11 Commits
Author SHA1 Message Date
Sebastiaan van Stijn 39f073cf9b daemon/pkg/oci/caps: clean up NormalizeLegacyCapabilities
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2026-08-29 12:58:54 +02:00
Sebastiaan van Stijn 38a3b4f4e2 daemon/pkg/oci: use native Go fuzzing
Replace go-fuzz-headers with native fuzz parameters and construct Record
values directly from the fuzz input.

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2026-07-13 11:19:48 +02:00
Sebastiaan van Stijn d5370d34d3 use private time-namespace for containers on supported kernels
Time namespaces were introduced in [Linux Kernel 5.6], and are supported by
[OCI runtime spec v1.1.0] and up. This patch updates the default OCI spec for
containers to use a private time-namespace if the host support it. We do not
yet provide options to customize this option (e.g. to allow switching between
"private", "host", or to join another container's time-namespace), which can be
added in a future update (but requires API changes).

With this patch applied:

    docker run -dq nginx:alpine
    54220be49a47d09f74ee918e65233365e94ecb306e4104a4468ab50221262bf7

    ctr -n moby c info 54220be49a47d09f74ee918e65233365e94ecb306e4104a4468ab50221262bf7 | jq .Spec.linux.namespaces
    [
      {"type": "mount"},
      {"type": "network"},
      {"type": "uts"},
      {"type": "pid"},
      {"type": "ipc"},
      {"type": "time"},
      {"type": "cgroup"}
    ]

[Linux Kernel 5.6]: https://lwn.net/Articles/779104/
[OCI runtime spec v1.1.0]: https://github.com/opencontainers/runtime-spec/releases/tag/v1.1.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2026-04-27 14:33:45 +02:00
Paweł Gronowski 0ae3f972ad daemon: Simplify slices.Contains usage
Remove unnecessary intermediate variables and helper functions when
using slices.Contains.

Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com>
2025-12-16 13:31:33 +01:00
Paweł Gronowski 62ed24a87c modernize: Use slices.Contains
Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com>
2025-12-15 18:56:34 +01:00
Sebastiaan van Stijn bb56c4d7e7 daemon: remove some deprecated and unused code
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2025-11-11 09:05:41 +01:00
Sebastiaan van Stijn cf15d5bbc6 remove obsolete //go:build tags
These are no longer needed as these are now part of a module.

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2025-08-01 00:49:22 +02:00
Derek McGowan f74e5d48b3 Create github.com/moby/moby/v2 module
Signed-off-by: Derek McGowan <derek@mcg.dev>
2025-07-31 10:13:29 -07:00
Derek McGowan 8042010175 Move internal/platform to daemon/internal/platform
Signed-off-by: Derek McGowan <derek@mcg.dev>
2025-07-24 12:14:46 -07:00
Derek McGowan 222b2b8b2f Move internal/lazyregexp to daemon/internal/lazyregexp
Signed-off-by: Derek McGowan <derek@mcg.dev>
2025-07-24 12:12:38 -07:00
Derek McGowan c74ba95583 Move oci to daemon/pkg/oci
Signed-off-by: Derek McGowan <derek@mcg.dev>
2025-07-24 12:11:19 -07:00