Commit Graph

  • ebdfbd3120 genpolicy: Make comparison order-independent and accept CAP_X/X Alex Lyn 2025-09-10 14:45:40 +08:00
  • 04dedda6ed runtime-rs: Bugfix for kata virtual volume overlay fstype Alex Lyn 2025-09-14 16:38:09 +08:00
  • d073af4e64 dragonball: fix the issue of missing unregister doorbell Fupan Li 2025-09-12 17:46:42 +08:00
  • 2844a6f938 runtime-rs: sync hotunplug the block devices for dragonball Fupan Li 2025-09-11 16:40:30 +08:00
  • 6e5fe96ed1 dragonball: sync remove the block devices Fupan Li 2025-09-11 16:39:37 +08:00
  • c80ddd3fd9 runtime-rs: make virtio-blk use the pci bus as default Fupan Li 2025-08-25 16:21:09 +08:00
  • 2dd172c5b6 dragonball: Add the pci bus support for virtio-blk Fupan Li 2025-08-25 18:10:32 +08:00
  • 3c3823f2e4 dragonball: refactoring the pci system manager Fupan Li 2025-08-21 18:35:09 +08:00
  • 59273e8b2d dragonball: add the msix interrupt support Fupan Li 2025-08-21 15:47:21 +08:00
  • 7de6455742 dragonball: add the pci bus support for virtio Fupan Li 2025-08-21 15:37:22 +08:00
  • 34925ae740 Merge pull request #11795 from microsoft/danmihai1/snp-annotations Dan Mihai 2025-09-12 14:23:54 -07:00
  • 60beb5236d runtime: snp: enable CoCo annotations Dan Mihai 2025-09-12 15:35:30 +00:00
  • a011d2132f Merge pull request #11775 from RuoqingHe/fix-test_execute_hook RuoqingHe 2025-09-12 08:03:05 +08:00
  • 29e74892f4 test3 sprt/test-pr-up Aurélien Bombo 2025-09-11 12:26:53 -05:00
  • 5c5e2c68bc test2 Aurélien Bombo 2025-09-11 12:23:18 -05:00
  • fd4f7638e5 test Aurélien Bombo 2025-09-11 12:15:31 -05:00
  • 760b465bb0 Merge pull request #11788 from kata-containers/sprt/zizmor-branch Aurélien Bombo 2025-09-11 11:52:06 -05:00
  • 11655ef029 ci: Run Zizmor on pushes to any branch Aurélien Bombo 2025-09-11 09:33:25 -05:00
  • a5641e27db test Aurélien Bombo 2025-09-11 09:08:29 -05:00
  • f6e93c2094 libs: Fix test_get_uds_with_sid_with_zero Ruoqing He 2025-09-10 08:13:01 +00:00
  • b10e5a2250 libs: Fix test_get_uds_with_sid_ok Ruoqing He 2025-09-10 07:50:27 +00:00
  • efeba0b8ed libs: Detect guest protection before testing Ruoqing He 2025-09-10 07:00:33 +00:00
  • a9ba18d48c libs: Fix test_execute_hook test Ruoqing He 2025-09-09 04:20:19 +00:00
  • 5d59341f7f Merge pull request #11780 from ryansavino/snp-guest-kernel-upgrade-issue Dan Mihai 2025-09-10 18:21:26 -07:00
  • a989686cf6 kata-agent: Rename misleading variable in config parsing Liang, Ma 2025-09-10 15:38:06 +08:00
  • 58259aa5f4 Merge pull request #11754 from stevenhorsman/go.mod-1.24.6-bump Steve Horsman 2025-09-10 14:11:33 +01:00
  • 1737777d28 Merge pull request #11743 from BbolroC/enable-ci-qemu-se-runtime-rs Hyounggyu Choi 2025-09-10 15:00:16 +02:00
  • 1d26d07110 Merge pull request #11781 from lifupan/fupan_main_qemu Alex Lyn 2025-09-10 16:59:30 +08:00
  • 1060a94b08 GHA: Add s390x nightly test for runtime-rs on IBM SEL Hyounggyu Choi 2025-09-01 14:54:19 +02:00
  • 37764d18d4 tests: Skip k8s tests for qemu-se-runtime-rs Hyounggyu Choi 2025-09-01 14:46:20 +02:00
  • e502fa2feb Merge pull request #11731 from kata-containers/dependabot/go_modules/src/tools/csi-kata-directvolume/github.com/ulikunitz/xz-0.5.14 Steve Horsman 2025-09-10 09:47:28 +01:00
  • 3f25b88f89 Merge pull request #11737 from kata-containers/dependabot/cargo/src/runtime-rs/tracing-subscriber-0.3.20 Steve Horsman 2025-09-10 09:47:07 +01:00
  • 22bc29cb4a Merge pull request #11746 from stevenhorsman/bump-tests-go-mod-yaml-3.0.1 Steve Horsman 2025-09-10 09:46:18 +01:00
  • 106c6cea59 Merge pull request #11774 from RuoqingHe/2025-09-09-disable-make-test-libs-temporarily RuoqingHe 2025-09-10 14:52:33 +08:00
  • 16be168062 runtime-rs: log out the qemu console when debug enabled Fupan Li 2025-09-10 14:05:07 +08:00
