3b75374cc7
runtime-spec: update pids.limit handling to match new guidance
...
The main update is actually in github.com/opencontainers/cgroups, but we
need to also update runtime-spec to a newer pre-release version to get
the updates from there as well.
In short, the behaviour change is now that "0" is treated as a valid
value to set in "pids.max", "-1" means "max" and unset/nil means "do
nothing". As described in the opencontainers/cgroups PR, this change is
actually backwards compatible because our internal state.json stores
PidsLimit, and that entry is marked as "omitempty". So, an old runc
would omit PidsLimit=0 in state.json, and this will be parsed by a new
runc as being "nil" -- and both would treat this case as "do not set
anything".
Signed-off-by: Aleksa Sarai <cyphar@cyphar.com >
2025-11-11 15:15:27 +11:00
74c5436b7d
Update runtime-spec
...
Signed-off-by: Markus Lehtonen <markus.lehtonen@intel.com >
2025-08-26 19:55:01 +03:00
889c7b272f
update runtime-spec
...
Signed-off-by: Antonio Ojea <aojea@google.com >
2025-06-18 15:52:30 +01:00
537a2276bb
build(deps): bump github.com/opencontainers/runtime-spec
...
Bumps [github.com/opencontainers/runtime-spec](https://github.com/opencontainers/runtime-spec ) from 1.2.0 to 1.2.1.
- [Release notes](https://github.com/opencontainers/runtime-spec/releases )
- [Changelog](https://github.com/opencontainers/runtime-spec/blob/main/ChangeLog )
- [Commits](https://github.com/opencontainers/runtime-spec/compare/v1.2.0...v1.2.1 )
---
updated-dependencies:
- dependency-name: github.com/opencontainers/runtime-spec
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-02-28 04:52:38 +00:00
606251ab33
build(deps): bump github.com/opencontainers/runtime-spec
...
Bumps [github.com/opencontainers/runtime-spec](https://github.com/opencontainers/runtime-spec ) from 1.1.1-0.20230823135140-4fec88fd00a4 to 1.2.0.
- [Release notes](https://github.com/opencontainers/runtime-spec/releases )
- [Changelog](https://github.com/opencontainers/runtime-spec/blob/main/ChangeLog )
- [Commits](https://github.com/opencontainers/runtime-spec/commits/v1.2.0 )
---
updated-dependencies:
- dependency-name: github.com/opencontainers/runtime-spec
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp >
2024-03-07 14:43:33 +09:00
671e211ef8
vendor: Update runtime-spec to expose mountExtensions
...
Future commits will expose this info in the features sub-command.
Signed-off-by: Rodrigo Campos <rodrigoca@microsoft.com >
2023-08-23 16:17:02 +02:00
11b6c9b638
build(deps): bump github.com/opencontainers/runtime-spec
...
Bumps [github.com/opencontainers/runtime-spec](https://github.com/opencontainers/runtime-spec ) from 1.1.0-rc.3 to 1.1.0.
- [Release notes](https://github.com/opencontainers/runtime-spec/releases )
- [Changelog](https://github.com/opencontainers/runtime-spec/blob/main/ChangeLog )
- [Commits](https://github.com/opencontainers/runtime-spec/compare/v1.1.0-rc.3...v1.1.0 )
---
updated-dependencies:
- dependency-name: github.com/opencontainers/runtime-spec
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp >
2023-07-22 13:03:35 +09:00
0ac3376c20
go.mod: runtime-spec v1.1.0-rc.3
...
https://github.com/opencontainers/runtime-spec/releases/tag/v1.1.0-rc.3
Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp >
2023-06-10 17:19:11 +09:00
6beb3c6a3e
go.mod: runtime-spec v1.1.0-rc.2
...
See https://github.com/opencontainers/runtime-spec/releases/tag/v1.1.0-rc.2
for the spec changes.
The `runc features` json is now defined in
https://github.com/opencontainers/runtime-spec/blob/v1.1.0-rc.2/specs-go/features/features.go
Replaces PR 3829
Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp >
2023-05-10 22:23:29 +09:00
787fcf09e7
go.mod: github.com/opencontainers/runtime-spec v1.1.0-rc.1
...
Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp >
2023-02-10 12:10:14 +09:00
6462e9de67
runc update: implement memory.checkBeforeUpdate
...
This is aimed at solving the problem of cgroup v2 memory controller
behavior which is not compatible with that of cgroup v1.
