Kernel images history:
Time Kernel Commit Kernel Config Syzkaller Commit Assets
2026/08/28 21:57 4a7fcd5fc048 Merge pull request #14461 from milantracy:governance 2f52988a
2026/08/28 10:18 4a7fcd5fc048 Merge pull request #14461 from milantracy:governance 41d151d4
2026/08/27 20:36 bd30d19d87ae Add cos and ubuntu-gpu release agents e2fa417d
2026/08/27 08:14 e4850e96c18d Add ADOPTERS.md as single source of truth for gvisor users c53a1b9c
2026/08/26 10:35 fd439eb27c7d Fix CI test flakes in trace_test's Execve trace validation a2b77b9e
2026/08/25 22:47 917062dc0596 Update gVisor release documentation for GitHub Release workflow. 6a91adb4
2026/08/25 10:44 646783231602 Replace the experimental --mount-cgroup-v2 flag with in-sandbox-cgroup a9a1fc32
2026/08/24 21:45 0b9499c9fb54 Add GKE Sandbox MicroVM runtime support to gke_tester and testcluster. 614e416a
2026/08/24 09:59 3c5eee17dc45 Merge pull request #14137 from EtiennePerot:le-pinring b55bd4c3
2026/08/17 21:01 05f3435e51f2 gofer: Take refs when adopting a cached endpoint-bearing inode 1e72964b
2026/08/17 08:59 50e1502a95d3 Nftables: Support xt_MASQUERADE compatibility target. 905244d6
2026/08/14 22:09 32d6f0091cc2 Merge pull request #14021 from TheCoolDinosuar:rdma-proxy 746171ee
2026/08/14 09:33 375fa1be4f2a Support combined restore of full snapshot and filesystem snapshot. 2cf1fbb7
2026/08/13 21:32 97346d1e3754 Merge pull request #14031 from ayushr2:pin-cow-fork b13552fe
2026/08/13 09:26 35769a56f4fb Nftables: Support xt_addrtype match. 4d118901
2026/08/12 22:53 8921984bf804 Merge pull request #13734 from luiscape:luis/add-missing-nvenc-ioctl 359b2492
2026/08/12 21:12 0165ee007e27 Merge pull request #13976 from luiscape:luis/add-support-for-610.57.04 359b2492
2026/08/12 09:24 0165ee007e27 Merge pull request #13976 from luiscape:luis/add-support-for-610.57.04 ee03bfea
2026/08/11 21:24 1919d9633a18 Merge pull request #13909 from relkochta:relkochta/overlayfs-posix-acls f8d35649
2026/08/11 09:14 3434348e5909 Make every user of a tty also refcount 557a89d3
2026/08/10 20:56 8bd698e1e6ec Move fscheckpoint manifest from json to proto. 508909ea
2026/08/10 08:45 5ceb9a5fd575 Deflake TestMultiContainerEvent/enableCgroupsV2 ddd8e1cc
2026/08/07 22:42 6c89965d6026 Support passing environment variables to Python SandboxExec bindings. 5d63f80b
2026/08/07 10:44 05b57c92aea0 Merge pull request #14019 from EtiennePerot:reexec-be-gone e4ef95d6
2026/08/06 22:34 8f0384248553 Add support for custom network modes in Python SandboxExec. c38879ea
2026/08/06 10:43 b85d70344f3e Create per-container cgroup2 dirs and honor spec cgroupns cc56899a
2026/08/05 22:37 9d9b0681e814 Fix panic in iptables UserChainTarget.Action(). cd5b1963
2026/08/05 10:41 c0908da305ec Merge pull request #13952 from EtiennePerot:waitforstopped-nopoll 1eed00d1
2026/08/04 22:23 6dfa3a9c7ee7 Internal change. 52aa2820
2026/08/04 10:28 901ffefc3a7b udp: Trim packet to header.length. 3c5eaa21
2026/08/03 22:12 3e74ae881798 Deflake PosixACLTest.SetACLEmpty on native 9451e17e
2026/08/03 17:24 3e74ae881798 Deflake PosixACLTest.SetACLEmpty on native bdd50915
2026/08/03 10:08 48de7274186a Nftables: Changed function name to correctly reflect the purpose. bdd50915
2026/08/02 14:11 48de7274186a Nftables: Changed function name to correctly reflect the purpose. e611ffe1
2026/08/02 01:06 54895179ed67 Nftables: Support `chain-id` attribute. e611ffe1
2026/08/01 11:54 f24eaec79e88 Merge pull request #13941 from ayushr2:pgalloc-usage-throttle e611ffe1
2026/07/31 22:39 449f04c57356 Allow running syscall tests on non-modern Linux kernels. e611ffe1
2026/07/31 10:45 c1b4e12cf268 Merge pull request #13712 from ayushr2:rdma-sysfs 0f928e69
2026/07/30 22:37 e52d7a0faa4d Nftables: Support flushing ruleset. aaffb173
2026/07/30 10:30 3355a32937b4 Merge pull request #13899 from shayonj:s/tines-3b-users 0a1bc234
2026/07/29 22:31 a907734abece Add driver ABI version registration and support for MMNCCD ioctls 2377cd3d
2026/07/29 10:30 43396a19255c Enable 8-shard parallel execution for integration tests in Buildkite. b63596d1
2026/07/28 22:22 87dc2c081866 Fix TSan data race in UDP Socket Tests 19622d9d
2026/07/28 10:34 41cfc418a32b Internal change 5fe7c56f
2026/07/27 21:53 ca42882317b2 Automated rollback of changelist 952215192 45ae1df4
2026/07/27 18:39 ca42882317b2 Automated rollback of changelist 952215192 1f273138
2026/07/27 09:50 8eb8f9e0df89 Restrict MaxPerms to not include Write access if the segment was attached as read-only 1f273138
2026/07/25 00:10 8eb8f9e0df89 Restrict MaxPerms to not include Write access if the segment was attached as read-only 492bab15
2026/07/24 11:58 607ea0040826 seccheck: fix dispatcher array order dd737a83
2026/07/24 11:15 607ea0040826 seccheck: fix dispatcher array order 544adce9
2026/07/23 21:57 42f4b4bbe596 Add SandboxExec Go binding for sandbox working directory 544adce9
2026/07/23 09:52 3f1f8f20c8d3 Merge pull request #13812 from EtiennePerot:sidecar-enforcement 71a13572
2026/07/22 21:41 5c0fc10867c2 Merge pull request #13790 from EtiennePerot:runsc-install-download 881ce5c2
2026/07/22 09:38 ed9299c797a9 Merge pull request #13655 from a7i:feat/cgroup2-xattr 4a865b71
2026/07/21 21:40 9f653e577965 Nftables: Fix and enable syscall-native tests for runc. b561ce9c
2026/07/21 09:20 f510f737f563 Clean up and modernize gVisor trace tests. 7c5de9c3
2026/07/21 04:46 f510f737f563 Clean up and modernize gVisor trace tests. 4763fed7
2026/07/20 15:36 9d2d13b051fc hostinet: support checkpoint/restore 4763fed7
2026/07/20 08:34 ddf37c50b366 nvproxy: Register NVIDIA GPU driver version 580.173.02. 4763fed7
2026/07/18 22:42 ddf37c50b366 nvproxy: Register NVIDIA GPU driver version 580.173.02. 72524a66
2026/07/18 09:31 eb7b0b4c1a84 Merge pull request #13674 from EtiennePerot:gvisor-in-docker-fix 72524a66
2026/07/17 20:20 cde30cd807b0 Add seccheck field to indicate if a file is on an overlayfs lower layer. 72524a66
2026/07/17 08:15 de314aba841d Deflake TestDockerWithVFS by using isolated build contexts. 7f27c57a
2026/07/16 20:14 7824e269ebd3 Support cgroup namespaces 6ca2b51a
2026/07/16 08:21 c30a6d1b6f26 use official docker:dind image for basic/docker image. 851bd571
2026/07/15 20:08 cd4bd6b9861f Add seccheck support for collecting stdin/stdout/stderr info on execve. 27a8bd60
2026/07/15 07:45 c07053c7dbd9 Merge pull request #13682 from EtiennePerot:systrap-false-sharing a4ed0f4f
2026/07/15 03:32 c07053c7dbd9 Merge pull request #13682 from EtiennePerot:systrap-false-sharing 2130f682
2026/07/14 14:03 9cb44186726e Support nr_blocks mount option in tmpfs. 2130f682
2026/07/14 00:58 cd0aa582c862 website: register fuse user guide doc 2130f682
2026/07/13 19:32 6d73c10d795c Refactor network configuration during restore and defer link creation in runsc 2130f682
2026/07/13 07:30 6d73c10d795c Refactor network configuration during restore and defer link creation in runsc a870962e
2026/07/11 06:06 6d73c10d795c Refactor network configuration during restore and defer link creation in runsc d78ea535
2026/07/10 16:46 37973046f140 Add CVE-2026-53359 and CVE-2026-43499 to gVisor CVE track record. d78ea535
2026/07/10 13:06 37973046f140 Add CVE-2026-53359 and CVE-2026-43499 to gVisor CVE track record. 99e64375
2026/07/10 12:38 37973046f140 Add CVE-2026-53359 and CVE-2026-43499 to gVisor CVE track record. 4167ee25
2026/07/09 23:34 c0af8b157f66 Fix double close of fds in FDWriter.Close 4167ee25
2026/07/09 11:22 a5d30fe182f6 Support epoll() for /proc/[pid]/mountinfo and /proc/[pid]/mounts a0c310a3
2026/07/08 23:17 0f2dd31f6f09 Add a "runsc read" command to read files from a sandbox. b9f1ceaa
2026/07/08 11:25 a29997e6c741 Register NVIDIA driver version 615.15.00 in nvproxy. ab40da58
2026/07/07 23:22 2b6dff7c5a98 Add python language binding for runsc. 88a4b44c
2026/07/07 11:24 35db98496ee1 clone: Deliver pidfd only after child init 76cdc0c0
2026/07/06 23:03 f8496e3731e8 Merge pull request #13526 from TristanInSec:fix-udp-checksum-zero-nat 8e71ce95
2026/07/06 19:56 f8496e3731e8 Merge pull request #13526 from TristanInSec:fix-udp-checksum-zero-nat 88b240e4
2026/07/06 11:02 abf59273b7ba Refactor setting up network during restore. 88b240e4
2026/07/04 01:38 abf59273b7ba Refactor setting up network during restore. fcece630
2026/07/03 13:37 abf59273b7ba Refactor setting up network during restore. aa437a8a
2026/07/03 01:36 abf59273b7ba Refactor setting up network during restore. 58bf2096
2026/07/02 13:33 abf59273b7ba Refactor setting up network during restore. 2b70b115
2026/07/02 01:43 abf59273b7ba Refactor setting up network during restore. 27192279
2026/07/01 13:29 df56fdbc6497 Merge pull request #13331 from tianyuzhou95:albert/slimvm-pr 5fb9973c
2026/07/01 12:32 df56fdbc6497 Merge pull request #13331 from tianyuzhou95:albert/slimvm-pr 00a5cf1c
2026/06/30 23:13 31c3363db7b0 Merge pull request #13426 from google:lucasmanning/fuse-host-passthrough 00a5cf1c
2026/06/30 11:07 215343893be4 Merge pull request #13214 from ibondarenko1:tcpip-ipv6-disablelocked-isenabled e5173a01
2026/06/29 22:22 2f93121f3b28 Publish sandbox go sdk to go branch. fff8d0a0
2026/06/29 18:29 2f93121f3b28 Publish sandbox go sdk to go branch. 6a0c72dc
2026/06/29 10:21 928199eb9fb2 Merge pull request #13555 from yaseenisolated:fix-tcp-runqueue-restore 6a0c72dc
2026/06/27 03:11 928199eb9fb2 Merge pull request #13555 from yaseenisolated:fix-tcp-runqueue-restore fb92f11c
2026/06/26 14:05 d7ea6bc1ded1 Merge pull request #13451 from relkochta:relkochta/fsconfigreconf fb92f11c
2026/06/26 11:05 d7ea6bc1ded1 Merge pull request #13451 from relkochta:relkochta/fsconfigreconf 7ff32d8b
2026/06/25 21:54 5ba3eaee4ac7 Deflake the native memfd test 7ff32d8b
2026/06/25 09:50 ea0f0b6b32d9 Remap nvproxy devices across save/restore. 432fd51a
2026/06/24 21:55 b11424acec0a Scale CVE chart bars based on the maximum number of CVEs in any year. cfa969bf
2026/06/24 09:56 764efd2d14ca Add gvisor security record to the gvisor.dev c1da772e
2026/06/23 21:52 9f8f6c917885 Merge pull request #13534 from lyphyser:park-watchdog 042555ff
2026/06/23 09:36 0c3db239f156 Add checkpoint sandbox helper functions to gVisor shim. 4b1d8f01
2026/06/22 21:34 838a7e77509b Nftables: Added support for `set` creation. 5a630be6
2026/06/22 18:51 838a7e77509b Nftables: Added support for `set` creation. ab2703f0
2026/06/22 09:33 57746fa99e6b Update UTS namespace hostname/domainname on restore. ab2703f0
2026/06/19 22:57 57746fa99e6b Update UTS namespace hostname/domainname on restore. 43bfcdb0
2026/06/19 10:45 f0ef4a8366d0 Add Northflank to the gVisor users page. 023e42b5
2026/06/18 22:41 e5697b80cabb Merge pull request #13484 from luiscape:luis/add-mps-support-nvproxy d7ffd47b
2026/06/18 12:13 9307ff8f53c4 Merge pull request #13469 from lyphyser:disable-fast-path 4f06757f
2026/06/17 23:07 d2d6f9c4140b Prevent TOCTOU in VFIO_DEVICE_SET_IRQS ioctl. 4f06757f
2026/06/17 09:53 2cb805740e93 Nftables: Fixed bugs. 4f06757f
2026/06/16 20:47 2b2f4205a4d3 Merge pull request #13407 from moraneus:fix/nft-nat-family-mismatch 4f06757f
2026/06/16 07:35 8dfc7106337a Relocate go_binding_test to sandbox_test. 4f06757f
2026/06/15 18:20 c708da162364 Implement MS_MOVE for mount(2) 4f06757f
2026/06/13 12:17 57efc92f6df8 nvproxy: Add support for NVIDIA driver version 610.43.02. 4f06757f
2026/06/12 23:01 d9e49db5d861 Merge pull request #13421 from benldrmn:fix-annotation-override-ordering 4f06757f
2026/06/12 10:52 cb94f02180f4 Merge pull request #13427 from milantracy:claude 8f6cdf3b
