97 Commits
Author SHA1 Message Date
Sebastiaan van Stijn 130fae39f3 Merge pull request #5598 from opencontainers/dependabot/go_modules/github.com/moby/sys/capability-0.5.0
build(deps): bump github.com/moby/sys/capability from 0.4.0 to 0.5.0
2026-11-02 17:46:46 +00:00
Sebastiaan van Stijn ba833d9ad7 Merge pull request #5537 from kolyshkin/kir/host-mntns-prop
libct: don't change host mounts propagation
2026-10-26 13:39:41 +00:00
Sebastiaan van Stijn 810dd0a6dd Merge pull request #5535 from kolyshkin/kir/no-pivot-host-mntns
libct/cfg/validate: disallow some bad configurations
2026-10-23 16:07:08 +00:00
Sebastiaan van Stijn 9068bd89fe Merge pull request #5515 from kolyshkin/criu-no-text-debug
libct: don't print CRIU requests and responses
2026-10-12 13:28:19 +02:00
Sebastiaan van Stijn ac1acef868 Merge pull request #5495 from kolyshkin/rm-deprecated
Remove APIs deprecated for removal in runc 1.6
2026-10-02 14:37:40 +02:00
Sebastiaan van Stijn 8c1215f4b6 Merge pull request #5482 from lifubang/fix-ci-unique-name
ci: make workflow job names unique
2026-09-22 21:14:44 +02:00
Sebastiaan van Stijn b7539d863d Merge pull request #5462 from kolyshkin/bump-actionlint
ci: bump kjanat/actionlint to v1.17.0
2026-09-17 08:34:36 +02:00
Sebastiaan van Stijn 579be222cf Merge pull request #5384 from kolyshkin/validate-commit-simple
ci: replace some third-party actions
2026-09-14 10:11:13 +02:00
Sebastiaan van Stijn c010af1dea Merge pull request #5385 from kolyshkin/add-actionlint
ci: add actionlint
2026-08-19 01:56:05 +02:00
Sebastiaan van Stijn 6689c8657e Merge pull request #5358 from lifubang/fix-nr-inodes-focal
libct: retry with nr_inodes=2 to fix Focal mount errors
2026-07-02 00:10:42 +02:00
Sebastiaan van Stijn 5847157c82 Merge pull request #5275 from lifubang/maskdir-with-shared-tmpfs
[Carry #5262] libct: reuse tmpfs for directory masks
2026-05-13 09:37:43 +02:00
Sebastiaan van Stijn ff2494b98d Merge pull request #4785 from kolyshkin/cgroups-v003
deps: bump cgroups to v0.0.3, fix a few regressions
2025-06-19 21:28:00 +02:00
Sebastiaan van Stijn e8a97bae27 Merge pull request #4692 from kolyshkin/golangci-v2
ci: switch to golangci-lint v2
2025-03-31 16:31:28 +02:00
Sebastiaan van Stijn e0752069a5 Merge pull request #4548 from cyphar/ebpf-enotsup
cgroups: ebpf: use link.Anchor to check for BPF_F_REPLACE support
2024-12-07 13:17:20 +01:00
Sebastiaan van Stijn eb596b8d3b Merge pull request #4523 from kolyshkin/fix-4518
runc delete: fix for rootless cgroup + ro cgroupfs
2024-11-12 10:59:29 +01:00
Sebastiaan van Stijn fd5675e386 Merge pull request #4321 from lifubang/update-changelog-release-1.1.13
update changelog after v1.1.13 released
2024-06-14 01:35:57 +02:00
Sebastiaan van Stijn 4e8cf2793a Merge pull request #4280 from austinvazquez/vendor-x-net-0.24.0
vendor: golang.org/x/net@v0.24.0
2024-05-16 09:38:29 +02:00
Sebastiaan van Stijn c494c475bd Merge pull request #4064 from kolyshkin/ce7-skip-flake
ci: skip TestPodSkipDevicesUpdate on CentOS 7
2023-10-12 10:55:22 +02:00
Sebastiaan van Stijn e712b87b6c Merge pull request #4050 from lifubang/fix-Typeo
fix two typos
