| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2021-03-29 | Merge release-20210322.0-29-g8a2f7e716 (automated) | gVisor bot | |
| 2021-03-29 | [syserror] Split usermem package | Zach Koopmans | |
| Split usermem package to help remove syserror dependency in go_marshal. New hostarch package contains code not dependent on syserror. PiperOrigin-RevId: 365651233 | |||
| 2021-03-23 | Merge release-20210315.0-15-gacb4c6288 (automated) | gVisor bot | |
| 2020-12-14 | Merge release-20201208.0-42-g65e4ed8fb (automated) | gVisor bot | |
| 2020-12-14 | Do not check for reference leaks after saving. | Dean Deng | |
| We should not assert that all resources are dropped after saving. PiperOrigin-RevId: 347420131 | |||
| 2020-12-12 | Merge release-20201208.0-36-g1e92732eb (automated) | gVisor bot | |
| 2020-11-09 | Merge release-20201030.0-53-g0fb5353e4 (automated) | gVisor bot | |
| 2020-11-09 | Initialize references with a value of 1. | Dean Deng | |
| This lets us avoid treating a value of 0 as one reference. All references using the refsvfs2 template must call InitRefs() before the reference is incremented/decremented, or else a panic will occur. Therefore, it should be pretty easy to identify missing InitRef calls during testing. Updates #1486. PiperOrigin-RevId: 341411151 | |||
| 2020-10-29 | Merge release-20201019.0-95-g3b4674ffe (automated) | gVisor bot | |
| 2020-10-23 | Merge release-20201019.0-34-g9ca66ec59 (automated) | gVisor bot | |
| 2020-10-23 | Rewrite reference leak checker without finalizers. | Dean Deng | |
| Our current reference leak checker uses finalizers to verify whether an object has reached zero references before it is garbage collected. There are multiple problems with this mechanism, so a rewrite is in order. With finalizers, there is no way to guarantee that a finalizer will run before the program exits. When an unreachable object with a finalizer is garbage collected, its finalizer will be added to a queue and run asynchronously. The best we can do is run garbage collection upon sandbox exit to make sure that all finalizers are enqueued. Furthermore, if there is a chain of finalized objects, e.g. A points to B points to C, garbage collection needs to run multiple times before all of the finalizers are enqueued. The first GC run will register the finalizer for A but not free it. It takes another GC run to free A, at which point B's finalizer can be registered. As a result, we need to run GC as many times as the length of the longest such chain to have a somewhat reliable leak checker. Finally, a cyclical chain of structs pointing to one another will never be garbage collected if a finalizer is set. This is a well-known issue with Go finalizers (https://github.com/golang/go/issues/7358). Using leak checking on filesystem objects that produce cycles will not work and even result in memory leaks. The new leak checker stores reference counted objects in a global map when leak check is enabled and removes them once they are destroyed. At sandbox exit, any remaining objects in the map are considered as leaked. This provides a deterministic way of detecting leaks without relying on the complexities of finalizers and garbage collection. This approach has several benefits over the former, including: - Always detects leaks of objects that should be destroyed very close to sandbox exit. The old checker very rarely detected these leaks, because it relied on garbage collection to be run in a short window of time. - Panics if we forgot to enable leak check on a ref-counted object (we will try to remove it from the map when it is destroyed, but it will never have been added). - Can store extra logging information in the map values without adding to the size of the ref count struct itself. With the size of just an int64, the ref count object remains compact, meaning frequent operations like IncRef/DecRef are more cache-efficient. - Can aggregate leak results in a single report after the sandbox exits. Instead of having warnings littered in the log, which were non-deterministically triggered by garbage collection, we can print all warning messages at once. Note that this could also be a limitation--the sandbox must exit properly for leaks to be detected. Some basic benchmarking indicates that this change does not significantly affect performance when leak checking is enabled, which is understandable since registering/unregistering is only done once for each filesystem object. Updates #1486. PiperOrigin-RevId: 338685972 | |||
