Kernel images history:

Time	Kernel Commit	Kernel Config	Syzkaller Commit	Assets
2026/08/28 21:56	4a7fcd5fc048 Merge pull request #14461 from milantracy:governance	.config	2f52988a
2026/08/28 09:56	4a7fcd5fc048 Merge pull request #14461 from milantracy:governance	.config	41d151d4
2026/08/27 20:38	bd30d19d87ae Add cos and ubuntu-gpu release agents	.config	e2fa417d
2026/08/27 08:14	e4850e96c18d Add ADOPTERS.md as single source of truth for gvisor users	.config	c53a1b9c
2026/08/26 10:34	fd439eb27c7d Fix CI test flakes in trace_test's Execve trace validation	.config	a2b77b9e
2026/08/25 22:42	917062dc0596 Update gVisor release documentation for GitHub Release workflow.	.config	6a91adb4
2026/08/25 10:46	646783231602 Replace the experimental --mount-cgroup-v2 flag with in-sandbox-cgroup	.config	a9a1fc32
2026/08/24 21:58	0b9499c9fb54 Add GKE Sandbox MicroVM runtime support to gke_tester and testcluster.	.config	614e416a
2026/08/24 10:01	3c5eee17dc45 Merge pull request #14137 from EtiennePerot:le-pinring	.config	b55bd4c3
2026/08/17 21:02	05f3435e51f2 gofer: Take refs when adopting a cached endpoint-bearing inode	.config	1e72964b
2026/08/17 08:58	50e1502a95d3 Nftables: Support xt_MASQUERADE compatibility target.	.config	905244d6
2026/08/14 21:34	32d6f0091cc2 Merge pull request #14021 from TheCoolDinosuar:rdma-proxy	.config	746171ee
2026/08/14 09:39	375fa1be4f2a Support combined restore of full snapshot and filesystem snapshot.	.config	2cf1fbb7
2026/08/13 21:34	97346d1e3754 Merge pull request #14031 from ayushr2:pin-cow-fork	.config	b13552fe
2026/08/13 09:25	35769a56f4fb Nftables: Support xt_addrtype match.	.config	4d118901
2026/08/12 23:00	8921984bf804 Merge pull request #13734 from luiscape:luis/add-missing-nvenc-ioctl	.config	359b2492
2026/08/12 21:12	0165ee007e27 Merge pull request #13976 from luiscape:luis/add-support-for-610.57.04	.config	359b2492
2026/08/12 09:30	0165ee007e27 Merge pull request #13976 from luiscape:luis/add-support-for-610.57.04	.config	ee03bfea
2026/08/11 21:26	1919d9633a18 Merge pull request #13909 from relkochta:relkochta/overlayfs-posix-acls	.config	f8d35649
2026/08/11 09:16	3434348e5909 Make every user of a tty also refcount	.config	557a89d3
2026/08/10 21:09	8bd698e1e6ec Move fscheckpoint manifest from json to proto.	.config	508909ea
2026/08/10 08:46	5ceb9a5fd575 Deflake TestMultiContainerEvent/enableCgroupsV2	.config	ddd8e1cc
2026/08/07 22:43	6c89965d6026 Support passing environment variables to Python SandboxExec bindings.	.config	5d63f80b
2026/08/07 10:40	05b57c92aea0 Merge pull request #14019 from EtiennePerot:reexec-be-gone	.config	e4ef95d6
2026/08/06 22:35	8f0384248553 Add support for custom network modes in Python SandboxExec.	.config	c38879ea
2026/08/06 10:38	b85d70344f3e Create per-container cgroup2 dirs and honor spec cgroupns	.config	cc56899a
2026/08/05 22:49	9d9b0681e814 Fix panic in iptables UserChainTarget.Action().	.config	cd5b1963
2026/08/05 10:43	c0908da305ec Merge pull request #13952 from EtiennePerot:waitforstopped-nopoll	.config	1eed00d1
2026/08/04 22:25	6dfa3a9c7ee7 Internal change.	.config	52aa2820
2026/08/04 10:34	901ffefc3a7b udp: Trim packet to header.length.	.config	3c5eaa21
2026/08/03 22:12	3e74ae881798 Deflake PosixACLTest.SetACLEmpty on native	.config	9451e17e
2026/08/03 17:11	3e74ae881798 Deflake PosixACLTest.SetACLEmpty on native	.config	bdd50915
2026/08/03 10:08	48de7274186a Nftables: Changed function name to correctly reflect the purpose.	.config	bdd50915
2026/08/02 14:02	48de7274186a Nftables: Changed function name to correctly reflect the purpose.	.config	e611ffe1
2026/08/02 00:52	54895179ed67 Nftables: Support `chain-id` attribute.	.config	e611ffe1
2026/08/01 11:43	f24eaec79e88 Merge pull request #13941 from ayushr2:pgalloc-usage-throttle	.config	e611ffe1
2026/07/31 22:38	449f04c57356 Allow running syscall tests on non-modern Linux kernels.	.config	e611ffe1
2026/07/31 10:42	c1b4e12cf268 Merge pull request #13712 from ayushr2:rdma-sysfs	.config	0f928e69
2026/07/30 22:36	e52d7a0faa4d Nftables: Support flushing ruleset.	.config	aaffb173
2026/07/30 10:36	3355a32937b4 Merge pull request #13899 from shayonj:s/tines-3b-users	.config	0a1bc234
2026/07/29 22:26	a907734abece Add driver ABI version registration and support for MMNCCD ioctls	.config	2377cd3d
2026/07/29 10:29	43396a19255c Enable 8-shard parallel execution for integration tests in Buildkite.	.config	b63596d1
2026/07/28 22:23	87dc2c081866 Fix TSan data race in UDP Socket Tests	.config	19622d9d
2026/07/28 10:33	41cfc418a32b Internal change	.config	5fe7c56f
2026/07/27 21:53	ca42882317b2 Automated rollback of changelist 952215192	.config	45ae1df4
2026/07/27 18:51	ca42882317b2 Automated rollback of changelist 952215192	.config	1f273138
2026/07/27 09:50	8eb8f9e0df89 Restrict MaxPerms to not include Write access if the segment was attached as read-only	.config	1f273138
2026/07/25 00:12	8eb8f9e0df89 Restrict MaxPerms to not include Write access if the segment was attached as read-only	.config	492bab15
2026/07/24 11:58	607ea0040826 seccheck: fix dispatcher array order	.config	dd737a83
2026/07/24 11:09	607ea0040826 seccheck: fix dispatcher array order	.config	544adce9
2026/07/23 22:02	42f4b4bbe596 Add SandboxExec Go binding for sandbox working directory	.config	544adce9
2026/07/23 09:59	3f1f8f20c8d3 Merge pull request #13812 from EtiennePerot:sidecar-enforcement	.config	71a13572
2026/07/22 21:48	5c0fc10867c2 Merge pull request #13790 from EtiennePerot:runsc-install-download	.config	881ce5c2
2026/07/22 09:40	ed9299c797a9 Merge pull request #13655 from a7i:feat/cgroup2-xattr	.config	4a865b71
2026/07/21 21:31	9f653e577965 Nftables: Fix and enable syscall-native tests for runc.	.config	b561ce9c
2026/07/21 09:20	f510f737f563 Clean up and modernize gVisor trace tests.	.config	7c5de9c3
2026/07/21 05:21	f510f737f563 Clean up and modernize gVisor trace tests.	.config	4763fed7
2026/07/20 16:07	9d2d13b051fc hostinet: support checkpoint/restore	.config	4763fed7
2026/07/20 08:34	ddf37c50b366 nvproxy: Register NVIDIA GPU driver version 580.173.02.	.config	4763fed7
2026/07/18 22:41	ddf37c50b366 nvproxy: Register NVIDIA GPU driver version 580.173.02.	.config	72524a66
2026/07/18 09:33	eb7b0b4c1a84 Merge pull request #13674 from EtiennePerot:gvisor-in-docker-fix	.config	72524a66
2026/07/17 20:26	cde30cd807b0 Add seccheck field to indicate if a file is on an overlayfs lower layer.	.config	72524a66
2026/07/17 08:16	de314aba841d Deflake TestDockerWithVFS by using isolated build contexts.	.config	7f27c57a
2026/07/16 20:15	7824e269ebd3 Support cgroup namespaces	.config	6ca2b51a
2026/07/16 08:20	c30a6d1b6f26 use official docker:dind image for basic/docker image.	.config	851bd571
2026/07/15 20:14	cd4bd6b9861f Add seccheck support for collecting stdin/stdout/stderr info on execve.	.config	27a8bd60
2026/07/15 07:45	c07053c7dbd9 Merge pull request #13682 from EtiennePerot:systrap-false-sharing	.config	a4ed0f4f
2026/07/15 03:34	c07053c7dbd9 Merge pull request #13682 from EtiennePerot:systrap-false-sharing	.config	2130f682
2026/07/14 14:05	9cb44186726e Support nr_blocks mount option in tmpfs.	.config	2130f682
2026/07/14 01:00	cd0aa582c862 website: register fuse user guide doc	.config	2130f682
2026/07/13 19:32	6d73c10d795c Refactor network configuration during restore and defer link creation in runsc	.config	2130f682
2026/07/13 07:30	6d73c10d795c Refactor network configuration during restore and defer link creation in runsc	.config	a870962e
2026/07/11 06:04	6d73c10d795c Refactor network configuration during restore and defer link creation in runsc	.config	d78ea535
2026/07/10 16:46	37973046f140 Add CVE-2026-53359 and CVE-2026-43499 to gVisor CVE track record.	.config	d78ea535
2026/07/10 13:06	37973046f140 Add CVE-2026-53359 and CVE-2026-43499 to gVisor CVE track record.	.config	99e64375
2026/07/10 12:40	37973046f140 Add CVE-2026-53359 and CVE-2026-43499 to gVisor CVE track record.	.config	4167ee25
2026/07/09 23:29	c0af8b157f66 Fix double close of fds in FDWriter.Close	.config	4167ee25
2026/07/09 11:21	a5d30fe182f6 Support epoll() for /proc/[pid]/mountinfo and /proc/[pid]/mounts	.config	a0c310a3
2026/07/08 23:22	0f2dd31f6f09 Add a "runsc read" command to read files from a sandbox.	.config	b9f1ceaa
2026/07/08 11:16	a29997e6c741 Register NVIDIA driver version 615.15.00 in nvproxy.	.config	ab40da58
2026/07/07 23:21	2b6dff7c5a98 Add python language binding for runsc.	.config	88a4b44c
2026/07/07 11:16	35db98496ee1 clone: Deliver pidfd only after child init	.config	76cdc0c0
2026/07/06 23:03	f8496e3731e8 Merge pull request #13526 from TristanInSec:fix-udp-checksum-zero-nat	.config	8e71ce95
2026/07/06 19:57	f8496e3731e8 Merge pull request #13526 from TristanInSec:fix-udp-checksum-zero-nat	.config	88b240e4
2026/07/06 11:02	abf59273b7ba Refactor setting up network during restore.	.config	88b240e4
2026/07/04 01:38	abf59273b7ba Refactor setting up network during restore.	.config	fcece630
2026/07/03 13:37	abf59273b7ba Refactor setting up network during restore.	.config	aa437a8a
2026/07/03 01:36	abf59273b7ba Refactor setting up network during restore.	.config	58bf2096
2026/07/02 13:33	abf59273b7ba Refactor setting up network during restore.	.config	2b70b115
2026/07/02 01:35	abf59273b7ba Refactor setting up network during restore.	.config	27192279
2026/07/01 13:29	df56fdbc6497 Merge pull request #13331 from tianyuzhou95:albert/slimvm-pr	.config	5fb9973c
2026/07/01 12:30	df56fdbc6497 Merge pull request #13331 from tianyuzhou95:albert/slimvm-pr	.config	00a5cf1c
2026/06/30 23:08	31c3363db7b0 Merge pull request #13426 from google:lucasmanning/fuse-host-passthrough	.config	00a5cf1c
2026/06/30 11:06	215343893be4 Merge pull request #13214 from ibondarenko1:tcpip-ipv6-disablelocked-isenabled	.config	e5173a01
2026/06/29 22:22	2f93121f3b28 Publish sandbox go sdk to go branch.	.config	fff8d0a0
2026/06/29 18:40	2f93121f3b28 Publish sandbox go sdk to go branch.	.config	6a0c72dc
2026/06/29 10:21	928199eb9fb2 Merge pull request #13555 from yaseenisolated:fix-tcp-runqueue-restore	.config	6a0c72dc
2026/06/27 03:13	928199eb9fb2 Merge pull request #13555 from yaseenisolated:fix-tcp-runqueue-restore	.config	fb92f11c
2026/06/26 14:05	d7ea6bc1ded1 Merge pull request #13451 from relkochta:relkochta/fsconfigreconf	.config	fb92f11c
2026/06/26 11:04	d7ea6bc1ded1 Merge pull request #13451 from relkochta:relkochta/fsconfigreconf	.config	7ff32d8b
2026/06/25 21:50	5ba3eaee4ac7 Deflake the native memfd test	.config	7ff32d8b
2026/06/25 09:52	ea0f0b6b32d9 Remap nvproxy devices across save/restore.	.config	432fd51a
2026/06/24 21:56	b11424acec0a Scale CVE chart bars based on the maximum number of CVEs in any year.	.config	cfa969bf
2026/06/24 09:52	764efd2d14ca Add gvisor security record to the gvisor.dev	.config	c1da772e
2026/06/23 21:47	9f8f6c917885 Merge pull request #13534 from lyphyser:park-watchdog	.config	042555ff
2026/06/23 09:57	0c3db239f156 Add checkpoint sandbox helper functions to gVisor shim.	.config	4b1d8f01
2026/06/22 21:34	838a7e77509b Nftables: Added support for `set` creation.	.config	5a630be6
2026/06/22 18:53	838a7e77509b Nftables: Added support for `set` creation.	.config	ab2703f0
2026/06/22 09:33	57746fa99e6b Update UTS namespace hostname/domainname on restore.	.config	ab2703f0
2026/06/19 22:53	57746fa99e6b Update UTS namespace hostname/domainname on restore.	.config	43bfcdb0
2026/06/19 10:44	f0ef4a8366d0 Add Northflank to the gVisor users page.	.config	023e42b5
2026/06/18 22:36	e5697b80cabb Merge pull request #13484 from luiscape:luis/add-mps-support-nvproxy	.config	d7ffd47b
2026/06/18 21:44	e5697b80cabb Merge pull request #13484 from luiscape:luis/add-mps-support-nvproxy	.config	4f06757f
2026/06/18 08:35	9307ff8f53c4 Merge pull request #13469 from lyphyser:disable-fast-path	.config	4f06757f
2026/06/17 19:24	b0033c2285a1 Merge pull request #13462 from ikruk-glitch:erofs-inline-straddle	.config	4f06757f
2026/06/17 06:15	2cb805740e93 Nftables: Fixed bugs.	.config	4f06757f
2026/06/16 17:05	9b91aba4b0db Add Beam to the gVisor users page.	.config	4f06757f
2026/06/15 18:19	c708da162364 Implement MS_MOVE for mount(2)	.config	4f06757f
2026/06/13 12:15	57efc92f6df8 nvproxy: Add support for NVIDIA driver version 610.43.02.	.config	4f06757f
2026/06/12 22:53	d9e49db5d861 Merge pull request #13421 from benldrmn:fix-annotation-override-ordering	.config	4f06757f
2026/06/12 10:54	cb94f02180f4 Merge pull request #13427 from milantracy:claude	.config	8f6cdf3b