2023-10-03 12:39:25 -07:00
Sebastiaan van Stijn a5777e8716 Merge pull request #3947 from lifubang/followup-3939
use the length of UIDMappings/GIDMappings to check whether empty or not
2023-07-23 09:02:23 +02:00
Sebastiaan van Stijn e42446f7c6 Merge pull request #3912 from cpuguy83/fix_tmpfs_mode
Fix tmpfs mode opts when dir already exists
2023-06-28 16:15:28 +02:00
Sebastiaan van Stijn f9bd4a5a2f Merge pull request #3827 from kolyshkin/no-panic
libct/cg: IsCgroup2UnifiedMode: don't panic
2023-06-28 15:29:46 +02:00
Sebastiaan van Stijn 17b335a2ee Merge pull request #3902 from kolyshkin/skip-less
ci/gha: don't skip rootless+systemd on ubuntu 22.04
2023-06-28 15:28:08 +02:00
Sebastiaan van Stijn 651c044a2b Merge pull request #3889 from kolyshkin/shellcheck-0.9
ci: bump shellcheck to 0.9.0, fix new SC2016 warnings
2023-06-28 15:26:43 +02:00
Sebastiaan van Stijn aacc27b7fe Merge pull request #3852 from kolyshkin/doc-log-level
libct: document process.LogLevel field
2023-06-28 15:22:46 +02:00
Sebastiaan van Stijn 4f5c350513 Merge pull request #3899 from kolyshkin/fix-sd-linl
docs/systemd: fix a broken link
2023-06-14 01:12:46 +02:00
Sebastiaan van Stijn d782db4536 Merge pull request #3830 from AkihiroSuda/spec-v1.1.0-rc.2
go.mod: runtime-spec v1.1.0-rc.2
2023-05-10 18:06:13 +02:00
Sebastiaan van Stijn 5a9266b068 Merge pull request #3851 from kolyshkin/bump-urfave
deps: bump urfave/cli
2023-05-01 02:06:29 +02:00
Sebastiaan van Stijn 8af2f48d9f Merge pull request #3357 from kolyshkin/more-bytes-less-strings
libct/cg/sd: optimize and test findDeviceGroup
2023-04-27 18:36:47 +02:00
Sebastiaan van Stijn 39fe1c39fc Merge pull request #3848 from kolyshkin/bump-vagrant
ci/cirrus: use vagrant from hashicorp repo, bump Fedora to 38, bump bats
2023-04-27 12:22:16 +02:00
Sebastiaan van Stijn 5726682966 Merge pull request #3813 from opencontainers/dependabot/go_modules/golang.org/x/sys-0.7.0
build(deps): bump golang.org/x/sys from 0.6.0 to 0.7.0
2023-04-05 21:01:27 +02:00
Sebastiaan van Stijn ca398783c0 Merge pull request #3730 from kolyshkin/fix-build
Dockerfile: fix build wrt new git
2023-02-09 17:21:27 +01:00
Sebastiaan van Stijn f8e2629e19 Merge pull request #3707 from Dzejrou/main
libcontainer: skip chown of /dev/null caused by fd redirection
2023-02-08 00:21:31 +01:00
Sebastiaan van Stijn 70df83fa5d Merge pull request #3719 from kolyshkin/no-clang-format
Disable clang-format
2023-02-07 15:50:35 +01:00
Sebastiaan van Stijn df47453562 Merge pull request #3460 from kolyshkin/no-regexp
Do not use regexp
2023-02-06 15:35:29 +01:00
Sebastiaan van Stijn 627e815f20 Merge pull request #3654 from AkihiroSuda/go-mod-sys-v0.1.0
go.mod: golang.org/x/*: use tagged versions
2022-11-08 22:32:06 +01:00
Sebastiaan van Stijn 6e2b46e259 Merge pull request #3636 from kolyshkin/gha-v
ci/gha: use v3 tag for actions/cache
2022-10-27 21:36:47 -04:00
Sebastiaan van Stijn fa47a92f67 Merge pull request #3565 from dharmicksai/3547
Add check for CONFIG_CGROUP_BPF in check-config.sh
2022-10-07 18:06:46 +02:00
Sebastiaan van Stijn d811a7154c Merge pull request #3628 from kolyshkin/fix-centos-7-ci-again