2026/06/11 22:57 d127ea02e002 Merge pull request #13276 from Haihan-Jiang:codex/gvisor-cgroup-swap e93da63e
2026/06/11 10:40 62f5e2a90b92 Merge pull request #13410 from relkochta:relkochta/tmpfsnoswap d93a6ab6
2026/06/10 22:51 6d321a16ccf4 Merge pull request #13223 from shayonj:s/gofer-extension-setup b754d2d8
2026/06/10 10:47 7179c5f2f959 Add option to run cuda-checkpoint sequentially. f79bac11
2026/06/09 22:36 f028e6a84187 Nftables: Added support for NAT. 34dab4be
2026/06/09 10:27 6b0a7ff6a099 Automated rollback of changelist 928766376 c36c07f6
2026/06/09 09:40 6b0a7ff6a099 Automated rollback of changelist 928766376 656e94c6
2026/06/08 20:30 7f3d9935e2e8 Merge pull request #13315 from tianyuzhou95:albert/upstream-packet-fanout-uniqueid 656e94c6
2026/06/08 14:06 cfb7c0629521 Fix SIGWINCH delivery on PTY window size change (TIOCSWINSZ) 656e94c6
2026/06/06 10:41 cfb7c0629521 Fix SIGWINCH delivery on PTY window size change (TIOCSWINSZ) cc095639
2026/06/05 21:25 da03d3a66063 Remove stale sha256 pin from google_root_pem. cc095639
2026/06/05 09:21 fcd95d5fac0f Merge pull request #13164 from ibondarenko1:hardening/tcp-isn-secrets-nosave 48b6c3fa
2026/06/05 01:36 0e42bbeaef1c Merge pull request #13324 from tianyuzhou95:albert/fix-bigdatatransfer-port-exhaustion 197909be
2026/06/04 12:08 810eac7d0f1d nvproxy: Mark 580.159.04 driver supported. 197909be
2026/06/03 22:48 5fcf887cdc85 ipv6: Fixed fragment packet re-assembly. 197909be
2026/06/03 10:43 6f0c12599d8b Internal change. 234057e5
2026/06/02 22:43 d1c3ea4c0790 Implement ENV_VAR_POLICY_UNSET properly in sandboxexec. 3c0d2131
2026/06/02 10:33 752de092a1e0 Avoid panic on unknown transport protocol during forwarding. 62fe1528
2026/06/02 07:30 752de092a1e0 Avoid panic on unknown transport protocol during forwarding. 8d8eeb3a
2026/06/01 18:26 254f7e747c27 runsc features: Declare mount ID-mapping support in runtime features 8d8eeb3a
2026/06/01 07:49 50af291e777f Fail GPU tests if driver installation fails. 8d8eeb3a
2026/05/30 12:35 50af291e777f Fail GPU tests if driver installation fails. 6b4a8443
2026/05/29 23:31 e8af18d0c9e4 runsc: support for mount uid/gid mappings 6b4a8443
2026/05/29 10:18 086c94e0cc43 Fix: Improve error messages in spec validation for Spec.Process and Spec.Linux. 6b4a8443
2026/05/28 22:19 8f3bcd05c1b4 Skip nvidia-cdi-hook's disable-device-node-modification hook. 4624854e
2026/05/28 10:11 9b9807a3c82d Fix sentry panic during path resolution from unlinked directories in tmpfs. 9a5a7e5e
2026/05/27 22:13 d3f3610be742 Add README for sandboxexec, marking it as experimental. 4c36e7e5
2026/05/27 10:06 2923488e2bcb Internal change. cb4e87ff
2026/05/27 09:47 2923488e2bcb Internal change. 2b01f00e
2026/05/26 20:39 ef599f18a9ea Increase minimum Go version to 1.26.3 2b01f00e
2026/05/26 19:36 ef599f18a9ea Increase minimum Go version to 1.26.3 2b0043b4
2026/05/26 07:57 85b606a040c1 Clip resource limits in startup benchmarks. 2b0043b4
2026/05/23 22:55 85b606a040c1 Clip resource limits in startup benchmarks. c69befb3
2026/05/23 09:44 47af4685a3ea Rename Kata runtime types to remove "nested-" prefix. c69befb3
2026/05/22 20:39 27b70bccdcb9 Merge pull request #12614 from aojea:kind_kubernetes c69befb3
2026/05/22 08:33 a7d0e52fa760 Use raw unix.Mount for rootfs self-bind-mount 95d90255
2026/05/21 21:58 6fd4550f7f41 Nftables: Use enum instead of strings for nft ops. 747d777d
2026/05/21 08:56 3a1eb255338f Fix EINTR leakage by correcting type comparison in ConvertIntr. 747d777d
2026/05/20 20:47 0e7a047ef3b7 nvproxy: don't use rmControlSimple in ctrlGpuExecRegOps 41b8c833
2026/05/20 08:44 d8751e5ab677 Merge pull request #13181 from ibondarenko1:hardening/conntrack-seed-nosave d6bba87f
2026/05/19 20:45 7851a7f7167b Merge pull request #13147 from shayonj:setgroups-impl 6cd1a940
2026/05/19 08:49 eddc5fa62b5b Add unit test for GetPersistentVolume 2aa09d96
2026/05/18 20:45 3587f0d82c7a Merge pull request #13163 from arpitjain099:ci/add-permissions 9f74d399
2026/05/18 08:35 8bcb288c846d Add a new flag to allow connected connections on save. 143ffb88
2026/05/18 06:36 8bcb288c846d Add a new flag to allow connected connections on save. de5aae85
2026/05/17 05:43 77dbc433352e Fix broken deps. de5aae85
2026/05/16 19:42 fb5ef644a797 lisafs: Allow connections to have varying implementations. de5aae85
2026/05/16 07:51 fb5ef644a797 lisafs: Allow connections to have varying implementations. a15a64a6
2026/05/15 19:41 b798cf6112e7 Integrate runsc shim with containerd 2.1. 81fb92f3
2026/05/15 07:49 7e7d35b8a0ae Use a fresh container for exclusive GPU test execution. 9cd3beaa
2026/05/14 21:54 b8c7531eee0b Merge pull request #13185 from drewmacneil:drew/tmpfs-symlink-account-pages 6ccb967e
2026/05/14 08:38 95d42c1e46c7 Don't run SeccompValidatesAllFilterFlags on starnix 6ccb967e
2026/05/13 20:32 dc2aeec97118 tmpfs: support percentage size + update /proc/self/mounts to match Linux format e8909b29
2026/05/13 08:38 b29453378bdd Merge pull request #13099 from shayonj:s/per-mount-directfs fec2a7ee
2026/05/12 19:38 1013f4dc0dfa clone: Uninstall pidfd when seccheck aborts clone a0949470
2026/05/12 18:57 f5ce408bcf1e nvproxy: don't use rmControlSimple in ctrlGetNvU32List a0949470
2026/05/12 06:56 f5ce408bcf1e nvproxy: don't use rmControlSimple in ctrlGetNvU32List 07aeade5
2026/05/11 18:14 d281a82b8c2b Set DF bit for TCP handshake. d168f260
2026/05/11 17:33 d281a82b8c2b Set DF bit for TCP handshake. 845acb1c
2026/05/11 06:12 8c9871efe45a Skip TestShimGroupingPerformance in containerd-test. 845acb1c
2026/05/09 09:41 8c9871efe45a Skip TestShimGroupingPerformance in containerd-test. 29233ece
2026/05/08 20:22 07ebf7a12283 Always specify Docker platform in images.mk 29233ece
2026/05/08 08:19 58ca0022967b sentry: Move IOUringEnabled to kernel.Kernel Member 5633175a
2026/05/02 06:47 f395c7e409ad Merge llm benchmark client images to one image. 340bcdf0
2026/05/01 17:36 1e0a80aff995 Fix the flakiness of GPU tests 340bcdf0
2026/05/01 02:29 f6f900361dae Merge pull request #12791 from a7i:feat/shim-containerd-update 340bcdf0
2026/04/30 13:17 cb8d273a098b Refactor common LLM testing utilities into llmutil. 340bcdf0
2026/04/30 00:06 81fa2013f157 gofer: Fix getxattr to actually return xattr when size=0. 340bcdf0
2026/04/29 10:56 a655402183e0 Internal change 340bcdf0
2026/04/28 21:49 79b7318d6d6e Change default checkpoint compression to "none". 340bcdf0
2026/04/28 08:33 00af7dba072a Revert the debug logs added for investigating the nil receiver in Readiness. 340bcdf0
2026/04/27 20:31 8e1b8ebdafc1 Merge pull request #13016 from tanyifeng:bump-linux-release ce741359
2026/04/27 18:57 8e1b8ebdafc1 Merge pull request #13016 from tanyifeng:bump-linux-release 0f700595
2026/04/27 08:29 6c584bd2fd0e gVisor blog post: Fix publication year in URL. 0f700595
2026/04/25 09:02 6c584bd2fd0e gVisor blog post: Fix publication year in URL. 9c2d0995
2026/04/24 19:52 c941cbac224e Add a sync.Pool for sendfile buffers. 9c2d0995
2026/04/24 13:54 95eb8fa6e7a6 Merge pull request #12995 from tanyifeng:tencent-blog 9c2d0995
2026/04/24 01:53 95eb8fa6e7a6 Merge pull request #12995 from tanyifeng:tencent-blog 9cfb3ca7
2026/04/23 17:41 49a67f0580c5 Run more mount tests with overlayfs enabled. 629ff21a
2026/04/23 13:50 b2b5c32399dd conntrack: Moving packet functions from conntrack to packet_buffer 629ff21a
2026/04/23 01:55 b2b5c32399dd conntrack: Moving packet functions from conntrack to packet_buffer b10da5ec
2026/04/22 17:45 f4da28bc0a62 Remove usages of save-restore-netstack flag. 0e869ba2
2026/04/22 13:46 580553b31b48 Clarify container capabilities in Docker-in-gVisor tutorials. 0e869ba2
2026/04/22 01:52 580553b31b48 Clarify container capabilities in Docker-in-gVisor tutorials. 0b6ab7ec
2026/04/21 13:45 25ee8c385cdf Merge pull request #12923 from shayonj:s/export-gofer-mount-setup 9765efe0
2026/04/21 01:41 afbd83b06878 overlay: avoid creating unnecessary whiteouts in UnlinkAt and RmdirAt 3f2e655b
2026/04/20 19:25 afbd83b06878 overlay: avoid creating unnecessary whiteouts in UnlinkAt and RmdirAt e65da4ee
2026/04/20 13:40 03f43620b1df Clean up all containers, pods, sandboxes once root tests are completed. e65da4ee
2026/04/19 00:41 03f43620b1df Clean up all containers, pods, sandboxes once root tests are completed. 303e2802
2026/04/18 14:17 ebc66e608932 Document docker v28 in GKE sandox support. 303e2802
2026/04/18 02:27 ebc66e608932 Document docker v28 in GKE sandox support. 5be7a9de
2026/04/17 14:14 948b81074120 stack: Separated NAT code from conntrack. 24ecfc1e
2026/04/17 11:25 948b81074120 stack: Separated NAT code from conntrack. de0a551d
2026/04/16 22:21 ec13dd2435d5 Merge pull request #12797 from insanitybit:overlay-userxattr de0a551d
2026/04/16 10:16 b5e83db38775 Merge pull request #12855 from tanyifeng:pty-sighup-on-master-close 4743f87d
2026/04/15 22:23 486f37f2f419 Test gVisor with latest containerd minor versions. df15c5f3
2026/04/15 10:16 098b0a1fd48d Internal change. 294e3145
2026/04/14 22:08 8165ec8fae29 Exclude debug-related flag annotations from checkpoint/restore validation. e2e976a8
2026/04/14 10:06 58b37effb58e Merge pull request #12919 from iTrooz:iface_index 362d1323
2026/04/13 22:01 ab52a706a050 Merge pull request #12905 from danielpfeifer02:dpfeifer/runsc-kill-pgid 1a086e7c
2026/04/13 18:35 ab52a706a050 Merge pull request #12905 from danielpfeifer02:dpfeifer/runsc-kill-pgid 9530ccf9
2026/04/13 09:59 7a8f93e881db Internal change. 9530ccf9
2026/04/11 18:59 7a8f93e881db Internal change. 38c8e246
2026/04/11 05:44 00a38c0da811 Merge pull request #12902 from shayonj:s/export-gofer-helpers 38c8e246
2026/04/10 16:34 b024e9775767 Merge pull request #12909 from xiangbin-hu:cgroup-registry-remove-on-rmdir 38c8e246
2026/04/10 03:24 da7e03a42765 Merge pull request #12854 from tanyifeng:vfs-add-inmodify 38c8e246
2026/04/09 14:16 7b4fe744c3d1 Merge pull request #12843 from kpurdon:kpurdon/12838/fix-aarch64-oom-reporting 38c8e246
2026/04/09 00:58 9bc8526be8df Merge pull request #12863 from tanyifeng:remove-ficlone-tests 38c8e246
2026/04/08 12:51 50a14dc95f47 Remove vfio_unsafe.go and use VFIOIrqSet.SizeBytes(). d9b7f621
2026/04/08 11:54 50a14dc95f47 Remove vfio_unsafe.go and use VFIOIrqSet.SizeBytes(). 2c961e87
2026/04/07 22:23 7eb858fdd6f5 kvm: re-enable the TestMemLimit 2c961e87
2026/04/07 10:18 140f64c5bad5 Merge pull request #12817 from luiscape:add-vulakn-ioctls 628666c6
2026/04/07 10:13 140f64c5bad5 Merge pull request #12817 from luiscape:add-vulakn-ioctls 4440e7c2
2026/04/06 20:54 9572729eab49 Update links to GKE Sandbox documentation page. 4440e7c2
2026/04/04 02:25 0f29b0e1e7fa Merge pull request #12852 from tanyifeng:net-ip-mtu-discover 4440e7c2
2026/04/03 13:21 44183dc080fa Allow sub-containers to cold-start on restored Pods. 4440e7c2
2026/04/02 23:57 d1ab4fa9f386 gVisor security policy: Clarifications and update for `InternalEsc`. 4440e7c2
2026/04/02 11:57 4eeb78049896 mm: only hugepage-align mappings of hugepage-aligned length 8b15d4ae
2026/04/02 00:00 638c1efe1975 Read runsc.Options from the state file to clean up task service. 0cb124d5
2026/04/01 11:52 305818798603 sentry: use cryptographic PRNG for security-sensitive randomization 0285fe54
2026/03/31 23:57 82275ab10d2b runsc: support unprivileged user namespace mappings using SysProcAttr fb8b2c26
2026/03/31 11:51 3479ded64d64 runsc: Fix SetUserMappings to handle empty UID/GID mappings in spec. aeea1c72
2026/03/30 23:41 77458736f496 Nftables: Remove the overheads from register ops. d0af506e