2026/06/11 22:51	d127ea02e002 Merge pull request #13276 from Haihan-Jiang:codex/gvisor-cgroup-swap	.config	e93da63e
2026/06/11 10:45	62f5e2a90b92 Merge pull request #13410 from relkochta:relkochta/tmpfsnoswap	.config	d93a6ab6
2026/06/10 22:42	6d321a16ccf4 Merge pull request #13223 from shayonj:s/gofer-extension-setup	.config	b754d2d8
2026/06/10 10:46	7179c5f2f959 Add option to run cuda-checkpoint sequentially.	.config	f79bac11
2026/06/09 22:41	f028e6a84187 Nftables: Added support for NAT.	.config	34dab4be
2026/06/09 10:27	6b0a7ff6a099 Automated rollback of changelist 928766376	.config	c36c07f6
2026/06/09 09:39	6b0a7ff6a099 Automated rollback of changelist 928766376	.config	656e94c6
2026/06/08 20:33	7f3d9935e2e8 Merge pull request #13315 from tianyuzhou95:albert/upstream-packet-fanout-uniqueid	.config	656e94c6
2026/06/08 14:06	cfb7c0629521 Fix SIGWINCH delivery on PTY window size change (TIOCSWINSZ)	.config	656e94c6
2026/06/06 10:36	cfb7c0629521 Fix SIGWINCH delivery on PTY window size change (TIOCSWINSZ)	.config	cc095639
2026/06/05 21:23	da03d3a66063 Remove stale sha256 pin from google_root_pem.	.config	cc095639
2026/06/05 09:35	fcd95d5fac0f Merge pull request #13164 from ibondarenko1:hardening/tcp-isn-secrets-nosave	.config	48b6c3fa
2026/06/05 01:32	0e42bbeaef1c Merge pull request #13324 from tianyuzhou95:albert/fix-bigdatatransfer-port-exhaustion	.config	197909be
2026/06/04 12:06	810eac7d0f1d nvproxy: Mark 580.159.04 driver supported.	.config	197909be
2026/06/03 22:39	5fcf887cdc85 ipv6: Fixed fragment packet re-assembly.	.config	197909be
2026/06/03 10:42	6f0c12599d8b Internal change.	.config	234057e5
2026/06/02 22:38	d1c3ea4c0790 Implement ENV_VAR_POLICY_UNSET properly in sandboxexec.	.config	3c0d2131
2026/06/02 10:33	752de092a1e0 Avoid panic on unknown transport protocol during forwarding.	.config	62fe1528
2026/06/02 07:44	752de092a1e0 Avoid panic on unknown transport protocol during forwarding.	.config	8d8eeb3a
2026/06/01 18:26	254f7e747c27 runsc features: Declare mount ID-mapping support in runtime features	.config	8d8eeb3a
2026/06/01 07:49	50af291e777f Fail GPU tests if driver installation fails.	.config	8d8eeb3a
2026/05/30 12:46	50af291e777f Fail GPU tests if driver installation fails.	.config	6b4a8443
2026/05/29 23:38	e8af18d0c9e4 runsc: support for mount uid/gid mappings	.config	6b4a8443
2026/05/29 10:17	086c94e0cc43 Fix: Improve error messages in spec validation for Spec.Process and Spec.Linux.	.config	6b4a8443
2026/05/28 22:14	8f3bcd05c1b4 Skip nvidia-cdi-hook's disable-device-node-modification hook.	.config	4624854e
2026/05/28 10:12	9b9807a3c82d Fix sentry panic during path resolution from unlinked directories in tmpfs.	.config	9a5a7e5e
2026/05/27 22:14	d3f3610be742 Add README for sandboxexec, marking it as experimental.	.config	4c36e7e5
2026/05/27 10:06	2923488e2bcb Internal change.	.config	cb4e87ff
2026/05/27 09:49	2923488e2bcb Internal change.	.config	2b01f00e
2026/05/26 20:39	ef599f18a9ea Increase minimum Go version to 1.26.3	.config	2b01f00e
2026/05/26 19:30	ef599f18a9ea Increase minimum Go version to 1.26.3	.config	2b0043b4
2026/05/26 07:57	85b606a040c1 Clip resource limits in startup benchmarks.	.config	2b0043b4
2026/05/23 23:08	85b606a040c1 Clip resource limits in startup benchmarks.	.config	c69befb3
2026/05/23 09:55	47af4685a3ea Rename Kata runtime types to remove "nested-" prefix.	.config	c69befb3
2026/05/22 20:40	27b70bccdcb9 Merge pull request #12614 from aojea:kind_kubernetes	.config	c69befb3
2026/05/22 08:32	a7d0e52fa760 Use raw unix.Mount for rootfs self-bind-mount	.config	95d90255
2026/05/21 22:14	6fd4550f7f41 Nftables: Use enum instead of strings for nft ops.	.config	747d777d
2026/05/21 08:55	3a1eb255338f Fix EINTR leakage by correcting type comparison in ConvertIntr.	.config	747d777d
2026/05/20 20:46	0e7a047ef3b7 nvproxy: don't use rmControlSimple in ctrlGpuExecRegOps	.config	41b8c833
2026/05/20 08:45	d8751e5ab677 Merge pull request #13181 from ibondarenko1:hardening/conntrack-seed-nosave	.config	d6bba87f
2026/05/19 20:42	7851a7f7167b Merge pull request #13147 from shayonj:setgroups-impl	.config	6cd1a940
2026/05/19 08:40	eddc5fa62b5b Add unit test for GetPersistentVolume	.config	2aa09d96
2026/05/18 20:44	3587f0d82c7a Merge pull request #13163 from arpitjain099:ci/add-permissions	.config	9f74d399
2026/05/18 08:35	8bcb288c846d Add a new flag to allow connected connections on save.	.config	143ffb88
2026/05/18 06:35	8bcb288c846d Add a new flag to allow connected connections on save.	.config	de5aae85
2026/05/17 05:47	77dbc433352e Fix broken deps.	.config	de5aae85
2026/05/16 19:42	fb5ef644a797 lisafs: Allow connections to have varying implementations.	.config	de5aae85
2026/05/16 07:42	fb5ef644a797 lisafs: Allow connections to have varying implementations.	.config	a15a64a6
2026/05/15 19:51	b798cf6112e7 Integrate runsc shim with containerd 2.1.	.config	81fb92f3
2026/05/15 07:43	7e7d35b8a0ae Use a fresh container for exclusive GPU test execution.	.config	9cd3beaa
2026/05/14 21:53	b8c7531eee0b Merge pull request #13185 from drewmacneil:drew/tmpfs-symlink-account-pages	.config	6ccb967e
2026/05/14 08:32	95d42c1e46c7 Don't run SeccompValidatesAllFilterFlags on starnix	.config	6ccb967e
2026/05/13 20:31	dc2aeec97118 tmpfs: support percentage size + update /proc/self/mounts to match Linux format	.config	e8909b29
2026/05/13 08:37	b29453378bdd Merge pull request #13099 from shayonj:s/per-mount-directfs	.config	fec2a7ee
2026/05/12 19:54	1013f4dc0dfa clone: Uninstall pidfd when seccheck aborts clone	.config	a0949470
2026/05/12 18:57	f5ce408bcf1e nvproxy: don't use rmControlSimple in ctrlGetNvU32List	.config	a0949470
2026/05/12 07:05	f5ce408bcf1e nvproxy: don't use rmControlSimple in ctrlGetNvU32List	.config	07aeade5
2026/05/11 18:14	d281a82b8c2b Set DF bit for TCP handshake.	.config	d168f260
2026/05/11 17:48	d281a82b8c2b Set DF bit for TCP handshake.	.config	845acb1c
2026/05/11 06:12	8c9871efe45a Skip TestShimGroupingPerformance in containerd-test.	.config	845acb1c
2026/05/09 09:40	8c9871efe45a Skip TestShimGroupingPerformance in containerd-test.	.config	29233ece
2026/05/08 20:19	07ebf7a12283 Always specify Docker platform in images.mk	.config	29233ece
2026/05/08 08:21	58ca0022967b sentry: Move IOUringEnabled to kernel.Kernel Member	.config	5633175a
2026/05/02 06:45	f395c7e409ad Merge llm benchmark client images to one image.	.config	340bcdf0
2026/05/01 17:40	1e0a80aff995 Fix the flakiness of GPU tests	.config	340bcdf0
2026/05/01 02:48	f6f900361dae Merge pull request #12791 from a7i:feat/shim-containerd-update	.config	340bcdf0
2026/04/30 13:35	cb8d273a098b Refactor common LLM testing utilities into llmutil.	.config	340bcdf0
2026/04/30 00:26	81fa2013f157 gofer: Fix getxattr to actually return xattr when size=0.	.config	340bcdf0
2026/04/29 11:15	a655402183e0 Internal change	.config	340bcdf0
2026/04/28 22:02	79b7318d6d6e Change default checkpoint compression to "none".	.config	340bcdf0
2026/04/28 08:47	00af7dba072a Revert the debug logs added for investigating the nil receiver in Readiness.	.config	340bcdf0
2026/04/27 20:31	8e1b8ebdafc1 Merge pull request #13016 from tanyifeng:bump-linux-release	.config	ce741359
2026/04/27 18:58	8e1b8ebdafc1 Merge pull request #13016 from tanyifeng:bump-linux-release	.config	0f700595
2026/04/27 08:29	6c584bd2fd0e gVisor blog post: Fix publication year in URL.	.config	0f700595
2026/04/25 08:58	6c584bd2fd0e gVisor blog post: Fix publication year in URL.	.config	9c2d0995
2026/04/24 19:54	c941cbac224e Add a sync.Pool for sendfile buffers.	.config	9c2d0995
2026/04/24 13:54	95eb8fa6e7a6 Merge pull request #12995 from tanyifeng:tencent-blog	.config	9c2d0995
2026/04/24 01:54	95eb8fa6e7a6 Merge pull request #12995 from tanyifeng:tencent-blog	.config	9cfb3ca7
2026/04/23 17:32	49a67f0580c5 Run more mount tests with overlayfs enabled.	.config	629ff21a
2026/04/23 13:50	b2b5c32399dd conntrack: Moving packet functions from conntrack to packet_buffer	.config	629ff21a
2026/04/23 02:05	b2b5c32399dd conntrack: Moving packet functions from conntrack to packet_buffer	.config	b10da5ec
2026/04/22 17:39	f4da28bc0a62 Remove usages of save-restore-netstack flag.	.config	0e869ba2
2026/04/22 13:46	580553b31b48 Clarify container capabilities in Docker-in-gVisor tutorials.	.config	0e869ba2
2026/04/22 01:45	580553b31b48 Clarify container capabilities in Docker-in-gVisor tutorials.	.config	0b6ab7ec
2026/04/21 13:45	25ee8c385cdf Merge pull request #12923 from shayonj:s/export-gofer-mount-setup	.config	9765efe0
2026/04/21 01:41	afbd83b06878 overlay: avoid creating unnecessary whiteouts in UnlinkAt and RmdirAt	.config	3f2e655b
2026/04/20 19:22	afbd83b06878 overlay: avoid creating unnecessary whiteouts in UnlinkAt and RmdirAt	.config	e65da4ee
2026/04/20 13:40	03f43620b1df Clean up all containers, pods, sandboxes once root tests are completed.	.config	e65da4ee
2026/04/19 00:48	03f43620b1df Clean up all containers, pods, sandboxes once root tests are completed.	.config	303e2802
2026/04/18 14:17	ebc66e608932 Document docker v28 in GKE sandox support.	.config	303e2802
2026/04/18 02:26	ebc66e608932 Document docker v28 in GKE sandox support.	.config	5be7a9de
2026/04/17 14:14	948b81074120 stack: Separated NAT code from conntrack.	.config	24ecfc1e
2026/04/17 11:46	948b81074120 stack: Separated NAT code from conntrack.	.config	de0a551d
2026/04/16 22:30	ec13dd2435d5 Merge pull request #12797 from insanitybit:overlay-userxattr	.config	de0a551d
2026/04/16 10:27	b5e83db38775 Merge pull request #12855 from tanyifeng:pty-sighup-on-master-close	.config	4743f87d
2026/04/15 22:15	486f37f2f419 Test gVisor with latest containerd minor versions.	.config	df15c5f3
2026/04/15 10:19	098b0a1fd48d Internal change.	.config	294e3145
2026/04/14 22:08	8165ec8fae29 Exclude debug-related flag annotations from checkpoint/restore validation.	.config	e2e976a8
2026/04/14 10:03	58b37effb58e Merge pull request #12919 from iTrooz:iface_index	.config	362d1323
2026/04/13 22:03	01c47e2dc7c7 gVisor website: Replace CSS comments with SCSS comments to minimize CSS size	.config	1a086e7c
2026/04/13 10:01	7a8f93e881db Internal change.	.config	9530ccf9
2026/04/10 16:50	b024e9775767 Merge pull request #12909 from xiangbin-hu:cgroup-registry-remove-on-rmdir	.config	38c8e246
2026/04/10 03:38	da7e03a42765 Merge pull request #12854 from tanyifeng:vfs-add-inmodify	.config	38c8e246
2026/04/09 14:24	7b4fe744c3d1 Merge pull request #12843 from kpurdon:kpurdon/12838/fix-aarch64-oom-reporting	.config	38c8e246
2026/04/09 01:06	9bc8526be8df Merge pull request #12863 from tanyifeng:remove-ficlone-tests	.config	38c8e246
2026/04/08 12:51	50a14dc95f47 Remove vfio_unsafe.go and use VFIOIrqSet.SizeBytes().	.config	d9b7f621
2026/04/08 11:41	50a14dc95f47 Remove vfio_unsafe.go and use VFIOIrqSet.SizeBytes().	.config	2c961e87
2026/04/07 22:21	7eb858fdd6f5 kvm: re-enable the TestMemLimit	.config	2c961e87
2026/04/07 10:18	140f64c5bad5 Merge pull request #12817 from luiscape:add-vulakn-ioctls	.config	628666c6
2026/04/07 10:01	140f64c5bad5 Merge pull request #12817 from luiscape:add-vulakn-ioctls	.config	4440e7c2
2026/04/06 20:49	9572729eab49 Update links to GKE Sandbox documentation page.	.config	4440e7c2
2026/04/04 02:16	0f29b0e1e7fa Merge pull request #12852 from tanyifeng:net-ip-mtu-discover	.config	4440e7c2
2026/04/03 13:06	44183dc080fa Allow sub-containers to cold-start on restored Pods.	.config	4440e7c2
2026/04/03 00:02	d1ab4fa9f386 gVisor security policy: Clarifications and update for `InternalEsc`.	.config	4440e7c2
2026/04/02 12:09	4eeb78049896 mm: only hugepage-align mappings of hugepage-aligned length	.config	8b15d4ae
2026/04/01 23:52	638c1efe1975 Read runsc.Options from the state file to clean up task service.	.config	0cb124d5
2026/04/01 11:49	305818798603 sentry: use cryptographic PRNG for security-sensitive randomization	.config	0285fe54
2026/03/31 23:56	82275ab10d2b runsc: support unprivileged user namespace mappings using SysProcAttr	.config	fb8b2c26
2026/03/31 11:59	3479ded64d64 runsc: Fix SetUserMappings to handle empty UID/GID mappings in spec.	.config	aeea1c72
2026/03/30 23:41	77458736f496 Nftables: Remove the overheads from register ops.	.config	d0af506e
2026/03/30 18:15	77458736f496 Nftables: Remove the overheads from register ops.	.config	aa4af680
2026/03/30 11:40	d23cf24593c3 utimensat: Allow AT_EMPTY_PATH	.config	aa4af680
2026/03/28 12:20	d23cf24593c3 utimensat: Allow AT_EMPTY_PATH	.config	b5ceaad2
2026/03/28 00:14	749146131869 Fix systemcall tests	.config	356bdfc9
