Commit Graph

  • a7b512f44e Add a C/R test for TCP listening connection. Nayana Bidari 2024-10-10 11:02:17 -07:00
  • 87925f2878 Merge pull request #11012 from avagin:go-1.23.2 gVisor bot 2024-10-10 10:54:38 -07:00
  • 0cf77c02f8 all: remove use io/ioutil deprecated package & fix some deprecated thing Koichi Shiraishi 2024-10-10 20:36:24 +09:00
  • 1de355142f Update golang packages Andrei Vagin 2024-10-09 11:31:58 -07:00
  • 4c89bb77d8 Update bazel packages Andrei Vagin 2024-10-09 11:03:09 -07:00
  • 1adacb2ec9 Update golang to 1.23.2 Andrei Vagin 2024-10-09 10:58:44 -07:00
  • 41c56d467b Merge pull request #10996 from cweld510:cweld/optionally-close-unix-sockets-on-save gVisor bot 2024-10-09 16:54:50 -07:00
  • 62eaadcf3a Build and package the runsc metric-server binary in the gVisor release. Etienne Perot 2024-10-08 19:12:09 -07:00
  • 47dade3f98 runsc: don't error with --reproduce-nftables when there are no nftables rules Kevin Krakauer 2024-10-08 17:11:23 -07:00
  • 56b1ea0b5b Merge pull request #10990 from ignoramous:patch-5 gVisor bot 2024-10-08 11:49:08 -07:00
  • 172bcc9bed runsc: grant CAP_SYS_PTRACE to the sandbox process when it is required Andrei Vagin 2024-10-08 10:59:33 -07:00
  • 8e601582c2 Make runsc aware of host kernel settings and offer to tweak them. Etienne Perot 2024-10-07 16:48:30 -07:00
  • befd16ec5a Update config/flags documentation cweld510 2024-10-07 22:59:53 +00:00
  • db4ffada10 style feedback: remove newlines, fix import, remove stray comment cweld510 2024-10-07 22:39:13 +00:00
  • cbbd0b4e18 Merge pull request #10999 from thecodingwizard:nathan/ffmpeg-dec gVisor bot 2024-10-07 12:25:31 -07:00
  • 0fae50971d Register container name with kernel before Loader.createContainerProcess(). Ayush Ranjan 2024-10-07 11:22:26 -07:00
  • 229d01f0d4 Add ffmpeg nvdec test Nathan Wang 2024-10-03 18:10:25 +00:00
  • 1ea84d6db0 Add test that runs runsc do inside a non-gVisor container. Etienne Perot 2024-10-04 14:35:21 -07:00
  • 727bc9c72a Add and implement option to close unsaveable gofer-backed unix sockets on save cweld510 2024-10-02 15:24:31 +00:00
  • ab3c4c85a3 tcpip/udp: defer mutex unlock ignoramous 2024-10-05 00:14:04 +05:30
  • b89f53b2ce Add ffmpeg GPU test with h264_nvenc video codec (which uses NVENC). Etienne Perot 2024-10-03 19:30:36 -07:00
  • 741bf52370 tcpip/udp: document preconditions for endpoint.closeLocked() ignoramous 2024-10-04 06:14:17 +05:30
  • 123173f839 tcpip/udp: avoid deadlock in forwader.CreateEndpoint ignoramous 2024-10-04 06:04:38 +05:30
  • cb418b7f09 Add kernel.Saver.OCIEnviron(). Ayush Ranjan 2024-10-03 16:42:40 -07:00
  • a446b45d4d Ensure views returned by PullUp are owned exclusively by their packet. Lucas Manning 2024-10-03 12:08:47 -07:00
  • cceb04f05a Clean up host.TTYFileOperations. Nicolas Lacasse 2024-10-03 11:23:05 -07:00
  • a94f5e598f systrap: Replace all instances of unix.RawSyscall with pkg/hostsyscall variants. Konstantin Bogomolov 2024-10-03 10:44:42 -07:00
  • d5a9d523bb Implement /dev/tty for donated host TTYs Nicolas Lacasse 2024-10-02 19:37:04 -07:00
  • 72193f12c9 Implement /dev/tty for sentry-internal ttys. Nicolas Lacasse 2024-10-02 16:15:21 -07:00
  • d3ce23c224 Fix improper use of RawSyscall in KVM Konstantin Bogomolov 2024-10-02 16:15:12 -07:00
  • ca8d05a657 platform/kvm: refactor handleBluepillFault to reduce stack usage Andrei Vagin 2024-10-01 17:03:56 -07:00
  • b99fd8711f kernel: fix lock order inversion in ThreadGroup.Release() Jamie Liu 2024-10-01 16:06:06 -07:00
  • baaaf47fc2 kernel: hold TaskSet mutex across exitPtrace() and exitChildren() Jamie Liu 2024-10-01 15:10:50 -07:00
