Mike Zappa

Route should include dev name

1

The Route struct currently does not have an easy way to associate a Route with a interface. We should include the device name as a field to the Route struct...

Updating the CNI version to the latest release

CNS Possibly Not Handling Error Correctly and Possibly Not Releasing IP Address

4

I have not observed this however while reading the code, I noticed this as a possible condition that may not release the ip address. https://github.com/Azure/azure-container-networking/blob/a2a2ab89b94e68245f29118ce9c450517b8cee01/cns/fsnotify/fsnotify.go#L60 If os.Open(..) returns an error,...

Provide 'capability profiles' enabling the ability to run containers without certain capabilties such as NET_RAW

2

This PR resolves #10434 We introduce 'capability profiles' and have two values. default (the exact same capabilities today) reduced (we remove net_raw, audit_write, mknod, and setfcap) If not set we...

Implement Linux LandLock into runc (POC/WIP)

3

I found the Linux Landlock feature last night and thought it had several usecases in the container/k8s ecosystem. I then ended up finding a presentation from one of the maintainers...