2026/03/27 18:39	749146131869 Fix systemcall tests	.config	74a13a23
2026/03/27 12:12	d2403f237047 Extend containerd runsc shim testing.	.config	74a13a23
2026/03/27 01:15	d2403f237047 Extend containerd runsc shim testing.	.config	4b3d9a38
2026/03/26 12:05	c85244f0aaa2 netstack: Fix cap check around IFLA_NET_NS_FD	.config	4b3d9a38
2026/03/25 23:55	147cf2057db4 Internal change.	.config	c6143aac
2026/03/25 18:17	147cf2057db4 Internal change.	.config	4367a094
2026/03/25 11:54	c84e2b3c916c Add new extension method to support shim grouping.	.config	4367a094
2026/03/24 23:53	c84e2b3c916c Add new extension method to support shim grouping.	.config	35e4ff71
2026/03/24 11:31	7fa0acf9f27f Merge pull request #12772 from tanyifeng:fix-path-resolve	.config	74e70d19
2026/03/23 23:29	3a5311091c1c Merge pull request #12734 from luiscape:master	.config	baf8bf12
2026/03/23 18:22	3a5311091c1c Merge pull request #12734 from luiscape:master	.config	5e3db351
2026/03/23 11:28	5632a4febdb3 Merge pull request #12633 from danielnorberg:fix-tar-rootfs-upper-opaque-xattr	.config	5e3db351
2026/03/21 18:32	5632a4febdb3 Merge pull request #12633 from danielnorberg:fix-tar-rootfs-upper-opaque-xattr	.config	5b92003d
2026/03/21 02:00	afa183ad4a0f Add runsc wait --fscheckpoint/fsrestore.	.config	5b92003d
2026/03/20 13:42	0ee4bfc55de7 Merge pull request #12758 from Bingtagui404:fix/proc-pid-io-rchar-typo	.config	85bf2a64
2026/03/20 13:21	0ee4bfc55de7 Merge pull request #12758 from Bingtagui404:fix/proc-pid-io-rchar-typo	.config	2f245add
2026/03/20 00:11	bf19fbd37580 runsc/shim: Add support for filesystem restore.	.config	2f245add
2026/03/19 22:31	9ca1678bc676 Implement filesystem-only checkpointing.	.config	2f245add
2026/03/19 10:40	9ca1678bc676 Implement filesystem-only checkpointing.	.config	0291cd06
2026/03/19 00:04	ac8ff8fd1a6b Fix more printf findings	.config	0199f9a1
2026/03/18 10:18	f7324fa64c1d signals: Fix races that prevent a SIGCONT from aborting a SIGSTOP	.config	0199f9a1
2026/03/18 09:18	f7324fa64c1d signals: Fix races that prevent a SIGCONT from aborting a SIGSTOP	.config	c8810548
2026/03/17 19:53	70fb1c0d2c45 Fix the data race for mm.(*MemoryManager).as.	.config	c8810548
2026/03/17 07:52	c7907727f5af Automated rollback of changelist 879883699	.config	c01bca74
2026/03/16 19:22	df21591966b8 [tests] Remove direct dependency on linux_capability_util	.config	0737c18f
2026/03/16 16:03	df21591966b8 [tests] Remove direct dependency on linux_capability_util	.config	64e21424
2026/03/16 07:20	93555402076d Merge pull request #12589 from jbms:tcgets2	.config	64e21424
2026/03/15 04:50	93555402076d Merge pull request #12589 from jbms:tcgets2	.config	ee8d34d6
2026/03/14 01:59	7115280528d6 Symbolize and desymbolize the stacktrace in beforeSave and afterLoad.	.config	ee8d34d6
2026/03/13 13:43	e8a5075fec21 nogo: remove stdlib subcommand	.config	351cb5cf
2026/03/13 11:19	e8a5075fec21 nogo: remove stdlib subcommand	.config	2f7f359d
2026/03/12 22:06	d8b6072338d4 Internal change.	.config	2f7f359d
2026/03/12 10:07	293707e850ca Merge pull request #12686 from a7i:fix/iptables-restore-ipt-so-set-replace-12685	.config	4efadf07
2026/03/11 22:17	209337ec6309 Do not create profile/trace files if they are not set.	.config	2d88ab01
2026/03/11 14:19	f3f3086cd269 Deflake //test/syscalls:packet_mmap_test_native.	.config	2d88ab01
2026/03/11 02:17	f3f3086cd269 Deflake //test/syscalls:packet_mmap_test_native.	.config	86914af9
2026/03/10 14:14	c9735035b4c6 Update Have[RawIP/Packet]SocketCapability() to open raw/packet sockets.	.config	4cb25bc5
2026/03/10 14:06	c9735035b4c6 Update Have[RawIP/Packet]SocketCapability() to open raw/packet sockets.	.config	6972f302
2026/03/10 00:47	498c3ed97f23 Merge pull request #12689 from KevinZhao:fix/nvproxy-size-validation	.config	6972f302
2026/03/09 19:22	498c3ed97f23 Merge pull request #12689 from KevinZhao:fix/nvproxy-size-validation	.config	176bead5
2026/03/09 12:46	527012b63ce4 Internal change.	.config	176bead5
2026/03/07 13:18	527012b63ce4 Internal change.	.config	5cb44a80
2026/03/07 00:05	56114d1c6cd3 compressio: Handle zero-length non-nil key.	.config	5cb44a80
2026/03/06 23:03	8e713b88a0f3 Replace github.com/kr/pty with github.com/creack/pty.	.config	5cb44a80
2026/03/06 11:02	8e713b88a0f3 Replace github.com/kr/pty with github.com/creack/pty.	.config	41d8037d
2026/03/05 23:09	8e713b88a0f3 Replace github.com/kr/pty with github.com/creack/pty.	.config	31e9c887
2026/03/05 10:59	0841f58d1889 Add --per-pod-flag-override to gvisor-k8s-tool install.	.config	d20b04c8
2026/03/04 22:57	0a1bb9057526 Internal change	.config	a9fe5c9e
2026/03/04 21:39	0a1bb9057526 Internal change	.config	e6b6b96b
2026/03/04 10:56	4e233fa6bc7b Internal change.	.config	e6b6b96b
2026/03/04 02:39	4e233fa6bc7b Internal change.	.config	4180d919
2026/03/03 13:16	d68b68cd0e44 Fix runsc log and profile file handling.	.config	4180d919
2026/03/03 00:36	ec013ff364dc Create initial sandbox configuration spec.	.config	28b83e23
2026/03/03 00:11	a12250c82962 nvproxy: keep uvmFDMemmapFile.pfm refcount up to date	.config	28b83e23
2026/03/02 12:08	a12250c82962 nvproxy: keep uvmFDMemmapFile.pfm refcount up to date	.config	b9dd6534
2026/02/28 15:29	a12250c82962 nvproxy: keep uvmFDMemmapFile.pfm refcount up to date	.config	43249bac
2026/02/28 02:15	d5a453ca03ba Merge pull request #12447 from danielnorberg:fix-bind-mount-type-validation	.config	43249bac
2026/02/27 20:56	d5a453ca03ba Merge pull request #12447 from danielnorberg:fix-bind-mount-type-validation	.config	2cf092b8
2026/02/27 14:13	d676cf1324d0 nvproxy: Add support for 590.48.01.	.config	2cf092b8
2026/02/27 06:35	d676cf1324d0 nvproxy: Add support for 590.48.01.	.config	a2f13f71
2026/02/26 21:31	6ee74522ca38 Add more shim grouping tests.	.config	a2f13f71
2026/02/26 09:30	6ee74522ca38 Add more shim grouping tests.	.config	ffa54287
2026/02/26 09:19	6ee74522ca38 Add more shim grouping tests.	.config	e0f78d93
2026/02/25 20:07	a8ce0282b2c2 Fix flaky fuse save_resume tests	.config	e0f78d93
2026/02/25 07:52	c58e543f3da5 Reject unsupported file types in directfs.	.config	c162cde9
2026/02/25 02:03	c58e543f3da5 Reject unsupported file types in directfs.	.config	787dfb7c
2026/02/24 12:49	e41477ffa935 Internal change.	.config	787dfb7c
2026/02/24 10:47	e41477ffa935 Internal change.	.config	41d2fa6a
2026/02/23 21:45	7551ab05d9b4 `runsc metric-server`: Tag metrics as per-sandbox vs process-wide.	.config	41d2fa6a
2026/02/23 20:13	7551ab05d9b4 `runsc metric-server`: Tag metrics as per-sandbox vs process-wide.	.config	7c9658af
2026/02/23 09:44	eb261c6145d1 gofer: Improve restore failure messages.	.config	7c9658af
2026/02/21 03:22	eb261c6145d1 gofer: Improve restore failure messages.	.config	6e7b5511
2026/02/20 20:20	2ba75b93bf8e Merge pull request #12598 from tamird:nogo-more-checks	.config	741f5161
2026/02/20 15:19	1985b831b991 Do not panic if RegisterPacketEndpoint failed during restore.	.config	741f5161
2026/02/20 03:18	1985b831b991 Do not panic if RegisterPacketEndpoint failed during restore.	.config	17d780d6
2026/02/19 17:58	d473cc236bf8 Add "debug-command" to allowlist for annotation-based flag override.	.config	73a252ac
2026/02/19 15:16	c78d9e41a0b2 Ensure s.mu is locked before accessing nextTrap.	.config	73a252ac
2026/02/19 03:27	c78d9e41a0b2 Ensure s.mu is locked before accessing nextTrap.	.config	746545b8
2026/02/18 15:29	27046a53aa92 Merge pull request #12607 from quetz:tcp-sack-btreeg	.config	77d4d919
2026/02/18 03:19	7ce75cc793ca hostinet: Replacing Seek with ReadAt.	.config	39751c21
2026/02/17 18:11	3f6a9614cc76 Add a method for stopping external network access while a sandbox is running.	.config	f4288eed
2026/02/17 15:08	813e3124c3d7 netstack: Added check for `CAP_NET_ADMIN` for get/setsockopt.	.config	f4288eed
2026/02/17 02:05	813e3124c3d7 netstack: Added check for `CAP_NET_ADMIN` for get/setsockopt.	.config	e439b951
2026/02/16 14:03	813e3124c3d7 netstack: Added check for `CAP_NET_ADMIN` for get/setsockopt.	.config	5d52cba5
2026/02/14 05:42	813e3124c3d7 netstack: Added check for `CAP_NET_ADMIN` for get/setsockopt.	.config	1e62d198
2026/02/13 16:22	67ff7826fdd7 Add a metric to track the presence of the metric server.	.config	1e62d198
2026/02/13 04:16	bf7d4ccdb225 Terminate connections only for restore (not for resume).	.config	6a673c50
2026/02/12 22:43	bf7d4ccdb225 Terminate connections only for restore (not for resume).	.config	504cb1bf
2026/02/12 16:15	fcc60e001175 Print stack trace when endpoint receiver is nil (for debugging only).	.config	504cb1bf
2026/02/12 04:14	fcc60e001175 Print stack trace when endpoint receiver is nil (for debugging only).	.config	76a109e2
2026/02/11 16:13	fcc60e001175 Print stack trace when endpoint receiver is nil (for debugging only).	.config	65ce8d55
2026/02/11 09:04	fcc60e001175 Print stack trace when endpoint receiver is nil (for debugging only).	.config	f03c4191
2026/02/10 19:49	2239fe6fb93a `seccomp`: Refactor to allow arbitrary number of `RuleSet`s.	.config	f03c4191
2026/02/08 22:40	9fb1260a5885 Internal change.	.config	f03c4191
2026/02/08 09:29	5a038ae86d68 runsc: Refactor cli.Run to accept commands map	.config	f03c4191
2026/02/06 23:38	3967795e1aa0 Merge pull request #12577 from tanyifeng:fix-return-rst	.config	f03c4191
2026/02/06 10:19	f586013d9ede Merge pull request #12567 from nt:claude/fix-turbine-orch-error-X0OIm	.config	f03c4191
2026/02/05 21:10	387f0682d620 sockets: Bind get/set sockopts to socket types.	.config	f03c4191
2026/02/05 11:27	7210e818e4ed Internal change.	.config	4936e85c
2026/02/05 09:04	8a1f424b4e2c Update `getrusage(2)` field support status to reflect implementation.	.config	4936e85c
2026/02/04 13:22	8a1f424b4e2c Update `getrusage(2)` field support status to reflect implementation.	.config	ea10c935
2026/02/03 21:10	8a1f424b4e2c Update `getrusage(2)` field support status to reflect implementation.	.config	42b01fab
2026/02/03 09:09	8a1f424b4e2c Update `getrusage(2)` field support status to reflect implementation.	.config	6df4c87a
2026/02/03 08:49	8a1f424b4e2c Update `getrusage(2)` field support status to reflect implementation.	.config	d78927dd
2026/02/02 19:45	f87a10ed3fc6 Merge pull request #12122 from google:dependabot/github_actions/actions/stale-10	.config	d78927dd
2026/02/02 19:26	f87a10ed3fc6 Merge pull request #12122 from google:dependabot/github_actions/actions/stale-10	.config	018ebef2
2026/02/02 07:44	9dd9b9b1b6c4 Merge pull request #9876 from kevinmingtarja:update-command-impl	.config	018ebef2
2026/01/31 22:51	9dd9b9b1b6c4 Merge pull request #9876 from kevinmingtarja:update-command-impl	.config	6b8752f2
2026/01/31 19:12	9dd9b9b1b6c4 Merge pull request #9876 from kevinmingtarja:update-command-impl	.config	afc0c4d4
2026/01/31 10:49	cc6d75530246 Update spec validation for args.	.config	afc0c4d4
2026/01/30 23:57	cc6d75530246 Update spec validation for args.	.config	c75a2f6e
2026/01/30 22:48	5c79e3901d0a Improve logging and error handling in image tests	.config	c75a2f6e
2026/01/30 10:47	5c79e3901d0a Improve logging and error handling in image tests	.config	ea6dba22
2026/01/29 22:45	6b6332029773 Store the CPU time usage in the metadata during save operation.	.config	bfa73b7b
2026/01/29 18:05	6b6332029773 Store the CPU time usage in the metadata during save operation.	.config	aeb6fdd5
2026/01/29 10:43	5f31525f7613 Catch negative values in `timer_settime(2)`.	.config	aeb6fdd5
2026/01/29 00:44	5f31525f7613 Catch negative values in `timer_settime(2)`.	.config	0adc945e
2026/01/28 22:41	1f42df880e93 Speedup Ruby test and hopefully reduce its flakiness	.config	0adc945e
2026/01/28 10:40	1f42df880e93 Speedup Ruby test and hopefully reduce its flakiness	.config	004c195c
2026/01/27 23:39	2d45bac28a2a Merge pull request #12548 from ericpauley:stack-rlock	.config	3029c699
2026/01/27 20:37	46ee21de717d arch: tolerate fpu.State.SanitizeUser errors during SignalRestore	.config	3029c699
2026/01/27 09:09	46ee21de717d arch: tolerate fpu.State.SanitizeUser errors during SignalRestore	.config	43e1df1d
2026/01/26 20:34	6399fd944357 gpu: Undeprecate --nvproxy-docker.	.config	efb3e894
2026/01/26 19:14	6399fd944357 gpu: Undeprecate --nvproxy-docker.	.config	55756628
2026/01/26 08:32	38123b53da96 pgalloc: reload ma before ma.commitSeq <= lastCommitSeq check	.config	55756628
2026/01/25 20:31	38123b53da96 pgalloc: reload ma before ma.commitSeq <= lastCommitSeq check	.config	02bac031
2026/01/25 00:22	38123b53da96 pgalloc: reload ma before ma.commitSeq <= lastCommitSeq check	.config	40acda8a
