runc

runc copied to clipboard

Why Runc do bind mount config.rootfs to config.rootfs while it create container ?

11

In rootfs_linux.go prepareRoot(), Runc bind mount config.Rootfs to config.Rootfs . Why this step is necessary? In my centos 8.2, while graphdriver is overlayfs2, it seem that this step can be...

Marshalzxy

Support `LinuxDeviceCgroup` updates

5

To be able to adjust device permissions at runtime, this issue seeks to implement support for Linux Device CGroup updates. It is a prerequisite to get such support in Moby/Docker,...

agners

Use go1.16 "embed" to set version from VERSION file

15

This allows building runc without passing the VERSION build-arg, but requires go 1.16 or up. Unfortunately, there's no easy way to get the git-commit from the filesystem (possibly through `.git/logs/HEAD`,...

thaJeztah

libcontainer/userns: simplify, and separate from "user" package.

10

follow-up to https://github.com/opencontainers/runc/pull/2850 ~(only last commit is new)~ merged This makes libcontainer/userns self-dependent, largely returning to the original implementation from lxc. The `uiMapInUserNS` is kept as a separate function for...

thaJeztah

Add "Update with rebase" button

6

We were seeing 2 or 3 cases when merging two pull requests results in a non-compilable code in main branch. This is because PRs are usually not rebased. I have...

kolyshkin

``` === RUN TestWriteCgroupFileHandlesInterrupt file_test.go:38: Failed to write 1147642 on attempt 99066: failed to write "1147642": write /sys/fs/cgroup/memory/test-eint-174937648/memory.limit_in_bytes: no such device --- FAIL: TestWriteCgroupFileHandlesInterrupt (0.96s) ``` From https://cirrus-ci.com/task/5995808356040704, while testing...

kolyshkin

[RFC] enable discussions

8

**Problem**: there are quite a few new issues filed that are not bug reports, but rather some questions or comments about runc. **Current solution**: mark those with `question` label (thanks...

kolyshkin

libct/cg: add CFS bandwidth burst for CPU

2

Burstable CFS controller is introduced in Linux 5.14. This helps with parallel workloads that might be bursty. They can get throttled even when their average utilization is under quota. And...

kailun-qin

Support idmapped mount (merged in kernel 5.12)

12

ref: https://github.com/containerd/containerd/pull/4734

tuananh

Commands run via runc exec do not get killed when remote client disconnects

9

This has grown to become an issue in our kubernetes clusters: when a user has an `exec` shell inside a container and their connection dies, the command being executed inside...

PaulFurtado