Age | Commit message (Collapse) | Author | |
---|---|---|---|
2020-09-16 | Merge release-20200907.0-66-g29ce0ad16 (automated) | gVisor bot | |
2020-09-16 | Merge release-20200907.0-65-g3749e70a6 (automated) | gVisor bot | |
2020-09-16 | Merge release-20200907.0-64-g666397c5c (automated) | gVisor bot | |
2020-09-16 | Merge release-20200907.0-63-g0356c7ef3 (automated) | gVisor bot | |
2020-09-16 | Merge release-20200907.0-62-g49857849f (automated) | gVisor bot | |
2020-09-16 | Merge release-20200907.0-60-g87c5c0ad2 (automated) | gVisor bot | |
2020-09-16 | Merge release-20200907.0-59-g326a1dbb7 (automated) | gVisor bot | |
2020-09-16 | Merge release-20200907.0-58-g9ef1c7992 (automated) | gVisor bot | |
2020-09-16 | Rename marshal.Task to marshal.CopyContext. | Rahat Mahmood | |
CopyContext is a better name for the interface because from go-marshal's perspective, the interface has nothing to do with a task. A kernel.Task happens to implement the interface, but so can other things like MemoryManager and IO sequences. PiperOrigin-RevId: 331959678 | |||
2020-09-16 | Merge release-20200907.0-57-gd201feb8c (automated) | gVisor bot | |
2020-09-15 | Enable automated marshalling for the syscall package. | Rahat Mahmood | |
PiperOrigin-RevId: 331940975 | |||
2020-09-16 | Merge release-20200907.0-56-gdcd532e2e (automated) | gVisor bot | |
2020-09-15 | Add support for OCI seccomp filters in the sandbox. | Ian Lewis | |
OCI configuration includes support for specifying seccomp filters. In runc, these filter configurations are converted into seccomp BPF programs and loaded into the kernel via libseccomp. runsc needs to be a static binary so, for runsc, we cannot rely on a C library and need to implement the functionality in Go. The generator added here implements basic support for taking OCI seccomp configuration and converting it into a seccomp BPF program with the same behavior as a program generated by libseccomp. - New conditional operations were added to pkg/seccomp to support operations available in OCI. - AllowAny and AllowValue were renamed to MatchAny and EqualTo to better reflect that syscalls matching the conditionals result in the provided action not simply SCMP_RET_ALLOW. - BuildProgram in pkg/seccomp no longer panics if provided an empty list of rules. It now builds a program with the architecture sanity check only. - ProgramBuilder now allows adding labels that are unused. However, backwards jumps are still not permitted. Fixes #510 PiperOrigin-RevId: 331938697 | |||
2020-09-16 | Merge release-20200907.0-55-gc053c4bb0 (automated) | gVisor bot | |
2020-09-16 | Merge release-20200907.0-54-gcb2e3c946 (automated) | gVisor bot | |
2020-09-15 | Implement gvisor verity fs ioctl with GETFLAGS | Chong Cai | |
PiperOrigin-RevId: 331905347 | |||
2020-09-15 | Merge release-20200907.0-53-g8b15effd9 (automated) | gVisor bot | |
2020-09-15 | Merge release-20200907.0-52-g456c6c33e (automated) | gVisor bot | |
2020-09-15 | Merge release-20200907.0-51-ga004f0d08 (automated) | gVisor bot | |
2020-09-15 | Merge release-20200907.0-50-g72a30b114 (automated) | gVisor bot | |
2020-09-15 | Merge release-20200907.0-49-g7f89a26e1 (automated) | gVisor bot | |
2020-09-15 | Merge release-20200907.0-48-g0d790cbae (automated) | gVisor bot | |
2020-09-15 | Merge release-20200907.0-47-g86b31a807 (automated) | gVisor bot | |
2020-09-15 | Merge release-20200907.0-46-g84d48c0fd (automated) | gVisor bot | |