cirrus-ci: install EPEL on CentOS 7 conditionally
2022-10-07 17:28:57 +02:00
Sebastiaan van Stijn fa0f7f5c97 Merge pull request #3622 from opencontainers/dependabot/go_modules/github.com/cilium/ebpf-0.9.3
build(deps): bump github.com/cilium/ebpf from 0.9.1 to 0.9.3
2022-10-03 09:27:48 +02:00
Sebastiaan van Stijn 1c3b8dbaf4 Merge pull request #3606 from opencontainers/dependabot/go_modules/github.com/coreos/go-systemd/v22-22.4.0
build(deps): bump github.com/coreos/go-systemd/v22 from 22.3.2 to 22.4.0
2022-09-29 00:11:52 +02:00
Sebastiaan van Stijn 7b6f5153b8 Merge pull request #3514 from kolyshkin/go119
Add go 1.19, require go 1.18, drop go 1.17
2022-08-16 22:38:40 +02:00
Sebastiaan van Stijn 258eff101c Merge pull request #3498 from cyphar/systemd-devices-nonexistent-files
cgroups: systemd: skip adding device paths that don't exist
2022-06-08 19:03:26 +02:00
Sebastiaan van Stijn a7a45d7d27 Merge pull request #3503 from opencontainers/dependabot/go_modules/github.com/moby/sys/mountinfo-0.6.2
build(deps): bump github.com/moby/sys/mountinfo from 0.6.1 to 0.6.2
2022-06-07 09:24:41 +02:00
Sebastiaan van Stijn a51ea7c477 Merge pull request #3489 from eriksjolund/relax_sanity_check_in_getenv_int
libcontainer: relax getenv_int sanity check
2022-06-01 21:49:40 +02:00
Sebastiaan van Stijn 182d77c1a9 Merge pull request #3491 from kolyshkin/bump-ebpf-0.9.0
vendor: bump cilium/ebpf to v0.9.0
2022-05-27 10:24:26 +02:00
Sebastiaan van Stijn 94105ca31d Merge pull request #3468 from kolyshkin/no-tun
Remove tun/tap from the default device rules
2022-05-11 00:28:55 +02:00
Sebastiaan van Stijn aac018175e Merge pull request #3369 from kolyshkin/more-tests-nits
tests/int: nits and cleanups
2022-05-06 13:22:11 +02:00
Sebastiaan van Stijn da6f3b06e2 Merge pull request #3465 from crazy-max/update-libseccomp
vendor: bump seccomp/libseccomp-golang to f33da4d
2022-05-04 21:00:17 +02:00
Sebastiaan van Stijn 255fe4099e Merge pull request #3445 from kolyshkin/gha-ro
ci/gha: limit jobs permissions
2022-04-22 20:44:37 +02:00
Sebastiaan van Stijn 062fc87995 Merge pull request #3451 from dsouzai/ns_last_pid
Allow mounting of /proc/sys/kernel/ns_last_pid
2022-04-22 20:41:58 +02:00
Sebastiaan van Stijn 238717ddd3 Merge pull request #3457 from kolyshkin/ci-merge-lint-extra
ci/gha: convert lint-extra from a job to a step
2022-04-14 13:42:40 +02:00
Sebastiaan van Stijn 727aa42fd7 Merge pull request #3378 from kolyshkin/ci-verify-more
shellcheck/shfmt more files; run check-config in CI
2022-04-14 13:39:29 +02:00
Sebastiaan van Stijn 66d12b5a0b Merge pull request #3456 from kolyshkin/ci-rm-stable
ci/gha: remove stable: when installing Go
2022-04-12 09:28:18 +02:00
Sebastiaan van Stijn 36585a8f0a Merge pull request #3454 from opencontainers/dependabot/github_actions/actions/setup-go-3
build(deps): bump actions/setup-go from 2 to 3
2022-04-12 00:01:17 +02:00
Sebastiaan van Stijn 86d6898f30 Merge pull request #3375 from kolyshkin/rm-container-iface
libct: rm BaseContainer and Container interfaces
2022-03-23 21:23:50 +01:00
Sebastiaan van Stijn c4c48896eb Merge pull request #3427 from kolyshkin/add-centos-stream-9
