[18.09 backport] assorted test-fixes

Dockerfile

@@ -36,7 +36,7 @@ RUN sed -ri "s/(httpredir|deb).debian.org/${APT_MIRROR:-deb.debian.org}/g" /etc/
 FROM base AS criu
 ARG DEBIAN_FRONTEND
 # Install CRIU for checkpoint/restore support
-ENV CRIU_VERSION 3.6
+ENV CRIU_VERSION 3.12
 # Install dependency packages specific to criu
 RUN apt-get update && apt-get install -y --no-install-recommends \
 	libnet-dev \
@@ -251,6 +251,9 @@ RUN apt-get update && apt-get install -y --no-install-recommends \
 	zip \
 	bzip2 \
 	xz-utils \
+	libprotobuf-c1 \
+	libnet1 \
+	libnl-3-200 \
 	&& rm -rf /var/lib/apt/lists/*
 
 RUN pip3 install yamllint==1.16.0

builder/dockerfile/evaluator_test.go

@@ -2,6 +2,7 @@ package dockerfile // import "github.com/docker/docker/builder/dockerfile"
 
 import (
 	"os"
+	"runtime"
 	"testing"
 
 	"github.com/docker/docker/builder/remotecontext"
@@ -23,8 +24,11 @@ func init() {
 	reexec.Init()
 }
 
-func initDispatchTestCases() []dispatchTestCase {
-	dispatchTestCases := []dispatchTestCase{
+func TestDispatch(t *testing.T) {
+	if runtime.GOOS != "windows" {
+ skip.If(t, os.Getuid() != 0, "skipping test that requires root")
+	}
+	testCases := []dispatchTestCase{
  {
  name: "ADD multiple files to file",
  cmd: &instructions.AddCommand{SourcesAndDest: instructions.SourcesAndDest{
@@ -91,54 +95,46 @@ func initDispatchTestCases() []dispatchTestCase {
  }},
  expectedError: "source can't be a URL for COPY",
  files: nil,
- }}
-
-	return dispatchTestCases
-}
-
-func TestDispatch(t *testing.T) {
-	skip.If(t, os.Getuid() != 0, "skipping test that requires root")
-	testCases := initDispatchTestCases()
-
-	for _, testCase := range testCases {
- executeTestCase(t, testCase)
+ },
 	}
-}
 
-func executeTestCase(t *testing.T, testCase dispatchTestCase) {
-	contextDir, cleanup := createTestTempDir(t, "", "builder-dockerfile-test")
-	defer cleanup()
+	for _, tc := range testCases {
+ t.Run(tc.name, func(t *testing.T) {
+ contextDir, cleanup := createTestTempDir(t, "", "builder-dockerfile-test")
+ defer cleanup()
 
-	for filename, content := range testCase.files {
- createTestTempFile(t, contextDir, filename, content, 0777)
-	}
+for filename, content := range tc.files {
+createTestTempFile(t, contextDir, filename, content, 0777)
+}
 
-	tarStream, err := archive.Tar(contextDir, archive.Uncompressed)
+tarStream, err := archive.Tar(contextDir, archive.Uncompressed)
 
-	if err != nil {
- t.Fatalf("Error when creating tar stream: %s", err)
-	}
+if err != nil {
+t.Fatalf("Error when creating tar stream: %s", err)
+}
 
-	defer func() {
- if err = tarStream.Close(); err != nil {
- t.Fatalf("Error when closing tar stream: %s", err)
- }
-	}()
+defer func() {
+if err = tarStream.Close(); err != nil {
+t.Fatalf("Error when closing tar stream: %s", err)
+}
+}()
 
-	context, err := remotecontext.FromArchive(tarStream)
+context, err := remotecontext.FromArchive(tarStream)
 
-	if err != nil {
- t.Fatalf("Error when creating tar context: %s", err)
-	}
+if err != nil {
+t.Fatalf("Error when creating tar context: %s", err)
+}
 
-	defer func() {
- if err = context.Close(); err != nil {
- t.Fatalf("Error when closing tar context: %s", err)
- }
-	}()
+defer func() {
+if err = context.Close(); err != nil {
+t.Fatalf("Error when closing tar context: %s", err)
+}
+}()
 
-	b := newBuilderWithMockBackend()
-	sb := newDispatchRequest(b, '`', context, NewBuildArgs(make(map[string]*string)), newStagesBuildResults())
-	err = dispatch(sb, testCase.cmd)
-	assert.Check(t, is.ErrorContains(err, testCase.expectedError))
+ b := newBuilderWithMockBackend()
+ sb := newDispatchRequest(b, '`', context, NewBuildArgs(make(map[string]*string)), newStagesBuildResults())
+ err = dispatch(sb, tc.cmd)
+ assert.Check(t, is.ErrorContains(err, tc.expectedError))
+ })
+	}
 }

builder/dockerfile/internals_test.go

@@ -47,6 +47,9 @@ func TestDockerfileOutsideTheBuildContext(t *testing.T) {
 	defer cleanup()
 
 	expectedError := "Forbidden path outside the build context: ../../Dockerfile ()"
+	if runtime.GOOS == "windows" {
+ expectedError = "failed to resolve scoped path ../../Dockerfile ()"
+	}
 
 	readAndCheckDockerfile(t, "DockerfileOutsideTheBuildContext", contextDir, "../../Dockerfile", expectedError)
 }
@@ -61,7 +64,9 @@ func TestNonExistingDockerfile(t *testing.T) {
 }
 
 func readAndCheckDockerfile(t *testing.T, testName, contextDir, dockerfilePath, expectedError string) {
-	skip.If(t, os.Getuid() != 0, "skipping test that requires root")
+	if runtime.GOOS != "windows" {
+ skip.If(t, os.Getuid() != 0, "skipping test that requires root")
+	}
 	tarStream, err := archive.Tar(contextDir, archive.Uncompressed)
 	assert.NilError(t, err)
 
@@ -80,7 +85,7 @@ func readAndCheckDockerfile(t *testing.T, testName, contextDir, dockerfilePath,
  Source: tarStream,
 	}
 	_, _, err = remotecontext.Detect(config)
-	assert.Check(t, is.Error(err, expectedError))
+	assert.Check(t, is.ErrorContains(err, expectedError))
 }
 
 func TestCopyRunConfig(t *testing.T) {

cmd/dockerd/config.go

@@ -3,8 +3,10 @@ package main
 import (
 	"runtime"
 
+	"github.com/docker/docker/daemon"
 	"github.com/docker/docker/daemon/config"
 	"github.com/docker/docker/opts"
+	"github.com/docker/docker/plugin/executor/containerd"
 	"github.com/docker/docker/registry"
 	"github.com/spf13/pflag"
 )
@@ -80,6 +82,13 @@ func installCommonConfigFlags(conf *config.Config, flags *pflag.FlagSet) {
 
 	conf.MaxConcurrentDownloads = &maxConcurrentDownloads
 	conf.MaxConcurrentUploads = &maxConcurrentUploads
+
+	flags.StringVar(&conf.ContainerdNamespace, "containerd-namespace", daemon.ContainersNamespace, "Containerd namespace to use")
+	if err := flags.MarkHidden("containerd-namespace"); err != nil {
+ return
+	}
+	flags.StringVar(&conf.ContainerdPluginNamespace, "containerd-plugins-namespace", containerd.PluginNamespace, "Containerd namespace to use for plugins")
+	flags.MarkHidden("containerd-plugins-namespace")
 }
 
 func installRegistryServiceFlags(options *registry.ServiceOptions, flags *pflag.FlagSet) {

cmd/dockerd/daemon.go

@@ -83,6 +83,13 @@ func (cli *DaemonCli) start(opts *daemonOptions) (err error) {
 	if cli.Config, err = loadDaemonCliConfig(opts); err != nil {
  return err
 	}
+
+	if err := configureDaemonLogs(cli.Config); err != nil {
+ return err
+	}
+
+	logrus.Info("Starting up")
+
 	cli.configFile = &opts.configFile
 	cli.flags = opts.flags
 
@@ -94,12 +101,6 @@ func (cli *DaemonCli) start(opts *daemonOptions) (err error) {
  logrus.Warn("Running experimental build")
 	}
 
-	logrus.SetFormatter(&logrus.TextFormatter{
- TimestampFormat: jsonmessage.RFC3339NanoFixed,
- DisableColors: cli.Config.RawLogs,
- FullTimestamp: true,
-	})
-
 	system.InitLCOW(cli.Config.Experimental)
 
 	if err := setDefaultUmask(); err != nil {
@@ -249,6 +250,7 @@ func (cli *DaemonCli) start(opts *daemonOptions) (err error) {
  return fmt.Errorf("Shutting down due to ServeAPI error: %v", errAPI)
 	}
 
+	logrus.Info("Daemon shutdown complete")
 	return nil
 }
 
@@ -471,9 +473,6 @@ func loadDaemonCliConfig(opts *daemonOptions) (*config.Config, error) {
  conf.TLS = true
 	}
 
-	// ensure that the log level is the one set after merging configurations
-	setLogLevel(conf.LogLevel)
-
 	return conf, nil
 }
 
@@ -670,3 +669,22 @@ func systemContainerdRunning() bool {
 	_, err := os.Lstat(containerddefaults.DefaultAddress)
 	return err == nil
 }
+
+// configureDaemonLogs sets the logrus logging level and formatting
+func configureDaemonLogs(conf *config.Config) error {
+	if conf.LogLevel != "" {
+ lvl, err := logrus.ParseLevel(conf.LogLevel)
+ if err != nil {
+ return fmt.Errorf("unable to parse logging level: %s", conf.LogLevel)
+ }
+ logrus.SetLevel(lvl)
+	} else {
+ logrus.SetLevel(logrus.InfoLevel)
+	}
+	logrus.SetFormatter(&logrus.TextFormatter{
+ TimestampFormat: jsonmessage.RFC3339NanoFixed,
+ DisableColors: conf.RawLogs,
+ FullTimestamp: true,
+	})
+	return nil
+}

cmd/dockerd/daemon_test.go

@@ -146,7 +146,6 @@ func TestLoadDaemonCliConfigWithLogLevel(t *testing.T) {
 	assert.NilError(t, err)
 	assert.Assert(t, loadedConfig != nil)
 	assert.Check(t, is.Equal("warn", loadedConfig.LogLevel))
-	assert.Check(t, is.Equal(logrus.WarnLevel, logrus.GetLevel()))
 }
 
 func TestLoadDaemonConfigWithEmbeddedOptions(t *testing.T) {
@@ -180,3 +179,22 @@ func TestLoadDaemonConfigWithRegistryOptions(t *testing.T) {
 	assert.Check(t, is.Len(loadedConfig.Mirrors, 1))
 	assert.Check(t, is.Len(loadedConfig.InsecureRegistries, 1))
 }
+
+func TestConfigureDaemonLogs(t *testing.T) {
+	conf := &config.Config{}
+	err := configureDaemonLogs(conf)
+	assert.NilError(t, err)
+	assert.Check(t, is.Equal(logrus.InfoLevel, logrus.GetLevel()))
+
+	conf.LogLevel = "warn"
+	err = configureDaemonLogs(conf)
+	assert.NilError(t, err)
+	assert.Check(t, is.Equal(logrus.WarnLevel, logrus.GetLevel()))
+
+	conf.LogLevel = "foobar"
+	err = configureDaemonLogs(conf)
+	assert.Error(t, err, "unable to parse logging level: foobar")
+
+	// log level should not be changed after a failure
+	assert.Check(t, is.Equal(logrus.WarnLevel, logrus.GetLevel()))
+}

cmd/dockerd/docker.go

@@ -8,6 +8,7 @@ import (
 	"github.com/docker/docker/cli"
 	"github.com/docker/docker/daemon/config"
 	"github.com/docker/docker/dockerversion"
+	"github.com/docker/docker/pkg/jsonmessage"
 	"github.com/docker/docker/pkg/reexec"
 	"github.com/docker/docker/pkg/term"
 	"github.com/moby/buildkit/util/apicaps"
@@ -54,6 +55,12 @@ func main() {
  return
 	}
 
+	// initial log formatting; this setting is updated after the daemon configuration is loaded.
+	logrus.SetFormatter(&logrus.TextFormatter{
+ TimestampFormat: jsonmessage.RFC3339NanoFixed,
+ FullTimestamp: true,
+	})
+
 	// Set terminal emulation based on platform as required.
 	_, stdout, stderr := term.StdStreams()
 

cmd/dockerd/options.go

@@ -1,15 +1,13 @@
 package main
 
 import (
-	"fmt"
 	"os"
 	"path/filepath"
 
 	cliconfig "github.com/docker/docker/cli/config"
 	"github.com/docker/docker/daemon/config"
 	"github.com/docker/docker/opts"
 	"github.com/docker/go-connections/tlsconfig"
-	"github.com/sirupsen/logrus"
 	"github.com/spf13/pflag"
 )
 
@@ -106,17 +104,3 @@ func (o *daemonOptions) SetDefaultOptions(flags *pflag.FlagSet) {
  }
 	}
 }
-
-// setLogLevel sets the logrus logging level
-func setLogLevel(logLevel string) {
-	if logLevel != "" {
- lvl, err := logrus.ParseLevel(logLevel)
- if err != nil {
- fmt.Fprintf(os.Stderr, "Unable to parse logging level: %s\n", logLevel)
- os.Exit(1)
- }
- logrus.SetLevel(lvl)
-	} else {
- logrus.SetLevel(logrus.InfoLevel)
-	}
-}

daemon/checkpoint.go

@@ -2,7 +2,6 @@ package daemon // import "github.com/docker/docker/daemon"
 
 import (
 	"context"
-	"encoding/json"
 	"fmt"
 	"io/ioutil"
 	"os"
@@ -127,15 +126,7 @@ func (daemon *Daemon) CheckpointList(name string, config types.CheckpointListOpt
  if !d.IsDir() {
  continue
  }
- path := filepath.Join(checkpointDir, d.Name(), "config.json")
- data, err := ioutil.ReadFile(path)
- if err != nil {
- return nil, err
- }
- var cpt types.Checkpoint
- if err := json.Unmarshal(data, &cpt); err != nil {
- return nil, err
- }
+ cpt := types.Checkpoint{Name: d.Name()}
  out = append(out, cpt)
 	}
 

daemon/config/config.go

@@ -229,6 +229,9 @@ type CommonConfig struct {
 	Features map[string]bool `json:"features,omitempty"`
 
 	Builder BuilderConfig `json:"builder,omitempty"`
+
+	ContainerdNamespace string `json:"containerd-namespace,omitempty"`
+	ContainerdPluginNamespace string `json:"containerd-plugin-namespace,omitempty"`
 }
 
 // IsValueSet returns true if a configuration value

daemon/container_operations.go

@@ -813,7 +813,7 @@ func (daemon *Daemon) connectToNetwork(container *container.Container, idOrName
 	return nil
 }
 
-func updateJoinInfo(networkSettings *network.Settings, n libnetwork.Network, ep libnetwork.Endpoint) error { // nolint: interfacer
+func updateJoinInfo(networkSettings *network.Settings, n libnetwork.Network, ep libnetwork.Endpoint) error {
 	if ep == nil {
  return errors.New("invalid enppoint whhile building portmap info")
 	}

