2020-05-01 02:02:37 +08:00
|
|
|
## v1.0.0-rc11 [20yy-mm-dd]
|
|
|
|
|
|
|
|
|
|
* cgroups/fs2: don't always parse /proc/self/cgroup (#2358 by @kolyshkin)
|
|
|
|
|
* Vagrantfile: use Fedora 32 (and remove unused Podman) (#2363 by @AkihiroSuda)
|
|
|
|
|
* docs: terminals: mention subreaper requirement (#2359 by @cyphar)
|
|
|
|
|
* check that StartTransientUnit/StopUnit succeeds (#2331 by @lifubang)
|
|
|
|
|
* Makefile fixes and improvements (#2357 by @kolyshkin)
|
|
|
|
|
* fs2: fix cgroup.subtree_control EPERM on rootless + add CI (#2340 by @AkihiroSuda)
|
|
|
|
|
* travis: run vagrant tests on the host (#2342 by @kolyshkin)
|
|
|
|
|
* fix data inconsistent when runc update in systemd driven cgroup (#2343 by @lifubang)
|
|
|
|
|
* cgroupv2: use default allowed devices when linux resources is null (#2318 by @lifubang)
|
|
|
|
|
* checkpoint: don't print error if --pre-dump is set (#2327 by @kolyshkin)
|
|
|
|
|
* Fix cgroupv2 checkpoint/restore (#2335 by @kolyshkin)
|
|
|
|
|
* cgroupv2: allow to set EnableAllDevices=true (#2347 by @kolyshkin)
|
|
|
|
|
* Makefile nits (#2334 by @kolyshkin)
|
|
|
|
|
* libcontainer: fix Checkpoint wrt cgroupv2 (#2324 by @kolyshkin)
|
|
|
|
|
* Dockerfile: use bats-core (#2336 by @kolyshkin)
|
|
|
|
|
* libcontainer: use consts of Namespace from runtime-spec (#2330 by @KentaTada)
|
|
|
|
|
* libcontainer: use x/sys/unix instead of the hardcoded value (#2348 by @KentaTada)
|
|
|
|
|
* MAINTAINERS: add Kir Kolyshkin (#2326 by @AkihiroSuda)
|
|
|
|
|
* Fix/improve checkpoint integration tests (#2332 by @kolyshkin)
|
|
|
|
|
* cgroupv2: fix fs2 driver initialization (#2299 by @kolyshkin)
|
|
|
|
|
* CI cleanups (#2320 by @kolyshkin)
|
|
|
|
|
* Nits (#2325 by @kolyshkin)
|
|
|
|
|
* cgroupv2: default join cgroup namespace in runc example (#2322 by @lifubang)
|
|
|
|
|
* Defer netns.Close() after error check (#2317 by @tedyu)
|
|
|
|
|
* cgroupv2: fix fs2 driver default path (#2305 by @kolyshkin)
|
|
|
|
|
* runc exec: don't enable terminal unless -t is set (#2308 by @kolyshkin)
|
|
|
|
|
* Initial integration tests for cgroupv2 (#2295 by @kolyshkin)
|
|
|
|
|
* Exposing memory.numa_stats (#2278 by @iwankgb)
|
|
|
|
|
* Properly remove intermediate directory (#2312 by @tedyu)
|
|
|
|
|
* travis: move `cgroup-v2` out of `allow_failures` (#2304 by @AkihiroSuda)
|
|
|
|
|
* libcontainer: remove unneeded import (#2303 by @KentaTada)
|
|
|
|
|
* cgroupv2: fix setting MemorySwap (#2288 by @kolyshkin)
|
|
|
|
|
* cgroupv2: only treat -1 as "max" (#2300 by @kolyshkin)
|
|
|
|
|
* README.md: update Go version to build (#2296 by @KentaTada)
|
|
|
|
|
* libcontainer: use cgroups.NewStats (#2297 by @giuseppe)
|
|
|
|
|
* Fix TestGetContainerStateAfterUpdate on cgroup v2 (#2289 by @AkihiroSuda)
|
|
|
|
|
* Remove unused consts testScopeWait and testSliceWait (#2294 by @tklauser)
|
|
|
|
|
* Restore close of criuServer (#2293 by @tedyu)
|
|
|
|
|
* Use errors.As() and errors.Is() to unwrap errors (#2291 by @kolyshkin)
|
|
|
|
|
* Added HugeTlb controller for cgroupv2 (#2235 by @Zyqsempai)
|
|
|
|
|
* vagrant: switch from VirtualBox to KVM + increase HW resources (#2261 by @AkihiroSuda)
|
|
|
|
|
* Use errors.Unwrap() where possible (#2280 by @kolyshkin)
|
|
|
|
|
* isPathInPrefixList return value should be reverted (#2283 by @tedyu)
|
|
|
|
|
* Avoid double close of criuServer (#2284 by @tedyu)
|
|
|
|
|
* cgroupv2: don't use GetCgroupMounts for criu c/r (#2276 by @kolyshkin)
|
|
|
|
|
* libct/isPaused: don't use GetPaths from v2 code (#2282 by @kolyshkin)
|
|
|
|
|
* Add minimal cgroup2 checkpoint/restore support (#2259 by @adrianreber)
|
|
|
|
|
* Actually check for syscall.ENODEV when checking if a container is paused (#2279 by @yulianedyalkova)
|
|
|
|
|
* Separate systemd dbus connection initialization from running check (#2203 by @mrunalp)
|
|
|
|
|
* Dockerfile: some refactoring, and switch to "buster" variant (#2234 by @thaJeztah)
|
|
|
|
|
* update vendor (#2268 by @AkihiroSuda)
|
|
|
|
|
* bifio.Scan.Err usage nits (#2275 by @kolyshkin)
|
|
|
|
|
* Use faster mountinfo parser (part 1) (#2256 by @kolyshkin)
|
|
|
|
|
* cgroup v2 cleanups (#2273 by @kolyshkin)
|
|
|
|
|
* Retry writing to cgroup files on EINTR error (#2258 by @danail-branekov)
|
|
|
|
|
* cgroupv2: use "max" for negative values (#2272 by @kolyshkin)
|
|
|
|
|
* cgroupv2: don't try to set kmem for systemd case (#2270 by @kolyshkin)
|
|
|
|
|
* fix readSync (#2193 by @milkwine)
|
|
|
|
|
* checkpoint: remove error message with --leave-running (#2260 by @adrianreber)
|
|
|
|
|
* Assorted minor nits in libcontainer (#2263 by @kolyshkin)
|
|
|
|
|
* vendor: update go-systemd and godbus (#2242 by @AkihiroSuda)
|
|
|
|
|
* Avoid duplicate calls to runner#destroy (#2267 by @tedyu)
|
|
|
|
|
* specconv: fix null spec.Process making runc panic (#1826 by @jingxiaolu)
|
|
|
|
|
* Use signal map from x/sys/unix (#2257 by @kolyshkin)
|
|
|
|
|
* Dockerfile: add -f to curl (#2264 by @kolyshkin)
|
|
|
|
|
* libcontainer/sync: Drop procConsole transaction from comments (#1737 by @wking)
|
|
|
|
|
* Remove unreachable code paths (#1974 by @saschagrunert)
|
|
|
|
|
* cgroup2: fix conversion (#2248 by @AkihiroSuda)
|
|
|
|
|
* restore: fix a race condition in process.Wait() (#2226 by @avagin)
|
|
|
|
|
* Add support for Go Modules (#2073 by @odinuge)
|
|
|
|
|
* Makefile: set selinux and apparmor build tags (#2254 by @kolyshkin)
|
|
|
|
|
* fix rootless container: unrelated error with root flag (#1999 by @lifubang)
|
|
|
|
|
* sd-notify: do not hang when NOTIFY_SOCKET is used with create (#1807 by @giuseppe)
|
|
|
|
|
* Synchronize the call to linuxContainer.Signal() (#2252 by @pkagrawal)
|
|
|
|
|
* Use named error return for initProcess#start (#2238 by @tedyu)
|
|
|
|
|
* Use "command -v" shell builtin instead of "which" (#2228 by @cpuguy83)
|
|
|
|
|
* Add rootless testpath in Makefile (#1877 by @KentaTada)
|
|
|
|
|
* travis: update configuration (#2222 by @cyphar)
|
|
|
|
|
* Convert blkioWeight to io.weight properly (#2212 by @Zyqsempai)
|
|
|
|
|
* vendor: opencontainers/selinux v1.3.3, and update golang.org/x/sys (#2230 by @thaJeztah)
|
|
|
|
|
* libcontainer: dual-license nsenter/cloned_binary.c (#2232 by @cyphar)
|
|
|
|
|
* MAINTAINERS: add Akihiro Suda to maintainers (#2231 by @thaJeztah)
|
|
|
|
|
* Exchange deprecated systemd resources with the appropriate for cgroupv2 (#2210 by @Zyqsempai)
|
|
|
|
|
* Fix the value corresponding to rlimitmap [key] (#2223 by @wanghuaiqing2010)
|
|
|
|
|
* Fix MAJ:MIN io.stat parsing order (#2192 by @Zyqsempai)
|
|
|
|
|
* Allow to set systemd unit properties via annotations (#2224 by @kolyshkin)
|
|
|
|
|
* Added conversion for cpu.weight v2 (#2213 by @Zyqsempai)
|
|
|
|
|
* README.md: modify the explanation of make flags (#2184 by @KentaTada)
|
|
|
|
|
* Adding Security audit (#2190 by @amye)
|
|
|
|
|
* Fix path for security report line (#2221 by @inductor)
|
|
|
|
|
|
|
|
|
|
## v1.0.0-rc10 [2020-01-24]
|
|
|
|
|
|
|
|
|
|
* VERSION: release 1.0.0~rc10 (#2217 by @cyphar)
|
|
|
|
|
* rootfs: do not permit /proc mounts to non-directories (#2207 by @cyphar)
|
|
|
|
|
* Handle ENODEV when accessing the freezer.state file (#2133 by @yulianedyalkova)
|
|
|
|
|
* temporarily disable CRIU tests (#2198 by @AkihiroSuda)
|
|
|
|
|
* cgroup2: split fs2 from fs (#2169 by @AkihiroSuda)
|
|
|
|
|
* libcontainer: export and add new methods to allow cgroups manipulation (#2177 by @devimc)
|
|
|
|
|
* Fix race checking for process exit and waiting for exec fifo (#2185 by @liggitt)
|
|
|
|
|
* fix permission denied (#2086 by @win-t)
|
|
|
|
|
* criu: Ensure other users cannot read c/r files (#2141 by @rst0git)
|
|
|
|
|
* Makefile: allow overriding `docker` command (#2161 by @AkihiroSuda)
|
|
|
|
|
* Expose network interfaces via runc events (#2174 by @saschagrunert)
|
|
|
|
|
* .travis.yml: add Fedora 31 vagrant box (for cgroup2) (#2165 by @AkihiroSuda)
|
|
|
|
|
* Make event types public (#2172 by @saschagrunert)
|
|
|
|
|
* cgroup2: ebpf: increase RLIM_MEMLOCK to avoid BPF_PROG_LOAD error (#2168 by @AkihiroSuda)
|
|
|
|
|
* Remove the static_build build tag. (#2154 by @jpeach)
|
|
|
|
|
* cgroup2: port over eBPF device controller from crun (#2145 by @AkihiroSuda)
|
|
|
|
|
* cgroup2: implement `runc ps` (#2149 by @AkihiroSuda)
|
|
|
|
|
* cgroup2: cpuset_v2: skip Apply when no limit is specified (#2148 by @AkihiroSuda)
|
|
|
|
|
* cgroup2: allow mounting /sys/fs/cgroup in UserNS without unsharing CgroupNS (#2159 by @AkihiroSuda)
|
|
|
|
|
* cgroup2: do not parse /proc/cgroups (#2160 by @AkihiroSuda)
|
|
|
|
|
* Set unified mountpoint in find mnt func (#2140 by @crosbymichael)
|
|
|
|
|
* Adds info about `userns` for rootless containers (#1929 by @kkallday)
|
|
|
|
|
* io_v2.go: remove blkio v1 code (#2147 by @AkihiroSuda)
|
|
|
|
|
* README.md: clarify cgroup2 support is not ready for production (#2146 by @AkihiroSuda)
|
|
|
|
|
* checkpoint: Set descriptors.json file mode to 0600 (#2139 by @rst0git)
|
|
|
|
|
* Support different field counts of cpuaact.stats (#2132 by @skilxn-go)
|
|
|
|
|
* SECURITY: Add Security Policy (#2135 by @mrueg)
|
|
|
|
|
|
|
|
|
|
## v1.0.0-rc9 [2019-10-05]
|
|
|
|
|
|
|
|
|
|
* VERSION: update to 1.0.0-rc9 (#2134 by @cyphar)
|
2020-05-01 17:44:27 +08:00
|
|
|
* `*`: verify operations on /proc/... are on procfs (#2130 by @cyphar)
|
2020-05-01 02:02:37 +08:00
|
|
|
* Only allow proc mount if it is procfs (#2129 by @crosbymichael)
|
|
|
|
|
* Change the permissions of the notify listener socket to rwx for everyone (#2041 by @jburianek)
|
|
|
|
|
* libcontainer/nsenter: Don't import C in non-cgo file (#2126 by @titanous)
|
|
|
|
|
* cgroup: support mount of cgroup2 (#2125 by @giuseppe)
|
|
|
|
|
* criu image path permission error when checkpoint rootless container (#2010 by @lifubang)
|
|
|
|
|
* man: fix man-pages (#2098 by @adrianreber)
|
|
|
|
|
* Update dependencies (#2029 by @thaJeztah)
|
|
|
|
|
* Update to Go 1.12 and drop obsolete versions (#2028 by @thaJeztah)
|
|
|
|
|
* libcontainer: initial support for cgroups v2 (#2113 by @giuseppe)
|
|
|
|
|
* Bump x/sys and update syscall for initial Risc-V support (#2123 by @carlosedp)
|
|
|
|
|
* nsenter: minor fixes (#2122 by @AkihiroSuda)
|
|
|
|
|
* Rename cgroups_windows.go to cgroups_unsupported.go (#2120 by @rhatdan)
|
|
|
|
|
* cgroups/fs: check nil pointers in cgroup manager (#2103 by @sipsma)
|
|
|
|
|
* Make get devices function public (#2107 by @sashayakovtseva)
|
|
|
|
|
* libcontainer: update masked paths of /proc (#2119 by @KentaTada)
|
|
|
|
|
* Remove libcontainer detection for systemd features (#2117 by @filbranden)
|
|
|
|
|
* Avoid the dependency on cgo through go-systemd/util package (#2116 by @filbranden)
|
|
|
|
|
* Skip searching /dev/.udev for device nodes. (#2094 by @sipsma)
|
|
|
|
|
* doc: First process in container needs `Init: true` (#2089 by @anx-astocker)
|
|
|
|
|
* integration: remove blkio.weight (unavailable in kernel 5.0) (#2082 by @AkihiroSuda)
|
|
|
|
|
* Bump CRIU to 3.12 (#2081 by @AkihiroSuda)
|
|
|
|
|
* Update busybox source and fix runc exec bug (#2080 by @zhlhahaha)
|
|
|
|
|
* Update bash completion for v1.0.0 release (#2075 by @KentaTada)
|
|
|
|
|
* Update dependency libseccomp-golang (#2074 by @odinuge)
|
|
|
|
|
* Allow to define `COMMIT` by env (#2071 by @judu)
|
|
|
|
|
* Fix cgroup hugetlb size prefix for kB (#2065 by @odinuge)
|
|
|
|
|
* libcontainer: change seccomp test for clone syscall (#2067 by @KentaTada)
|
|
|
|
|
* libcontainer: fix TestGetContainerState to check configs.NEWCGROUP (#2061 by @KentaTada)
|
|
|
|
|
* libcontainer: intelrdt: add missing destroy handler in defer func (#2042 by @xiaochenshen)
|
|
|
|
|
* main: not reopen /dev/stderr (#2057 by @giuseppe)
|
|
|
|
|
* `r.destroy` can defer exec in `runner.run` method. (#2038 by @imxyb)
|
|
|
|
|
* specconv: always set "type: bind" in case of MS_BIND (#2035 by @cyphar)
|
|
|
|
|
* Move systemd.Manager initialization into a function in that module (#2047 by @filbranden)
|
|
|
|
|
* Support for logging from children processes (#2034 by @danail-branekov)
|
|
|
|
|
|
|
|
|
|
## v1.0.0-rc8 [2019-04-26]
|
|
|
|
|
|
|
|
|
|
* VERSION: release 1.0.0-rc8 (#2045 by @cyphar)
|
|
|
|
|
* Vendor in latest selinux code for keycreate errors (#2043 by @rhatdan)
|
|
|
|
|
* Add selinux validate in runc exec (#2031 by @lifubang)
|
|
|
|
|
* Fix SELinux failures on disabled SELinux Machines (#2032 by @rhatdan)
|
|
|
|
|
|
|
|
|
|
## v1.0.0-rc7 [2019-03-28]
|
|
|
|
|
|
|
|
|
|
* VERSION: release v1.0.0-rc7 (#2026 by @cyphar)
|
|
|
|
|
* Fixes regression causing zombie runc:[1:CHILD] processes (#2023 by @LittleLightLittleFire)
|
|
|
|
|
* Need to setup labeling of kernel keyrings. (#2012 by @rhatdan)
|
|
|
|
|
* Use getenv not secure_getenv (#2015 by @justincormack)
|
|
|
|
|
* Add $RUNC_USE_SYSTEMD to run tests using systemd cgroup driver (#2014 by @filbranden)
|
|
|
|
|
* nsenter: cloned_binary: "memfd" cleanups (#1984 by @cyphar)
|
|
|
|
|
* README: link to /org/security/ (#2001 by @vbatts)
|
|
|
|
|
* Create bind mount mountpoints during restore (#1968 by @adrianreber)
|
|
|
|
|
* fix preserve-fds flag may cause runc hang (#2000 by @lifubang)
|
|
|
|
|
* exec: expose --preserve-fds (#1995 by @giuseppe)
|
|
|
|
|
* Vendor in go-criu and use it for CRIU's RPC definition (#1963 by @adrianreber)
|
|
|
|
|
* switched travis to xenial (#1986 by @adrianreber)
|
|
|
|
|
* nsexec (CVE-2019-5736): avoid parsing environ (#1982 by @brauner)
|
|
|
|
|
* Remove detection for scope properties, which have always been broken (#1978 by @filbranden)
|
|
|
|
|
* Vendor opencontainers/runtime-spec 29686dbc (#1973 by @lowenna)
|
|
|
|
|
* nsenter: clone /proc/self/exe to avoid exposing host binary to container (https://github.com/opencontainers/runc/commit/6635b4f0 by @cyphar)
|
|
|
|
|
* Update vendored golang.org/x/sys to latest (#1972 by @filbranden)
|
|
|
|
|
* libcontainer: intelrdt: fix null intelrdt path issue in Destroy() (#1955 by @xiaochenshen)
|
|
|
|
|
* Resilience in adding of exec tasks to cgroups (#1950 by @BooleanCat)
|
|
|
|
|
* integration: fix mis-use of libcontainer.Factory (#1967 by @cyphar)
|
|
|
|
|
* Document 'org.criu.config' annotation (#1964 by @adrianreber)
|
|
|
|
|
* systemd: fix setting kernel memory limit (#1960 by @giuseppe)
|
|
|
|
|
* Add CRIU configuration file support (#1933 by @adrianreber)
|
|
|
|
|
* rootfs: umount all procfs and sysfs with --no-pivot (#1962 by @giuseppe)
|
|
|
|
|
* Fix .Fatalf() error message (#1952 by @JoeWrightss)
|
|
|
|
|
* Fix some typos (#1945 by @JoeWrightss)
|
|
|
|
|
* Modify check-config.sh in accordance with Moby Project updates (#1942 by @KentaTada)
|
|
|
|
|
* cgroups: nokmem: error out on explicitly-set kmemcg limits (#1939 by @cyphar)
|
|
|
|
|
* kill: allow to signal paused containers (#1943 by @giuseppe)
|
|
|
|
|
* cr: get pid from criu notify when restore (#1944 by @Ace-Tang)
|
|
|
|
|
* libcontainer: intelrdt: add support for Intel RDT/MBA Software Controller in runc (#1919 by @xiaochenshen)
|
|
|
|
|
* MAINTAINERS: remove @rjnagal and @vmarmol (#1940 by @cyphar)
|
|
|
|
|
* fix: may kill other process when container has been stopped (#1934 by @lifubang)
|
|
|
|
|
|
|
|
|
|
## v1.0.0-rc6 [2018-11-22]
|
|
|
|
|
|
2020-05-01 17:44:27 +08:00
|
|
|
* `*`: release v1.0.0~rc6 (#1937 by @cyphar)
|
2020-05-01 02:02:37 +08:00
|
|
|
* Small fixes for CRIU based test cases (#1936 by @adrianreber)
|
|
|
|
|
* libcontainer: Set 'status' in hook stdin (#1741 by @wking)
|
|
|
|
|
* Bump CRIU to 3.11 (#1935 by @adrianreber)
|
|
|
|
|
* add missing intelRdt parameters in 'runc update' manpage (#1930 by @linericyang)
|
|
|
|
|
* Respect container's cgroup path (#1872 by @ostenbom)
|
|
|
|
|
* tty: clean up epollConsole closing (#1897 by @cyphar)
|
|
|
|
|
* Add support for cgroup namespace (#1916 by @crosbymichael)
|
|
|
|
|
* libcontainer: map PidsLimit to systemd's TasksMax property (#1917 by @slp)
|
|
|
|
|
* Various cleanups to address linter issues (#1911 by @theSuess)
|
|
|
|
|
* test: fix TestDupNamespaces fail to test dup-ns error (#1925 by @Ace-Tang)
|
|
|
|
|
* rootless: fix potential panic in shouldUseRootlessCgroupManager (#1928 by @Ace-Tang)
|
|
|
|
|
* libcontainer: fix potential panic if spec.Process is nil (#1926 by @Ace-Tang)
|
|
|
|
|
* SELinux labels are tied to the thread (#1814 by @rhatdan)
|
|
|
|
|
* Makefile: rm cgo tag (#1922 by @kolyshkin)
|
|
|
|
|
* readme: add nokmem build tag (#1923 by @Ace-Tang)
|
|
|
|
|
* libcontainer: ability to compile without kmem (#1921 by @kolyshkin)
|
|
|
|
|
