Component: container
112 changelog entries across 20 version(s)
Activity over time (changelog entries per month)
- fixed nftables/iptables not working with "Message too long" error;
- added support for the shm_size setting;
- allow non-root user write to SMB share;
- changed default container registry to docker.io;
- do not mount tmpfs on /tmp and /run by default;
- do not start container if any volume is not mounted;
- fixed nftables/iptables not working with "Message too long" error;
- made container mounts writable by the user;
- changed app auto update to be off by default;
- fixed issue where containers may not start with large mounts;
- add initial Bluetooth device support;
- added "/app" menu for simple containerized app installation (requires "container" package and enabled "container" device-mode);
- added CPU usage;
- added hosts setting;
- added kill command to send signals (CLI only);
- added option to limit CPUs used by containers;
- added root dir size;
- added run command to allow interactive mode (CLI only);
- added stop-time setting;
- added update command (CLI only);
- allow /tmp tmpfs to be unlimited in size;
- allow app network to be any bridge interface;
- allow to configure extra ENV variables directly in container;
- allow to disable/enable envs and mounts;
- allow to specify mounts directly in container;
- calculate volume sizes;
- convert container mounts setting to mountlists, old mount name becomes list name, list name can map to multiple mounts;
- do not allow layer-dir to be within some containers root-dir;
- enable relevant kernel features to support more container apps;
- fixed error for starting container which consists of large number of layers;
- fixed extract issues;
- fixed VETH when using long interface name;
- general container service stability fixes and improvements;
- have per container layer-dir setting to be able to have separate layer stores for different sets of containers;
- made it possible to set timeout on /container/shell;
- make sure a working directory is created if it does not exist;
- show detailed import status, helps understand long imports;
- show image-id field (CLI only);
- shows app URL and "running" status only when port is open;
- store image import data (allows keeping container after netinstall);
- added "device" option to pass a device from /system/hardware menu to a container;
- added /container/log menu, keep 100 messages per container;
- added default print brief mode;
- added initial support for container in container setups;
- added option to execute commands inside a container using "/container/shell cmd= user=";
- added per-container memory limiting and monitoring;
- added repull command;
- added SCTP support;
- added support for cpuset, cpu, memory, pids cgroups;
- allow picking passthrough devices by descriptive name;
- allow read-only mounts;
- allow to mount individual files, not just directories;
- allow to specify multiple envlists;
- allow to use multiple veths in a container, change the in container interface name to same as in RouterOS;
- can use KVM (x86 and arm64) in container QEMU for faster virtualization;
- display any error prominently in WinBox;
- do not allow multiple containers with same root directory;
- enable check-certificate by default for new remote imports;
- fixed containers that use inotify interface;
- fixed environment variables not being passed to "/container/shell" properly;
- fixed QEMU VM to host bridge;
- fixed shell exit causing freeze;
- improved compatibility when running containers with custom "cmd" and "entrypoint" commands;
- improved error and log messages;
- prevent user from setting "root-dir=/" for a container;
- show a more descriptive error when tar extraction fails, particularly "No space left on device";
- show config.json to user;
- show explicit stopped flag for container;
- stability improvements;
- support for direct access to hardware devices;
- terminate containers on shutdown, allow them to clean up properly;
- stability improvements;
- allow changing container name;
- fixed repository name handling to prevent redirect issues when basic authentication is used;
- try to derive a user readable container name from remote image or file;
- fixed repository name handling to prevent redirect issues when basic authentication is used;
- add default registry-url=https://lscr.io;
- allow HTTP redirects when accessing container registry;
- allow specifying registry using remote-image property;
- improved image arch choice;
- use parent directory of container root-dir for unpack by default, so that container layer files are downloaded directly on target disk;
- allow import from .tar.gz file;
- do not log start, end events unless logging is enabled;
- fixed user and group ID range;
- improved "start-on-boot" stability;
- improved container shell;
- clear VETH address on container exit and mark interface as running only when VETH is in use;
- do not allow negative number for "ram-high" setting;
- improved VETH interface management responsiveness and reliability;
- restrict "/container/shell" menu for users without "write" permissions;
- added IPv6 support for VETH interface;
- added option to use overlayfs layers;
- adjust the ownership of volume mounts that fall outside the container's UID range;
- fixed duplicate image name;
- fixed IP address in container host file;
- fixed "container pull" to support OCI manifest format;
- fixed crash due to missing system directories;
- improved default internal environment values;
- fixed invoking "container shell" more than once;
- improved "container pull" to support OCI manifest format;
- added authentication option for registry (CLI only);
- fixed ".type" file ownership;
- fixed file ownership after system upgrade for containers running on internal disk;
- fixed multiple container automatic startup on boot;
- fixed access to "/dev/stderr" from containers;
- fixed handling of groups and usernames from Dockerfile;
- fixed tar extracting;
- made "ram" and "tmp" directories use tmpfs;
- added "start-on-boot" parameter for automatic container startup;
- allow changing container related parameters while it is running;
- fixed usage of non-authenticated registries;
- added support for running Docker (TM) containers on ARM, ARM64 and x86 (containers created before v7.4 must be recreated);