gvisor - Container Runtime Sandbox

Age	Commit message (Collapse)	Author
2021-08-11	Initial cgroupfs support for subcontainers	Rahat Mahmood
	Allow creation and management of subcontainers through cgroupfs directory syscalls. Also add a mechanism to specify a default root container to start new jobs in. This implements the filesystem support for subcontainers, but doesn't implement hierarchical resource accounting or task migration. PiperOrigin-RevId: 390254870
2021-05-14	Fix cgroup hierarchy registration.	Rahat Mahmood
	Previously, registration was racy because we were publishing hierarchies in the registry without fully initializing the underlying filesystem. This led to concurrent mount(2)s discovering the partially intialized filesystems and dropping the final refs on them which cause them to be freed prematurely. Reported-by: syzbot+13f54e77bdf59f0171f0@syzkaller.appspotmail.com Reported-by: syzbot+2c7f0a9127ac6a84f17e@syzkaller.appspotmail.com PiperOrigin-RevId: 373824552
2021-04-22	Also report mount options through /proc/<pid>/mounts.	Rahat Mahmood
	PiperOrigin-RevId: 369967629
2021-04-21	Stub the custom "job" controller required by some workloads.	Rahat Mahmood
	PiperOrigin-RevId: 369724358
2021-04-02	Implement cgroupfs.	Rahat Mahmood
	A skeleton implementation of cgroupfs. It supports trivial cpu and memory controllers with no support for hierarchies. PiperOrigin-RevId: 366561126