Commit Graph

  • f29c4df140 Merge pull request #5067 from opencontainers/dependabot/github_actions/actions/cache-5 Akihiro Suda 2025-12-15 15:01:18 +09:00
  • 18c3adb8dc build(deps): bump actions/cache from 4 to 5 dependabot[bot] 2025-12-12 04:02:43 +00:00
  • 58d24d2dfb Add linter rule to guard against use of os.Is* error functions Curd Becker 2025-12-09 03:29:44 +01:00
  • 536e183451 Replace os.Is* error checking functions with their errors.Is counterpart Curd Becker 2025-11-17 00:28:05 +01:00
  • 508d512061 Add loong64 support in seccomp and PIE zhaixiaojuan 2025-10-16 09:50:37 +08:00
  • 3741f9186d libct/configs: mark MPOL_* constants as deprecated Kir Kolyshkin 2025-12-04 17:21:11 -08:00
  • 6ede591761 internal/systemd: simplify Kir Kolyshkin 2025-12-05 14:22:14 -08:00
  • ba9e60f7a8 Remove crypto/tls dependency Kir Kolyshkin 2025-12-05 14:14:04 -08:00
  • e0adafb4ca Merge pull request #5054 from kolyshkin/alma10 lfbzhm 2025-12-05 11:43:58 +08:00
  • ee8f6b61be Merge pull request #5012 from kolyshkin/criu-dev-ignore-fails Rodrigo Campos 2025-12-05 04:15:31 +01:00
  • 5407cfe4a1 ci: don't fail CI if criu-dev test fails Kir Kolyshkin 2025-11-12 15:11:53 -08:00
  • 4f93f06fb7 ci: add centos-cloud-10 run Kir Kolyshkin 2025-12-02 17:42:37 -08:00
  • 94167dae29 .cirrus.yml: use dnf not yum Kir Kolyshkin 2025-12-02 17:41:59 -08:00
  • 14cc644c33 Merge pull request #5053 from kolyshkin/misc-bumps Akihiro Suda 2025-12-04 08:19:30 +09:00
  • 68771cfe51 ci: bump shellcheck to v0.11.0 Kir Kolyshkin 2025-12-02 15:31:52 -08:00
  • 79b97d4642 Use Go 1.25 for official builds Kir Kolyshkin 2025-12-02 15:26:48 -08:00
  • f4710e5023 Bump seccomp to v2.6.0 Kir Kolyshkin 2025-12-02 15:25:42 -08:00
  • f128234354 ci: bump bats to 1.12.0 Kir Kolyshkin 2025-12-02 15:22:40 -08:00
  • 54d8257ec1 Merge pull request #5052 from cyphar/release-tarball Kir Kolyshkin 2025-12-03 09:13:15 -08:00
  • fd185882e5 Merge pull request #5009 from kolyshkin/defer-close-init Kir Kolyshkin 2025-12-02 17:35:12 -08:00
  • 93792e6c13 notify_socket: close fds on error Kir Kolyshkin 2025-11-12 13:39:33 -08:00
  • 8a9b4dcda6 libct: mountFd: close mountFile on error Kir Kolyshkin 2025-11-12 13:35:24 -08:00
  • c24965b742 libct: newProcessComm: close fds on error Kir Kolyshkin 2025-11-12 13:28:57 -08:00
  • 88f897160c libct: startInitialization: add defer close Kir Kolyshkin 2025-11-12 13:13:48 -08:00
  • 1f1ff4be06 Merge pull request #5051 from cyphar/libct-utils-deprecated Kir Kolyshkin 2025-12-02 15:06:01 -08:00
  • 7c8fccd646 release: use runc-$version.tar.xz as archive name Aleksa Sarai 2025-11-30 12:09:22 +11:00
  • 20a9532fd0 Merge pull request #5049 from cyphar/changelog-update Rodrigo Campos 2025-11-28 08:34:57 -03:00
  • 64c3c8eea6 Merge pull request #4994 from kolyshkin/gofumpt-extra Akihiro Suda 2025-11-28 09:30:57 +09:00
  • a412bd93e9 libct/utils: remove Deprecated functions Aleksa Sarai 2025-11-28 11:11:04 +11:00
  • bf258ce163 RELEASES: remove <= 1.1.x special casing Aleksa Sarai 2025-11-28 11:07:45 +11:00
  • 0c150f4c3a RELEASES: remove 'draft' section of policy Aleksa Sarai 2025-11-28 11:06:39 +11:00
  • 48de3431a1 CHANGELOG: forward-port changelog entries Aleksa Sarai 2025-11-28 11:04:33 +11:00
  • fe09117131 merge #5046 into opencontainers/runc:release-1.4 Aleksa Sarai 2025-11-28 10:34:45 +11:00
  • 478edba3b8 merge #5044 into opencontainers/runc:release-1.3 Aleksa Sarai 2025-11-28 10:34:01 +11:00
  • 77f2125179 merge #5045 into opencontainers/runc:release-1.2 Aleksa Sarai 2025-11-28 10:33:19 +11:00
