Cory Snider comments

Results 223 comments of


                                            Cory Snider

Added API to set ephemeral port allocator range.

See https://github.com/moby/moby/pull/40055#issuecomment-986711712

Delete orphaned vxlan interface in host namespace

Closing in favor of https://github.com/moby/moby/pull/42548

Use hcsshim osversion package for version checks, instead of docker/docker/pkg/system

Obsoleted by https://github.com/moby/moby/pull/43254

Ipamutils: various cleanups and refactor

- Superseded by https://github.com/moby/moby/pull/44827

Use Optimistic DAD (RFC 4429) when available

Closing in favor of https://github.com/moby/moby/pull/42746

libct/nsenter: namespace the bindfd shuffle

Rebased. @cyphar PTAL

libct/nsenter: namespace the bindfd shuffle

This PR has languished for far too long [without any feedback from the maintainer who requested changes](https://github.com/opencontainers/runc/blob/ba58ee9c3b9550c3e32b94802b0fb29761955290/MAINTAINERS_GUIDE.md?plain=1#L26), even after I made changes which directly address the reason that changes were...

Calico unconditionally drops VXLAN packets that are not related to Calico

I've been working on a fix for https://github.com/moby/moby/issues/43382 and noticed the mention link back to here. [RedHat decided to deprecate the `xt_u32` kernel module](https://bugzilla.redhat.com/show_bug.cgi?id=2061288) in RHEL 8 and remove it...

Calico unconditionally drops VXLAN packets that are not related to Calico

@yoheiueda that's true, but only to avoid switching up required dependencies on unaffected systems in a security patch release. I am currently cooking up a moby/moby PR which drops the...

docker, dockerd and containerd stuck waiting on futex

Does the issue reproduce with a more recent kernel? The symptoms are very reminiscent of #44763 and given that both dockerd and containerd hang a kernel bug seems like the...