2026/01/24 11:06	7381ccc9a437 Add documentation for EROFS support in gVisor.	.config	40acda8a
2026/01/23 23:04	db375d9f645c Mark all ABI structs with `structs.HostLayout`; verify this remains true.	.config	4f25b9b4
2026/01/23 10:54	1c7c74f919f4 test: deflake PreadvTest.MMConcurrencyStress save/restore tests on FUSE	.config	1aa92270
2026/01/22 23:00	44de367500c3 Add more shards for bind_test to fix the timeout.	.config	82c9c083
2026/01/22 10:57	a19380c9dd15 hostinet: avoid EPOLL_CTL_MOD syscalls from application poll()	.config	2367ed1e
2026/01/22 01:26	adb6b0859143 Increase size and add sharding to fcntl_test.	.config	6984f21f
2026/01/21 12:05	7e430ef9582d kvm: handle mappings in the extended address space properly	.config	6984f21f
2026/01/21 12:02	7e430ef9582d kvm: handle mappings in the extended address space properly	.config	6f1aa2f9
2026/01/20 22:37	9dd3da2ee883 nftables: Enable syscall native tests in buildkite.	.config	6f1aa2f9
2026/01/20 21:30	509480e92861 nftables: Enable buildkite nftable docker tests with runc and runsc.	.config	6f1aa2f9
2026/01/20 08:55	509480e92861 nftables: Enable buildkite nftable docker tests with runc and runsc.	.config	300ecf9e
2026/01/19 20:43	509480e92861 nftables: Enable buildkite nftable docker tests with runc and runsc.	.config	572effc1
2026/01/19 08:41	509480e92861 nftables: Enable buildkite nftable docker tests with runc and runsc.	.config	45ab0e95
2026/01/17 03:58	509480e92861 nftables: Enable buildkite nftable docker tests with runc and runsc.	.config	20d37d28
2026/01/16 20:48	eca1f2af7f09 Refactor runsc shim to move container specific logic out of task service.	.config	20d37d28
2026/01/16 08:46	eca1f2af7f09 Refactor runsc shim to move container specific logic out of task service.	.config	592aa8f1
2026/01/16 06:06	eca1f2af7f09 Refactor runsc shim to move container specific logic out of task service.	.config	722ac325
2026/01/15 16:34	271215a9575c Suspend fdnotifier during save/restore.	.config	722ac325
2026/01/15 13:46	271215a9575c Suspend fdnotifier during save/restore.	.config	d1b870e1
2026/01/15 00:37	6d1a0bb4186e Automated rollback of changelist 832558564	.config	d1b870e1
2026/01/14 11:27	e0a2f604cc9f Support TPU7x.	.config	d1b870e1
2026/01/13 22:14	428bb2a82d14 nftables: Enable jump support.	.config	d1b870e1
2026/01/13 09:01	f23d52117c28 Merge pull request #12461 from tamird:build-on-mac	.config	d1b870e1
2026/01/12 19:51	b3aa7ab31159 Automated rollback of changelist 854268804	.config	d1b870e1
2026/01/10 04:12	127e4f8c1e93 image: Update Go builder image to 1.25.	.config	d1b870e1
2026/01/09 15:02	3652fc8dd1a7 Internal change.	.config	d1b870e1
2026/01/09 01:52	c37fd0584fc2 Cleanup creds-related funcs and change CapError behavior	.config	d1b870e1
2026/01/08 12:41	5aa19429c3bd kvm: limit virtual address space to 47-bit on amd64	.config	d1b870e1
2026/01/07 23:13	65762f872f49 Remove incorrect uses of NAME_MAX.	.config	d1b870e1
2026/01/07 10:03	aadcd20dfcf5 msgqueue: check permissions in Queue.Copy()	.config	d1b870e1
2026/01/06 20:53	8e2d907742f5 nftables: Added a generic method to extract attribute.	.config	d1b870e1
2026/01/06 07:36	534579b743fb watchdog: Add a "stuck goroutines" suffix to the full stack dump at panic	.config	d1b870e1
2026/01/05 18:27	63d8c3537a40 sentry/kernel: check for pending signals after Task.endInternalStopLocked()	.config	d1b870e1
2025/12/30 22:06	c8a1af2c00ca Fix execveat pathname construction when called on memfd.	.config	d1b870e1
2025/12/29 18:25	3ad5b57e0557 Add --tpu flag to `spec` subcommand for automatically adding TPU devices.	.config	d1b870e1
2025/12/26 23:09	3bc9fe48b39a Fix incorrect cap checks in pivotroot(), mbind(), and prctl()	.config	d1b870e1
2025/12/22 18:09	466fd4e909b6 memmap: Make NoMapInternal savable.	.config	d1b870e1
2025/12/20 19:38	89151a08e48f Internal change.	.config	d1b870e1
2025/12/20 06:19	9f6ccf11ca07 Exclude failing Java ConnectTimeout tests.	.config	d1b870e1
2025/12/19 17:12	333ec3e0c78c Automated Code Change	.config	d1b870e1
2025/12/17 11:03	515fb9e6bb4d netlink: Supply IFLA_MASTER in RTM_NEWLINK messages	.config	d1b870e1
2025/12/16 21:53	f9423e9b6d1f Merge pull request #12368 from nicolasgarza:remove-slice-header	.config	d1b870e1
2025/12/16 08:42	aaf09da3a68a Add a syscall test around unshare(CLONE_NEWUSER|CLONE_NEWNET)	.config	d1b870e1
2025/12/15 19:33	0b9bde06d0f0 kvm: RSEQ: Add RSEQ support	.config	d1b870e1
2025/12/13 10:55	e79ac3734065 Internal change.	.config	d1b870e1
2025/12/12 21:39	6317c35bb75f Internal change	.config	d1b870e1
2025/12/12 05:54	63343ff21f62 netlink: Check for CAP_NET_ADMIN in the netns-owning userns in send()	.config	d1b870e1
2025/12/11 16:34	f77ef690d1d3 nftables: Added support for meta set and get/load init.	.config	d1b870e1
2025/12/11 01:54	7e66b6cb36de tun: Check for cap in the netns-owning userns when creating tun	.config	d1b870e1
2025/12/10 12:39	4485bf5b2293 nvproxy: Add support for 580.105.08 driver.	.config	d1b870e1
2025/12/09 22:34	9a467482666b Fix a bug around IFLA_NET_NS_FD	.config	d1b870e1
2025/12/09 09:23	561ff6d235e6 proc: fix security checks on /proc/pid files	.config	d1b870e1
2025/12/08 20:07	2c31ec14a88a Add support for TPU7x Ghostfish.	.config	d1b870e1
2025/12/06 01:47	9d75d560f532 Make --allow-packet-socket-write a public flag.	.config	d1b870e1
2025/12/05 12:39	c0bf1295ce8d Remove usage of net-disconnect-ok flag.	.config	d1b870e1
2025/12/04 23:29	23ece0fab788 state: fix nil dereference when encodeState.Save() => wire.Save() fails	.config	d1b870e1
2025/12/04 07:44	86e78c1f393c Internal change.	.config	d1b870e1
2025/12/03 18:29	17e4b24d67ea Add test coverage for gVisor w/ container 2.1.0.	.config	d1b870e1
2025/12/03 05:21	c9c8dadf3076 nftables: Added support for payload set and load operation init.	.config	d1b870e1
2025/12/01 19:43	5ebe823d4504 Prevent pollution in packet socket tests	.config	d1b870e1
2025/11/28 13:14	d25a12513bcf runsc: implement -h and -help flags	.config	d1b870e1
2025/11/26 23:33	d25a12513bcf runsc: implement -h and -help flags	.config	e8331348
2025/11/26 11:34	bcd588ae5561 Update docs for preadv2/pwritev2 unsupported RWF flags.	.config	c116feb4
2025/11/26 04:04	fe844bfed94d Leave nlmsg_pid at 0 for netlink multicast	.config	bf6fe8fe
2025/11/25 14:54	fc40e232ff54 nftables: Added support for nla policy.	.config	bf6fe8fe
2025/11/25 01:42	95f87697a897 Allow netlink sockets to send to RTMGRP_LINK	.config	bf6fe8fe
2025/11/24 09:14	8bc2d00d53cc Internal change.	.config	bf6fe8fe
2025/11/21 21:56	8bc2d00d53cc Internal change.	.config	4fb8ef37
2025/11/21 10:03	43ca3989e6a7 Merge pull request #12117 from wangxinmian:go	.config	52ed5c96
2025/11/20 22:03	486eeaa2bf2a Internal change.	.config	280ea308
2025/11/20 10:01	daef357270bd sentry: don't try to dump/restore unsupported FPU states	.config	2cc4c24a
2025/11/19 20:53	e3403becc1a2 Internal change.	.config	26ee5237
2025/11/19 17:02	e3403becc1a2 Internal change.	.config	82d7b894
2025/11/19 08:51	2d04b0468aa9 nftables: Parse chain type from the correct attribute.	.config	82d7b894
2025/11/19 01:40	2d04b0468aa9 nftables: Parse chain type from the correct attribute.	.config	ef766cd7
2025/11/18 12:29	2d94e669ae96 Avoid netlink deadlock	.config	ef766cd7
2025/11/17 23:15	e2c42ec307c0 nftables: Changing HostToNet/NetToHost implementaion.	.config	ef766cd7
2025/11/17 21:12	4304bcd596d8 Adjust runtime schedt.nmspinning offset for go1.26	.config	ef766cd7
2025/11/17 11:44	4304bcd596d8 Adjust runtime schedt.nmspinning offset for go1.26	.config	de73685d
2025/11/17 09:10	9fc4303aefe1 Panic if transport.connectionlessEndpoint.baseEndpoint.receiver is mutated during save.	.config	de73685d
2025/11/15 04:51	9fc4303aefe1 Panic if transport.connectionlessEndpoint.baseEndpoint.receiver is mutated during save.	.config	f7988ea4
2025/11/15 00:06	19abc451fac5 SGLang GKE test	.config	f7988ea4
2025/11/14 12:20	19abc451fac5 SGLang GKE test	.config	6d98c1c8
2025/11/14 03:44	fb338e73b424 Mark restore as failed when any runsc restore fails.	.config	07e030de
2025/11/13 14:35	0f8351443c9f Handle restore failure more robustly.	.config	07e030de
2025/11/13 01:24	c976ee8cb327 Add loader state checks for start commands.	.config	07e030de
2025/11/12 12:21	197c0b33354c Test that adding an epoll to an epoll doesn't immediately wake the outer epoll	.config	07e030de
2025/11/12 06:55	197c0b33354c Test that adding an epoll to an epoll doesn't immediately wake the outer epoll	.config	4e1406b4
2025/11/11 17:46	d7915bc4a3dd Use the updated Docker image in ollama GKE tests.	.config	4e1406b4
2025/11/08 07:15	cd0901c24964 kvm: add more debug info on unexpected exits	.config	4e1406b4
2025/11/07 18:05	6792b9a5b3b9 Update kythe	.config	4e1406b4
2025/11/07 04:35	20d10167be6f Fix: Pass stack pointer to `__init` in rseq arm64 test start.	.config	4e1406b4
2025/11/06 15:33	605acfd94beb packetdrill: Fix packetdrill test script	.config	4e1406b4
2025/11/06 13:33	605acfd94beb packetdrill: Fix packetdrill test script	.config	a6c9c731
2025/11/06 00:23	c0171a1ef32a runsc: allow to build runsc-race with code coverage instrumentation	.config	a6c9c731
2025/11/05 07:33	6db745970118 Implement SO_PEERCRED socket option for UNIX sockets and its tests.	.config	a6c9c731
2025/11/04 18:30	2e0758be47d6 Internal change.	.config	a6c9c731
2025/11/04 15:30	2e0758be47d6 Internal change.	.config	686bf657
2025/11/04 02:25	589c7630766b runsc/cgroup: don't no-op cgroupSystemd.Join() if unit exists	.config	686bf657
2025/11/04 01:38	feddee9574d7 kernel: add ThreadGroup.SigsegvLock/Unlock	.config	686bf657
2025/11/03 13:37	feddee9574d7 kernel: add ThreadGroup.SigsegvLock/Unlock	.config	e6c64ba8
2025/10/31 07:16	feddee9574d7 kernel: add ThreadGroup.SigsegvLock/Unlock	.config	2c50b6a9
2025/10/30 18:04	fe72162af296 Rework netfilter tests in preparation for running them on Buildkite.	.config	2c50b6a9
2025/10/30 15:02	b7ef981f5ddb nvproxy: Add support for 535.274.02 and 570.195.03.	.config	2c50b6a9
2025/10/29 22:32	b7ef981f5ddb nvproxy: Add support for 535.274.02 and 570.195.03.	.config	fd2207e7
2025/10/29 00:41	909507170b70 Deflake //pkg/tcpip/stack:bridge_test.	.config	fd2207e7
2025/10/28 11:31	d93c5f5ac2ad Add SGLang Docker tests/benchmark	.config	fd2207e7
2025/10/27 22:23	a2af0eaa5412 eventfd: writes must be exactly 8 bytes	.config	fd2207e7
2025/10/27 09:18	f611d7f195b7 Add checkpointExtra and checkpointOptsExtra.	.config	fd2207e7
2025/10/24 10:44	f611d7f195b7 Add checkpointExtra and checkpointOptsExtra.	.config	c0460fcd
2025/10/23 21:33	87373a837f6d runsc/cmd: fix unintended FD closing in gofer	.config	c0460fcd
2025/10/23 07:56	8eca12250494 embeddedbinary: fix ForkExec flake	.config	c0460fcd
2025/10/22 18:52	c952130ed502 bazel: Remove WORKSPACE again	.config	c0460fcd
2025/10/22 14:42	2b0bc4aacd32 Add document for C/R wiht different CPU features.	.config	c0460fcd
2025/10/22 05:37	2b0bc4aacd32 Add document for C/R wiht different CPU features.	.config	252fbbad
2025/10/21 16:27	e88bc9236af9 Internal change.	.config	252fbbad
2025/10/21 07:31	9daae06f8ded sentry/kernel: unshare atomically and without holding Task.mu unnecessarily	.config	9832ed61
2025/10/20 18:21	df97ff95ff53 Do not close processors during save, but instead close during restore.	.config	9832ed61
2025/10/20 17:28	afee3faf017f platform/ptrace: return errors from switchToApp() rather than panicking	.config	9832ed61
2025/10/18 11:51	afee3faf017f platform/ptrace: return errors from switchToApp() rather than panicking	.config	19568248
2025/10/17 22:40	082860210e6b Merge pull request #12229 from dylanlanigansmith:dylanlanigansmith-fix-mknodFromTar-writing-empty-files	.config	19568248
2025/10/17 02:51	a46c37df6e40 runsc/cmd: set Statefile.Name() to "statefile"	.config	19568248
2025/10/16 13:41	923cb75d2443 Document how to snapshot rootfs tar and start a sandbox with the tar file.	.config	19568248
2025/10/16 00:31	a730d6cf725b Enable rootfs only snapshot in runsc.	.config	19568248
2025/10/15 12:32	b3f000ac172f Do not retry on invalid UDP send buffers	.config	82df6b00
2025/10/15 00:12	be970bff650b stateio: tweak AsyncWriter.Finalize precondition	.config	b6605ba8
2025/10/14 11:02	b2b828e91b9d Merge pull request #12217 from google:dependabot/github_actions/github/codeql-action-4	.config	b6605ba8
2025/10/13 21:50	414716c8191b Skip Docker restore tests on Docker v28+.	.config	b6605ba8
2025/10/13 10:39	b8da8ca2c0eb Internal change.	.config	b6605ba8
2025/10/11 14:19	b8da8ca2c0eb Internal change.	.config	ff1712fe
2025/10/11 01:10	828a10380162 Internal change.	.config	ff1712fe