* rootless: fix running with /proc/self/setgroups set to deny (#1918 by @giuseppe)
|
|
|
|
|
* libcontainer: intelrdt: add user-friendly diagnostics for Intel RDT operation errors (#1913 by @xiaochenshen)
|
|
|
|
|
* clarify license information (#1903 by @mikebrow)
|
|
|
|
|
* Bump Travis versions (#1915 by @HaraldNordgren)
|
|
|
|
|
* Fix travis Go: tip (#1910 by @adrianreber)
|
|
|
|
|
* libcontainer: CurrentGroupSubGIDs -> CurrentUserSubGIDs (#1880 by @AkihiroSuda)
|
|
|
|
|
* libcontainer: intelrdt: add support for Intel RDT/MBA in runc (#1632 by @xiaochenshen)
|
|
|
|
|
* Disable rootless mode except RootlessCgMgr when executed as the root in userns (fix Docker-in-LXD regression) (#1862 by @AkihiroSuda)
|
|
|
|
|
* fix build break (#1908 by @mikebrow)
|
|
|
|
|
* Fix issue #1890: config.json with no linux config should not crash (#1894 by @marler8997)
|
|
|
|
|
* keyring: handle ENOSYS with keyctl(KEYCTL_JOIN_SESSION_KEYRING) (#1893 by @cyphar)
|
|
|
|
|
* tty: close epollConsole on errors (#1895 by @giuseppe)
|
|
|
|
|
* Stop relying on number of systems for cgroups (#1817 by @jgkamat)
|
|
|
|
|
* Update outdated nsenter README content (#1858 by @marcov)
|
|
|
|
|
* test: add more test case for CleanPath (#1892 by @Ace-Tang)
|
|
|
|
|
* doc: fix typo (#1886 by @halfcrazy)
|
|
|
|
|
* fix delete other file bug when container id is .. (#1883 by @lifubang)
|
|
|
|
|
* linux: drop check for /proc as invalid dest (#1832 by @giuseppe)
|
|
|
|
|
* libcontainer: add /proc/loadavg to the white list of bind mount (#1882 by @accepting)
|
|
|
|
|
* Add --rootless option to man page (#1868 by @rhatdan)
|
|
|
|
|
* Remove unused veth setup code (#1874 by @mrunalp)
|
|
|
|
|
* When doing a copyup, /tmp can not be a shared mount point (#1873 by @rhatdan)
|
|
|
|
|
* Add support to checkpoint and restore into external network namespaces (#1849 by @adrianreber)
|
|
|
|
|
* Add docker proxy settings for make test in a proxy environment (#1854 by @KentaTada)
|
|
|
|
|
* Add an explanation for TESTPATH (#1855 by @KentaTada)
|
|
|
|
|
* cr: don't restore net namespace by default (#1871 by @Ace-Tang)
|
|
|
|
|
* Revert "libcontainer/rootfs_linux: minor cleanup" (#1867 by @mrunalp)
|
|
|
|
|
* Dockerfile: update criu to v3.10 + checkpoint-restore/criu@27034e7c (#1864 by @AkihiroSuda)
|
|
|
|
|
* Pass GOMAXPROCS to init processes (#1830 by @crosbymichael)
|
|
|
|
|
* Fix the problem TESTFLAGS is not to be used in Makefile correctly (#1841 by @KentaTada)
|
|
|
|
|
* Fix regression with mounts with non-absolute source path (#1845 by @alban)
|
|
|
|
|
* cr: don't dump network devices and their configuration (#1840 by @avagin)
|
|
|
|
|
* criu tests: rename criu feature check (#1838 by @adrianreber)
|
|
|
|
|
* Add osusergo flag to static build (#1836 by @kolyshkin)
|
|
|
|
|
* libcontainer: devices: fix mips builds (#1824 by @cyphar)
|
|
|
|
|
* travis: test cross compilation (#1820 by @AkihiroSuda)
|
|
|
|
|
* Add docs for terminals (#1730 by @deitch)
|
|
|
|
|
* libcontainer: improve "kernel.{domainname,hostname}" sysctl handling (#1827 by @cyphar)
|
|
|
|
|
* Stop using unix.SIGUNUSED which has been removed from golang.org/x/sys (#1825 by @onlyjob)
|
|
|
|
|
* libcontainer: fix compilation on GOARCH=arm GOARM=6 (32 bits) (#1819 by @tiborvass)
|
|
|
|
|
* runc: not require uid/gid mappings if euid()==0 (#1816 by @giuseppe)
|
|
|
|
|
* Fix race in runc exec (#1812 by @mrunalp)
|
|
|
|
|
* cgroup: clean up isIgnorableError for skippable EROFS (#1806 by @cyphar)
|
|
|
|
|
* Fix merge conflict (#1808 by @AkihiroSuda)
|
|
|
|
|
* main: support rootless mode in userns (#1688 by @AkihiroSuda)
|
|
|
|
|
* rootless: cgroup: treat EROFS as a skippable error (#1759 by @cyphar)
|
|
|
|
|
* fix systemd cpu quota for -1 (#1805 by @derekwaynecarr)
|
|
|
|
|
* Wrap error messages during init (#1796 by @crosbymichael)
|
|
|
|
|
* nsenter: improve namespace creation and SELinux IPC handling (#1562 by @cyphar)
|
|
|
|
|
* Make channel for StartTransientUnit buffered (#1781 by @filbranden)
|
|
|
|
|
* libcontainer: allow setgroup in rootless mode (#1693 by @AkihiroSuda)
|
|
|
|
|
* Make the setupSeccomp function public. (#1785 by @dlorenc)
|
|
|
|
|
* libcontainer/rootfs_linux: minor cleanup (#1784 by @pierrchen)
|
|
|
|
|
* libcontainer/specconv/spec_linux: Support empty 'type' for bind mounts (#1753 by @wking)
|
|
|
|
|
* nsexec.c: fix GCC 8 warning (#1779 by @runcom)
|
|
|
|
|
* Only configure networking when creating a net ns (#1777 by @nalind)
|
|
|
|
|
* Detect whether Delegate is available on both slices and scopes (#1776 by @filbranden)
|
|
|
|
|
* Fix systemd.Apply() to check for DBus error before waiting on a channel. (#1772 by @filbranden)
|
|
|
|
|
* libcontainer: Don't set container state to running when exec'ing (#1771 by @sboeuf)
|
|
|
|
|
* Fix error message (#1762 by @tamalsaha)
|
|
|
|
|
* rootless: set sticky bit if using XDG_RUNTIME_DIR (#1760 by @cyphar)
|
|
|
|
|
* tests: allow to load kernel modules from a test container (#1750 by @avagin)
|
|
|
|
|
* Label the masked tmpfs with the mount label (#1756 by @rhatdan)
|
|
|
|
|
* Add timeout while waiting for StartTransinetUnit completion signal (#1754 by @vikaschoudhary16)
|
|
|
|
|
* cgroups/fs: fix NPE on Destroy than no cgroups are set (#1752 by @dennwc)
|
|
|
|
|
* Minor wording enhancement in readme (#1751 by @glikson)
|
|
|
|
|
* libcontainer/user: platform dependent calls (#1749 by @vbatts)
|
|
|
|
|
* makefile: make "release" PHONY (#1748 by @cyphar)
|
|
|
|
|
* Fix make shell (#1746 by @tiborvass)
|
|
|
|
|
* Update build dependencies in Dockerfile (#1711 by @dqminh)
|
|
|
|
|
|
|
|
|
|
## v1.0.0-rc5 [2018-02-27]
|
|
|
|
|
|
|
|
|
|
* release v1.0.0~rc5 (https://github.com/opencontainers/runc/commit/4bb1fe4a by @cyphar)
|
|
|
|
|
* libcontainer: setupUserNamespace is always called (#1743 by @ynirk)
|
|
|
|
|
* fix lint error in specconv (#1736 by @allencloud)
|
|
|
|
|
* Update console dependency to fix runc exec on BE (#1727 by @pmorjan)
|
|
|
|
|
* adding go get instruction to readme (#1729 by @vsoch)
|
|
|
|
|
* fix systemd slice expansion so that it could be consumed by cAdvisor (#1722 by @ravisantoshgudimetla)
|
|
|
|
|
* libcontainer/capabilities_linux: Drop os.Getpid() call (#1724 by @wking)
|
|
|
|
|
* man: Fix manpages related to console (#1695 by @Taeung)
|
|
|
|
|
* Warning message if 'go-md2man' is not yet installed (#1685 by @Taeung)
|
|
|
|
|
* chroot when no mount namespaces is provided (#1702 by @crosbymichael)
|
|
|
|
|
* libcontainer/state_linux_test: Add a testTransitions helper (#1703 by @wking)
|
|
|
|
|
* kill.go: Remove unnecessary checks (#1706 by @unshare)
|
|
|
|
|
* make: validate C format (#1699 by @AkihiroSuda)
|
|
|
|
|
* Avoid race when opening exec fifo (#1698 by @craigfurman)
|
|
|
|
|
* libcontainer: expose annotations in hooks (#1687 by @runcom)
|
|
|
|
|
* Pin version of gojsonschema in tests (#1682 by @BooleanCat)
|
|
|
|
|
* Fix race against systemd (#1683 by @vikaschoudhary16)
|
|
|
|
|
* libcontainer: Do not wait for signalled processes if subreaper is set (#1678 by @sboeuf)
|
|
|
|
|
* RFC: libcontainer: remove dependency on libapparmor (#1675 by @tklauser)
|
|
|
|
|
* specconv: avoid skipping gidmappings applied when uidmappings is empty (#1665 by @Mashimiao)
|
|
|
|
|
* support unbindable,runbindable for rootfs propagation (#1655 by @Mashimiao)
|
|
|
|
|
* Update criu_opts_linux.go (#1667 by @allencloud)
|
|
|
|
|
* stopped container can't be checkpoint (#1669 by @Mashimiao)
|
|
|
|
|
* enable integration test on arm64 platform (#1642 by @lubinsz)
|
|
|
|
|
* remove placeholder for non-linux platforms (#1654 by @dqminh)
|
|
|
|
|
* Ensure container tests do not write on the host (#1661 by @danail-branekov)
|
|
|
|
|
* libcontainer: drop FreeBSD support (#1664 by @tklauser)
|
|
|
|
|
* Delete xattr related code (#1660 by @danail-branekov)
|
|
|
|
|
* systemd: adjust CPUQuotaPerSecUSec to compensate for systemd internal handling (#1651 by @sjenning)
|
|
|
|
|
* Import docker/docker/pkg/mount into runc (#1644 by @vdemeester)
|
|
|
|
|
* Add build 1.9 to travis (#1645 by @vdemeester)
|
|
|
|
|
* Remove pkg/symlink from docker/docker and use cyphar/filepath-securejoin (#1622 by @vdemeester)
|
|
|
|
|
* enable unit test on arm64 platform (#1640 by @jongwu)
|
|
|
|
|
* specconv.Example(): add /proc/scsi to masked paths (#1641 by @AkihiroSuda)
|
|
|
|
|
* Avoid disk usage explosion when copying busybox (#1629 by @danail-branekov)
|
|
|
|
|
* Specconv: Test create command hooks and seccomp setup (#1626 by @fntlnz)
|
|
|
|
|
* tests: add missing cgroups_kmem requirement (#1621 by @monstermunchkin)
|
|
|
|
|
* WIP: Better testsuite for specconv (#1619 by @fntlnz)
|
|
|
|
|
* tests: add various !terminal tests (#1357 by @cyphar)
|
|
|
|
|
* libcontainer: handler errors from terminate (#1607 by @crosbymichael)
|
|
|
|
|
* trailing punctuation in header (#1206 by @YuPengZTE)
|
|
|
|
|
* Fix breaking change in Seccomp profile behavior (#1616 by @mheon)
|
|
|
|
|
* libcontainer: intelrdt: fix a GetStats() issue (#1615 by @xiaochenshen)
|
|
|
|
|
* specconv: emit an error when using MS_PRIVATE with --no-pivot (#1606 by @cyphar)
|
|
|
|
|
* libcontainer: use Major/Minor from x/sys/unix (#1614 by @tklauser)
|
|
|
|
|
* add additional-gids to runc exec (#1608 by @crosbymichael)
|
|
|
|
|
* Propagate the correct argv0 when re-execing (#1453 by @petrosagg)
|
|
|
|
|
* Support cgroups with limits as rootless (#1540 by @williammartin)
|
|
|
|
|
* libcontainer: merge common syscall implementations (#1613 by @tklauser)
|
|
|
|
|
* Update libseccomp-golang dependency for filter generation bugfix (#1424 by @mheon)
|
|
|
|
|
* Add mips support (#1475 by @vstefanovic)
|
|
|
|
|
* rootfs: switch ms_private remount of oldroot to ms_slave (#1500 by @cyphar)
|
|
|
|
|
* libcontainer: cgroups: Write freezer state after every state check (#1610 by @sboeuf)
|
|
|
|
|
* make localintegration fails on Ubuntu 17.04 (#1528 by @leitwolf7)
|
|
|
|
|
* libcontainer: intelrdt: add update command support (#1590 by @xiaochenshen)
|
|
|
|
|
* libcontainer: create Cwd when it does not exist (#1604 by @AkihiroSuda)
|
|
|
|
|
* Set initial console size based on process spec (#1275 by @williammartin)
|
|
|
|
|
* Bump console and sys deps (#1600 by @crosbymichael)
|
|
|
|
|
* libcontainer: remove unnecessary type conversions (#1599 by @tklauser)
|
|
|
|
|
* libcontainer: default mount propagation correctly (#1598 by @euank)
|
|
|
|
|
* Delete unused variable (#1597 by @s7v7nislands)
|
|
|
|
|
* Drop support golang 1.5 (#1593 by @s7v7nislands)
|
|
|
|
|
* Apply cgroups earlier (#1586 by @crosbymichael)
|
|
|
|
|
* Disable systemd in static build (#1579 by @yongtang)
|
|
|
|
|
* Use `netgo` for static build (#1577 by @yongtang)
|
|
|
|
|
* tty: move IO of master pty to be done with epoll (#1455 by @dqminh)
|
|
|
|
|
* Support multiple users/groups mapped for the rootless case (#1529 by @giuseppe)
|
|
|
|
|
* Delete unused function (#1588 by @s7v7nislands)
|
|
|
|
|
* Fixes #1585 config.Namespaces is empty when accessed (#1587 by @Mashimiao)
|
|
|
|
|
* libcontainer: intelrdt: use init() to avoid race condition (#1589 by @xiaochenshen)
|
|
|
|
|
* init: delay seccomp application as late as possible (#1569 by @cyphar)
|
|
|
|
|
* checkpoint: support lazy migration (#1541 by @adrianreber)
|
|
|
|
|
* libcontainer: add support for Intel RDT/CAT in runc (#1279 by @xiaochenshen)
|
|
|
|
|
* signal: ignore tty.resize errors (#1575 by @cyphar)
|
|
|
|
|
* travis: drop shfmt install (#1578 by @cyphar)
|
|
|
|
|
* fix --read-only containers under --userns-remap (#1572 by @tych0)
|
|
|
|
|
* Fix systemd cgroup after memory type changed (#1573 by @hqhq)
|
|
|
|
|
* init: switch away from stateDirFd entirely (#1570 by @cyphar)
|
|
|
|
|
* Add AutoDedup option to CriuOpts (#1561 by @thegrumpylion)
|
|
|
|
|
* Check error return values (#1560 by @tklauser)
|
|
|
|
|
* fix panic when Linux is nil for rootless case (#1559 by @Mashimiao)
|
|
|
|
|
* release: import umoci's release.sh script (#1554 by @cyphar)
|
|
|
|
|
* Update state after update (#1558 by @hqhq)
|
|
|
|
|
* makefile: enable -buildmode=pie (#1542 by @cyphar)
|
|
|
|
|
* makefile: drop usage of --install (#1555 by @cyphar)
|
|
|
|
|
* Fix flaky test TestNotifyOnOOM (#1556 by @hqhq)
|
|
|
|
|
* fix panic when Linux is nil (#1551 by @crosbymichael)
|
|
|
|
|
* Handle non-devices correctly in DeviceFromPath (#1553 by @mlaventure)
|
|
|
|
|
* Pass back the pid of runc:[1:CHILD] so we can wait on it (#1506 by @LittleLightLittleFire)
|
|
|
|
|
* Use CRIU VERSION RPC if available (#1535 by @adrianreber)
|
|
|
|
|
* Revert "Merge pull request #1450 from vrothberg/sgid-non-numeric" (#1548 by @mlaventure)
|
|
|
|
|
* Fix condition to detect device type in DeviceFromPath (#1544 by @mlaventure)
|
|
|
|
|
* Move user pkg unix specific calls to unix file (#1545 by @mlaventure)
|
|
|
|
|
* Remove @avagin as a maintainer (#1543 by @avagin)
|
|
|
|
|
* Fix issues found by staticcheck (#1537 by @tklauser)
|
|
|
|
|
* Always save own namespace paths (#1477 by @yummypeng)
|
|
|
|
|
|
|
|
|
|
## v1.0.0-rc4 [2017-08-10]
|
|
|
|
|
|
|
|
|
|
* VERSION: release v1.0.0-rc4 (#1532 by @cyphar)
|
|
|
|
|
* Updated logrus to v1 (#1526 by @stevenh)
|
|
|
|
|
* Remove the code that close negative descriptor (#1533 by @keloyang)
|
|
|
|
|
* README.md: adjust capabilities section in config.json example (#1534 by @tklauser)
|
|
|
|
|
* libcontainer: one more switch from syscall to x/sys/unix (#1530 by @tklauser)
|
|
|
|
|
* Bump the spec up to v1.0.0 (#1527 by @mrunalp)
|
|
|
|
|
* update gocapability (#1524 by @Mashimiao)
|
|
|
|
|
* libcontainer: use additional functions and constants from x/sys/unix (#1519 by @tklauser)
|
|
|
|
|
* list: fix various problems with owner field (#1516 by @cyphar)
|
|
|
|
|
* Fix integration when missing criu (#1245 by @WeiZhang555)
|
|
|
|
|
* Update runtime-spec to rc6+ (#1518 by @crosbymichael)
|
|
|
|
|
* Use Prctl() and ioctl wrapper functions from x/sys/unix (#1504 by @tklauser)
|
|
|
|
|
* libcontainer/user: add supplementary groups only for non-numeric users (#1450 by @vrothberg)
|
|
|
|
|
* Remove shfmt (#1510 by @crosbymichael)
|
2020-05-01 17:44:27 +08:00
|
|
|
* `*`: fix shfmt (#1505 by @cyphar)
|
2020-05-01 02:02:37 +08:00
|
|
|
* Expose memory.use_hierarchy in MemoryStats (#1378 by @derekwaynecarr)
|
|
|
|
|
* libcontainer/specconv/spec_linux: Add support for (no)lazytime (#1460 by @wking)
|
|
|
|
|
* runc only works on Linux so remove putative Solaris and unsupported main (#1502 by @justincormack)
|
|
|
|
|
* Update spec to master, switch to int64 for memory limits (#1495 by @justincormack)
|
|
|
|
|
* Fix checkpoint/restore tests with newer kernel (#1496 by @dqminh)
|
|
|
|
|
* Use keyctl wrappers from x/sys/unix (#1482 by @tklauser)
|
|
|
|
|
* Use Eventfd() from golang.org/x/sys/unix (#1491 by @tklauser)
|
|
|
|
|
* libcontainer/container_linux: Consider process state (running, zombie, etc.) in runType (#1489 by @wking)
|
|
|
|
|
* update READ.me for new struct configs.Config.Capabilities (#1481 by @elianka)
|
|
|
|
|
* tests: redirect runc log messages to stderr (#1484 by @avagin)
|
|
|
|
|
* libcontainer/console_linux.go: Make SaneTerminal public (#1479 by @wking)
|
|
|
|
|
* travis: set go_import_path to github.com/opencontainers/runc (#1388 by @avagin)
|
|
|
|
|
* Use Prctl() from x/sys/unix instead of own wrapper (#1478 by @tklauser)
|
|
|
|
|
* Update spec to 239c4e44f2a612ed85f6db9c66247aa33f4 (#1473 by @crosbymichael)
|
2020-05-01 17:44:27 +08:00
|
|
|
* Use `NLA_*` constants from x/sys/unix instead of syscall (#1474 by @tklauser)
|
2020-05-01 02:02:37 +08:00
|
|
|
* Use symlink xattr functions from x/sys/unix (#1470 by @tklauser)
|
|
|
|
|
* Switch examples in README.md from syscall to x/sys/unix (#1467 by @tklauser)
|
|
|
|
|
* vendor.conf: Bump golang.org/x/sys to a55a76086885b80f79961eacb876ebd8caf3868d (#1464 by @wking)
|
|
|
|
|
* Allow specification of general Go build flags and ldflags (#1452 by @justincormack)
|
|
|
|
|
* Move libcontainer to x/sys/unix (#1442 by @clnperez)
|
|
|
|
|
* Fix setup cgroup before prestart hook (#1239 by @moypray)
|
|
|
|
|
* Handle container creation when cgroups have already been mounted in another location (#1372 by @craigfurman)
|
|
|
|
|
* Dump and restore containers with external terminals (#1355 by @avagin)
|
|
|
|
|
* Ignore error when force deleting a non-existing container (#1451 by @runcom)
|
|
|
|
|
* Clean up unix vs linux usage (#1447 by @justincormack)
|
|
|
|
|
