github/linuxkit
1
0
Fork 0
mirror of https://github.com/linuxkit/linuxkit.git synced 2025-10-30 06:25:10 +00:00
Code Issues Projects Releases Wiki Activity
8,454 Commits 1 Branch 31 Tags
6f46c2060be59891191e7e9de3339fc3bf6239dc
Commit Graph

103 Commits

Author SHA1 Message Date
Avi Deitcher
4165491275 Update package tags 
Signed-off-by: Avi Deitcher <avi@deitcher.net>
 2025-01-07 18:50:58 +02:00
Avi Deitcher
5848a2856f use only stdout/stderr or file for runc output 
Signed-off-by: Avi Deitcher <avi@deitcher.net>
 2024-08-28 14:45:26 +03:00
Avi Deitcher
15c808c4ee more verbose runc messages 
Signed-off-by: Avi Deitcher <avi@deitcher.net>
 2024-08-22 20:23:44 +03:00
Avi Deitcher
b36cad081b when building read-only volumes, still use overlayfs 
Signed-off-by: Avi Deitcher <avi@deitcher.net>
 2024-08-22 18:49:08 +03:00
Avi Deitcher
2af30c5503 support cmdline-driven debugging mode for runc 
Signed-off-by: Avi Deitcher <avi@deitcher.net>
 2024-08-22 15:14:35 +03:00
Avi Deitcher
a5085fc9ea pkg/init support for volumes 
Signed-off-by: Avi Deitcher <avi@deitcher.net>
 2024-07-21 17:48:39 +03:00
Avi Deitcher
55e13c914e containerd to 1.7.20 
Signed-off-by: Avi Deitcher <avi@deitcher.net>
 2024-07-18 20:51:31 +03:00
Avi Deitcher
f13aee1041 update rngd/extend/init usage in yml 
Signed-off-by: Avi Deitcher <avi@deitcher.net>
 2024-07-16 12:29:10 +03:00
Jacob Weinstock
2fe19f7561 Update dependencies 
Signed-off-by: Jacob Weinstock <jakobweinstock@gmail.com>
 2024-04-27 15:40:30 -06:00
Avi Deitcher
3a6398e351 Update package tags 
Signed-off-by: Avi Deitcher <avi@deitcher.net>
 2024-01-28 20:53:32 +02:00
Avi Deitcher
0d15d8d9bb Update package tags 
Signed-off-by: Avi Deitcher <avi@deitcher.net>
 2024-01-28 15:32:09 +02:00
Avi Deitcher
45d7ab8fed Update package tags 
Signed-off-by: Avi Deitcher <avi@deitcher.net>
 2024-01-28 10:57:05 +02:00
Avi Deitcher
6b5be65a33 Update package tags 
Signed-off-by: Avi Deitcher <avi@deitcher.net>
 2024-01-27 22:28:11 +02:00
Avi Deitcher
7fa10ce83a Update package tags 
Signed-off-by: Avi Deitcher <avi@deitcher.net>
 2024-01-27 21:09:58 +02:00
Avi Deitcher
1b3e13c880 Update package tags 
Signed-off-by: Avi Deitcher <avi@deitcher.net>
 2024-01-25 23:24:06 +02:00
Avi Deitcher
a2c6ed4205 noop to force pkg rebuild 
Signed-off-by: Avi Deitcher <avi@deitcher.net>
 2023-11-20 12:05:52 +02:00
Avi Deitcher
f227b73a39 changed some packages to force new package versions, rebuild with sbom 
Signed-off-by: Avi Deitcher <avi@deitcher.net>
 2023-11-16 10:28:22 +02:00
Avi Deitcher
d052901b35 update dependencies on init 
Signed-off-by: Avi Deitcher <avi@deitcher.net>
 2023-10-25 18:34:32 +03:00
Avi Deitcher
4ee6387366 updated containerd-dev and downstream dependencies 
Signed-off-by: Avi Deitcher <avi@deitcher.net>
 2023-06-19 14:17:43 +03:00
Avi Deitcher
0cb961e082 update examples, tests, projects, etc. 
Signed-off-by: Avi Deitcher <avi@deitcher.net>
 2023-06-12 14:02:30 +03:00
Avi Deitcher
e668b25a82 Alpine 317 (#3888) 2023-01-05 07:26:50 +02:00
Avi Deitcher
200e0ee94a update dependencies of pkg/init and pkg/containerd 
Signed-off-by: Avi Deitcher <avi@deitcher.net>
 2022-03-21 01:22:19 +02:00
David Scott
f14ad44ce4 update shas for pkg/init 
Signed-off-by: David Scott <dave@recoil.org>
 2022-03-13 19:57:25 +00:00
Dave Tucker
0b739c80e9 pkg: update shas 
Update the SHA of all packages that have been go-mod-ififed
such that they are use for testing in CI

Signed-off-by: Dave Tucker <dave@dtucker.co.uk>
 2022-01-12 00:04:37 +00:00
Avi Deitcher
260cc85b52 Update package tags 
Signed-off-by: Avi Deitcher <avi@deitcher.net>
 2021-11-09 14:02:43 +02:00
David Scott
e8f8a409e8 Update hashes for pkg/init 
Signed-off-by: David Scott <dave@recoil.org>
 2021-10-26 19:52:22 +01:00
Avi Deitcher
1fb7ff9af2 Update package tags 
Signed-off-by: Avi Deitcher <avi@deitcher.net>
 2021-04-28 14:18:47 +03:00
Avi Deitcher
863e8c77b7 update sha hashes for pkg/init 
Signed-off-by: Avi Deitcher <avi@deitcher.net>
 2020-10-21 11:13:52 +03:00
Avi Deitcher
279ee46f39 update hashes for pkg/init 
Signed-off-by: Avi Deitcher <avi@deitcher.net>
 2020-10-19 20:54:16 +03:00
Avi Deitcher
eae1c2461a update hashes for containerd opts 
Signed-off-by: Avi Deitcher <avi@deitcher.net>
 2020-10-19 14:49:40 +03:00
Rolf Neugebauer
0331aacfe2 Update package tags to v0.8 
Signed-off-by: Rolf Neugebauer <rn@rneugeba.io>
 2020-05-10 16:04:52 +01:00
Ilya Dmitrichenko
86fb6ba0aa pkg/init: Mount /sys/fs/bpf 
NOTE: This will be a shared mount, due to root being turned into a
shared with `MC_REC` set: `mount("", "/", "", rec|shared, "")`.
For some reason setting `shared` when mounting `/sys/fs/bpf` doesn't
work at all, perhaps that's just a kernel feature.

