Commit Graph

  • 72e673cf13 all: format sources with gofumpt v0.9.1 Kir Kolyshkin 2025-10-07 17:07:50 -07:00
  • ccd2336ac6 CI: remove deprecated lima-vm/lima-actions/ssh Akihiro Suda 2025-10-14 14:41:27 +09:00
  • 1984e2c256 Merge pull request #4936 from cyphar/1.4-fix-prepare-cgroup-fd-close lfbzhm 2025-10-16 08:59:19 +08:00
  • d34ea2bc06 Merge pull request #4937 from kolyshkin/lint-extra lfbzhm 2025-10-16 08:58:04 +08:00
  • 2c5356e73f selinux: use safe procfs API for labels Aleksa Sarai 2025-10-07 22:48:50 +11:00
  • 72fbb34f50 rootfs: switch to fd-based handling of mountpoint targets Aleksa Sarai 2025-05-10 23:46:55 +00:00
  • 707c4b03c5 libct: align param type for mountCgroupV1/V2 functions lifubang 2025-05-08 15:13:04 +00:00
  • 9df8180e0c libct/system: use securejoin for /proc/$pid/stat Aleksa Sarai 2025-07-19 16:30:26 +10:00
  • 7762edc82c init: use securejoin for /proc/self/setgroups Aleksa Sarai 2025-07-18 15:33:56 +10:00
  • c77ade57c9 init: write sysctls using safe procfs API Aleksa Sarai 2025-07-17 11:31:50 +10:00
  • 3cdcddff03 utils: remove unneeded EnsureProcHandle Aleksa Sarai 2025-06-20 16:23:38 +10:00
  • 2494b91604 utils: use safe procfs for /proc/self/fd loop code Aleksa Sarai 2025-06-20 15:43:49 +10:00
  • d1c47106d9 apparmor: use safe procfs API for labels Aleksa Sarai 2025-06-20 15:41:51 +10:00
  • af11e85a38 ci: add lint to forbid the usage of os.Create Aleksa Sarai 2025-05-15 17:40:25 +10:00
  • f4f8e8db05 rootfs: avoid using os.Create for new device inodes Aleksa Sarai 2025-05-15 21:38:32 +10:00
  • 0e2065976a internal: add wrappers for securejoin.Proc* Aleksa Sarai 2025-07-18 13:24:31 +10:00
  • ed55d5b5bf go.mod: update to github.com/cyphar/filepath-securejoin@v0.5.0 Aleksa Sarai 2025-05-06 11:23:40 +10:00
  • e34a0a0936 console: verify /dev/pts/ptmx before use Aleksa Sarai 2025-05-15 23:56:45 +10:00
  • c3f8ba303e console: avoid trivial symlink attacks for /dev/console Aleksa Sarai 2025-05-15 17:32:01 +10:00
  • a45564c23e console: add fallback for pre-TIOCGPTPEER kernels Aleksa Sarai 2025-08-01 19:33:12 +10:00
  • 68b07ce127 console: use TIOCGPTPEER when allocating peer PTY Aleksa Sarai 2025-05-15 16:12:21 +10:00
  • 73d4be0f1b libct: maskPaths: don't rely on ENOTDIR for mount Kir Kolyshkin 2025-04-22 18:02:13 -07:00
  • b3bee13bfc libct: maskPaths: only ignore ENOENT on mount dest Kir Kolyshkin 2025-04-21 15:33:52 -07:00
  • 71a4324fc3 libct: add/use isDevNull, verifyDevNull Kir Kolyshkin 2025-03-06 08:19:45 -08:00
  • 345a66c7a1 *: switch to safer securejoin.Reopen Aleksa Sarai 2025-06-19 10:19:41 +10:00
  • d540e01c9b internal: move utils.MkdirAllInRoot to internal/pathrs Aleksa Sarai 2025-07-18 13:18:53 +10:00
  • f88a6a6bc5 internal/sys: add VerifyInode helper Aleksa Sarai 2025-07-22 16:23:28 +10:00
  • 0007833a45 internal: linux: add package doc-comment Aleksa Sarai 2025-09-30 23:04:02 +10:00
  • 8f901856f9 selinux: use safe procfs API for labels Aleksa Sarai 2025-10-07 22:48:50 +11:00
  • 948d6e9dbe rootfs: switch to fd-based handling of mountpoint targets Aleksa Sarai 2025-05-10 23:46:55 +00:00
  • 7aa42ade85 libct: align param type for mountCgroupV1/V2 functions lifubang 2025-05-08 15:13:04 +00:00
  • a1ea773c3b libct/system: use securejoin for /proc/$pid/stat Aleksa Sarai 2025-07-19 16:30:26 +10:00
  • f0f9a6ba7f init: use securejoin for /proc/self/setgroups Aleksa Sarai 2025-07-18 15:33:56 +10:00
  • e416baeaf3 init: write sysctls using safe procfs API Aleksa Sarai 2025-07-17 11:31:50 +10:00