Dockerfile

@@ -36,7 +36,7 @@ RUN sed -ri "s/(httpredir|deb).debian.org/${APT_MIRROR:-deb.debian.org}/g" /etc/
 FROM base AS criu
 ARG DEBIAN_FRONTEND
 # Install CRIU for checkpoint/restore support
-ENV CRIU_VERSION 3.6
+ENV CRIU_VERSION 3.12
 # Install dependency packages specific to criu
 RUN apt-get update && apt-get install -y --no-install-recommends \
 	libnet-dev \
@@ -251,6 +251,9 @@ RUN apt-get update && apt-get install -y --no-install-recommends \
 	zip \
 	bzip2 \
 	xz-utils \
+	libprotobuf-c1 \
+	libnet1 \
+	libnl-3-200 \
 	&& rm -rf /var/lib/apt/lists/*
 
 RUN pip3 install yamllint==1.16.0

builder/dockerfile/evaluator_test.go

@@ -2,6 +2,7 @@ package dockerfile // import "github.com/docker/docker/builder/dockerfile"
 
 import (
 	"os"
+	"runtime"
 	"testing"
 
 	"github.com/docker/docker/builder/remotecontext"
@@ -23,8 +24,11 @@ func init() {
 	reexec.Init()
 }
 
-func initDispatchTestCases() []dispatchTestCase {
-	dispatchTestCases := []dispatchTestCase{
+func TestDispatch(t *testing.T) {
+	if runtime.GOOS != "windows" {
+ skip.If(t, os.Getuid() != 0, "skipping test that requires root")
+	}
+	testCases := []dispatchTestCase{
  {
  name: "ADD multiple files to file",
  cmd: &instructions.AddCommand{SourcesAndDest: instructions.SourcesAndDest{
@@ -91,54 +95,46 @@ func initDispatchTestCases() []dispatchTestCase {
  }},
  expectedError: "source can't be a URL for COPY",
  files: nil,
- }}
-
-	return dispatchTestCases
-}
-
-func TestDispatch(t *testing.T) {
-	skip.If(t, os.Getuid() != 0, "skipping test that requires root")
-	testCases := initDispatchTestCases()
-
-	for _, testCase := range testCases {
- executeTestCase(t, testCase)
+ },
 	}
-}
 
-func executeTestCase(t *testing.T, testCase dispatchTestCase) {
-	contextDir, cleanup := createTestTempDir(t, "", "builder-dockerfile-test")
-	defer cleanup()
+	for _, tc := range testCases {
+ t.Run(tc.name, func(t *testing.T) {
+ contextDir, cleanup := createTestTempDir(t, "", "builder-dockerfile-test")
+ defer cleanup()
 
-	for filename, content := range testCase.files {
- createTestTempFile(t, contextDir, filename, content, 0777)
-	}
+for filename, content := range tc.files {
+createTestTempFile(t, contextDir, filename, content, 0777)
+}
 
-	tarStream, err := archive.Tar(contextDir, archive.Uncompressed)
+tarStream, err := archive.Tar(contextDir, archive.Uncompressed)
 
-	if err != nil {
- t.Fatalf("Error when creating tar stream: %s", err)
-	}
+if err != nil {
+t.Fatalf("Error when creating tar stream: %s", err)
+}
 
-	defer func() {
- if err = tarStream.Close(); err != nil {
- t.Fatalf("Error when closing tar stream: %s", err)
- }
-	}()
+defer func() {
+if err = tarStream.Close(); err != nil {
+t.Fatalf("Error when closing tar stream: %s", err)
+}
+}()
 
-	context, err := remotecontext.FromArchive(tarStream)
+context, err := remotecontext.FromArchive(tarStream)
 
-	if err != nil {
- t.Fatalf("Error when creating tar context: %s", err)
-	}
+if err != nil {
+t.Fatalf("Error when creating tar context: %s", err)
+}
 
-	defer func() {
- if err = context.Close(); err != nil {
- t.Fatalf("Error when closing tar context: %s", err)
- }
-	}()
+defer func() {
+if err = context.Close(); err != nil {
+t.Fatalf("Error when closing tar context: %s", err)
+}
+}()
 
-	b := newBuilderWithMockBackend()
-	sb := newDispatchRequest(b, '`', context, NewBuildArgs(make(map[string]*string)), newStagesBuildResults())
-	err = dispatch(sb, testCase.cmd)
-	assert.Check(t, is.ErrorContains(err, testCase.expectedError))
+ b := newBuilderWithMockBackend()
+ sb := newDispatchRequest(b, '`', context, NewBuildArgs(make(map[string]*string)), newStagesBuildResults())
+ err = dispatch(sb, tc.cmd)
+ assert.Check(t, is.ErrorContains(err, tc.expectedError))
+ })
+	}
 }

builder/dockerfile/internals_test.go

@@ -47,6 +47,9 @@ func TestDockerfileOutsideTheBuildContext(t *testing.T) {
 	defer cleanup()
 
 	expectedError := "Forbidden path outside the build context: ../../Dockerfile ()"
+	if runtime.GOOS == "windows" {
+ expectedError = "failed to resolve scoped path ../../Dockerfile ()"
+	}
 
 	readAndCheckDockerfile(t, "DockerfileOutsideTheBuildContext", contextDir, "../../Dockerfile", expectedError)
 }
@@ -61,7 +64,9 @@ func TestNonExistingDockerfile(t *testing.T) {
 }
 
 func readAndCheckDockerfile(t *testing.T, testName, contextDir, dockerfilePath, expectedError string) {
-	skip.If(t, os.Getuid() != 0, "skipping test that requires root")
+	if runtime.GOOS != "windows" {
+ skip.If(t, os.Getuid() != 0, "skipping test that requires root")
+	}
 	tarStream, err := archive.Tar(contextDir, archive.Uncompressed)
 	assert.NilError(t, err)
 
@@ -80,7 +85,7 @@ func readAndCheckDockerfile(t *testing.T, testName, contextDir, dockerfilePath,
  Source: tarStream,
 	}
 	_, _, err = remotecontext.Detect(config)
-	assert.Check(t, is.Error(err, expectedError))
+	assert.Check(t, is.ErrorContains(err, expectedError))
 }
 
 func TestCopyRunConfig(t *testing.T) {

cmd/dockerd/config.go

@@ -3,8 +3,10 @@ package main
 import (
 	"runtime"
 
+	"github.com/docker/docker/daemon"
 	"github.com/docker/docker/daemon/config"
 	"github.com/docker/docker/opts"
+	"github.com/docker/docker/plugin/executor/containerd"
 	"github.com/docker/docker/registry"
 	"github.com/spf13/pflag"
 )
@@ -80,6 +82,13 @@ func installCommonConfigFlags(conf *config.Config, flags *pflag.FlagSet) {
 
 	conf.MaxConcurrentDownloads = &maxConcurrentDownloads
 	conf.MaxConcurrentUploads = &maxConcurrentUploads
+
+	flags.StringVar(&conf.ContainerdNamespace, "containerd-namespace", daemon.ContainersNamespace, "Containerd namespace to use")
+	if err := flags.MarkHidden("containerd-namespace"); err != nil {
+ return
+	}
+	flags.StringVar(&conf.ContainerdPluginNamespace, "containerd-plugins-namespace", containerd.PluginNamespace, "Containerd namespace to use for plugins")
+	flags.MarkHidden("containerd-plugins-namespace")
 }
 
 func installRegistryServiceFlags(options *registry.ServiceOptions, flags *pflag.FlagSet) {

cmd/dockerd/daemon.go

@@ -83,6 +83,13 @@ func (cli *DaemonCli) start(opts *daemonOptions) (err error) {
 	if cli.Config, err = loadDaemonCliConfig(opts); err != nil {
  return err
 	}
+
+	if err := configureDaemonLogs(cli.Config); err != nil {
+ return err
+	}
+
+	logrus.Info("Starting up")
+
 	cli.configFile = &opts.configFile
 	cli.flags = opts.flags
 
@@ -94,12 +101,6 @@ func (cli *DaemonCli) start(opts *daemonOptions) (err error) {
  logrus.Warn("Running experimental build")
 	}
 
-	logrus.SetFormatter(&logrus.TextFormatter{
- TimestampFormat: jsonmessage.RFC3339NanoFixed,
- DisableColors: cli.Config.RawLogs,
- FullTimestamp: true,
-	})
-
 	system.InitLCOW(cli.Config.Experimental)
 
 	if err := setDefaultUmask(); err != nil {
@@ -249,6 +250,7 @@ func (cli *DaemonCli) start(opts *daemonOptions) (err error) {
  return fmt.Errorf("Shutting down due to ServeAPI error: %v", errAPI)
 	}
 
+	logrus.Info("Daemon shutdown complete")
 	return nil
 }
 
@@ -471,9 +473,6 @@ func loadDaemonCliConfig(opts *daemonOptions) (*config.Config, error) {
  conf.TLS = true
 	}
 
-	// ensure that the log level is the one set after merging configurations
-	setLogLevel(conf.LogLevel)
-
 	return conf, nil
 }
 
@@ -670,3 +669,22 @@ func systemContainerdRunning() bool {
 	_, err := os.Lstat(containerddefaults.DefaultAddress)
 	return err == nil
 }
+
+// configureDaemonLogs sets the logrus logging level and formatting
+func configureDaemonLogs(conf *config.Config) error {
+	if conf.LogLevel != "" {
+ lvl, err := logrus.ParseLevel(conf.LogLevel)
+ if err != nil {
+ return fmt.Errorf("unable to parse logging level: %s", conf.LogLevel)
+ }
+ logrus.SetLevel(lvl)
+	} else {
+ logrus.SetLevel(logrus.InfoLevel)
+	}
+	logrus.SetFormatter(&logrus.TextFormatter{
+ TimestampFormat: jsonmessage.RFC3339NanoFixed,
+ DisableColors: conf.RawLogs,
+ FullTimestamp: true,
+	})
+	return nil
+}

cmd/dockerd/daemon_test.go

@@ -146,7 +146,6 @@ func TestLoadDaemonCliConfigWithLogLevel(t *testing.T) {
 	assert.NilError(t, err)
 	assert.Assert(t, loadedConfig != nil)
 	assert.Check(t, is.Equal("warn", loadedConfig.LogLevel))
-	assert.Check(t, is.Equal(logrus.WarnLevel, logrus.GetLevel()))
 }
 
 func TestLoadDaemonConfigWithEmbeddedOptions(t *testing.T) {
@@ -180,3 +179,22 @@ func TestLoadDaemonConfigWithRegistryOptions(t *testing.T) {
 	assert.Check(t, is.Len(loadedConfig.Mirrors, 1))
 	assert.Check(t, is.Len(loadedConfig.InsecureRegistries, 1))
 }
+
+func TestConfigureDaemonLogs(t *testing.T) {
+	conf := &config.Config{}
+	err := configureDaemonLogs(conf)
+	assert.NilError(t, err)
+	assert.Check(t, is.Equal(logrus.InfoLevel, logrus.GetLevel()))
+
+	conf.LogLevel = "warn"
+	err = configureDaemonLogs(conf)
+	assert.NilError(t, err)
+	assert.Check(t, is.Equal(logrus.WarnLevel, logrus.GetLevel()))
+
+	conf.LogLevel = "foobar"
+	err = configureDaemonLogs(conf)
+	assert.Error(t, err, "unable to parse logging level: foobar")
+
+	// log level should not be changed after a failure
+	assert.Check(t, is.Equal(logrus.WarnLevel, logrus.GetLevel()))
+}

cmd/dockerd/docker.go

@@ -8,6 +8,7 @@ import (
 	"github.com/docker/docker/cli"
 	"github.com/docker/docker/daemon/config"
 	"github.com/docker/docker/dockerversion"
+	"github.com/docker/docker/pkg/jsonmessage"
 	"github.com/docker/docker/pkg/reexec"
 	"github.com/docker/docker/pkg/term"
 	"github.com/moby/buildkit/util/apicaps"
@@ -54,6 +55,12 @@ func main() {
  return
 	}
 
+	// initial log formatting; this setting is updated after the daemon configuration is loaded.
+	logrus.SetFormatter(&logrus.TextFormatter{
+ TimestampFormat: jsonmessage.RFC3339NanoFixed,
+ FullTimestamp: true,
+	})
+
 	// Set terminal emulation based on platform as required.
 	_, stdout, stderr := term.StdStreams()
 

cmd/dockerd/options.go

@@ -1,15 +1,13 @@
 package main
 
 import (
-	"fmt"
 	"os"
 	"path/filepath"
 
 	cliconfig "github.com/docker/docker/cli/config"
 	"github.com/docker/docker/daemon/config"
 	"github.com/docker/docker/opts"
 	"github.com/docker/go-connections/tlsconfig"
-	"github.com/sirupsen/logrus"
 	"github.com/spf13/pflag"
 )
 
@@ -106,17 +104,3 @@ func (o *daemonOptions) SetDefaultOptions(flags *pflag.FlagSet) {
  }
 	}
 }
-
-// setLogLevel sets the logrus logging level
-func setLogLevel(logLevel string) {
-	if logLevel != "" {
- lvl, err := logrus.ParseLevel(logLevel)
- if err != nil {
- fmt.Fprintf(os.Stderr, "Unable to parse logging level: %s\n", logLevel)
- os.Exit(1)
- }
- logrus.SetLevel(lvl)
-	} else {
- logrus.SetLevel(logrus.InfoLevel)
-	}
-}

daemon/checkpoint.go

@@ -2,7 +2,6 @@ package daemon // import "github.com/docker/docker/daemon"
 
 import (
 	"context"
-	"encoding/json"
 	"fmt"
 	"io/ioutil"
 	"os"
@@ -127,15 +126,7 @@ func (daemon *Daemon) CheckpointList(name string, config types.CheckpointListOpt
  if !d.IsDir() {
  continue
  }
- path := filepath.Join(checkpointDir, d.Name(), "config.json")
- data, err := ioutil.ReadFile(path)
- if err != nil {
- return nil, err
- }
- var cpt types.Checkpoint
- if err := json.Unmarshal(data, &cpt); err != nil {
- return nil, err
- }
+ cpt := types.Checkpoint{Name: d.Name()}
  out = append(out, cpt)
 	}
 

daemon/config/config.go

@@ -229,6 +229,9 @@ type CommonConfig struct {
 	Features map[string]bool `json:"features,omitempty"`
 
 	Builder BuilderConfig `json:"builder,omitempty"`
+
+	ContainerdNamespace string `json:"containerd-namespace,omitempty"`
+	ContainerdPluginNamespace string `json:"containerd-plugin-namespace,omitempty"`
 }
 
 // IsValueSet returns true if a configuration value

daemon/container_operations.go

@@ -813,7 +813,7 @@ func (daemon *Daemon) connectToNetwork(container *container.Container, idOrName
 	return nil
 }
 
-func updateJoinInfo(networkSettings *network.Settings, n libnetwork.Network, ep libnetwork.Endpoint) error { // nolint: interfacer
+func updateJoinInfo(networkSettings *network.Settings, n libnetwork.Network, ep libnetwork.Endpoint) error {
 	if ep == nil {
  return errors.New("invalid enppoint whhile building portmap info")
 	}