| 2020-10-14 | Merge release-20200928.0-115-ga7b7b7b98 (automated) | gVisor bot | |
| 2020-10-14 | Fix shm reference leak. | Dean Deng | |
| All shm segments in an IPC namespace should be released once that namespace is destroyed. Add reference counting to IPCNamespace so that once the last task with a reference on it exits, we can trigger a destructor that will clean up all shm segments that have not been explicitly freed by the application. PiperOrigin-RevId: 337032977 | |||
| 2020-10-09 | Merge release-20200928.0-78-g743327817 (automated) | gVisor bot | |
| 2020-10-08 | Merge release-20200928.0-66-ga55bd73d4 (automated) | gVisor bot | |
| 2020-09-23 | Merge release-20200914.0-137-g99decaadd (automated) | gVisor bot | |
| 2020-09-23 | Merge release-20200914.0-136-gb54dbdfdc (automated) | gVisor bot | |
| 2020-09-23 | Merge release-20200914.0-135-gc0f21bb19 (automated) | gVisor bot | |
| 2020-09-22 | Merge release-20200914.0-134-gcf3cef117 (automated) | gVisor bot | |
| 2020-09-22 | Merge release-20200914.0-133-g20dc83c9e (automated) | gVisor bot | |
| 2020-09-22 | Merge release-20200914.0-132-g778c36717 (automated) | gVisor bot | |
| 2020-09-22 | Merge release-20200914.0-130-g13a9a622e (automated) | gVisor bot | |
| 2020-09-22 | Merge release-20200914.0-129-gf134f873f (automated) | gVisor bot | |
| 2020-09-21 | Merge release-20200914.0-127-g059d90b9f (automated) | gVisor bot | |
| 2020-09-21 | Merge release-20200914.0-125-g06dbd5b7b (automated) | gVisor bot | |
| 2020-09-21 | Merge release-20200914.0-124-g10dcefbc7 (automated) | gVisor bot | |
| 2020-09-21 | Merge release-20200914.0-123-ga129204cf (automated) | gVisor bot | |
| 2020-09-21 | Merge release-20200914.0-122-gd72022373 (automated) | gVisor bot | |
| 2020-09-18 | Merge release-20200907.0-153-g4ba86e625 (automated) | gVisor bot | |
| 2020-09-18 | Merge release-20200907.0-151-g6c9989cb8 (automated) | gVisor bot | |
| 2020-09-18 | Merge release-20200907.0-150-gc23e39f41 (automated) | gVisor bot | |
| 2020-09-18 | Merge release-20200907.0-149-gb8ba0893e (automated) | gVisor bot | |
| 2020-09-18 | Merge release-20200907.0-148-gca4ecf481 (automated) | gVisor bot | |
| 2020-09-18 | Merge release-20200907.0-147-gf911b43f0 (automated) | gVisor bot | |
| 2020-09-18 | Merge release-20200907.0-146-gddf37cb19 (automated) | gVisor bot | |
| 2020-09-18 | Merge release-20200907.0-144-gdedef4392 (automated) | gVisor bot | |
| 2020-09-18 | Merge release-20200907.0-142-gfcf8d7c6d (automated) | gVisor bot | |
| 2020-09-18 | Merge release-20200907.0-140-gef7d9a6fc (automated) | gVisor bot | |
| 2020-09-18 | Merge release-20200907.0-139-g313e1988c (automated) | gVisor bot | |
| 2020-09-18 | Merge release-20200907.0-138-g360006d89 (automated) | gVisor bot | |
| 2020-09-18 | Merge release-20200907.0-137-g07d832dbb (automated) | gVisor bot | |
| 2020-09-18 | Merge release-20200907.0-136-g2fbd31e72 (automated) | gVisor bot | |
| 2020-09-18 | Merge release-20200907.0-134-gd34bda027 (automated) | gVisor bot | |
| 2020-09-18 | Merge release-20200907.0-133-gc0b74be54 (automated) | gVisor bot | |
| 2020-09-18 | Merge release-20200907.0-132-g23fcbd872 (automated) | gVisor bot | |
| 2020-09-18 | Merge release-20200907.0-131-g1e8beb5f1 (automated) | gVisor bot | |
| 2020-09-17 | Merge release-20200907.0-130-gf1f844daa (automated) | gVisor bot | |
| 2020-09-17 | Merge release-20200907.0-129-g319d1b8ba (automated) | gVisor bot | |
| 2020-09-17 | Merge release-20200907.0-126-ga4db85fff (automated) | gVisor bot | |
| 2020-09-17 | Merge release-20200907.0-125-gd796b100e (automated) | gVisor bot | |
 |
index : gvisor | |
| Container Runtime Sandbox |
| summaryrefslogtreecommitdiffhomepage |