CI/cirrus: add centos-stream-9
2022-03-23 13:46:00 +01:00
Sebastiaan van Stijn eba9367000 Merge pull request #3373 from kolyshkin/less-interfaces
Remove Factory and LinuxFactory
2022-03-23 10:14:05 +01:00
Sebastiaan van Stijn 404d9162b4 Merge pull request #3424 from kolyshkin/fix-badges
README,libct/README: fix pkg.go.dev badges
2022-03-23 00:33:06 +01:00
Sebastiaan van Stijn f6e5831cd0 Merge pull request #3420 from kolyshkin/rootlessEUIDMount
libct/configs/validate: rootlessEUIDMount: speedup
2022-03-21 17:09:54 +01:00
Sebastiaan van Stijn 51e607f2cd Merge pull request #3356 from kolyshkin/user-dbus
libct/cg/sd: simplify DetectUserDbusSessionBusAddress
2022-03-09 17:36:02 +01:00
Sebastiaan van Stijn 4e0d6898f6 Merge pull request #3370 from kolyshkin/bump-gofumpt
ci: bump golangci-lint to v1.44, golangci-lint-action to v3
2022-03-08 12:57:11 +01:00
Sebastiaan van Stijn 1515d93639 Merge pull request #3389 from kolyshkin/delegate-enoent
libct/cg/sd/v2: fix ENOENT on cgroup delegation
2022-03-04 10:00:12 +01:00
Sebastiaan van Stijn 949111237a Merge pull request #3303 from kolyshkin/labels
libcontainer: optimize utils.SearchLabels
2022-02-16 16:37:00 +01:00
Sebastiaan van Stijn e420659b2a Merge pull request #3371 from kolyshkin/bump-shellcheck
ci: shellcheck: update to 0.8.0, fix/suppress new warnings
2022-02-16 16:33:57 +01:00
Sebastiaan van Stijn 43186447b9 Merge pull request #3368 from kolyshkin/ignore-sigurg
runc run/exec: ignore SIGURG
2022-02-08 09:56:49 +01:00
Sebastiaan van Stijn ede712786c Merge pull request #3363 from kolyshkin/debug-nit
signals: fix signal name debug print
2022-02-03 10:41:56 +01:00
Sebastiaan van Stijn 7173c53906 Merge pull request #3350 from kolyshkin/mount-cmds
libct: Mount: rm {Pre,Post}mountCmds
2022-02-03 10:12:56 +01:00
Sebastiaan van Stijn e4e2a9dda4 Merge pull request #3360 from danishprakash/remove-pausing
libcontainer: remove "pausing" state
2022-02-01 23:40:31 +01:00
Sebastiaan van Stijn eddf35e546 Merge pull request #3349 from kolyshkin/list-nits
runc list: fix race with runc delete + nits
2022-01-27 10:30:16 +01:00
Sebastiaan van Stijn ca03eb7c1c Merge pull request #3352 from kolyshkin/misc
Misc nits
2022-01-27 10:24:58 +01:00
Sebastiaan van Stijn a934123d21 Merge pull request #3319 from kolyshkin/chown-not-needed
libct: Create: rm unneeded chown
2022-01-24 14:55:09 +01:00
Sebastiaan van Stijn 62133e3840 Merge pull request #3306 from kolyshkin/rdt-faster
Faster Intel RDT init if the feature is unavailable
2022-01-19 11:24:41 +01:00
Sebastiaan van Stijn 45c31f9e1f Merge pull request #3305 from kolyshkin/rdt-4
libct/intelrdt: remove unused type
2021-12-02 18:06:57 +01:00
Sebastiaan van Stijn 0c0ec3f53f Merge pull request #3302 from kolyshkin/ci-unparam
Enable unparam linter; fix/mute existing warnings
2021-11-30 23:21:30 +01:00
Sebastiaan van Stijn 0e79754c9b Merge pull request #3294 from kolyshkin/xattr
libct/system/xattrs: remove
2021-11-24 20:07:43 +01:00
Sebastiaan van Stijn e23602ebba Merge pull request #3284 from kolyshkin/ci-fedora-revert-fix
Vagrantfile.fedora: revert excluding systemd