  • 4ab771fcee VERSION: back to development lifubang 2025-11-26 15:38:54 +00:00
  • 6524246c68 VERSION: release 1.2.9 v1.2.9 lifubang 2025-11-26 15:38:25 +00:00
  • 13cc7e92cf VERSION: back to development lifubang 2025-11-26 14:53:41 +00:00
  • d6d73eb8c6 VERSION: release 1.3.4 v1.3.4 lifubang 2025-11-26 14:52:49 +00:00
  • ead7182a41 VERSION: back to development lifubang 2025-11-26 16:04:32 +00:00
  • 8bd78a9977 VERSION: release 1.4.0 v1.4.0 lifubang 2025-11-26 16:04:16 +00:00
  • 7d84a1282a Merge pull request #5005 from cyphar/1.4-hallucinated-paths Rodrigo Campos 2025-11-27 12:11:12 -03:00
  • c362d6bd21 Merge pull request #5040 from cyphar/1.4-better-init-errors-4928 lfbzhm 2025-11-27 10:46:29 +08:00
  • f1d0dd8fb3 runc create/run/exec: show fatal errors from init Kir Kolyshkin 2025-10-06 13:48:27 -07:00
  • 46156624b7 libct/nsenter: better read/write errors Kir Kolyshkin 2025-10-11 19:07:25 -07:00
  • c4a61c0227 libct/nsenter: sprinkle missing sane_kill Kir Kolyshkin 2025-10-26 15:58:44 -07:00
  • 493f1b10fe libct/nsenter: add and use bailx Kir Kolyshkin 2025-10-11 17:40:48 -07:00
  • 7f9fc53c34 libct/nsenter: save errno in sane_kill Kir Kolyshkin 2025-10-11 17:36:54 -07:00
  • 7e5d01e11e Merge pull request #5043 from lifubang/backport-5014-fd-leaks-flake-1.2 Kir Kolyshkin 2025-11-26 17:58:27 -08:00
  • 2e68e04979 Merge pull request #5042 from lifubang/backport-5014-fd-leaks-flake-1.3 Kir Kolyshkin 2025-11-26 17:57:56 -08:00
  • e18c06bf8e Merge pull request #5041 from lifubang/backport-5014-fd-leaks-flake-1.4 Kir Kolyshkin 2025-11-26 17:57:27 -08:00
  • 0c910b9cab libct/int: TestFdLeaks: deflake Kir Kolyshkin 2025-11-13 00:34:30 -08:00
  • e1a6adc946 libct/int: TestFdLeaks: deflake Kir Kolyshkin 2025-11-13 00:34:30 -08:00
  • 52c3a0e794 Merge pull request #4985 from cyphar/hallucinated-paths lfbzhm 2025-11-26 22:12:59 +08:00
  • 5bb89872f8 libct/int: TestFdLeaks: deflake Kir Kolyshkin 2025-11-13 00:34:30 -08:00
  • 6a270e49a3 integration: add some tests for bind mount through dangling symlinks lifubang 2025-11-17 15:23:23 +00:00
  • aa3be89f0d pathrs: add MkdirAllParentInRoot helper Aleksa Sarai 2025-11-09 04:36:49 +11:00
  • da73ade8da pathrs: add "hallucination" helpers for SecureJoin magic Aleksa Sarai 2025-11-09 01:41:10 +11:00
  • 7bf92b9d6a pathrs: rename MkdirAllInRootOpen -> MkdirAllInRoot Aleksa Sarai 2025-11-09 02:26:57 +11:00
  • c2bde92ce8 libct: switch final WithProcfd users to WithProcfdFile Aleksa Sarai 2025-11-09 02:03:42 +11:00
  • 50aa47ba69 libcontainer: move CleanPath and StripRoot to internal/pathrs Aleksa Sarai 2025-11-09 01:40:57 +11:00
  • 15d7c214cd integration: add some tests for bind mount through dangling symlinks lifubang 2025-11-17 15:23:23 +00:00
  • 195e9551e4 pathrs: add MkdirAllParentInRoot helper Aleksa Sarai 2025-11-09 04:36:49 +11:00
  • cfb74326be pathrs: add "hallucination" helpers for SecureJoin magic Aleksa Sarai 2025-11-09 01:41:10 +11:00
  • 20c5a8ec4a pathrs: rename MkdirAllInRootOpen -> MkdirAllInRoot Aleksa Sarai 2025-11-09 02:26:57 +11:00
  • 9dbd37e06f libct: switch final WithProcfd users to WithProcfdFile Aleksa Sarai 2025-11-09 02:03:42 +11:00
  • 42a1e19d67 libcontainer: move CleanPath and StripRoot to internal/pathrs Aleksa Sarai 2025-11-09 01:40:57 +11:00
  • cef8c323d0 Merge pull request #5028 from lifubang/ci-detect-fdleak-try-best-1.3 Akihiro Suda 2025-11-26 12:48:12 +09:00
