Ryan Wilson

This PR adds two settings private and strict to the ProtectControlGroups= property. Private will unshare the cgroup namespace and mount a read-write private cgroup2 filesystem at /sys/fs/cgroup. Strict does the...

ProtectHome=tmpfs does not make /home, /run/user and /root read-only

1

### systemd version the issue has been seen with 257 ### Used distribution Centos 9 Stream ### Linux kernel version used kernel-6.9 ### CPU architectures issue was seen on x86_64...

Add PrivateControlGroups= setting to service units

6

### Component systemd ### Is your feature request related to a problem? Please describe Meta is migrating its Twine container engine to use systemd transient units for spawning containers -...

Use global scratch buffers for reading and writing map values

11

This PR continues fixing https://github.com/bpftrace/bpftrace/issues/3431, migrating map values to scratch global buffers. This will allow large strings in map values, one of the primary use cases for large strings. We...

Add --help for bfcli

1

This adds a help text for bfcli as it currently prints the following which isn't very helpful: ``` $ build/output/sbin/bfcli --help error : unrecognized object '(null)' and action '(null)': Invalid...

Allow fetching rules and counters via bfcli

13

bpfilter daemon keeps a list of active rules and it also writes counters to BPF maps. Sure, we can access the rules/counters via bpftool - counter maps are named bf_cmap_XXX...