Commit Graph

  • 2e625d0bab runtime-rs: qemu: don't set maxcpus when confidential guest is enabled Mikko Ylinen 2026-02-18 13:36:26 +02:00
  • 51eee428f4 testing/webhook: bump golang.org/x dependencies stevenhorsman 2026-06-01 16:25:42 +01:00
  • 144ab161f1 tetss: bump golang.org/x/sys dependency stevenhorsman 2026-06-01 16:22:02 +01:00
  • 46d704a7ab log-parser: bump golang.org/x/sys dependency stevenhorsman 2026-06-01 16:18:42 +01:00
  • 08ab789d9a csi-kata-directvolume: bump golang.org/x dependencies stevenhorsman 2026-06-01 16:18:06 +01:00
  • c0f549860e runtime: bump golang.org/x dependencies stevenhorsman 2026-06-01 16:17:26 +01:00
  • a2bb3f64b0 Merge pull request #12436 from mythi/tdx-updates-2026-3 Fabiano Fidêncio 2026-06-03 08:50:26 +02:00
  • 693d64f719 build(deps): bump tim-actions/get-pr-commits from 1.2.0 to 1.3.1 dependabot/github_actions/tim-actions/get-pr-commits-1.3.1 dependabot[bot] 2026-06-02 20:52:53 +00:00
  • 4271e91d7c build(deps): bump raven-actions/actionlint from 2.1.1 to 2.1.2 dependabot/github_actions/raven-actions/actionlint-2.1.2 dependabot[bot] 2026-06-02 20:52:42 +00:00
  • ecd9344dd1 Merge pull request #13144 from stevenhorsman/bump-rust-to-1.94 Fabiano Fidêncio 2026-06-02 09:58:56 +02:00
  • 230e01b04e Merge pull request #13126 from kata-containers/topic/runtimes-introduce-azure-specific-configs Fabiano Fidêncio 2026-06-02 09:17:09 +02:00
  • fbc5c99807 docs: Clarify runtime-rs debug logging Manuel Huber 2026-06-01 19:59:03 +00:00
  • 57ee67a6aa runtime-rs: Honor enable_debug for logs Manuel Huber 2026-06-01 19:58:46 +00:00
  • 4c93a539fb tests: switch CoCo KBS/Trustee deployment from kustomize to Helm topic/trustee-helm-chart Fabiano Fidêncio 2026-05-05 10:46:58 +02:00
  • b1928cc22f runtime-rs: run cargo fmt for Rust 1.94 stevenhorsman 2026-06-01 17:32:06 +01:00
  • 57de50f43c Merge pull request #13141 from fidencio/topic/kata-deploy-fix-stale-containerd-import Fabiano Fidêncio 2026-06-01 18:13:08 +02:00
  • a3cc016e2f Merge pull request #13140 from fidencio/topic/fix-besteffort-sandbox-cpu-sizing Steve Horsman 2026-06-01 17:09:12 +01:00
  • f9c95a279e dragonball: Remove unnecessary unsafe blocks in cpuid stevenhorsman 2026-06-01 17:07:16 +01:00
  • a63a948b4a libs: Remove unnecessary unsafe blocks in protection.rs stevenhorsman 2026-06-01 17:04:43 +01:00
  • 9625bf8056 versions: Update MSRV to 1.94 stevenhorsman 2026-06-01 17:02:20 +01:00
  • 4987d79e26 versions: Bump rust to 1.94 stevenhorsman 2026-06-01 16:39:06 +01:00
  • 8a49ecb159 Merge pull request #13097 from BbolroC/fix-shim-components-for-s390x Greg Kurz 2026-06-01 11:43:42 +02:00
  • f788997253 kata-deploy: scrub stale containerd import on conf.d migration Fabiano Fidêncio 2026-06-01 11:03:58 +02:00
  • 9b5b829265 runtime: oci: derive sandbox CPUs from shares only if unconstrained Fabiano Fidêncio 2026-06-01 09:46:52 +02:00