2025/10/10 11:59	ed08c26f3c56 Internal change.	.config	ff1712fe
2025/10/09 22:54	6448c7bb13d3 Adjust WaitReasonSemacquire et al. for go1.26	.config	ff1712fe
2025/10/09 17:37	6448c7bb13d3 Adjust WaitReasonSemacquire et al. for go1.26	.config	7e2882b3
2025/10/08 22:47	0799336d64be Deflake IntervalTimerTest tests that relied on old kernel behavior.	.config	7e2882b3
2025/10/07 15:57	6bf3c4885132 Internal change.	.config	7e2882b3
2025/10/07 00:15	903472a36836 Modify when FUSE_FLUSH is sent in FUSE implementation.	.config	8ef35d49
2025/10/06 20:49	73f1154f95e7 stateio: add BufReader, BufWriter, IOReader, IOWriter	.config	8ef35d49
2025/10/06 08:50	73f1154f95e7 stateio: add BufReader, BufWriter, IOReader, IOWriter	.config	91305dbe
2025/10/03 22:30	18edfee32572 Add async handler methods to FUSE DeviceFD.	.config	49379ee0
2025/10/02 09:59	5ad0647ea1a5 Restore WORKSPACE file.	.config	49379ee0
2025/10/01 22:01	d660fbaa7edf Deny SOL_IP socket options for raw AF_INET6 sockets	.config	267f56c6
2025/10/01 09:48	f943594ab08f Deflake the TestTcpdump image_test	.config	3af39644
2025/10/01 00:34	48fd85092b41 Merge pull request #12184 from avagin:bazel-runtime-test-cache	.config	65a0eece
2025/09/30 11:23	e1d2468af9c1 Prevent inode sharing for directory dentries by by-passing cache.	.config	65a0eece
2025/09/29 17:36	dd4881af83ed Add //pkg/sentry/state/stateio and use it for async page loading.	.config	86341da6
2025/09/29 08:07	4764db91e64f Merge pull request #12160 from avagin:bazel-mod-switch	.config	86341da6
2025/09/26 21:45	4764db91e64f Merge pull request #12160 from avagin:bazel-mod-switch	.config	001c9061
2025/09/26 17:33	525aa49cffd0 Add support for FUSE_DEV_IOC_CLONE.	.config	001c9061
2025/09/26 06:25	525aa49cffd0 Add support for FUSE_DEV_IOC_CLONE.	.config	0abd0691
2025/09/25 17:09	092d47419201 Refactor the FUSE dev->connection relationship to be many->one.	.config	0abd0691
2025/09/25 02:46	cd3b33f93629 Merge pull request #11972 from terenceli:issue9918	.config	0abd0691
2025/09/24 02:52	de57ab2a5822 Improvements to stuck task tool	.config	0abd0691
2025/09/23 14:48	f3a5cc681969 Log the raw argv when launching processes	.config	e667a34f
2025/09/23 10:21	f3a5cc681969 Log the raw argv when launching processes	.config	0ac7291c
2025/09/22 21:06	efacb45c502a fsgofer: update lastUnlockedDentry only after unlocking the dentry	.config	0ac7291c
2025/09/22 18:09	efacb45c502a fsgofer: update lastUnlockedDentry only after unlocking the dentry	.config	770ff59f
2025/09/22 09:04	6448dbe1b799 procfs: release the file system mutex on the error path	.config	770ff59f
2025/09/19 08:59	6448dbe1b799 procfs: release the file system mutex on the error path	.config	67c37560
2025/09/18 22:33	6448dbe1b799 procfs: release the file system mutex on the error path	.config	e2beed91
2025/09/18 05:23	29259326ccc9 pgalloc: one async page loader per pages file	.config	e2beed91
2025/09/17 06:53	2c49d9fd3897 kernel: fix circular locking in FSContext.destroy	.config	e2beed91
2025/09/16 17:43	20452a237b48 net/tun: Do not DecRef a closed TUN endpoint when un-persisting it.	.config	e2beed91
2025/09/15 21:12	9041e2310cf4 Allow default Docker image base to be configurable.	.config	e2beed91
2025/09/11 22:24	57697a8f6350 kernel: periodically preempt tasks when platform max concurrency is exceeded	.config	e2beed91
2025/09/11 09:09	40dfee4a1a3f Automatically enable host UDS for GCS FUSE sidecar containers.	.config	e2beed91
2025/09/10 23:51	2188c04c230b Automated rollback of changelist 805108888	.config	fdeaa69b
2025/09/09 18:51	e51dca431b51 Remove old NICs and routes during save/restore.	.config	fdeaa69b
2025/09/09 12:02	d6ba9944e431 Don't silently drop errors from tcp.Endpoint.handleListenSegment().	.config	d291dd2d
2025/09/08 22:48	fa4149d75b5e Merge pull request #12121 from google:dependabot/github_actions/actions/labeler-6	.config	d291dd2d
2025/09/06 06:11	fde8adbe9829 Do not save loopback NIC, it is already being set in ReplaceConfig.	.config	d291dd2d
2025/09/05 17:00	bf4fd11e1bf6 Make `sandbox.Pid` public and use it for `Container.GoferPid`.	.config	d291dd2d
2025/09/04 02:26	1f322159d285 Update LLVM version to llvm/llvm-project@cb2f0d0a5f14.	.config	d291dd2d
2025/09/03 14:24	376319f48048 Change `metric.fieldMapper` methods to use pointer receivers.	.config	19216959
2025/08/30 07:20	376319f48048 Change `metric.fieldMapper` methods to use pointer receivers.	.config	807a3b61
2025/08/29 18:06	1b291cbddc47 Remove obsolete TODOs related to hard links in gofer.	.config	807a3b61
2025/08/29 06:07	2f9565b48833 Merge pull request #12075 from cuiweixie:reflect.TypeFor	.config	3e1beec6
2025/08/28 18:22	1826627343ba kvm: ensure hint address > 1<<47 when necessary	.config	d401b9d7
2025/08/28 08:54	bb664f219b9c Exclude failing Java test.	.config	bee60a83
2025/08/26 13:31	bb664f219b9c Exclude failing Java test.	.config	e12e5ba4
2025/08/22 00:45	bb664f219b9c Exclude failing Java test.	.config	bf27483f
2025/08/21 12:44	bb664f219b9c Exclude failing Java test.	.config	fd2d17b5
2025/08/20 23:22	bb664f219b9c Exclude failing Java test.	.config	0b9605c8
2025/08/20 19:40	bb664f219b9c Exclude failing Java test.	.config	bd178e57
2025/08/20 11:20	c07c524742a7 Add IOCTL NV2080_CTRL_CMD_FB_QUERY_DRAM_ENCRYPTION_STATUS	.config	bd178e57
2025/08/19 21:00	c07c524742a7 Add IOCTL NV2080_CTRL_CMD_FB_QUERY_DRAM_ENCRYPTION_STATUS	.config	79512909
2025/08/19 08:58	5ba23728415e Merge pull request #11996 from ioterw:shebang	.config	523f460e
2025/08/18 23:40	14ff9abbd639 gpu: Remove `--cuda_verify_compatibility` flag.	.config	6e8d317a
2025/08/18 20:55	fc2f4df6597a netstack: set loopback as outgoing NIC for local traffic	.config	6e8d317a
2025/08/16 20:27	fc2f4df6597a netstack: set loopback as outgoing NIC for local traffic	.config	1804e95e
2025/08/16 02:05	5077500e6bee Merge pull request #11983 from stepancheg:pid-file-2	.config	1804e95e
2025/08/15 12:55	e52b1fccd404 Internal change.	.config	1804e95e
2025/08/14 23:49	25a11441199d Close TCP endpoints on restore error instead of panics.	.config	1804e95e
2025/08/14 18:33	25a11441199d Close TCP endpoints on restore error instead of panics.	.config	dcc075fb
2025/08/14 11:52	3cc1182c9d37 Merge pull request #12029 from stepancheg:go-mod-go-branch	.config	dcc075fb
2025/08/13 19:11	3cc1182c9d37 Merge pull request #12029 from stepancheg:go-mod-go-branch	.config	22ec1469
2025/08/13 06:02	040777766f38 Merge pull request #11498 from tianyuzhou95:albert/cpuid	.config	22ec1469
2025/08/12 16:45	be7706f521ac Internal change.	.config	22ec1469
2025/08/12 14:05	1f31ba17e085 Hard links Support Phase 1: Gofer Client dentry/inode refactor	.config	22ec1469
2025/08/12 06:28	1f31ba17e085 Hard links Support Phase 1: Gofer Client dentry/inode refactor	.config	c06e8995
2025/08/11 17:18	a9049fb95720 Update nvidia_driver_differ to also check ioctl numbers.	.config	c06e8995
2025/08/08 22:21	d54f31a72b1d nvproxy: Fix ioctl number inconsistencies in the version table.	.config	32a0e5ed
2025/08/08 10:19	b5a53651c3eb nvproxy: Add 535.261.03 and 570.172.08 drivers.	.config	56444e07
2025/08/07 22:17	dc7d71f37d12 Introduce IoctlInfo to provide information about an ioctl.	.config	6a893178
2025/08/07 10:16	50318415e83d Fix typo	.config	04cffc22
2025/08/06 22:14	7048e11fa6c3 Put some BugTracebacks in Systrap.	.config	9a42d6b1
2025/08/06 10:13	2099bc1c6a2e Rename WARN* functions to BugTraceback*, and optimize them for inlining.	.config	4bd24a3e
2025/08/05 21:41	1fb4c0861973 Fix leaking /proc/self/mem of a new process after execve.	.config	ffe1dd46
2025/08/05 09:39	094dd52cea4a kernel: handle MemoryManager().Activate() errors	.config	37880f40
2025/08/04 21:19	153f262575a6 nvproxy: Add support for NV_SEMAPHORE_SURFACE_CTRL_CMD_UNBIND_CHANNEL.	.config	f5bcc8dc
2025/08/04 09:13	67b57f6fa0de Internal change.	.config	abdcb213
2025/08/04 07:47	67b57f6fa0de Internal change.	.config	7368264b
2025/08/02 14:19	fc9c972fa636 runsc: Enable cpu-num-from-quota by default	.config	7368264b
2025/08/02 00:49	b47d21ef21a6 Implement WARN* helper functions.	.config	7368264b
2025/08/01 19:04	b47d21ef21a6 Implement WARN* helper functions.	.config	40127d41
2025/08/01 12:47	6cadfa6c8fe1 Fix: Ensure that unbound Netlink sockets are bound when sending a message.	.config	40127d41
2025/08/01 00:44	6cadfa6c8fe1 Fix: Ensure that unbound Netlink sockets are bound when sending a message.	.config	0c075d67
2025/07/31 21:48	6cadfa6c8fe1 Fix: Ensure that unbound Netlink sockets are bound when sending a message.	.config	3526e777
2025/07/31 12:43	3e0b53db6936 Clean up p9 package.	.config	3526e777
2025/07/31 03:28	3e0b53db6936 Clean up p9 package.	.config	f8f2b4da
2025/07/30 14:19	14c22da65f04 Serialize writes to slice of precompiled seccomp programs.	.config	f8f2b4da
2025/07/30 01:10	2305d33da145 tmpfs: Skip socket files when generating tar archive.	.config	f8f2b4da
2025/07/29 19:49	2305d33da145 tmpfs: Skip socket files when generating tar archive.	.config	ba28e0a8
2025/07/29 13:08	da240c1787ac nvproxy: Add support for missing ioctls required to run vulkaninfo.	.config	ba28e0a8
2025/07/29 01:06	da240c1787ac nvproxy: Add support for missing ioctls required to run vulkaninfo.	.config	c4a95487
2025/07/28 23:00	da240c1787ac nvproxy: Add support for missing ioctls required to run vulkaninfo.	.config	6654ea9c
2025/07/28 13:04	8a89a2fab4a2 vfs: call UnregisterFileAsyncHandler before FileDescriptionImpl.Release	.config	6654ea9c
2025/07/26 07:26	8a89a2fab4a2 vfs: call UnregisterFileAsyncHandler before FileDescriptionImpl.Release	.config	fb8f743d
2025/07/25 18:14	0dcd321dbc11 Ensure Agent run loop is finished before returning from Stop.	.config	fb8f743d
2025/07/24 23:05	88f0a2610332 Install docker compose plugin in gVisor's dind image.	.config	fb8f743d
2025/07/24 21:00	d335069c7ec4 Nftables support handles for rules.	.config	fb8f743d
2025/07/24 12:19	d335069c7ec4 Nftables support handles for rules.	.config	65d60d73
2025/07/24 00:19	d335069c7ec4 Nftables support handles for rules.	.config	0c1d6ded
2025/07/23 12:16	2ec68434d7cd Update seccomp filters to support new kernels	.config	e0b9ac93
2025/07/23 01:50	2ec68434d7cd Update seccomp filters to support new kernels	.config	e1dd4f22
2025/07/23 00:30	00a6e4d5e555 `specutils`: Add function to allow logging to a custom logger function.	.config	e1dd4f22
2025/07/22 12:12	00a6e4d5e555 `specutils`: Add function to allow logging to a custom logger function.	.config	af30dea9
2025/07/22 11:08	00a6e4d5e555 `specutils`: Add function to allow logging to a custom logger function.	.config	1555463b
2025/07/21 22:01	304075324c8b `iperf_test`: Better debug logging on failure.	.config	1555463b
2025/07/21 18:06	304075324c8b `iperf_test`: Better debug logging on failure.	.config	56d87229
2025/07/21 09:59	9ea209fd11eb Fix directfs restore for deleted regular file when read handle is not available	.config	56d87229
2025/07/20 04:17	9ea209fd11eb Fix directfs restore for deleted regular file when read handle is not available	.config	f550e092
2025/07/19 00:00	d7830d968c56 Implement functionality for Nftables GetChain message.	.config	f550e092
2025/07/18 10:37	db69f0048be5 PGO benchmarks: Only run a representative subset of benchmark tests.	.config	f550e092
2025/07/17 21:10	da551ec98173 Add mutex locking to netfilter socket operations with nftables.	.config	88248e14
2025/07/17 08:57	728dc484bcb5 Nftables New Chain implementation	.config	89164500
2025/07/16 18:47	128211909518 gofer: Support restore of deleted directories whose original path is occupied.	.config	44f8051e
2025/07/16 06:37	3b6e02d26316 overlay: return st_nlink=1 for directories	.config	124ec9cc
2025/07/16 01:37	3b6e02d26316 overlay: return st_nlink=1 for directories	.config	03fcfc4b
2025/07/15 12:24	e35f63555772 Merge pull request #11924 from geekvest:master	.config	03fcfc4b
2025/07/14 22:55	c2f9f2752729 Merge pull request #11850 from OkamiW:udp-forwarder-not-handled-packets	.config	03fcfc4b
2025/07/14 22:12	c2f9f2752729 Merge pull request #11850 from OkamiW:udp-forwarder-not-handled-packets	.config	c812f99c
2025/07/14 10:54	7323f1df8aad Add tests that run docker exec command in gvisor.	.config	c812f99c
2025/07/10 22:45	7323f1df8aad Add tests that run docker exec command in gvisor.	.config	3cda49cf
2025/07/10 21:18	d83988551b75 Make nccl and sr tests work on ARM	.config	3cda49cf
2025/07/10 09:17	d83988551b75 Make nccl and sr tests work on ARM	.config	d7384b6d
2025/07/10 07:51	d83988551b75 Make nccl and sr tests work on ARM	.config	956bd956
