summaryrefslogtreecommitdiff
path: root/oci
Commit message (Expand)AuthorAgeFilesLines
* gofmt GoDoc comments with go1.19Sebastiaan van Stijn2023-02-241-7/+8
* refactor: move from io/ioutil to io and os packageEng Zer Jun2023-02-241-2/+2
* reformat "nolint" commentsSebastiaan van Stijn2022-08-171-1/+1
* Update to Go 1.17.0, and gofmt with Go 1.17Sebastiaan van Stijn2022-04-072-0/+2
* oci: inheritable capability set should be emptySamuel Karp2022-03-172-13/+16
* Fix daemon panic when starting container with invalid device cgroup ruleSebastiaan van Stijn2021-02-172-1/+174
* Fix permissions on oci fixtures filesArnaud Rebillout2020-11-272-0/+0
* Temporarily disable CAP_PERFMON, CAP_BPF, and CAP_CHECKPOINT_RESTORESebastiaan van Stijn2020-10-161-0/+12
* oci: add tests for loading seccomp profilesSebastiaan van Stijn2020-09-294-0/+2472
* vendor runc 67169a9d43456ff0d5ae12b967acb8e366e2f181Jintao Zhang2020-07-301-1/+1
* oci/deviceCgroup(): remove redundant variableSebastiaan van Stijn2020-07-291-2/+1
* Replace service "Capabilities" w/ add/drop APIBrian Goff2020-07-271-7/+1
* Move DefaultCapabilities() to caps packageOlli Janatuinen2019-11-142-24/+26
* oci: fix SA4009: argument e is overwritten before first use (staticcheck)Sebastiaan van Stijn2019-09-181-1/+2
* goimports: fix importsSebastiaan van Stijn2019-09-183-3/+3
* Capabilities refactorOlli Janatuinen2019-01-223-63/+81
* Move caps and device spec utils to `oci` pkgMichael Crosby2018-12-112-0/+219
* Masked /proc/asoundJonathan A. Schweder2018-11-301-1/+1
* Add /proc/acpi to masked pathsAntonio Murdaca2018-07-051-0/+1
* Various code-cleanupSebastiaan van Stijn2018-05-232-2/+2
* Add /proc/keys to masked pathsJustin Cormack2018-02-211-0/+1
* Add canonical import commentDaniel Nephin2018-02-054-4/+4
* Don't special case /sys/firmware in masked pathsJohn Howard2017-11-081-5/+1
* Add /proc/scsi to masked pathsJustin Cormack2017-11-031-0/+1
* Fixes LCOW after containerd 1.0 introduced regressionsJohn Howard2017-10-271-0/+1
* Remove solaris filesMichael Crosby2017-10-241-13/+1
* Update libcontainerd to use containerd 1.0Kenfe-Mickael Laventure2017-10-201-10/+8
* Merge pull request #34356 from mlaventure/update-containerdJohn Howard2017-08-241-17/+16
|\
| * Update Windows and LCOW to use v1.0.0 runtime-specDarren Stahl2017-08-211-5/+15
| * Update containerd to 06b9cb35161009dcb7123345749fef02f7cea8e0Kenfe-Mickael Laventure2017-08-211-12/+1
* | Dropped hyphen in bind mount where appropriateChristophe Vidal2017-08-191-1/+1
|/
* Implement none, private, and shareable ipc modesKir Kolyshkin2017-08-141-0/+6
* /dev should be constrained in sizeDaniel J Walsh2017-07-201-1/+1
* LCOW: OCI Spec and Environment for container startJohn Howard2017-06-203-42/+48
* Update moby to runc and oci 1.0 runtime final rcMichael Crosby2017-05-054-46/+54
* oci/namespace: remove unnecessary variable idxMa Shimiao2016-12-221-5/+2
* plugins: misc fixesTibor Vass2016-11-221-0/+16
* plugins: support for devicesTibor Vass2016-11-222-0/+106
* Add functional support for Docker sub commands on SolarisAmit Krishnan2016-11-071-1/+10
* oci/defaults_linux.go: mask /sys/firmwareAkihiro Suda2016-10-121-0/+1
* Remove hacked Windows OCI spec, compile fixupsJohn Howard2016-09-272-7/+7
* Add init process for zombie fightingMichael Crosby2016-09-191-1/+0
* Windows OCI convergence step 1John Howard2016-09-121-7/+3
* Replace old oci specs import with runtime-specsMichael Crosby2016-08-172-2/+2
* Do not create /dev/fuse by defaultJustin Cormack2016-08-121-11/+1
* Adding /proc/timer_list to the masked paths listDavanum Srinivas2016-08-111-0/+1
* Get the Docker Engine to build clean on SolarisAmit Krishnan2016-05-231-0/+11
* oci: default devices don't need to be listed explicitlyAkihiro Suda2016-04-111-36/+4
* all: remove some unused funcs and variablesAlexander Morozov2016-04-061-1/+0
* Define readonly/mask paths in specTonis Tiigi2016-04-041-0/+14