Commit Graph

Select branches

Hide Pull Requests

master

Mono Color

• cfc24011ad vfs: try again to allocate a new mount group after resizing vfs.groupIDBitmap Andrei VaginandgVisor bot 2023-11-08 12:33:45 -08:00
• 0358995f0f Fix linter warning in kernel.go. Ayush RanjanandgVisor bot 2023-11-08 12:17:31 -08:00
• f8ebc09828 Merge pull request #9643 from x890c:patch-1 gVisor bot 2023-11-08 10:15:45 -08:00
• 65e518c741 proc: limit a comm len to TASK_COMM_LEN Andrei VaginandgVisor bot 2023-11-08 07:48:03 -08:00
• 97ee5cb6ab Fix a lock problem in pkg/tcpip/sample/tun_tcp_echo xyz 2023-11-08 04:31:19 +00:00
• 9115b8d57c Fix debug message. Etienne PerotandgVisor bot 2023-11-07 13:22:10 -08:00
• 999c708319 Add support for restoring nvproxy.driverABI. Ayush RanjanandgVisor bot 2023-11-07 11:44:57 -08:00
• 47db4119a2 ThreadGroup should disassociate from tty on exit. Nicolas LacasseandgVisor bot 2023-11-07 09:23:27 -08:00
• b988b57921 runsc: reproduce NAT table inside gVisor only when non-default Kevin KrakauerandgVisor bot 2023-11-06 21:59:14 -08:00
• d01751e25e sentry: use a stronger RNG for address space randomization Kevin KrakauerandgVisor bot 2023-11-06 21:55:25 -08:00
• 9f6b200214 runsc: Do not embed metric-server subcommand in fastbuild mode. Etienne PerotandgVisor bot 2023-11-06 16:58:18 -08:00
• bff11508c7 runsc: add the EROFS rootfs support Tiwei Bie 2023-10-04 21:40:52 +08:00
• 51074f1996 runsc metric-server: Refactor command-line interface. Etienne PerotandgVisor bot 2023-11-06 15:17:19 -08:00
• e018a7060c Merge pull request #9634 from btw616:fix-executeCombinedOutput gVisor bot 2023-11-06 12:06:51 -08:00
• c2dd6140f4 embeddedbinary: Skip compression unless using --compilation_mode=opt. Etienne PerotandgVisor bot 2023-11-06 11:28:56 -08:00
• 45220a5188 runsc: add the new OverlayMedium type for overlay config Tiwei BieandAyush Ranjan 2023-11-02 22:11:37 +08:00
• da2b10e207 runsc: decouple GoferMountConf to two layers Tiwei Bie 2023-10-04 21:40:52 +08:00
• 42b69d0151 Get limits from parent in cgroupv2 when max is specified in leaf cgroup node. Lucas ManningandgVisor bot 2023-11-03 18:07:12 -07:00
• a8a46b4c7f Only tmpfs is allowed on an upper level of overlayfs Andrei VaginandgVisor bot 2023-11-03 17:06:53 -07:00
• 1c2b646c26 embeddedbinary: access proc files of the current process via /proc/self/ Andrei VaginandgVisor bot 2023-11-03 15:58:13 -07:00
• 1cca30c532 runsc/container_test: fix executeCombinedOutput's output Tiwei Bie 2023-11-03 12:40:45 +08:00
• aeaee71669 setsid() should return the session id. Nicolas LacasseandgVisor bot 2023-11-02 16:21:23 -07:00
• 851ef0c100 Add NVIDIA driver version 535.104.12 to supported driver versions. Zach KoopmansandgVisor bot 2023-11-02 14:50:56 -07:00
• 9e66f710de Delete devtmpfs and replace it with tmpfs. Ayush RanjanandgVisor bot 2023-11-02 13:56:26 -07:00
• b92f900240 tests: change the default platfrom from ptrace to systrap Andrei VaginandgVisor bot 2023-11-02 12:34:02 -07:00