  • a32d047f68 kernel: don't hold TaskSet.mu during most of Kernel.runCPUClockTicker() Jamie Liu 2024-10-01 14:22:35 -07:00
  • 51fa369cf1 kvm: Replace all instances of unix.RawSyscall with pkg/hostsyscall variants. Konstantin Bogomolov 2024-10-01 13:07:54 -07:00
  • 03bebc4402 kernel: add ThreadGroup.signalLock() Jamie Liu 2024-10-01 12:44:40 -07:00
  • 4a0bf841d9 Don't return r2 from RawSyscalls. Konstantin Bogomolov 2024-10-01 10:25:54 -07:00
  • fa27ee0b23 Extract kvm variants of Syscall helpers to their own pkg. Konstantin Bogomolov 2024-09-30 15:19:05 -07:00
  • a5459a26cb Add memmap.MMapOpts.RequirePlatformEffect and use where appropriate. Jamie Liu 2024-09-30 15:07:34 -07:00
  • a15559c56c mm: limit AddressSpace overmapping during async page loading Jamie Liu 2024-09-30 13:34:48 -07:00
  • 9d41ac1ff0 Fix unsigned to signed integer conversion in syserr.getHostTranslation(). Ayush Ranjan 2024-09-30 12:06:56 -07:00
  • 3971ecbc6c Remove linuxerr.IsValid and use syserr.IsValid instead. Ayush Ranjan 2024-09-28 12:30:54 -07:00
  • 0760a3df59 kvm: reduce stack usage Konstantin Bogomolov 2024-09-27 16:54:20 -07:00
  • 5e8dd6482c Disallow setting a coordinator for a coordinator device. Jing Chen 2024-09-27 16:09:48 -07:00
  • ffea874845 Merge pull request #10967 from thecodingwizard:nathan/torch-profiler gVisor bot 2024-09-27 14:41:06 -07:00
  • 4962090d25 Merge pull request #10954 from google:test/avagin/network_plugins gVisor bot 2024-09-27 14:34:57 -07:00
  • 4b1db872bd nvproxy: Add GF100_PROFILER allocation class and NV2080_CTRL_CMD_TIMER_SET_GR_TICK_FREQ control command Nathan Wang 2024-09-27 18:07:55 +00:00
  • 86ceb5c26a Fix memmap.Translation.Perms returns. Jamie Liu 2024-09-26 17:56:00 -07:00
  • 4a583f62ed Remove a stale TODO which is not reproducible. Jing Chen 2024-09-26 15:52:32 -07:00
  • 41f01d8f9c pgalloc: integrate async page loading Jamie Liu 2024-09-26 15:46:56 -07:00
  • 4a38681600 Upgrade containerd in gVisor, from v1.4.13 to v1.6.36. Jing Chen 2024-09-26 14:28:45 -07:00
  • a50fb5ded0 Add memmap.File.DataFD(). Jamie Liu 2024-09-26 12:44:10 -07:00
  • ec18cb188f buildkite: run intergration tests with the network plugin Andrei Vagin 2024-09-24 21:38:22 -07:00
  • e6e645c6f5 Add //pkg/ringdeque. Jamie Liu 2024-09-25 20:13:20 -07:00
  • 975bf85ffd buildkite: start testing the network plugin Andrei Vagin 2024-09-24 13:26:47 -07:00
  • 90faaeb34f runsc: remove cilium as a dependency unless built with --define=gotags=xdp Kevin Krakauer 2024-09-25 11:40:28 -07:00
  • 2d0a6f7865 tools/bazeldefs: always pass bazel_cgo to go_library Andrei Vagin 2024-09-24 15:09:11 -07:00
  • 9488cfcf0b nftables: use a secure RNG Kevin Krakauer 2024-09-24 10:18:26 -07:00
  • fdd7580bd1 Merge pull request #10915 from thundergolfer:master gVisor bot 2024-09-24 09:02:19 -07:00
  • 5216c2f1c3 Dangerzone blog post: Fix list formatting. Etienne Perot 2024-09-24 01:16:09 -07:00
  • c25a8daf64 Import updated set of SVGs for Dangerzone blog post. Etienne Perot 2024-09-23 22:26:34 -07:00
  • 3ca94ff9eb Pass the NVIDIA_DRIVER_CAPABILITIES env var to nvidia-container-cli. Ayush Ranjan 2024-09-23 21:32:40 -07:00
  • 079c1a937b Merge pull request #9551 from amysaq2023:support-external-stack gVisor bot 2024-09-23 14:12:32 -07:00
  • 48b7308dce Fix formatting issues in Dangerzone blog post and for multi-author posts. Etienne Perot 2024-09-23 12:41:43 -07:00
  • f6cd886085 Merge pull request #10937 from EtiennePerot:dangerzone-blog-post gVisor bot 2024-09-23 11:33:04 -07:00
  • 9f3c60481b Add Dangerzone + gVisor integration blog post. Etienne Perot 2024-09-23 10:25:37 -07:00
  • ffb3b11dcf Update gVisor website documentation about directfs. Ayush Ranjan 2024-09-21 22:41:46 -07:00
