Commit Graph

  • 9686d62cb4 Merge pull request #13299 from fidencio/topic/versions-yaml-must-be-installed Zvonko Kaiser 2026-06-29 14:37:15 -04:00
  • b5c61229c0 Merge pull request #13289 from stevenhorsman/mem-agent-rpc-policy Fabiano Fidêncio 2026-06-29 16:54:43 +02:00
  • d9fc56d6b3 Merge pull request #13105 from manuelh-dev/mahuber/no-guest-pull-skip-pol Dan Mihai 2026-06-29 07:06:22 -07:00
  • 6f47183c28 kata-deploy: restore versions.yaml installation on host nodes Fabiano Fidêncio 2026-06-29 12:06:31 +02:00
  • 36b674ed51 workflow: wire agent policy coverage check into static-checks stevenhorsman 2026-06-26 08:43:25 +01:00
  • b23621d5a9 ci: add static check for agent policy coverage stevenhorsman 2026-06-25 16:42:44 +01:00
  • 5c171e7321 agent: add policy-gated resize_volume stub to AgentService stevenhorsman 2026-06-25 09:21:04 -07:00
  • 5c02ef1335 genpolicy: add missing default rules for AgentService RPCs stevenhorsman 2026-06-25 16:40:33 +01:00
  • f490684636 policy: add missin default policy rules stevenhorsman 2026-06-25 16:28:13 +01:00
  • 559f9a4c4b rustjail: update path-absolutize from 1.2.1 to 3.1.1 stevenhorsman 2026-06-26 04:29:17 -07:00
  • 3664990404 deps: update thiserror to 2.0.18 stevenhorsman 2026-06-18 09:03:34 -07:00
  • 93e4b68819 libs: Resolve unused import warning stevenhorsman 2026-06-18 09:01:00 -07:00
  • 95b57b025c agent: gate MemAgentMemcgSet and MemAgentCompactSet behind agent policy stevenhorsman 2026-06-25 16:25:50 +01:00
  • ffcc42d984 Merge pull request #13153 from BbolroC/vfio-ap-passthrough-coldplug-runtime-rs Hyounggyu Choi 2026-06-27 15:35:32 +02:00
  • 038f951206 test: add VFIO device cold-plug tests to nightly tests Hyounggyu Choi 2026-05-28 15:58:01 +02:00
  • f223199b3d runtime-rs: add raw VFIO device cold-plug support Hyounggyu Choi 2026-05-28 14:38:32 +02:00
  • 534db34e7a runtime-rs: add s390x VFIO-AP mediated device support Hyounggyu Choi 2026-05-28 13:21:17 +02:00
  • aad3bfa7aa runtime-rs: add fallback for image reference for single container Hyounggyu Choi 2026-06-02 13:12:15 +02:00
  • 26ffe83c41 Merge pull request #13127 from manuelh-dev/mahuber/eph-storage-plain manuelh-dev 2026-06-26 17:29:17 -07:00
  • 0bf87a3459 rootfs: mariner: include e2fsprogs package Manuel Huber 2026-06-05 22:56:42 +00:00
  • 2a5456bde9 tests: cover block-plain emptyDir storage Manuel Huber 2026-06-03 18:36:34 +00:00
  • 023620f880 osbuilder: add mkfs.ext4 for NVIDIA rootfs Manuel Huber 2026-06-03 18:08:22 +00:00
  • 4804a08773 genpolicy: model block-plain emptyDirs Manuel Huber 2026-06-03 18:07:40 +00:00
  • 16404f1cd5 agent: format fresh block emptyDirs Manuel Huber 2026-06-03 18:06:52 +00:00
  • b2b17d4b64 runtime-rs: plumb block discard unmap Manuel Huber 2026-06-03 18:05:54 +00:00
  • c9352ffffe runtime: plumb block discard unmap Manuel Huber 2026-06-03 18:05:24 +00:00
