mirror/runc
1
0
Fork 0
mirror of https://github.com/opencontainers/runc.git synced 2026-07-11 06:03:57 +08:00
Code Issues Packages Projects Releases Wiki Activity
4,836 Commits 7 Branches 82 Tags
09523b79d01d032d2faeeb7eef4ad5a31eda528f
Commit Graph

99 Commits

Author SHA1 Message Date
Akihiro Suda cb26930680 remove "selinux" build tag (Always compile SELinux support) 
The build tag was removed in go-selinux v1.8.0: https://github.com/opencontainers/selinux/pull/132

Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
 2020-12-16 17:41:11 +09:00
Sebastiaan van Stijn ee1bdb80af vendor: github.com/cilium/ebpf v0.2.0 
full diff: https://github.com/cilium/ebpf/compare/v0.1.0...v0.2.0

- btf: add go-fuzz targets
- btf: avoid Type copy in FuncProto.walk
- btf: check err in loadSpecFromVmlinux
- btf: handle type name flavours
- CI: test on 5.9 kernel
- cmd/bpf2go: output ELF .o next to the .go file
- link: add AttachSkLookup
- Remove two unused functions
- Support LSM attach
- use buffered I/O to cut down on read syscalls
- Various doc link fixes

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2020-11-20 13:56:46 +01:00
Akihiro Suda 4690064f05 update vendor 
Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
 2020-11-09 15:14:23 +09:00
Kir Kolyshkin 13afa58d0e libct/cg/sd/v2: support cpuset.* / Allowed* 
* cpuset.cpus -> AllowedCPUs
 * cpuset.mems -> AllowedMemoryNodes

No test for cgroup v2 resources.unified override, as this requires a
separate test case, and all the unified resources are handled uniformly
so there's little sense to test all parameters.

Signed-off-by: Kir Kolyshkin <kolyshkin@gmail.com>
 2020-11-05 16:04:57 -08:00
Kir Kolyshkin 17de6f803d vendor: bump mountinfo to v0.4.0 
Release notes:
 - https://github.com/moby/sys/releases/tag/mountinfo%2Fv0.4.0

In particular, this fixes a regression introduced in commit b8bf572812
which checked the mountinfo.Root field in a FilterFunc, while Root was
not set when calling a filter.

Signed-off-by: Kir Kolyshkin <kolyshkin@gmail.com>
 2020-10-21 21:41:13 -07:00
Kir Kolyshkin 87412ee435 vendor: bump mountinfo v0.3.1 
It contains some breaking changes, so fix the code.

Signed-off-by: Kir Kolyshkin <kolyshkin@gmail.com>
 2020-10-01 18:51:25 -07:00
Sebastiaan van Stijn 819fd68392 go.mod: sirupsen/logrus v1.7.0 
full diff: https://github.com/sirupsen/logrus/compare/v1.6.0...v1.7.0

removes dependency on github.com/konsorten/go-windows-terminal-sequences

Features:
   * a new buffer pool management API has been added
   * a set of `<LogLevel>Fn()` functions have been added

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2020-09-30 14:00:16 +02:00
Sebastiaan van Stijn 0eb66c955c go.mod: github.com/containerd/console v1.0.1 
full diff: https://github.com/containerd/console/compare/v1.0.0...v1.0.1

Fixes compatibility with current versions of golang.org/x/sys

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2020-09-30 13:58:27 +02:00
Akihiro Suda 6e5320ffa8 Merge pull request #2584 from kolyshkin/unified-support 
libct/cgroups: support Cgroups.Resources.Unified
 2020-09-26 18:48:16 +09:00
Sebastiaan van Stijn 71c10e3c78 vendor: github.com/moby/sys/mountinfo v0.2.0 
full diff: https://github.com/moby/sys/compare/mountinfo/v0.1.3...mountinfo/v0.2.0

Bug fixes:

- Fix path unescaping for paths with double quotes

Improvements:

- Mounted: speed up by adding fast paths using openat2 (Linux-only) and stat
- Mounted: relax path requirements (allow relative, non-cleaned paths, symlinks)
- Unescape fstype and source fields
- Documentation improvements

Testing/CI:

- Unit tests: exclude darwin
- CI: run tests under Fedora 32 to test openat2
- TestGetMounts: fix for Ubuntu build system
- Makefile: fix ignoring test failures
- CI: add cross build

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2020-09-16 22:52:26 +02:00
Kir Kolyshkin a3f91b9864 vendor: bump runtime-spec 
... to include unified resources support.

