59 Commits
Author SHA1 Message Date
Fabricio VoznikaandgVisor bot c041d9bd58 Add missing binary_sha256 field
Fixes #11466

PiperOrigin-RevId: 734209881
2025-03-06 11:01:58 -08:00
Andrei Vagin f010ae01ac Fix a few typos 2025-01-29 21:16:51 -08:00
Jamie LiuandgVisor bot e23347e5b5 Move //pkg/sentry/kernel/time to //pkg/sentry/ktime.
This avoids needing to rename it everywhere it's imported.

PiperOrigin-RevId: 693930089
2024-11-06 18:13:51 -08:00
Koichi Shiraishi 0cf77c02f8 all: remove use io/ioutil deprecated package & fix some deprecated thing
Signed-off-by: Koichi Shiraishi <zchee.io@gmail.com>
2024-10-10 20:36:24 +09:00
gVisor bot ac5d20cfb9 Fix some lint issues
PiperOrigin-RevId: 675064804
2024-09-16 02:33:51 -07:00
Etienne PerotandgVisor bot abde965590 Metrics: Refactor uint64 metric constructor, allow non-cumulative gauges.
This turns the uint64 metric constructor arguments into a struct, making it
more explicit as to what each part means. It also allows the creation of
non-cumulative uint64 (gauge) metrics, and adds methods to decrement or set
them.

PiperOrigin-RevId: 647134245
2024-06-26 17:41:24 -07:00
gVisor bot da0832d240 Merge pull request #9588 from avagin:typos
PiperOrigin-RevId: 576718473
2023-10-25 19:58:04 -07:00
Etienne PerotandgVisor bot 80ee2d3acc Move max syscall number out of kernel package.
Also add "num" at the end of it so make it clear that it's an *inclusive*
limit. Fix the uses of it which didn't treat it as inclusive.

No strong opinion on where it should go, but having it available in
other places of the codebase is helpful. It's already in two places,
and I'd like to have it available in two more places:

 - In the seccomp program compiler, so that it knows how many syscalls
   it should check for deterministic-ness and caching the results.
 - In the seccomp fuzzer, to build an initial syscall corpus.

PiperOrigin-RevId: 576660986
2023-10-25 15:22:54 -07:00
Andrei Vagin 5f4abad306 Fix a few typos
It is an idea of running codespell as part of our presubmit checks.
Before enabling it for new changes, let's fix what it has found.

Signed-off-by: Andrei Vagin <avagin@gmail.com>
2023-10-25 12:13:42 -07:00
Fabricio VoznikaandgVisor bot 0ce094b9a3 Report number of trace sessions created metric
PiperOrigin-RevId: 526157216
2023-04-21 15:56:12 -07:00
Etienne PerotandgVisor bot d9fcdc7714 seccheck: Initialize seccheck.Points only when needed.
This moves the initialization of `seccheck.Points` out of package-level
`init` and instead moves it to an explicit `seccheck.Initialize()` function.

On AMD64, this saves about 614KiB of heap memory that would otherwise always
be live.

PiperOrigin-RevId: 514813332
2023-03-07 12:53:27 -08:00
Adin ScannellandgVisor bot 1ceb814544 Add default_applicable_licenses rules to packages.
PiperOrigin-RevId: 513581243
2023-03-02 10:50:04 -08:00
Lucas ManningandgVisor bot a248c63cd5 Fix circular lock between filesystemRWMutex and taskSetRWMutex.
PiperOrigin-RevId: 500747195
2023-01-09 10:24:35 -08:00
Shambhavi SrivastavaandgVisor bot dec1aed143 Adding more trace point integration tests for the following syscalls:
- Chdir
- Fchdir
- Setgid
- Setuid
- Setsid
- Setresuid
- Setresgid

Updates #4805

PiperOrigin-RevId: 489076929
2022-11-16 17:06:35 -08:00
Fabricio VoznikaandgVisor bot b4e810c944 Sort syscall trace points
PiperOrigin-RevId: 488758795
2022-11-15 14:28:13 -08:00
Fabricio VoznikaandgVisor bot e6f019594e Add read/write syscalls to trace points
Closes #8092

PiperOrigin-RevId: 488719448
2022-11-15 11:54:23 -08:00
Fabricio VoznikaandgVisor bot c57f7a79eb Add trace session option to ignore errors
This allows a configuration file with newer trace points and fields
to be used with an older runsc without failing (just skips the new
trace points and fields).

Updates #4805

PiperOrigin-RevId: 487091892
2022-11-08 17:12:53 -08:00
Kevin KrakauerandgVisor bot d8aa09e04c convert uses of interface{} to any
Done via:
  find . -name "*.go" | xargs sed -i -E 's/interface\{\}/any/g'

PiperOrigin-RevId: 487033228
2022-11-08 13:14:06 -08:00
gVisor bot a1d3ba274a Merge pull request #7985 from tbehling:tbehling/typos
PiperOrigin-RevId: 474621814
2022-09-15 12:00:28 -07:00
Ted Behling e3774819db Adjust typos, grammar, and minor formatting 2022-09-15 08:27:33 -04:00
Fabricio VoznikaandgVisor bot 1aad72663a Add landing page for Runtime Monitoring
PiperOrigin-RevId: 471033778
2022-08-30 10:49:01 -07:00
Fabricio VoznikaandgVisor bot 919a20f179 Add documentation and tutorials for Runtime Monitoring
Updates #4805

PiperOrigin-RevId: 467993824
2022-08-16 12:29:59 -07:00
Fabricio VoznikaandgVisor bot dc4cd669fc Add sinks to runsc trace metadata output
Updates #4805

PiperOrigin-RevId: 465150097
2022-08-03 14:32:46 -07:00
Etienne PerotandgVisor bot a96af5dd61 gVisor: Read syscall seccheck enablement as part of per-syscall flags.
Prior to this CL, each of the 4 syscall points (raw enter,
enter, raw exit, exit) each resulted in 1 atomic read, on top of the existing
atomic read to read non-seccheck-related per-syscall flags.

This CL propagates seccheck's syscall-related points to the existing
per-syscall flags bitfield, such that this data can be loaded in a single
atomic read per syscall, rather than 5.

This shaves off a few precious nanoseconds (-3%) from the hot syscall path.

PiperOrigin-RevId: 463190096
2022-07-25 15:24:56 -07:00
Fabricio VoznikaandgVisor bot da267f435f Rename seccheck.checkers to seccheck.sinks
Makes the naming consistent with the public configuration. There is no
behavior change.

Updates #4805

PiperOrigin-RevId: 462448505
2022-07-21 12:47:06 -07:00