Commit Graph

155 Commits

Author SHA1 Message Date
criyle
eb0f2cbc89 container: create symlinks for rootfs 2021-11-11 23:56:53 -08:00
criyle
383f40cabe *: bump dependency versions 2021-10-30 10:58:06 -07:00
criyle
f965052804 mount: remove noatime from proc for compatibility 2021-09-20 18:33:48 -07:00
criyle
fded6ba8c7 *: bump dependency versions & go1.17 build tag 2021-09-19 14:10:44 -07:00
criyle
06ed42eb42 mount: add recursive flag to bind mounts 2021-09-19 13:35:11 -07:00
criyle
eec1a5a9e3 *: bump dependency versions with go1.17.1 2021-09-12 13:39:26 -07:00
criyle
d94a0d6acd *: bump to go1.17 2021-08-18 20:21:28 -07:00
criyle
5f3a6ff032 container: add CAP_SYS_RESOURCE 2021-08-09 23:52:43 -07:00
criyle
4e55516ff3 forkexec: report error location 2021-08-04 22:41:36 -07:00
criyle
26c5f63dcb runner: async -> sync 2021-06-05 16:16:05 -07:00
criyle
963e027b0a container: allocate buffers in advance 2021-04-25 17:58:00 -07:00
criyle
c1d9a5572f container: fix fd leak 2021-03-30 21:36:46 -07:00
criyle
3b55a156bc container: host async wait 2021-03-29 22:49:40 -07:00
criyle
91dae1dfc6 container: change send & recv async 2021-03-29 01:16:45 -07:00
criyle
204d7949c6 unixsocket: non-blocking message & value passing 2021-03-27 19:16:41 -07:00
criyle
ebab07ec35 deprecate io/ioutil 2021-02-24 00:00:51 -08:00
criyle
4ee5c39f1e bump to go 1.16 2021-02-21 19:33:03 -08:00
criyle
9e8c4593c6 Update rlimit & remove discard reader 2021-02-06 12:21:22 -08:00
criyle
464c5ac932 Backwards compatibility for older kernels >= 3.10 2021-01-21 00:20:57 -08:00
criyle
29aefc839b misc benchmark 2021-01-16 18:19:25 -08:00
criyle
d51cbe0bbd bump versions 2021-01-09 11:21:32 -08:00
criyle
a17bcd105c small improvement 2021-01-08 23:50:40 -08:00
criyle
dbede6a2e4 go mod tidy 2020-12-23 12:19:23 -08:00
criyle
7603109e33 Refactor seccomp ptrace & improve container 2020-12-23 12:12:43 -08:00
criyle
3c77bf81d1 Fix cgroup potential null pointer 2020-12-17 22:55:48 -08:00
criyle
a9733a4b7d Fix container.reset 2020-12-17 22:27:18 -08:00
criyle
5343e365c3 Add cpu cgroup support 2020-12-12 21:28:41 -08:00
criyle
4ae1d6d760 Differentiate error from execve / wait4 2020-12-12 12:24:27 -08:00
criyle
7ebe4a999d Add ability to use seccomp filter for container 2020-12-12 12:16:28 -08:00
criyle
6df08e55b7 Add ability to config container uid & gid 2020-12-12 11:53:09 -08:00
criyle
928a0a4631 Fix typo for cpuacct 2020-12-06 18:33:16 -08:00
criyle
6d71f9dc4b Add support to cpuset cgroup 2020-12-06 17:48:10 -08:00
criyle
7ce98ffa42 Add ability to parse size from string 2020-12-05 13:50:32 -08:00
criyle
64df5951ed Fix work dir 2020-11-22 21:31:15 -08:00
criyle
c832edba58 Refactor container mounts 2020-11-21 23:50:06 -08:00
criyle
085f7a63c2 Fix unit tests & minor performance improvement 2020-09-21 00:17:10 -07:00
criyle
5e6fcd1d86 Split fork child & add unit tests 2020-09-06 00:11:52 -07:00
criyle
744db3ff88 Do not close read pipe after limit 2020-07-14 00:12:12 -07:00
criyle
687b9bf6f9 Add tty support ... 2020-06-02 17:21:42 -04:00
criyle
d664e1eae8 set pgid on MacOS 2020-05-15 19:01:10 -04:00
criyle
b6036eb830 Remove libseccomp dependency 2020-05-15 17:13:13 -04:00
criyle
bc0b7f92f1 Add MacOS sandbox support 2020-05-15 03:02:04 -04:00
criyle
3fd00038db MacOS sandbox_init 2020-05-13 20:43:58 -04:00
criyle
b64cc09c06 Add MacOS forkExec 2020-05-13 16:37:59 -04:00
criyle
707c808ee3 retry on ETXTBSY 2020-05-02 03:03:34 -04:00
criyle
2489317fb7 Add _linux suffix to linux only packages 2020-05-01 17:10:23 -04:00
criyle
44e0f041f2 add linux suffix to linux only packages 2020-05-01 17:01:20 -04:00
criyle
dac4a1ddad Fix container builder with specific exec file 2020-04-01 00:12:32 -04:00
criyle
5f133175fd Add ability unshare cgroup after sync 2020-03-20 18:50:31 -04:00
criyle
cfa40fa36a update dependencies 2020-03-16 18:27:10 -04:00