v1.0.2 -- "Given the right lever, you can move a planet." This is a second stable release in 1.0 branch, fixing a few medium and high priority issues, including one that affects Kubernetes' usage of runc's libcontainer. Bugfixes: * Fixed a failure to set CPU quota period in some cases on cgroup v1. (#3115) * Fixed the inability to start a container with the "adding seccomp filter rule for syscall ..." error, caused by redundant seccomp rules (i.e. those that has action equal to the default one). Such redundant rules are now skipped. (#3129) * Made release builds reproducible from now on. (#3142) * Fixed a rare debug log race in runc init, which can result in occasional harmful "failed to decode ..." errors from runc run or exec. (#3130) * Fixed the check in cgroup v1 systemd manager if a container needs to be frozen before Set, and add a setting to skip such freeze unconditionally. The previous fix for that issue, done in runc 1.0.1, was not working. (#3167) Thanks to all of the contributors who made this release possible: * Adrian Reber <areber@redhat.com> * Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp> * Aleksa Sarai <cyphar@cyphar.com> * Kir Kolyshkin <kolyshkin@gmail.com> * Mrunal Patel <mrunal@me.com> * Odin Ugedal <odin@uged.al> Signed-off-by: Aleksa Sarai <cyphar@cyphar.com>