  • 2e1c456485 docs: update out-of-date and mispelled lines Jonathon Belotti 2024-09-15 19:20:48 +00:00
  • 020dd7a400 Merge pull request #10936 from EtiennePerot:blog-improvements gVisor bot 2024-09-21 08:56:01 -07:00
  • a7dcce9385 go_library wrapper: Add bazel_cgo and cgo-related arguments. Etienne Perot 2024-09-20 21:37:44 -07:00
  • 647c6411b9 blog: Support HTML excerpts and titles with : characters. Etienne Perot 2024-09-20 18:16:00 -07:00
  • 49310d92b1 Merge pull request #10928 from bprosnitz:patch-1 gVisor bot 2024-09-19 13:52:52 -07:00
  • f229b3e772 Fix small logic bug with CLONE_NEWUSER|CLONE_NEWNS in clone. Lucas Manning 2024-09-19 11:16:03 -07:00
  • 2c4bc699d3 Update go version to 1.23.1 Benjamin Prosnitz 2024-09-19 11:10:43 -07:00
  • ab64b5eb54 Create a precise host file mapper that respects host file ranges. Lucas Manning 2024-09-18 13:58:08 -07:00
  • 8425e278c5 segment: add Set.Remove[Full]RangeWith() Jamie Liu 2024-09-17 21:17:36 -07:00
  • ed5a61a24b nocompressio: Also use previous hash to compute current hash. Ayush Ranjan 2024-09-17 14:53:16 -07:00
  • 4d37180f89 netstack: remove sniffer.LogPacketsToPCAP Kevin Krakauer 2024-09-17 14:32:30 -07:00
  • f681bcc095 Implement RTM_DELROUTE in netstack. Jing Chen 2024-09-17 14:30:56 -07:00
  • fe969be4cf Internal change. Jeff Martin 2024-09-17 11:28:38 -07:00
  • 4bcbb55fcb kvm: Fix sigsys handler error message. Konstantin Bogomolov 2024-09-16 17:07:40 -07:00
  • dd011f2e9f netstack: check inbound MAC addresses in the fdbased link endpoint Kevin Krakauer 2024-09-16 16:19:50 -07:00
  • 50d46c627c Initiliaze rand variables after netstack is restored. Nayana Bidari 2024-09-16 13:54:59 -07:00
  • 004cb3d70d Suppress new printf warnings for gvisor dependencies gVisor bot 2024-09-16 02:37:44 -07:00
  • ac5d20cfb9 Fix some lint issues gVisor bot 2024-09-16 02:29:16 -07:00
  • 6b81c5821b docs: add a netstack guide to the site Kevin Krakauer 2024-09-13 14:37:11 -07:00
  • b2340af8a7 Implement Meta Set operation (parsing, interpretation, evaluation, tests). Jayden Nyamiaka 2024-09-13 14:04:36 -07:00
  • 485a520588 Spec validation: use container name instead of container ID in the map. Nayana Bidari 2024-09-13 13:20:27 -07:00
  • 53af6d6ee6 Improve conciseness of parsing keywords and String func for enum constants. Jayden Nyamiaka 2024-09-13 12:55:05 -07:00
  • ab0c794f9b Implement Meta Load operation (parsing, interpretation, evaluation, tests). Jayden Nyamiaka 2024-09-13 12:24:38 -07:00
  • 6e6960c539 Run post-restore hook in the background. Ayush Ranjan 2024-09-13 11:17:31 -07:00
  • f366a27622 Add protocol family constants to netfilter uapi. Jayden Nyamiaka 2024-09-13 11:10:16 -07:00
  • 290789bab8 Refactor tpu chroot operations. Lucas Manning 2024-09-13 11:07:35 -07:00
  • 0a43b7e4c2 Add netfilter meta operation constants for nftables support. Jayden Nyamiaka 2024-09-13 11:05:57 -07:00
  • e3aa1bf7dd Disable nogo for pkg/test/criutil:criutil and pkg/test/dockerutil:profile_test. Ayush Ranjan 2024-09-13 10:37:47 -07:00
  • 548733574e Implement Byteorder operation (parsing, interpretation, evaluation, tests). Jayden Nyamiaka 2024-09-12 17:05:01 -07:00
  • 2da6847b5d Internal change. gVisor bot 2024-09-12 16:18:00 -07:00
  • 684a1c8665 Implement Route operation (parsing, interpretation, evaluation, tests). Jayden Nyamiaka 2024-09-12 16:00:50 -07:00
  • b050c045d1 Implement Last operation (construction, evaluation, tests, NO interpretation). Jayden Nyamiaka 2024-09-12 14:53:44 -07:00
  • be59d8a1c5 Implement Counter operation (parsing, interpretation, evaluation, tests). Jayden Nyamiaka 2024-09-12 13:47:02 -07:00