Commit Graph

  • 34dc055da3 Merge pull request #12932 from RainaYL/rainax/tdshim_pr Alex Lyn 2026-05-18 10:43:22 +08:00
  • 3345a370d2 Merge pull request #13051 from burgerdev/dont-modify-initdata Alex Lyn 2026-05-18 09:41:47 +08:00
  • 1aaa6f4848 Merge pull request #13054 from manuelh-dev/mahuber/require-nv-ci Fabiano Fidêncio 2026-05-17 22:01:14 +02:00
  • 59b27c4645 Merge pull request #13057 from microsoft/danmihai1/deploy-check-hypervisor-name Steve Horsman 2026-05-17 18:43:49 +01:00
  • 81d9629a1a Merge pull request #13058 from microsoft/danmihai1/git-remote-show-origin Steve Horsman 2026-05-17 18:39:12 +01:00
  • 96286e289a Merge pull request #13061 from burgerdev/proper-temp-dirs Fabiano Fidêncio 2026-05-17 17:17:50 +02:00
  • 38948f31a7 genpolicy: include test binaries in make target build Markus Rudy 2026-05-02 12:45:03 +02:00
  • 4d0f32ce41 runtime-rs: use proper temp dirs in initdata tests Markus Rudy 2026-05-16 20:39:13 +02:00
  • 4971445f67 runtime-rs: don't modify initdata from annotation Markus Rudy 2026-04-29 15:55:13 +02:00
  • 1a4074ab2e agent: handle encrypted ephemeral storage for CCW block devices Fabiano Fidêncio 2026-05-16 12:07:12 +02:00
  • 10b9ab38ab runtime-rs: preserve ccw address for modern block devices Fabiano Fidêncio 2026-05-16 11:15:58 +02:00
  • ddc36060d2 gha: k8s: reject unsupported KATA_HYPERVISOR values Dan Mihai 2026-05-16 00:23:19 +00:00
  • b85fc8ed13 tests: export target_branch="${branch}" Dan Mihai 2026-05-16 00:42:29 +00:00
  • 275a63b266 Revert "gatekeeper: Unrequire NVIDIA GPU test" Manuel Huber 2026-05-15 16:50:17 +00:00
  • 8e1d73a4b5 Merge pull request #13052 from burgerdev/abort-later Fabiano Fidêncio 2026-05-15 23:58:26 +02:00
  • 0f3df5d1e4 Merge pull request #13025 from manuelh-dev/mahuber/img-pull-policy Dan Mihai 2026-05-15 14:09:00 -07:00
  • ae1f67a4f3 Merge pull request #13040 from fidencio/topic/runtime-rs-ephemeral-storage Fabiano Fidêncio 2026-05-15 18:24:27 +02:00
  • 32f2c5c2e4 agent: wait for logs before aborting Markus Rudy 2026-05-15 12:33:29 +02:00
  • 48671ad525 Merge pull request #13046 from fitzthum/bump-coco-0210 manuelh-dev 2026-05-14 14:59:50 -07:00
  • 33de5a6c22 runtime-rs: refactor handler_volumes to use VolumeContext Fabiano Fidêncio 2026-05-14 11:43:54 +02:00
  • c19bdbf23b tests: nvidia-nim: use trusted storage templates for runtime-rs Fabiano Fidêncio 2026-05-08 16:27:54 +02:00
  • 54aaa1ea2a tests: enable trusted ephemeral storage for runtime-rs Fabiano Fidêncio 2026-05-08 16:26:12 +02:00
  • aa7392b1b9 runtime-rs: add emptydir_mode to config templates Fabiano Fidêncio 2026-05-08 16:25:06 +02:00
  • 5e2ca6d6ee runtime-rs: skip local type conversion for block-encrypted emptyDirs Fabiano Fidêncio 2026-05-08 15:58:59 +02:00
  • d3a9669be5 runtime-rs: implement EncryptedEmptyDirVolume Fabiano Fidêncio 2026-05-08 15:58:28 +02:00
  • 1cfed3c20b release: update guest-components for release Tobin Feldman-Fitzthum 2026-05-14 09:40:06 -07:00
