Commit Graph

85 Commits

Author SHA1 Message Date
criyle
c233f64485 linuxcontainer: fix cgroup v2 memory usage 2022-02-12 08:19:13 +00:00
criyle
43f1e0dab2 envexec: reduce goroutine usage
doc: update cgroup v2
2022-01-31 09:42:23 +00:00
criyle
5fd53e07ca filestore: use math/rand & reduce fileId to 40bit 2022-01-08 19:25:23 -08:00
criyle
dd4c6ee994 cgroup: add cgroup v2 support in containers 2021-12-25 23:28:13 +00:00
criyle
359fda504e cgroup: add support of cgroup v2 2021-12-24 23:02:17 -08:00
criyle
96ad6f979b container: add ability to mask path 2021-11-28 23:26:57 -08:00
criyle
5a79fa24f7 *: bump dependency versions 2021-11-19 15:09:43 -08:00
criyle
049d26a179 linuxc: limit open file count & add stdio devices 2021-11-12 01:35:47 -08:00
criyle
d8581a0c0c linuxcontainer: allow restrict usage of CPU and CPU set
- change cpuRate to int and 1000 means 1 CPU 100%
2021-10-30 23:25:30 -07:00
criyle
7f0b066258 linuxcontainer: do not change uid/gid by default 2021-09-27 23:57:46 -07:00
criyle
1326a38b25 model: fix gRPC segv caused by mmap before encoding
- fix mount proc argument
2021-09-20 19:00:03 -07:00
criyle
7e5060b349 gomod: fix replace 2021-09-19 15:48:45 -07:00
criyle
78bb4d85de filestore: use /dev/shm instead of memory as file storage
- increase default tmpfs size to 128M
- add /config to get file store path
- remove memory only file store

close #20
2021-09-19 15:47:24 -07:00
criyle
841bc95e61 *: upgrade to go 1.17 2021-08-18 22:13:13 -07:00
criyle
24deb3aeac linuxcontainer: add CAP_SYS_RESOURCE 2021-08-10 00:00:37 -07:00
criyle
176a61e96e sandbox: add error location & ignore unshare cgroup error 2021-08-04 22:46:47 -07:00
criyle
d6042729e5 *: bump dependecies with go1.16.6 2021-07-15 19:03:05 -07:00
criyle
c34a83b617 file: get /file contains original name 2021-06-22 01:15:01 -07:00
criyle
e99bcce3db version: add pipeProxy feature flag & udpate dependencies 2021-06-12 17:45:01 -07:00
criyle
46ec099685 linuxcontainer: bump dependency versions go1.16.5 2021-06-05 17:07:27 -07:00
criyle
9dba0d0b09 doc: update README 2021-05-08 14:55:51 -07:00
criyle
64ba821390 metrics: add metrics for environment counts 2021-05-01 21:01:47 -07:00
criyle
4cd2ed2bde mod: bump dependency versions 2021-04-25 18:03:47 -07:00
criyle
ba8d3924d8 feat: add timeout support to filestore
resolve #11
2021-04-17 18:13:18 -07:00
criyle
222eb97b25 docs: 加入中文文档 2021-04-06 02:03:19 -07:00
criyle
e2bddd3216 linuxcontainer: fix fd leak 2021-03-30 21:41:48 -07:00
criyle
eda1962b0c linuxcontainer: host async wait 2021-03-29 22:52:02 -07:00
criyle
d799f614f2 linuxcontainer: use async executor 2021-03-29 01:25:10 -07:00
criyle
f624a0f6a8 linuxcontainer: bump dependency versions 2021-03-27 19:27:43 -07:00
criyle
9dec36d395 filestore: refactor uniqure id generator 2021-03-19 00:28:11 -07:00
criyle
2acca7d71c envexec: refactor to not use empty interface 2021-03-13 16:08:51 -08:00
Jason A. Donenfeld
5ce2718fe2 winc: use uintptr variable for key parameter of GetQueuedCompletionStatus
As of https://github.com/golang/sys/commit/683adc9d29d7 this function
now takes a uintptr, in order to avoid a buffer overflow.
2021-02-25 02:44:36 +01:00
criyle
4267ddee3c feat(*): deprecate ioutil & fix kernel version check 2021-02-24 00:16:35 -08:00
criyle
20c0ae0603 feat(*): bump to go 1.16 2021-02-21 19:47:53 -08:00
criyle
8d3bf1bf62 feat(sandbox): add strict memory limit
- remove rlimit data when cgroup enabled
- add `strictMemoryLimit` to request parameter to re-enable rlimit data limit
2021-02-06 12:46:39 -08:00
criyle
2213b5b092 feat(env): compatibility with kernel >= 3.10 2021-01-21 00:44:01 -08:00
criyle
7ca25c8659 bump dependency versions 2021-01-09 11:25:12 -08:00
criyle
0db852c242 feat(worker): add default file copy out max 2021-01-09 00:22:51 -08:00
criyle
2df163126c Refactor executor server to multiple modules 2020-12-27 16:45:48 -08:00
criyle
f5dff9ca57 Refactor package structure & debug outputs 2020-12-25 17:25:09 -08:00
criyle
65630fbbcf Fix potential cgroup null pointer 2020-12-17 22:57:43 -08:00
criyle
4909468c48 Fix container reset (affacting v0.8.1 - v0.9.2) 2020-12-17 22:31:05 -08:00
criyle
04cfb36722 Add support to load a seccomp filter 2020-12-13 21:08:52 -08:00
criyle
ed5b820266 Add config to specifies credential start 2020-12-12 21:46:09 -08:00
criyle
e1f8c954e0 Add configuration to OutputLimit & CpuSet 2020-12-06 18:45:56 -08:00
criyle
5c61c1fca6 Add support to config extraMemoryLimit 2020-12-05 15:06:34 -08:00
criyle
a807a66176 Refactor config parsing 2020-11-29 09:00:12 -08:00
criyle
fb9dff26b6 Bump dependencies versions 2020-11-28 15:21:21 -08:00
criyle
e5c0f8ec40 Update dependencies 2020-09-22 19:56:24 -07:00
criyle
d156258b6f FIX TYPO: parallism -> parallelism 2020-09-06 00:33:16 -07:00