gvisor - Container Runtime Sandbox

Age	Commit message (Collapse)	Author
2020-07-14	remove IPv6 docker	Kevin Krakauer
	Will re-submit when ICMP dest unreachable is handled correctly and it can be turned back on. PiperOrigin-RevId: 321227330
2020-07-13	Enable experimental features in docker.	Ting-Yu Wang
	PiperOrigin-RevId: 321062975
2020-07-13	Merge pull request #2672 from amscanne:shim-integrated	gVisor bot
	PiperOrigin-RevId: 321053634
2020-07-13	iptables: remove useless ip6tables VM rules	Kevin Krakauer
	This rule isn't restored when the Kokoro VM is restarted, so it's not doing anything. And the problem it was meant to solved is instead addressed by https://github.com/google/gvisor/pull/3207. PiperOrigin-RevId: 321026846
2020-07-09	Update shim to build using bazel.	Adin Scannell
	The go.mod dependency tree for the shim was somehow contradictory. After resolving these issues (e.g. explicitly imported k8s 1.14, pulling a specific dbus version), and adding all dependencies, the shim can now be build as part of the regular bazel tree. As part of this process, minor cleanup was done in all the source files: headers were standardized (and include "The gVisor Authors" in addition to the "The containerd Authors" if originally derived from containerd sources), and comments were cleaned up to meet coding standards. This change makes the containerd installation dynamic, so that multiple versions can be tested, and drops the static installer for the VM image itself. This change also updates test/root/crictl_test.go and related utilities, so that the containerd tests can be run on any version (and in cases where it applies, they can be run on both v1 and v2 as parameterized tests).
2020-06-26	Enable docker IPv6 in kokoro	Kevin Krakauer
	We need docker IPv6 for ip6tables tests. Docker has spotty IPv6 support, so just enabling IPv6 in daemon.json breaks the Ruby image test (AFAICT it breaks anything that tries to use IPv6 to reach the internet). An ip6tables NAT rule is added to handle this. We could make these changes as part of scripts/, but these would overwrite global values and possibly break users' systems. PiperOrigin-RevId: 318508209
2020-05-20	Automated rollback of changelist 312522097	Nicolas Lacasse
	PiperOrigin-RevId: 312529859
2020-05-20	Upgrade to Bazel 3.1.0.	Nicolas Lacasse
	This upgrades the Kokoro images, bazel toolchains used by RBE runners, and rules_go, gazelle, and go toolchain versions. PiperOrigin-RevId: 312522097
2020-05-15	Update vm scripts to handle existing kbuilder user.	Adin Scannell
	PiperOrigin-RevId: 311751972
2020-05-14	Update Kokoro images to include newer gcloud.	Adin Scannell
	PiperOrigin-RevId: 311658774
2020-04-20	Add a functional vm_test for root_test.	Adin Scannell
	This change renames the tools/images directory to tools/vm for clarity, and adds a functional vm_test. Sharding is also added to the same test, and some documentation added around key flags & variables to describe how they work. Subsequent changes will add vm_tests for other cases, such as the runtime tests. PiperOrigin-RevId: 307492245