  • 79ea56f24e versions: bump Trustee version for release Tobin Feldman-Fitzthum 2026-05-14 09:37:06 -07:00
  • 0b1e103886 runtime-rs: agent: add shared field to Storage struct Fabiano Fidêncio 2026-05-08 15:35:08 +02:00
  • 00d4ee2344 kata-types: add direct-volume write/remove helpers Fabiano Fidêncio 2026-05-08 15:34:58 +02:00
  • 557fb5187b Merge pull request #12853 from kata-containers/dependabot/go_modules/src/runtime/github.com/sirupsen/logrus-1.9.4 Steve Horsman 2026-05-14 13:56:10 +01:00
  • aade0f5fbe Merge pull request #12854 from kata-containers/dependabot/go_modules/tools/testing/kata-webhook/github.com/sirupsen/logrus-1.9.4 Steve Horsman 2026-05-14 13:55:44 +01:00
  • b4a9d3256b kata-types: add emptydir_mode configuration option Fabiano Fidêncio 2026-05-08 15:34:49 +02:00
  • c8f6f17269 Merge pull request #13027 from PiotrProkop/fix-loop-blockfile-sandbox-cgroup Fabiano Fidêncio 2026-05-14 11:18:45 +02:00
  • 44b356c654 Merge pull request #13033 from microsoft/saul/static_maxvcpus Fabiano Fidêncio 2026-05-14 11:16:35 +02:00
  • 9af625d3f1 Merge pull request #13006 from manuelh-dev/mahuber/cdh-upgrade Fabiano Fidêncio 2026-05-14 10:09:18 +02:00
  • 88d892a77f dragonball: Allow guest VM to load tdshim firmware for booting Xiaofan Xxf 2026-04-27 16:03:39 +08:00
  • d930fc42b8 runtime-rs: static resources: always set maxvcpus equal to vcpus Saul Paredes 2026-05-12 15:11:49 -07:00
  • ed4233bf91 rootfs: cdh: Update CDH to new version Manuel Huber 2026-05-07 12:30:50 +00:00
  • 54674d4a90 Merge pull request #12797 from ldoktor/ci-docs Wainer Moschetta 2026-05-13 14:52:27 -03:00
  • 5c55726d11 tests/k8s: Update measured-rootfs image stevenhorsman 2026-05-13 17:17:48 +01:00
  • 2870f7c2dd ci: Move measure-rootfs to run on TEE PRs stevenhorsman 2026-05-13 17:01:50 +01:00
  • 5322c5d228 ci.ocp: Remove workaround which force-skipped nydus Lukáš Doktor 2026-04-08 14:15:19 +02:00
  • 7a4a2cbab5 ci.ocp: Update links to pipeline results Lukáš Doktor 2026-04-08 14:14:06 +02:00
  • 6d5d2a1c20 Merge pull request #13037 from pavithiran34/pavi_fix_CVE-2026-7246 Steve Horsman 2026-05-13 15:27:30 +01:00
  • edf5a968d9 Merge pull request #13034 from Amulyam24/static-check-runners Fabiano Fidêncio 2026-05-13 15:49:37 +02:00
  • 631dc72ceb gha: move static checks to self hosted runners for ppc64le Amulyam24 2026-05-13 11:02:56 +05:30
  • 83ea8e0915 fix: add click 8.3.3 to docs requirements - Added click==8.3.3 to docs/requirements.txt - Click 8.3.3 is the latest version for Python >=3.10 - Required for mkdocs toolchain compatibility and resolves vulnerability in indirect dependencies - Ref : CVE-2026-7246 pavithiran34 2026-05-13 14:32:06 +05:30
  • 9398ab3433 ci: remove docs URL alive check workflow stevenhorsman 2026-05-13 09:12:00 +01:00
  • 408e15641c build(deps): bump github.com/sirupsen/logrus in /src/runtime dependabot[bot] 2026-05-13 06:11:21 +00:00
