gvisor - Container Runtime Sandbox

Age	Commit message (Expand)	Author
2020-04-10	Add logging message for noNewPrivileges OCI option.	Ian Lewis
2020-04-07	Add friendlier messages for frequently encountered errors.	Ian Lewis
2020-03-12	Kill sandbox process when parent process terminates	Fabricio Voznika
2020-01-27	Standardize on tools directory.	Adin Scannell
2019-10-22	Merge pull request #1046 from tomlanyon:crio	gVisor bot
2019-10-20	Add runsc OCI annotations to support CRI-O.	Tom Lanyon
2019-10-10	Update TODO for OCI seccomp support.	Ian Lewis
2019-10-01	Merge pull request #917 from KentaTada:fix-clone-flags	gVisor bot
2019-10-01	Prevent CAP_NET_RAW from appearing in exec	Fabricio Voznika
2019-09-26	runsc: add the clone flag of cgroup namespace	Kenta Tada
2019-09-16	Bring back to life features lost in recent refactor	Fabricio Voznika
2019-09-05	Ignore the root container when calculating oom_score_adj for the sandbox.	Ian Lewis
2019-08-02	Stops container if gofer is killed	Fabricio Voznika
2019-06-27	Fix various spelling issues in the documentation	Michael Pratt
2019-06-13	Update canonical repository.	Adin Scannell
2019-06-12	Allow 'runsc do' to run without root	Fabricio Voznika
2019-06-11	Add support to mount pod shared tmpfs mounts	Fabricio Voznika
2019-05-16	tiny fix: avoid panicing when OpenSpec failed	Liu Hua
2019-04-29	Change copyright notice to "The gVisor Authors"	Michael Pratt
2019-04-29	Allow and document bug ids in gVisor codebase.	Nicolas Lacasse
2019-04-26	Make raw sockets a toggleable feature disabled by default.	Kevin Krakauer
2019-04-04	gvisor: Add support for the MS_NOEXEC mount option	Andrei Vagin
2019-04-01	Add release hook and version flag	Adin Scannell
2019-03-20	Fail in case mount option is unknown	Fabricio Voznika
2019-03-18	Add support for mount propagation	Fabricio Voznika
2019-01-31	Remove license comments	Michael Pratt
2019-01-22	Don't bind-mount runsc into a sandbox mntns	Andrei Vagin
2019-01-09	Restore to original cgroup after sandbox and gofer processes are created	Fabricio Voznika
2018-12-10	Open source system call tests.	Brian Geffon
2018-11-20	Internal change.	Nicolas Lacasse
2018-11-14	Internal change.	Nicolas Lacasse
2018-11-13	Internal change.	Nicolas Lacasse
2018-10-23	Track paths and provide a rename hook.	Adin Scannell
2018-10-19	Use correct company name in copyright header	Ian Gudger
2018-10-18	Resolve mount paths while setting up root fs mount	Fabricio Voznika
2018-10-11	Make debug log file name configurable	Fabricio Voznika
2018-10-10	Add sandbox to cgroup	Fabricio Voznika
2018-09-28	Switch to root in userns when CAP_SYS_CHROOT is also missing	Fabricio Voznika
2018-09-19	Fix sandbox and gofer capabilities	Fabricio Voznika
2018-09-19	Add docker command line args support for --cpuset-cpus and --cpus	Lingfu
2018-09-07	runsc: Support multi-container exec.	Nicolas Lacasse
2018-09-07	runsc: Run sandbox process inside minimal chroot.	Nicolas Lacasse
2018-09-05	runsc: Promote getExecutablePathInternal to getExecutablePath.	Nicolas Lacasse
2018-09-04	runsc: Run sandbox as user nobody.	Nicolas Lacasse
2018-09-04	runsc: Pass log and config files to sandbox process by FD.	Nicolas Lacasse
2018-09-04	runsc: fix container rootfs path.	Lantao Liu
2018-08-31	Automated rollback of changelist 210995199	Fabricio Voznika
2018-08-30	runsc: Pass log and config files to sandbox process by FD.	Nicolas Lacasse
2018-08-27	Put fsgofer inside chroot	Fabricio Voznika
2018-08-24	runsc: Allow runsc to properly search the PATH for executable name.	Kevin Krakauer