Commit Graph

  • bcd0c0085c Merge pull request #11821 from mythi/coco-guest-update Steve Horsman 2025-09-23 12:45:38 +01:00
  • 5cb1332348 build: enable nvidia-attester for coco-guest-components Mikko Ylinen 2025-09-18 10:42:04 +03:00
  • e878d4a90a versions: bump guest-components and trustee for CoCo v0.16.0 Mikko Ylinen 2025-09-18 10:19:48 +03:00
  • 2cea32cc23 genpolicy: match sandbox name by regex Charlotte Hartmann Paludo 2025-09-19 10:53:59 +02:00
  • 5c14d2956a ci.ocp: Avoid unsupported "git --revision" Lukáš Doktor 2025-09-23 09:25:25 +02:00
  • a27009012c Merge pull request #11834 from Apokleos/fix-initdata-whitespace Fupan Li 2025-09-23 15:16:35 +08:00
  • 4e793d635e Merge pull request #11736 from kata-containers/enhance-copyfile Alex Lyn 2025-09-23 14:15:44 +08:00
  • f254eeb0e9 CI: Keep base64 output is a single line Alex Lyn 2025-09-23 11:54:32 +08:00
  • 72a0f5daec Merge pull request #11794 from Sumynwa/sumsharma/clh_netdev_hotplug_pciinfo Fupan Li 2025-09-23 09:57:57 +08:00
  • 02ace265d9 Merge pull request #11827 from microsoft/danmihai1/exec-retries Dan Mihai 2025-09-22 17:14:50 -07:00
  • 16c2dd7c96 Merge pull request #11769 from Apokleos/enhance-blockdev Hyounggyu Choi 2025-09-22 14:01:38 +02:00
  • 5dd36c6c0f runtime-rs: Correctly set permission and mode for dir when copy files Alex Lyn 2025-09-22 17:59:57 +08:00
  • 0f5511962c Merge pull request #11638 from ldoktor/ocp-peer-pods Greg Kurz 2025-09-22 11:57:46 +02:00
  • 429133cedb runtime-rs: Introduce shared FS volume management in VolumeResource Alex Lyn 2025-09-17 17:00:23 +08:00
  • 90c99541da runtime-rs: Integrate VolumeManager into ShareFsVolume lifecycle Alex Lyn 2025-09-17 16:47:38 +08:00
  • e73daa2f14 runtime-rs: Add sandbox level volume manager within non-sharedfs Alex Lyn 2025-09-17 16:37:00 +08:00
  • 28ab972b3f agent-ctl: bump image-rs Mikko Ylinen 2025-09-18 10:05:58 +03:00
  • 313c7313f0 runtime-rs: Refactor code to improve copyfile logic and readability Alex Lyn 2025-09-17 16:25:56 +08:00
  • f36377070a runtime-rs: Enhance Copyfile to ensure existing contents synchronized Alex Lyn 2025-08-29 17:34:46 +08:00
  • 2f5319675a runtime-rs: Set native aio more for initdata block device Alex Lyn 2025-09-17 14:53:13 +08:00
  • 5ca403b5d9 runtime-rs: Allow per-device AIO mode configuration for block devices Alex Lyn 2025-09-08 19:49:59 +08:00
  • 425e93a9b8 runtime-rs: Get more block device info within Device Manager Alex Lyn 2025-09-08 19:29:43 +08:00
  • 50ffa0fbfd Merge pull request #11495 from Caspian443/temp-selinux Xuewei Niu 2025-09-21 17:12:37 +08:00
  • 2221b76b67 runtime-rs: Add selinux support for hypervisor Caspian443 2025-09-19 02:51:18 +00:00
  • a658db8746 runtime-rs: hypervisor: add SELinux support functions Caspian443 2025-09-02 17:08:37 +08:00
  • 04948c616e Merge pull request #11830 from zvonkok/gpu-lts Xuewei Niu 2025-09-21 13:58:34 +08:00
  • e6f12d8f86 gpu: Add latest driver per default Zvonko Kaiser 2025-09-20 15:20:12 +00:00
  • 54e8081222 qemu: Fix submodules location change Fabiano Fidêncio 2025-09-19 21:53:46 +02:00
  • 346ebd0ff9 ci.ocp: Allow to set CAA_IMAGE Lukáš Doktor 2025-08-04 16:06:49 +02:00
  • bf90ccaf75 ci.ocp: Allow to set/provide PP_IMAGE_ID Lukáš Doktor 2025-07-30 18:36:09 +02:00
  • b7143488d9 ci.ocp: Allow to set CAA TAG Lukáš Doktor 2025-07-30 18:33:11 +02:00
  • 12c5e0f33f ci.ocp: Log more details on failure Lukáš Doktor 2025-07-30 09:28:12 +02:00
  • 7565c881e6 ci.ocp: Log variables in bash-friendly format Lukáš Doktor 2025-07-30 09:24:37 +02:00
