Commit Graph

  • fc8ca72a32 sentry: do not start delivering external signal immediately. Zhaozhong Ni 2018-06-15 13:37:21 -07:00
  • fa6db05e0c FIFOs should support O_TRUNC as a no-op. Brian Geffon 2018-06-15 12:54:38 -07:00
  • 52110bfc33 runsc/cmd: fix kill signal parsing Dmitry Vyukov 2018-06-15 11:05:10 -07:00
  • b31ac4e1df Use notify explicitly on unlock path. Adin Scannell 2018-06-15 09:29:19 -07:00
  • ef5dd4df9b Set kernel.applicationCores to the number of processor on the host Fabricio Voznika 2018-06-15 09:17:40 -07:00
  • 119a302ceb Implement /proc/thread-self Fabricio Voznika 2018-06-15 09:17:08 -07:00
  • 1eb1bf8670 Update contributing guidelines with an example. Adin Scannell 2018-06-15 01:21:08 -07:00
  • bd1e83ff60 Fix typo. Brielle Broder 2018-06-14 15:44:08 -07:00
  • 657db692b2 Ignore expiration count in kernelCPUClockListener.Notify. Jamie Liu 2018-06-14 11:34:15 -07:00
  • d71f5ef688 Add nanosleep filter for Go 1.11 support Michael Pratt 2018-06-14 10:10:09 -07:00
  • f5d0c59f5c Fix reference leak in VDSO validation Ian Gudger 2018-06-13 20:00:00 -07:00
  • 1170039e78 Fix missing returns in rpcinet. Brian Geffon 2018-06-13 16:20:30 -07:00
  • 7b7b199ed0 Deflake kvm_test. Adin Scannell 2018-06-13 13:04:36 -07:00
  • 717f2501c9 Fix failure to mount volume that sandbox process has no access Fabricio Voznika 2018-06-13 10:19:03 -07:00
  • 686093669e sentry: do not treat all save errors as state file errors. Zhaozhong Ni 2018-06-13 10:13:23 -07:00
  • 55b9058456 Log filemem state when panicing due to invalid refcount. Jamie Liu 2018-06-13 10:03:06 -07:00
  • ba426f7782 Fix reference leak for negative dirents Ian Gudger 2018-06-12 17:03:31 -07:00
  • c2b3f04d1c Rpcinet doensn't handle SO_RCVTIMEO properly. Brian Geffon 2018-06-12 16:15:21 -07:00
  • 2506b9b11f runsc: do not include sub target if it is not started with '/'. Lantao Liu 2018-06-12 13:54:02 -07:00
  • 711a9869e5 Runsc checkpoint works. Brielle Broder 2018-06-12 13:24:22 -07:00
  • 7a10df454b Drop MMapOpts.MappingIdentity reference in loader.mapSegment. Jamie Liu 2018-06-12 12:37:06 -07:00
  • 2dc9cd7bf7 runsc: enable terminals in the sandbox. Kevin Krakauer 2018-06-12 11:02:35 -07:00
  • 48335318a2 Enable debug logging in tests Fabricio Voznika 2018-06-12 10:24:56 -07:00
  • 41f766893a Minor ring0 interface cleanup. Adin Scannell 2018-06-11 18:16:13 -07:00
  • 1397a413b4 Make page tables split-safe. Adin Scannell 2018-06-11 18:14:22 -07:00
  • 09b0a9c320 Handle all exception vectors. Adin Scannell 2018-06-11 17:56:18 -07:00
  • ea4a468fba Set CLOEXEC option to sockets Fabricio Voznika 2018-06-11 16:44:56 -07:00
  • ab2c2575d6 Rpcinet is incorrectly handling MSG_TRUNC with SOCK_STREAM Brian Geffon 2018-06-11 16:39:39 -07:00
  • 0412f17e06 rpcinet is treating EAGAIN and EWOULDBLOCK as different errnos. Brian Geffon 2018-06-11 15:33:07 -07:00
  • 7260363751 Add O_TRUNC handling in openat Fabricio Voznika 2018-06-11 13:34:27 -07:00
  • 032b0398a5 Sentry: split tty.queue into its own file. Kevin Krakauer 2018-06-11 11:08:51 -07:00
  • c0ab059e7b Fix kernel flags handling and add missing vectors. Adin Scannell 2018-06-08 17:50:55 -07:00
  • 2fbd1cf57c Add checks for short CopyOut in rpcinet Brian Geffon 2018-06-08 15:57:33 -07:00
  • 6728f09910 Fix sigaltstack semantics. Adin Scannell 2018-06-08 15:00:29 -07:00
