Commit Graph

  • 207f019bb5 kata-agent: Add dm-verity device cleanup for GPT-partitioned layers Alex Lyn 2026-05-26 19:48:44 +08:00
  • 63840fb006 kata-agent: Add dm-verity device creation for GPT-partitioned layers Alex Lyn 2026-05-26 19:45:19 +08:00
  • 945c50c96f kata-agent: Add no-udev DmOptions builders and mknod device node helpers Alex Lyn 2026-05-26 19:33:07 +08:00
  • 656d445bb3 runtime-rs: Add dm-verity annotation extraction to GPT+VMDK integration Alex Lyn 2026-05-20 17:24:27 +08:00
  • cafa64acf4 runtime-rs: Add dm-verity utility functions to gpt_disk module Alex Lyn 2026-05-26 19:27:14 +08:00
  • 4f54ccefee kata-types: Extend DmVerityInfo with salt, hash_type, no_superblock fields Alex Lyn 2026-05-19 16:52:05 +08:00
  • bbe714ae03 Merge pull request #13227 from fidencio/topic/rfc-composable-vm-images-update Fabiano Fidêncio 2026-06-22 21:07:04 +02:00
  • 84db260d9a docs: detail composable image runtime contracts in proposal Fabiano Fidêncio 2026-06-15 17:32:28 +02:00
  • 9761ea2235 Merge pull request #13164 from manuelh-dev/mahuber/remove-resource-requests Fabiano Fidêncio 2026-06-22 20:01:33 +02:00
  • d406a747a9 Merge pull request #13258 from fidencio/topic/fix-publish-payload-after-merge Fabiano Fidêncio 2026-06-22 18:35:41 +02:00
  • a3f160bd40 ci: do not publish a kata-monitor job-dispatcher manifest Fabiano Fidêncio 2026-06-22 13:49:06 +02:00
  • f1ebefcdfb Merge pull request #13222 from fidencio/topic/nvidia-switch-to-kata-deploy-jobs Fabiano Fidêncio 2026-06-22 12:55:10 +02:00
  • a87d71763e Merge pull request #13255 from kata-containers/dependabot/go_modules/src/runtime/github.com/containerd/containerd-1.7.33 Steve Horsman 2026-06-22 11:17:54 +01:00
  • 20bcff185f Merge pull request #13254 from kata-containers/dependabot/go_modules/src/runtime/go.mongodb.org/mongo-driver-1.17.7 Steve Horsman 2026-06-22 11:17:29 +01:00
  • f9682356ce Merge pull request #13216 from Apokleos/hotunplug-blk Fabiano Fidêncio 2026-06-22 12:14:30 +02:00
  • 337b600268 Merge pull request #13256 from fidencio/release/3.32.0 3.32.0 Fabiano Fidêncio 2026-06-22 10:33:25 +02:00
  • 9550a323ac Merge pull request #13245 from kata-containers/unify-nix-version Alex Lyn 2026-06-22 15:25:10 +08:00
  • 8ae08e7fb0 runtime-rs: Add dan_conf to allow network devices in host netns for qemu Alex Lyn 2026-06-15 15:47:25 +08:00
  • b068f73543 runtime-rs: add experimental features documentation Alex Lyn 2026-06-15 15:55:08 +08:00
  • 71f3f783a4 runtime-rs: Remove mem_agent configuration for kata coco dev scenarios Alex Lyn 2026-06-15 15:52:36 +08:00
  • 7aaa4e63d1 Merge pull request #13241 from PiotrProkop/exit-code Alex Lyn 2026-06-22 09:13:24 +08:00
  • dc70b93573 release: Bump version to 3.32.0 Fabiano Fidêncio 2026-06-22 01:14:52 +02:00
  • c2d737c9d7 agent: report 128+signal as exit code for signal-terminated processes PiotrProkop 2026-06-17 11:03:16 +02:00
  • 9c6cccb483 build(deps): bump github.com/containerd/containerd in /src/runtime dependabot[bot] 2026-06-21 14:32:17 +00:00