  • ffc11bcff5 Merge pull request #5034 from lifubang/ci-detect-fdleak-try-best-1.4 Akihiro Suda 2025-11-26 12:48:08 +09:00
  • 0675ec85b4 merge #5027 into opencontainers/runc:release-1.2 Aleksa Sarai 2025-11-26 14:46:10 +11:00
  • 475473d869 Merge pull request #5026 from lifubang/ci-detect-fdleak-try-best Akihiro Suda 2025-11-26 08:33:53 +09:00
  • a7a402a7ea Merge pull request #4928 from kolyshkin/better-init-errors lfbzhm 2025-11-22 15:02:52 +08:00
  • f944ccecb2 runc create/run/exec: show fatal errors from init Kir Kolyshkin 2025-10-06 13:48:27 -07:00
  • 21ad0e4399 Merge pull request #5037 from opencontainers/dependabot/github_actions/actions/checkout-6 Aleksa Sarai 2025-11-21 17:22:16 +11:00
  • 257fb71e45 build(deps): bump actions/checkout from 5 to 6 dependabot[bot] 2025-11-21 04:02:45 +00:00
  • e675743f06 integration: verify syscall compatibility after seccomp enforcement lifubang 2025-11-14 02:56:50 +00:00
  • f52ffd18d1 bump github.com/cyphar/filepath-securejoin from 0.6.0 to 0.6.1 lifubang 2025-11-20 01:26:58 +00:00
  • 0ec8f1abd5 libct: add a defer fd close in createDeviceNode lifubang 2025-11-18 04:53:19 +00:00
  • 612dbb942c libct: always close m.dstFile in mountToRootfs lifubang 2025-11-18 10:15:29 +00:00
  • 9f84cce9ba ci: detect file descriptor leaks as comprehensively as possible lifubang 2025-11-19 02:46:17 +00:00
  • ebea1f8553 integration: verify syscall compatibility after seccomp enforcement lifubang 2025-11-14 02:56:50 +00:00
  • 34e84588af downgrade github.com/cyphar/filepath-securejoin from v0.6.0 to v0.5.2 lifubang 2025-11-20 07:13:35 +00:00
  • ae8839acc2 bump github.com/opencontainers/s elinux from v1.13.0 to v1.13.1 lifubang 2025-11-20 07:12:56 +00:00
  • 52192a8e24 libct: add a defer fd close in createDeviceNode lifubang 2025-11-18 04:53:19 +00:00
  • 98dc593f13 libct: always close m.dstFile in mountToRootfs lifubang 2025-11-18 10:15:29 +00:00
  • 167fa3f8e7 ci: detect file descriptor leaks as comprehensively as possible lifubang 2025-11-19 02:46:17 +00:00
  • edd38b067e integration: verify syscall compatibility after seccomp enforcement lifubang 2025-11-14 02:56:50 +00:00
  • 6b60c79f29 downgrade github.com/cyphar/filepath-securejoin from v0.6.0 to v0.5.2 lifubang 2025-11-20 06:56:09 +00:00
  • f5f38eb958 bump github.com/opencontainers/selinux from v1.13.0 to v1.13.1 lifubang 2025-11-20 06:55:05 +00:00
  • 9d18ca1505 libct: add a defer fd close in createDeviceNode lifubang 2025-11-18 04:53:19 +00:00
  • b854ef6450 libct: always close m.dstFile in mountToRootfs lifubang 2025-11-18 10:15:29 +00:00
  • 5be8737a1a ci: detect file descriptor leaks as comprehensively as possible lifubang 2025-11-19 02:46:17 +00:00
  • d8706501cf integration: verify syscall compatibility after seccomp enforcement lifubang 2025-11-14 02:56:50 +00:00
  • 75188fab73 bump github.com/cyphar/filepath-securejoin from 0.6.0 to 0.6.1 lifubang 2025-11-20 01:26:58 +00:00
  • 6ac151d69b libct: add a defer fd close in createDeviceNode lifubang 2025-11-18 04:53:19 +00:00
  • 69785c117c libct: always close m.dstFile in mountToRootfs lifubang 2025-11-18 10:15:29 +00:00
  • b209358db3 ci: detect file descriptor leaks as comprehensively as possible lifubang 2025-11-19 02:46:17 +00:00
  • 9504c6f2ad Merge pull request #5014 from kolyshkin/fd-leaks-flake lfbzhm 2025-11-20 17:53:40 +08:00
  • 9a05ab7cc2 Merge pull request #5000 from kolyshkin/1.4-check-go lfbzhm 2025-11-20 17:52:02 +08:00
  • 769fc75893 Merge pull request #4999 from kolyshkin/1.3-check-go lfbzhm 2025-11-20 17:51:06 +08:00