summaryrefslogtreecommitdiffhomepage
path: root/runsc/specutils
AgeCommit message (Expand)Author
2021-07-08clarify safemount behaviorKevin Krakauer
2021-07-02runsc: validate mount targetsKevin Krakauer
2021-05-31Update comments on ambient caps to point to bugIan Lewis
2021-05-04Remove uses of the binary package from the rest of the sentry.Rahat Mahmood
2021-05-04Make Mount.Type optional for bind mountsFabricio Voznika
2021-04-02Implement the runsc verity-prepare command.Rahat Mahmood
2021-03-30Fix panic when overriding /dev files with VFS2Fabricio Voznika
2021-03-18Skip /dev submount hack on VFS2.Jamie Liu
2021-03-09Fix invalid interface conversion in runnerFabricio Voznika
2021-03-06[op] Replace syscall package usage with golang.org/x/sys/unix in runsc/.Ayush Ranjan
2021-01-11OCI spec may contain duplicate environment variablesFabricio Voznika
2020-11-05Fix failure setting OOM score adjustmentFabricio Voznika
2020-11-03Fix more nogo testsTing-Yu Wang
2020-10-27Merge pull request #4420 from workato:dev-optionsgVisor bot
2020-10-26Allow overriding mount options for /dev and /dev/ptsKonstantin Baranov
2020-10-23Fix nogo errors in specutilsFabricio Voznika
2020-09-25fix seccomp test for ARM64Howard Zhang
2020-09-15Add support for OCI seccomp filters in the sandbox.Ian Lewis
2020-09-01Let flags be overriden from OCI annotationsFabricio Voznika
2020-07-13Merge pull request #2672 from amscanne:shim-integratedgVisor bot
2020-06-16Print spec as json when --debug is enabledFabricio Voznika
2020-06-01More runsc changes for VFS2Fabricio Voznika
2020-05-28Move Cleanup to its own packageFabricio Voznika
2020-05-28Automated rollback of changelist 309082540Fabricio Voznika
2020-04-26refactor and add test for bindmountmoricho
2020-04-10Add logging message for noNewPrivileges OCI option.Ian Lewis
2020-04-07Add friendlier messages for frequently encountered errors.Ian Lewis
2020-03-12Kill sandbox process when parent process terminatesFabricio Voznika
2020-01-27Standardize on tools directory.Adin Scannell
2019-10-22Merge pull request #1046 from tomlanyon:criogVisor bot
2019-10-20Add runsc OCI annotations to support CRI-O.Tom Lanyon
2019-10-10Update TODO for OCI seccomp support.Ian Lewis
2019-10-01Merge pull request #917 from KentaTada:fix-clone-flagsgVisor bot
2019-10-01Prevent CAP_NET_RAW from appearing in execFabricio Voznika
2019-09-26runsc: add the clone flag of cgroup namespaceKenta Tada
2019-09-16Bring back to life features lost in recent refactorFabricio Voznika
2019-09-05Ignore the root container when calculating oom_score_adj for the sandbox.Ian Lewis
2019-08-02Stops container if gofer is killedFabricio Voznika
2019-06-27Fix various spelling issues in the documentationMichael Pratt
2019-06-13Update canonical repository.Adin Scannell
2019-06-12Allow 'runsc do' to run without rootFabricio Voznika
2019-06-11Add support to mount pod shared tmpfs mountsFabricio Voznika
2019-05-16tiny fix: avoid panicing when OpenSpec failedLiu Hua
2019-04-29Change copyright notice to "The gVisor Authors"Michael Pratt
2019-04-29Allow and document bug ids in gVisor codebase.Nicolas Lacasse
2019-04-26Make raw sockets a toggleable feature disabled by default.Kevin Krakauer
2019-04-04gvisor: Add support for the MS_NOEXEC mount optionAndrei Vagin
2019-04-01Add release hook and version flagAdin Scannell
2019-03-20Fail in case mount option is unknownFabricio Voznika
2019-03-18Add support for mount propagationFabricio Voznika