runtime-spec
runtime-spec copied to clipboard
opencontainers
OCI Runtime Specification
Linux kernel 5.13 adds support for Landlock Linux Security Module (LSM). This allows unprivileged processes to create safe security sandboxes that can securely restrict the ambient rights (e.g. global filesystem...
Clarify that device nodes need not be under `/dev`, but that the runtime need to be informed of all the device nodes that are used by the container. Virtual-machine based...
add the domainname entity so that container runtimes can add special handling similar to hostname. The current workaround of adding a sysctl for kernel.domainname only works with rootful execution in...
For vm-based runtimes, like Kata Containers, the hooks become confused, some hooks may need run on the host side, but others may need to run on the guest side. Add...
The time namespace is a new kernel feature available in 5.6+ to isolate the system monotonic and boot-time clocks. I'm sorry I mistook and closed the existing request https://github.com/opencontainers/runtime-spec/pull/1062 Signed-off-by:...
Linux kernel 5.14 adds the support for Core Scheduling. This allows setting and copying core scheduling 'task cookies' between the container process and the threads (PID), processes (TGID), and process...
Linux 5.14 adds the support for [Core Scheduling](https://lore.kernel.org/lkml/[email protected]/). Core scheduling support allows userspace to define groups of tasks that can share a core. These groups can be specified either for...
Burstable CFS controller is introduced in Linux 5.14. This helps with parallel workloads that might be bursty. They can get throttled even when their average utilization is under quota. And...
(related to https://github.com/containerd/containerd/pull/4357/files#r448837520) Runc tagged a new release (v1.0.0-rc91), and is currently depending on a non-tagged version of the runtime-spec. With various distribution packagers requiring tagged releases, and with go...
In regards to opencontainers/tob#95 If I do a quick audit of all of authors and last commit dates, i.e., git log --pretty=%an%x09%ad | awk -F$'\t' '!seen[$1]++' Tianon Gravi Fri Mar...