  • 02fd572195 Merge pull request #13134 from jojimt/rc-version Fabiano Fidêncio 2026-06-01 08:21:30 +02:00
  • 953b306ff3 Merge pull request #12979 from manuelh-dev/mahuber/erofs-tmpfs-mount manuelh-dev 2026-05-29 13:50:27 -07:00
  • 9acef4bc55 Merge pull request #13133 from microsoft/cameronbaird/upstream/revert-macvtap-simple Aurélien Bombo 2026-05-29 14:57:07 -05:00
  • f349d19bf4 Merge pull request #12956 from zvonkok/nvgpu-tarball-chart Fabiano Fidêncio 2026-05-29 21:22:44 +02:00
  • 4e7b49fede Merge pull request #13103 from fidencio/topic/mlx-coldplug-support-v2 Fabiano Fidêncio 2026-05-29 21:21:46 +02:00
  • 8549d71c6f kata-deploy: Add a version annotation to runtimeclass Joji Mekkattuparamban 2026-05-29 10:24:27 -07:00
  • 7a9d207ab2 Revert "runtime: Enforce >= 1 queue pairs for tapNetworkPair" Cameron Baird 2026-05-29 17:05:40 +00:00
  • 7f906ec95d build: add kata-deploy-publish target Zvonko Kaiser 2026-05-29 15:54:59 +02:00
  • fb73ccc352 build: include kata-deploy static artifacts in nvgpu bundle Zvonko Kaiser 2026-05-29 15:55:20 +02:00
  • 10e70a2a9f runtime-rs: expose InfiniBand devices to VFIO containers Fabiano Fidêncio 2026-05-29 08:19:07 +02:00
  • 60f2878c68 runtime-rs: call network.remove() during resource cleanup Fabiano Fidêncio 2026-05-27 21:15:56 +02:00
  • 0b4b51dff6 runtime-rs: always detach endpoints on network removal Fabiano Fidêncio 2026-05-27 20:53:23 +02:00
  • be2ec02c9a runtime-rs: resolve cold-plug VFIO guest PCI path via QMP Fabiano Fidêncio 2026-05-27 20:36:11 +02:00
  • f8ee9133e5 runtime-rs: populate device_path for cold-plug VFIO physical endpoints Fabiano Fidêncio 2026-05-27 19:19:19 +02:00
  • 67843220f8 runtime-rs: set VF admin MAC before vfio-pci rebind for IB/RoCE support Fabiano Fidêncio 2026-05-27 19:19:12 +02:00
  • 9e9b50c79e runtime-rs: cold-plug Vfio physical endpoints at VM launch Fabiano Fidêncio 2026-05-27 19:35:52 +02:00
  • 91df041803 agent: expose guest InfiniBand devices to VFIO containers Fabiano Fidêncio 2026-05-27 17:33:13 +02:00
  • 9729ed9993 kernel: enable InfiniBand/RoCE support in mlx5 kernel config fragment Fabiano Fidêncio 2026-05-27 17:19:00 +02:00
  • 025202a52a runtime: expose InfiniBand devices to VFIO containers Fabiano Fidêncio 2026-05-29 08:19:07 +02:00
  • 3175bf683e GHA: Remove secret CI_HKD_PATH from workflows Hyounggyu Choi 2026-05-26 16:03:24 +02:00
  • 640fa488a5 ci: Refactor boot-image-se build and update shim components Hyounggyu Choi 2026-05-26 12:04:51 +02:00
  • 7d9a143747 ci: cover EROFS snapshotter default_size=0 path Manuel Huber 2026-05-11 11:25:07 +00:00
  • 744ab0b548 ci: improve kata-deploy pod wait and timeout diagnostics Fabiano Fidêncio 2026-05-28 19:50:56 +02:00
  • bddf1ecab4 build: stop producing cloud-hypervisor-glibc artifacts Fabiano Fidêncio 2026-05-28 13:31:51 +02:00
  • 81ce51a9aa ci: target Azure CLH runtimes directly in AKS tests Fabiano Fidêncio 2026-05-28 13:31:33 +02:00