  • 5715408d61 runtime-rs: add the console device to kernel boot for qemu Fupan Li 2025-09-10 13:55:08 +08:00
  • 6a2d813196 ci: gatekeeper: Mark make test libs not required Ruoqing He 2025-09-09 03:16:09 +00:00
  • 85779a6f1a packaging: add required modules for confidential guest kernel Ryan Savino 2025-09-09 17:53:19 -05:00
  • c1ee0985ed Merge pull request #11770 from stevenhorsman/agent-ctl-bump-hypervisor Xuewei Niu 2025-09-09 11:59:25 +08:00
  • ceab55a871 Merge pull request #11772 from kata-containers/sprt/zizmor-hash Aurélien Bombo 2025-09-08 13:56:25 -05:00
  • b640fe5a6a Merge pull request #11756 from kata-containers/sprt/curl-logging Aurélien Bombo 2025-09-08 11:55:29 -05:00
  • c0030c271c ci: security: Fix "commit hash does not point to a Git tag" Aurélien Bombo 2025-09-08 11:17:54 -05:00
  • cbcc7af6f3 Merge pull request #11615 from kata-containers/sprt/zizmor-pedantic Aurélien Bombo 2025-09-08 10:28:19 -05:00
  • 87356269d8 versions: Tidy up go.mod versions stevenhorsman 2025-09-03 15:02:12 +01:00
  • 2d28f3d267 agent-ctl: version: bump hypervisor stevenhorsman 2025-09-08 13:23:03 +01:00
  • 5ae34ab240 build(deps): bump github.com/ulikunitz/xz dependabot[bot] 2025-09-05 15:38:07 +00:00
  • 8eeea7d1fc runtime-rs: Correct the default create_container_timeout with 30s Alex Lyn 2025-09-07 21:47:59 +08:00
  • 3e53f2814a kata-types: Support create_container_timeout set within configuration Alex Lyn 2025-08-19 20:43:29 +08:00
  • 4644a02871 Merge pull request #11752 from Apokleos/fix-hooks-devcgrp Alex Lyn 2025-09-07 18:01:02 +08:00
  • fec92f3ad2 ci: Delete policy settings directory in teardown_common() sprt/cleanup-policy-settings Aurélien Bombo 2025-09-05 14:01:56 -05:00
  • 66dc24566f versions: Bump gopkg.in/yaml.v3 stevenhorsman 2025-09-02 11:39:33 +01:00
  • c480737ebd ci: cri-containerd-amd64: add logging for curl failures Aurélien Bombo 2025-09-03 11:48:58 -05:00
  • efbc69a2ec Merge pull request #11760 from kata-containers/sprt/oidc-fix Aurélien Bombo 2025-09-05 10:29:35 -05:00
  • 1f68f15995 Merge pull request #11759 from microsoft/danmihai1/policy-storages Dan Mihai 2025-09-04 15:07:45 -07:00
  • f39517a18a ci: aks: Refresh OIDC token in case access token expired Aurélien Bombo 2025-09-04 12:44:02 -05:00
  • 9b0b7fc795 genpolicy: print Input and Policy storages Dan Mihai 2025-09-04 16:00:41 +00:00
  • bdd98ec623 ci: Add test case for iptables, exercised via istio init container Cameron Baird 2025-08-18 22:51:12 +00:00
  • d16026f7b9 kernel: add required configs for ip6tables support Cameron Baird 2025-08-19 21:01:21 +00:00
  • 1dcc67c241 security: gha: Use Zizomor's auditor mode Aurélien Bombo 2025-07-22 13:03:06 -05:00
  • 49ca96561b Merge pull request #11750 from BbolroC/use-pattern-working-for-both-runtimes Hyounggyu Choi 2025-09-03 13:06:05 +02:00
  • e235fc1efb runtime-rs: Remove default value of Linux.Resources.Devices in OCI Spec Alex Lyn 2025-09-03 18:00:04 +08:00
  • 203f7090a6 runtime-rs: Ensure the setting of hooks when OCI Hooks is existing. Alex Lyn 2025-09-03 17:38:40 +08:00
  • 6d6202bbe3 tests: Use "Failed" consistently for both runtimes Hyounggyu Choi 2025-09-03 09:09:13 +02:00
  • 150c90e32a Merge pull request #11728 from BbolroC/fix-sealed-secret-volume Hyounggyu Choi 2025-09-02 16:57:33 +02:00
  • 9cc1c76ade Merge pull request #11729 from kata-containers/dependabot/go_modules/src/tools/log-parser/gopkg.in/yaml.v3-3.0.1 Fupan Li 2025-09-02 17:05:51 +08:00
  • 8330dd059f build(deps): bump tracing-subscriber in /src/runtime-rs dependabot[bot] 2025-08-29 20:44:35 +00:00