2020-09-15 | Merge release-20200907.0-44-gd3880b76c (automated) | gVisor bot | |
2020-09-14 | Merge release-20200907.0-43-g52ffeb2d6 (automated) | gVisor bot | |
2020-09-14 | Merge release-20200907.0-42-g2747030ec (automated) | gVisor bot | |
2020-09-14 | Merge release-20200907.0-41-g05d2ebee5 (automated) | gVisor bot | |
2020-09-14 | Merge release-20200907.0-40-g2969b1740 (automated) | gVisor bot | |
2020-09-14 | Merge release-20200907.0-39-g833ceb0f1 (automated) | gVisor bot | |
2020-09-13 | Merge release-20200907.0-38-gb6ca96b9b (automated) | gVisor bot | |
2020-09-12 | Merge release-20200907.0-37-g3ca73841d (automated) | gVisor bot | |
2020-09-11 | Move the 'marshal' and 'primitive' packages to the 'pkg' directory. | Rahat Mahmood | |
PiperOrigin-RevId: 331256608 | |||
2020-09-11 | Merge release-20200810.0-237-g8d0f76dda (automated) | gVisor bot | |
2020-09-11 | fuse_open: add padding to open out request | Boyuan He | |
2020-09-11 | Merge release-20200907.0-36-g1f4fb817c (automated) | gVisor bot | |
2020-09-11 | Merge release-20200810.0-236-gb8bee78d0 (automated) | gVisor bot | |
2020-09-11 | Implement FUSE_UNLINK | boyuan-he | |
Fixes #3696 | |||
2020-09-11 | Fix comments of TODO issues. | Craig Chi | |
2020-09-11 | Add comments for exported attributes | Craig Chi | |
2020-09-11 | Implement FUSE_SETATTR | Craig Chi | |
This commit implements FUSE_SETATTR command. When a system call modifies the metadata of a regular file or a folder by chown(2), chmod(2), truncate(2), utime(2), or utimes(2), they should be translated to corresponding FUSE_SETATTR command and sent to the FUSE server. Fixes #3332 | |||
2020-09-11 | Add fh support for revise attr and fstat(2) test | Craig Chi | |
According to Linux 4.4's FUSE behavior, the flags and fh attributes in FUSE_GETATTR are only used in read, write, and lseek. fstat(2) doesn't use them either. Add tests to ensure the requests sent from FUSE module are consistent with Linux's. Updates #3655 | |||
2020-09-11 | Implement FUSE_WRITE | Jinmou Li | |
This commit adds basic write(2) support for FUSE. | |||
2020-09-11 | Implement FUSE_CREATE | Craig Chi | |
FUSE_CREATE is called when issuing creat(2) or open(2) with O_CREAT. It creates a new file on the FUSE filesystem. Fixes #3825 | |||
2020-09-11 | Downgrade FUSE minor version support and clarify comments | jinmouil | |
2020-09-11 | fuse: remove unused marshalling functions | Craig Chi | |
This commit removes unused marshalling functions in linux abi package and moves self-defined FUSEInitRes wrapper to fuse package. Updates #3707 | |||
2020-09-11 | Support multiple FUSE kernel versions of FUSE_INIT response struct | Craig Chi | |
The fuse_init_out struct changes in different FUSE kernel versions. A FUSE server may implement older versions of fuse_init_out, but they share common attributes from the beginning. Implement variable-length marshallable interface to support older versions of ABI. Fixes #3707 | |||
2020-09-11 | fuse: use safe go_marshal API for FUSE | Ridwan Sharif | |
Until #3698 is resolved, this change is needed to ensure we're not corrupting memory anywhere. | |||
2020-09-11 | fuse: Implement IterDirents for directory file description | Ridwan Sharif | |
Fixes #3255. This change adds support for IterDirents. You can now use `ls` in the FUSE sandbox. Co-authored-by: Craig Chi <craigchi@google.com> | |||
2020-09-11 | Implement FUSE_RMDIR | Ridwan Sharif | |
Fixes #3587 Co-authored-by: Craig Chi <craigchi@google.com> |