2026/03/30 18:17 77458736f496 Nftables: Remove the overheads from register ops. aa4af680
2026/03/30 11:40 d23cf24593c3 utimensat: Allow AT_EMPTY_PATH aa4af680
2026/03/28 12:20 d23cf24593c3 utimensat: Allow AT_EMPTY_PATH b5ceaad2
2026/03/28 00:14 749146131869 Fix systemcall tests 356bdfc9
2026/03/27 18:33 749146131869 Fix systemcall tests 74a13a23
2026/03/27 12:12 d2403f237047 Extend containerd runsc shim testing. 74a13a23
2026/03/27 01:29 d2403f237047 Extend containerd runsc shim testing. 4b3d9a38
2026/03/26 12:08 c85244f0aaa2 netstack: Fix cap check around IFLA_NET_NS_FD 4b3d9a38
2026/03/25 23:55 147cf2057db4 Internal change. c6143aac
2026/03/25 18:15 147cf2057db4 Internal change. 4367a094
2026/03/25 11:54 c84e2b3c916c Add new extension method to support shim grouping. 4367a094
2026/03/24 23:54 c84e2b3c916c Add new extension method to support shim grouping. 35e4ff71
2026/03/24 11:45 7fa0acf9f27f Merge pull request #12772 from tanyifeng:fix-path-resolve 74e70d19
2026/03/23 23:29 3a5311091c1c Merge pull request #12734 from luiscape:master baf8bf12
2026/03/23 18:09 3a5311091c1c Merge pull request #12734 from luiscape:master 5e3db351
2026/03/23 11:28 5632a4febdb3 Merge pull request #12633 from danielnorberg:fix-tar-rootfs-upper-opaque-xattr 5e3db351
2026/03/21 18:48 5632a4febdb3 Merge pull request #12633 from danielnorberg:fix-tar-rootfs-upper-opaque-xattr 5b92003d
2026/03/21 01:45 afa183ad4a0f Add runsc wait --fscheckpoint/fsrestore. 5b92003d
2026/03/20 13:42 0ee4bfc55de7 Merge pull request #12758 from Bingtagui404:fix/proc-pid-io-rchar-typo 85bf2a64
2026/03/20 13:12 0ee4bfc55de7 Merge pull request #12758 from Bingtagui404:fix/proc-pid-io-rchar-typo 2f245add
2026/03/20 00:09 bf19fbd37580 runsc/shim: Add support for filesystem restore. 2f245add
2026/03/19 22:31 9ca1678bc676 Implement filesystem-only checkpointing. 2f245add
2026/03/19 10:42 9ca1678bc676 Implement filesystem-only checkpointing. 0291cd06
2026/03/18 23:35 ac8ff8fd1a6b Fix more printf findings 0199f9a1
2026/03/18 10:18 f7324fa64c1d signals: Fix races that prevent a SIGCONT from aborting a SIGSTOP 0199f9a1
2026/03/18 08:48 f7324fa64c1d signals: Fix races that prevent a SIGCONT from aborting a SIGSTOP c8810548
2026/03/17 19:32 70fb1c0d2c45 Fix the data race for mm.(*MemoryManager).as. c8810548
2026/03/17 08:00 c7907727f5af Automated rollback of changelist 879883699 c01bca74
2026/03/16 19:22 df21591966b8 [tests] Remove direct dependency on linux_capability_util 0737c18f
2026/03/16 16:07 df21591966b8 [tests] Remove direct dependency on linux_capability_util 64e21424
2026/03/16 07:20 93555402076d Merge pull request #12589 from jbms:tcgets2 64e21424
2026/03/15 05:06 93555402076d Merge pull request #12589 from jbms:tcgets2 ee8d34d6
2026/03/14 02:17 7115280528d6 Symbolize and desymbolize the stacktrace in beforeSave and afterLoad. ee8d34d6
2026/03/13 13:43 e8a5075fec21 nogo: remove stdlib subcommand 351cb5cf
2026/03/13 11:28 e8a5075fec21 nogo: remove stdlib subcommand 2f7f359d
2026/03/12 22:06 d8b6072338d4 Internal change. 2f7f359d
2026/03/12 10:01 293707e850ca Merge pull request #12686 from a7i:fix/iptables-restore-ipt-so-set-replace-12685 4efadf07
2026/03/11 22:14 209337ec6309 Do not create profile/trace files if they are not set. 2d88ab01
2026/03/11 14:19 f3f3086cd269 Deflake //test/syscalls:packet_mmap_test_native. 2d88ab01
2026/03/11 02:20 f3f3086cd269 Deflake //test/syscalls:packet_mmap_test_native. 86914af9
2026/03/10 14:14 c9735035b4c6 Update Have[RawIP/Packet]SocketCapability() to open raw/packet sockets. 4cb25bc5
2026/03/10 13:53 c9735035b4c6 Update Have[RawIP/Packet]SocketCapability() to open raw/packet sockets. 6972f302
2026/03/10 00:47 498c3ed97f23 Merge pull request #12689 from KevinZhao:fix/nvproxy-size-validation 6972f302
2026/03/09 19:19 498c3ed97f23 Merge pull request #12689 from KevinZhao:fix/nvproxy-size-validation 176bead5
2026/03/09 12:46 527012b63ce4 Internal change. 176bead5
2026/03/07 13:16 527012b63ce4 Internal change. 5cb44a80
2026/03/07 00:07 56114d1c6cd3 compressio: Handle zero-length non-nil key. 5cb44a80
2026/03/06 23:03 8e713b88a0f3 Replace github.com/kr/pty with github.com/creack/pty. 5cb44a80
2026/03/06 11:02 8e713b88a0f3 Replace github.com/kr/pty with github.com/creack/pty. 41d8037d
2026/03/05 23:08 8e713b88a0f3 Replace github.com/kr/pty with github.com/creack/pty. 31e9c887
2026/03/05 11:04 0841f58d1889 Add --per-pod-flag-override to gvisor-k8s-tool install. d20b04c8
2026/03/04 22:57 0a1bb9057526 Internal change a9fe5c9e
2026/03/04 21:31 0a1bb9057526 Internal change e6b6b96b
2026/03/04 10:56 4e233fa6bc7b Internal change. e6b6b96b
2026/03/04 02:26 4e233fa6bc7b Internal change. 4180d919
2026/03/03 13:17 d68b68cd0e44 Fix runsc log and profile file handling. 4180d919
2026/03/03 00:32 ec013ff364dc Create initial sandbox configuration spec. 28b83e23
2026/03/03 00:11 a12250c82962 nvproxy: keep uvmFDMemmapFile.pfm refcount up to date 28b83e23
2026/03/02 12:08 a12250c82962 nvproxy: keep uvmFDMemmapFile.pfm refcount up to date b9dd6534
2026/02/28 15:17 a12250c82962 nvproxy: keep uvmFDMemmapFile.pfm refcount up to date 43249bac
2026/02/28 02:15 d5a453ca03ba Merge pull request #12447 from danielnorberg:fix-bind-mount-type-validation 43249bac
2026/02/27 21:00 d5a453ca03ba Merge pull request #12447 from danielnorberg:fix-bind-mount-type-validation 2cf092b8
2026/02/27 14:13 d676cf1324d0 nvproxy: Add support for 590.48.01. 2cf092b8
2026/02/27 06:18 d676cf1324d0 nvproxy: Add support for 590.48.01. a2f13f71
2026/02/26 21:31 6ee74522ca38 Add more shim grouping tests. a2f13f71
2026/02/26 09:30 6ee74522ca38 Add more shim grouping tests. ffa54287
2026/02/26 09:15 6ee74522ca38 Add more shim grouping tests. e0f78d93
2026/02/25 19:54 a8ce0282b2c2 Fix flaky fuse save_resume tests e0f78d93
2026/02/25 07:52 c58e543f3da5 Reject unsupported file types in directfs. c162cde9
2026/02/25 01:56 c58e543f3da5 Reject unsupported file types in directfs. 787dfb7c
2026/02/24 12:49 e41477ffa935 Internal change. 787dfb7c
2026/02/24 11:00 e41477ffa935 Internal change. 41d2fa6a
2026/02/23 21:45 7551ab05d9b4 `runsc metric-server`: Tag metrics as per-sandbox vs process-wide. 41d2fa6a
2026/02/23 20:13 7551ab05d9b4 `runsc metric-server`: Tag metrics as per-sandbox vs process-wide. 7c9658af
2026/02/23 09:44 eb261c6145d1 gofer: Improve restore failure messages. 7c9658af
2026/02/21 03:26 eb261c6145d1 gofer: Improve restore failure messages. 6e7b5511
2026/02/20 20:24 2ba75b93bf8e Merge pull request #12598 from tamird:nogo-more-checks 741f5161
2026/02/20 15:19 1985b831b991 Do not panic if RegisterPacketEndpoint failed during restore. 741f5161
2026/02/20 03:23 1985b831b991 Do not panic if RegisterPacketEndpoint failed during restore. 17d780d6
2026/02/19 17:59 d473cc236bf8 Add "debug-command" to allowlist for annotation-based flag override. 73a252ac
2026/02/19 15:16 c78d9e41a0b2 Ensure s.mu is locked before accessing nextTrap. 73a252ac
2026/02/19 03:24 c78d9e41a0b2 Ensure s.mu is locked before accessing nextTrap. 746545b8
2026/02/18 15:30 27046a53aa92 Merge pull request #12607 from quetz:tcp-sack-btreeg 77d4d919
2026/02/18 03:18 7ce75cc793ca hostinet: Replacing Seek with ReadAt. 39751c21
2026/02/17 18:33 3f6a9614cc76 Add a method for stopping external network access while a sandbox is running. f4288eed
2026/02/17 15:08 813e3124c3d7 netstack: Added check for `CAP_NET_ADMIN` for get/setsockopt. f4288eed
2026/02/17 02:05 813e3124c3d7 netstack: Added check for `CAP_NET_ADMIN` for get/setsockopt. e439b951
2026/02/16 14:03 813e3124c3d7 netstack: Added check for `CAP_NET_ADMIN` for get/setsockopt. 5d52cba5
2026/02/14 05:39 813e3124c3d7 netstack: Added check for `CAP_NET_ADMIN` for get/setsockopt. 1e62d198
2026/02/13 16:26 67ff7826fdd7 Add a metric to track the presence of the metric server. 1e62d198
2026/02/13 04:16 bf7d4ccdb225 Terminate connections only for restore (not for resume). 6a673c50
2026/02/12 22:41 bf7d4ccdb225 Terminate connections only for restore (not for resume). 504cb1bf
2026/02/12 16:15 fcc60e001175 Print stack trace when endpoint receiver is nil (for debugging only). 504cb1bf
2026/02/12 04:14 fcc60e001175 Print stack trace when endpoint receiver is nil (for debugging only). 76a109e2
2026/02/11 16:13 fcc60e001175 Print stack trace when endpoint receiver is nil (for debugging only). 65ce8d55
2026/02/11 09:06 fcc60e001175 Print stack trace when endpoint receiver is nil (for debugging only). f03c4191
2026/02/10 19:55 2239fe6fb93a `seccomp`: Refactor to allow arbitrary number of `RuleSet`s. f03c4191
2026/02/08 22:57 9fb1260a5885 Internal change. f03c4191
2026/02/08 09:51 5a038ae86d68 runsc: Refactor cli.Run to accept commands map f03c4191
2026/02/06 23:53 3967795e1aa0 Merge pull request #12577 from tanyifeng:fix-return-rst f03c4191
2026/02/06 10:35 f586013d9ede Merge pull request #12567 from nt:claude/fix-turbine-orch-error-X0OIm f03c4191
2026/02/05 21:20 387f0682d620 sockets: Bind get/set sockopts to socket types. f03c4191
2026/02/05 11:36 7210e818e4ed Internal change. 4936e85c
2026/02/05 09:04 8a1f424b4e2c Update `getrusage(2)` field support status to reflect implementation. 4936e85c
2026/02/04 13:22 8a1f424b4e2c Update `getrusage(2)` field support status to reflect implementation. ea10c935
2026/02/03 21:10 8a1f424b4e2c Update `getrusage(2)` field support status to reflect implementation. 42b01fab
2026/02/03 09:09 8a1f424b4e2c Update `getrusage(2)` field support status to reflect implementation. 6df4c87a
2026/02/03 09:00 8a1f424b4e2c Update `getrusage(2)` field support status to reflect implementation. d78927dd
2026/02/02 19:45 f87a10ed3fc6 Merge pull request #12122 from google:dependabot/github_actions/actions/stale-10 d78927dd
2026/02/02 19:35 f87a10ed3fc6 Merge pull request #12122 from google:dependabot/github_actions/actions/stale-10 018ebef2
2026/02/02 07:44 9dd9b9b1b6c4 Merge pull request #9876 from kevinmingtarja:update-command-impl 018ebef2
2026/01/31 22:51 9dd9b9b1b6c4 Merge pull request #9876 from kevinmingtarja:update-command-impl 6b8752f2
2026/01/31 19:13 9dd9b9b1b6c4 Merge pull request #9876 from kevinmingtarja:update-command-impl afc0c4d4
2026/01/31 10:49 cc6d75530246 Update spec validation for args. afc0c4d4
2026/01/31 00:04 cc6d75530246 Update spec validation for args. c75a2f6e
2026/01/30 22:48 5c79e3901d0a Improve logging and error handling in image tests c75a2f6e
2026/01/30 10:48 5c79e3901d0a Improve logging and error handling in image tests ea6dba22
2026/01/29 22:45 6b6332029773 Store the CPU time usage in the metadata during save operation. bfa73b7b
2026/01/29 18:26 6b6332029773 Store the CPU time usage in the metadata during save operation. aeb6fdd5
2026/01/29 10:43 5f31525f7613 Catch negative values in `timer_settime(2)`. aeb6fdd5
2026/01/29 01:02 5f31525f7613 Catch negative values in `timer_settime(2)`. 0adc945e
2026/01/28 22:41 1f42df880e93 Speedup Ruby test and hopefully reduce its flakiness 0adc945e
2026/01/28 10:47 1f42df880e93 Speedup Ruby test and hopefully reduce its flakiness 004c195c
2026/01/28 00:00 2d45bac28a2a Merge pull request #12548 from ericpauley:stack-rlock 3029c699
2026/01/27 20:37 46ee21de717d arch: tolerate fpu.State.SanitizeUser errors during SignalRestore 3029c699
2026/01/27 08:58 46ee21de717d arch: tolerate fpu.State.SanitizeUser errors during SignalRestore 43e1df1d
2026/01/26 20:34 6399fd944357 gpu: Undeprecate --nvproxy-docker. efb3e894
2026/01/26 19:08 6399fd944357 gpu: Undeprecate --nvproxy-docker. 55756628
2026/01/26 08:32 38123b53da96 pgalloc: reload ma before ma.commitSeq <= lastCommitSeq check 55756628