  • 3332b7c4bc runtime-rs: support block-plain emptyDirs Manuel Huber 2026-06-03 18:04:48 +00:00
  • 24c51cfbbf runtime: support block-plain emptyDirs Manuel Huber 2026-06-03 18:03:37 +00:00
  • b05d705ea0 Merge pull request #13286 from kata-containers/mahuber/genpolicy-image-user-group-tests manuelh-dev 2026-06-26 13:55:44 -07:00
  • 5321c9d122 kata-deploy: remove configurable startup taints after install Pankaj Walke 2026-06-25 19:00:11 +00:00
  • 220fa04981 build(deps): bump github.com/go-openapi/errors in /src/runtime dependabot/go_modules/src/runtime/github.com/go-openapi/errors-0.22.8 dependabot[bot] 2026-06-26 15:04:42 +00:00
  • 5c7c49aa5d Merge pull request #13291 from BbolroC/set-overhead_memory-ibm-sel Hyounggyu Choi 2026-06-26 16:27:04 +02:00
  • db91f6f130 trace-forwarder: update opentelemetry dependencies to v0.32 dependabot[bot] 2026-06-26 07:37:12 +00:00
  • b5aa4cef35 runtime-rs: use SE-specific overhead_memory for qemu-se config Hyounggyu Choi 2026-06-26 13:29:41 +02:00
  • 3f5ffa42a0 Merge pull request #12958 from Apokleos/integrated-erofslayers-gpt-vmdk Fupan Li 2026-06-26 15:35:10 +08:00
  • 66cb12d260 Merge pull request #13280 from kata-containers/disable-guest-empty-dir Aurélien Bombo 2026-06-25 22:35:20 -05:00
  • e77795f573 ci: Update libs required-test names for libdevmapper dependency Alex Lyn 2026-06-25 23:41:27 +08:00
  • a5a0f1a5d0 gha: Pass USE_DEVMAPPER to agent static tarball builds Alex Lyn 2026-06-16 16:50:15 +08:00
  • adcbef0c53 kata-deploy: Configure containerd erofs for dm-verity integrity mode Alex Lyn 2026-06-16 15:19:37 +08:00
  • 562c9acdb2 packaging: Add libdevmapper-dev and GNU target to agent Dockerfile Alex Lyn 2026-06-16 15:30:30 +08:00
  • b084c0df36 kata-deploy: Forward USE_DEVMAPPER in local build scripts Alex Lyn 2026-06-16 15:37:09 +08:00
  • 2dd9426029 kata-deploy: Add erofsSnapshotterMode helm value and integrity mode Alex Lyn 2026-06-16 15:41:33 +08:00
  • 59fc0613bc tests: Add E2E test for erofs dm-verity integrity in CI tests Alex Lyn 2026-06-16 15:44:14 +08:00
  • b2d0e5b712 kata-agent: Use kata-types dmverity with optional devicemapper support Alex Lyn 2026-06-16 16:28:53 +08:00
  • 274a904bf7 kata-agent: Mount multi-layer EROFS partitions concurrently Alex Lyn 2026-06-16 16:34:40 +08:00
  • c74bddddaf kata-types: Add dmverity module with optional devicemapper support Alex Lyn 2026-06-16 14:46:24 +08:00
  • a08267faaf runtime-rs: Track GPT partition padding files for cleanup Alex Lyn 2026-05-26 14:37:01 +08:00
  • 51e8310ef3 kata-agent: Integrate dm-verity into multi-layer EROFS mount path Alex Lyn 2026-05-26 14:36:42 +08:00
  • 963ba6c6cd kata-agent: Add dm-verity device cleanup for GPT-partitioned layers Alex Lyn 2026-05-26 19:48:44 +08:00
  • dce409bc35 kata-agent: Add dm-verity device creation for GPT-partitioned layers Alex Lyn 2026-05-26 19:45:19 +08:00
