Commit Graph

18 Commits

Author SHA1 Message Date
criyle
20c0ae0603 feat(*): bump to go 1.16 2021-02-21 19:47:53 -08:00
criyle
8d3bf1bf62 feat(sandbox): add strict memory limit
- remove rlimit data when cgroup enabled
- add `strictMemoryLimit` to request parameter to re-enable rlimit data limit
2021-02-06 12:46:39 -08:00
criyle
2213b5b092 feat(env): compatibility with kernel >= 3.10 2021-01-21 00:44:01 -08:00
criyle
a0cc4acbe8 Reduce build size 2021-01-09 00:38:46 -08:00
criyle
2df163126c Refactor executor server to multiple modules 2020-12-27 16:45:48 -08:00
criyle
f5dff9ca57 Refactor package structure & debug outputs 2020-12-25 17:25:09 -08:00
criyle
04cfb36722 Add support to load a seccomp filter 2020-12-13 21:08:52 -08:00
criyle
e3111eef82 Fix bind mount using relative path 2020-12-13 19:56:17 -08:00
criyle
4bf6f869f5 Add ability to limit cpu usage rate by CFS cgroup 2020-12-12 23:44:01 -08:00
criyle
b1e9e0d555 Add ability to customize container uid&gid 2020-12-12 22:02:37 -08:00
criyle
ed5b820266 Add config to specifies credential start 2020-12-12 21:46:09 -08:00
criyle
e1f8c954e0 Add configuration to OutputLimit & CpuSet 2020-12-06 18:45:56 -08:00
criyle
64788f27d6 customizable workDir, hostName, domainName 2020-11-29 16:13:06 -08:00
criyle
a807a66176 Refactor config parsing 2020-11-29 09:00:12 -08:00
criyle
fb9dff26b6 Bump dependencies versions 2020-11-28 15:21:21 -08:00
criyle
405a90a0d1 fix bind mount for newer kernel 2020-08-08 14:44:23 -07:00
criyle
afd580cde3 Executor server can run without root privilege
- Docker `--privileged` is still required for unshare ...
2020-05-19 17:28:49 -04:00
criyle
411d74a087 split ffi from executor server 2020-05-19 16:14:03 -04:00