* add createdState and runningState status testcase (#1410 by @chchliang)
|
|
|
|
|
* Fix comments about when to pivot_root (#1438 by @hqhq)
|
|
|
|
|
* tests: don't call wait_for_container after synchronous operations (#1433 by @avagin)
|
|
|
|
|
* Issue #1429 : Removing check for id string length (#1435 by @harche)
|
|
|
|
|
* update man page for `runc update` (#1436 by @sak0)
|
|
|
|
|
* Remove redundant declaration of namespace slice (#1428 by @harche)
|
|
|
|
|
* Allow updating pids limit (#1423 by @mlaventure)
|
|
|
|
|
* Add a rootless section to "spec" man page and command help (#1425 by @jwendell)
|
|
|
|
|
* Optimizing looping over namespaces (#1418 by @harche)
|
|
|
|
|
* vendor: clean up to be better written (#1408 by @cyphar)
|
|
|
|
|
* Don't try to read freezer.state from the current directory (#1387 by @avagin)
|
|
|
|
|
* Fix misspelling of "properties" in various places (#1412 by @tpot)
|
|
|
|
|
* Update examples on README to allow rootless execution (#1414 by @jwendell)
|
|
|
|
|
* add testcase in generic_error_test.go (#1402 by @chchliang)
|
|
|
|
|
* Set container state only once during start (#1396 by @harche)
|
|
|
|
|
* Use opencontainers/selinux package (#1365 by @hqhq)
|
|
|
|
|
* Revert back to using /sbin (#1406 by @crosbymichael)
|
|
|
|
|
* restore: apply resource limits (#1399 by @avagin)
|
|
|
|
|
* checkpoint: check if system supports pre-dumping (#1371 by @adrianreber)
|
|
|
|
|
* could load a stopped container. (#1400 by @sak0)
|
|
|
|
|
* Fix console syscalls (#1398 by @clnperez)
|
|
|
|
|
* libcontainer: rewrite cmsg to use sys/unix (#1394 by @cyphar)
|
|
|
|
|
* Rootless Containers (#774 by @cyphar)
|
|
|
|
|
* .travis.yml: Don't require FETCH_HEAD (partial fix for failing master tests) (#1383 by @wking)
|
|
|
|
|
* travis: use alternate commit range (#1382 by @vbatts)
|
|
|
|
|
|
|
|
|
|
## v1.0.0-rc3 [2017-03-21]
|
|
|
|
|
|
|
|
|
|
* Bump up runc version to v1.0.0-rc3 (#1377 by @mrunalp)
|
|
|
|
|
* fix panic regression when config doesnt have caps (#1380 by @dqminh)
|
|
|
|
|
* Use uint64 for resources to keep consistency with runtime-spec (#1375 by @hqhq)
|
|
|
|
|
* Revert "fix minor issue" (#1374 by @cyphar)
|
|
|
|
|
* Add separate console socket (#1356 by @crosbymichael)
|
|
|
|
|
* fix minor issue (#1373 by @moypray)
|
|
|
|
|
* Update runtime spec to rc5 (#1370 by @mrunalp)
|
|
|
|
|
* Remove unused ExecFifoPath (#1366 by @hqhq)
|
|
|
|
|
* Update devices_unix.go for LXD (#1327 by @CarltonSemple)
|
|
|
|
|
* Only allow single container operation (#1363 by @hqhq)
|
|
|
|
|
* Remove lk4d4 as a maintainer (#1362 by @crosbymichael)
|
|
|
|
|
* Remove unused function in systemd cgroup (#1360 by @hqhq)
|
|
|
|
|
* fix cpu.cfs_quota_us changed when systemd daemon-reload using systemd. (#1344 by @xuxinkun)
|
|
|
|
|
* Don't fchown when inheriting io (#1354 by @crosbymichael)
|
|
|
|
|
* Container can be in stopped status from created status. (#1353 by @sak0)
|
|
|
|
|
* user: fix the parameter error (#1280 by @datawolf)
|
|
|
|
|
* Fix kmem accouting when use with cgroupsPath (#1350 by @hqhq)
|
|
|
|
|
* Carry #998: Use vndr tool for vendoring (#1340 by @dqminh)
|
|
|
|
|
* fix systemd-notify when using a different PID namespace (#1308 by @giuseppe)
|
|
|
|
|
* add pre-dump and parent-path to checkpoint (#1001 by @x1022as)
|
|
|
|
|
* Add --preserve-file-descriptors=N to create (#1320 by @ijc)
|
|
|
|
|
* small cleanup for `runc ps` man pages (#1342 by @sak0)
|
2020-05-01 17:44:27 +08:00
|
|
|
* Fix state when `_LIBCONTAINER` in environment (#1317 by @hqhq)
|
2020-05-01 02:02:37 +08:00
|
|
|
* Don't override system error (#1339 by @cpuguy83)
|
|
|
|
|
* ps: --format value check (#1332 by @sak0)
|
|
|
|
|
* update go version at travis-ci (#1335 by @mcuadros)
|
|
|
|
|
* Fix race condition when sync with child and grandchild (#1237 by @hqhq)
|
|
|
|
|
* Use %zu for printing of size_t values (#1336 by @crosbymichael)
|
|
|
|
|
* Fixes set memory to unlimited (#1127 by @boynux)
|
|
|
|
|
* fix typo (#1328 by @sak0)
|
|
|
|
|
* support create device with type p and u (#1321 by @Mashimiao)
|
|
|
|
|
* Small cleanup (#1316 by @hqhq)
|
|
|
|
|
* libcontainer: rootfs_linux: support overlayfs (#1314 by @runcom)
|
|
|
|
|
* libcontainer: selinux: fix DupSecOpt and DisableSecOpt (#1312 by @runcom)
|
|
|
|
|
* Only wait for processes after delivering SIGKILL in signalAllProcesses (#1285 by @stevenh)
|
|
|
|
|
* Correct docs typo for restoredState. (#1309 by @stevenh)
|
|
|
|
|
* Correct container.Destroy() docs (#1310 by @stevenh)
|
|
|
|
|
* Resolve InitArgs to ensure init works (#1293 by @stevenh)
|
|
|
|
|
* kill: requires max 2 arguments (#1305 by @giuseppe)
|
|
|
|
|
* libcontainer: init: only pass stateDirFd when creating a container (#1274 by @cyphar)
|
|
|
|
|
* Revert "DupSecOpt needs to match InitLabels" (#1303 by @runcom)
|
|
|
|
|
* Add godoc links to README.md files (#1284 by @stevenh)
|
|
|
|
|
* Ensure pipe is always closed on error in StartInitialization (#1294 by @stevenh)
|
|
|
|
|
* Call defer tty.Close() earlier (#1300 by @hqhq)
|
|
|
|
|
* fix typos by the result of golint checking (#1205 by @YuPengZTE)
|
|
|
|
|
* Add nsenter details to libcontainer README.md (#1298 by @stevenh)
|
|
|
|
|
* Remove a compiler warning in some environments (#1291 by @justincormack)
|
|
|
|
|
* using golang-style assignment (#1288 by @rainrambler)
|
|
|
|
|
* move error check out of the for loop (#1278 by @datawolf)
|
|
|
|
|
* Ignore cgroup2 mountpoints (#1266 by @mrunalp)
|
|
|
|
|
* kill: make second argument optional (#1282 by @giuseppe)
|
|
|
|
|
* small refactor (#1249 by @datawolf)
|
|
|
|
|
* Bump golang to 1.7.4 (#1271 by @hqhq)
|
|
|
|
|
* Do not create cgroup dir name from combining subsystems (#1268 by @hqhq)
|
|
|
|
|
* Cleanup: remove redundant code (#1260 by @coolljt0725)
|
|
|
|
|
* Fix regression of exec command (#1265 by @WeiZhang555)
|
|
|
|
|
* checkpoint: handle config.Devices and config.MaskPaths (#1110 by @avagin)
|
|
|
|
|
* Fix the outdated comment for Error interface (#1248 by @datawolf)
|
|
|
|
|
* cgroups: update the comments (#1251 by @datawolf)
|
|
|
|
|
* remove `-i` option to avoid failure of jenkins in non-interactive mode. (#1252 by @FengtuWang)
|
|
|
|
|
* Fix go_vet errors (#1254 by @hqhq)
|
|
|
|
|
* Fix typos (#1255 by @hqhq)
|
|
|
|
|
* Simplify error handling on function return (#1257 by @mrunalp)
|
|
|
|
|
* Remove unused code and unnecessary conversion (#1258 by @mrunalp)
|
|
|
|
|
* Fix error shadow and error check warnings (#1259 by @mrunalp)
|
|
|
|
|
* Makefile: add manpage cleanup (#1232 by @Mashimiao)
|
|
|
|
|
* Fix leftover cgroup directory issue (#1196 by @hqhq)
|
|
|
|
|
* Add badge for Go Report Card (#1253 by @xlgao-zju)
|
|
|
|
|
* Add Travis CI badge to README (#1250 by @caniszczyk)
|
2020-05-01 17:44:27 +08:00
|
|
|
* `*`: fix go-vet failures (#1243 by @cyphar)
|
2020-05-01 02:02:37 +08:00
|
|
|
* travis: add travis-ci (#1246 by @cyphar)
|
|
|
|
|
* Add integration for update rt period and runtime (#1203 by @WeiZhang555)
|
|
|
|
|
* Split the code for remounting mount points and mounting paths. (#1222 by @justincormack)
|
|
|
|
|
* Check args numbers before application start (#1158 by @WeiZhang555)
|
|
|
|
|
* Don't add device to list if it doesn't exist anymore (#1217 by @mrunalp)
|
|
|
|
|
* Sync HookState struct with OCI spec (#1201 by @WeiZhang555)
|
|
|
|
|
* Bump runtime-spec to v1.0.0-rc3 (#1233 by @WeiZhang555)
|
|
|
|
|
* rename ocitools to oci-runtime-tool (#1231 by @Mashimiao)
|
|
|
|
|
* Clean apt archives and source directories in Dockerfile (#1226 by @nhlfr)
|
|
|
|
|
* validate: Check that the given namespace path is a symlink (#1221 by @sameo)
|
|
|
|
|
* Consoles, consoles, consoles. (#1018 by @cyphar)
|
|
|
|
|
* Fix thread safety of SelinuxEnabled and getSelinuxMountPoint (#1216 by @eparis)
|
2020-05-01 17:44:27 +08:00
|
|
|
* `*`: add information about security mailing list (#1213 by @cyphar)
|
2020-05-01 02:02:37 +08:00
|
|
|
* Fix typo. (#1211 by @yummypeng)
|
|
|
|
|
* Fix typo (#1210 by @xianlubird)
|
|
|
|
|
* delete unused variable (#1207 by @datawolf)
|
|
|
|
|
* tiny refactor (#1208 by @datawolf)
|
|
|
|
|
* fix typos (#1204 by @allencloud)
|
|
|
|
|
* Fix cpuset issue with cpuset.cpu_exclusive (#1194 by @hqhq)
|
|
|
|
|
* Sync with grandchild (#1154 by @hqhq)
|
|
|
|
|
* godeps: update go-systemd to v14 (#1199 by @squeed)
|
|
|
|
|
* Add shell formatting via shfmt (#1192 by @mvdan)
|
|
|
|
|
* Fixing error message in nsexec (#1187 by @rajasec)
|
|
|
|
|
* fix the pid-file option for runc exec/run/create command (#1128 by @datawolf)
|
|
|
|
|
* Adding update command in help-bats (#1182 by @rajasec)
|
|
|
|
|
* Add --all flag to kill (#1180 by @crosbymichael)
|
|
|
|
|
* More fix to nsexec.c's comments (#1168 by @hqhq)
|
|
|
|
|
* Add bash completions for new flags of `update` (#1177 by @WeiZhang555)
|
|
|
|
|
* Allow update rt_period_us and rt_runtime_us (#1173 by @WeiZhang555)
|
|
|
|
|
* add test cases for exec command (#1133 by @datawolf)
|
|
|
|
|
* libcontainer: io: stop screwing with \n in console output (#1146 by @cyphar)
|
|
|
|
|
* Move ambient capabilties behind build tag (#1172 by @crosbymichael)
|
|
|
|
|
* Remove panic from init (#1117 by @crosbymichael)
|
|
|
|
|
* fix error message (#1171 by @Crazykev)
|
|
|
|
|
* nsenter: fix up comments (#1165 by @cyphar)
|
|
|
|
|
* Fix all typos found by misspell (#1160 by @hqhq)
|
|
|
|
|
* Updating container state and status API in README (#1157 by @rajasec)
|
|
|
|
|
* Unify rootfs validation (#1159 by @hqhq)
|
|
|
|
|
* Small correction in update resource file usage (#1161 by @rajasec)
|
|
|
|
|
* Correction in util error messages (#1162 by @rajasec)
|
|
|
|
|
* man page update for delete command (#1163 by @rajasec)
|
|
|
|
|
* Clarify libseccomp installation in guide (#1164 by @resouer)
|
|
|
|
|
* Remove unnecessary cloneflag validation (#1153 by @hqhq)
|
|
|
|
|
* Detect and forbid duplicated namespace in spec (#1150 by @WeiZhang555)
|
|
|
|
|
* Make parent mount private before bind mounting rootfs (#1148 by @rhvgoyal)
|
2020-05-01 17:44:27 +08:00
|
|
|
* validator: unbreak sysctl `net.*` validation (#1149 by @cyphar)
|
2020-05-01 02:02:37 +08:00
|
|
|
* Check pid file (#1147 by @datawolf)
|
|
|
|
|
* nsenter: guarantee correct user namespace ordering (#977 by @cyphar)
|
|
|
|
|
* Small typo in README (#1141 by @rajasec)
|
|
|
|
|
* check the arguments for `runc create` (#1129 by @datawolf)
|
|
|
|
|
* docker/docker#27484-check if sysctls are used in host network mode. (#1138 by @gaocegege)
|
|
|
|
|
* rootfs: make pivot_root not use a temporary directory (#1125 by @cyphar)
|
|
|
|
|
* Updating bash completion for ps command (#1140 by @rajasec)
|
|
|
|
|
* fix nits in stderr log (#1139 by @allencloud)
|
|
|
|
|
* add test cases for create command (#1132 by @datawolf)
|
|
|
|
|
* add test cases for list command (#1131 by @datawolf)
|
|
|
|
|
* Add support for copying up directories into tmpfs when a tmpfs is mounted over them (#845 by @mrunalp)
|
|
|
|
|
* Some refactor and cleanup (#1134 by @WeiZhang555)
|
|
|
|
|
* Fix issue in `GetProcessStartTime` (#1136 by @yongtang)
|
|
|
|
|
* Ignore error when starting transient unit that already exists (#1124 by @derekwaynecarr)
|
|
|
|
|
* tests: mask: use test paths rather than /sys (#1121 by @cyphar)
|
|
|
|
|
* ps error logging improvement (#1091 by @rajasec)
|
|
|
|
|
* checkpoint: fix gofmt (#1120 by @cyphar)
|
|
|
|
|
* update the man for runc delete command (#1118 by @datawolf)
|
|
|
|
|
* Add num check for kill command (#1105 by @keloyang)
|
|
|
|
|
* Fixing runc panic for missing file mode (#1115 by @rajasec)
|
|
|
|
|
* Add support for r/o mount labels (#1112 by @rhatdan)
|
|
|
|
|
* start multi-containers with `runc start` command (#1074 by @datawolf)
|
|
|
|
|
* pause and resume multi-containers (#1075 by @datawolf)
|
|
|
|
|
* Fixing runc panic during hugetlb pages (#1116 by @rajasec)
|
|
|
|
|
* Valide platform on loading config.json (#1114 by @coolljt0725)
|
|
|
|
|
* DupSecOpt needs to match InitLabels (#1109 by @rhatdan)
|
|
|
|
|
* tiny fix, add a null check for specs.Resources.Pids.Limit (#1111 by @keloyang)
|
|
|
|
|
* remove /tmp/bats from dev_runc (#1097 by @keloyang)
|
|
|
|
|
* fix typos with misspell (#1108 by @dqminh)
|
|
|
|
|
* just fix a typo (#1107 by @datawolf)
|
|
|
|
|
* tiny fix (#1106 by @xlgao-zju)
|
|
|
|
|
* Delete: exit with non zero if one of the containers encountered an error (#1078 by @datawolf)
|
|
|
|
|
* Revert "simplify ps command" (#1102 by @datawolf)
|
|
|
|
|
* Add integration test for ps command (#784 by @hqhq)
|
|
|
|
|
* simplify ps command (#1092 by @datawolf)
|
|
|
|
|
* Don't enable kernel mem if not set (#1095 by @crosbymichael)
|
|
|
|
|
* systemd cgroup driver supports slice management (#1084 by @derekwaynecarr)
|
|
|
|
|
* Ensure we log into logrus on command error (#1089 by @mlaventure)
|
|
|
|
|
* Remove check for binding to / (#1090 by @crosbymichael)
|
|
|
|
|
* Fix typo when container does not exist (#1087 by @williammartin)
|
|
|
|
|
|
|
|
|
|
## v1.0.0-rc2 [2016-10-01]
|
|
|
|
|
|
|
|
|
|
* Bump spec and version to rc2 (#1088 by @crosbymichael)
|
|
|
|
|
* Set ambient capabilities where supported (#1086 by @justincormack)
|
|
|
|
|
* Refactor enum map range to slice range (#1081 by @ggaaooppeenngg)
|
|
|
|
|
* Remove the workaround which add a -- flag to runc ps command (#1065 by @keloyang)
|
|
|
|
|
* Fix TestGetAdditionalGroups on i686 (#1080 by @hqhq)
|
|
|
|
|
* [integration] add testcases for `runc delete` command (#1069 by @datawolf)
|
|
|
|
|
* Container must not checkpoint in created state (#1076 by @rajasec)
|
|
|
|
|
* Updating libcontainer README for container run (#1077 by @rajasec)
|
|
|
|
|
* MaskPaths: support directory (#1068 by @AkihiroSuda)
|
|
|
|
|
* Bug fix for make dbuild (#1072 by @keloyang)
|
|
|
|
|
* [unittest] add extra ErrorCode in TestErrorCode testcase (#1063 by @datawolf)
|
|
|
|
|
* Ps/exec parameter fix (#1051 by @keloyang)
|
|
|
|
|
* enhance runc delete command (#1053 by @datawolf)
|
|
|
|
|
* cgroup: using WriteCgroupProc to write the specified pid into the cgroup's cgroup.procs file (#1059 by @datawolf)
|
|
|
|
|
* update the comment for container.Pause() method on linux (#1058 by @datawolf)
|
|
|
|
|
* Add flag to allow getting all mounts for cgroups subsystems (#1049 by @mrunalp)
|
|
|
|
|
* Use same state object for state and list (#1048 by @crosbymichael)
|
|
|
|
|
* Fix typo (#1060 by @yummypeng)
|
|
|
|
|
* remove duplicate test command on integration (#1056 by @datawolf)
|
|
|
|
|
* Fix update cpuset on single processor box (#1052 by @hqhq)
|
|
|
|
|
* Update golang to 1.7.1 (#1055 by @hqhq)
|
|
|
|
|
* Fix error messages to give information of relabeling failed (#1046 by @rhatdan)
|
|
|
|
|
* Fix check config (#1023 by @zhaoleidd)
|
|
|
|
|
* Allow recrusive generic error (#1045 by @hqhq)
|
|
|
|
|
* Continue for list on errors (#1039 by @crosbymichael)
|
|
|
|
|
* Removing fatal error from events in stopped state (#1043 by @rajasec)
|
|
|
|
|
* move m.GetPaths out of the loop (#1042 by @datawolf)
|
|
|
|
|
* Add privileged to make dbuild (#1022 by @hqhq)
|
|
|
|
|
* Adding bash completion for create and run (#1027 by @rajasec)
|
|
|
|
|
* Update runtime-spec to current upstream (#1036 by @athomason)
|
|
|
|
|
* Fix make release error (#1038 by @keloyang)
|
|
|
|
|
* Fix runc ps issue (#1013 by @hqhq)
|
|
|
|
|
* Fix typo. (#1028 by @yummypeng)
|
|
|
|
|
* Change netclassid json tag (#1033 by @crosbymichael)
|
|
|
|
|
* Introduce make release (#914 by @zhaoleidd)
|
|
|
|
|
* Typo in README.md (#1026 by @rajasec)
|
|
|
|
|
* remove redundant by in annotation(nsexec.c) (#1019 by @keloyang)
|
|
|
|
|
* Append string "-dirty" to version if git repo is unclean (#1017 by @WeiZhang555)
|
|
|
|
|
* Tiny refactor: remove unused local variables (#1024 by @WeiZhang555)
|
|
|
|
|
* Makefile: Fix wrong dependency of "integration" target (#1020 by @forever043)
|
|
|
|
|
* Fix null point reference panic (#1012 by @hqhq)
|
|
|
|
|
* Fix default cgroup path (#1009 by @hqhq)
|
|
|
|
|
* Combine runctestimage and runcimage (#1008 by @hqhq)
|
|
|
|
|
* Fix runtime-spec repository reference in README (#1011 by @jonboulle)
|
|
|
|
|
* Error handling when container not exists (#1003 by @rajasec)
|
|
|
|
|
* Not exec a container from stopped state (#880 by @rajasec)
|
|
|
|
|
* cli: Workaround for ps's argument (#933 by @zhaoleidd)
|
|
|
|
|
* Add "--" exec cli support for command arguments (#906 by @TristanCacqueray)
|
|
|
|
|
* Updated the libcontainer interface comments (#815 by @rajasec)
