Commit Graph

  • cc8ec7b0e9 versions: Update Kubernetes, containerd, cri-o and cri-tools Salvador Fuentes 2020-10-14 15:49:03 -04:00
  • 8a364d2145 annotations: Correct unit tests to validate new protections Christophe de Dinechin 2020-09-11 14:13:45 +02:00
  • 0cc6297716 annotations: Split addHypervisorOverrides to reduce complexity Christophe de Dinechin 2020-09-11 12:52:10 +02:00
  • b6059f3566 annotations: Add unit test for checkPathIsInGlobs Christophe de Dinechin 2020-09-11 12:59:53 +02:00
  • c6afad2a06 annotations: Add unit test for regexpContains function Christophe de Dinechin 2020-09-11 11:06:26 +02:00
  • 451608fb28 makefile: Add missing generated vars to USER_VARS Christophe de Dinechin 2020-09-10 21:50:24 +02:00
  • 8328136575 makefile: Improve names of config entries for annotation checks Christophe de Dinechin 2020-09-10 21:22:59 +02:00
  • a92a63031d annotations: Give better names to local variabes in search functions Christophe de Dinechin 2020-09-10 19:54:12 +02:00
  • 997f7c4433 annotations: Rename checkPathIsInGlobList with checkPathIsInGlobs Christophe de Dinechin 2020-09-10 19:47:41 +02:00
  • 74d4065197 config: Add better comments in the template files Christophe de Dinechin 2020-09-03 13:42:12 +02:00
  • 73bb3fdbee config: Whitelist hypervisor annotations by name Christophe de Dinechin 2020-05-19 19:19:42 +02:00
  • 5a587ba506 config: Use glob instead of regexp to match paths in annotations Christophe de Dinechin 2020-05-18 19:00:54 +02:00
  • 29f5dec38f annotations: Fix typo in comment Christophe de Dinechin 2020-05-19 17:52:32 +02:00
  • d71f9e1155 config: Add makefile variables for path lists Christophe de Dinechin 2020-05-19 17:13:09 +02:00
  • 28c386c51f config: Protect file_mem_backend against annotation attacks Christophe de Dinechin 2020-05-15 18:55:02 +02:00
  • c2a186b18c config: Protect vhost_user_store_path against annotation attacks Christophe de Dinechin 2020-05-15 18:42:30 +02:00
  • 8cd094cf06 config: Add security warning on configuration examples Christophe de Dinechin 2020-05-15 18:26:29 +02:00
  • b5f2a1e8c4 config: Protect ctlpath from annotation attack Christophe de Dinechin 2020-05-15 18:10:53 +02:00
  • 2d65b3bfd8 config: Protect jailer_path annotation Christophe de Dinechin 2020-05-15 17:49:01 +02:00
  • fe5e1cf2e1 config: Add examples for path_list configuration Christophe de Dinechin 2020-05-15 17:40:43 +02:00
  • 3f7bcf54f0 annotations: Simplify negative logic Christophe de Dinechin 2020-05-15 16:41:04 +02:00
  • 80144fc415 config: Add hypervisor path override through annotations Christophe de Dinechin 2020-05-15 16:04:55 +02:00
  • 2f5f35608a config: Fix typo in function name Christophe de Dinechin 2020-05-15 15:59:30 +02:00
  • 2faafbdd3a config: Protect virtio_fs_daemon annotation Christophe de Dinechin 2020-05-14 20:18:18 +02:00
  • 9e5ed41511 config: Add 'List' alternates for hypervisor configuration paths Christophe de Dinechin 2020-05-13 16:58:55 +02:00
  • b33d4fe708 agent: fix panic on malformed device resource in container update Peng Tao 2020-10-14 12:50:38 +08:00
  • 183823398d cpuset: add cpuset pkg Eric Ernst 2020-10-12 18:10:27 -07:00
  • bfbbe8ba6b cpuset: don't set cpuset.mems in the guest Eric Ernst 2020-10-12 21:18:08 -07:00
  • 5c21ec278c sandbox: consider cpusets if quota is not enforced Eric Ernst 2020-10-12 21:15:55 -07:00
  • 9bb0d48d56 cpuset: support setting mems for sandbox Eric Ernst 2020-10-12 21:15:21 -07:00
