Peng Tao 125e21cea3 runtime: readonly mounts should be readonly bindmount on the host ...

So that we get protected at the VM boundary not just the guest kernel.

Signed-off-by: Peng Tao <bergwolf@hyper.sh>

2020-11-04 17:51:49 +08:00

..

agent/protocols

runtime: remove the unused proto files

2020-10-25 10:57:38 +08:00

annotations

config: Whitelist hypervisor annotations by name

2020-10-14 16:10:12 +02:00

cgroups

cpuset: support setting mems for sandbox

2020-10-13 15:54:03 -07:00

cloud-hypervisor

versions: cloud-hypervisor: Bump to version 6d30fe05

2020-10-05 12:13:36 -07:00

compatoci

gomod: update runtime import path

2020-04-29 18:39:03 -07:00

cpuset

cpuset: add cpuset pkg

2020-10-13 15:54:03 -07:00

firecracker

rate-limiter: implement hypervisor-built-in rate limiter

2020-06-24 06:16:58 +00:00

mock

runtime: remove mock shim

2020-07-25 09:08:44 +08:00

nsenter

gomod: update runtime import path

2020-04-29 18:39:03 -07:00

oci

runtime: readonly mounts should be readonly bindmount on the host

2020-11-04 17:51:49 +08:00

rootless

runtime: fix wrong issue links

2020-07-07 16:35:43 +08:00

types

runtime: consolidate types definition

2020-07-15 17:48:31 +08:00

uuid

runtime: move all code to src/runtime

2020-04-27 19:39:25 -07:00

vcmock

Merge pull request #752 from YchauWang/clear-moke-code01

2020-10-09 17:41:21 +08:00