|
|
|
|
|
* Return 0 for pid if container is stopped (#1002 by @crosbymichael)
|
|
|
|
|
* Fix and refactor init args (#934 by @macrosheep)
|
|
|
|
|
* Support 32 bit UID on i386 (#988 by @chlunde)
|
|
|
|
|
* let defer function (#997 by @xiekeyang)
|
|
|
|
|
* Test: Make TestCaptureTestFunc pass in localunittest (#987 by @zhaoleidd)
|
|
|
|
|
* Adjust man pages for create start split (#878 by @hqhq)
|
|
|
|
|
* Restored-from-checkpoint containers should have a start time (#995 by @estesp)
|
|
|
|
|
* Fix race condition when using cgroups.Paths (#970 by @hqhq)
|
|
|
|
|
* remove unused code (#994 by @xiekeyang)
|
|
|
|
|
* Disable the subreaper on exec (#993 by @crosbymichael)
|
|
|
|
|
* move util function (#992 by @xiekeyang)
|
|
|
|
|
* Fix format specifier for size_t (#989 by @mrunalp)
|
|
|
|
|
* nsenter: major cleanups (#950 by @cyphar)
|
|
|
|
|
* checkMountDesktionation: add swaps and uptime to /proc whitelist (#985 by @hallyn)
|
|
|
|
|
* Do not create /dev/fuse by default (#983 by @justincormack)
|
|
|
|
|
* Set the cpu cgroup RT sched params before joining. (#860 by @bgray)
|
|
|
|
|
* Adding /proc/timer_list to the masked paths list (#981 by @dims)
|
|
|
|
|
* tests: add requires cgroups_kmem (#972 by @brauner)
|
|
|
|
|
* libcontainer/configs: make hooks run safer (#980 by @LK4D4)
|
|
|
|
|
* Fix the err info of chdir(cwd) failure (#979 by @haiyanmeng)
|
|
|
|
|
* Fix the err info of mount failure (#978 by @haiyanmeng)
|
|
|
|
|
* Use absolute cgroup path for integration test (#974 by @hqhq)
|
|
|
|
|
* Cleanup GetLongBit (#968 by @hqhq)
|
|
|
|
|
* Remove kmem Initialization check while setting memory configuration (#962 by @dubstack)
|
|
|
|
|
* fix init.scope in cgroup paths (#966 by @sjenning)
|
|
|
|
|
* Skip updates on parent Devices cgroup (#958 by @dubstack)
|
|
|
|
|
* Change git -C reset to git reset (#943 by @johnbieren)
|
|
|
|
|
* libcontainer: rename keyctl package to keys (#963 by @guilhermebr)
|
|
|
|
|
* UNITTEST: Bypass userns test on platform without userns support (#964 by @zhaoleidd)
|
|
|
|
|
* Fix help message for memory-swap (#850 by @hqhq)
|
|
|
|
|
* Revert "Use update time to detect if kmem limits have been set" (#961 by @hqhq)
|
|
|
|
|
* Fix cgroup Set when Paths are specified (#611 by @mrunalp)
|
|
|
|
|
* Allow cgroup creation without attaching a pid (#956 by @dubstack)
|
|
|
|
|
* Add runc list man change (#954 by @hqhq)
|
|
|
|
|
* integration_testing: Fix a output typo (#957 by @zhaoleidd)
|
|
|
|
|
* Fix libcontainer/nsenter/README.md (#951 by @haiyanmeng)
|
|
|
|
|
* fix setting net_cls classid (#937 by @hushan)
|
|
|
|
|
* Fixed typo in build constraint. (#947 by @hencrice)
|
2020-05-01 17:44:27 +08:00
|
|
|
* configs: fix json tags for `CpuRt*` options (#949 by @cyphar)
|
2020-05-01 02:02:37 +08:00
|
|
|
* libcontainer: Add a helper func to set CriuPath (#936 by @macrosheep)
|
|
|
|
|
* Let the user explicitly specify `additionalGids` on `runc exec` (#913 by @georgethebeatle)
|
|
|
|
|
* Fix typo (#942 by @ggaaooppeenngg)
|
|
|
|
|
* address issue #797 by adding additional documentation (#939 by @mikebrow)
|
|
|
|
|
* Use update time to detect if kmem limits have been set (#935 by @vishh)
|
|
|
|
|
* Make state detection precise (#930 by @hqhq)
|
|
|
|
|
* Add force to delete (#928 by @mlaventure)
|
|
|
|
|
* Use git branch name as tag when building images (#929 by @mlaventure)
|
|
|
|
|
* rootfs: clean up (#925 by @cyphar)
|
|
|
|
|
* tests: add tests with {u,g}id != 0 (#922 by @cyphar)
|
|
|
|
|
* Fix ps argument manual (#919 by @zhaoleidd)
|
|
|
|
|
* remove unused returned variables name (#917 by @xiekeyang)
|
|
|
|
|
* Fix fifo usage with userns and not root users (#912 by @crosbymichael)
|
|
|
|
|
* cgroups: Fix issue if cgroup path contains : (#904 by @euank)
|
|
|
|
|
* Use cli default value for list format (#879 by @hqhq)
|
|
|
|
|
* Update for stopped container (#881 by @rajasec)
|
|
|
|
|
* tests: add debug information for failing tests (#889 by @cyphar)
|
|
|
|
|
* Use fifo for create / start instead of signal handling (#886 by @crosbymichael)
|
|
|
|
|
* Removing unused variable for cgroup subsystem (#908 by @rajasec)
|
|
|
|
|
* Update readme for create start (#905 by @crosbymichael)
|
|
|
|
|
* Add option to disable new session keys (#874 by @crosbymichael)
|
|
|
|
|
* bug fix, LeafWeight nil err (#893 by @keloyang)
|
|
|
|
|
* fail if path to devices subsystem is missing (#896 by @brauner)
|
|
|
|
|
* readme: Mention the go 1.6 requirement in the README for building runc (#902 by @mrunalp)
|
|
|
|
|
* bats: Fix spec validation test (#900 by @mrunalp)
|
|
|
|
|
* godeps: bump libseccomp-golang to 32f571b70023028bd57d9288c20efbcb237f3ce0 (#894 by @cyphar)
|
|
|
|
|
* Add error return to action function signature (#891 by @mrunalp)
|
|
|
|
|
* restore: add the empty-ns option (#890 by @avagin)
|
|
|
|
|
* Replace github.com/codegangsta/cli by github.com/urfave/cli (#885 by @mrunalp)
|
|
|
|
|
* Updating README for starting the container (#877 by @rajasec)
|
|
|
|
|
* cleanup ps.go (#882 by @hushan)
|
|
|
|
|
|
|
|
|
|
## v1.0.0-rc1 [2016-06-04]
|
|
|
|
|
|
|
|
|
|
* Bump spec and update runc to 1.0.0-rc1 (#876 by @crosbymichael)
|
|
|
|
|
* Fixed typo in docstring (#873 by @joe2far)
|
|
|
|
|
* Updating README with set interface (#868 by @rajasec)
|
|
|
|
|
* runc events hang for zero duration (#872 by @rajasec)
|
|
|
|
|
* Implement create and start (#827 by @crosbymichael)
|
|
|
|
|
* Removing the nil check for process label (#867 by @rajasec)
|
|
|
|
|
* Add annotations to list and state output (#869 by @crosbymichael)
|
|
|
|
|
* seccomp: Add ppc and s390x to seccomp/config.go (#864 by @michael-holzheu)
|
|
|
|
|
* bash completion step for update command (#854 by @rajasec)
|
|
|
|
|
* Update man pages to refect the latest cli change (#851 by @hqhq)
|
|
|
|
|
* Improve update memory (#857 by @hqhq)
|
|
|
|
|
* systemd cgroup: check for Delegate property (#865 by @dqminh)
|
|
|
|
|
* Disallow self-LGTMs (#863 by @hqhq)
|
|
|
|
|
* README: Destroy container before fatal (#852 by @hqhq)
|
|
|
|
|
* Add VERSION file to contain the version info (#856 by @hqhq)
|
|
|
|
|
* Remove use_hierarchy check when set kernel memory (#853 by @hqhq)
|
|
|
|
|
* Changing OCF to OCI in README (#855 by @rajasec)
|
|
|
|
|
* Update manuals (#843 by @zhaoleidd)
|
|
|
|
|
* Integration framework cleanup (#837 by @cyphar)
|
|
|
|
|
* checkpoint: add the empty-ns option (#849 by @avagin)
|
|
|
|
|
* pullapprove: use the right team (#848 by @cyphar)
|
|
|
|
|
* Add PullApprove support (#847 by @caniszczyk)
|
|
|
|
|
* Add bash completion support (#817 by @rhatdan)
|
|
|
|
|
* Allow + in container ID (#675 by @pankit)
|
|
|
|
|
* Unify log setting's error output (#844 by @zhaoleidd)
|
|
|
|
|
* godeps: update seccomp to 60c9953736798c4a04e90d0f3da2f933d44fd4c4 (#842 by @cyphar)
|
|
|
|
|
* Fix update kernel memory test (#828 by @hqhq)
|
2020-05-01 17:44:27 +08:00
|
|
|
* `*`: correctly chown() consoles (#836 by @cyphar)
|
2020-05-01 02:02:37 +08:00
|
|
|
* Update cli package (#810 by @hqhq)
|
|
|
|
|
* Fix outdated comment for loadSpec (#835 by @zhaoleidd)
|
|
|
|
|
* Fix some spelling typo in manual (#833 by @zhaoleidd)
|
|
|
|
|
* libcontainer: Fix Running Comment (#832 by @valasabk)
|
|
|
|
|
* Updated description in SPEC (#830 by @rajasec)
|
|
|
|
|
* Add check_config.sh for runc (#826 by @hqhq)
|
|
|
|
|
* Add comments for error cases in status functions (#825 by @hqhq)
|
|
|
|
|
* integration: fix cgroup parsing (#812 by @cyphar)
|
|
|
|
|
* Update nsenter README (#824 by @ggaaooppeenngg)
|
|
|
|
|
* Updating runc man page (#822 by @rajasec)
|
2020-05-01 17:44:27 +08:00
|
|
|
* Fix GetLongBit() returns value when `_SC_LONG_BIT` is not available (#823 by @mlaventure)
|
2020-05-01 02:02:37 +08:00
|
|
|
* libcontainer: nsenter: nsexec.c: fix warnings (#821 by @runcom)
|
|
|
|
|
* Revert "Need to make sure labels applied to /dev" (#816 by @cyphar)
|
|
|
|
|
* Adding kernel mem tcp for update command (#813 by @rajasec)
|
|
|
|
|
* Add man page and fix typo for update command (#809 by @hqhq)
|
|
|
|
|
* Runc update cgroup kmem limit (#790 by @mlaventure)
|
|
|
|
|
* Use full test suite on make test (#783 by @cyphar)
|
|
|
|
|
* Updating error condition in applying apparmor profile (#804 by @rajasec)
|
|
|
|
|
* Change OCF to OCI in help string and man page. (#800 by @mrunalp)
|
|
|
|
|
* Need to make sure labels applied to /dev (#796 by @rhatdan)
|
|
|
|
|
* Use '=' instead of ':' separator on labels (#793 by @bboreham)
|
|
|
|
|
* Correct outdated URL (#795 by @jimberlage)
|
|
|
|
|
* If possible, apply seccomp rules immediately before exec (#789 by @justincormack)
|
|
|
|
|
* Change specs to runtime-spec in integration test (#782 by @hqhq)
|
|
|
|
|
* Fix integration test for events (#786 by @hqhq)
|
|
|
|
|
* Remove sniffTest (#785 by @hqhq)
|
|
|
|
|
* Improve stats output format for stability (#780 by @crosbymichael)
|
|
|
|
|
* Add json format to ps command (#779 by @crosbymichael)
|
|
|
|
|
* Add ps command (#767 by @hqhq)
|
|
|
|
|
* Not showing up the events for destroyed container (#768 by @rajasec)
|
|
|
|
|
* libcontainer: specconv: fix nil dereference in resource setup (#777 by @cyphar)
|
|
|
|
|
* Updating README for runc path (#776 by @rajasec)
|
|
|
|
|
* Adding selinux check during container start (#679 by @rajasec)
|
|
|
|
|
* Eliminate redundant parsing of mountinfo (#608 by @inatatsu)
|
|
|
|
|
* Bump up spec and add support for mount label (#773 by @mrunalp)
|
|
|
|
|
* Add target man in Makefile (#766 by @hqhq)
|
|
|
|
|
* adds client api integration tests for runc using bash w/bats (#659 by @mikebrow)
|
|
|
|
|
* Updating kcore in validator test (#772 by @rajasec)
|
|
|
|
|
* Fixing index out of range during exec of container (#740 by @rajasec)
|
|
|
|
|
* Add infomation about ocitools in runc spec (#765 by @hqhq)
|
|
|
|
|
* Makefile fixes (#738 by @codido)
|
|
|
|
|
* Update the comment for container pause (#758 by @rajasec)
|
|
|
|
|
* Add -q to list to print only container IDs (#751 by @mrunalp)
|
|
|
|
|
* nsexec: fix build against musl libc (#762 by @ncopa)
|
|
|
|
|
* Allow mounting cgroups as read-only when user namespace is configured (#763 by @mrunalp)
|
|
|
|
|
* Add cause to error messages (#759 by @crosbymichael)
|
|
|
|
|
* Typo in SPEC.md (#757 by @rajasec)
|
|
|
|
|
* handling error for userns (#672 by @rajasec)
|
|
|
|
|
* updating man page for start option (#753 by @rajasec)
|
|
|
|
|
* Fix OCI reference in README (#749 by @jonboulle)
|
|
|
|
|
* README.md: simplify Docker image example (#748 by @runcom)
|
|
|
|
|
* Switch from mixed jessie/testing to jessie+backports for libseccomp (#750 by @tianon)
|
|
|
|
|
* Get runc to build clean on Solaris (#747 by @amitkris)
|
|
|
|
|
* Fix trivial style errors reported by `go vet` and `golint` (#745 by @AkihiroSuda)
|
|
|
|
|
|
|
|
|
|
## v0.1.1 [2016-04-25]
|
|
|
|
|
|
|
|
|
|
* Bump to v0.1.1 for selinux mount label fix (#778 by @crosbymichael)
|
|
|
|
|
|
|
|
|
|
## v0.1.0 [2016-04-12]
|
|
|
|
|
|
|
|
|
|
* Update to version 0.1.0 (#746 by @crosbymichael)
|
|
|
|
|
* Makefile: install to /usr/local/sbin (#702 by @cyphar)
|
|
|
|
|
* Fix problem when swap memory unsupported (#744 by @hqhq)
|
|
|
|
|
* Add unit tests for the utils package (#739 by @albertoleal)
|
|
|
|
|
* Add unit tests for configs.Hooks (#717 by @albertoleal)
|
|
|
|
|
* HookState adhears to OCI (#724 by @glestaris)
|
|
|
|
|
* Fix setupDev logic in rootfs_linux.go (#742 by @LK4D4)
|
|
|
|
|
* Fix for runc failing when rootfs has a trailing slash (#736 by @mrunalp)
|
|
|
|
|
* Add label.GetFileLabel interface (#730 by @rhatdan)
|
|
|
|
|
* Fix broken build due to missing import (#737 by @mrunalp)
|
|
|
|
|
* Synchronize writes to mcs map (#735 by @mrunalp)
|
|
|
|
|
* Report hook output on error (#734 by @crosbymichael)
|
|
|
|
|
* Fix the build by removing go get for vet (#729 by @mrunalp)
|
|
|
|
|
* Updating README with container signal interaction (#722 by @rajasec)
|
|
|
|
|
* Add unit tests for validate.Validator (#718 by @albertoleal)
|
|
|
|
|
* Typo on Readme file. (#723 by @albertoleal)
|
|
|
|
|
* Fix problem when update memory and swap memory (#592 by @hqhq)
|
|
|
|
|
* Bump spec for masked and readonly paths (#716 by @crosbymichael)
|
|
|
|
|
* Fixing rlimit sigpending value (#721 by @rajasec)
|
|
|
|
|
* Fixup incorrect package name in a comment (#712 by @mrunalp)
|
|
|
|
|
* Return a more meaningful error when namespaces are disabled (#711 by @rhatdan)
|
|
|
|
|
* Add --no-pivot option for containers on ramdisk (#710 by @crosbymichael)
|
|
|
|
|
* libcontainer: user: always treat numeric ids numerically (#708 by @cyphar)
|
|
|
|
|
* Remove container root dir from an aborted start (#703 by @crosbymichael)
|
|
|
|
|
* Bump spec and implement hook timeout (#706 by @crosbymichael)
|
|
|
|
|
* Only perform mount labelling when necessary (#683 by @thtanaka)
|
|
|
|
|
* Fix hanging tests when run without root (#700 by @marcosnils)
|
|
|
|
|
* Refactor nsexec.c and add some comments (#686 by @hqhq)
|
|
|
|
|
* Use %v for map structure format (#698 by @ggaaooppeenngg)
|
|
|
|
|
* Fix typo (#699 by @ggaaooppeenngg)
|
|
|
|
|
* Fix libcontainer README.md example config (#696 by @hartzler)
|
|
|
|
|
* Set rlimits using prlimit in parent (#687 by @julz)
|
|
|
|
|
* Remove log from seccomp package (#691 by @crosbymichael)
|
|
|
|
|
* Export CreateLibcontainerConfig (#688 by @codido)
|
|
|
|
|
* Move lockthread to package level (#690 by @crosbymichael)
|
|
|
|
|
* fix typos (#685 by @allencloud)
|
|
|
|
|
* Dont cleanPath for systemd cgroup paths. (#682 by @anusha-ragunathan)
|
|
|
|
|
* Add support for enabling systemd cgroups (#667 by @mrunalp)
|
|
|
|
|
* Show proper error from init process panic (#677 by @tonistiigi)
|
|
|
|
|
* fixing typo in device access error (#673 by @rajasec)
|
|
|
|
|
* Set oom_score_adj before we send the config to avoid race (#668 by @mrunalp)
|
|
|
|
|
* Fix the kmem TCP test (#669 by @mrunalp)
|
|
|
|
|
* Add more information in the error messages when writing to a file (#651 by @mrunalp)
|
|
|
|
|
* libcontainer: cgroups: deal with unlimited case for pids.max (#644 by @cyphar)
|
|
|
|
|
* libcontainer: cgroups: add support for kmem.tcp limits (#665 by @cyphar)
|
|
|
|
|
* Export user and group lookup errors as variables. (#650 by @novln)
|
|
|
|
|
* adds detail to runc start and spec help text (#661 by @mikebrow)
|
|
|
|
|
* Fixing valid-id in regex (#647 by @rajasec)
|
|
|
|
|
* Fix help info of init command (#658 by @hqhq)
|
|
|
|
|
* remove deadcode (#653 by @jessfraz)
|
|
|
|
|
* Sync on the pid file to ensure the write is persisted (#655 by @mrunalp)
|
|
|
|
|
* Create pid-file atomically (#652 by @crosbymichael)
|
|
|
|
|
* Destroy container along with processes before stdio (#646 by @crosbymichael)
|
|
|
|
|
* Don't link runc every time (#604 by @hqhq)
|
|
|
|
|
* Set Delegate to true for cgroups transient units (#648 by @mrunalp)
|
|
|
|
|
* Ensure logs are flushed (#637 by @crosbymichael)
|
|
|
|
|
* MAINTAINERS: add Aleksa Sarai to maintainers (#503 by @cyphar)
|
|
|
|
|
* Adding spec validation for exec and start (#623 by @rajasec)
|
|
|
|
|
* Add make uninstall command (#643 by @hqhq)
|
|
|
|
|
* Fix encoding gid mappings (#638 by @hqhq)
|
|
|
|
|
* Call Prestart hooks before restoring processes (#576 by @avagin)
|
|
|
|
|
* libcontainer: cgroups: add pids.max to PidsStats (#640 by @cyphar)
|
|
|
|
|
* Changing from logrus to fatal in list (#639 by @rajasec)
|
|
|
|
|
* Add gitcommit to runc builds (#636 by @crosbymichael)
|
|
|
|
|
* Clear groups after entering userns (#634 by @tonistiigi)
|
|
|
|
|
* Bump spec v0.4 (#633 by @crosbymichael)
|
|
|
|
|
* Revert "Return proper exit code for exec errors" (#630 by @crosbymichael)
|
|
|
|
|
|
|
|
|
|
## v0.0.9 [2016-03-10]
|
|
|
|
|
|
|
|
|
|
* nsexec: don't use CLONE_PARENT and CLONE_NEWPID together (#632 by @adfernandes)
|
|
|
|
|
* Improve error handling in runc (#628 by @crosbymichael)
|
|
|
|
|
* Create pid file when not exist (#597 by @rajasec)
|
|
|
|
|
* Handling error condition in loadspec (#622 by @rajasec)
|
|
|
|
|
* Add man pages (#614 by @mrunalp)
|
|
|
|
|
* Remove duplicated included head file (#616 by @hqhq)
|
|
|
|
|
* Serialize CommandHooks to state so that PostStop hooks execute during 'runc delete' (#618 by @teddyking)
|
|
|
|
|
* Add the most basic sniff tests of runc (#554 by @duglin)
|
|
|
|
|
* Cleanup systemd apply (#491 by @hqhq)
|
|
|
|
|
* Remove no longer used uid/gid mapping functions (#621 by @estesp)
|
|
|