2026/01/25 20:31 38123b53da96 pgalloc: reload ma before ma.commitSeq <= lastCommitSeq check 02bac031
2026/01/25 00:09 38123b53da96 pgalloc: reload ma before ma.commitSeq <= lastCommitSeq check 40acda8a
2026/01/24 10:50 7381ccc9a437 Add documentation for EROFS support in gVisor. 40acda8a
2026/01/23 22:58 db375d9f645c Mark all ABI structs with `structs.HostLayout`; verify this remains true. 4f25b9b4
2026/01/23 10:54 1c7c74f919f4 test: deflake PreadvTest.MMConcurrencyStress save/restore tests on FUSE 1aa92270
2026/01/22 22:48 44de367500c3 Add more shards for bind_test to fix the timeout. 82c9c083
2026/01/22 10:51 a19380c9dd15 hostinet: avoid EPOLL_CTL_MOD syscalls from application poll() 2367ed1e
2026/01/22 01:23 adb6b0859143 Increase size and add sharding to fcntl_test. 6984f21f
2026/01/21 12:05 7e430ef9582d kvm: handle mappings in the extended address space properly 6984f21f
2026/01/21 11:41 7e430ef9582d kvm: handle mappings in the extended address space properly 6f1aa2f9
2026/01/20 22:33 9dd3da2ee883 nftables: Enable syscall native tests in buildkite. 6f1aa2f9
2026/01/20 21:30 509480e92861 nftables: Enable buildkite nftable docker tests with runc and runsc. 6f1aa2f9
2026/01/20 08:55 509480e92861 nftables: Enable buildkite nftable docker tests with runc and runsc. 300ecf9e
2026/01/19 20:43 509480e92861 nftables: Enable buildkite nftable docker tests with runc and runsc. 572effc1
2026/01/19 08:41 509480e92861 nftables: Enable buildkite nftable docker tests with runc and runsc. 45ab0e95
2026/01/17 03:49 509480e92861 nftables: Enable buildkite nftable docker tests with runc and runsc. 20d37d28
2026/01/16 20:48 eca1f2af7f09 Refactor runsc shim to move container specific logic out of task service. 20d37d28
2026/01/16 08:46 eca1f2af7f09 Refactor runsc shim to move container specific logic out of task service. 592aa8f1
2026/01/16 06:09 eca1f2af7f09 Refactor runsc shim to move container specific logic out of task service. 722ac325
2026/01/15 16:34 271215a9575c Suspend fdnotifier during save/restore. 722ac325
2026/01/15 13:18 271215a9575c Suspend fdnotifier during save/restore. d1b870e1
2026/01/15 00:08 3b63b05b727a Merge pull request #12482 from tamird:bits-generics d1b870e1
2026/01/14 10:55 e0a2f604cc9f Support TPU7x. d1b870e1
2026/01/13 21:45 428bb2a82d14 nftables: Enable jump support. d1b870e1
2026/01/13 08:35 f23d52117c28 Merge pull request #12461 from tamird:build-on-mac d1b870e1
2026/01/12 19:28 b3aa7ab31159 Automated rollback of changelist 854268804 d1b870e1
2026/01/10 03:55 127e4f8c1e93 image: Update Go builder image to 1.25. d1b870e1
2026/01/09 14:45 3652fc8dd1a7 Internal change. d1b870e1
2026/01/09 01:35 c37fd0584fc2 Cleanup creds-related funcs and change CapError behavior d1b870e1
2026/01/08 12:26 5aa19429c3bd kvm: limit virtual address space to 47-bit on amd64 d1b870e1
2026/01/07 23:11 65762f872f49 Remove incorrect uses of NAME_MAX. d1b870e1
2026/01/07 10:01 aadcd20dfcf5 msgqueue: check permissions in Queue.Copy() d1b870e1
2026/01/06 20:50 8e2d907742f5 nftables: Added a generic method to extract attribute. d1b870e1
2026/01/06 07:37 534579b743fb watchdog: Add a "stuck goroutines" suffix to the full stack dump at panic d1b870e1
2026/01/05 18:24 63d8c3537a40 sentry/kernel: check for pending signals after Task.endInternalStopLocked() d1b870e1
2026/01/02 22:25 415991e5703d nftables: Added support for cmp op init. d1b870e1
2025/12/31 09:19 c8a1af2c00ca Fix execveat pathname construction when called on memfd. d1b870e1
2025/12/30 20:04 6c491f96d6bc Merge pull request #12411 from benldrmn:feat/serialize-rootfs-specific-container d1b870e1
2025/12/29 18:16 3ad5b57e0557 Add --tpu flag to `spec` subcommand for automatically adding TPU devices. d1b870e1
2025/12/27 12:00 3bc9fe48b39a Fix incorrect cap checks in pivotroot(), mbind(), and prctl() d1b870e1
2025/12/26 22:45 1029bbce6ad2 sentry/control: pre-construct container PID namespaces d1b870e1
2025/12/22 18:21 466fd4e909b6 memmap: Make NoMapInternal savable. d1b870e1
2025/12/20 19:24 89151a08e48f Internal change. d1b870e1
2025/12/20 06:21 9f6ccf11ca07 Exclude failing Java ConnectTimeout tests. d1b870e1
2025/12/19 17:07 333ec3e0c78c Automated Code Change d1b870e1
2025/12/17 11:01 515fb9e6bb4d netlink: Supply IFLA_MASTER in RTM_NEWLINK messages d1b870e1
2025/12/16 21:50 f9423e9b6d1f Merge pull request #12368 from nicolasgarza:remove-slice-header d1b870e1
2025/12/16 08:39 aaf09da3a68a Add a syscall test around unshare(CLONE_NEWUSER|CLONE_NEWNET) d1b870e1
2025/12/15 19:31 0b9bde06d0f0 kvm: RSEQ: Add RSEQ support d1b870e1
2025/12/13 11:02 e79ac3734065 Internal change. d1b870e1
2025/12/12 21:51 6317c35bb75f Internal change d1b870e1
2025/12/12 05:40 63343ff21f62 netlink: Check for CAP_NET_ADMIN in the netns-owning userns in send() d1b870e1
2025/12/11 16:32 f77ef690d1d3 nftables: Added support for meta set and get/load init. d1b870e1
2025/12/11 01:35 7e66b6cb36de tun: Check for cap in the netns-owning userns when creating tun d1b870e1
2025/12/10 12:24 4485bf5b2293 nvproxy: Add support for 580.105.08 driver. d1b870e1
2025/12/09 22:35 9a467482666b Fix a bug around IFLA_NET_NS_FD d1b870e1
2025/12/09 09:25 561ff6d235e6 proc: fix security checks on /proc/pid files d1b870e1
2025/12/08 20:16 2c31ec14a88a Add support for TPU7x Ghostfish. d1b870e1
2025/12/06 01:59 9d75d560f532 Make --allow-packet-socket-write a public flag. d1b870e1
2025/12/05 12:45 c0bf1295ce8d Remove usage of net-disconnect-ok flag. d1b870e1
2025/12/04 23:35 23ece0fab788 state: fix nil dereference when encodeState.Save() => wire.Save() fails d1b870e1
2025/12/04 07:35 86e78c1f393c Internal change. d1b870e1
2025/12/03 18:24 17e4b24d67ea Add test coverage for gVisor w/ container 2.1.0. d1b870e1
2025/12/03 05:18 c9c8dadf3076 nftables: Added support for payload set and load operation init. d1b870e1
2025/12/01 19:35 5ebe823d4504 Prevent pollution in packet socket tests d1b870e1
2025/11/28 13:14 d25a12513bcf runsc: implement -h and -help flags d1b870e1
2025/11/26 23:25 d25a12513bcf runsc: implement -h and -help flags e8331348
2025/11/26 11:30 bcd588ae5561 Update docs for preadv2/pwritev2 unsupported RWF flags. c116feb4
2025/11/26 04:05 fe844bfed94d Leave nlmsg_pid at 0 for netlink multicast bf6fe8fe
2025/11/25 14:58 fc40e232ff54 nftables: Added support for nla policy. bf6fe8fe
2025/11/25 01:50 95f87697a897 Allow netlink sockets to send to RTMGRP_LINK bf6fe8fe
2025/11/24 09:14 8bc2d00d53cc Internal change. bf6fe8fe
2025/11/21 21:57 8bc2d00d53cc Internal change. 4fb8ef37
2025/11/21 09:54 43ca3989e6a7 Merge pull request #12117 from wangxinmian:go 52ed5c96
2025/11/20 21:47 486eeaa2bf2a Internal change. 280ea308
2025/11/20 09:52 daef357270bd sentry: don't try to dump/restore unsupported FPU states 2cc4c24a
2025/11/19 20:53 e3403becc1a2 Internal change. 26ee5237
2025/11/19 16:59 e3403becc1a2 Internal change. 82d7b894
2025/11/19 08:51 2d04b0468aa9 nftables: Parse chain type from the correct attribute. 82d7b894
2025/11/19 01:49 2d04b0468aa9 nftables: Parse chain type from the correct attribute. ef766cd7
2025/11/18 12:39 2d94e669ae96 Avoid netlink deadlock ef766cd7
2025/11/17 23:31 e2c42ec307c0 nftables: Changing HostToNet/NetToHost implementaion. ef766cd7
2025/11/17 21:12 4304bcd596d8 Adjust runtime schedt.nmspinning offset for go1.26 ef766cd7
2025/11/17 11:48 4304bcd596d8 Adjust runtime schedt.nmspinning offset for go1.26 de73685d
2025/11/17 09:10 9fc4303aefe1 Panic if transport.connectionlessEndpoint.baseEndpoint.receiver is mutated during save. de73685d
2025/11/15 04:42 9fc4303aefe1 Panic if transport.connectionlessEndpoint.baseEndpoint.receiver is mutated during save. f7988ea4
2025/11/15 00:06 19abc451fac5 SGLang GKE test f7988ea4
2025/11/14 12:14 19abc451fac5 SGLang GKE test 6d98c1c8
2025/11/14 03:45 fb338e73b424 Mark restore as failed when any runsc restore fails. 07e030de
2025/11/13 14:36 0f8351443c9f Handle restore failure more robustly. 07e030de
2025/11/13 01:25 c976ee8cb327 Add loader state checks for start commands. 07e030de
2025/11/12 12:21 197c0b33354c Test that adding an epoll to an epoll doesn't immediately wake the outer epoll 07e030de
2025/11/12 06:56 197c0b33354c Test that adding an epoll to an epoll doesn't immediately wake the outer epoll 4e1406b4
2025/11/11 17:47 d7915bc4a3dd Use the updated Docker image in ollama GKE tests. 4e1406b4
2025/11/08 07:16 cd0901c24964 kvm: add more debug info on unexpected exits 4e1406b4
2025/11/07 18:06 6792b9a5b3b9 Update kythe 4e1406b4
2025/11/07 04:36 20d10167be6f Fix: Pass stack pointer to `__init` in rseq arm64 test start. 4e1406b4
2025/11/06 15:33 605acfd94beb packetdrill: Fix packetdrill test script 4e1406b4
2025/11/06 13:31 605acfd94beb packetdrill: Fix packetdrill test script a6c9c731
2025/11/06 00:21 c0171a1ef32a runsc: allow to build runsc-race with code coverage instrumentation a6c9c731
2025/11/05 07:31 6db745970118 Implement SO_PEERCRED socket option for UNIX sockets and its tests. a6c9c731
2025/11/04 18:30 2e0758be47d6 Internal change. a6c9c731
2025/11/04 15:31 2e0758be47d6 Internal change. 686bf657
2025/11/04 02:19 589c7630766b runsc/cgroup: don't no-op cgroupSystemd.Join() if unit exists 686bf657
2025/11/04 01:38 feddee9574d7 kernel: add ThreadGroup.SigsegvLock/Unlock 686bf657
2025/11/03 13:37 feddee9574d7 kernel: add ThreadGroup.SigsegvLock/Unlock e6c64ba8
2025/10/31 07:14 feddee9574d7 kernel: add ThreadGroup.SigsegvLock/Unlock 2c50b6a9
2025/10/30 18:02 fe72162af296 Rework netfilter tests in preparation for running them on Buildkite. 2c50b6a9
2025/10/30 15:02 b7ef981f5ddb nvproxy: Add support for 535.274.02 and 570.195.03. 2c50b6a9
2025/10/29 22:29 b7ef981f5ddb nvproxy: Add support for 535.274.02 and 570.195.03. fd2207e7
2025/10/29 00:40 909507170b70 Deflake //pkg/tcpip/stack:bridge_test. fd2207e7
2025/10/28 11:30 d93c5f5ac2ad Add SGLang Docker tests/benchmark fd2207e7
2025/10/27 22:20 a2af0eaa5412 eventfd: writes must be exactly 8 bytes fd2207e7
2025/10/27 09:18 f611d7f195b7 Add checkpointExtra and checkpointOptsExtra. fd2207e7
2025/10/24 10:23 f611d7f195b7 Add checkpointExtra and checkpointOptsExtra. c0460fcd
2025/10/23 21:13 87373a837f6d runsc/cmd: fix unintended FD closing in gofer c0460fcd
2025/10/23 08:03 8eca12250494 embeddedbinary: fix ForkExec flake c0460fcd
2025/10/22 18:52 c952130ed502 bazel: Remove WORKSPACE again c0460fcd
2025/10/22 14:42 2b0bc4aacd32 Add document for C/R wiht different CPU features. c0460fcd
2025/10/22 05:33 2b0bc4aacd32 Add document for C/R wiht different CPU features. 252fbbad
2025/10/21 16:25 e88bc9236af9 Internal change. 252fbbad
2025/10/21 07:22 9daae06f8ded sentry/kernel: unshare atomically and without holding Task.mu unnecessarily 9832ed61
2025/10/20 18:17 df97ff95ff53 Do not close processors during save, but instead close during restore. 9832ed61
2025/10/20 17:28 afee3faf017f platform/ptrace: return errors from switchToApp() rather than panicking 9832ed61
2025/10/18 11:48 afee3faf017f platform/ptrace: return errors from switchToApp() rather than panicking 19568248
2025/10/17 22:41 082860210e6b Merge pull request #12229 from dylanlanigansmith:dylanlanigansmith-fix-mknodFromTar-writing-empty-files 19568248
2025/10/17 02:48 a46c37df6e40 runsc/cmd: set Statefile.Name() to "statefile" 19568248
2025/10/16 13:39 923cb75d2443 Document how to snapshot rootfs tar and start a sandbox with the tar file. 19568248
2025/10/16 00:34 a730d6cf725b Enable rootfs only snapshot in runsc. 19568248
2025/10/15 12:30 b3f000ac172f Do not retry on invalid UDP send buffers 82df6b00
