Replace go-fuzz-headers with native fuzz parameters and construct Record
values directly from the fuzz input.
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
Time namespaces were introduced in [Linux Kernel 5.6], and are supported by
[OCI runtime spec v1.1.0] and up. This patch updates the default OCI spec for
containers to use a private time-namespace if the host support it. We do not
yet provide options to customize this option (e.g. to allow switching between
"private", "host", or to join another container's time-namespace), which can be
added in a future update (but requires API changes).
With this patch applied:
docker run -dq nginx:alpine
54220be49a47d09f74ee918e65233365e94ecb306e4104a4468ab50221262bf7
ctr -n moby c info 54220be49a47d09f74ee918e65233365e94ecb306e4104a4468ab50221262bf7 | jq .Spec.linux.namespaces
[
{"type": "mount"},
{"type": "network"},
{"type": "uts"},
{"type": "pid"},
{"type": "ipc"},
{"type": "time"},
{"type": "cgroup"}
]
[Linux Kernel 5.6]: https://lwn.net/Articles/779104/
[OCI runtime spec v1.1.0]: https://github.com/opencontainers/runtime-spec/releases/tag/v1.1.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>