2025/07/09 18:40	bb08e9604675 Make GPU smoke tests work on ARM	.config	956bd956
2025/07/09 14:14	237f2d7dcb80 Make env flag for runsc exec non idempotent.	.config	956bd956
2025/07/09 02:18	237f2d7dcb80 Make env flag for runsc exec non idempotent.	.config	f4e5e155
2025/07/08 13:59	4a238a4a1092 `profiletool merge`: Skip empty profile files.	.config	4d9fdfa4
2025/07/08 12:36	4a238a4a1092 `profiletool merge`: Skip empty profile files.	.config	4f67c4ae
2025/07/07 23:19	2a88b274d3a1 Fix duplicate "dev.gvisor" in AnnotationsContainerNameRemapIgnored test.	.config	4f67c4ae
2025/07/07 08:40	8f111be351b5 Wait for main MF loading to start before writing to it during restore.	.config	4f67c4ae
2025/07/04 18:14	85e76111eb28 Merge pull request #11557 from JiaHuann:master	.config	4f67c4ae
2025/07/04 00:10	85e76111eb28 Merge pull request #11557 from JiaHuann:master	.config	76ad128c
2025/07/03 12:08	85e76111eb28 Merge pull request #11557 from JiaHuann:master	.config	a3c808e4
2025/07/03 00:07	85e76111eb28 Merge pull request #11557 from JiaHuann:master	.config	115ceea7
2025/07/02 12:17	902e88ff9314 Docker tests and benchmarks: Remove use of exposed ports.	.config	0cd59a8f
2025/07/02 00:09	a437d8d9cf64 Merge pull request #11878 from sellskin:master	.config	bc80e4f0
2025/07/01 11:54	8a1a0408af54 gofer: Ensure mount flags are applied for bind mounts	.config	091a06cd
2025/07/01 09:56	8a1a0408af54 gofer: Ensure mount flags are applied for bind mounts	.config	6e83b42d
2025/06/30 20:45	09c224c05be4 sentry/kernel: don't use Task.mu to protect Task.creds	.config	6e83b42d
2025/06/30 15:22	501a6637cc98 sentry/kernel: allow pending signal sets to be read without locking	.config	6e83b42d
2025/06/28 10:40	501a6637cc98 sentry/kernel: allow pending signal sets to be read without locking	.config	fc9d8ee5
2025/06/27 21:37	075576a027e1 Run more benchmarks for PGO profiling.	.config	fc9d8ee5
2025/06/27 18:00	075576a027e1 Run more benchmarks for PGO profiling.	.config	803ce19b
2025/06/27 00:31	81a6e524f55d Add test coverage for docker build command in gVisor.	.config	803ce19b
2025/06/26 12:22	6d7f0749eb7f PGO: Create profile data for KVM platform as well.	.config	ba7e550f
2025/06/26 00:37	f8854c4e9ba7 Move PGO profile data to `runsc/profiles/data`.	.config	26d77996
2025/06/25 04:34	ca812bcd892b PGO update: Parse flags more correctly.	.config	26d77996
2025/06/24 15:19	2c0b7e7f37f7 Internal change.	.config	26d77996
2025/06/24 09:05	2c0b7e7f37f7 Internal change.	.config	1a7fb460
2025/06/23 17:04	ccbefce31242 PGO update: Only skip when there is no change in `runsc/profiles`.	.config	1a7fb460
2025/06/21 23:56	ccbefce31242 PGO update: Only skip when there is no change in `runsc/profiles`.	.config	d6cdfb8a
2025/06/21 00:16	85c27ad0efac PGO: Don't re-run benchmarks if their results will be discarded.	.config	d6cdfb8a
2025/06/20 12:08	85c27ad0efac PGO: Don't re-run benchmarks if their results will be discarded.	.config	804b3919
2025/06/19 00:51	85c27ad0efac PGO: Don't re-run benchmarks if their results will be discarded.	.config	ed3e87f7
2025/06/18 12:50	95d875276806 Merge pull request #11822 from google:pgo/update-2025-06-17	.config	ca631f70
2025/06/18 00:58	0277f27bb469 Create PGO pull requests non-interactively.	.config	e77fae15
2025/06/17 12:51	0277f27bb469 Create PGO pull requests non-interactively.	.config	a5686133
2025/06/17 00:38	9473f2d16d4b PGO update script: Connect to GitHub over HTTPS rather than SSH.	.config	cfebc887
2025/06/16 21:01	9473f2d16d4b PGO update script: Connect to GitHub over HTTPS rather than SSH.	.config	d1716036
2025/06/16 12:36	03a93e960bfc Isolate NETLINK_NETFILTER socket behavior behind the nftables flag in runsc.	.config	d1716036
2025/06/15 03:52	03a93e960bfc Isolate NETLINK_NETFILTER socket behavior behind the nftables flag in runsc.	.config	5f4b362d
2025/06/14 14:23	550b7eb983d0 Move PGO git logistics to a dedicated script.	.config	5f4b362d
2025/06/14 14:20	550b7eb983d0 Move PGO git logistics to a dedicated script.	.config	0e8da31f
2025/06/14 00:52	2a2d4ae23b3b Refactor nftables package and exposed it to tcpip/stack/	.config	0e8da31f
2025/06/13 18:46	2a2d4ae23b3b Refactor nftables package and exposed it to tcpip/stack/	.config	1f72c409
2025/06/13 12:55	cbf278951e7e Remove environment hook from BuildKite `hooks` directory.	.config	1f72c409
2025/06/12 04:05	cbf278951e7e Remove environment hook from BuildKite `hooks` directory.	.config	98683f8f
2025/06/11 14:35	84c77aa8ad7e netstack: Don't treat ipv4 link-local addresses specially	.config	98683f8f
2025/06/11 14:26	84c77aa8ad7e netstack: Don't treat ipv4 link-local addresses specially	.config	5d7e17ca
2025/06/11 00:43	cab42c621689 overlayfs: Clear RENAME_NOREPLACE before calling into layers.	.config	5d7e17ca
2025/06/10 11:34	e3c4c4cad86f gofer: Support restore of deleted files whose original path is occupied.	.config	5d7e17ca
2025/06/06 20:19	718734347393 Add instructions on DNS config to run docker in gVisor on GKE autopilot.	.config	4826c28e
2025/06/06 08:08	a6711d1e1dc6 runsc/do: allow to add host bind-mounts	.config	3d899f2c
2025/06/06 08:07	a6711d1e1dc6 runsc/do: allow to add host bind-mounts	.config	6b6b5f21
2025/06/05 18:59	b392f76ebfaf systrap: don't panic if the main stub process can't be created	.config	6b6b5f21
2025/06/05 05:47	6b5372dfb38e Add cuda_tests to gke_tester	.config	6b6b5f21
2025/06/04 20:32	b14059d714d7 Merge pull request #11723 from stepancheg:overlay-size	.config	6b6b5f21
2025/06/04 08:30	b14059d714d7 Merge pull request #11723 from stepancheg:overlay-size	.config	e565f08d
2025/06/04 05:12	b14059d714d7 Merge pull request #11723 from stepancheg:overlay-size	.config	a30356b7
2025/06/03 11:02	45108140e4ad nvproxy: Add support for 535.129.03.	.config	a30356b7
2025/06/02 21:52	d5069fefb888 Kubernetes testcluster: Add "restore" nodepool.	.config	a30356b7
2025/06/02 21:12	c8952f75963b Add support for executing a binary before saving and after restoring.	.config	a30356b7
2025/06/02 09:05	c8952f75963b Add support for executing a binary before saving and after restoring.	.config	aaaaf5ea
2025/05/30 04:55	c8952f75963b Add support for executing a binary before saving and after restoring.	.config	3d2f584d
2025/05/29 15:44	609fac8bc6fe packetimpact: ignore retransmitted SYNACK on Linux	.config	3d2f584d
2025/05/28 20:14	33d4ca3a0ff5 Allow sched_getaffinity in syscall filters	.config	3d2f584d
2025/05/28 15:08	96ca35d001c2 Merge pull request #11760 from fjvela:master	.config	3d2f584d
2025/05/26 23:05	96ca35d001c2 Merge pull request #11760 from fjvela:master	.config	874a1386
2025/05/26 11:04	96ca35d001c2 Merge pull request #11760 from fjvela:master	.config	06877188
2025/05/25 17:18	96ca35d001c2 Merge pull request #11760 from fjvela:master	.config	2d4582d0
2025/05/23 19:49	2c4000e5dee9 Merge pull request #11711 from stepancheg:root-help	.config	ed351ea7
2025/05/23 17:13	2c4000e5dee9 Merge pull request #11711 from stepancheg:root-help	.config	fa44301a
2025/05/22 22:31	a178e09bb804 Fix handling of file capabilities.	.config	fa44301a
2025/05/22 03:41	a178e09bb804 Fix handling of file capabilities.	.config	0919b50b
2025/05/21 15:36	d495ebfe89e1 tcp: use lockdep mutexes	.config	f6063999
2025/05/21 12:49	d495ebfe89e1 tcp: use lockdep mutexes	.config	b47f9e02
2025/05/20 23:39	b77441bcd43b Don't panic on KVM init if no memory for new vCPU.	.config	b47f9e02
2025/05/20 10:09	d19c3bc9bcdf runsc: create file as destination for file mount	.config	b47f9e02
2025/05/19 22:04	16bb0d3588bf Merge pull request #11729 from stepancheg:constant	.config	b84f0537
2025/05/19 10:01	16bb0d3588bf Merge pull request #11729 from stepancheg:constant	.config	27f68995
2025/05/16 23:26	16bb0d3588bf Merge pull request #11729 from stepancheg:constant	.config	f41472b0
2025/05/16 18:16	d30c58e5b8a4 Add (probably broken) BuildKite pipeline for refreshing PGO profiles.	.config	f41472b0
2025/05/15 21:48	d30c58e5b8a4 Add (probably broken) BuildKite pipeline for refreshing PGO profiles.	.config	cfde8269
2025/05/13 07:35	ab0097c4d068 Merge pull request #11716 from avagin:build-runsc	.config	9497799b
2025/05/12 20:56	c773790cc9dc Merge pull request #11714 from avagin:kvm-vs-mpx	.config	f6671af7
2025/05/12 16:11	81d7f66740f4 netstack/tuntap: implement the TUNSETPERSIST ioctl	.config	f6671af7
2025/05/10 02:18	81d7f66740f4 netstack/tuntap: implement the TUNSETPERSIST ioctl	.config	77908e5f
2025/05/09 21:17	f585db6bbfc5 Provide flag to disable syscall patching (aka syscall fastpath) in Systrap.	.config	77908e5f
2025/05/09 09:16	f585db6bbfc5 Provide flag to disable syscall patching (aka syscall fastpath) in Systrap.	.config	03411e4e
2025/05/09 00:45	f585db6bbfc5 Provide flag to disable syscall patching (aka syscall fastpath) in Systrap.	.config	bb813bcc
2025/05/08 17:40	51b70181c0c5 Support security.capability xattr for tmpfs.	.config	bb813bcc
2025/05/07 21:58	51b70181c0c5 Support security.capability xattr for tmpfs.	.config	dbf35fa1
2025/05/07 14:16	3e5886fba408 Split cuda tests into separate lib.	.config	dbf35fa1
2025/05/06 14:36	3e5886fba408 Split cuda tests into separate lib.	.config	350f4ffc
2025/05/06 09:56	3e5886fba408 Split cuda tests into separate lib.	.config	ae98e6b9
2025/05/05 20:21	6750bae81956 kvm, eventfd: support KVM_IOEVENTFD	.config	ae98e6b9
2025/05/05 08:10	5c4b4f51c72e kvm/arm64: queue DABT (Data Abort) to force Sentry returning to the host	.config	6ca47dd8
2025/05/03 09:34	5c4b4f51c72e kvm/arm64: queue DABT (Data Abort) to force Sentry returning to the host	.config	b0714e37
2025/05/02 20:24	0c66b7ecfcb3 Use `vfs_cap_data` and `vfs_ns_cap_data` structs defined in linux header.	.config	b0714e37
2025/05/02 20:11	0c66b7ecfcb3 Use `vfs_cap_data` and `vfs_ns_cap_data` structs defined in linux header.	.config	d7f099d1
2025/05/02 08:21	5790f690667a lock around getting the current time from the stack.	.config	d7f099d1
2025/05/01 23:04	5790f690667a lock around getting the current time from the stack.	.config	51b137cd
2025/05/01 12:58	5dfdea843cf7 Follow-up fixes for #11644	.config	51b137cd
2025/05/01 00:53	5dfdea843cf7 Follow-up fixes for #11644	.config	ce7952f4
2025/05/01 00:00	5dfdea843cf7 Follow-up fixes for #11644	.config	937aafd7
2025/04/30 12:51	e5f387569031 Add more paths for which to run all GPU tests.	.config	937aafd7
2025/04/30 00:44	e5f387569031 Add more paths for which to run all GPU tests.	.config	85a5a23f
2025/04/29 12:37	8d061298ccd2 Remove version flag from checking driver version	.config	4a62c0b1
2025/04/29 08:54	8d061298ccd2 Remove version flag from checking driver version	.config	aeb6ec69
2025/04/28 19:37	871a034359dc Internal change.	.config	aeb6ec69
2025/04/28 17:31	73c74424ac82 bazel/rules_go: don't revert commits	.config	aeb6ec69
2025/04/25 21:06	73c74424ac82 bazel/rules_go: don't revert commits	.config	c6b4fb39
2025/04/25 09:35	73c74424ac82 bazel/rules_go: don't revert commits	.config	dea5c7e4
2025/04/24 21:03	fa40546ede1c Clone dpdk from github	.config	e3715315
2025/04/24 17:11	fa40546ede1c Clone dpdk from github	.config	9c80ffa0
2025/04/24 09:01	a70f559c9398 cpuid: don't "normalize" to a smaller XSAVE area size	.config	9c80ffa0
2025/04/23 20:57	a70f559c9398 cpuid: don't "normalize" to a smaller XSAVE area size	.config	9882047a
2025/04/23 09:06	a70f559c9398 cpuid: don't "normalize" to a smaller XSAVE area size	.config	57d54c08
2025/04/22 21:09	49b9d83fc867 Consolidate helper functions around unimplemented socket option metrics	.config	53a8b9bd
2025/04/22 13:13	ee3684df7b91 Use github.com/opencontainers/runtime-spec@v1.2.0	.config	53a8b9bd
2025/04/21 09:01	ee3684df7b91 Use github.com/opencontainers/runtime-spec@v1.2.0	.config	2a20f901
2025/04/19 01:57	4b740a7ffafd Add initial BLACKWELL IOCTLs	.config	2a20f901
2025/04/18 09:38	cd8fcab3446c Fix range check on socket option counter metric.	.config	2a20f901
2025/04/17 20:26	9ed8cea8943c Skip GPU tests in continuous build if files have not been touched.	.config	2a20f901
2025/04/17 08:20	b0adacc40e21 Deflake TestUsageFD.	.config	552876f8
2025/04/16 09:52	b0adacc40e21 Deflake TestUsageFD.	.config	a95239b1
2025/04/15 20:42	eae549dc581a Fix overflow in tcp.sender.sendData() for 32-bit architectures.	.config	a95239b1
2025/04/15 19:59	eae549dc581a Fix overflow in tcp.sender.sendData() for 32-bit architectures.	.config	85125322
2025/04/15 08:47	a84be6555251 Skip expensive GPU tests from main pipeline for non-GPU-related changes.	.config	85125322
2025/04/11 23:15	a84be6555251 Skip expensive GPU tests from main pipeline for non-GPU-related changes.	.config	0bd6db41
