Commit Graph

41 Commits

Author SHA1 Message Date
criyle
3734a92c4b linuxcontainer: ignore signals and unresponsive containers 2022-08-09 21:29:35 -07:00
criyle
80633d0acd linuxcontainer: use temp directory as root 2022-07-15 23:57:20 -07:00
criyle
4b6ab1923c mac: fix Xcode clang compile 2022-04-03 03:49:48 -07:00
criyle
aeafe49334 mac: ignore memory limit 2022-04-03 03:09:20 -07:00
criyle
105980bb73 *: bump to go1.18 2022-03-20 23:40:21 -07:00
criyle
fcb56ae242 container: fix build by using unix package 2022-03-13 11:18:56 +00:00
criyle
227f398662 container: add support to copy into sub-directory 2022-03-13 11:13:33 +00:00
criyle
c233f64485 linuxcontainer: fix cgroup v2 memory usage 2022-02-12 08:19:13 +00:00
criyle
dd4c6ee994 cgroup: add cgroup v2 support in containers 2021-12-25 23:28:13 +00:00
criyle
359fda504e cgroup: add support of cgroup v2 2021-12-24 23:02:17 -08:00
criyle
96ad6f979b container: add ability to mask path 2021-11-28 23:26:57 -08:00
criyle
049d26a179 linuxc: limit open file count & add stdio devices 2021-11-12 01:35:47 -08:00
criyle
d8581a0c0c linuxcontainer: allow restrict usage of CPU and CPU set
- change cpuRate to int and 1000 means 1 CPU 100%
2021-10-30 23:25:30 -07:00
criyle
7f0b066258 linuxcontainer: do not change uid/gid by default 2021-09-27 23:57:46 -07:00
criyle
78bb4d85de filestore: use /dev/shm instead of memory as file storage
- increase default tmpfs size to 128M
- add /config to get file store path
- remove memory only file store

close #20
2021-09-19 15:47:24 -07:00
criyle
6195204dcc envexec: add optional flag for copyOut files
fix #14
2021-06-05 20:24:08 -07:00
criyle
46ec099685 linuxcontainer: bump dependency versions go1.16.5 2021-06-05 17:07:27 -07:00
criyle
64ba821390 metrics: add metrics for environment counts 2021-05-01 21:01:47 -07:00
criyle
5acb22fab6 linuxcontainer: report error if cgroup set failed 2021-03-21 18:53:15 -07:00
criyle
9dec36d395 filestore: refactor uniqure id generator 2021-03-19 00:28:11 -07:00
criyle
2acca7d71c envexec: refactor to not use empty interface 2021-03-13 16:08:51 -08:00
Jason A. Donenfeld
5ce2718fe2 winc: use uintptr variable for key parameter of GetQueuedCompletionStatus
As of https://github.com/golang/sys/commit/683adc9d29d7 this function
now takes a uintptr, in order to avoid a buffer overflow.
2021-02-25 02:44:36 +01:00
criyle
4267ddee3c feat(*): deprecate ioutil & fix kernel version check 2021-02-24 00:16:35 -08:00
criyle
20c0ae0603 feat(*): bump to go 1.16 2021-02-21 19:47:53 -08:00
criyle
8d3bf1bf62 feat(sandbox): add strict memory limit
- remove rlimit data when cgroup enabled
- add `strictMemoryLimit` to request parameter to re-enable rlimit data limit
2021-02-06 12:46:39 -08:00
criyle
2213b5b092 feat(env): compatibility with kernel >= 3.10 2021-01-21 00:44:01 -08:00
criyle
a0cc4acbe8 Reduce build size 2021-01-09 00:38:46 -08:00
criyle
2df163126c Refactor executor server to multiple modules 2020-12-27 16:45:48 -08:00
criyle
f5dff9ca57 Refactor package structure & debug outputs 2020-12-25 17:25:09 -08:00
criyle
04cfb36722 Add support to load a seccomp filter 2020-12-13 21:08:52 -08:00
criyle
e3111eef82 Fix bind mount using relative path 2020-12-13 19:56:17 -08:00
criyle
4bf6f869f5 Add ability to limit cpu usage rate by CFS cgroup 2020-12-12 23:44:01 -08:00
criyle
b1e9e0d555 Add ability to customize container uid&gid 2020-12-12 22:02:37 -08:00
criyle
ed5b820266 Add config to specifies credential start 2020-12-12 21:46:09 -08:00
criyle
e1f8c954e0 Add configuration to OutputLimit & CpuSet 2020-12-06 18:45:56 -08:00
criyle
64788f27d6 customizable workDir, hostName, domainName 2020-11-29 16:13:06 -08:00
criyle
a807a66176 Refactor config parsing 2020-11-29 09:00:12 -08:00
criyle
fb9dff26b6 Bump dependencies versions 2020-11-28 15:21:21 -08:00
criyle
405a90a0d1 fix bind mount for newer kernel 2020-08-08 14:44:23 -07:00
criyle
afd580cde3 Executor server can run without root privilege
- Docker `--privileged` is still required for unshare ...
2020-05-19 17:28:49 -04:00
criyle
411d74a087 split ffi from executor server 2020-05-19 16:14:03 -04:00