• 9aca9a7429 Elide WriteGS if the GS is already correct. 4 people 2023-11-02 11:18:20 -07:00
• 8f9211abca Close gofer filestore FDs in failure cases. Ayush RanjanandgVisor bot 2023-11-01 14:14:55 -07:00
• 429f7c4396 Move rootfs check to inside mountMu. Lucas ManningandgVisor bot 2023-11-01 13:55:18 -07:00
• 9c0d595c8f Convert Recv and RecvMsg arguments/output into structs. Nicolas LacasseandgVisor bot 2023-11-01 13:33:44 -07:00
• ea234b5da4 netstack: turn off logging by default Kevin KrakauerandgVisor bot 2023-11-01 12:58:31 -07:00
• ad77778bee runcs: add --EXPERIMENTAL-reproduce-nat to allowlist of overridable flags Kevin KrakauerandgVisor bot 2023-11-01 12:15:26 -07:00
• e1e7edcc1b Don't release unused RightsControlMessage in Recv. Nicolas LacasseandgVisor bot 2023-11-01 11:32:45 -07:00
• c011b6ad79 runsc: use a pipe for the NAT blob Kevin KrakauerandgVisor bot 2023-11-01 11:09:02 -07:00
• f28e39a2c4 runsc: fix runtime error caused by slice/array len mismatch Kevin KrakauerandgVisor bot 2023-11-01 10:32:37 -07:00
• 4a8f42267b Seccomp: Test that ioctl's zeroth arg is always a non-negative FD. Etienne PerotandgVisor bot 2023-11-01 02:11:33 -07:00
• b119cc3116 runsc: add flag --EXPERIMENTAL-reproduce-nat Kevin KrakauerandgVisor bot 2023-10-31 21:49:43 -07:00
• 7f08016fb8 iptables: check revision numbers and support owner matcher v1 Kevin KrakauerandgVisor bot 2023-10-31 21:15:06 -07:00
• 5f75371657 seccomp: Implement non-negative FD check as a ValueMatcher. Etienne PerotandgVisor bot 2023-10-31 18:53:52 -07:00
• 260873b693 seccomp: Implement basic SyscallRule optimizer. Etienne PerotandgVisor bot 2023-10-31 17:13:25 -07:00
• a44ddf5be5 seccomp: Make empty And and Or invalid. Etienne PerotandgVisor bot 2023-10-31 16:14:09 -07:00
• 41614ddfa1 seccomp: Add And as a logical AND between multiple syscall rules. Etienne PerotandgVisor bot 2023-10-31 13:23:54 -07:00
• 3d7d82f8f5 Merge pull request #9583 from jseba:nvproxy_version_list gVisor bot 2023-10-31 10:39:31 -07:00
• 5f52ed57e5 Add subcommand to list nvproxy supported driver versions Josh Seba 2023-10-30 15:19:06 -07:00
• ba53672288 Fix cudaMallocManaged() on nvproxy. Jamie LiuandgVisor bot 2023-10-30 15:00:28 -07:00
• bdc50df459 Split memmap.MMapOpts.Precommit into an enum. Jamie LiuandgVisor bot 2023-10-30 13:33:30 -07:00
• 0ed91ba4b8 Fix issue w/ buildkite pipelines. Zach KoopmansandgVisor bot 2023-10-30 12:25:19 -07:00
• 83f75082e5 nestack: use cryptographically secure RNG when appropriate Kevin KrakauerandgVisor bot 2023-10-28 16:11:16 -07:00
• fd9845ccea Fix NV_MEMORY_FABRIC for 535.43.02+ drivers. Ayush RanjanandgVisor bot 2023-10-28 12:42:21 -07:00
• 1918283b03 Test docker in gVisor Andrei VaginandgVisor bot 2023-10-27 15:39:55 -07:00
• 44d987d984 Add sanitization checks for TPU ioctl parameters and rename TPU device methods. Lucas ManningandgVisor bot 2023-10-27 15:17:02 -07:00