  • a300b6b9a9 ci.ocp: Allow to set operator/caa commits Lukáš Doktor 2025-07-30 09:22:22 +02:00
  • 524bf66cbc tests: k8s-credentials-secrets: retry on exec error Dan Mihai 2025-09-18 21:52:51 +00:00
  • 01c7949bfd tests: k8s-number-cpus: retry on kubectl exec error Dan Mihai 2025-09-18 21:33:04 +00:00
  • 91c3804959 tests: k8s: add container_exec_with_retries() Dan Mihai 2025-09-18 22:20:14 +00:00
  • eec6c8b0c4 tests: k8s: retry after kubectl exec error Dan Mihai 2025-09-18 15:33:31 +00:00
  • 0fb40eda12 Merge pull request #11822 from BbolroC/runtime-no-hotplug-ibm-sel-s390x Hyounggyu Choi 2025-09-18 17:31:01 +02:00
  • d90e785901 runtime: Set maxmem to initialmem on s390x when memory hotplug is disabled Hyounggyu Choi 2025-09-18 12:27:36 +02:00
  • 49fbd6e7af runtime: qemu: disable memory hotplug for ConfidentialGuests Mikko Ylinen 2025-08-13 09:11:23 +03:00
  • ca244c7265 Merge pull request #11753 from Apokleos/fix-anno Dan Mihai 2025-09-16 16:42:26 -07:00
  • e2992b51ad tests: k8s-job debug information Dan Mihai 2025-09-16 00:23:25 +00:00
  • 8854e69e28 tests: k8s-empty-dirs debug information Dan Mihai 2025-09-16 00:05:59 +00:00
  • 96108006f2 agent: Panic on errors accessing the attestation agent binary Fabiano Fidêncio 2025-08-22 20:32:52 +02:00
  • d056fb20fe initramfs: Enforce --panic-on-corruption for veritysetup Fabiano Fidêncio 2025-08-22 20:42:07 +02:00
  • bc1170ba0c runtime-rs: Add bundle_path annotation within oci spec Alex Lyn 2025-09-14 13:49:16 +08:00
  • 71ddbac56d runtime-rs: Correctly set CONTAINER_TYPE_KEY within OCI Spec annotation Alex Lyn 2025-09-07 20:22:19 +08:00
  • a47c0cdf66 kata-types: Introduce a helper to update oci spec annotations Alex Lyn 2025-09-07 20:13:15 +08:00
  • 9992e1c416 kata-types: Export POD_CONTAINER and POD_SANDBOX constants as public Alex Lyn 2025-09-03 19:48:12 +08:00
  • 95585d818f runtime-rs: Add sandbox annotation of nerdctl network namespace Alex Lyn 2025-09-03 19:41:27 +08:00
  • bc75f6a158 Merge pull request #11783 from billionairiam/agenttypo Dan Mihai 2025-09-16 11:07:17 -07:00
  • e31a06d51d kata-manager: Handle zst unpacking Fabiano Fidêncio 2025-09-16 01:03:28 +02:00
  • 4265beb081 tools: agent-ctl: Fix unresolved ch import Fabiano Fidêncio 2025-09-15 23:18:18 +02:00
  • 4a92fc1129 runtime-rs: add the sandbox's shm volume support Fupan Li 2025-09-09 10:42:59 +08:00
  • d48c542a52 runtime-rs: Support Firecracker disk rate limiter Fupan Li 2025-09-10 18:00:54 +08:00
  • e0caeb32fc runtime-rs: move the rate limiter to hypervisor config Fupan Li 2025-09-10 17:38:51 +08:00
  • 73e31ea19a runtime-rs: add the block devices io limit support Fupan Li 2025-09-07 15:15:17 +08:00
  • ac74ef4505 Merge pull request #11801 from Apokleos/blk-sharerw Steve Horsman 2025-09-16 14:55:57 +01:00
  • 3443ddf24d runtime: clh: Add pci path for hotplugged network endpoints Sumedh Alok Sharma 2025-09-12 14:53:19 +00:00
  • e9a5de35e8 runtime-rs: Enable share-rw=true when hotplug block device within qemu Alex Lyn 2025-09-15 15:46:17 +08:00
  • df852b77b5 Merge pull request #11799 from Apokleos/fix-virtual-volume-type Fupan Li 2025-09-16 09:38:07 +08:00
  • 489b677927 Merge pull request #11732 from microsoft/saulparedes/init_data_policy_support Dan Mihai 2025-09-15 15:45:57 -07:00
  • 8abfef358a tests: Only run docker tests with one VMM Fabiano Fidêncio 2025-09-15 21:30:14 +02:00
  • dce6f13da8 tests: Only run devmapper tests with QEMU Fabiano Fidêncio 2025-09-15 21:51:19 +02:00
