diff --git a/libcontainer/cgroups/fs2/devices.go b/libcontainer/cgroups/fs2/devices.go index 053ec33e0..e06617f18 100644 --- a/libcontainer/cgroups/fs2/devices.go +++ b/libcontainer/cgroups/fs2/devices.go @@ -61,7 +61,7 @@ func setDevices(dirPath string, cgroup *configs.Cgroup) error { // // The real issue is that BPF_F_ALLOW_MULTI makes it hard to have a // race-free blacklist because it acts as a whitelist by default, and - // having a deny-everything program cannot be overriden by other + // having a deny-everything program cannot be overridden by other // programs. You could temporarily insert a deny-everything program // but that would result in spurrious failures during updates. if _, err := ebpf.LoadAttachCgroupDeviceFilter(insts, license, dirFD); err != nil { diff --git a/libcontainer/cgroups/fscommon/fscommon_test.go b/libcontainer/cgroups/fscommon/fscommon_test.go index 70a5ebce1..710fea915 100644 --- a/libcontainer/cgroups/fscommon/fscommon_test.go +++ b/libcontainer/cgroups/fscommon/fscommon_test.go @@ -29,7 +29,7 @@ func TestWriteCgroupFileHandlesInterrupt(t *testing.T) { defer os.RemoveAll(cgroupPath) if _, err := os.Stat(filepath.Join(cgroupPath, memoryLimit)); err != nil { - // either cgroupv2, or memory controller is not avalable + // either cgroupv2, or memory controller is not available t.Skip(err) } diff --git a/libcontainer/cgroups/systemd/common.go b/libcontainer/cgroups/systemd/common.go index 5872ac969..d49754ba9 100644 --- a/libcontainer/cgroups/systemd/common.go +++ b/libcontainer/cgroups/systemd/common.go @@ -93,7 +93,7 @@ func groupPrefix(ruleType configs.DeviceType) (string, error) { } // findDeviceGroup tries to find the device group name (as listed in -// /proc/devices) with the type prefixed as requried for DeviceAllow, for a +// /proc/devices) with the type prefixed as required for DeviceAllow, for a // given (type, major) combination. If more than one device group exists, an // arbitrary one is chosen. func findDeviceGroup(ruleType configs.DeviceType, ruleMajor int64) (string, error) {