  • 18a13773da build(deps): bump github.com/sirupsen/logrus dependabot[bot] 2026-05-13 06:11:16 +00:00
  • d2dc0a923c Merge pull request #13030 from stevenhorsman/go-1.25.10-bump Greg Kurz 2026-05-13 08:09:51 +02:00
  • dcafae9645 Merge pull request #13032 from kata-containers/sprt/fix-virtiofsd-args Aurélien Bombo 2026-05-12 19:55:54 -05:00
  • 3799473041 Merge pull request #13010 from microsoft/danmihai1/label-references Dan Mihai 2026-05-12 15:41:11 -07:00
  • da4307efb7 tests: generate policies for guest-pull images Manuel Huber 2026-05-11 08:12:44 +00:00
  • 6a274b5110 tests: seed auto-generated policy from initdata Manuel Huber 2026-05-11 08:12:14 +00:00
  • e774b13c95 tests: share genpolicy registry auth setup helper Manuel Huber 2026-05-11 08:11:54 +00:00
  • 93e93f36ea genpolicy: model ignored Pod node affinity fields Manuel Huber 2026-05-11 08:11:03 +00:00
  • 555b7738fe runtime-rs: align virtiofsd args on runtime-go Aurélien Bombo 2026-05-01 15:12:22 -05:00
  • 733ccb3254 Merge pull request #12996 from stevenhorsman/swap-agent-ctl-to-skopeo&umoci Greg Kurz 2026-05-12 19:12:27 +02:00
  • 7d25934fef Merge pull request #13019 from fidencio/topic/nvidia-rootfs-use-erofs-instead-of-ext4 Zvonko Kaiser 2026-05-12 18:54:21 +02:00
  • 5065058d4a runtime: fix device allowlist detection comparing pointers PiotrProkop 2026-05-12 10:41:57 +02:00
  • 5cd187619e runtime: allow loopback devices for sandbox cgroup only PiotrProkop 2026-05-11 11:03:53 +02:00
  • e72dd6e8f1 build(deps): bump actions/attest-build-provenance from 1.4.4 to 4.1.0 dependabot/github_actions/actions/attest-build-provenance-4.1.0 dependabot[bot] 2026-05-12 15:43:30 +00:00
  • 7cc72b933d versions: bump golang.org/x/net to v0.53.0 stevenhorsman 2026-05-12 11:55:48 +01:00
  • 4a65aca9cf versions: bump golang to 1.25.10 stevenhorsman 2026-05-12 11:50:50 +01:00
  • 2b329074f1 Merge pull request #13023 from manuelh-dev/mahuber/nim-journal-fix Steve Horsman 2026-05-12 09:32:07 +01:00
  • 7aa3f7777a runtime-rs: Actually send cdh_api_timeout as kernel_param stevenhorsman 2026-04-27 16:42:46 +01:00
  • 6237a43a8d runtime-rs: Add cdh_api_timeout_ms configuration parameter stevenhorsman 2026-04-27 16:40:59 +01:00
  • ea5755572c Merge pull request #13026 from stevenhorsman/fix-fixed-datae-stale-issue Fabiano Fidêncio 2026-05-11 20:57:41 +02:00
  • 37e7bf0773 ci: correct environment variable syntax in stale issues workflow stevenhorsman 2026-05-11 09:31:36 +01:00
  • c265e4905f tests: nvidia: avoid NIM journal dumps on success Manuel Huber 2026-05-10 09:07:50 -07:00
  • 93e02944fa image-builder/nvidia: skip DAX header for virtio-blk-pci images Fabiano Fidêncio 2026-05-09 11:10:10 +02:00
  • b72bb7243e image-builder: bump base image from Fedora 42 to 44 Fabiano Fidêncio 2026-05-08 23:04:16 +02:00
  • 6b802a4e30 nvidia: switch GPU rootfs images to erofs Fabiano Fidêncio 2026-05-08 22:59:59 +02:00
  • bfcd249f40 image-builder: add erofs dm-verity support and lz4hc compression Fabiano Fidêncio 2026-05-08 22:57:40 +02:00