  • e900eae388 kata-agent: Add no-udev DmOptions builders and mknod device node helpers Alex Lyn 2026-05-26 19:33:07 +08:00
  • c471644477 runtime-rs: Add dm-verity annotation extraction to GPT+VMDK integration Alex Lyn 2026-05-20 17:24:27 +08:00
  • 3051b8d11a runtime-rs: Add dm-verity utility functions to gpt_disk module Alex Lyn 2026-05-26 19:27:14 +08:00
  • 499fefd972 kata-types: Extend DmVerityInfo with salt, hash_type, no_superblock fields Alex Lyn 2026-05-19 16:52:05 +08:00
  • c6ee1c70a8 genpolicy: test image user group handling Manuel Huber 2026-06-26 00:04:17 +00:00
  • b38ca059d9 tests: pin identity in policy workloads Manuel Huber 2026-06-02 22:16:54 +00:00
  • bfd6485346 tests: set identity for guest-pull pods Manuel Huber 2026-06-02 22:16:31 +00:00
  • 6c38a86146 tests: plumb pod securityContext helpers Manuel Huber 2026-06-02 22:16:09 +00:00
  • b843e56651 genpolicy: require guest-pull securityContext Manuel Huber 2026-06-03 21:08:08 +00:00
  • b1e6b9449d runtime-rs: special case emptyDirs with peer pods Aurélien Bombo 2026-06-25 15:14:19 -05:00
  • b20f974ddd runtime-rs: remove disable_guest_empty_dir config Aurélien Bombo 2026-06-25 09:03:07 -05:00
  • 79cf2aed66 Merge pull request #13282 from fidencio/topic/revert-qos-test-skip Fabiano Fidêncio 2026-06-25 22:18:21 +02:00
  • 493ecccc43 genpolicy: inspect layers under guest-pull Manuel Huber 2026-06-02 22:15:16 +00:00
  • 850b385f6b Revert "tests: skip Guaranteed QoS test for SNP/TDX runtime-rs" Fabiano Fidêncio 2026-06-25 18:18:11 +02:00
  • 31d349f999 Merge pull request #13173 from fidencio/topic/fixed-sandbox-sizing Fabiano Fidêncio 2026-06-25 15:50:00 +02:00
  • a664595084 kata-deploy: bump qemu RuntimeClass overhead for the aarch64 VMM Fabiano Fidêncio 2026-06-24 18:52:25 +02:00
  • b2f7314d31 tests: harden sandbox sizing manifests for k8s cpu workloads Fabiano Fidêncio 2026-06-24 18:52:25 +02:00
  • 346a3be9ad docs: document runtime-rs sandbox overhead sizing Fabiano Fidêncio 2026-06-24 18:52:25 +02:00
  • a34c74a2d4 runtime-rs: size static sandboxes with overhead values Fabiano Fidêncio 2026-06-24 18:47:38 +02:00
  • 65a266f532 Merge pull request #13272 from cayoub-oai/codex/upstream-cgroupfs-init-subcgroup Fabiano Fidêncio 2026-06-25 13:54:19 +02:00
  • 1217dd1584 Merge pull request #12373 from kata-containers/disable-guest-empty-dir Aurélien Bombo 2026-06-24 20:09:46 -05:00
  • 7d4e7c076a runtime-rs: support virtio-scsi block rootfs mahuber/nv-runtime-rs-blockfile Manuel Huber 2026-06-25 00:01:09 +00:00
  • 4e3d257dc0 agent: Apply init subcgroup in cgroupfs manager Chris Ayoub 2026-06-23 21:21:11 +00:00
  • 10cf6816aa kernel: Fix FUSE crash with host emptyDir Aurélien Bombo 2026-05-27 12:01:09 -05:00
  • 77c3e36cf7 tests: Support GENPOLICY_SETTINGS_DIR with drop-in-examples Aurélien Bombo 2026-05-20 16:34:46 -05:00
