Maksym Pavlenko da144993d5 ci: run critest through the sandboxed shim ...

critest.sh takes SANDBOXER, the sandbox controller of the runtime handler
(podsandbox by default; shim adds disable_pause_image_pull, since a
Sandbox API shim needs no pause image). The Linux integration job runs the
critest suite a second time on the runc.v2 legs, with TEST_RUNTIME_PATH
pointing at containerd-shim-sandboxed-runc-v2 and the shim sandboxer. The
one spec that needs a shared pod PID namespace is skipped by name until
that lands; the user namespace specs skip themselves, since the handler
does not advertise user namespaces.

Signed-off-by: Maksym Pavlenko <pavlenko.maksym@gmail.com>

2026-11-04 18:25:47 -08:00

..

runsc

ci: add integration-runsc CI job and script/runsc/ test helpers

2026-10-15 19:07:45 -05:00

setup

script/setup/install-runc: build runc statically

2026-10-25 20:50:56 -04:00

test

ci: install the Rust runc shim from crates.io

2026-10-30 13:20:13 -07:00

vm

script/setup/install-runc: build runc statically

2026-10-25 20:50:56 -04:00

critest.sh

ci: run critest through the sandboxed shim

2026-11-04 18:25:47 -08:00

go-test-fuzz.sh

ci: bound Go fuzzing by execution count

2026-07-09 16:45:11 -07:00

verify-go-modules.sh

fix verify-vendor if go.mod does not contain replace rules

2022-05-27 12:57:12 +02:00