Dockerfile

@@ -36,7 +36,7 @@ RUN sed -ri "s/(httpredir|deb).debian.org/${APT_MIRROR:-deb.debian.org}/g" /etc/
 FROM base AS criu
 ARG DEBIAN_FRONTEND
 # Install CRIU for checkpoint/restore support
-ENV CRIU_VERSION 3.6
+ENV CRIU_VERSION 3.12
 # Install dependency packages specific to criu
 RUN apt-get update && apt-get install -y --no-install-recommends \
 	libnet-dev \
@@ -251,6 +251,9 @@ RUN apt-get update && apt-get install -y --no-install-recommends \
 	zip \
 	bzip2 \
 	xz-utils \
+	libprotobuf-c1 \
+	libnet1 \
+	libnl-3-200 \
 	&& rm -rf /var/lib/apt/lists/*
 
 RUN pip3 install yamllint==1.16.0

builder/dockerfile/evaluator_test.go

@@ -2,6 +2,7 @@ package dockerfile // import "github.com/docker/docker/builder/dockerfile"
 
 import (
 	"os"
+	"runtime"
 	"testing"
 
 	"github.com/docker/docker/builder/remotecontext"
@@ -23,8 +24,11 @@ func init() {
 	reexec.Init()
 }
 
-func initDispatchTestCases() []dispatchTestCase {
-	dispatchTestCases := []dispatchTestCase{
+func TestDispatch(t *testing.T) {
+	if runtime.GOOS != "windows" {
+ skip.If(t, os.Getuid() != 0, "skipping test that requires root")
+	}
+	testCases := []dispatchTestCase{
  {
  name: "ADD multiple files to file",
  cmd: &instructions.AddCommand{SourcesAndDest: instructions.SourcesAndDest{
@@ -91,54 +95,46 @@ func initDispatchTestCases() []dispatchTestCase {
  }},
  expectedError: "source can't be a URL for COPY",
  files: nil,
- }}
-
-	return dispatchTestCases
-}
-
-func TestDispatch(t *testing.T) {
-	skip.If(t, os.Getuid() != 0, "skipping test that requires root")
-	testCases := initDispatchTestCases()
-
-	for _, testCase := range testCases {
- executeTestCase(t, testCase)
+ },
 	}
-}
 
-func executeTestCase(t *testing.T, testCase dispatchTestCase) {
-	contextDir, cleanup := createTestTempDir(t, "", "builder-dockerfile-test")
-	defer cleanup()
+	for _, tc := range testCases {
+ t.Run(tc.name, func(t *testing.T) {
+ contextDir, cleanup := createTestTempDir(t, "", "builder-dockerfile-test")
+ defer cleanup()
 
-	for filename, content := range testCase.files {
- createTestTempFile(t, contextDir, filename, content, 0777)
-	}
+for filename, content := range tc.files {
+createTestTempFile(t, contextDir, filename, content, 0777)
+}
 
-	tarStream, err := archive.Tar(contextDir, archive.Uncompressed)
+tarStream, err := archive.Tar(contextDir, archive.Uncompressed)
 
-	if err != nil {
- t.Fatalf("Error when creating tar stream: %s", err)
-	}
+if err != nil {
+t.Fatalf("Error when creating tar stream: %s", err)
+}
 
-	defer func() {
- if err = tarStream.Close(); err != nil {
- t.Fatalf("Error when closing tar stream: %s", err)
- }
-	}()
+defer func() {
+if err = tarStream.Close(); err != nil {
+t.Fatalf("Error when closing tar stream: %s", err)
+}
+}()
 
-	context, err := remotecontext.FromArchive(tarStream)
+context, err := remotecontext.FromArchive(tarStream)
 
-	if err != nil {
- t.Fatalf("Error when creating tar context: %s", err)
-	}
+if err != nil {
+t.Fatalf("Error when creating tar context: %s", err)
+}
 
-	defer func() {
- if err = context.Close(); err != nil {
- t.Fatalf("Error when closing tar context: %s", err)
- }
-	}()
+defer func() {
+if err = context.Close(); err != nil {
+t.Fatalf("Error when closing tar context: %s", err)
+}
+}()
 
-	b := newBuilderWithMockBackend()
-	sb := newDispatchRequest(b, '`', context, NewBuildArgs(make(map[string]*string)), newStagesBuildResults())
-	err = dispatch(sb, testCase.cmd)
-	assert.Check(t, is.ErrorContains(err, testCase.expectedError))
+ b := newBuilderWithMockBackend()
+ sb := newDispatchRequest(b, '`', context, NewBuildArgs(make(map[string]*string)), newStagesBuildResults())
+ err = dispatch(sb, tc.cmd)
+ assert.Check(t, is.ErrorContains(err, tc.expectedError))
+ })
+	}
 }

builder/dockerfile/internals_test.go

@@ -47,6 +47,9 @@ func TestDockerfileOutsideTheBuildContext(t *testing.T) {
 	defer cleanup()
 
 	expectedError := "Forbidden path outside the build context: ../../Dockerfile ()"
+	if runtime.GOOS == "windows" {
+ expectedError = "failed to resolve scoped path ../../Dockerfile ()"
+	}
 
 	readAndCheckDockerfile(t, "DockerfileOutsideTheBuildContext", contextDir, "../../Dockerfile", expectedError)
 }
@@ -61,7 +64,9 @@ func TestNonExistingDockerfile(t *testing.T) {
 }
 
 func readAndCheckDockerfile(t *testing.T, testName, contextDir, dockerfilePath, expectedError string) {
-	skip.If(t, os.Getuid() != 0, "skipping test that requires root")
+	if runtime.GOOS != "windows" {
+ skip.If(t, os.Getuid() != 0, "skipping test that requires root")
+	}
 	tarStream, err := archive.Tar(contextDir, archive.Uncompressed)
 	assert.NilError(t, err)
 
@@ -80,7 +85,7 @@ func readAndCheckDockerfile(t *testing.T, testName, contextDir, dockerfilePath,
  Source: tarStream,
 	}
 	_, _, err = remotecontext.Detect(config)
-	assert.Check(t, is.Error(err, expectedError))
+	assert.Check(t, is.ErrorContains(err, expectedError))
 }
 
 func TestCopyRunConfig(t *testing.T) {

cmd/dockerd/config.go

@@ -3,8 +3,10 @@ package main
 import (
 	"runtime"
 
+	"github.com/docker/docker/daemon"
 	"github.com/docker/docker/daemon/config"
 	"github.com/docker/docker/opts"
+	"github.com/docker/docker/plugin/executor/containerd"
 	"github.com/docker/docker/registry"
 	"github.com/spf13/pflag"
 )
@@ -80,6 +82,13 @@ func installCommonConfigFlags(conf *config.Config, flags *pflag.FlagSet) {
 
 	conf.MaxConcurrentDownloads = &maxConcurrentDownloads
 	conf.MaxConcurrentUploads = &maxConcurrentUploads
+
+	flags.StringVar(&conf.ContainerdNamespace, "containerd-namespace", daemon.ContainersNamespace, "Containerd namespace to use")
+	if err := flags.MarkHidden("containerd-namespace"); err != nil {
+ return
+	}
+	flags.StringVar(&conf.ContainerdPluginNamespace, "containerd-plugins-namespace", containerd.PluginNamespace, "Containerd namespace to use for plugins")
+	flags.MarkHidden("containerd-plugins-namespace")
 }
 
 func installRegistryServiceFlags(options *registry.ServiceOptions, flags *pflag.FlagSet) {

cmd/dockerd/daemon.go

@@ -83,6 +83,13 @@ func (cli *DaemonCli) start(opts *daemonOptions) (err error) {
 	if cli.Config, err = loadDaemonCliConfig(opts); err != nil {
  return err
 	}
+
+	if err := configureDaemonLogs(cli.Config); err != nil {
+ return err
+	}
+
+	logrus.Info("Starting up")
+
 	cli.configFile = &opts.configFile
 	cli.flags = opts.flags
 
@@ -94,12 +101,6 @@ func (cli *DaemonCli) start(opts *daemonOptions) (err error) {
  logrus.Warn("Running experimental build")
 	}
 
-	logrus.SetFormatter(&logrus.TextFormatter{
- TimestampFormat: jsonmessage.RFC3339NanoFixed,
- DisableColors: cli.Config.RawLogs,
- FullTimestamp: true,
-	})
-
 	system.InitLCOW(cli.Config.Experimental)
 
 	if err := setDefaultUmask(); err != nil {
@@ -249,6 +250,7 @@ func (cli *DaemonCli) start(opts *daemonOptions) (err error) {
  return fmt.Errorf("Shutting down due to ServeAPI error: %v", errAPI)
 	}
 
+	logrus.Info("Daemon shutdown complete")
 	return nil
 }
 
@@ -471,9 +473,6 @@ func loadDaemonCliConfig(opts *daemonOptions) (*config.Config, error) {
  conf.TLS = true
 	}
 
-	// ensure that the log level is the one set after merging configurations
-	setLogLevel(conf.LogLevel)
-
 	return conf, nil
 }
 
@@ -670,3 +669,22 @@ func systemContainerdRunning() bool {
 	_, err := os.Lstat(containerddefaults.DefaultAddress)
 	return err == nil
 }
+
+// configureDaemonLogs sets the logrus logging level and formatting
+func configureDaemonLogs(conf *config.Config) error {
+	if conf.LogLevel != "" {
+ lvl, err := logrus.ParseLevel(conf.LogLevel)
+ if err != nil {
+ return fmt.Errorf("unable to parse logging level: %s", conf.LogLevel)
+ }
+ logrus.SetLevel(lvl)
+	} else {
+ logrus.SetLevel(logrus.InfoLevel)
+	}
+	logrus.SetFormatter(&logrus.TextFormatter{
+ TimestampFormat: jsonmessage.RFC3339NanoFixed,
+ DisableColors: conf.RawLogs,
+ FullTimestamp: true,
+	})
+	return nil
+}

cmd/dockerd/daemon_test.go

@@ -146,7 +146,6 @@ func TestLoadDaemonCliConfigWithLogLevel(t *testing.T) {
 	assert.NilError(t, err)
 	assert.Assert(t, loadedConfig != nil)
 	assert.Check(t, is.Equal("warn", loadedConfig.LogLevel))
-	assert.Check(t, is.Equal(logrus.WarnLevel, logrus.GetLevel()))
 }
 
 func TestLoadDaemonConfigWithEmbeddedOptions(t *testing.T) {
@@ -180,3 +179,22 @@ func TestLoadDaemonConfigWithRegistryOptions(t *testing.T) {
 	assert.Check(t, is.Len(loadedConfig.Mirrors, 1))
 	assert.Check(t, is.Len(loadedConfig.InsecureRegistries, 1))
 }
+
+func TestConfigureDaemonLogs(t *testing.T) {
+	conf := &config.Config{}
+	err := configureDaemonLogs(conf)
+	assert.NilError(t, err)
+	assert.Check(t, is.Equal(logrus.InfoLevel, logrus.GetLevel()))
+
+	conf.LogLevel = "warn"
+	err = configureDaemonLogs(conf)
+	assert.NilError(t, err)
+	assert.Check(t, is.Equal(logrus.WarnLevel, logrus.GetLevel()))
+
+	conf.LogLevel = "foobar"
+	err = configureDaemonLogs(conf)
+	assert.Error(t, err, "unable to parse logging level: foobar")
+
+	// log level should not be changed after a failure
+	assert.Check(t, is.Equal(logrus.WarnLevel, logrus.GetLevel()))
+}

cmd/dockerd/docker.go

@@ -8,6 +8,7 @@ import (
 	"github.com/docker/docker/cli"
 	"github.com/docker/docker/daemon/config"
 	"github.com/docker/docker/dockerversion"
+	"github.com/docker/docker/pkg/jsonmessage"
 	"github.com/docker/docker/pkg/reexec"
 	"github.com/docker/docker/pkg/term"
 	"github.com/moby/buildkit/util/apicaps"
@@ -54,6 +55,12 @@ func main() {
  return
 	}
 
+	// initial log formatting; this setting is updated after the daemon configuration is loaded.
+	logrus.SetFormatter(&logrus.TextFormatter{
+ TimestampFormat: jsonmessage.RFC3339NanoFixed,
+ FullTimestamp: true,
+	})
+
 	// Set terminal emulation based on platform as required.
 	_, stdout, stderr := term.StdStreams()
 

cmd/dockerd/options.go

@@ -1,15 +1,13 @@
 package main
 
 import (
-	"fmt"
 	"os"
 	"path/filepath"
 
 	cliconfig "github.com/docker/docker/cli/config"
 	"github.com/docker/docker/daemon/config"
 	"github.com/docker/docker/opts"
 	"github.com/docker/go-connections/tlsconfig"
-	"github.com/sirupsen/logrus"
 	"github.com/spf13/pflag"
 )
 
@@ -106,17 +104,3 @@ func (o *daemonOptions) SetDefaultOptions(flags *pflag.FlagSet) {
  }
 	}
 }
-
-// setLogLevel sets the logrus logging level
-func setLogLevel(logLevel string) {
-	if logLevel != "" {
- lvl, err := logrus.ParseLevel(logLevel)
- if err != nil {
- fmt.Fprintf(os.Stderr, "Unable to parse logging level: %s\n", logLevel)
- os.Exit(1)
- }
- logrus.SetLevel(lvl)
-	} else {
- logrus.SetLevel(logrus.InfoLevel)
-	}
-}

daemon/checkpoint.go

@@ -2,7 +2,6 @@ package daemon // import "github.com/docker/docker/daemon"
 
 import (
 	"context"
-	"encoding/json"
 	"fmt"
 	"io/ioutil"
 	"os"
@@ -127,15 +126,7 @@ func (daemon *Daemon) CheckpointList(name string, config types.CheckpointListOpt
  if !d.IsDir() {
  continue
  }
- path := filepath.Join(checkpointDir, d.Name(), "config.json")
- data, err := ioutil.ReadFile(path)
- if err != nil {
- return nil, err
- }
- var cpt types.Checkpoint
- if err := json.Unmarshal(data, &cpt); err != nil {
- return nil, err
- }
+ cpt := types.Checkpoint{Name: d.Name()}
  out = append(out, cpt)
 	}
 

daemon/config/config.go

@@ -229,6 +229,9 @@ type CommonConfig struct {
 	Features map[string]bool `json:"features,omitempty"`
 
 	Builder BuilderConfig `json:"builder,omitempty"`
+
+	ContainerdNamespace string `json:"containerd-namespace,omitempty"`
+	ContainerdPluginNamespace string `json:"containerd-plugin-namespace,omitempty"`
 }
 
 // IsValueSet returns true if a configuration value

daemon/container_operations.go

@@ -813,7 +813,7 @@ func (daemon *Daemon) connectToNetwork(container *container.Container, idOrName
 	return nil
 }
 
-func updateJoinInfo(networkSettings *network.Settings, n libnetwork.Network, ep libnetwork.Endpoint) error { // nolint: interfacer
+func updateJoinInfo(networkSettings *network.Settings, n libnetwork.Network, ep libnetwork.Endpoint) error {
 	if ep == nil {
  return errors.New("invalid enppoint whhile building portmap info")
 	}