  • 374a867774 Merge pull request #13196 from microsoft/cameronbaird/upstream/runtime-go-clh-templating Fabiano Fidêncio 2026-06-21 16:31:19 +02:00
  • 0a63aebea9 runtime-rs: Implement remove_device for block device hot removal Alex Lyn 2026-06-13 23:01:53 +08:00
  • d4212bcb74 runtime-rs: Add hotunplug_device dispatcher for device type routing Alex Lyn 2026-06-13 22:39:25 +08:00
  • 281b6aa61a runtime-rs: Add hotunplug_block_device for block device hot removal Alex Lyn 2026-06-14 00:50:14 +08:00
  • 431720025c runtime-rs: Enhance hotplug_block_device error handling and rollback Alex Lyn 2026-06-17 11:48:03 +08:00
  • 399c863cd2 build(deps): bump go.mongodb.org/mongo-driver in /src/runtime dependabot[bot] 2026-06-20 10:22:56 +00:00
  • 730307f32c factory: Default to normal sandbox boot path when factory init not done Cameron Baird 2026-06-09 18:59:20 +00:00
  • 65a5f272f8 ci: Introduce tests for VM template factory Cameron Baird 2026-06-09 18:55:28 +00:00
  • c0f9744225 runtime: Implement support for VM Template factory in clh Cameron Baird 2026-06-09 18:53:58 +00:00
  • aafd16515c tests: use limits for Kata workload manifests Manuel Huber 2026-06-12 22:29:47 +00:00
  • 79d866a71d temp to be squashed: configure qemu with initrd for this test cameronbaird/upstream/runtime-go-clh-templating-citest Cameron Baird 2026-06-19 16:24:12 +00:00
  • d09d1959c2 libs: Update mem-agent to use nix workspace version stevenhorsman 2026-06-17 06:18:07 -07:00
  • 531877f28f deps: Upgrade nix crate from 0.26.4 to 0.31.3 stevenhorsman 2026-06-17 06:15:36 -07:00
  • ac508b093d runtime-rs: Use workspace nix version stevenhorsman 2026-06-17 09:33:22 +01:00
  • 2b8b09469d dragonball: Use workspace nix version stevenhorsman 2026-06-17 09:32:53 +01:00
  • b37b81bb75 lib: Use workspace nix version stevenhorsman 2026-06-16 17:15:18 +01:00
  • ec55a74969 Merge pull request #11485 from kata-containers/zvonkok-patch-1 Steve Horsman 2026-06-19 09:19:26 +01:00
  • 21b59e2d87 temp to be squashed: use nsenter for node-level tmpfs handling Cameron Baird 2026-06-19 05:40:27 +00:00
  • 103b0b2cbc Merge pull request #13078 from SantoshMadhukar-K/improved-test-coverage Hyounggyu Choi 2026-06-19 03:52:14 +02:00
  • 197f0c7d24 temp to be squashed: don't attempt to set up hotplugsize Cameron Baird 2026-06-18 23:52:40 +00:00
  • fbc0673a65 temp to be squashed: Tweaks to templating test Cameron Baird 2026-06-18 21:43:38 +00:00
  • 37d1505d2e kernel: fix FUSE crash Aurélien Bombo 2026-05-27 12:01:09 -05:00
  • c5c4fd9266 tests: support GENPOLICY_SETTINGS_DIR with drop-in-examples Aurélien Bombo 2026-05-20 16:34:46 -05:00
  • 0e8c63ce39 genpolicy: Assume disable_guest_empty_dir = true Aurélien Bombo 2026-01-27 17:04:19 -06:00
  • e4b9a8463e runtime: Set disable_guest_empty_dir = true by default Aurélien Bombo 2026-01-20 14:58:55 -06:00
  • 74b24481eb runtime-rs: Set disable_guest_empty_dir = true by default Aurélien Bombo 2026-01-27 17:06:32 -06:00
  • b7c81abc13 TEMP: CI runtime-rs erofs validation (do not merge) Cameron Baird 2026-06-18 17:53:01 +00:00