  • de8dba205f Add a protocol option to set congestion control algorithm. Bhasker Hariharan 2018-06-08 11:45:30 -07:00
  • 2f3895d6f7 rpcinet is not correctly handling MSG_TRUNC on recvmsg(2). Brian Geffon 2018-06-08 10:32:30 -07:00
  • 5c51bc51e4 Drop capabilities not needed by Gofer Fabricio Voznika 2018-06-08 09:58:29 -07:00
  • 5c37097e34 rpcinet should not block in read(2) rpcs. Brian Geffon 2018-06-07 15:09:27 -07:00
  • 7e9893eeb5 Add missing rpcinet ioctls. Brian Geffon 2018-06-07 11:36:26 -07:00
  • 9170303105 Sentry: very basic terminal echo support. Kevin Krakauer 2018-06-07 10:20:28 -07:00
  • d269845159 Ensure guest-mode for page table modifications. Adin Scannell 2018-06-06 23:25:26 -07:00
  • 3374849cb5 Split PCID implementation from page tables. Adin Scannell 2018-06-06 22:51:58 -07:00
  • 1b5062263b Add allocator abstraction for page tables. Adin Scannell 2018-06-06 21:47:39 -07:00
  • 206e90d057 runsc: Support abbreviated container IDs. Kevin Krakauer 2018-06-06 16:12:58 -07:00
  • 79fef54eb1 Add support for rpcinet ioctl(2). Brian Geffon 2018-06-06 15:52:29 -07:00
  • 0c34b460f2 Add runsc checkpoint command. Googler 2018-06-06 12:31:01 -07:00
  • 722275c3d1 Added a function to the controller to checkpoint a container. Googler 2018-06-06 11:43:01 -07:00
  • ff7b4a156f Add support for rpcinet owned procfs files. Brian Geffon 2018-06-05 15:43:55 -07:00
  • 343020ca27 netstack: make TCP endpoint closed and error state cleanup work synchronous. Zhaozhong Ni 2018-06-05 15:43:38 -07:00
  • 19a0e83b50 Make fsgofer attach more strict Fabricio Voznika 2018-06-04 18:04:05 -07:00
  • 6c585b8eb6 Create destination mount dir if it doesn't exist Fabricio Voznika 2018-06-04 12:30:47 -07:00
  • 78ccd1298e Return 'running' if gofer is still alive Fabricio Voznika 2018-06-04 12:13:33 -07:00
  • 55a37ceef1 Fix leaky FD Fabricio Voznika 2018-06-04 11:51:27 -07:00
  • a0e2126be4 Refactor container_test in preparation for sandbox_test Fabricio Voznika 2018-06-04 11:25:40 -07:00
  • 0929bdee34 Fix checksum file for today's build Fabricio Voznika 2018-06-04 10:27:33 -07:00
  • 43dd424f42 Add SHA512 pointer to README Fabricio Voznika 2018-06-02 15:21:42 -07:00
  • 0212f222c7 Fix refcount bug in rpcinet socketOperations.Accept. Brian Geffon 2018-06-01 14:58:46 -07:00
  • 659b10d1a6 Move page tables lock into the address space. Adin Scannell 2018-06-01 13:50:17 -07:00
  • d1ca50d49e Add SyscallRules that supports argument filtering Zhengyu He 2018-06-01 13:39:53 -07:00
  • 65dadc0029 Ignores IPv6 addresses when configuring network Fabricio Voznika 2018-06-01 10:08:40 -07:00
  • 3547c48867 Add SHA512 file to nightly build Fabricio Voznika 2018-05-31 10:53:08 -07:00
  • 57edd0ee19 Restore FS on resume. Adin Scannell 2018-05-30 17:37:00 -07:00
  • c59475599d Change ring0 & page tables arguments to structs. Adin Scannell 2018-05-30 15:13:36 -07:00
  • 812e83d3bb Supress error when deleting non-existing container with --force Fabricio Voznika 2018-05-29 17:57:26 -07:00
  • c5dc873e44 Automated rollback of changelist 196886839 Fabricio Voznika 2018-05-29 14:23:17 -07:00
  • a8b90a7158 Poll should wake up on ECONNREFUSED with no mask. Brian Geffon 2018-05-24 15:45:55 -07:00
  • 7f62e9c32e rpcinet connect doesn't handle all errnos correctly. Brian Geffon 2018-05-24 15:17:42 -07:00