|
|
* Properly setuid/setgid after entering userns (#606 by @estesp)
|
|
|
|
|
* Stub RunningInUserNS for non-Linux (#620 by @estesp)
|
|
|
|
|
* Update specs dep and runc functionality (#619 by @crosbymichael)
|
|
|
|
|
* Eliminating checkpoint state in container (#610 by @rajasec)
|
|
|
|
|
* Fix build error on centos6 (#609 by @hustcat)
|
|
|
|
|
* Fix handling of unsupported namespaces (#607 by @codido)
|
|
|
|
|
* adds the spec required state command (#605 by @mikebrow)
|
|
|
|
|
* Set sysfs readonly in config (#603 by @hqhq)
|
|
|
|
|
* Update masked and ro paths (#595 by @crosbymichael)
|
|
|
|
|
* Move setns within nsexec (#454 by @mlaventure)
|
|
|
|
|
* Fix to allow for build in different path (#600 by @duglin)
|
|
|
|
|
* Fix race between Apply and GetStats (#601 by @LK4D4)
|
|
|
|
|
* Adding linux label to test file (#579 by @rajasec)
|
|
|
|
|
* Updating swapiness value in README (#598 by @rajasec)
|
|
|
|
|
* Add hqhq to MAINTAINERS (#599 by @hqhq)
|
|
|
|
|
* Fix setting OomScoreAdj from OCI spec (#590 by @tonistiigi)
|
|
|
|
|
* Use single decoder instance for one stream (#596 by @hushan)
|
|
|
|
|
* Remount /dev as ro after it is populated (#585 by @crosbymichael)
|
|
|
|
|
* Build runC binary via a Docker container (#443 by @BenHall)
|
|
|
|
|
* Add bundle to runc list (#587 by @crosbymichael)
|
|
|
|
|
* Return proper exit code for exec errors (#591 by @crosbymichael)
|
|
|
|
|
* Wait for pipes to write all data before exit (#593 by @crosbymichael)
|
|
|
|
|
* Allow extra mount types (#594 by @crosbymichael)
|
|
|
|
|
* Removing pivot directory in defer (#588 by @rajasec)
|
|
|
|
|
* Make runc buildable everywhere (#328 by @hqhq)
|
|
|
|
|
* Create unique session key name for every container (#582 by @stefanberger)
|
|
|
|
|
* Add validation for sysctl (#303 by @mrunalp)
|
|
|
|
|
* Added error check in Getfilecon (#584 by @rajasec)
|
|
|
|
|
* Handle memory swappiness default properly (#580 by @estesp)
|
|
|
|
|
* Move pre-start hooks after container mounts (#568 by @mrunalp)
|
|
|
|
|
* Make sure container is destroyed on error (#583 by @crosbymichael)
|
|
|
|
|
* adding --format json to list command (#571 by @mikebrow)
|
|
|
|
|
* Move the process outside of the systemd cgroup (#577 by @crosbymichael)
|
|
|
|
|
* Look for " - " instead of just - as separator (#573 by @LK4D4)
|
|
|
|
|
* Removing tty0 tty1 from allowed devices (#567 by @rajasec)
|
|
|
|
|
* Check if tty is nil in handler (#570 by @crosbymichael)
|
|
|
|
|
* Fix CgroupsPath interpretation (#569 by @mlaventure)
|
|
|
|
|
* updating usage for runc, and all runc commands that now use <container id> as the first argument (#546 by @mikebrow)
|
|
|
|
|
* Do not set devices cgroup entries if in a user namespace (#564 by @hallyn)
|
|
|
|
|
* libcontainer: integration: fix flaky pids limit tests (#553 by @cyphar)
|
|
|
|
|
* Remove unneeded cgroups path removal (#556 by @hqhq)
|
|
|
|
|
* panic during start of failed detached container (#558 by @rajasec)
|
|
|
|
|
* Prevent a panic when container fails to start (#563 by @mlaventure)
|
|
|
|
|
* Add support for NoNewPrivileges (#557 by @mrunalp)
|
|
|
|
|
* Change softlink name to /dev/core (#561 by @rajasec)
|
|
|
|
|
* Register signal handlers earlier to avoid zombies (#562 by @julz)
|
|
|
|
|
* libcontainer: cgroups: fs: fix innerPath (#552 by @cyphar)
|
|
|
|
|
* Remove procStart (#526 by @hqhq)
|
|
|
|
|
* It's /proc/stat, not /proc/stats (#560 by @chenchun)
|
|
|
|
|
* Adding tty closure for restore operation (#550 by @rajasec)
|
|
|
|
|
|
|
|
|
|
## v0.0.8 [2016-02-10]
|
|
|
|
|
|
|
|
|
|
* Close tty on error before handler (#549 by @crosbymichael)
|
|
|
|
|
* Replace Cgroup Parent and Name fields by CgroupsPath (#497 by @mlaventure)
|
|
|
|
|
* Adding pids subsystem in SPEC.md (#545 by @rajasec)
|
|
|
|
|
* Create some util funcs that are common between start and exec (#537 by @duglin)
|
|
|
|
|
* Require container id as arg1 (#541 by @crosbymichael)
|
2020-05-01 17:44:27 +08:00
|
|
|
* `*`: use coreos/go-systemd/activation for socket activation (#542 by @runcom)
|
2020-05-01 02:02:37 +08:00
|
|
|
* Update spec to v0.3.0 (#536 by @crosbymichael)
|
|
|
|
|
* Fixing capabilities name in SPEC.md (#540 by @rajasec)
|
|
|
|
|
* Fixing usage in resume command (#539 by @rajasec)
|
|
|
|
|
* Load process.json for exec and add detach (#525 by @crosbymichael)
|
|
|
|
|
* Create a new session key for every container (#488 by @stefanberger)
|
|
|
|
|
* Added error string for process operations (#493 by @rajasec)
|
|
|
|
|
* Remove usage of GetMounts from GetCgroupMounts (#496 by @LK4D4)
|
|
|
|
|
* Add limit value to memory stats (#529 by @mlaventure)
|
|
|
|
|
* Add a compatibility header for CentOS/RHEL 6 (#524 by @adfernandes)
|
|
|
|
|
* Update list command and created methods (#522 by @crosbymichael)
|
|
|
|
|
* Remove version check in runc (#521 by @crosbymichael)
|
|
|
|
|
* update exec to pass args and --tty on run (#479 by @jessfraz)
|
|
|
|
|
* Remove double exec from command list (#523 by @crosbymichael)
|
|
|
|
|
* Add detach to runc (#474 by @crosbymichael)
|
|
|
|
|
* Fix the comment about sendConfig (#517 by @hqhq)
|
|
|
|
|
* adds list command (#507 by @mikebrow)
|
|
|
|
|
* cgroup: systemd: further systemd slice validation (#518 by @cyphar)
|
|
|
|
|
|
|
|
|
|
## v0.0.7 [2016-01-26]
|
|
|
|
|
|
|
|
|
|
* Bump runc version to 0.0.7 (#512 by @LK4D4)
|
|
|
|
|
* Do not use stream encoders for pipe communication (#515 by @crosbymichael)
|
|
|
|
|
* Update github.com/opencontainers/specs to a7b50925d8996923d99e (#514 by @mrunalp)
|
|
|
|
|
* cgroup: systemd: properly expand systemd slice names (#511 by @cyphar)
|
|
|
|
|
* Remove the nullState (#513 by @duglin)
|
|
|
|
|
* Adding user namespace in README (#504 by @rajasec)
|
|
|
|
|
* Fix various state bugs for pause and destroy (#499 by @crosbymichael)
|
|
|
|
|
* Revert "update date in README" (#510 by @hqhq)
|
|
|
|
|
* update date in README (#441 by @xlgao-zju)
|
|
|
|
|
* Add spec version to runC version cli (#405 by @marcosnils)
|
|
|
|
|
* Add build status badge (#505 by @marcosnils)
|
|
|
|
|
* Only set cwd when not empty (#494 by @crosbymichael)
|
|
|
|
|
* cgroups: set memory cgroups in Set (#495 by @cyphar)
|
|
|
|
|
* Remove some hard coded strings (#486 by @duglin)
|
|
|
|
|
* Fix comment of swap limit (#490 by @hqhq)
|
|
|
|
|
* Add support for just joining in apply using cgroup paths (#466 by @mrunalp)
|
|
|
|
|
* Embed Resources for backward compatibility (#476 by @hqhq)
|
|
|
|
|
* add seccomp.IsEnabled() function (#471 by @jessfraz)
|
|
|
|
|
* cleanup old hack dir (#481 by @jessfraz)
|
|
|
|
|
* Check that cwd is absolute (#480 by @mrunalp)
|
|
|
|
|
* Make cwd required (#475 by @mrunalp)
|
|
|
|
|
* selinux: add SelinuxSetEnforceMode implementation (#461 by @ahmetb)
|
|
|
|
|
* Update README of libcontainer (#462 by @hqhq)
|
|
|
|
|
* update go version to 1.5.3 in dockerfile and cleanup (#478 by @jessfraz)
|
|
|
|
|
* libcontainer: Add support for memcg pressure notifications (#426 by @codido)
|
|
|
|
|
* Only validate post-hyphen field length on cgroup mounts (#472 by @dadgar)
|
|
|
|
|
* Do not allow access to /dev/tty{0,1} (#455 by @hallyn)
|
|
|
|
|
* cgroup: add PIDs cgroup controller support (#446 by @cyphar)
|
|
|
|
|
* Add --console to specify path to use from runc (#459 by @crosbymichael)
|
|
|
|
|
* cgroups: fs: fix cgroup.Parent path sanitisation (#451 by @cyphar)
|
|
|
|
|
* Handle running nested in a user namespace (#458 by @hallyn)
|
|
|
|
|
* Revert to non-recursive GetPids, add recursive GetAllPids (#463 by @jimmidyson)
|
|
|
|
|
* Adding selinux label (#421 by @rajasec)
|
|
|
|
|
* make localtest failure with selinux enabled (#419 by @rajasec)
|
|
|
|
|
* Add white list for bind mount check (#452 by @hqhq)
|
|
|
|
|
* Cleanup Godeps (#448 by @hqhq)
|
|
|
|
|
* Implement Container States (#311 by @crosbymichael)
|
|
|
|
|
* Fix typo word in SPEC.md (#449 by @HackToday)
|
|
|
|
|
* Revert "cgroups: add pids controller support" (#445 by @mrunalp)
|
|
|
|
|
* cgroups: add pids controller support (#58 by @cyphar)
|
|
|
|
|
* Add NLA_HDRLEN workaround for gccgo (#437 by @clnperez)
|
|
|
|
|
* Move the cgroups setting into a Resources struct (#434 by @mrunalp)
|
|
|
|
|
* Move linux only Process.InitializeIO behind the linux build flag. (#436 by @calavera)
|
|
|
|
|
* Replace docker units package with new docker/go-units. (#435 by @calavera)
|
|
|
|
|
* Move STDIO initialization to libcontainer.Process (#430 by @crosbymichael)
|
|
|
|
|
|
|
|
|
|
## v0.0.6 [2015-12-11]
|
|
|
|
|
|
|
|
|
|
* update version for release 0.0.6 (#439 by @xlgao-zju)
|
|
|
|
|
* systemd: support cgroup parent with specified slice (#336 by @hqhq)
|
|
|
|
|
* fix minor typo (#432 by @xlgao-zju)
|
|
|
|
|
* Remove the timeframe for v1 spec (#431 by @hqhq)
|
|
|
|
|
* nsexec: replace usage of environment variable with netlink message (#340 by @dqminh)
|
|
|
|
|
* Export console New func (#428 by @crosbymichael)
|
|
|
|
|
* libcontainer: configs: create cgroup_unsupported.go in order to build on darwin as well (#420 by @runcom)
|
|
|
|
|
* libcontainer: network_linux.go: fix go vet (#424 by @runcom)
|
|
|
|
|
* Fixing xattr test step issue (#423 by @rajasec)
|
|
|
|
|
* README.md: clarify OCI JSON files (#371 by @hqhq)
|
|
|
|
|
* Fixing minor typo in usage (#415 by @rajasec)
|
|
|
|
|
* Adding error conditions when apparmor disabled (#411 by @rajasec)
|
|
|
|
|
|
|
|
|
|
## v0.0.5 [2015-11-20]
|
|
|
|
|
|
|
|
|
|
* Bump version constant to 0.0.5 in preparation for a new release (#410 by @tianon)
|
|
|
|
|
* godeps: update go-systemd to v4 and godbus/dbus to v3 (#408 by @runcom)
|
|
|
|
|
* libcontainer: configs: extend unsupported os (#407 by @runcom)
|
|
|
|
|
* Bind mount device nodes on EPERM (#357 by @ashahab-altiscale)
|
|
|
|
|
* adding support for --bundle (#373 by @mikebrow)
|
|
|
|
|
* static binary \o/ (#401 by @jessfraz)
|
|
|
|
|
* Fix comment to be consistent with the code (#403 by @hqhq)
|
|
|
|
|
* Add seccomp trace support (#398 by @crosbymichael)
|
|
|
|
|
* Some cgroup cleanups (#388 by @hqhq)
|
|
|
|
|
* Validate process configuration for runc exec (#391 by @mrunalp)
|
|
|
|
|
* Add poststart hooks (#392 by @mrunalp)
|
|
|
|
|
* Change my email address (#394 by @avagin)
|
|
|
|
|
* Fix race setting process opts (#393 by @crosbymichael)
|
|
|
|
|
* Windows: Refactor Container interface (#360 by @lowenna)
|
|
|
|
|
* Windows: Factor down criu_opts (#361 by @lowenna)
|
|
|
|
|
* Windows: Refactor state struct (#359 by @lowenna)
|
|
|
|
|
* Unify behavior for memory cgroup (#343 by @hqhq)
|
|
|
|
|
* README.md: fix description for runc with systemd (#375 by @hqhq)
|
|
|
|
|
* Docker needs to know whether the user requested a relabel (#377 by @rhatdan)
|
|
|
|
|
* Add more context around some error cases (#379 by @duglin)
|
|
|
|
|
* Remove naked return (#355 by @keloyang)
|
|
|
|
|
* Windows: Tidy libcontainer\devices (#365 by @lowenna)
|
|
|
|
|
* Windows: Refactor configs/cgroup.go (#362 by @lowenna)
|
2020-05-01 17:44:27 +08:00
|
|
|
* Fixes build tags on `cgroups\fs\*.go` (#364 by @lowenna)
|
2020-05-01 02:02:37 +08:00
|
|
|
* Add criu related debug output (#238 by @adrianreber)
|
|
|
|
|
* libcontainer/SPEC.md: fix /dev/stdio symlinks (#337 by @alban)
|
|
|
|
|
* Fixing typo in the comment for exit (#358 by @rajasec)
|
|
|
|
|
* Remove fatalf function; unused. (#354 by @warpfork)
|
|
|
|
|
* Add name to cgroup subsystem and set order (#335 by @crosbymichael)
|
|
|
|
|
* Add the conversion of architectures for seccomp config (#345 by @keloyang)
|
|
|
|
|
* Correct intuition for setupDev (#352 by @hqhq)
|
|
|
|
|
* Set cpuset.cpus and cpuset.mems before join the cgroup (#334 by @hqhq)
|
|
|
|
|
* Add ability to use json structured logging format. (#333 by @warpfork)
|
|
|
|
|
* Reorder checks in Walk to avoid panics (#332 by @LK4D4)
|
|
|
|
|
* Get PIDs from cgroups recursively (#330 by @LK4D4)
|
|
|
|
|
* Add option to support criu manage cgroups mode for dump and restore (#184 by @huikang)
|
|
|
|
|
* Add Andrey Vagin as maintainer (#177 by @LK4D4)
|
|
|
|
|
* Validate label options (#320 by @rhatdan)
|
|
|
|
|
* Add additional groups support (#324 by @mrunalp)
|
|
|
|
|
* Fix for race from error on process start (#316 by @cpuguy83)
|
|
|
|
|
* change named to names (#326 by @xlgao-zju)
|
|
|
|
|
* nsexec: Align clone child stack ptr to 16 (#319 by @dodgerblue)
|
|
|
|
|
* bump docker pkgs (#317 by @runcom)
|
|
|
|
|
* Add memory reservation support for systemd (#305 by @hqhq)
|
|
|
|
|
* Adapt spec 96bcd043aa8a28f6f64c95ad61329765f01de1ba (#276 by @runcom)
|
|
|
|
|
* Systemd name (#315 by @mrunalp)
|
|
|
|
|
* Allow numeric groups for containers without /etc/group (#313 by @ghost)
|
|
|
|
|
* Fix name in MAINTAINERS list (#314 by @LK4D4)
|
|
|
|
|
* change uid to gid in func HostGID (#312 by @xlgao-zju)
|
|
|
|
|
* Create container_private, container_slave and container_shared modes for rootfsPropagation (#208 by @rhvgoyal)
|
|
|
|
|
* Systemd: Join perf_event cgroup (#306 by @hqhq)
|
|
|
|
|
* Fix reOpenDevNull (#309 by @chenchun)
|
|
|
|
|
* Only remount if requested flags differ from current (#307 by @estesp)
|
|
|
|
|
* /proc and /sys do not support labeling (#304 by @rhatdan)
|
|
|
|
|
* Run tests for all HugetlbSizes (#308 by @LK4D4)
|
|
|
|
|
* Update github.com/syndtr/gocapability/capability to 2c00daeb6c3b4 (#302 by @mrunalp)
|
|
|
|
|
* no need to use p.cmd.Process.Pid in function, use p.pid() instead. (#292 by @keloyang)
|
|
|
|
|
* Add prestart/poststop hooks to runc (#160 by @mrunalp)
|
|
|
|
|
* Move mount methods out of configs pkg (#299 by @crosbymichael)
|
|
|
|
|
* simple refactor for the options of `runc spec` (#270 by @laijs)
|
|
|
|
|
* README.md: Update the config example (#271 by @laijs)
|
|
|
|
|
* Libcontainer: Add support for multiple architectures in Seccomp (#295 by @mheon)
|
|
|
|
|
* Change mount dest after resolving symlinks (#296 by @crosbymichael)
|
|
|
|
|
* Cleanup unused func arguments (#283 by @runcom)
|
|
|
|
|
* Enter existing user namespace if present (#288 by @codido)
|
|
|
|
|
* Ignore changing /dev/null permissions if used in STDIO (#289 by @crosbymichael)
|
|
|
|
|
* script: test_Dockerfile: install criu from source (#291 by @runcom)
|
|
|
|
|
* Fix STDIO permissions when container user not root (#280 by @crosbymichael)
|
|
|
|
|
* Fix STDIO ownership for non-tty processes (#279 by @crosbymichael)
|
|
|
|
|
* script: test_Dockerfile: update criu version (#278 by @runcom)
|
|
|
|
|
* libcontainer: Allow passing mount propagation flags (#264 by @rhvgoyal)
|
|
|
|
|
* update the command usage for `runc start` (#269 by @laijs)
|
|
|
|
|
* Add CAP prefix for capabilities (#257 by @mrunalp)
|
|
|
|
|
* close config file after loaded (#272 by @laijs)
|
|
|
|
|
* update the command usage of `runc` (#268 by @laijs)
|
|
|
|
|
* Adjust runc to new opencontainers/specs version (#242 by @LK4D4)
|
|
|
|
|
* Add testing docs in README (#237 by @hqhq)
|
|
|
|
|
* New netlink library (#43 by @LK4D4)
|
|
|
|
|
* Fixing checkpoint issue (#248 by @rajasec)
|
|
|
|
|
* Minor comments fix (#251 by @hqhq)
|
|
|
|
|
* Always remount for bind mount (#236 by @hqhq)
|
|
|
|
|
* make localtest failure on removing seccomp flag in Makefile (#266 by @rajasec)
|
|
|
|
|
* c/r: create cgroups to restore a container (#253 by @avagin)
|
|
|
|
|
* Add all support build tags for runc features (#265 by @crosbymichael)
|
|
|
|
|
|
|
|
|
|
## v0.0.4 [2015-09-11]
|
|
|
|
|
|
|
|
|
|
* Add seccomp build tag (#220 by @crosbymichael)
|
|
|
|
|
* Implement hooks in libcontainer code base (#261 by @crosbymichael)
|
|
|
|
|
* Fix bug in find cgroup mount point dir (#259 by @hqhq)
|
|
|
|
|
* Some cgroups cleanup (#250 by @hqhq)
|
|
|
|
|
* Restorefixforrunningcontainer (#239 by @rajasec)
|
|
|
|
|
* Fix cgroup mount tests (#235 by @hqhq)
|
|
|
|
|
* Adding oom_score_adj as a container config param (#232 by @vishh)
|
|
|
|
|
* cleanup: outdated comment (#233 by @shishir-a412ed)
|
|
|
|
|
* Make label.Relabel safer. (#165 by @calavera)
|
|
|
|
|
* Add --log flag (#179 by @crosbymichael)
|
|
|
|
|
* Add caveat will only build on Linux as per #9 (#229 by @booyaa)
|
|
|
|
|
* Systemd integration with runc, for on-demand socket activation (#231 by @shishir-a412ed)
|
|
|
|
|
* Remove hard-coded default for tcp connections (#221 by @crosbymichael)
|
|
|
|
|
* Restore container cleanup (#214 by @rajasec)
|
|
|
|
|
* Update README config file devices (#224 by @marcosnils)
|
|
|
|
|
* Adding rlimit in spec (#223 by @rajasec)
|
|
|
|
|
