projects
/
project
/
procd.git
/ shortlog
commit
grep
author
committer
pickaxe
?
search:
re
summary
| shortlog |
log
|
commit
|
commitdiff
|
tree
first ⋅ prev ⋅
next
project/procd.git
2020-11-27
Daniel Golle
jail: enter existing cgroups namespace if given
commit
|
commitdiff
|
tree
|
snapshot
2020-11-27
Daniel Golle
jail: don't attempt to mount /sys with noatime
commit
|
commitdiff
|
tree
|
snapshot
2020-11-27
Daniel Golle
jail: fix typo in usage output
commit
|
commitdiff
|
tree
|
snapshot
2020-11-27
Daniel Golle
jail: seteuid before clone(CLONE_NEWUSER)
commit
|
commitdiff
|
tree
|
snapshot
2020-11-27
Daniel Golle
jail: don't fail if can't mount-bind /etc/resolv.conf
commit
|
commitdiff
|
tree
|
snapshot
2020-11-27
Daniel Golle
jail: don't use NULL arguments for mount syscall
commit
|
commitdiff
|
tree
|
snapshot
2020-11-27
Daniel Golle
jail: relax /etc/resolv.conf creation
commit
|
commitdiff
|
tree
|
snapshot
2020-11-27
Daniel Golle
jail: fix and simplify userns uid/gid maps from OCI
commit
|
commitdiff
|
tree
|
snapshot
2020-11-27
Daniel Golle
jail: fix segfault on missing name and refactor
commit
|
commitdiff
|
tree
|
snapshot
2020-11-27
Daniel Golle
jail: leak less memory
commit
|
commitdiff
|
tree
|
snapshot
2020-11-22
Daniel Golle
jail: add 'debug' extern variable to preload_seccomp
commit
|
commitdiff
|
tree
|
snapshot
2020-11-22
Daniel Golle
uxc: also delete procd runtime state on 'delete'
commit
|
commitdiff
|
tree
|
snapshot
2020-11-22
Daniel Golle
uxc: fix incomplete commit
commit
|
commitdiff
|
tree
|
snapshot
2020-11-21
Daniel Golle
jail: cgroup hack: rewrite cgroup -> cgroup2
commit
|
commitdiff
|
tree
|
snapshot
2020-11-21
Daniel Golle
seccomp: silence 'unknown syscall' warnings
commit
|
commitdiff
|
tree
|
snapshot
2020-11-21
Daniel Golle
uxc: make force-delete kill container process
commit
|
commitdiff
|
tree
|
snapshot
2020-11-17
Daniel Golle
trace: switch to OCI seccomp JSON output
commit
|
commitdiff
|
tree
|
snapshot
2020-11-15
Daniel Golle
seccomp: switch to new OCI compliant parser
commit
|
commitdiff
|
tree
|
snapshot
2020-11-15
Daniel Golle
seccomp: specifying architectures is optional
commit
|
commitdiff
|
tree
|
snapshot
2020-11-07
Daniel Golle
jail: fix capabilities
commit
|
commitdiff
|
tree
|
snapshot
2020-10-28
Daniel Golle
uxc: mimic runc cmdline by using getopt_long
commit
|
commitdiff
|
tree
|
snapshot
2020-10-28
Daniel Golle
jail: don't fail if maskedPath cannot be found
commit
|
commitdiff
|
tree
|
snapshot
2020-10-28
Daniel Golle
jail: add support for absolute root path in OCI spec
commit
|
commitdiff
|
tree
|
snapshot
2020-10-28
Daniel Golle
jail: relax seccomp unknown syscall handling
commit
|
commitdiff
|
tree
|
snapshot
2020-10-28
Daniel Golle
jail: handle mount propagation flags
commit
|
commitdiff
|
tree
|
snapshot
2020-10-28
Daniel Golle
jail: add option for pidfile
commit
|
commitdiff
|
tree
|
snapshot
2020-10-28
Daniel Golle
jail: guard boolean blobmsg attributes
commit
|
commitdiff
|
tree
|
snapshot
2020-10-23
Daniel Golle
ujail: elf: work around GCC bug on MIPS64
commit
|
commitdiff
|
tree
|
snapshot
2020-10-22
Daniel Golle
jail: mount more stuff read-only
commit
|
commitdiff
|
tree
|
snapshot
2020-10-21
Daniel Golle
jail: capabilities: apply in two phases
commit
|
commitdiff
|
tree
|
snapshot
2020-10-19
Daniel Golle
jail: nuke old capabilities code in favour of reusing...