  • d2e0555cf0 image-builder: refactor dm-verity setup into shared functions Fabiano Fidêncio 2026-05-08 22:55:24 +02:00
  • 2ffd1538a2 Merge pull request #13021 from fidencio/topic/kata-deploy-log-level-containerd-version-4 manuelh-dev 2026-05-10 07:28:26 -07:00
  • 341a0d366c kata-deploy: Fix containerd debug level path for config schema v4 Fabiano Fidêncio 2026-05-10 09:41:40 +02:00
  • 46b46589a6 Merge pull request #13020 from manuelh-dev/mahuber/nim-op-placement Fabiano Fidêncio 2026-05-10 12:01:58 +02:00
  • 1c081ff434 tests: nvidia: place NIM service into namespace Manuel Huber 2026-05-10 07:36:23 +00:00
  • c945d2701c runtime: disable virtiofsd extra-args annotation by default Fabiano Fidêncio 2026-05-09 13:19:46 +02:00
  • 24114948ca runtime-rs: coldplug pending block devices in cloud-hypervisor saul/ch_rs_pass_initdata Saul Paredes 2026-05-08 14:57:51 -07:00
  • 905303b6b0 Merge pull request #13013 from BbolroC/filter-vfio-gk-only-runtime-rs Fabiano Fidêncio 2026-05-08 23:49:50 +02:00
  • a447a1fb03 Merge pull request #13015 from stevenhorsman/kernel-6.18.28-bump Fabiano Fidêncio 2026-05-08 21:12:50 +02:00
  • f7be57efe2 Merge pull request #13007 from manuelh-dev/mahuber/dbg-nim-svc Fabiano Fidêncio 2026-05-08 20:58:51 +02:00
  • e1805817ec tests: enable hardcoded policy tests for all mariner configurations Saul Paredes 2026-05-08 11:55:30 -07:00
  • 87664c608d version: Bump to latest 6.18 kernel stevenhorsman 2026-05-08 17:15:24 +01:00
  • 754707fe83 runtime-rs: filter VFIO devices only in guest-kernel mode Hyounggyu Choi 2026-05-08 13:24:35 +02:00
  • 8e65e89ade Merge pull request #13011 from kata-containers/fix-warnings Fabiano Fidêncio 2026-05-08 15:12:53 +02:00
  • a541827a7e Merge pull request #12984 from fidencio/topic/network-pair-use-name-for-lookup Fabiano Fidêncio 2026-05-08 14:31:58 +02:00
  • 09bbc70302 Merge pull request #13002 from manuelh-dev/mahuber/unrequire-nim-svc Fabiano Fidêncio 2026-05-08 10:02:00 +02:00
  • 2879619d07 Merge pull request #12981 from fidencio/topic/kata-deploy-reduce-memory-consumption Fabiano Fidêncio 2026-05-08 09:51:47 +02:00
  • 1441b2b84a runtime-rs: Fix warnings in rust runtime Alex Lyn 2026-05-08 14:56:00 +08:00
  • 714adec3f8 tests: nvidia: Wait for NIM operator pod and print Manuel Huber 2026-05-07 12:49:48 +00:00
  • b95be5332a genpolicy: env variables from metadata.labels Ubuntu 2026-05-06 23:18:35 +00:00
  • e71cf4d4ca genpolicy: call get_annotations() when/if needed Dan Mihai 2026-05-07 22:55:54 +00:00
  • 39b9c318e2 tests: k8s: merge two policy-pod test cases Dan Mihai 2026-05-07 22:39:23 +00:00
  • e92d954b51 agent-ctl: Swap rootfs bundle pull implementation stevenhorsman 2026-05-07 21:11:27 +01:00
  • edfb6f5716 gatekeeper: Unrequire NVIDIA GPU test (temporary) Manuel Huber 2026-05-07 08:06:44 +00:00
  • 8dde5f39b7 tests: dump kata-deploy pod describe+logs on install timeout Fabiano Fidêncio 2026-05-06 09:29:13 +02:00