  • 863f7bc443 utils: remove unneeded EnsureProcHandle Aleksa Sarai 2025-06-20 16:23:38 +10:00
  • c9dd0e5ad9 utils: use safe procfs for /proc/self/fd loop code Aleksa Sarai 2025-06-20 15:43:49 +10:00
  • 47ab0b1e3b apparmor: use safe procfs API for labels Aleksa Sarai 2025-06-20 15:41:51 +10:00
  • 1652fc84c1 rootfs: avoid using os.Create for new device inodes Aleksa Sarai 2025-05-15 21:38:32 +10:00
  • ce2eb91efd internal: add wrappers for securejoin.Proc* Aleksa Sarai 2025-07-18 13:24:31 +10:00
  • 6d0f56705f go.mod: update to github.com/cyphar/filepath-securejoin@v0.5.0 Aleksa Sarai 2025-05-06 11:23:40 +10:00
  • 6763c0b756 console: verify /dev/pts/ptmx before use Aleksa Sarai 2025-05-15 23:56:45 +10:00
  • 0c3e7c1b4b console: avoid trivial symlink attacks for /dev/console Aleksa Sarai 2025-05-15 17:32:01 +10:00
  • 804001a69a console: add fallback for pre-TIOCGPTPEER kernels Aleksa Sarai 2025-08-01 19:33:12 +10:00
  • cc08a1d4f9 console: use TIOCGPTPEER when allocating peer PTY Aleksa Sarai 2025-05-15 16:12:21 +10:00
  • faa67dfff6 libct: maskPaths: don't rely on ENOTDIR for mount Kir Kolyshkin 2025-04-22 18:02:13 -07:00
  • 7ea4eb02e4 libct: maskPaths: only ignore ENOENT on mount dest Kir Kolyshkin 2025-04-21 15:33:52 -07:00
  • 11cf22d14e libct: add/use isDevNull, verifyDevNull Kir Kolyshkin 2025-03-06 08:19:45 -08:00
  • deef059707 *: switch to safer securejoin.Reopen Aleksa Sarai 2025-06-19 10:19:41 +10:00
  • 5a34b5b142 internal: move utils.MkdirAllInRoot to internal/pathrs Aleksa Sarai 2025-07-18 13:18:53 +10:00
  • 7ff4c85be5 internal/sys: add VerifyInode helper Aleksa Sarai 2025-07-22 16:23:28 +10:00
  • ccba725573 internal: linux: add package doc-comment Aleksa Sarai 2025-09-30 23:04:02 +10:00
  • 1c4dba693f ci: only run lint-extra job on PRs to main Kir Kolyshkin 2025-10-14 16:15:13 -07:00
  • 42b405d598 libct: refactor setnsProcess.start Kir Kolyshkin 2025-10-14 11:30:28 -07:00
  • e8e22ae15c libct: close child fds on prepareCgroupFD error Kir Kolyshkin 2025-10-13 15:54:45 -07:00
  • ef90082853 merge #4930 into opencontainers/runc:main Aleksa Sarai 2025-10-16 09:36:26 +11:00
  • f023e1c222 Merge pull request #4934 from AkihiroSuda/lima lfbzhm 2025-10-15 09:22:23 +08:00
  • 871052b791 libct: refactor setnsProcess.start Kir Kolyshkin 2025-10-14 11:30:28 -07:00
  • 4e262509b8 libct: close child fds on prepareCgroupFD error Kir Kolyshkin 2025-10-13 15:54:45 -07:00
  • c0e6f42427 CI: remove deprecated lima-vm/lima-actions/ssh Akihiro Suda 2025-10-14 14:41:27 +09:00
  • 721d066576 Merge pull request #4902 from osamakader/fix-outdated-seccomp-todo lfbzhm 2025-10-14 08:11:27 +08:00
  • e0632ccd1c docs: update seccomp documentation Osama Abdelkader 2025-09-26 22:50:57 +03:00
  • fa1b69348e Merge pull request #4914 from osamakader/fix-stringsTitle-criu-linux lfbzhm 2025-10-13 17:33:16 +08:00
  • 1adb070b58 criu: replace deprecated strings.Title Osama Abdelkader 2025-10-06 15:20:33 +03:00
  • bd6021d990 Merge pull request #4927 from cyphar/1.4-cpuset-fill Rodrigo Campos 2025-10-09 11:14:50 -03:00
  • 5aa229f74a [1.4] libct: switch to (*CPUSet).Fill Aleksa Sarai 2025-10-09 15:14:50 +11:00
  • 18fbdbe91c [1.4] deps: update to golang.org/x/sys@v0.37.0 Aleksa Sarai 2025-10-09 15:13:20 +11:00
  • 17938cd8b9 Merge pull request #4926 from cyphar/cpuset-fill Akihiro Suda 2025-10-09 16:41:02 +09:00
