criyle
|
5f66dc11f5
|
fix(config): fix syscall check on arm64
|
2025-08-13 22:22:53 +00:00 |
|
criyle
|
2d0d63be76
|
build(deps): update upstream seccomp library to fix ptracer
elastic/go-seccomp-bpf#40
fixes #8
|
2025-06-21 16:54:37 -04:00 |
|
criyle
|
7aa1c5a28b
|
refactor: normalize error message & replace path with filepath
|
2025-05-25 22:02:23 -04:00 |
|
criyle
|
ea0b084794
|
runprog: ensure alway re-evaluate
related #14
|
2025-03-14 02:45:32 -04:00 |
|
criyle
|
98f24cf60a
|
runprog: re-evaluate status after retrieve cgroup measurement
related #14
|
2025-03-14 02:41:55 -04:00 |
|
criyle
|
f8361a08a0
|
forkexec: only sync when syncFunc exists
#13
|
2025-02-20 21:45:03 +00:00 |
|
criyle
|
d32acd7591
|
cgroup&container: add ability to utilize cgroup fd with clone3
#13
|
2025-02-20 20:29:20 +00:00 |
|
criyle
|
f15b953065
|
container: syncAfterExec to sync after execve rather than before
|
2025-02-20 19:48:39 +00:00 |
|
criyle
|
51b53cf60b
|
runner: add procPeak as measurement of peak process count
|
2025-02-20 03:12:28 +00:00 |
|
criyle
|
0b6b557947
|
cgroup: add pids.peak for cgroup v2 kernel >= 6.1
|
2025-02-20 01:51:59 +00:00 |
|
criyle
|
f6274fd54c
|
cgroup: rename types to remove stutters
|
2024-02-05 08:53:37 +00:00 |
|
criyle
|
231f3cb58f
|
cgroup: refactor to support creating child cgroup directly
|
2023-11-09 10:21:07 +00:00 |
|
criyle
|
bd846192aa
|
deps: upgrade to go1.21
|
2023-09-27 13:43:12 +00:00 |
|
criyle
|
5eeaadffdf
|
container: add support for temp root dir
|
2022-07-15 23:46:42 -07:00 |
|
criyle
|
ca60fcad98
|
*: fix macOS build for go1.18
|
2022-04-03 02:45:53 -07:00 |
|
criyle
|
c6519b09ec
|
cgroup: add support of cgroup v2 nesting
|
2021-12-25 23:04:01 +00:00 |
|
criyle
|
5e5b00688a
|
cgroup: implement cgroup v2
|
2021-12-24 10:42:42 +00:00 |
|
criyle
|
2889743b71
|
cgroup: initialize support for v2 implementation
|
2021-12-23 20:38:31 -08:00 |
|
criyle
|
b5d300a0e8
|
rlimit: restrict open file count
|
2021-11-12 00:23:34 -08:00 |
|
criyle
|
eb0f2cbc89
|
container: create symlinks for rootfs
|
2021-11-11 23:56:53 -08:00 |
|
criyle
|
26c5f63dcb
|
runner: async -> sync
|
2021-06-05 16:16:05 -07:00 |
|
criyle
|
ebab07ec35
|
deprecate io/ioutil
|
2021-02-24 00:00:51 -08:00 |
|
criyle
|
9e8c4593c6
|
Update rlimit & remove discard reader
|
2021-02-06 12:21:22 -08:00 |
|
criyle
|
464c5ac932
|
Backwards compatibility for older kernels >= 3.10
|
2021-01-21 00:20:57 -08:00 |
|
criyle
|
7603109e33
|
Refactor seccomp ptrace & improve container
|
2020-12-23 12:12:43 -08:00 |
|
criyle
|
7ebe4a999d
|
Add ability to use seccomp filter for container
|
2020-12-12 12:16:28 -08:00 |
|
criyle
|
c832edba58
|
Refactor container mounts
|
2020-11-21 23:50:06 -08:00 |
|
criyle
|
d664e1eae8
|
set pgid on MacOS
|
2020-05-15 19:01:10 -04:00 |
|
criyle
|
bc0b7f92f1
|
Add MacOS sandbox support
|
2020-05-15 03:02:04 -04:00 |
|
criyle
|
b64cc09c06
|
Add MacOS forkExec
|
2020-05-13 16:37:59 -04:00 |
|
criyle
|
2489317fb7
|
Add _linux suffix to linux only packages
|
2020-05-01 17:10:23 -04:00 |
|
criyle
|
5f133175fd
|
Add ability unshare cgroup after sync
|
2020-03-20 18:50:31 -04:00 |
|
criyle
|
4f2257a187
|
Remove types pkg & update documents
- move types pkg into runner
- add documentations for cgroup & container
- add benchmakr for cgroup & container
|
2020-03-02 03:14:13 -05:00 |
|
criyle
|
cf5ebfb3ef
|
Handle potential wait4 EINTR & add memory cgroup
|
2020-03-01 01:34:40 -05:00 |
|
criyle
|
c21ae19d18
|
reduce container communication overhead
|
2020-02-27 23:30:32 -05:00 |
|
criyle
|
f2dacb5752
|
rename daemon -> container
|
2020-02-19 05:36:23 -05:00 |
|
criyle
|
a24933ac82
|
update mounts
|
2020-02-19 01:13:25 -05:00 |
|
criyle
|
bfedda0ba2
|
adapted to context
|
2020-02-12 03:01:37 -05:00 |
|
criyle
|
192a09142c
|
add support to set credentials
|
2019-11-02 17:05:59 -07:00 |
|
criyle
|
348ed481d3
|
add ability to omit sub-cgroup if not exists
|
2019-10-24 01:31:21 -07:00 |
|
criyle
|
6e46a73289
|
update to go 1.13 & fix typos
|
2019-10-14 00:00:58 -07:00 |
|
criyle
|
4001c7c767
|
add waitpid resource consumptions
|
2019-09-28 17:43:05 -07:00 |
|
criyle
|
31edacf69e
|
allow customize mount points for container
|
2019-09-25 01:28:04 -07:00 |
|
criyle
|
c8d682f4b6
|
add mount builder & fix rlimits unit
|
2019-09-18 01:42:10 -07:00 |
|
criyle
|
be668a5e75
|
fix typo
|
2019-09-05 21:06:22 -07:00 |
|
criyle
|
2968ef7e27
|
refactor config
|
2019-09-01 02:16:41 -07:00 |
|
criyle
|
86c5e2f377
|
wrap and decouplin libseccomp
|
2019-09-01 01:36:01 -07:00 |
|
criyle
|
7b06ce65ac
|
normalize naming schema
|
2019-08-30 00:57:07 -07:00 |
|