Dockerfile

@@ -36,7 +36,7 @@ RUN sed -ri "s/(httpredir|deb).debian.org/${APT_MIRROR:-deb.debian.org}/g" /etc/
 FROM base AS criu
 ARG DEBIAN_FRONTEND
 # Install CRIU for checkpoint/restore support
-ENV CRIU_VERSION 3.6
+ENV CRIU_VERSION 3.12
 # Install dependency packages specific to criu
 RUN apt-get update && apt-get install -y --no-install-recommends \
 	libnet-dev \
@@ -251,6 +251,9 @@ RUN apt-get update && apt-get install -y --no-install-recommends \
 	zip \
 	bzip2 \
 	xz-utils \
+	libprotobuf-c1 \
+	libnet1 \
+	libnl-3-200 \
 	&& rm -rf /var/lib/apt/lists/*
 
 RUN pip3 install yamllint==1.16.0

builder/dockerfile/evaluator_test.go

@@ -2,6 +2,7 @@ package dockerfile // import "github.com/docker/docker/builder/dockerfile"
 
 import (
 	"os"
+	"runtime"
 	"testing"
 
 	"github.com/docker/docker/builder/remotecontext"
@@ -23,8 +24,11 @@ func init() {
 	reexec.Init()
 }
 
-func initDispatchTestCases() []dispatchTestCase {
-	dispatchTestCases := []dispatchTestCase{
+func TestDispatch(t *testing.T) {
+	if runtime.GOOS != "windows" {
+ skip.If(t, os.Getuid() != 0, "skipping test that requires root")
+	}
+	testCases := []dispatchTestCase{
  {
  name: "ADD multiple files to file",
  cmd: &instructions.AddCommand{SourcesAndDest: instructions.SourcesAndDest{
@@ -91,54 +95,46 @@ func initDispatchTestCases() []dispatchTestCase {
  }},
  expectedError: "source can't be a URL for COPY",
  files: nil,
- }}
-
-	return dispatchTestCases
-}
-
-func TestDispatch(t *testing.T) {
-	skip.If(t, os.Getuid() != 0, "skipping test that requires root")
-	testCases := initDispatchTestCases()
-
-	for _, testCase := range testCases {
- executeTestCase(t, testCase)
+ },
 	}
-}
 
-func executeTestCase(t *testing.T, testCase dispatchTestCase) {
-	contextDir, cleanup := createTestTempDir(t, "", "builder-dockerfile-test")
-	defer cleanup()
+	for _, tc := range testCases {
+ t.Run(tc.name, func(t *testing.T) {
+ contextDir, cleanup := createTestTempDir(t, "", "builder-dockerfile-test")
+ defer cleanup()
 
-	for filename, content := range testCase.files {
- createTestTempFile(t, contextDir, filename, content, 0777)
-	}
+for filename, content := range tc.files {
+createTestTempFile(t, contextDir, filename, content, 0777)
+}
 
-	tarStream, err := archive.Tar(contextDir, archive.Uncompressed)
+tarStream, err := archive.Tar(contextDir, archive.Uncompressed)
 
-	if err != nil {
- t.Fatalf("Error when creating tar stream: %s", err)
-	}
+if err != nil {
+t.Fatalf("Error when creating tar stream: %s", err)
+}
 
-	defer func() {
- if err = tarStream.Close(); err != nil {
- t.Fatalf("Error when closing tar stream: %s", err)
- }
-	}()
+defer func() {
+if err = tarStream.Close(); err != nil {
+t.Fatalf("Error when closing tar stream: %s", err)
+}
+}()
 
-	context, err := remotecontext.FromArchive(tarStream)
+context, err := remotecontext.FromArchive(tarStream)
 
-	if err != nil {
- t.Fatalf("Error when creating tar context: %s", err)
-	}
+if err != nil {
+t.Fatalf("Error when creating tar context: %s", err)
+}
 
-	defer func() {
- if err = context.Close(); err != nil {
- t.Fatalf("Error when closing tar context: %s", err)
- }
-	}()
+defer func() {
+if err = context.Close(); err != nil {
+t.Fatalf("Error when closing tar context: %s", err)
+}
+}()
 
-	b := newBuilderWithMockBackend()
-	sb := newDispatchRequest(b, '`', context, NewBuildArgs(make(map[string]*string)), newStagesBuildResults())
-	err = dispatch(sb, testCase.cmd)
-	assert.Check(t, is.ErrorContains(err, testCase.expectedError))
+ b := newBuilderWithMockBackend()
+ sb := newDispatchRequest(b, '`', context, NewBuildArgs(make(map[string]*string)), newStagesBuildResults())
+ err = dispatch(sb, tc.cmd)
+ assert.Check(t, is.ErrorContains(err, tc.expectedError))
+ })
+	}
 }

builder/dockerfile/internals_test.go

@@ -47,6 +47,9 @@ func TestDockerfileOutsideTheBuildContext(t *testing.T) {
 	defer cleanup()
 
 	expectedError := "Forbidden path outside the build context: ../../Dockerfile ()"
+	if runtime.GOOS == "windows" {
+ expectedError = "failed to resolve scoped path ../../Dockerfile ()"
+	}
 
 	readAndCheckDockerfile(t, "DockerfileOutsideTheBuildContext", contextDir, "../../Dockerfile", expectedError)
 }
@@ -61,7 +64,9 @@ func TestNonExistingDockerfile(t *testing.T) {
 }
 
 func readAndCheckDockerfile(t *testing.T, testName, contextDir, dockerfilePath, expectedError string) {
-	skip.If(t, os.Getuid() != 0, "skipping test that requires root")
+	if runtime.GOOS != "windows" {
+ skip.If(t, os.Getuid() != 0, "skipping test that requires root")
+	}
 	tarStream, err := archive.Tar(contextDir, archive.Uncompressed)
 	assert.NilError(t, err)
 
@@ -80,7 +85,7 @@ func readAndCheckDockerfile(t *testing.T, testName, contextDir, dockerfilePath,
  Source: tarStream,
 	}
 	_, _, err = remotecontext.Detect(config)
-	assert.Check(t, is.Error(err, expectedError))
+	assert.Check(t, is.ErrorContains(err, expectedError))
 }
 
 func TestCopyRunConfig(t *testing.T) {

cmd/dockerd/config.go

@@ -3,8 +3,10 @@ package main
 import (
 	"runtime"
 
+	"github.com/docker/docker/daemon"
 	"github.com/docker/docker/daemon/config"
 	"github.com/docker/docker/opts"
+	"github.com/docker/docker/plugin/executor/containerd"
 	"github.com/docker/docker/registry"
 	"github.com/spf13/pflag"
 )
@@ -80,6 +82,13 @@ func installCommonConfigFlags(conf *config.Config, flags *pflag.FlagSet) {
 
 	conf.MaxConcurrentDownloads = &maxConcurrentDownloads
 	conf.MaxConcurrentUploads = &maxConcurrentUploads
+
+	flags.StringVar(&conf.ContainerdNamespace, "containerd-namespace", daemon.ContainersNamespace, "Containerd namespace to use")
+	if err := flags.MarkHidden("containerd-namespace"); err != nil {
+ return
+	}
+	flags.StringVar(&conf.ContainerdPluginNamespace, "containerd-plugins-namespace", containerd.PluginNamespace, "Containerd namespace to use for plugins")
+	flags.MarkHidden("containerd-plugins-namespace")
 }
 
 func installRegistryServiceFlags(options *registry.ServiceOptions, flags *pflag.FlagSet) {

cmd/dockerd/daemon.go

@@ -83,6 +83,13 @@ func (cli *DaemonCli) start(opts *daemonOptions) (err error) {
 	if cli.Config, err = loadDaemonCliConfig(opts); err != nil {
  return err
 	}
+
+	if err := configureDaemonLogs(cli.Config); err != nil {
+ return err
+	}
+
+	logrus.Info("Starting up")
+
 	cli.configFile = &opts.configFile
 	cli.flags = opts.flags
 
@@ -94,12 +101,6 @@ func (cli *DaemonCli) start(opts *daemonOptions) (err error) {
  logrus.Warn("Running experimental build")
 	}
 
-	logrus.SetFormatter(&logrus.TextFormatter{
- TimestampFormat: jsonmessage.RFC3339NanoFixed,
- DisableColors: cli.Config.RawLogs,
- FullTimestamp: true,
-	})
-
 	system.InitLCOW(cli.Config.Experimental)
 
 	if err := setDefaultUmask(); err != nil {
@@ -249,6 +250,7 @@ func (cli *DaemonCli) start(opts *daemonOptions) (err error) {
  return fmt.Errorf("Shutting down due to ServeAPI error: %v", errAPI)
 	}
 
+	logrus.Info("Daemon shutdown complete")
 	return nil
 }
 
@@ -471,9 +473,6 @@ func loadDaemonCliConfig(opts *daemonOptions) (*config.Config, error) {
  conf.TLS = true
 	}
 
-	// ensure that the log level is the one set after merging configurations
-	setLogLevel(conf.LogLevel)
-
 	return conf, nil
 }
 
@@ -670,3 +669,22 @@ func systemContainerdRunning() bool {
 	_, err := os.Lstat(containerddefaults.DefaultAddress)
 	return err == nil
 }
+
+// configureDaemonLogs sets the logrus logging level and formatting
+func configureDaemonLogs(conf *config.Config) error {
+	if conf.LogLevel != "" {
+ lvl, err := logrus.ParseLevel(conf.LogLevel)
+ if err != nil {
+ return fmt.Errorf("unable to parse logging level: %s", conf.LogLevel)
+ }
+ logrus.SetLevel(lvl)
+	} else {
+ logrus.SetLevel(logrus.InfoLevel)
+	}
+	logrus.SetFormatter(&logrus.TextFormatter{
+ TimestampFormat: jsonmessage.RFC3339NanoFixed,
+ DisableColors: conf.RawLogs,
+ FullTimestamp: true,
+	})
+	return nil
+}

cmd/dockerd/daemon_test.go

@@ -146,7 +146,6 @@ func TestLoadDaemonCliConfigWithLogLevel(t *testing.T) {
 	assert.NilError(t, err)
 	assert.Assert(t, loadedConfig != nil)
 	assert.Check(t, is.Equal("warn", loadedConfig.LogLevel))
-	assert.Check(t, is.Equal(logrus.WarnLevel, logrus.GetLevel()))
 }
 
 func TestLoadDaemonConfigWithEmbeddedOptions(t *testing.T) {
@@ -180,3 +179,22 @@ func TestLoadDaemonConfigWithRegistryOptions(t *testing.T) {
 	assert.Check(t, is.Len(loadedConfig.Mirrors, 1))
 	assert.Check(t, is.Len(loadedConfig.InsecureRegistries, 1))
 }
+
+func TestConfigureDaemonLogs(t *testing.T) {
+	conf := &config.Config{}
+	err := configureDaemonLogs(conf)
+	assert.NilError(t, err)
+	assert.Check(t, is.Equal(logrus.InfoLevel, logrus.GetLevel()))
+
+	conf.LogLevel = "warn"
+	err = configureDaemonLogs(conf)
+	assert.NilError(t, err)
+	assert.Check(t, is.Equal(logrus.WarnLevel, logrus.GetLevel()))
+
+	conf.LogLevel = "foobar"
+	err = configureDaemonLogs(conf)
+	assert.Error(t, err, "unable to parse logging level: foobar")
+
+	// log level should not be changed after a failure
+	assert.Check(t, is.Equal(logrus.WarnLevel, logrus.GetLevel()))
+}

cmd/dockerd/docker.go

@@ -8,6 +8,7 @@ import (
 	"github.com/docker/docker/cli"
 	"github.com/docker/docker/daemon/config"
 	"github.com/docker/docker/dockerversion"
+	"github.com/docker/docker/pkg/jsonmessage"
 	"github.com/docker/docker/pkg/reexec"
 	"github.com/docker/docker/pkg/term"
 	"github.com/moby/buildkit/util/apicaps"
@@ -54,6 +55,12 @@ func main() {
  return
 	}
 
+	// initial log formatting; this setting is updated after the daemon configuration is loaded.
+	logrus.SetFormatter(&logrus.TextFormatter{
+ TimestampFormat: jsonmessage.RFC3339NanoFixed,
+ FullTimestamp: true,
+	})
+
 	// Set terminal emulation based on platform as required.
 	_, stdout, stderr := term.StdStreams()
 

cmd/dockerd/options.go

@@ -1,15 +1,13 @@
 package main
 
 import (
-	"fmt"
 	"os"
 	"path/filepath"
 
 	cliconfig "github.com/docker/docker/cli/config"
 	"github.com/docker/docker/daemon/config"
 	"github.com/docker/docker/opts"
 	"github.com/docker/go-connections/tlsconfig"
-	"github.com/sirupsen/logrus"
 	"github.com/spf13/pflag"
 )
 
@@ -106,17 +104,3 @@ func (o *daemonOptions) SetDefaultOptions(flags *pflag.FlagSet) {
  }
 	}
 }
-
-// setLogLevel sets the logrus logging level
-func setLogLevel(logLevel string) {
-	if logLevel != "" {
- lvl, err := logrus.ParseLevel(logLevel)
- if err != nil {
- fmt.Fprintf(os.Stderr, "Unable to parse logging level: %s\n", logLevel)
- os.Exit(1)
- }
- logrus.SetLevel(lvl)
-	} else {
- logrus.SetLevel(logrus.InfoLevel)
-	}
-}

daemon/checkpoint.go

@@ -2,7 +2,6 @@ package daemon // import "github.com/docker/docker/daemon"
 
 import (
 	"context"
-	"encoding/json"
 	"fmt"
 	"io/ioutil"
 	"os"
@@ -127,15 +126,7 @@ func (daemon *Daemon) CheckpointList(name string, config types.CheckpointListOpt
  if !d.IsDir() {
  continue
  }
- path := filepath.Join(checkpointDir, d.Name(), "config.json")
- data, err := ioutil.ReadFile(path)
- if err != nil {
- return nil, err
- }
- var cpt types.Checkpoint
- if err := json.Unmarshal(data, &cpt); err != nil {
- return nil, err
- }
+ cpt := types.Checkpoint{Name: d.Name()}
  out = append(out, cpt)
 	}
 

daemon/config/config.go

@@ -229,6 +229,9 @@ type CommonConfig struct {
 	Features map[string]bool `json:"features,omitempty"`
 
 	Builder BuilderConfig `json:"builder,omitempty"`
+
+	ContainerdNamespace string `json:"containerd-namespace,omitempty"`
+	ContainerdPluginNamespace string `json:"containerd-plugin-namespace,omitempty"`
 }
 
 // IsValueSet returns true if a configuration value

daemon/container_operations.go

@@ -813,7 +813,7 @@ func (daemon *Daemon) connectToNetwork(container *container.Container, idOrName
 	return nil
 }
 
-func updateJoinInfo(networkSettings *network.Settings, n libnetwork.Network, ep libnetwork.Endpoint) error { // nolint: interfacer
+func updateJoinInfo(networkSettings *network.Settings, n libnetwork.Network, ep libnetwork.Endpoint) error {
 	if ep == nil {
  return errors.New("invalid enppoint whhile building portmap info")
 	}

