Files
Maksym Pavlenko 1595317e06 sandbox: honor runtime_path for the shim sandboxer
A runtime handler can name its shim binary with runtime_path. The task
service replaces the runtime name with that path and the podsandbox
controller passes it to the pause task, but the shim sandboxer never saw
it: CRI stored only the runtime type in the sandbox record and the shim
controller started the binary resolved from that type.

Add a RuntimePath create option to the sandbox controller, have the shim
controller start that binary when it is set (the shim manager already
accepts an absolute path in place of a runtime name), and pass it from
CRI. The gRPC proxy cannot carry it, since ControllerCreateRequest has no
field for it, so a remote sandboxer logs a warning instead.

Signed-off-by: Maksym Pavlenko <pavlenko.maksym@gmail.com>
2026-11-02 09:44:23 -08:00
..
2024-10-18 16:04:54 -07:00