kata-containers

mirror of https://github.com/kata-containers/kata-containers.git synced 2026-04-04 19:16:12 +00:00

Files

llink5 f7878cc385 runtime: fix Docker 26+ networking by rescanning after Start

Docker 26+ configures container networking (veth pair, IP addresses,
routes) after task creation rather than before. Kata's endpoint scan
runs during CreateSandbox, before the interfaces exist, resulting in
VMs starting without network connectivity (no -netdev passed to QEMU).

Add RescanNetwork() which runs asynchronously after the Start RPC.
It polls the network namespace until Docker's interfaces appear, then
hotplugs them to QEMU and informs the guest agent to configure them
inside the VM.

Additional fixes:
- mountinfo parser: find fs type dynamically instead of hardcoded
  field index, fixing parsing with optional mount tags (shared:,
  master:)
- IsDockerContainer: check CreateRuntime hooks for Docker 26+
- DockerNetnsPath: extract netns path from libnetwork-setkey hook
  args with path traversal protection
- detectHypervisorNetns: verify PID ownership via /proc/pid/cmdline
  to guard against PID recycling
- startVM guard: rescan when len(endpoints)==0 after VM start

Fixes: #9340

Signed-off-by: llink5 <llink5@users.noreply.github.com>

2026-04-02 21:23:16 +02:00

cri-containerd

tests: Delete install_go.sh

2026-02-27 12:42:43 +00:00

docker

runtime: fix Docker 26+ networking by rescanning after Start

2026-04-02 21:23:16 +02:00

kubernetes

tests: nvidia: onboard NIM service test

2026-04-02 16:58:54 +02:00

nerdctl

Merge pull request #9899 from amshinde/multiple-networks-fix