Signed-off-by: Kir Kolyshkin <kolyshkin@gmail.com>
 2020-09-16 10:23:12 -07:00
Kir Kolyshkin b682e8cf2d vendor: bump fileutils to v0.5.0 
Signed-off-by: Kir Kolyshkin <kolyshkin@gmail.com>
 2020-09-10 10:36:54 -07:00
Akihiro Suda 6dfbe9b807 support CAP_PERFMON, CAP_BPF, and CAP_CHECKPOINT_RESTORE 
CAP_PERFMON and CAP_BPF were introduced in kernel 5.8: https://kernelnewbies.org/Linux_5.8#Introduce_CAP_BPF_and_CAP_PERFMON_security_capabilities

CAP_CHECKPOINT_RESTORE was merged on the master recently and will be available in the next version of the kernel. https://github.com/torvalds/linux/commit/124ea650d3072b005457faed69909221c2905a1f

Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
 2020-08-15 15:47:47 +09:00
Akihiro Suda 234d15ecd0 Merge pull request #2520 from thaJeztah/bump_runtime_spec 
vendor: update runtime-spec v1.0.3-0.20200728170252-4d89ac9fbff6
 2020-08-04 14:05:33 +09:00
Akihiro Suda 78d02e8563 Merge pull request #2534 from adrianreber/go-criu-4-1-0 
Pass location of CRIU binary to go-criu
 2020-08-03 16:21:50 +09:00
Adrian Reber 267b7148cb Upgrade go-criu to 4.1.0 
Signed-off-by: Adrian Reber <areber@redhat.com>
 2020-07-31 11:14:15 +02:00
Sebastiaan van Stijn 901dccf05d vendor: update runtime-spec v1.0.3-0.20200728170252-4d89ac9fbff6 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2020-07-30 22:08:54 +02:00
John Hwang 5935296367 Update go.mod 
Signed-off-by: John Hwang <john.f.hwang@gmail.com>
 2020-07-30 05:28:39 -07:00
Sebastiaan van Stijn f49adb5277 vendor: update cilium/ebpf v0.0.0-20200702112145-1c8d4c9ef775 
full diff: https://github.com/cilium/ebpf/compare/a9f01edf17e3...1c8d4c9ef775

drops support for go1.12, and removes dependency on the golang.org/x/xerrors
transitional package.

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2020-07-02 14:48:23 +02:00
Akihiro Suda cd4b71c27a Merge pull request #2409 from adrianreber/go-criu-4-0-0 
Update to latest go-criu
 2020-05-21 01:39:09 +09:00
Adrian Reber 944e057025 Update to latest go-criu (4.0.2) 
This updates to the latest version of go-criu (4.0.2) which is based on
CRIU 3.14.

As go-criu provides an existing way to query the CRIU binary for its
version this also removes all the code from runc to handle CRIU version
checking and now relies on go-criu.

An important side effect of this change is that this raises the minimum
CRIU version to 3.0.0 as that is the first CRIU version that supports
CRIU version queries via RPC in contrast to parsing the output of
'criu --version'

CRIU 3.0 has been released in April of 2017.

Signed-off-by: Adrian Reber <areber@redhat.com>
 2020-05-20 13:49:38 +02:00
Giuseppe Scrivano 510c79f9cf vendor: update runtime-specs to 237cc4f519e 
Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
 2020-05-20 09:11:54 +02:00
Alice Frosi 828e4ad89d epbf: update github.com/cilium/ebpf 
Update ebpf to include PR https://github.com/cilium/ebpf/pull/91.
The update is needed to fix #2316.