2025/04/11 11:13	a84be6555251 Skip expensive GPU tests from main pipeline for non-GPU-related changes.	.config	12ba9c21
2025/04/10 23:02	1c7c64de40df Update runtime test exclusions.	.config	94486846
2025/04/10 10:53	3b2cca27c7e6 Add IOCTLS so earlier driver versions pass nvidia-smi test	.config	1ef3ab4d
2025/04/10 00:40	3b2cca27c7e6 Add IOCTLS so earlier driver versions pass nvidia-smi test	.config	988b336c
2025/04/09 21:08	f47013e0fa72 Add back 'nvidia-smi' test in gpu-smoke-tests	.config	988b336c
2025/04/09 09:06	f47013e0fa72 Add back 'nvidia-smi' test in gpu-smoke-tests	.config	47d015b1
2025/04/08 21:03	f47013e0fa72 Add back 'nvidia-smi' test in gpu-smoke-tests	.config	b133e63a
2025/04/08 08:58	f47013e0fa72 Add back 'nvidia-smi' test in gpu-smoke-tests	.config	a775275d
2025/04/07 20:59	9078ddaf6a6f Clean up state file reading.	.config	a2ada0e7
2025/04/07 08:39	7ff7451cb52d Add more debug logging for host settings.	.config	2f0c9720
2025/04/05 05:57	7ff7451cb52d Add more debug logging for host settings.	.config	1c65791e
2025/04/04 18:43	b1b7c02aa785 Add a test to check getifaddrs returns IPv4 address followed by IPv6.	.config	c53ea9c9
2025/04/04 15:12	7fb3b706c0e4 Read pages from the main MemoryFile as early as possible during restore	.config	c53ea9c9
2025/04/04 03:10	7fb3b706c0e4 Read pages from the main MemoryFile as early as possible during restore	.config	1740c707
2025/04/03 23:43	7fb3b706c0e4 Read pages from the main MemoryFile as early as possible during restore	.config	d7ae3a11
2025/04/03 15:08	0236fdeb6bb9 Add annotation to allow container name remap	.config	d7ae3a11
2025/04/03 03:23	0236fdeb6bb9 Add annotation to allow container name remap	.config	996a9618
2025/04/02 20:22	845fa645b0cd Fix the order of primary addresses returned for a NIC.	.config	b0cc4801
2025/04/02 15:02	6b2bcc44e061 Disable more JAVA runtime tests that require IPV6_MULTICAST_IF support.	.config	b0cc4801
2025/04/01 23:30	6b2bcc44e061 Disable more JAVA runtime tests that require IPV6_MULTICAST_IF support.	.config	c799dfdd
2025/04/01 11:28	6b2bcc44e061 Disable more JAVA runtime tests that require IPV6_MULTICAST_IF support.	.config	b8645499
2025/03/31 22:12	6b2bcc44e061 Disable more JAVA runtime tests that require IPV6_MULTICAST_IF support.	.config	36d76a97
2025/03/31 18:50	d06b27e25f95 Disable JAVA tests that require IPV6_MULTICAST_IF support.	.config	36d76a97
2025/03/29 11:04	d06b27e25f95 Disable JAVA tests that require IPV6_MULTICAST_IF support.	.config	d3999433
2025/03/28 21:13	6a54f3c41ac9 pgalloc: mark aborted async page load segments as unstarted	.config	cf25e2c2
2025/03/28 19:07	6a54f3c41ac9 pgalloc: mark aborted async page load segments as unstarted	.config	49900278
2025/03/28 09:18	523c82ffd030 Fix restore logic in PRead.	.config	49900278
2025/03/27 13:28	523c82ffd030 Fix restore logic in PRead.	.config	6c09fb82
2025/03/27 00:56	5a21467bcbec tests: don't specify ports for docker containers	.config	20510e88
2025/03/26 12:49	b5f9bed90840 Move nvproxy.objsMu to rootClient.	.config	19e40f48
2025/03/26 09:26	b5f9bed90840 Move nvproxy.objsMu to rootClient.	.config	89d30d73
2025/03/25 20:17	35686886763c pgalloc: avoid unnecessary aplOp allocation in async page loading	.config	89d30d73
2025/03/25 17:50	35686886763c pgalloc: avoid unnecessary aplOp allocation in async page loading	.config	875573af
2025/03/23 22:41	3a9ba1735157 Fix device FD reference leaks and add support for VFIO_GROUP_UNSET_CONTAINER.	.config	875573af
2025/03/22 09:30	3a9ba1735157 Fix device FD reference leaks and add support for VFIO_GROUP_UNSET_CONTAINER.	.config	3b7445cf
2025/03/21 20:15	225a7bc0d28a Internal change.	.config	3b7445cf
2025/03/19 22:52	c16d3fdfadf8 pgalloc: log async page loading progress and info about awaited loads	.config	3b7445cf
2025/03/19 16:26	97820ce5c927 nvproxy: Add support for 570.124.06.	.config	3b7445cf
2025/03/19 04:34	97820ce5c927 nvproxy: Add support for 570.124.06.	.config	8d0a2921
2025/03/18 18:22	1da637092507 Update "Root Filesystem Overlay" section about default rootfs overlay.	.config	22a6c2b1
2025/03/18 16:22	8d5f3c982aeb Handle sighandling.KillItself() return error.	.config	22a6c2b1
2025/03/18 04:28	8d5f3c982aeb Handle sighandling.KillItself() return error.	.config	ce3352cd
2025/03/17 18:00	e6b6f2aa1172 Allow IPv6 addresses to be enabled/disabled in runsc based on the sysctl.	.config	489e2dc8
2025/03/17 16:19	6b0a0af86294 Implement basic packet mode support for ptys.	.config	489e2dc8
2025/03/17 04:18	6b0a0af86294 Implement basic packet mode support for ptys.	.config	948c34e4
2025/03/15 17:13	6b0a0af86294 Implement basic packet mode support for ptys.	.config	e2826670
2025/03/14 07:51	b01944883bfc Add memmap.File.MemoryType()	.config	e2826670
2025/03/13 18:33	06f225496253 Deflake TestExecProcList.	.config	e2826670
2025/03/13 06:31	906fb319cc3a nvproxy: Add option to use the device gofer optionally.	.config	44be8b44
2025/03/12 18:24	c68fb3199281 Save runsc version in the metadata during save to compare it during restore.	.config	1a5d9317
2025/03/12 08:20	c68fb3199281 Save runsc version in the metadata during save to compare it during restore.	.config	ee70e6db
2025/03/12 03:54	c16484e6e83e Reduce the number of containerd tests in buildkite pipelines.	.config	ee70e6db
2025/03/11 15:47	c16484e6e83e Reduce the number of containerd tests in buildkite pipelines.	.config	f2eee6b3
2025/03/10 12:06	44b97373471a Increase GOMAXPROCS during aio.GoQueue usage	.config	16256247
2025/03/09 08:46	44b97373471a Increase GOMAXPROCS during aio.GoQueue usage	.config	163f510d
2025/03/08 22:21	815317032022 nvproxy: reduce kernel mmap_lock contention from rmAllocOSDescriptor()	.config	163f510d
2025/03/07 23:56	815317032022 nvproxy: reduce kernel mmap_lock contention from rmAllocOSDescriptor()	.config	7e3bd60d
2025/03/07 10:47	9581066c3038 Clone the packet during ipv6 processing.	.config	7e3bd60d
2025/03/07 10:21	9581066c3038 Clone the packet during ipv6 processing.	.config	831e3629
2025/03/06 21:12	c041d9bd5855 Add missing binary_sha256 field	.config	831e3629
2025/03/06 08:02	156f457e28d2 Add kernel.ThreadGroup.ForEachTask().	.config	831e3629
2025/03/06 06:40	156f457e28d2 Add kernel.ThreadGroup.ForEachTask().	.config	034534df
2025/03/05 20:13	521cc86a91e0 Use the minimum recommended version of cri-tools for containerd tests.	.config	034534df
2025/03/05 08:14	521cc86a91e0 Use the minimum recommended version of cri-tools for containerd tests.	.config	60f5d8d9
2025/03/04 19:07	1f79e1b26ff9 Prepare for go.dev/cl/652276	.config	c3901742
2025/03/03 19:21	0c17600995b9 Fix restore with pending exec session	.config	c3901742
2025/03/01 15:07	d71a9b3df5c7 gofer: fix ref drop when racily-unlinked synthetic file is invalidated	.config	c3901742
2025/03/01 12:52	d71a9b3df5c7 gofer: fix ref drop when racily-unlinked synthetic file is invalidated	.config	67cf5345
2025/02/28 23:42	3885a281f2ae test: add syscall_test() perf argument	.config	67cf5345
2025/02/28 19:18	3885a281f2ae test: add syscall_test() perf argument	.config	1e7a43e1
2025/02/28 11:39	86abc85f37d5 Merge pull request #11473 from Champ-Goblem:shim-add-cgroup-v2-metrics-support	.config	1e7a43e1
2025/02/26 15:34	86abc85f37d5 Merge pull request #11473 from Champ-Goblem:shim-add-cgroup-v2-metrics-support	.config	6a8fcbc4
2025/02/25 23:01	86abc85f37d5 Merge pull request #11473 from Champ-Goblem:shim-add-cgroup-v2-metrics-support	.config	d34966d1
2025/02/21 17:49	84670a4fc612 gofer: Fix bug when casting auth.K{U/G}ID to int.	.config	d34966d1
2025/02/20 17:07	17563a8af926 Return EACCES when calling setpgid() after execve()	.config	0808a665
2025/02/19 22:44	17563a8af926 Return EACCES when calling setpgid() after execve()	.config	50668798
2025/02/19 10:43	17563a8af926 Return EACCES when calling setpgid() after execve()	.config	cbd8edab
2025/02/18 20:50	17563a8af926 Return EACCES when calling setpgid() after execve()	.config	9a14138f
2025/02/18 08:41	17563a8af926 Return EACCES when calling setpgid() after execve()	.config	c37c7249
2025/02/17 20:39	17563a8af926 Return EACCES when calling setpgid() after execve()	.config	429ea007
2025/02/17 08:43	17563a8af926 Return EACCES when calling setpgid() after execve()	.config	4121cf9d
2025/02/14 23:31	6c88fd7b6ffa Internal change	.config	40a34ec9
2025/02/14 23:06	d05a277ca3a1 Add checkpoint restore metrics.	.config	40a34ec9
2025/02/14 10:42	d05a277ca3a1 Add checkpoint restore metrics.	.config	fe17639f
2025/02/13 22:42	6b4f0082c280 nvproxy: Add support for AMPERE_A, ADA_A, HOPPER_A.	.config	d9a046cf
2025/02/13 10:38	c8d5afe1d21c Merge pull request #11457 from stepancheg:state-file	.config	7320a65f
2025/02/12 22:10	85557587601b Add a test for tcpdump.	.config	2afad16e
2025/02/12 18:33	85557587601b Add a test for tcpdump.	.config	b27c2402
2025/02/12 10:08	d949e7177c2f taskCopyContext should not require holding task.mu.	.config	b27c2402
2025/02/11 14:03	d949e7177c2f taskCopyContext should not require holding task.mu.	.config	f2baddf5
2025/02/11 00:13	faac8f36cd89 Add support for PACKET_STATISTICS.	.config	43f51a00
2025/02/10 19:28	faac8f36cd89 Add support for PACKET_STATISTICS.	.config	529cb927
2025/02/10 12:10	9c490f813d37 Implement GetSockOpt PACKET_HDRLEN and add a test for tcpdump.	.config	529cb927
2025/02/08 00:05	9c490f813d37 Implement GetSockOpt PACKET_HDRLEN and add a test for tcpdump.	.config	ef44b750
2025/02/07 11:51	53d6f3dd2a22 Use github.com/containerd/log in gVisor shim.	.config	94926c8d
2025/02/07 10:27	53d6f3dd2a22 Use github.com/containerd/log in gVisor shim.	.config	44c01590
2025/02/06 21:04	213917f3eaf8 Don't switch to using the packet mmap endpoint for zero length requests.	.config	44c01590
2025/02/06 05:07	902a56c6c584 Use github.com/containerd/errdefs in gVisor shim.	.config	44c01590
2025/02/05 15:57	e37e6814d3b7 Remove `srcs_version` and `python_version` attributes, as they already default to `"PY3"`	.config	44c01590
2025/02/05 02:47	245345bddcf8 Fix TOCTOU bug in sending packets with the experiment option header.	.config	44c01590
2025/02/04 14:58	f6b843d9a6c0 Add tests with netstack s/r enabled.	.config	44c01590
2025/02/03 22:34	f6b843d9a6c0 Add tests with netstack s/r enabled.	.config	8f267cef
2025/02/03 10:31	1a9abee80b7c nvproxy: Add support for 570.86.15 driver.	.config	a21a8419
2025/02/02 00:17	a500a2c751b1 Defalke test target pkg/tcpip/stack:bridge_test.	.config	568559e4
2025/02/01 12:14	a500a2c751b1 Defalke test target pkg/tcpip/stack:bridge_test.	.config	0dff8567
2025/01/31 14:43	a500a2c751b1 Defalke test target pkg/tcpip/stack:bridge_test.	.config	aa47157c
2025/01/30 11:13	04f9204697c6 Yield thread group leader `*Task` in `TaskSet.ForEachThreadGroup`.	.config	9c8ab845
2025/01/29 23:30	63c9278b9af1 Merge pull request #11360 from Snowflake-Labs:xuzhoyin-vmas-fix	.config	afe4eff5
2025/01/29 11:13	63c9278b9af1 Merge pull request #11360 from Snowflake-Labs:xuzhoyin-vmas-fix	.config	08fa8553
2025/01/28 23:36	658e5a795d66 Disable ffmpeg_test on COS.	.config	865ef71e
2025/01/28 21:21	f3259f42b394 Merge pull request #11395 from google:dependabot/github_actions/actions/setup-go-5.3.0	.config	865ef71e
2025/01/28 09:30	f3259f42b394 Merge pull request #11395 from google:dependabot/github_actions/actions/setup-go-5.3.0	.config	ac37c1f8
2025/01/27 21:13	ca0ba7cbbad0 Merge pull request #11392 from tianyuzhou95:albert-develop	.config	18070896
2025/01/27 19:28	ca0ba7cbbad0 Merge pull request #11392 from tianyuzhou95:albert-develop	.config	d99a33ad
2025/01/27 09:11	1c38b6cbed2c Add levels for handling spec validation via flag.	.config	d99a33ad
2025/01/25 01:56	1c38b6cbed2c Add levels for handling spec validation via flag.	.config	9fbd772e
2025/01/24 13:54	1c38b6cbed2c Add levels for handling spec validation via flag.	.config	1293872d
2025/01/24 01:52	1c38b6cbed2c Add levels for handling spec validation via flag.	.config	521b0ce3
2025/01/24 00:34	1c38b6cbed2c Add levels for handling spec validation via flag.	.config	f6a35ef3
2025/01/23 13:51	c238e15234fe Fix validation of close_range `last` fd argument.	.config	f6a35ef3
2025/01/23 01:50	c238e15234fe Fix validation of close_range `last` fd argument.	.config	9d4f14f8
2025/01/22 13:38	50731e5beca5 Merge pull request #11377 from thegreatfatzby:patch-1	.config	25e17fd3
2025/01/22 10:32	50731e5beca5 Merge pull request #11377 from thegreatfatzby:patch-1	.config	da72ac06
2025/01/21 21:13	8483ace3fbdd Merge pull request #11376 from evanphx:b-cgroupfs-flag	.config	da72ac06
2025/01/21 16:03	d22dedf3d55a Check all 3 stdio FDs to determine if terminal is connected to a pty.	.config	da72ac06