commit
|
commitdiff
|
tree
|
snapshot
2020-10-19
Daniel Golle
instance: actually wire up capabilities filename
commit
|
commitdiff
|
tree
|
snapshot
2020-10-19
Daniel Golle
jail: adapt to new ubus socket path
commit
|
commitdiff
|
tree
|
snapshot
2020-10-19
Daniel Golle
early: run ubusd non-root as user ubus, group ubus
commit
|
commitdiff
|
tree
|
snapshot
2020-08-13
Daniel Golle
cgroups: memory controller fixes
commit
|
commitdiff
|
tree
|
snapshot
2020-08-13
Daniel Golle
cgroups: restrict allowed keys in 'unified' section
commit
|
commitdiff
|
tree
|
snapshot
2020-08-10
Thomas Petazzoni
initd/init: add minimal SELinux policy loading support
commit
|
commitdiff
|
tree
|
snapshot
2020-08-06
Daniel Golle
jail: fix freeing cgroups avl
commit
|
commitdiff
|
tree
|
snapshot
2020-08-06
Daniel Golle
jail: only free cgroups if they were allocated
commit
|
commitdiff
|
tree
|
snapshot
2020-08-06
Daniel Golle
jail: parse OCI cgroups resources
commit
|
commitdiff
|
tree
|
snapshot
2020-08-06
Daniel Golle
instance: add instances into unified cgroup hierarchy
commit
|
commitdiff
|
tree
|
snapshot
2020-08-06
Daniel Golle
jail: make use of BLOBMSG_CAST_INT64 for OCI rlimits
commit
|
commitdiff
|
tree
|
snapshot
2020-08-06
Daniel Golle
jail: use pidns semantics also for timens
commit
|
commitdiff
|
tree
|
snapshot
2020-08-06
Daniel Golle
initd: attempt to mount cgroup2
commit
|
commitdiff
|
tree
|
snapshot
2020-07-30
Daniel Golle
service: add method to query available container features
commit
|
commitdiff
|
tree
|
snapshot
2020-07-30
Daniel Golle
uxc: remove debugging left-over
commit
|
commitdiff
|
tree
|
snapshot
2020-07-30
Daniel Golle
instance: make sure values are not inherited from previ...
commit
|
commitdiff
|
tree
|
snapshot
2020-07-29
Daniel Golle
uxc: use new container.%s kill ubus API
commit
|
commitdiff
|
tree
|
snapshot
2020-07-29
Daniel Golle
jail: add 'kill' method to container.%s object
commit
|
commitdiff
|
tree
|
snapshot
2020-07-29
Daniel Golle
uxc: fix create operation
commit
|
commitdiff
|
tree
|
snapshot
2020-07-28
Daniel Golle
uxc: behave more like a compliant OCI run-time
commit
|
commitdiff
|
tree
|
snapshot
2020-07-28
Daniel Golle
jail: add some remaining OCI features
commit
|
commitdiff
|
tree
|
snapshot
2020-07-25
Daniel Golle
jail: serialize hook execution
commit
|
commitdiff
|
tree
|
snapshot
2020-07-25
Daniel Golle
jail: fix build on glibc and uclibc
commit
|
commitdiff
|
tree
|
snapshot
2020-07-21
Daniel Golle
jail: add support for referencing existing namespaces
commit
|
commitdiff
|
tree
|
snapshot
2020-07-20
Rosen Penev
jail: fix wrong format for 32-bit
commit
|
commitdiff
|
tree
|
snapshot
2020-07-20
Rosen Penev
rcS: cast format string to int64_t
commit
|
commitdiff
|
tree
|
snapshot
2020-07-20
Daniel Golle
jail: re-implement /proc/sys/net read-write in netns...