2025/10/15 00:02 be970bff650b stateio: tweak AsyncWriter.Finalize precondition b6605ba8
2025/10/14 10:50 b2b828e91b9d Merge pull request #12217 from google:dependabot/github_actions/github/codeql-action-4 b6605ba8
2025/10/13 21:48 414716c8191b Skip Docker restore tests on Docker v28+. b6605ba8
2025/10/13 10:39 b8da8ca2c0eb Internal change. b6605ba8
2025/10/11 14:15 b8da8ca2c0eb Internal change. ff1712fe
2025/10/11 01:05 828a10380162 Internal change. ff1712fe
2025/10/10 11:57 ed08c26f3c56 Internal change. ff1712fe
2025/10/09 22:54 6448c7bb13d3 Adjust WaitReasonSemacquire et al. for go1.26 ff1712fe
2025/10/09 17:27 6448c7bb13d3 Adjust WaitReasonSemacquire et al. for go1.26 7e2882b3
2025/10/08 22:58 0799336d64be Deflake IntervalTimerTest tests that relied on old kernel behavior. 7e2882b3
2025/10/07 15:41 6bf3c4885132 Internal change. 7e2882b3
2025/10/07 13:20 6bf3c4885132 Internal change. 8ef35d49
2025/10/07 00:15 903472a36836 Modify when FUSE_FLUSH is sent in FUSE implementation. 8ef35d49
2025/10/06 20:49 73f1154f95e7 stateio: add BufReader, BufWriter, IOReader, IOWriter 8ef35d49
2025/10/06 08:48 73f1154f95e7 stateio: add BufReader, BufWriter, IOReader, IOWriter 91305dbe
2025/10/04 11:24 73f1154f95e7 stateio: add BufReader, BufWriter, IOReader, IOWriter 49379ee0
2025/10/03 22:14 18edfee32572 Add async handler methods to FUSE DeviceFD. 49379ee0
2025/10/02 23:04 c7e2a2ab44b4 Check for EventRegister success before setting FileAsync.registered. 49379ee0
2025/10/02 09:58 5ad0647ea1a5 Restore WORKSPACE file. 49379ee0
2025/10/01 21:49 d660fbaa7edf Deny SOL_IP socket options for raw AF_INET6 sockets 267f56c6
2025/10/01 09:46 f943594ab08f Deflake the TestTcpdump image_test 3af39644
2025/10/01 00:19 48fd85092b41 Merge pull request #12184 from avagin:bazel-runtime-test-cache 65a0eece
2025/09/30 11:18 e1d2468af9c1 Prevent inode sharing for directory dentries by by-passing cache. 65a0eece
2025/09/30 06:38 e1d2468af9c1 Prevent inode sharing for directory dentries by by-passing cache. 86341da6
2025/09/29 17:28 dd4881af83ed Add //pkg/sentry/state/stateio and use it for async page loading. 86341da6
2025/09/29 08:07 4764db91e64f Merge pull request #12160 from avagin:bazel-mod-switch 86341da6
2025/09/26 22:11 4764db91e64f Merge pull request #12160 from avagin:bazel-mod-switch 001c9061
2025/09/26 17:33 525aa49cffd0 Add support for FUSE_DEV_IOC_CLONE. 001c9061
2025/09/26 06:02 525aa49cffd0 Add support for FUSE_DEV_IOC_CLONE. 0abd0691
2025/09/25 16:53 092d47419201 Refactor the FUSE dev->connection relationship to be many->one. 0abd0691
2025/09/25 02:56 cd3b33f93629 Merge pull request #11972 from terenceli:issue9918 0abd0691
2025/09/24 03:05 de57ab2a5822 Improvements to stuck task tool 0abd0691
2025/09/23 14:48 f3a5cc681969 Log the raw argv when launching processes e667a34f
2025/09/23 10:08 f3a5cc681969 Log the raw argv when launching processes 0ac7291c
2025/09/22 21:06 efacb45c502a fsgofer: update lastUnlockedDentry only after unlocking the dentry 0ac7291c
2025/09/22 18:13 efacb45c502a fsgofer: update lastUnlockedDentry only after unlocking the dentry 770ff59f
2025/09/22 09:04 6448dbe1b799 procfs: release the file system mutex on the error path 770ff59f
2025/09/19 08:59 6448dbe1b799 procfs: release the file system mutex on the error path 67c37560
2025/09/19 05:29 6448dbe1b799 procfs: release the file system mutex on the error path e2beed91
2025/09/18 16:20 29259326ccc9 pgalloc: one async page loader per pages file e2beed91
2025/09/18 03:08 465cdff00cf8 Merge pull request #12140 from stepancheg:patch-3 e2beed91
2025/09/17 12:39 2c49d9fd3897 kernel: fix circular locking in FSContext.destroy e2beed91
2025/09/16 23:29 20452a237b48 net/tun: Do not DecRef a closed TUN endpoint when un-persisting it. e2beed91
2025/09/16 10:27 0bb00ae3d273 Check if CtxResumeStack exists in ResumeStackFromContext. e2beed91
2025/09/15 21:13 9041e2310cf4 Allow default Docker image base to be configurable. e2beed91
2025/09/11 22:25 57697a8f6350 kernel: periodically preempt tasks when platform max concurrency is exceeded e2beed91
2025/09/11 09:10 40dfee4a1a3f Automatically enable host UDS for GCS FUSE sidecar containers. e2beed91
2025/09/10 21:15 f9ecfd997b86 Close the controlFD used to fstat upon an inode cache hit fdeaa69b
2025/09/10 08:09 3eb1b76e083f Add functionality to deserialize a tar archive to rootfs upper layer. fdeaa69b
2025/09/09 18:52 e51dca431b51 Remove old NICs and routes during save/restore. fdeaa69b
2025/09/09 12:06 d6ba9944e431 Don't silently drop errors from tcp.Endpoint.handleListenSegment(). d291dd2d
2025/09/08 23:01 fa4149d75b5e Merge pull request #12121 from google:dependabot/github_actions/actions/labeler-6 d291dd2d
2025/09/06 05:40 fde8adbe9829 Do not save loopback NIC, it is already being set in ReplaceConfig. d291dd2d
2025/09/05 16:26 2f7f776a4464 Automated rollback of changelist 798788535 d291dd2d
2025/09/04 23:29 16e9064d97c6 Add better panic message for when file type changes without ino number changing d291dd2d
2025/09/04 02:33 1f322159d285 Update LLVM version to llvm/llvm-project@cb2f0d0a5f14. d291dd2d
2025/09/03 18:03 b3f689ce6cd2 Integrate LLVM at llvm/llvm-project@cb2f0d0a5f14 19216959
2025/09/03 14:24 376319f48048 Change `metric.fieldMapper` methods to use pointer receivers. 19216959
2025/08/30 07:34 376319f48048 Change `metric.fieldMapper` methods to use pointer receivers. 807a3b61
2025/08/29 18:16 1b291cbddc47 Remove obsolete TODOs related to hard links in gofer. 807a3b61
2025/08/29 06:18 2f9565b48833 Merge pull request #12075 from cuiweixie:reflect.TypeFor 3e1beec6
2025/08/28 18:07 1826627343ba kvm: ensure hint address > 1<<47 when necessary d401b9d7
2025/08/28 08:54 bb664f219b9c Exclude failing Java test. bee60a83
2025/08/26 13:32 bb664f219b9c Exclude failing Java test. e12e5ba4
2025/08/22 00:46 bb664f219b9c Exclude failing Java test. bf27483f
2025/08/21 12:45 bb664f219b9c Exclude failing Java test. fd2d17b5
2025/08/20 23:22 bb664f219b9c Exclude failing Java test. 0b9605c8
2025/08/20 19:47 bb664f219b9c Exclude failing Java test. bd178e57
2025/08/20 11:20 c07c524742a7 Add IOCTL NV2080_CTRL_CMD_FB_QUERY_DRAM_ENCRYPTION_STATUS bd178e57
2025/08/19 21:07 c07c524742a7 Add IOCTL NV2080_CTRL_CMD_FB_QUERY_DRAM_ENCRYPTION_STATUS 79512909
2025/08/19 09:04 5ba23728415e Merge pull request #11996 from ioterw:shebang 523f460e
2025/08/19 00:02 14ff9abbd639 gpu: Remove `--cuda_verify_compatibility` flag. 6e8d317a
2025/08/18 20:55 fc2f4df6597a netstack: set loopback as outgoing NIC for local traffic 6e8d317a
2025/08/16 20:22 fc2f4df6597a netstack: set loopback as outgoing NIC for local traffic 1804e95e
2025/08/16 02:20 5077500e6bee Merge pull request #11983 from stepancheg:pid-file-2 1804e95e
2025/08/15 13:10 e52b1fccd404 Internal change. 1804e95e
2025/08/15 00:03 305c56d5e91a Support batch messages for NETFILTER sockets. 1804e95e
2025/08/14 11:47 14f317c025b1 Fix docker tests in image_test. dcc075fb
2025/08/14 07:56 14f317c025b1 Fix docker tests in image_test. 22ec1469
2025/08/13 18:46 3cc1182c9d37 Merge pull request #12029 from stepancheg:go-mod-go-branch 22ec1469
2025/08/13 05:37 040777766f38 Merge pull request #11498 from tianyuzhou95:albert/cpuid 22ec1469
2025/08/12 16:27 be7706f521ac Internal change. 22ec1469
2025/08/12 14:05 1f31ba17e085 Hard links Support Phase 1: Gofer Client dentry/inode refactor 22ec1469
2025/08/11 19:14 1f31ba17e085 Hard links Support Phase 1: Gofer Client dentry/inode refactor c06e8995
2025/08/11 17:13 a9049fb95720 Update nvidia_driver_differ to also check ioctl numbers. c06e8995
2025/08/10 19:17 a9049fb95720 Update nvidia_driver_differ to also check ioctl numbers. 32a0e5ed
2025/08/08 22:21 d54f31a72b1d nvproxy: Fix ioctl number inconsistencies in the version table. 32a0e5ed
2025/08/08 10:31 b5a53651c3eb nvproxy: Add 535.261.03 and 570.172.08 drivers. 56444e07
2025/08/07 22:18 dc7d71f37d12 Introduce IoctlInfo to provide information about an ioctl. 6a893178
2025/08/07 10:19 50318415e83d Fix typo 04cffc22
2025/08/06 22:16 7048e11fa6c3 Put some BugTracebacks in Systrap. 9a42d6b1
2025/08/06 10:15 2099bc1c6a2e Rename WARN* functions to BugTraceback*, and optimize them for inlining. 4bd24a3e
2025/08/05 21:52 1fb4c0861973 Fix leaking /proc/self/mem of a new process after execve. ffe1dd46
2025/08/05 09:40 094dd52cea4a kernel: handle MemoryManager().Activate() errors 37880f40
2025/08/04 21:16 153f262575a6 nvproxy: Add support for NV_SEMAPHORE_SURFACE_CTRL_CMD_UNBIND_CHANNEL. f5bcc8dc
2025/08/04 09:13 67b57f6fa0de Internal change. abdcb213
2025/08/04 07:40 67b57f6fa0de Internal change. 7368264b
2025/08/02 13:50 fc9c972fa636 runsc: Enable cpu-num-from-quota by default 7368264b
2025/08/02 00:49 cecb151fab97 Nftables NEW_RULE implementation. 7368264b
2025/08/01 18:55 cecb151fab97 Nftables NEW_RULE implementation. 40127d41
2025/08/01 12:47 6cadfa6c8fe1 Fix: Ensure that unbound Netlink sockets are bound when sending a message. 40127d41
2025/08/01 00:44 6cadfa6c8fe1 Fix: Ensure that unbound Netlink sockets are bound when sending a message. 0c075d67
2025/07/31 22:10 6cadfa6c8fe1 Fix: Ensure that unbound Netlink sockets are bound when sending a message. 3526e777
2025/07/31 12:43 3e0b53db6936 Clean up p9 package. 3526e777
2025/07/31 03:37 3e0b53db6936 Clean up p9 package. f8f2b4da
2025/07/30 14:25 14c22da65f04 Serialize writes to slice of precompiled seccomp programs. f8f2b4da
2025/07/30 01:10 2305d33da145 tmpfs: Skip socket files when generating tar archive. f8f2b4da
2025/07/29 19:43 2305d33da145 tmpfs: Skip socket files when generating tar archive. ba28e0a8
2025/07/29 13:08 da240c1787ac nvproxy: Add support for missing ioctls required to run vulkaninfo. ba28e0a8
2025/07/29 01:06 da240c1787ac nvproxy: Add support for missing ioctls required to run vulkaninfo. c4a95487
2025/07/28 23:04 da240c1787ac nvproxy: Add support for missing ioctls required to run vulkaninfo. 6654ea9c
2025/07/28 13:04 8a89a2fab4a2 vfs: call UnregisterFileAsyncHandler before FileDescriptionImpl.Release 6654ea9c
2025/07/26 13:53 8a89a2fab4a2 vfs: call UnregisterFileAsyncHandler before FileDescriptionImpl.Release fb8f743d
2025/07/26 00:41 d693cf4637f2 aio: add LinuxQueue fb8f743d
2025/07/25 11:31 88f0a2610332 Install docker compose plugin in gVisor's dind image. fb8f743d
2025/07/24 22:23 d48212e236c1 No need to lock packetEPsMu in newNIC. fb8f743d
2025/07/24 21:00 d335069c7ec4 Nftables support handles for rules. fb8f743d
2025/07/24 12:19 d335069c7ec4 Nftables support handles for rules. 65d60d73
2025/07/24 00:31 d335069c7ec4 Nftables support handles for rules. 0c1d6ded
2025/07/23 12:25 2ec68434d7cd Update seccomp filters to support new kernels e0b9ac93
2025/07/23 00:25 5425fb79c305 Create a small DSL for streamlining nftables request creation for tests. e1dd4f22
2025/07/22 12:12 00a6e4d5e555 `specutils`: Add function to allow logging to a custom logger function. af30dea9
2025/07/22 11:09 00a6e4d5e555 `specutils`: Add function to allow logging to a custom logger function. 1555463b
2025/07/21 22:01 304075324c8b `iperf_test`: Better debug logging on failure. 1555463b
2025/07/21 18:01 304075324c8b `iperf_test`: Better debug logging on failure. 56d87229
2025/07/21 09:59 9ea209fd11eb Fix directfs restore for deleted regular file when read handle is not available 56d87229
2025/07/20 04:17 9ea209fd11eb Fix directfs restore for deleted regular file when read handle is not available f550e092
2025/07/18 23:55 d7830d968c56 Implement functionality for Nftables GetChain message. f550e092