Dockerfile

@@ -36,7 +36,7 @@ RUN sed -ri "s/(httpredir|deb).debian.org/${APT_MIRROR:-deb.debian.org}/g" /etc/
 FROM base AS criu
 ARG DEBIAN_FRONTEND
 # Install CRIU for checkpoint/restore support
-ENV CRIU_VERSION 3.6
+ENV CRIU_VERSION 3.12
 # Install dependency packages specific to criu
 RUN apt-get update && apt-get install -y --no-install-recommends \
 	libnet-dev \
@@ -251,6 +251,9 @@ RUN apt-get update && apt-get install -y --no-install-recommends \
 	zip \
 	bzip2 \
 	xz-utils \
+	libprotobuf-c1 \
+	libnet1 \
+	libnl-3-200 \
 	&& rm -rf /var/lib/apt/lists/*
 
 RUN pip3 install yamllint==1.16.0

builder/dockerfile/evaluator_test.go

@@ -2,6 +2,7 @@ package dockerfile // import "github.com/docker/docker/builder/dockerfile"
 
 import (
 	"os"
+	"runtime"
 	"testing"
 
 	"github.com/docker/docker/builder/remotecontext"
@@ -23,8 +24,11 @@ func init() {
 	reexec.Init()
 }
 
-func initDispatchTestCases() []dispatchTestCase {
-	dispatchTestCases := []dispatchTestCase{
+func TestDispatch(t *testing.T) {
+	if runtime.GOOS != "windows" {
+ skip.If(t, os.Getuid() != 0, "skipping test that requires root")
+	}
+	testCases := []dispatchTestCase{
  {
  name: "ADD multiple files to file",
  cmd: &instructions.AddCommand{SourcesAndDest: instructions.SourcesAndDest{
@@ -91,54 +95,46 @@ func initDispatchTestCases() []dispatchTestCase {
  }},
  expectedError: "source can't be a URL for COPY",
  files: nil,
- }}
-
-	return dispatchTestCases
-}
-
-func TestDispatch(t *testing.T) {
-	skip.If(t, os.Getuid() != 0, "skipping test that requires root")
-	testCases := initDispatchTestCases()
-
-	for _, testCase := range testCases {
- executeTestCase(t, testCase)
+ },
 	}
-}
 
-func executeTestCase(t *testing.T, testCase dispatchTestCase) {
-	contextDir, cleanup := createTestTempDir(t, "", "builder-dockerfile-test")
-	defer cleanup()
+	for _, tc := range testCases {
+ t.Run(tc.name, func(t *testing.T) {
+ contextDir, cleanup := createTestTempDir(t, "", "builder-dockerfile-test")
+ defer cleanup()
 
-	for filename, content := range testCase.files {
- createTestTempFile(t, contextDir, filename, content, 0777)
-	}
+for filename, content := range tc.files {
+createTestTempFile(t, contextDir, filename, content, 0777)
+}
 
-	tarStream, err := archive.Tar(contextDir, archive.Uncompressed)
+tarStream, err := archive.Tar(contextDir, archive.Uncompressed)
 
-	if err != nil {
- t.Fatalf("Error when creating tar stream: %s", err)
-	}
+if err != nil {
+t.Fatalf("Error when creating tar stream: %s", err)
+}
 
-	defer func() {
- if err = tarStream.Close(); err != nil {
- t.Fatalf("Error when closing tar stream: %s", err)
- }
-	}()
+defer func() {
+if err = tarStream.Close(); err != nil {
+t.Fatalf("Error when closing tar stream: %s", err)
+}
+}()
 
-	context, err := remotecontext.FromArchive(tarStream)
+context, err := remotecontext.FromArchive(tarStream)
 
-	if err != nil {
- t.Fatalf("Error when creating tar context: %s", err)
-	}
+if err != nil {
+t.Fatalf("Error when creating tar context: %s", err)
+}
 
-	defer func() {
- if err = context.Close(); err != nil {
- t.Fatalf("Error when closing tar context: %s", err)
- }
-	}()
+defer func() {
+if err = context.Close(); err != nil {
+t.Fatalf("Error when closing tar context: %s", err)
+}
+}()
 
-	b := newBuilderWithMockBackend()
-	sb := newDispatchRequest(b, '`', context, NewBuildArgs(make(map[string]*string)), newStagesBuildResults())
-	err = dispatch(sb, testCase.cmd)
-	assert.Check(t, is.ErrorContains(err, testCase.expectedError))
+ b := newBuilderWithMockBackend()
+ sb := newDispatchRequest(b, '`', context, NewBuildArgs(make(map[string]*string)), newStagesBuildResults())
+ err = dispatch(sb, tc.cmd)
+ assert.Check(t, is.ErrorContains(err, tc.expectedError))
+ })
+	}
 }

builder/dockerfile/internals_test.go

@@ -47,6 +47,9 @@ func TestDockerfileOutsideTheBuildContext(t *testing.T) {
 	defer cleanup()
 
 	expectedError := "Forbidden path outside the build context: ../../Dockerfile ()"
+	if runtime.GOOS == "windows" {
+ expectedError = "failed to resolve scoped path ../../Dockerfile ()"
+	}
 
 	readAndCheckDockerfile(t, "DockerfileOutsideTheBuildContext", contextDir, "../../Dockerfile", expectedError)
 }
@@ -61,7 +64,9 @@ func TestNonExistingDockerfile(t *testing.T) {
 }
 
 func readAndCheckDockerfile(t *testing.T, testName, contextDir, dockerfilePath, expectedError string) {
-	skip.If(t, os.Getuid() != 0, "skipping test that requires root")
+	if runtime.GOOS != "windows" {
+ skip.If(t, os.Getuid() != 0, "skipping test that requires root")
+	}
 	tarStream, err := archive.Tar(contextDir, archive.Uncompressed)
 	assert.NilError(t, err)
 
@@ -80,7 +85,7 @@ func readAndCheckDockerfile(t *testing.T, testName, contextDir, dockerfilePath,
  Source: tarStream,
 	}
 	_, _, err = remotecontext.Detect(config)
-	assert.Check(t, is.Error(err, expectedError))
+	assert.Check(t, is.ErrorContains(err, expectedError))
 }
 
 func TestCopyRunConfig(t *testing.T) {

cmd/dockerd/config.go

@@ -3,8 +3,10 @@ package main
 import (
 	"runtime"
 
+	"github.com/docker/docker/daemon"
 	"github.com/docker/docker/daemon/config"
 	"github.com/docker/docker/opts"
+	"github.com/docker/docker/plugin/executor/containerd"
 	"github.com/docker/docker/registry"
 	"github.com/spf13/pflag"
 )
@@ -80,6 +82,13 @@ func installCommonConfigFlags(conf *config.Config, flags *pflag.FlagSet) {
 
 	conf.MaxConcurrentDownloads = &maxConcurrentDownloads
 	conf.MaxConcurrentUploads = &maxConcurrentUploads
+
+	flags.StringVar(&conf.ContainerdNamespace, "containerd-namespace", daemon.ContainersNamespace, "Containerd namespace to use")
+	if err := flags.MarkHidden("containerd-namespace"); err != nil {
+ return
+	}
+	flags.StringVar(&conf.ContainerdPluginNamespace, "containerd-plugins-namespace", containerd.PluginNamespace, "Containerd namespace to use for plugins")
+	flags.MarkHidden("containerd-plugins-namespace")
 }
 
 func installRegistryServiceFlags(options *registry.ServiceOptions, flags *pflag.FlagSet) {

cmd/dockerd/daemon.go

@@ -83,6 +83,13 @@ func (cli *DaemonCli) start(opts *daemonOptions) (err error) {
 	if cli.Config, err = loadDaemonCliConfig(opts); err != nil {
  return err
 	}
+
+	if err := configureDaemonLogs(cli.Config); err != nil {
+ return err
+	}
+
+	logrus.Info("Starting up")
+
 	cli.configFile = &opts.configFile
 	cli.flags = opts.flags
 
@@ -94,12 +101,6 @@ func (cli *DaemonCli) start(opts *daemonOptions) (err error) {
  logrus.Warn("Running experimental build")
 	}
 
-	logrus.SetFormatter(&logrus.TextFormatter{
- TimestampFormat: jsonmessage.RFC3339NanoFixed,
- DisableColors: cli.Config.RawLogs,
- FullTimestamp: true,
-	})
-
 	system.InitLCOW(cli.Config.Experimental)
 
 	if err := setDefaultUmask(); err != nil {
@@ -249,6 +250,7 @@ func (cli *DaemonCli) start(opts *daemonOptions) (err error) {
  return fmt.Errorf("Shutting down due to ServeAPI error: %v", errAPI)
 	}
 
+	logrus.Info("Daemon shutdown complete")
 	return nil
 }
 
@@ -471,9 +473,6 @@ func loadDaemonCliConfig(opts *daemonOptions) (*config.Config, error) {
  conf.TLS = true
 	}
 
-	// ensure that the log level is the one set after merging configurations
-	setLogLevel(conf.LogLevel)
-
 	return conf, nil
 }
 
@@ -670,3 +669,22 @@ func systemContainerdRunning() bool {
 	_, err := os.Lstat(containerddefaults.DefaultAddress)
 	return err == nil
 }
+
+// configureDaemonLogs sets the logrus logging level and formatting
+func configureDaemonLogs(conf *config.Config) error {
+	if conf.LogLevel != "" {
+ lvl, err := logrus.ParseLevel(conf.LogLevel)
+ if err != nil {
+ return fmt.Errorf("unable to parse logging level: %s", conf.LogLevel)
+ }
+ logrus.SetLevel(lvl)
+	} else {
+ logrus.SetLevel(logrus.InfoLevel)
+	}
+	logrus.SetFormatter(&logrus.TextFormatter{
+ TimestampFormat: jsonmessage.RFC3339NanoFixed,
+ DisableColors: conf.RawLogs,
+ FullTimestamp: true,
+	})
+	return nil
+}

cmd/dockerd/daemon_test.go

@@ -146,7 +146,6 @@ func TestLoadDaemonCliConfigWithLogLevel(t *testing.T) {
 	assert.NilError(t, err)
 	assert.Assert(t, loadedConfig != nil)
 	assert.Check(t, is.Equal("warn", loadedConfig.LogLevel))
-	assert.Check(t, is.Equal(logrus.WarnLevel, logrus.GetLevel()))
 }
 
 func TestLoadDaemonConfigWithEmbeddedOptions(t *testing.T) {
@@ -180,3 +179,22 @@ func TestLoadDaemonConfigWithRegistryOptions(t *testing.T) {
 	assert.Check(t, is.Len(loadedConfig.Mirrors, 1))
 	assert.Check(t, is.Len(loadedConfig.InsecureRegistries, 1))
 }
+
+func TestConfigureDaemonLogs(t *testing.T) {
+	conf := &config.Config{}
+	err := configureDaemonLogs(conf)
+	assert.NilError(t, err)
+	assert.Check(t, is.Equal(logrus.InfoLevel, logrus.GetLevel()))
+
+	conf.LogLevel = "warn"
+	err = configureDaemonLogs(conf)
+	assert.NilError(t, err)
+	assert.Check(t, is.Equal(logrus.WarnLevel, logrus.GetLevel()))
+
+	conf.LogLevel = "foobar"
+	err = configureDaemonLogs(conf)
+	assert.Error(t, err, "unable to parse logging level: foobar")
+
+	// log level should not be changed after a failure
+	assert.Check(t, is.Equal(logrus.WarnLevel, logrus.GetLevel()))
+}

cmd/dockerd/docker.go

@@ -8,6 +8,7 @@ import (
 	"github.com/docker/docker/cli"
 	"github.com/docker/docker/daemon/config"
 	"github.com/docker/docker/dockerversion"
+	"github.com/docker/docker/pkg/jsonmessage"
 	"github.com/docker/docker/pkg/reexec"
 	"github.com/docker/docker/pkg/term"
 	"github.com/moby/buildkit/util/apicaps"
@@ -54,6 +55,12 @@ func main() {
  return
 	}
 
+	// initial log formatting; this setting is updated after the daemon configuration is loaded.
+	logrus.SetFormatter(&logrus.TextFormatter{
+ TimestampFormat: jsonmessage.RFC3339NanoFixed,
+ FullTimestamp: true,
+	})
+
 	// Set terminal emulation based on platform as required.
 	_, stdout, stderr := term.StdStreams()
 

cmd/dockerd/options.go

@@ -1,15 +1,13 @@
 package main
 
 import (
-	"fmt"
 	"os"
 	"path/filepath"
 
 	cliconfig "github.com/docker/docker/cli/config"
 	"github.com/docker/docker/daemon/config"
 	"github.com/docker/docker/opts"
 	"github.com/docker/go-connections/tlsconfig"
-	"github.com/sirupsen/logrus"
 	"github.com/spf13/pflag"
 )
 
@@ -106,17 +104,3 @@ func (o *daemonOptions) SetDefaultOptions(flags *pflag.FlagSet) {
  }
 	}
 }
-
-// setLogLevel sets the logrus logging level
-func setLogLevel(logLevel string) {
-	if logLevel != "" {
- lvl, err := logrus.ParseLevel(logLevel)
- if err != nil {
- fmt.Fprintf(os.Stderr, "Unable to parse logging level: %s\n", logLevel)
- os.Exit(1)
- }
- logrus.SetLevel(lvl)
-	} else {
- logrus.SetLevel(logrus.InfoLevel)
-	}
-}

daemon/checkpoint.go

@@ -2,7 +2,6 @@ package daemon // import "github.com/docker/docker/daemon"
 
 import (
 	"context"
-	"encoding/json"
 	"fmt"
 	"io/ioutil"
 	"os"
@@ -127,15 +126,7 @@ func (daemon *Daemon) CheckpointList(name string, config types.CheckpointListOpt
  if !d.IsDir() {
  continue
  }
- path := filepath.Join(checkpointDir, d.Name(), "config.json")
- data, err := ioutil.ReadFile(path)
- if err != nil {
- return nil, err
- }
- var cpt types.Checkpoint
- if err := json.Unmarshal(data, &cpt); err != nil {
- return nil, err
- }
+ cpt := types.Checkpoint{Name: d.Name()}
  out = append(out, cpt)
 	}
 

daemon/config/config.go

@@ -229,6 +229,9 @@ type CommonConfig struct {
 	Features map[string]bool `json:"features,omitempty"`
 
 	Builder BuilderConfig `json:"builder,omitempty"`
+
+	ContainerdNamespace string `json:"containerd-namespace,omitempty"`
+	ContainerdPluginNamespace string `json:"containerd-plugin-namespace,omitempty"`
 }
 
 // IsValueSet returns true if a configuration value

daemon/container_operations.go

@@ -813,7 +813,7 @@ func (daemon *Daemon) connectToNetwork(container *container.Container, idOrName
 	return nil
 }
 
-func updateJoinInfo(networkSettings *network.Settings, n libnetwork.Network, ep libnetwork.Endpoint) error { // nolint: interfacer
+func updateJoinInfo(networkSettings *network.Settings, n libnetwork.Network, ep libnetwork.Endpoint) error {
 	if ep == nil {
  return errors.New("invalid enppoint whhile building portmap info")
 	}