In cgroup v1, if the new memory limit being set is lower than the
current usage, setting the new limit fails.
In cgroup v2, same operation succeeds, and the container is OOM killed.
Introduce a new setting, memory.checkBeforeUpdate, and use it to mimic
cgroup v1 behavior.
Note that this is not 100% reliable because of TOCTOU, but this is the
best we can do.
Add some test cases.
Signed-off-by: Kir Kolyshkin <kolyshkin@gmail.com >
2022-11-02 17:15:26 -07:00
c152e8310f
go.mod: update runtime-spec
...
Signed-off-by: Alban Crequy <albancrequy@microsoft.com >
2022-07-28 16:25:26 +02:00
e49d5da219
go.mod: OCI runtime-spec v1.0.3-0.20210326190908-1c3f411f0417
...
full diff: https://github.com/opencontainers/runtime-spec/compare/a8c4a9ee0f6b...1c3f411f0417
- Fix seccomp notify inconsistencies
- seccomp: Add missing const for seccomp notify action
- schema/defs-linux: Fix inconsistencies with seccomp notify
- Proposal: runtime should ignore capabilities that cannot be granted
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2021-03-26 21:22:58 +01:00
dd2caace16
go.mod: runtime-spec v1.0.3-0.20210316141917-a8c4a9ee0f6b
...
full diff: https://github.com/opencontainers/runtime-spec/compare/e6143ca7d51d...a8c4a9ee0f6b
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2021-03-16 16:57:38 +01:00
a3f91b9864
vendor: bump runtime-spec
...
... to include unified resources support.
Signed-off-by: Kir Kolyshkin <kolyshkin@gmail.com >
2020-09-16 10:23:12 -07:00
901dccf05d
vendor: update runtime-spec v1.0.3-0.20200728170252-4d89ac9fbff6
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2020-07-30 22:08:54 +02:00
510c79f9cf
vendor: update runtime-specs to 237cc4f519e
...
Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com >
2020-05-20 09:11:54 +02:00
dfc1b0cd51
update vendor
...
Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp >
2020-03-28 04:22:06 +09:00
69e8fb2a74
Add support for GO Modules
...
This removes vndr, and swiches to native Go Modules instead. All modules
are kept on the old version.
Keeps the vendor/ dir, so everything is backwards compatible.
Signed-off-by: Odin Ugedal <odin@ugedal.com >
2020-03-07 09:29:29 +01:00
ec069fe332
Vendor opencontainers/runtime-spec 29686dbc
...
Signed-off-by: John Howard <jhoward@microsoft.com >
2019-02-07 14:49:22 -08:00
bd90541666
vendor: bump runtime-spec to 5684b8af48c1
...
Update runtime-spec to get Intel RDT/MBA Linux configs which will be
used in successive commits.
Signed-off-by: Xiaochen Shen <xiaochen.shen@intel.com >
2018-10-16 13:18:25 +08:00
30669da201
Bump the spec up to v1.0.0
...
Signed-off-by: Mrunal Patel <mrunalp@gmail.com >
2017-07-19 10:34:27 -07:00
eb70c213ba
Update runtime-spec to rc6
...
Signed-off-by: Michael Crosby <crosbymichael@gmail.com >
2017-07-12 16:24:04 -07:00
e8ef6025a4
Update to runtime spec 198f23f827
...
Updates memory limits to be int64, and removes Platform from spec.
Signed-off-by: Justin Cormack <justin.cormack@docker.com >
2017-06-27 12:16:07 +01:00
854b41d81e
Update spec to 239c4e44f2
...
This provides updates to runc for the spec changes with *Process and
OOMScoreAdj
Signed-off-by: Michael Crosby <crosbymichael@gmail.com >
2017-06-01 16:29:47 -07:00
4f9cb13b64
Update runtime spec to 1.0.0.rc5
...
Signed-off-by: Mrunal Patel <mrunalp@gmail.com >
2017-03-15 11:38:37 -07:00
993cbf9db0
move from Godeps to vndr
...
This uses the standard go vendor location instead of old Godeps
location.
Also remove usage of symlink GOPATH. Since our README mentions that you
should build it inside GOPATH, i think its a reasonable to assume that
you dont need to create a tmp GOPATH.
Signed-off-by: Daniel Dao <dqminh89@gmail.com >
2017-02-24 11:25:21 +00:00
Aleksa Sarai