gvisor - Container Runtime Sandbox

Age	Commit message (Collapse)	Author
2021-02-11	Internal change.	gVisor bot
	PiperOrigin-RevId: 357090170
2020-12-11	Internal change.	gVisor bot
	PiperOrigin-RevId: 347091372
2020-11-12	Add children names into verity hash	Chong Cai
	children names map can be used to verify whether a child is expected during walking, so that we can detect unexpected modifications that deleted/renamed both the target file and the corresponding merkle tree file. PiperOrigin-RevId: 342170715
2020-11-12	Refactor merkletree tests	Chong Cai
	Separate the test cases from TestVerify so that the test names reflect the test case better. PiperOrigin-RevId: 342152754
2020-11-04	Include file size in Merkle hash	Chong Cai
	The file size can now also be verified. Also, since we are zero-padding the last block of the data, we cannot differentiate the cases between zero-padded block from the blocks that are ends with zeroes. With the size included this can be addressed, as those cases would have different file size. PiperOrigin-RevId: 340695510
2020-10-27	Add SHA512 to merkle tree library	Chong Cai
	PiperOrigin-RevId: 339377254
2020-10-12	Change Merkle tree library to use ReaderAt	Chong Cai
	Merkle tree library was originally using Read/Seek to access data and tree, since the parameters are io.ReadSeeker. This could cause race conditions if multiple threads accesses the same fd to read. Here we change to use ReaderAt, and implement it with PRead to make it thread safe. PiperOrigin-RevId: 336779260
2020-10-09	Include stat in Verity hash	Chong Cai
	PiperOrigin-RevId: 336395445
2020-10-06	Fix typo in merkletree	gVisor bot
	PiperOrigin-RevId: 335709552
2020-09-16	Implement PRead for verity fs	Chong Cai
	PRead is implemented by read from the underlying file in blocks, and verify each block. The verified contents are saved into the output buffer. PiperOrigin-RevId: 332092267
2020-08-31	Implement walk in gvisor verity fs	gVisor bot
	Implement walk directories in gvisor verity file system. For each step, the child dentry is verified against a verified parent root hash. PiperOrigin-RevId: 329358747
2020-08-24	Add check for same source in merkle tree lib	gVisor bot
	If the data is in the same Reader as the merkle tree, we should verify from the first layer in the tree, instead of from the beginning. PiperOrigin-RevId: 328230988
2020-08-17	Add Verify in merkle tree library	gVisor bot
	Verify checks input data against the merkle tree, and compares the root hash with expectation. PiperOrigin-RevId: 327116711
2020-06-11	Add Generate method in merkletree	gVisor bot
	A method is added to generate a merkle tree for data, and store the generated tree in the output. PiperOrigin-RevId: 315966571
2020-06-11	Add merkle tree size measure	gVisor bot
	This change creates a merkletree package which will be used in the future for an implementation of file system API. PiperOrigin-RevId: 315952451