-28 +### Added +* Support Sysbox on Ubuntu 24.04 with kernel 6.8+ under containerd 2.x; fixes sysfs mount failures ("mount through procfd: operation not permitted") during container/pod creation (issue #1013). +* Fix bug where a container's requested `--ulimit nofile` soft value silently failed to apply when the hard limit exceeded Go's internal rlimit cache threshold (issue #1014). +* Fix nil-pointer crash in sysbox-fs triggered when a container shares another container's network namespace via `docker run --network container:`. +* Fix deadlock in sysbox-fs that could occur when many Docker containers are started/stopped concurrently inside a Sysbox container (issue #998). +* Fix sysbox-mgr serializing container registration behind a global lock unnecessarily, slowing down concurrent container restores when Docker is slow to respond. +* Fix bind mounts failing (or silently landing in the wrong place) when a mount's destination is nested inside another pending mount via a symlink in the container image; affected K8s pods mounting a volume at `/run` on images with a `/var/run -> /run` symlink (issue #1026). +* Update grpc dependency to pick up an HTTP/2 flood-protection fix. +* Remove usage of deprecated Go standard library packages (e.g., `io/ioutil`) across Sysbox components. + ## [0.7.0] - 2025-03-02 ### Added * Port runc security patches for CVE-2025-3133, CVE-2025-52881, CVE-52565. diff --git a/VERSION b/VERSION index faef31a4..39e898a4 100644 --- a/VERSION +++ b/VERSION @@ -1 +1 @@ -0.7.0 +0.7.1