2025/01/20 13:59	d22dedf3d55a Check all 3 stdio FDs to determine if terminal is connected to a pty.	.config	6e87cfa2
2025/01/17 22:30	d22dedf3d55a Check all 3 stdio FDs to determine if terminal is connected to a pty.	.config	f2cb035c
2025/01/17 19:47	d22dedf3d55a Check all 3 stdio FDs to determine if terminal is connected to a pty.	.config	bb91bdd4
2025/01/17 10:22	25b1d7134115 Add constants and types related to the implementation of PACKET_MMAP.	.config	bb91bdd4
2025/01/16 13:33	25b1d7134115 Add constants and types related to the implementation of PACKET_MMAP.	.config	f9e07a6e
2025/01/16 10:15	25b1d7134115 Add constants and types related to the implementation of PACKET_MMAP.	.config	968edaf4
2025/01/15 20:50	1864d9d091cc Untag user addresses before handling them in the Sentry	.config	968edaf4
2025/01/15 11:49	3649ca9d9eb6 On COS, add NVIDIA library directory to LD configuration and update cache.	.config	968edaf4
2025/01/14 21:26	3649ca9d9eb6 On COS, add NVIDIA library directory to LD configuration and update cache.	.config	7315a7cf
2025/01/14 09:23	3649ca9d9eb6 On COS, add NVIDIA library directory to LD configuration and update cache.	.config	0dce2409
2025/01/13 21:10	4ba931dd226e CUDA test compatibility: Remove `p2pBandwidthLatencyTest` special case.	.config	b1f1cd88
2025/01/13 09:07	4ba931dd226e CUDA test compatibility: Remove `p2pBandwidthLatencyTest` special case.	.config	249ceea9
2025/01/11 12:29	4ba931dd226e CUDA test compatibility: Remove `p2pBandwidthLatencyTest` special case.	.config	6dbc6a9b
2025/01/10 20:11	2d0e39a87f4c Merge pull request #11351 from 2022tgoel:tarushii/gpu_test_fail	.config	6dbc6a9b
2025/01/10 18:41	c5c74f4c90ac Merge pull request #11321 from 2022tgoel:nvproxy_video_cap	.config	6dbc6a9b
2025/01/10 06:45	c5c74f4c90ac Merge pull request #11321 from 2022tgoel:nvproxy_video_cap	.config	67d7ec0a
2025/01/09 18:36	9803629d9240 Don't fail compatibility test when COS versions are not yet released.	.config	40f46913
2025/01/09 09:28	9803629d9240 Don't fail compatibility test when COS versions are not yet released.	.config	9220929f
2025/01/08 22:15	9803629d9240 Don't fail compatibility test when COS versions are not yet released.	.config	f3558dbf
2025/01/08 09:06	2edcee37d9fb Specify all capabilities in TestGPUCheckpointRestore.	.config	f3558dbf
2025/01/07 19:52	7aa4c49b0dfd Merge pull request #11291 from xianzhe-databricks:fix-uds-auth	.config	f3558dbf
2025/01/06 20:10	7af7cb036777 Merge pull request #10376 from google:dependabot/github_actions/actions/checkout-4	.config	f3558dbf
2025/01/06 06:49	015477747dd1 Exclude cmd/crypto/tls from Go 1.22 tests.	.config	f3558dbf
2025/01/03 23:06	4dbba85b072b Kubernetes benchmarks: Refactor kubectl context to allow sets of clusters.	.config	f3558dbf
2025/01/03 11:03	4dbba85b072b Kubernetes benchmarks: Refactor kubectl context to allow sets of clusters.	.config	96d578a3
2024/12/30 23:08	4dbba85b072b Kubernetes benchmarks: Refactor kubectl context to allow sets of clusters.	.config	d3ccff63
2024/12/30 09:57	b11efeaecd4a nvproxy: Clean up struct field tags.	.config	d3ccff63
2024/12/28 09:07	768db8693149 Build `runsc-metric-server` binary using `nocgo` instead of `static`.	.config	d3ccff63
2024/12/27 19:57	edda7b656d0c Update handler for NV_ESC_RM_UNMAP_MEMORY_DMA for 550.40.07+.	.config	d3ccff63
2024/12/26 21:07	84172e4e7034 Go benchstat parser: Support alternate syntax for parameters.	.config	d3ccff63
2024/12/26 09:38	f7ad032e4adc Kubernetes tests & benchmark: Simplify `KubernetesContext` interface.	.config	d3ccff63
2024/12/24 11:15	f7ad032e4adc Kubernetes tests & benchmark: Simplify `KubernetesContext` interface.	.config	444551c4
2024/12/23 21:56	1a9f8b17edc3 Internal change.	.config	444551c4
2024/12/23 09:03	0f8db9fa2891 Deflake process_vm_read_write test.	.config	444551c4
2024/12/22 07:49	0f8db9fa2891 Deflake process_vm_read_write test.	.config	b4fbdbd4
2024/12/20 23:38	0f8db9fa2891 Deflake process_vm_read_write test.	.config	d7f584ee
2024/12/20 21:35	0fb4cc71ba95 Kubernetes benchmarks: Wait for namespace cleanup before proceeding.	.config	d7f584ee
2024/12/20 09:35	0fb4cc71ba95 Kubernetes benchmarks: Wait for namespace cleanup before proceeding.	.config	49cfeac8
2024/12/19 21:33	fb730ff784b4 Remove checkpoint_count from `runsc wait --checkpoint`	.config	c87fa8a3
2024/12/19 09:36	f7875f90fda1 systrap: Unset fpstate_changed if ctx did not change.	.config	1d58202c
2024/12/19 03:24	f7875f90fda1 systrap: Unset fpstate_changed if ctx did not change.	.config	1432fc84
2024/12/18 13:57	44562d85cf06 `testcluster`: Warn if a pod or namespace deletion takes longer than expected.	.config	1432fc84
2024/12/18 01:58	1ca2bd4a6987 nvproxy: Improve debuggability by logging failures coming from the host driver.	.config	a0626d3a
2024/12/17 23:57	5fdedb527657 Parallelize BuildKite "All GPU drivers test".	.config	a0626d3a
2024/12/17 11:40	5fdedb527657 Parallelize BuildKite "All GPU drivers test".	.config	bc1a1b50
2024/12/17 10:50	5fdedb527657 Parallelize BuildKite "All GPU drivers test".	.config	f93b2b55
2024/12/16 21:41	3f058a843618 Harmonize ollama Docker image version.	.config	f93b2b55
2024/12/16 21:08	3f058a843618 Harmonize ollama Docker image version.	.config	eec85da6
2024/12/16 09:46	bd0cbf807169 Fix typo in exec.go.	.config	eec85da6
2024/12/14 00:48	bd0cbf807169 Fix typo in exec.go.	.config	7cbfbb3a
2024/12/13 12:37	9fcf0b5b5360 proc: invalidate task inodes when tasks are destroyed	.config	7d3b55db
2024/12/13 01:56	afa323bd3070 Replace most instances of IncRef with Clone.	.config	3547e30f
2024/12/13 00:27	c88ffa321eb9 Returns ENOBUFS when writing to a veth device whose buffer is full.	.config	3547e30f
2024/12/12 12:24	c88ffa321eb9 Returns ENOBUFS when writing to a veth device whose buffer is full.	.config	1b70f4d9
2024/12/12 00:20	c88ffa321eb9 Returns ENOBUFS when writing to a veth device whose buffer is full.	.config	6f1b0fa8
2024/12/11 10:48	c88ffa321eb9 Returns ENOBUFS when writing to a veth device whose buffer is full.	.config	ff949d25
2024/12/11 09:58	c88ffa321eb9 Returns ENOBUFS when writing to a veth device whose buffer is full.	.config	cfc402b4
2024/12/10 20:34	394d0852a80f Remove NVIDIA-specific test runtimes.	.config	cfc402b4
2024/12/10 07:10	95ca82d87278 Stable Diffusion benchmark: Specify "latest" tag for container image.	.config	cfc402b4
2024/12/09 18:58	39406b00bf66 netstack: add checklocks to TCPSenderState and write list	.config	deb72877
2024/12/09 18:01	39406b00bf66 netstack: add checklocks to TCPSenderState and write list	.config	9ac0fdc6
2024/12/07 01:52	22b95a87ac8d `runsc metric-server`: Make binary statically linked.	.config	9ac0fdc6
2024/12/06 12:42	188a756ff387 Add validateMap() to compare maps correctly during OCI spec validation.	.config	9ac0fdc6
2024/12/06 01:19	5ca21867d9c8 tools/bigquery: Skip results upload if there are no results.	.config	946d28f0
2024/12/06 00:35	a8e963b09573 remove outdated bug references for PTYs	.config	946d28f0
2024/12/05 12:33	a8e963b09573 remove outdated bug references for PTYs	.config	1c533826
2024/12/05 00:24	f2abd313672c Minor changes in spec validation method.	.config	29f61fce
2024/12/05 00:18	f2abd313672c Minor changes in spec validation method.	.config	b50eb251
2024/12/04 11:09	f55129817500 Use poll-based Kubernetes calls rather than `Watch`.	.config	b50eb251
2024/12/03 21:57	4971756d8d9b Internal change.	.config	b50eb251
2024/12/03 10:14	b03b5f02ac42 Run save/resume syscall tests only continuously.	.config	330db277
2024/12/02 21:44	b03b5f02ac42 Run save/resume syscall tests only continuously.	.config	bb326ffb
2024/12/02 19:08	b03b5f02ac42 Run save/resume syscall tests only continuously.	.config	b499ea68
2024/12/02 09:39	745828301c93 Kubernetes tests: Let the benchmark metric recorder be overridden via context	.config	b499ea68
2024/11/29 15:01	745828301c93 Kubernetes tests: Let the benchmark metric recorder be overridden via context	.config	68914665
2024/11/28 13:30	745828301c93 Kubernetes tests: Let the benchmark metric recorder be overridden via context	.config	5df23865
2024/11/28 00:14	28c50dd77f8c Kubernetes benchmarks profiling: Distinguish error messages.	.config	5df23865
2024/11/27 10:52	bc18e8106244 One-time force push of all images to Artifact Registry.	.config	5df23865
2024/11/26 21:49	1af6da4bdce0 Propagate NVIDIA driver capabilities to `nvproxy` and seccomp filters.	.config	52b38cc1
2024/11/26 09:50	0e6fe26a3a0d fsimpl/gofer: hold extra dentry reference if endpoint != nil	.config	e9a9a9f2
2024/11/25 21:31	e816d9973659 Internal change.	.config	11dbc254
2024/11/25 17:48	e816d9973659 Internal change.	.config	36dfdd05
2024/11/25 09:28	2b55090a5813 Do not crash when creating thread group with already-exceeded soft CPU limit.	.config	36dfdd05
2024/11/23 13:29	2b55090a5813 Do not crash when creating thread group with already-exceeded soft CPU limit.	.config	68da6d95
2024/11/23 00:12	c6c3c2d98c05 netstack: check the TCP write list for validity before increasing SND.NXT	.config	68da6d95
2024/11/22 10:59	b15656de596e netstack: remove mention of the long-dead protocol goroutine	.config	68da6d95
2024/11/22 10:49	b15656de596e netstack: remove mention of the long-dead protocol goroutine	.config	4b25d554
2024/11/21 21:29	a5542f19c5c2 netstack: more state output for the writeList panic	.config	4b25d554
2024/11/21 13:23	f66f0e235a0b Fix memmap.MappingIdentity.Device/InodeID() lock ordering.	.config	4b25d554
2024/11/21 00:06	151f3fb3bf57 Make changes to validate the spec for unknown or potential new fields.	.config	4b25d554
2024/11/20 15:11	488d5d2f48f0 gVisor website: Fix title on homepage.	.config	4fca1650
2024/11/20 12:00	a92fc7b8c963 overlay: remove dirInoCache entries from RmdirAt()	.config	4fca1650
2024/11/20 05:01	a92fc7b8c963 overlay: remove dirInoCache entries from RmdirAt()	.config	7d02db5a
2024/11/19 15:49	6666e9fc8559 Extract ipv4 address only when starting docker in gVisor.	.config	7d02db5a
2024/11/19 02:25	6953ca0ca351 Add NVIDIA driver capability segmentation support to `nvproxy`.	.config	571351cb
2024/11/18 16:58	336dc8504327 vfs: use ancestryMu in implementations of DentryImpl.InotifyWithParent	.config	571351cb
2024/11/18 09:57	336dc8504327 vfs: use ancestryMu in implementations of DentryImpl.InotifyWithParent	.config	e7bb5d6e
2024/11/16 00:50	336dc8504327 vfs: use ancestryMu in implementations of DentryImpl.InotifyWithParent	.config	cfe3a04a
2024/11/15 12:47	39a6242b5420 Allow DOCKER_FORCE_PUSH for test images.	.config	eeafb645
2024/11/15 00:49	2dfab3e18079 Update RTT in TCPSenderState.	.config	f6ede3a3
2024/11/14 12:41	4f92c2873fd6 Kubernetes benchmarks: Add compressed variant of each benchmark binary.	.config	77f3eeb7
2024/11/14 00:32	aee6c515156c Kubernetes tests: Make `testcluster.NewTestCluster` overridable via context.	.config	a8c99394
2024/11/13 20:35	aee6c515156c Kubernetes tests: Make `testcluster.NewTestCluster` overridable via context.	.config	4dfba277
2024/11/13 12:34	45b346e8fd42 Use AR images on the domain pkg.dev.	.config	4dfba277
2024/11/13 00:23	45b346e8fd42 Use AR images on the domain pkg.dev.	.config	62026c85
2024/11/12 12:25	e22dc2972791 Update pytorch image python module versions.	.config	c819f227
2024/11/11 22:02	b9252dcdc5fa Add message at the end of smoke tests to indicate successful completion.	.config	75bb1b32
2024/11/11 20:05	2d90353f9f29 kernel: drive all CPU timers in CPU clock ticker	.config	75bb1b32
2024/11/11 08:06	2d90353f9f29 kernel: drive all CPU timers in CPU clock ticker	.config	0c4b1325
2024/11/09 13:28	7c2bcddc13c1 Check for CUDA kernel launch errors in GPU smoke test.	.config	6b856513
2024/11/09 00:18	cbba3875717a Fix mount source validation.	.config	6b856513
2024/11/08 19:05	cbba3875717a Fix mount source validation.	.config	d40c056e
2024/11/08 12:19	c80684f5d9cd Do not validate Spec.Root.Path during restore.	.config	d40c056e
2024/11/07 20:55	c80684f5d9cd Do not validate Spec.Root.Path during restore.	.config	179b040e
2024/11/07 18:27	7a039fc8c585 Do not validate network namespace path across C/R.	.config	179b040e
2024/11/07 16:58	7a039fc8c585 Do not validate network namespace path across C/R.	.config	f9c0cd69
2024/11/07 12:32	7a039fc8c585 Do not validate network namespace path across C/R.	.config	867e44df
2024/11/07 00:23	30c58b6a6bbd Merge pull request #11124 from pawalt:pawalt/pidmax	.config	df3dc63b
2024/11/06 16:52	23c8b4b04259 Add test to check COS drivers as they are posted.	.config	7b852900