Release 1.2.6

[rata]

Here is the changelog.

EDIT: brain fart, go version was not changed, got confused.
I'm just seeing that we are changing the min go version from 1.22 to 1.23. It seems to be the first time we do this in a patch release. I guess this can cause issues for distros, just when keeping the runc package up to date. Also, having a quick look it seems kubernetes nor containerd do that (just checked the go.mod on different branches, the go version is always older for older branches).

---

[1.2.6] - 2025-03-17

Hasta la victoria, siempre.

Fixed

• Fix a stall issue that would happen if setting O_CLOEXEC with
  CloseExecFrom failed ([1.2] libcontainer: Prevent startup hang when CloseExecFrom errors #4647).
• runc now properly handles joining time namespaces (such as with runc exec). Previously we would attempt to set the time offsets when joining,
  which would fail. (Can't exec into a container with private time namespace #4635, [1.2] libct: don't send config to nsexec when joining an existing timens #4649)
• Handle EINTR retries correctly for socket-related direct
  golang.org/x/sys/unix system calls. ([1.2] Retry direct unix package calls if observing EINTR #4650)
• We no longer use F_SEAL_FUTURE_WRITE when sealing the runc binary, as it
  turns out this had some unfortunate bugs in older kernel versions and was
  never necessary in the first place. ([1.2] exeseal: do not use F_SEAL_FUTURE_WRITE #4651, runc gets stuck #4640)

Removed

• Remove Fexecve helper from libcontainer/system. Runc 1.2.1 removed
  runc-dmz, but we forgot to remove this helper added only for that. ([1.2] libct/system: rm Fexecve #4646)

Changed

• Use Go 1.23 for official builds, run CI with Go 1.24 and drop Ubuntu 20.04
  from CI. We need to drop Ubuntu 20.04 from CI because Github Actions
  announced it's already deprecated and it will be discontinued soon. ([1.2] Add Go 1.24, drop ubuntu 20.04 #4648)

[kolyshkin]

I'm just seeing that we are changing the min go version from 1.22 to 1.23.

Where? https://github.com/opencontainers/runc/blob/release-1.2/go.mod still shows go 1.22 to me.

[rata]

@kolyshkin ouch, got confused with the PR, but it's not. Sorry! I'll update this

[kolyshkin]

Perhaps makes sense to add:

• [1.2] libct/system: rm Fexecve #4646 (technically this falls under Changed)
• [1.2] Add Go 1.24, drop ubuntu 20.04 #4648 (mention that static binaries we provide are now built using Go 1.23.x)

Probably does not make sense to mention #4668 as it's internal to the project.

[kolyshkin]

Guess we can fast-track #4678 to be included as well (no need to mention in the changelog though).

[rata]

@kolyshkin Added those to the changelog, rebased on top of the new merged PR and improved the style a little. PTAL :)

[kolyshkin]

LGTM, thanks

[cyphar]

@kolyshkin I'm on vacation, feel free to do the release yourself. 😸

[rata]

@AkihiroSuda @lifubang PTAL

[rata]

@kolyshkin if you don't release today, remember to adjust the date. You should be able to push to this branch.