Dockerfile

@@ -36,7 +36,7 @@ RUN sed -ri "s/(httpredir|deb).debian.org/${APT_MIRROR:-deb.debian.org}/g" /etc/
 FROM base AS criu
 ARG DEBIAN_FRONTEND
 # Install CRIU for checkpoint/restore support
-ENV CRIU_VERSION 3.6
+ENV CRIU_VERSION 3.12
 # Install dependency packages specific to criu
 RUN apt-get update && apt-get install -y --no-install-recommends \
 	libnet-dev \
@@ -251,6 +251,9 @@ RUN apt-get update && apt-get install -y --no-install-recommends \
 	zip \
 	bzip2 \
 	xz-utils \
+	libprotobuf-c1 \
+	libnet1 \
+	libnl-3-200 \
 	&& rm -rf /var/lib/apt/lists/*
 
 RUN pip3 install yamllint==1.16.0

builder/dockerfile/evaluator_test.go

@@ -2,6 +2,7 @@ package dockerfile // import "github.com/docker/docker/builder/dockerfile"
 
 import (
 	"os"
+	"runtime"
 	"testing"
 
 	"github.com/docker/docker/builder/remotecontext"
@@ -23,8 +24,11 @@ func init() {
 	reexec.Init()
 }
 
-func initDispatchTestCases() []dispatchTestCase {
-	dispatchTestCases := []dispatchTestCase{
+func TestDispatch(t *testing.T) {
+	if runtime.GOOS != "windows" {
+ skip.If(t, os.Getuid() != 0, "skipping test that requires root")
+	}
+	testCases := []dispatchTestCase{
  {
  name: "ADD multiple files to file",
  cmd: &instructions.AddCommand{SourcesAndDest: instructions.SourcesAndDest{
@@ -91,54 +95,46 @@ func initDispatchTestCases() []dispatchTestCase {
  }},
  expectedError: "source can't be a URL for COPY",
  files: nil,
- }}
-
-	return dispatchTestCases
-}
-
-func TestDispatch(t *testing.T) {
-	skip.If(t, os.Getuid() != 0, "skipping test that requires root")
-	testCases := initDispatchTestCases()
-
-	for _, testCase := range testCases {
- executeTestCase(t, testCase)
+ },
 	}
-}
 
-func executeTestCase(t *testing.T, testCase dispatchTestCase) {
-	contextDir, cleanup := createTestTempDir(t, "", "builder-dockerfile-test")
-	defer cleanup()
+	for _, tc := range testCases {
+ t.Run(tc.name, func(t *testing.T) {
+ contextDir, cleanup := createTestTempDir(t, "", "builder-dockerfile-test")
+ defer cleanup()
 
-	for filename, content := range testCase.files {
- createTestTempFile(t, contextDir, filename, content, 0777)
-	}
+for filename, content := range tc.files {
+createTestTempFile(t, contextDir, filename, content, 0777)
+}
 
-	tarStream, err := archive.Tar(contextDir, archive.Uncompressed)
+tarStream, err := archive.Tar(contextDir, archive.Uncompressed)
 
-	if err != nil {
- t.Fatalf("Error when creating tar stream: %s", err)
-	}
+if err != nil {
+t.Fatalf("Error when creating tar stream: %s", err)
+}
 
-	defer func() {
- if err = tarStream.Close(); err != nil {
- t.Fatalf("Error when closing tar stream: %s", err)
- }
-	}()
+defer func() {
+if err = tarStream.Close(); err != nil {
+t.Fatalf("Error when closing tar stream: %s", err)
+}
+}()
 
-	context, err := remotecontext.FromArchive(tarStream)
+context, err := remotecontext.FromArchive(tarStream)
 
-	if err != nil {
- t.Fatalf("Error when creating tar context: %s", err)
-	}
+if err != nil {
+t.Fatalf("Error when creating tar context: %s", err)
+}
 
-	defer func() {
- if err = context.Close(); err != nil {
- t.Fatalf("Error when closing tar context: %s", err)
- }
-	}()
+defer func() {
+if err = context.Close(); err != nil {
+t.Fatalf("Error when closing tar context: %s", err)
+}
+}()
 
-	b := newBuilderWithMockBackend()
-	sb := newDispatchRequest(b, '`', context, NewBuildArgs(make(map[string]*string)), newStagesBuildResults())
-	err = dispatch(sb, testCase.cmd)
-	assert.Check(t, is.ErrorContains(err, testCase.expectedError))
+ b := newBuilderWithMockBackend()
+ sb := newDispatchRequest(b, '`', context, NewBuildArgs(make(map[string]*string)), newStagesBuildResults())
+ err = dispatch(sb, tc.cmd)
+ assert.Check(t, is.ErrorContains(err, tc.expectedError))
+ })
+	}
 }

builder/dockerfile/internals_test.go

@@ -47,6 +47,9 @@ func TestDockerfileOutsideTheBuildContext(t *testing.T) {
 	defer cleanup()
 
 	expectedError := "Forbidden path outside the build context: ../../Dockerfile ()"
+	if runtime.GOOS == "windows" {
+ expectedError = "failed to resolve scoped path ../../Dockerfile ()"
+	}
 
 	readAndCheckDockerfile(t, "DockerfileOutsideTheBuildContext", contextDir, "../../Dockerfile", expectedError)
 }
@@ -61,7 +64,9 @@ func TestNonExistingDockerfile(t *testing.T) {
 }
 
 func readAndCheckDockerfile(t *testing.T, testName, contextDir, dockerfilePath, expectedError string) {
-	skip.If(t, os.Getuid() != 0, "skipping test that requires root")
+	if runtime.GOOS != "windows" {
+ skip.If(t, os.Getuid() != 0, "skipping test that requires root")
+	}
 	tarStream, err := archive.Tar(contextDir, archive.Uncompressed)
 	assert.NilError(t, err)
 
@@ -80,7 +85,7 @@ func readAndCheckDockerfile(t *testing.T, testName, contextDir, dockerfilePath,
  Source: tarStream,
 	}
 	_, _, err = remotecontext.Detect(config)
-	assert.Check(t, is.Error(err, expectedError))
+	assert.Check(t, is.ErrorContains(err, expectedError))
 }
 
 func TestCopyRunConfig(t *testing.T) {

cmd/dockerd/config.go

@@ -3,8 +3,10 @@ package main
 import (
 	"runtime"
 
+	"github.com/docker/docker/daemon"
 	"github.com/docker/docker/daemon/config"
 	"github.com/docker/docker/opts"
+	"github.com/docker/docker/plugin/executor/containerd"
 	"github.com/docker/docker/registry"
 	"github.com/spf13/pflag"
 )
@@ -80,6 +82,13 @@ func installCommonConfigFlags(conf *config.Config, flags *pflag.FlagSet) {
 
 	conf.MaxConcurrentDownloads = &maxConcurrentDownloads
 	conf.MaxConcurrentUploads = &maxConcurrentUploads
+
+	flags.StringVar(&conf.ContainerdNamespace, "containerd-namespace", daemon.ContainersNamespace, "Containerd namespace to use")
+	if err := flags.MarkHidden("containerd-namespace"); err != nil {
+ return
+	}
+	flags.StringVar(&conf.ContainerdPluginNamespace, "containerd-plugins-namespace", containerd.PluginNamespace, "Containerd namespace to use for plugins")
+	flags.MarkHidden("containerd-plugins-namespace")
 }
 
 func installRegistryServiceFlags(options *registry.ServiceOptions, flags *pflag.FlagSet) {

cmd/dockerd/daemon.go

@@ -83,6 +83,13 @@ func (cli *DaemonCli) start(opts *daemonOptions) (err error) {
 	if cli.Config, err = loadDaemonCliConfig(opts); err != nil {
  return err
 	}
+
+	if err := configureDaemonLogs(cli.Config); err != nil {
+ return err
+	}
+
+	logrus.Info("Starting up")
+
 	cli.configFile = &opts.configFile
 	cli.flags = opts.flags
 
@@ -94,12 +101,6 @@ func (cli *DaemonCli) start(opts *daemonOptions) (err error) {
  logrus.Warn("Running experimental build")
 	}
 
-	logrus.SetFormatter(&logrus.TextFormatter{
- TimestampFormat: jsonmessage.RFC3339NanoFixed,
- DisableColors: cli.Config.RawLogs,
- FullTimestamp: true,
-	})
-
 	system.InitLCOW(cli.Config.Experimental)
 
 	if err := setDefaultUmask(); err != nil {
@@ -249,6 +250,7 @@ func (cli *DaemonCli) start(opts *daemonOptions) (err error) {
  return fmt.Errorf("Shutting down due to ServeAPI error: %v", errAPI)
 	}
 
+	logrus.Info("Daemon shutdown complete")
 	return nil
 }
 
@@ -471,9 +473,6 @@ func loadDaemonCliConfig(opts *daemonOptions) (*config.Config, error) {
  conf.TLS = true
 	}
 
-	// ensure that the log level is the one set after merging configurations
-	setLogLevel(conf.LogLevel)
-
 	return conf, nil
 }
 
@@ -670,3 +669,22 @@ func systemContainerdRunning() bool {
 	_, err := os.Lstat(containerddefaults.DefaultAddress)
 	return err == nil
 }
+
+// configureDaemonLogs sets the logrus logging level and formatting
+func configureDaemonLogs(conf *config.Config) error {
+	if conf.LogLevel != "" {
+ lvl, err := logrus.ParseLevel(conf.LogLevel)
+ if err != nil {
+ return fmt.Errorf("unable to parse logging level: %s", conf.LogLevel)
+ }
+ logrus.SetLevel(lvl)
+	} else {
+ logrus.SetLevel(logrus.InfoLevel)
+	}
+	logrus.SetFormatter(&logrus.TextFormatter{
+ TimestampFormat: jsonmessage.RFC3339NanoFixed,
+ DisableColors: conf.RawLogs,
+ FullTimestamp: true,
+	})
+	return nil
+}

cmd/dockerd/daemon_test.go

@@ -146,7 +146,6 @@ func TestLoadDaemonCliConfigWithLogLevel(t *testing.T) {
 	assert.NilError(t, err)
 	assert.Assert(t, loadedConfig != nil)
 	assert.Check(t, is.Equal("warn", loadedConfig.LogLevel))
-	assert.Check(t, is.Equal(logrus.WarnLevel, logrus.GetLevel()))
 }
 
 func TestLoadDaemonConfigWithEmbeddedOptions(t *testing.T) {
@@ -180,3 +179,22 @@ func TestLoadDaemonConfigWithRegistryOptions(t *testing.T) {
 	assert.Check(t, is.Len(loadedConfig.Mirrors, 1))
 	assert.Check(t, is.Len(loadedConfig.InsecureRegistries, 1))
 }
+
+func TestConfigureDaemonLogs(t *testing.T) {
+	conf := &config.Config{}
+	err := configureDaemonLogs(conf)
+	assert.NilError(t, err)
+	assert.Check(t, is.Equal(logrus.InfoLevel, logrus.GetLevel()))
+
+	conf.LogLevel = "warn"
+	err = configureDaemonLogs(conf)
+	assert.NilError(t, err)
+	assert.Check(t, is.Equal(logrus.WarnLevel, logrus.GetLevel()))
+
+	conf.LogLevel = "foobar"
+	err = configureDaemonLogs(conf)
+	assert.Error(t, err, "unable to parse logging level: foobar")
+
+	// log level should not be changed after a failure
+	assert.Check(t, is.Equal(logrus.WarnLevel, logrus.GetLevel()))
+}

cmd/dockerd/docker.go

@@ -8,6 +8,7 @@ import (
 	"github.com/docker/docker/cli"
 	"github.com/docker/docker/daemon/config"
 	"github.com/docker/docker/dockerversion"
+	"github.com/docker/docker/pkg/jsonmessage"
 	"github.com/docker/docker/pkg/reexec"
 	"github.com/docker/docker/pkg/term"
 	"github.com/moby/buildkit/util/apicaps"
@@ -54,6 +55,12 @@ func main() {
  return
 	}
 
+	// initial log formatting; this setting is updated after the daemon configuration is loaded.
+	logrus.SetFormatter(&logrus.TextFormatter{
+ TimestampFormat: jsonmessage.RFC3339NanoFixed,
+ FullTimestamp: true,
+	})
+
 	// Set terminal emulation based on platform as required.
 	_, stdout, stderr := term.StdStreams()
 

cmd/dockerd/options.go

@@ -1,15 +1,13 @@
 package main
 
 import (
-	"fmt"
 	"os"
 	"path/filepath"
 
 	cliconfig "github.com/docker/docker/cli/config"
 	"github.com/docker/docker/daemon/config"
 	"github.com/docker/docker/opts"
 	"github.com/docker/go-connections/tlsconfig"
-	"github.com/sirupsen/logrus"
 	"github.com/spf13/pflag"
 )
 
@@ -106,17 +104,3 @@ func (o *daemonOptions) SetDefaultOptions(flags *pflag.FlagSet) {
  }
 	}
 }
-
-// setLogLevel sets the logrus logging level
-func setLogLevel(logLevel string) {
-	if logLevel != "" {
- lvl, err := logrus.ParseLevel(logLevel)
- if err != nil {
- fmt.Fprintf(os.Stderr, "Unable to parse logging level: %s\n", logLevel)
- os.Exit(1)
- }
- logrus.SetLevel(lvl)
-	} else {
- logrus.SetLevel(logrus.InfoLevel)
-	}
-}

daemon/checkpoint.go

@@ -2,7 +2,6 @@ package daemon // import "github.com/docker/docker/daemon"
 
 import (
 	"context"
-	"encoding/json"
 	"fmt"
 	"io/ioutil"
 	"os"
@@ -127,15 +126,7 @@ func (daemon *Daemon) CheckpointList(name string, config types.CheckpointListOpt
  if !d.IsDir() {
  continue
  }
- path := filepath.Join(checkpointDir, d.Name(), "config.json")
- data, err := ioutil.ReadFile(path)
- if err != nil {
- return nil, err
- }
- var cpt types.Checkpoint
- if err := json.Unmarshal(data, &cpt); err != nil {
- return nil, err
- }
+ cpt := types.Checkpoint{Name: d.Name()}
  out = append(out, cpt)
 	}
 

daemon/config/config.go

@@ -229,6 +229,9 @@ type CommonConfig struct {
 	Features map[string]bool `json:"features,omitempty"`
 
 	Builder BuilderConfig `json:"builder,omitempty"`
+
+	ContainerdNamespace string `json:"containerd-namespace,omitempty"`
+	ContainerdPluginNamespace string `json:"containerd-plugin-namespace,omitempty"`
 }
 
 // IsValueSet returns true if a configuration value

daemon/container_operations.go

@@ -813,7 +813,7 @@ func (daemon *Daemon) connectToNetwork(container *container.Container, idOrName
 	return nil
 }
 
-func updateJoinInfo(networkSettings *network.Settings, n libnetwork.Network, ep libnetwork.Endpoint) error { // nolint: interfacer
+func updateJoinInfo(networkSettings *network.Settings, n libnetwork.Network, ep libnetwork.Endpoint) error {
 	if ep == nil {
  return errors.New("invalid enppoint whhile building portmap info")
 	}