* Connect Seccomp configuration in Spec to backend (#228 by @mheon)
|
|
|
|
|
* Error should be checked after loadSpec (#230 by @shishir-a412ed)
|
|
|
|
|
* Add a 'start' command (#210 by @duglin)
|
|
|
|
|
* Add hooks for passing explicit veth pairs for forwarding to CRIU (#215 by @boucher)
|
|
|
|
|
* Add the criu log file path to the failure message. (#219 by @boucher)
|
|
|
|
|
* Convert Seccomp support to use Libseccomp (#70 by @mheon)
|
|
|
|
|
* Add exec command (#205 by @tonistiigi)
|
|
|
|
|
* Simple Cleanups (#212 by @laijs)
|
|
|
|
|
* richer information error message for terminal (#213 by @laijs)
|
|
|
|
|
* Integrate security settings (#211 by @mrunalp)
|
|
|
|
|
* Update device specs (#193 by @tonistiigi)
|
|
|
|
|
* Adding securityfs mount (#183 by @rajasec)
|
|
|
|
|
* Ensure the cleanup jobs in the deferrer are executed on error (#206 by @mountkin)
|
|
|
|
|
* Fix cgroups again (#194 by @LK4D4)
|
|
|
|
|
* Fixing netlink build error on ppc64le with gccgo (#199 by @clnperez)
|
|
|
|
|
* Add pause/resume commands (#204 by @tonistiigi)
|
|
|
|
|
* make localtest fills up /tmp with /tmp/libcontainer (#209 by @rajasec)
|
|
|
|
|
* Add the default signal (SIGTERM) for runc kill (#197 by @laijs)
|
|
|
|
|
* Simplify the return on process wait (#196 by @laijs)
|
|
|
|
|
* container id is the cgroup name (#192 by @fabiokung)
|
|
|
|
|
* Minor update to usage/help text (#188 by @duglin)
|
|
|
|
|
* Fix cgroup parent searching (#191 by @LK4D4)
|
|
|
|
|
* Change example JSON to refer to "pid" namespace rather than "process." (#182 by @willmtemple)
|
|
|
|
|
* Rename process namespace to pid (#180 by @LK4D4)
|
|
|
|
|
* Fix minor stylistic issues (#181 by @mrunalp)
|
|
|
|
|
* Don't make modifications to /dev when it is bind mounted (#96 by @mrunalp)
|
|
|
|
|
* Runc kill (#178 by @crosbymichael)
|
|
|
|
|
* Use signal handler for restore (#174 by @crosbymichael)
|
|
|
|
|
|
|
|
|
|
## v0.0.3 [2015-08-04]
|
|
|
|
|
|
|
|
|
|
* Add signal API to Container interface (#175 by @crosbymichael)
|
|
|
|
|
* Go1.5 compatibility fix (#166 by @codido)
|
|
|
|
|
* Use /proc/self/exe as default for InitPath (#151 by @LK4D4)
|
|
|
|
|
* Update go systemd dbus v3 (#150 by @runcom)
|
|
|
|
|
* Update spec (#173 by @mrunalp)
|
|
|
|
|
* Add debug message when unable to execute criu (#172 by @huikang)
|
|
|
|
|
* Remove reference to nsinit (#168 by @runcom)
|
|
|
|
|
* Remove dind (#164 by @LK4D4)
|
|
|
|
|
* tests: dump/restore a container with cgroups (#163 by @avagin)
|
|
|
|
|
* Simplify and fix os.MkdirAll() usage (#162 by @kolyshkin)
|
|
|
|
|
* Change default state directory to /run/oci (#159 by @LK4D4)
|
|
|
|
|
* Add test arguments to Makefile targets (#161 by @marcosnils)
|
|
|
|
|
* Update README.md to correct comment about spec and user (#158 by @estesp)
|
|
|
|
|
* Only add network info if NEWNET is set (#157 by @crosbymichael)
|
|
|
|
|
* Fix files not closed in mountinfo parsing function (#156 by @mrunalp)
|
|
|
|
|
* signal: Fix leak (#154 by @mrunalp)
|
|
|
|
|
* systemd integration with container runtime for supporting sd_notify protocol (#129 by @shishir-a412ed)
|
|
|
|
|
* Remount /sys/fs/cgroup as RO if MS_RDONLY was passed (#145 by @LK4D4)
|
|
|
|
|
* test: propagate the error to the caller (#152 by @laijs)
|
|
|
|
|
* bring the loopback interface up inside containers (#147 by @fabiokung)
|
|
|
|
|
* typo: tempory -> temporary (#148 by @jhjeong-kr)
|
|
|
|
|
* Update maintainers guide (#138 by @crosbymichael)
|
|
|
|
|
* avoid infinite loop with GCCGO (#114 by @brahmaroutu)
|
|
|
|
|
* Create symlinks for merged cgroups (#144 by @LK4D4)
|
|
|
|
|
* ct: give criu informations about cgroup mounts (#142 by @avagin)
|
|
|
|
|
* Fix subsystem path with abs parent (#143 by @LK4D4)
|
|
|
|
|
|
|
|
|
|
## v0.0.2 [2015-07-17]
|
|
|
|
|
|
|
|
|
|
* Revert "Remount /sys/fs/cgroup as readonly always" (#137 by @mrunalp)
|
|
|
|
|
* Substract source mount from cgroup dir (#135 by @LK4D4)
|
|
|
|
|
* Remount /sys/fs/cgroup as readonly always (#136 by @LK4D4)
|
|
|
|
|
|
|
|
|
|
## v0.0.1 [2015-07-16]
|
|
|
|
|
|
|
|
|
|
* Cgroups mount fix (#130 by @LK4D4)
|
|
|
|
|
* Fix handling name= cgroups (#131 by @LK4D4)
|
|
|
|
|
* Add cgroup mount in the recommended config (#91 by @hqhq)
|
|
|
|
|
* Fixed two typos (#117 by @jhjeong-kr)
|
|
|
|
|
* Add memory swappiness support (#120 by @lizf-os)
|
|
|
|
|
* Correct tmpfs mount for cgroup (#127 by @hqhq)
|
|
|
|
|
* Fix error when memory cgroup not mounted (#118 by @hqhq)
|
|
|
|
|
* typo: exists -> exits (#116 by @jhjeong-kr)
|
|
|
|
|
* the data type should be int8 for ppc64le (#115 by @brahmaroutu)
|
|
|
|
|
* Fix IDMapping host / container field confusion (#98 by @wking)
|
|
|
|
|
* Sort mount flags so it's easier to be found (#112 by @hqhq)
|
|
|
|
|
* typo: SICHLD -> SIGCHLD (#111 by @jhjeong-kr)
|
|
|
|
|
* Remove deserialization tests. (#109 by @mrunalp)
|
|
|
|
|
* Windows: Factor out seccomp (#52 by @lowenna)
|
|
|
|
|
* Windows: Factor out CloseExecFrom (#53 by @lowenna)
|
|
|
|
|
* Fix bug in Readme.md,change GOPATH to GOPATH/src (#100 by @zenlint)
|
|
|
|
|
* CI target for Makefile (#72 by @LK4D4)
|
|
|
|
|
* fix dockerfile (#103 by @jessfraz)
|
|
|
|
|
* wrong grammar: should never been --> should have never been (#99 by @jhjeong-kr)
|
|
|
|
|
* Add oom-kill-disable support for systemd (#97 by @hqhq)
|
|
|
|
|
* Add memory limit set (#90 by @hqhq)
|
|
|
|
|
* Fixing memory swappiness as -1 in template file for older kernels (#95 by @rajasec)
|
|
|
|
|
* Adds Sysctl support (#73 by @mrunalp)
|
|
|
|
|
* Remove sample configs from libcontainer (#89 by @hqhq)
|
|
|
|
|
* Treat -1 as default value for memory swappiness (#86 by @ktraghavendra)
|
|
|
|
|
* Update runc with types from spec repository (#82 by @crosbymichael)
|
|
|
|
|
* Fix build tags (#79 by @LK4D4)
|
|
|
|
|
* README changes for the newer spec format. (#67 by @mrunalp)
|
|
|
|
|
* Prefer Godep dependencies in the GOPATH (#71 by @mrunalp)
|
|
|
|
|
* Some new stuff for makefile (#45 by @LK4D4)
|
|
|
|
|
* Enable build on unsupported platforms (#68 by @mtesselH)
|
|
|
|
|
* fixed typo (#63 by @kennethlimcp)
|
2020-05-01 17:44:27 +08:00
|
|
|
* libcontainer: user: fix `GetAdditionalGroups*` API (#59 by @cyphar)
|
2020-05-01 02:02:37 +08:00
|
|
|
* Update config based on spec changes (#66 by @crosbymichael)
|
|
|
|
|
* linux: Don't prepend process' cwd if rootfs path is already absolute (#40 by @cgwalters)
|
|
|
|
|
* Added all dependency to install in Makefile (#32 by @7imbrook)
|
|
|
|
|
* Windows: Remove nsenter dependency (#49 by @lowenna)
|
|
|
|
|
* Adding minimum version required for docker create (#64 by @rmanyari)
|
|
|
|
|
* checkpoint/restore commands support 'file-locks' option. (#55 by @mapk0y)
|
|
|
|
|
* Corrected spelling (#61 by @blakelapierre)
|
|
|
|
|
* Fix absolute path getting for runc binary (#47 by @LK4D4)
|
|
|
|
|
* Minor README tweaks to help newbies (#23 by @duglin)
|
|
|
|
|
* Move libcontainer documenation to root of repo (#44 by @crosbymichael)
|
|
|
|
|
* Add notcie about config format changes (#42 by @crosbymichael)
|
|
|
|
|
* Make startup errors a bit friendlier (#30 by @estesp)
|
|
|
|
|
* Update usage content and fix typos (#33 by @estesp)
|
|
|
|
|
* Allow hyphen in "id" (based on `cwd` pathname) (#31 by @estesp)
|
|
|
|
|
* Allow runc to be executed as a relative path (#28 by @estesp)
|
|
|
|
|
* make the install steps more clear in README.md (#14 by @carmark)
|
|
|
|
|
* Fix function name typo (#29 by @estesp)
|
|
|
|
|
* Remove nsinit from comments (#22 by @lizf-os)
|
|
|
|
|
* Initialize memory.swappiness cgroup to -1 (#20 by @estesp)
|
|
|
|
|
* libcontainer: gofmt pass (#21 by @unclejack)
|
|
|
|
|
* Remove nsinit from libcontainer README.md (#8 by @LK4D4)
|
|
|
|
|
* Fix panic in seccomp test on error (#10 by @LK4D4)
|
|
|
|
|
* Change "... JSON Format;" to "... JSON Format:" (#11 by @justjake)
|
|
|
|
|
|
|
|
|
|
## Initial development under docker/libcontainer
|
|
|
|
|
|
|
|
|
|
* Remove unused code (docker/libcontainer#643 by @runcom)
|
|
|
|
|
* Ensure all parent dirs are properly setup (docker/libcontainer#642 by @crosbymichael)
|
|
|
|
|
* Fix nsinit to configure default cgroup entry for MemorySwappiness (docker/libcontainer#640 by @estesp)
|
|
|
|
|
* Avoid trying to access cpu.shares when it doesn't exist (docker/libcontainer#638 by @lizf-os)
|
|
|
|
|
* Fix kmem limit set (docker/libcontainer#637 by @hqhq)
|
|
|
|
|
* Fix some suspicious things in vendor (docker/libcontainer#635 by @LK4D4)
|
|
|
|
|
* gofmt to fix formatting (docker/libcontainer#634 by @unclejack)
|
2020-05-01 17:44:27 +08:00
|
|
|
* Handle SYS_setns not existing but `__NR_setns` does. (docker/libcontainer#630 by @tsuna)
|
2020-05-01 02:02:37 +08:00
|
|
|
* Only try to get AdditionalGroups if they are configured. (docker/libcontainer#627 by @mrunalp)
|
|
|
|
|
* Add the memory swappiness tuning support to libcontainer (docker/libcontainer#622 by @ktraghavendra)
|
|
|
|
|
* Fix nsinit README.md config link (docker/libcontainer#626 by @icecrime)
|
|
|
|
|
* Additional ppc architectures follow the arm datatype (docker/libcontainer#625 by @mchasal)
|
|
|
|
|
* Use simpler parsing of /proc/self/mountinfo for FindCgroupMountpoint (docker/libcontainer#624 by @LK4D4)
|
|
|
|
|
* Don't change memswap value in libcontainer (docker/libcontainer#620 by @hqhq)
|
|
|
|
|
* Rebased: Additional groups lookup (docker/libcontainer#603 by @dqminh)
|
|
|
|
|
* linux: Convert dup2 calls to dup3 (docker/libcontainer#618 by @glevand)
|
|
|
|
|
* Fix relabel to allow volume mounting of / (docker/libcontainer#619 by @rhatdan)
|
|
|
|
|
* Stop systemd unit on destroy (docker/libcontainer#617 by @LK4D4)
|
|
|
|
|
* Golang seccomp package (docker/libcontainer#613 by @crosbymichael)
|
|
|
|
|
* Fix hack/validate.sh (docker/libcontainer#614 by @LK4D4)
|
|
|
|
|
* make libcontainer compile on freebsd (again) (docker/libcontainer#615 by @kvasdopil)
|
|
|
|
|
* Update dockerproject.com links (docker/libcontainer#611 by @thaJeztah)
|
|
|
|
|
* hugetlb: Add support of Set and GetStats function (docker/libcontainer#567 by @Mashimiao)
|
|
|
|
|
* spec: Fix errors in file system mount points table. (docker/libcontainer#608 by @davexunit)
|
|
|
|
|
* bug fix: slice bounds out of range (docker/libcontainer#607 by @WeiZhang555)
|
|
|
|
|
* Fix race in stats Manager (docker/libcontainer#602 by @runcom)
|
|
|
|
|
* Update nsinit readme for C/R (docker/libcontainer#605 by @wonderflow)
|
|
|
|
|
* cgroup memory: Enchance stats support of memory (docker/libcontainer#592 by @Mashimiao)
|
|
|
|
|
* Process.go can compile on FreeBSD (docker/libcontainer#606 by @kvasdopil)
|
|
|
|
|
* integration: don't ignore exit codes of test processes (docker/libcontainer#599 by @avagin)
|
|
|
|
|
* WIP: Add Checkpoint and Restore support to libcontainer (docker/libcontainer#479 by @crosbymichael)
|
|
|
|
|
* README example for using checkpoint/restore. (docker/libcontainer#600 by @boucher)
|
|
|
|
|
* Windows: Initial compilation enablement (docker/libcontainer#583 by @lowenna)
|
|
|
|
|
* Add a flag for specifying system properties. (docker/libcontainer#562 by @mrunalp)
|
|
|
|
|
* Set the seed when randMacAddr (docker/libcontainer#542 by @sayuan)
|
|
|
|
|
* Fix nsenter package on unsupported platforms. (docker/libcontainer#596 by @dmitshur)
|
|
|
|
|
* cgroup: Add freeze Set When calls systemd to Apply (docker/libcontainer#589 by @Mashimiao)
|
|
|
|
|
* cgroups: add support for net_cls (docker/libcontainer#582 by @Mashimiao)
|
|
|
|
|
* Add support for kmem limit (docker/libcontainer#591 by @hqhq)
|
|
|
|
|
* Fix stacktrace panic (docker/libcontainer#590 by @hqhq)
|
|
|
|
|
* cgroup: add support for net_prio (docker/libcontainer#584 by @Mashimiao)
|
|
|
|
|
* croup cpu: add support for realtime throttling (docker/libcontainer#587 by @Mashimiao)
|
|
|
|
|
* don't fail when subsystem not mounted (docker/libcontainer#476 by @hqhq)
|
|
|
|
|
* Do not prevent mounts in /sys (docker/libcontainer#576 by @crosbymichael)
|
|
|
|
|
* Update github.com/syndtr/gocapability to 66ef2aa (docker/libcontainer#573 by @LK4D4)
|
|
|
|
|
* Security fixes for docker 1.6.1 (docker/libcontainer#574 by @crosbymichael)
|
|
|
|
|
* some fixes for SPEC (docker/libcontainer#572 by @hqhq)
|
|
|
|
|
* add vendor/pkg to gitignore (docker/libcontainer#570 by @hqhq)
|
|
|
|
|
* Replace aliased imports of logrus (docker/libcontainer#569 by @hqhq)
|
|
|
|
|
* integration: don't create a factory for each test case (docker/libcontainer#560 by @avagin)
|
|
|
|
|
* Update logrus to 0.7.3 (docker/libcontainer#566 by @tianon)
|
|
|
|
|
* Use logrus everywhere (docker/libcontainer#561 by @avagin)
|
|
|
|
|
* Adds support for setting system properties. (docker/libcontainer#535 by @mrunalp)
|
|
|
|
|
* remove unused functions (docker/libcontainer#558 by @hqhq)
|
|
|
|
|
* Split namespace syscall content for building on non-Linux (docker/libcontainer#554 by @estesp)
|
|
|
|
|
* cgroups/systemd: remove useless code (docker/libcontainer#555 by @avagin)
|
2020-05-01 17:44:27 +08:00
|
|
|
* cgroups: add support `blkio.throttle.read/write_*` (docker/libcontainer#539 by @Mashimiao)
|
2020-05-01 02:02:37 +08:00
|
|
|
* Add cgroup mount type for mounting container local cgroups (docker/libcontainer#553 by @crosbymichael)
|
|
|
|
|
* cgroups: add support of devices deny for another use of cgroup devices (docker/libcontainer#492 by @Mashimiao)
|
|
|
|
|
* Check for cmd.Process not-nilness in setnsProcess.terminate() (docker/libcontainer#550 by @LK4D4)
|
|
|
|
|
* Add support for Premount and Postmount commands. (docker/libcontainer#495 by @rhatdan)
|
|
|
|
|
* fix some typos in source code comments (docker/libcontainer#546 by @liubin)
|
|
|
|
|
* cleanup cpushares check (docker/libcontainer#537 by @hqhq)
|
|
|
|
|
* fix freeze systemd test (docker/libcontainer#538 by @hqhq)
|
|
|
|
|
* Add more explanation for nsenter (docker/libcontainer#526 by @wonderflow)
|
|
|
|
|
* add Set support for systemd based cgroup (docker/libcontainer#500 by @hqhq)
|
|
|
|
|
* We want to prevent users from accidently attempting to relabel /, /etc and /usr (docker/libcontainer#533 by @rhatdan)
|
|
|
|
|
* check "/sbin/apparmor_parser" in apparmor.IsEnabled() (docker/libcontainer#532 by @tifayuki)
|
|
|
|
|
* integration: wait all test processes (docker/libcontainer#531 by @avagin)
|
|
|
|
|
* Throw an error if cgroup tries to set cpu-shares more/less than the maximum/minimum permissible value. (docker/libcontainer#464 by @shishir-a412ed)
|
|
|
|
|
* add comments for nsexec.c (docker/libcontainer#530 by @hqhq)
|
|
|
|
|
* nsinit: Add a flag to enable systemd support for cgroups (docker/libcontainer#525 by @mrunalp)
|
|
|
|
|
* add cgroup subsystem hugetlb (docker/libcontainer#519 by @Mashimiao)
|
|
|
|
|
* Fix a typo in factory.go (docker/libcontainer#527 by @huikang)
|
|
|
|
|
* Change mount point propogation to default to slave (docker/libcontainer#520 by @rhatdan)
|
|
|
|
|
* Add arch support for ARMv8 and PowerPC, and fix ARMv7 (docker/libcontainer#524 by @adconrad)
|
|
|
|
|
* integration: use test helper for error check (docker/libcontainer#508 by @Mic92)
|
2020-05-01 17:44:27 +08:00
|
|
|
* Read `_LIBCONTAINER_INITPIPE` in nsexec.c (docker/libcontainer#523 by @LK4D4)
|
2020-05-01 02:02:37 +08:00
|
|
|
* Add cache to MemoryStats (docker/libcontainer#518 by @crosbymichael)
|
|
|
|
|
* Add value checking on relabel command for selinux (docker/libcontainer#509 by @rhatdan)
|
|
|
|
|
* Append childpipe for adding addtional Fds to container (docker/libcontainer#516 by @crosbymichael)
|
|
|
|
|
* cgroups: add support for blkio.weight_device (docker/libcontainer#354 by @hqhq)
|
|
|
|
|
* /dev/mqueue has to be labeled correctly (docker/libcontainer#515 by @rhatdan)
|
|
|
|
|
* Add documentation for nsinit (docker/libcontainer#501 by @wonderflow)
|
|
|
|
|
* Ensure that state always contains pathes to all namespaces (docker/libcontainer#514 by @LK4D4)
|
|
|
|
|
* bugfix and cleanup for systemd cgroup (docker/libcontainer#502 by @hqhq)
|
|
|
|
|
* add systemd integration test (docker/libcontainer#505 by @hqhq)
|
|
|
|
|
* Change nsinit root to /var/run/nsinit (docker/libcontainer#507 by @crosbymichael)
|
|
|
|
|
* add binary target to direct install in a container (docker/libcontainer#490 by @dqminh)
|
|
|
|
|
* Fix pdeathsig and ppid for supervisor running as pid1 (docker/libcontainer#504 by @crosbymichael)
|
|
|
|
|
* Fix: typos. (docker/libcontainer#498 by @athoune)
|
|
|
|
|
* fix README.md for nsinit (docker/libcontainer#493 by @hqhq)
|
|
|
|
|