2025/07/18 10:33 db69f0048be5 PGO benchmarks: Only run a representative subset of benchmark tests. f550e092
2025/07/18 10:30 db69f0048be5 PGO benchmarks: Only run a representative subset of benchmark tests. 88248e14
2025/07/17 21:10 da551ec98173 Add mutex locking to netfilter socket operations with nftables. 88248e14
2025/07/17 08:52 728dc484bcb5 Nftables New Chain implementation 89164500
2025/07/17 07:50 728dc484bcb5 Nftables New Chain implementation 44f8051e
2025/07/16 18:45 128211909518 gofer: Support restore of deleted directories whose original path is occupied. 44f8051e
2025/07/16 06:37 3b6e02d26316 overlay: return st_nlink=1 for directories 124ec9cc
2025/07/16 01:16 3b6e02d26316 overlay: return st_nlink=1 for directories 03fcfc4b
2025/07/15 12:15 e35f63555772 Merge pull request #11924 from geekvest:master 03fcfc4b
2025/07/14 22:55 c2f9f2752729 Merge pull request #11850 from OkamiW:udp-forwarder-not-handled-packets 03fcfc4b
2025/07/14 22:14 c2f9f2752729 Merge pull request #11850 from OkamiW:udp-forwarder-not-handled-packets c812f99c
2025/07/14 10:54 7323f1df8aad Add tests that run docker exec command in gvisor. c812f99c
2025/07/10 23:04 7323f1df8aad Add tests that run docker exec command in gvisor. 3cda49cf
2025/07/10 21:18 d83988551b75 Make nccl and sr tests work on ARM 3cda49cf
2025/07/10 09:17 d83988551b75 Make nccl and sr tests work on ARM d7384b6d
2025/07/10 07:25 d83988551b75 Make nccl and sr tests work on ARM 956bd956
2025/07/09 18:15 bb08e9604675 Make GPU smoke tests work on ARM 956bd956
2025/07/09 14:14 237f2d7dcb80 Make env flag for runsc exec non idempotent. 956bd956
2025/07/09 02:15 237f2d7dcb80 Make env flag for runsc exec non idempotent. f4e5e155
2025/07/08 13:59 4a238a4a1092 `profiletool merge`: Skip empty profile files. 4d9fdfa4
2025/07/08 12:18 4a238a4a1092 `profiletool merge`: Skip empty profile files. 4f67c4ae
2025/07/07 23:06 2a88b274d3a1 Fix duplicate "dev.gvisor" in AnnotationsContainerNameRemapIgnored test. 4f67c4ae
2025/07/07 08:36 8f111be351b5 Wait for main MF loading to start before writing to it during restore. 4f67c4ae
2025/07/04 18:14 85e76111eb28 Merge pull request #11557 from JiaHuann:master 4f67c4ae
2025/07/04 00:10 85e76111eb28 Merge pull request #11557 from JiaHuann:master 76ad128c
2025/07/03 12:08 85e76111eb28 Merge pull request #11557 from JiaHuann:master a3c808e4
2025/07/03 00:13 85e76111eb28 Merge pull request #11557 from JiaHuann:master 115ceea7
2025/07/02 12:03 902e88ff9314 Docker tests and benchmarks: Remove use of exposed ports. 0cd59a8f
2025/07/02 00:10 a437d8d9cf64 Merge pull request #11878 from sellskin:master bc80e4f0
2025/07/01 11:54 8a1a0408af54 gofer: Ensure mount flags are applied for bind mounts 091a06cd
2025/07/01 09:33 8a1a0408af54 gofer: Ensure mount flags are applied for bind mounts 6e83b42d
2025/06/30 20:30 09c224c05be4 sentry/kernel: don't use Task.mu to protect Task.creds 6e83b42d
2025/06/30 15:22 501a6637cc98 sentry/kernel: allow pending signal sets to be read without locking 6e83b42d
2025/06/28 10:41 501a6637cc98 sentry/kernel: allow pending signal sets to be read without locking fc9d8ee5
2025/06/27 21:37 075576a027e1 Run more benchmarks for PGO profiling. fc9d8ee5
2025/06/27 18:13 075576a027e1 Run more benchmarks for PGO profiling. 803ce19b
2025/06/27 00:24 81a6e524f55d Add test coverage for docker build command in gVisor. 803ce19b
2025/06/26 12:23 6d7f0749eb7f PGO: Create profile data for KVM platform as well. ba7e550f
2025/06/26 00:40 f8854c4e9ba7 Move PGO profile data to `runsc/profiles/data`. 26d77996
2025/06/25 04:24 ca812bcd892b PGO update: Parse flags more correctly. 26d77996
2025/06/24 15:19 2c0b7e7f37f7 Internal change. 26d77996
2025/06/24 09:08 2c0b7e7f37f7 Internal change. 1a7fb460
2025/06/23 17:04 ccbefce31242 PGO update: Only skip when there is no change in `runsc/profiles`. 1a7fb460
2025/06/22 00:19 ccbefce31242 PGO update: Only skip when there is no change in `runsc/profiles`. d6cdfb8a
2025/06/21 00:10 f667ab467441 Typo fix. d6cdfb8a
2025/06/20 20:32 f667ab467441 Typo fix. 804b3919
2025/06/20 12:08 85c27ad0efac PGO: Don't re-run benchmarks if their results will be discarded. 804b3919
2025/06/19 00:45 85c27ad0efac PGO: Don't re-run benchmarks if their results will be discarded. ed3e87f7
2025/06/18 23:39 85c27ad0efac PGO: Don't re-run benchmarks if their results will be discarded. ca631f70
2025/06/18 12:44 95d875276806 Merge pull request #11822 from google:pgo/update-2025-06-17 ca631f70
2025/06/18 00:44 95d875276806 Merge pull request #11822 from google:pgo/update-2025-06-17 e77fae15
2025/06/17 12:52 0277f27bb469 Create PGO pull requests non-interactively. a5686133
2025/06/17 00:38 9473f2d16d4b PGO update script: Connect to GitHub over HTTPS rather than SSH. cfebc887
2025/06/16 21:02 9473f2d16d4b PGO update script: Connect to GitHub over HTTPS rather than SSH. d1716036
2025/06/16 12:36 03a93e960bfc Isolate NETLINK_NETFILTER socket behavior behind the nftables flag in runsc. d1716036
2025/06/15 03:25 03a93e960bfc Isolate NETLINK_NETFILTER socket behavior behind the nftables flag in runsc. 5f4b362d
2025/06/14 14:23 550b7eb983d0 Move PGO git logistics to a dedicated script. 5f4b362d
2025/06/14 14:21 550b7eb983d0 Move PGO git logistics to a dedicated script. 0e8da31f
2025/06/14 00:52 2a2d4ae23b3b Refactor nftables package and exposed it to tcpip/stack/ 0e8da31f
2025/06/13 19:01 2a2d4ae23b3b Refactor nftables package and exposed it to tcpip/stack/ 1f72c409
2025/06/13 12:50 fb842aab7730 Reduce max thread count in nginx and wordpress benchmarks. 1f72c409
2025/06/13 02:55 fb842aab7730 Reduce max thread count in nginx and wordpress benchmarks. 98683f8f
2025/06/12 04:06 cbf278951e7e Remove environment hook from BuildKite `hooks` directory. 98683f8f
2025/06/11 14:35 84c77aa8ad7e netstack: Don't treat ipv4 link-local addresses specially 98683f8f
2025/06/11 14:20 84c77aa8ad7e netstack: Don't treat ipv4 link-local addresses specially 5d7e17ca
2025/06/10 21:34 54eb14963e63 Refactoring nftables package 5d7e17ca
2025/06/10 11:26 e3c4c4cad86f gofer: Support restore of deleted files whose original path is occupied. 5d7e17ca
2025/06/07 09:29 e3c4c4cad86f gofer: Support restore of deleted files whose original path is occupied. 4826c28e
2025/06/06 20:11 718734347393 Add instructions on DNS config to run docker in gVisor on GKE autopilot. 4826c28e
2025/06/06 08:08 a6711d1e1dc6 runsc/do: allow to add host bind-mounts 3d899f2c
2025/06/06 02:45 a6711d1e1dc6 runsc/do: allow to add host bind-mounts 6b6b5f21
2025/06/05 13:23 6b5372dfb38e Add cuda_tests to gke_tester 6b6b5f21
2025/06/05 00:13 f2d2ff78b0fe Ignore sysmsg `tgkill` errors if the sysmsg thread is already dead. 6b6b5f21
2025/06/04 20:32 b14059d714d7 Merge pull request #11723 from stepancheg:overlay-size 6b6b5f21
2025/06/04 08:41 b14059d714d7 Merge pull request #11723 from stepancheg:overlay-size e565f08d
2025/06/03 23:26 e888aa733876 Pass the container name to SpecEnviron instead of container ID. a30356b7
2025/06/03 10:08 45108140e4ad nvproxy: Add support for 535.129.03. a30356b7
2025/06/02 21:07 de16a81be39e Do not support netstack s/r for NetworkPlugin mode. a30356b7
2025/06/02 20:49 de16a81be39e Do not support netstack s/r for NetworkPlugin mode. aaaaf5ea
2025/06/02 09:05 c8952f75963b Add support for executing a binary before saving and after restoring. aaaaf5ea
2025/05/30 04:50 c8952f75963b Add support for executing a binary before saving and after restoring. 3d2f584d
2025/05/29 15:39 609fac8bc6fe packetimpact: ignore retransmitted SYNACK on Linux 3d2f584d
2025/05/28 20:09 33d4ca3a0ff5 Allow sched_getaffinity in syscall filters 3d2f584d
2025/05/28 15:08 96ca35d001c2 Merge pull request #11760 from fjvela:master 3d2f584d
2025/05/26 23:05 96ca35d001c2 Merge pull request #11760 from fjvela:master 874a1386
2025/05/26 11:04 96ca35d001c2 Merge pull request #11760 from fjvela:master 06877188
2025/05/25 17:12 96ca35d001c2 Merge pull request #11760 from fjvela:master 2d4582d0
2025/05/24 08:57 96ca35d001c2 Merge pull request #11760 from fjvela:master ed351ea7
2025/05/23 19:49 a2f865c94d39 Adjust WaitReasonSemacquire for go1.25 ed351ea7
2025/05/23 16:34 a2f865c94d39 Adjust WaitReasonSemacquire for go1.25 fa44301a
2025/05/23 00:24 9034347e1ed3 Accept EMSGSIZE in native run for RawPacketMsgSizeTest.SpliceTooLong. fa44301a
2025/05/22 22:30 ab9666dc3464 Handle non-empty EmptyDirs used by GCS Fuse CSI Driver. fa44301a
2025/05/22 17:19 ab9666dc3464 Handle non-empty EmptyDirs used by GCS Fuse CSI Driver. 0919b50b
2025/05/22 03:52 a178e09bb804 Fix handling of file capabilities. 0919b50b
2025/05/21 17:03 f2d25699acbc Merge pull request #11754 from thundergolfer:patch-1 f6063999
2025/05/21 15:36 d495ebfe89e1 tcp: use lockdep mutexes f6063999
2025/05/21 02:22 d495ebfe89e1 tcp: use lockdep mutexes b47f9e02
2025/05/20 13:12 c8e7b674568f Adjust runtime schedt.nmspinning offset for go1.25 b47f9e02
2025/05/20 09:59 d19c3bc9bcdf runsc: create file as destination for file mount b47f9e02
2025/05/19 21:57 d19c3bc9bcdf runsc: create file as destination for file mount b84f0537
2025/05/19 09:54 d19c3bc9bcdf runsc: create file as destination for file mount 27f68995
2025/05/17 13:08 d19c3bc9bcdf runsc: create file as destination for file mount f41472b0
2025/05/16 23:58 16bb0d3588bf Merge pull request #11729 from stepancheg:constant f41472b0
2025/05/16 18:16 d30c58e5b8a4 Add (probably broken) BuildKite pipeline for refreshing PGO profiles. f41472b0
2025/05/15 22:13 d30c58e5b8a4 Add (probably broken) BuildKite pipeline for refreshing PGO profiles. cfde8269
2025/05/13 07:11 ab0097c4d068 Merge pull request #11716 from avagin:build-runsc 9497799b
2025/05/12 19:56 d7ad8517a3cd proc: Allow to write into /proc/pid/mem f6671af7
2025/05/12 15:55 e4c059533a2a Ignore container name remap annotations during spec validation. f6671af7
2025/05/10 12:10 e4c059533a2a Ignore container name remap annotations during spec validation. 77908e5f
2025/05/09 23:00 40988f13e6b2 Add CUDA 12.8 tests 77908e5f
2025/05/09 21:17 f585db6bbfc5 Provide flag to disable syscall patching (aka syscall fastpath) in Systrap. 77908e5f
2025/05/09 09:16 f585db6bbfc5 Provide flag to disable syscall patching (aka syscall fastpath) in Systrap. 03411e4e
2025/05/09 00:48 f585db6bbfc5 Provide flag to disable syscall patching (aka syscall fastpath) in Systrap. bb813bcc
2025/05/08 17:32 06acafc42203 nvproxy: Add support for 535.247.01 and 570.133.20. bb813bcc
2025/05/08 08:58 06acafc42203 nvproxy: Add support for 535.247.01 and 570.133.20. dbf35fa1
2025/05/07 19:38 0bf11c160ca6 netstack/tuntap: implement the IFF_TUN_EXCL flag dbf35fa1
2025/05/07 14:08 f56929a6872c Lock around grabbing the version and hdrLen in packetmmap. dbf35fa1
2025/05/07 04:04 f56929a6872c Lock around grabbing the version and hdrLen in packetmmap. 350f4ffc
2025/05/06 14:36 3e5886fba408 Split cuda tests into separate lib. 350f4ffc
2025/05/06 09:15 3e5886fba408 Split cuda tests into separate lib. ae98e6b9
2025/05/05 20:13 6750bae81956 kvm, eventfd: support KVM_IOEVENTFD ae98e6b9
2025/05/05 18:27 6750bae81956 kvm, eventfd: support KVM_IOEVENTFD 6ca47dd8
2025/05/05 08:10 5c4b4f51c72e kvm/arm64: queue DABT (Data Abort) to force Sentry returning to the host 6ca47dd8
2025/05/03 09:55 5c4b4f51c72e kvm/arm64: queue DABT (Data Abort) to force Sentry returning to the host b0714e37
2025/05/02 20:50 0c66b7ecfcb3 Use `vfs_cap_data` and `vfs_ns_cap_data` structs defined in linux header. b0714e37