  • 8c3a2c1a95 kata-deploy: register clh-azure shim families Fabiano Fidêncio 2026-05-28 13:31:18 +02:00
  • f36c383b4f runtime: generate dedicated CLH Azure config variants Fabiano Fidêncio 2026-05-28 13:31:05 +02:00
  • fa9a9f3aeb runtime: set VF admin MAC before vfio-pci rebind for IB/RoCE support Fabiano Fidêncio 2026-05-27 17:18:25 +02:00
  • 992a723392 runtime: resolve cold-plug VFIO guest PCI path via QMP Fabiano Fidêncio 2026-05-27 16:34:25 +02:00
  • 23c5250933 runtime/qemu: emit id= for VFIODevice on -device cmdline Fabiano Fidêncio 2026-05-27 15:53:09 +02:00
  • e6777f0866 runtime: keep cold-plug VFIO devices in guest-kernel mode Fabiano Fidêncio 2026-05-27 15:32:05 +02:00
  • 9893b6dc03 runtime: correctly resolve cold-plug VFIO guest PCI paths Fabiano Fidêncio 2026-05-27 11:26:18 +02:00
  • 118b7fa611 agent: reconcile VFIO netdev MAC before UpdateInterface lookup Fabiano Fidêncio 2026-05-27 19:29:22 +02:00
  • e89eb77245 agent: keep PCIDEVICE env unchanged when pcimap is missing Fabiano Fidêncio 2026-05-27 11:06:41 +02:00
  • 7f4a85e833 Merge pull request #13047 from microsoft/cameronbaird/upstream/macvtap Zvonko Kaiser 2026-05-28 20:39:15 +02:00
  • 2799f7d36b runtime: Enforce >= 1 queue pairs for tapNetworkPair Cameron Baird 2026-05-12 18:39:22 +00:00
  • 76212b9e0c kata-deploy: allow containerd user drop-in overrides Fabiano Fidêncio 2026-05-26 23:21:45 +02:00
  • 3e874d0eaf tests: accept EROFS empty-image rootfs rejection Manuel Huber 2026-05-08 17:29:06 +00:00
  • ebf2c99df3 runtime-rs: allow EROFS rootfs without rwlayer Manuel Huber 2026-05-08 12:39:12 +00:00
  • 4fbfba2f79 agent: support run-backed EROFS upper Manuel Huber 2026-05-08 12:39:05 +00:00
  • a423cf9526 Merge pull request #13087 from bpradipt/landlock Fabiano Fidêncio 2026-05-27 17:34:47 +02:00
  • 1487eaaaa2 kernel: Enable landlock LSM Pradipta Banerjee 2026-05-21 13:41:54 +00:00
  • 5adfb27297 Merge pull request #13118 from PiotrProkop/fix-missing-cwd Fabiano Fidêncio 2026-05-27 13:32:05 +02:00
  • 614dff4bfc Merge pull request #13119 from manuelh-dev/mahuber/erofs-multi-layer-fix Fabiano Fidêncio 2026-05-27 11:27:46 +02:00
  • 238dd51039 Merge pull request #13108 from thebigbone/containerd-config Fabiano Fidêncio 2026-05-27 10:14:51 +02:00
  • 60a2e27f02 agent: Restore process CWD auto-creation PiotrProkop 2026-05-26 15:06:50 +02:00
  • f1c100797b Merge pull request #12955 from zvonkok/nvgpu-target Fabiano Fidêncio 2026-05-27 09:44:37 +02:00
  • 64056add0d build: add passthrough mode to kata-deploy-merge-builds Fabiano Fidêncio 2026-05-26 11:12:39 +02:00
  • 9b85bff2b4 build: don't double-prefix absolute versions.yaml path in merge-builds Zvonko Kaiser 2026-05-07 20:11:16 +00:00
  • 5aa6229eba build: group parallel build output by target Zvonko Kaiser 2026-05-07 19:15:47 +00:00
  • 3be370d2d6 qemu: clean stale clone before fetching sources Zvonko Kaiser 2026-05-07 19:06:57 +00:00
