Commit Graph

26 Commits

Author SHA1 Message Date
criyle
6195204dcc envexec: add optional flag for copyOut files
fix #14
2021-06-05 20:24:08 -07:00
criyle
46ec099685 linuxcontainer: bump dependency versions go1.16.5 2021-06-05 17:07:27 -07:00
criyle
64ba821390 metrics: add metrics for environment counts 2021-05-01 21:01:47 -07:00
criyle
5acb22fab6 linuxcontainer: report error if cgroup set failed 2021-03-21 18:53:15 -07:00
criyle
9dec36d395 filestore: refactor uniqure id generator 2021-03-19 00:28:11 -07:00
criyle
2acca7d71c envexec: refactor to not use empty interface 2021-03-13 16:08:51 -08:00
Jason A. Donenfeld
5ce2718fe2 winc: use uintptr variable for key parameter of GetQueuedCompletionStatus
As of https://github.com/golang/sys/commit/683adc9d29d7 this function
now takes a uintptr, in order to avoid a buffer overflow.
2021-02-25 02:44:36 +01:00
criyle
4267ddee3c feat(*): deprecate ioutil & fix kernel version check 2021-02-24 00:16:35 -08:00
criyle
20c0ae0603 feat(*): bump to go 1.16 2021-02-21 19:47:53 -08:00
criyle
8d3bf1bf62 feat(sandbox): add strict memory limit
- remove rlimit data when cgroup enabled
- add `strictMemoryLimit` to request parameter to re-enable rlimit data limit
2021-02-06 12:46:39 -08:00
criyle
2213b5b092 feat(env): compatibility with kernel >= 3.10 2021-01-21 00:44:01 -08:00
criyle
a0cc4acbe8 Reduce build size 2021-01-09 00:38:46 -08:00
criyle
2df163126c Refactor executor server to multiple modules 2020-12-27 16:45:48 -08:00
criyle
f5dff9ca57 Refactor package structure & debug outputs 2020-12-25 17:25:09 -08:00
criyle
04cfb36722 Add support to load a seccomp filter 2020-12-13 21:08:52 -08:00
criyle
e3111eef82 Fix bind mount using relative path 2020-12-13 19:56:17 -08:00
criyle
4bf6f869f5 Add ability to limit cpu usage rate by CFS cgroup 2020-12-12 23:44:01 -08:00
criyle
b1e9e0d555 Add ability to customize container uid&gid 2020-12-12 22:02:37 -08:00
criyle
ed5b820266 Add config to specifies credential start 2020-12-12 21:46:09 -08:00
criyle
e1f8c954e0 Add configuration to OutputLimit & CpuSet 2020-12-06 18:45:56 -08:00
criyle
64788f27d6 customizable workDir, hostName, domainName 2020-11-29 16:13:06 -08:00
criyle
a807a66176 Refactor config parsing 2020-11-29 09:00:12 -08:00
criyle
fb9dff26b6 Bump dependencies versions 2020-11-28 15:21:21 -08:00
criyle
405a90a0d1 fix bind mount for newer kernel 2020-08-08 14:44:23 -07:00
criyle
afd580cde3 Executor server can run without root privilege
- Docker `--privileged` is still required for unshare ...
2020-05-19 17:28:49 -04:00
criyle
411d74a087 split ffi from executor server 2020-05-19 16:14:03 -04:00