  • 3acb618f6b genpolicy: Assume disable_guest_empty_dir = true Aurélien Bombo 2026-01-27 17:04:19 -06:00
  • e191c5b716 runtime-go/rs: Reconcile hugepage emptyDirs and disable_guest_empty_dir Aurélien Bombo 2026-06-24 04:58:52 -05:00
  • a3e91d9ed2 runtime-go/rs: Set disable_guest_empty_dir = true by default Aurélien Bombo 2026-01-20 14:58:55 -06:00
  • 6528e7a72f Merge pull request #13228 from fidencio/topic/dont-set-slots-maxmem-for-confidential-guests Fabiano Fidêncio 2026-06-24 17:27:28 +02:00
  • 13b3020c34 Merge pull request #13261 from c3d/bug/13260-Info-log-level Greg Kurz 2026-06-24 08:57:13 +02:00
  • 8f308bab9b nvidia: use blockfile snapshotter for runtime-rs Manuel Huber 2026-06-23 20:23:55 +00:00
  • 133727ac18 ci: add Firecracker testing (k8s with blockfile snapshotter) topic/fc-k8s-blockfile-snapshotter marvelshan 2026-06-11 07:29:44 +00:00
  • 392b802f61 Merge pull request #12878 from Apokleos/fix-configs Fabiano Fidêncio 2026-06-23 13:53:16 +02:00
  • 811914a372 Merge pull request #13246 from Apokleos/copyfile-with-gid-uid Steve Horsman 2026-06-23 10:43:03 +01:00
  • 3e429a8afb Merge pull request #13234 from LandonTClipp/docs-skill Steve Horsman 2026-06-23 09:59:15 +01:00
  • 631fd96715 runtime: Change default log level from Warn to Info Christophe de Dinechin 2026-06-22 16:16:19 +02:00
  • 85e828cc9b docs: Add AI agent skill for doc contributions LandonTClipp 2026-06-16 15:43:35 +00:00
  • 9ff1d4d54c tests: fix fc-rs CI failures in k8s, nerdctl and stability fix/runtime-rs-net-fc Anastassios Nanos 2026-05-27 20:18:46 +00:00
  • c991f5f6c5 CI: fixup with comments topic/erofs-integrety Alex Lyn 2026-06-23 10:45:24 +08:00
  • 98d11d0ade gha: Pass USE_DEVMAPPER to agent static tarball builds Alex Lyn 2026-06-16 16:50:15 +08:00
  • 2c8358454d kata-deploy: Configure containerd erofs for dm-verity integrity mode Alex Lyn 2026-06-16 15:19:37 +08:00
  • 405a8f8917 packaging: Add libdevmapper-dev and GNU target to agent Dockerfile Alex Lyn 2026-06-16 15:30:30 +08:00
  • 91d8fe44c0 kata-deploy: Forward USE_DEVMAPPER in local build scripts Alex Lyn 2026-06-16 15:37:09 +08:00
  • 8a7be7af69 kata-deploy: Add erofsSnapshotterMode helm value and integrity mode Alex Lyn 2026-06-16 15:41:33 +08:00
  • 5ec2634fe7 tests: Add E2E test for erofs dm-verity integrity in CI tests Alex Lyn 2026-06-16 15:44:14 +08:00
  • 2514429d7b kata-agent: Use kata-types dmverity with optional devicemapper support Alex Lyn 2026-06-16 16:28:53 +08:00
  • f5aa493b2a kata-agent: Mount multi-layer EROFS partitions concurrently Alex Lyn 2026-06-16 16:34:40 +08:00
  • c63f0da01a kata-types: Add dmverity module with optional devicemapper support Alex Lyn 2026-06-16 14:46:24 +08:00
  • 3def01fc38 runtime-rs: Track GPT partition padding files for cleanup Alex Lyn 2026-05-26 14:37:01 +08:00
  • e1634da539 kata-agent: Integrate dm-verity into multi-layer EROFS mount path Alex Lyn 2026-05-26 14:36:42 +08:00