runtime-tools
runtime-tools copied to clipboard
opencontainers
OCI Runtime Tools
Switch to the latest version of the now go module compatible release.
Landlock is a Linux feature that enables creating security sandboxes (see https://docs.kernel.org/userspace-api/landlock.html). Allow the three related system calls (available since Linux 5.13): landlock_create_ruleset, landlock_add_rule, and landlock_restrict_self. Signed-off-by: Mickaël Salaün
Hi, I just hit https://github.com/opencontainers/runtime-tools/pull/676 again when updating vendor dependencies for a tool, because runtime-tools hasn't had a release since then. Any chance we can get one? Thanks!
The recommended replacement does not work because other code paths expect an initialized envCacheMap. Fixes #720
We want to use the Umask field in Podman and potentially CRI-O, would prefer to use a release version if possible.
This is a carry of #688, using a slightly different fix. In addition, it adds a test case, and fixes the error texts. Closes: https://github.com/opencontainers/runtime-tools/pull/688
All clone flags should be denied as default profile. Also x/sys should be used instead of syscall. Signed-off-by: Kenta Tada
* [x] remove travis (it is now defunct and blocking merges) * [x] switch to github actions * [ ] switch to Github CODEOWNERS * [x] remove pullapprove