commit
|
commitdiff
|
tree
|
snapshot
2020-07-20
Daniel Golle
jail: refactor default mounts into new structure
commit
|
commitdiff
|
tree
|
snapshot
2020-07-20
Daniel Golle
jail: actually apply filesystem-specific mount options
commit
|
commitdiff
|
tree
|
snapshot
2020-07-20
Daniel Golle
jail: add support for defining devices
commit
|
commitdiff
|
tree
|
snapshot
2020-07-20
Daniel Golle
jail: move /tmp/resolv.conf.d to /dev/resolv.conf.d
commit
|
commitdiff
|
tree
|
snapshot
2020-07-19
Daniel Golle
jail: /proc/$pid/oom_score_adj to OCI defined oomScoreAdj
commit
|
commitdiff
|
tree
|
snapshot
2020-07-19
Daniel Golle
jail: parse and apply POSIX rlimits
commit
|
commitdiff
|
tree
|
snapshot
2020-07-19
Daniel Golle
jail: read and apply umask from OCI if defined
commit
|
commitdiff
|
tree
|
snapshot
2020-07-19
Daniel Golle
jail: implement OCI user additionalGIDs
commit
|
commitdiff
|
tree
|
snapshot
2020-07-19
Daniel Golle
jail: parse and apply OCI sysctl values
commit
|
commitdiff
|
tree
|
snapshot
2020-07-19
Daniel Golle
jail: fix hooks
commit
|
commitdiff
|
tree
|
snapshot
2020-07-17
Daniel Golle
jail: add support for maskedPaths and readonlyPaths
commit
|
commitdiff
|
tree
|
snapshot
2020-07-16
Daniel Golle
jail: fix some more mount options
commit
|
commitdiff
|
tree
|
snapshot
2020-07-15
Daniel Golle
jail: fs: fix build on uClibc-ng
commit
|
commitdiff
|
tree
|
snapshot
2020-07-15
Daniel Golle
procd: fix compile if procd-ujail is not selected
commit
|
commitdiff
|
tree
|
snapshot
2020-07-13
Daniel Golle
jail: fix false return in case of nofail mount
commit
|
commitdiff
|
tree
|
snapshot
2020-07-13
Daniel Bailey
procd: add service instance watchdog
commit
|
commitdiff
|
tree
|
snapshot
2020-07-13
Daniel Golle
uxc: fix build with uClibc-ng
commit
|
commitdiff
|
tree
|
snapshot
2020-07-13
Daniel Golle
uxc: fix 'stop' command
commit
|
commitdiff
|
tree
|
snapshot
2020-07-13
Daniel Golle
jail: don't make mount source read-only
commit
|
commitdiff
|
tree
|
snapshot
2020-07-13
Daniel Golle
jail: refactor mount support to cover OCI spec
commit
|
commitdiff
|
tree
|
snapshot
2020-07-13
Daniel Golle
jail: memory allocation fixes
commit
|
commitdiff
|
tree
|
snapshot
2020-07-13
Daniel Golle
jail: parse and run OCI hooks
commit
|
commitdiff
|
tree
|
snapshot
2020-07-13
Daniel Golle
jail: actually chdir into OCI defined CWD
commit
|
commitdiff
|
tree
|
snapshot
2020-07-13
Daniel Golle
jail: consider PATH for argv in OCI container
commit
|
commitdiff
|
tree
|
snapshot
2020-07-13
Daniel Golle
jail: fix segfault with len(uidmap/gidmap) > 1
commit
|
commitdiff
|
tree
|
snapshot
2020-07-11
Rosen Penev
procd: fix compilation with uClibc-ng
commit
|
commitdiff
|
tree
|
snapshot
2020-07-11
Daniel Golle
jail: use linux/capability.h instead of sys/capability.h
commit
|
commitdiff
|
tree
|
snapshot
2020-07-11
Daniel Golle
ujail: add dependency on syscall-names-h
commit
|
commitdiff
|
tree
|
snapshot
2020-07-10
Daniel Golle
jail: fix build on platforms without seccomp support
commit
|
commitdiff
|
tree
|
snapshot
2020-07-10
Daniel Golle
uxc: add container management CLI tool
commit
|
commitdiff
|
tree
|
snapshot
2020-07-10
Daniel Golle
jail: add support for running OCI bundle
commit
|
commitdiff
|
tree
|
snapshot
2020-05-28
Daniel Golle
jail: handle containers seperately
commit
|
commitdiff
|
tree
|
snapshot
2020-05-28
Daniel Golle
jail: use sane termios settings for console pts
commit
|
commitdiff
|
tree
|
snapshot
2020-05-15
Daniel Golle
jail: add option to provide /dev/console to containers
commit
|
commitdiff
|
tree
|
snapshot
2020-05-15
Leonardo Mörlein
jail: unnamed jails can not have netns (fix segfault)
commit
|
commitdiff
|
tree
|
snapshot
2020-05-15
Leonardo Mörlein
jail: SIGSEGV must not be forwarded to the child process
commit
|
commitdiff
|
tree
|
snapshot
2020-04-25
Daniel Golle
jail: don't load libpreload-seccomp.so if it doesn...
commit
|
commitdiff
|
tree
|
snapshot
2020-04-25
Daniel Golle
jail: don't fail unless requirejail is set
commit
|
commitdiff
|
tree
|
snapshot
2020-04-19
Daniel Golle
jail: include /etc/nsswitch.conf in jail for glibc.
commit
|
commitdiff
|
tree
|
snapshot
2020-04-14
Daniel Golle
jail: always mount /dev as additional tmpfs
commit
|
commitdiff
|
tree
|
snapshot
2020-04-13
Daniel Golle
jail: replace /etc/resolv.conf with symlink in extroot...
commit
|
commitdiff
|
tree
|
snapshot
2020-04-13
Daniel Golle
jail: mount /sys read-only
commit
|
commitdiff
|
tree
|
snapshot
next