• 0010b32f55 seccomp: Add ValueMatcher interface to represent argument matchers. Etienne PerotandgVisor bot 2023-10-27 15:13:13 -07:00
• ee3625a998 capset doesn't fail if CAP_NET_RAW isn't enabled Andrei VaginandgVisor bot 2023-10-27 14:43:28 -07:00
• cbcf5fa99a buildkite: allow to run runtime tests on cos agents Andrei VaginandgVisor bot 2023-10-27 13:40:20 -07:00
• a27a5bc9fd bpf: Add logic for verifying whether a program fragment modifies register A. Etienne PerotandgVisor bot 2023-10-27 12:00:38 -07:00
• b357d71828 TIOCSCTTY has to succeed if a specified tty is a controlling one already Andrei VaginandgVisor bot 2023-10-26 23:54:17 -07:00
• aa02c6fa15 Fix SO_ACCEPTCONN option for unix sockets. Nayana BidariandgVisor bot 2023-10-26 15:46:35 -07:00
• b445e3ca8e Bump mount promise timeout. Lucas ManningandgVisor bot 2023-10-26 15:23:22 -07:00
• 5ec15266da Reduce TestMultiContainerMemoryLeakStress flakiness. Jamie LiuandgVisor bot 2023-10-26 14:09:03 -07:00
• 2df63d7799 Ignore AT_NO_AUTOMOUNT flag in fstatat(2). Ayush RanjanandgVisor bot 2023-10-26 12:00:38 -07:00
• 6df16e790c Merge pull request #9490 from btw616:erofs-avoid-escapes gVisor bot 2023-10-26 11:30:07 -07:00
• 56ce124756 erofs: eliminate unnecessary escapes and memory copies Tiwei Bie 2023-10-09 21:09:17 +08:00
• 3574bdd750 Make GPU tests on presubmit use only latest driver. Zach KoopmansandgVisor bot 2023-10-25 21:53:34 -07:00
• da0832d240 Merge pull request #9588 from avagin:typos gVisor bot 2023-10-25 19:58:04 -07:00
• a81b188fdd seccomp: Add secfuzz library to fuzz seccomp-bpf programs. Etienne PerotandgVisor bot 2023-10-25 19:36:03 -07:00
• 70783b4ceb Rename nvproxy/tpuproxy annotations as internal annotations. Zach KoopmansandgVisor bot 2023-10-25 17:56:03 -07:00
• 80ee2d3acc Move max syscall number out of kernel package. Etienne PerotandgVisor bot 2023-10-25 15:20:20 -07:00
• 5f4abad306 Fix a few typos Andrei Vagin 2023-10-25 12:06:44 -07:00
• cffce1a94a systrap: Revise slow-path enablement. Konstantin BogomolovandgVisor bot 2023-10-25 11:53:10 -07:00
• f4b7b8f5e3 Merge pull request #9577 from btw616:erofs-checkpoint-restore-support gVisor bot 2023-10-25 11:41:16 -07:00
• 663e69bde4 bpf: Do not use interfaces to define byte ordering in BPF evaluation. Etienne PerotandgVisor bot 2023-10-25 11:28:45 -07:00
• ecbf37d037 BPF: Add "instrumented execution" mode. Etienne PerotandgVisor bot 2023-10-25 10:01:22 -07:00
• d4973670c3 bpf: Remove Input interface and simply use bytes as the input. Etienne PerotandgVisor bot 2023-10-24 20:45:36 -07:00
• d377e45376 netlink: allow to up/down interfaces via RTM_NEWLINK Andrei VaginandgVisor bot 2023-10-24 12:07:22 -07:00
• ea4f0073d4 Fix data race between getting mount options and updating mount options. Jing ChenandgVisor bot 2023-10-24 01:40:24 -07:00
• 639488b65a fsimpl/devpts: handle mode, ptmxmode, uid, gid mount options Andrei VaginandgVisor bot 2023-10-24 00:53:19 -07:00
