runc

runc copied to clipboard

Fuzzing: Add new fuzzer

14

This PR adds a fuzzer that creates a container with a randomized configuration and then calls `State()`. Furthermore a seed and a dictionary is added to help the fuzzer mutate...

AdamKorcz

fix systemd cgroup path error in integration test

3

When I run integration test with systemd cgroup driver in a container, I got some errors like this: ``` root@f7c63618dde3:/opt/mygo/src/github.com/opencontainers/runc# RUNC_USE_SYSTEMD=1 bats tests/integration/delete.bats ✓ runc delete ✓ runc delete --force...

lifubang

libcontainer/notify_linux*: adjust the file mode

3

This commit adjusts the file mode to use the latest golang style In addition to that, I changed those modes from 0700 to 0600 as same as #2636 Related to...

KentaTada

libct: update namespaces handling in the currentState

4

First determine if the namespace already exists, so it's clearer that it's handling namespaces that aren't included in the `c.config.Namespaces

Iceber

libcontainer: the fstype argument is ignored for bind mount

9

`"bind"` is confusing as a `fstype` argument. ```go unix.Mount(node.Path, dest, "bind", unix.MS_BIND, "") ``` And the `fstype` argument is ignored for bind mount. ```go func Mount(source string, target string, fstype...

Iceber

Create codeql-analysis.yml

3

Signed-off-by: Chris Aniszczyk

caniszczyk

Move integration tests to Ubuntu Focal

38

Hello! Following up on the requests of https://github.com/opencontainers/runc/pull/2229 Here I moved all the integration tests from busybox to debian. This involved the following three operations: - find and replace all...

RenaudWasTaken

Add --allow-speculation option to disable IBPB/STIBP mitigation

2

In https://github.com/opencontainers/runc/issues/2430#issuecomment-633763854, I considered disabling IBPB/STIBP to improve the performance impact on bytecode interpreters. This commit adds the flag which disables IBPB/STIBP mitigation for container. Signed-off-by: Kenta Tada

KentaTada

Recursively thaw freezer subcgroups during SIGKILL

29

Fixes #2105 This PR is offered as an example of what I think would work. Unfortunately, it's kinda breaking some abstractions, and someone who knows the runC codebase could probably...

percontation

Support for non-prefix mount for cpuset

10

On some OS (such as Android), the cpuset cgroup is mounted with "noprefix" option. So there is no "cpuset.xxx" but just "xxx" under cpuset subsystem. The original issue is here...

sophy228