everzakov

os/exec: Cmd.Start should fail when called more than once

13

### Go version go version go1.24.6 linux/amd64 ### Output of `go env` in your module/workspace: ```shell AR='ar' CC='gcc' CGO_CFLAGS='-O2 -g' CGO_CPPFLAGS='' CGO_CXXFLAGS='-O2 -g' CGO_ENABLED='1' CGO_FFLAGS='-O2 -g' CGO_LDFLAGS='-O2 -g' CXX='g++' GCCGO='gccgo'...

Add vTPM specification

25

Add the vTPM (virtual Trusted Platform Module) specification to the documentation, config.go and schema description. Runtime uses this specification to create vTPMs and pass them to the container. This virtual...

runc 1.4 breaks the rule that cmd.Start is called only once that's why process Wait can return an error.

1

### Description In [startWithCgroupFD](https://github.com/opencontainers/runc/blob/main/libcontainer/process_linux.go#L384) function the cmd.Start is called twice (if the first one was unsuccessful). However it breaks the [rule](https://github.com/golang/go/commit/65858a146e585b74d41db63f3821d6a150f36d49) that: ``` // A Cmd cannot be reused after...

libct: setns process recreate cmd object before calling the first start

1

Currently there is an golang issue https://github.com/golang/go/issues/76746 . If the cmd.Start is called twice (the first call was unsuccessful) then Cmd.Wait can return an error (because goroutines' pipes will be...

Feature: implement swtpm in runc

2

This patch series adds a vTPM support for Linux to libcontainer. The functionality is based on swtpm_cuse binary to create cuse device on which a TPM emulator listen for TPM...

Feature add VTPM support for runc container

1

This issue is to bind the creation of virtual TPM devices with container creation. The virtual TPM devices can be used to perform attestation (e.g using the Direct Anonymous Attestation...