  • 18cee00df9 build: guard parallel races on build symlink and ~/.docker Zvonko Kaiser 2026-05-07 18:34:17 +00:00
  • 815ebc340d build: add nvgpu-tarball target Zvonko Kaiser 2026-04-30 02:15:58 +00:00
  • 6a367ab777 build: declare install-prebuilt-artifacts as .PHONY Zvonko Kaiser 2026-05-08 19:25:19 +00:00
  • d9f2aa895e containerd: use /etc/containerd/conf.d/ drop-in for containerd >= 2.2.0 thebigbone 2026-05-24 20:14:21 +00:00
  • e838cd7d8d agent: compact EROFS overlay lowerdirs Manuel Huber 2026-05-26 18:33:30 +00:00
  • d75a91ee09 Merge pull request #13114 from manuelh-dev/mahuber/nv-fix-policy-check Fabiano Fidêncio 2026-05-26 20:00:02 +02:00
  • c81dadaba1 Merge pull request #13064 from burgerdev/add-arp-neighbour Dan Mihai 2026-05-26 09:59:44 -07:00
  • 2b38d9f45e runtime(-rs): tdx: use TDX QGS via unix-domain-socket by default Mikko Ylinen 2026-01-23 15:38:41 +02:00
  • 733c6791d3 runtime(-rs): make TDX QGS port=0 change backwards compatible Mikko Ylinen 2026-02-16 16:29:50 +02:00
  • 4f2e893bdb dragonball: Add steps to boot TDX VM Xiaofan Xxf 2026-05-22 11:25:03 +08:00
  • 6a715cf4f7 tests: nvidia: No policy for runtime-rs path Manuel Huber 2026-05-25 16:00:49 -07:00
  • a1bcc3ffb7 build(deps): bump github.com/prometheus/client_golang in /src/runtime dependabot/go_modules/src/runtime/github.com/prometheus/client_golang-1.23.2 dependabot[bot] 2026-05-25 21:13:01 +00:00
  • 25491fc20c Merge pull request #13104 from kata-containers/topic/kata-deploy-build-as-an-artefact Fabiano Fidêncio 2026-05-25 22:56:55 +02:00
  • c65d64873b kata-deploy: prebuild payload-specific component artifacts Fabiano Fidêncio 2026-05-22 13:38:58 +02:00
  • 3dc02a8604 Merge pull request #13085 from Apokleos/erofs-gpt-vmdk-only Fabiano Fidêncio 2026-05-25 16:29:59 +02:00
  • 6c6c5809f1 Merge pull request #13109 from fidencio/topic/build-validate-measured-rootfs-root-hashes-for-all-shims Zvonko Kaiser 2026-05-25 15:58:35 +02:00
  • aeadb1af35 Merge pull request #12948 from fidencio/topic/numa Zvonko Kaiser 2026-05-25 15:33:14 +02:00
  • 53699b0170 docs: Reset max_unmerged_layers = 0 for gpt+vmdk mode Alex Lyn 2026-05-25 19:13:28 +08:00
  • a359d13476 build: Validate measured-rootfs root hashes all shims Alex Lyn 2026-05-25 19:12:52 +08:00
  • fd139a1143 kata-deploy: Reset max_unmerged_layers to "0" within erofs snapshotter Alex Lyn 2026-05-21 10:20:10 +08:00
  • 2036e66bc3 kata-agent: Integrate GPT partition support into multi-layer handler Alex Lyn 2026-05-20 20:05:24 +08:00
  • 17fadde6d8 kata-agent: Add GPT partition utility functions Alex Lyn 2026-05-20 19:48:35 +08:00
  • 8119a561ae kata-agent: Refactor wait_and_mount_layer to return LayerMountInfo Alex Lyn 2026-05-20 19:37:52 +08:00
  • 0bd150e5f1 runtime-rs: Integrate GPT+VMDK mode for multi-layer EROFS rootfs Alex Lyn 2026-05-20 19:07:24 +08:00
  • c3b06af4c7 kata-types: Add gpt_disk module for GPT metadata generation Alex Lyn 2026-05-20 18:51:28 +08:00