2025/05/02 08:21 5790f690667a lock around getting the current time from the stack. d7f099d1
2025/05/02 02:18 5790f690667a lock around getting the current time from the stack. 51b137cd
2025/05/01 13:01 5dfdea843cf7 Follow-up fixes for #11644 51b137cd
2025/05/01 00:53 8090bc48517d Merge pull request #11609 from Amaindex:master ce7952f4
2025/04/30 19:21 8090bc48517d Merge pull request #11609 from Amaindex:master 937aafd7
2025/04/30 12:51 e5f387569031 Add more paths for which to run all GPU tests. 937aafd7
2025/04/30 00:44 e5f387569031 Add more paths for which to run all GPU tests. 85a5a23f
2025/04/29 12:37 8d061298ccd2 Remove version flag from checking driver version 4a62c0b1
2025/04/29 08:25 8d061298ccd2 Remove version flag from checking driver version aeb6ec69
2025/04/28 19:19 066d932b8e96 Release port for non listening sockets which are bound with `any` address. aeb6ec69
2025/04/28 17:24 58415ad1a884 `starttime`: Get process start time from `/proc/self/status` if possible. aeb6ec69
2025/04/28 05:38 58415ad1a884 `starttime`: Get process start time from `/proc/self/status` if possible. c6b4fb39
2025/04/27 16:29 90ce1abe0986 Implement a `timing` library that can time a multi-goroutine procedure. c6b4fb39
2025/04/26 12:28 60ec4e7a009d Add 12.8 CUDA tests c6b4fb39
2025/04/25 23:20 27f3984c948b hostinet: Add SO_ORIGINAL_DST and IP6T_ORIGINAL_DST. c6b4fb39
2025/04/25 21:06 73c74424ac82 bazel/rules_go: don't revert commits c6b4fb39
2025/04/25 09:47 73c74424ac82 bazel/rules_go: don't revert commits dea5c7e4
2025/04/24 21:03 fa40546ede1c Clone dpdk from github e3715315
2025/04/24 16:43 fa40546ede1c Clone dpdk from github 9c80ffa0
2025/04/24 09:01 a70f559c9398 cpuid: don't "normalize" to a smaller XSAVE area size 9c80ffa0
2025/04/23 20:57 a70f559c9398 cpuid: don't "normalize" to a smaller XSAVE area size 9882047a
2025/04/23 09:07 a70f559c9398 cpuid: don't "normalize" to a smaller XSAVE area size 57d54c08
2025/04/22 20:59 49b9d83fc867 Consolidate helper functions around unimplemented socket option metrics 53a8b9bd
2025/04/22 12:51 bc724d81d2f7 Avoid a deadlock in packet endpoint's Close method. 53a8b9bd
2025/04/22 00:32 bc724d81d2f7 Avoid a deadlock in packet endpoint's Close method. 2a20f901
2025/04/21 09:10 ee3684df7b91 Use github.com/opencontainers/runtime-spec@v1.2.0 2a20f901
2025/04/19 14:58 f45c79e15a27 Add `/proc/gvisor/kernel_is_gvisor` marker file used to detect gVisor. 2a20f901
2025/04/19 01:40 4b740a7ffafd Add initial BLACKWELL IOCTLs 2a20f901
2025/04/17 23:53 cd8fcab3446c Fix range check on socket option counter metric. 2a20f901
2025/04/17 20:19 9ed8cea8943c Skip GPU tests in continuous build if files have not been touched. 2a20f901
2025/04/17 08:24 9ed8cea8943c Skip GPU tests in continuous build if files have not been touched. 552876f8
2025/04/16 23:32 bc9c16529425 Add a metric to track unimplemented setsockopt options. a95239b1
2025/04/16 10:12 b0adacc40e21 Deflake TestUsageFD. a95239b1
2025/04/15 20:56 eae549dc581a Fix overflow in tcp.sender.sendData() for 32-bit architectures. a95239b1
2025/04/15 08:39 56cb97e8777d Merge pull request #11637 from Snowflake-Labs:jyin-ioctl-fix 85125322
2025/04/15 03:32 56cb97e8777d Merge pull request #11637 from Snowflake-Labs:jyin-ioctl-fix 0bd6db41
2025/04/11 23:04 9cc0e9f85e6f De-dup testMultiContainerCheckpointRestore(). 0bd6db41
2025/04/11 11:06 a84be6555251 Skip expensive GPU tests from main pipeline for non-GPU-related changes. 12ba9c21
2025/04/10 22:56 3b4f4acdf32c Don't allow reinit of already mapped packet mmap endpoints. 94486846
2025/04/10 21:59 3b4f4acdf32c Don't allow reinit of already mapped packet mmap endpoints. 1ef3ab4d
2025/04/10 10:53 3b2cca27c7e6 Add IOCTLS so earlier driver versions pass nvidia-smi test 1ef3ab4d
2025/04/10 00:21 3b2cca27c7e6 Add IOCTLS so earlier driver versions pass nvidia-smi test 988b336c
2025/04/09 21:01 f2ed32acf6ba Exclude more runtime tests that fail with IPv6. 988b336c
2025/04/09 08:58 f2ed32acf6ba Exclude more runtime tests that fail with IPv6. 47d015b1
2025/04/08 20:59 f2ed32acf6ba Exclude more runtime tests that fail with IPv6. b133e63a
2025/04/08 09:16 f47013e0fa72 Add back 'nvidia-smi' test in gpu-smoke-tests a775275d
2025/04/07 20:52 9078ddaf6a6f Clean up state file reading. a2ada0e7
2025/04/07 08:39 7ff7451cb52d Add more debug logging for host settings. 2f0c9720
2025/04/05 05:52 7ff7451cb52d Add more debug logging for host settings. 1c65791e
2025/04/04 19:07 b1b7c02aa785 Add a test to check getifaddrs returns IPv4 address followed by IPv6. c53ea9c9
2025/04/04 15:12 7fb3b706c0e4 Read pages from the main MemoryFile as early as possible during restore c53ea9c9
2025/04/04 03:10 7fb3b706c0e4 Read pages from the main MemoryFile as early as possible during restore 1740c707
2025/04/03 23:44 7fb3b706c0e4 Read pages from the main MemoryFile as early as possible during restore d7ae3a11
2025/04/03 15:08 0236fdeb6bb9 Add annotation to allow container name remap d7ae3a11
2025/04/03 03:05 0236fdeb6bb9 Add annotation to allow container name remap 996a9618
2025/04/02 20:23 845fa645b0cd Fix the order of primary addresses returned for a NIC. b0cc4801
2025/04/02 15:02 6b2bcc44e061 Disable more JAVA runtime tests that require IPV6_MULTICAST_IF support. b0cc4801
2025/04/01 23:30 6b2bcc44e061 Disable more JAVA runtime tests that require IPV6_MULTICAST_IF support. c799dfdd
2025/04/01 11:28 6b2bcc44e061 Disable more JAVA runtime tests that require IPV6_MULTICAST_IF support. b8645499
2025/04/01 08:04 6b2bcc44e061 Disable more JAVA runtime tests that require IPV6_MULTICAST_IF support. 36d76a97
2025/03/31 18:43 8221e477b5c4 Protect Task.ptraceSeized with TaskSet mutex and Signal mutex. 36d76a97
2025/03/31 18:14 8221e477b5c4 Protect Task.ptraceSeized with TaskSet mutex and Signal mutex. d3999433
2025/03/29 10:57 d06b27e25f95 Disable JAVA tests that require IPV6_MULTICAST_IF support. d3999433
2025/03/29 10:50 d06b27e25f95 Disable JAVA tests that require IPV6_MULTICAST_IF support. cf25e2c2
2025/03/28 21:21 7a07e2777a48 Merge pull request #11590 from xianzhe-databricks:fix-hang-with-subprocess-death cf25e2c2
2025/03/28 09:10 836c7d672f2a Deflake TestUsage. 49900278
2025/03/28 03:00 836c7d672f2a Deflake TestUsage. 6c09fb82
2025/03/27 13:29 523c82ffd030 Fix restore logic in PRead. 6c09fb82
2025/03/27 01:05 5a21467bcbec tests: don't specify ports for docker containers 20510e88
2025/03/26 12:49 b5f9bed90840 Move nvproxy.objsMu to rootClient. 19e40f48
2025/03/26 10:00 b5f9bed90840 Move nvproxy.objsMu to rootClient. 89d30d73
2025/03/25 20:17 35686886763c pgalloc: avoid unnecessary aplOp allocation in async page loading 89d30d73
2025/03/25 10:18 22ef76efa9bf mm: allow shared anonymous mappings to use huge pages 875573af
2025/03/24 21:09 99749bc5d4fd Merge pull request #11563 from NahumLitvin:patch-1 875573af
2025/03/23 22:41 3a9ba1735157 Fix device FD reference leaks and add support for VFIO_GROUP_UNSET_CONTAINER. 875573af
2025/03/22 09:20 3a9ba1735157 Fix device FD reference leaks and add support for VFIO_GROUP_UNSET_CONTAINER. 3b7445cf
2025/03/21 20:05 225a7bc0d28a Internal change. 3b7445cf
2025/03/20 23:22 738e1d995f64 nvproxy: Add HasStatus.SetStatus and provide failWithStatus() util functions. 3b7445cf
2025/03/19 22:32 c16d3fdfadf8 pgalloc: log async page loading progress and info about awaited loads 3b7445cf
2025/03/19 16:26 97820ce5c927 nvproxy: Add support for 570.124.06. 3b7445cf
2025/03/19 04:34 97820ce5c927 nvproxy: Add support for 570.124.06. 8d0a2921
2025/03/18 17:31 25d30ccc2c2e Merge pull request #11529 from tianyuzhou95:albert/mmap-test 22a6c2b1
2025/03/18 16:22 8d5f3c982aeb Handle sighandling.KillItself() return error. 22a6c2b1
2025/03/18 04:32 8d5f3c982aeb Handle sighandling.KillItself() return error. ce3352cd
2025/03/17 18:02 e6b6f2aa1172 Allow IPv6 addresses to be enabled/disabled in runsc based on the sysctl. 489e2dc8
2025/03/17 16:19 6b0a0af86294 Implement basic packet mode support for ptys. 489e2dc8
2025/03/17 04:18 6b0a0af86294 Implement basic packet mode support for ptys. 948c34e4
2025/03/15 16:32 6b0a0af86294 Implement basic packet mode support for ptys. e2826670
2025/03/14 07:41 b01944883bfc Add memmap.File.MemoryType() e2826670
2025/03/13 18:39 06f225496253 Deflake TestExecProcList. e2826670
2025/03/13 06:49 906fb319cc3a nvproxy: Add option to use the device gofer optionally. 44be8b44
2025/03/12 18:24 c68fb3199281 Save runsc version in the metadata during save to compare it during restore. 1a5d9317
2025/03/12 17:06 c68fb3199281 Save runsc version in the metadata during save to compare it during restore. ee70e6db
2025/03/12 03:41 f9b1ce2f7dab Clean up tty.CheckChange and call it in SetForegroundProcessGroup. ee70e6db
2025/03/12 00:24 f9b1ce2f7dab Clean up tty.CheckChange and call it in SetForegroundProcessGroup. f2eee6b3
2025/03/11 15:40 c16484e6e83e Reduce the number of containerd tests in buildkite pipelines. f2eee6b3
2025/03/11 00:21 c16484e6e83e Reduce the number of containerd tests in buildkite pipelines. 16256247
2025/03/10 12:06 44b97373471a Increase GOMAXPROCS during aio.GoQueue usage 16256247
2025/03/09 08:47 44b97373471a Increase GOMAXPROCS during aio.GoQueue usage 163f510d
2025/03/08 22:21 815317032022 nvproxy: reduce kernel mmap_lock contention from rmAllocOSDescriptor() 163f510d
2025/03/07 23:57 815317032022 nvproxy: reduce kernel mmap_lock contention from rmAllocOSDescriptor() 7e3bd60d
2025/03/07 10:47 9581066c3038 Clone the packet during ipv6 processing. 7e3bd60d
2025/03/07 10:27 9581066c3038 Clone the packet during ipv6 processing. 831e3629
2025/03/06 21:19 c041d9bd5855 Add missing binary_sha256 field 831e3629
2025/03/06 08:02 156f457e28d2 Add kernel.ThreadGroup.ForEachTask(). 831e3629
2025/03/05 20:06 df6a53734659 Make it possible to pass internal /dev/null via control.Proc.Exec* 034534df
2025/03/05 08:16 521cc86a91e0 Use the minimum recommended version of cri-tools for containerd tests. 60f5d8d9
2025/03/04 21:54 7d4b4bd634a1 Merge pull request #11495 from zkoopmans:cuda c3901742
2025/03/04 08:42 c05061997149 Fix spec validation for entrypoint. c3901742
2025/03/03 19:23 0c17600995b9 Fix restore with pending exec session c3901742
2025/03/01 15:07 d71a9b3df5c7 gofer: fix ref drop when racily-unlinked synthetic file is invalidated c3901742
2025/03/01 12:56 d71a9b3df5c7 gofer: fix ref drop when racily-unlinked synthetic file is invalidated 67cf5345
2025/02/28 23:44 3885a281f2ae test: add syscall_test() perf argument 67cf5345
2025/02/28 16:05 fa0fbae6fb96 Fix Go workflow with permissions needed to write to PR statuses. 1e7a43e1
2025/02/28 11:39 86abc85f37d5 Merge pull request #11473 from Champ-Goblem:shim-add-cgroup-v2-metrics-support 1e7a43e1
2025/02/26 15:34 86abc85f37d5 Merge pull request #11473 from Champ-Goblem:shim-add-cgroup-v2-metrics-support 6a8fcbc4
2025/02/25 23:38 86abc85f37d5 Merge pull request #11473 from Champ-Goblem:shim-add-cgroup-v2-metrics-support d34966d1
2025/02/21 17:42 84670a4fc612 gofer: Fix bug when casting auth.K{U/G}ID to int. d34966d1
2025/02/20 17:00 84670a4fc612 gofer: Fix bug when casting auth.K{U/G}ID to int. 0808a665
2025/02/19 22:37 84670a4fc612 gofer: Fix bug when casting auth.K{U/G}ID to int. 50668798
2025/02/19 10:35 84670a4fc612 gofer: Fix bug when casting auth.K{U/G}ID to int. cbd8edab
2025/02/18 20:43 84670a4fc612 gofer: Fix bug when casting auth.K{U/G}ID to int. 9a14138f
2025/02/18 18:24 84670a4fc612 gofer: Fix bug when casting auth.K{U/G}ID to int. c37c7249
2025/02/18 08:41 17563a8af926 Return EACCES when calling setpgid() after execve() c37c7249