* cgroups/systemd: Use unified subsystems (docker/libcontainer#497 by @Mashimiao)
|
|
|
|
|
* cgroups: return error when passing invalid argument to freezer (docker/libcontainer#494 by @Mashimiao)
|
|
|
|
|
* cgroups: systemd: attempt to stop test scope, if any (docker/libcontainer#489 by @philips)
|
|
|
|
|
* Fix finding parent for fs cgroups (docker/libcontainer#491 by @LK4D4)
|
|
|
|
|
* add readme for nsinit about how to build nsinit (docker/libcontainer#488 by @wonderflow)
|
|
|
|
|
* Use syscall.Kill instead of p.cmd.Process.Kill (docker/libcontainer#487 by @LK4D4)
|
|
|
|
|
* Process capabilities (docker/libcontainer#484 by @mrunalp)
|
|
|
|
|
* Fix minor typo in init_linux.go (docker/libcontainer#481 by @coolljt0725)
|
|
|
|
|
* mount: Add a flag to bind devices when user namespaces are enabled. (docker/libcontainer#480 by @mrunalp)
|
|
|
|
|
* remove redundant code (docker/libcontainer#475 by @hqhq)
|
|
|
|
|
* Update syndtr/gocapability to 8e4cdcb3c22b40d5e330ade0b68cb2e2a3cf6f98 (docker/libcontainer#478 by @LK4D4)
|
|
|
|
|
* Revert "cgroups: only return path when subsystem really mounted (docker/libcontainer#474 by @crosbymichael)
|
|
|
|
|
* path now returns the IsNotFound error (docker/libcontainer#472 by @crosbymichael)
|
|
|
|
|
* systemd: properly check DefaultDependencies is read only (docker/libcontainer#469 by @Snorch)
|
|
|
|
|
* correct comment errors for netlink_linux.go (docker/libcontainer#460 by @sunyuan3)
|
|
|
|
|
* Add TmpfsRoot option (docker/libcontainer#459 by @LK4D4)
|
|
|
|
|
* mount: Take out the base mounts and move them to the config. (docker/libcontainer#455 by @mrunalp)
|
|
|
|
|
* add parameter to Set api (docker/libcontainer#441 by @hqhq)
|
|
|
|
|
* Do not fail cgroups setup if parent cgroup does not exist. (docker/libcontainer#453 by @vishh)
|
|
|
|
|
* mount: sysfs also doesn't need to be labelled like mqueue. (docker/libcontainer#451 by @mrunalp)
|
|
|
|
|
* Fix path to /dind (docker/libcontainer#450 by @avagin)
|
|
|
|
|
* selinux: Adds a check for a NUL byte at the end of the string and removes it (docker/libcontainer#443 by @mrunalp)
|
|
|
|
|
* Add vet checks to validate script (docker/libcontainer#430 by @LK4D4)
|
|
|
|
|
* Update to recent busybox 2014.11 tar (docker/libcontainer#449 by @estesp)
|
|
|
|
|
* nsinit usability improvements (docker/libcontainer#448 by @crosbymichael)
|
|
|
|
|
* Mounting a tmpfs directory needs to inherit directory permissions from base (docker/libcontainer#442 by @rhatdan)
|
|
|
|
|
* Update logrus to 0.6.6 (docker/libcontainer#447 by @jessfraz)
|
|
|
|
|
* Hairpin NAT network configuration (docker/libcontainer#446 by @icecrime)
|
|
|
|
|
* Add information Type method for Factory (docker/libcontainer#445 by @LK4D4)
|
|
|
|
|
* Don't label mqueue when mounting (docker/libcontainer#444 by @ncdc)
|
|
|
|
|
* fix some cgroups issues (docker/libcontainer#437 by @hqhq)
|
|
|
|
|
* nsenter: fix the -Wunused-variable warning (docker/libcontainer#439 by @vbatts)
|
|
|
|
|
* add Set memoryswap test cases (docker/libcontainer#438 by @hqhq)
|
|
|
|
|
* Add godoc for selinux package (docker/libcontainer#435 by @pmorie)
|
|
|
|
|
* fix apply error when we not mount cpu subsystem (docker/libcontainer#429 by @hqhq)
|
|
|
|
|
* cgroups: add support for oom control (docker/libcontainer#417 by @HuKeping)
|
|
|
|
|
* Pass os.Environ() as environment to process from init. (docker/libcontainer#432 by @LK4D4)
|
|
|
|
|
* Remove overcomplicated logic of SIGCHLD from TestNsenterDeadPid (docker/libcontainer#431 by @LK4D4)
|
|
|
|
|
* A few minor fixes (docker/libcontainer#427 by @avagin)
|
|
|
|
|
* Add tty support for setnsProcess (docker/libcontainer#428 by @LK4D4)
|
|
|
|
|
* Adds an integration test for checking process env. (docker/libcontainer#423 by @mrunalp)
|
|
|
|
|
* cgroups: use Set instead of Apply in Freeze (docker/libcontainer#425 by @hqhq)
|
|
|
|
|
* Add the file close operation before function return to release resource (docker/libcontainer#426 by @MabinGo)
|
|
|
|
|
* Fix panic when genericError constructor gets nil error (docker/libcontainer#424 by @dqminh)
|
|
|
|
|
* add a new api Set (docker/libcontainer#376 by @hqhq)
|
|
|
|
|
* Make NetworkInterface public (docker/libcontainer#421 by @LK4D4)
|
|
|
|
|
* Implement stats for systemd (docker/libcontainer#420 by @LK4D4)
|
|
|
|
|
* Return init errors from setnsProcess (docker/libcontainer#419 by @LK4D4)
|
|
|
|
|
* Don't join rootfs if path already prefixed by it (docker/libcontainer#416 by @LK4D4)
|
|
|
|
|
* Fixes validate (docker/libcontainer#414 by @jessfraz)
|
|
|
|
|
* fix instructions in README (docker/libcontainer#410 by @hqhq)
|
|
|
|
|
* Add a validate script (docker/libcontainer#395 by @jessfraz)
|
|
|
|
|
* rename test files so we can really test them (docker/libcontainer#409 by @hqhq)
|
|
|
|
|
* Move tty configuration to Process (docker/libcontainer#407 by @LK4D4)
|
|
|
|
|
* Exit related cleanup (docker/libcontainer#400 by @mrunalp)
|
|
|
|
|
* Return actual ProcessState on Wait error (docker/libcontainer#406 by @LK4D4)
|
|
|
|
|
* Add default InitArgs for factory (docker/libcontainer#405 by @LK4D4)
|
|
|
|
|
* Add init path support to allow full control of init binary (docker/libcontainer#404 by @crosbymichael)
|
|
|
|
|
* Make possible to call config methods on values (docker/libcontainer#403 by @LK4D4)
|
|
|
|
|
* Fix comment for container.Start (docker/libcontainer#402 by @LK4D4)
|
|
|
|
|
* remove drone (docker/libcontainer#401 by @jessfraz)
|
|
|
|
|
* Linux has added a new capability audit_read (docker/libcontainer#383 by @rhatdan)
|
|
|
|
|
* Use configs.NamespaceType as key for State.NamespacePathes (docker/libcontainer#397 by @LK4D4)
|
|
|
|
|
* Update copyright year in NOTICE (docker/libcontainer#391 by @thaJeztah)
|
|
|
|
|
* process: add Wait() and Pid() methods (docker/libcontainer#392 by @avagin)
|
|
|
|
|
* Change os-prefix file naming to standard postfix naming (docker/libcontainer#394 by @LK4D4)
|
|
|
|
|
* nsenter: noop reference to C constructor (docker/libcontainer#390 by @vbatts)
|
|
|
|
|
* Merge API Branch into Master (docker/libcontainer#388 by @crosbymichael)
|
|
|
|
|
* Merge master into api (docker/libcontainer#389 by @crosbymichael)
|
|
|
|
|
* Validation for user namespace in the config. (docker/libcontainer#386 by @mrunalp)
|
|
|
|
|
* Fixes bug where rootfs was empty instead of pwd when not specified. (docker/libcontainer#387 by @mrunalp)
|
|
|
|
|
* Make usernamespaces work without sidecar process (docker/libcontainer#385 by @crosbymichael)
|
|
|
|
|
* Add systemd support cpu.cfs_quota_us and cpu.cfs_period_us (docker/libcontainer#371 by @coolljt0725)
|
|
|
|
|
* Update api branch with master changes (docker/libcontainer#382 by @crosbymichael)
|
|
|
|
|
* Add functional API for Factory configuration (docker/libcontainer#381 by @crosbymichael)
|
|
|
|
|
* Add config generation for simple user namespace testing. (docker/libcontainer#379 by @mrunalp)
|
|
|
|
|
* Fixed some typos and tried to make comments read better. (docker/libcontainer#378 by @mrunalp)
|
|
|
|
|
* Add a constant for the container console path. (docker/libcontainer#377 by @mrunalp)
|
|
|
|
|
* Use netlink to set hairpin mode (docker/libcontainer#373 by @LK4D4)
|
|
|
|
|
* Refactor system mounts to be placed on the config (docker/libcontainer#375 by @crosbymichael)
|
|
|
|
|
* Fix compilation with golang 1.3(uid/gid mappings is unsupported) (docker/libcontainer#374 by @LK4D4)
|
|
|
|
|
* Changes required to keep gcc 5.0 quiet and happy. (docker/libcontainer#372 by @rhatdan)
|
|
|
|
|
* Ensure state is persisted (docker/libcontainer#370 by @crosbymichael)
|
|
|
|
|
* API Refactoring (docker/libcontainer#367 by @crosbymichael)
|
|
|
|
|
* integration: check a container with userns (docker/libcontainer#360 by @avagin)
|
|
|
|
|
* Resurrect hairpin NAT (docker/libcontainer#366 by @icecrime)
|
|
|
|
|
* handle SIGCHLD when running as child subreaper (docker/libcontainer#369 by @dqminh)
|
|
|
|
|
* add dqminh as maintainer (docker/libcontainer#343 by @dqminh)
|
|
|
|
|
* fix typo for GetHostRootGid (docker/libcontainer#361 by @hqhq)
|
|
|
|
|
* Retry getting the cgroup root at apply time. (docker/libcontainer#362 by @vmarmol)
|
|
|
|
|
* cgroups: systemd: set DefaultDependencies=false if possible (docker/libcontainer#359 by @philips)
|
|
|
|
|
* namespaces: allow to use pid namespace without mount namespace (docker/libcontainer#358 by @avagin)
|
|
|
|
|
* Flatten config structures and remove namespace package (docker/libcontainer#357 by @crosbymichael)
|
|
|
|
|
* Add vet check to .drone.yml (docker/libcontainer#356 by @LK4D4)
|
|
|
|
|
* namespaces: send config, network state and other arguments in one packet (docker/libcontainer#355 by @avagin)
|
|
|
|
|
* Merge remote-tracking branch 'origin/master' into api-rebase (docker/libcontainer#351 by @avagin)
|
|
|
|
|
* Update github.com/godbus/dbus to v2 (docker/libcontainer#353 by @LK4D4)
|
|
|
|
|
* Created man page for nsinit (docker/libcontainer#341 by @shishir-a412ed)
|
|
|
|
|
* cgroups: always create device cgroup on systemd (docker/libcontainer#344 by @hqhq)
|
|
|
|
|
* nsenter: remove a proxy process (docker/libcontainer#348 by @avagin)
|
|
|
|
|
* Use Wait4 instead of cmd.Wait (docker/libcontainer#349 by @LK4D4)
|
|
|
|
|
* Fix a minor typo (docker/libcontainer#347 by @guoxiuyan)
|
|
|
|
|
* Support read-only root filesystems (docker/libcontainer#345 by @fabiokung)
|
|
|
|
|
* new-api: implement Wait, WaitProcess (docker/libcontainer#342 by @avagin)
|
|
|
|
|
* add support for blkio.weight (docker/libcontainer#337 by @hqhq)
|
|
|
|
|
* Checks namespace flags for user ns code path. (docker/libcontainer#340 by @mrunalp)
|
|
|
|
|
* namespace: don't change namespaces which are not belonged to the CT (docker/libcontainer#324 by @avagin)
|
|
|
|
|
* new-api: implement Pause() and Resume() (docker/libcontainer#339 by @avagin)
|
|
|
|
|
* Adds user namespace support to libcontainer (docker/libcontainer#304 by @mrunalp)
|
|
|
|
|
* cgroups: set a freezer state before calling FreezerGroup.Set() (docker/libcontainer#338 by @avagin)
|
|
|
|
|
* nsenter waits for parent signal before forking (docker/libcontainer#336 by @dqminh)
|
|
|
|
|
* new-api: integration: check that a process can be executed in an existing CT (docker/libcontainer#334 by @avagin)
|
|
|
|
|
* new-api: add Console to ProcessConfig (docker/libcontainer#333 by @avagin)
|
|
|
|
|
* cgroups: don't change a freezer state if an operation failed (docker/libcontainer#335 by @avagin)
|
|
|
|
|
* Vendors glog dependency for the api branch. (docker/libcontainer#332 by @mrunalp)
|
|
|
|
|
* new-api: implement fs and systemd cgroup managers (docker/libcontainer#330 by @avagin)
|
|
|
|
|
* new-api: execute a process inside an existing container (docker/libcontainer#311 by @avagin)
|
|
|
|
|
* Fix exit codes when dying on a signal (docker/libcontainer#328 by @icecrime)
|
|
|
|
|
* Add nsinit command to display oom notifications (docker/libcontainer#329 by @crosbymichael)
|
|
|
|
|
* Update ROADMAP.md to correctly reflect current arch status (docker/libcontainer#326 by @estesp)
|
|
|
|
|
* Refactor kill all pids (docker/libcontainer#327 by @crosbymichael)
|
|
|
|
|
* A few fixes for nsenter (docker/libcontainer#315 by @avagin)
|
|
|
|
|
* killall processes in a cgroup if you are not using the pid namespace (docker/libcontainer#320 by @rhatdan)
|
|
|
|
|
* Adds functionality to specify additional groups to join. (docker/libcontainer#322 by @mrunalp)
|
|
|
|
|
* Don't get stats for cgroups that don't exist. (docker/libcontainer#321 by @vmarmol)
|
|
|
|
|
* Use the child subreaper option only when available (docker/libcontainer#318 by @mrunalp)
|
|
|
|
|
* Changes Dockerfile to use go 1.4 (docker/libcontainer#317 by @mrunalp)
|
|
|
|
|
* Fix vet errors (docker/libcontainer#316 by @LK4D4)
|
|
|
|
|
* Namespaces methods should act on pointer (docker/libcontainer#314 by @crosbymichael)
|
|
|
|
|
* Add lk4d4 as maintainer (docker/libcontainer#313 by @crosbymichael)
|
|
|
|
|
* Add type for namespaces for better UI (replacement of #302) (docker/libcontainer#312 by @LK4D4)
|
|
|
|
|
* OOM Notify refactoring (docker/libcontainer#307 by @LK4D4)
|
|
|
|
|
* Allow non local mac-address. (docker/libcontainer#310 by @jessfraz)
|
|
|
|
|
* Fix removing of cgroups if something still alive in container (docker/libcontainer#308 by @LK4D4)
|
|
|
|
|
* define PR_SET_CHILD_SUBREAPER if not set (docker/libcontainer#300 by @dqminh)
|
|
|
|
|
* Changed docker hub pointer to dockercore (docker/libcontainer#293 by @gaberger)
|
|
|
|
|
* Use namespace.Exec() and namespace.Init() to execute processes in CT (docker/libcontainer#306 by @avagin)
|
|
|
|
|
* Prepare ground for moving on new API (docker/libcontainer#299 by @avagin)
|
|
|
|
|
* user: fix function signatures (docker/libcontainer#301 by @cyphar)
|
|
|
|
|
* Adding a function that allows to remove an address set on an interface (docker/libcontainer#297 by @Ketouem)
|
|
|
|
|
* add spec for exec a new process inside a container (docker/libcontainer#290 by @dqminh)
|
|
|
|
|
* user: MAINTAINERS: add cyphar (myself) as a maintainer (docker/libcontainer#294 by @cyphar)
|
|
|
|
|
* cgroups: add failcnt test (docker/libcontainer#295 by @hqhq)
|
|
|
|
|
* Set rlimit for execin process (docker/libcontainer#289 by @dqminh)
|
|
|
|
|
* cgroup: add support to set MemorySwap (docker/libcontainer#288 by @hqhq)
|
|
|
|
|
* add support for testing execin (docker/libcontainer#287 by @dqminh)
|
|
|
|
|
* cgroups: add support for cpuset.mems (docker/libcontainer#285 by @hqhq)
|
|
|
|
|
* Change namespaces config to include path for setns (docker/libcontainer#279 by @crosbymichael)
|
|
|
|
|
* Set child sub reaper option on nsenter (docker/libcontainer#273 by @vishh)
|
|
|
|
|
* Introducing macvtap device to netlink package (docker/libcontainer#278 by @milosgajdos)
|
|
|
|
|
* Add container spec (docker/libcontainer#282 by @crosbymichael)
|
|
|
|
|
* Add support for setting rlimit for contianer (docker/libcontainer#280 by @cpuguy83)
|
|
|
|
|
* Add support for ppc64, ppc64le, s390x (docker/libcontainer#277 by @yoheiueda)
|
|
|
|
|
* netlink: add NetworkSetTxQueueLen to set qlen (docker/libcontainer#276 by @unclejack)
|
|
|
|
|
* Add call to label to allow it to tell kernel how to label created files (docker/libcontainer#275 by @rhatdan)
|
|
|
|
|
* Remove hairpin nat on veth create (docker/libcontainer#274 by @crosbymichael)
|
|
|
|
|
* libcontainer: setup cpuset cgroup by default (docker/libcontainer#271 by @crosbymichael)
|
|
|
|
|
* Use cgroup paths for stats and removal (docker/libcontainer#267 by @crosbymichael)
|
|
|
|
|
* Use SYS_SETUID32 for system.Setuid() on Linux for ARM (docker/libcontainer#269 by @aholler)
|
|
|
|
|
* Provide better sethostname error message (docker/libcontainer#268 by @crosbymichael)
|
|
|
|
|
* Update the path to project from hack (docker/libcontainer#265 by @crosbymichael)
|
|
|
|
|
* Set correct env variables for `docker exec` commands (docker/libcontainer#264 by @dqminh)
|
|
|
|
|
* Updated cover tool import path. (docker/libcontainer#262 by @hansrodtang)
|
|
|
|
|
* Fix typo in json tag (docker/libcontainer#260 by @donhcd)
|
|
|
|
|
* Fix the return code check for ParseIP. (docker/libcontainer#259 by @mrunalp)
|
|
|
|
|
* Refactor and expose private functions within `libcontainer/user`. (docker/libcontainer#158 by @cyphar)
|
|
|
|
|
* Make AddRoute() works with a provided source ip address. (docker/libcontainer#250 by @zhgwenming)
|
|
|
|
|
* enable hairpin mode on virtual interface bridge port (docker/libcontainer#62 by @phemmer)
|
|
|
|
|
* Remove syncpipe pkg (docker/libcontainer#252 by @crosbymichael)
|
|
|
|
|
* Fix vet errors (docker/libcontainer#254 by @LK4D4)
|
|
|
|
|
* Add drone.yml file (docker/libcontainer#255 by @crosbymichael)
|
|
|
|
|
* Update email address in maintainer file (docker/libcontainer#3 by @crosbymichael)
|
|
|
|
|
* use system.Set{u,g}id to fix Set{u,g}id on Go 1.4 (docker/libcontainer#251 by @unclejack)
|
|
|
|
|
* Add new interfaces for label/selinux (docker/libcontainer#247 by @rhatdan)
|
|
|
|
|
* Mount /dev/mqueue by default (docker/libcontainer#246 by @rhatdan)
|
|
|
|
|
* Allow IPC namespace to be shared between containers or with the host (docker/libcontainer#245 by @crosbymichael)
|
|
|
|
|
* Only fetch network stats we use. (docker/libcontainer#244 by @vmarmol)
|
|
|
|
|
* ADDITIONAL CGROUPS BLKIO STATS (docker/libcontainer#243 by @ashahab-altiscale)
|
|
|
|
|
* Fix link re contributing in README (docker/libcontainer#238 by @lucafavatella)
