v1.4.3-k3s4

fix for image volumes under selinux (#10)

Pull in a fix for containerd/cri that pulls in a fix for containerd/continuity: when copying directories for image volumes we should filter out the security.selinux xattr key because the target has been correctly relabeled already (and image volumes are copying from layer storage which has a read-only selinux context).

Upstream PR(s) for 1.5.x:
- https://github.com/containerd/continuity/pull/178
- https://github.com/containerd/containerd/pull/5104

Addresses:
- rancher/rke2#690

Signed-off-by: Jacob Blain Christen <[email protected]>

v1.4.3-k3s3

Merge pull request #9 from brandond/cherrypick_4467

[release-1.4] apparmor: handle signal mediation

v1.3.9-k3s2

Merge pull request #8 from brandond/cherrypick_4467_1.3

[release-1.3] apparmor: handle signal mediation

v1.4.3-k3s2

dependency cleanup that avoids ttrpc panic (#7)

- remove vestigial vendor
- pin github.com/golang/protobuf
- pin google.golang.org/genproto

Signed-off-by: Jacob Blain Christen <[email protected]>

v1.4.3-k3s1

adjust cri replacement to use k3s-io/cri

Signed-off-by: Jacob Blain Christen <[email protected]>

v1.3.9-k3s1

selinux: relabel /dev/shm when HostIPC=false

See https://github.com/rancher/cri/commit/e9ad33688c4b446615938c11e6f713b78edeb138

v1.4.1-k3s2

cri: pull in a fix for the selinux relabel fix

See https://github.com/rancher/cri/commit/6af326dadcd27a2b3008c357b000b39d832e2ad7

v1.3.7-k3s1

selinux: relabel /dev/shm when HostIPC=false

See https://github.com/rancher/cri/commit/e9ad33688c4b446615938c11e6f713b78edeb138

v1.3.6-k3s3

selinux: relabel /dev/shm when HostIPC=false

See https://github.com/rancher/cri/commit/e9ad33688c4b446615938c11e6f713b78edeb138

v1.4.1-k3s1

go.mod: match vendor changes in upstream 1.4.1

Bump CNI from 0.7.x to 0.8.x