Files
Maksym Pavlenko 1595317e06 sandbox: honor runtime_path for the shim sandboxer
A runtime handler can name its shim binary with runtime_path. The task
service replaces the runtime name with that path and the podsandbox
controller passes it to the pause task, but the shim sandboxer never saw
it: CRI stored only the runtime type in the sandbox record and the shim
controller started the binary resolved from that type.

Add a RuntimePath create option to the sandbox controller, have the shim
controller start that binary when it is set (the shim manager already
accepts an absolute path in place of a runtime name), and pass it from
CRI. The gRPC proxy cannot carry it, since ControllerCreateRequest has no
field for it, so a remote sandboxer logs a warning instead.

Signed-off-by: Maksym Pavlenko <pavlenko.maksym@gmail.com>
2026-11-02 09:44:23 -08:00
..
2024-12-23 23:14:49 -07:00
2024-01-17 09:52:39 -08:00
2026-03-15 18:24:14 +01:00