Dockerfile

@@ -36,7 +36,7 @@ RUN sed -ri "s/(httpredir|deb).debian.org/${APT_MIRROR:-deb.debian.org}/g" /etc/
 FROM base AS criu
 ARG DEBIAN_FRONTEND
 # Install CRIU for checkpoint/restore support
-ENV CRIU_VERSION 3.6
+ENV CRIU_VERSION 3.12
 # Install dependency packages specific to criu
 RUN apt-get update && apt-get install -y --no-install-recommends \
 	libnet-dev \
@@ -251,6 +251,9 @@ RUN apt-get update && apt-get install -y --no-install-recommends \
 	zip \
 	bzip2 \
 	xz-utils \
+	libprotobuf-c1 \
+	libnet1 \
+	libnl-3-200 \
 	&& rm -rf /var/lib/apt/lists/*
 
 RUN pip3 install yamllint==1.16.0

builder/dockerfile/evaluator_test.go

@@ -2,6 +2,7 @@ package dockerfile // import "github.com/docker/docker/builder/dockerfile"
 
 import (
 	"os"
+	"runtime"
 	"testing"
 
 	"github.com/docker/docker/builder/remotecontext"
@@ -23,8 +24,11 @@ func init() {
 	reexec.Init()
 }
 
-func initDispatchTestCases() []dispatchTestCase {
-	dispatchTestCases := []dispatchTestCase{
+func TestDispatch(t *testing.T) {
+	if runtime.GOOS != "windows" {
+ skip.If(t, os.Getuid() != 0, "skipping test that requires root")
+	}
+	testCases := []dispatchTestCase{
  {
  name: "ADD multiple files to file",
  cmd: &instructions.AddCommand{SourcesAndDest: instructions.SourcesAndDest{
@@ -91,54 +95,46 @@ func initDispatchTestCases() []dispatchTestCase {
  }},
  expectedError: "source can't be a URL for COPY",
  files: nil,
- }}
-
-	return dispatchTestCases
-}
-
-func TestDispatch(t *testing.T) {
-	skip.If(t, os.Getuid() != 0, "skipping test that requires root")
-	testCases := initDispatchTestCases()
-
-	for _, testCase := range testCases {
- executeTestCase(t, testCase)
+ },
 	}
-}
 
-func executeTestCase(t *testing.T, testCase dispatchTestCase) {
-	contextDir, cleanup := createTestTempDir(t, "", "builder-dockerfile-test")
-	defer cleanup()
+	for _, tc := range testCases {
+ t.Run(tc.name, func(t *testing.T) {
+ contextDir, cleanup := createTestTempDir(t, "", "builder-dockerfile-test")
+ defer cleanup()
 
-	for filename, content := range testCase.files {
- createTestTempFile(t, contextDir, filename, content, 0777)
-	}
+for filename, content := range tc.files {
+createTestTempFile(t, contextDir, filename, content, 0777)
+}
 
-	tarStream, err := archive.Tar(contextDir, archive.Uncompressed)
+tarStream, err := archive.Tar(contextDir, archive.Uncompressed)
 
-	if err != nil {
- t.Fatalf("Error when creating tar stream: %s", err)
-	}
+if err != nil {
+t.Fatalf("Error when creating tar stream: %s", err)
+}
 
-	defer func() {
- if err = tarStream.Close(); err != nil {
- t.Fatalf("Error when closing tar stream: %s", err)
- }
-	}()
+defer func() {
+if err = tarStream.Close(); err != nil {
+t.Fatalf("Error when closing tar stream: %s", err)
+}
+}()
 
-	context, err := remotecontext.FromArchive(tarStream)
+context, err := remotecontext.FromArchive(tarStream)
 
-	if err != nil {
- t.Fatalf("Error when creating tar context: %s", err)
-	}
+if err != nil {
+t.Fatalf("Error when creating tar context: %s", err)
+}
 
-	defer func() {
- if err = context.Close(); err != nil {
- t.Fatalf("Error when closing tar context: %s", err)
- }
-	}()
+defer func() {
+if err = context.Close(); err != nil {
+t.Fatalf("Error when closing tar context: %s", err)
+}
+}()
 
-	b := newBuilderWithMockBackend()
-	sb := newDispatchRequest(b, '`', context, NewBuildArgs(make(map[string]*string)), newStagesBuildResults())
-	err = dispatch(sb, testCase.cmd)
-	assert.Check(t, is.ErrorContains(err, testCase.expectedError))
+ b := newBuilderWithMockBackend()
+ sb := newDispatchRequest(b, '`', context, NewBuildArgs(make(map[string]*string)), newStagesBuildResults())
+ err = dispatch(sb, tc.cmd)
+ assert.Check(t, is.ErrorContains(err, tc.expectedError))
+ })
+	}
 }

builder/dockerfile/internals_test.go

@@ -47,6 +47,9 @@ func TestDockerfileOutsideTheBuildContext(t *testing.T) {
 	defer cleanup()
 
 	expectedError := "Forbidden path outside the build context: ../../Dockerfile ()"
+	if runtime.GOOS == "windows" {
+ expectedError = "failed to resolve scoped path ../../Dockerfile ()"
+	}
 
 	readAndCheckDockerfile(t, "DockerfileOutsideTheBuildContext", contextDir, "../../Dockerfile", expectedError)
 }
@@ -61,7 +64,9 @@ func TestNonExistingDockerfile(t *testing.T) {
 }
 
 func readAndCheckDockerfile(t *testing.T, testName, contextDir, dockerfilePath, expectedError string) {
-	skip.If(t, os.Getuid() != 0, "skipping test that requires root")
+	if runtime.GOOS != "windows" {
+ skip.If(t, os.Getuid() != 0, "skipping test that requires root")
+	}
 	tarStream, err := archive.Tar(contextDir, archive.Uncompressed)
 	assert.NilError(t, err)
 
@@ -80,7 +85,7 @@ func readAndCheckDockerfile(t *testing.T, testName, contextDir, dockerfilePath,
  Source: tarStream,
 	}
 	_, _, err = remotecontext.Detect(config)
-	assert.Check(t, is.Error(err, expectedError))
+	assert.Check(t, is.ErrorContains(err, expectedError))
 }
 
 func TestCopyRunConfig(t *testing.T) {

cmd/dockerd/config.go

@@ -3,8 +3,10 @@ package main
 import (
 	"runtime"
 
+	"github.com/docker/docker/daemon"
 	"github.com/docker/docker/daemon/config"
 	"github.com/docker/docker/opts"
+	"github.com/docker/docker/plugin/executor/containerd"
 	"github.com/docker/docker/registry"
 	"github.com/spf13/pflag"
 )
@@ -80,6 +82,13 @@ func installCommonConfigFlags(conf *config.Config, flags *pflag.FlagSet) {
 
 	conf.MaxConcurrentDownloads = &maxConcurrentDownloads
 	conf.MaxConcurrentUploads = &maxConcurrentUploads
+
+	flags.StringVar(&conf.ContainerdNamespace, "containerd-namespace", daemon.ContainersNamespace, "Containerd namespace to use")
+	if err := flags.MarkHidden("containerd-namespace"); err != nil {
+ return
+	}
+	flags.StringVar(&conf.ContainerdPluginNamespace, "containerd-plugins-namespace", containerd.PluginNamespace, "Containerd namespace to use for plugins")
+	flags.MarkHidden("containerd-plugins-namespace")
 }
 
 func installRegistryServiceFlags(options *registry.ServiceOptions, flags *pflag.FlagSet) {

cmd/dockerd/daemon.go

@@ -83,6 +83,13 @@ func (cli *DaemonCli) start(opts *daemonOptions) (err error) {
 	if cli.Config, err = loadDaemonCliConfig(opts); err != nil {
  return err
 	}
+
+	if err := configureDaemonLogs(cli.Config); err != nil {
+ return err
+	}
+
+	logrus.Info("Starting up")
+
 	cli.configFile = &opts.configFile
 	cli.flags = opts.flags
 
@@ -94,12 +101,6 @@ func (cli *DaemonCli) start(opts *daemonOptions) (err error) {
  logrus.Warn("Running experimental build")
 	}
 
-	logrus.SetFormatter(&logrus.TextFormatter{
- TimestampFormat: jsonmessage.RFC3339NanoFixed,
- DisableColors: cli.Config.RawLogs,
- FullTimestamp: true,
-	})
-
 	system.InitLCOW(cli.Config.Experimental)
 
 	if err := setDefaultUmask(); err != nil {
@@ -249,6 +250,7 @@ func (cli *DaemonCli) start(opts *daemonOptions) (err error) {
  return fmt.Errorf("Shutting down due to ServeAPI error: %v", errAPI)
 	}
 
+	logrus.Info("Daemon shutdown complete")
 	return nil
 }
 
@@ -471,9 +473,6 @@ func loadDaemonCliConfig(opts *daemonOptions) (*config.Config, error) {
  conf.TLS = true
 	}
 
-	// ensure that the log level is the one set after merging configurations
-	setLogLevel(conf.LogLevel)
-
 	return conf, nil
 }
 
@@ -670,3 +669,22 @@ func systemContainerdRunning() bool {
 	_, err := os.Lstat(containerddefaults.DefaultAddress)
 	return err == nil
 }
+
+// configureDaemonLogs sets the logrus logging level and formatting
+func configureDaemonLogs(conf *config.Config) error {
+	if conf.LogLevel != "" {
+ lvl, err := logrus.ParseLevel(conf.LogLevel)
+ if err != nil {
+ return fmt.Errorf("unable to parse logging level: %s", conf.LogLevel)
+ }
+ logrus.SetLevel(lvl)
+	} else {
+ logrus.SetLevel(logrus.InfoLevel)
+	}
+	logrus.SetFormatter(&logrus.TextFormatter{
+ TimestampFormat: jsonmessage.RFC3339NanoFixed,
+ DisableColors: conf.RawLogs,
+ FullTimestamp: true,
+	})
+	return nil
+}

cmd/dockerd/daemon_test.go

@@ -146,7 +146,6 @@ func TestLoadDaemonCliConfigWithLogLevel(t *testing.T) {
 	assert.NilError(t, err)
 	assert.Assert(t, loadedConfig != nil)
 	assert.Check(t, is.Equal("warn", loadedConfig.LogLevel))
-	assert.Check(t, is.Equal(logrus.WarnLevel, logrus.GetLevel()))
 }
 
 func TestLoadDaemonConfigWithEmbeddedOptions(t *testing.T) {
@@ -180,3 +179,22 @@ func TestLoadDaemonConfigWithRegistryOptions(t *testing.T) {
 	assert.Check(t, is.Len(loadedConfig.Mirrors, 1))
 	assert.Check(t, is.Len(loadedConfig.InsecureRegistries, 1))
 }
+
+func TestConfigureDaemonLogs(t *testing.T) {
+	conf := &config.Config{}
+	err := configureDaemonLogs(conf)
+	assert.NilError(t, err)
+	assert.Check(t, is.Equal(logrus.InfoLevel, logrus.GetLevel()))
+
+	conf.LogLevel = "warn"
+	err = configureDaemonLogs(conf)
+	assert.NilError(t, err)
+	assert.Check(t, is.Equal(logrus.WarnLevel, logrus.GetLevel()))
+
+	conf.LogLevel = "foobar"
+	err = configureDaemonLogs(conf)
+	assert.Error(t, err, "unable to parse logging level: foobar")
+
+	// log level should not be changed after a failure
+	assert.Check(t, is.Equal(logrus.WarnLevel, logrus.GetLevel()))
+}

cmd/dockerd/docker.go

@@ -8,6 +8,7 @@ import (
 	"github.com/docker/docker/cli"
 	"github.com/docker/docker/daemon/config"
 	"github.com/docker/docker/dockerversion"
+	"github.com/docker/docker/pkg/jsonmessage"
 	"github.com/docker/docker/pkg/reexec"
 	"github.com/docker/docker/pkg/term"
 	"github.com/moby/buildkit/util/apicaps"
@@ -54,6 +55,12 @@ func main() {
  return
 	}
 
+	// initial log formatting; this setting is updated after the daemon configuration is loaded.
+	logrus.SetFormatter(&logrus.TextFormatter{
+ TimestampFormat: jsonmessage.RFC3339NanoFixed,
+ FullTimestamp: true,
+	})
+
 	// Set terminal emulation based on platform as required.
 	_, stdout, stderr := term.StdStreams()
 

cmd/dockerd/options.go

@@ -1,15 +1,13 @@
 package main
 
 import (
-	"fmt"
 	"os"
 	"path/filepath"
 
 	cliconfig "github.com/docker/docker/cli/config"
 	"github.com/docker/docker/daemon/config"
 	"github.com/docker/docker/opts"
 	"github.com/docker/go-connections/tlsconfig"
-	"github.com/sirupsen/logrus"
 	"github.com/spf13/pflag"
 )
 
@@ -106,17 +104,3 @@ func (o *daemonOptions) SetDefaultOptions(flags *pflag.FlagSet) {
  }
 	}
 }
-
-// setLogLevel sets the logrus logging level
-func setLogLevel(logLevel string) {
-	if logLevel != "" {
- lvl, err := logrus.ParseLevel(logLevel)
- if err != nil {
- fmt.Fprintf(os.Stderr, "Unable to parse logging level: %s\n", logLevel)
- os.Exit(1)
- }
- logrus.SetLevel(lvl)
-	} else {
- logrus.SetLevel(logrus.InfoLevel)
-	}
-}

daemon/checkpoint.go

@@ -2,7 +2,6 @@ package daemon // import "github.com/docker/docker/daemon"
 
 import (
 	"context"
-	"encoding/json"
 	"fmt"
 	"io/ioutil"
 	"os"
@@ -127,15 +126,7 @@ func (daemon *Daemon) CheckpointList(name string, config types.CheckpointListOpt
  if !d.IsDir() {
  continue
  }
- path := filepath.Join(checkpointDir, d.Name(), "config.json")
- data, err := ioutil.ReadFile(path)
- if err != nil {
- return nil, err
- }
- var cpt types.Checkpoint
- if err := json.Unmarshal(data, &cpt); err != nil {
- return nil, err
- }
+ cpt := types.Checkpoint{Name: d.Name()}
  out = append(out, cpt)
 	}
 

daemon/config/config.go

@@ -229,6 +229,9 @@ type CommonConfig struct {
 	Features map[string]bool `json:"features,omitempty"`
 
 	Builder BuilderConfig `json:"builder,omitempty"`
+
+	ContainerdNamespace string `json:"containerd-namespace,omitempty"`
+	ContainerdPluginNamespace string `json:"containerd-plugin-namespace,omitempty"`
 }
 
 // IsValueSet returns true if a configuration value

daemon/container_operations.go

@@ -813,7 +813,7 @@ func (daemon *Daemon) connectToNetwork(container *container.Container, idOrName
 	return nil
 }
 
-func updateJoinInfo(networkSettings *network.Settings, n libnetwork.Network, ep libnetwork.Endpoint) error { // nolint: interfacer
+func updateJoinInfo(networkSettings *network.Settings, n libnetwork.Network, ep libnetwork.Endpoint) error {
 	if ep == nil {
  return errors.New("invalid enppoint whhile building portmap info")
 	}