  • 64a2ef62e0 virtcontainers: add method for calculating cpuset for sandbox Eric Ernst 2020-10-12 16:56:01 -07:00
  • a441f21c40 cpuset: add cpuset pkg Eric Ernst 2020-10-12 18:10:27 -07:00
  • ce54090f25 docs: Update upgrading guide James O. D. Hunt 2020-10-13 11:20:44 +01:00
  • e884fef483 docs: update the build kata containers kernel document Ychau Wang 2020-10-13 11:13:17 +08:00
  • 9c16643c12 agent/device: Check type as well as major:minor when looking up devices David Gibson 2020-10-08 17:15:14 +11:00
  • 4978c9092c agent/device: Index all devices in spec before updating them David Gibson 2020-10-08 17:01:29 +11:00
  • a7ba362f92 agent/device: Forward port update_spec_device_list() unit test David Gibson 2020-10-08 16:23:36 +11:00
  • 230a9833f8 agent/device: update_spec_device_list() should error if dev not found David Gibson 2020-10-08 16:13:14 +11:00
  • a6d9fd4118 sandbox: don't constrain cpus, mem only cpuset, devices Eric Ernst 2020-10-12 17:13:01 -07:00
  • 8f0cb2f1ea cgroups: add ability to update CPUSet Eric Ernst 2020-10-12 17:12:26 -07:00
  • cbdae44992 agent: fix errorneous parsing for guest block size Eric Ernst 2020-10-09 17:40:51 -07:00
  • 97acaa8124 docs: Add containerd install guide James O. D. Hunt 2020-09-15 14:07:34 +01:00
  • 23246662b2 agent: use ok_or/map_err instead of match bin liu 2020-10-12 16:59:02 +08:00
  • ebe5ad1386 rustjail: use Iterator to manipulate vector elements bin liu 2020-10-12 06:08:27 +00:00
  • c9497c88e4 rustjail: delete codes commented out bin liu 2020-10-12 10:18:33 +08:00
  • d5d9928f97 rustjail: delete unused test code bin liu 2020-10-12 09:57:39 +08:00
  • f70892a5bb agent: use chain of Result to avoid early return bin liu 2020-10-10 22:22:54 +08:00
  • ab64780a0b agent: update not accurate comments bin liu 2020-10-10 17:54:15 +08:00
  • 9e064ba192 agent: use macro to simplify parse_cmdline function in config.rs bin liu 2020-10-10 15:11:46 +08:00
  • 42c48f54ed agent: add blank lines between methods bin liu 2020-10-10 12:37:34 +00:00
  • d3a36fa06f agent: delete unused field in agentService bin liu 2020-10-10 12:23:44 +00:00
  • fa546600ff agent: use no-named closure to reduce codes bin liu 2020-10-10 20:10:16 +08:00
  • efddcb4ab8 agent: use a local fn to reduce duplicated codes bin liu 2020-10-10 19:55:05 +08:00
  • 7bb3e562bc packaging: fix cloud-hypervisor binary path Peng Tao 2020-10-10 18:49:35 +08:00
  • 7b53041bad packaging: fix missing cloud_hypervisor_repo Peng Tao 2020-10-10 15:40:04 +08:00
  • 38212ba6d8 packaging: apply qemu v5.1 stable fixes Peng Tao 2020-10-10 14:25:55 +08:00
  • fb7e9b4f32 agent: fix aarch64 build Jianyong Wu 2020-10-10 13:52:15 +08:00
  • 0cfcbf79b8 docs: add namespace key to pod/container config files bin liu 2020-10-10 10:02:08 +08:00
  • 997f1f6cd0 docs: Add crictl example json files bin liu 2020-10-09 14:22:57 +08:00
  • f60f43af6b runtime: Clear the VCMock 1.x API Methods from 2.0 Ychau Wang 2020-09-18 13:51:02 +08:00
  • 1789527d61 ci: snap: add event filtering Julio Montes 2020-10-09 08:30:29 -05:00
  • 999f67d573 agent: do not follow link when mounting container proc and sysfs Peng Tao 2020-10-09 12:04:48 +08:00
  • cb2255f199 agent: set init process non-dumpable Peng Tao 2020-10-09 15:09:16 +08:00
  • 2a6c9eec74 agent-ctl: include cargo lock updates Peng Tao 2020-10-09 10:50:45 +08:00
  • eaff5de37a versions: add plugins section Julio Montes 2020-10-08 11:39:42 -05:00
  • 4f1d23b651 virtiofs: Disable DAX Jose Carlos Venegas Munoz 2020-10-08 10:59:10 -05:00
