runc 1.1.9 -- "There is a crack in everything. That's how the light gets in."

[kolyshkin]

This is the ninth patch release of the 1.1.z release branch of runc.
It fixes a regression introduced in 1.1.8, a bugfix in intelrdt, and
a libcontainer fix to cgroup v2 statistics reporting.

[1.1.9] - 2023-08-10

There is a crack in everything. That's how the light gets in.

Added

• Added go 1.21 to the CI matrix; other CI updates. ([1.1] Add go 1.21 to CI #3976, [1.1] deps: Update github actions packages in validate workflow #3958)

Fixed

• Fixed losing sticky bit on tmpfs (a regression in 1.1.8). ([v1.1.8 regression] Sticky bit on container tmpfs no longer set #3952, [1.1] Fix some file mode bits missing when doing mount syscall #3961)
• intelrdt: fixed ignoring ClosID on some systems. (Intel RDT does not work with L2 cache #3550, [1.1] fix intelrdt #3978)

Changed

• Sum anon and file from memory.stat for cgroupv2 root usage,
  as the root does not have memory.current for cgroupv2.
  This aligns cgroupv2 root usage more closely with cgroupv1 reporting.
  Additionally, report root swap usage as sum of swap and memory usage,
  aligned with v1 and existing non-root v2 reporting. (libct/cg/fs2: use file + anon + swap for usage #3933)

[cyphar]

LGTM.