 Daniel Golle
|
f3c35632a1
jail: improve seccomp BPF generator
|
4 years ago |
|
Daniel Golle
|
31e0a46ded
jail: properly initialize timens_fd
|
4 years ago |
|
Daniel Golle
|
b275b11d89
jail: enter existing cgroups namespace if given
|
4 years ago |
|
Daniel Golle
|
b87984baf3
jail: don't attempt to mount /sys with noatime
|
4 years ago |
|
Daniel Golle
|
e40828fa3f
jail: fix typo in usage output
|
4 years ago |
|
Daniel Golle
|
acf36f2777
jail: seteuid before clone(CLONE_NEWUSER)
|
4 years ago |
|
Daniel Golle
|
19ac9df877
jail: don't fail if can't mount-bind /etc/resolv.conf
|
4 years ago |
|
Daniel Golle
|
db5ef86649
jail: don't use NULL arguments for mount syscall
|
4 years ago |
|
Daniel Golle
|
4ba72ecf3a
jail: relax /etc/resolv.conf creation
|
4 years ago |
|
Daniel Golle
|
5abee8f690
jail: fix and simplify userns uid/gid maps from OCI
|
4 years ago |
|
Daniel Golle
|
7e01453752
jail: fix segfault on missing name and refactor
|
4 years ago |
|
Daniel Golle
|
3019f50f62
jail: leak less memory
|
4 years ago |
|
Daniel Golle
|
e935c0c043
jail: add 'debug' extern variable to preload_seccomp
|
4 years ago |
|
Daniel Golle
|
d4d78dbe5e
uxc: also delete procd runtime state on 'delete'
|
4 years ago |
|
Daniel Golle
|
df7fa7bae6
uxc: fix incomplete commit
|
4 years ago |
|
Daniel Golle
|
b22e6254df
jail: cgroup hack: rewrite cgroup -> cgroup2
|
4 years ago |
|
Daniel Golle
|
be6da628b1
seccomp: silence 'unknown syscall' warnings
|
4 years ago |
|
Daniel Golle
|
04a2eddcb1
uxc: make force-delete kill container process
|
4 years ago |
|
Daniel Golle
|
c110405181
trace: switch to OCI seccomp JSON output
|
4 years ago |
|
Daniel Golle
|
d352e6e97f
seccomp: switch to new OCI compliant parser
|
4 years ago |
|
Daniel Golle
|
d8f36f5378
seccomp: specifying architectures is optional
|
4 years ago |
|
Daniel Golle
|
b0de894830
jail: fix capabilities
|
4 years ago |
|
Daniel Golle
|
75f2374f16
uxc: mimic runc cmdline by using getopt_long
|
4 years ago |
|
Daniel Golle
|
257f29b867
jail: don't fail if maskedPath cannot be found
|
4 years ago |
|
Daniel Golle
|
e1fcfdcd88
jail: add support for absolute root path in OCI spec
|
4 years ago |
|
Daniel Golle
|
6963d5032b
jail: relax seccomp unknown syscall handling
|
4 years ago |
|
Daniel Golle
|
bba6de7531
jail: handle mount propagation flags
|
4 years ago |
|
Daniel Golle
|
602b8fa14a
jail: add option for pidfile
|
4 years ago |
|
Daniel Golle
|
2f381fe51c
jail: guard boolean blobmsg attributes
|
4 years ago |
|
Daniel Golle
|
33b799b94c
ujail: elf: work around GCC bug on MIPS64
|
4 years ago |