  • 3572745091 TEMP: CI runtime-rs erofs validation (do not merge) cameronbaird/upstream/runtime-go-clh-templating Cameron Baird 2026-06-18 17:41:16 +00:00
  • e190e1bd83 factory: Default to normal sandbox boot path when factory init not done Cameron Baird 2026-06-09 18:59:20 +00:00
  • 73489ea9cd ci: Introduce tests for VM template factory Cameron Baird 2026-06-09 18:55:28 +00:00
  • 736e07d18e test: Improve test coverage for device handlers Add comprehensive test coverage for the device handler modules under src/agent/src/device, including matcher behavior, edge cases, and shared helper coverage across block, network, nvdimm, scsi, and vfio device paths. SantoshMadhukar-K 2026-06-18 04:19:45 -07:00
  • 4bbbcb813e doc: Create SECURITY.md stevenhorsman 2026-06-12 12:21:53 +01:00
  • 49ce886f20 Merge pull request #13242 from charludo/fix/runtime-rs-safe-path Steve Horsman 2026-06-18 11:39:19 +01:00
  • b4be5fdcca runtime-rs: change safe-path dependency from crates.io to workspace Charlotte Hartmann Paludo 2026-06-17 10:37:57 +02:00
  • d89290472f runtime-rs: Fix file_mode in copyfile to preserve permissions Alex Lyn 2026-06-18 11:31:47 +08:00
  • 66e938e02d Merge pull request #13244 from BbolroC/use-ibm-actionspz-runners-for-publishing-jobs Steve Horsman 2026-06-17 15:45:20 +01:00
  • 308eb34af6 GHA: Use IBM ActionsPZ runners for publish jobs on s390x Hyounggyu Choi 2026-06-17 15:34:39 +02:00
  • 6b342d6c3d runtime-rs: copyfile with uid/gid copyfile-uid-gid Alex Lyn 2026-06-17 20:32:20 +08:00
  • 47ac08b419 Merge pull request #13239 from Apokleos/remove-9p Alex Lyn 2026-06-17 20:17:52 +08:00
  • f0f8233759 Merge pull request #13237 from gkurz/osbuilder-version Greg Kurz 2026-06-17 13:56:13 +02:00
  • c3d98fe323 osbuilder: Simplify version fetching Greg Kurz 2026-06-16 19:04:11 +02:00
  • 854eef0312 runtime-rs: Remove unused msize_9p totally from configurations Alex Lyn 2026-06-17 14:53:48 +08:00
  • fb64b2017d runtime: Implement support for VM Template factory in clh Cameron Baird 2026-06-09 18:53:58 +00:00
  • 0ddb2ee1f1 Merge pull request #13160 from LandonTClipp/kata_visible_devices Fabiano Fidêncio 2026-06-16 19:10:35 +02:00
  • 3ca5742338 Merge pull request #13129 from pmores/fix-default_memory_annontation Fabiano Fidêncio 2026-06-16 18:11:19 +02:00
  • 3e98f925cf Merge pull request #13142 from davidweisse/dav/genpolicy-pod-resources Fabiano Fidêncio 2026-06-16 15:31:50 +02:00
  • ac56ea21d8 genpolicy: support pod-level resources davidweisse 2026-06-15 15:32:16 +02:00
  • 774e698aeb Merge pull request #12293 from Apokleos/graceful-errors Fabiano Fidêncio 2026-06-16 15:02:54 +02:00
  • c76c82ce1c Merge pull request #13229 from hgowda-amd/skip-qos-tests-snp-tdx-runtime-rs Fabiano Fidêncio 2026-06-16 14:02:51 +02:00
  • 492d604daf Merge pull request #13214 from fidencio/topic/block-volume-readonly-propagation Fabiano Fidêncio 2026-06-16 13:39:23 +02:00
  • 9b31e06c20 runtime-rs: bump the byte-unit dependency version Pavel Mores 2026-06-16 13:10:48 +02:00