  • 8c2e32f075 kata-types: Support create_container_timeout set within configuration fix-create-container-timeout Alex Lyn 2025-08-29 17:17:23 +08:00
  • f6ff9cf717 Merge pull request #11689 from Caspian443/fix-devmapper-selinux-mount-issue Xuewei Niu 2025-08-29 15:29:46 +08:00
  • 754f07cff2 Merge pull request #11614 from kata-containers/workflow-permissions-tightening Aurélien Bombo 2025-08-28 10:56:03 -05:00
  • 3a0416c99f build(deps): bump gopkg.in/yaml.v3 in /src/tools/log-parser dependabot[bot] 2025-08-28 14:03:22 +00:00
  • 65fdb18c96 runtime-rs: Adjust path for sealed secret mount check Hyounggyu Choi 2025-08-28 15:13:57 +02:00
  • 08d2ba1969 cgroups: Fix "." parent cgroup special case Fabiano Fidêncio 2025-08-25 11:43:16 +02:00
  • 617af4cb3b runtime-rs: Empty block-rootfs Storage.options and align with Go runtime Caspian443 2025-08-26 01:27:21 +00:00
  • 9a7aadaaca libs: Introduce rootfs fs types Caspian443 2025-08-26 01:26:53 +00:00
  • 63f6dcdeb9 kata-manager: Support xz and zst suffixes for the kata tarball Fabiano Fidêncio 2025-08-25 13:44:31 +02:00
  • 687d0bf94a Merge pull request #11715 from fidencio/topic/backport-qemu-reclaim-guest-freed-memory Fupan Li 2025-08-25 16:59:29 +08:00
  • fd1b8ceed1 runtime: qemu: Add reclaim_guest_freed_memory [BACKPORT] Fabiano Fidêncio 2025-08-22 16:10:25 +02:00
  • b4545da15d workflows: Set top-level permissions to empty stevenhorsman 2025-08-22 14:09:24 +01:00
  • f79e453313 workflows: Tighten up workflow permissions stevenhorsman 2025-07-22 14:32:36 +01:00
  • e396a460bc Revert "local-build: Enforce USE_CACHE=no" Fabiano Fidêncio 2025-08-22 11:13:26 +02:00
  • 23d2dfaedc Merge pull request #11707 from fidencio/topic/switch-to-use-zstd-when-possible Steve Horsman 2025-08-22 10:06:00 +01:00
  • 8cbb1a4357 runtime: Fix non constant Errorf formatting stevenhorsman 2025-08-21 15:17:00 +01:00
  • 381da9e603 versions: Bump golang to 1.24.6 stevenhorsman 2025-07-21 15:31:15 +01:00
  • 0ccf429a3d workflows: Switch workflows to use install_go.sh stevenhorsman 2025-07-21 15:30:13 +01:00
  • 5f7525f099 build: Add darwin support to arch_to_golang stevenhorsman 2025-07-21 15:40:11 +01:00
  • 3391c6f1c5 ci: Make install_go.sh more portable stevenhorsman 2025-07-21 16:09:13 +01:00
  • 91913f9e82 Merge pull request #11711 from stevenhorsman/remote-allow-cc_init_data-annotation Alex Lyn 2025-08-22 14:41:53 +08:00
  • 1a0fbbfa32 Merge pull request #11699 from Apokleos/support-nonprotection Fupan Li 2025-08-22 10:24:47 +08:00
  • 41dcfb4a9f Merge pull request #11321 from BbolroC/reconnect-timeout-qemu-se Hyounggyu Choi 2025-08-22 00:34:05 +02:00
  • cb5f143b1b local-build: Enforce USE_CACHE=no Fabiano Fidêncio 2025-08-21 08:56:19 +02:00
  • 081823b388 runtime: Enable init_data annotation stevenhorsman 2025-08-21 19:26:10 +01:00
  • f8d7ff40b4 local-build: Fix shim-v2 no cache build with measured rootfs Fabiano Fidêncio 2025-08-21 17:59:44 +02:00
  • ad240a39e6 kata-deploy: tools: tests: Use zstd instead of xz Fabiano Fidêncio 2025-08-21 00:01:09 +02:00
  • 9cc97ad35c kata-deploy: Bump image to use alpine 3.22 Fabiano Fidêncio 2025-08-21 00:00:22 +02:00
  • 1329ce355e versions: image / initrd: Bump to alpine 3.22 Fabiano Fidêncio 2025-08-21 13:04:01 +02:00
  • c32fc409ec rootfs-builder: Bump alpine to 3.22 Fabiano Fidêncio 2025-08-21 12:42:20 +02:00
  • 60d87b7785 gpu: Add more debugging to CI/CD Zvonko Kaiser 2025-08-19 16:15:28 +00:00
  • e430727cb6 runtime-rs: Change the initdata device driver with block_device_driver Alex Lyn 2025-08-19 20:33:35 +08:00
  • 5cc028a8b1 runtime-rs: Support initdata within NonProtection scenarios Alex Lyn 2025-08-19 20:20:56 +08:00
  • faf5aed965 runtime-rs: Adjust VSOCK timeouts for IBM SEL Hyounggyu Choi 2025-05-28 12:45:22 +02:00