gvisor - Container Runtime Sandbox

Age	Commit message (Expand)	Author
2019-01-18	Start a sandbox process in a new userns only if CAP_SETUID is set	Andrei Vagin
2019-01-18	runsc: create a new proc mount if the sandbox process is running in a new pidns	Andrei Vagin
2019-01-16	Prevent internal tmpfs mount to override files in /tmp	Fabricio Voznika
2019-01-15	Create working directory if it doesn't yet exist	Fabricio Voznika
2019-01-14	Remove fs.Handle, ramfs.Entry, and all the DeprecatedFileOperations.	Nicolas Lacasse
2019-01-14	runsc: set up a minimal chroot from the sandbox process	Andrei Vagin
2019-01-11	runsc: Collect zombies of sandbox and gofer processes	Andrei Vagin
2019-01-09	Restore to original cgroup after sandbox and gofer processes are created	Fabricio Voznika
2019-01-07	Undo changes in case of failure to create file/dir/symlink	Fabricio Voznika
2019-01-03	Apply chroot for --network=host too	Fabricio Voznika
2019-01-02	Automated rollback of changelist 225089593	Michael Pratt
2018-12-28	Simplify synchronization between runsc and sandbox process	Fabricio Voznika
2018-12-20	Rename limits.MemoryPagesLocked to limits.MemoryLocked.	Jamie Liu
2018-12-19	Automated rollback of changelist 225861605	Googler
2018-12-17	Expose internal testing flag	Michael Pratt
2018-12-17	Implement mlock(), kind of.	Jamie Liu
2018-12-13	container.Destroy should clean up container metadata even if other cleanups fail	Nicolas Lacasse
2018-12-11	Add "trace signal" option	Michael Pratt
2018-12-10	Open source system call tests.	Brian Geffon
2018-12-10	Internal change.	Nicolas Lacasse
2018-12-07	sentry: turn "dynamically-created" procfs files into static creation.	Zhaozhong Ni
2018-12-06	A sandbox process should wait until it has not been moved into cgroups	Andrei Vagin
2018-12-04	Max link traversals should be for an entire path.	Brian Geffon
2018-12-03	Internal change.	Googler
2018-11-28	Internal change.	Googler
2018-11-28	Fix crictl tests.	Kevin Krakauer
2018-11-27	Disable crictl tests	Michael Pratt
2018-11-20	Use RET_KILL_PROCESS if available in kernel	Fabricio Voznika
2018-11-20	Use math.Rand to generate a random test container id.	Nicolas Lacasse
2018-11-20	Internal change.	Nicolas Lacasse
2018-11-20	Add unsupported syscall events for get/setsockopt	Fabricio Voznika
2018-11-20	Don't fail when destroyContainerFS is called more than once	Fabricio Voznika
2018-11-20	Internal change.	Nicolas Lacasse
2018-11-15	Allow sandbox.Wait to be called after the sandbox has exited.	Nicolas Lacasse
2018-11-14	Internal change.	Nicolas Lacasse
2018-11-13	Internal change.	Nicolas Lacasse
2018-11-13	Internal change.	Nicolas Lacasse
2018-11-13	Internal change.	Nicolas Lacasse
2018-11-12	Internal change.	Nicolas Lacasse
2018-11-12	runsc: generate exec pidfile after everything is ready.	Lantao Liu
2018-11-09	Close donated files if containerManager.Start() fails	Fabricio Voznika
2018-11-09	Add tests multicontainer start/stop	Fabricio Voznika
2018-11-07	Add test that volume can be mounted on top of a symlink	Fabricio Voznika
2018-11-07	Fix test --race violation	Fabricio Voznika
2018-11-07	AsyncBarrier should be run after all defers in destroyContainerFS.	Nicolas Lacasse
2018-11-07	Add more logging to controller.go	Fabricio Voznika
2018-11-06	Fix problem where crictl tests would signal both error and done channels	Kevin Krakauer
2018-11-05	Fix race between start and destroy	Fabricio Voznika
2018-11-05	Log when external signal is received	Fabricio Voznika
2018-11-01	First crictl integration tests.	Kevin Krakauer