2021-11-22 20:40:43 +01:00
Sebastiaan van Stijn 02fe5f4734 Merge pull request #3283 from kolyshkin/rootless-ro-bind-rw
Fix failure with rw bind mount of a ro fuse
2021-11-22 18:39:44 +01:00
Sebastiaan van Stijn d1f316f324 Merge pull request #3286 from chendave/cleanup
Avoid non-op when the list of `Hooks` is empty
2021-11-19 21:29:14 +01:00
Sebastiaan van Stijn 20e928875a Merge pull request #3275 from kolyshkin/rm-prlimit
libcontainer/system: rm Prlimit
2021-11-17 14:38:27 +01:00
Sebastiaan van Stijn e49007f3ad Merge pull request #3281 from kolyshkin/specconv-maps
libct/specconv: reduce init allocations, use global maps, refactor
2021-11-17 13:40:59 +01:00
Sebastiaan van Stijn 7c219d814f Merge pull request #3270 from kolyshkin/wrap-err
libct: wrap more unix errors
2021-11-14 21:16:34 +01:00
Sebastiaan van Stijn f247ad2067 Merge pull request #3280 from kolyshkin/ci-revert-kludge
Revert "ci: temporarily disable criu repo gpg check"
2021-11-13 09:44:03 +01:00
Sebastiaan van Stijn 6d35069b5e Merge pull request #3245 from kolyshkin/go116
Drop Go 1.15 support
2021-10-17 21:14:33 +02:00
Sebastiaan van Stijn b098f33caf Merge pull request #3238 from kolyshkin/wrap-exec-err
libct/system: Exec: wrap the error
2021-10-08 21:18:39 +02:00
Sebastiaan van Stijn 8e7ab26104 Merge pull request #3230 from kolyshkin/release-arch-followup
Dockerfile: fix for seccomp
2021-10-05 10:06:24 +02:00
Sebastiaan van Stijn 206c16a7bf Merge pull request #3068 from adrianreber/2021-07-07-lsm-mount-context
support changing of lsm mount context on restore
2021-09-20 18:53:04 +02:00
Sebastiaan van Stijn 2eaeea77c2 Merge pull request #3207 from kolyshkin/update-shfmt
ci/gha: bump shfmt to 3.3.1
2021-09-10 23:36:56 +02:00
Sebastiaan van Stijn 963e0146a4 Merge pull request #3158 from kolyshkin/nsenter-tests
libct/nsenter/nsenter_test.go: fix and improve
2021-09-03 16:55:58 +02:00
Sebastiaan van Stijn 7fcfb3fad6 Merge pull request #3030 from kolyshkin/openat2-improve
libct/cg/OpenFile: fix/improve openat2 handling
2021-09-03 16:54:39 +02:00
Sebastiaan van Stijn b144f3d382 Merge pull request #2825 from lifubang/nodelete
proposal: add --keep to runc run
2021-08-31 10:04:58 +02:00
Sebastiaan van Stijn 8b59b768a9 Merge pull request #3182 from cyphar/revert-3159
Revert "libct/devices: change devices.Type to be a string"
2021-08-25 10:55:04 +02:00
Sebastiaan van Stijn f67f1efc70 Merge pull request #3110 from kolyshkin/parse-devices
libct/cg/devices: stop using regex
2021-08-24 08:49:19 +02:00
Sebastiaan van Stijn 926a9a088f Merge pull request #3171 from kolyshkin/try-bullseye
Dockerfile: switch to bullseye
2021-08-19 18:16:11 +02:00
Sebastiaan van Stijn 8e6871a3b1 Merge pull request #3116 from kolyshkin/ci-add-criu-dev
ci/gha: add latest criu-dev test run
2021-08-19 09:46:52 +02:00
Sebastiaan van Stijn e53e97a875 Merge pull request #3164 from kinvolk/rata/make-no-buildtags
CI: Validate compilation without buildtags
2021-08-17 23:04:50 +02:00
Sebastiaan van Stijn ca4433f613 Merge pull request #3153 from kolyshkin/cirrus-robust
.cirrus.yml: simplify for centos, retry yum
2021-08-17 15:34:39 +02:00