Signed-off-by: Alice Frosi <afrosi@de.ibm.com>
 2020-05-08 14:20:19 +02:00
Sebastiaan van Stijn b48bbdd08d vendor: opencontainers/selinux v1.5.1, update deprecated uses 
full diff: https://github.com/opencontainers/selinux/v1.4.0...v1.5.1

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2020-05-05 15:53:40 +02:00
Sebastiaan van Stijn e8bece65a9 vendor: sirupsen/logrus v1.6.0 
full diff: https://github.com/sirupsen/logrus/compare/v1.5.0...v1.6.0

- Add flag to disable quotes in TextFormatter
- Revert "fix race conditions on entry"
    - fixes Deadlock during Entry.Infof after upgrade to v1.5.0
    - fixes Deadlock when using WithField inside of hook
    - fixes Overly-aggressive mutex locks

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2020-05-04 02:24:03 +02:00
Akihiro Suda dfc1b0cd51 update vendor 
Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
 2020-03-28 04:22:06 +09:00
Mrunal Patel 53ad1d5100 Merge pull request #2256 from kolyshkin/mountinfo-alt 
Use faster mountinfo parser (part 1)
 2020-03-27 11:36:51 -07:00
Kir Kolyshkin c7ab2c036b libcontainer: switch to moby/sys/mountinfo package 
Delete libcontainer/mount in favor of github.com/moby/sys/mountinfo,
which is fast mountinfo parser.

Signed-off-by: Kir Kolyshkin <kolyshkin@gmail.com>
 2020-03-21 10:33:43 -07:00
Akihiro Suda 492d525e55 vendor: update go-systemd and godbus 
Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
 2020-03-16 13:26:03 +09:00
Odin Ugedal 69e8fb2a74 Add support for GO Modules 
This removes vndr, and swiches to native Go Modules instead. All modules
are kept on the old version.

Keeps the vendor/ dir, so everything is backwards compatible.

Signed-off-by: Odin Ugedal <odin@ugedal.com>
 2020-03-07 09:29:29 +01:00
Sebastiaan van Stijn d8953334bb vendor: update opencontainers/selinux v1.3.3 
full diff: https://github.com/opencontainers/selinux/compare/v1.3.1...v1.3.3

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2020-03-02 12:41:07 +01:00
Sebastiaan van Stijn 22e00ddc03 vendor: update golang.org/x/sys 52ab431487773bc9dd1b0766228b1cf3944126bf 
full diff: https://github.com/golang/sys/compare/9eafafc0a87e0fd0aeeba439a4573537970c44c7...52ab431487773bc9dd1b0766228b1cf3944126bf

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2020-03-02 12:41:05 +01:00
Sebastiaan van Stijn c295a6339c vendor: update opencontainers/selinux v1.3.1 
full diff: https://github.com/opencontainers/selinux/compare/5215b1806f52b1fcc2070a8826c542c9d33cd3cf...v1.3.1

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2020-03-02 12:41:01 +01:00
Akihiro Suda faf673ee45 cgroup2: port over eBPF device controller from crun 
The implementation is based on https://github.com/containers/crun/blob/0.10.2/src/libcrun/ebpf.c

Although ebpf.c is originally licensed under LGPL-3.0-or-later, the author
Giuseppe Scrivano agreed to relicense the file in Apache License 2.0:
https://github.com/opencontainers/runc/issues/2144#issuecomment-543116397

See libcontainer/cgroups/ebpf/devicefilter/devicefilter_test.go for tested configurations.

Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
 2019-10-31 14:01:46 +09:00
Aleksa Sarai 9aef504415 vendor: update github.com/opencontainers/selinux 
This is a bump to v1.3.0, plus the necessary CVE-2019-16884 mitigation.