|
|
|
|
|
* ErrNotSupportedPlatform is undefined define it (docker/libcontainer#236 by @harshavardhana)
|
|
|
|
|
* devices: filter /dev/console out of the node list (docker/libcontainer#235 by @alexoj)
|
|
|
|
|
* Rename the file as per github convention. (docker/libcontainer#234 by @mrunalp)
|
|
|
|
|
* Fix an endian bug for the ioctl argument (docker/libcontainer#231 by @yoheiueda)
|
|
|
|
|
* Add development environment instructions (docker/libcontainer#229 by @dave-tucker)
|
|
|
|
|
* Adds support for Setuid/Setgid calls that has been removed from go 1.4 (docker/libcontainer#228 by @mrunalp)
|
|
|
|
|
* Add integration test framework (docker/libcontainer#226 by @crosbymichael)
|
|
|
|
|
* Make joinDevices public. (docker/libcontainer#209 by @imain)
|
|
|
|
|
* Adds a tx_queuelen setting for veth in the network configuration (docker/libcontainer#221 by @mrunalp)
|
|
|
|
|
* xattr: Disallow build on non linux platforms (docker/libcontainer#219 by @harshavardhana)
|
|
|
|
|
* Set apparmor profile in execin (docker/libcontainer#224 by @crosbymichael)
|
|
|
|
|
* Do not check if SELinux is enabled on lowlevel calls to set processlabel (docker/libcontainer#222 by @rhatdan)
|
|
|
|
|
* cgroups: Export ParseCgroupFile (docker/libcontainer#216 by @cbosdo)
|
|
|
|
|
* Fix "go install -v . ./.git/logs/refs/heads ./.git/refs/heads ..." (docker/libcontainer#213 by @tianon)
|
|
|
|
|
* Add more entropy to veth pair creation (docker/libcontainer#212 by @crosbymichael)
|
|
|
|
|
* Update system/xattrs_linux.go (docker/libcontainer#202 by @harshavardhana)
|
|
|
|
|
* Expose parameter to set interface MAC address (docker/libcontainer#208 by @MalteJ)
|
|
|
|
|
* Added support for VLAN and MAC VLAN interfaces plus did a bit of refactoring. (docker/libcontainer#206 by @milosgajdos)
|
|
|
|
|
* Fix leaking file descriptor in NetNs strategy (docker/libcontainer#205 by @hugoduncan)
|
|
|
|
|
* Adding IPv6 network support (docker/libcontainer#203 by @MalteJ)
|
|
|
|
|
* Saturate negative memory stat values at '0'. (docker/libcontainer#201 by @vishh)
|
|
|
|
|
* Add RootFs field to configuration options in libcontainer's Config (docker/libcontainer#199 by @SaiedKazemi)
|
|
|
|
|
* Refactored and added more tests.Cleaned up netlink a bit. (docker/libcontainer#197 by @milosgajdos)
|
|
|
|
|
* netlink: Add NetworkSetMacAddress (docker/libcontainer#194 by @lmars)
|
|
|
|
|
* netlink: Add uint32Attr helper (docker/libcontainer#192 by @titanous)
|
|
|
|
|
* Netlink cleanup (docker/libcontainer#190 by @titanous)
|
|
|
|
|
* Add rich errors to the API (docker/libcontainer#185 by @Zteve)
|
|
|
|
|
* Cache cgroup root mount location. (docker/libcontainer#189 by @vmarmol)
|
|
|
|
|
* Devices error injection (docker/libcontainer#186 by @Zteve)
|
|
|
|
|
* Allow mounts to be supplied with the MS_SLAVE option. (docker/libcontainer#184 by @erikh)
|
|
|
|
|
* Correct Create() api call description in Factory interface. (docker/libcontainer#172 by @Zteve)
|
|
|
|
|
* Remove sampling from libcontainer CPU stats. (docker/libcontainer#174 by @vmarmol)
|
|
|
|
|
* Get UID and GID for device nodes (docker/libcontainer#173 by @crosbymichael)
|
|
|
|
|
* syncpipe: consume from parent before closing child (docker/libcontainer#170 by @bernerdschaefer)
|
|
|
|
|
* Update container to have an ID provided by the user (docker/libcontainer#166 by @crosbymichael)
|
2020-05-01 17:44:27 +08:00
|
|
|
* Use `blkio.throttle.*` stats when CFQ is not in use (docker/libcontainer#167 by @discordianfish)
|
2020-05-01 02:02:37 +08:00
|
|
|
* Add support for user defined mounts in tmpfs (docker/libcontainer#168 by @crosbymichael)
|
|
|
|
|
* Use --privileged in Makefile (docker/libcontainer#164 by @crosbymichael)
|
|
|
|
|
* Allow docker to free container labels when containers are removed. (docker/libcontainer#162 by @rhatdan)
|
|
|
|
|
* Return NotFound error for cgroups abs paths (docker/libcontainer#161 by @crosbymichael)
|
|
|
|
|
* Remove dependency from docker/pkg/systemd (docker/libcontainer#159 by @LK4D4)
|
|
|
|
|
* Enter cgroups as part of NsEnter (docker/libcontainer#143 by @vishh)
|
|
|
|
|
* Fix warnings from go vet (docker/libcontainer#156 by @LK4D4)
|
|
|
|
|
* Implement execin by using registered functions (docker/libcontainer#155 by @crosbymichael)
|
|
|
|
|
* Fixes logic for calculating percentage (docker/libcontainer#147 by @lynxbat)
|
|
|
|
|
* Expose setting interface by fd in network pkg (docker/libcontainer#152 by @crosbymichael)
|
|
|
|
|
* Modification of erikh/netlink-remove-address PR (docker/libcontainer#149 by @milosgajdos)
|
|
|
|
|
* Add travis status badge (docker/libcontainer#153 by @LK4D4)
|
|
|
|
|
* Add myself as maintainer. (docker/libcontainer#151 by @mrunalp)
|
|
|
|
|
* Refactor execin send config over pipe (docker/libcontainer#146 by @crosbymichael)
|
|
|
|
|
* RtAttr packaging fix. Added NetworkLinkDel() func and a new test. (docker/libcontainer#139 by @milosgajdos)
|
|
|
|
|
* Move nsenter C code to separate file (docker/libcontainer#144 by @crosbymichael)
|
|
|
|
|
* Change nsenter to support docker 'runin' (docker/libcontainer#141 by @vishh)
|
|
|
|
|
* Add "update-vendor.sh" script and vendor our current deps... (docker/libcontainer#140 by @tianon)
|
|
|
|
|
* Lock the thread first thing in init. (docker/libcontainer#137 by @mrunalp)
|
|
|
|
|
* DefaultCreateCommand supports command w/ flags (docker/libcontainer#136 by @bernerdschaefer)
|
2020-05-01 17:44:27 +08:00
|
|
|
* Only import "testing" from `*_test.go` (docker/libcontainer#135 by @peterbourgon)
|
2020-05-01 02:02:37 +08:00
|
|
|
* Update more "dotcloud/docker" refs to "docker/docker" (docker/libcontainer#134 by @tianon)
|
|
|
|
|
* Move "pkg/user" into libcontainer... (docker/libcontainer#103 by @tianon)
|
|
|
|
|
* fix the order of setns() (docker/libcontainer#58 by @maebashi)
|
|
|
|
|
* Implement system.GetClockTicks for all platforms (docker/libcontainer#133 by @bernerdschaefer)
|
|
|
|
|
* Make fs.GetStats() work when used from inside a docker container. (docker/libcontainer#130 by @vishh)
|
|
|
|
|
* Add label.InitLabels functioni. Allows generation of labels based on options (docker/libcontainer#105 by @rhatdan)
|
|
|
|
|
* Correct nsenter fprintf syntax (docker/libcontainer#128 by @crosbymichael)
|
|
|
|
|
* Update imports for new docker location (docker/libcontainer#127 by @crosbymichael)
|
|
|
|
|
* Add a couple tweaks to the Dockerfile (docker/libcontainer#123 by @tianon)
|
|
|
|
|
* Fix veth network stats. (docker/libcontainer#121 by @vishh)
|
|
|
|
|
* Null-term ioctl ifr_name strings #125 (docker/libcontainer#126 by @dhammika)
|
|
|
|
|
* Add missing "--rm" on "make sh" (docker/libcontainer#122 by @tianon)
|
|
|
|
|
* Add busybox rootfs so we can run containers (docker/libcontainer#120 by @crosbymichael)
|
|
|
|
|
* Minor fixes to network stats (docker/libcontainer#119 by @vishh)
|
|
|
|
|
* Add integration tests with nice makefile (docker/libcontainer#117 by @crosbymichael)
|
|
|
|
|
* Adding RunIn to run a user specified command in an existing container. (docker/libcontainer#64 by @vishh)
|
|
|
|
|
* Add "linux/arm" to Travis (docker/libcontainer#115 by @tianon)
|
|
|
|
|
* Small fix for GetAllCgroups(). (docker/libcontainer#114 by @vmarmol)
|
|
|
|
|
* Reopening stdin, stdout and stderr if they are pointing to /dev/null. (docker/libcontainer#107 by @vishh)
|
|
|
|
|
* Add netlink hooks to delete a bridge dev #44 (docker/libcontainer#46 by @dhammika)
|
|
|
|
|
* Add more Travis matrix targets (being explicit about CGO) (docker/libcontainer#113 by @tianon)
|
|
|
|
|
* Add linux/386 testing back to Travis (docker/libcontainer#112 by @tianon)
|
|
|
|
|
* Fix 386 and arm cross-compile (docker/libcontainer#111 by @tianon)
|
|
|
|
|
* Initially mount /sys as ro instead of remount (docker/libcontainer#110 by @crosbymichael)
|
|
|
|
|
* Update a few build tags to be more generic, ... (docker/libcontainer#104 by @tianon)
|
|
|
|
|
* Add Start to container API (docker/libcontainer#102 by @crosbymichael)
|
|
|
|
|
* Add linux build tags for selinux (docker/libcontainer#101 by @crosbymichael)
|
|
|
|
|
* Add dockerfile (docker/libcontainer#100 by @crosbymichael)
|
|
|
|
|
* Remove terminal handling in libcontainer (docker/libcontainer#99 by @crosbymichael)
|
|
|
|
|
* Don't set the MTU for loopback interfaces. (docker/libcontainer#98 by @thockin)
|
|
|
|
|
* Remove the dep on dotcloud/docker/pkg/system (docker/libcontainer#97 by @crosbymichael)
|
|
|
|
|
* Remove unsupported file (docker/libcontainer#90 by @crosbymichael)
|
|
|
|
|
* Remove FreezerStats. (docker/libcontainer#89 by @vmarmol)
|
|
|
|
|
* Remove unused arg from namespaces.NsEnter (docker/libcontainer#88 by @pmorie)
|
|
|
|
|
* Add cgroup status for systemd implementation (docker/libcontainer#87 by @crosbymichael)
|
|
|
|
|
* Move syncpipe into separate package (docker/libcontainer#86 by @crosbymichael)
|
|
|
|
|
* Allow caller to change the SELinux labels on a directory tree. (docker/libcontainer#47 by @rhatdan)
|
|
|
|
|
* remove 2 duplicate caps (docker/libcontainer#85 by @vieux)
|
|
|
|
|
* Update Travis to test all the packages (docker/libcontainer#84 by @tianon)
|
|
|
|
|
* Add a standalone test utility for cgroup package. (docker/libcontainer#79 by @rjnagal)
|
|
|
|
|
* Use conventional factory terminology (docker/libcontainer#83 by @glyn)
|
|
|
|
|
* Add Load method to factory (docker/libcontainer#81 by @crosbymichael)
|
|
|
|
|
* Fix spelling (docker/libcontainer#77 by @leetreveil)
|
|
|
|
|
* Change checks for non-existent cgroup file to a more concise form. (docker/libcontainer#80 by @rjnagal)
|
|
|
|
|
* Adding Initialize() to create a new container. (docker/libcontainer#76 by @vmarmol)
|
|
|
|
|
* Rename package correctly so the binary is nsinit (docker/libcontainer#78 by @crosbymichael)
|
|
|
|
|
* Ignore stats that are not available (docker/libcontainer#75 by @vmarmol)
|
|
|
|
|
* Basic version of libcontainer API. (docker/libcontainer#67 by @vmarmol)
|
|
|
|
|
* Add a cleanup method to cgroup fs. This will help in building a (docker/libcontainer#74 by @rjnagal)
|
|
|
|
|
* Add cross-compilation testing to .travis.yml (docker/libcontainer#60 by @tianon)
|
|
|
|
|
* Separate nsinit main from implementation (docker/libcontainer#61 by @vishh)
|
|
|
|
|
* Add pause and unpause commands to nsinit (docker/libcontainer#56 by @crosbymichael)
|
|
|
|
|
* Rename nsinit spec to config and only display raw json (docker/libcontainer#55 by @crosbymichael)
|
|
|
|
|
* Report child error to parent (docker/libcontainer#54 by @crosbymichael)
|
|
|
|
|
* Adding per container network stats (docker/libcontainer#25 by @vishh)
|
|
|
|
|
* Improve nsinit usage instructions (docker/libcontainer#43 by @glyn)
|
|
|
|
|
* Create state (docker/libcontainer#50 by @crosbymichael)
|
|
|
|
|
* Add oom notify event (docker/libcontainer#48 by @crosbymichael)
|
|
|
|
|
* Strongly type context on the Config (docker/libcontainer#51 by @crosbymichael)
|
|
|
|
|
* Rename Container -> Config. (docker/libcontainer#39 by @vmarmol)
|
|
|
|
|
* Refactoring libcontainer to avoid cyclic dependencies in the future. (docker/libcontainer#41 by @vishh)
|
|
|
|
|
* Update readme with API change explination (docker/libcontainer#40 by @crosbymichael)
|
|
|
|
|
* Add sample config files (docker/libcontainer#38 by @crosbymichael)
|
|
|
|
|
* Don't fail getting stats of unknown hierarchies. (docker/libcontainer#37 by @vmarmol)
|
|
|
|
|
* Replacing docker-dev with libcontainer mailing list. (docker/libcontainer#35 by @vmarmol)
|
|
|
|
|
* CpuStats.CpuUsage includes TotalUsage (docker/libcontainer#34 by @bernerdschaefer)
|
|
|
|
|
* Add option parsing to nsenter and enable specifying commands with arguments (docker/libcontainer#27 by @mrunalp)
|
|
|
|
|
* Require two LGTMs for non-maintainer changes. (docker/libcontainer#29 by @vmarmol)
|
|
|
|
|
* Update travis to run unit tests (docker/libcontainer#32 by @crosbymichael)
|
|
|
|
|
* Update sample json file for quick testing (docker/libcontainer#31 by @crosbymichael)
|
|
|
|
|
* Revert "Mount cgroups in the container" (docker/libcontainer#30 by @crosbymichael)
|
|
|
|
|
* Ignore isnotexist errors for restrict paths (docker/libcontainer#24 by @crosbymichael)
|
|
|
|
|
* Use lstat to check device symlinks (docker/libcontainer#26 by @crosbymichael)
|
|
|
|
|
* Fix invalid fd race (docker/libcontainer#17 by @alexlarsson)
|
|
|
|
|
* Use PATH_MAX as buffer size for buffers containing paths. (docker/libcontainer#21 by @mrunalp)
|
|
|
|
|
* Mount cgroup in container (docker/libcontainer#15 by @alexlarsson)
|
|
|
|
|
* nsenter: fixing the cpp order (docker/libcontainer#20 by @vbatts)
|
|
|
|
|
* Initial hacker documentation (docker/libcontainer#10 by @glyn)
|
|
|
|
|
* Add Travis (docker/libcontainer#14 by @tianon)
|
|
|
|
|
* nsenter: fix setns() for rhel6 (glibc-2.12) (docker/libcontainer#12 by @vbatts)
|
|
|
|
|
* Grammar in README (docker/libcontainer#11 by @timthelion)
|
|
|
|
|
* Fix vet errors (docker/libcontainer#8 by @LK4D4)
|
|
|
|
|
* Add build flag for nsenter file (docker/libcontainer#5 by @crosbymichael)
|
|
|
|
|
* Update email address in maintainer file (docker/libcontainer#3 by @crosbymichael)
|
|
|
|
|
|
|
|
|
|
## Initial development under moby/moby (formerly docker/docker)
|
|
|
|
|
|
|
|
|
|
* Add more stats to libcontainer. (moby/moby#6198 by @vishh)
|
|
|
|
|
* Add per cpu usage to libcontainer stats (moby/moby#6153 by @vishh)
|
|
|
|
|
* Refactor device handling code (moby/moby#6097 by @timthelion)
|
|
|
|
|
* SETUID/SETGID not required for changing user (moby/moby#6083 by @bernerdschaefer)
|
|
|
|
|
* libcontainer support for arbitrary route table entries (moby/moby#5868 by @jhspaybar)
|
|
|
|
|
* Add device nodes recursively (moby/moby#5995 by @vieux)
|
|
|
|
|
* Move get pid into cgroup implementation (moby/moby#5976 by @crosbymichael)
|
|
|
|
|
* Mount /dev in tmpfs for privileged containers (moby/moby#5922 by @crosbymichael)
|
|
|
|
|
* Make /proc writable, but not /proc/sys and /proc/sysrq-trigger (moby/moby#5903 by @alexlarsson)
|
|
|
|
|
* Add PDEATHSIG support to nsinit library (moby/moby#5792 by @bernerdschaefer)
|
|
|
|
|
* fix panic when passing empty environment (moby/moby#5833 by @srid)
|
|
|
|
|
* Change libcontainer to drop all capabilities by default. (moby/moby#5810 by @vmarmol)
|
|
|
|
|
* "nsinit exec ..." forwards signals to container (moby/moby#5791 by @bernerdschaefer)
|
|
|
|
|
* Remove the bind mount for dev/console which override the mknod/label (moby/moby#5781 by @creack)
|
|
|
|
|
* libcontainer: Create dirs/files as needed for bind mounts (moby/moby#5748 by @crosbymichael)
|
|
|
|
|
* Check supplied hostname before using it. (moby/moby#5630 by @rjnagal)
|
|
|
|
|
* Don't restrict lxc because of apparmor (moby/moby#5556 by @crosbymichael)
|
|
|
|
|
* Mount /proc and /sys read-only, except in privileged containers (moby/moby#5529 by @crosbymichael)
|
|
|
|
|
* Add selinux label support for processes and mount (moby/moby#5448 by @crosbymichael)
|
|
|
|
|
* Close extraneous file descriptors in containers (moby/moby#5464 by @tianon)
|
|
|
|
|
* Remove "root" and "" special cases in libcontainer (moby/moby#5449 by @tianon)
|
|
|
|
|
* Refactor cgroups into subsystems and support metrics (moby/moby#5328 by @crosbymichael)
|
|
|
|
|
* Avoid "invalid memory address or nil pointer dereference" panic (moby/moby#5143 by @kzys)
|
|
|
|
|
* Change shm mode to 1777 (moby/moby#5131 by @crosbymichael)
|
|
|
|
|
* Fix libcontainer network support on rhel6 (moby/moby#5115 by @alexlarsson)
|
|
|
|
|
* apparmor: docker-default: Include base abstraction (moby/moby#5049 by @Supermathie)
|
|
|
|
|
* fixed two readme typos (moby/moby#5025 by @dstine)
|
|
|
|
|
* These two patches should fix problems we see with running docker in the wild. (moby/moby#4953 by @rhatdan)
|
|
|
|
|
* Cleanly shutdown docker (moby/moby#4867 by @crosbymichael)
|
|
|
|
|
* remove setupDev from libcontainer (moby/moby#4942 by @vieux)
|
|
|
|
|
* Add logger to libcontainer (moby/moby#4645 by @crosbymichael)
|
|
|
|
|
* Always symlink /dev/ptmx for libcontainer (moby/moby#4656 by @crosbymichael)
|
|
|
|
|
* Move all bind-mounts in the container inside the namespace (moby/moby#4422 by @alexlarsson)
|
|
|
|
|
* No pivot root because of ramdisk (moby/moby#4512 by @crosbymichael)
|
|
|
|
|
* Use CGO for apparmor profile switch (moby/moby#4506 by @creack)
|
|
|
|
|
* remove dbus from apparmor profile for Ubuntu 12.04 (moby/moby#4503 by @unclejack)
|
|
|
|
|
* Add find tests and remove panic in DEBUG (moby/moby#4452 by @crosbymichael)
|
