Commit Graph

48 Commits

Author SHA1 Message Date
criyle
5f66dc11f5 fix(config): fix syscall check on arm64 2025-08-13 22:22:53 +00:00
criyle
2d0d63be76 build(deps): update upstream seccomp library to fix ptracer
elastic/go-seccomp-bpf#40
fixes #8
2025-06-21 16:54:37 -04:00
criyle
7aa1c5a28b refactor: normalize error message & replace path with filepath 2025-05-25 22:02:23 -04:00
criyle
ea0b084794 runprog: ensure alway re-evaluate
related #14
2025-03-14 02:45:32 -04:00
criyle
98f24cf60a runprog: re-evaluate status after retrieve cgroup measurement
related #14
2025-03-14 02:41:55 -04:00
criyle
f8361a08a0 forkexec: only sync when syncFunc exists
#13
2025-02-20 21:45:03 +00:00
criyle
d32acd7591 cgroup&container: add ability to utilize cgroup fd with clone3
#13
2025-02-20 20:29:20 +00:00
criyle
f15b953065 container: syncAfterExec to sync after execve rather than before 2025-02-20 19:48:39 +00:00
criyle
51b53cf60b runner: add procPeak as measurement of peak process count 2025-02-20 03:12:28 +00:00
criyle
0b6b557947 cgroup: add pids.peak for cgroup v2 kernel >= 6.1 2025-02-20 01:51:59 +00:00
criyle
f6274fd54c cgroup: rename types to remove stutters 2024-02-05 08:53:37 +00:00
criyle
231f3cb58f cgroup: refactor to support creating child cgroup directly 2023-11-09 10:21:07 +00:00
criyle
bd846192aa deps: upgrade to go1.21 2023-09-27 13:43:12 +00:00
criyle
5eeaadffdf container: add support for temp root dir 2022-07-15 23:46:42 -07:00
criyle
ca60fcad98 *: fix macOS build for go1.18 2022-04-03 02:45:53 -07:00
criyle
c6519b09ec cgroup: add support of cgroup v2 nesting 2021-12-25 23:04:01 +00:00
criyle
5e5b00688a cgroup: implement cgroup v2 2021-12-24 10:42:42 +00:00
criyle
2889743b71 cgroup: initialize support for v2 implementation 2021-12-23 20:38:31 -08:00
criyle
b5d300a0e8 rlimit: restrict open file count 2021-11-12 00:23:34 -08:00
criyle
eb0f2cbc89 container: create symlinks for rootfs 2021-11-11 23:56:53 -08:00
criyle
26c5f63dcb runner: async -> sync 2021-06-05 16:16:05 -07:00
criyle
ebab07ec35 deprecate io/ioutil 2021-02-24 00:00:51 -08:00
criyle
9e8c4593c6 Update rlimit & remove discard reader 2021-02-06 12:21:22 -08:00
criyle
464c5ac932 Backwards compatibility for older kernels >= 3.10 2021-01-21 00:20:57 -08:00
criyle
7603109e33 Refactor seccomp ptrace & improve container 2020-12-23 12:12:43 -08:00
criyle
7ebe4a999d Add ability to use seccomp filter for container 2020-12-12 12:16:28 -08:00
criyle
c832edba58 Refactor container mounts 2020-11-21 23:50:06 -08:00
criyle
d664e1eae8 set pgid on MacOS 2020-05-15 19:01:10 -04:00
criyle
bc0b7f92f1 Add MacOS sandbox support 2020-05-15 03:02:04 -04:00
criyle
b64cc09c06 Add MacOS forkExec 2020-05-13 16:37:59 -04:00
criyle
2489317fb7 Add _linux suffix to linux only packages 2020-05-01 17:10:23 -04:00
criyle
5f133175fd Add ability unshare cgroup after sync 2020-03-20 18:50:31 -04:00
criyle
4f2257a187 Remove types pkg & update documents
- move types pkg into runner
- add documentations for cgroup & container
- add benchmakr for cgroup & container
2020-03-02 03:14:13 -05:00
criyle
cf5ebfb3ef Handle potential wait4 EINTR & add memory cgroup 2020-03-01 01:34:40 -05:00
criyle
c21ae19d18 reduce container communication overhead 2020-02-27 23:30:32 -05:00
criyle
f2dacb5752 rename daemon -> container 2020-02-19 05:36:23 -05:00
criyle
a24933ac82 update mounts 2020-02-19 01:13:25 -05:00
criyle
bfedda0ba2 adapted to context 2020-02-12 03:01:37 -05:00
criyle
192a09142c add support to set credentials 2019-11-02 17:05:59 -07:00
criyle
348ed481d3 add ability to omit sub-cgroup if not exists 2019-10-24 01:31:21 -07:00
criyle
6e46a73289 update to go 1.13 & fix typos 2019-10-14 00:00:58 -07:00
criyle
4001c7c767 add waitpid resource consumptions 2019-09-28 17:43:05 -07:00
criyle
31edacf69e allow customize mount points for container 2019-09-25 01:28:04 -07:00
criyle
c8d682f4b6 add mount builder & fix rlimits unit 2019-09-18 01:42:10 -07:00
criyle
be668a5e75 fix typo 2019-09-05 21:06:22 -07:00
criyle
2968ef7e27 refactor config 2019-09-01 02:16:41 -07:00
criyle
86c5e2f377 wrap and decouplin libseccomp 2019-09-01 01:36:01 -07:00
criyle
7b06ce65ac normalize naming schema 2019-08-30 00:57:07 -07:00