gvisor - Container Runtime Sandbox

Age	Commit message (Collapse)	Author
2020-10-13	[vfs2] Don't take reference in Task.MountNamespaceVFS2 and MountNamespace.Root.	Dean Deng
	This fixes reference leaks related to accidentally forgetting to DecRef() after calling one or the other. PiperOrigin-RevId: 336918922
2020-10-13	[vfs2] Add FilesystemType.Release to avoid reference leaks.	Dean Deng
	Singleton filesystem like devpts and devtmpfs have a single filesystem shared among all mounts, so they acquire a "self-reference" when initialized that must be released when the entire virtual filesystem is released at sandbox exit. PiperOrigin-RevId: 336828852
2020-09-24	Add basic stateify annotations.	Adin Scannell
	Updates #1663 PiperOrigin-RevId: 333539293
2020-09-08	Honor readonly flag for root mount	Fabricio Voznika
	Updates #1487 PiperOrigin-RevId: 330580699
2020-08-21	Make mounts ReadWrite first, then later change to ReadOnly.	Nicolas Lacasse
	This lets us create "synthetic" mountpoint directories in ReadOnly mounts during VFS setup. Also add context.WithMountNamespace, as some filesystems (like overlay) require a MountNamespace on ctx to handle vfs.Filesystem Operations. PiperOrigin-RevId: 327874971
2020-08-21	Fix parent directory creation in CreateDeviceFile.	Nicolas Lacasse
	It was not properly creating recursive directories. Added tests for this case. Updates #1196 PiperOrigin-RevId: 327850811
2020-08-03	Plumbing context.Context to DecRef() and Release().	Nayana Bidari
	context is passed to DecRef() and Release() which is needed for SO_LINGER implementation. PiperOrigin-RevId: 324672584
2020-06-24	Port /dev/net/tun device to VFS2.	Nicolas Lacasse
	Updates #2912 #1035 PiperOrigin-RevId: 318162565
2020-04-23	Port devpts to VFS2.	Nicolas Lacasse
	PiperOrigin-RevId: 308164359
2020-03-27	Add FilesystemType.Name method, and FilesystemType field to Filesystem struct.	Nicolas Lacasse
	Both have analogues in Linux: * struct file_system_type has a char name field. struct super_block keeps a pointer to the file_system_type. These fields are necessary to support the `filesystem type` field in /proc/[pid]/mountinfo. PiperOrigin-RevId: 303434063
2020-02-14	Inline vfs.VirtualFilesystem in Kernel struct	gVisor bot
	This saves one pointer dereference per VFS access. Updates #1623 PiperOrigin-RevId: 295216176
2020-02-14	Plumb VFS2 inside the Sentry	gVisor bot
	- Added fsbridge package with interface that can be used to open and read from VFS1 and VFS2 files. - Converted ELF loader to use fsbridge - Added VFS2 types to FSContext - Added vfs.MountNamespace to ThreadGroup Updates #1623 PiperOrigin-RevId: 295183950
2020-02-04	Remove argument from vfs.MountNamespace.DecRef()	Fabricio Voznika
	Updates #1035 PiperOrigin-RevId: 293194631
2020-01-28	Add //pkg/sentry/fsimpl/devtmpfs.	Jamie Liu
	PiperOrigin-RevId: 292021389