  • e3e406ff26 tests: remove add_allow_all_policy_to_yaml call from helper func Saul Paredes 2025-09-09 16:35:31 -07:00
  • cc73b14e26 docs: update policy docs Saul Paredes 2025-08-27 16:34:29 -07:00
  • b5352af1ee tests: update tests that manually set policy Saul Paredes 2025-08-27 16:29:33 -07:00
  • 2d8c3206c7 gha: allow cbl-mariner to test using initdata annotation Saul Paredes 2025-08-29 14:12:34 -07:00
  • 5d124523f8 runtime: add initdata support in clh Saul Paredes 2025-09-15 11:40:21 -07:00
  • 252d4486f1 runtime: delete initdata annotation Saul Paredes 2025-08-29 14:08:42 -07:00
  • af41f5018f runtime: share initdata setup code Saul Paredes 2025-08-25 17:17:04 -07:00
  • a427537914 genpolicy: add initdata support Saul Paredes 2025-09-05 11:18:09 -07:00
  • 10de56a749 kata-types: expose encode and decode initdata helper methods Saul Paredes 2025-09-05 11:08:05 -07:00
  • 86fe419774 versions: update kernel-confidential to Linux v6.16.7 Mikko Ylinen 2025-09-15 12:56:19 +03:00
  • fab828586b Merge pull request #11771 from stevenhorsman/attempt-crio-1.34.0-bump Steve Horsman 2025-09-15 17:31:13 +01:00
  • fa6e4981a1 versions: bump ovmf edk2 version Alex Tibbles 2025-09-13 15:00:11 -04:00
  • dc64d256bf runtime: Bump cri-o to latest stevenhorsman 2025-09-08 13:35:28 +01:00
  • 16dd1de0ab kata-monitor: Update deprecated use of grpc functions stevenhorsman 2025-09-08 14:39:03 +01:00
  • b9ff5ffc21 kata-monitor: Replace use of deprecated expfmt.FmtText stevenhorsman 2025-09-08 14:30:10 +01:00
  • 7f86b967d1 runtime: Replace use of deprecated expfmt.FmtText stevenhorsman 2025-09-08 14:23:01 +01:00
  • 62ed86d1aa runtime: Update deprecated use of grpc.Dial stevenhorsman 2025-09-08 14:08:55 +01:00
  • 334340aa18 runtime: Update remove methods stevenhorsman 2025-09-08 14:02:22 +01:00
  • ad7e60030a tests: k8s: kata-deploy: Remove unnecessary dirs to free up space Fabiano Fidêncio 2025-09-08 17:06:31 +02:00
  • 60ba121a0d kata-deploy: nit: Fix test name Fabiano Fidêncio 2025-09-05 18:36:09 +02:00
  • d741544fa6 kata-deploy: Don't fail if the runtimeclass is already deleted Fabiano Fidêncio 2025-09-05 17:22:28 +02:00
  • 679cdeadc8 runtime: fix the issue clh resize vcpu failed Fupan Li 2025-09-05 10:25:19 +08:00
  • 66a3d4b4a2 versions: bump kernel to 6.12.47 Alex Tibbles 2025-09-11 11:31:38 -04:00
  • 710c117a24 version: Bump QEMU to v10.1.0 Alex Tibbles 2025-09-13 10:16:19 -04:00
  • e3aa973995 versions(deps): Bump slab versions prior to 0.4.10 stevenhorsman 2025-09-10 09:43:56 +01:00
  • 9c0fcd30c5 ci: Add slab to dependabot groups stevenhorsman 2025-09-08 15:14:00 +01:00
  • 924051c652 genpolicy: Bump slab crate to 0.4.11 stevenhorsman 2025-09-08 15:17:59 +01:00
  • 8fb4332d42 agent-ctl: Bump slab crate to 0.4.11 stevenhorsman 2025-09-08 15:17:14 +01:00
  • 84bcf34c75 build(deps): bump slab from 0.4.10 to 0.4.11 in /src/runtime-rs dependabot[bot] 2025-09-05 15:38:55 +00:00
  • 60790907ef clh: Update to v48.0 release Fabiano Fidêncio 2025-09-13 12:38:05 +02:00
  • 4dc21aa966 Merge pull request #11766 from Apokleos/fix-create_container_timeout Fupan Li 2025-09-15 10:19:58 +08:00
  • 7874505249 Merge pull request #11782 from Apokleos/enhance-policy-rs Alex Lyn 2025-09-15 10:07:14 +08:00
  • e3d6cb8547 Merge pull request #11716 from lifupan/fupan_main Alex Lyn 2025-09-15 09:49:40 +08:00
  • 7062a769b7 genpolicy: Exclude cgroup namespace from namespace validation Alex Lyn 2025-09-14 17:05:45 +08:00
  • 12a9ad56b4 genpolicy: Normalize namespace type for mount/mnt compatibility Alex Lyn 2025-09-10 14:55:31 +08:00