  • 5ba5046e97 runtime-rs: fix default_memory annonation processing Pavel Mores 2026-06-02 12:09:04 +02:00
  • 4a9da5d37a chore(docs): Add info on building and running custom artifacts LandonTClipp 2026-06-15 16:35:53 +00:00
  • a1dd28cb52 feat(runtime): plumb VISIBLE_CDI_DEVICES through the Go runtime LandonTClipp 2026-06-15 16:35:11 +00:00
  • b49eb577b2 feat(runtime-rs): expose visible_cdi_devices in config LandonTClipp 2026-06-15 16:34:21 +00:00
  • 676fc90d0b feat(agent): translate VISIBLE_CDI_DEVICES into CDI device requests LandonTClipp 2026-06-15 16:33:50 +00:00
  • 8fc1a16225 runtime-rs: Make signal_process idempotent for exited init processes Alex Lyn 2026-01-06 20:04:28 +08:00
  • 44dd2b1f34 runtime-rs: Refine OOM watcher error reporting for sandbox teardown Alex Lyn 2026-01-06 19:57:03 +08:00
  • 3095bd379b runtime-rs: Introduce cancellation for OOM watcher during teardown Alex Lyn 2026-01-06 19:39:54 +08:00
  • 0ffdc576d3 runtime-rs: Introduce a helper to check if process/container exists Alex Lyn 2026-01-06 19:35:20 +08:00
  • 59677688ee runtime-rs: Introduce a helper to check normal oom shutdown errors Alex Lyn 2026-01-06 19:32:35 +08:00
  • cfab6f496b runtime-rs: Propagate block device read-only flag to the VMM Fabiano Fidêncio 2026-06-15 23:18:20 +02:00
  • 6203e28bef runtime: Propagate block-mode device read-only flag to the VMM Fabiano Fidêncio 2026-06-15 23:18:03 +02:00
  • 6588014b54 tests: skip Guaranteed QoS test for SNP/TDX runtime-rs Harshitha Gowda 2026-06-15 19:18:31 +00:00
  • 1af9456e26 Merge pull request #13223 from manuelh-dev/mahuber/kata-config-dropin-helpers Fabiano Fidêncio 2026-06-15 19:53:28 +02:00
  • 1aff0ebcad runtime-rs: qemu: don't set slots/maxmem for confidential guests Fabiano Fidêncio 2026-06-15 19:36:11 +02:00
  • a8a2a705ed Merge pull request #13226 from fidencio/topic/fix-image-publishing-for-release Fabiano Fidêncio 2026-06-15 17:48:23 +02:00
  • 5959549645 release: do not publish a kata-monitor-job-dispatcher manifest Fabiano Fidêncio 2026-06-13 13:47:30 +02:00
  • d104ef4ac3 fixup! packaging: add built-time support for NVAT topic/coco-rootfs-split Fabiano Fidêncio 2026-06-15 15:16:36 +02:00
  • bcb4c601df fixup! build: ship CoCo addon component manifest in addon image Fabiano Fidêncio 2026-06-15 15:16:36 +02:00
  • 19a681dcca fixup! agent: resolve and launch CoCo guest components via addon manifest Fabiano Fidêncio 2026-06-15 15:16:36 +02:00
  • 959b20d248 fixup! build: split NVIDIA rootfs into base-nvidia image + gpu addon Fabiano Fidêncio 2026-06-15 15:16:36 +02:00
  • a6e5d97fee fixup! build: ship CoCo addon component manifest in addon image Fabiano Fidêncio 2026-06-15 11:22:47 +02:00
  • b32e74170a fixup! agent: resolve and launch CoCo guest components via addon manifest Fabiano Fidêncio 2026-06-15 11:22:47 +02:00
  • 06576248d2 fixup! packaging: add built-time support for NVAT Fabiano Fidêncio 2026-06-15 07:57:54 +02:00
  • 1fd554a6cc fixup! agent: resolve and launch CoCo guest components via addon manifest Fabiano Fidêncio 2026-06-14 23:33:41 +02:00