  • 2e3b2fb70c merge #4922 into opencontainers/runc:release-1.4 Aleksa Sarai 2025-10-09 18:40:13 +11:00
  • 46331735c2 VERSION: back to development Aleksa Sarai 2025-10-09 03:58:20 +11:00
  • 93f9a392cf libct: switch to (*CPUSet).Fill Aleksa Sarai 2025-10-09 15:14:50 +11:00
  • e3ab743998 Merge pull request #4924 from opencontainers/dependabot/go_modules/golang.org/x/net-0.46.0 Aleksa Sarai 2025-10-09 15:37:03 +11:00
  • e59062cec9 build(deps): bump golang.org/x/net from 0.45.0 to 0.46.0 dependabot[bot] 2025-10-09 04:02:50 +00:00
  • 8aeb2a4bdd VERSION: release v1.4.0-rc.2 v1.4.0-rc.2 Aleksa Sarai 2025-10-08 19:39:30 +11:00
  • a2f2cf31f8 CHANGELOG: add note about cpu shares changes Aleksa Sarai 2025-10-08 19:06:07 +11:00
  • b8f6fdb95a merge #4923 into opencontainers/runc:release-1.4 Aleksa Sarai 2025-10-09 14:29:17 +11:00
  • 0b8a41e38f fix(seccompagent): close received FDs, not loop index Joshua Rogers 2025-10-06 06:13:20 +08:00
  • 6e6ac00eb3 Merge pull request #4898 from kolyshkin/hugetlb-unit-test lfbzhm 2025-10-08 17:12:07 +08:00
  • bf5aeecc03 Merge pull request #4921 from marquiz/release-1.4 lfbzhm 2025-10-08 17:05:38 +08:00
  • a217cb827d Merge pull request #4917 from kolyshkin/golangci-v25 lfbzhm 2025-10-08 16:10:11 +08:00
  • 938693ba89 Merge pull request #4920 from cyphar/1.4-cgroup-clone-into-cgroup lfbzhm 2025-10-08 16:02:15 +08:00
  • 1f9157d68d libcontainer/intelrdt: add support for EnableMonitoring field Markus Lehtonen 2025-08-01 11:07:31 +03:00
  • ef61b7f0be tests/int: add check for hugetlb stats Kir Kolyshkin 2025-09-23 17:30:38 -07:00
  • d792f9fdb1 [1.4] runc exec: use CLONE_INTO_CGROUP when available Kir Kolyshkin 2025-07-15 16:31:49 -07:00
  • 3338251984 [1.4] libct: use manager.AddPid to add exec to cgroup Kir Kolyshkin 2025-07-25 17:34:35 -07:00
  • 7db9930fab [1.4] libct: move exec sub-cgroup handling down the line Kir Kolyshkin 2025-07-25 17:19:00 -07:00
  • f19a4c7122 [1.4] libct: split addIntoCgroup into V1 and V2 Kir Kolyshkin 2025-07-25 17:00:45 -07:00
  • 207a497ce1 [1.4] libct: factor out addIntoCgroup from setnsProcess.start Kir Kolyshkin 2025-07-15 16:37:34 -07:00
  • c443aee760 [1.4] script/setup_rootless.sh: chown nit Kir Kolyshkin 2025-07-16 11:10:55 -07:00
  • 28daf53d7e Merge pull request #4832 from marquiz/devel/rdt-enablemonitoring Kir Kolyshkin 2025-10-08 00:18:02 -07:00
  • e470a84243 Merge pull request #4915 from cyphar/1.4-memory-policy Kir Kolyshkin 2025-10-08 00:03:01 -07:00
  • b40777d41a Merge pull request #4919 from opencontainers/dependabot/go_modules/golang.org/x/net-0.45.0 Kir Kolyshkin 2025-10-07 22:00:29 -07:00
  • a35a0e0276 build(deps): bump golang.org/x/net from 0.44.0 to 0.45.0 dependabot[bot] 2025-10-08 04:02:33 +00:00
  • 910f134598 [1.4] Add memory policy support Antti Kervinen 2025-03-27 15:42:24 +02:00
  • 12ed7f7315 [1.4] events/intelrdt: report full schemata Markus Lehtonen 2025-07-30 17:41:25 +03:00
  • 517e7996d2 [1.4] libcontainer/intelrdt: add support for Schemata field Markus Lehtonen 2025-07-30 16:02:23 +03:00
  • 3009f9d7d0 [1.4] libcontainer/intelrdt: refactor tests Markus Lehtonen 2025-07-30 14:52:55 +03:00
  • 2aea8617ea ci: bump golangci-lint to v2.5 Kir Kolyshkin 2025-10-07 16:59:48 -07:00
  • b2f8a74de5 all: format sources with gofumpt v0.9.1 Kir Kolyshkin 2025-10-07 17:07:50 -07:00
  • a0858eaf3b [1.4] Update runtime-spec Markus Lehtonen 2025-07-30 14:36:24 +03:00
  • a672a5f36c merge #4726 into opencontainers/runc:main Aleksa Sarai 2025-10-08 05:18:13 +11:00