  • 6d80df9831 snap: specify python version Julio Montes 2020-10-08 10:53:20 -05:00
  • a116ce0b75 osbuilder: Create target directory for agent Ralf Haferkamp 2020-10-08 17:05:13 +02:00
  • 4dc3bc0020 rust-agent: Treat warnings as error Christophe de Dinechin 2020-09-24 13:50:13 +02:00
  • 8f7a4842c2 rust-agent: Identify unused results in tests Christophe de Dinechin 2020-10-06 15:00:17 +02:00
  • ce54e5dd57 rust-agent: Log returned errors rather than ignore them Christophe de Dinechin 2020-10-02 15:35:34 +02:00
  • 9adb7b7c28 rust-agent: Remove unused imports Christophe de Dinechin 2020-09-17 18:40:56 +02:00
  • 73ab9b1d6d rust-agent: Report errors to caller if possible Christophe de Dinechin 2020-09-24 13:45:58 +02:00
  • 4db3f9e226 rust-agent: Ignore write errors while writing to the logs Christophe de Dinechin 2020-09-17 19:47:52 +02:00
  • 19cb657299 rust-agent: Remove unused code that has undefined behavior Christophe de Dinechin 2020-09-17 19:17:17 +02:00
  • 86bc151787 rust-agent: Remove 'mut' where not needed Christophe de Dinechin 2020-09-17 19:08:06 +02:00
  • 8d8adb6887 rust-agent: Remove uses of deprecated functions Christophe de Dinechin 2020-09-17 18:45:06 +02:00
  • 76298c12b7 rust-agent: Remove or rename unused parameters Christophe de Dinechin 2020-09-17 18:55:22 +02:00
  • 7d303ec2d0 rust-agent: Remove or rename unused variables Christophe de Dinechin 2020-09-24 13:08:20 +02:00
  • e0b79eb57f rust-agent: Remove unused functions Christophe de Dinechin 2020-09-17 18:29:49 +02:00
  • 8ed61b1bb9 rust-agent: Remove useless braces Christophe de Dinechin 2020-09-24 13:04:29 +02:00
  • cc4f02e2b6 rust-agent: Remove unused macros Christophe de Dinechin 2020-09-17 18:37:56 +02:00
  • ace6f1e66e clh: Support VFIO device unplug Bo Chen 2020-09-29 17:03:44 -07:00
  • 47cfeaaf18 clh: Remove unnecessary VmmPing Bo Chen 2020-09-29 11:03:09 -07:00
  • 63c475786f versions: cloud-hypervisor: Bump to version 6d30fe05 Bo Chen 2020-10-05 12:13:36 -07:00
  • 059b89cd03 docs: Change kata_tap0 to tap0_kata Chelsea Mafrica 2020-10-04 15:46:54 -07:00
  • 4ff3ed5101 docs: update networking description Chelsea Mafrica 2020-10-04 15:40:48 -07:00
  • de8dcb1549 dev-guide: update kata-agent install details Eric Ernst 2020-10-02 16:16:55 -07:00
  • c488cc48a2 docs: Update docs for enabling agent debug console Archana Shinde 2020-08-20 17:11:49 -07:00
  • e5acb1257f docs: update dev guide for agent build Eric Ernst 2020-10-02 15:34:39 -07:00
  • 1bddde729b ci: add github action to test the snap Julio Montes 2020-10-01 12:25:48 -05:00
  • 9517b0a933 versions: cloud-hypervisor: bump version Julio Montes 2020-09-28 15:48:52 -05:00
  • f5a7175f92 runtime: cloud-hypervisor: tag openapi-generator-cli container Julio Montes 2020-09-28 15:44:53 -05:00
  • ed711b5ab1 Merge pull request #983 from bergwolf/snap Bin Liu 2020-10-17 20:58:27 +08:00
  • 0f8949868c snap: install libseccomp-dev Peng Tao 2020-10-17 16:45:07 +08:00
  • 80cfd01130 Merge pull request #936 from bergwolf/default-virtiofs Xu Wang 2020-10-17 17:28:30 +08:00
  • 9a351509d2 package: drop qemu-virtiofs shim Peng Tao 2020-10-17 11:27:09 +08:00
  • 5f47f224ff Merge pull request #945 from fidencio/wip/virtiofs-performance-improvements-backport-and-default-settings Peng Tao 2020-10-17 11:13:22 +08:00
  • 6ed669a17b packaging: install virtiofsd for normal qemu build as well Peng Tao 2020-10-13 15:03:54 +08:00
  • e5262b1c29 Merge pull request #970 from jodh-intel/2.0-dev-agent-ctl-add-missing-apis Peng Tao 2020-10-17 10:12:40 +08:00