Dockerfile

@@ -36,7 +36,7 @@ RUN sed -ri "s/(httpredir|deb).debian.org/${APT_MIRROR:-deb.debian.org}/g" /etc/
 FROM base AS criu
 ARG DEBIAN_FRONTEND
 # Install CRIU for checkpoint/restore support
-ENV CRIU_VERSION 3.6
+ENV CRIU_VERSION 3.12
 # Install dependency packages specific to criu
 RUN apt-get update && apt-get install -y --no-install-recommends \
 	libnet-dev \
@@ -251,6 +251,9 @@ RUN apt-get update && apt-get install -y --no-install-recommends \
 	zip \
 	bzip2 \
 	xz-utils \
+	libprotobuf-c1 \
+	libnet1 \
+	libnl-3-200 \
 	&& rm -rf /var/lib/apt/lists/*
 
 RUN pip3 install yamllint==1.16.0

builder/dockerfile/evaluator_test.go

@@ -2,6 +2,7 @@ package dockerfile // import "github.com/docker/docker/builder/dockerfile"
 
 import (
 	"os"
+	"runtime"
 	"testing"
 
 	"github.com/docker/docker/builder/remotecontext"
@@ -23,8 +24,11 @@ func init() {
 	reexec.Init()
 }
 
-func initDispatchTestCases() []dispatchTestCase {
-	dispatchTestCases := []dispatchTestCase{
+func TestDispatch(t *testing.T) {
+	if runtime.GOOS != "windows" {
+ skip.If(t, os.Getuid() != 0, "skipping test that requires root")
+	}
+	testCases := []dispatchTestCase{
  {
  name: "ADD multiple files to file",
  cmd: &instructions.AddCommand{SourcesAndDest: instructions.SourcesAndDest{
@@ -91,54 +95,46 @@ func initDispatchTestCases() []dispatchTestCase {
  }},
  expectedError: "source can't be a URL for COPY",
  files: nil,
- }}
-
-	return dispatchTestCases
-}
-
-func TestDispatch(t *testing.T) {
-	skip.If(t, os.Getuid() != 0, "skipping test that requires root")
-	testCases := initDispatchTestCases()
-
-	for _, testCase := range testCases {
- executeTestCase(t, testCase)
+ },
 	}
-}
 
-func executeTestCase(t *testing.T, testCase dispatchTestCase) {
-	contextDir, cleanup := createTestTempDir(t, "", "builder-dockerfile-test")
-	defer cleanup()
+	for _, tc := range testCases {
+ t.Run(tc.name, func(t *testing.T) {
+ contextDir, cleanup := createTestTempDir(t, "", "builder-dockerfile-test")
+ defer cleanup()
 
-	for filename, content := range testCase.files {
- createTestTempFile(t, contextDir, filename, content, 0777)
-	}
+for filename, content := range tc.files {
+createTestTempFile(t, contextDir, filename, content, 0777)
+}
 
-	tarStream, err := archive.Tar(contextDir, archive.Uncompressed)
+tarStream, err := archive.Tar(contextDir, archive.Uncompressed)
 
-	if err != nil {
- t.Fatalf("Error when creating tar stream: %s", err)
-	}
+if err != nil {
+t.Fatalf("Error when creating tar stream: %s", err)
+}
 
-	defer func() {
- if err = tarStream.Close(); err != nil {
- t.Fatalf("Error when closing tar stream: %s", err)
- }
-	}()
+defer func() {
+if err = tarStream.Close(); err != nil {
+t.Fatalf("Error when closing tar stream: %s", err)
+}
+}()
 
-	context, err := remotecontext.FromArchive(tarStream)
+context, err := remotecontext.FromArchive(tarStream)
 
-	if err != nil {
- t.Fatalf("Error when creating tar context: %s", err)
-	}
+if err != nil {
+t.Fatalf("Error when creating tar context: %s", err)
+}
 
-	defer func() {
- if err = context.Close(); err != nil {
- t.Fatalf("Error when closing tar context: %s", err)
- }
-	}()
+defer func() {
+if err = context.Close(); err != nil {
+t.Fatalf("Error when closing tar context: %s", err)
+}
+}()
 
-	b := newBuilderWithMockBackend()
-	sb := newDispatchRequest(b, '`', context, NewBuildArgs(make(map[string]*string)), newStagesBuildResults())
-	err = dispatch(sb, testCase.cmd)
-	assert.Check(t, is.ErrorContains(err, testCase.expectedError))
+ b := newBuilderWithMockBackend()
+ sb := newDispatchRequest(b, '`', context, NewBuildArgs(make(map[string]*string)), newStagesBuildResults())
+ err = dispatch(sb, tc.cmd)
+ assert.Check(t, is.ErrorContains(err, tc.expectedError))
+ })
+	}
 }

builder/dockerfile/internals_test.go

@@ -47,6 +47,9 @@ func TestDockerfileOutsideTheBuildContext(t *testing.T) {
 	defer cleanup()
 
 	expectedError := "Forbidden path outside the build context: ../../Dockerfile ()"
+	if runtime.GOOS == "windows" {
+ expectedError = "failed to resolve scoped path ../../Dockerfile ()"
+	}
 
 	readAndCheckDockerfile(t, "DockerfileOutsideTheBuildContext", contextDir, "../../Dockerfile", expectedError)
 }
@@ -61,7 +64,9 @@ func TestNonExistingDockerfile(t *testing.T) {
 }
 
 func readAndCheckDockerfile(t *testing.T, testName, contextDir, dockerfilePath, expectedError string) {
-	skip.If(t, os.Getuid() != 0, "skipping test that requires root")
+	if runtime.GOOS != "windows" {
+ skip.If(t, os.Getuid() != 0, "skipping test that requires root")
+	}
 	tarStream, err := archive.Tar(contextDir, archive.Uncompressed)
 	assert.NilError(t, err)
 
@@ -80,7 +85,7 @@ func readAndCheckDockerfile(t *testing.T, testName, contextDir, dockerfilePath,
  Source: tarStream,
 	}
 	_, _, err = remotecontext.Detect(config)
-	assert.Check(t, is.Error(err, expectedError))
+	assert.Check(t, is.ErrorContains(err, expectedError))
 }
 
 func TestCopyRunConfig(t *testing.T) {

cmd/dockerd/config.go

@@ -3,8 +3,10 @@ package main
 import (
 	"runtime"
 
+	"github.com/docker/docker/daemon"
 	"github.com/docker/docker/daemon/config"
 	"github.com/docker/docker/opts"
+	"github.com/docker/docker/plugin/executor/containerd"
 	"github.com/docker/docker/registry"
 	"github.com/spf13/pflag"
 )
@@ -80,6 +82,13 @@ func installCommonConfigFlags(conf *config.Config, flags *pflag.FlagSet) {
 
 	conf.MaxConcurrentDownloads = &maxConcurrentDownloads
 	conf.MaxConcurrentUploads = &maxConcurrentUploads
+
+	flags.StringVar(&conf.ContainerdNamespace, "containerd-namespace", daemon.ContainersNamespace, "Containerd namespace to use")
+	if err := flags.MarkHidden("containerd-namespace"); err != nil {
+ return
+	}
+	flags.StringVar(&conf.ContainerdPluginNamespace, "containerd-plugins-namespace", containerd.PluginNamespace, "Containerd namespace to use for plugins")
+	flags.MarkHidden("containerd-plugins-namespace")
 }
 
 func installRegistryServiceFlags(options *registry.ServiceOptions, flags *pflag.FlagSet) {

cmd/dockerd/daemon.go

@@ -83,6 +83,13 @@ func (cli *DaemonCli) start(opts *daemonOptions) (err error) {
 	if cli.Config, err = loadDaemonCliConfig(opts); err != nil {
  return err
 	}
+
+	if err := configureDaemonLogs(cli.Config); err != nil {
+ return err
+	}
+
+	logrus.Info("Starting up")
+
 	cli.configFile = &opts.configFile
 	cli.flags = opts.flags
 
@@ -94,12 +101,6 @@ func (cli *DaemonCli) start(opts *daemonOptions) (err error) {
  logrus.Warn("Running experimental build")
 	}
 
-	logrus.SetFormatter(&logrus.TextFormatter{
- TimestampFormat: jsonmessage.RFC3339NanoFixed,
- DisableColors: cli.Config.RawLogs,
- FullTimestamp: true,
-	})
-
 	system.InitLCOW(cli.Config.Experimental)
 
 	if err := setDefaultUmask(); err != nil {
@@ -249,6 +250,7 @@ func (cli *DaemonCli) start(opts *daemonOptions) (err error) {
  return fmt.Errorf("Shutting down due to ServeAPI error: %v", errAPI)
 	}
 
+	logrus.Info("Daemon shutdown complete")
 	return nil
 }
 
@@ -471,9 +473,6 @@ func loadDaemonCliConfig(opts *daemonOptions) (*config.Config, error) {
  conf.TLS = true
 	}
 
-	// ensure that the log level is the one set after merging configurations
-	setLogLevel(conf.LogLevel)
-
 	return conf, nil
 }
 
@@ -670,3 +669,22 @@ func systemContainerdRunning() bool {
 	_, err := os.Lstat(containerddefaults.DefaultAddress)
 	return err == nil
 }
+
+// configureDaemonLogs sets the logrus logging level and formatting
+func configureDaemonLogs(conf *config.Config) error {
+	if conf.LogLevel != "" {
+ lvl, err := logrus.ParseLevel(conf.LogLevel)
+ if err != nil {
+ return fmt.Errorf("unable to parse logging level: %s", conf.LogLevel)
+ }
+ logrus.SetLevel(lvl)
+	} else {
+ logrus.SetLevel(logrus.InfoLevel)
+	}
+	logrus.SetFormatter(&logrus.TextFormatter{
+ TimestampFormat: jsonmessage.RFC3339NanoFixed,
+ DisableColors: conf.RawLogs,
+ FullTimestamp: true,
+	})
+	return nil
+}

cmd/dockerd/daemon_test.go

@@ -146,7 +146,6 @@ func TestLoadDaemonCliConfigWithLogLevel(t *testing.T) {
 	assert.NilError(t, err)
 	assert.Assert(t, loadedConfig != nil)
 	assert.Check(t, is.Equal("warn", loadedConfig.LogLevel))
-	assert.Check(t, is.Equal(logrus.WarnLevel, logrus.GetLevel()))
 }
 
 func TestLoadDaemonConfigWithEmbeddedOptions(t *testing.T) {
@@ -180,3 +179,22 @@ func TestLoadDaemonConfigWithRegistryOptions(t *testing.T) {
 	assert.Check(t, is.Len(loadedConfig.Mirrors, 1))
 	assert.Check(t, is.Len(loadedConfig.InsecureRegistries, 1))
 }
+
+func TestConfigureDaemonLogs(t *testing.T) {
+	conf := &config.Config{}
+	err := configureDaemonLogs(conf)
+	assert.NilError(t, err)
+	assert.Check(t, is.Equal(logrus.InfoLevel, logrus.GetLevel()))
+
+	conf.LogLevel = "warn"
+	err = configureDaemonLogs(conf)
+	assert.NilError(t, err)
+	assert.Check(t, is.Equal(logrus.WarnLevel, logrus.GetLevel()))
+
+	conf.LogLevel = "foobar"
+	err = configureDaemonLogs(conf)
+	assert.Error(t, err, "unable to parse logging level: foobar")
+
+	// log level should not be changed after a failure
+	assert.Check(t, is.Equal(logrus.WarnLevel, logrus.GetLevel()))
+}

cmd/dockerd/docker.go

@@ -8,6 +8,7 @@ import (
 	"github.com/docker/docker/cli"
 	"github.com/docker/docker/daemon/config"
 	"github.com/docker/docker/dockerversion"
+	"github.com/docker/docker/pkg/jsonmessage"
 	"github.com/docker/docker/pkg/reexec"
 	"github.com/docker/docker/pkg/term"
 	"github.com/moby/buildkit/util/apicaps"
@@ -54,6 +55,12 @@ func main() {
  return
 	}
 
+	// initial log formatting; this setting is updated after the daemon configuration is loaded.
+	logrus.SetFormatter(&logrus.TextFormatter{
+ TimestampFormat: jsonmessage.RFC3339NanoFixed,
+ FullTimestamp: true,
+	})
+
 	// Set terminal emulation based on platform as required.
 	_, stdout, stderr := term.StdStreams()
 

cmd/dockerd/options.go

@@ -1,15 +1,13 @@
 package main
 
 import (
-	"fmt"
 	"os"
 	"path/filepath"
 
 	cliconfig "github.com/docker/docker/cli/config"
 	"github.com/docker/docker/daemon/config"
 	"github.com/docker/docker/opts"
 	"github.com/docker/go-connections/tlsconfig"
-	"github.com/sirupsen/logrus"
 	"github.com/spf13/pflag"
 )
 
@@ -106,17 +104,3 @@ func (o *daemonOptions) SetDefaultOptions(flags *pflag.FlagSet) {
  }
 	}
 }
-
-// setLogLevel sets the logrus logging level
-func setLogLevel(logLevel string) {
-	if logLevel != "" {
- lvl, err := logrus.ParseLevel(logLevel)
- if err != nil {
- fmt.Fprintf(os.Stderr, "Unable to parse logging level: %s\n", logLevel)
- os.Exit(1)
- }
- logrus.SetLevel(lvl)
-	} else {
- logrus.SetLevel(logrus.InfoLevel)
-	}
-}

daemon/checkpoint.go

@@ -2,7 +2,6 @@ package daemon // import "github.com/docker/docker/daemon"
 
 import (
 	"context"
-	"encoding/json"
 	"fmt"
 	"io/ioutil"
 	"os"
@@ -127,15 +126,7 @@ func (daemon *Daemon) CheckpointList(name string, config types.CheckpointListOpt
  if !d.IsDir() {
  continue
  }
- path := filepath.Join(checkpointDir, d.Name(), "config.json")
- data, err := ioutil.ReadFile(path)
- if err != nil {
- return nil, err
- }
- var cpt types.Checkpoint
- if err := json.Unmarshal(data, &cpt); err != nil {
- return nil, err
- }
+ cpt := types.Checkpoint{Name: d.Name()}
  out = append(out, cpt)
 	}
 

daemon/config/config.go

@@ -229,6 +229,9 @@ type CommonConfig struct {
 	Features map[string]bool `json:"features,omitempty"`
 
 	Builder BuilderConfig `json:"builder,omitempty"`
+
+	ContainerdNamespace string `json:"containerd-namespace,omitempty"`
+	ContainerdPluginNamespace string `json:"containerd-plugin-namespace,omitempty"`
 }
 
 // IsValueSet returns true if a configuration value

daemon/container_operations.go

@@ -813,7 +813,7 @@ func (daemon *Daemon) connectToNetwork(container *container.Container, idOrName
 	return nil
 }
 
-func updateJoinInfo(networkSettings *network.Settings, n libnetwork.Network, ep libnetwork.Endpoint) error { // nolint: interfacer
+func updateJoinInfo(networkSettings *network.Settings, n libnetwork.Network, ep libnetwork.Endpoint) error {
 	if ep == nil {
  return errors.New("invalid enppoint whhile building portmap info")
 	}