gvisor - Container Runtime Sandbox

Age	Commit message (Collapse)	Author
2020-07-25	optimize size and time using "--no-cache-dir"	Pratik raj
	Using "--no-cache-dir" flag in pip install ,make sure dowloaded packages by pip don't cached on system . This is a best practise which make sure to fetch ftom repo instead of using local cached one . Further , in case of Docker Containers , by restricing caching , we can reduce image size. In term of stats , it depends upon the number of python packages multiplied by their respective size . e.g for heavy packages with a lot of dependencies it reduce a lot by don't caching pip packages. Further , more detail information can be found at https://medium.com/sciforce/strategies-of-docker-images-optimization-2ca9cc5719b6
2020-07-23	Automated rollback of changelist 321227330	Kevin Krakauer
	PiperOrigin-RevId: 322888057
2020-07-14	remove IPv6 docker	Kevin Krakauer
	Will re-submit when ICMP dest unreachable is handled correctly and it can be turned back on. PiperOrigin-RevId: 321227330
2020-07-13	Enable experimental features in docker.	Ting-Yu Wang
	PiperOrigin-RevId: 321062975
2020-07-13	Merge pull request #2672 from amscanne:shim-integrated	gVisor bot
	PiperOrigin-RevId: 321053634
2020-07-13	iptables: remove useless ip6tables VM rules	Kevin Krakauer
	This rule isn't restored when the Kokoro VM is restarted, so it's not doing anything. And the problem it was meant to solved is instead addressed by https://github.com/google/gvisor/pull/3207. PiperOrigin-RevId: 321026846
2020-07-09	Update shim to build using bazel.	Adin Scannell
	The go.mod dependency tree for the shim was somehow contradictory. After resolving these issues (e.g. explicitly imported k8s 1.14, pulling a specific dbus version), and adding all dependencies, the shim can now be build as part of the regular bazel tree. As part of this process, minor cleanup was done in all the source files: headers were standardized (and include "The gVisor Authors" in addition to the "The containerd Authors" if originally derived from containerd sources), and comments were cleaned up to meet coding standards. This change makes the containerd installation dynamic, so that multiple versions can be tested, and drops the static installer for the VM image itself. This change also updates test/root/crictl_test.go and related utilities, so that the containerd tests can be run on any version (and in cases where it applies, they can be run on both v1 and v2 as parameterized tests).
2020-06-26	Enable docker IPv6 in kokoro	Kevin Krakauer
	We need docker IPv6 for ip6tables tests. Docker has spotty IPv6 support, so just enabling IPv6 in daemon.json breaks the Ruby image test (AFAICT it breaks anything that tries to use IPv6 to reach the internet). An ip6tables NAT rule is added to handle this. We could make these changes as part of scripts/, but these would overwrite global values and possibly break users' systems. PiperOrigin-RevId: 318508209
2020-05-20	Automated rollback of changelist 312522097	Nicolas Lacasse
	PiperOrigin-RevId: 312529859
2020-05-20	Upgrade to Bazel 3.1.0.	Nicolas Lacasse
	This upgrades the Kokoro images, bazel toolchains used by RBE runners, and rules_go, gazelle, and go toolchain versions. PiperOrigin-RevId: 312522097
2020-05-15	Update vm scripts to handle existing kbuilder user.	Adin Scannell
	PiperOrigin-RevId: 311751972
2020-05-14	Update Kokoro images to include newer gcloud.	Adin Scannell
	PiperOrigin-RevId: 311658774
2020-04-20	Add a functional vm_test for root_test.	Adin Scannell
	This change renames the tools/images directory to tools/vm for clarity, and adds a functional vm_test. Sharding is also added to the same test, and some documentation added around key flags & variables to describe how they work. Subsequent changes will add vm_tests for other cases, such as the runtime tests. PiperOrigin-RevId: 307492245