Austin Vazquez

## Use case The `events` package is used by containerd [both client and server] to build the mechanism for pub/sub for container events. ### What is the issue? The issue...

[release/1.7] update release runners to ubuntu 24.04

2

Partial cherry-pick of https://github.com/containerd/containerd/pull/10217 update all runners except the binary building job to ubuntu-24.04 (cherry picked from commit 9077968119eaa4ec70136382dabe4aa65bdc108f)

Resolve govet copylocks lint errors

1

The following lint errors should be resolved: ``` Error: runtime/service.go:1032:10: copylocks: range var ni copies lock: github.com/firecracker-microvm/firecracker-containerd/proto.FirecrackerNetworkInterface contains google.golang.org/protobuf/runtime/protoimpl.MessageState contains sync.Mutex (govet) for _, ni := range s.config.DefaultNetworkInterfaces { Error:...

Resolve revive package-comments linter errors

5

Resolve the following lint errors: ``` Error: snapshotter/internal/integtest/stargz/fs/config/config.go:41:1: package-comments: should have a package comment (revive) package config ^ Error: snapshotter/config/config.go:14:1: package-comments: should have a package comment (revive) package config ^...

Resolve G301 expect directory permission to be 0750 or less

1

Resolve the following errors: ``` Error: runtime/service_test.go:315:10: G301: Expect directory permissions to be 0750 or less (gosec) err := os.MkdirAll(stubDrivePath, os.ModePerm) ```

Resolve G114 use of net/http serve function that has no support for setting timeouts

3

Resolve the following errors: ``` Error: internal/network_test_utils.go:135:10: G114: Use of net/http serve function that has no support for setting timeouts (gosec) return http.ListenAndServe(l.ipAddr+":80", nil) ```

Resolve G404 use of weak random number generator lint errors

1

Resolve the following error: ``` Error: runtime/service.go:70:2: G404: Use of weak random number generator (math/rand or math/rand/v2 instead of crypto/rand) (gosec) ```

Resolve the following errors: ``` firecracker-control/cmd/containerd/main.go:76:2: SA1019: seed.WithTimeAndRand is deprecated: Do not rely on the global seed. (staticcheck) seed.WithTimeAndRand() ^ firecracker-control/cmd/containerd/main.go:21:2: SA1019: "github.com/containerd/containerd/pkg/seed" is deprecated: Do not rely on the...

Add cgroupV2 CPUQuotaPeriodUSec support

5

Addresses https://github.com/containerd/cgroups/issues/365 This change adds `CPUQuotaPeriodUSec` property for cgroupsv2. Heavily influenced by github.com/opencontainers/cgroups. Refactors a bit of the existing functions for testability. Added some unit tests for validating the property...