2025/02/17 20:39 17563a8af926 Return EACCES when calling setpgid() after execve() 429ea007
2025/02/17 08:37 17563a8af926 Return EACCES when calling setpgid() after execve() 4121cf9d
2025/02/15 11:52 17563a8af926 Return EACCES when calling setpgid() after execve() 40a34ec9
2025/02/14 22:45 67b2e7327f79 gofer: Cleanup unlock code. 40a34ec9
2025/02/14 11:05 d05a277ca3a1 Add checkpoint restore metrics. fe17639f
2025/02/13 22:17 6b4f0082c280 nvproxy: Add support for AMPERE_A, ADA_A, HOPPER_A. d9a046cf
2025/02/13 10:16 c8d5afe1d21c Merge pull request #11457 from stepancheg:state-file 7320a65f
2025/02/12 22:10 85557587601b Add a test for tcpdump. 2afad16e
2025/02/12 18:11 85557587601b Add a test for tcpdump. b27c2402
2025/02/12 10:08 d949e7177c2f taskCopyContext should not require holding task.mu. b27c2402
2025/02/11 13:55 d949e7177c2f taskCopyContext should not require holding task.mu. f2baddf5
2025/02/11 13:43 d949e7177c2f taskCopyContext should not require holding task.mu. 43f51a00
2025/02/11 00:13 faac8f36cd89 Add support for PACKET_STATISTICS. 43f51a00
2025/02/10 19:12 faac8f36cd89 Add support for PACKET_STATISTICS. 529cb927
2025/02/10 12:10 9c490f813d37 Implement GetSockOpt PACKET_HDRLEN and add a test for tcpdump. 529cb927
2025/02/08 00:18 9c490f813d37 Implement GetSockOpt PACKET_HDRLEN and add a test for tcpdump. ef44b750
2025/02/07 11:51 da7cd03064d7 Lock around packet mmap fields. 94926c8d
2025/02/07 08:39 da7cd03064d7 Lock around packet mmap fields. 44c01590
2025/02/06 19:34 d8518f299131 Validate PACKET_RX_RING and PACKET_VERSION socket option value size. 44c01590
2025/02/06 06:25 902a56c6c584 Use github.com/containerd/errdefs in gVisor shim. 44c01590
2025/02/05 17:14 e37e6814d3b7 Remove `srcs_version` and `python_version` attributes, as they already default to `"PY3"` 44c01590
2025/02/05 04:00 02f5a55b4027 Test gVisor with containerd 1.7.25. 44c01590
2025/02/04 14:58 f6b843d9a6c0 Add tests with netstack s/r enabled. 44c01590
2025/02/04 11:27 f6b843d9a6c0 Add tests with netstack s/r enabled. 8f267cef
2025/02/03 22:26 4a09ec772e1d Allow crypto/tls in go runtime tests. 8f267cef
2025/02/03 18:26 4a09ec772e1d Allow crypto/tls in go runtime tests. a21a8419
2025/02/03 10:24 1a9abee80b7c nvproxy: Add support for 570.86.15 driver. a21a8419
2025/02/02 00:10 1a9abee80b7c nvproxy: Add support for 570.86.15 driver. 568559e4
2025/02/01 12:06 1a9abee80b7c nvproxy: Add support for 570.86.15 driver. 0dff8567
2025/02/01 03:55 1a9abee80b7c nvproxy: Add support for 570.86.15 driver. aa47157c
2025/01/31 14:43 a500a2c751b1 Defalke test target pkg/tcpip/stack:bridge_test. aa47157c
2025/01/31 01:05 e0435b9a53ea Merge pull request #11415 from avagin:codespell 9c8ab845
2025/01/30 11:30 04f9204697c6 Yield thread group leader `*Task` in `TaskSet.ForEachThreadGroup`. 9c8ab845
2025/01/29 23:31 8bdf76c5ca71 Internal change. afe4eff5
2025/01/29 11:05 63c9278b9af1 Merge pull request #11360 from Snowflake-Labs:xuzhoyin-vmas-fix 08fa8553
2025/01/29 11:02 63c9278b9af1 Merge pull request #11360 from Snowflake-Labs:xuzhoyin-vmas-fix 865ef71e
2025/01/28 21:37 8c386259e0cf Add /usr/local/nvidia/bin to PATH in ffmpeg image. 865ef71e
2025/01/28 09:15 f3259f42b394 Merge pull request #11395 from google:dependabot/github_actions/actions/setup-go-5.3.0 ac37c1f8
2025/01/27 21:13 ca0ba7cbbad0 Merge pull request #11392 from tianyuzhou95:albert-develop 18070896
2025/01/27 19:19 ca0ba7cbbad0 Merge pull request #11392 from tianyuzhou95:albert-develop d99a33ad
2025/01/27 09:11 1c38b6cbed2c Add levels for handling spec validation via flag. d99a33ad
2025/01/25 01:56 1c38b6cbed2c Add levels for handling spec validation via flag. 9fbd772e
2025/01/24 13:54 1c38b6cbed2c Add levels for handling spec validation via flag. 1293872d
2025/01/24 01:52 1c38b6cbed2c Add levels for handling spec validation via flag. 521b0ce3
2025/01/24 00:35 1c38b6cbed2c Add levels for handling spec validation via flag. f6a35ef3
2025/01/23 13:51 c238e15234fe Fix validation of close_range `last` fd argument. f6a35ef3
2025/01/23 01:52 c238e15234fe Fix validation of close_range `last` fd argument. 9d4f14f8
2025/01/22 13:38 50731e5beca5 Merge pull request #11377 from thegreatfatzby:patch-1 25e17fd3
2025/01/22 10:54 50731e5beca5 Merge pull request #11377 from thegreatfatzby:patch-1 da72ac06
2025/01/21 21:44 8483ace3fbdd Merge pull request #11376 from evanphx:b-cgroupfs-flag da72ac06
2025/01/21 16:03 d22dedf3d55a Check all 3 stdio FDs to determine if terminal is connected to a pty. da72ac06
2025/01/20 13:59 d22dedf3d55a Check all 3 stdio FDs to determine if terminal is connected to a pty. 6e87cfa2
2025/01/17 22:30 d22dedf3d55a Check all 3 stdio FDs to determine if terminal is connected to a pty. f2cb035c
2025/01/17 19:23 d22dedf3d55a Check all 3 stdio FDs to determine if terminal is connected to a pty. bb91bdd4
2025/01/17 10:22 25b1d7134115 Add constants and types related to the implementation of PACKET_MMAP. bb91bdd4
2025/01/16 13:33 25b1d7134115 Add constants and types related to the implementation of PACKET_MMAP. f9e07a6e
2025/01/16 09:30 25b1d7134115 Add constants and types related to the implementation of PACKET_MMAP. 968edaf4
2025/01/15 20:19 1864d9d091cc Untag user addresses before handling them in the Sentry 968edaf4
2025/01/15 11:49 3649ca9d9eb6 On COS, add NVIDIA library directory to LD configuration and update cache. 968edaf4
2025/01/14 21:26 3649ca9d9eb6 On COS, add NVIDIA library directory to LD configuration and update cache. 7315a7cf
2025/01/14 09:19 3649ca9d9eb6 On COS, add NVIDIA library directory to LD configuration and update cache. 0dce2409
2025/01/14 05:53 3649ca9d9eb6 On COS, add NVIDIA library directory to LD configuration and update cache. b1f1cd88
2025/01/13 21:10 4ba931dd226e CUDA test compatibility: Remove `p2pBandwidthLatencyTest` special case. b1f1cd88
2025/01/13 09:07 4ba931dd226e CUDA test compatibility: Remove `p2pBandwidthLatencyTest` special case. 249ceea9
2025/01/11 12:31 4ba931dd226e CUDA test compatibility: Remove `p2pBandwidthLatencyTest` special case. 6dbc6a9b
2025/01/10 20:41 2d0e39a87f4c Merge pull request #11351 from 2022tgoel:tarushii/gpu_test_fail 6dbc6a9b
2025/01/10 18:41 c5c74f4c90ac Merge pull request #11321 from 2022tgoel:nvproxy_video_cap 6dbc6a9b
2025/01/10 06:38 c5c74f4c90ac Merge pull request #11321 from 2022tgoel:nvproxy_video_cap 67d7ec0a
2025/01/09 21:19 c5c74f4c90ac Merge pull request #11321 from 2022tgoel:nvproxy_video_cap 40f46913
2025/01/09 18:36 9803629d9240 Don't fail compatibility test when COS versions are not yet released. 40f46913
2025/01/09 09:28 9803629d9240 Don't fail compatibility test when COS versions are not yet released. 9220929f
2025/01/09 00:39 9803629d9240 Don't fail compatibility test when COS versions are not yet released. f3558dbf
2025/01/08 11:27 2edcee37d9fb Specify all capabilities in TestGPUCheckpointRestore. f3558dbf
2025/01/07 22:23 b94ab7381565 Merge pull request #11333 from benhurdelhey:ben-hurdelhey_data/fix-mount-setup-initial-userns-fallback f3558dbf
2025/01/07 09:09 bf9d60db96d3 Merge pull request #11341 from avagin:mountinfo-int f3558dbf
2025/01/06 20:00 7af7cb036777 Merge pull request #10376 from google:dependabot/github_actions/actions/checkout-4 f3558dbf
2025/01/06 06:51 015477747dd1 Exclude cmd/crypto/tls from Go 1.22 tests. f3558dbf
2025/01/03 23:06 4dbba85b072b Kubernetes benchmarks: Refactor kubectl context to allow sets of clusters. f3558dbf
2025/01/03 11:03 4dbba85b072b Kubernetes benchmarks: Refactor kubectl context to allow sets of clusters. 96d578a3
2024/12/30 23:38 4dbba85b072b Kubernetes benchmarks: Refactor kubectl context to allow sets of clusters. d3ccff63
2024/12/30 10:22 b11efeaecd4a nvproxy: Clean up struct field tags. d3ccff63
2024/12/28 00:05 768db8693149 Build `runsc-metric-server` binary using `nocgo` instead of `static`. d3ccff63
2024/12/27 10:47 383011a14af1 Add utility functions to validate benchmark runtime. d3ccff63
2024/12/26 21:31 84172e4e7034 Go benchstat parser: Support alternate syntax for parameters. d3ccff63
2024/12/26 09:38 f7ad032e4adc Kubernetes tests & benchmark: Simplify `KubernetesContext` interface. d3ccff63
2024/12/24 11:05 f7ad032e4adc Kubernetes tests & benchmark: Simplify `KubernetesContext` interface. 444551c4
2024/12/23 21:47 1a9f8b17edc3 Internal change. 444551c4
2024/12/23 09:03 0f8db9fa2891 Deflake process_vm_read_write test. 444551c4
2024/12/22 07:49 0f8db9fa2891 Deflake process_vm_read_write test. b4fbdbd4
2024/12/20 22:22 0f8db9fa2891 Deflake process_vm_read_write test. d7f584ee
2024/12/20 21:35 0fb4cc71ba95 Kubernetes benchmarks: Wait for namespace cleanup before proceeding. d7f584ee
2024/12/20 09:50 0fb4cc71ba95 Kubernetes benchmarks: Wait for namespace cleanup before proceeding. 49cfeac8
2024/12/19 21:24 f1656df6d67f Add validation logic to check overlay2 flag override. c87fa8a3
2024/12/19 20:05 f1656df6d67f Add validation logic to check overlay2 flag override. 1d58202c
2024/12/19 09:36 f7875f90fda1 systrap: Unset fpstate_changed if ctx did not change. 1d58202c
2024/12/19 02:39 f7875f90fda1 systrap: Unset fpstate_changed if ctx did not change. 1432fc84
2024/12/18 13:37 44562d85cf06 `testcluster`: Warn if a pod or namespace deletion takes longer than expected. 1432fc84
2024/12/18 13:25 44562d85cf06 `testcluster`: Warn if a pod or namespace deletion takes longer than expected. a0626d3a
2024/12/18 00:05 afdd74ad6402 Allow --overlay2 flag to be overridden by annotations. a0626d3a
2024/12/17 11:40 5fdedb527657 Parallelize BuildKite "All GPU drivers test". bc1a1b50
2024/12/17 11:18 5fdedb527657 Parallelize BuildKite "All GPU drivers test". f93b2b55
2024/12/16 21:59 0f8216cd3043 Do not validate resources during restore. f93b2b55
2024/12/16 09:39 8516598640c4 Re-add PyTorch benchmarks into PyTorch image. Update CUDA version. eec85da6
2024/12/16 05:42 8516598640c4 Re-add PyTorch benchmarks into PyTorch image. Update CUDA version. 7cbfbb3a
2024/12/14 14:16 7aa4e8dc34fa HTTPBenchmark: Tolerate probe failures when initially waiting for server. 7cbfbb3a
2024/12/14 00:54 bd0cbf807169 Fix typo in exec.go. 7cbfbb3a
2024/12/13 12:59 9fcf0b5b5360 proc: invalidate task inodes when tasks are destroyed 7d3b55db
2024/12/13 01:36 40b704d0c346 Update gvisor.dev w/ instructions to get supported drivers. 3547e30f
2024/12/13 00:27 c88ffa321eb9 Returns ENOBUFS when writing to a veth device whose buffer is full. 3547e30f
2024/12/12 12:24 c88ffa321eb9 Returns ENOBUFS when writing to a veth device whose buffer is full. 1b70f4d9
2024/12/12 00:20 c88ffa321eb9 Returns ENOBUFS when writing to a veth device whose buffer is full. 6f1b0fa8
2024/12/11 10:48 c88ffa321eb9 Returns ENOBUFS when writing to a veth device whose buffer is full. ff949d25
2024/12/11 10:03 c88ffa321eb9 Returns ENOBUFS when writing to a veth device whose buffer is full. cfc402b4
2024/12/10 20:49 394d0852a80f Remove NVIDIA-specific test runtimes. cfc402b4
2024/12/10 07:23 95ca82d87278 Stable Diffusion benchmark: Specify "latest" tag for container image. cfc402b4
2024/12/09 19:17 b41e6b89daaa remove TODO keeping bug alive deb72877
2024/12/09 08:22 54eb79b6e80a Acquire rlock when reading link address from the bridge. 9ac0fdc6
2024/12/07 02:08 22b95a87ac8d `runsc metric-server`: Make binary statically linked. 9ac0fdc6
2024/12/06 12:47 188a756ff387 Add validateMap() to compare maps correctly during OCI spec validation. 9ac0fdc6
2024/12/06 00:41 b92307b4e648 gsutil benchmark: Actually create the pod in the Kubernetes cluster. 946d28f0