gvisor - Container Runtime Sandbox

Age	Commit message (Collapse)	Author
2021-06-29	Redirect all calls from `errdefs.ToGRPC` to `utils.ErrToGRPC`	Fabricio Voznika
	This is to ensure that Go 1.13 error wrapping is correctly translated to gRPC errors before returning from the shim. Updates #6225 PiperOrigin-RevId: 382120441
2021-05-17	Make sandbox join the pod cgroup in K8s	Fabricio Voznika
	cgroups in K8s are setup with the following hierarchy: `.../pod/container`. The sandbox is created with the first container and consequently uses the the pause container cgroup. This change removes the container cgroup from the path to make the sandbox use the pod cgroup instead. Otherwise limits set to the pause container will apply to the entire sandbox. PiperOrigin-RevId: 374273277
2021-05-04	Make Mount.Type optional for bind mounts	Fabricio Voznika
	According to the OCI spec Mount.Type is an optional field and it defaults to "bind" when any of "bind" or "rbind" is included in Mount.Options. Also fix the shim to remove bind/rbind from options when mount is converted from bind to tmpfs inside the Sentry. Fixes #2330 Fixes #3274 PiperOrigin-RevId: 371996891
2021-01-12	Delete shim v1	Fabricio Voznika
	gvisor-containerd-shim is not compatible with containerd 1.1 or earlier. Starting from containerd 1.2, shim v2 is the preferred interface. PiperOrigin-RevId: 351485556