Signed-off-by: Aleksa Sarai <asarai@suse.de>
 2019-09-30 00:36:59 +10:00
Sebastiaan van Stijn 115d4b9e57 bump golang/protobuf v1.0.0 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-09-06 01:44:33 +02:00
Sebastiaan van Stijn 85c02f3f30 bump coreos/go-systemd v19, godbus/dbus v5.0.1 
- https://github.com/coreos/go-systemd/compare/v14..v19
  - coreos/go-systemd#248 dbus: add SetPropertiesSubscriber method
  - coreos/go-systemd#251 activation: add support for listeners with names
  - coreos/go-systemd#296 dbus: Fix API break from godbus
- https://github.com/godbus/dbus/compare/v3..v5.0.1
  - godbus/dbus#89 introduce MakeVariantWithSignature

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-09-06 01:44:30 +02:00
Sebastiaan van Stijn 21498b8e54 bump mrunalp/fileutils 7d4729fb36185a7c1719923406c9d40e54fb93c7 
no significant changes, other than some linting fixes

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-09-06 01:44:28 +02:00
Sebastiaan van Stijn eb86f6037e bump syndtr/gocapability d98352740cb2c55f81556b63d4a1ec64c5a319c2 
relevant changes:

  - syndtr/gocapability#14 capability: Deprecate NewPid and NewFile for NewPid2 and NewFile2
  - syndtr/gocapability#16 Fix capHeader.pid type

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-09-06 01:44:26 +02:00
Sebastiaan van Stijn 1150ce9c6e bump urfave/cli v1.20.0 
previous version was somewhere between v1.18 and v1.19

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-09-06 01:44:23 +02:00
Sebastiaan van Stijn 8e4f645fca bump docker/go-units v0.3.3 
relevant changes:

  - docker/go-units#8 Enhance FromHumanSize to parse float64 string
  - docker/go-units#20 Add `HumanSizeWithPrecision` function

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-09-06 01:43:44 +02:00
Sebastiaan van Stijn 0fc0662338 bump cyphar/filepath-securejoin v0.2.2 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-09-06 01:43:42 +02:00
Sebastiaan van Stijn 414a39dedb bump containerd/console 0650fd9eeb50bab4fc99dceb9f2e14cf58f36e7f 
relevant changes:

- containerd/console#27 console_linux: Fix race: lock Cond before Signal

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-09-06 01:43:39 +02:00
Sebastiaan van Stijn de24d73350 bump github.com/pkg/errors 0.8.1 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-09-06 01:43:37 +02:00
Carlos de Paula 4316e4d047 Bump x/sys and update syscall to start Risc-V support 
Signed-off-by: Carlos de Paula <me@carlosedp.com>
 2019-08-29 12:09:08 -03:00
Filipe Brandenburger 4ca00773ee Update vendored dependencies to remove go-systemd/util 
This removes "github.com/coreos/go-systemd/util", no longer needed after
removing the dependency on it.

It also gets rid of "github.com/coreos/pkg/dlopen", since that was only
referred to by the aforementioned "util" package.

Tested that everything builds and works as expected.

Signed-off-by: Filipe Brandenburger <filbranden@gmail.com>
 2019-08-22 21:09:40 -07:00
Odin Ugedal 652297c7c7 Update dependency libseccomp-golang 
Diff here: https://github.com/seccomp/libseccomp-golang/compare/1b506fc7c24e...v0.9.1

Fixes https://nvd.nist.gov/vuln/detail/CVE-2017-18367

Signed-off-by: Odin Ugedal <odin@ugedal.com>
 2019-06-20 22:35:57 +02:00
Michael Crosby 70bc4cd847 Merge pull request #2034 from masters-of-cats/pr-child-logging 
Support for logging from children processes
 2019-05-07 10:35:48 -04:00
Daniel J Walsh 8362cd02c0 Vendor in latest selinux code for keycreate errors 
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
 2019-04-24 08:41:56 -04:00
Georgi Sabev 475aef10f7 Remove redundant log function 
Bump logrus so that we can use logrus.StandardLogger().Logf instead

Co-authored-by: Julia Nedialkova <julianedialkova@hotmail.com>
Signed-off-by: Georgi Sabev <georgethebeatle@gmail.com>
 2019-04-22 17:54:55 +03:00