  • e48f707876 Configure sandbox as superuser Fabricio Voznika 2018-05-24 14:27:05 -07:00
  • 7996ae7ccf Adding test case for RST acceptable ack panic Brian Geffon 2018-05-23 15:00:59 -07:00
  • 02ad0dc3d9 Fix typo in TCP transport Ian Gudger 2018-05-23 14:27:52 -07:00
  • 51c95c270b Remove offset check to match with Linux implementation. Fabricio Voznika 2018-05-22 16:35:58 -07:00
  • 257ab8de93 When sending a RST the acceptable ACK window shouldn't change. Brian Geffon 2018-05-22 15:51:55 -07:00
  • 7b2b7a3946 Change length type, and let fadvise64 return ESPIPE if file is a pipe Chanwit Kaewkasi 2018-05-22 13:46:52 -07:00
  • 705605f901 sentry: Add simple SIOCGIFFLAGS support (IFF_RUNNING and IFF_PROMIS). Kevin Krakauer 2018-05-22 13:46:37 -07:00
  • 3a6070dc98 Clarify that syserr.New must only be called during init Ian Gudger 2018-05-22 11:53:42 -07:00
  • ed2b86a549 Fix test failure when user can't mount temp dir Fabricio Voznika 2018-05-21 17:47:13 -07:00
  • 61b0b19497 Dramatically improve handling of KVM vCPU pool. Adin Scannell 2018-05-21 16:48:41 -07:00
  • d4c81b7a21 sentry: Get "ip link" working. Kevin Krakauer 2018-05-18 10:42:52 -07:00
  • a1e5862f3c Move postgres to list of supported images Fabricio Voznika 2018-05-17 23:21:47 -07:00
  • b960559fdb Cleanup docs Michael Pratt 2018-05-17 16:25:51 -07:00
  • b904250b86 Fix capability check for sysv semaphores. Rahat Mahmood 2018-05-17 15:37:19 -07:00
  • 8878a66a56 Implement sysv shm. Rahat Mahmood 2018-05-17 15:05:15 -07:00
  • a8d7cee3e8 Fix sendto for dual stack UDP sockets Ian Gudger 2018-05-17 12:49:16 -07:00
  • 31386185fe Push signal-delivery and wait into the sandbox. Nicolas Lacasse 2018-05-17 11:54:36 -07:00
  • 8e1deb2ab8 Fix another socket Dirent refcount. Christopher Koch 2018-05-16 14:53:57 -07:00
  • 3131a6b131 Verify that when offset address is not null, infile must be seekable Chanwit Kaewkasi 2018-05-16 14:19:34 -07:00
  • 5b4c20e1b8 netstack: make TCP endpoint closed and error state cleanup work synchronous. Zhaozhong Ni 2018-05-16 14:14:28 -07:00
  • d154c6a25f Refcount socket Dirents correctly. Christopher Koch 2018-05-16 13:28:29 -07:00
  • f295e26b8a Release mutex in BidirectionalConnect to avoid deadlock. Brian Geffon 2018-05-16 13:06:23 -07:00
  • 4b7e4f3d36 Fix KVM EFAULT handling. Adin Scannell 2018-05-15 22:43:52 -07:00
  • 00adea3a3f Simplify KVM invalidation logic. Adin Scannell 2018-05-15 22:20:36 -07:00
  • 310a99228b Simplify KVM state handling. Adin Scannell 2018-05-15 18:33:19 -07:00
  • 96c28a4368 sentry: Replaces saving of inet.Stack with retrieval via context. Kevin Krakauer 2018-05-15 14:55:29 -07:00
  • 9889c29d6d Fix problem with sendfile(2) writing less data Fabricio Voznika 2018-05-15 14:38:32 -07:00
  • 205f1027e6 Refactor the Sandbox package into Sandbox + Container. Nicolas Lacasse 2018-05-15 10:17:19 -07:00
  • ed02ac4f66 Disable INVPCID check; it's not used. Adin Scannell 2018-05-14 21:39:31 -07:00
  • 2ab754cff7 Make KVM system call first check. Adin Scannell 2018-05-14 21:13:28 -07:00
  • 825e9ea809 Simplify KVM host map handling. Adin Scannell 2018-05-14 20:44:56 -07:00
  • 17a0fa3af0 Ignore spurious KVM emulation failures. Adin Scannell 2018-05-14 20:26:35 -07:00
  • 08879266fe sentry: Adds canonical mode support. Kevin Krakauer 2018-05-11 17:18:56 -07:00