• f62a4a77d5 Update go branch to Go 1.21. Ayush RanjanandgVisor bot 2023-10-23 22:07:00 -07:00
• 37edf7285f Add buildkite pipeline for GPU workloads. Zach KoopmansandgVisor bot 2023-10-23 14:25:25 -07:00
• 59af1edc78 Add script to run gpu test for all supported driver versions. Zach KoopmansandgVisor bot 2023-10-23 11:01:48 -07:00
• 78a667cb8a erofs: add checkpoint/restore support Tiwei Bie 2023-10-04 21:40:52 +08:00
• 396d0beb1d vfs: introduce CtxRestoreFilesystemFDMap Tiwei Bie 2023-10-04 21:40:52 +08:00
• 57606c7aa1 tcp_benchmark: prevent "cheating" with splice Kevin KrakauerandgVisor bot 2023-10-20 10:32:43 -07:00
• 54ef8c70dd Add cos_gpu_test that will run GPU container on COS. Zach KoopmansandgVisor bot 2023-10-19 16:53:50 -07:00
• d039776e16 test: fix SetupTimeWaitClose to create a time wait bucket reliably Andrei VaginandgVisor bot 2023-10-19 14:26:07 -07:00
• 0b9e5810d6 Add internal annotation for TPU proxy. Zach KoopmansandgVisor bot 2023-10-19 13:46:03 -07:00
• 9304ed401f Remove unused images. Ayush RanjanandgVisor bot 2023-10-19 12:14:44 -07:00
• 7caf38420a Ensure RST TCP flag is set in raw socket tests. Ayush RanjanandgVisor bot 2023-10-19 11:03:34 -07:00
• 29a8856da7 Create shared master mounts for volumes with share=container. Ayush RanjanandgVisor bot 2023-10-18 17:52:32 -07:00
• f286d71166 Delete lifecycle mount annotation. Ayush RanjanandgVisor bot 2023-10-18 14:33:39 -07:00
• e77deec462 Use disk-backed tmpfs for disk-backed EmptyDir volumes. Ayush RanjanandgVisor bot 2023-10-18 12:55:42 -07:00
• 1407fdf120 Fix concurrent pivot_root bug. Lucas ManningandgVisor bot 2023-10-18 12:14:49 -07:00
• cd1c1599d6 Add locking to fuse loopback file system handler to appease race detector. Lucas ManningandgVisor bot 2023-10-18 11:33:27 -07:00
• 4024c736ae Create shared mounts on demand. Ayush RanjanandgVisor bot 2023-10-18 11:13:06 -07:00
• fb487fbb2f Create a TPU hello world image for use in gVisor tests. Lucas ManningandgVisor bot 2023-10-18 09:54:25 -07:00
• d6e83e2802 Add nvidia installer tool for installing NVIDIA drivers in buildkite tests. Zach KoopmansandgVisor bot 2023-10-17 23:16:59 -07:00
• 0fd906d7e0 Fix the sandbox memory usage via GetContainerMemoryUsage API. Nayana BidariandgVisor bot 2023-10-17 16:41:36 -07:00
• 707ac55a05 inet: don't reuse names from the abstract socket namespace map Andrei VaginandgVisor bot 2023-10-17 14:37:42 -07:00
• db68112c06 netstack: further optimize checksumming Jamie LiuandgVisor bot 2023-10-17 14:23:02 -07:00
• 6a25f2ebb2 Remove duplicate RandomizeBuffer implementation from socket util. Ayush RanjanandgVisor bot 2023-10-17 13:12:23 -07:00
• 669edba5d9 bpf: Add benchmark for interpreter speed. Etienne PerotandgVisor bot 2023-10-17 10:51:36 -07:00
• e69b01c3a8 Add command-line tool to quickly dump the Sentry BPF program. Etienne PerotandgVisor bot 2023-10-16 19:14:03 -07:00