Signed-off-by: Ilya Dmitrichenko <errordeveloper@gmail.com>
 2020-05-06 11:06:54 +01:00
Rolf Neugebauer
6643090752 Update YAMLs to latest containerd/runc/init 
Signed-off-by: Rolf Neugebauer <rn@rneugeba.io>
 2020-04-26 23:52:57 +01:00
Rolf Neugebauer
ce89479b2d Update use of packages to the latest 
Signed-off-by: Rolf Neugebauer <rn@rneugeba.io>
 2020-04-17 10:36:03 +01:00
Avi Deitcher
7c1df34c38 update hashes 
Signed-off-by: Avi Deitcher <avi@deitcher.net>
 2020-03-24 12:13:41 +02:00
Rolf Neugebauer
d1c8eae6a9 Update YAMLs to latest init/containerd/runc packages 
Signed-off-by: Rolf Neugebauer <rn@rneugeba.io>
 2020-01-21 23:17:17 +00:00
Rolf Neugebauer
cf4be444df Update YAMLs to latest containerd 
Signed-off-by: Rolf Neugebauer <rn@rneugeba.io>
 2019-08-25 14:23:14 +01:00
Rolf Neugebauer
d4d74f0117 Update YAMLs to latest containerd 
Signed-off-by: Rolf Neugebauer <rn@rneugeba.io>
 2019-06-28 02:05:02 +01:00
Rolf Neugebauer
291a95d3fa Update package tags to v0.7 
Signed-off-by: Rolf Neugebauer <rn@rneugeba.io>
 2019-04-16 23:46:27 +01:00
Rolf Neugebauer
c42569a570 Bump YAMLs to containerd v1.2.6 (and update runc) 
Signed-off-by: Rolf Neugebauer <rn@rneugeba.io>
 2019-04-14 11:29:43 +01:00
Ian Campbell
66c72e7444 Bump yml to pickup containerd v1.2.5 
Signed-off-by: Ian Campbell <ijc@docker.com>
 2019-03-14 10:29:29 +00:00
Rolf Neugebauer
71f87cc6a9 Update package tags to the latest version 
Signed-off-by: Rolf Neugebauer <rn@rneugeba.io>
 2019-03-03 14:31:42 +00:00
Ian Campbell
16df1af139 Bump yml to pickup containerd v1.2.4 
Also pick a newer version of runc.

Signed-off-by: Ian Campbell <ijc@docker.com>
 2019-02-14 10:16:47 +00:00
Ian Campbell
6e16071bfe Bump yml to pickup containerd v1.2.3 
Also pick a newer version of runc.

Signed-off-by: Ian Campbell <ijc@docker.com>
 2019-02-11 10:05:14 +00:00
Tomas Knappek
e62a6b3e51 Update YAMLs to latest init 
Signed-off-by: Tomas Knappek <tomas.knappek@gmail.com>
 2019-02-07 10:38:42 -08:00
Ian Campbell
3a3b742ca3 Bump yml to pickup containerd v1.2.2 
Also pick a newer version of runc.

Signed-off-by: Ian Campbell <ijc@docker.com>
 2019-01-08 12:13:36 +00:00
Rolf Neugebauer
4e634e3b29 Merge pull request #3173 from duraki/3172-enable-CAN 
Enable CAN networking subsystem
 2018-12-20 23:47:31 +00:00
Ian Campbell
ab8524d3d1 Bump yml to pickup containerd v1.2.0 
Also pick a newer version of runc.

Signed-off-by: Ian Campbell <ijc@docker.com>
 2018-10-30 11:08:50 +00:00
Ian Campbell
c60cef7be2 Bump yml to pickup containerd v1.1.4 
Also pick a newer version of runc.

Signed-off-by: Ian Campbell <ijc@docker.com>
 2018-09-25 16:28:56 +01:00
duraki
1a23054800 Enables CAN networking subsystem (introduced Linux 2.6.25 2008-04-17), to 
support SPI in container environment (introduced Linux 4.12 2017-06-02).

Abstraction define interface EP for CAN module in containered environment. This
namespace is available and introduced with Linux Kernel 4.12 by M.  Kicherer
and later O. Hartkopp, to allow containers bridging such device.

@see linux-kernel/net/can@fc4c581

Although KSPP did not explicilty noted `CAN` as secure kernel flag, this
would aim to bring such conclusion. As for security concerns, CAN protocol did
not yield any user-land or host-level vulnerabilities since introduced as
SocketCAN module in Linux Kernel. Lower-layer [protocol] standards is not
secured by default since applications are supposed to implement their own
security mechanism.

This global abstraction currently supports CAN raw, proc and af_can
codes. Does not support GW and BCM. Namespace uses _NEWNET on pseudo-file
system.  Allows modprobe to environment, works by recv `pnet` for the given
interface.

Signed-off-by: Halis Duraki <duraki@linuxmail.org>
 2018-08-31 13:22:19 +02:00